last executing test programs: 12m24.277827453s ago: executing program 1 (id=674): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@empty, @link_local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @dev, @remote, @broadcast, @rand_addr=0x64010100}}}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f00000005c0)='#mS\xb2j\xcb\xa18:.)\xc7\xcb\xc5\xd8\x91\xa1\"\xd5\r\x89M;\x99\xd6\x8e?K\x82\xd5\xd7\xab\x10\xea\x14\n\xea\xe9\xcc\xdc\xf3\xc0\xf8\x89\xd0\x0ep\xb1I\x04T[\r&\xf0z\xde\xc0\xf3\xcd\x9a\xae\xa8*v_(\x94]\xdf\xf1\x95!\xb3+\x1aD\xda\xa1G\x06M\xdaz2\xe9\xe6\xda\x92U\xaaN\xff\xca\xb37-<3\xb28\xb8:UQ\x95|\xe5\xaa\x0e\xe7{\xd4T\x84\x83\x86\x9d', 0x0) sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) vmsplice(r0, &(0x7f0000000680)=[{&(0x7f0000000240)="2fac49", 0x3}], 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pidfd_send_signal(0xffffffffffffffff, 0x3a, 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1890ff000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 12m24.104968381s ago: executing program 1 (id=677): syz_open_dev$dri(&(0x7f0000000080), 0x8d, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, 0x0, 0x0) syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2000, @fd_index=0x7, 0xfffffffffffff0eb, 0x0, 0x0, 0x9eb0f8f06251de0c, 0x1, {0x3}}) r1 = syz_io_uring_setup(0x16d1, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x64052, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) openat$autofs(0xffffffffffffff9c, 0x0, 0x20000, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x20000001) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r6, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) 12m23.397790446s ago: executing program 1 (id=680): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00005d4000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000040)="0f01c40fc7ba57002e0fc7a900203ea0fe900f350f22a2baf80c66b89c10a18d66efbafc0ced0f323e660fd530f30f1efb", 0x31}], 0x1, 0x0, 0x0, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f00000000c0)={0x2c, &(0x7f0000001400)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="400017"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x8000003d) mkdirat(r5, &(0x7f0000000280)='./file0\x00', 0x0) utime(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000100003000000000000000071f0f051e5bc000000000a38000000060a010e000000000000000002000000090002007379f034716c0000edffffff0b0006400000000000000004140000001100010000000000000000000500000a0000000000000000fc43dc44"], 0x60}, 0x1, 0x0, 0x0, 0x40090}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x10, 0x0) 12m19.491259915s ago: executing program 1 (id=696): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000001500)=0x4, 0x4) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001540)=@mangle={'mangle\x00', 0x2, 0x6, 0x5a8, 0x248, 0x0, 0x248, 0x4a0, 0xf8, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [], 'macvlan1\x00', 'erspan0\x00', {}, {0xff}}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}}}}, {{@ipv6={@rand_addr=' \x01\x00', @remote, [0x0, 0xffffff00, 0x0, 0xff000000], [], '\x00', 'dummy0\x00'}, 0x0, 0x138, 0x180, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @local, @private0, [0x0, 0x0, 0x0, 0xffffffff], [], [], 0x0, 0x2203}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@dev={0xac, 0x14, 0x14, 0x33}, 0x32, 0x33, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7, 0x2, 0x8001, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x608) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000023"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmmsg(r4, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000480)=""/217, 0xd9}, {&(0x7f0000000240)=""/141, 0x8d}, {&(0x7f0000000580)=""/221, 0xdd}, {&(0x7f0000000340)=""/3, 0x3}, {&(0x7f0000000680)=""/216, 0xd8}, {&(0x7f00000003c0)=""/41, 0x29}], 0x6, &(0x7f0000000800)=""/54, 0x36}, 0x6a}, {{&(0x7f0000000840)=@nfc, 0x80, &(0x7f0000000bc0)=[{&(0x7f00000008c0)=""/214, 0xd6}, {&(0x7f00000009c0)=""/232, 0xe8}, {&(0x7f0000000ac0)=""/224, 0xe0}], 0x3}, 0x3bb}, {{&(0x7f0000000c00)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000c80)=""/54, 0x36}, {&(0x7f0000000cc0)=""/181, 0xb5}, {&(0x7f0000000d80)=""/125, 0x7d}, {&(0x7f0000000e00)=""/51, 0x33}, {&(0x7f0000000e40)=""/65, 0x41}], 0x5, &(0x7f0000000f40)=""/217, 0xd9}, 0xfffffadc}, {{&(0x7f0000001040)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000003b80)=[{&(0x7f00000010c0)=""/177, 0xb1}, {&(0x7f0000001180)=""/16, 0x10}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/32, 0x20}, {&(0x7f0000001200)=""/161, 0xa1}, {&(0x7f00000012c0)=""/142, 0x8e}, {&(0x7f0000001380)=""/145, 0x91}, {&(0x7f0000001440)=""/120, 0x78}, {&(0x7f00000014c0)=""/8, 0x8}], 0xa}}, {{&(0x7f0000003c40)=@xdp, 0x80, &(0x7f0000001500)=[{&(0x7f0000003cc0)=""/172, 0xac}, {&(0x7f0000003d80)=""/120, 0x78}], 0x2, &(0x7f0000003e00)=""/9, 0x9}, 0x5}], 0x5, 0x21, &(0x7f0000003f80)={0x0, 0x3938700}) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') 12m18.454986536s ago: executing program 1 (id=699): bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0x7) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000480)=0x40) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c9, &(0x7f0000000100)) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0xc, 0xb, 0x200, 0x0}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000f5effed90c000000020000000000000000000004000000000000"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0xa, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x189202) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='freezer.state\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = socket(0x1d, 0x3, 0x1) syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000e2793b10d10502200007330203010902120001000000000904"], 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r6, 0x65, 0x8, 0x0, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0xba01}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) 12m18.112616678s ago: executing program 1 (id=701): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=@newtaction={0x88c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x80000003, 0x2, 0x9, 0x6, 0x9, 0x2, 0xffff, 0xfffffff9, 0x81, 0x5, 0x7fffffff, 0x81, 0x8000, 0xffffffff, 0x1, 0x8, 0x7, 0x7, 0xda8, 0xfffff800, 0x7fffffff, 0xfffffffa, 0x3, 0x4, 0x200, 0x100, 0x8, 0x7, 0x1ff, 0x0, 0xf1, 0x3, 0x10008, 0x3, 0x10001, 0xc, 0x9, 0x200, 0x3, 0x543d, 0x74, 0x2, 0x8, 0x4, 0x37, 0x81, 0xd425, 0x1, 0x10, 0x2a8, 0x6, 0x9, 0x9, 0x1, 0x10001, 0x400, 0x6, 0x10001, 0x5, 0x40, 0x6, 0x400, 0xd87d, 0xfffffff7, 0x8, 0x25fe, 0x10001, 0xd1e, 0x4c8000, 0x348, 0x2, 0x8, 0x5, 0x2, 0x7fffffff, 0x0, 0x4, 0x5, 0x5, 0x0, 0x80000001, 0x10, 0xfffffc00, 0xffff, 0x81, 0x3, 0x1d4, 0x7ff, 0x3, 0x7, 0x1, 0x5, 0x1, 0x1000, 0x81, 0x4, 0x3, 0x10001, 0x80, 0x1, 0x5, 0x1, 0x9, 0x5, 0x5, 0x5, 0x8, 0xb, 0x5ca, 0xe, 0x6, 0xfff, 0x4, 0x80000000, 0x0, 0x4, 0x24, 0x5, 0x46, 0x3e994374, 0x7, 0x6, 0xa, 0x7f, 0x6, 0x6, 0x800, 0x4, 0x67, 0x800, 0x1ff, 0x0, 0x788, 0x0, 0x8000, 0x100, 0x9, 0xe, 0xb, 0x5, 0x7, 0xfffffff0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0x3, 0xfffffc01, 0x0, 0x6, 0x40004, 0xf, 0x3850, 0x4, 0xe00000, 0xb9c, 0x0, 0xfffffff9, 0x0, 0x7, 0x2, 0x80, 0xfffffff9, 0x0, 0x1, 0x30, 0x1, 0x7, 0x140000, 0xfffffff8, 0x23, 0x7fffffff, 0x1, 0x5, 0x7ff, 0x40, 0x7, 0x200000, 0x8008, 0x3, 0xc, 0x6, 0x3, 0x9, 0xb99, 0x6, 0x7fd, 0x7fffffff, 0x7, 0xbdd1, 0x1, 0x132c, 0x4, 0x8, 0x0, 0x8, 0x9e, 0x8, 0x8, 0xfff, 0xffff, 0x7, 0x9d, 0x15, 0x2, 0x1, 0x0, 0xac, 0x8, 0x2, 0x6, 0x9e, 0xb, 0x10, 0x5, 0x4, 0xac, 0x7961481c, 0xf5c9, 0x27cf, 0x1, 0x6, 0x80, 0x7, 0x1, 0x7, 0x7, 0x7, 0x0, 0x4, 0xd3, 0x1, 0xff, 0x9, 0x7fffffff, 0x3, 0x9c7, 0x1, 0x6, 0x7, 0x1, 0x8, 0xa, 0x1746, 0x0, 0x9, 0x40, 0x1, 0x8001, 0x29fb, 0x0, 0x7, 0x8]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x800, 0xffffffffffffffff, 0xffff21a5, 0x3, 0x4, {0x3, 0x2, 0xfffb, 0xc7, 0x6554, 0x7}, {0x3, 0x0, 0x5, 0x8, 0xd, 0x8}, 0x80, 0x5b2, 0x6}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x9bb247db, 0x8d93, 0x8000, 0x14b, 0x9, 0x7, 0x6, 0xffffff81, 0x6, 0x21, 0x8006, 0x7, 0xfffffffc, 0xffffffff, 0x1, 0x2, 0x7, 0x40, 0x7, 0x0, 0x6, 0xfed, 0x9, 0xffffffff, 0x6, 0x4, 0x3, 0x6186, 0x8, 0x3, 0x3, 0x8fc, 0x3ff, 0xe, 0x7f, 0xfffffffc, 0x9, 0x7, 0x9, 0x2, 0x3, 0x8, 0x5, 0x10001, 0xfffffe65, 0x50b3, 0x4, 0x80, 0xd2840000, 0x25, 0x3, 0xffffff22, 0x7fffffff, 0x7f, 0x7fffffff, 0x3, 0x1ff, 0xffff090f, 0x4, 0x80000001, 0xf62, 0x8, 0x2, 0x100, 0x2, 0x2, 0x9, 0x3, 0xb362, 0xffff, 0xe82d, 0x5, 0x7346, 0x5, 0x2, 0x7fb5, 0x5621, 0x0, 0x9, 0x15bc896a, 0x1, 0x0, 0x100, 0x2, 0x3, 0x80, 0x4, 0x1ff, 0x0, 0x3, 0xf, 0xf3, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0x5, 0xb5b7, 0x8, 0x10001, 0x0, 0x3, 0x0, 0x1cf0, 0x101, 0x7, 0x481, 0x9eb, 0x0, 0x0, 0x0, 0x3, 0x13, 0x0, 0xbb1, 0x1000, 0x7ff, 0x8000, 0x6, 0x7f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xb7a, 0xfffffffb, 0x202, 0x5, 0x4, 0x1, 0x3, 0xc7, 0x0, 0x6, 0x7, 0x9, 0x1, 0x7, 0x8, 0x9, 0x2, 0x0, 0x1, 0x10001, 0x54000000, 0x6, 0x400, 0x7, 0x400, 0x400051, 0x80, 0x5, 0xd6, 0x0, 0x1, 0x4, 0x5, 0x17, 0x10000005, 0x5b, 0x5, 0xfffffffe, 0x8000, 0xdeaa, 0x3, 0x1de8, 0x3, 0x55, 0x5, 0x4, 0x4, 0x1000000a, 0x1, 0xdf4, 0x2, 0xc, 0x4, 0x3c, 0xae, 0x0, 0x0, 0x0, 0x7317, 0x1000, 0x9, 0x3, 0x7, 0x5, 0x5, 0x7fff, 0xe, 0x3, 0xcd, 0x3200, 0xb, 0x3, 0x6, 0x5, 0xffff, 0x3, 0x1537, 0x1, 0x6, 0x0, 0x9, 0x560d, 0x4, 0x2, 0x81, 0xe, 0x7, 0x5, 0x5, 0xd, 0x5, 0x7ff, 0x7, 0xc17, 0xd2bd, 0xb4, 0x5, 0x3, 0x200, 0x9, 0xe, 0x1, 0x9, 0x100, 0x7, 0x0, 0x6, 0x0, 0x4, 0xf1c, 0x80f, 0x7ff, 0x10000, 0x0, 0xd7d, 0x8, 0x7, 0x1, 0x1, 0x7, 0x7, 0x2f7, 0x5, 0xf8be, 0x8001]}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) epoll_create1(0x99344c68e635bb3) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000100)={0x28, 0x2, r3, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000600)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r3, 0x0, &(0x7f0000ff7000/0x2000)=nil, 0x2000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000140)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12f9c5}) 12m17.420432521s ago: executing program 32 (id=701): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=@newtaction={0x88c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x80000003, 0x2, 0x9, 0x6, 0x9, 0x2, 0xffff, 0xfffffff9, 0x81, 0x5, 0x7fffffff, 0x81, 0x8000, 0xffffffff, 0x1, 0x8, 0x7, 0x7, 0xda8, 0xfffff800, 0x7fffffff, 0xfffffffa, 0x3, 0x4, 0x200, 0x100, 0x8, 0x7, 0x1ff, 0x0, 0xf1, 0x3, 0x10008, 0x3, 0x10001, 0xc, 0x9, 0x200, 0x3, 0x543d, 0x74, 0x2, 0x8, 0x4, 0x37, 0x81, 0xd425, 0x1, 0x10, 0x2a8, 0x6, 0x9, 0x9, 0x1, 0x10001, 0x400, 0x6, 0x10001, 0x5, 0x40, 0x6, 0x400, 0xd87d, 0xfffffff7, 0x8, 0x25fe, 0x10001, 0xd1e, 0x4c8000, 0x348, 0x2, 0x8, 0x5, 0x2, 0x7fffffff, 0x0, 0x4, 0x5, 0x5, 0x0, 0x80000001, 0x10, 0xfffffc00, 0xffff, 0x81, 0x3, 0x1d4, 0x7ff, 0x3, 0x7, 0x1, 0x5, 0x1, 0x1000, 0x81, 0x4, 0x3, 0x10001, 0x80, 0x1, 0x5, 0x1, 0x9, 0x5, 0x5, 0x5, 0x8, 0xb, 0x5ca, 0xe, 0x6, 0xfff, 0x4, 0x80000000, 0x0, 0x4, 0x24, 0x5, 0x46, 0x3e994374, 0x7, 0x6, 0xa, 0x7f, 0x6, 0x6, 0x800, 0x4, 0x67, 0x800, 0x1ff, 0x0, 0x788, 0x0, 0x8000, 0x100, 0x9, 0xe, 0xb, 0x5, 0x7, 0xfffffff0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0x3, 0xfffffc01, 0x0, 0x6, 0x40004, 0xf, 0x3850, 0x4, 0xe00000, 0xb9c, 0x0, 0xfffffff9, 0x0, 0x7, 0x2, 0x80, 0xfffffff9, 0x0, 0x1, 0x30, 0x1, 0x7, 0x140000, 0xfffffff8, 0x23, 0x7fffffff, 0x1, 0x5, 0x7ff, 0x40, 0x7, 0x200000, 0x8008, 0x3, 0xc, 0x6, 0x3, 0x9, 0xb99, 0x6, 0x7fd, 0x7fffffff, 0x7, 0xbdd1, 0x1, 0x132c, 0x4, 0x8, 0x0, 0x8, 0x9e, 0x8, 0x8, 0xfff, 0xffff, 0x7, 0x9d, 0x15, 0x2, 0x1, 0x0, 0xac, 0x8, 0x2, 0x6, 0x9e, 0xb, 0x10, 0x5, 0x4, 0xac, 0x7961481c, 0xf5c9, 0x27cf, 0x1, 0x6, 0x80, 0x7, 0x1, 0x7, 0x7, 0x7, 0x0, 0x4, 0xd3, 0x1, 0xff, 0x9, 0x7fffffff, 0x3, 0x9c7, 0x1, 0x6, 0x7, 0x1, 0x8, 0xa, 0x1746, 0x0, 0x9, 0x40, 0x1, 0x8001, 0x29fb, 0x0, 0x7, 0x8]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x800, 0xffffffffffffffff, 0xffff21a5, 0x3, 0x4, {0x3, 0x2, 0xfffb, 0xc7, 0x6554, 0x7}, {0x3, 0x0, 0x5, 0x8, 0xd, 0x8}, 0x80, 0x5b2, 0x6}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x9bb247db, 0x8d93, 0x8000, 0x14b, 0x9, 0x7, 0x6, 0xffffff81, 0x6, 0x21, 0x8006, 0x7, 0xfffffffc, 0xffffffff, 0x1, 0x2, 0x7, 0x40, 0x7, 0x0, 0x6, 0xfed, 0x9, 0xffffffff, 0x6, 0x4, 0x3, 0x6186, 0x8, 0x3, 0x3, 0x8fc, 0x3ff, 0xe, 0x7f, 0xfffffffc, 0x9, 0x7, 0x9, 0x2, 0x3, 0x8, 0x5, 0x10001, 0xfffffe65, 0x50b3, 0x4, 0x80, 0xd2840000, 0x25, 0x3, 0xffffff22, 0x7fffffff, 0x7f, 0x7fffffff, 0x3, 0x1ff, 0xffff090f, 0x4, 0x80000001, 0xf62, 0x8, 0x2, 0x100, 0x2, 0x2, 0x9, 0x3, 0xb362, 0xffff, 0xe82d, 0x5, 0x7346, 0x5, 0x2, 0x7fb5, 0x5621, 0x0, 0x9, 0x15bc896a, 0x1, 0x0, 0x100, 0x2, 0x3, 0x80, 0x4, 0x1ff, 0x0, 0x3, 0xf, 0xf3, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0x5, 0xb5b7, 0x8, 0x10001, 0x0, 0x3, 0x0, 0x1cf0, 0x101, 0x7, 0x481, 0x9eb, 0x0, 0x0, 0x0, 0x3, 0x13, 0x0, 0xbb1, 0x1000, 0x7ff, 0x8000, 0x6, 0x7f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xb7a, 0xfffffffb, 0x202, 0x5, 0x4, 0x1, 0x3, 0xc7, 0x0, 0x6, 0x7, 0x9, 0x1, 0x7, 0x8, 0x9, 0x2, 0x0, 0x1, 0x10001, 0x54000000, 0x6, 0x400, 0x7, 0x400, 0x400051, 0x80, 0x5, 0xd6, 0x0, 0x1, 0x4, 0x5, 0x17, 0x10000005, 0x5b, 0x5, 0xfffffffe, 0x8000, 0xdeaa, 0x3, 0x1de8, 0x3, 0x55, 0x5, 0x4, 0x4, 0x1000000a, 0x1, 0xdf4, 0x2, 0xc, 0x4, 0x3c, 0xae, 0x0, 0x0, 0x0, 0x7317, 0x1000, 0x9, 0x3, 0x7, 0x5, 0x5, 0x7fff, 0xe, 0x3, 0xcd, 0x3200, 0xb, 0x3, 0x6, 0x5, 0xffff, 0x3, 0x1537, 0x1, 0x6, 0x0, 0x9, 0x560d, 0x4, 0x2, 0x81, 0xe, 0x7, 0x5, 0x5, 0xd, 0x5, 0x7ff, 0x7, 0xc17, 0xd2bd, 0xb4, 0x5, 0x3, 0x200, 0x9, 0xe, 0x1, 0x9, 0x100, 0x7, 0x0, 0x6, 0x0, 0x4, 0xf1c, 0x80f, 0x7ff, 0x10000, 0x0, 0xd7d, 0x8, 0x7, 0x1, 0x1, 0x7, 0x7, 0x2f7, 0x5, 0xf8be, 0x8001]}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) epoll_create1(0x99344c68e635bb3) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000100)={0x28, 0x2, r3, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000600)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r3, 0x0, &(0x7f0000ff7000/0x2000)=nil, 0x2000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000140)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12f9c5}) 2m30.686357311s ago: executing program 2 (id=2948): keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000000)={0x0, 0x4b, 0x85}, &(0x7f0000000040)={'enc=', 'oaep', ' hash=', {'vmac(khazad)\x00'}}, &(0x7f00000000c0)="4235906c63d65b414c22093d4d49f55cd9a61bb3be6b3ad97dfd6b746e71deec7b12e85a12733bce5c676edbbd8119d4d106805e986e01b97517658d5f9422a84638fb02109307dc7b4f7e", &(0x7f0000000140)=""/133) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000200)={0x7, 0x1, 0x4, 0x1, '\x00', '\x00', '\x00', 0x101, 0x2822616c, 0x9, 0x7, "fa88fb283beeffb9bc2af7809b2e424e"}) (async) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION(r0, 0x79f, &(0x7f0000000380)=0x90000) (async) ioctl$FIONCLEX(r0, 0x5450) openat$cuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000400), 0x14000, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000440)={'raw\x00', 0x0, [0x81, 0x2, 0x10001, 0x80, 0x7fff]}, &(0x7f00000004c0)=0x54) r2 = add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) request_key(&(0x7f0000000500)='ceph\x00', &(0x7f0000000540)={'syz', 0x3}, &(0x7f0000000580)='/dev/cuse\x00', r2) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000a40)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000700)={0x2f0, r3, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x9, 0x64}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x7fff}, @NL80211_ATTR_TX_RATES={0x224, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x16, 0xc, 0x5, 0x36, 0x16, 0x6, 0x5, 0x2, 0x18, 0x12, 0x4, 0x2, 0x5, 0x5, 0x48, 0x1b, 0x36, 0x6, 0x60]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4a, 0x2, [{0x4, 0x7}, {0x6, 0x6}, {0x0, 0x6}, {0x4, 0x4}, {0x1, 0x1}, {0x5}, {0x1, 0x3}, {0x6, 0x9}, {0x0, 0x7}, {}, {0x6, 0x1}, {0x1, 0x8}, {0x0, 0x3}, {0x1, 0xa}, {0x2, 0x8}, {0x4, 0xa}, {0x0, 0x3}, {0x0, 0x6}, {0x2, 0x7}, {0x5, 0x4}, {0x6}, {0x0, 0x4}, {0x1, 0x5}, {0x1, 0x8}, {0x3, 0x4}, {0x4, 0x5}, {0x0, 0x1}, {0x4, 0x7}, {0x2, 0x7}, {0x4, 0x2}, {0x2, 0x4}, {0x0, 0x6}, {0x2, 0x7}, {0x1, 0x7}, {0x0, 0x8}, {0x7, 0x3}, {0x5, 0x7}, {0x1, 0x2}, {0x3, 0xa}, {0x3, 0x1}, {0x6, 0x4}, {0x7, 0x4}, {0x1, 0x4}, {0x0, 0x7}, {0x4, 0x1}, {0x6, 0x6}, {0x0, 0x6}, {0x1}, {0x6, 0x5}, {0x5, 0x2}, {0x4, 0x7}, {0x0, 0x8}, {0x1, 0x8}, {0x6, 0x4}, {0x4, 0xa}, {0x1, 0x4}, {0x0, 0x2}, {0x4, 0x6}, {0x0, 0x6}, {0x6, 0x3}, {0x2, 0x9}, {0x3, 0x2}, {0x2, 0x8}, {0x6, 0x6}, {0x3, 0x6}, {0x2, 0x3}, {0x3, 0xa}, {0x6, 0x2}, {0x1, 0x2}, {0x1, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x1d, 0x2, [{}, {0x0, 0x7}, {0x5, 0x2}, {0x7, 0x7}, {0x1, 0x5}, {0x7, 0x2}, {0x2, 0x3}, {0x3}, {0x3, 0xa}, {0x1}, {0x3, 0x4}, {0x3, 0x5}, {0x2, 0x5}, {0x2, 0x2}, {0x6, 0x4}, {0x0, 0x4}, {0x3, 0x5}, {0x7, 0x4}, {0x7, 0x9}, {0x1, 0x7}, {0x5, 0x3}, {0x0, 0x5}, {0x1, 0x3}, {0x2, 0x8}, {0x6, 0x2}]}]}, @NL80211_BAND_6GHZ={0xb8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x25, 0x2, [{0x6, 0x6}, {0x7, 0x2}, {0x1, 0xa}, {0x2}, {0x0, 0x4}, {0x2, 0x8}, {0x6, 0x9}, {0x1, 0x5}, {0x0, 0x4}, {0x0, 0x4}, {0x7, 0x8}, {0x5, 0x7}, {0x6, 0x3}, {0x1, 0xa}, {0x2, 0x7}, {0x1, 0x9}, {0x4, 0x6}, {0x2, 0x9}, {0x7, 0x7}, {0x1, 0x2}, {0x3, 0x4}, {0x0, 0x7}, {0x0, 0x3}, {0x3, 0x4}, {0x6, 0xa}, {0x7, 0x3}, {0x1, 0x2}, {0x2, 0x8}, {0x1, 0xa}, {0x0, 0x8}, {0x1, 0x1}, {0x1, 0x4}, {0x1, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x24, 0x12, 0xc, 0x12, 0x3, 0x12, 0x1, 0xb, 0xb, 0x48, 0x6, 0x1, 0x10a097df660a45c2, 0xc, 0x1, 0x12, 0xb, 0x1, 0x18]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x5, 0xa}, {0x1, 0x3}, {0x1, 0x3}, {0x3, 0x6}, {0x3, 0x4}, {0x4, 0xa}, {0x2, 0x5}, {0x4}, {0x2, 0x4}, {0x2, 0xa}, {0x2, 0x3}, {0x0, 0x2}, {0x4, 0xa}, {0x6, 0x6}, {0x3, 0x6}, {0x7}, {0x1, 0x8}, {0x0, 0x5}, {0x5, 0x8}, {0x2, 0x3}, {0x4, 0x1}, {0x0, 0x3}, {0x4, 0x1}, {0x2, 0x7}, {0x1, 0x5}, {0x0, 0x2}, {0x1, 0x2}, {0x3, 0xa}, {0x7, 0x2}, {0x3, 0x6}, {0x6, 0x2}, {0x0, 0x4}, {0x3, 0x9}, {0x1, 0x5}, {0x0, 0x2}, {0x6, 0x1}, {0x4, 0x4}, {0x1, 0x8}, {0x7, 0x3}, {0x0, 0x7}, {0x1, 0x4}, {0x7, 0xa}, {0x7, 0x4}, {0x2, 0x1}, {0x5, 0xa}, {0x0, 0xa}, {0x5, 0xa}, {0x2, 0x6}, {0x3, 0x8}, {0x0, 0x1}, {}, {0x6, 0x1}, {0x1, 0x6}, {0x7, 0x7}, {0x0, 0x2}, {0x1, 0x2}, {0x6, 0x5}, {0x6, 0x2}, {0x2, 0x2}, {0x1, 0xa}, {0x7, 0x2}, {0x7, 0x5}, {0x7, 0x5}, {0x0, 0x9}, {0x3, 0x1}, {0x1}, {0x4, 0xa}, {0x5, 0x6}, {0x4, 0x8}, {0x4, 0x7}, {0x1, 0x5}, {0x7, 0x9}, {0x0, 0x2}, {0x1, 0x5}, {0x6}, {0x4, 0x4}, {0x1, 0xa}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x7, 0x7}, {0x1, 0x3}, {0x0, 0x8}, {0x1, 0x5}, {0x6}, {0x3, 0x6}, {0x5, 0x4}, {0x5, 0x9}, {}, {0x6}, {0x0, 0x3}, {0x1}, {0x5, 0x1}, {0x6}, {0x2, 0x3}, {0x2, 0x2}, {0x7, 0x4}, {0x0, 0x7}, {0x1, 0x3}, {0x3, 0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x1, 0x1}, {0x1, 0x7}, {0x2, 0x4}, {0x4, 0x8}, {0x4, 0x6}, {0x4, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x2, 0xffff, 0x40, 0x5, 0x0, 0x7, 0x2]}}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x6}, {0x2, 0x6}, {0x5, 0x5}, {0x0, 0x6}, {0x0, 0x9}, {0x2, 0x9}, {0x3, 0x3}, {0x5, 0x2}, {0x7, 0x2}, {0x3, 0x8}, {0x2, 0x1}, {0x0, 0x7}, {0x5, 0x2}, {0x2, 0x4}, {0x0, 0x4}, {0x7, 0x1}, {0x3, 0x4}, {0x4, 0x3}, {0x7, 0x7}, {0x2, 0x1}, {0x2, 0x3}, {0x7, 0x4}, {0x7, 0x5}, {0x5, 0x7}, {0x7, 0x7}, {0x5}, {0x0, 0x9}, {0x5, 0x7}, {0x7, 0xa}, {0x6, 0x4}, {0x0, 0x4}, {0x1, 0xa}, {0x0, 0xa}, {0x5, 0x9}, {0x6, 0x4}, {0x1, 0x5}, {0x1, 0x7}, {0x7, 0x2}, {0x1, 0xa}, {0x5, 0x1}, {0x7, 0x4}, {0x5, 0x9}, {0x2, 0x1}, {0x6, 0x1}, {0x2}, {0x4, 0x7}, {0x2, 0x1}, {0x6, 0x1}, {0x3, 0x1}, {0x7, 0x5}, {0x6, 0x7}, {0x7, 0x5}, {0x4, 0x9}, {0x6, 0x18}, {0x5, 0x7}, {0x3, 0x3}, {0x3}, {0x3, 0x4}, {0x7, 0x5}, {0x3, 0x8}, {0x6, 0x1}, {0x6, 0x8}, {0x3, 0x9}, {0x4, 0x2}, {0x2, 0x5}, {0x0, 0x2}, {0x4, 0x9}, {0x7, 0x6}, {0x0, 0x5}, {0x0, 0x3}, {0x0, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x5, 0x0, 0x311c, 0x7, 0x6, 0x3, 0x4]}}]}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x3}, @NL80211_ATTR_MESH_SETUP={0x8c, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_IE={0x5f, 0x3, "c586ae1bc8faeb8997654ed269887a95183e4ff1a608aeecf9430bdb90e566eaec899ab8034f2ce3f27d67b96d1739aa8a66f8e255f1b145918f4382beb6e60d1cc20e35f8d4f4403c6bf70a0b7df167c5c4e551548321546aa14d"}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x6}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x1}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}]}, @NL80211_ATTR_MCAST_RATE={0x8}]}, 0x2f0}, 0x1, 0x0, 0x0, 0x80}, 0x4) (async) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000a80)) recvmmsg(r1, &(0x7f0000006380)=[{{&(0x7f0000000ac0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f0000002f80)=[{&(0x7f0000000b40)=""/227, 0xe3}, {&(0x7f0000000c40)=""/55, 0x37}, {&(0x7f0000000c80)=""/131, 0x83}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/98, 0x62}, {&(0x7f0000001dc0)=""/116, 0x74}, {&(0x7f0000001e40)=""/4096, 0x1000}, {&(0x7f0000002e40)=""/44, 0x2c}, {&(0x7f0000002e80)=""/230, 0xe6}], 0x9}, 0x7}, {{&(0x7f0000003040)=@nfc_llcp, 0x80, &(0x7f0000003180)=[{&(0x7f00000030c0)=""/171, 0xab}], 0x1, &(0x7f00000031c0)=""/206, 0xce}, 0x400}, {{&(0x7f00000032c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000006340)=[{&(0x7f0000003340)=""/4096, 0x1000}, {&(0x7f0000004340)=""/4096, 0x1000}, {&(0x7f0000005340)=""/4096, 0x1000}], 0x3}, 0x2f9}], 0x3, 0x2001, 0x0) (async) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) (async) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000006440), 0x2, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000006480), 0x208800, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000064c0)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000006500)={'vxcan1\x00', 0x0}) connect$can_j1939(r5, &(0x7f0000006540)={0x1d, r9, 0x3, {0x0, 0xff, 0x2}}, 0x18) (async) r10 = dup(r6) ioctl(r7, 0xb, &(0x7f0000006580)="72bf273f4cd5ab9a58c189a07c9fc41dbaf1bb26af1cc95daa0378231b529ae6f2007adf22937bbc54b970cc1bd02c099167741d03e3f98d2cf819626844d48ac02ca4f8ced7e8f19b4a5e202d86e35cab8656b2d72f8fb955d1a008ca841ccb8d5c66cea029c83076dcbfd98fdafbcb435505eac5a3535c7c45659af9ef8b42") (async) setsockopt$inet_tcp_TLS_RX(r10, 0x6, 0x2, &(0x7f0000006600)=@ccm_128={{0x303}, "bbedf781070ecdb2", "9635c5af4f33545dc0b6fbf194d370de", "d1fbd379", "9a83bc1b58a8f4cf"}, 0x28) (async, rerun: 32) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) setsockopt$inet6_tcp_int(r11, 0x6, 0x19, &(0x7f0000006640)=0x2, 0x4) (async) ioctl$SIOCGSKNS(r10, 0x894c, &(0x7f0000006680)={'macvlan0\x00', 0xe00}) bind$l2tp6(r6, &(0x7f00000066c0)={0xa, 0x0, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x30}, 0x20) (async) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000006700)={0x0, 0x0}, &(0x7f0000006740)=0xc) keyctl$get_persistent(0x16, r12, r2) 2m30.134925418s ago: executing program 2 (id=2952): r0 = socket$inet(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32, @ANYRESOCT=0x0], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r5) mkdir(&(0x7f0000000000)='./control\x00', 0x0) rmdir(&(0x7f0000000040)='./control\x00') getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6], 0x3c}}, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) socket$netlink(0x10, 0x3, 0x8000000004) 2m29.78214597s ago: executing program 2 (id=2955): openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SECURITY(r0, 0x10e, 0x4, 0x0, 0xf0ff1f00000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) connect$llc(0xffffffffffffffff, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r3 = dup(r2) write$binfmt_script(r3, &(0x7f0000000840)={'#! ', './file1/file0'}, 0x11) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x1fffff, 0x6, 0x0, 0x5, 0xfffff9e3, 0x4}) sendmsg$DCCPDIAG_GETSOCK(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001bc0)={0x54, 0x13, 0x605, 0x0, 0x0, {0x8}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x1, "0856b7fc"}]}, 0x54}}, 0x4000040) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f000009df00)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x80000000, 0x2, 0x1, 0x3, 0xfffd, 0x100}, 0x20) ftruncate(0xffffffffffffffff, 0x1000006) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) ioctl$BLKRRPART(r3, 0x125f, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) setrlimit(0xb, &(0x7f0000000040)={0x101, 0x1}) madvise(&(0x7f0000000000/0x4000)=nil, 0xffffffffdfffffff, 0x1) connect$unix(r3, &(0x7f00000000c0), 0x6e) bpf$BPF_PROG_TEST_RUN(0x24, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m29.323712644s ago: executing program 2 (id=2956): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x9101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) 2m29.269225253s ago: executing program 2 (id=2959): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYBLOB], 0x50) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000200)) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) 2m29.04585626s ago: executing program 2 (id=2961): ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = socket(0x2a, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r4}, 0x10) r5 = syz_open_dev$media(&(0x7f00000006c0), 0x4, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0x7c80, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) r7 = socket$netlink(0x10, 0x3, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8004, &(0x7f0000000100)={0x10, 0x4e20, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20181, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000004000700000008000300", @ANYRES32=r10, @ANYBLOB="140004006e"], 0x44}, 0x1, 0x0, 0x0, 0x20008080}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x128, 0x128, 0x8, [@enum64={0x1, 0x3, 0x0, 0x13, 0x1, 0x9, [{0x1, 0xfb, 0x5}, {0x3, 0x8, 0x10001}, {0x8, 0x7, 0x1}]}, @union={0xe, 0x9, 0x0, 0x5, 0x1, 0xd, [{0xf, 0x5, 0x1}, {0x7, 0x0, 0x5b2f}, {0x1, 0x1, 0xffffff00}, {0x2, 0x3, 0x400}, {0xa, 0x1, 0x7fffffff}, {0xa, 0x2, 0x8001}, {0x5, 0x5, 0xe990}, {0xd, 0x1, 0x3}, {0x800, 0x4, 0xffff48e9}]}, @decl_tag={0xf, 0x0, 0x0, 0x11, 0x3, 0x1}, @const={0x1, 0x0, 0x0, 0xa, 0x2}, @int={0x5, 0x0, 0x0, 0x1, 0x0, 0xc, 0x0, 0x3c, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0x6}}, @func={0xb, 0x0, 0x0, 0xc, 0x5}, @enum64={0x1, 0x1, 0x0, 0x13, 0x1, 0x3, [{0xe, 0xffff, 0x2}]}, @struct={0xe, 0x1, 0x0, 0x4, 0x1, 0x1, [{0x10, 0x5, 0x1}]}]}, {0x0, [0x61, 0x61, 0x0, 0x5f, 0x5f, 0x5f]}}, &(0x7f00000009c0)=""/4096, 0x148, 0x1000, 0x0, 0x9, 0x10000, @value}, 0x28) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYBLOB="000000000000004037a0ab000000000000000000", @ANYRES32=0x0, @ANYRES32=r11, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r12, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000500)}, 0x20) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r14}, 0x10) 2m28.905581098s ago: executing program 33 (id=2961): ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = socket(0x2a, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r4}, 0x10) r5 = syz_open_dev$media(&(0x7f00000006c0), 0x4, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0x7c80, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) r7 = socket$netlink(0x10, 0x3, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8004, &(0x7f0000000100)={0x10, 0x4e20, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20181, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000004000700000008000300", @ANYRES32=r10, @ANYBLOB="140004006e"], 0x44}, 0x1, 0x0, 0x0, 0x20008080}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x128, 0x128, 0x8, [@enum64={0x1, 0x3, 0x0, 0x13, 0x1, 0x9, [{0x1, 0xfb, 0x5}, {0x3, 0x8, 0x10001}, {0x8, 0x7, 0x1}]}, @union={0xe, 0x9, 0x0, 0x5, 0x1, 0xd, [{0xf, 0x5, 0x1}, {0x7, 0x0, 0x5b2f}, {0x1, 0x1, 0xffffff00}, {0x2, 0x3, 0x400}, {0xa, 0x1, 0x7fffffff}, {0xa, 0x2, 0x8001}, {0x5, 0x5, 0xe990}, {0xd, 0x1, 0x3}, {0x800, 0x4, 0xffff48e9}]}, @decl_tag={0xf, 0x0, 0x0, 0x11, 0x3, 0x1}, @const={0x1, 0x0, 0x0, 0xa, 0x2}, @int={0x5, 0x0, 0x0, 0x1, 0x0, 0xc, 0x0, 0x3c, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0x6}}, @func={0xb, 0x0, 0x0, 0xc, 0x5}, @enum64={0x1, 0x1, 0x0, 0x13, 0x1, 0x3, [{0xe, 0xffff, 0x2}]}, @struct={0xe, 0x1, 0x0, 0x4, 0x1, 0x1, [{0x10, 0x5, 0x1}]}]}, {0x0, [0x61, 0x61, 0x0, 0x5f, 0x5f, 0x5f]}}, &(0x7f00000009c0)=""/4096, 0x148, 0x1000, 0x0, 0x9, 0x10000, @value}, 0x28) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYBLOB="000000000000004037a0ab000000000000000000", @ANYRES32=0x0, @ANYRES32=r11, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r12, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000500)}, 0x20) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r14}, 0x10) 16.625824947s ago: executing program 4 (id=3418): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffffd) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1, 0x0, &(0x7f0000000380)=""/138, 0x0}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x0, r3}) r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x6, 0x1000) ioctl$MON_IOCX_GET(r4, 0x40189206, &(0x7f0000000480)={&(0x7f0000000440), &(0x7f00000014c0)=""/4096, 0x1000}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000001480)={0x0, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x20000) syz_usbip_server_init(0x5) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x80d010, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0xa0029, &(0x7f0000000340)=ANY=[@ANYBLOB='nr_inodes=35,size=', @ANYRESOCT]) syz_usb_control_io(r1, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r6 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSETS(r6, 0x5402, &(0x7f00000002c0)={0x3, 0x1000, 0x5, 0x3, 0x5, "c2c6c7dae05f636394db3823a4daa72bb32ff5"}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="000386dd0a00100000004000000060ec97020fc80400fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT], 0x0}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, 0x0, 0x0) 16.540782891s ago: executing program 5 (id=3419): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r1 = semget$private(0x0, 0x4000000009, 0x0) semop(r1, &(0x7f00000002c0)=[{0x0, 0xff}, {0x0, 0x1f}, {0x4, 0x202}, {0x0, 0x8, 0x1000}, {0x0, 0xfff}], 0x26) semctl$GETNCNT(r1, 0x2, 0xe, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="10001fdbdf65"], 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x48010) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), r2) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r4, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c00050004000000000000000800010003000000050002100000000005000200081cf3a4d3f3626fb2ba482c2ba2f8b0289cbaa5bb402401d6b7bcbaf0b7d96ff54be53b2b9027376a169b8283096148a6517e7aec72a9d30eaf693c3869486a5d8f173eeabcae4c09df7a23bc59634666aef2ed0b748a92dd3dc0f3d296734ca35723454933d4ad2b8bd5cc17ddf83fd41419d0c0755f9dbcad26db55430d4e13b1271d156ab7853db7"], 0x12c}}, 0x10800) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x4, {0xc0}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x57e, 0x200e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000680)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="4004f2000000f2"], 0x0, 0x0, 0x0}, 0x0) 13.257916365s ago: executing program 4 (id=3432): r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x109080, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000b00000001000000", @ANYRES32, @ANYBLOB="00000100000000000000000000000000e1e20000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000280)='consume_skb\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_newnexthop={0x18, 0x68, 0x2, 0x800000}, 0x18}, 0x1, 0x0, 0x0, 0x40c0}, 0x20000004) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000100)=0xef88) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r6 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r6, &(0x7f0000000000)) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r7, 0x5412, &(0x7f00000006c0)=0x1a) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, 0x0) timerfd_create(0x0, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x6, 0x0, 'queue0\x00', 0xfffffffe}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r8, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r9, &(0x7f0000000080)=[{0x1e, 0xf, 0x7, 0xfd, @time, {}, {}, @result}], 0x1c) 12.433876259s ago: executing program 4 (id=3435): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x10000, 0xfed}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8915, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @private=0xa010102}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f0000000040)=0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x2c, &(0x7f0000000140)={0x0, 0x0}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 11.791119025s ago: executing program 5 (id=3437): socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, 0x0, &(0x7f00000000c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) syz_emit_ethernet(0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="3c82bf073aaebbbbbbbbbbbb86dd6001010000101100fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000001090780200000000"], 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000200)={0x1, 0x101}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000940)={0x1, 0x0, [{0x0, 0xc3, &(0x7f0000000540)=""/195}]}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x605}}, './file0\x00'}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/233, &(0x7f00000000c0)=""/87, &(0x7f0000000740)=""/82}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 10.344619942s ago: executing program 5 (id=3441): syz_open_dev$char_usb(0xc, 0xb4, 0x23c9) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000010000000900010073797a300000000078000000090a010400000000000000000100000008000a40000000000900020073797a30000000000900010073797a300000000008000540000000213c0011800a0001006c696d69740000002c0002800c000240000000000000000008000540000040000c00014000000000000004"], 0xc0}}, 0x0) 8.339814619s ago: executing program 3 (id=3446): sched_setscheduler(0x0, 0x0, 0x0) r0 = fsopen(&(0x7f0000001300)='jffs2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x2, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000140)={{}, 0x2, &(0x7f0000000040)=[0x2000000000, 0x100], 0x7, 0x3}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) 7.911100507s ago: executing program 3 (id=3447): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000a40)={0x2020}, 0x2020) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f000000bdc0)={'wlan1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)={0x1c, r7, 0x1, 0xfffffffd, 0x0, {{}, {@void, @val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x5c, r5, 0x0, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x4f}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x2}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x24, 0xbe, "5e4e4978b9292d12b076e82d999170c48cd7bcc5ea8422faac467116ef67be81"}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x5e}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8050}, 0xc000) 7.885559204s ago: executing program 6 (id=3448): r0 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x2d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x680, 0x20000008f}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000180)={0x9, &(0x7f0000000380)=[{0x400, 0x3, 0x4, 0x8}, {0x6, 0x40}, {0x1f}, {0x7, 0x2, 0x0, 0x4}, {0x9, 0x7, 0x0, 0x9}, {0x3ff, 0x7, 0x5, 0x77}, {0x0, 0x5, 0x2, 0x81}, {0x7, 0xa, 0x92, 0x196d}, {0x8, 0x1, 0x2, 0x8}]}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getsig(0x4202, r6, 0xffffffffffffffff, &(0x7f0000000040)) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r8, 0xc0245720, &(0x7f0000000000)={0x1}) socket$inet_mptcp(0x2, 0x1, 0x106) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) r9 = io_uring_setup(0x19ad, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, 0x0, 0x0) epoll_create(0x7fff) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"fe403ca4", 0x0, 0x5, 0x81, 0x0, 0x7, "de6c0a5bcee099303c9842579a1c19", "dba0a737", "4da264d5", "e75aef41", ["4fdd51b5a333d64fd52f79de", "0c13895a26e4cb6b2f9782fc", "674a440d6cdaaf6be57cc8cd", "2d66f09cea6bb67ada4fa6da"]}) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"04f16c91", 0x0, 0x0, 0x0, 0x0, 0x0, "6f99e65664cdfb5f24cf398a3f7a92", '\x00', "246a8a96", "12caa207", ['\x00', "9d09b43157145fa9a5c56bcf", "2b4af2886e6d02546f0ad9b4", "000000010100"]}) 7.795979816s ago: executing program 0 (id=3449): r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, 0x9b, 0x0}) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x7, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="97371fe7ea210b34819789cd6d8b684959c6ebdcf2fbe86b213ecd3a7f2e9670f20b6cd90e2151bab1b6faab7effcbf954cb691124f080aee9e4ff2eeccd8ba770a38fa77d679b8436277c1056c02525c0680a898f62d69c417e76fee0e55d16fd639ce422cce0363f40eaa01f91f5a452902651ff", @ANYRES64=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000780)=ANY=[@ANYBLOB="f0000000100000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000000000000000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/295], 0xf0}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a09040000000006000000020000000900010073797a3000e2ff000900020073797a32000000003c000480380001800b00010064796e736574000028000280"], 0x90}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) socket$kcm(0x21, 0x2, 0xa) 6.894567323s ago: executing program 6 (id=3450): socket$inet6(0xa, 0x3, 0x87) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x80000000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000003a0000000000000000000000032000000c00018006000000894f0000"], 0x20}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) socket(0x1, 0x803, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket(0x840000000002, 0x3, 0xfa) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000200), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) socket$netlink(0x10, 0x3, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0xa5}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r7, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080), 0x0, 0x4) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}) io_uring_enter(r2, 0x3f70, 0x0, 0x0, 0x0, 0x0) 6.885891666s ago: executing program 3 (id=3451): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000003c0)={0x1, 0x2}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xc240, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='bdev\x00', 0x0, &(0x7f00000001c0)='4\xfc\xd2K\x1e#4\xbb') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'hsr0\x00'}) r4 = syz_io_uring_setup(0xd3, 0x0, 0x0, 0x0) io_uring_enter(r4, 0x48cb, 0x0, 0x12, 0x0, 0x5c) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) 6.585882219s ago: executing program 6 (id=3452): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'ipvlan1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r1}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, r3}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000080)={0xc, 0x8, 0xfa00, {&(0x7f0000000200)}}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x1c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000001140)={r5}) getsockname$packet(r6, 0x0, &(0x7f0000000080)) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r8, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x13, r8, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305829, &(0x7f0000000100)={0x1100, 0x0, 0x800, 0x10000}) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) bind$l2tp(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1, 0x4}, 0x10) io_setup(0x205, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)}, 0x0) 5.996654013s ago: executing program 0 (id=3453): mq_open(&(0x7f0000000100)='!selinuxselinux\x00', 0x6e93ebbbcc088553, 0x14, 0x0) (fail_nth: 7) 5.936037414s ago: executing program 0 (id=3454): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RCREATE(r1, &(0x7f0000000040)={0x18, 0x73, 0x2, {{0x1, 0x3, 0x7}, 0x4}}, 0x18) r2 = open(&(0x7f0000000080)='./file0\x00', 0x501480, 0xcc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x1000800, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug={'debug', 0x3d, 0x345bcb2e}}, {@msize={'msize', 0x3d, 0xc2}}, {@msize={'msize', 0x3d, 0x5}}, {@access_client}, {@cache_fscache}, {@loose}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@appraise_type}]}}) connect$inet(r3, &(0x7f0000000280)={0x2, 0x800, @rand_addr=0x64010102}, 0x10) ioctl$IOC_PR_PREEMPT_ABORT(r3, 0x401870cc, &(0x7f00000002c0)={0x8, 0x5, 0x8}) r5 = openat(r2, &(0x7f0000000300)='./file0\x00', 0x220442, 0x30) ioctl$KVM_CAP_SYNC_REGS(r5, 0x4068aea3, &(0x7f0000000340)) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{}, {}, {0x0}, {0x0}]}) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, &(0x7f0000000440)={r7, 0x2}) r9 = socket$xdp(0x2c, 0x3, 0x0) r10 = accept4(r9, 0x0, &(0x7f0000000480), 0x800) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r3) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r5, &(0x7f0000000780)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f0000000580)={0x1cc, r11, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x2, 0x4}}}}, [@NL80211_ATTR_IE={0xa6, 0x2a, [@random_vendor={0xdd, 0x2f, "f3dbbc73a2cef87c330bf0ecb6319107be0e9ae975e58e82b513aff2efb89fbed62fa32c72ae84b3238d5e40dbfe75"}, @gcr_ga={0xbd, 0x6, @broadcast}, @chsw_timing={0x68, 0x4, {0x5, 0x1000}}, @random_vendor={0xdd, 0x42, "63399f5bf7fbf6a2d16208534d0edb00c8d14837df7c2bff4583856592d0e6b313b98ebe417d22a9e606b7649f58a8f633a28bb340760982e8b72b1f756533c7e92e"}, @rann={0x7e, 0x15, {{0x0, 0x18}, 0x6, 0xbd, @device_b, 0xc, 0x73f, 0x4}}, @cf={0x4, 0x6, {0x8, 0x6, 0x464, 0x2}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3d}, @NL80211_ATTR_IE={0xb6, 0x2a, [@perr={0x84, 0xa8, {0x9, 0xa, [{{}, @broadcast, 0x7, @void, 0xc}, {{0x0, 0x1}, @broadcast, 0xe, @value, 0x37}, {{}, @device_b, 0x2, @void, 0x42}, {{0x0, 0x1}, @device_a, 0x8, @value=@device_b, 0x1e}, {{}, @device_a, 0x4, @void, 0x6}, {{0x0, 0x1}, @broadcast, 0x8, @value=@device_b, 0xf}, {{}, @device_a, 0xfffffff8, @void, 0x6}, {{0x0, 0x1}, @device_a, 0x5, @value, 0x10}, {{0x0, 0x1}, @broadcast, 0xcd, @value=@broadcast, 0x33}, {{0x0, 0x1}, @device_a, 0xff, @value=@device_b, 0x37}]}}, @channel_switch={0x25, 0x3, {0x1, 0xb0, 0x40}}, @dsss={0x3, 0x1, 0x6c}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x1b, 0x2a, [@chsw_timing={0x68, 0x4, {0x5, 0xe}}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x2, 0x6}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x49}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x60000001}, 0x8000) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f00000007c0)) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f0000000800)={r8}) connect$unix(r2, &(0x7f0000000840)=@abs={0x1, 0x0, 0x4e22}, 0x6e) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000900)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000008c0)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000940)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x400}, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, r13, 0x2}}, 0x48) mount$binder(0x0, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x94, &(0x7f0000000a40)={[{@max={'max', 0x3d, 0x1}}], [{@obj_user={'obj_user', 0x3d, 'nl80211\x00'}}, {@context={'context', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x40}}, {@appraise}, {@seclabel}]}) fcntl$F_GET_RW_HINT(r6, 0x40b, &(0x7f0000000ac0)) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_ADDFB(r3, 0xc01c64ae, &(0x7f0000000b80)={r14, 0x3, 0x4, 0x7, 0xa, 0x9, 0x8}) socket$phonet(0x23, 0x2, 0x1) syz_genetlink_get_family_id$devlink(&(0x7f0000000bc0), r2) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000001a40)=@broute={'broute\x00', 0x20, 0x4, 0xde0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000c40], 0x0, &(0x7f0000000c00), &(0x7f0000000c40)=[{0x0, '\x00', 0x0, 0x1, 0x1, [{0x5, 0x10, 0x88fb, 'netdevsim0\x00', 'vxcan1\x00', 'vxcan1\x00', 'veth0_to_team\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], 0xce, 0x106, 0x156, [@cgroup0={{'cgroup\x00', 0x0, 0x8}}, @state={{'state\x00', 0x0, 0x8}, {{0xfffffff7}}}], [@common=@dnat={'dnat\x00', 0x10, {{@random="6a4e303a54f4", 0xfffffffffffffffc}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x7, 'syz0\x00', {0xffff}}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{0x3, 0xa, 0x6007, 'dvmrp0\x00', 'veth1_to_bond\x00', 'veth0_macvtap\x00', 'team_slave_1\x00', @empty, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], @empty, [0x0, 0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x9e, 0xce, [], [@common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x5, 0x60, 0x10, 'gretap0\x00', 'caif0\x00', 'wg0\x00', 'veth1_to_team\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, [0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0x80, 0x0, 0xff], 0x6e, 0xbe, 0xee, [], [@common=@log={'log\x00', 0x28, {{0xdd, "c003e892ddf16a95076cab8e32c35c22dd89aa8dad33ec8683fbcfd5f013", 0x3}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}}, {0x11, 0x4, 0x4305, 'macsec0\x00', 'veth0\x00', 'macvtap0\x00', 'vlan0\x00', @multicast, [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], @empty, [0xff, 0xff, 0x0, 0x0, 0xff], 0x95e, 0xa06, 0xa3e, [@mark_m={{'mark_m\x00', 0x0, 0x18}, {{0xd04, 0x47, 0x1, 0x1}}}, @among={{'among\x00', 0x0, 0x888}, {{@zero, @offset=0x450, 0x1, {[0xe1, 0x9, 0x2, 0x8000, 0x1000, 0x2, 0xffff, 0x6, 0x9, 0x3, 0x81, 0x6, 0x2, 0xffffffff, 0x401, 0x9, 0x0, 0x7, 0xba1, 0x401, 0x6, 0x9, 0x0, 0x400, 0x67, 0x7, 0x6, 0x9, 0x6, 0x4, 0x7, 0x8, 0x3c6, 0x5, 0x8, 0x1, 0x8001, 0xbf7, 0x5100, 0x3, 0x3, 0x1, 0x6, 0x5, 0xffff, 0xfffffff5, 0x255d, 0x3, 0x3, 0x5, 0x9, 0x7, 0x77e, 0x2, 0x80, 0x0, 0x5, 0x5, 0x5, 0xffffffff, 0x3, 0xc33, 0x100000, 0x8, 0x0, 0x7, 0x0, 0x7991, 0xe2c, 0x8001, 0x7fffffff, 0xcfa, 0x5, 0x1000, 0x3, 0x7, 0x2, 0x0, 0x3, 0xffffffff, 0x3, 0xf7, 0x8, 0x3, 0x7, 0xb393, 0x8, 0x8, 0x401, 0x0, 0xc, 0x8, 0xbab, 0x7, 0x4c2, 0x3, 0x8, 0x10001, 0x2, 0x44, 0x27de, 0x6, 0x96, 0x4, 0x608a, 0x6, 0xa, 0x2, 0x1, 0x8000, 0x3, 0x3, 0x3ee573b4, 0x101, 0x2, 0x3, 0x4, 0x2, 0x3, 0x9b6, 0x8, 0x101, 0x101, 0x5, 0x76d8, 0x0, 0x7, 0x3, 0x4, 0x9, 0x8c, 0x5f5, 0x8, 0xff, 0x4, 0x8, 0x58, 0x685f, 0x4, 0x0, 0x8, 0x3, 0x0, 0x160, 0x2e4, 0x7fff, 0x3, 0xb6, 0x1, 0x8, 0x9, 0xd, 0x8, 0x2, 0x2, 0xa, 0x2, 0x200, 0x2, 0x2, 0xff, 0x1, 0x6, 0x6, 0x80000000, 0x50000000, 0x5, 0xe91, 0x2, 0x8, 0x5, 0x3, 0x0, 0x3ff, 0x0, 0xc0, 0x4, 0xb, 0x100, 0x6, 0xfffffff9, 0x2, 0x7, 0xffff, 0x2, 0xa, 0xe, 0x2, 0x100, 0x10000, 0x6, 0x5, 0x44f0, 0x1ff, 0x1000, 0x2, 0x44, 0x0, 0x8000, 0x8, 0x3, 0xbd4a, 0xffffff57, 0x4, 0x3, 0x8, 0x8, 0x2, 0x5568, 0x2, 0x8, 0x6d34, 0x2, 0x9, 0x4, 0x2, 0x725, 0x0, 0x8, 0x2, 0x8, 0x6, 0x6, 0xede, 0x2e97, 0x3, 0x4, 0xfffff064, 0xc12, 0x80, 0x2, 0x6, 0x7, 0x3, 0x2, 0x5, 0x2, 0x8d0e, 0x9, 0xd, 0x9, 0x2f, 0xec34, 0x480, 0x6, 0x269, 0x4, 0x4, 0x2, 0x3, 0x0, 0x9, 0x0, 0x70, 0x3, 0x40, 0x8d3], 0x5, [{[0x4, 0x81], @rand_addr=0x64010101}, {[0x1], @private=0xa010102}, {[0xfffffff9, 0x8], @loopback}, {[0x8, 0x9], @broadcast}, {[0x4cd, 0x1], @loopback}]}, {[0x200, 0x4000000, 0x9, 0xff, 0xf, 0x0, 0x2, 0xfffffff5, 0x9, 0x10001, 0x81, 0x6, 0x1, 0x401, 0x100000, 0xe, 0x1, 0x9, 0xccc, 0x6, 0xde, 0x7fffffff, 0x6, 0x101, 0x12d, 0x3, 0x3, 0x7, 0xfffff99e, 0x4, 0x7, 0x6b9, 0x8, 0x401, 0x100, 0x1, 0x4873, 0x7, 0x9cf3, 0x1ff, 0x3, 0x100, 0x4, 0xfe5a, 0x1, 0x10, 0x4, 0x6, 0x2, 0x9, 0x0, 0x0, 0xff, 0x40000000, 0xfb46, 0x9, 0x10, 0x6, 0xa3, 0xfff, 0x3, 0xfffff80d, 0x0, 0x6, 0x80000000, 0xff, 0xe24, 0xf71d, 0x40, 0x101, 0x80000001, 0x5, 0x7, 0xfffffe95, 0x2, 0x3fff8, 0x4, 0x7f, 0x2, 0x3, 0x10, 0xd338, 0x7ff, 0xe9b, 0x2, 0x7, 0x6, 0x20, 0xb81, 0xe18f, 0x9, 0x6, 0x4c, 0x0, 0x0, 0x40, 0x3, 0xffffffff, 0xd00, 0xffffff81, 0x7, 0x5, 0xff, 0x9, 0x5, 0x9, 0x464, 0x2, 0x3, 0xfc7, 0xa, 0x2, 0x5, 0x200, 0x80, 0x5, 0x4, 0xffff8001, 0x2, 0x8, 0x100, 0xdbf, 0x3, 0x8, 0xca1, 0x9, 0x4, 0x3c9b51c3, 0x4000, 0x4, 0x10001, 0x2, 0x545cc08e, 0x3, 0x9, 0x1, 0xc06, 0x1, 0x9, 0x2, 0x5, 0x9, 0x6, 0x10001, 0x7e, 0xbf, 0xff, 0xdc, 0x64, 0x0, 0xa2, 0x10001, 0x5, 0x4b5, 0xffffffff, 0x800, 0xffffffc0, 0x16d, 0x1, 0xa61e, 0x3, 0x6, 0x5477, 0x4, 0xac, 0x3, 0x1, 0xffffae92, 0xb, 0x4, 0xffffffff, 0x5, 0x0, 0x0, 0x101, 0xffff, 0x98, 0x7f, 0x5, 0x81, 0x6, 0x4e, 0x7, 0x2, 0xd, 0xd08e, 0x2, 0x2, 0x8001, 0x8, 0xffffffff, 0x0, 0x1, 0x81, 0x400, 0xff, 0x5, 0x0, 0xc987, 0x2, 0x6, 0x9, 0xdb4, 0xffff8000, 0x6, 0x8, 0x100, 0xd, 0x9, 0xffffff5f, 0xfff, 0x9a5b, 0x4, 0x9d, 0xc4, 0x3, 0x1, 0x9, 0x1, 0xbe29, 0x0, 0x4, 0x8, 0x5, 0x9, 0x6bc, 0x6, 0x54c, 0x200, 0xf1, 0x101, 0x2, 0x0, 0x1, 0x6, 0x7fff, 0x7, 0x0, 0x8000, 0x1, 0x4, 0x7, 0x3, 0x6, 0x9, 0x6, 0x1c, 0x5, 0x3, 0xff, 0x2000, 0xa15f, 0x18bb000, 0xfffffffd, 0xb, 0x8, 0x4], 0x4, [{[0x3ff, 0x2], @multicast1}, {[0x8], @multicast2}, {[0x0, 0x9], @remote}, {[0x8, 0x1], @empty}]}}}}], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x4}}}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x100, 0x2, 0x0, 0x1, 0x0, "7135596d7683773dabcf6dfd935e69b3da3f6b7af5ff40adac871189d70a69a9e614cc88eb4723ac42f8bcee0fbf6edaddf8d56f42059478b5a1a8f59483f193"}}}], @common=@mark={'mark\x00', 0x10, {{0xffffffc0, 0xfffffffffffffffd}}}}]}]}, 0xe58) syz_open_dev$video(&(0x7f0000001ac0), 0x0, 0x400000) 5.812454836s ago: executing program 3 (id=3455): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e"], 0x0) syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x40, 0xe, 0x9f, {0x9f, 0x1, "7744ad1125ad1f655306cef85f13aa5c62a9039cf3fdb01d23cd1b964b8e4f71f4f3470eb57d48a302ee63429f955914acd14cc1510adf5c1af279b154a4f2cb306d7180f15e9ab7cfd9bf4556cab4a02e12f116bf79ce1a458f12376dbe494d78d41549def3f1f68b43096284d89d842411e2e57a992e5b87ef5843d87528465f8219eabe7b38757e719302ff37523cbe532fdea7c824911159b65c14"}}, &(0x7f0000000580)={0x0, 0x3, 0x58, @string={0x58, 0x3, "c3ef1adcd1a4b90a7482531e4efc11403b3fbe5b23a7ce719e6da949ca86b5ed42626ed4292ffa07dc0442f7e4ed02c23deca8aafcfdb24e0d119e68425c8fc0394a4f8d8fdf97169c55e66cbadc4a7eb9f2a7caa616"}}, &(0x7f0000000600)={0x0, 0xf, 0x5c, {0x5, 0xf, 0x5c, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0xf, 0x9, 0xc876}, @wireless={0xb, 0x10, 0x1, 0x8, 0x88, 0x5, 0x0, 0x51f, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x2, 0x9, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0xf9, 0x6, 0xffff}, @ss_container_id={0x14, 0x10, 0x4, 0x58, "e60239733ebd5ddaa47a4366c07d5b9a"}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x101, 0xf000, 0xfc1, [0xc000, 0x0, 0xc00f, 0xff0030, 0x0]}]}}, &(0x7f0000000680)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf6, 0x3, 0xf9, 0x6, "6da6545e", "3554eb6a"}}, &(0x7f00000006c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x4, 0x8, 0x0, 0x9, 0x5, 0x400}}}, &(0x7f0000000b40)={0x84, &(0x7f0000000740)={0x0, 0x7, 0x2e, "b6799698dfeb430d3b782293eb9071051aca3929b2572f5ec7516a772f52628b8df2e4941eff53676dc8b19fd890"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000007c0)={0x0, 0x8, 0x1}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000840)={0x20, 0x0, 0x8, {0xa0, 0x1, [0xf]}}, &(0x7f0000000880)={0x40, 0x7, 0x2}, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0xb, 0x2, "1d2c"}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0xe15}, &(0x7f0000000980)={0x40, 0x13, 0x6}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000a00)={0x40, 0x19, 0x2, "00e0"}, &(0x7f0000000a40)={0x40, 0x1a, 0x2, 0x400}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0xe0}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0xd}}) 5.79575751s ago: executing program 6 (id=3456): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x17) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) rename(0x0, 0x0) getpid() sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000fdc06340f30c74934bbc0040000109021b0001000000000904000001a7a00f000905", @ANYBLOB="92b18a"], 0x0) 5.153226332s ago: executing program 0 (id=3457): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x62040200) ioctl$sock_bt_hci(r1, 0x400448c9, 0x0) bind$bt_hci(r2, &(0x7f0000001080)={0x1f, 0xffff, 0x2}, 0x6) syz_usb_connect$cdc_ncm(0x5, 0xffffffffffffff65, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x47b, 0x2) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000200)={'fscrypt:', @desc3}, &(0x7f0000000380)={0x0, "10400b0a96f2a7161fa703d65d4a953271e9fed85dc56dd87c18c4926c130b1c691fb8f234704a6c56e3095aa924516c117c6bef1c0c1eb3eec4d868cbe92300", 0x37}, 0x48, 0xfffffffffffffffa) 4.2728811s ago: executing program 4 (id=3458): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x17) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) rename(0x0, 0x0) getpid() sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000fdc06340f30c74934bbc0040000109021b0001000000000904000001a7a00f000905", @ANYBLOB="92b18a"], 0x0) 3.865655155s ago: executing program 0 (id=3459): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xa1, 0x12, 0x17, 0x10, 0xb95, 0x172a, 0xf7f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfb, 0x0, 0x2, 0x6c, 0x5d, 0x65, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmat(r2, &(0x7f0000ffa000/0x6000)=nil, 0x5000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write(r4, &(0x7f0000000300)='(', 0x1) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x8, 0x9d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) landlock_restrict_self(0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) memfd_create(0x0, 0x2) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) setsockopt$inet_group_source_req(r6, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r7, 0x5761, 0x0) write$uinput_user_dev(r4, &(0x7f0000000bc0)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x74, 0x8, 0x5f, 0x1, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x40000000, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x80000001, 0x7, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x8f, 0x6, 0x6, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xcbc1, 0x7ff, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x1, 0x6, 0x1, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x400001, 0x8000, 0xffff, 0x7f, 0x7f, 0x9, 0x5, 0x4003, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x20000b, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x88, 0x3, 0x10000009, 0x3e7, 0x2, 0x5, 0x2, 0x2, 0x5, 0x8, 0x4, 0x6d01, 0x5, 0x803b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x0, 0xa2, 0x7, 0x6, 0x5, 0x6, 0x54fe12d2, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x7d731dd2, 0x5, 0x0, 0x6, 0x0, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0x5, 0x2, 0xfffffff8, 0x1, 0x5, 0x14c, 0x40a7, 0x6, 0x6, 0xffffffff, 0x80000002, 0x10005, 0x8, 0x8c8, 0x3, 0x9, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x8000000, 0xb20, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) write$sndseq(r4, &(0x7f0000000340)=[{0x5, 0x20, 0x6, 0x0, @tick=0x2, {0x4, 0x92}, {0xe7, 0x7}, @quote={{0x2, 0x8}, 0x1}}], 0x1c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x0, 0x10, 0x6, "5f485fa72de7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.743320634s ago: executing program 6 (id=3460): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r4], 0x3c}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="50005900006ea122d99c6ff2b33915beb7b55d77b9c903f044f44d89aed13566d73ad895ac84977e1d5710b5d0d0bd870ab1f5852d", @ANYRES16=r3, @ANYRESOCT=r3, @ANYRES16=r5, @ANYBLOB="08007e000200000008000d005b5b4f770800a1001c0b000008002201620300000500a200bb000000040005010500a2000d000000"], 0x50}, 0x1, 0x0, 0x0, 0x40d1}, 0x20004000) ioctl$KDSIGACCEPT(r1, 0x5607, 0x26) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000140)={0x5, 0x4, 0x9fc9}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180200000120000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.698025412s ago: executing program 5 (id=3443): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000080)={0x7, 'macvlan1\x00', {0x2f6b13e3}, 0xfbff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000400)={0x0, 'pim6reg0\x00', {0x4}}) r2 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x10081, &(0x7f00000002c0)="1a00000042000000", 0x8) sendto$inet6(r3, &(0x7f0000000080)="e9", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRESDEC=r3], 0xef) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000040)={r6}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000200)={r7, 0x5a9, 0x30}, &(0x7f00000000c0)=0xffffffffffffff7b) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r8, &(0x7f0000000000)=[{&(0x7f0000000640)=""/147, 0x93}], 0x1, 0x0, 0xfff) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)}, 0x0) 2.276302609s ago: executing program 3 (id=3461): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) modify_ldt$write(0x1, &(0x7f0000000080), 0x10) r2 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0xff}, 0xdf2090133c5169c2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x64c980, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) rt_tgsigqueueinfo(0x0, 0x0, 0x9, &(0x7f0000000140)={0x39, 0xffffffff, 0x4}) r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r6, 0x2285, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x7, &(0x7f00000000c0)="fdffffff", 0x4) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000100)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000280)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e447511703d", 0x31}, {0x0}], 0x3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 2.043736582s ago: executing program 4 (id=3462): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) iopl(0x3) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000100)={0xb6, 0x1, 0x7, 0xfffffffffffffffa}) mq_timedreceive(r8, &(0x7f0000000780)=""/117, 0x75, 0x0, 0x0) sched_setscheduler(r5, 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2b442, 0x0) acct(&(0x7f00000000c0)='./file0\x00') acct(&(0x7f0000000300)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$vsock_stream(0x28, 0x1, 0x0) 1.773129541s ago: executing program 6 (id=3463): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040382000000dfffffffffaf984c187bc518cea01331e6cee736a4c594870b1378d9f0655d33808d35b5e452ff8de2704dce3dbfc620c09e8c02c0dd6339cc98d4f7f22292d3d96126d8e5589bb5a4141ec3497b11e19188b2b14871d18e6cc98a34d6d3543520"], 0xe) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r1, r0, 0x0) io_setup(0x801, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x56, 0xa, 0x1, "46dacccfae1e008faa00000000f4ff4000", 0x42474752}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) lsetxattr$security_selinux(&(0x7f0000000340)='./bus\x00', &(0x7f00000003c0), &(0x7f0000000040)='system_u:object_r:devicekit_disk_exec_t:s0\x00', 0x2b, 0x3) 1.709891393s ago: executing program 5 (id=3464): dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, @void, @value}, 0x94) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x10000a006) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f0000000180)='./file0\x00', 0x22) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='hpfs\x00', 0x0, 0x0) 794.900172ms ago: executing program 5 (id=3465): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000003c0)={0x1, 0x2}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xc240, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='bdev\x00', 0x0, &(0x7f00000001c0)='4\xfc\xd2K\x1e#4\xbb') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'hsr0\x00'}) r4 = syz_io_uring_setup(0xd3, 0x0, 0x0, 0x0) io_uring_enter(r4, 0x48cb, 0x0, 0x12, 0x0, 0x5c) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) 758.957255ms ago: executing program 3 (id=3466): prctl$PR_SET_SECUREBITS(0x1c, 0x25) setresuid(0xee01, 0xee01, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000100)={{0x0, 0x0, 0xd, 0x1}, 'syz1\x00', 0x55}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x58}}, 0xc000) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB], 0xf) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xac}}, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0xf231, 0x4000) r2 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r3 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x0) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x0, 0x0, 0x1000000}) r4 = io_uring_setup(0x497c, &(0x7f00000001c0)) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x11, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 659.725522ms ago: executing program 4 (id=3467): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000000c0)={0x0, 0xfffffffffffffee3}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000414010026bd7000ffdbdf250800010000000000080003"], 0x20}, 0x1, 0x0, 0x0, 0x20048001}, 0x20000000) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000080)={0x6, 0x7, "c4378b8424ad2b8fd335f78dd314472df4838a624b5e63d5", {0x6, 0x1000}, 0x7}) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xffffffff, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000005600)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/200, 0xc8}], 0x1}, 0x20000000}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000500)=""/7, 0x7}], 0x1}, 0x83}], 0x2, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 0s ago: executing program 0 (id=3468): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x62040200) ioctl$sock_bt_hci(r1, 0x400448c9, 0x0) bind$bt_hci(r2, &(0x7f0000001080)={0x1f, 0xffff, 0x2}, 0x6) syz_usb_connect$cdc_ncm(0x5, 0xffffffffffffff65, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x47b, 0x2) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000200)={'fscrypt:', @desc3}, &(0x7f0000000380)={0x0, "10400b0a96f2a7161fa703d65d4a953271e9fed85dc56dd87c18c4926c130b1c691fb8f234704a6c56e3095aa924516c117c6bef1c0c1eb3eec4d868cbe92300", 0x37}, 0x48, 0xfffffffffffffffa) kernel console output (not intermixed with test programs): 7214][T18143] veth0_vlan: entered promiscuous mode [ 867.474151][T18143] veth1_vlan: entered promiscuous mode [ 867.500216][T18143] veth0_macvtap: entered promiscuous mode [ 867.512663][T18143] veth1_macvtap: entered promiscuous mode [ 867.533558][T18143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.544453][T18143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.554672][T18143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.567384][T18143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.577808][T18143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.588655][T18143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.606012][T18143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.624597][T18143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.635227][T18143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.652146][T18143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.663182][T18143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 867.678180][T18143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.694057][T18143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.712583][T18143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.723685][T18143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.744265][T18143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.755358][T18143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.771380][T18143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.782077][T18143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.796324][T18143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.812250][T18143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.823342][T18143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 867.842047][T18143] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.859665][T18143] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.872203][T18143] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.885108][T18143] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.898180][ T1212] hid (null): unknown global tag 0xe [ 867.905325][ T1212] elecom 0003:056E:00E6.001D: unknown main item tag 0x7 [ 867.912858][ T1212] elecom 0003:056E:00E6.001D: unknown global tag 0xe [ 867.919979][ T1212] elecom 0003:056E:00E6.001D: item 0 0 1 14 parsing failed [ 867.929173][ T1212] elecom 0003:056E:00E6.001D: probe with driver elecom failed with error -22 [ 867.942079][ T1212] usb 6-1: USB disconnect, device number 59 [ 868.016615][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 868.024457][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 868.031859][ T7255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 868.043610][ T7255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 868.566704][ T5873] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 868.874273][ T5873] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82 [ 868.996008][ T5873] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 869.017660][ T5873] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.4b [ 869.026957][ T5873] usb 7-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 869.036046][ T5873] usb 7-1: Product: syz [ 869.041469][ T5873] usb 7-1: config 0 descriptor?? [ 869.575048][ T5873] ath6kl: Failed to submit usb control message: -71 [ 869.585157][ T5873] ath6kl: unable to send the bmi data to the device: -71 [ 869.596552][ T5873] ath6kl: Unable to send get target info: -71 [ 869.605282][ T5873] ath6kl: Failed to init ath6kl core: -71 [ 869.612457][ T5873] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 869.633930][ T5873] usb 7-1: USB disconnect, device number 2 [ 869.712991][T18274] FAULT_INJECTION: forcing a failure. [ 869.712991][T18274] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 869.720800][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.795412][T18274] CPU: 1 UID: 0 PID: 18274 Comm: syz.3.2992 Not tainted 6.12.0-rc6-syzkaller-00110-gff7afaeca1a1 #0 [ 869.806208][T18274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 869.816263][T18274] Call Trace: [ 869.819539][T18274] [ 869.822469][T18274] dump_stack_lvl+0x16c/0x1f0 [ 869.827146][T18274] should_fail_ex+0x497/0x5b0 [ 869.831828][T18274] _copy_from_user+0x2e/0xd0 [ 869.836421][T18274] memdup_user+0x71/0xd0 [ 869.840668][T18274] strndup_user+0x78/0xe0 [ 869.844996][T18274] __x64_sys_mount+0x138/0x320 [ 869.849780][T18274] ? __pfx___x64_sys_mount+0x10/0x10 [ 869.855076][T18274] do_syscall_64+0xcd/0x250 [ 869.859587][T18274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.865492][T18274] RIP: 0033:0x7f567697e719 [ 869.870347][T18274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 869.889957][T18274] RSP: 002b:00007f5677712038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 869.898377][T18274] RAX: ffffffffffffffda RBX: 00007f5676b35f80 RCX: 00007f567697e719 [ 869.906350][T18274] RDX: 00000000200001c0 RSI: 0000000020000280 RDI: 0000000020000080 [ 869.914308][T18274] RBP: 00007f5677712090 R08: 0000000000000000 R09: 0000000000000000 [ 869.922268][T18274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 869.930223][T18274] R13: 0000000000000000 R14: 00007f5676b35f80 R15: 00007ffc82969538 [ 869.938204][T18274] [ 870.357203][ T67] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 870.364589][ T67] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 870.920047][T18284] Process accounting resumed [ 871.022698][T18289] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2990'. [ 871.238310][ T5873] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 872.336899][T17416] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 872.357093][ T5873] usb 1-1: Using ep0 maxpacket: 16 [ 874.211888][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 874.224895][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 875.207987][ T5873] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 875.223968][ T5873] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 875.233192][T17416] usb 4-1: Using ep0 maxpacket: 32 [ 875.241880][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.250951][ T5873] usb 1-1: config 0 descriptor?? [ 875.275428][T18283] Process accounting resumed [ 876.284030][ T8305] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 876.290989][ T7233] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 877.373171][T17416] usb 4-1: device descriptor read/all, error -71 [ 877.611622][ T5873] usbhid 1-1:0.0: can't add hid device: -71 [ 877.619165][ T5873] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 877.628578][ T5873] usb 1-1: USB disconnect, device number 62 [ 878.147981][T17416] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 878.338332][T17416] usb 4-1: Using ep0 maxpacket: 8 [ 878.387016][T17416] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 878.413642][T17416] usb 4-1: config 0 has no interface number 0 [ 878.422546][T17416] usb 4-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=22.1b [ 878.431932][T17416] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.440099][T17416] usb 4-1: Product: syz [ 878.444422][T17416] usb 4-1: Manufacturer: syz [ 878.449112][T17416] usb 4-1: SerialNumber: syz [ 878.455151][T17416] usb 4-1: config 0 descriptor?? [ 878.461923][T17416] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 878.657581][ T5873] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 878.673007][T17416] usb 4-1: USB disconnect, device number 50 [ 878.983513][ T5875] usb 6-1: new low-speed USB device number 60 using dummy_hcd [ 879.117653][ T5875] usb 6-1: device descriptor read/64, error -71 [ 879.149485][ T29] audit: type=1400 audit(1731015305.381:3157): avc: denied { cmd } for pid=18320 comm="syz.4.3009" path="socket:[62106]" dev="sockfs" ino=62106 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 879.402307][ T5873] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82 [ 879.414031][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 879.427773][ T5873] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.4b [ 879.436977][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 879.445160][ T5873] usb 1-1: Product: syz [ 879.451020][ T5873] usb 1-1: config 0 descriptor?? [ 879.694662][ T5875] usb 6-1: new low-speed USB device number 61 using dummy_hcd [ 879.754256][ T5873] ath6kl: Failed to submit usb control message: -71 [ 879.762848][ T5873] ath6kl: unable to send the bmi data to the device: -71 [ 879.771261][ T5873] ath6kl: Unable to send get target info: -71 [ 879.782085][ T5873] ath6kl: Failed to init ath6kl core: -71 [ 879.790304][ T5873] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 879.802984][ T5873] usb 1-1: USB disconnect, device number 63 [ 879.838759][ T5875] usb 6-1: device descriptor read/64, error -71 [ 879.948052][ T5875] usb usb6-port1: attempt power cycle [ 880.185199][T18339] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 880.327909][ T5875] usb 6-1: new low-speed USB device number 62 using dummy_hcd [ 880.363666][ T5875] usb 6-1: device descriptor read/8, error -71 [ 880.607928][ T5875] usb 6-1: new low-speed USB device number 63 using dummy_hcd [ 880.628279][ T5875] usb 6-1: device descriptor read/8, error -71 [ 880.738074][ T5875] usb usb6-port1: unable to enumerate USB device [ 881.318213][ T67] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 881.538117][ T29] audit: type=1400 audit(1731015307.911:3158): avc: denied { setopt } for pid=18347 comm="syz.4.3016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 881.748047][ T5875] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 882.058765][ T5875] usb 5-1: Using ep0 maxpacket: 8 [ 882.618359][ T5903] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 882.658125][ T5873] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 882.779294][ T5903] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 882.788347][ T5873] usb 7-1: device descriptor read/64, error -71 [ 882.804554][ T5903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.826225][ T5903] usb 6-1: config 0 descriptor?? [ 882.871383][ T5874] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 883.028206][ T5873] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 883.048550][ T5874] usb 4-1: Using ep0 maxpacket: 16 [ 883.062581][ T5874] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 883.075013][ T5874] usb 4-1: config 0 interface 0 has no altsetting 0 [ 883.085213][ T5874] usb 4-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 883.098642][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.112490][ T5874] usb 4-1: config 0 descriptor?? [ 883.158350][ T5873] usb 7-1: device descriptor read/64, error -71 [ 883.166269][ T7233] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 883.242111][ T5903] usb 6-1: Cannot set MAC address [ 883.248691][ T5903] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 883.263891][ T5903] usb 6-1: USB disconnect, device number 64 [ 883.268445][ T5873] usb usb7-port1: attempt power cycle [ 883.453557][ T29] audit: type=1400 audit(1731015309.850:3159): avc: denied { sys_ptrace } for pid=18385 comm="syz.0.3027" capability=19 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 883.570505][ T5874] kye 0003:0458:0138.001E: unknown main item tag 0x0 [ 883.577238][ T5874] kye 0003:0458:0138.001E: unknown main item tag 0x0 [ 883.584190][ T5874] kye 0003:0458:0138.001E: unexpected long global item [ 883.591853][ T5874] kye 0003:0458:0138.001E: parse failed [ 883.597435][ T5874] kye 0003:0458:0138.001E: probe with driver kye failed with error -22 [ 883.608283][ T5873] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 883.739801][ T5873] usb 7-1: device descriptor read/8, error -71 [ 883.848364][T18395] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 884.050017][ T5873] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 884.360798][ T5875] usb 5-1: unable to get BOS descriptor or descriptor too short [ 884.378478][ T5875] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 884.386056][ T5875] usb 5-1: can't read configurations, error -71 [ 884.395656][ T5873] usb 7-1: device descriptor read/8, error -71 [ 884.509040][ T5873] usb usb7-port1: unable to enumerate USB device [ 885.108914][ T5874] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 885.476471][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 885.512639][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 885.523205][ T5874] usb 1-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 885.554486][ T9] usb 4-1: USB disconnect, device number 51 [ 885.561970][T18411] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3033'. [ 885.572431][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.607786][ T5874] usb 1-1: config 0 descriptor?? [ 885.652882][T18412] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3033'. [ 885.894471][T18403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 886.888029][T18403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 887.019210][ T8305] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 888.161878][T18438] input: syz1 as /devices/virtual/input/input49 [ 888.305741][T18447] bdev: Unknown parameter '4üÒK#4»' [ 888.922136][ T7238] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 889.133057][ T5874] usbhid 1-1:0.0: can't add hid device: -71 [ 889.158298][ T5874] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 889.249567][ T5874] usb 1-1: USB disconnect, device number 64 [ 889.627658][T18460] dns_resolver: Unsupported content type (152) [ 889.663259][ T29] audit: type=1400 audit(1731015316.060:3160): avc: denied { getopt } for pid=18453 comm="syz.6.3044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 889.878987][ T5873] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 890.018888][ T1212] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 890.028958][ T5873] usb 6-1: Using ep0 maxpacket: 16 [ 890.063975][ T5873] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=36.00 [ 890.073678][ T5873] usb 6-1: New USB device strings: Mfr=168, Product=81, SerialNumber=40 [ 890.082230][ T5873] usb 6-1: Product: syz [ 890.086661][ T5873] usb 6-1: Manufacturer: syz [ 890.091494][ T5873] usb 6-1: SerialNumber: syz [ 890.099952][ T5873] usb 6-1: config 0 descriptor?? [ 890.106043][ T5873] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 890.117573][ T5873] usb 6-1: Detected FT4232HA [ 890.128923][T17416] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 890.670176][T18460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 890.678660][T18460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 890.691581][ T5873] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 890.701046][ T5873] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 890.708529][ T1212] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 890.720032][ T5873] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 890.729039][ T1212] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 890.739694][ T5873] usb 6-1: USB disconnect, device number 65 [ 890.745699][ T1212] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 890.756035][T17416] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 890.764560][ T5873] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 890.773941][T17416] usb 1-1: config 0 has no interface number 0 [ 890.780181][ T1212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.789913][ T5873] ftdi_sio 6-1:0.0: device disconnected [ 890.796417][T17416] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 890.809079][T17416] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 890.809498][T18462] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 890.831290][ T1212] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 890.841952][T17416] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 890.851069][T17416] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.859731][T17416] usb 1-1: Product: syz [ 890.864205][T17416] usb 1-1: Manufacturer: syz [ 890.872581][T17416] usb 1-1: SerialNumber: syz [ 890.880803][T17416] usb 1-1: config 0 descriptor?? [ 890.891183][T18468] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 890.905211][T17416] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 890.917346][T17416] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 890.928951][ T5875] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 891.059054][ T5875] usb 7-1: device descriptor read/64, error -71 [ 891.153617][T17416] usb 4-1: USB disconnect, device number 52 [ 891.160752][ T29] audit: type=1326 audit(1731015317.560:3161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18466 comm="syz.0.3047" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f689617e719 code=0x0 [ 891.278471][T18482] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 891.292513][T18482] syzkaller0: entered promiscuous mode [ 891.299042][ T5875] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 891.303528][T18482] syzkaller0: entered allmulticast mode [ 891.390126][ T29] audit: type=1400 audit(1731015317.780:3162): avc: denied { relabelfrom } for pid=18481 comm="syz.5.3052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 891.447489][ T29] audit: type=1400 audit(1731015317.810:3163): avc: denied { relabelto } for pid=18481 comm="syz.5.3052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 891.529099][ T5875] usb 7-1: device descriptor read/64, error -71 [ 891.639752][ T5875] usb usb7-port1: attempt power cycle [ 891.727784][T18492] bdev: Unknown parameter '4üÒK#4»' [ 892.549364][ T5875] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 892.582487][ T5875] usb 7-1: device descriptor read/8, error -71 [ 892.693797][ T29] audit: type=1400 audit(1731015319.049:3164): avc: denied { getopt } for pid=18497 comm="syz.4.3056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 892.785769][ T8303] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 892.807376][ T29] audit: type=1400 audit(1731015319.199:3165): avc: denied { accept } for pid=18497 comm="syz.4.3056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 893.789319][ T5875] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 893.802219][T17416] usb 1-1: USB disconnect, device number 65 [ 893.819985][T17416] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 893.947487][ T5875] usb 7-1: device descriptor read/8, error -71 [ 893.954261][T17416] cyberjack 1-1:0.69: device disconnected [ 894.063188][ T5875] usb usb7-port1: unable to enumerate USB device [ 894.656922][T18525] openvswitch: netlink: Actions may not be safe on all matching packets [ 894.694564][ T8303] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 894.902460][ T5875] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 895.060667][ T5875] usb 7-1: device descriptor read/64, error -71 [ 895.299601][ T5875] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 895.444743][ T5875] usb 7-1: device descriptor read/64, error -71 [ 895.566363][ T5875] usb usb7-port1: attempt power cycle [ 895.868139][T18534] serio: Serial port ptm0 [ 895.983930][ T5875] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 896.239465][ T5875] usb 7-1: device descriptor read/8, error -71 [ 896.459404][T18545] FAULT_INJECTION: forcing a failure. [ 896.459404][T18545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 896.530078][ T5875] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 896.579941][ T5875] usb 7-1: device descriptor read/8, error -71 [ 896.674354][T18545] CPU: 1 UID: 0 PID: 18545 Comm: syz.4.3067 Not tainted 6.12.0-rc6-syzkaller-00110-gff7afaeca1a1 #0 [ 896.685173][T18545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 896.695235][T18545] Call Trace: [ 896.698503][T18545] [ 896.701423][T18545] dump_stack_lvl+0x16c/0x1f0 [ 896.706091][T18545] should_fail_ex+0x497/0x5b0 [ 896.710773][T18545] _copy_from_user+0x2e/0xd0 [ 896.715379][T18545] udp_lib_setsockopt+0x558/0xfe0 [ 896.720401][T18545] ? __pfx_udp_v6_push_pending_frames+0x10/0x10 [ 896.726637][T18545] ? __pfx_udp_lib_setsockopt+0x10/0x10 [ 896.732266][T18545] udpv6_setsockopt+0xbc/0xd0 [ 896.736953][T18545] ? __pfx_udp_v6_push_pending_frames+0x10/0x10 [ 896.743196][T18545] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 896.749084][T18545] do_sock_setsockopt+0x222/0x480 [ 896.754103][T18545] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 896.759662][T18545] ? fdget+0x176/0x210 [ 896.763725][T18545] __sys_setsockopt+0x1a4/0x270 [ 896.768565][T18545] ? __pfx___sys_setsockopt+0x10/0x10 [ 896.774020][T18545] __x64_sys_setsockopt+0xbd/0x160 [ 896.779118][T18545] ? do_syscall_64+0x91/0x250 [ 896.783783][T18545] ? lockdep_hardirqs_on+0x7c/0x110 [ 896.789013][T18545] do_syscall_64+0xcd/0x250 [ 896.793513][T18545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.799401][T18545] RIP: 0033:0x7f0ae0f7e719 [ 896.803802][T18545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 896.823401][T18545] RSP: 002b:00007f0ae1ce9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 896.831801][T18545] RAX: ffffffffffffffda RBX: 00007f0ae1136058 RCX: 00007f0ae0f7e719 [ 896.839762][T18545] RDX: 0000000000000001 RSI: 0000000000000088 RDI: 0000000000000003 [ 896.847718][T18545] RBP: 00007f0ae1ce9090 R08: 0000000000000004 R09: 0000000000000000 [ 896.855672][T18545] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000001 [ 896.863886][T18545] R13: 0000000000000000 R14: 00007f0ae1136058 R15: 00007ffc2502aaa8 [ 896.871853][T18545] [ 896.880462][ T5875] usb usb7-port1: unable to enumerate USB device [ 897.098343][T18553] xt_hashlimit: invalid rate [ 898.556479][ T67] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 900.685468][ T7233] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 900.900177][T17416] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 901.332070][T17416] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 901.340819][T17416] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 901.351287][T17416] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 901.360259][T17416] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 901.371232][T17416] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 901.383495][T17416] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 901.392839][T17416] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 901.415143][T17416] usb 6-1: Product: syz [ 901.419354][T17416] usb 6-1: Manufacturer: syz [ 901.455998][T18645] input: syz0 as /devices/virtual/input/input50 [ 901.854805][T17416] cdc_wdm 6-1:1.0: skipping garbage [ 901.862669][T17416] cdc_wdm 6-1:1.0: skipping garbage [ 901.889728][T17416] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 901.898047][T17416] cdc_wdm 6-1:1.0: Unknown control protocol [ 902.080219][ T1212] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 902.106004][ T5903] usb 6-1: USB disconnect, device number 66 [ 902.223587][T18651] 9pnet_fd: Insufficient options for proto=fd [ 902.241544][ T1212] usb 7-1: no configurations [ 902.246229][ T1212] usb 7-1: can't read configurations, error -22 [ 902.420469][ T1212] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 902.580765][ T1212] usb 7-1: no configurations [ 902.585600][ T1212] usb 7-1: can't read configurations, error -22 [ 902.592681][ T1212] usb usb7-port1: attempt power cycle [ 902.756221][ T29] audit: type=1400 audit(1731015329.148:3166): avc: denied { read } for pid=18657 comm="syz.4.3096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 903.030759][ T1212] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 903.064003][ T1212] usb 7-1: no configurations [ 903.068722][ T1212] usb 7-1: can't read configurations, error -22 [ 903.560700][ T5873] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 903.568056][ T5873] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 903.576842][T13868] Bluetooth: hci3: command 0x0c1a tx timeout [ 903.610968][ T1212] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 903.643115][ T1212] usb 7-1: no configurations [ 903.653343][ T1212] usb 7-1: can't read configurations, error -22 [ 903.669006][ T1212] usb usb7-port1: unable to enumerate USB device [ 904.006879][ T7338] Bluetooth: Error in BCSP hdr checksum [ 904.128378][T18673] IPv6: sit1: Disabled Multicast RS [ 904.274089][ T7233] Bluetooth: Error in BCSP hdr checksum [ 904.284123][ T67] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 904.650678][ T7338] Bluetooth: Error in BCSP hdr checksum [ 904.881028][ T7233] Bluetooth: Error in BCSP hdr checksum [ 905.350689][ T5873] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 905.411282][ T67] Bluetooth: Error in BCSP hdr checksum [ 905.552097][ T12] Bluetooth: Error in BCSP hdr checksum [ 905.602083][ T5873] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 905.613553][ T5873] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.640109][ T5873] usb 7-1: config 0 descriptor?? [ 905.650308][ T5873] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 905.720749][T13868] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 905.811631][ T12] Bluetooth: Error in BCSP hdr checksum [ 905.870726][T18477] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 906.053156][T18477] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 906.065451][T18477] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 906.085929][T18477] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 906.099214][T18477] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.130330][T18693] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 906.140250][T18477] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 906.224664][ T7233] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 906.949135][T18477] usb 6-1: USB disconnect, device number 67 [ 907.105314][ T29] audit: type=1400 audit(1731015333.498:3167): avc: denied { set_context_mgr } for pid=18716 comm="syz.4.3110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 907.895367][ T29] audit: type=1400 audit(1731015334.288:3168): avc: denied { read } for pid=18728 comm="syz.3.3112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 908.016335][T18733] x_tables: ip_tables: osf match: only valid for protocol 6 [ 908.464669][ T5873] usb 7-1: USB disconnect, device number 19 [ 908.532798][T18729] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 909.462684][T18750] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3117'. [ 910.155826][ T7259] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 910.290331][T18756] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3117'. [ 911.966463][ T7338] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 912.708226][T18771] dccp_close: ABORT with 32 bytes unread [ 914.801815][ T5903] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 914.966438][ T5903] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 915.005328][ T5903] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 915.071861][ T5903] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 915.134683][ T5903] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 915.176553][ T5903] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 915.193674][ T5903] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.212138][ T5903] usb 7-1: config 0 descriptor?? [ 915.591890][ T5875] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 915.809800][ T7233] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 915.811493][ T5903] plantronics 0003:047F:FFFF.001F: No inputs registered, leaving [ 915.824267][ T5875] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 915.826719][ T5903] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 915.838318][ T5875] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 915.869039][ T5875] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 915.880381][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.901879][T18820] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 915.914977][ T5875] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 915.981497][T18838] input: syz0 as /devices/virtual/input/input51 [ 916.084443][T18842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 916.119640][T18842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 916.843246][ T5874] usb 7-1: USB disconnect, device number 20 [ 916.934972][ T5875] usb 5-1: USB disconnect, device number 76 [ 917.242267][ T5903] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 917.342030][T18477] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 917.387354][T18853] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3148'. [ 917.392158][ T5903] usb 4-1: device descriptor read/64, error -71 [ 917.491103][ T29] audit: type=1400 audit(1731015343.877:3169): avc: denied { read write } for pid=18854 comm="syz.4.3149" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 917.515736][ T29] audit: type=1400 audit(1731015343.877:3170): avc: denied { open } for pid=18854 comm="syz.4.3149" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 917.541577][T18477] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 917.553574][T18477] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 917.573135][T18477] usb 1-1: config 0 has no interface number 0 [ 917.581037][T18477] usb 1-1: New USB device found, idVendor=13d3, idProduct=3408, bcdDevice=77.72 [ 917.590184][T18477] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.598365][T18477] usb 1-1: Product: syz [ 917.602700][T18477] usb 1-1: Manufacturer: syz [ 917.607995][T18477] usb 1-1: SerialNumber: syz [ 917.614637][T18477] usb 1-1: config 0 descriptor?? [ 917.711387][ T5903] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 917.737578][ T67] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 917.838160][T18851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 917.847341][T18851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 917.855369][ T5903] usb 4-1: device descriptor read/64, error -71 [ 917.962738][ T5903] usb usb4-port1: attempt power cycle [ 918.459099][ T5903] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 918.483855][ T5903] usb 4-1: device descriptor read/8, error -71 [ 919.121033][ T5903] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 919.161316][ T5903] usb 4-1: device descriptor read/8, error -71 [ 919.292906][ T5903] usb usb4-port1: unable to enumerate USB device [ 919.431396][ T5873] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 919.628097][ T5873] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 919.640331][ T5873] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 919.653444][ T5873] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.664258][ T5873] usb 6-1: config 0 descriptor?? [ 919.671530][ T5873] pwc: Askey VC010 type 2 USB webcam detected. [ 919.778088][T18890] bdev: Unknown parameter '4üÒK#4»' [ 920.428986][ T5873] pwc: recv_control_msg error -32 req 02 val 2b00 [ 920.440718][ T5873] pwc: recv_control_msg error -32 req 02 val 2700 [ 920.448501][ T5873] pwc: recv_control_msg error -32 req 02 val 2c00 [ 920.455932][ T5873] pwc: recv_control_msg error -32 req 04 val 1000 [ 920.492308][ T5873] pwc: recv_control_msg error -32 req 04 val 1300 [ 920.502262][ T5873] pwc: recv_control_msg error -32 req 04 val 1400 [ 920.727502][ T5873] pwc: recv_control_msg error -71 req 02 val 2100 [ 920.735241][ T5873] pwc: recv_control_msg error -71 req 04 val 1500 [ 920.747548][ T5873] pwc: recv_control_msg error -71 req 02 val 2500 [ 920.766407][ T5873] pwc: recv_control_msg error -71 req 02 val 2400 [ 920.773630][ T5873] pwc: recv_control_msg error -71 req 02 val 2600 [ 920.780424][ T5873] pwc: recv_control_msg error -71 req 02 val 2900 [ 920.788734][ T5873] pwc: recv_control_msg error -71 req 02 val 2800 [ 920.795727][ T5873] pwc: recv_control_msg error -71 req 04 val 1100 [ 920.802736][ T5873] pwc: recv_control_msg error -71 req 04 val 1200 [ 920.887635][ T5873] pwc: Registered as video103. [ 920.893552][ T5873] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input53 [ 920.915262][ T5873] usb 6-1: USB disconnect, device number 68 [ 920.975808][ T5903] usb 1-1: USB disconnect, device number 66 [ 921.001005][T18905] netlink: 'syz.6.3166': attribute type 10 has an invalid length. [ 921.019008][T18905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 921.027406][T18905] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 921.564001][ T67] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 923.606333][ T7259] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 923.835655][T18932] trusted_key: encrypted_key: insufficient parameters specified [ 923.848101][T18932] netlink: 'syz.6.3170': attribute type 7 has an invalid length. [ 923.866364][ T29] audit: type=1400 audit(1731015350.256:3171): avc: denied { shutdown } for pid=18926 comm="syz.6.3170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 924.732210][T18955] devtmpfs: Unknown parameter 'posixacl' [ 924.812933][ T5903] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 924.824363][T18966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3181'. [ 924.834020][T18966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3181'. [ 924.911588][T18968] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.3182'. [ 924.935697][ T29] audit: type=1400 audit(1731015351.336:3172): avc: denied { mounton } for pid=18967 comm="syz.3.3182" path="/366/file0" dev="tmpfs" ino=1988 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 924.963273][ T5903] usb 1-1: device descriptor read/64, error -71 [ 925.923129][ T5903] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 926.123473][ T5903] usb 1-1: device descriptor read/64, error -71 [ 926.388186][ T5903] usb usb1-port1: attempt power cycle [ 926.421362][T18985] netem: change failed [ 926.671948][ T29] audit: type=1400 audit(1731015353.066:3173): avc: denied { map } for pid=18988 comm="syz.4.3186" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 926.698801][ T29] audit: type=1400 audit(1731015353.066:3174): avc: denied { execute } for pid=18988 comm="syz.4.3186" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 926.725034][ T5873] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 926.763385][ T9] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 926.783069][ T5903] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 926.806376][ T5903] usb 1-1: device descriptor read/8, error -71 [ 926.812803][ T29] audit: type=1400 audit(1731015353.206:3175): avc: denied { call } for pid=18988 comm="syz.4.3186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 926.884193][ T5873] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 926.899063][ T5873] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 926.910896][ T5873] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 926.928232][ T5873] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 926.929043][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 926.942095][ T5873] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 926.982809][ T5873] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.982988][ T9] usb 6-1: config 0 has no interfaces? [ 927.063182][ T5903] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 927.093167][ T5873] usb 7-1: config 0 descriptor?? [ 927.093823][ T9] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 927.103552][T18985] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 927.107326][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.125610][ T5903] usb 1-1: device descriptor read/8, error -71 [ 927.157424][ T9] usb 6-1: config 0 descriptor?? [ 927.245176][ T5903] usb usb1-port1: unable to enumerate USB device [ 927.327979][ T8305] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 927.619836][ T5873] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 927.628220][ T5873] plantronics 0003:047F:FFFF.0020: No inputs registered, leaving [ 927.637560][ T5873] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 928.011353][ T5873] usb 7-1: USB disconnect, device number 21 [ 929.282605][ T8303] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 929.550005][ T5873] usb 6-1: USB disconnect, device number 69 [ 929.623881][T19030] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3195'. [ 929.635034][ T29] audit: type=1326 audit(1731015356.035:3176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19031 comm="syz.5.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290a17e719 code=0x7ffc0000 [ 929.679336][ T29] audit: type=1326 audit(1731015356.035:3177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19031 comm="syz.5.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290a17e719 code=0x7ffc0000 [ 929.706406][ T29] audit: type=1326 audit(1731015356.055:3178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19031 comm="syz.5.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f290a17e719 code=0x7ffc0000 [ 929.736188][ T29] audit: type=1326 audit(1731015356.055:3179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19031 comm="syz.5.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290a17e719 code=0x7ffc0000 [ 929.762898][ T29] audit: type=1326 audit(1731015356.055:3180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19031 comm="syz.5.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290a17e719 code=0x7ffc0000 [ 929.796849][ T29] audit: type=1326 audit(1731015356.055:3181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19031 comm="syz.5.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f290a17e719 code=0x7ffc0000 [ 929.828056][ T29] audit: type=1326 audit(1731015356.055:3182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19031 comm="syz.5.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290a17e719 code=0x7ffc0000 [ 929.859585][ T29] audit: type=1326 audit(1731015356.055:3183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19031 comm="syz.5.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290a17e719 code=0x7ffc0000 [ 929.860855][T19030] ALSA: mixer_oss: invalid OSS volume 'u' [ 929.888617][ T29] audit: type=1326 audit(1731015356.055:3184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19031 comm="syz.5.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f290a17e719 code=0x7ffc0000 [ 930.275390][ T29] audit: type=1326 audit(1731015356.055:3185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19031 comm="syz.5.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290a17e719 code=0x7ffc0000 [ 931.433741][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.339690][T19068] bdev: Unknown parameter '4üÒK#4»' [ 932.878914][T19069] FAULT_INJECTION: forcing a failure. [ 932.878914][T19069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 932.910727][T19069] CPU: 1 UID: 0 PID: 19069 Comm: syz.4.3201 Not tainted 6.12.0-rc6-syzkaller-00110-gff7afaeca1a1 #0 [ 932.921525][T19069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 932.931586][T19069] Call Trace: [ 932.934851][T19069] [ 932.937766][T19069] dump_stack_lvl+0x16c/0x1f0 [ 932.942433][T19069] should_fail_ex+0x497/0x5b0 [ 932.947101][T19069] _copy_to_user+0x32/0xd0 [ 932.951522][T19069] simple_read_from_buffer+0xd0/0x160 [ 932.956887][T19069] proc_fail_nth_read+0x198/0x270 [ 932.961896][T19069] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 932.967428][T19069] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 932.972968][T19069] vfs_read+0x1df/0xbe0 [ 932.977111][T19069] ? __fget_files+0x23a/0x3f0 [ 932.981774][T19069] ? fdget_pos+0x24c/0x360 [ 932.986171][T19069] ? __pfx_lock_release+0x10/0x10 [ 932.991175][T19069] ? trace_lock_acquire+0x14a/0x1d0 [ 932.996385][T19069] ? __pfx_vfs_read+0x10/0x10 [ 933.001063][T19069] ? __pfx___mutex_lock+0x10/0x10 [ 933.006086][T19069] ? __fget_files+0x244/0x3f0 [ 933.010776][T19069] ksys_read+0x12f/0x260 [ 933.015014][T19069] ? __pfx_ksys_read+0x10/0x10 [ 933.019776][T19069] do_syscall_64+0xcd/0x250 [ 933.024268][T19069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.030156][T19069] RIP: 0033:0x7f0ae0f7d15c [ 933.034555][T19069] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 933.054175][T19069] RSP: 002b:00007f0ae1cc8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 933.062586][T19069] RAX: ffffffffffffffda RBX: 00007f0ae1136130 RCX: 00007f0ae0f7d15c [ 933.070564][T19069] RDX: 000000000000000f RSI: 00007f0ae1cc80a0 RDI: 0000000000000007 [ 933.078522][T19069] RBP: 00007f0ae1cc8090 R08: 0000000000000000 R09: 0000000000000000 [ 933.086488][T19069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 933.094441][T19069] R13: 0000000000000000 R14: 00007f0ae1136130 R15: 00007ffc2502aaa8 [ 933.102412][T19069] [ 933.130745][ T67] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 933.532450][T19080] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3208'. [ 934.113815][ T5875] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 934.278182][ T5875] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 934.288965][T18477] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 934.296719][ T5875] usb 1-1: config 0 has no interfaces? [ 934.302331][ T5875] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 934.313837][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.324756][ T5875] usb 1-1: config 0 descriptor?? [ 934.790971][T18477] usb 4-1: device descriptor read/64, error -71 [ 935.005049][ T12] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 935.087948][T18477] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 935.162968][T19106] syz.5.3213: attempt to access beyond end of device [ 935.162968][T19106] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 935.176158][T19106] hpfs: hpfs_map_sector(): read error [ 935.584383][T18477] usb 4-1: device descriptor read/64, error -71 [ 935.705008][T18477] usb usb4-port1: attempt power cycle [ 935.972013][ T5874] usb 1-1: USB disconnect, device number 71 [ 936.044269][T18477] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 936.084466][T18477] usb 4-1: device descriptor read/8, error -71 [ 936.159473][T19125] bdev: Unknown parameter '4üÒK#4»' [ 936.832695][ T5875] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 937.526339][ T5875] usb 6-1: no configurations [ 937.531115][ T5875] usb 6-1: can't read configurations, error -22 [ 937.696654][ T5875] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 937.854934][ T5875] usb 6-1: no configurations [ 937.860002][ T5875] usb 6-1: can't read configurations, error -22 [ 937.868473][ T5875] usb usb6-port1: attempt power cycle [ 937.944484][ T5874] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 938.095599][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 938.113037][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 938.130833][ T5874] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 938.143099][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.154687][ T5874] usb 5-1: config 0 descriptor?? [ 938.205953][ T7233] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 938.216716][ T5875] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 938.245283][ T5875] usb 6-1: no configurations [ 938.250134][ T5875] usb 6-1: can't read configurations, error -22 [ 938.294252][T18477] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 938.372080][T19127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 938.381155][T19127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 938.389029][ T5875] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 938.415263][ T5875] usb 6-1: no configurations [ 938.420161][ T5875] usb 6-1: can't read configurations, error -22 [ 938.427250][ T5875] usb usb6-port1: unable to enumerate USB device [ 938.446264][T18477] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 938.457639][T18477] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 938.467878][T18477] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 938.477162][T18477] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.488877][T19141] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 938.500072][T18477] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 938.663721][ T5874] cm6533_jd 0003:0D8C:0022.0021: unknown main item tag 0x0 [ 938.677560][ T5874] cm6533_jd 0003:0D8C:0022.0021: item fetching failed at offset 4/5 [ 938.692181][ T5874] cm6533_jd 0003:0D8C:0022.0021: parse failed [ 938.701578][ T5874] cm6533_jd 0003:0D8C:0022.0021: probe with driver cm6533_jd failed with error -22 [ 939.036782][T17416] usb 4-1: USB disconnect, device number 61 [ 939.143085][T18477] usb 5-1: USB disconnect, device number 77 [ 939.204597][T19161] input: syz0 as /devices/virtual/input/input55 [ 939.559395][T19175] tipc: Started in network mode [ 939.564681][T19175] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 939.576063][T19175] tipc: New replicast peer: 0000:0000:0000:0000:0000:0001:0000:0000 [ 939.587056][T19175] tipc: Enabled bearer , priority 10 [ 939.774407][T18477] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 939.874906][ T5903] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 939.946019][T18477] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82 [ 939.974412][T18477] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 939.995450][T18477] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.4b [ 940.014450][T18477] usb 1-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 940.022585][T18477] usb 1-1: Product: syz [ 940.037727][T18477] usb 1-1: config 0 descriptor?? [ 940.068107][ T5903] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 940.089195][ T5903] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 940.108791][ T5903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.119569][ T5903] usb 6-1: config 0 descriptor?? [ 940.130583][ T5903] pwc: Askey VC010 type 2 USB webcam detected. [ 940.334789][ T5874] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 940.499204][ T5874] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 940.532375][ T5874] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 940.552502][ T5874] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 940.562229][ T5903] pwc: recv_control_msg error -32 req 02 val 2b00 [ 940.574184][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.582554][ T5903] pwc: recv_control_msg error -32 req 02 val 2700 [ 940.596308][T19189] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 940.604261][ T5903] pwc: recv_control_msg error -32 req 02 val 2c00 [ 940.618486][ T5874] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 940.626699][ T5903] pwc: recv_control_msg error -71 req 04 val 1000 [ 940.633382][ T5903] pwc: recv_control_msg error -71 req 04 val 1300 [ 940.649590][ T5903] pwc: recv_control_msg error -71 req 04 val 1400 [ 940.658295][ T5903] pwc: recv_control_msg error -71 req 02 val 2000 [ 940.665146][ T5903] pwc: recv_control_msg error -71 req 02 val 2100 [ 940.671993][ T5903] pwc: recv_control_msg error -71 req 04 val 1500 [ 940.680151][ T5903] pwc: recv_control_msg error -71 req 02 val 2500 [ 940.687321][ T5903] pwc: recv_control_msg error -71 req 02 val 2400 [ 940.694046][ T5903] pwc: recv_control_msg error -71 req 02 val 2600 [ 940.694594][T17416] tipc: Node number set to 1 [ 940.700833][ T5903] pwc: recv_control_msg error -71 req 02 val 2900 [ 940.711917][ T5903] pwc: recv_control_msg error -71 req 02 val 2800 [ 940.719056][ T5903] pwc: recv_control_msg error -71 req 04 val 1100 [ 940.726293][ T5903] pwc: recv_control_msg error -71 req 04 val 1200 [ 940.733550][ T5903] pwc: Registered as video103. [ 940.739236][ T5903] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input56 [ 940.751769][ T5903] usb 6-1: USB disconnect, device number 74 [ 940.784619][ T9] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 940.868995][T18477] ath6kl: Failed to submit usb control message: -71 [ 940.885215][T18477] ath6kl: unable to send the bmi data to the device: -71 [ 940.892458][T18477] ath6kl: Unable to send get target info: -71 [ 940.899511][T18477] ath6kl: Failed to init ath6kl core: -71 [ 940.905858][T18477] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 940.917201][T18477] usb 1-1: USB disconnect, device number 72 [ 940.948695][T19199] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3238'. [ 940.958704][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 940.971987][T17416] usb 4-1: USB disconnect, device number 62 [ 940.978842][ T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 940.993210][ T9] usb 7-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 941.003439][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.011754][ T9] usb 7-1: Product: syz [ 941.016425][ T9] usb 7-1: Manufacturer: syz [ 941.021216][ T9] usb 7-1: SerialNumber: syz [ 941.025469][T19199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3238'. [ 941.038505][T19199] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 941.048335][T19199] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 941.055792][ T9] usb 7-1: config 0 descriptor?? [ 941.057375][T19199] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 941.064153][T19197] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 941.071056][T19199] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 941.084353][ T9] hub 7-1:0.0: bad descriptor, ignoring hub [ 941.087837][T19199] geneve2: entered allmulticast mode [ 941.099498][ T9] hub 7-1:0.0: probe with driver hub failed with error -5 [ 941.109338][ T9] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input57 [ 941.135515][T19199] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 941.142330][T19199] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 941.155807][T19199] vhci_hcd vhci_hcd.0: Device attached [ 941.344099][T19209] serio: Serial port ptm0 [ 941.363255][T19197] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3237'. [ 941.381301][T17416] usb 7-1: USB disconnect, device number 22 [ 941.381404][ C0] usbtouchscreen 7-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 941.393216][T19203] vhci_hcd: connection closed [ 941.401863][ T7238] vhci_hcd: stop threads [ 941.414662][ T7238] vhci_hcd: release socket [ 941.421297][ T7238] vhci_hcd: disconnect device [ 941.426209][ T5875] usb 34-1: SetAddress Request (2) to port 0 [ 941.432196][ T5875] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 941.454726][ T5875] usb 34-1: enqueue for inactive port 0 [ 942.021772][ T5875] usb usb34-port1: attempt power cycle [ 942.084549][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 942.084566][ T29] audit: type=1400 audit(1731015368.474:3197): avc: denied { write } for pid=19223 comm="syz.6.3244" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 942.173568][T19225] ALSA: seq fatal error: cannot create timer (-22) [ 942.192847][T19228] x_tables: eb_tables: AUDIT.0 target: invalid size 8 (kernel) != (user) 0 [ 942.476727][T18477] usb 6-1: new full-speed USB device number 75 using dummy_hcd [ 942.615021][T18477] usb 6-1: device descriptor read/64, error -71 [ 942.691421][ T5875] usb usb34-port1: unable to enumerate USB device [ 943.014837][T18477] usb 6-1: new full-speed USB device number 76 using dummy_hcd [ 943.164932][T18477] usb 6-1: device descriptor read/64, error -71 [ 943.275163][T18477] usb usb6-port1: attempt power cycle [ 943.627929][T18477] usb 6-1: new full-speed USB device number 77 using dummy_hcd [ 943.707219][T18477] usb 6-1: device descriptor read/8, error -71 [ 943.972002][ T8303] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 944.005226][T18477] usb 6-1: new full-speed USB device number 78 using dummy_hcd [ 944.036901][T18477] usb 6-1: device descriptor read/8, error -71 [ 944.039499][ T29] audit: type=1326 audit(1731015370.434:3198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19256 comm="syz.6.3255" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a7917e719 code=0x0 [ 944.145176][T18477] usb usb6-port1: unable to enumerate USB device [ 944.146908][T19258] Dead loop on virtual device ipvlan1, fix it urgently! [ 944.174241][T19258] syz.6.3255 (19258) used greatest stack depth: 12960 bytes left [ 944.221347][T19263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3254'. [ 944.979196][T19276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3259'. [ 945.499259][T19286] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3263'. [ 946.205581][T19286] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3263'. [ 946.296731][T19302] bdev: Unknown parameter '4üÒK#4»' [ 946.957333][T19308] autofs: Unknown parameter 'Þ' [ 947.235873][ T9] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 947.536725][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 947.548251][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 947.559494][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 947.582227][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 947.612162][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 947.764649][ T29] audit: type=1400 audit(1731015374.133:3199): avc: denied { setattr } for pid=19315 comm="syz.0.3270" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 947.950940][ T9] usb 5-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=b5.39 [ 947.998541][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.071006][ T9] usb 5-1: Product: syz [ 948.146025][ T9] usb 5-1: Manufacturer: syz [ 948.151091][ T9] usb 5-1: SerialNumber: syz [ 948.160317][ T9] usb 5-1: config 0 descriptor?? [ 948.167329][ T9] usb 5-1: NFC: Unable to get FW version [ 948.183217][ T9] pn533_usb 5-1:0.0: probe with driver pn533_usb failed with error -90 [ 950.005164][ T8303] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 950.153605][T19348] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 950.165953][T19348] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 950.190237][ T5874] usb 5-1: USB disconnect, device number 78 [ 950.234691][T19348] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 950.243002][ T9] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 950.427127][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 950.451639][ T9] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 950.466314][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 950.475413][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.486682][T19341] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 950.496421][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 950.724279][ T9] usb 4-1: USB disconnect, device number 63 [ 951.485832][ T9] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 951.571198][T19367] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 952.934526][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82 [ 953.007922][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 954.576881][ T7238] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 954.587156][ T9] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.4b [ 954.596421][ T9] usb 6-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 954.604535][ T9] usb 6-1: Product: syz [ 954.624318][ T9] usb 6-1: config 0 descriptor?? [ 954.676716][ T9] usb 6-1: can't set config #0, error -71 [ 954.694144][ T9] usb 6-1: USB disconnect, device number 79 [ 955.181550][T19376] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3281'. [ 955.924808][ T7233] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 956.576348][T19385] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3282'. [ 956.585428][T19385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3282'. [ 956.785323][ T29] audit: type=1400 audit(1731015382.872:3200): avc: denied { name_bind } for pid=19372 comm="syz.0.3282" path="socket:[66482]" dev="sockfs" ino=66482 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 957.423535][T17416] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 957.547837][ T29] audit: type=1400 audit(1731015383.942:3201): avc: denied { transfer } for pid=19404 comm="syz.6.3291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 957.636583][T17416] usb 6-1: Using ep0 maxpacket: 8 [ 957.641886][T19405] binder: 19404:19405 ioctl c0306201 0 returned -14 [ 957.718482][T17416] usb 6-1: config 0 has no interfaces? [ 957.724182][T17416] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 957.738695][T17416] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.761698][T17416] usb 6-1: config 0 descriptor?? [ 957.901116][T19423] syz.3.3293: attempt to access beyond end of device [ 957.901116][T19423] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 957.915152][T19423] syz.3.3293: attempt to access beyond end of device [ 957.915152][T19423] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 957.928629][T19423] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 957.938694][T19423] syz.3.3293: attempt to access beyond end of device [ 957.938694][T19423] nbd3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 957.951807][T19423] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 957.962505][T19423] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 957.973636][T19423] UDF-fs: Scanning with blocksize 512 failed [ 957.980240][T19423] syz.3.3293: attempt to access beyond end of device [ 957.980240][T19423] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 958.086467][ T9] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 958.118855][T19423] syz.3.3293: attempt to access beyond end of device [ 958.118855][T19423] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 958.145022][T19423] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 958.162580][T19423] syz.3.3293: attempt to access beyond end of device [ 958.162580][T19423] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 958.180511][T19423] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 958.189745][ T5874] usb 6-1: USB disconnect, device number 80 [ 958.190119][T19423] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 958.216979][T19423] UDF-fs: Scanning with blocksize 1024 failed [ 958.230089][T19423] syz.3.3293: attempt to access beyond end of device [ 958.230089][T19423] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 958.258100][ T9] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 958.274224][ T9] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 958.284372][T19423] syz.3.3293: attempt to access beyond end of device [ 958.284372][T19423] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 958.284389][ T9] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 958.312142][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.325202][T19421] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 958.341296][T19423] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 958.343075][ T9] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 958.381814][T19423] syz.3.3293: attempt to access beyond end of device [ 958.381814][T19423] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 958.450693][T19423] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 958.463668][T19423] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 958.485001][T19423] UDF-fs: Scanning with blocksize 2048 failed [ 958.506092][T19423] syz.3.3293: attempt to access beyond end of device [ 958.506092][T19423] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 958.521860][T19423] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 958.544252][T19423] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 958.589233][T17416] usb 7-1: USB disconnect, device number 23 [ 958.610955][T19423] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 958.640293][T19423] UDF-fs: Scanning with blocksize 4096 failed [ 958.646400][T19423] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 959.546933][T19450] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3299'. [ 959.729813][ T8303] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 959.971958][T19462] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 961.136980][T17416] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 961.323002][ T8303] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 961.330625][T17416] usb 6-1: Using ep0 maxpacket: 8 [ 961.337432][T17416] usb 6-1: config 162 has an invalid interface number: 84 but max is 2 [ 961.357114][T17416] usb 6-1: config 162 has an invalid interface number: 3 but max is 2 [ 961.365537][T17416] usb 6-1: config 162 has no interface number 0 [ 961.372013][T17416] usb 6-1: config 162 has no interface number 1 [ 961.385933][T17416] usb 6-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 961.514780][T17416] usb 6-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 961.529795][T17416] usb 6-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 961.541640][T17416] usb 6-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 961.899697][T17416] usb 6-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 961.932238][T17416] usb 6-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 961.945771][T17416] usb 6-1: config 162 interface 84 has no altsetting 0 [ 961.957924][T17416] usb 6-1: config 162 interface 2 has no altsetting 0 [ 961.970763][T17416] usb 6-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 961.981840][T17416] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.993171][T17416] usb 6-1: Product: syz [ 962.000323][T17416] usb 6-1: Manufacturer: syz [ 962.005104][T17416] usb 6-1: SerialNumber: syz [ 962.604654][T17416] usb 6-1: USB disconnect, device number 81 [ 964.345758][T19497] FAULT_INJECTION: forcing a failure. [ 964.345758][T19497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 964.359901][T19497] CPU: 0 UID: 0 PID: 19497 Comm: syz.3.3311 Not tainted 6.12.0-rc6-syzkaller-00110-gff7afaeca1a1 #0 [ 964.370665][T19497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 964.380721][T19497] Call Trace: [ 964.383996][T19497] [ 964.386926][T19497] dump_stack_lvl+0x16c/0x1f0 [ 964.391614][T19497] should_fail_ex+0x497/0x5b0 [ 964.396298][T19497] _copy_from_user+0x2e/0xd0 [ 964.400892][T19497] copy_msghdr_from_user+0x99/0x160 [ 964.406092][T19497] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 964.411903][T19497] ? hlock_class+0x4e/0x130 [ 964.416408][T19497] ? __lock_acquire+0x163e/0x3ce0 [ 964.421439][T19497] ___sys_sendmsg+0xff/0x1e0 [ 964.426038][T19497] ? __pfx____sys_sendmsg+0x10/0x10 [ 964.431234][T19497] ? __pfx___lock_acquire+0x10/0x10 [ 964.436455][T19497] ? __pfx___might_resched+0x10/0x10 [ 964.441742][T19497] ? __might_fault+0xe3/0x190 [ 964.446459][T19497] __sys_sendmmsg+0x1a1/0x450 [ 964.451159][T19497] ? __pfx___sys_sendmmsg+0x10/0x10 [ 964.456362][T19497] ? vfs_write+0x306/0x1150 [ 964.460888][T19497] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 964.466897][T19497] __x64_sys_sendmmsg+0x9c/0x100 [ 964.471845][T19497] do_syscall_64+0xcd/0x250 [ 964.476352][T19497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.482251][T19497] RIP: 0033:0x7f567697e719 [ 964.486665][T19497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 964.506271][T19497] RSP: 002b:00007f56776d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 964.514697][T19497] RAX: ffffffffffffffda RBX: 00007f5676b36130 RCX: 00007f567697e719 [ 964.522674][T19497] RDX: 000000000800001d RSI: 0000000020007fc0 RDI: 0000000000000003 [ 964.530651][T19497] RBP: 00007f56776d0090 R08: 0000000000000000 R09: 0000000000000000 [ 964.538620][T19497] R10: 0000000000000a1a R11: 0000000000000246 R12: 0000000000000002 [ 964.546588][T19497] R13: 0000000000000001 R14: 00007f5676b36130 R15: 00007ffc82969538 [ 964.554567][T19497] [ 964.557668][ C0] vkms_vblank_simulate: vblank timer overrun [ 965.023773][T13868] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 965.032844][ T12] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 965.050279][ T29] audit: type=1400 audit(1731015391.061:3202): avc: denied { accept } for pid=19487 comm="syz.0.3309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 966.107439][ T5875] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 966.339451][ T5875] usb 7-1: config 0 has an invalid interface number: 69 but max is 0 [ 966.348436][ T5875] usb 7-1: config 0 has no interface number 0 [ 966.354559][ T5875] usb 7-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 966.365298][ T5875] usb 7-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 966.379055][ T5875] usb 7-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 966.379266][ T7233] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 966.395841][ T5875] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.404438][ T5875] usb 7-1: Product: syz [ 966.409535][ T5875] usb 7-1: Manufacturer: syz [ 966.414244][ T5875] usb 7-1: SerialNumber: syz [ 966.428662][ T5875] usb 7-1: config 0 descriptor?? [ 966.434902][T19532] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 966.443414][ T5875] cyberjack 7-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 966.456522][ T5875] usb 7-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 966.657704][ T5874] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 966.689082][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 966.773169][ T29] audit: type=1400 audit(1731015905.162:3203): avc: denied { module_load } for pid=19546 comm="syz.0.3326" path=2F6D656D66643A10376DAD4ADC3A46A006E6BBB8B0E8C387122B8F59EEC7D02CC6012A881455DEFA3AEEE81D91468629202864656C6574656429 dev="tmpfs" ino=1571 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 966.773239][T19549] Invalid ELF header magic: != ELF [ 966.805580][ C1] vkms_vblank_simulate: vblank timer overrun [ 966.819146][ T5874] usb 6-1: unable to get BOS descriptor or descriptor too short [ 966.829782][ T5874] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 966.842317][ T5874] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 9 [ 966.854320][ T5874] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 966.865950][ T5874] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 966.882115][ T5874] usb 6-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 966.893090][ T5874] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.894060][ T5875] usb 7-1: USB disconnect, device number 24 [ 966.904070][ T5874] usb 6-1: Product: syz [ 966.910290][ T5875] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 966.913004][ T5874] usb 6-1: Manufacturer: syz [ 966.923462][ T5875] cyberjack 7-1:0.69: device disconnected [ 966.931335][ T5874] usb 6-1: SerialNumber: syz [ 966.941631][ T5874] usb 6-1: config 0 descriptor?? [ 966.942268][T19541] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 966.955516][ T5874] pn533_usb 6-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 967.204905][T17416] usb 6-1: USB disconnect, device number 82 [ 968.747920][ T5875] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 969.172008][ T5874] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 969.183050][T19584] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3336'. [ 969.198270][ T5875] usb 1-1: Using ep0 maxpacket: 8 [ 969.288899][ T5875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 969.308869][ T5875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 969.321198][ T5875] usb 1-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 969.330542][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.340109][ T5875] usb 1-1: config 0 descriptor?? [ 969.465195][ T5874] usb 4-1: Using ep0 maxpacket: 16 [ 969.478633][ T5874] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 969.487611][ T5874] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 969.501386][ T5874] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 969.512992][ T5874] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 969.522161][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.530984][ T5874] usb 4-1: Product: syz [ 969.535156][ T5874] usb 4-1: Manufacturer: syz [ 969.540597][ T5874] usb 4-1: SerialNumber: syz [ 969.632551][T19595] Dead loop on virtual device ipvlan1, fix it urgently! [ 970.008469][ T5875] playstation 0003:054C:0CE6.0022: unknown main item tag 0x0 [ 970.015897][ T5875] playstation 0003:054C:0CE6.0022: unknown main item tag 0x0 [ 970.023420][ T5875] playstation 0003:054C:0CE6.0022: unknown main item tag 0x0 [ 970.031165][ T5875] playstation 0003:054C:0CE6.0022: unknown main item tag 0x0 [ 970.045069][ T5875] playstation 0003:054C:0CE6.0022: unknown main item tag 0x0 [ 970.057667][ T5875] playstation 0003:054C:0CE6.0022: unknown main item tag 0x0 [ 970.065078][ T5875] playstation 0003:054C:0CE6.0022: unknown main item tag 0x0 [ 970.073769][ T5875] playstation 0003:054C:0CE6.0022: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.0-1/input0 [ 970.076805][T19598] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3340'. [ 970.211510][T19595] syz.6.3337 (19595) used greatest stack depth: 12448 bytes left [ 970.288432][ T5874] usb 4-1: 0:2 : does not exist [ 970.417821][T19609] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 970.426065][T19609] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 970.434652][T19609] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 970.442963][T19609] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 970.480956][T19609] vxlan0: entered promiscuous mode [ 970.486155][T19609] vxlan0: entered allmulticast mode [ 970.582512][T19609] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 970.590991][T19609] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 970.599394][T19609] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 970.608041][T19609] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 970.712547][ T5875] playstation 0003:054C:0CE6.0022: Failed to retrieve feature with reportID 9: -71 [ 970.737392][ T5875] playstation 0003:054C:0CE6.0022: Failed to retrieve DualSense pairing info: -71 [ 970.758948][T19613] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3343'. [ 970.767119][ T5875] playstation 0003:054C:0CE6.0022: Failed to get MAC address from DualSense [ 970.776981][ T5875] playstation 0003:054C:0CE6.0022: Failed to create dualsense. [ 970.807829][ T5875] playstation 0003:054C:0CE6.0022: probe with driver playstation failed with error -71 [ 970.848888][ T5875] usb 1-1: USB disconnect, device number 73 [ 970.850431][ T7338] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 972.375356][T19573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 972.497439][T19639] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3348'. [ 973.032341][T19573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 973.333283][ T5874] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 973.493641][ T5874] usb 4-1: USB disconnect, device number 64 [ 973.518088][T17416] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 973.994112][T17416] usb 6-1: config 0 has an invalid interface number: 69 but max is 0 [ 974.002552][T17416] usb 6-1: config 0 has no interface number 0 [ 974.009159][T17416] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 974.019713][T17416] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 974.033759][T17416] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 974.043055][T17416] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.053647][T17416] usb 6-1: Product: syz [ 974.057952][T17416] usb 6-1: Manufacturer: syz [ 974.062645][T17416] usb 6-1: SerialNumber: syz [ 974.216448][T17416] usb 6-1: config 0 descriptor?? [ 974.222516][T19641] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 974.231127][T17416] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 974.237712][ T5874] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 974.250758][T17416] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 974.483664][T19659] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3355'. [ 974.901904][ T5874] usb 4-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 974.913126][ T5874] usb 4-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 974.924346][ T5874] usb 4-1: config 0 interface 0 has no altsetting 0 [ 974.927589][ T29] audit: type=1326 audit(1731015913.322:3204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19640 comm="syz.5.3351" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f290a17e719 code=0x0 [ 974.947638][ T5874] usb 4-1: New USB device found, idVendor=056a, idProduct=0035, bcdDevice= 0.00 [ 974.964411][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 974.975254][ T5874] usb 4-1: config 0 descriptor?? [ 975.217439][T16724] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 975.377614][T16724] usb 1-1: Using ep0 maxpacket: 8 [ 975.396865][T16724] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 975.424877][ T5874] wacom 0003:056A:0035.0023: hidraw0: USB HID v0.00 Device [HID 056a:0035] on usb-dummy_hcd.3-1/input0 [ 975.440365][T16724] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 975.452186][T16724] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.462808][T16724] usb 1-1: config 0 descriptor?? [ 975.479029][T16724] usb 1-1: Found UVC 0.00 device (05ac:8501) [ 975.486058][T16724] usb 1-1: No valid video chain found. [ 975.741194][ T5875] usb 4-1: USB disconnect, device number 65 [ 975.766487][T17416] usb 1-1: USB disconnect, device number 74 [ 975.967704][ T7259] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 976.185814][T16724] usb 6-1: USB disconnect, device number 83 [ 976.203290][T16724] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 976.215136][T16724] cyberjack 6-1:0.69: device disconnected [ 977.013882][ T7758] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 977.252826][T19688] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 977.374650][T19702] overlayfs: failed to get index nlink (file1/bus, err=-61) [ 977.514172][T19704] bio_check_eod: 2 callbacks suppressed [ 977.514189][T19704] syz.5.3363: attempt to access beyond end of device [ 977.514189][T19704] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 977.532669][T19704] hpfs: hpfs_map_sector(): read error [ 977.927740][T17416] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 978.088610][T17416] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 978.110834][T17416] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 978.120219][T17416] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 978.128841][T17416] usb 5-1: SerialNumber: syz [ 978.755865][T17416] cdc_ether 5-1:1.0 eth9: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 979.636675][T19718] vxcan1: tx address claim with dest, not broadcast [ 979.641143][T19713] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3364'. [ 979.702884][T19722] FAULT_INJECTION: forcing a failure. [ 979.702884][T19722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 979.723908][T19722] CPU: 1 UID: 0 PID: 19722 Comm: syz.3.3371 Not tainted 6.12.0-rc6-syzkaller-00110-gff7afaeca1a1 #0 [ 979.734705][T19722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 979.744861][T19722] Call Trace: [ 979.748147][T19722] [ 979.751078][T19722] dump_stack_lvl+0x16c/0x1f0 [ 979.755766][T19722] should_fail_ex+0x497/0x5b0 [ 979.760455][T19722] _copy_from_user+0x2e/0xd0 [ 979.765053][T19722] __sys_bpf+0x21c/0x49a0 [ 979.769383][T19722] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 979.775199][T19722] ? lockdep_hardirqs_on+0x7c/0x110 [ 979.780410][T19722] ? __pfx___sys_bpf+0x10/0x10 [ 979.785181][T19722] ? find_held_lock+0x2d/0x110 [ 979.789962][T19722] ? bpf_trace_run2+0x266/0x590 [ 979.794818][T19722] ? __pfx_lock_release+0x10/0x10 [ 979.799846][T19722] ? bpf_send_signal_common+0x2b5/0x3a0 [ 979.805496][T19722] ? fput+0x30/0x390 [ 979.809395][T19722] ? ksys_write+0x1ad/0x260 [ 979.813912][T19722] __x64_sys_bpf+0x78/0xc0 [ 979.818335][T19722] do_syscall_64+0xcd/0x250 [ 979.822837][T19722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 979.828742][T19722] RIP: 0033:0x7f567697e719 [ 979.833161][T19722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 979.852769][T19722] RSP: 002b:00007f5677712038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 979.861156][T19722] RAX: ffffffffffffffda RBX: 00007f5676b35f80 RCX: 00007f567697e719 [ 979.869104][T19722] RDX: 0000000000000020 RSI: 0000000020000140 RDI: 0000000000000004 [ 979.877053][T19722] RBP: 00007f5677712090 R08: 0000000000000000 R09: 0000000000000000 [ 979.885017][T19722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 979.892965][T19722] R13: 0000000000000000 R14: 00007f5676b35f80 R15: 00007ffc82969538 [ 979.900919][T19722] [ 980.012326][ T9] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 980.319568][ T29] audit: type=1400 audit(1731015918.712:3205): avc: denied { create } for pid=19723 comm="syz.0.3373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 980.450457][ T9] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 980.459657][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.469843][ T9] usb 7-1: config 0 descriptor?? [ 980.702389][ T29] audit: type=1326 audit(1731015919.062:3206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19725 comm="syz.5.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290a17e719 code=0x7ffc0000 [ 980.809566][ T29] audit: type=1326 audit(1731015919.062:3207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19725 comm="syz.5.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290a17e719 code=0x7ffc0000 [ 980.851158][ T5874] usb 5-1: USB disconnect, device number 79 [ 980.857182][ T29] audit: type=1326 audit(1731015919.072:3208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19725 comm="syz.5.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f290a17e719 code=0x7ffc0000 [ 980.859037][ T5874] cdc_ether 5-1:1.0 eth9: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 980.917395][ T29] audit: type=1326 audit(1731015919.072:3209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19725 comm="syz.5.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290a17e719 code=0x7ffc0000 [ 980.967132][ T9] usb 7-1: Cannot set MAC address [ 980.972304][ T29] audit: type=1326 audit(1731015919.072:3210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19725 comm="syz.5.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290a17e719 code=0x7ffc0000 [ 981.000068][ T9] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 981.041223][ T9] usb 7-1: USB disconnect, device number 25 [ 981.080505][T19739] pimreg: entered allmulticast mode [ 981.098436][ T7259] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 981.100801][T19739] overlay: filesystem on ./bus not supported as upperdir [ 981.131297][T19739] pimreg: left allmulticast mode [ 981.882010][ T5903] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 981.947756][T19751] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 981.954309][T19751] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 981.966591][T19751] vhci_hcd vhci_hcd.0: Device attached [ 982.058937][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 982.070234][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 982.087445][ T5903] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 982.101845][ T5903] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 982.112383][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.122402][ T5903] usb 1-1: config 0 descriptor?? [ 982.324628][ T5875] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 982.368339][ T7758] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 982.387381][T17416] usb 46-1: SetAddress Request (2) to port 0 [ 982.394001][T17416] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 982.444137][ T29] audit: type=1400 audit(1731015920.822:3211): avc: denied { bind } for pid=19760 comm="syz.5.3381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 982.477431][ T5875] usb 5-1: Using ep0 maxpacket: 8 [ 982.569579][ T5875] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 982.624160][ T5875] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 982.695830][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 982.787792][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 982.833182][ T5903] plantronics 0003:047F:FFFF.0024: No inputs registered, leaving [ 982.834295][T19752] vhci_hcd: connection reset by peer [ 982.843852][ T5903] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 982.858296][ T7338] vhci_hcd: stop threads [ 982.862978][ T5875] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 982.878055][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.886365][ T7338] vhci_hcd: release socket [ 982.895521][ T7338] vhci_hcd: disconnect device [ 982.901686][ T5875] usb 5-1: Product: syz [ 982.906004][ T5875] usb 5-1: Manufacturer: syz [ 982.917833][ T5875] usb 5-1: SerialNumber: syz [ 982.924896][ T5875] usb 5-1: config 0 descriptor?? [ 982.943550][T19755] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 983.020935][T18477] usb 1-1: USB disconnect, device number 75 [ 983.172948][ T5875] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 983.182296][ T5875] input: Griffin SoundKnob as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input62 [ 983.348181][ T29] audit: type=1400 audit(1731015921.702:3212): avc: denied { mounton } for pid=19764 comm="syz.3.3382" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 983.709196][ T9] usb 6-1: new low-speed USB device number 84 using dummy_hcd [ 983.849054][ T9] usb 6-1: device descriptor read/64, error -71 [ 983.916604][ C1] powermate: config urb returned -71 [ 983.916895][ T5874] usb 5-1: USB disconnect, device number 80 [ 983.921912][ C1] powermate: usb_submit_urb(config) failed [ 983.922006][ C1] powermate 5-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 983.967873][ T5903] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 984.117384][ T9] usb 6-1: new low-speed USB device number 85 using dummy_hcd [ 984.125827][ T5903] usb 7-1: Using ep0 maxpacket: 16 [ 984.133852][ T5903] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 984.150048][ T5903] usb 7-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 984.159765][ T5903] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.168132][ T5903] usb 7-1: Product: syz [ 984.172375][ T5903] usb 7-1: Manufacturer: syz [ 984.177001][ T5903] usb 7-1: SerialNumber: syz [ 984.183648][ T5903] usb 7-1: config 0 descriptor?? [ 984.267761][ T9] usb 6-1: device descriptor read/64, error -71 [ 984.312318][T19781] program syz.3.3387 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 984.418664][ T9] usb usb6-port1: attempt power cycle [ 984.432381][ T5903] usb 7-1: ignoring: not an USB2CAN converter [ 984.778232][ T9] usb 6-1: new low-speed USB device number 86 using dummy_hcd [ 985.046164][ T5874] usb 7-1: USB disconnect, device number 26 [ 985.058308][ T9] usb 6-1: device descriptor read/8, error -71 [ 985.317631][ T9] usb 6-1: new low-speed USB device number 87 using dummy_hcd [ 985.399649][ T9] usb 6-1: device descriptor read/8, error -71 [ 985.533621][ T9] usb usb6-port1: unable to enumerate USB device [ 985.967547][ T9] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 985.976614][ T29] audit: type=1326 audit(1731015924.362:3213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19784 comm="syz.4.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae0f7e719 code=0x7ffc0000 [ 986.012896][ T29] audit: type=1326 audit(1731015924.362:3214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19784 comm="syz.4.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae0f7e719 code=0x7ffc0000 [ 986.130574][ T29] audit: type=1326 audit(1731015924.362:3215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19784 comm="syz.4.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f0ae0f7e719 code=0x7ffc0000 [ 986.414214][ T9] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 986.417489][ T29] audit: type=1326 audit(1731015924.362:3216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19784 comm="syz.4.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae0f7e719 code=0x7ffc0000 [ 986.423531][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.446758][ C1] vkms_vblank_simulate: vblank timer overrun [ 986.484138][ T9] usb 7-1: config 0 descriptor?? [ 986.486463][ T29] audit: type=1326 audit(1731015924.362:3217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19784 comm="syz.4.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae0f7e719 code=0x7ffc0000 [ 986.512623][ C1] vkms_vblank_simulate: vblank timer overrun [ 986.553702][ T29] audit: type=1326 audit(1731015924.362:3218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19784 comm="syz.4.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f0ae0f7e719 code=0x7ffc0000 [ 986.577220][ C1] vkms_vblank_simulate: vblank timer overrun [ 986.595450][ T29] audit: type=1326 audit(1731015924.362:3219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19784 comm="syz.4.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae0f7e719 code=0x7ffc0000 [ 986.629403][ T29] audit: type=1326 audit(1731015924.362:3220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19784 comm="syz.4.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae0f7e719 code=0x7ffc0000 [ 986.887047][ T8303] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 986.902649][ T9] usb 7-1: Cannot set MAC address [ 986.908120][ T9] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 986.942843][ T9] usb 7-1: USB disconnect, device number 27 [ 987.492987][T17416] usb 46-1: device descriptor read/8, error -110 [ 987.890670][T17416] usb usb46-port1: attempt power cycle [ 988.134498][ T7338] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 988.350174][T19829] syzkaller1: entered allmulticast mode [ 988.458361][T17416] usb usb46-port1: unable to enumerate USB device [ 988.487418][ T5875] usb 6-1: new low-speed USB device number 88 using dummy_hcd [ 988.577020][T19837] tipc: Started in network mode [ 988.586346][T19837] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 988.594018][T19837] tipc: Enabled bearer , priority 10 [ 988.605123][T19837] tipc: Resetting bearer [ 988.618856][ T5874] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 988.638951][ T5875] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 988.646431][ T5875] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 988.647116][T19837] tipc: Disabling bearer [ 988.656638][ T5875] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 988.656669][ T5875] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 988.656696][ T5875] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 988.662705][ T5875] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 988.710166][ T5875] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 988.720419][ T5875] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 988.738097][ T5875] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 988.749683][ T5875] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 988.760629][ T5875] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 988.787394][ T5874] usb 7-1: Using ep0 maxpacket: 32 [ 988.801944][ T5874] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 988.814080][ T5874] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 988.827052][ T5874] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 988.844813][ T5874] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 988.866759][ T5874] usb 7-1: config 0 interface 0 has no altsetting 0 [ 988.876376][ T5874] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 988.890736][ T5874] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 988.898211][ T5875] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 988.905206][ T5874] usb 7-1: Product: syz [ 988.909378][ T5875] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 988.923339][ T5875] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 988.934880][ T5875] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 988.945690][ T5874] usb 7-1: Manufacturer: syz [ 988.954973][ T5874] usb 7-1: SerialNumber: syz [ 988.961948][ T5874] usb 7-1: config 0 descriptor?? [ 988.962035][ T5875] usb 6-1: string descriptor 0 read error: -22 [ 988.968776][ T5874] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 988.973287][ T5875] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 988.985092][ T5874] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 988.995876][ T5875] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.030237][ T5875] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 989.341680][ T5875] usb 7-1: USB disconnect, device number 28 [ 989.356600][ T5875] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 989.677704][ T5874] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 989.839439][ T5874] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 989.848890][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.860874][ T5874] usb 1-1: config 0 descriptor?? [ 989.992365][ T5875] usb 6-1: USB disconnect, device number 88 [ 990.404036][T19874] devtmpfs: Cannot enable quota on remount [ 990.421967][T19870] netlink: 'syz.4.3409': attribute type 18 has an invalid length. [ 990.463336][T19870] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 990.472336][T19870] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 990.481648][T19870] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 990.490884][T19870] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 990.508686][T19877] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 990.562426][ T5874] usb 1-1: Cannot set MAC address [ 990.571880][ T5874] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 990.597761][ T5874] usb 1-1: USB disconnect, device number 76 [ 990.904079][ T29] audit: type=1326 audit(1731015929.282:3221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19878 comm="syz.6.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7917e719 code=0x7ffc0000 [ 990.927569][ C1] vkms_vblank_simulate: vblank timer overrun [ 991.012286][ T29] audit: type=1326 audit(1731015929.282:3222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19878 comm="syz.6.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7917e719 code=0x7ffc0000 [ 991.059677][ T29] audit: type=1326 audit(1731015929.322:3223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19878 comm="syz.6.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f8a7917e719 code=0x7ffc0000 [ 991.088274][ T29] audit: type=1326 audit(1731015929.322:3224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19878 comm="syz.6.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7917e719 code=0x7ffc0000 [ 991.120941][ T29] audit: type=1326 audit(1731015929.322:3225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19878 comm="syz.6.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7917e719 code=0x7ffc0000 [ 991.179951][ T29] audit: type=1326 audit(1731015929.322:3226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19878 comm="syz.6.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f8a7917e719 code=0x7ffc0000 [ 991.208846][ T29] audit: type=1326 audit(1731015929.322:3227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19878 comm="syz.6.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7917e719 code=0x7ffc0000 [ 991.237683][ T29] audit: type=1326 audit(1731015929.322:3228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19878 comm="syz.6.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7917e719 code=0x7ffc0000 [ 991.317684][ T5874] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 991.417628][ T5875] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 991.567807][ T5875] usb 5-1: device descriptor read/64, error -71 [ 991.751596][ T5874] usb 6-1: Using ep0 maxpacket: 32 [ 991.758047][ T5874] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 991.773797][ T5874] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 991.785213][ T5874] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 991.797530][ T5874] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 991.805906][ T5874] usb 6-1: Product: syz [ 991.810515][ T5874] usb 6-1: Manufacturer: syz [ 991.818040][ T5874] hub 6-1:4.0: USB hub found [ 991.830749][ T5875] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 991.967573][ T5875] usb 5-1: device descriptor read/64, error -71 [ 992.046015][ T5874] hub 6-1:4.0: 2 ports detected [ 992.133406][ T5875] usb usb5-port1: attempt power cycle [ 992.617549][ T12] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 992.625454][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.797441][ T5875] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 992.798727][T19919] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 992.798727][T19919] The task syz.5.3419 (19919) triggered the difference, watch for misbehavior. [ 992.895152][ T5875] usb 5-1: device descriptor read/8, error -71 [ 993.157429][ T5875] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 993.197618][ T5875] usb 5-1: device descriptor read/8, error -71 [ 993.356506][ T5875] usb usb5-port1: unable to enumerate USB device [ 993.894310][ T7238] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 993.914366][ T9] hub 6-1:4.0: activate --> -90 [ 994.583991][T19919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 994.676633][T19919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 995.161932][ T29] audit: type=1326 audit(1731015933.502:3229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19939 comm="syz.6.3431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7917e719 code=0x7ffc0000 [ 995.448476][ T29] audit: type=1326 audit(1731015933.512:3230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19939 comm="syz.6.3431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7917e719 code=0x7ffc0000 [ 995.499213][ T9] hub 6-1:4.0: hub_ext_port_status failed (err = -32) [ 995.508846][ T29] audit: type=1326 audit(1731015933.592:3231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19939 comm="syz.6.3431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f8a7917e719 code=0x7ffc0000 [ 995.515857][ T9] usb 6-1-port2: cannot warm reset (err = -32) [ 995.553058][ T9] usb 6-1-port2: Cannot enable. Maybe the USB cable is bad? [ 995.564982][ T9] usb 6-1-port2: cannot disable (err = -32) [ 995.827890][T18477] usb 6-1: USB disconnect, device number 89 [ 996.362438][T19969] netlink: 'syz.3.3436': attribute type 4 has an invalid length. [ 996.370571][T19969] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.3436'. [ 997.254832][T19980] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3441'. [ 997.284630][T19982] FAULT_INJECTION: forcing a failure. [ 997.284630][T19982] name failslab, interval 1, probability 0, space 0, times 0 [ 997.302563][T19982] CPU: 0 UID: 0 PID: 19982 Comm: syz.6.3442 Not tainted 6.12.0-rc6-syzkaller-00110-gff7afaeca1a1 #0 [ 997.313347][T19982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 997.323414][T19982] Call Trace: [ 997.326702][T19982] [ 997.329640][T19982] dump_stack_lvl+0x16c/0x1f0 [ 997.334329][T19982] should_fail_ex+0x497/0x5b0 [ 997.339013][T19982] ? fs_reclaim_acquire+0xae/0x150 [ 997.344125][T19982] should_failslab+0xc2/0x120 [ 997.348786][T19982] __kmalloc_node_noprof+0xd1/0x430 [ 997.353964][T19982] ? alloc_slab_obj_exts+0x41/0xa0 [ 997.359058][T19982] alloc_slab_obj_exts+0x41/0xa0 [ 997.363988][T19982] __memcg_slab_post_alloc_hook+0x2a7/0x9b0 [ 997.369866][T19982] ? kasan_save_track+0x14/0x30 [ 997.374707][T19982] kmem_cache_alloc_node_noprof+0x2e2/0x310 [ 997.380585][T19982] ? __alloc_skb+0x2b1/0x380 [ 997.385167][T19982] __alloc_skb+0x2b1/0x380 [ 997.389658][T19982] ? __pfx___alloc_skb+0x10/0x10 [ 997.394581][T19982] ? find_held_lock+0x2d/0x110 [ 997.399334][T19982] alloc_skb_with_frags+0xe4/0x850 [ 997.404432][T19982] ? __pfx_lock_release+0x10/0x10 [ 997.409438][T19982] ? trace_lock_acquire+0x14a/0x1d0 [ 997.414621][T19982] ? __pfx_mark_lock+0x10/0x10 [ 997.419370][T19982] sock_alloc_send_pskb+0x7f1/0x980 [ 997.424557][T19982] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 997.430261][T19982] ? selinux_socket_getpeersec_dgram+0x1a5/0x370 [ 997.436570][T19982] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 997.443235][T19982] unix_stream_sendmsg+0x6bd/0x1000 [ 997.448431][T19982] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 997.454157][T19982] sock_sendmsg+0x3cb/0x470 [ 997.458649][T19982] ? __pfx_sock_sendmsg+0x10/0x10 [ 997.463665][T19982] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 997.469280][T19982] splice_to_socket+0xaac/0x1040 [ 997.474228][T19982] ? __pfx_splice_to_socket+0x10/0x10 [ 997.480039][T19982] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 997.485928][T19982] ? do_splice_read+0x28d/0x370 [ 997.490784][T19982] ? __pfx_ovl_file_accessed+0x10/0x10 [ 997.496238][T19982] ? __pfx_splice_to_socket+0x10/0x10 [ 997.501603][T19982] direct_splice_actor+0x18f/0x6c0 [ 997.506708][T19982] splice_direct_to_actor+0x346/0xa40 [ 997.512070][T19982] ? __pfx_direct_splice_actor+0x10/0x10 [ 997.517692][T19982] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 997.523576][T19982] ? __pfx_file_has_perm+0x10/0x10 [ 997.528680][T19982] do_splice_direct+0x178/0x250 [ 997.533517][T19982] ? __pfx_do_splice_direct+0x10/0x10 [ 997.538875][T19982] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 997.544765][T19982] ? bpf_lsm_file_permission+0x9/0x10 [ 997.550118][T19982] ? security_file_permission+0x71/0x210 [ 997.555741][T19982] do_sendfile+0xb0c/0xe40 [ 997.560152][T19982] ? __pfx_do_sendfile+0x10/0x10 [ 997.565078][T19982] ? __fget_files+0x244/0x3f0 [ 997.569750][T19982] __x64_sys_sendfile64+0x1da/0x220 [ 997.575030][T19982] ? ksys_write+0x1ad/0x260 [ 997.579525][T19982] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 997.585231][T19982] do_syscall_64+0xcd/0x250 [ 997.589716][T19982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 997.595595][T19982] RIP: 0033:0x7f8a7917e719 [ 997.599991][T19982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 997.619580][T19982] RSP: 002b:00007f8a7a012038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 997.627978][T19982] RAX: ffffffffffffffda RBX: 00007f8a79335f80 RCX: 00007f8a7917e719 [ 997.635930][T19982] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 997.643900][T19982] RBP: 00007f8a7a012090 R08: 0000000000000000 R09: 0000000000000000 [ 997.651944][T19982] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000001 [ 997.659896][T19982] R13: 0000000000000000 R14: 00007f8a79335f80 R15: 00007fffe1c09228 [ 997.667863][T19982] [ 998.379968][ T7238] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 999.061263][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 999.074900][ T5825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 999.084354][ T5825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 999.092187][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 999.099974][ T5825] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 999.107254][ T5825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 999.126026][T13868] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 999.134966][T13868] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 999.142551][T13868] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 999.150439][T13868] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 999.161150][T13868] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 999.168834][T13868] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 999.648482][ T7238] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 1000.663937][T19994] chnl_net:caif_netlink_parms(): no params data found [ 1000.676529][T20012] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3449'. [ 1000.952976][T20031] bdev: Unknown parameter '4üÒK#4»' [ 1001.250979][T13868] Bluetooth: hci0: command tx timeout [ 1001.463342][T19994] bridge0: port 1(bridge_slave_0) entered blocking state [ 1001.474714][T19994] bridge0: port 1(bridge_slave_0) entered disabled state [ 1001.492562][T19994] bridge_slave_0: entered allmulticast mode [ 1001.504225][T19994] bridge_slave_0: entered promiscuous mode [ 1001.627736][T19994] bridge0: port 2(bridge_slave_1) entered blocking state [ 1001.644287][T19994] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.655749][T19994] bridge_slave_1: entered allmulticast mode [ 1001.668691][T19994] bridge_slave_1: entered promiscuous mode [ 1002.089759][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 1002.089774][ T29] audit: type=1400 audit(1731015940.482:3237): avc: denied { accept } for pid=20036 comm="syz.0.3454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1002.137134][T19994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1002.155078][T19994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1002.271415][T19994] team0: Port device team_slave_0 added [ 1002.281401][T19994] team0: Port device team_slave_1 added [ 1002.310165][T19994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1002.317206][T19994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1002.351607][T19994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1002.362633][T18477] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1002.366508][T19994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1002.379069][T19994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1002.405653][T19994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1002.438621][T19994] hsr_slave_0: entered promiscuous mode [ 1002.444568][T19994] hsr_slave_1: entered promiscuous mode [ 1002.450455][ T9] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1002.459321][T19994] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1002.466881][T19994] Cannot create hsr debugfs directory [ 1002.523117][T19994] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.546759][T18477] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82 [ 1002.568548][T18477] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1002.595540][T19994] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.609235][T18477] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.4b [ 1002.618638][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1002.618663][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1002.618692][ T9] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1002.633637][T18477] usb 7-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 1002.638988][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.670834][T19994] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.685855][T18477] usb 7-1: Product: syz [ 1002.694568][ T9] usb 4-1: config 0 descriptor?? [ 1002.696539][T18477] usb 7-1: config 0 descriptor?? [ 1002.717522][T19994] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.830873][T19994] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1002.840808][T19994] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1002.848295][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 1002.861226][T19994] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1002.871850][T19994] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1002.950080][T19994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1002.985708][T18477] ath6kl: Failed to submit usb control message: -71 [ 1003.006626][T19994] 8021q: adding VLAN 0 to HW filter on device team0 [ 1003.014886][T18477] ath6kl: unable to send the bmi data to the device: -71 [ 1003.024580][T19632] bridge0: port 1(bridge_slave_0) entered blocking state [ 1003.031675][T19632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1003.042098][T18477] ath6kl: Unable to send get target info: -71 [ 1003.052649][T18477] ath6kl: Failed to init ath6kl core: -71 [ 1003.053434][T19632] bridge0: port 2(bridge_slave_1) entered blocking state [ 1003.065479][T19632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1003.079897][T18477] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1003.104094][T18477] usb 7-1: USB disconnect, device number 29 [ 1003.282977][T19994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1003.327530][T13868] Bluetooth: hci0: command tx timeout [ 1003.897514][ T9] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1003.911655][T19994] veth0_vlan: entered promiscuous mode [ 1003.924456][T19994] veth1_vlan: entered promiscuous mode [ 1003.956715][T19994] veth0_macvtap: entered promiscuous mode [ 1003.962656][ T5903] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1004.004440][T19994] veth1_macvtap: entered promiscuous mode [ 1004.030852][T19994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1004.044507][T19994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.061616][T19994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1004.074908][T19994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.094310][T19994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1004.108782][T19994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.123760][T19994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1004.135074][ T5903] usb 1-1: Using ep0 maxpacket: 16 [ 1004.140894][ T8305] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 1004.146857][T19994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.151679][ T5903] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 1004.158052][T19994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1004.158073][T19994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.158093][T19994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1004.158106][T19994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.159036][T19994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1004.169543][ T5903] usb 1-1: config 0 has no interface number 0 [ 1004.183342][T19994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1004.192812][ T5903] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1004.248980][ T5903] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1004.249430][T19994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.261567][ T5903] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1004.274418][T19994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1004.278855][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.294053][T19994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.297096][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82 [ 1004.319100][ T5903] usb 1-1: Product: syz [ 1004.319118][ T5903] usb 1-1: Manufacturer: syz [ 1004.319132][ T5903] usb 1-1: SerialNumber: syz [ 1004.319822][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1004.326779][ T5903] usb 1-1: config 0 descriptor?? [ 1004.327663][T20062] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1004.327747][T20062] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1004.328740][T19994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1004.328758][T19994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.328773][T19994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1004.328784][T19994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.328798][T19994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1004.328811][T19994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.328828][T19994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1004.328841][T19994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.331808][T19994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1004.337906][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.4b [ 1004.337933][ T9] usb 5-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 1004.337978][ T9] usb 5-1: Product: syz [ 1004.344727][ T9] usb 5-1: config 0 descriptor?? [ 1004.351037][T19994] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.351076][T19994] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.351102][T19994] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.351127][T19994] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.498294][ T7758] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1004.498313][ T7758] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1004.532924][ T7758] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1004.624401][ T9] ath6kl: Failed to submit usb control message: -71 [ 1004.654292][ T7758] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1004.672602][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 1004.726211][ T9] ath6kl: Unable to send get target info: -71 [ 1004.746218][ T9] ath6kl: Failed to init ath6kl core: -71 [ 1004.753467][ T9] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1004.790541][ T9] usb 5-1: USB disconnect, device number 85 [ 1004.951977][T20072] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1004.964110][T20072] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1005.233897][ T5876] usb 4-1: USB disconnect, device number 66 [ 1005.437596][T13868] Bluetooth: hci0: command tx timeout [ 1005.446410][ T7259] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 1005.491182][ T5903] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1005.501909][ T5903] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 1005.513980][ T5903] asix 1-1:0.251: probe with driver asix failed with error -71 [ 1005.524252][ T5903] usb 1-1: USB disconnect, device number 77 [ 1006.078133][T20089] syz.5.3464: attempt to access beyond end of device [ 1006.078133][T20089] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1006.091516][T20089] hpfs: hpfs_map_sector(): read error [ 1006.764311][T20086] SELinux: Context system_u:object_r:devicekit_disk_exec_t:s0 is not valid (left unmapped). [ 1006.778309][T20088] Process accounting resumed [ 1006.790865][T20088] Process accounting resumed [ 1006.801605][ T29] audit: type=1400 audit(1731015945.192:3238): avc: denied { relabelto } for pid=20084 comm="syz.6.3463" name="bus" dev="tmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:devicekit_disk_exec_t:s0" [ 1006.834466][ T29] audit: type=1400 audit(1731015945.192:3239): avc: denied { associate } for pid=20084 comm="syz.6.3463" name="bus" dev="tmpfs" ino=656 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:devicekit_disk_exec_t:s0" [ 1006.954898][T20097] bdev: Unknown parameter '4üÒK#4»' [ 1007.468652][T20098] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1007.507133][T13868] Bluetooth: hci0: command tx timeout [ 1007.575772][T20095] smc: removing ib device syz2 [ 1007.871809][T20095] ------------[ cut here ]------------ [ 1007.877347][T20095] WARNING: CPU: 1 PID: 20095 at drivers/infiniband/sw/rxe/rxe_pool.c:116 rxe_pool_cleanup+0x41/0x60 [ 1007.888117][T20095] Modules linked in: [ 1007.891986][T20095] CPU: 1 UID: 0 PID: 20095 Comm: syz.4.3467 Not tainted 6.12.0-rc6-syzkaller-00110-gff7afaeca1a1 #0 [ 1007.902893][T20095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1007.913075][T20095] RIP: 0010:rxe_pool_cleanup+0x41/0x60 [ 1007.918545][T20095] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1f 48 83 bb 80 00 00 00 00 75 06 5b e9 75 27 3c f9 e8 70 27 3c f9 90 <0f> 0b 90 5b e9 66 27 3c f9 e8 71 b1 9d f9 eb da 66 66 2e 0f 1f 84 [ 1007.938322][T20095] RSP: 0000:ffffc9000bfaf1c8 EFLAGS: 00010246 [ 1007.944613][T20095] RAX: 0000000000040000 RBX: ffff8880295852f8 RCX: ffffc90015477000 [ 1007.952610][T20095] RDX: 0000000000040000 RSI: ffffffff885153e0 RDI: ffff888029585378 [ 1007.960585][T20095] RBP: ffffffff884fbd20 R08: 0000000000000005 R09: 0000000000000001 [ 1007.969015][T20095] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888029584648 [ 1007.976985][T20095] R13: ffff888029583fe0 R14: ffff888029583fe0 R15: ffff888029585058 [ 1007.984990][T20095] FS: 00007f0ae1d0a6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1007.993955][T20095] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1008.000667][T20095] CR2: 00007f5676c60300 CR3: 0000000049c80000 CR4: 00000000003526f0 [ 1008.008645][T20095] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1008.016618][T20095] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1008.024725][T20095] Call Trace: [ 1008.028165][T20095] [ 1008.031076][T20095] ? __warn+0xea/0x3d0 [ 1008.035136][T20095] ? rxe_pool_cleanup+0x41/0x60 [ 1008.039991][T20095] ? report_bug+0x3c0/0x580 [ 1008.044487][T20095] ? handle_bug+0x54/0xa0 [ 1008.049400][T20095] ? exc_invalid_op+0x17/0x50 [ 1008.054069][T20095] ? asm_exc_invalid_op+0x1a/0x20 [ 1008.059288][T20095] ? __pfx_rxe_dealloc+0x10/0x10 [ 1008.064221][T20095] ? rxe_pool_cleanup+0x40/0x60 [ 1008.069090][T20095] ? rxe_pool_cleanup+0x41/0x60 [ 1008.073916][T20095] ? rxe_pool_cleanup+0x40/0x60 [ 1008.078796][T20095] rxe_dealloc+0x26/0x110 [ 1008.083100][T20095] ? __pfx_rxe_dealloc+0x10/0x10 [ 1008.088175][T20095] ib_dealloc_device+0x46/0x230 [ 1008.093020][T20095] __ib_unregister_device+0x396/0x480 [ 1008.098400][T20095] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 1008.104273][T20095] ib_unregister_device_and_put+0x5a/0x80 [ 1008.109990][T20095] nldev_dellink+0x211/0x300 [ 1008.114819][T20095] ? __pfx_nldev_dellink+0x10/0x10 [ 1008.120094][T20095] ? cap_capable+0x1cf/0x240 [ 1008.124663][T20095] ? bpf_lsm_capable+0x9/0x10 [ 1008.129622][T20095] ? security_capable+0x7e/0x260 [ 1008.134630][T20095] ? ns_capable+0xd7/0x110 [ 1008.139059][T20095] ? __pfx_nldev_dellink+0x10/0x10 [ 1008.144164][T20095] rdma_nl_rcv_msg+0x388/0x6e0 [ 1008.149270][T20095] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 1008.154537][T20095] ? __pfx___lock_acquire+0x10/0x10 [ 1008.159752][T20095] ? __pfx___lock_acquire+0x10/0x10 [ 1008.164926][T20095] ? hlock_class+0x4e/0x130 [ 1008.169420][T20095] ? __lock_acquire+0xbdd/0x3ce0 [ 1008.174332][T20095] rdma_nl_rcv_skb.constprop.0.isra.0+0x2e6/0x450 [ 1008.180907][T20095] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 1008.187846][T20095] ? netlink_deliver_tap+0x1ae/0xd90 [ 1008.193209][T20095] ? selinux_nlmsg_lookup+0x265/0x4b0 [ 1008.198593][T20095] netlink_unicast+0x53c/0x7f0 [ 1008.203345][T20095] ? __pfx_netlink_unicast+0x10/0x10 [ 1008.209434][T20095] netlink_sendmsg+0x8b8/0xd70 [ 1008.214198][T20095] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1008.219492][T20095] ____sys_sendmsg+0xaaf/0xc90 [ 1008.224236][T20095] ? copy_msghdr_from_user+0x10b/0x160 [ 1008.229730][T20095] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1008.235020][T20095] ? __pfx___lock_acquire+0x10/0x10 [ 1008.240353][T20095] ___sys_sendmsg+0x135/0x1e0 [ 1008.245020][T20095] ? __pfx____sys_sendmsg+0x10/0x10 [ 1008.250302][T20095] ? lock_acquire+0x2f/0xb0 [ 1008.254996][T20095] ? __fget_files+0x40/0x3f0 [ 1008.259614][T20095] ? fdget+0x176/0x210 [ 1008.263663][T20095] __sys_sendmsg+0x117/0x1f0 [ 1008.268388][T20095] ? __pfx___sys_sendmsg+0x10/0x10 [ 1008.273473][T20095] ? __x64_sys_futex+0x1e1/0x4c0 [ 1008.278441][T20095] do_syscall_64+0xcd/0x250 [ 1008.282917][T20095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.289441][T20095] RIP: 0033:0x7f0ae0f7e719 [ 1008.293864][T20095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1008.313708][T20095] RSP: 002b:00007f0ae1d0a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1008.322121][T20095] RAX: ffffffffffffffda RBX: 00007f0ae1135f80 RCX: 00007f0ae0f7e719 [ 1008.330096][T20095] RDX: 0000000020000000 RSI: 00000000200002c0 RDI: 0000000000000007 [ 1008.338200][T20095] RBP: 00007f0ae0ff139e R08: 0000000000000000 R09: 0000000000000000 [ 1008.346167][T20095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1008.354330][T20095] R13: 0000000000000000 R14: 00007f0ae1135f80 R15: 00007ffc2502aaa8 [ 1008.362320][T20095] [ 1008.365318][T20095] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1008.372573][T20095] CPU: 1 UID: 0 PID: 20095 Comm: syz.4.3467 Not tainted 6.12.0-rc6-syzkaller-00110-gff7afaeca1a1 #0 [ 1008.383310][T20095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1008.393336][T20095] Call Trace: [ 1008.396598][T20095] [ 1008.399503][T20095] dump_stack_lvl+0x3d/0x1f0 [ 1008.404071][T20095] panic+0x71d/0x800 [ 1008.407943][T20095] ? __pfx_panic+0x10/0x10 [ 1008.412349][T20095] ? show_trace_log_lvl+0x29d/0x3d0 [ 1008.417623][T20095] ? rxe_pool_cleanup+0x41/0x60 [ 1008.422449][T20095] check_panic_on_warn+0xab/0xb0 [ 1008.427363][T20095] __warn+0xf6/0x3d0 [ 1008.431233][T20095] ? rxe_pool_cleanup+0x41/0x60 [ 1008.436056][T20095] report_bug+0x3c0/0x580 [ 1008.440373][T20095] handle_bug+0x54/0xa0 [ 1008.444511][T20095] exc_invalid_op+0x17/0x50 [ 1008.448987][T20095] asm_exc_invalid_op+0x1a/0x20 [ 1008.453813][T20095] RIP: 0010:rxe_pool_cleanup+0x41/0x60 [ 1008.459250][T20095] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1f 48 83 bb 80 00 00 00 00 75 06 5b e9 75 27 3c f9 e8 70 27 3c f9 90 <0f> 0b 90 5b e9 66 27 3c f9 e8 71 b1 9d f9 eb da 66 66 2e 0f 1f 84 [ 1008.478845][T20095] RSP: 0000:ffffc9000bfaf1c8 EFLAGS: 00010246 [ 1008.484902][T20095] RAX: 0000000000040000 RBX: ffff8880295852f8 RCX: ffffc90015477000 [ 1008.492866][T20095] RDX: 0000000000040000 RSI: ffffffff885153e0 RDI: ffff888029585378 [ 1008.500819][T20095] RBP: ffffffff884fbd20 R08: 0000000000000005 R09: 0000000000000001 [ 1008.508771][T20095] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888029584648 [ 1008.516722][T20095] R13: ffff888029583fe0 R14: ffff888029583fe0 R15: ffff888029585058 [ 1008.524670][T20095] ? __pfx_rxe_dealloc+0x10/0x10 [ 1008.529588][T20095] ? rxe_pool_cleanup+0x40/0x60 [ 1008.534423][T20095] ? rxe_pool_cleanup+0x40/0x60 [ 1008.539246][T20095] rxe_dealloc+0x26/0x110 [ 1008.543548][T20095] ? __pfx_rxe_dealloc+0x10/0x10 [ 1008.548456][T20095] ib_dealloc_device+0x46/0x230 [ 1008.553283][T20095] __ib_unregister_device+0x396/0x480 [ 1008.558627][T20095] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 1008.564501][T20095] ib_unregister_device_and_put+0x5a/0x80 [ 1008.570196][T20095] nldev_dellink+0x211/0x300 [ 1008.574764][T20095] ? __pfx_nldev_dellink+0x10/0x10 [ 1008.579879][T20095] ? cap_capable+0x1cf/0x240 [ 1008.584445][T20095] ? bpf_lsm_capable+0x9/0x10 [ 1008.589096][T20095] ? security_capable+0x7e/0x260 [ 1008.594023][T20095] ? ns_capable+0xd7/0x110 [ 1008.598411][T20095] ? __pfx_nldev_dellink+0x10/0x10 [ 1008.603497][T20095] rdma_nl_rcv_msg+0x388/0x6e0 [ 1008.608237][T20095] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 1008.613497][T20095] ? __pfx___lock_acquire+0x10/0x10 [ 1008.618667][T20095] ? __pfx___lock_acquire+0x10/0x10 [ 1008.623844][T20095] ? hlock_class+0x4e/0x130 [ 1008.628325][T20095] ? __lock_acquire+0xbdd/0x3ce0 [ 1008.633233][T20095] rdma_nl_rcv_skb.constprop.0.isra.0+0x2e6/0x450 [ 1008.639623][T20095] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 1008.646548][T20095] ? netlink_deliver_tap+0x1ae/0xd90 [ 1008.651819][T20095] ? selinux_nlmsg_lookup+0x265/0x4b0 [ 1008.657164][T20095] netlink_unicast+0x53c/0x7f0 [ 1008.661905][T20095] ? __pfx_netlink_unicast+0x10/0x10 [ 1008.667167][T20095] netlink_sendmsg+0x8b8/0xd70 [ 1008.671904][T20095] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1008.677175][T20095] ____sys_sendmsg+0xaaf/0xc90 [ 1008.681916][T20095] ? copy_msghdr_from_user+0x10b/0x160 [ 1008.687348][T20095] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1008.692628][T20095] ? __pfx___lock_acquire+0x10/0x10 [ 1008.697810][T20095] ___sys_sendmsg+0x135/0x1e0 [ 1008.702461][T20095] ? __pfx____sys_sendmsg+0x10/0x10 [ 1008.707638][T20095] ? lock_acquire+0x2f/0xb0 [ 1008.712110][T20095] ? __fget_files+0x40/0x3f0 [ 1008.716681][T20095] ? fdget+0x176/0x210 [ 1008.720730][T20095] __sys_sendmsg+0x117/0x1f0 [ 1008.725308][T20095] ? __pfx___sys_sendmsg+0x10/0x10 [ 1008.730398][T20095] ? __x64_sys_futex+0x1e1/0x4c0 [ 1008.735331][T20095] do_syscall_64+0xcd/0x250 [ 1008.739808][T20095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.745681][T20095] RIP: 0033:0x7f0ae0f7e719 [ 1008.750079][T20095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1008.769662][T20095] RSP: 002b:00007f0ae1d0a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1008.778044][T20095] RAX: ffffffffffffffda RBX: 00007f0ae1135f80 RCX: 00007f0ae0f7e719 [ 1008.785986][T20095] RDX: 0000000020000000 RSI: 00000000200002c0 RDI: 0000000000000007 [ 1008.793930][T20095] RBP: 00007f0ae0ff139e R08: 0000000000000000 R09: 0000000000000000 [ 1008.801875][T20095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1008.809817][T20095] R13: 0000000000000000 R14: 00007f0ae1135f80 R15: 00007ffc2502aaa8 [ 1008.817779][T20095] [ 1008.820971][T20095] Kernel Offset: disabled [ 1008.825357][T20095] Rebooting in 86400 seconds..