last executing test programs: 8m7.648213119s ago: executing program 1 (id=52): setsockopt(0xffffffffffffffff, 0x2, 0xffff, &(0x7f0000000680)="dd2412134ef774204e305156d9e32acb84846ddeae966419b24c36033e1a6e3084fe10f8241fd51fcdfedf62a13acc21bf020f53488cad0d492a69e56c", 0x3d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x30d3, &(0x7f00000006c0)) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0x19}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r6, 0x0, 0x10001, 0x0, 0x4, 0xdaa50, 0x31f09b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000001480)={0x48, 0x7, r6, 0x0, 0x10000, 0x0, 0x8, 0x2a7345, 0x213173}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f00000002c0)={0x48, 0x6, r6, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}) listen(0xffffffffffffffff, 0x20000005) socket$inet6(0xa, 0x6, 0x0) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = creat(&(0x7f0000000b00)='./file0\x00', 0x0) close(r8) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000b4a30000000000000180001e18170001d0dbf6d65293de19de87eb201a1a2cd15f66944e202aaf27afc18e5996ea9e3324dd06225b61dbdc7d2aa119d3d65c635b", @ANYRES32, @ANYBLOB="00000000000000009500000000000000101ac0ff0000000085100000050000001800000081000000000000000200000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70200000000000085000000860000008f470c00f0ffffff9500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x14, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000400)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0x3, 0x1, 0x8aa}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480), 0x10, 0xa8c3, @void, @value}, 0x94) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f0000000740)={0x0, 0x0, r10}) 8m6.069719263s ago: executing program 1 (id=57): mknod$loop(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rmdir(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x8001, @local}}}, 0x32) connect$pppl2tp(r1, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x1, 0x3}}, 0x26) getsockopt$bt_BT_SECURITY(r1, 0x111, 0x3, 0x0, 0x20000000) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @host}, 0x10) ppoll(&(0x7f0000000040)=[{r4, 0x1}], 0x1, &(0x7f0000000340)={0x0, 0x3938700}, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtaction={0x74, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x60, 0x1, [@m_ife={0x5c, 0x1, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @dev}, @TCA_IFE_TYPE={0x6, 0x5, 0x40}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}, 0x1, 0x500}, 0x0) 8m5.0283014s ago: executing program 1 (id=60): syz_open_dev$tty20(0xc, 0x4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(r0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000080000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000080)={0x1f, @none}, 0x8) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000240)=0x60, 0x2) unshare(0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) kexec_load(0x0, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10000}, {0x0, 0x0, 0x3e0000}], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x82402, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_getnetconf={0x1c, 0x52, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000540)={'wlan0\x00', {0x2, 0x0, @private=0xf30a0000}}) syz_emit_ethernet(0xed, &(0x7f0000000200)={@remote, @broadcast, @void, {@mpls_uc={0x8847, {[{0x81}], @ipv6=@generic={0x4, 0x6, "ffa31d", 0xb3, 0x67, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[@routing={0x3c, 0x8, 0x1, 0x9, 0x0, [@remote, @empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast1]}, @routing={0x21, 0x2, 0x1, 0x2, 0x0, [@mcast2]}, @srh={0x33, 0x2, 0x4, 0x1, 0x7, 0x0, 0x240, [@local]}, @fragment={0x8, 0x0, 0x5, 0x0, 0x0, 0x7, 0x65}], "1ac6a20a0d0106c9a56b13df1a74812aa3cd8b18a13738e649cac0c4051ed26ebf17015802d001bdbbc96474927681f6a0b79c"}}}}}}, &(0x7f00000001c0)={0x0, 0x4, [0x4cd, 0xa5a, 0x223, 0xfc0]}) 8m0.90043371s ago: executing program 1 (id=63): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000000140)) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r2) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r5, 0x0, 0x0, &(0x7f0000000000), 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) setitimer(0x2, &(0x7f0000000080)={{0x6, 0xfffffffffffffffb}, {0x7, 0x100000001}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x20}}, 0x0) prctl$PR_GET_NAME(0x10, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) syz_io_uring_setup(0xde9, &(0x7f0000000340)={0x0, 0x8994, 0x2, 0x0, 0x336}, &(0x7f00000003c0), &(0x7f0000000300)) ioctl$VIDIOC_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f0000000240)={0x0, @reserved}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000040000000000000090000003c00031400020074756ef05037a29e3650030000001e0008000300000000000800010001000000140006002001000000000000000000000000000100"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 7m59.937135294s ago: executing program 1 (id=69): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$alg(0x26, 0x5, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0xfc) bind$alg(r3, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') ioctl$RTC_AIE_ON(r5, 0x7001) syz_fuse_handle_req(r5, &(0x7f0000002240)="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", 0x2000, 0x0) ioctl$I2C_SLAVE(r5, 0x703, 0x3e1) io_submit(0x0, 0x2000000000000225, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0xfffb, r4, &(0x7f0000000340), 0x2d}]) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r5, {r5}}, './file0\x00'}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000040)=[@mss={0x2, 0x4}, @timestamp, @window={0x3, 0x3ff, 0x8}], 0x3) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x170, 0x1170, 0x1398, 0x0, 0x1170, 0x2b0, 0x1398, 0x1398, 0x2b0, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [0x0, 0x0, 0x600], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x108, 0x170, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'geneve1\x00', 'veth1_vlan\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) 7m59.019936673s ago: executing program 1 (id=70): mknod$loop(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rmdir(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x8001, @local}}}, 0x32) connect$pppl2tp(r1, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x1, 0x3}}, 0x26) getsockopt$bt_BT_SECURITY(r1, 0x111, 0x3, 0x0, 0x20000000) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @host}, 0x10) ppoll(&(0x7f0000000040)=[{r4, 0x1}], 0x1, &(0x7f0000000340)={0x0, 0x3938700}, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtaction={0x74, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x60, 0x1, [@m_ife={0x5c, 0x1, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @dev}, @TCA_IFE_TYPE={0x6, 0x5, 0x40}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}, 0x1, 0x500}, 0x0) 7m43.946853993s ago: executing program 32 (id=70): mknod$loop(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rmdir(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x8001, @local}}}, 0x32) connect$pppl2tp(r1, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x1, 0x3}}, 0x26) getsockopt$bt_BT_SECURITY(r1, 0x111, 0x3, 0x0, 0x20000000) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @host}, 0x10) ppoll(&(0x7f0000000040)=[{r4, 0x1}], 0x1, &(0x7f0000000340)={0x0, 0x3938700}, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtaction={0x74, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x60, 0x1, [@m_ife={0x5c, 0x1, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @dev}, @TCA_IFE_TYPE={0x6, 0x5, 0x40}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}, 0x1, 0x500}, 0x0) 4m50.197272364s ago: executing program 3 (id=843): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r0, 0x3, 0x0, 0x40, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r4, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x44) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@cgroup=r1, 0x20, 0x0, 0x3, &(0x7f00000003c0)=[0x0], 0x1, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) ioctl$VHOST_VDPA_GET_DEVICE_ID(r1, 0x8004af70, &(0x7f0000000500)) socket$kcm(0x29, 0x5, 0x0) (async) socket$nl_crypto(0x10, 0x3, 0x15) (async) quotactl_fd$Q_GETINFO(r3, 0x1, 0xee00, &(0x7f0000000540)) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000580), 0x4042, 0x0) (async) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) connect$bt_sco(r0, &(0x7f00000005c0), 0x8) (async) write$P9_RVERSION(r1, &(0x7f0000000600)={0x15, 0x65, 0xffff, 0x8, 0x8, '9P2000.L'}, 0x15) (async) getsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000640), &(0x7f0000000680)=0x4) (async) sendto$rxrpc(r1, &(0x7f00000006c0)="e537527997126a275e36de9702c9146ccc7fa6d2bb18cf3cafa9aaf3600ab4e6f893e557c25066268c606bc4b927b55a3b63e0f260629fabc3b88d8b967013d9b41eb4a7b73dfbc1568cd01ee3c965203b2a0906ef6dbd1dc39fbd1eab4b767b616884ffc43967e0bfeeda86a063dcb8285cab9e3c8b8c4aff9212cdc75c2f7e52f21931562c21a9525072b1ca3f854afca549e64e79a1aae586dab344e84f5a1a3f05838e65bdfa61fea4d08acb2be57bc4114a068df6351783e46da4f053", 0xbf, 0x24040019, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000780)={'batadv0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3ff, '\x00', r5, r0, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) write$cgroup_devices(r0, &(0x7f0000000840)={'b', ' *:* ', 'm\x00'}, 0x8) (async) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000880)=0x208800, 0x4) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000940)={0x9, &(0x7f00000008c0)=[{0xeb9a, 0x4, 0x8, 0x9}, {0x6, 0x8, 0xfe, 0x6}, {0x8001, 0x4, 0x0, 0x5}, {0xea5c, 0x3, 0x4, 0x1}, {0x5, 0x6, 0x1, 0x8}, {0x4, 0x7, 0x4, 0x81}, {0x9, 0x7, 0x4, 0xfffffffd}, {0xc, 0x7, 0x1f, 0x5}, {0xd, 0x5, 0x5e, 0x1a}]}, 0x10) (async) ioctl$RTC_VL_CLR(r1, 0x7014) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) (async) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000980)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e20, 0x92d3, @mcast1, 0xf}}, 0x24) 4m48.711164294s ago: executing program 3 (id=845): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) r1 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f000010d000/0x3000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) get_mempolicy(0x0, 0x0, 0x481, &(0x7f000000d000/0x4000)=nil, 0x3) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000580)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f00008c4000/0x1000)=nil, 0x1000}}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r2, &(0x7f0000007ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010101, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000000)=0x402, 0x4) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000240)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, r4, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_PEC(r8, 0x705, 0x8000000000000000) 4m46.660931587s ago: executing program 3 (id=851): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x3, 0x80000, 0x3) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r7], 0x44}}, 0x0) r9 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r9, 0x40045532, &(0x7f0000000100)) r10 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r10, 0x80045017, 0x0) r11 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$snddsp(r11, &(0x7f0000000200)="a38d", 0x2) ioctl$SNDRV_PCM_IOCTL_DRAIN(r11, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r11, 0x40084146, &(0x7f00000003c0)=0x2) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32, @ANYBLOB="10007d80", @ANYRES16=r4], 0x2c}}, 0x0) 4m45.795175459s ago: executing program 3 (id=852): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) syz_emit_ethernet(0x6c, &(0x7f0000000340)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x2, 0x0, [0x0], "7f1a"}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x0]}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x61b}}}}}}}}, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000580), 0x3, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f910, 0x8000, '\x00', @p_u8=&(0x7f0000000080)}}) r1 = socket(0x10, 0x3, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1c00000021006bcd210002006e04fcff80000010000000017aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000640)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0xa, r2, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000280)='dd:\x81b\x80\xfd') mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) getresuid(&(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000240)=0x0) getgroups(0x3, &(0x7f00000003c0)=[0x0, 0xee01, 0x0]) lchown(&(0x7f0000000100)='./file0\x00', r3, r4) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000730113000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 4m45.69714874s ago: executing program 3 (id=853): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e80)={0x11, 0x15, &(0x7f0000001b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1e}, [@tail_call, @alu={0x4, 0x0, 0xc, 0x3, 0x1, 0xfffffffffffffffe}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80}, @map_fd={0x18, 0x7}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000001c00)='GPL\x00', 0x4, 0xc, &(0x7f0000001c40)=""/12, 0x41000, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001c80)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000001cc0)={0x4, 0x5, 0x8, 0xffffe87a}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001e00)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001e40)=[{0x2, 0x2, 0xc, 0x7}], 0x10, 0xfff, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = getpid() (async) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x7, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000002c0)) (async) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000340)={0x0, 0xffffffffffff16bf, 0x139}) (async) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) (async) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df00000000000000000009f600"}) (async) r4 = syz_open_pts(0xffffffffffffffff, 0x41101) dup3(r4, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c030002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000001f40)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f0000000240)=r6) (async) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000080)=r6) (async) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r7, 0x50009417, &(0x7f0000000b40)={{r1}, r6, 0x1a, @inherit={0x88, &(0x7f0000000940)=ANY=[@ANYBLOB="010000000000000008000000000000000b000000272af578967f21b5000000001400000000000000010000000100000002000000000000000400000000000000280f00000000000006000000000000001307000000000000000000000000000002000000000000001c06000000000000080000000000000009000000000000000500000000000000"]}, @devid=r3}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r9, &(0x7f0000000080)={0x0, 0x23ae7d3519b01bda, &(0x7f00000000c0)=[{&(0x7f0000000140)="fb6bba8839fe8bc048c0cdafd1428437b3c8026bdfeb6db4ee9bcb25b1811d40a203bf40b3a7da5a8a64db04ed6dd26eea2a37229c339b1f91201c2796", 0x3d}], 0x1}, 0x881) (async) recvmsg(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x400140fe) (async) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (async) r10 = mq_open(&(0x7f000084dff0)='!selynuxselinux\x00', 0x6e93ebbbcc0884f2, 0x184, &(0x7f0000000000)={0x2000000000002000, 0x1, 0x3}) mq_timedsend(r10, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r10, 0x0, 0x0, 0x0, 0x0) (async) mq_timedreceive(r10, &(0x7f0000000740)=""/188, 0xbc, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 4m45.282264856s ago: executing program 3 (id=855): ioperm(0xb0a, 0x7, 0x40000000000006) r0 = userfaultfd(0x801) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) getresgid(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0x2, &(0x7f0000000140)={0x80000000000009, 0xfffffffffffffffb}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000780)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0}, 0x68) brk(0x20ff8000) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x50, 0x7, 0x0, 0x3}, {0x28, 0x0, 0x40, 0x8005}, {0x6}]}, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000040)={[0x2600000000000000, 0xa0, 0x7, 0x40, 0x4, 0xfff, 0x9, 0x1, 0x8, 0x1, 0x1, 0x4, 0x3, 0x9, 0x5a94, 0x9], 0x80a0000, 0x96044}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000793000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffff0180c2250000080045000078006500000029907800002000e000000100000000006490782f76d816060d0000c13083c4d6a020020000000000c123000000bfd8a5dd20391145badd28fd7f0ffc0e896f38da000000000000000bb10000085b2d5da3fc2336c92d641aa7e42e000000000000000000bb3b2195c4b058706558a70964bef1f0524a72fc460b8cd26e095f2488642507c685a499a84e7579523a1043a88325eb9ace7a0af583459678"], 0x0) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f0000000180)={0xa, {0xffffffff, 0x9b, 0x5, 0x3}}) syz_emit_ethernet(0xfe53, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffff0000300000002000889078ac1e0001ac1414aa0c009078000b03b0a0fd1100450000000000000000000000e0000001e0000002000000000000000000aff643e2f94cf4713fce7121163d06a7cec0a7b838b5bc5ec9f711399a3f6001535d771d0e89faaf9499104d5440"], 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00001b5000/0x2000)=nil, 0x2000}, 0x3}) poll(&(0x7f0000000000)=[{r0}], 0x1, 0xe2) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x4, 0x2}) 4m44.55605678s ago: executing program 33 (id=855): ioperm(0xb0a, 0x7, 0x40000000000006) r0 = userfaultfd(0x801) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) getresgid(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0x2, &(0x7f0000000140)={0x80000000000009, 0xfffffffffffffffb}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000780)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0}, 0x68) brk(0x20ff8000) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x50, 0x7, 0x0, 0x3}, {0x28, 0x0, 0x40, 0x8005}, {0x6}]}, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000040)={[0x2600000000000000, 0xa0, 0x7, 0x40, 0x4, 0xfff, 0x9, 0x1, 0x8, 0x1, 0x1, 0x4, 0x3, 0x9, 0x5a94, 0x9], 0x80a0000, 0x96044}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000793000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffff0180c2250000080045000078006500000029907800002000e000000100000000006490782f76d816060d0000c13083c4d6a020020000000000c123000000bfd8a5dd20391145badd28fd7f0ffc0e896f38da000000000000000bb10000085b2d5da3fc2336c92d641aa7e42e000000000000000000bb3b2195c4b058706558a70964bef1f0524a72fc460b8cd26e095f2488642507c685a499a84e7579523a1043a88325eb9ace7a0af583459678"], 0x0) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f0000000180)={0xa, {0xffffffff, 0x9b, 0x5, 0x3}}) syz_emit_ethernet(0xfe53, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffff0000300000002000889078ac1e0001ac1414aa0c009078000b03b0a0fd1100450000000000000000000000e0000001e0000002000000000000000000aff643e2f94cf4713fce7121163d06a7cec0a7b838b5bc5ec9f711399a3f6001535d771d0e89faaf9499104d5440"], 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00001b5000/0x2000)=nil, 0x2000}, 0x3}) poll(&(0x7f0000000000)=[{r0}], 0x1, 0xe2) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x4, 0x2}) 14.247672333s ago: executing program 6 (id=1889): r0 = userfaultfd(0x801) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)='ub\xce\x00\x00\x00') mount(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='ubifs\x00', 0x8000, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000000), 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_dev$dri(0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@newtaction={0x180, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x16c, 0x1, [@m_ife={0x168, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x200000, 0x5, 0x80}}}]}, {0x121, 0x6, "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"}, {0xc, 0x3}, {0xc}}}]}]}, 0x180}}, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 13.49292194s ago: executing program 0 (id=1892): semtimedop(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8800}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES8=r2, @ANYRESHEX=0x0, @ANYRES8=r3, @ANYRES32=r5, @ANYRES16=r1], 0x30}}, 0x4) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000040)=[r8], &(0x7f0000000200), 0x0, &(0x7f0000000340)}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) preadv(r9, &(0x7f0000000240), 0x0, 0x0, 0x1000) semtimedop(0x0, &(0x7f0000000040)=[{0x4}], 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)) add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, &(0x7f00000001c0)="8b", 0x1, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) 12.37248158s ago: executing program 0 (id=1893): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793b10d1050120000901020300004d2f9d93b3e42200"/36], 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T4(r1, 0x103, 0x3, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) r2 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) sendmsg(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) (async) r3 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x0, 0x0, @multicast1}}}}}, 0x0) (async) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) sendmsg(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) r6 = gettid() r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x14001, 0x0) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r6}, &(0x7f0000bbdffc)=0x0) (async) r9 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r9, &(0x7f0000000240)=""/248, 0xf8) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x10201, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) (async) ioctl$BTRFS_IOC_BALANCE(r10, 0x5000940c, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) (async) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x3, 0x1, @mcast2}}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r7, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x6, 0x0) (async) timer_settime(r8, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 10.83475119s ago: executing program 2 (id=1896): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x5, 0x139800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x8010, r0, 0xeee21000) r4 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x8, 0x400180) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000080)={0x0, 0x0, 0x12, 0x1b, 0x100, &(0x7f00000000c0)="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"}) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x400100bce) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "5b979e01d2038d84"}}, 0x48}}, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x5, 0x3, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x1, 0x0, 0x0, "9dfc47318ccc3455"}}, 0x48}}, 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) pidfd_send_signal(r8, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffb000/0x2000)=nil) 9.8326395s ago: executing program 2 (id=1899): ioprio_set$pid(0x1, 0x0, 0x2000) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)="39107bd940749db883943806fe2a523f4be6fe46789a2c956965caa4c976cbd2b639609ba68618ef9407a916d50bf0485a891da71c42c8964fb73ba53421c00d92d250cc573dd3168387c36856d5468e13ea4e79ed2fcfbca163aaf103f790dc4aa6dd708e4907caac682be8884359097a2790d099f692287d3c", 0x7a}, 0x1, 0x0, 0x0, 0x382ba9259eb3944c}, 0x80) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xffffff10) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x20000004) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x7, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b", 0x8b, 0xc000, 0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000240)=ANY=[@ANYBLOB="f0000000100001000000000000000000ac1e0001000000000000000000000000fe8000000000000000000000000000aa000000000800"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe880000000000000000000000000001000000006c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffffff7ffffff000000000000000000000000000000000000000000000010000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001060000000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x4004050}, 0x11) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000000)="d2", 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) recvmmsg(r3, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 9.328998407s ago: executing program 4 (id=1900): sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000003f0000000c009900000000000000000044005e80080005000000000008000300000000000825dd0000000000100001000000000000000000000000000800070000000000080001"], 0x64}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000005"], 0x114}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, 0x0) syz_usb_connect(0x2, 0x5f, &(0x7f0000000380)=ANY=[@ANYBLOB="05010000b1f203401e0903003bd70102030109024d00010000000009040000050095c20009050000000000000007058433c4"], 0x0) 8.858279207s ago: executing program 0 (id=1902): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r0}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)) getpid() 8.796907902s ago: executing program 2 (id=1904): io_uring_setup(0xdac, &(0x7f0000000180)) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0xc08c5335, &(0x7f0000000180)={0x0, 0x80, 0xfffffffd}) socket$unix(0x1, 0x5, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x1000000, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0xfdfffff7}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) 8.548902533s ago: executing program 0 (id=1906): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = getpid() prlimit64(r2, 0xe, &(0x7f0000000140)={0x0, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) io_uring_setup(0x0, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendto$llc(r7, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000040)=0xb7, 0x4) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, 0x0) bind$inet(r1, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7d2}) socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xb}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 7.745516768s ago: executing program 2 (id=1907): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000001e00008500000082000000950000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) fsopen(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000280), 0x9) openat$cgroup_procs(r5, 0x0, 0x2, 0x0) r7 = openat$cgroup_procs(r5, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x200002, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[@ANYBLOB='+pids'], 0x6) 6.660782108s ago: executing program 4 (id=1908): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, r0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) mremap(&(0x7f000024b000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00007d5000/0x3000)=nil) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="1400000035000b63d25a80da8c2594f90724fc60", 0x14}], 0x1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={0x4c, r5, 0x1, 0x0, 0x0, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xab}}, {0x8}, {0x6}}]}, 0x4c}}, 0x0) pipe(&(0x7f0000000000)) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000200)={0x1fe}, &(0x7f0000000040)={0x0, 0x989680}, 0x0) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)="711f04800000000000000c55f538", 0xe}}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000002c80)=0x142, 0x4) 5.38817607s ago: executing program 4 (id=1909): r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x20, 0x23, 0xcd, {0xcd, 0x21, "5eb1e462ea8dc674fda99f915a2e0971d0f1e165256c458ab4cad5edc309f1dcf35232d8d6cc8e2cc056ead17f6d32e4cec3483c5a860681849b0f581ffbf2a2cb4833c0a74b53b1954cee6113e39ad18fe535459d9a9e14b73190deccb310e861edfa8eada266d501a060c878f6b3f5cc268621673a2a71315be3dedc6a6c815fd66177279a718469838d71b0411b2fc4886a9f3c3159b79caedb779b8bdc902f34ab144b171d0c0c5a8ccef0308643566f7390c1dcc2f78cbe5d9cc4761ff1e5d622d0e26c98df05c6b3"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x340a}}, &(0x7f0000001380)={0x0, 0xf, 0xf5, {0x5, 0xf, 0xf5, 0x4, [@generic={0xd1, 0x10, 0xa, "b9633cafd7233660ac8a1763fae2fcd3d9c4b795cf039c114f6287d363cd94a5fb38c7dfa31b4cbeab05432b5bdb54a38b1cf2529a0093c6e9ad0ef14df1b208b76f1bea038805310fb9fca2afe690acb64fa4d59f021266358c8767a95c5bd0d2c49189164bd8a97f3f5f412269ea9cbb10911b0c5180719bb75e7617a15395738219dbda31521cd64f4f4923b2206c754a5f8fef36214e625568fab58afb4d33ff1eb6eac4c85baf802e38529c5af763eb0d923e7f1fb9c7486c98f1b760e0a3cbf09af3ecb299a96636391bfb"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x75, 0x0, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x1f, 0x20, 0xf5a6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x43, 0xff, 0x5, 0x6, 0x6}]}}, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x2, 0x7f, 0x3, "278bd2d8", "1424325e"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xb7, 0x0, 0x1, 0x78, 0x8, 0x4, 0x9}}}, &(0x7f00000018c0)={0x84, &(0x7f0000001480)={0x40, 0x17, 0x75, "1d2349cb91c905c679bd36e35c287dd374c040e4f0a18c8babcc13b8424295dafdee870d307e3b3b834168f9242ee494bb0b75cdcda0310285ae0d05b53687b0bdedacb3165fdeaf5e87b2e061129b1d2e3da6c1f48665c22ad922f83644054af14c8cbe941a5e964bab1374de18cf698fda84fa40"}, &(0x7f0000001500)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000001540)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001580)={0x20, 0x0, 0x4, {0x6}}, &(0x7f00000015c0)={0x20, 0x0, 0x4, {0x10, 0x80}}, &(0x7f0000001600)={0x40, 0x7, 0x2, 0x7ff}, &(0x7f0000001640)={0x40, 0x9, 0x1, 0xe3}, &(0x7f0000001680)={0x40, 0xb, 0x2, "c8a2"}, &(0x7f00000016c0)={0x40, 0xf, 0x2, 0x10}, &(0x7f0000001700)={0x40, 0x13, 0x6, @remote}, &(0x7f0000001740)={0x40, 0x17, 0x6}, &(0x7f0000001780)={0x40, 0x19, 0x2, "2e1d"}, &(0x7f00000017c0)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001800)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000001840)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000001880)={0x40, 0x21, 0x1, 0x7}}) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e0050000000000008877fbac141516e0000001440404feb180008903040000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0103461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0x14, 0x60000000, 0x0, 0xfffffffe}, 0x2c) (async) mq_timedsend(r0, &(0x7f0000000380)="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", 0xfd1, 0x0, 0x0) 5.231403574s ago: executing program 6 (id=1910): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000380)="3838e306473f63c54ffd217cfd8396830acf70da93535d6604201aa881e11bab42e17b6782bf5ee7112225b10474d73620d14675bf42bd96e6302c9ca9f7c7eddebdd40c6e5c66923d5218f622dca1f229bffcdac0d46b19d8f0680d8aeebd3de4f23fe35c51f39e5e7270c0f958f20b58", 0x71}, {&(0x7f0000000400)="484a848c6990254c8036f522760179f3c420636ffdfdd6c9abefd2ad168c53da34dce96b9af05afd5a4467ffd61e137c2536c1561c6cf2772e423bcaa5f523570e8289cbdd315904f6539bf524c63a186158d41537bc8d8560880fcd93fe0840da04596a5b18090474e5d70d6aeb511d37738cfe902985ab93ebf14549f56db33f740bd903550768d90629d05a85aa", 0x8f}, {&(0x7f00000004c0)="a58ea11782123ffb6e66e649c1a236bccf9a6668ad4ff89310cf1c08e42c1aaf84e67a16f2625d5f42eaf73469c051a3410467e177a2ff8b82", 0x39}, {&(0x7f0000000500)="ba7915ff4c6a04e213b02cd81f5988b116d45f0b8c9b5e4283a91e9cb41da8ba3a2bff3c8ce98b79d8483f9843a01099eab238a4ef0bd5db798e17a5706906a3444318fd726f8fff76d7d8e1805a4d20a9fd4bd15e8c66cbf28844d45d1a56679c5f282cd7ee3d49162257967722ab21f31797bdb31dc9f5e75f3ed688b87610c651c16e1b0011645611c6016516761f48728cc8444dfcb24dea6a63c4f8e5798879b3d900b244f996e5f9f19259049b1bde86d81fdc7cde06e4d15664de9dd0344ab8548a105f9c67af59f428ccc539ccda2cb459a2f90740000bf52507c14cd4c9df70", 0xe4}], 0x4}}, {{&(0x7f0000000640)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000680)="728af15b27a1b18d8e56712664928411ca2c434f8ac5db448427dd4f455b851e308d5801684957916bb85d13c2d1db9980bf812db51fbfed1895cd7e5ca29109a52159295a4485818c006c71978c002efa8c7e02efdb903b4c180385d69458a0bb9c1fce9fcf5f17212c1859b2649cdf7fc21564e5c787da52425d339446b0dea657a11015d35c15ea054f698b5c128f39b6e1b731e1e1debea00e9b46fa849137b1d648bb23db18ef120c92ef38424ad27cf9da3d11db853853bc559d449aa29ff6f12a60f1687817174114", 0xcc}, {&(0x7f0000000780)="496f5534260c210ad4c02842cc421f6742b8a15e02f4e94c9200512e3201c9905f868da1891ac3b805ca8daece38dbb3ad79ed55bb558d2b77bdd603", 0x3c}, {&(0x7f00000007c0)="d84f521d1edd4c6ceba7fa4196e6323e96d919320649785a2060ef4c1017f5d3fc9ca042cc536fce2fa1520eee19e35c374446cfb8143d853cc8d144b07d02431ca7fc087fb96b453bbaea4c5210b39bf4e2a59d8c0985c03375f5c52e03", 0x5e}, {&(0x7f0000000840)="3bb36cc9f7eef957102ef58b23e64ec2df6329e1b119036f42147e4199bf7dd129b7ee963953b5e4f5ff9d3df4589731ee08c8ce86279ae8852201b80c0eb58a84070f8ab8c91570fcc1ed5edef17c9e0e3d5bc0cd3757684221987ce92d8b82e4b9c24e88a2829c8a6b2faffec864f83231ce940aafc4981b9a12e9b0e74331cc98c9675f670a5f6cda72def6764fc642ac71f7044d13a9", 0x98}, {&(0x7f0000000900)="4188cfeb20ac445fe7464eae91c7939b5ddc1d5ddbb65536ee74422b09bbdb44faea70429d3341c88bfa724520592dc978c57097cc04dca14ec27976907c751ced5f70", 0x43}, {&(0x7f0000000980)="241d4d38d5c9f0f5935c3810c528108f31ee63a65b1dd2c9115c73b7a337adbe", 0x20}], 0x6, &(0x7f0000000a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010101, @local}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x38}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000a80)="b84ef78faae6e6dedd78f07ccacfd663b5ec221e44e28f835e25f8afb15410c7b0dfdf5a35e7c464e7972b760a0898236b1b3d06858288218d301b957eb232b0f7a36eea4e2a428a82e5cda94b998fe32a0d2649523ce2f49a96d6666f874ea606561fa127952b6c10441aab80984f31bf30abb5274c7f2a292f69b9f00b10da8064b69874783d6a9d63b81d142a773519c0a423e175b3515d0c3afd0d891cd133bee3696d338664a8e8fb447e505baa65a96db5a81ed5afdcb818a94495e8b87bab42", 0xc3}], 0x1, &(0x7f0000000bc0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_retopts={{0x24, 0x0, 0x7, {[@generic={0x94, 0x11, "7e9a6a6664c9ab05b916a63c9817b1"}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x65}}, @ip_retopts={{0x44, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0x37, 0x1, 0x8, [{@multicast2, 0x8}, {@private=0xa010101, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xcd}, {@multicast2, 0x8001}]}, @cipso={0x86, 0xe, 0x3, [{0x1, 0x8, "064b9a8d4b33"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0xb8}}], 0x3, 0x4000) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, '.\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair(0x1, 0x5, 0x1, &(0x7f0000000300)={0xffffffffffffffff}) (async) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000340), 0x20882, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000000)={0x0, "f3c492eb0165203d36bec7080089b42c000004002231a110000000005900", 0xffffffffffffffff}) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000140)={0x1, "27d85592b6bfee2be57c8a209e5cfce2939c0b6b081aa505abcc55a7042fafc2", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000080)={"fe0d1acce4a37ef94acd000200", r7, 0xffffffffffffffff}) dup(r8) (async) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, 0x0) (async) close_range(r4, 0xffffffffffffffff, 0x0) 5.108900197s ago: executing program 6 (id=1911): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x89) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) 4.809572721s ago: executing program 6 (id=1913): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000180)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000003c0)={0x0, 0x0, @pic={0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x4}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000680)={[0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2104c9, 0x8c5, 0x0, 0x100000000000000, 0x0, 0x0, 0x200000000000, 0x20000000000], 0x80a0000, 0x2c0710}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000140)=0xfffffffffffffffe, 0xb, 0x3) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, 0x2b0) setsockopt$EBT_SO_SET_COUNTERS(r6, 0x0, 0x81, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0x2000000000, 0x0, 0x7fffffff, 0x5, 0x4, 0x10000000000000], 0x2, &(0x7f0000000100), 0x0, [{}, {}]}, 0x98) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000080)={{r4}, 0x1, &(0x7f0000000040)=[0x10001], 0x0, 0x2}) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @none, 0xd, 0x2}, 0xe) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r8, 0x0) mount$binder(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x806406, &(0x7f0000000480)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c6d61783d30303030303030303030303030303030303030342c73746174733d676c6f62616c2c6d61783d30303030303030303030303030303030303030312c7375626a5f747970653d62726f757465002c7375626a5f726f6c653d62726f757465002c6673757569643d61626565653564362d353232612d666462392d383566652d39396639645c34312c7375626a5f757365723d04292c6d6561737572652c657569643c", @ANYRESDEC=r8, @ANYBLOB="c8822606d8dffd5438a6f08ac90ad68383df"]) 4.009930096s ago: executing program 5 (id=1914): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0, 0x0, 0x0, 0x4000}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 3.926163179s ago: executing program 5 (id=1915): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x275a, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x6, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x2, 0x11}, @volatile={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x8, 0x8, 0x90, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x1, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r6, r7, 0x0) io_uring_enter(r5, 0x47f9, 0x0, 0x0, 0x0, 0x0) mknod$loop(0x0, 0x100000000000600d, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, &(0x7f0000000100)) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) close(0x4) 3.828820919s ago: executing program 0 (id=1916): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x3a, 0x40, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000139209f422ca2f1d3568c599f830b1f821bc25fa46eaf53917fbae01ac86e06a0af31a9167ac93666cbfce317f4d89438ada20492c7e787769ae367b057e255f9fc7fcd3678acf258357e1e5a90d17a85ed2bb685014e05fe9dd53656818b650ff910557ae37262d1202049fd3e46740a84e730119514262213ed7957fbdbfb2aa975531396f"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sched_setscheduler(0x0, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000004c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) 3.125063037s ago: executing program 2 (id=1917): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000080000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000080)={0x1f, @none}, 0x8) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000240)=0x60, 0x2) unshare(0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) kexec_load(0x0, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10000}, {0x0, 0x0, 0x3e0000}], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x82402, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_getnetconf={0x1c, 0x52, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r6 = socket(0x11, 0x800000002, 0xfffffffb) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000540)={'wlan0\x00', {0x2, 0x0, @private=0xf30a0000}}) syz_emit_ethernet(0xed, &(0x7f0000000200)={@remote, @broadcast, @void, {@mpls_uc={0x8847, {[{0x81}], @ipv6=@generic={0x4, 0x6, "ffa31d", 0xb3, 0x67, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[@routing={0x3c, 0x8, 0x1, 0x9, 0x0, [@remote, @empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast1]}, @routing={0x21, 0x2, 0x1, 0x2, 0x0, [@mcast2]}, @srh={0x33, 0x2, 0x4, 0x1, 0x7, 0x0, 0x240, [@local]}, @fragment={0x8, 0x0, 0x5, 0x0, 0x0, 0x7, 0x65}], "1ac6a20a0d0106c9a56b13df1a74812aa3cd8b18a13738e649cac0c4051ed26ebf17015802d001bdbbc96474927681f6a0b79c"}}}}}}, &(0x7f00000001c0)={0x0, 0x4, [0x4cd, 0xa5a, 0x223, 0xfc0]}) 2.987131953s ago: executing program 5 (id=1918): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x0) poll(&(0x7f0000000040)=[{r1}], 0x1, 0xfffffffb) dup(r0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000340)=[0x9, 0x3, 0x5, 0xb0, 0x184, 0x2], &(0x7f00000003c0)=[0xf0b6, 0x100, 0x1dd5], &(0x7f0000000400)=[0xcf6b, 0x7, 0x998a]}) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x4889c1, 0xb0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r6) sendmsg$NFC_CMD_LLC_SET_PARAMS(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010006007000ffdbdf2510000000080001ec814fdb420b2e511f43bec3ec434fad45", @ANYRES32=0x0, @ANYBLOB="050010000a000000060011"], 0x2c}}, 0x4048040) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000027180)={0xf, {"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", 0x1000}}, 0x1006) r8 = syz_io_uring_setup(0x735d, &(0x7f0000000480), &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r8, 0x13, &(0x7f00000000c0)=[0x80000001, 0x9], 0x2) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r9, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc7d}, 0xffff}], 0x1, 0x10040, 0x0) 2.799303523s ago: executing program 6 (id=1919): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x7, 0x0, 0x40, 0x1}]}) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000080)={{0x2, 0xffffffff}, 0x100, './file0\x00'}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x40800) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000200)=""/253) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='setgroups\x00') ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000340)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={'nr', 0x0}, 0x3, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, 0x4, [@null, @bcast, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) r3 = socket$kcm(0x29, 0x7, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000003c0)=0x0) sendmsg$kcm(r3, &(0x7f0000000a80)={&(0x7f0000000400)=@nfc_llcp={0x27, r4, 0x0, 0x1, 0x88, 0x2, "7ee19a50bed46a0256ab3f3b56d4b126ae8c0e1ea912bda198f1981ca21c871a41eb6c9b698a9dde19bcbe025bb2a243e3bdcee72adf0c065068129a33b487", 0x7}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000480)="5133fdfb99f07c49b710c0c9852b1568f5012d7824177340a47dcdbe43525f38ecc29ba56bdd8b387b6e96548bd918b9551698336c890af56f0745e0f12e1bd5b9cfaad096583cad06cdedac0e629a00284f56c60e72940f44b32cfdce27f324e3e834e6ff01897dc4b92965dd8ff05c3ade199a1ad3a4506b1d22c76cadeb2540a9c6b4c21ca2e8dd5caf9c89b17c5ff595a624647af7f9cb9b2c5c4325ebd0a5760f8eecd16de53f693c1322f14d786a76d384ab09b503022525bc64ca37a2f6807df44d9cd932c77f0c854c8358d57f82898a6486384b4fed97be", 0xdc}, {&(0x7f0000000580)="d52d4be4afca8ad0e5cb3ba2df957dc9155e1a1bbf3cb9c9653c95fad079724e3ce37502c55f0ab3661a4cba5181619a20efd5b678122b8e641435b6ea103dafb0eb9147ea1bbbd9b0ac1c2c6f8403df2e42505154286d77a0c53dba8b2ece2805806ce4a4d58b1af077550fc2110920d983d5e12e42afef17055dd4bf40de81", 0x80}], 0x2, &(0x7f0000000640)=[{0x90, 0x118, 0x8000, "81fa2cd8e2edb7f4f6f08ec2440457f9687e5af6257e673c03fc4a4565336718c2c637db8c03ecf0edcd107a157e84397fdb32777ebbbc5ba1242069e34638d36b54fe3790d06e015b555ddf960dcb0eea73f0b1fa870a71a4dc18b4178236553a7324a854b41caf3549892967648346ea6d1167dfdabcfa074f068d"}, {0x50, 0x29, 0x4, "37ac68a7ed0a61e72de82e8071572b0a8f1732d529a17937d03128d75c75f4deeb4eb6d9212554d70cda5b46a9689ec0b79d82be47748ca92f48"}, {0x28, 0x112, 0x3, "a6c94d9ec09e319d03f3980b2b4587ef1cc6917e36"}, {0x70, 0x10a, 0x7, "6c5fcefed4e6720c80d07a1ebff9a628c62759eb564676830493acc4365dda710599fb037cb46dbdc87e4dca422d725f2416d0de70b3be95f3299207713173048f25576282ee7c95e2ab235c299ef39afd2624e01e39a82b883d"}, {0x80, 0x10c, 0x2, "2cf84f3c331d8fd1f77e200e8645749dbc6b2552094b155bafc20ffa3a7c8430217a7b1deb5d17d0be9713a538c6f115ffa5df02b78c4354b3f3d2eb33e94322f3eae708a9223a1a46207715a4bb0ffbaf5f975e02051c61e00d923c57918d6bb0d9c6b1a5cba911ce10b3cdc3"}, {0x20, 0x10d, 0x1, "eed70b068a1a7ce3420c7e5c94b1"}, {0x100, 0x0, 0x3, "f53b4716b31eb84d5d3fad627168db82c09639e0bb19b0a2797f75d6dad82b14bee12f99f5d548c3f8e2a5ad240ddbdfb038979b063208cbeeae679ee60af69e741dffe3aaf6be0e1da6bb41e2f2b019b0449e0675332a7997fe1d2262a9c814523760835c71517610eed24b40a4516ebd670261a010c3b235ffaa6444a2c18ffd832dee2625271f20d583c8e80ce2538b9d6d053ac51b7888b3515eac0c545f6ee39cf3e7b256aaee4a08bd8ca88dbbb64a2a94dbd8568173489ff6d7143bce7921178e48e91e987a903b769b7e56abb2861ee6234f49588a108e05bd264653dac8e2a624fe6f0559e758471899"}, {0x108, 0x0, 0x38ab4805, "2612938a1784fd849d18f0e1fa15b39181aa196ff8572274ffe29f29a4884a3c79a43d042339cd0911e4f00c176e5e612491b24d3a12b93c74511cf22b97a25d4aa7cb23533ce2c6e3d2c0b69af30a0fe532209c68c2bbbf81db94c202b6b2e6876ae2cde042c3d44114e74ae4ba72dc01bd1628e2510b46f669f121f12eadcbf2696a79c8a8bd49d82314565ffa35083fb6a75a8a01ffe25ce3eda66deb17b03a4731f823690d20c3cfb8450a902583d2b19c7ab6d1668b6f7c9401cd4b73a6b126a6b3e09669643d0661930fa1980adcaf61a280e74d0fdd851c3c274c88b996aa049b1f4f43890b7559956ee5bf5015b760c2d70b"}], 0x420}, 0x400c000) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000ac0)) r5 = accept4$alg(r2, 0x0, 0x0, 0x80800) connect$pppl2tp(r2, &(0x7f0000000b40)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x4, 0x2, 0x1, 0x3, {0xa, 0x4e20, 0x8, @loopback, 0x9}}}, 0x32) fcntl$getflags(r1, 0xb) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x6, 0x13, &(0x7f0000000b80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffb}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0xad, 0x0, 0x0, 0x0, 0x44ec}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x0, 0xe99793440084065e, 0xa, 0xb, 0xfffffffffffffffe}]}, &(0x7f0000000c40)='GPL\x00', 0x4, 0xe2, &(0x7f0000000c80)=""/226, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000d80)={0x0, 0x6, 0x1, 0x8}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000dc0)=[r2, r2], &(0x7f0000000e00)=[{0x1, 0x1, 0xb, 0xa}, {0x2, 0x5, 0x8, 0x2}, {0x4, 0x2, 0x5, 0x3}, {0x3, 0x1, 0x8, 0x1}, {0x4, 0x1, 0x4, 0xb}, {0x4, 0x3, 0xa, 0xc}], 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001040)={@cgroup=r2, 0xc, 0x1, 0x2, &(0x7f0000000f40)=[0x0], 0x1, 0x0, &(0x7f0000000f80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000fc0)=[0x0], &(0x7f0000001000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000010c0)={0x0, @loopback, @initdev}, &(0x7f0000001100)=0xc) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001080)={@ifindex=r8, r6, 0xa, 0x2048, 0x0, @value=r2, @void, @void, @void, r7}, 0x20) r9 = openat$userio(0xffffffffffffff9c, &(0x7f0000001140), 0x20000, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000001180)={{0x1, 0x1, 0x18, r9, {0x3}}, './file0\x00'}) r11 = socket$inet_udp(0x2, 0x2, 0x0) r12 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGPGRP(r10, 0x540f, &(0x7f0000001300)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000001340)={{0x1, 0x1, 0x18, r11, {0xee00, 0xee01}}, './file0\x00'}) newfstatat(0xffffffffffffff9c, &(0x7f0000001380)='./file0\x00', &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000001440)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f0000001480)={{{@in6=@private1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f0000001580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f00000015c0)='./file0/file0\x00', &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) r19 = getuid() getresgid(&(0x7f0000001680)=0x0, &(0x7f00000016c0), &(0x7f0000001700)) sendmmsg$unix(r2, &(0x7f0000008040)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f00000011c0)="9d3b9009ba06d9a706752d1344ec868c3b2675946eb68ee04570550e757d2f353721a9d3e4a3bb47c45bf89ec7d9f4f5ed9ab5f80b97d0a6327735eea629173088253073f05559fa3aecf832a0f54a9f1a38c57ebd5c58e5704aab6bb6a3269eae60dfa4d9235e1650291b5b467f84a44e9c03889c03b9e21718ccba2abe7a8958d9e77cb070455667d02fbe509ca7b21c8b5bdf2be6d57ce870715343cf6a4e4a2ef83a5522003a1adaade368c802069757b02124f671b1e2e795e5f6cffc3040496959ba3f169ceea2b63c1760290f7b2aef68923cd78607d0cd0f7c6029aaeb2bd8119c9bd799a0e633efa41d760d8d0e33e49ae081", 0xf7}], 0x1, &(0x7f0000001740)=[@rights={{0x28, 0x1, 0x1, [r11, 0xffffffffffffffff, r6, r10, r12, r10]}}, @rights={{0x14, 0x1, 0x1, [r11]}}, @cred={{0x1c, 0x1, 0x2, {r13, r14, r15}}}, @cred={{0x1c, 0x1, 0x2, {r16, r17, r18}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r19, r20}}}], 0xa0, 0x20000094}}, {{&(0x7f0000001800)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001980)=[{&(0x7f0000001880)="34727a5818693d6d4d78ed10d08759405c2e1dc68626fee9d413aa846f2dba5e93e8986410992d24bfc42dc5ab4ec0cf4db2af4775fece267370d1fd581575c414f814989312a6b821b998d9ea244be3cad023d74036c7b82e184c1a0e253fc70e90a653fa100548c24802390be3c91aa821d7b00eb7452dffbeaeda424dff6bdfbb52cc40455011becb54c4faa1ce780b9ac59c480b002a0f9baa3ec273e89f0054b89cf02474c20bfd037a4e36a9236d276eaab7a64842a0c202d52ba7a5979962e06105", 0xc5}], 0x1, &(0x7f00000019c0), 0x0, 0x4004080}}, {{&(0x7f0000001a00)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000002a80)=[{&(0x7f0000001a80)="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", 0x1000}], 0x1, &(0x7f0000006c80)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r5, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}], 0x78, 0x4040000}}, {{&(0x7f0000006d00)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000007f80)=[{&(0x7f0000006d80)="a9097782c8327146c5337339b110c570055aa4e86ef7db235fd79270a0732725a3359b83340637476d4fa953f943da50c72748141d3fe082ead7c669559e0d03", 0x40}, {&(0x7f0000006dc0)="2b7d0b0cee1ab175faf39f63d18b2ff9965be1e9306c8588c3d99013d5a3cbb79b36599ca6bc29c0d97f510b027164696aaac0505fe0b5ef105ec890f3ed338f4a4af7875ab74b882e7d50762a6bc1bce5501f6c4d2cb5d23ccf88919fcd6b40a71dbf7ce5def1e7165ea5ec6cc9e53eea5726584924b80cc2f09d93f51b7fc00d5038c9ac101a737fd9056d136529dff556dfed77b922990aa02e5a62d60a68cd988d26a2be5270", 0xa8}, {&(0x7f0000006e80)="db6a2eaf8c0c6c7c2f8de401234383e177f15d7a50cd0c71b034a7ecf64ccfc9371cf5cfe28f31ba1ed91fa11fa5ba922e5c34ae180b31e63e3d41efa6a6388230a6253ed8440fcb556ae8e990d463c59735b83ee1f0147d564f6eefa09d33b362ebf4847ec50c73874827737bc8f875db9c6a12e35e9b7b43389bb51c27ea9b80906105a52a0bc66091f9c8c4018052e11d6f4f06053a86f43547cd7b91ee51221f312e29406e1dfe011b2bd18edd22ddda7bb665c6c1f34d44ba786c0a08c69d6ba03e7d017c8c314fe56997cb4fb73dcd618f4e0007a914a685d68d23b7ce64f24416d9e0e3d849d877a58c75f3e1cbf1c88b5c7be438d0c20628d3f4d5d303eaf3b1a38a115fcf69bc3991e5091aa2efaf41d10094cbb158002bbf19a6495243f3afa8a92dec1eb2fc52014446ce3e67d6567a4b81c693c512cf4d25ccfb169040b02d020fa3655c7a6989e2c88ae9379d85fcf2701713e3cb54bb26f3d5ffb54bd08264cf4d7666787bf9b2e90ff30cf46c0747f87eb94c7b9aac2cd8bee5e0f70ffa5255779fa30f2e25bc9b12c023c6fd89da31430dcee0a21cbe455ba3a844b86424441b08df0c0e37d12ffb54bcafda5aa74b7a0c18b39026c42e40f46909744cc0a8aa23baca433c459b1c9b413757dab35b1832ee78a542161d5ab9ae31cbf9f8c05809f45b74e7ebec48c25226d36023d76b330023ffd40ac5690b36b38471ad9b5185fc78d965a37d6672d0553359c04a8e45ad5aa44ff08af6876bd4ee2c2926ed14d6110ceeafb63a3f6ec2b3bdf9e1f6982ecd70d1da4ab4e1a490b54cd02a6f3d4de8acd9ee53275eed9aa97dc68f354624afead3b66ea4f418e72991686fa0a5f8e5ee973f076bc65d309b9e8ed67f811d526fc7c87c212ce8dbd6fb39011658d8ed9b4067be071b1a8e0f1a2c3994b4e092b5d55e3fcbb8e6619e4198a587aef5b770777f83dc905ce726a879a19b6a76ceadac6b8492e648412d9f661ad3c2338c2e591e3909dd5f7bedd2e83cece2bf6fe76a27e01cacfd46dc82e679bca92cb73da7c269fe7829fe38d0347fb58d51c2d705d53d0e67f4815014ce41d66d4e2bf48eb22da34486ed194b32a0e9954075e4e46d6a1bd2130fd335d54c7cdd2a17f16f9ea7c7c3e8fa22ee33d33a9499ad9e30a57e1b2c84849b94a1d12bcf0fd45ae5c5bc16a6aa30ed303008fb324476bca1afc15712519f3e348f265f9e025d41cfddd01093a459b929263421f9a523a4083e895aaeb90cd944cb7af4327e7054b30e97ba88023f55217dff95dc6ba83bc10d62d5975ccabc112ad09ff02e4a1c979de82803556b5e90b2afb96a794a73976a558392db2d698b78c61701e2f2c760967b789edbb5487497e5d31f3ece395b31dd1fe9d46e7640285fdb8ff2ed95a30639a13f72facfb7b329878b8acfd3fbec1e0da7bde1635c154f87959a5ff9a835d192cb16cedbf760494def20df52b9bcf3210d4dfb39d9f3ddc3a36083b22a7f8a055c096aea8790ee7f6b56d059088cf96176f5b4f41baf8cdc2eef0d948a1ced416e5357e4bf6c0d042bf20fa964ab2fc84d5a2fa29acc818ef7aa1ddb5f1e1634286885f8ff7f1d6b0df8a7ad3159d4577c679286e2501348f70ab21153be78c8c8706dcad226c21323ffee412efec3785f19b78b264cec3de3c41781291534c1c232054783a15f16c39f191dd20641dc40eb7ffcc7005354b14f68e1b29ed51be0c277cbf861f848355451ba90dcb7a76179b1b08176ae3dac0cda0fa01a38f83978e489a279bc14bc21a8c2f3e3d1f187a1113c675c3ad87d43fb46537fc9ae698fe389dcfdb0b9fe63480b652dc7b7da0c446e4211330c817b4f3870f3c6d081893bce2116e0bf831347eed90b9b3702a2e6edd0014d98ab2293771c728b718a742d84289a65192df1c7136ac72a5536efa46cb300427a5357e79d5b914f734e3a737bd53ab517ce6d8e0149c93ae847383bbacd4cfbfb9624ea164bd9219740768a81bab58aa7e2a4a8e2b7d2daa54c4d0c016ba4519123f75ad407eb146a239006e8bb2e471e815980b831ea6c461262703ad7a901fe1920e1e8fba317d5809aa4a922fb214cfad5f3701f3bf984d5ed9bbc9773552ac6a5a805c927973fa9a0cfd32d810b8aa854479b1c03efcf540335f6b37218ad42063e4060dc0bd547f300a1ee1616a552c7b692b1a8025b8a96f96e02a315b29bf02ba8a1e1a565928f55b90627e5534a4fb5aa6a4e12b0a5f0ff7bf781f26fb270a8ebf413addbaafd729da0fa88d8227af68e633a7f322f6bd8899a7722fab38ceb6f493c59f56c05cb9bccfc4e329b33a9a05a4fb35cc14a734d6fb2fe58775220b981d3cf96f2b222c24bbccb6651677ef2a2453b988df46ba6304692b997f03932ffa51448f8a432cb6e79a87d8432a1be7f37b361c45232a1b43dbc3fc89e35e0d7481e95ae985a6fb9f5140ef7c0ce1342cffa933c122087f936441856ace7472f9704c2f443b76ee25a86782ab5e7d7048ca0f759602bf5201abeee4fbfd671b050c4b2025a4bb8981288dc4d5c241146a1b84cc0c7efc8a2416bc8f4baa9683187c4e31e0162f1d0faeb4b06edabbc85598806df4440d72fb465915f245f55c4a3464c288979a1f5b395ae915a339ccec605357dbb39daf9dbd2051b1dc1490e2ce9e9c212f5b4874a30205efc98509d10f33402b1730dad0008cfadea6b1a94201f34e5fc1995634f72816bbf40fac41d0ad239d89ff3c398547789e5de9b652db7c50dba799340965fbfaa5e04a3fa2afa4a379c11e6cbb0f3fcd56bd0fd4fceab029c38ce07dc69548bad57a07ea9113065cdea5328bbb5f1ab33e1d619ec63673b0ac794da3d84dd26bcfe8f9e1a093d51100145231234ecaa708489efc218f7c4875f49e72467393f47cf77075b1d97d714729523619911a2fd2e441fb55e7639e7657012c3c38d659de82ac8a42a0b99d0babef9642524b2f0aef374e41d9932a7af186e583b3f0de5a7c07b59b3739b4f5d7f2c130e61d8b4cf9a9479da9b4c287e5d27f0108025cdd1af72f11088747fbb81f7579cfccc118aa43a31437686c4586a79359253531f6394d668a7d0c524e478101655be24f214aa340d72f8b4cfab753fed4c7176f27f7442d6e460e631e544130a6390134c96ce4ddf5320674f0338dee219e28f2f7f0c2a4c032b6c4d0f853dbadac2ccddcd11215279a82217f0ac9ee4861c4312b2d4795f28fcf42f756dc421cf3d7417f6318f432e5235f642ccb39cbbb270dc12430926767abc17ba01fd24e1a702de7daf4f4f7ab246706ee14f1876a80863cb4186efaff2b34c07ed6a4808dce41284305960a8ed00dc8828a053eb9e4f67d886f7018414f293d2a4388817298eccbc1871cc1e6675f69b15173f9ceaae34d9e1e13631265c141846ff695cd875df763ae0fab5f4a775e1ac51f143e702babd462a93ba4956cb042f9a2e9a24b3787eb95979aff3f94e9e866dc4ac044f7f26b178fb12a7766f09856f1ac0528c93b3c8826fc0cd22f82699cb5d3b83ef0fe5e66b5ed3872218c311e5deebe990799b99a14b6c37116966a4e88c2c5c2e8b1dc7d53e5d4be1fab7e3703738fea528f04e39a716ed09afa809ae5b808fe8d31b992bb93e788ad20728986490b787dcad0f93d8d27916f4e5c2dd67796c54597efb596080e08030c3979c040a21dce93ae52eea57eafd7be0e22aee252f99e2a1234a639dfafd0121ac3ad53f950fd4f1c84810f8489c51dcbac9a0c156715d44c3748e63f57ae78bbe77b1503fe7dd79f9963fad6a0dc2842a09c3f7c1765e0a3fdf0b054fc56133db117716f5d8b1ad312a472cedf005e37288d56da80a5b39f9120dec4b4257cecb9a7c2584b91f1aba2a52965fcff4cd31767f9be51f5e4326ba93f7344dde791ef1685a089579b41f18aed45a4c7b833d4678323f09f30e7102481c315cf6e176bb3e4b514e433652d54737111b8d70f6d1bca8aef0249d33251e08fd1feef3bc1311eb94dc7ea168797ed9a5c88d0ae50bb2471fe706e9d85b96033ec62679227cb82a454a226a9f4ed209a3f870dd617b23204d348ebdb34456e64b1a72e8a503fa2c9a468f13306678b5d3f03fced549f687b0722117fbefbf8bb45f5653dadeaa47c334ee0d9413ef40aa65e9c9dad6ed5959a2b21effe9463260b615afee72129fdbd3fb8e63a088f8062c4d8ad42efc16665db137a432af5c1e80c3aa1bfb9ffffb74c674aac530736141dd6de60a3666d3b99201fbf05c79f373e73acc9ad35810c59699242070879eaa2f8acb0f344f5dc252c0dfb3d3f82a2550aa1e6be19de6b887ad67ebb23b157ffa7c4f3a67429bd175f4af4de7efad812412df11910f3542a4ed1fa2e5eb2bf54688bf1a4f95dba3c1650dc64d06fcbe8b9ef0c4f79bd79982a08a23c7cd15a82ccb62afa91458d168e940ddab1eea9daf534e99b422c67624dcf75b5b44effbc37c9600848a146e61293feaa5f13fa6f8686639daad0f8c1f31aad3c138a1a94518304158179b1db3ea67f593cfc0db288065dfe10f3542dc974dea40312fdc96f8d9dd984138be751ed8c63e82f5074dfac5aa6e92253a4f7980b52bf8f8705c7d73bbbcf67059b98ae8382926ee49cc9ce4975b754db1328b973b9dc687b5f812448f9294cf6ecfd5782f26bf4c00de0a9c422629280f7084eb27e0c0e93009c333f4d889a741f181bf75d7fd7e6c4ec516cb5fecfbbbeb2f1f01e447bfa24e55895ead772e9386caa7b39a1a39096f64792774582a5558e17ebc9ba7537741c8e569f636a4cba8f3a2d340f92a0b8aa386a1fbfa639b07babe8815bd39770ea6240b426312eb13580215635863deee7f90a8ec18669310c9a2bdc34bb9ccb1dd731880f9941576f88c40d700fec8236795e86c9e61bd88523839fe36c831b98afc89ff2e43c40090dca3d18c4ba2c43cfcd3093287c8d2a685517c117335d52343bb311e0447514a683f40e0574fc3365c1d03802b5f674d9dd879d48bd812a673d2f1b41800d03275de6dfe7d9c64e784562f6e68cafd337500282deb9a8bb33999598c87d94614b79a83fe40adda25bed3f3d4fe6eb59b47f0e8393e5cd934d04d3233a58ebce61f7b7bd8bba7dc1bf05cb7be3cc42daaeb183b39c469943b73ae77d21a7d15379552b4c6cda4226034c606dcef2c7910df550e55782487d9ddeee496cbd890b608a677c23e5e8aedb8b61a77a5b7d833fae7018f4ea966ae99df3dc7bc28f91d8ff0c4bf09456aa1a16ab4589317b6001b540eeca82b9385173efdc46fc9a7c830e458e8d478840724b0abc6a468a1f7eb37e8c1870e1e5b3c805d1da0e8f111902b42bbb86b9d3c5c1d6941ab2478fc1d2978e2899c68f478b5349e9dde4ace4331a83aafb458788554e127f7f4971d1db50f9cda14953ec41c97682cdee9d5f9b3821d353994505da82b7ec6d652c7c9e2927c6f9d2b4de17bc9642eb8f89ed37116d7830af8becc2cc280e4d71a5421bd42028db3b921ab82f1862d0c9aa5da12d78739a274307e9ad89fe18a02015e75139ef6d66755540d50ad1ee0ad3885b6528dc2c7ea9da53ddae051b607afb8eded37658db4144c652d490b2c8280e694013a99be0de0d50e37681c140978da2b9717374b0e4f0a98a158243b0b59d35b4e39f732ce1a27123860607784665145a19260e21ea9136613beb1b7c0a30d4f8f4b9f768eae042899c4b1b1b194cf5476fc8769481054dd17fe57211c053df52a76aaac", 0x1000}, {&(0x7f0000007e80)="e553955c253182074167706b693f5502858224ebf88574c1ee415b3f9f509112cd4f1f30ff846f2776c5f5520a5cd80c8fc730c61820bb060ac2eacc33d4886be4fbf4c3950696764d45a2af95b16b90bee1db80b40a8f328fbbbf9ff29b3d78daf15a512a3f0fa5023fc222c455aec9d7265f78289fb99be174544bd0fb262947e24e1cd37bf4286ef091ea9cfcbaebd771806e0e9d272b34c5a8de42a9a47003246a0e38d66d9821cdc6a42df9818e4ce052e6324b9fca8ef165bb59ab4216117590859d4ceaaee2b1c65d7f0cac080ba90438f02e8c0cc908e0f0", 0xdc}], 0x4, &(0x7f0000007fc0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r6]}}, @rights={{0x18, 0x1, 0x1, [r2, r6]}}], 0x50, 0x40}}], 0x4, 0xc840) 2.672732475s ago: executing program 6 (id=1920): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000080)=0x10000) write$dsp(r1, &(0x7f0000002080)="a5", 0x1) pselect6(0x40, &(0x7f0000002240), &(0x7f0000000800)={0x7f, 0x0, 0x3000000}, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) unshare(0x2c060000) unshare(0x24020400) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) listen(0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r6}}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000440)="b468fa92b875b505b75707265e2fdc0576995aa6e0610ebb920815d3d50a0fd47bb0941aee6ca49a2324a663", 0x2c}], 0x2}}], 0x1, 0x0) getpid() 2.628587493s ago: executing program 0 (id=1921): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x1c0800) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000000c0)={'vlan1\x00'}) r4 = memfd_create(&(0x7f0000000880)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x5) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x2000007, 0x2012, r4, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000232000/0x2000)=nil, 0x2000}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="ee0221da1f8b97b2ed74696cb2c0afbe"], 0x20}}, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r9 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) getpeername(r2, &(0x7f0000000600)=@l2tp, &(0x7f0000000800)=0x80) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r8, 0xc01864b0, &(0x7f0000000180)={r10, 0x0, 0x1}) r11 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r11, 0x0, 0xca, &(0x7f0000001740)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @loopback}, 0x10) setsockopt$MRT_FLUSH(r11, 0x0, 0xd4, &(0x7f0000000000)=0x9, 0x4) r12 = syz_usb_connect$cdc_ecm(0x5, 0x137, &(0x7f0000000200)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x28, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x125, 0x1, 0x1, 0x0, 0x20, 0x10, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x2, 0x6, 0x0, 0x40, {{0x7, 0x24, 0x6, 0x0, 0x0, "7ca0"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x2, 0xbc87, 0x71}, [@call_mgmt={0x5, 0x24, 0x1, 0x1}, @mdlm={0x15, 0x24, 0x12, 0x100}, @mdlm_detail={0xb8, 0x24, 0x13, 0x8, "faa8421b25f9cadcc85517ccaa6ec0f70595d67f6bacc49e358b59a97872d2962c2ce3ca7bb50b6cc1f11d09b88b7b13fc147af4feb827482b8f08daecac24e35768c18be9e8dcfc24a942f62adb59f2c2b3bcef8c449199fbc7e3c307bdc1842c4ae8c141a97a41ee8b6acbbe6bb74cf0c5c3a8c7f21293ba2ee13c2959142b551be5e147712fa477551201b6f9b6d649cc8f9b2ccecf8aecd39681459d31277ab1d73e7a68265c5996f00474350046803c03e1"}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x80, 0x8}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x8, 0x0, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x80, 0x3, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0x9, 0x80}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x301, 0x1, 0x7, 0x1d, 0x40, 0xe}, 0x21, &(0x7f0000000380)={0x5, 0xf, 0x21, 0x1, [@ssp_cap={0x1c, 0x10, 0xa, 0x34, 0x4, 0x7fff, 0xf0f, 0x1ff, [0x3f0f, 0xd7, 0x82eed527018a8560, 0xff0000]}]}, 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x404}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x1801}}]}) syz_usb_control_io$cdc_ecm(r12, &(0x7f00000005c0)={0x14, &(0x7f0000000480)={0x0, 0x1, 0xce, {0xce, 0x11, "a28dd718a5445e4b39c5289cb8dbc46d64956be611d368e3081bb5c89b57ccdda72d92b097d42c098ae094f028a26899dcb0f559c4e2e6587549f01c8320bd71acf20fa7e9f91e49ad3887838601dc5eeed97f030d8a9b800df1d00185ee7f0dce9ef56109dec25a3dec98d66196691d6d4fd41f5a83eed87d9fdff646adb54fd2928ffba46fb147bb07997da3fb35dbdf8997d8e8fe2538dcb402d382916d01b78ec8291245dba1f712fe53113f3b62d0d7b010e61bd042a60e5c347416772f5c3c37c1bc5ed93d586238a2"}}, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000740)={0x1c, &(0x7f0000000780)=ANY=[@ANYBLOB="40175300000053d89492254acd5b2cb74a4c9901145c198b6bba2bd2456b27f94f7fa2bab9b4ce5886b2ad222c768e6c1e71e1605b62946318c101824082f47cbc527711cd8620208476a08757861975984b128d91d4f72aa36d63aaecdfbd865cdbf8288fef"], &(0x7f00000006c0)={0x0, 0xa, 0x1, 0xa}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x6}}) getsockopt$inet_pktinfo(r11, 0x0, 0x8, &(0x7f0000000100)={0x0, @dev}, &(0x7f0000000140)=0xc) 1.709508726s ago: executing program 4 (id=1922): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000b40), 0x2200, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)={0x3c, r2, 0x111, 0x2, 0x0, {0x2f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}}, 0x0) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) shutdown(r3, 0x0) (async) r4 = dup3(r3, r0, 0x0) recvmmsg(r4, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}], 0xf00, 0xf0, 0x0) 1.348861643s ago: executing program 4 (id=1923): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xf, 0x0, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r2, &(0x7f0000000080)=@file={0x1}, 0x6e) close(r1) pipe(&(0x7f0000000100)) close(0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x16}, {0x6}]}) 990.656095ms ago: executing program 4 (id=1924): sendmmsg(0xffffffffffffffff, &(0x7f0000002300)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)}], 0x1}}], 0x1, 0x8810) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket(0x840000000002, 0x3, 0x100) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x7, 0x6, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x0) r1 = syz_clone(0x24800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r2}, 0x4) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x458, 0x501a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x1c0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) pread64(r4, 0x0, 0xfdef, 0x0) syz_usb_control_io(r3, &(0x7f00000000c0)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="0000080000000800392cdaab4a7343d17c4e3d059a28d13d481d8a9a10f6bb1c8f579af97cf33f974d6d039dde36089cccbf9c9b8fda10282a2671e4ec513269779883df3b531f13ebc27c98b7b6d947c841eb2bf8f4aa652e80b6e5cb0b46b4d6f2dd1d040963e18cdf3ab9c573daa5a37234b095a0c2de792a43a5e91ddc9e97c643bc2c016a033df994189e597b7fa139322adb79723dcb528a2456010c69febf39a795777f7bebd272e9dc76ba67992f1d94589813d345ff803b2c555925c4bd2f453bb6b5ba621a34d086dc09242916fc5cdd64b55c34aa72a62fc604b7475de19ac71bba53c160250e0bc0476fd2dc5ce1903cbafe6735e3913af52a965e3d466af229c03043407e756e249306fe30e6960dea6c4c2cd50d6226bd1f499c3234759401000000000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) getsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f00000000c0)=""/21, &(0x7f0000000100)=0x15) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r5, 0x10e, 0x9, 0x0, &(0x7f0000000040)) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x13, r6, 0x0) r7 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r7, 0x6a, 0x2, 0x0, &(0x7f00000000c0)=0xfffffffffffffd27) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) 981.506057ms ago: executing program 5 (id=1925): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000300)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, 0x0, &(0x7f00000001c0)) r1 = socket(0x1, 0x3, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r3, r2, 0x0, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x25, 0x7, 0x8, 0x22, 0x220, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r4, &(0x7f0000000080), &(0x7f0000000280)=@tcp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f00000001c0), &(0x7f00000004c0)=@tcp6=r1, 0x1}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r6, &(0x7f0000000140)="80003ee9620ca1ce", 0x8, 0x0, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast1, 0x8001}, 0x18) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, &(0x7f0000000100)=0x1a, 0x4) 832.857904ms ago: executing program 5 (id=1926): ioprio_set$pid(0x1, 0x0, 0x2000) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)="39107bd940749db883943806fe2a523f4be6fe46789a2c956965caa4c976cbd2b639609ba68618ef9407a916d50bf0485a891da71c42c8964fb73ba53421c00d92d250cc573dd3168387c36856d5468e13ea4e79ed2fcfbca163aaf103f790dc4aa6dd708e4907caac682be8884359097a2790d099f692287d3c", 0x7a}, 0x1, 0x0, 0x0, 0x382ba9259eb3944c}, 0x80) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xffffff10) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x20000004) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x7, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b", 0x8b, 0xc000, 0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000240)=ANY=[@ANYBLOB="f0000000100001000000000000000000ac1e0001000000000000000000000000fe8000000000000000000000000000aa000000000800"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe880000000000000000000000000001000000006c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffffff7ffffff000000000000000000000000000000000000000000000010000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001060000000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x4004050}, 0x11) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000000)="d2", 0x1}], 0x1) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000000c0)=0x41d9, 0x4) recvmmsg(r3, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 175.898116ms ago: executing program 5 (id=1927): prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x20000008b}, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x4000000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000600)='environ\x00') syz_fuse_handle_req(r4, &(0x7f0000006cc0)="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", 0x2000, &(0x7f0000009680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000140)='rpcgss_svc_seqno_low\x00', r4, 0x0, 0x70e1}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES16=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) creat(0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r8}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000ac0)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x34}}, 0x0) pipe2(&(0x7f00000003c0), 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) dup(r10) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000001c0)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/117, 0x0}) socket$packet(0x11, 0x3, 0x300) 0s ago: executing program 2 (id=1928): ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xd1cf}}, './file0\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r4}, 0x10) timerfd_settime(r2, 0x3, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): bytes leftover after parsing attributes in process `syz.0.991'. [ 329.720587][ T29] audit: type=1326 audit(1731630113.738:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9467 comm="syz.2.992" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f692397e719 code=0x0 [ 329.729047][ T5907] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 329.940680][ T5907] usb 7-1: New USB device found, idVendor=ddc9, idProduct=1ea3, bcdDevice=dc.1b [ 329.967407][ T5907] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.002437][ T5907] usb 7-1: config 0 descriptor?? [ 330.033802][ T5907] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 330.113006][ T9472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.991'. [ 331.202302][ T9479] FAULT_INJECTION: forcing a failure. [ 331.202302][ T9479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 331.224411][ T9479] CPU: 0 UID: 0 PID: 9479 Comm: syz.5.996 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 331.235669][ T9479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 331.246486][ T9479] Call Trace: [ 331.250173][ T9479] [ 331.253314][ T9479] dump_stack_lvl+0x241/0x360 [ 331.259085][ T9479] ? __pfx_dump_stack_lvl+0x10/0x10 [ 331.265196][ T9479] ? __pfx__printk+0x10/0x10 [ 331.270787][ T9479] should_fail_ex+0x3b0/0x4e0 [ 331.276473][ T9479] _copy_from_user+0x2f/0xc0 [ 331.282233][ T9479] do_pagemap_cmd+0x10f/0x1200 [ 331.288413][ T9479] ? tomoyo_path_number_perm+0x208/0x880 [ 331.294076][ T9479] ? smack_log+0x123/0x540 [ 331.298504][ T9479] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 331.304507][ T9479] ? __pfx_smack_log+0x10/0x10 [ 331.309289][ T9479] ? smk_access+0x4ab/0x4e0 [ 331.313816][ T9479] ? __pfx_do_pagemap_cmd+0x10/0x10 [ 331.319055][ T9479] ? __fget_files+0x3f3/0x470 [ 331.323755][ T9479] ? __pfx_do_pagemap_cmd+0x10/0x10 [ 331.328969][ T9479] __se_sys_ioctl+0xf9/0x170 [ 331.333575][ T9479] do_syscall_64+0xf3/0x230 [ 331.338105][ T9479] ? clear_bhb_loop+0x35/0x90 [ 331.342806][ T9479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.348805][ T9479] RIP: 0033:0x7fcb2a57e719 [ 331.353235][ T9479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.372856][ T9479] RSP: 002b:00007fcb2b332038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 331.381289][ T9479] RAX: ffffffffffffffda RBX: 00007fcb2a736130 RCX: 00007fcb2a57e719 [ 331.389281][ T9479] RDX: 0000000020000100 RSI: 00000000c0606610 RDI: 0000000000000005 [ 331.397267][ T9479] RBP: 00007fcb2b332090 R08: 0000000000000000 R09: 0000000000000000 [ 331.405250][ T9479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.413230][ T9479] R13: 0000000000000000 R14: 00007fcb2a736130 R15: 00007ffc32028738 [ 331.421232][ T9479] [ 333.019425][ T9496] random: crng reseeded on system resumption [ 333.866606][ T9502] netlink: 'syz.6.1002': attribute type 10 has an invalid length. [ 333.876181][ T9502] netlink: 212848 bytes leftover after parsing attributes in process `syz.6.1002'. [ 333.911160][ T5840] usb 7-1: USB disconnect, device number 4 [ 333.959855][ T9499] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 334.477680][ T9497] ebt_limit: overflow, try lower: 0/0 [ 334.515271][ T9509] fuse: Bad value for 'fd' [ 334.859495][ T29] audit: type=1326 audit(1731630118.879:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9515 comm="syz.6.1005" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f497297e719 code=0x0 [ 335.037875][ T9522] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 335.201421][ T9524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1007'. [ 335.419849][ T9524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1007'. [ 336.727880][ T9544] netlink: 'syz.0.1011': attribute type 1 has an invalid length. [ 337.006647][ T9555] FAULT_INJECTION: forcing a failure. [ 337.006647][ T9555] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 337.020198][ T9555] CPU: 0 UID: 0 PID: 9555 Comm: syz.5.1015 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 337.030898][ T9555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 337.040966][ T9555] Call Trace: [ 337.044256][ T9555] [ 337.047199][ T9555] dump_stack_lvl+0x241/0x360 [ 337.052072][ T9555] ? __pfx_dump_stack_lvl+0x10/0x10 [ 337.057294][ T9555] ? __pfx__printk+0x10/0x10 [ 337.061903][ T9555] ? __pfx_lock_release+0x10/0x10 [ 337.066951][ T9555] should_fail_ex+0x3b0/0x4e0 [ 337.071650][ T9555] _copy_from_user+0x2f/0xc0 [ 337.076251][ T9555] copy_msghdr_from_user+0xae/0x680 [ 337.081467][ T9555] ? __pfx___might_resched+0x10/0x10 [ 337.086814][ T9555] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 337.093084][ T9555] ? rcu_is_watching+0x15/0xb0 [ 337.097870][ T9555] ? __might_fault+0xaa/0x120 [ 337.102567][ T9555] do_recvmmsg+0x3f9/0xad0 [ 337.107015][ T9555] ? __pfx_do_recvmmsg+0x10/0x10 [ 337.111987][ T9555] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 337.118010][ T9555] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 337.124015][ T9555] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 337.130389][ T9555] __x64_sys_recvmmsg+0x199/0x250 [ 337.135433][ T9555] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 337.140997][ T9555] ? do_syscall_64+0x100/0x230 [ 337.145779][ T9555] ? do_syscall_64+0xb6/0x230 [ 337.150490][ T9555] do_syscall_64+0xf3/0x230 [ 337.155022][ T9555] ? clear_bhb_loop+0x35/0x90 [ 337.159719][ T9555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.165627][ T9555] RIP: 0033:0x7fcb2a57e719 [ 337.170056][ T9555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.189676][ T9555] RSP: 002b:00007fcb2b332038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 337.198107][ T9555] RAX: ffffffffffffffda RBX: 00007fcb2a736130 RCX: 00007fcb2a57e719 [ 337.206089][ T9555] RDX: 0000000000000600 RSI: 0000000020003700 RDI: 0000000000000006 [ 337.214073][ T9555] RBP: 00007fcb2b332090 R08: 0000000000000000 R09: 0000000000000000 [ 337.222087][ T9555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 337.230073][ T9555] R13: 0000000000000000 R14: 00007fcb2a736130 R15: 00007ffc32028738 [ 337.238073][ T9555] [ 338.597364][ T9578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1023'. [ 338.607783][ T29] audit: type=1326 audit(1731630122.579:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9574 comm="syz.2.1022" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f69239756e7 code=0x0 [ 340.385762][ T9598] gretap0: entered promiscuous mode [ 340.404181][ T9598] macsec1: entered promiscuous mode [ 340.425950][ T9602] FAULT_INJECTION: forcing a failure. [ 340.425950][ T9602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 340.426743][ T9598] gretap0: left promiscuous mode [ 340.529213][ T9602] CPU: 0 UID: 0 PID: 9602 Comm: syz.5.1030 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 340.539943][ T9602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 340.550026][ T9602] Call Trace: [ 340.553322][ T9602] [ 340.556269][ T9602] dump_stack_lvl+0x241/0x360 [ 340.560980][ T9602] ? __pfx_dump_stack_lvl+0x10/0x10 [ 340.566213][ T9602] ? __pfx__printk+0x10/0x10 [ 340.570837][ T9602] ? snprintf+0xda/0x120 [ 340.575111][ T9602] should_fail_ex+0x3b0/0x4e0 [ 340.579812][ T9602] _copy_to_user+0x31/0xb0 [ 340.584251][ T9602] simple_read_from_buffer+0xca/0x150 [ 340.589657][ T9602] proc_fail_nth_read+0x1e9/0x250 [ 340.594717][ T9602] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 340.600356][ T9602] ? rw_verify_area+0x55e/0x6f0 [ 340.605235][ T9602] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 340.610807][ T9602] vfs_read+0x1fc/0xb70 [ 340.615004][ T9602] ? fdget_pos+0x24e/0x320 [ 340.619466][ T9602] ? __pfx_vfs_read+0x10/0x10 [ 340.624175][ T9602] ? __fget_files+0x3f3/0x470 [ 340.628889][ T9602] ? fdget_pos+0x24e/0x320 [ 340.633335][ T9602] ksys_read+0x183/0x2b0 [ 340.637606][ T9602] ? __pfx_ksys_read+0x10/0x10 [ 340.642399][ T9602] ? do_syscall_64+0x100/0x230 [ 340.647192][ T9602] ? do_syscall_64+0xb6/0x230 [ 340.651898][ T9602] do_syscall_64+0xf3/0x230 [ 340.656690][ T9602] ? clear_bhb_loop+0x35/0x90 [ 340.661402][ T9602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.667321][ T9602] RIP: 0033:0x7fcb2a57d15c [ 340.671759][ T9602] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 340.691390][ T9602] RSP: 002b:00007fcb2b374030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 340.699834][ T9602] RAX: ffffffffffffffda RBX: 00007fcb2a735f80 RCX: 00007fcb2a57d15c [ 340.707837][ T9602] RDX: 000000000000000f RSI: 00007fcb2b3740a0 RDI: 0000000000000004 [ 340.715830][ T9602] RBP: 00007fcb2b374090 R08: 0000000000000000 R09: 0000000000000000 [ 340.723826][ T9602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 340.731818][ T9602] R13: 0000000000000000 R14: 00007fcb2a735f80 R15: 00007ffc32028738 [ 340.739825][ T9602] [ 340.907827][ T9612] binder: 9608:9612 ioctl c00c620f 20000340 returned -22 [ 341.102763][ T9612] sp0: Synchronizing with TNC [ 341.673945][ T29] audit: type=1326 audit(1731630125.690:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9618 comm="syz.5.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2a57e719 code=0x7ffc0000 [ 341.729322][ T29] audit: type=1326 audit(1731630125.710:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9618 comm="syz.5.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2a57e719 code=0x7ffc0000 [ 342.090923][ T29] audit: type=1326 audit(1731630125.720:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9618 comm="syz.5.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fcb2a57e719 code=0x7ffc0000 [ 342.229402][ T29] audit: type=1326 audit(1731630125.720:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9618 comm="syz.5.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2a57e719 code=0x7ffc0000 [ 342.487409][ T29] audit: type=1326 audit(1731630125.720:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9618 comm="syz.5.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2a57e719 code=0x7ffc0000 [ 343.178869][ T29] audit: type=1326 audit(1731630125.720:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9618 comm="syz.5.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7fcb2a57e719 code=0x7ffc0000 [ 343.246529][ T29] audit: type=1326 audit(1731630125.720:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9618 comm="syz.5.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2a57e719 code=0x7ffc0000 [ 343.273113][ T29] audit: type=1326 audit(1731630125.720:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9618 comm="syz.5.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcb2a57e719 code=0x7ffc0000 [ 343.294934][ T29] audit: type=1326 audit(1731630125.720:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9618 comm="syz.5.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2a57e719 code=0x7ffc0000 [ 343.316739][ T29] audit: type=1326 audit(1731630125.720:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9618 comm="syz.5.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fcb2a57e719 code=0x7ffc0000 [ 343.549071][ T9640] Process accounting resumed [ 344.624397][ T9657] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1038'. [ 344.637509][ T9656] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1038'. [ 344.757307][ T9664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1049'. [ 344.797444][ T9664] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1049'. [ 344.808620][ T9664] netlink: 'syz.4.1049': attribute type 11 has an invalid length. [ 345.518127][ T9677] binder: 9670:9677 ioctl c00c620f 20000340 returned -22 [ 345.576085][ T9677] sp0: Synchronizing with TNC [ 346.605182][ T9692] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1056'. [ 346.841729][ T5942] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 346.986976][ T51] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 347.053766][ T9692] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1056'. [ 347.147224][ T5942] usb 7-1: Using ep0 maxpacket: 32 [ 347.148419][ T51] usb 5-1: Using ep0 maxpacket: 32 [ 347.193919][ T51] usb 5-1: config 1 interface 0 altsetting 171 bulk endpoint 0x3 has invalid maxpacket 64 [ 347.237175][ T5942] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 347.246417][ T51] usb 5-1: config 1 interface 0 altsetting 171 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 347.345541][ T5942] usb 7-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 347.363841][ T51] usb 5-1: config 1 interface 0 has no altsetting 0 [ 347.364745][ T5942] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.391410][ T5942] usb 7-1: Product: syz [ 347.395612][ T5942] usb 7-1: Manufacturer: syz [ 347.399152][ T51] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 347.426751][ T5942] usb 7-1: SerialNumber: syz [ 347.433783][ T5942] usb 7-1: config 0 descriptor?? [ 347.447412][ T9686] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 347.457021][ T51] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.463340][ T5942] hub 7-1:0.0: bad descriptor, ignoring hub [ 347.481411][ T5942] hub 7-1:0.0: probe with driver hub failed with error -5 [ 347.487467][ T51] usb 5-1: Product: syz [ 347.492788][ T51] usb 5-1: Manufacturer: syz [ 347.498229][ T51] usb 5-1: SerialNumber: syz [ 347.509799][ T9696] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 347.537883][ T5942] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input20 [ 347.691040][ C0] usbtouchscreen 7-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 347.691046][ T5917] usb 7-1: USB disconnect, device number 5 [ 348.031835][ T9713] overlayfs: overlapping lowerdir path [ 348.810269][ T51] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 348.850555][ T51] usb 5-1: USB disconnect, device number 27 [ 349.182471][ T9734] binder: 9726:9734 ioctl c00c620f 20000340 returned -22 [ 349.506659][ T5942] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 349.706625][ T5942] usb 7-1: Using ep0 maxpacket: 8 [ 349.727524][ T5942] usb 7-1: config 9 has no interfaces? [ 349.738183][ T5942] usb 7-1: New USB device found, idVendor=100d, idProduct=3342, bcdDevice=41.71 [ 349.813047][ T5942] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.834426][ T5942] usb 7-1: Product: syz [ 349.843498][ T9739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1073'. [ 349.846172][ T5942] usb 7-1: Manufacturer: syz [ 349.883502][ T5942] usb 7-1: SerialNumber: syz [ 350.009313][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 350.009330][ T29] audit: type=1800 audit(1731630134.031:95): pid=9745 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.1077" name="/" dev="9p" ino=2 res=0 errno=0 [ 350.061615][ T29] audit: type=1326 audit(1731630134.051:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9743 comm="syz.2.1076" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f692397e719 code=0x7ffe0000 [ 351.163249][ T9753] overlayfs: overlapping lowerdir path [ 352.053177][ T9772] loop2: detected capacity change from 0 to 7 [ 352.552686][ T9772] Dev loop2: unable to read RDB block 7 [ 352.560612][ T9772] loop2: unable to read partition table [ 352.566653][ T9772] loop2: partition table beyond EOD, truncated [ 352.573054][ T9772] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 352.592481][ T5942] usb 7-1: USB disconnect, device number 6 [ 353.606029][ T29] audit: type=1804 audit(1731630137.611:97): pid=9786 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.1089" name="/newroot/237/bus/bus" dev="overlay" ino=1342 res=1 errno=0 [ 353.674203][ T9776] binder: 9775:9776 ioctl c00c620f 20000340 returned -22 [ 353.812323][ T9776] sp0: Synchronizing with TNC [ 355.776120][ T5923] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 356.653432][ T9819] netlink: 'syz.5.1098': attribute type 10 has an invalid length. [ 356.671759][ T9819] netlink: 212848 bytes leftover after parsing attributes in process `syz.5.1098'. [ 356.728048][ T5923] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 356.737422][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.746738][ T5923] usb 5-1: config 0 descriptor?? [ 356.757191][ T5923] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 356.971880][ T5923] gp8psk: usb out operation failed. [ 356.983467][ T5923] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 357.023955][ T5923] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 357.080398][ T5923] usb 5-1: USB disconnect, device number 28 [ 357.145700][ T5917] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 357.178481][ T9837] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 357.316958][ T5917] usb 7-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 358.063170][ T5917] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.129678][ T5917] usb 7-1: Product: syz [ 358.145424][ T5917] usb 7-1: Manufacturer: syz [ 358.151276][ T5917] usb 7-1: SerialNumber: syz [ 358.191665][ T5917] usb 7-1: config 0 descriptor?? [ 358.205568][ T5879] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 358.336496][ T9853] FAULT_INJECTION: forcing a failure. [ 358.336496][ T9853] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 358.365902][ T5879] usb 6-1: Using ep0 maxpacket: 16 [ 358.381913][ T5879] usb 6-1: config 0 has an invalid interface number: 206 but max is 0 [ 358.396947][ T9853] CPU: 0 UID: 0 PID: 9853 Comm: syz.0.1109 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 358.407652][ T9853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 358.417708][ T9853] Call Trace: [ 358.420986][ T9853] [ 358.423911][ T9853] dump_stack_lvl+0x241/0x360 [ 358.428596][ T9853] ? __pfx_dump_stack_lvl+0x10/0x10 [ 358.433801][ T9853] ? __pfx__printk+0x10/0x10 [ 358.438392][ T9853] ? ktime_get_ts64+0xa8/0x2b0 [ 358.443159][ T9853] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 358.449403][ T9853] should_fail_ex+0x3b0/0x4e0 [ 358.454083][ T9853] _copy_to_user+0x31/0xb0 [ 358.458496][ T9853] put_timespec64+0xfa/0x150 [ 358.463089][ T9853] ? __pfx_put_timespec64+0x10/0x10 [ 358.468455][ T9853] poll_select_finish+0x57d/0x7d0 [ 358.473933][ T9853] ? __pfx_poll_select_finish+0x10/0x10 [ 358.479496][ T9853] ? __pfx_set_user_sigmask+0x10/0x10 [ 358.484869][ T9853] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 358.490855][ T9853] __se_sys_pselect6+0x33a/0x3f0 [ 358.495816][ T9853] ? __pfx___se_sys_pselect6+0x10/0x10 [ 358.501286][ T9853] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 358.507641][ T9853] ? do_syscall_64+0x100/0x230 [ 358.512412][ T9853] ? __x64_sys_pselect6+0x21/0xf0 [ 358.517446][ T9853] do_syscall_64+0xf3/0x230 [ 358.521953][ T9853] ? clear_bhb_loop+0x35/0x90 [ 358.526629][ T9853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.532520][ T9853] RIP: 0033:0x7f4ffdd7e719 [ 358.536931][ T9853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.556548][ T9853] RSP: 002b:00007f4ffebc6038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 358.564967][ T9853] RAX: ffffffffffffffda RBX: 00007f4ffdf36058 RCX: 00007f4ffdd7e719 [ 358.572933][ T9853] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000040 [ 358.580899][ T9853] RBP: 00007f4ffebc6090 R08: 0000000020002880 R09: 0000000000000000 [ 358.588869][ T9853] R10: 0000000020002840 R11: 0000000000000246 R12: 0000000000000001 [ 358.596837][ T9853] R13: 0000000000000000 R14: 00007f4ffdf36058 R15: 00007ffdfb7a5008 [ 358.604811][ T9853] [ 358.614338][ T5879] usb 6-1: config 0 has no interface number 0 [ 358.636744][ T5879] usb 6-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 358.667955][ T5917] hso 7-1:0.0: Failed to find BULK IN ep [ 358.669598][ T5879] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.703606][ T5917] usb-storage 7-1:0.0: USB Mass Storage device detected [ 358.705867][ T5879] usb 6-1: Product: syz [ 358.749525][ T5879] usb 6-1: Manufacturer: syz [ 358.758698][ T5879] usb 6-1: SerialNumber: syz [ 358.776615][ T5879] usb 6-1: config 0 descriptor?? [ 358.784051][ T5879] radioshark2 6-1:0.206: Invalid radioSHARK2 device [ 358.794295][ T5879] radioshark2 6-1:0.206: probe with driver radioshark2 failed with error -22 [ 358.803550][ T5879] usbhid 6-1:0.206: couldn't find an input interrupt endpoint [ 358.996624][ T5917] usb 6-1: USB disconnect, device number 16 [ 359.061163][ T9852] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 359.067942][ T9852] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 359.084755][ T9852] vhci_hcd vhci_hcd.0: Device attached [ 359.255717][ T5879] vhci_hcd: vhci_device speed not set [ 359.315449][ T5879] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 359.337569][ T5942] usb 5-1: new low-speed USB device number 29 using dummy_hcd [ 359.421273][ T9878] overlayfs: failed to resolve 'redirect_dir=off': -2 [ 359.434960][ T9878] overlayfs: failed to resolve './file0/../file0/../file0': -2 [ 359.485523][ T5942] usb 5-1: device descriptor read/64, error -71 [ 359.735609][ T5942] usb 5-1: new low-speed USB device number 30 using dummy_hcd [ 359.803875][ T5880] usb 7-1: USB disconnect, device number 7 [ 359.885438][ T9884] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1117'. [ 359.894853][ T9884] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1117'. [ 359.906329][ T5942] usb 5-1: device descriptor read/64, error -71 [ 360.046468][ T5942] usb usb5-port1: attempt power cycle [ 360.485411][ T5942] usb 5-1: new low-speed USB device number 31 using dummy_hcd [ 360.904113][ T9900] siw: device registration error -23 [ 361.311759][ T5942] usb 5-1: device descriptor read/8, error -71 [ 361.336540][ T9893] ptrace attach of "./syz-executor exec"[9902] was attempted by "\x5c [ 361.371086][ T9865] vhci_hcd: connection reset by peer [ 361.668086][ T11] vhci_hcd: stop threads [ 361.677669][ T11] vhci_hcd: release socket [ 361.742719][ T11] vhci_hcd: disconnect device [ 361.742785][ T9911] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1123'. [ 363.053084][ T9929] netlink: 'syz.6.1129': attribute type 10 has an invalid length. [ 363.065410][ T5917] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 363.123576][ T9929] netlink: 212848 bytes leftover after parsing attributes in process `syz.6.1129'. [ 363.185419][ T51] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 363.870135][ T5917] usb 6-1: Using ep0 maxpacket: 16 [ 364.209908][ T5917] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 364.219175][ T5917] usb 6-1: config 0 has no interface number 0 [ 364.243420][ T51] usb 3-1: config 36 has an invalid descriptor of length 49, skipping remainder of the config [ 364.257907][ T51] usb 3-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 364.285217][ T5917] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 364.295124][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.303280][ T5917] usb 6-1: Product: syz [ 364.307809][ T5917] usb 6-1: Manufacturer: syz [ 364.312549][ T5917] usb 6-1: SerialNumber: syz [ 364.346940][ T5917] usb 6-1: config 0 descriptor?? [ 364.361986][ T51] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 364.371303][ T51] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 364.389359][ T51] usb 3-1: Manufacturer: syz [ 364.394135][ T51] usb 3-1: SerialNumber: syz [ 364.422156][ T5917] usb 6-1: can't set config #0, error -71 [ 364.455206][ T5879] vhci_hcd: vhci_device speed not set [ 364.583401][ T5917] usb 6-1: USB disconnect, device number 17 [ 364.705797][ T9942] xt_hashlimit: max too large, truncated to 1048576 [ 364.806442][ T9943] netlink: 'syz.6.1133': attribute type 7 has an invalid length. [ 364.814278][ T9943] netlink: 244 bytes leftover after parsing attributes in process `syz.6.1133'. [ 365.479995][ T9950] netlink: 'syz.5.1134': attribute type 1 has an invalid length. [ 365.487894][ T9950] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.1134'. [ 366.288636][ T9951] snd_dummy snd_dummy.0: control 0:-2:0:syz1:0 is already present [ 366.299862][ T9951] random: crng reseeded on system resumption [ 366.942667][ T51] usbhid 3-1:36.0: couldn't find an input interrupt endpoint [ 366.954308][ T51] usb 3-1: USB disconnect, device number 9 [ 367.208684][ T9960] pimreg: entered allmulticast mode [ 367.425057][ T51] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 367.433563][ T5923] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 367.584762][ T51] usb 5-1: Using ep0 maxpacket: 32 [ 367.591484][ T51] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 367.603568][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.614850][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.625348][ T51] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 367.636264][ T5923] usb 3-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 367.645330][ T51] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.653654][ T51] usb 5-1: Product: syz [ 367.658200][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.666267][ T51] usb 5-1: Manufacturer: syz [ 367.670853][ T51] usb 5-1: SerialNumber: syz [ 367.678297][ T5923] usb 3-1: config 0 descriptor?? [ 367.695814][ T51] usb 5-1: config 0 descriptor?? [ 367.702973][ T9955] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 367.713755][ T51] hub 5-1:0.0: bad descriptor, ignoring hub [ 367.720643][ T51] hub 5-1:0.0: probe with driver hub failed with error -5 [ 367.730506][ T51] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input21 [ 368.011942][ T5880] usb 5-1: USB disconnect, device number 33 [ 368.012080][ C1] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 368.656540][ T5923] usbhid 3-1:0.0: can't add hid device: -71 [ 368.662608][ T5923] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 368.687413][ T5923] usb 3-1: USB disconnect, device number 10 [ 369.717455][ T9995] netlink: 'syz.2.1147': attribute type 29 has an invalid length. [ 369.816582][T10000] netlink: 'syz.2.1147': attribute type 29 has an invalid length. [ 369.859022][T10000] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1147'. [ 369.928978][ T5880] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 370.222857][ T5880] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 370.384764][ T5880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.392962][T10004] netlink: 'syz.4.1150': attribute type 58 has an invalid length. [ 370.424854][ T5880] usb 6-1: Product: syz [ 370.431617][ T5880] usb 6-1: Manufacturer: syz [ 370.442127][ T5880] usb 6-1: SerialNumber: syz [ 370.449128][ T5880] usb 6-1: config 0 descriptor?? [ 370.457731][ T5880] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 018 [ 370.684886][ T25] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 370.685687][T10012] binder: 10010:10012 ioctl c00c620f 20000340 returned -22 [ 370.894795][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 370.894969][ T5880] (null): failure reading functionality [ 370.906691][ T25] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 370.913750][T10012] sp0: Synchronizing with TNC [ 370.915563][ T25] usb 5-1: config 0 has no interface number 0 [ 370.921565][ T5880] i2c i2c-1: failure reading functionality [ 370.996333][ T25] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 371.090086][ T25] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 371.139501][ T5880] i2c i2c-1: connected i2c-tiny-usb device [ 371.161897][ T5880] usb 6-1: USB disconnect, device number 18 [ 371.163954][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.196722][ T25] usb 5-1: Product: syz [ 371.206262][ T25] usb 5-1: Manufacturer: syz [ 371.210895][ T25] usb 5-1: SerialNumber: syz [ 371.221460][ T25] usb 5-1: config 0 descriptor?? [ 371.535637][T10014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1154'. [ 371.808566][ T5923] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 372.234034][T10004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.255308][T10004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.267755][ T25] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 372.279240][ T25] usb 5-1: USB disconnect, device number 34 [ 372.405386][ T5923] usb 6-1: Using ep0 maxpacket: 32 [ 372.426070][ T5923] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.446983][ T5923] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.467546][ T5923] usb 6-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 372.476814][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.486956][ T5923] usb 6-1: config 0 descriptor?? [ 372.697065][T10035] binder: 10033:10035 ioctl c00c620f 20000340 returned -22 [ 372.762731][T10035] sp0: Synchronizing with TNC [ 373.379634][ T5923] hkems 0003:2006:0118.0008: unknown main item tag 0x0 [ 373.417842][ T5923] hkems 0003:2006:0118.0008: unknown main item tag 0x0 [ 373.431620][ T5923] hkems 0003:2006:0118.0008: unknown main item tag 0x0 [ 373.459741][ T5923] hkems 0003:2006:0118.0008: unknown main item tag 0x0 [ 373.484538][ T5923] hkems 0003:2006:0118.0008: unknown main item tag 0x0 [ 373.507049][ T5923] hkems 0003:2006:0118.0008: hidraw0: USB HID v0.00 Device [HID 2006:0118] on usb-dummy_hcd.5-1/input0 [ 373.534842][ T5923] hkems 0003:2006:0118.0008: no inputs found [ 373.554899][ T5923] hkems 0003:2006:0118.0008: force feedback init failed [ 373.629115][T10039] netlink: 'syz.6.1163': attribute type 10 has an invalid length. [ 373.650375][T10039] netlink: 212848 bytes leftover after parsing attributes in process `syz.6.1163'. [ 375.100168][ T5879] usb 6-1: USB disconnect, device number 19 [ 376.344160][T10079] netlink: 'syz.4.1174': attribute type 3 has an invalid length. [ 376.353431][T10080] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1172'. [ 376.359163][T10079] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.1174'. [ 376.424322][ T9] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 376.734716][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 376.761665][ T9] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 376.824356][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.223307][ T9] usb 6-1: config 0 descriptor?? [ 377.259582][T10088] xt_CT: No such helper "syz1" [ 377.267536][ T9] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 377.453670][T10094] netlink: 'syz.4.1178': attribute type 10 has an invalid length. [ 377.469960][T10094] netlink: 212848 bytes leftover after parsing attributes in process `syz.4.1178'. [ 378.886922][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.896697][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.993193][ T9] gspca_vc032x: reg_w err -110 [ 378.999226][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 379.007289][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 379.012658][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 379.018172][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 379.023681][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 379.029231][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 379.034672][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 379.040085][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 379.045500][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 379.050886][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 379.056388][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 379.061768][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 379.067191][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 379.072563][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 379.077957][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 379.083335][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 379.089178][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 379.094761][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 379.100400][ T9] gspca_vc032x: Unknown sensor... [ 379.105918][ T9] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 379.124402][ T29] audit: type=1326 audit(1731630163.139:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10127 comm="syz.2.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692397e719 code=0x7ffc0000 [ 379.132168][T10074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.145933][ C1] vkms_vblank_simulate: vblank timer overrun [ 379.161716][ T29] audit: type=1326 audit(1731630163.179:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10127 comm="syz.2.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692397e719 code=0x7ffc0000 [ 379.164862][T10074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.194019][ T29] audit: type=1326 audit(1731630163.209:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10127 comm="syz.2.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f692397e719 code=0x7ffc0000 [ 379.294717][ T29] audit: type=1326 audit(1731630163.209:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10127 comm="syz.2.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692397e719 code=0x7ffc0000 [ 379.329326][ T29] audit: type=1326 audit(1731630163.209:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10127 comm="syz.2.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692397e719 code=0x7ffc0000 [ 379.352947][ T29] audit: type=1326 audit(1731630163.239:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10127 comm="syz.2.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f692397e719 code=0x7ffc0000 [ 379.379168][T10131] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1186'. [ 379.395428][ T29] audit: type=1326 audit(1731630163.239:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10127 comm="syz.2.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692397e719 code=0x7ffc0000 [ 379.415785][T10131] ip6gretap0: entered promiscuous mode [ 379.469558][ T29] audit: type=1326 audit(1731630163.239:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10127 comm="syz.2.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f692397e719 code=0x7ffc0000 [ 379.492107][ T29] audit: type=1326 audit(1731630163.239:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10127 comm="syz.2.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692397e719 code=0x7ffc0000 [ 379.513653][ C1] vkms_vblank_simulate: vblank timer overrun [ 379.526235][ T29] audit: type=1326 audit(1731630163.239:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10127 comm="syz.2.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f692397e719 code=0x7ffc0000 [ 379.735239][ T5879] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 380.823135][ T5879] usb 5-1: config 255 has an invalid interface number: 225 but max is 0 [ 381.158188][T10152] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1191'. [ 381.211685][ T5917] usb 6-1: USB disconnect, device number 20 [ 381.363421][ T5879] usb 5-1: config 255 has no interface number 0 [ 381.369825][ T5879] usb 5-1: config 255 interface 225 has no altsetting 0 [ 381.381284][ T5879] usb 5-1: New USB device found, idVendor=045e, idProduct=045a, bcdDevice=a1.60 [ 381.390450][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.398764][ T5879] usb 5-1: Product: syz [ 381.402939][ T5879] usb 5-1: Manufacturer: syz [ 381.407758][ T5879] usb 5-1: SerialNumber: syz [ 381.456635][T10156] 9pnet: p9_errstr2errno: server reported unknown error kýÇ…ÊÂòÑ [ 382.830070][ T5879] usb 5-1: USB disconnect, device number 35 [ 384.672066][T10195] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1202'. [ 384.707726][ T5879] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 386.992866][T10215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.004970][T10215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.624781][ T5879] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 387.776191][ T5879] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 387.784805][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.839704][ T5879] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 387.860494][ T5879] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 387.879152][ T5879] usb 3-1: Manufacturer: syz [ 387.897712][ T5879] usb 3-1: config 0 descriptor?? [ 388.029849][T10223] netlink: 'syz.6.1211': attribute type 10 has an invalid length. [ 388.046014][ T5879] rc_core: IR keymap rc-hauppauge not found [ 388.068291][ T5879] Registered IR keymap rc-empty [ 388.085313][T10223] netlink: 212848 bytes leftover after parsing attributes in process `syz.6.1211'. [ 388.097234][ T5879] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 388.123936][ T5879] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input23 [ 388.696688][ T5879] usb 3-1: USB disconnect, device number 12 [ 389.147349][T10234] FAULT_INJECTION: forcing a failure. [ 389.147349][T10234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 389.160788][T10234] CPU: 1 UID: 0 PID: 10234 Comm: syz.5.1212 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 389.171566][T10234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 389.181615][T10234] Call Trace: [ 389.184886][T10234] [ 389.187811][T10234] dump_stack_lvl+0x241/0x360 [ 389.192491][T10234] ? __pfx_dump_stack_lvl+0x10/0x10 [ 389.197694][T10234] ? __pfx__printk+0x10/0x10 [ 389.202372][T10234] should_fail_ex+0x3b0/0x4e0 [ 389.207047][T10234] strncpy_from_user+0x36/0x260 [ 389.211912][T10234] getname_flags+0xf1/0x540 [ 389.216410][T10234] ? __might_fault+0xc6/0x120 [ 389.221089][T10234] user_path_at+0x24/0x60 [ 389.225416][T10234] __se_sys_mount_setattr+0x6a9/0x1c10 [ 389.230882][T10234] ? __pfx___se_sys_mount_setattr+0x10/0x10 [ 389.236774][T10234] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 389.242760][T10234] ? do_syscall_64+0x100/0x230 [ 389.247524][T10234] ? __x64_sys_mount_setattr+0x20/0xc0 [ 389.252984][T10234] do_syscall_64+0xf3/0x230 [ 389.257488][T10234] ? clear_bhb_loop+0x35/0x90 [ 389.262168][T10234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.268059][T10234] RIP: 0033:0x7fcb2a57e719 [ 389.272472][T10234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.292071][T10234] RSP: 002b:00007fcb2b332038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ba [ 389.300483][T10234] RAX: ffffffffffffffda RBX: 00007fcb2a736130 RCX: 00007fcb2a57e719 [ 389.308446][T10234] RDX: 0000000000000000 RSI: 0000000020001d80 RDI: 0000000000000005 [ 389.316411][T10234] RBP: 00007fcb2b332090 R08: 0000000000000020 R09: 0000000000000000 [ 389.324372][T10234] R10: 0000000020001dc0 R11: 0000000000000246 R12: 0000000000000001 [ 389.332347][T10234] R13: 0000000000000000 R14: 00007fcb2a736130 R15: 00007ffc32028738 [ 389.340353][T10234] [ 389.686153][T10237] overlayfs: overlapping lowerdir path [ 391.074418][T10251] netlink: 'syz.5.1221': attribute type 10 has an invalid length. [ 391.082790][T10251] netlink: 212848 bytes leftover after parsing attributes in process `syz.5.1221'. [ 396.333982][T10322] ceph: No mds server is up or the cluster is laggy [ 396.400174][T10332] netlink: 'syz.2.1243': attribute type 1 has an invalid length. [ 396.421622][T10332] netlink: 'syz.2.1243': attribute type 16 has an invalid length. [ 396.440034][T10332] netlink: 'syz.2.1243': attribute type 3 has an invalid length. [ 396.467262][ T5840] libceph: connect (1)[c::]:6789 error -101 [ 396.473730][ T5840] libceph: mon0 (1)[c::]:6789 connect error [ 396.496028][T10332] netlink: 'syz.2.1243': attribute type 1 has an invalid length. [ 396.503879][T10332] netlink: 'syz.2.1243': attribute type 1 has an invalid length. [ 396.571111][T10332] netlink: 'syz.2.1243': attribute type 2 has an invalid length. [ 396.580456][T10332] netlink: 64006 bytes leftover after parsing attributes in process `syz.2.1243'. [ 397.320936][T10349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1249'. [ 397.629878][T10349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1249'. [ 397.719014][T10356] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1250'. [ 397.771296][T10356] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1250'. [ 398.045206][T10360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1252'. [ 398.738254][T10372] netlink: 300 bytes leftover after parsing attributes in process `syz.2.1257'. [ 398.780638][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 398.780657][ T29] audit: type=1800 audit(1731630182.779:109): pid=10373 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.1255" name="/" dev="fuse" ino=1 res=0 errno=0 [ 399.031429][T10383] loop2: detected capacity change from 0 to 7 [ 399.062986][T10383] Dev loop2: unable to read RDB block 7 [ 399.063311][T10383] loop2: unable to read partition table [ 399.064153][T10383] loop2: partition table beyond EOD, truncated [ 399.064237][T10383] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 399.466541][T10373] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.1255'. [ 399.466615][T10373] netlink: 6332 bytes leftover after parsing attributes in process `syz.0.1255'. [ 399.541836][T10377] tty tty28: ldisc open failed (-12), clearing slot 27 [ 399.738918][T10395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1262'. [ 401.583195][T10415] tipc: Failed to clone mcast rcv buffer [ 402.335051][ T5840] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 402.415539][T10431] loop2: detected capacity change from 0 to 7 [ 402.561897][T10431] Dev loop2: unable to read RDB block 7 [ 402.567959][T10431] loop2: unable to read partition table [ 402.574536][T10431] loop2: partition table beyond EOD, truncated [ 402.581305][T10431] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 402.682857][ T5840] usb 5-1: New USB device found, idVendor=ddc9, idProduct=1ea3, bcdDevice=dc.1b [ 402.786677][ T5840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.976857][ T5840] usb 5-1: config 0 descriptor?? [ 402.985124][ T5840] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 403.543015][ T5840] usb 5-1: USB disconnect, device number 36 [ 404.265551][T10453] netlink: 'syz.0.1275': attribute type 10 has an invalid length. [ 404.273720][T10453] __nla_validate_parse: 2 callbacks suppressed [ 404.273733][T10453] netlink: 212848 bytes leftover after parsing attributes in process `syz.0.1275'. [ 405.075989][T10457] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1278'. [ 405.960750][T10470] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1282'. [ 405.979388][T10470] bridge_slave_1: left allmulticast mode [ 406.000673][T10470] bridge_slave_1: left promiscuous mode [ 406.024908][T10470] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.054074][T10470] bridge_slave_0: left allmulticast mode [ 406.072852][T10470] bridge_slave_0: left promiscuous mode [ 406.079092][T10470] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.249928][T10482] FAULT_INJECTION: forcing a failure. [ 406.249928][T10482] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 406.291968][T10482] CPU: 0 UID: 0 PID: 10482 Comm: syz.4.1287 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 406.302786][T10482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 406.312857][T10482] Call Trace: [ 406.316149][T10482] [ 406.319091][T10482] dump_stack_lvl+0x241/0x360 [ 406.323792][T10482] ? __pfx_dump_stack_lvl+0x10/0x10 [ 406.329013][T10482] ? __pfx__printk+0x10/0x10 [ 406.333626][T10482] ? __pfx_lock_release+0x10/0x10 [ 406.338681][T10482] should_fail_ex+0x3b0/0x4e0 [ 406.343380][T10482] _copy_from_user+0x2f/0xc0 [ 406.347986][T10482] generic_map_update_batch+0x567/0x900 [ 406.353564][T10482] ? __pfx_generic_map_update_batch+0x10/0x10 [ 406.359653][T10482] ? __fget_files+0x29/0x470 [ 406.364273][T10482] ? __pfx_generic_map_update_batch+0x10/0x10 [ 406.370358][T10482] bpf_map_do_batch+0x39a/0x660 [ 406.375241][T10482] __sys_bpf+0x377/0x810 [ 406.379499][T10482] ? __pfx___sys_bpf+0x10/0x10 [ 406.384292][T10482] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 406.390294][T10482] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 406.396645][T10482] ? do_syscall_64+0x100/0x230 [ 406.401434][T10482] __x64_sys_bpf+0x7c/0x90 [ 406.405872][T10482] do_syscall_64+0xf3/0x230 [ 406.410393][T10482] ? clear_bhb_loop+0x35/0x90 [ 406.415090][T10482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.420995][T10482] RIP: 0033:0x7f91fab7e719 [ 406.425423][T10482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.445052][T10482] RSP: 002b:00007f91fba2d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 406.453493][T10482] RAX: ffffffffffffffda RBX: 00007f91fad35f80 RCX: 00007f91fab7e719 [ 406.461479][T10482] RDX: 0000000000000038 RSI: 0000000020000200 RDI: 000000000000001a [ 406.469556][T10482] RBP: 00007f91fba2d090 R08: 0000000000000000 R09: 0000000000000000 [ 406.477542][T10482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 406.485524][T10482] R13: 0000000000000000 R14: 00007f91fad35f80 R15: 00007fffd24505c8 [ 406.493519][T10482] [ 406.644539][T10488] xt_hashlimit: max too large, truncated to 1048576 [ 406.654967][ T25] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 406.805339][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 406.979320][ T25] usb 3-1: unable to get BOS descriptor or descriptor too short [ 406.997643][ T25] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 407.019348][ T25] usb 3-1: can't read configurations, error -71 [ 407.052946][T10496] netlink: 'syz.5.1292': attribute type 10 has an invalid length. [ 407.075189][T10496] netlink: 212848 bytes leftover after parsing attributes in process `syz.5.1292'. [ 407.729439][T10506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1296'. [ 407.796246][T10506] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 410.093564][T10542] netlink: 'syz.5.1308': attribute type 10 has an invalid length. [ 410.101797][T10542] netlink: 212848 bytes leftover after parsing attributes in process `syz.5.1308'. [ 410.227297][T10558] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1310'. [ 410.665010][ T5879] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 412.831635][T10577] FAULT_INJECTION: forcing a failure. [ 412.831635][T10577] name failslab, interval 1, probability 0, space 0, times 0 [ 412.853032][T10577] CPU: 1 UID: 0 PID: 10577 Comm: syz.2.1317 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 412.863827][T10577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 412.873894][T10577] Call Trace: [ 412.877187][T10577] [ 412.880128][T10577] dump_stack_lvl+0x241/0x360 [ 412.884835][T10577] ? __pfx_dump_stack_lvl+0x10/0x10 [ 412.890048][T10577] ? __pfx__printk+0x10/0x10 [ 412.894660][T10577] ? kmem_cache_alloc_lru_noprof+0x49/0x2b0 [ 412.900568][T10577] ? __pfx___might_resched+0x10/0x10 [ 412.905873][T10577] ? __lock_acquire+0x1384/0x2050 [ 412.910922][T10577] should_fail_ex+0x3b0/0x4e0 [ 412.915623][T10577] ? __d_alloc+0x31/0x700 [ 412.919970][T10577] should_failslab+0xac/0x100 [ 412.924664][T10577] ? __d_alloc+0x31/0x700 [ 412.929007][T10577] kmem_cache_alloc_lru_noprof+0x71/0x2b0 [ 412.934751][T10577] __d_alloc+0x31/0x700 [ 412.938930][T10577] d_alloc_parallel+0xdf/0x1600 [ 412.943797][T10577] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 412.949817][T10577] ? __d_lookup+0x64/0x7b0 [ 412.954246][T10577] ? __d_lookup+0x64/0x7b0 [ 412.958679][T10577] ? __pfx_d_alloc_parallel+0x10/0x10 [ 412.964064][T10577] ? __d_lookup+0x706/0x7b0 [ 412.968597][T10577] path_openat+0x9e6/0x3590 [ 412.973150][T10577] ? __pfx_path_openat+0x10/0x10 [ 412.978121][T10577] do_filp_open+0x235/0x490 [ 412.982645][T10577] ? __pfx_do_filp_open+0x10/0x10 [ 412.987710][T10577] ? _raw_spin_unlock+0x28/0x50 [ 412.992576][T10577] ? alloc_fd+0x5a1/0x640 [ 412.996936][T10577] do_sys_openat2+0x13e/0x1d0 [ 413.001632][T10577] ? __pfx_do_sys_openat2+0x10/0x10 [ 413.006858][T10577] __x64_sys_openat+0x247/0x2a0 [ 413.011726][T10577] ? __pfx___x64_sys_openat+0x10/0x10 [ 413.017120][T10577] ? do_syscall_64+0x100/0x230 [ 413.021904][T10577] ? do_syscall_64+0xb6/0x230 [ 413.026599][T10577] do_syscall_64+0xf3/0x230 [ 413.031117][T10577] ? clear_bhb_loop+0x35/0x90 [ 413.035811][T10577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.041717][T10577] RIP: 0033:0x7f692397e719 [ 413.046145][T10577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.065771][T10577] RSP: 002b:00007f6924799038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 413.074296][T10577] RAX: ffffffffffffffda RBX: 00007f6923b35f80 RCX: 00007f692397e719 [ 413.082286][T10577] RDX: 00000000000026e1 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 413.090272][T10577] RBP: 00007f6924799090 R08: 0000000000000000 R09: 0000000000000000 [ 413.098259][T10577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.106248][T10577] R13: 0000000000000000 R14: 00007f6923b35f80 R15: 00007ffe7d509ee8 [ 413.114267][T10577] [ 413.117430][ C1] vkms_vblank_simulate: vblank timer overrun [ 413.305252][ T5879] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 413.315636][ T5879] usb 7-1: can't read configurations, error -71 [ 413.574726][T10597] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1318'. [ 416.168545][T10611] fuse: Bad value for 'user_id' [ 416.173434][T10611] fuse: Bad value for 'user_id' [ 416.890252][T10640] netlink: 'syz.6.1333': attribute type 1 has an invalid length. [ 416.898683][T10618] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1329'. [ 416.918374][T10640] netlink: 'syz.6.1333': attribute type 2 has an invalid length. [ 417.178882][T10651] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1338'. [ 417.656308][T10660] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1340'. [ 417.709324][T10663] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1342'. [ 419.004843][ T25] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 419.155801][ T5907] libceph: connect (1)[c::]:6789 error -101 [ 419.162110][ T5907] libceph: mon0 (1)[c::]:6789 connect error [ 419.164877][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 419.182843][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 419.205314][T10685] ceph: No mds server is up or the cluster is laggy [ 419.239925][ T25] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 419.255299][ T5923] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 419.263473][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 419.283568][ T25] usb 3-1: SerialNumber: syz [ 419.299813][ T25] usb 3-1: config 0 descriptor?? [ 419.317664][ T25] usb 3-1: Found UVC 0.00 device (05ac:8501) [ 419.331951][ T25] usb 3-1: No valid video chain found. [ 419.358402][ T5840] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 419.404835][ T5923] usb 5-1: Using ep0 maxpacket: 8 [ 419.411689][ T5923] usb 5-1: config 0 has no interfaces? [ 419.418730][ T5923] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 419.430638][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.451758][ T5923] usb 5-1: config 0 descriptor?? [ 419.565576][ T5840] usb 6-1: Using ep0 maxpacket: 32 [ 419.591400][ T5840] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 419.602419][ T5840] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 419.619214][ T5840] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 419.646055][ T5840] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 419.670458][ T5840] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 419.682460][ T5840] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 419.693152][T10679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.698511][ T5840] usb 6-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 419.716179][T10679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.724170][ T5840] usb 6-1: New USB device found, idVendor=10cf, idProduct=8067, bcdDevice=2c.27 [ 419.734264][ T5840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.753965][ T5840] usb 6-1: Product: syz [ 419.762864][ T5840] usb 6-1: Manufacturer: syz [ 419.768732][ T5840] usb 6-1: SerialNumber: syz [ 419.801171][ T5840] usb 6-1: config 0 descriptor?? [ 419.809788][ T25] usb 5-1: USB disconnect, device number 37 [ 419.826338][T10682] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 419.863655][ T5840] vmk80xx 6-1:0.0: driver 'vmk80xx' failed to auto-configure device. [ 419.877279][ T5840] vmk80xx 6-1:0.0: probe with driver vmk80xx failed with error -22 [ 420.069067][ T5879] usb 6-1: USB disconnect, device number 21 [ 420.237683][ T25] usb 3-1: USB disconnect, device number 15 [ 422.605865][T10730] netlink: 248 bytes leftover after parsing attributes in process `syz.6.1363'. [ 422.654916][T10730] FAULT_INJECTION: forcing a failure. [ 422.654916][T10730] name failslab, interval 1, probability 0, space 0, times 0 [ 422.746975][T10732] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1362'. [ 422.756261][T10730] CPU: 1 UID: 0 PID: 10730 Comm: syz.6.1363 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 422.767058][T10730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 422.777128][T10730] Call Trace: [ 422.780426][T10730] [ 422.783369][T10730] dump_stack_lvl+0x241/0x360 [ 422.788076][T10730] ? __pfx_dump_stack_lvl+0x10/0x10 [ 422.793297][T10730] ? __pfx__printk+0x10/0x10 [ 422.797915][T10730] ? ref_tracker_alloc+0x332/0x490 [ 422.803050][T10730] should_fail_ex+0x3b0/0x4e0 [ 422.807748][T10730] ? skb_clone+0x20c/0x390 [ 422.812183][T10730] should_failslab+0xac/0x100 [ 422.816881][T10730] ? skb_clone+0x20c/0x390 [ 422.821318][T10730] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 422.826719][T10730] skb_clone+0x20c/0x390 [ 422.830990][T10730] __netlink_deliver_tap+0x3cc/0x7c0 [ 422.836307][T10730] ? netlink_deliver_tap+0x2e/0x1b0 [ 422.841521][T10730] netlink_deliver_tap+0x19d/0x1b0 [ 422.846674][T10730] netlink_sendskb+0x68/0x140 [ 422.851379][T10730] netlink_unicast+0x39d/0x990 [ 422.856180][T10730] ? __asan_memcpy+0x40/0x70 [ 422.860768][T10730] ? __pfx_netlink_unicast+0x10/0x10 [ 422.866048][T10730] netlink_rcv_skb+0x262/0x430 [ 422.870815][T10730] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 422.876349][T10730] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 422.881637][T10730] xfrm_netlink_rcv+0x79/0x90 [ 422.886308][T10730] netlink_unicast+0x7f6/0x990 [ 422.891064][T10730] ? __pfx_netlink_unicast+0x10/0x10 [ 422.896341][T10730] ? __virt_addr_valid+0x183/0x530 [ 422.901447][T10730] ? __check_object_size+0x48e/0x900 [ 422.906729][T10730] netlink_sendmsg+0x8e4/0xcb0 [ 422.911510][T10730] ? __pfx_netlink_sendmsg+0x10/0x10 [ 422.916792][T10730] ? __pfx_netlink_sendmsg+0x10/0x10 [ 422.922064][T10730] __sock_sendmsg+0x221/0x270 [ 422.926738][T10730] ____sys_sendmsg+0x52a/0x7e0 [ 422.931503][T10730] ? __pfx_____sys_sendmsg+0x10/0x10 [ 422.936788][T10730] __sys_sendmsg+0x292/0x380 [ 422.941368][T10730] ? __pfx___sys_sendmsg+0x10/0x10 [ 422.946486][T10730] ? __pfx_vfs_write+0x10/0x10 [ 422.951255][T10730] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 422.957578][T10730] ? do_syscall_64+0x100/0x230 [ 422.962333][T10730] ? do_syscall_64+0xb6/0x230 [ 422.967000][T10730] do_syscall_64+0xf3/0x230 [ 422.971499][T10730] ? clear_bhb_loop+0x35/0x90 [ 422.976178][T10730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.982068][T10730] RIP: 0033:0x7f497297e719 [ 422.986472][T10730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.006069][T10730] RSP: 002b:00007f4973799038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 423.014473][T10730] RAX: ffffffffffffffda RBX: 00007f4972b35f80 RCX: 00007f497297e719 [ 423.022435][T10730] RDX: 0000000004000850 RSI: 0000000020000000 RDI: 0000000000000003 [ 423.030400][T10730] RBP: 00007f4973799090 R08: 0000000000000000 R09: 0000000000000000 [ 423.038365][T10730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.046343][T10730] R13: 0000000000000000 R14: 00007f4972b35f80 R15: 00007fff4c9697d8 [ 423.054314][T10730] [ 423.057366][ C1] vkms_vblank_simulate: vblank timer overrun [ 423.100323][T10732] FAULT_INJECTION: forcing a failure. [ 423.100323][T10732] name failslab, interval 1, probability 0, space 0, times 0 [ 423.122831][T10732] CPU: 0 UID: 0 PID: 10732 Comm: syz.4.1362 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 423.143494][T10732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 423.153669][T10732] Call Trace: [ 423.156980][T10732] [ 423.159964][T10732] dump_stack_lvl+0x241/0x360 [ 423.164678][T10732] ? __pfx_dump_stack_lvl+0x10/0x10 [ 423.169910][T10732] ? __pfx__printk+0x10/0x10 [ 423.174624][T10732] ? __ip_dev_find+0x532/0x610 [ 423.179452][T10732] should_fail_ex+0x3b0/0x4e0 [ 423.184165][T10732] ? dst_alloc+0x12b/0x190 [ 423.188641][T10732] should_failslab+0xac/0x100 [ 423.193338][T10732] ? dst_alloc+0x12b/0x190 [ 423.197792][T10732] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 423.204087][T10732] dst_alloc+0x12b/0x190 [ 423.208337][T10732] ip_route_output_key_hash_rcu+0x13cc/0x2390 [ 423.214409][T10732] ? __lock_acquire+0x1384/0x2050 [ 423.219456][T10732] ip_route_output_key_hash+0x193/0x2b0 [ 423.225008][T10732] ? ip_route_output_key_hash+0xdf/0x2b0 [ 423.230640][T10732] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 423.236717][T10732] ? __asan_memset+0x23/0x50 [ 423.241311][T10732] ? __xfrm4_dst_lookup+0x2f4/0x560 [ 423.246509][T10732] xfrm4_dst_lookup+0x94/0xe0 [ 423.251186][T10732] ? __pfx_xfrm4_dst_lookup+0x10/0x10 [ 423.256570][T10732] __xfrm_dst_lookup+0x52/0x110 [ 423.261420][T10732] xfrm_dev_state_add+0x4c2/0xbd0 [ 423.266458][T10732] ? __pfx_lock_release+0x10/0x10 [ 423.271491][T10732] ? __pfx_xfrm_dev_state_add+0x10/0x10 [ 423.277037][T10732] ? __xfrm_init_state+0xc6d/0xea0 [ 423.282145][T10732] ? xfrm_update_ae_params+0x554/0x660 [ 423.287600][T10732] ? xfrm_alloc_replay_state_esn+0x123/0x190 [ 423.293579][T10732] xfrm_add_sa+0x2e56/0x3bb0 [ 423.298176][T10732] ? __pfx_xfrm_add_sa+0x10/0x10 [ 423.303113][T10732] ? __nla_parse+0x40/0x60 [ 423.307532][T10732] xfrm_user_rcv_msg+0x75b/0xa80 [ 423.312470][T10732] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 423.317950][T10732] ? __mutex_trylock_common+0x183/0x2e0 [ 423.323489][T10732] ? __pfx___might_resched+0x10/0x10 [ 423.328779][T10732] netlink_rcv_skb+0x1e3/0x430 [ 423.333540][T10732] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 423.339001][T10732] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 423.344307][T10732] xfrm_netlink_rcv+0x79/0x90 [ 423.348990][T10732] netlink_unicast+0x7f6/0x990 [ 423.353756][T10732] ? __pfx_netlink_unicast+0x10/0x10 [ 423.359040][T10732] ? __virt_addr_valid+0x183/0x530 [ 423.364150][T10732] ? __check_object_size+0x48e/0x900 [ 423.369439][T10732] netlink_sendmsg+0x8e4/0xcb0 [ 423.374206][T10732] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.379498][T10732] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.384781][T10732] __sock_sendmsg+0x221/0x270 [ 423.389469][T10732] ____sys_sendmsg+0x52a/0x7e0 [ 423.394236][T10732] ? __pfx_____sys_sendmsg+0x10/0x10 [ 423.399530][T10732] __sys_sendmsg+0x292/0x380 [ 423.404119][T10732] ? __pfx___sys_sendmsg+0x10/0x10 [ 423.409236][T10732] ? __pfx_vfs_write+0x10/0x10 [ 423.414020][T10732] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 423.420347][T10732] ? do_syscall_64+0x100/0x230 [ 423.425113][T10732] ? do_syscall_64+0xb6/0x230 [ 423.429788][T10732] do_syscall_64+0xf3/0x230 [ 423.434285][T10732] ? clear_bhb_loop+0x35/0x90 [ 423.438961][T10732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.444860][T10732] RIP: 0033:0x7f91fab7e719 [ 423.449279][T10732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.468881][T10732] RSP: 002b:00007f91fba2d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 423.477292][T10732] RAX: ffffffffffffffda RBX: 00007f91fad35f80 RCX: 00007f91fab7e719 [ 423.485260][T10732] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 423.493227][T10732] RBP: 00007f91fba2d090 R08: 0000000000000000 R09: 0000000000000000 [ 423.501191][T10732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 423.509154][T10732] R13: 0000000000000000 R14: 00007f91fad35f80 R15: 00007fffd24505c8 [ 423.517133][T10732] [ 423.575266][T10740] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1365'. [ 423.633956][T10737] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1365'. [ 424.854052][T10759] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1373'. [ 425.246572][T10760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1371'. [ 425.841858][T10780] netlink: 'syz.5.1380': attribute type 10 has an invalid length. [ 425.863341][T10780] netlink: 212848 bytes leftover after parsing attributes in process `syz.5.1380'. [ 427.260403][T10818] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1395'. [ 427.395005][T10820] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1394'. [ 427.548838][T10816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1387'. [ 429.450676][T10832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1399'. [ 430.213808][T10846] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1404'. [ 434.158785][T10908] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1422'. [ 434.261061][T10911] uprobe: syz.6.1424:10911 failed to unregister, leaking uprobe [ 434.306026][ T51] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 434.554976][ T51] usb 5-1: Using ep0 maxpacket: 16 [ 435.990119][ T51] usb 5-1: New USB device found, idVendor=045e, idProduct=0675, bcdDevice=98.5e [ 435.999522][ T51] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.007812][ T51] usb 5-1: Product: syz [ 436.011994][ T51] usb 5-1: Manufacturer: syz [ 436.017087][ T51] usb 5-1: SerialNumber: syz [ 436.059708][ T51] usb 5-1: config 0 descriptor?? [ 436.684905][ T5907] usb 5-1: USB disconnect, device number 38 [ 436.824440][T10926] random: crng reseeded on system resumption [ 437.160848][T10958] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1436'. [ 437.374456][T10964] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1439'. [ 438.210850][T10981] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1444'. [ 438.303735][T10981] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 439.066179][T10991] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 439.090887][T10991] overlayfs: fs on './file1' does not support file handles, falling back to index=off,nfs_export=off. [ 439.948303][ T5942] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 440.226651][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.233968][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.357589][T11016] bridge1: entered promiscuous mode [ 440.357880][ T5942] usb 7-1: Using ep0 maxpacket: 32 [ 440.362973][T11016] bridge1: entered allmulticast mode [ 440.385772][T11016] team0: Port device bridge1 added [ 440.419162][ T5942] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 440.434681][ T5942] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 440.462333][ T5942] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 440.703629][ T5942] usb 7-1: config 1 has no interface number 0 [ 440.710017][ T5942] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 440.721545][ T5942] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 440.734942][ T5942] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 440.744288][ T5942] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.727475][ T5879] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 441.735994][ T5942] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 441.894765][ T5879] usb 6-1: Using ep0 maxpacket: 32 [ 442.150321][T11034] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 442.506387][ T5942] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now attached [ 442.538179][ T5879] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 442.553242][ T5879] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 442.562680][ T5879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.572759][T11035] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 442.703036][ T5879] usb 6-1: config 0 descriptor?? [ 442.810712][ T5879] hub 6-1:0.0: bad descriptor, ignoring hub [ 442.817135][ T5879] hub 6-1:0.0: probe with driver hub failed with error -5 [ 442.826516][ T5879] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 443.342687][ T5923] usb 7-1: USB disconnect, device number 10 [ 443.355979][ T5923] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 444.740562][ T5920] libceph: connect (1)[c::]:6789 error -101 [ 444.747456][T11048] ceph: No mds server is up or the cluster is laggy [ 444.748211][ T5920] libceph: mon0 (1)[c::]:6789 connect error [ 445.633362][T11064] netlink: 'syz.6.1468': attribute type 1 has an invalid length. [ 445.667459][T11064] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 445.677777][T11064] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 445.688385][ T5907] usb 6-1: USB disconnect, device number 22 [ 445.700568][T11064] bond1: (slave xfrm1): making interface the new active one [ 445.775827][T11064] bond1: (slave xfrm1): Enslaving as an active interface with an up link [ 445.798758][T11072] random: crng reseeded on system resumption [ 445.876349][ T29] audit: type=1326 audit(1731630229.899:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11073 comm="syz.0.1469" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ffdd7e719 code=0x0 [ 447.451613][ T5907] libceph: connect (1)[c::]:6789 error -101 [ 447.457873][ T5907] libceph: mon0 (1)[c::]:6789 connect error [ 447.593309][T11093] ceph: No mds server is up or the cluster is laggy [ 447.814822][ T5907] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 447.964694][ T5907] usb 5-1: device descriptor read/64, error -71 [ 448.214705][ T5907] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 448.306266][ T29] audit: type=1326 audit(1731630232.329:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11113 comm="syz.6.1482" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f497297e719 code=0x0 [ 448.375349][ T5907] usb 5-1: device descriptor read/64, error -71 [ 448.627733][ T5907] usb usb5-port1: attempt power cycle [ 449.024705][ T5907] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 449.055392][ T5907] usb 5-1: device descriptor read/8, error -71 [ 449.064793][ T5879] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 449.218344][ T5879] usb 3-1: Using ep0 maxpacket: 16 [ 449.227108][ T5879] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 449.239893][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.248635][ T5879] usb 3-1: Product: syz [ 449.252885][ T5879] usb 3-1: Manufacturer: syz [ 449.261166][ T5879] usb 3-1: SerialNumber: syz [ 449.269802][ T5879] r8152-cfgselector 3-1: Unknown version 0x0000 [ 449.276288][ T5879] r8152-cfgselector 3-1: config 0 descriptor?? [ 449.315106][ T5907] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 449.345507][ T5907] usb 5-1: device descriptor read/8, error -71 [ 449.455113][ T5907] usb usb5-port1: unable to enumerate USB device [ 450.343157][T11153] FAULT_INJECTION: forcing a failure. [ 450.343157][T11153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 450.358715][T11153] CPU: 0 UID: 0 PID: 11153 Comm: syz.0.1496 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 450.369516][T11153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 450.379591][T11153] Call Trace: [ 450.382884][T11153] [ 450.385836][T11153] dump_stack_lvl+0x241/0x360 [ 450.390550][T11153] ? __pfx_dump_stack_lvl+0x10/0x10 [ 450.395785][T11153] ? __pfx__printk+0x10/0x10 [ 450.400408][T11153] ? __pfx_lock_release+0x10/0x10 [ 450.405477][T11153] should_fail_ex+0x3b0/0x4e0 [ 450.410176][T11153] _copy_to_iter+0x4ae/0x1e70 [ 450.414893][T11153] ? __pfx__copy_to_iter+0x10/0x10 [ 450.420041][T11153] ? _parse_integer_limit+0x1b5/0x200 [ 450.425445][T11153] get_random_bytes_user+0x1e5/0x420 [ 450.430744][T11153] ? __pfx_get_random_bytes_user+0x10/0x10 [ 450.436574][T11153] do_iter_readv_writev+0x600/0x880 [ 450.441805][T11153] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 450.447558][T11153] ? rw_verify_area+0x568/0x6f0 [ 450.452439][T11153] vfs_readv+0x2b3/0xa80 [ 450.456719][T11153] ? __pfx_vfs_readv+0x10/0x10 [ 450.461530][T11153] ? fdget_pos+0x19a/0x320 [ 450.465980][T11153] do_readv+0x1b1/0x350 [ 450.470160][T11153] ? __pfx_do_readv+0x10/0x10 [ 450.475091][T11153] ? do_syscall_64+0x100/0x230 [ 450.479982][T11153] ? do_syscall_64+0xb6/0x230 [ 450.484691][T11153] do_syscall_64+0xf3/0x230 [ 450.489217][T11153] ? clear_bhb_loop+0x35/0x90 [ 450.493923][T11153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.499839][T11153] RIP: 0033:0x7f4ffdd7e719 [ 450.504276][T11153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.523905][T11153] RSP: 002b:00007f4ffebe7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 450.532351][T11153] RAX: ffffffffffffffda RBX: 00007f4ffdf35f80 RCX: 00007f4ffdd7e719 [ 450.540350][T11153] RDX: 0000000000000002 RSI: 0000000020005200 RDI: 0000000000000003 [ 450.548342][T11153] RBP: 00007f4ffebe7090 R08: 0000000000000000 R09: 0000000000000000 [ 450.556335][T11153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 450.564327][T11153] R13: 0000000000000000 R14: 00007f4ffdf35f80 R15: 00007ffdfb7a5008 [ 450.568811][ T29] audit: type=1326 audit(1731630234.569:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11157 comm="syz.6.1497" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f497297e719 code=0x0 [ 450.572311][T11153] [ 450.799335][ T5879] r8152-cfgselector 3-1: USB disconnect, device number 16 [ 451.059457][ T5879] libceph: connect (1)[c::]:6789 error -101 [ 451.066643][ T5879] libceph: mon0 (1)[c::]:6789 connect error [ 451.145377][T11186] bridge: RTM_NEWNEIGH with invalid ether address [ 451.233531][T11174] ceph: No mds server is up or the cluster is laggy [ 451.355693][ T29] audit: type=1326 audit(1731630235.379:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11190 comm="syz.2.1506" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f692397e719 code=0x0 [ 451.741857][T11195] netlink: 'syz.6.1507': attribute type 3 has an invalid length. [ 452.016208][ T29] audit: type=1326 audit(1731630236.039:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11197 comm="syz.0.1508" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ffdd7e719 code=0x0 [ 453.097613][T11213] sit0: entered promiscuous mode [ 453.104074][T11214] FAULT_INJECTION: forcing a failure. [ 453.104074][T11214] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.107225][T11213] netlink: 'syz.0.1515': attribute type 1 has an invalid length. [ 453.117455][T11214] CPU: 0 UID: 0 PID: 11214 Comm: syz.5.1512 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 453.117481][T11214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 453.117493][T11214] Call Trace: [ 453.117501][T11214] [ 453.117510][T11214] dump_stack_lvl+0x241/0x360 [ 453.117541][T11214] ? __pfx_dump_stack_lvl+0x10/0x10 [ 453.117562][T11214] ? __pfx__printk+0x10/0x10 [ 453.117584][T11214] ? __pfx_lock_release+0x10/0x10 [ 453.117612][T11214] ? preempt_count_add+0x93/0x190 [ 453.176699][T11214] should_fail_ex+0x3b0/0x4e0 [ 453.181388][T11214] _copy_from_user+0x2f/0xc0 [ 453.185975][T11214] userfaultfd_ioctl+0xd70/0x66f0 [ 453.191258][T11214] ? __kernel_text_address+0xd/0x40 [ 453.196456][T11214] ? unwind_get_return_address+0x4d/0x90 [ 453.202093][T11214] ? arch_stack_walk+0xfd/0x150 [ 453.206947][T11214] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 453.212401][T11214] ? stack_trace_save+0x118/0x1d0 [ 453.217425][T11214] ? __pfx_stack_trace_save+0x10/0x10 [ 453.222800][T11214] ? stack_depot_save_flags+0x29/0x830 [ 453.228262][T11214] ? kasan_save_track+0x51/0x80 [ 453.233118][T11214] ? kasan_save_track+0x3f/0x80 [ 453.237969][T11214] ? kasan_save_free_info+0x40/0x50 [ 453.243166][T11214] ? __kasan_slab_free+0x59/0x70 [ 453.248105][T11214] ? kfree+0x1a0/0x440 [ 453.252166][T11214] ? tomoyo_path_number_perm+0x68d/0x880 [ 453.257793][T11214] ? security_file_ioctl+0xc6/0x2a0 [ 453.262991][T11214] ? __se_sys_ioctl+0x47/0x170 [ 453.267755][T11214] ? do_syscall_64+0xf3/0x230 [ 453.272428][T11214] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.278494][T11214] ? do_vfs_ioctl+0xf08/0x2e40 [ 453.283261][T11214] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 453.288283][T11214] ? mark_lock+0x9a/0x360 [ 453.292615][T11214] ? tomoyo_path_number_perm+0x208/0x880 [ 453.298243][T11214] ? __pfx_lock_release+0x10/0x10 [ 453.303374][T11214] ? lockdep_hardirqs_on+0x99/0x150 [ 453.308661][T11214] ? kfree+0x1a0/0x440 [ 453.312722][T11214] ? tomoyo_path_number_perm+0x68d/0x880 [ 453.318356][T11214] ? tomoyo_path_number_perm+0x71a/0x880 [ 453.323986][T11214] ? tomoyo_path_number_perm+0x208/0x880 [ 453.329611][T11214] ? smack_log+0x123/0x540 [ 453.334019][T11214] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 453.340001][T11214] ? __pfx_smack_log+0x10/0x10 [ 453.344765][T11214] ? smk_access+0x4ab/0x4e0 [ 453.349278][T11214] ? smk_tskacc+0x300/0x370 [ 453.353774][T11214] ? smack_file_ioctl+0x2f7/0x3a0 [ 453.358795][T11214] ? __pfx_smack_file_ioctl+0x10/0x10 [ 453.364169][T11214] ? __fget_files+0x3f3/0x470 [ 453.368854][T11214] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 453.374306][T11214] __se_sys_ioctl+0xf9/0x170 [ 453.378897][T11214] do_syscall_64+0xf3/0x230 [ 453.383398][T11214] ? clear_bhb_loop+0x35/0x90 [ 453.388074][T11214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.393964][T11214] RIP: 0033:0x7fcb2a57e719 [ 453.398374][T11214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.417975][T11214] RSP: 002b:00007fcb2b374038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 453.426384][T11214] RAX: ffffffffffffffda RBX: 00007fcb2a735f80 RCX: 00007fcb2a57e719 [ 453.434347][T11214] RDX: 0000000020000040 RSI: 00000000c028aa03 RDI: 0000000000000005 [ 453.442311][T11214] RBP: 00007fcb2b374090 R08: 0000000000000000 R09: 0000000000000000 [ 453.450286][T11214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.458262][T11214] R13: 0000000000000000 R14: 00007fcb2a735f80 R15: 00007ffc32028738 [ 453.466244][T11214] [ 453.469334][ C0] vkms_vblank_simulate: vblank timer overrun [ 453.469964][T11213] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1515'. [ 453.547238][ T9580] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 453.769376][T11220] binder: 11215:11220 ioctl c00c620f 20000340 returned -22 [ 453.954797][ T5879] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 454.140994][ T5879] usb 5-1: device descriptor read/64, error -71 [ 454.635540][ T5879] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 454.764901][T11252] atomic_op ffff888079723198 conn xmit_atomic 0000000000000000 [ 454.774862][ T5879] usb 5-1: device descriptor read/64, error -71 [ 454.934646][ T5879] usb usb5-port1: attempt power cycle [ 455.326464][ T5879] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 455.362356][ T5879] usb 5-1: device descriptor read/8, error -71 [ 455.432221][T11266] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1529'. [ 455.504157][T11272] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1532'. [ 455.610904][ T5879] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 455.738866][ T5879] usb 5-1: device descriptor read/8, error -71 [ 455.926266][ T5879] usb usb5-port1: unable to enumerate USB device [ 456.365015][ T5923] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 456.525510][ T5923] usb 7-1: Using ep0 maxpacket: 8 [ 456.553542][ T5923] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 456.565688][ T5923] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 456.592406][ T5923] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.630858][ T5923] usb 7-1: config 0 descriptor?? [ 456.657176][ T5923] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 456.878609][ T5923] gspca_vc032x: reg_w err -71 [ 456.893670][ T5923] vc032x 7-1:0.0: probe with driver vc032x failed with error -71 [ 456.913554][ T5923] usb 7-1: USB disconnect, device number 11 [ 457.024871][ T5942] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 457.184845][ T5942] usb 6-1: Using ep0 maxpacket: 16 [ 457.198400][ T5942] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 457.220224][ T5942] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 457.232195][ T5942] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 457.241943][ T5942] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 457.253556][ T5942] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 457.907512][ T5942] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 457.916718][ T5942] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 457.924850][ T5942] usb 6-1: Manufacturer: syz [ 457.934178][ T5942] usb 6-1: config 0 descriptor?? [ 458.637183][T11330] program syz.6.1546 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 458.714783][T11326] xt_CT: No such helper "syz1" [ 458.814733][ T5942] rc_core: IR keymap rc-hauppauge not found [ 458.820801][ T5942] Registered IR keymap rc-empty [ 458.826040][ T5942] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 458.854914][ T5942] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 458.916558][ T5942] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 458.961452][ T5942] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input24 [ 459.015684][ T5942] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 459.044704][ T5942] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 459.074964][ T5942] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 459.114800][ T5942] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 459.135401][ T5942] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 459.155179][ T5942] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 459.175051][ T5942] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 459.214735][ T5942] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 459.244879][ T5942] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 459.264760][ T5942] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 459.286414][ T5942] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 459.294434][ T5942] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 459.324897][ T5942] usb 6-1: USB disconnect, device number 23 [ 461.124662][ T5907] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 461.849056][ T5907] usb 6-1: Using ep0 maxpacket: 8 [ 461.950123][ T5907] usb 6-1: config 162 has an invalid interface number: 84 but max is 2 [ 461.958835][ T5907] usb 6-1: config 162 has an invalid interface number: 3 but max is 2 [ 461.968021][ T5907] usb 6-1: config 162 has no interface number 0 [ 461.993388][ T5907] usb 6-1: config 162 has no interface number 1 [ 462.014826][ T5907] usb 6-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 462.040864][ T5907] usb 6-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 462.054747][ T5907] usb 6-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 462.066709][ T5907] usb 6-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 462.078206][ T5907] usb 6-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 462.079507][T11389] team0: entered promiscuous mode [ 462.088415][ T5907] usb 6-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 462.088447][ T5907] usb 6-1: config 162 interface 84 has no altsetting 0 [ 462.088468][ T5907] usb 6-1: config 162 interface 2 has no altsetting 0 [ 462.092885][ T5907] usb 6-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 462.129096][T11389] team_slave_0: entered promiscuous mode [ 462.130619][ T5907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.144457][ T5907] usb 6-1: Product: syz [ 462.148902][ T5907] usb 6-1: Manufacturer: syz [ 462.153547][ T5907] usb 6-1: SerialNumber: syz [ 462.163304][T11389] team_slave_1: entered promiscuous mode [ 462.176338][T11393] CIFS: VFS: Malformed UNC in devname [ 462.273001][T11389] team0: left promiscuous mode [ 462.281682][T11389] team_slave_0: left promiscuous mode [ 462.291192][T11389] team_slave_1: left promiscuous mode [ 462.402505][ T5923] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 462.998802][ T5907] usb 6-1: USB disconnect, device number 24 [ 463.128227][T11406] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1571'. [ 463.162129][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.179332][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.192352][ T5923] usb 3-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice= 0.00 [ 463.202102][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.212561][ T5923] usb 3-1: config 0 descriptor?? [ 464.351168][ T5923] usbhid 3-1:0.0: can't add hid device: -71 [ 464.380443][ T5923] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 464.508303][ T5923] usb 3-1: USB disconnect, device number 17 [ 465.012501][T11430] netlink: 'syz.4.1580': attribute type 2 has an invalid length. [ 467.081404][T11455] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 467.444768][ T5923] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 467.581496][T11464] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1588'. [ 467.622616][ T5923] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 467.701487][ T5923] usb 7-1: config 0 has no interfaces? [ 468.018039][ T5923] usb 7-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 468.483622][ T5923] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.495261][ T5923] usb 7-1: config 0 descriptor?? [ 468.750698][T11455] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 468.804843][T11123] usb 7-1: USB disconnect, device number 12 [ 471.019177][ T5923] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 471.314154][ T5923] usb 6-1: Using ep0 maxpacket: 32 [ 471.532540][ T5923] usb 6-1: unable to get BOS descriptor or descriptor too short [ 471.546770][ T5923] usb 6-1: config 12 has an invalid interface number: 184 but max is 0 [ 471.558802][ T5923] usb 6-1: config 12 has no interface number 0 [ 472.334496][ T5923] usb 6-1: config 12 interface 184 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 16 [ 472.348138][ T5923] usb 6-1: string descriptor 0 read error: -71 [ 474.338755][ T5923] usb 6-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 474.363269][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.026402][ T5923] usb 6-1: can't set config #12, error -71 [ 476.037226][ T5923] usb 6-1: USB disconnect, device number 25 [ 476.053948][T11532] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 476.092634][ T9587] Bluetooth: hci1: Frame reassembly failed (-84) [ 478.434284][ T9961] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 478.510014][ T5920] libceph: connect (1)[c::]:6789 error -101 [ 478.516728][T11554] ceph: No mds server is up or the cluster is laggy [ 478.517110][ T5920] libceph: mon0 (1)[c::]:6789 connect error [ 478.692800][T11536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1609'. [ 478.868840][ T5920] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 479.056218][ T5920] usb 6-1: Using ep0 maxpacket: 32 [ 479.070439][ T5920] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 479.094859][ T5920] usb 6-1: config 0 has no interface number 0 [ 479.230392][ T5920] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 479.258415][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.552789][ T5920] usb 6-1: Product: syz [ 479.753407][ T5920] usb 6-1: Manufacturer: syz [ 479.775746][ T5920] usb 6-1: SerialNumber: syz [ 479.888219][ T5920] usb 6-1: config 0 descriptor?? [ 479.942093][ T5920] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 480.048599][T11579] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 481.125178][ T5920] usb 6-1: qt2_attach - failed to power on unit: -71 [ 481.132693][ T5920] quatech2 6-1:0.51: probe with driver quatech2 failed with error -71 [ 481.802304][ T5920] usb 6-1: USB disconnect, device number 26 [ 482.031701][T11591] program syz.2.1625 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 482.304915][ T9579] Bluetooth: hci1: Frame reassembly failed (-84) [ 482.312570][T11595] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 482.954935][T11123] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 482.993321][T11605] cgroup: release_agent respecified [ 484.217283][T11123] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.228562][T11123] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.238417][T11123] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 484.251471][T11123] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 484.260620][T11123] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.479845][ T5844] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 484.491785][T11123] usb 6-1: config 0 descriptor?? [ 485.000031][T11617] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1634'. [ 485.157143][T11617] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1634'. [ 485.216864][T11601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.275862][T11601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.345733][T11601] binder: 11600:11601 ioctl c01064c2 200002c0 returned -22 [ 485.381306][T11123] usbhid 6-1:0.0: can't add hid device: -71 [ 485.387636][T11123] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 486.047272][T11123] usb 6-1: USB disconnect, device number 27 [ 487.794736][T11123] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 488.699993][T11123] usb 7-1: Using ep0 maxpacket: 16 [ 488.733443][T11663] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.1647'. [ 488.743094][T11663] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 488.874306][T11123] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 488.883237][T11123] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 488.904707][T11123] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 489.154796][ T5923] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 489.696226][T11123] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 489.705804][T11123] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.724148][T11123] usb 7-1: Product: syz [ 489.739043][T11123] usb 7-1: Manufacturer: syz [ 490.460168][T11123] usb 7-1: SerialNumber: syz [ 490.776115][ T5923] usb 6-1: Using ep0 maxpacket: 8 [ 490.810940][T11655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1645'. [ 490.884775][T11123] usb 7-1: 0:2 : does not exist [ 490.905715][T11123] usb 7-1: 1:0: cannot get min/max values for control 4 (id 1) [ 490.920093][ T29] audit: type=1326 audit(1731630274.929:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11675 comm="syz.4.1650" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f91fab7e719 code=0x0 [ 490.922139][ T5923] usb 6-1: config 150 has an invalid interface number: 204 but max is 1 [ 490.988713][ T5923] usb 6-1: config 150 has no interface number 0 [ 491.001181][ T5923] usb 6-1: config 150 interface 204 has no altsetting 0 [ 491.077568][ T5923] usb 6-1: config 150 interface 1 has no altsetting 0 [ 491.483962][ T5923] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 491.499068][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.507494][ T5923] usb 6-1: Product: syz [ 491.512028][ T5923] usb 6-1: Manufacturer: syz [ 491.517156][ T5923] usb 6-1: SerialNumber: syz [ 491.737432][T11690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1649'. [ 492.501240][T11123] usb 7-1: USB disconnect, device number 13 [ 492.502459][ T5923] usb 6-1: can't set config #150, error -71 [ 492.790480][ T5879] libceph: connect (1)[c::]:6789 error -101 [ 493.182760][ T5923] usb 6-1: USB disconnect, device number 28 [ 493.183406][ T5879] libceph: mon0 (1)[c::]:6789 connect error [ 493.195413][T11698] ceph: No mds server is up or the cluster is laggy [ 494.640328][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 494.702916][T11717] binder: BINDER_SET_CONTEXT_MGR already set [ 494.709398][T11717] binder: 11716:11717 ioctl 4018620d 200001c0 returned -16 [ 496.320254][T11123] libceph: connect (1)[c::]:6789 error -101 [ 496.327173][T11123] libceph: mon0 (1)[c::]:6789 connect error [ 496.357312][T11738] ceph: No mds server is up or the cluster is laggy [ 496.622512][T11751] FAULT_INJECTION: forcing a failure. [ 496.622512][T11751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 496.646659][T11751] CPU: 0 UID: 0 PID: 11751 Comm: syz.5.1668 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 496.657473][T11751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 496.667574][T11751] Call Trace: [ 496.670859][T11751] [ 496.673806][T11751] dump_stack_lvl+0x241/0x360 [ 496.678513][T11751] ? __pfx_dump_stack_lvl+0x10/0x10 [ 496.683754][T11751] ? __pfx__printk+0x10/0x10 [ 496.688533][T11751] ? ktime_get_ts64+0xa8/0x2b0 [ 496.693315][T11751] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 496.699545][T11751] should_fail_ex+0x3b0/0x4e0 [ 496.704233][T11751] _copy_to_user+0x31/0xb0 [ 496.708639][T11751] put_timespec64+0xfa/0x150 [ 496.713218][T11751] ? __pfx_put_timespec64+0x10/0x10 [ 496.718407][T11751] poll_select_finish+0x57d/0x7d0 [ 496.723440][T11751] ? __pfx_poll_select_finish+0x10/0x10 [ 496.728975][T11751] ? __pfx_set_user_sigmask+0x10/0x10 [ 496.734333][T11751] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 496.740312][T11751] __se_sys_pselect6+0x33a/0x3f0 [ 496.745261][T11751] ? __pfx___se_sys_pselect6+0x10/0x10 [ 496.750717][T11751] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 496.757036][T11751] ? do_syscall_64+0x100/0x230 [ 496.761786][T11751] ? __x64_sys_pselect6+0x21/0xf0 [ 496.766799][T11751] do_syscall_64+0xf3/0x230 [ 496.771285][T11751] ? clear_bhb_loop+0x35/0x90 [ 496.775947][T11751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.781827][T11751] RIP: 0033:0x7fcb2a57e719 [ 496.786244][T11751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 496.805926][T11751] RSP: 002b:00007fcb2b374038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 496.814325][T11751] RAX: ffffffffffffffda RBX: 00007fcb2a735f80 RCX: 00007fcb2a57e719 [ 496.822295][T11751] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000040 [ 496.830251][T11751] RBP: 00007fcb2b374090 R08: 00000000200003c0 R09: 0000000000000000 [ 496.838205][T11751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.846173][T11751] R13: 0000000000000000 R14: 00007fcb2a735f80 R15: 00007ffc32028738 [ 496.854160][T11751] [ 496.857230][ C0] vkms_vblank_simulate: vblank timer overrun [ 496.895359][T11761] binder: 11756:11761 ioctl c00c620f 20000340 returned -22 [ 497.031222][T11761] sp0: Synchronizing with TNC [ 499.251447][T11781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1678'. [ 499.324929][T11781] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1678'. [ 499.333850][T11781] netlink: 'syz.4.1678': attribute type 12 has an invalid length. [ 499.362155][T11781] netlink: 'syz.4.1678': attribute type 11 has an invalid length. [ 499.744358][T11772] dccp_close: ABORT with 1072 bytes unread [ 499.790935][T11788] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1681'. [ 500.045112][T11797] netlink: 'syz.5.1682': attribute type 11 has an invalid length. [ 500.355148][T11807] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 501.672147][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.745280][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.644924][ T5879] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 502.936234][ T5879] usb 7-1: Using ep0 maxpacket: 8 [ 503.175139][ T5879] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.322810][ T5879] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.365531][T11836] binder: 11833:11836 ioctl c00c620f 20000340 returned -22 [ 503.434670][T11836] sp0: Synchronizing with TNC [ 503.476220][ T5879] usb 7-1: New USB device found, idVendor=046d, idProduct=c71c, bcdDevice= 0.00 [ 503.498425][ T5879] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.696605][ T5879] usb 7-1: config 0 descriptor?? [ 503.990706][T11838] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1694'. [ 504.000856][T11838] FAULT_INJECTION: forcing a failure. [ 504.000856][T11838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 504.024652][T11838] CPU: 1 UID: 0 PID: 11838 Comm: syz.4.1694 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 504.035458][T11838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 504.045678][T11838] Call Trace: [ 504.049330][T11838] [ 504.052285][T11838] dump_stack_lvl+0x241/0x360 [ 504.056998][T11838] ? __pfx_dump_stack_lvl+0x10/0x10 [ 504.062220][T11838] ? __pfx__printk+0x10/0x10 [ 504.066848][T11838] ? snprintf+0xda/0x120 [ 504.071123][T11838] should_fail_ex+0x3b0/0x4e0 [ 504.075829][T11838] _copy_to_user+0x31/0xb0 [ 504.080271][T11838] simple_read_from_buffer+0xca/0x150 [ 504.085668][T11838] proc_fail_nth_read+0x1e9/0x250 [ 504.090716][T11838] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 504.096298][T11838] ? rw_verify_area+0x55e/0x6f0 [ 504.101167][T11838] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 504.106741][T11838] vfs_read+0x1fc/0xb70 [ 504.110922][T11838] ? fdget_pos+0x24e/0x320 [ 504.115364][T11838] ? __pfx_vfs_read+0x10/0x10 [ 504.120072][T11838] ? __fget_files+0x3f3/0x470 [ 504.124786][T11838] ? fdget_pos+0x24e/0x320 [ 504.129232][T11838] ksys_read+0x183/0x2b0 [ 504.133510][T11838] ? __pfx_ksys_read+0x10/0x10 [ 504.138296][T11838] ? do_syscall_64+0x100/0x230 [ 504.143085][T11838] ? do_syscall_64+0xb6/0x230 [ 504.147787][T11838] do_syscall_64+0xf3/0x230 [ 504.152314][T11838] ? clear_bhb_loop+0x35/0x90 [ 504.157013][T11838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.162922][T11838] RIP: 0033:0x7f91fab7d15c [ 504.167352][T11838] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 504.186973][T11838] RSP: 002b:00007f91fba2d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 504.195412][T11838] RAX: ffffffffffffffda RBX: 00007f91fad35f80 RCX: 00007f91fab7d15c [ 504.203401][T11838] RDX: 000000000000000f RSI: 00007f91fba2d0a0 RDI: 0000000000000004 [ 504.211387][T11838] RBP: 00007f91fba2d090 R08: 0000000000000000 R09: 0000000000000000 [ 504.219373][T11838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.227362][T11838] R13: 0000000000000000 R14: 00007f91fad35f80 R15: 00007fffd24505c8 [ 504.235374][T11838] [ 504.337121][ T5879] usbhid 7-1:0.0: can't add hid device: -71 [ 504.343169][ T5879] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 504.441350][T11843] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1693'. [ 505.029818][ T5879] usb 7-1: USB disconnect, device number 14 [ 505.192660][T11854] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 505.257876][T11858] misc userio: No port type given on /dev/userio [ 505.320008][T11854] overlayfs: failed to set xattr on upper [ 505.633393][T11864] binder: 11861:11864 ioctl c00c620f 20000340 returned -22 [ 505.725171][T11854] overlayfs: ...falling back to index=off. [ 505.750491][T11854] overlayfs: ...falling back to uuid=null. [ 506.530899][ T9586] Bluetooth: hci1: Frame reassembly failed (-84) [ 506.798548][T11883] netlink: 'syz.5.1709': attribute type 10 has an invalid length. [ 506.813723][T11883] netlink: 212848 bytes leftover after parsing attributes in process `syz.5.1709'. [ 507.438810][ T5942] libceph: connect (1)[c::]:6789 error -101 [ 507.446882][ T5942] libceph: mon0 (1)[c::]:6789 connect error [ 507.764900][ T5942] libceph: connect (1)[c::]:6789 error -101 [ 507.946416][T11891] ceph: No mds server is up or the cluster is laggy [ 507.968824][ T5942] libceph: mon0 (1)[c::]:6789 connect error [ 508.173270][T11885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1708'. [ 508.382357][T11904] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1714'. [ 508.519335][T11904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1714'. [ 508.547691][ T9961] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 508.874984][T11123] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 509.064756][T11123] usb 6-1: Using ep0 maxpacket: 16 [ 509.182670][T11123] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 509.242944][T11123] usb 6-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 509.281952][T11123] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.328509][T11123] usb 6-1: Product: syz [ 509.344062][T11123] usb 6-1: Manufacturer: syz [ 509.419068][T11123] usb 6-1: SerialNumber: syz [ 509.519668][T11123] usb 6-1: config 0 descriptor?? [ 510.313368][T11920] overlayfs: missing 'lowerdir' [ 511.034194][T11942] ieee802154 phy0 wpan0: encryption failed: -90 [ 511.132915][T11935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1725'. [ 511.743549][ T5923] usb 6-1: USB disconnect, device number 29 [ 512.536472][T11962] overlayfs: missing 'lowerdir' [ 513.317007][T11967] loop2: detected capacity change from 0 to 7 [ 513.339665][T11967] Dev loop2: unable to read RDB block 7 [ 513.384981][ T5923] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 513.874744][T11967] loop2: unable to read partition table [ 513.885021][T11967] loop2: partition table beyond EOD, truncated [ 513.924054][T11967] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 513.964863][ T5923] usb 5-1: Using ep0 maxpacket: 16 [ 513.987855][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.021693][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 514.084102][ T5923] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 514.118138][ T5923] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 514.131667][T11977] netlink: 'syz.6.1738': attribute type 10 has an invalid length. [ 514.139907][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.148050][T11977] netlink: 212848 bytes leftover after parsing attributes in process `syz.6.1738'. [ 514.211377][ T5923] usb 5-1: config 0 descriptor?? [ 516.124492][T12000] overlayfs: missing 'lowerdir' [ 516.569210][T12001] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 516.578038][T12001] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 516.932790][ T5923] usbhid 5-1:0.0: can't add hid device: -71 [ 517.278532][ T5923] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 517.545184][ T5923] usb 5-1: USB disconnect, device number 47 [ 518.132998][ T29] audit: type=1326 audit(1731630302.149:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12021 comm="syz.0.1751" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ffdd7e719 code=0x0 [ 518.374900][ T5923] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 518.555818][ T5923] usb 3-1: Using ep0 maxpacket: 16 [ 518.594631][ T5923] usb 3-1: config 0 has no interfaces? [ 518.601060][ T5923] usb 3-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 518.676887][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.764690][ T5923] usb 3-1: config 0 descriptor?? [ 519.015450][T12026] vlan2: entered promiscuous mode [ 519.132011][ T5923] usb 3-1: USB disconnect, device number 18 [ 519.392103][T12050] overlayfs: missing 'lowerdir' [ 520.287723][T12063] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1762'. [ 520.434592][T12065] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 520.443666][T12065] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 521.774028][T12077] @: renamed from vlan0 (while UP) [ 522.064968][ T29] audit: type=1326 audit(1731630306.069:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12081 comm="syz.2.1765" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f692397e719 code=0x0 [ 523.716013][T12102] netlink: 'syz.2.1770': attribute type 6 has an invalid length. [ 523.984828][T12114] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 523.993730][T12114] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 524.868841][ T29] audit: type=1326 audit(1731630308.889:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12118 comm="syz.4.1776" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f91fab7e719 code=0x0 [ 525.523612][T12132] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1779'. [ 525.528443][T12133] FAULT_INJECTION: forcing a failure. [ 525.528443][T12133] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 525.566103][T12133] CPU: 0 UID: 0 PID: 12133 Comm: syz.5.1780 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 525.576910][T12133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 525.586985][T12133] Call Trace: [ 525.590284][T12133] [ 525.593239][T12133] dump_stack_lvl+0x241/0x360 [ 525.597949][T12133] ? __pfx_dump_stack_lvl+0x10/0x10 [ 525.603182][T12133] ? __pfx__printk+0x10/0x10 [ 525.607808][T12133] ? snprintf+0xda/0x120 [ 525.612081][T12133] should_fail_ex+0x3b0/0x4e0 [ 525.616783][T12133] _copy_to_user+0x31/0xb0 [ 525.621219][T12133] simple_read_from_buffer+0xca/0x150 [ 525.626614][T12133] proc_fail_nth_read+0x1e9/0x250 [ 525.631648][T12133] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 525.637196][T12133] ? rw_verify_area+0x55e/0x6f0 [ 525.642046][T12133] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 525.647593][T12133] vfs_read+0x1fc/0xb70 [ 525.651753][T12133] ? fdget_pos+0x24e/0x320 [ 525.656169][T12133] ? __pfx_vfs_read+0x10/0x10 [ 525.660847][T12133] ? __fget_files+0x3f3/0x470 [ 525.665532][T12133] ? fdget_pos+0x24e/0x320 [ 525.669948][T12133] ksys_read+0x183/0x2b0 [ 525.674187][T12133] ? __pfx_ksys_read+0x10/0x10 [ 525.678955][T12133] ? do_syscall_64+0x100/0x230 [ 525.683720][T12133] ? do_syscall_64+0xb6/0x230 [ 525.688395][T12133] do_syscall_64+0xf3/0x230 [ 525.692899][T12133] ? clear_bhb_loop+0x35/0x90 [ 525.697661][T12133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.703557][T12133] RIP: 0033:0x7fcb2a57d15c [ 525.707970][T12133] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 525.727572][T12133] RSP: 002b:00007fcb2b374030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 525.735989][T12133] RAX: ffffffffffffffda RBX: 00007fcb2a735f80 RCX: 00007fcb2a57d15c [ 525.743953][T12133] RDX: 000000000000000f RSI: 00007fcb2b3740a0 RDI: 0000000000000004 [ 525.751918][T12133] RBP: 00007fcb2b374090 R08: 0000000000000000 R09: 0000000000000000 [ 525.759887][T12133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 525.767853][T12133] R13: 0000000000000000 R14: 00007fcb2a735f80 R15: 00007ffc32028738 [ 525.775833][T12133] [ 526.631079][T12149] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.1784'. [ 526.640653][T12149] openvswitch: netlink: Tunnel attr 0 has unexpected len 2817 expected 8 [ 526.655457][T12149] syz.5.1784: attempt to access beyond end of device [ 526.655457][T12149] nbd5: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 526.668733][T12149] EXT4-fs (nbd5): unable to read superblock [ 527.166711][T12158] loop2: detected capacity change from 0 to 7 [ 527.173891][T12158] Dev loop2: unable to read RDB block 7 [ 527.179608][T12158] loop2: unable to read partition table [ 527.185543][T12158] loop2: partition table beyond EOD, truncated [ 527.191933][T12158] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 527.383189][ T29] audit: type=1326 audit(1731630311.399:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12161 comm="syz.0.1788" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ffdd7e719 code=0x0 [ 528.072450][T12174] netlink: 'syz.0.1790': attribute type 7 has an invalid length. [ 528.081121][T12174] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1790'. [ 529.454979][T10814] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 529.653111][T10814] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 529.715677][T10814] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.836354][T10814] usb 5-1: Product: syz [ 529.894119][T10814] usb 5-1: Manufacturer: syz [ 530.044591][T10814] usb 5-1: SerialNumber: syz [ 530.095239][T10814] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 530.217980][ T51] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 530.231006][ T29] audit: type=1326 audit(1731630314.249:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12205 comm="syz.0.1800" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ffdd7e719 code=0x0 [ 530.439568][ T5907] usb 5-1: USB disconnect, device number 48 [ 530.596131][T12217] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1804'. [ 531.265098][ T51] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 531.272400][ T51] ath9k_htc: Failed to initialize the device [ 531.325950][ T5907] usb 5-1: ath9k_htc: USB layer deinitialized [ 533.232901][T12228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1807'. [ 533.425043][T12244] ieee802154 phy0 wpan0: encryption failed: -90 [ 534.454963][ T5923] usb 5-1: new low-speed USB device number 49 using dummy_hcd [ 534.466911][T12257] bridge0: port 1(vlan0) entered blocking state [ 534.493636][T12257] bridge0: port 1(vlan0) entered disabled state [ 534.503830][T12257] vlan0: entered allmulticast mode [ 534.523883][T12257] team0: entered allmulticast mode [ 534.544867][T12257] team_slave_0: entered allmulticast mode [ 534.550844][T12257] team_slave_1: entered allmulticast mode [ 534.567923][T12257] vlan0: entered promiscuous mode [ 534.579704][T12257] team0: entered promiscuous mode [ 534.604751][T12257] team_slave_0: entered promiscuous mode [ 534.625002][T12257] team_slave_1: entered promiscuous mode [ 534.642660][T12257] bridge0: port 1(vlan0) entered blocking state [ 534.649038][T12257] bridge0: port 1(vlan0) entered forwarding state [ 534.666295][ T5923] usb 5-1: Invalid ep0 maxpacket: 32 [ 534.815344][ T5923] usb 5-1: new low-speed USB device number 50 using dummy_hcd [ 535.760924][ T5923] usb 5-1: Invalid ep0 maxpacket: 32 [ 535.766973][ T5923] usb usb5-port1: attempt power cycle [ 536.527142][T12289] overlayfs: missing 'lowerdir' [ 536.948845][ T5923] usb 5-1: new low-speed USB device number 51 using dummy_hcd [ 537.138919][ T5923] usb 5-1: device descriptor read/8, error -71 [ 538.061069][T12307] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1827'. [ 538.230845][T12310] netlink: 'syz.6.1828': attribute type 9 has an invalid length. [ 538.243287][T12310] netlink: 209836 bytes leftover after parsing attributes in process `syz.6.1828'. [ 538.496881][T12310] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1828'. [ 538.558679][T12310] 9pnet_fd: Insufficient options for proto=fd [ 539.154847][T12320] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1831'. [ 540.118593][T12330] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1835'. [ 540.639191][ T29] audit: type=1326 audit(1731630324.659:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12338 comm="syz.0.1838" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ffdd7e719 code=0x0 [ 540.858995][T12342] overlayfs: missing 'lowerdir' [ 541.966241][T12327] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1834'. [ 544.130862][T12366] netlink: 'syz.2.1844': attribute type 10 has an invalid length. [ 544.138883][T12366] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1844'. [ 544.148682][T12366] team0: entered promiscuous mode [ 544.154284][T12366] team_slave_0: entered promiscuous mode [ 544.160347][T12366] team_slave_1: entered promiscuous mode [ 544.167973][T12366] bridge0: port 3(team0) entered blocking state [ 544.174652][ T5879] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 544.174885][T12366] bridge0: port 3(team0) entered disabled state [ 544.189431][T12366] team0: entered allmulticast mode [ 544.210407][T12366] team_slave_0: entered allmulticast mode [ 544.224425][T12366] team_slave_1: entered allmulticast mode [ 544.243063][T12366] bridge0: port 3(team0) entered blocking state [ 544.249490][T12366] bridge0: port 3(team0) entered forwarding state [ 544.326565][ T5879] usb 6-1: config index 0 descriptor too short (expected 62560, got 96) [ 544.357297][ T5879] usb 6-1: config 1 has too many interfaces: 65, using maximum allowed: 32 [ 544.395879][ T5879] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 544.414720][ T5879] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 65 [ 544.426078][ T5879] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 544.611642][ T5879] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 544.678956][ T5879] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 544.690292][ T5879] usb 6-1: Product: syz [ 544.695469][ T5879] usb 6-1: Manufacturer: syz [ 544.845465][ T5879] cdc_wdm 6-1:1.0: skipping garbage [ 544.851296][ T5879] cdc_wdm 6-1:1.0: invalid descriptor buffer length [ 544.926384][ T5879] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 545.040862][T12377] fuse: Unknown parameter 'fºa0x0000000000000004ÿ00000000000000000000' [ 545.205965][T12383] overlayfs: missing 'lowerdir' [ 546.140017][ T5907] usb 6-1: USB disconnect, device number 30 [ 546.937875][T12404] team0: entered promiscuous mode [ 546.942962][T12404] team_slave_0: entered promiscuous mode [ 546.949381][T12404] team_slave_1: entered promiscuous mode [ 547.794712][T12404] vlan3: entered promiscuous mode [ 547.871362][T12404] geneve1: entered promiscuous mode [ 548.037820][T12404] team0: Port device vlan3 added [ 548.071423][T12404] team0: left promiscuous mode [ 548.076393][T12404] team_slave_0: left promiscuous mode [ 548.082146][T12404] team_slave_1: left promiscuous mode [ 548.087862][T12404] vlan3: left promiscuous mode [ 548.092647][T12404] geneve1: left promiscuous mode [ 548.099535][T12407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1854'. [ 548.166409][T12413] FAULT_INJECTION: forcing a failure. [ 548.166409][T12413] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 548.230118][T12413] CPU: 0 UID: 0 PID: 12413 Comm: syz.6.1859 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 548.240921][T12413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 548.250977][T12413] Call Trace: [ 548.254251][T12413] [ 548.257176][T12413] dump_stack_lvl+0x241/0x360 [ 548.261857][T12413] ? __pfx_dump_stack_lvl+0x10/0x10 [ 548.267061][T12413] ? __pfx__printk+0x10/0x10 [ 548.271655][T12413] ? snprintf+0xda/0x120 [ 548.275905][T12413] should_fail_ex+0x3b0/0x4e0 [ 548.280584][T12413] _copy_to_user+0x31/0xb0 [ 548.284994][T12413] simple_read_from_buffer+0xca/0x150 [ 548.290415][T12413] proc_fail_nth_read+0x1e9/0x250 [ 548.295444][T12413] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 548.300993][T12413] ? rw_verify_area+0x55e/0x6f0 [ 548.305843][T12413] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 548.311386][T12413] vfs_read+0x1fc/0xb70 [ 548.315541][T12413] ? fdget_pos+0x24e/0x320 [ 548.319961][T12413] ? __pfx_vfs_read+0x10/0x10 [ 548.324645][T12413] ? __fget_files+0x3f3/0x470 [ 548.329339][T12413] ? fdget_pos+0x24e/0x320 [ 548.333760][T12413] ksys_read+0x183/0x2b0 [ 548.338002][T12413] ? __pfx_ksys_read+0x10/0x10 [ 548.342775][T12413] ? do_syscall_64+0x100/0x230 [ 548.347539][T12413] ? do_syscall_64+0xb6/0x230 [ 548.352217][T12413] do_syscall_64+0xf3/0x230 [ 548.356716][T12413] ? clear_bhb_loop+0x35/0x90 [ 548.361389][T12413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.367282][T12413] RIP: 0033:0x7f497297d15c [ 548.371693][T12413] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 548.391299][T12413] RSP: 002b:00007f4973799030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 548.399715][T12413] RAX: ffffffffffffffda RBX: 00007f4972b35f80 RCX: 00007f497297d15c [ 548.407692][T12413] RDX: 000000000000000f RSI: 00007f49737990a0 RDI: 0000000000000007 [ 548.415750][T12413] RBP: 00007f4973799090 R08: 0000000000000000 R09: 0000000000000000 [ 548.423715][T12413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 548.431682][T12413] R13: 0000000000000000 R14: 00007f4972b35f80 R15: 00007fff4c9697d8 [ 548.439664][T12413] [ 548.472398][T12416] xt_connbytes: Forcing CT accounting to be enabled [ 548.684138][T12421] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1862'. [ 548.864025][T12424] overlayfs: missing 'workdir' [ 550.405133][T12428] x_tables: ip_tables: osf match: only valid for protocol 6 [ 551.219782][T12457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1873'. [ 552.098585][T12463] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 552.412085][T12463] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 552.794775][T12471] overlayfs: missing 'workdir' [ 553.788856][T12482] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1879'. [ 555.068929][T12507] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1885'. [ 555.603505][ T5942] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 555.791772][ T5942] usb 5-1: Using ep0 maxpacket: 16 [ 556.176032][ T5942] usb 5-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 556.186169][ T5942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.197533][ T5942] usb 5-1: Product: syz [ 556.207014][ T5942] usb 5-1: Manufacturer: syz [ 556.211658][ T5942] usb 5-1: SerialNumber: syz [ 557.637821][ T5942] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 558.192105][ T5942] snd-usb-audio 5-1:222.0: probe with driver snd-usb-audio failed with error -2 [ 558.717156][ T5942] usb 5-1: USB disconnect, device number 53 [ 560.581670][T12545] ieee802154 phy0 wpan0: encryption failed: -90 [ 562.190713][ T5879] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 562.356313][ T5879] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 562.373431][ T5879] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 562.404658][ T5920] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 562.409999][ T5879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 562.429681][ T5879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 196, setting to 64 [ 562.441833][ T5879] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 562.457595][ T5879] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 562.473644][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.482779][ T5879] usb 5-1: Product: syz [ 562.488105][ T5879] usb 5-1: Manufacturer: syz [ 562.493268][ T5879] usb 5-1: SerialNumber: syz [ 562.516709][ T5879] usb 5-1: config 0 descriptor?? [ 562.531083][ T5879] garmin_gps 5-1:0.0: Garmin GPS usb/tty converter detected [ 562.554357][ T5879] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 562.578373][ T5920] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 562.581690][ T5879] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 562.597257][ T5920] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 562.629167][ T5920] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 562.666181][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 562.674574][ T5920] usb 6-1: SerialNumber: syz [ 562.739440][ T5879] usb 5-1: USB disconnect, device number 54 [ 562.770808][ T5879] garmin_gps 5-1:0.0: device disconnected [ 563.107402][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.114120][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.173179][T12562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.183506][T12562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.637631][ T5920] usb 6-1: 0:2 : does not exist [ 564.675408][ T5920] usb 6-1: USB disconnect, device number 31 [ 567.575339][T12632] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1918'. [ 567.655210][T12628] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1921'. [ 568.101834][T12628] pimreg: entered allmulticast mode [ 568.118045][T12634] pimreg: left allmulticast mode [ 568.318148][T12637] 9pnet_fd: Insufficient options for proto=fd [ 568.958312][ T29] audit: type=1326 audit(1731630352.979:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12641 comm="syz.4.1923" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f91fab7e719 code=0x0 [ 569.207959][T12651] ieee802154 phy0 wpan0: encryption failed: -90 [ 569.483408][ T5907] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 569.876315][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 569.898025][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.918059][ T5907] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 569.944677][ T5907] usb 5-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 569.962651][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.982257][ T5907] usb 5-1: config 0 descriptor?? [ 675.104500][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 675.111520][ C1] rcu: 0-...!: (0 ticks this GP) idle=7e4c/1/0x4000000000000000 softirq=40776/40776 fqs=0 [ 675.122908][ C1] rcu: (detected by 1, t=10506 jiffies, g=40929, q=132 ncpus=2) [ 675.130638][ C1] Sending NMI from CPU 1 to CPUs 0: [ 675.130675][ C0] NMI backtrace for cpu 0 [ 675.130687][ C0] CPU: 0 UID: 0 PID: 12658 Comm: syz.2.1928 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 675.130705][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 675.130714][ C0] RIP: 0010:kasan_check_range+0x79/0x290 [ 675.130744][ C0] Code: 4d 89 c1 49 c1 e9 03 49 be 01 00 00 00 00 fc ff df 4f 8d 3c 31 4c 89 fd 4c 29 dd 48 83 fd 10 7f 29 48 85 ed 0f 84 3e 01 00 00 <4c> 89 cd 48 f7 d5 48 01 dd 41 80 3b 00 0f 85 c9 01 00 00 49 ff c3 [ 675.130757][ C0] RSP: 0018:ffffc90000007b70 EFLAGS: 00000002 [ 675.130772][ C0] RAX: 0000000000000001 RBX: 1ffff92000000f80 RCX: ffffffff8171bfdf [ 675.130784][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90000007c00 [ 675.130794][ C0] RBP: 0000000000000001 R08: ffffc90000007c03 R09: 1ffff92000000f80 [ 675.130805][ C0] R10: dffffc0000000000 R11: fffff52000000f80 R12: ffff8880661902e8 [ 675.130817][ C0] R13: 1ffff92000000f80 R14: dffffc0000000001 R15: fffff52000000f81 [ 675.130829][ C0] FS: 00007f69247996c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 675.130843][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 675.130853][ C0] CR2: 0000000020003c80 CR3: 0000000077a54000 CR4: 00000000003526f0 [ 675.130867][ C0] DR0: 00000000ffffa0dd DR1: 0000000000000000 DR2: 0000000000000000 [ 675.130877][ C0] DR3: 00000000d29dafa1 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 675.130888][ C0] Call Trace: [ 675.130894][ C0] [ 675.130902][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 675.130926][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 675.130948][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 675.130967][ C0] ? nmi_handle+0x2a/0x5a0 [ 675.130990][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 675.131008][ C0] ? nmi_handle+0x14f/0x5a0 [ 675.131028][ C0] ? nmi_handle+0x2a/0x5a0 [ 675.131043][ C0] ? kasan_check_range+0x79/0x290 [ 675.131063][ C0] ? default_do_nmi+0x63/0x160 [ 675.131078][ C0] ? exc_nmi+0x123/0x1f0 [ 675.131091][ C0] ? end_repeat_nmi+0xf/0x53 [ 675.131111][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 675.131129][ C0] ? kasan_check_range+0x79/0x290 [ 675.131149][ C0] ? kasan_check_range+0x79/0x290 [ 675.131170][ C0] ? kasan_check_range+0x79/0x290 [ 675.131190][ C0] [ 675.131196][ C0] [ 675.131202][ C0] do_raw_spin_lock+0x14f/0x370 [ 675.131220][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 675.131238][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 675.131258][ C0] ? __pfx_advance_sched+0x10/0x10 [ 675.131277][ C0] ? __pfx_advance_sched+0x10/0x10 [ 675.131295][ C0] advance_sched+0xab/0xca0 [ 675.131314][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 675.131329][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 675.131348][ C0] ? __pfx_advance_sched+0x10/0x10 [ 675.131365][ C0] __hrtimer_run_queues+0x59b/0xd50 [ 675.131381][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 675.131406][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 675.131426][ C0] hrtimer_interrupt+0x396/0x990 [ 675.131450][ C0] __sysvec_apic_timer_interrupt+0x110/0x420 [ 675.131467][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 675.131484][ C0] [ 675.131489][ C0] [ 675.131494][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 675.131511][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x5d/0x70 [ 675.131530][ C0] Code: f8 15 00 00 83 fa 02 75 21 48 8b 91 00 16 00 00 48 8b 32 48 8d 7e 01 8b 89 fc 15 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 08 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90 [ 675.131542][ C0] RSP: 0018:ffffc9000bb07690 EFLAGS: 00000287 [ 675.131555][ C0] RAX: ffffffff8198eb80 RBX: 0000000000000004 RCX: 0000000000040000 [ 675.131566][ C0] RDX: ffffc9000bbc1000 RSI: 0000000000000339 RDI: 000000000000033a [ 675.131576][ C0] RBP: 0000000000000027 R08: 0000000000000005 R09: ffffffff8196dc25 [ 675.131586][ C0] R10: 0000000000000020 R11: ffff8880306c0000 R12: 00000080a0648589 [ 675.131597][ C0] R13: 000000000000030c R14: 00000080a064aaf8 R15: ffff88801ac86308 [ 675.131611][ C0] ? rb_event_length+0x45/0x400 [ 675.131629][ C0] ? rb_read_data_buffer+0x410/0x520 [ 675.131650][ C0] rb_read_data_buffer+0x410/0x520 [ 675.131672][ C0] check_buffer+0x35e/0x850 [ 675.131691][ C0] ? __pfx_validate_chain+0x10/0x10 [ 675.131707][ C0] ? __pfx_check_buffer+0x10/0x10 [ 675.131724][ C0] ? __pfx_validate_chain+0x10/0x10 [ 675.131741][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 675.131756][ C0] ? sched_clock+0x4a/0x70 [ 675.131772][ C0] ? __pfx_trace_clock_local+0x10/0x10 [ 675.131792][ C0] ring_buffer_lock_reserve+0x12a9/0x21c0 [ 675.131821][ C0] ? __pfx_ring_buffer_lock_reserve+0x10/0x10 [ 675.131836][ C0] ? __lock_acquire+0x1384/0x2050 [ 675.131856][ C0] ? __pfx_validate_chain+0x10/0x10 [ 675.131880][ C0] trace_event_buffer_lock_reserve+0x2ab/0x6a0 [ 675.131896][ C0] ? tracing_gen_ctx_irq_test+0xfe/0x150 [ 675.131912][ C0] trace_event_buffer_reserve+0x2b7/0x3f0 [ 675.131929][ C0] ? __pfx_trace_event_buffer_reserve+0x10/0x10 [ 675.131946][ C0] ? bstr_printf+0x721/0x1210 [ 675.131968][ C0] trace_event_raw_event_bpf_trace_printk+0x102/0x260 [ 675.131989][ C0] ? __pfx_trace_event_raw_event_bpf_trace_printk+0x10/0x10 [ 675.132019][ C0] ? __pfx_bstr_printf+0x10/0x10 [ 675.132042][ C0] trace_bpf_trace_printk+0x186/0x1f0 [ 675.132060][ C0] bpf_trace_printk+0x1bf/0x230 [ 675.132079][ C0] ? bpf_trace_run2+0x22d/0x540 [ 675.132095][ C0] ? __pfx_bpf_trace_printk+0x10/0x10 [ 675.132114][ C0] ? bpf_trace_run2+0x22d/0x540 [ 675.132132][ C0] ? __x64_sys_clock_settime+0x23a/0x280 [ 675.132154][ C0] ? bpf_trace_run2+0x1fc/0x540 [ 675.132169][ C0] bpf_prog_7f686a1812ddc8cc+0x3e/0x45 [ 675.132183][ C0] bpf_trace_run2+0x2ec/0x540 [ 675.132201][ C0] ? __pfx_bpf_trace_run2+0x10/0x10 [ 675.132216][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 675.132237][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 675.132257][ C0] ? do_syscall_64+0x100/0x230 [ 675.132277][ C0] trace_sys_enter+0x93/0xd0 [ 675.132296][ C0] syscall_trace_enter+0xf8/0x150 [ 675.132317][ C0] do_syscall_64+0xcc/0x230 [ 675.132334][ C0] ? clear_bhb_loop+0x35/0x90 [ 675.132351][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.132369][ C0] RIP: 0033:0x7f692397e719 [ 675.132382][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 675.132393][ C0] RSP: 002b:00007f69247990e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 675.132409][ C0] RAX: ffffffffffffffda RBX: 00007f6923b35f88 RCX: 00007f692397e719 [ 675.132420][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6923b35f8c [ 675.132430][ C0] RBP: 00007f6923b35f80 R08: 7fffffffffffffff R09: 0000000000000000 [ 675.132441][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6923b35f8c [ 675.132451][ C0] R13: 0000000000000000 R14: 00007ffe7d509e00 R15: 00007ffe7d509ee8 [ 675.132468][ C0] [ 675.132668][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10505 jiffies! g40929 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 675.823922][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=41894 [ 675.831820][ C1] rcu: rcu_preempt kthread starved for 10506 jiffies! g40929 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 675.843192][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 675.853169][ C1] rcu: RCU grace-period kthread stack dump: [ 675.859059][ C1] task:rcu_preempt state:I stack:25824 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 675.869253][ C1] Call Trace: [ 675.872538][ C1] [ 675.875482][ C1] __schedule+0x17fa/0x4bd0 [ 675.880456][ C1] ? __pfx___schedule+0x10/0x10 [ 675.885321][ C1] ? __pfx_lock_release+0x10/0x10 [ 675.890359][ C1] ? __asan_memset+0x23/0x50 [ 675.894964][ C1] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 675.900788][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 675.907132][ C1] ? schedule+0x90/0x320 [ 675.911383][ C1] schedule+0x14b/0x320 [ 675.915557][ C1] schedule_timeout+0x1be/0x310 [ 675.920423][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 675.925808][ C1] ? __pfx_process_timeout+0x10/0x10 [ 675.931111][ C1] ? prepare_to_swait_event+0x330/0x350 [ 675.936674][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 675.941554][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 675.946779][ C1] ? rcu_gp_init+0x1256/0x1630 [ 675.951559][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 675.956510][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 675.961808][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 675.967728][ C1] ? finish_swait+0xd4/0x1e0 [ 675.972345][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 675.976968][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 675.982186][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 675.988101][ C1] ? __kthread_parkme+0x169/0x1d0 [ 675.993143][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 675.998357][ C1] kthread+0x2f0/0x390 [ 676.002438][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 676.007647][ C1] ? __pfx_kthread+0x10/0x10 [ 676.012250][ C1] ret_from_fork+0x4b/0x80 [ 676.016682][ C1] ? __pfx_kthread+0x10/0x10 [ 676.021279][ C1] ret_from_fork_asm+0x1a/0x30 [ 676.026073][ C1] [ 676.029531][ C1] vkms_vblank_simulate: vblank timer overrun