last executing test programs: 11m19.598992148s ago: executing program 4 (id=313): set_mempolicy(0x3, 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="090b00000000000000000500000008000300", @ANYRES32], 0x1c}}, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r5, 0x8010500c, &(0x7f00000000c0)) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$selinux_load(r6, &(0x7f0000000240)={0xf97cff8c, 0x8, 'SE Linux', "96e6dd7c3ee4997a5e29d3ac629fc2fc591cbe0511375c56dc812603d36b454fbbb0f4371b8d"}, 0x36) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0xd00, 0x0) close(0xffffffffffffffff) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r9 = syz_io_uring_setup(0xd2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x0, 0x0, 0x0, r7}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r9, 0x47ba, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x200030e4, 0x0, 0x0, 0x0, 0x0, 0x0) 11m18.145348779s ago: executing program 4 (id=317): fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) socket$inet6(0xa, 0x800, 0x7fff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500000004000000032000000c00000000000000", @ANYRES32, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000008000000000000000000000000000000000000000000000a2d1e740dd878e19dbcd605eaecbe3ebf9b83d4be34889fa4538f7a72613617d659ba62bf072ded45ad0af37a411153344890f8e50b289368fda355527f99f33ecc24211400207"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x6f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x18}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x5da0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x24, &(0x7f0000000080)=0xdfd, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) 11m15.341963296s ago: executing program 4 (id=322): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=@getnexthop={0x20, 0x76, 0xd11, 0x0, 0x0, {0x3}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0x20048840) (async) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 32) getdents64(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r2) (async) socket(0x1d, 0x2, 0x6) (async, rerun: 64) r3 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 64) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000700), 0x8800, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 11m14.313571499s ago: executing program 4 (id=323): iopl(0x3) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a0001"], 0x64}}, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000400)={'U+', 0x1}, 0x16, 0x3) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x21414b1, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f00000002c0)=""/100, 0x226000, 0x1000, 0x833, 0x2}, 0x20) memfd_secret(0x52b6b9b1973d3394) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) syz_io_uring_setup(0x38ab, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0x242, 0x0, r4}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r4}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x100, &(0x7f0000000080)=0x2ffd, 0x0, 0x4) dup(r0) 11m14.160802811s ago: executing program 4 (id=324): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) close(0xffffffffffffffff) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000a00)=ANY=[@ANYBLOB="04ff"], 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='Fp', @ANYRES64=r0, @ANYRES64, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c626c6b73697a653d307830c87286bc3695e1303030303030303030303030", @ANYRES64=r3, @ANYRESDEC=r5]) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4c085) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=@bridge_getlink={0x28, 0x12, 0x101, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xff}]}, 0x28}}, 0x0) 11m13.941229305s ago: executing program 4 (id=325): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xba}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$addseals(r3, 0x409, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000280)='0', 0x1, r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) recvmmsg(r0, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001d00)=[{0xfffffffffffffffd}], 0x1}}], 0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080)) 11m13.388451235s ago: executing program 32 (id=325): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xba}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$addseals(r3, 0x409, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000280)='0', 0x1, r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) recvmmsg(r0, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001d00)=[{0xfffffffffffffffd}], 0x1}}], 0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080)) 10m5.985190487s ago: executing program 2 (id=456): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) r4 = syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xe, 0x4, 0x4, 0x9, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, &(0x7f0000000000), &(0x7f0000000380)=r6}, 0x20) ptrace(0x10, r4) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) 10m5.034709197s ago: executing program 2 (id=457): syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_connect(0x6, 0x24, &(0x7f00000003c0)=ANY=[], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_pidfd_open(0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f00000002c0)='./file1\x00', 0xc000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r3, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000240)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x0) 10m1.637741025s ago: executing program 2 (id=461): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000140)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19THP\xf4O\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0\xb04\xb7T5\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\xcbC\x15\xfcp\x11\xdai\f{\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x00\x00\x00\x00\x00\x00\x00', 0x4) fallocate(r3, 0x0, 0x0, 0x2400001) 9m59.070868647s ago: executing program 2 (id=467): sendmsg$xdp(0xffffffffffffffff, 0x0, 0x800) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$kcm(0x2, 0x1, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r1, 0x0, 0x20000811) r2 = socket$kcm(0x29, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000006c0)=@assoc_id=r5, 0x4) read$msr(r3, &(0x7f000003f300)=""/102400, 0x19000) userfaultfd(0x801) madvise(&(0x7f0000bf8000/0x1000)=nil, 0x1000, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000008c0)={r1, r0}) 9m58.144178538s ago: executing program 2 (id=470): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x4040004}, 0x800) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$kcm(0x2, 0x1, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000280)=@assoc_value, 0x0) read$msr(r3, &(0x7f000003f300)=""/102400, 0x19000) madvise(&(0x7f0000bf8000/0x1000)=nil, 0x1000, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000008c0)={r1, r0}) 9m57.91295746s ago: executing program 2 (id=472): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000004c0)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000540)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0), r1, 0x3}}, 0x18) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x541102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x200000000000000, 0x100}, 0x0, 0x0) 9m42.675726965s ago: executing program 33 (id=472): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000004c0)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000540)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0), r1, 0x3}}, 0x18) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x541102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x200000000000000, 0x100}, 0x0, 0x0) 6m26.789086455s ago: executing program 3 (id=889): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_usb_connect(0x0, 0xfedd, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) set_mempolicy_home_node(&(0x7f00004df000/0x3000)=nil, 0x3000, 0x3, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') readv(r1, &(0x7f00000022c0)=[{&(0x7f00000021c0)=""/200, 0xc8}], 0x1) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0], 0x1, 0x6642}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000ab3000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x3f, &(0x7f0000000000)={&(0x7f0000000280)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FRA_SRC={0x8, 0x2, @multicast2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 6m22.845312538s ago: executing program 3 (id=897): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r0, 0x6, 0x3, &(0x7f00000000c0), 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) sendmsg$unix(r1, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) open(&(0x7f0000000100)='\x00', 0x200080, 0x174) syz_open_procfs(0x0, &(0x7f0000000400)='fd/4\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r4, 0x40186f40, 0x20000502) r5 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x20}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) 6m11.624621354s ago: executing program 3 (id=919): close(0xffffffffffffffff) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) syz_io_uring_setup(0x10c, &(0x7f0000000540)={0x0, 0x5886, 0x4, 0x0, 0x290}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r6, &(0x7f0000000440), 0x10) listen(r6, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 6m8.023871425s ago: executing program 3 (id=925): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) close(0xffffffffffffffff) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mq_notify(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000a00)=ANY=[], 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) r4 = socket$alg(0x26, 0x5, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0), 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4c085) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=@bridge_getlink={0x28, 0x12, 0x101, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xff}]}, 0x28}}, 0x0) 6m6.822022677s ago: executing program 3 (id=927): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) sendto$inet(r0, 0x0, 0x0, 0x8810, &(0x7f0000000180)={0x2, 0x4e21, @broadcast}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x3, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000642f1a37330008000000150000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) socket$inet6(0xa, 0x3, 0x20) socket$inet6(0xa, 0x3, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000280), 0x12) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000300)='tasks\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x401) sendfile(r3, 0xffffffffffffffff, 0x0, 0x6) sendfile(r4, r4, 0x0, 0x401) 6m6.556469405s ago: executing program 3 (id=930): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r0, 0x6, 0x3, &(0x7f00000000c0), 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) sendmsg$unix(r1, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) open(&(0x7f0000000100)='\x00', 0x200080, 0x174) syz_open_procfs(0x0, &(0x7f0000000400)='fd/4\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r4, 0x40186f40, 0x20000502) r5 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x20}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) 5m48.9775807s ago: executing program 34 (id=930): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r0, 0x6, 0x3, &(0x7f00000000c0), 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) sendmsg$unix(r1, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) open(&(0x7f0000000100)='\x00', 0x200080, 0x174) syz_open_procfs(0x0, &(0x7f0000000400)='fd/4\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r4, 0x40186f40, 0x20000502) r5 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x20}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) 12.521331831s ago: executing program 1 (id=1748): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000017c0)=ANY=[@ANYBLOB="0500000001ea2f3352c9a24cfb0fe8f3cd141f3527ec9f385fefaef4a8b09a1f483b8c8474264f3770dc468dafe315a0c57012e9ef5a73c2806f80d15a3253587ab104bcd2d575674b44603a438696e6a28b2a83fb6b2d6b8bfe729ae723948bfd456ea19bb3c136487f14c4048e99a2a62642dc234f1b3b8b139ee43f811983481d514da3fcb340c3e0c115317df62a26c740c4", @ANYRES64=0x0, @ANYBLOB="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", @ANYRES64=0x0, @ANYRES16=r3, @ANYBLOB="37eb290aca"], 0x20000600}, 0x1, 0x0, 0x0, 0x850}, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r4, 0x80000000) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 10.697517875s ago: executing program 5 (id=1750): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, 0x0, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0xded6de49ba727f8f, 0x3}}, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xf, 0x2}, 0x0, &(0x7f00000008c0)={0x40, 0x17, 0x6, @broadcast}, 0x0, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x7}, 0x0, &(0x7f0000000a00)={0x40, 0x21, 0x1}}) socket(0x21, 0x2, 0x1000e) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, 0x0, 0x0) r2 = open$dir(0x0, 0x10500, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x4000000c, r2, 0x0) r3 = epoll_create1(0x0) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(r4, 0x0, r4) r5 = socket(0x2, 0x80802, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)={0x2001}) 10.524735149s ago: executing program 1 (id=1752): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000480)=""/74, 0x4a) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) 9.533734085s ago: executing program 0 (id=1753): r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10180}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000309000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x70, 0x0, 0x0) r7 = eventfd2(0x8, 0x801) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000100)={0x200, 0x0, 0x0, r7}) ioctl$KVM_RUN(r6, 0xae80, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='7'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r9 = accept4(r8, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r9) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@newtaction={0xff0, 0x30, 0x100, 0x70bd26, 0x25dfdbfd, {}, [{0xfdc, 0x1, [@m_simple={0xfd8, 0x13, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xd, 0x3, '!.@$-**[\x00'}]}, {0xf99, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0xff0}, 0x1, 0x0, 0x0, 0x20000}, 0x44000) 9.105353139s ago: executing program 0 (id=1754): r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x200, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x40084503, &(0x7f0000ffcffc)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000ac0)=ANY=[@ANYBLOB="18f511ac37ef7c004241000000000700000000000000"], 0x18}], 0x1}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0dbc2cbd7000ffdbdf251e"], 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0x2400c004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f00000002c0)=""/186, 0x40f00, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x4, 0xd, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1a, 0x7, 0x800, 0xf9db, 0x1000, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x80000002, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$inet6_icmp(0xa, 0x2, 0x3a) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x0, 0x0, 0x2, 0x3}, 0x20) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r8, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x0, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$unix(0x1, 0x5, 0x0) socket$unix(0x1, 0x2, 0x0) modify_ldt$write(0x1, &(0x7f0000000080)={0x1, 0x20001000, 0x2000, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x10) 8.08913516s ago: executing program 0 (id=1756): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_usb_connect(0x0, 0xfedd, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) set_mempolicy_home_node(&(0x7f00004df000/0x3000)=nil, 0x3000, 0x3, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') readv(r1, &(0x7f00000022c0)=[{&(0x7f00000021c0)=""/200, 0xc8}], 0x1) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0], 0x1, 0x6642}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000ab3000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x3f, &(0x7f0000000000)={&(0x7f0000000280)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FRA_SRC={0x8, 0x2, @multicast2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 8.031529751s ago: executing program 5 (id=1757): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x839}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bind$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) getpeername$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000300)) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$vbi(0x0, 0x1, 0x2) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x12, 0x7c5, 0x1, 0x3, 0xd59f80, 0x4, 0x5, 0x7, 0x2800, 0x5, 0x722, 0xe72, 0x7, 0x8, 0x2e, 0x8, {0xffff945a, 0x1}, 0x3, 0xed}}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_setattr(0x0, 0x0, 0x0) close(0xffffffffffffffff) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_DQEVENT(r5, 0x80885659, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) 8.020650799s ago: executing program 1 (id=1758): r0 = socket(0x21, 0x800, 0x200) syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r0) 6.830246903s ago: executing program 5 (id=1759): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x1, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000240)="04000000000303", 0x7}], 0x1) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000240)) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000dfff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000000640000000000000018000000000000000000000000000000950000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000500)={0x0, "b7c913bb682eaddb954b9baa9e3beb3f62952860388464c531987523195928cd2bb67fb432881f0131abc85d7e683ac8222e8038d1cec8de23ca68d11b0e6b1e"}, 0x48, 0xffffffffffffffff) signalfd4(r3, &(0x7f0000000300)={[0x3]}, 0x8, 0x80000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r5, 0x51, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x68) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 6.82327513s ago: executing program 7 (id=1760): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) close(0xffffffffffffffff) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mq_notify(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000a00)=ANY=[], 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18) r6 = socket$alg(0x26, 0x5, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='Fp', @ANYRES64=r0, @ANYRES64, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c626c6b73697a653d307830c87286bc3695e1303030303030303030303030", @ANYRES64=r3, @ANYRESDEC=r5]) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4c085) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) 6.688839184s ago: executing program 1 (id=1762): syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x0) socket(0x10, 0x400000000080803, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FICLONERANGE(r0, 0x5460, &(0x7f0000000300)) signalfd(0xffffffffffffffff, &(0x7f0000000c80)={[0xfffffffffffffffe]}, 0x8) syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000480), &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000000000000000f00008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) pipe(&(0x7f00000000c0)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000002a00), 0x800, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pimreg\x00', 0x2}) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) syz_open_procfs(0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) readv(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/170, 0xaa}], 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x1b) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(r6, 0x0, r6) 5.848584124s ago: executing program 5 (id=1764): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x6, 0x24, &(0x7f00000003c0)=ANY=[], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_pidfd_open(0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r4, &(0x7f00000002c0)='./file1\x00', 0xc000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r4, &(0x7f0000000100)='./file1\x00', r4, &(0x7f0000000240)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x0) 5.847225146s ago: executing program 7 (id=1765): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000006740)={&(0x7f00000002c0)={0x2c, 0x0, 0x1, 0x0, 0x80000000, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x2c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006780)=@newtaction={0x2154, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x9, 0xd, 0x401, 0x4}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}, {0x2098, 0x1, [@m_gact={0x17c, 0x1b, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1496, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0xa5c, 0x5, 0x10001, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xfc, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x10000, 0x5, 0x10000000, 0x6, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x26, 0x3}}]}, {0xfb, 0x6, "13d7d865599472cc61f93ab213464db04b9ae5e824eb19031006a6471ebb65320afe1f62e81b9ff512669547690067b9c38da0bc2142ecc95f4311b028e0d735dff99d56dd9f6b44746e31c0cafcc6bf0bdf7261d254be40c5556538c04755a74db795543e4c5c9cc5c8f51d1c5a00d1f375877df1068611098ff40ba10297d0771efde0943830664b92495f03eba199b34b7a16790f020992d2d7fad5748c1493373ed637719899dc5b344fc0e8bbdd0b6c5118ea88ed9f6224273f8ccfc6f57ddb69a7e15278e3fa3fe27bb45f00732bbb5b3ef6bbcc8314da8bc8ab7e29825a965312a89f59491d855508a0ca9736c82eeef358ff60"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_gact={0x108, 0x18, 0x0, 0x0, {{0x9}, {0x7c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0xdc0, 0x10000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xfc3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x8000, 0x10000000, 0x6, 0xffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1d37, 0x20000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x854, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1381, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x255e, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0xc46, 0x5, 0x8, 0x7f, 0x3}}]}, {0x62, 0x6, "0a3de5d82c3973f705537a0a3aae2ff8173e8ea527bda8130883f0ab4e227bd48f6d32a1f83233470b93431e31c4ef152c9f5eab6ad3686de017d2d3dbc29ceab175f1151b084154f7768fc275579b506fb61731d5b0531c949eb0d73ac5"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_simple={0x78, 0x15, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x2, 0x1, 0x4, 0x200}}, @TCA_DEF_DATA={0xd, 0x3, '#$\'#*@\\#\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x3cb5, 0x6, 0x9, 0x272d}}, @TCA_DEF_DATA={0x6, 0x3, '*\x00'}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x4}}}}, @m_police={0x1d98, 0x13, 0x0, 0x0, {{0xb}, {0x1d6c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0xb, 0x0, 0x3, 0x7, 0xfa3, 0x2, 0x800, 0x2, 0xc0a, 0xff, 0x9, 0x80000000, 0x2, 0x5, 0x5, 0x5, 0x10000, 0x2ac, 0x2, 0x7, 0x8, 0x33, 0xfffffffa, 0x721, 0x3154, 0x10000, 0x0, 0x0, 0x3, 0x3, 0x8, 0xf, 0x7, 0xffff, 0x7, 0x80000001, 0x40, 0xa, 0x2, 0x8, 0x0, 0x6, 0xfffff3a0, 0x7fffffff, 0x2e08, 0x5, 0x7, 0x401, 0x4, 0x5, 0xdbb, 0x1e6, 0x2, 0xc9, 0x8, 0x3, 0x6, 0x0, 0x8000, 0x69, 0x3276, 0x2, 0x800, 0x6, 0x8, 0x1, 0xff, 0x0, 0x7, 0x81, 0x80000001, 0x3, 0x6, 0x4, 0x5, 0x6, 0x6, 0x1ff, 0x9, 0x1, 0x8, 0x6, 0x3, 0x6, 0xc, 0x3, 0xd, 0x1, 0x8001, 0xfffffeff, 0x6, 0x9, 0x3, 0x8, 0x9, 0xfffffff7, 0x2, 0xff, 0x7, 0x8, 0x8, 0x4, 0x0, 0x1, 0xa, 0x8, 0x48396ea1, 0x7, 0x7fffffff, 0x2, 0x6, 0x3, 0x5, 0xfffffffa, 0xa, 0xfff, 0x8, 0x8, 0x10000, 0x8a7, 0xb79, 0x15, 0x2, 0x5, 0xfffffffb, 0x1bf, 0x3, 0x1c, 0xf, 0x2, 0x7, 0x0, 0x6, 0x4, 0x40, 0x9, 0x5, 0xa, 0xffffffff, 0x3, 0x5, 0x80000000, 0xfffffff7, 0x1, 0xfffffeff, 0x8001, 0x2, 0x8, 0x337c26d, 0x5, 0x0, 0xfffffffc, 0x2, 0x7, 0x8, 0x8, 0x7, 0x6, 0x101, 0x5, 0x1338, 0x9, 0x7, 0x7, 0x6, 0x7, 0x1, 0x81, 0x1, 0x0, 0x1, 0x1, 0xfffffffb, 0x20, 0x10, 0x7, 0x8, 0xb, 0x5, 0x9, 0x5, 0x6, 0x9, 0x100, 0x2, 0xaf0, 0x7, 0x10000000, 0x1000, 0x7, 0xffffffff, 0x6, 0x5, 0x0, 0xffffffff, 0x3, 0x2, 0xbcb, 0x62, 0x0, 0x4, 0xd71, 0x0, 0x0, 0x5, 0x7, 0xfff, 0x9, 0x4, 0x9, 0x4, 0x9, 0x2, 0x0, 0x7dc, 0x618, 0x8, 0x9, 0x6, 0x4, 0xa9b, 0x5, 0x80000, 0x0, 0x5, 0x3, 0x603b, 0x5, 0x3, 0x0, 0x3, 0x2ba, 0x3, 0x3, 0xfffffffd, 0x3, 0x12494000, 0x5, 0x8, 0xc, 0x5, 0x101, 0x1, 0x0, 0x3, 0x10000, 0xe40, 0x5a8, 0x699, 0xbe, 0x3, 0x69, 0x4, 0x5, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x8, 0x2, 0x3ff, 0x1, {0x3, 0x2, 0x8, 0x6, 0x9, 0x2}, {0x7, 0x0, 0x400, 0x8, 0x5dd, 0x2}, 0x9, 0x49ae, 0xe578}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x722}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0xffffffffffffffff, 0x6, 0x7, 0x9, {0x1, 0x1, 0x6, 0x5, 0x5, 0x8000}, {0x9, 0x1, 0x4, 0x4, 0xe7, 0x4}, 0x7f, 0xa180, 0x3}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0xb63}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x8b, 0x2, 0x36fbf295, 0x5, 0x5, 0x7, 0x4, 0x6, 0x9, 0x7a52, 0x9, 0xad, 0x4, 0x4, 0xfffff800, 0xfffffff8, 0x9, 0x0, 0x3, 0x5c50, 0x7, 0xfffffffa, 0x7, 0x0, 0x401, 0xffffffff, 0x4, 0x7, 0x7, 0x7, 0x12000, 0x4, 0xf, 0x0, 0x4b4, 0x200, 0x1, 0x0, 0x2, 0x7, 0x8, 0x3ff, 0x8, 0x7fffffff, 0x0, 0x1b, 0x4, 0x1, 0x2, 0x4, 0x7fffffff, 0x4, 0x5, 0x6, 0x81, 0x8e, 0x3, 0x7, 0x1, 0x1, 0x8, 0xe0, 0x2, 0x401, 0x5, 0xfffffffd, 0x10001, 0x5, 0x3, 0x1, 0x7, 0xff, 0x8, 0xdb1, 0xcfbf, 0x9, 0x2, 0x80, 0x4, 0x9, 0x1393, 0x8, 0x4, 0x4, 0x3, 0xfe1, 0xa, 0x0, 0x400, 0xfffffffa, 0x9, 0x6, 0x0, 0x139, 0xe677, 0x0, 0x7, 0x4, 0x5, 0x0, 0x1ff, 0x10001, 0x4, 0x2, 0x9, 0x4f7e, 0xc0, 0x5, 0x7, 0x6, 0x9, 0x8, 0x8000, 0x0, 0x0, 0x1, 0x4, 0x8, 0x0, 0x3, 0x800, 0x8, 0x3, 0x6, 0x3, 0x1000, 0x2, 0xe3, 0x4, 0x1, 0x10001, 0x5, 0x7fffffff, 0x1, 0x1, 0x4, 0x0, 0x7, 0x9, 0xfffffff0, 0x7ff, 0x10, 0x6, 0x2, 0xc, 0x3, 0x7, 0xc, 0x3, 0x0, 0x40000000, 0x7, 0x5, 0x5, 0x8, 0xe, 0x5, 0x5, 0x5, 0x1, 0xe9d7, 0xffffffff, 0xfffffffd, 0x2, 0xfffffffa, 0xa53, 0x9, 0x4, 0x3, 0x2, 0x9, 0x5, 0x81, 0xbe, 0x7c1d, 0x82ef, 0x99d, 0xc8e, 0x400, 0x4, 0x0, 0x4, 0x0, 0x1ff, 0x6, 0x4, 0xc000, 0x6, 0x2885, 0x80, 0x7ff, 0x7, 0xe9f7, 0xfffffffa, 0x10001, 0xf2, 0x5, 0x7, 0x3, 0xd1e, 0x7, 0x5800ffcf, 0x3, 0x9, 0x10000, 0xc, 0x8, 0x5, 0x5, 0x0, 0x800, 0xd, 0x9, 0x101, 0x1ff, 0xfffff000, 0x1, 0x2bf0, 0x1, 0x4, 0x7fffffff, 0x8, 0x3, 0xffffffff, 0x6, 0x9971, 0x3, 0xba0d, 0x3, 0x1, 0x800, 0x8, 0x4, 0x5, 0xfffffff5, 0x6, 0x80, 0xc8, 0x5, 0xffffffff, 0x6, 0x1, 0x2, 0x0, 0x2, 0x3ff, 0x9, 0xfffffffc, 0x1, 0x7, 0x3, 0x80, 0x40000000, 0x0, 0xa9e]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x4, 0x6, 0x5, 0x1, 0x688, 0x8, 0xc, 0x3, 0x4, 0xffff0001, 0xbf120, 0x94c6, 0x1be284fd, 0x7fffffff, 0x3, 0xffff, 0x9, 0x7, 0x7, 0x1, 0x200, 0x8, 0x9, 0x7, 0x538, 0x1, 0x5, 0x2, 0x2, 0x5, 0x3, 0x8, 0x0, 0x8, 0x1ff38501, 0x5, 0xb8a, 0x101, 0xfffffff7, 0xffff, 0xb9, 0x3, 0x4, 0x3241, 0x8, 0x7, 0x2, 0x4, 0x2, 0x7fffffff, 0x2, 0x6, 0x7, 0x7, 0x5, 0xe2, 0x8, 0x5, 0x8001, 0x1, 0x3, 0xf, 0x9, 0x9, 0xfffffff8, 0x0, 0x2, 0x6, 0x1ff, 0x400, 0x2, 0x6, 0x4b59, 0x6, 0x10, 0x9, 0xfff, 0x6, 0x9, 0x387, 0x800, 0x4, 0x8, 0x9, 0x2, 0x100, 0x2, 0x9, 0x2, 0x500000, 0x8, 0x7ff, 0x7, 0x80000001, 0xdeec, 0x7, 0x6, 0xa00000, 0x7, 0x6, 0x5, 0x7, 0x5, 0x7, 0xa, 0x1, 0x40, 0x7, 0x10001, 0x1, 0xe70, 0xd, 0x0, 0x5, 0x9, 0x2fa5, 0x0, 0x7ff, 0xa, 0x0, 0xe000, 0x9, 0xba0e, 0x7, 0x5, 0x3, 0x40, 0x8, 0x0, 0xfffffff7, 0x1c0000, 0x3, 0x1, 0x4, 0x2, 0x800, 0x4, 0x80000001, 0x100, 0x6, 0x8, 0x8, 0x6, 0x2, 0x6, 0xc, 0xdb7e, 0xfffffffe, 0x7, 0x4, 0x9, 0x10000, 0xff, 0x2, 0x1, 0x3, 0x2e80952a, 0x8, 0x7, 0x3ff, 0x8, 0x6, 0x4, 0x7, 0x44d8, 0x9, 0xeae, 0xfffffffd, 0x1, 0x47c, 0xae6, 0x3, 0x8, 0x472, 0x7ff, 0x40, 0x8, 0x4, 0xf03, 0x7, 0x9, 0x9c6, 0x400, 0xf8, 0x9, 0x80000001, 0xd4e, 0xf3a8, 0x0, 0x8, 0x2, 0xffff, 0x6, 0x0, 0x1ff, 0x845, 0x9, 0x2, 0x9, 0x0, 0x5, 0x922, 0x401, 0x9, 0x481, 0x6, 0xf12, 0x14000000, 0x400, 0x4, 0x800, 0xfbe, 0x9, 0x7, 0xffff1d33, 0x8a77, 0x80000000, 0x2, 0x8, 0xb41, 0x2, 0x9, 0x6, 0x8, 0x9, 0x4, 0xbf5, 0x6, 0xd678, 0x7, 0x8, 0xfffffffd, 0x1, 0x73d, 0x8, 0x7fffffff, 0xfff, 0x7f, 0x1000, 0xe762, 0x9, 0xfffffffa, 0x7, 0x200, 0x6, 0x7, 0xe, 0xb, 0x0, 0x0, 0x1, 0x9, 0x2, 0xc0, 0x5]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4c0e, 0x0, 0x4, 0x7, 0xf, 0xfffffff9, 0x8, 0x4, 0xc, 0xed, 0xffffffff, 0x7fff, 0xfffffffb, 0x401, 0x8, 0x7fff, 0xf5, 0xffffff76, 0x7, 0x7fff, 0xe, 0xffff, 0x8, 0x40a4, 0x7, 0x9, 0xfffffcb2, 0x6, 0xb8, 0xe47c, 0x3, 0x9, 0x3, 0x0, 0x1, 0x8000, 0x1, 0x7, 0x3, 0x200, 0x0, 0x8, 0x7, 0x6, 0x7, 0x10000, 0x0, 0x0, 0x8, 0x400, 0x6, 0x1, 0xe, 0x7, 0x8, 0x5, 0x5, 0x5, 0x9, 0x101, 0x2, 0x4, 0x1, 0x9, 0x2, 0x7, 0x6, 0x0, 0x3, 0x4, 0x1a6, 0x0, 0x3, 0x3, 0x10000, 0x5806, 0xb8f5, 0x100, 0xfffffff7, 0xd8a0, 0xe0, 0x5, 0xb, 0x6, 0x9, 0x0, 0x2, 0x1, 0x3, 0x7d, 0x8001, 0x0, 0x40, 0x6, 0x0, 0x5, 0x3, 0x6, 0xfffffff8, 0x7, 0x800, 0xc8, 0x0, 0x5, 0x1ebd, 0x1, 0x9, 0xb668, 0x41e0, 0x4, 0x81, 0x3, 0x3, 0x7, 0x2, 0x80000001, 0xfffffffc, 0x3, 0x8, 0x5, 0x6, 0x7f, 0x1cb9977b, 0x100, 0x7, 0xffffffff, 0x1ff, 0x7f, 0xecf, 0x200, 0x8, 0x1, 0x1, 0x9, 0x81, 0x401, 0x1, 0xd, 0x18000, 0x9, 0x1, 0x1, 0x2, 0x8, 0x1, 0x80000000, 0xf, 0x1, 0x6, 0x4, 0x2, 0xc, 0x400, 0xf05, 0x4, 0xfffffff2, 0x0, 0x1, 0x8, 0x0, 0x5, 0x4, 0xe, 0x100, 0x0, 0x240000, 0x800, 0x101, 0x5d6aa939, 0x2, 0xff, 0xdad, 0xaf9f, 0xd, 0x40, 0xff, 0x8, 0x6, 0x6, 0x1000, 0xac2, 0x7, 0x9, 0x1, 0x67600, 0x80e, 0x6, 0x2, 0x6, 0x0, 0x2, 0x3ff00, 0x6, 0x8, 0x3, 0xfffffecb, 0x7fffffff, 0x400, 0x6eb4, 0x200, 0x7, 0x5751, 0x2, 0x5, 0x7, 0x100, 0x9, 0xffffffff, 0x3, 0x7fff, 0xd8c, 0x9, 0x4, 0x10001, 0x200, 0x1ff, 0x6, 0x7ff, 0x5, 0x9, 0x0, 0x2, 0x39, 0x0, 0x8a, 0x0, 0x6, 0x40, 0x401, 0x9, 0x9, 0x4, 0x7, 0xfffffff9, 0x10001, 0xd0, 0x35c6, 0xfffffff7, 0xfffffffa, 0x2, 0x2, 0x7fff, 0x3, 0x9, 0x9311, 0xffff, 0x10000, 0x10000, 0x0, 0x7fffffff, 0x20, 0x80000000, 0x10001, 0xd, 0x6, 0x6d]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xf71a}, @TCA_POLICE_RESULT={0x8, 0x5, 0xbb9e}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xd8e}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7db}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x73}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x3c6, 0x6, 0x9, 0x101, 0xda, 0x6, 0x5, 0xee, 0xfff, 0x400, 0xc, 0x400, 0xfffffff9, 0x42, 0x0, 0x876, 0x8, 0xe3, 0x8, 0xc, 0x7fffffff, 0xa, 0x80, 0x2, 0x6, 0x0, 0x7, 0x2, 0x0, 0xf2, 0x1, 0xfffffffb, 0x9, 0x80, 0x800, 0x6, 0x4, 0xd0d, 0x10000, 0x4efa, 0x2, 0x1, 0x1000, 0x9, 0x5, 0x5, 0xd9f1, 0x3, 0x101, 0x3, 0x2e, 0x4, 0x80, 0xa016, 0x6, 0x2000000, 0x4, 0x100, 0x341e, 0xadd, 0x1, 0x6, 0x483f, 0x2, 0xffffffff, 0x3, 0x6, 0x5, 0x1, 0x5, 0x9, 0xd38, 0x80000000, 0x7fffffff, 0x0, 0x8001, 0x5df82ffd, 0xffff, 0x7, 0xc46d, 0x8, 0x8, 0xbd, 0x7, 0x1, 0xc, 0x81, 0x3, 0x18, 0x4, 0x5, 0xb, 0x800, 0x1, 0xb, 0x8b8, 0x4, 0xb, 0x8, 0x617e, 0x3, 0x5, 0x1, 0x1, 0x9, 0x7, 0x4, 0x7, 0x5, 0x2, 0x9, 0x5, 0x7, 0x81, 0x4, 0x5, 0x5, 0x3a30, 0x4, 0x8, 0x1, 0x200, 0xf823, 0xffff, 0x5, 0x7, 0x103, 0x1, 0x9, 0x0, 0x5, 0x1, 0x4, 0x524, 0x1, 0x7, 0xffff, 0x10000, 0x0, 0x8, 0x7, 0x6, 0x7, 0xf, 0x2, 0x200, 0x1, 0x17a688e5, 0x64, 0xe01, 0x6, 0x4, 0x1, 0xc7, 0x7, 0x5593, 0x5, 0x9, 0x3, 0x0, 0x4, 0x968, 0x8000, 0x6, 0x4, 0x8, 0xf48f, 0x7, 0x81, 0xce8, 0x7, 0xfffffff9, 0x1, 0xdee, 0x7, 0xf, 0xfffffffb, 0x8fa, 0xf179, 0x9, 0x8, 0x80000000, 0xfffffffe, 0x1f8, 0x0, 0x8, 0x9, 0x4, 0x4, 0x8, 0xc98b, 0x2, 0x5, 0x3e1, 0x3, 0xe, 0x3, 0x5, 0x95a, 0x10, 0x6, 0x5eebcad9, 0xbf, 0x0, 0x6, 0x290, 0x8, 0x8, 0x4, 0x7fff, 0xe, 0x6, 0x40, 0xca5, 0xb7, 0x0, 0x9, 0x6, 0xffffff6c, 0x40, 0x1, 0x200, 0x4, 0x7, 0x7fffffff, 0x9, 0x2, 0xffffffff, 0x4, 0xff9b, 0x200, 0x10000, 0xfffffff8, 0x7d, 0x7, 0x40, 0x7f, 0x2a, 0x7e, 0xffff, 0x9, 0x2, 0x400, 0x9, 0x9a96, 0xfffffffc, 0x8, 0x3, 0xfffffffb, 0x81, 0x8, 0x93, 0xe, 0x80000001, 0x1000]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x100}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x10000000, 0x9, 0x9, 0xd, {0x0, 0x2, 0x0, 0x0, 0xcf0a, 0x80000001}, {0x7, 0x1, 0x6d, 0x200, 0x2, 0x75}, 0x10, 0x5, 0x7}}], [@TCA_POLICE_RATE={0x404, 0x2, [0xd, 0x4d, 0xd1f, 0xffff, 0x2, 0x10000, 0x0, 0x0, 0xfffffff8, 0x4, 0x7fff, 0x7, 0x9, 0x0, 0x0, 0x8001, 0x7, 0x7, 0x9f, 0x4, 0x1, 0x0, 0x4, 0x7, 0x1, 0x80000000, 0x3, 0x8000, 0x0, 0x6, 0x7, 0x6, 0x200, 0x2, 0xfffffffa, 0x76, 0x31b, 0x8, 0x9, 0x0, 0xfffffffb, 0x7, 0x5, 0x5, 0x80000000, 0xffff, 0xab1, 0x5, 0x6, 0x6, 0x10000, 0xf, 0x3, 0x7fff, 0x6, 0x6b5432ff, 0xfff, 0x8, 0x2, 0xfffffaa9, 0x1ff, 0x7, 0x0, 0x51f, 0x0, 0x8, 0x9, 0x2, 0x81, 0x6f09, 0x0, 0xb22, 0x5, 0xb, 0x8, 0x7, 0x7, 0x7f, 0x1, 0x5, 0xb, 0x147, 0xffffffff, 0x7, 0x5, 0x8, 0x10001, 0x7, 0x9, 0x7ff, 0xfffffffd, 0xe, 0x5, 0xa, 0x3, 0xb7, 0xb, 0x1, 0x8e9, 0x9, 0x5, 0x6, 0x401, 0x1, 0x6, 0x955f, 0x80, 0xfff, 0x9c13, 0x2600000, 0xd, 0x4, 0xfffffffc, 0x81, 0x97, 0x8, 0xfffffff7, 0xffff, 0x1, 0x1, 0x0, 0x9, 0x10001, 0x1, 0x1e30, 0x80000000, 0x0, 0x4, 0x5, 0x81, 0x8, 0x64, 0x8, 0xe, 0x8001, 0x1, 0x42, 0x4, 0x81, 0x2, 0x5, 0x9, 0x0, 0x7fffffff, 0xa768, 0x6, 0x10, 0x5, 0x5, 0xa59, 0x20, 0x9, 0x0, 0x6, 0x0, 0x3ff, 0x9, 0x100, 0x9, 0x8, 0x4, 0x6, 0x9, 0x7, 0x4, 0x9, 0x400, 0x80000000, 0x4, 0xfffffff7, 0x3ff, 0x7fffffff, 0x0, 0x0, 0x9, 0x8, 0x1ee, 0x6, 0x1, 0x433, 0x89f, 0x8, 0x6, 0x7fff, 0x1e, 0x8, 0x1, 0x8583, 0x7, 0x8, 0x51, 0x9, 0x5, 0x3ff, 0x4, 0x2, 0x5, 0x8, 0x7fff, 0x4, 0x8, 0x4, 0xc7, 0x40, 0xfffffffb, 0x9, 0x7, 0x9, 0x6e, 0x80, 0x5, 0x6, 0x7, 0xf, 0x4, 0x101, 0x7, 0x8, 0x1ff, 0x0, 0xc, 0x4, 0x95, 0x0, 0x5, 0x3, 0x8, 0x3, 0x8, 0x8, 0x7, 0x6, 0x8001, 0x80000001, 0x1, 0x3, 0x69, 0x90, 0x3ff, 0x4, 0x101, 0xfffffff9, 0x6, 0x2, 0x9, 0xa1, 0x8115, 0x3, 0x1f, 0xfffffff9, 0x7, 0x7fffffff, 0x0, 0x50, 0x1, 0xfffffff9]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x8, 0x4, 0x5, 0x9, 0x5, 0x75, 0x7, 0x0, 0x5, 0x1ff, 0x9, 0xd, 0x9, 0x7fff, 0x100, 0x101, 0x6, 0x3, 0x5, 0x8, 0x9, 0xdf2f, 0x9b, 0xcc4, 0x2, 0x0, 0x8, 0x4, 0xf437, 0x400, 0x800, 0x4, 0x8938, 0x6, 0x8, 0x1, 0x6, 0x1, 0xf, 0x81, 0x3, 0x5ec, 0x80000001, 0xfffffffb, 0x400, 0x200, 0x400, 0x2, 0x6, 0x4, 0x7bc98aa8, 0xffffffff, 0xf, 0xffff, 0x7fff, 0x6066ae1a, 0x2, 0x9, 0x6, 0x1, 0x9, 0xd5f, 0xb40, 0x2, 0x1ff, 0x5da1d93c, 0x400, 0x8, 0x5, 0x3, 0x1000, 0x1, 0x0, 0x8d50, 0x2, 0x1, 0x2, 0xb7a, 0x5, 0x5, 0x4, 0x59b, 0x4, 0x1, 0x3, 0x1, 0x7, 0x3, 0x20000, 0xe, 0x0, 0xffff1c57, 0x4, 0xb39, 0x5, 0x1ff, 0x8, 0xfffffffb, 0x2f8, 0x5, 0x5, 0x3, 0x5, 0x0, 0x1, 0x7, 0x8, 0x4, 0x6364, 0x2, 0x1, 0x200, 0x2, 0xc8a5, 0x3, 0x5, 0xffffff4e, 0x3, 0x6, 0x0, 0x241b, 0xfffffffb, 0x4, 0x3, 0x2, 0x4, 0x5, 0x0, 0x0, 0x400, 0x6, 0x4, 0x81, 0x3ff, 0x7, 0x2, 0x2, 0x6, 0x81, 0xe, 0x8, 0x1, 0x9, 0x7, 0x3, 0x10001, 0x5615, 0x7, 0xffffffff, 0x4, 0x3e7f, 0x0, 0x9, 0x2, 0x2, 0x6f2e, 0x6, 0x6, 0x2, 0x3, 0x2, 0x888, 0x200, 0x2, 0xfff, 0x0, 0x6, 0xcacf, 0x800, 0x9, 0x4, 0x5, 0x2, 0x13, 0x7fffffff, 0x7, 0x0, 0x9, 0x4, 0x16, 0x4, 0x81, 0x4a, 0x7, 0x9, 0x9bc2, 0x99, 0x5, 0x2, 0x3, 0x1, 0x5a9f1370, 0x0, 0x3, 0x3, 0x10000, 0xffff5b30, 0x6, 0x8, 0x9, 0xb7e, 0x6, 0x1, 0x4, 0xfffffffc, 0x0, 0x40, 0x2, 0x8, 0x8, 0x4, 0x275a4712, 0x4, 0x2, 0x0, 0x223c80, 0x2, 0x2, 0x1, 0x9, 0x3, 0xfffffffe, 0x9, 0x4000000, 0x2, 0xfb, 0x9, 0x8, 0xfffffff9, 0x3, 0x7, 0x5, 0x8, 0x5, 0x1000, 0xbdc, 0x4, 0x20, 0x7d, 0x9, 0x9, 0x200, 0x8, 0x800, 0x9, 0x60000000, 0x8, 0x0, 0x3, 0x2, 0x6, 0xff000000, 0xf, 0x1, 0xfff]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x313}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x67fe}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, {0x34, 0x1, [@m_pedit={0x30, 0x17, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x4}}}}]}]}, 0x2154}}, 0x0) getsockname(r0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x2040, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x400000f4, 0x0, 0x6}]}) 4.330827261s ago: executing program 7 (id=1767): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4a26, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x1, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}, 0x0) (fail_nth: 4) 3.768425877s ago: executing program 6 (id=1768): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x4004550d, &(0x7f0000000080)=0x548) 3.767339754s ago: executing program 7 (id=1769): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x839}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bind$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) getpeername$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000300)) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$vbi(0x0, 0x1, 0x2) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x12, 0x7c5, 0x1, 0x3, 0xd59f80, 0x4, 0x5, 0x7, 0x2800, 0x5, 0x722, 0xe72, 0x7, 0x8, 0x2e, 0x8, {0xffff945a, 0x1}, 0x3, 0xed}}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_setattr(0x0, 0x0, 0x0) close(0xffffffffffffffff) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_DQEVENT(r5, 0x80885659, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) 3.601568037s ago: executing program 1 (id=1770): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB, @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="0001000000000000") syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12011000000000402505a8a440000102030109021b0001"], 0x0) 3.58451215s ago: executing program 6 (id=1771): syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @info_reply={0x10, 0x0, 0x0, 0x4, 0x3}}}}}, 0x0) (fail_nth: 4) 2.614422947s ago: executing program 5 (id=1772): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x13, 0x1, 0x4, "d6a335ae77885cc08ee7779753fdc9d48fd56de3dd7327f53824a50006b05802", 0x20323159}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0300000000000000000000000000000d03000000000000000000000204000000000000000000000d020000000000000061"], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="31830000000000000000190000000c000180080003"], 0x20}, 0x1, 0x0, 0x0, 0xffffff21}, 0x0) 2.510444212s ago: executing program 6 (id=1773): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4a26, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x1, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}, 0x0) 2.507972795s ago: executing program 7 (id=1774): syz_open_dev$tty1(0xc, 0x4, 0x1) 2.277239497s ago: executing program 6 (id=1775): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) close(0xffffffffffffffff) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mq_notify(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000a00)=ANY=[], 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18) r6 = socket$alg(0x26, 0x5, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='Fp', @ANYRES64=r0, @ANYRES64, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c626c6b73697a653d307830c87286bc3695e1303030303030303030303030", @ANYRES64=r3, @ANYRESDEC=r5]) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4c085) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) 2.275997859s ago: executing program 5 (id=1776): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="000001000000"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000180)={0x40, 0x7, 0xd, "af3a5200c1f10f29a2bd23fbb1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.222841127s ago: executing program 7 (id=1777): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_usb_disconnect(r0) ioctl$EVIOCGMASK(r1, 0x5b04, 0x0) 1.389676545s ago: executing program 0 (id=1778): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x90000, 0x0) r3 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[], 0x50) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000008c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000c000000180001801400020076657468305f6d616376746170000000240003802000038010000180080001003f000000040003"], 0x50}}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000003"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(0x0, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="480000001e00438b0000000000000000000000b9000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000b00000000000e369ab01ee2bb063a52cf2f655868d3e1ea2cff3aef61feb03748d870fd8887ab1225e7bf5af045f74ac7a1e1a479d34aad80fa2c42c00f374513b3e6bf48d31891724fcb0ac130692e2e8fbe468f952c57fb99acf8454623b2550808aa047a3ec672e1299a599d6cb6af888474d3bbd6e06a3352e8af106c30d5de1500cd721a"], 0x48}}, 0x0) sendmmsg$unix(r6, &(0x7f0000004000)=[{{&(0x7f0000000180)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000003040)=[{&(0x7f0000000300)}, {&(0x7f0000000540)="59ee14da782a493628ad28cd2cd1f831dcb304567c59165fc52aec63054ce8176f212093204184308f58c47f96f1e54508e342757c4ac78f90c723972d78262f7d97d5a111b389c83343054ee63828efb09fd38e86b24ba0b7dca7e4a9af26f86cbcee0a0c9dd3bdb15bba2f966fd91f02643c3e6a015a2619d14d739c9245869e69953c872f80c169fef5530b4c9381e277c7f77006beaa7ddbfd3c7e241933d1bcfb542a", 0xa5}, {&(0x7f0000000600)="eebc86022cbd55daf8221ac3b26d749dbc0e145a59fa1802f47f17cba1b0a12578231a56e6e688091e269666359afdc7c004a7159f815432ed3901967c2a506e5542f745cee83c3af351070c345418e82c1f49189f2944e7e8283a872e0b6b55aa882094cffcdaa30f252807b34e950089efcf57c119e1afe784867d825f838935dbfe17a25280c87f4907a5e01e26209a0781", 0x93}, {&(0x7f0000000700)="585454a5fa0b6e2c0d6d7b40fe8b", 0xe}, {0x0}, {&(0x7f0000000f80)="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", 0x1000}, {&(0x7f0000000940)="0803de51337a92c2c77757904cc591259457fd77c89ff15ae3f7372fcc78ef83bdcf9859ab62187c898caf1601eacdc179256d99a73c08c6cfb1b39e48bd0e75f0a185c32a0ff8ba57f1bb7be67d3e166414b23c58fff55f2007f6678233b0f6a27f", 0x62}, {&(0x7f0000001f80)="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", 0x1000}, {&(0x7f0000002f80)="7b4664fec4f021221dee3bf93925a319be235c31407875350aa7ffd9c1504e33855407007acc8c8aaa693b9b86c13d1fc2c0edc2d8792f7dd66ce0b65245de927ba1120573e8c6d5c042a557cac5ab498a672bd3400a0a746b2638377bcc599ee1a12291f58af90f3e6fe59c39c5f68629c6b6d353411ca6cf7dde6615358aab7b276ec899ed3e4ff2a47a4e6a7a0a91ff811264ad4c0255924bfc3674caca9627c956f221", 0xa5}], 0x9, &(0x7f00000034c0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r9, @ANYRES32=r5, @ANYRES32=r9, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000300000051ccd418767dc9e7e8ffff00000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r5, @ANYRES32=r10, @ANYRES32=r10, @ANYRES32=r5, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x8000}}, {{&(0x7f0000003580)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000003940)=[{&(0x7f00000042c0)}, {0x0}, {&(0x7f0000003600)="c0295e8c3df07d7900918c86cd3df54da2a9563dcd6d9995d4203bb148f70077bdadc057fdc2e60a7f7ff545", 0x2c}, {&(0x7f0000003640)="da6d61d6e67393eaeab9be55bcde389cf7c6dc40914e3fe66787881e995a9b887e5a453fddcfbb21b2a610d677f8c458bcfeaa2158795e4507ebe54517e20d5a610fc37301fc590c87d388b9dfaad447af7239ac76ea4c1236ec8a187ea2bc36", 0x60}, {&(0x7f0000003700)="1029dd690b8d4c178553759dfc2dd8e3cd5d39a1b3bc6302c042a630040199b6d9f58708009103d1e5a1eaec2acf1776889f65f2c49bb0484c2592f4720268492097048c60209f99adf857870fb0811a982388ad14528c24986cfa1832b3b995feaa6787769aa7683c17a2397a76b8f26ada84d184f14d3f0639834699007f52db62ccbdfaffc8460dfa60931d16cabdaeeac73fbfe5a5cc39c067bde68861ab0d9eba6ad86e89a80a35ae1af0a657cde48e9ea16aefb922082e28876c5057f1e27492d2235781d2d15c193a88e3b2105b5ecbebb28c079d", 0xd8}, {&(0x7f0000003800)="eb6214f2c1209e4c97b63c2b869bcf1fcebb948089455b47a4f153a8ef2606eec1b402a77667d5fa91022646249977013d3033b1aaa0495c5f82264caf", 0x3d}, {&(0x7f0000003880)="b9d1f1ec83bb4e140269e46d8017af3222b54dc01fe49cfbf6bdaad52c88bdead5767fcb163e1edced78ab823e111a37119fddd1a4d33ec3cea110844c759f409accf894644c3a5927d9405805ac5e73e3f38be85704f09b39f5c3e4e02fc8186149a7a7f16b19c56d7bb8827b4711be2c1332608ea4057f473c52a0c852f8842b94945d5a29a99e6321f59ea059dd4e3deb9fecf95140f612c7", 0x9a}], 0x7, &(0x7f0000003f40)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r7, 0xffffffffffffffff, r2]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [r11, r12, 0xffffffffffffffff, r2, 0xffffffffffffffff, r1, r1, 0xffffffffffffffff, r5]}}], 0x90, 0x20008011}}], 0x2, 0x40) semget$private(0x0, 0x5, 0x600) r13 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r13, &(0x7f0000000080)={0x11, 0x18, r14, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.213165531s ago: executing program 6 (id=1779): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842ba4470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x10, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1002}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r2 = socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000200)=@in4={0x21, 0x0, 0x2, 0x8, {0x2, 0x0, @empty}}, 0x24) r5 = open(0x0, 0x0, 0x0) r6 = openat$cgroup_procs(r5, 0x0, 0x2, 0x0) writev(r6, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) connect$inet(r10, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r10, &(0x7f0000002080), 0x0, 0xa1c) lsetxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0xb2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f00000001c0), &(0x7f00000002c0)=0x4) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 409.601653ms ago: executing program 0 (id=1780): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000040)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001140)=@newtfilter={0xcb8, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc88, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0xfffffffb}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x8c30}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0xf}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x4}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x2}, @TCA_FLOW_POLICE={0xc54, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xec8, 0xffffffff, 0x2, 0x7, 0x7, 0x8001, 0x2, 0x3, 0x4b79, 0x667, 0xecd7, 0x7b, 0x1548, 0x7fff, 0x80000000, 0x0, 0x800, 0xa, 0x3, 0x10000, 0x6, 0x9, 0x8, 0x5, 0x1, 0x2, 0x200, 0x800, 0x0, 0x8000, 0x0, 0xb4, 0xfffffffa, 0x3, 0x4, 0x1, 0x7, 0x5, 0x3, 0xffffffff, 0x1, 0xb4d, 0x4, 0x0, 0x5, 0x1ff, 0x78, 0x0, 0x9, 0x6, 0x400, 0x0, 0x5, 0x81, 0x7fff, 0x7727637b, 0x3, 0x3, 0xe, 0x6, 0x80000000, 0x4, 0x1, 0x2, 0x7, 0x6, 0x5cd, 0x7, 0x6, 0x8, 0x9, 0x4, 0x6d, 0x4, 0x7f08, 0x0, 0x5, 0x7, 0xfffffff1, 0xd2, 0x8000, 0x0, 0x312a, 0x6, 0x5, 0x3, 0x7, 0x80000001, 0x30a, 0x6, 0x4, 0xc4b, 0x7, 0x1000, 0x100, 0x0, 0x4, 0x2, 0x3, 0x9, 0x10000, 0xc5e, 0x0, 0x40, 0x5, 0x8, 0x5, 0x401, 0x4, 0x5, 0x7, 0x2, 0x80000001, 0xb, 0x0, 0x2883, 0x6, 0x2, 0x2, 0x4, 0x1, 0x8, 0x5, 0x64, 0x7, 0x2, 0x3, 0x6, 0x6, 0xf9, 0xfc000000, 0xd, 0xfffffffd, 0xfff, 0x3ff, 0x3, 0x80000000, 0x1, 0x1, 0xffff, 0x6, 0x7f, 0xa0000000, 0x2, 0x3, 0x1866, 0x8, 0x3, 0x3, 0x3, 0x100, 0x7, 0x7, 0x82, 0x7, 0x200, 0xa8, 0x5, 0x5a5, 0xc, 0x6, 0x101, 0x7, 0x25d, 0xffffffff, 0x80000001, 0x9, 0x176a, 0x7ff, 0x4, 0x7, 0x0, 0x0, 0x9, 0x78, 0x2, 0x26, 0x100, 0x2, 0x4, 0xffffffff, 0xc2c16dd9, 0xf58, 0x2, 0x4, 0xcf4, 0x795a33b2, 0x2, 0xe, 0x4, 0x8, 0x0, 0x8, 0x0, 0xd2000000, 0x1, 0x0, 0xc74, 0x9, 0x10001, 0x3, 0x9, 0x7, 0xa8, 0x3, 0x7, 0x8, 0x4, 0xfff, 0x66e945ea, 0xd47, 0xe, 0x8, 0x4, 0x1, 0x4, 0xfffffff7, 0x500000, 0x0, 0x7ff, 0x6, 0x5a, 0x80, 0x401, 0x0, 0xfffffc00, 0x4, 0x40, 0x4, 0x8, 0x7, 0x6, 0xffffffff, 0xfffffff8, 0x6, 0x7, 0x9, 0x4e09, 0x5, 0x8000, 0x80, 0x0, 0x1, 0x5, 0x800, 0xffffffff, 0x2, 0x3, 0x48, 0x4, 0x0, 0xfffffffc, 0x8, 0x2, 0xf]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x23, 0x0, 0x1, 0x5184, 0xfffffe00, {0x6, 0x0, 0x5, 0xc, 0x5, 0x3ff}, {0x2b, 0x1, 0x3, 0x8, 0x8}, 0xf, 0x8000, 0x2}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x1, 0x6, 0x3, 0x6, 0xe3b9, 0x1, 0x4, 0x2, 0x3d7, 0xfffffff9, 0x40, 0x4, 0xe5, 0x3, 0x9, 0x1, 0x7, 0x6, 0x5, 0x5, 0x1, 0x8d, 0x8, 0x8, 0x400, 0x5, 0x7, 0x9, 0xb, 0x9, 0x3, 0x9, 0x9, 0x7, 0x6, 0xd6, 0x6, 0x7, 0x8, 0x9bc, 0x7, 0xffffffff, 0x8, 0x7, 0x4, 0xdc, 0xe, 0x9b5b, 0x3, 0x3, 0x9, 0x826, 0x4, 0x8, 0x1, 0x4, 0x5, 0x3, 0x0, 0x1ff, 0x5, 0x3, 0x40000000, 0x1, 0xfffffff2, 0xb06, 0x3, 0x7c0, 0x10, 0xfffffffe, 0x1, 0x3, 0xfffffffe, 0x8001, 0x7, 0x0, 0x101, 0x3, 0x5, 0x8001, 0x7, 0x7fff, 0xb, 0x8, 0x59c8, 0x2, 0xff, 0x0, 0x3a2e, 0x5, 0x61, 0x2, 0x8, 0x2, 0x1, 0x8, 0x7, 0x4, 0x2, 0x0, 0x6, 0x1, 0x1a2a, 0xf6, 0x7, 0x1, 0xfffffffe, 0x5, 0x3, 0xe129, 0xce2, 0x7f1, 0x3, 0xfffb, 0xa100, 0x0, 0x10001, 0x2, 0xac, 0x72ba05b7, 0x2, 0x9, 0x7fffffff, 0x4, 0xfd, 0xbe43, 0x3ff, 0x9, 0x2, 0xff, 0x5, 0x9, 0x9, 0x4, 0x100000, 0x81, 0x3, 0x7348, 0xd, 0x4, 0x1, 0x6, 0x1, 0x2, 0x5a, 0x1, 0x80000000, 0x2, 0x3, 0x5, 0x101, 0x2, 0x80000001, 0x4, 0x0, 0x5, 0x9, 0x8, 0x2, 0xd3af, 0xf, 0xd, 0xf, 0xaa6e, 0x400, 0x7, 0xfffffff7, 0x7c, 0x1, 0xffffffef, 0x6, 0x100, 0x6, 0x1, 0x6, 0x3ff, 0x3, 0x678, 0x4, 0x10000, 0x5c09, 0x6, 0x4, 0x8, 0x9, 0x4, 0x7, 0x6, 0xe30d, 0x7ff, 0x1, 0x7c6a2ca8, 0x3ff, 0xd0f, 0x5, 0x10001, 0x4, 0xf, 0x4856, 0xff, 0x0, 0x5, 0xb, 0x2, 0x5, 0x4, 0x5, 0x1, 0x100, 0x5, 0x3, 0x3, 0x7, 0x0, 0x10000, 0x1, 0x1, 0x80, 0x1, 0x3, 0xffff, 0x100, 0x8001, 0xfffffffb, 0xa, 0x8000, 0x0, 0x7, 0x9, 0x8, 0x211, 0x8, 0x1, 0x0, 0x1000, 0xc, 0x1, 0x800, 0xfffffeff, 0x8, 0x6, 0x3e9, 0x10000, 0x5, 0x3, 0x7, 0x4, 0x6, 0x7496b2ee, 0x81, 0x5, 0x1000, 0x33, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x800, 0x0, 0x0, 0x5, 0x0, 0x1, 0xff, 0x5, 0x5, 0x5, 0x8, 0xe, 0xa27c, 0xffffffff, 0x1, 0x0, 0x80000001, 0x6, 0x0, 0x2, 0x1000, 0x5, 0x5, 0x4, 0xfffffffd, 0x8000, 0x2, 0x1, 0x10001, 0xfffffff9, 0xd78, 0xfffffffb, 0x5, 0x3, 0x6, 0x5, 0x6, 0x3, 0x80, 0x0, 0x2, 0xf2a4, 0x10001, 0x7, 0x8, 0x0, 0x40, 0x4, 0x1a41, 0x6, 0xc1cb, 0x2, 0x0, 0x2, 0x7, 0x6, 0x5, 0x100, 0x5cf2, 0x8, 0x1, 0x20960f7b, 0x6, 0x9, 0x8, 0x6, 0x5, 0x7, 0x6a5, 0x18000, 0xe62, 0x1, 0x7, 0x80000001, 0xe, 0x401, 0x561d, 0xffff, 0x0, 0x32e, 0x6, 0x6, 0x7, 0x81e, 0x3, 0xfdf4, 0xffffffff, 0xfffffff9, 0x7, 0x5, 0x0, 0x9, 0xfffffff8, 0x4f, 0x81, 0x5, 0x1, 0x63, 0x7, 0x40, 0x3ff, 0x7fffffff, 0x4, 0xc, 0x8, 0x1, 0x9, 0x3, 0x0, 0x1, 0x97f9, 0xfffffffd, 0x6, 0x6, 0x81, 0x8, 0x8001, 0x4, 0x6a446555, 0x6, 0x1000, 0x8001, 0x3, 0x3, 0xffffffff, 0x40, 0x9, 0x9, 0x9, 0xf9, 0xffffffff, 0xc, 0x9, 0x61b6, 0xfffff123, 0x2653ab6c, 0x5, 0x0, 0x800, 0x0, 0xd, 0x3, 0x6, 0xca, 0x6, 0xc406, 0x5, 0xf, 0xff, 0xfffffff9, 0xfffffffc, 0x524, 0x80000000, 0x11, 0x8, 0x8, 0x2, 0x10000, 0x3, 0xfffff57a, 0x3, 0x3d2, 0x802, 0x9, 0x8, 0x6, 0x80, 0x1, 0x1, 0x80000000, 0xf, 0xc6f, 0x7, 0x7fffffff, 0x8, 0x12ba, 0x9, 0x1, 0xf99, 0x7, 0x7fff, 0x6, 0x1, 0x4, 0x7fff, 0x6195, 0x6, 0x45ca29e4, 0x40, 0x4, 0x40, 0x9, 0x101, 0x1, 0x8, 0xffffffc0, 0x8, 0x0, 0x8, 0x1, 0x5, 0x6d, 0x8, 0xffffffe4, 0x0, 0xfffffff9, 0x5, 0x9, 0x6, 0x8000, 0x608f, 0xfffffff8, 0x3288, 0x400, 0x10, 0x9, 0x10001, 0x3, 0x9, 0x7, 0x2, 0x1, 0xe, 0x800, 0x3fbb5ed2, 0x6, 0xfffffffc, 0x2719, 0x3, 0x7, 0x2, 0x8, 0x52, 0x9fa, 0xbe8, 0x7, 0x7, 0xffff, 0x400, 0x8, 0x6, 0x5, 0x2, 0x1, 0x9, 0x8001, 0x3, 0x9, 0xa, 0x7ff, 0xc00, 0x5, 0x5, 0x8001, 0x8, 0x9]}]}]}}]}, 0xcb8}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 135.712612ms ago: executing program 1 (id=1781): openat$adsp1(0xffffffffffffff9c, 0x0, 0x100800, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x4, 0x3f, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x0, 0x2}, [@NDA_LLADDR={0xa, 0x2, @link_local}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) clock_adjtime(0x0, &(0x7f0000000100)={0x5eb, 0x6a, 0x55cd, 0xa, 0x48c, 0x7, 0xd, 0x422, 0x2, 0x98e9c422, 0x800, 0x2, 0x7, 0x2, 0x7f, 0x5, 0x0, 0x5, 0x1, 0x8b7, 0x3, 0x6, 0x9, 0x574, 0x5, 0x3}) clock_adjtime(0x0, &(0x7f0000000000)={0x8, 0x901, 0x2b, 0x2, 0xff, 0x3, 0x8, 0x7, 0x7fffffff, 0x1, 0xffff, 0x2, 0x43d1, 0x7d, 0x7fffffff, 0x1, 0x7, 0x0, 0x4, 0x1, 0x7fffffff, 0x4, 0xe, 0xff, 0x5, 0x9}) 43.106255ms ago: executing program 0 (id=1782): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0xa, 0x3, 0x3c) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x840}, 0x4000881) r4 = accept4$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10, 0x800) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'ip6erspan0\x00', &(0x7f0000000040)=@ethtool_eeprom={0xb, 0x1, 0x1b, 0x19, "df3d99eeed0e61bc328f453ef19034100ba9ee8f231d970060"}}) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0xbfb, 0x2) r6 = dup2(r5, r5) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f00000000c0)={0xf0f03f, 0x6e}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r9, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r10, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 6 (id=1783): r0 = socket$netlink(0x10, 0x3, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) sendfile(r3, r3, 0x0, 0x40008) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYRES8=r1, @ANYRESHEX=r0, @ANYRESDEC=r3]) kernel console output (not intermixed with test programs): ycle [ 670.719950][ T8] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 670.741060][ T8] usb 6-1: device descriptor read/8, error -71 [ 670.819150][T11727] Bluetooth: (null): Invalid header checksum [ 670.861567][ T8] usb usb6-port1: unable to enumerate USB device [ 670.922030][ T3008] Bluetooth: (null): Invalid header checksum [ 670.932658][ T3008] Bluetooth: (null): Invalid header checksum [ 671.041889][ T35] Bluetooth: (null): Invalid header checksum [ 671.049941][ T5830] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 671.099928][ T5830] usb 1-1: device descriptor read/8, error -71 [ 671.142130][ T35] Bluetooth: (null): Invalid header checksum [ 671.379432][ T8390] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 671.401799][ T1020] Bluetooth: (null): Invalid header checksum [ 671.408715][ T1020] Bluetooth: (null): Invalid header checksum [ 671.512017][T11733] affs: No valid root block on device loop1 [ 671.540182][ T5830] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 671.561868][ T5830] usb 1-1: device descriptor read/8, error -71 [ 671.683810][ T5830] usb usb1-port1: unable to enumerate USB device [ 672.168020][ T5928] libceph: connect (1)[c::]:6789 error -113 [ 672.174508][ T5928] libceph: mon0 (1)[c::]:6789 connect error [ 672.300579][T11743] siw: device registration error -23 [ 672.473523][ T5928] libceph: connect (1)[c::]:6789 error -113 [ 672.653987][T11746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1314'. [ 673.367294][ T5928] libceph: mon0 (1)[c::]:6789 connect error [ 673.403338][ T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 673.410232][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.419203][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.276201][ T25] libceph: connect (1)[c::]:6789 error -113 [ 674.282516][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 674.409919][ T5876] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 674.425455][ T5928] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 674.619329][T11735] ceph: No mds server is up or the cluster is laggy [ 674.716299][ T5876] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 674.729726][ T5876] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 674.740273][ T5876] usb 8-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 674.749446][ T5876] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.780901][ T5928] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 674.790048][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.802202][ T5876] usb 8-1: config 0 descriptor?? [ 674.818652][ T5928] usb 1-1: config 0 descriptor?? [ 674.873017][ T3008] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 675.334111][ T5876] usbhid 8-1:0.0: can't add hid device: -71 [ 675.341737][ T5928] ath6kl: Failed to submit usb control message: -71 [ 675.348404][ T5928] ath6kl: unable to send the bmi data to the device: -71 [ 675.361542][ T5928] ath6kl: Unable to send get target info: -71 [ 675.371093][ T5876] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 675.438588][ T5876] usb 8-1: USB disconnect, device number 9 [ 675.519543][ T5928] ath6kl: Failed to init ath6kl core: -71 [ 675.529001][ T5928] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 675.555986][ T5928] usb 1-1: USB disconnect, device number 35 [ 675.599686][ T8390] Bluetooth: (null): Invalid header checksum [ 675.729661][ T8390] Bluetooth: (null): Invalid header checksum [ 675.778224][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.306297][ T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 676.992913][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.378654][ T5928] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 678.592728][T11795] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1326'. [ 679.495155][ T5928] usb 2-1: device descriptor read/64, error -71 [ 679.612514][T11807] netlink: 'syz.1.1331': attribute type 1 has an invalid length. [ 679.620461][T11807] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1331'. [ 679.671316][ T2202] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 680.265953][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.389922][ T5876] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 680.550025][ T5876] usb 6-1: Using ep0 maxpacket: 32 [ 680.568227][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 680.862814][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.875012][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 680.932841][ T5876] usb 6-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 680.945449][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.012208][ T5876] usb 6-1: config 0 descriptor?? [ 681.298666][ T3008] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 681.480792][ T7435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.687613][ T5876] belkin 0003:050D:3201.000D: unknown main item tag 0x0 [ 681.694698][ T5876] belkin 0003:050D:3201.000D: unknown main item tag 0x0 [ 681.760534][ T5876] belkin 0003:050D:3201.000D: hiddev0,hidraw0: USB HID v0.00 Device [HID 050d:3201] on usb-dummy_hcd.5-1/input0 [ 682.082522][ T5876] usb 6-1: USB disconnect, device number 30 [ 682.690597][ T3008] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 683.967337][T11845] netlink: 'syz.1.1338': attribute type 1 has an invalid length. [ 683.975233][T11845] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1338'. [ 684.673216][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.977671][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.985203][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.180084][T11861] input: syz0 as /devices/virtual/input/input30 [ 687.059696][ T7435] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 687.760953][T10843] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 687.780481][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.927999][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.046480][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.053402][T11864] sp0: Synchronizing with TNC [ 688.069884][T10843] usb 6-1: device descriptor read/64, error -71 [ 688.359949][ T5830] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 688.430158][ T5875] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 688.531704][ T5830] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 688.569931][ T5830] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 688.597115][ T5830] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 688.628094][ T5875] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 688.637910][ T5875] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 688.969595][ T5830] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 688.992464][ T5875] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 689.001744][ T5830] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.009948][ T5875] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 689.033140][ T5875] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 689.086367][ T5875] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 689.092573][T11885] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1351'. [ 689.107175][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 689.116004][T11885] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1351'. [ 689.119605][ T5830] usb 8-1: config 0 descriptor?? [ 689.209986][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 689.210005][ T29] audit: type=1400 audit(1732318713.228:519): avc: denied { write } for pid=11873 comm="syz.6.1348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 689.251659][ T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 689.451951][ T5875] usb 2-1: Product: syz [ 689.456174][ T5875] usb 2-1: Manufacturer: syz [ 689.461274][ T5830] usb 8-1: can't set config #0, error -71 [ 689.470536][ T5830] usb 8-1: USB disconnect, device number 10 [ 689.477916][ T5875] cdc_wdm 2-1:1.0: skipping garbage [ 689.483435][ T5875] cdc_wdm 2-1:1.0: skipping garbage [ 689.492999][ T5875] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 689.498932][ T5875] cdc_wdm 2-1:1.0: Unknown control protocol [ 690.252871][T11899] lo speed is unknown, defaulting to 1000 [ 690.313698][T11900] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 691.139981][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.252141][ T1020] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 692.026199][ T5875] usb 2-1: USB disconnect, device number 34 [ 693.066648][T11922] : renamed from bond0 (while UP) [ 693.080018][T10843] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 693.718970][ T8390] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 693.732318][ T8390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.849910][T10843] usb 7-1: device descriptor read/64, error -71 [ 693.868539][ T29] audit: type=1400 audit(1732318717.908:520): avc: denied { setopt } for pid=11927 comm="syz.0.1362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 694.190051][T10843] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 694.219999][T11937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.230618][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.802892][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.404128][T10843] usb 7-1: device descriptor read/64, error -71 [ 695.520210][T10843] usb usb7-port1: attempt power cycle [ 695.561813][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.651940][ T8390] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 696.649925][T10843] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 696.821731][T10843] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 696.833498][T10843] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 696.844502][T10843] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 697.006125][T10843] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 697.017238][T10843] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 697.085691][T10843] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 697.095083][T10843] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 697.114402][T10843] usb 2-1: Product: syz [ 697.118230][ T3008] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 697.119276][T10843] usb 2-1: Manufacturer: syz [ 697.260539][T10843] cdc_wdm 2-1:1.0: skipping garbage [ 697.277261][T10843] cdc_wdm 2-1:1.0: skipping garbage [ 697.296627][T10843] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 697.313924][T10843] cdc_wdm 2-1:1.0: Unknown control protocol [ 698.186581][T11960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 698.198210][T11960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 698.250142][ T7435] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 698.268777][T11960] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1368'. [ 698.462777][T11951] sp0: Synchronizing with TNC [ 698.547290][T11960] 1ªX¹¦D: renamed from 30ªX¹¦D (while UP) [ 698.614697][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.676755][T11960] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 698.785652][T11968] sp1: Synchronizing with TNC [ 698.809451][ T8] usb 2-1: USB disconnect, device number 35 [ 699.895564][ T8390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.228498][T11983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.237242][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.256048][ T5830] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 700.271537][ T8390] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 700.482634][ T29] audit: type=1400 audit(1732318724.498:521): avc: denied { getopt } for pid=11982 comm="syz.0.1374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 700.514905][ T29] audit: type=1400 audit(1732318724.518:522): avc: denied { getopt } for pid=11989 comm="syz.7.1376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 700.767715][T11993] misc userio: The device must be registered before sending interrupts [ 701.065826][ T5830] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 701.074814][ T5830] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 701.105785][ T5830] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 701.119957][ T8] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 701.143356][ T5830] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 701.293344][ T5830] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 701.316418][ T5830] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 701.334823][ T5830] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 701.352002][ T8] usb 2-1: config 0 has an invalid interface number: 46 but max is 8 [ 701.361445][ T5830] usb 6-1: Product: syz [ 701.365625][ T5830] usb 6-1: Manufacturer: syz [ 701.389998][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 701.417364][ T8] usb 2-1: config 0 has no interface number 0 [ 701.431312][ T5830] cdc_wdm 6-1:1.0: skipping garbage [ 701.436708][ T5830] cdc_wdm 6-1:1.0: skipping garbage [ 701.450333][ T8] usb 2-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 701.468280][ T5830] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 701.484558][ T5830] cdc_wdm 6-1:1.0: Unknown control protocol [ 701.491129][ T8390] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 701.512551][ T8] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 701.539624][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.566936][ T8] usb 2-1: Product: syz [ 701.582614][ T8] usb 2-1: Manufacturer: syz [ 701.612289][ T8] usb 2-1: SerialNumber: syz [ 701.642019][ T8] usb 2-1: config 0 descriptor?? [ 701.714652][T11986] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 701.755407][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.990167][T10843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.991280][ T8] ums-karma 2-1:0.46: USB Mass Storage device detected [ 702.634113][T10843] usb 6-1: USB disconnect, device number 33 [ 702.981472][ T2202] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 703.145740][ T8] ums-karma 2-1:0.46: probe with driver ums-karma failed with error -5 [ 703.357037][ T8] usb 2-1: USB disconnect, device number 36 [ 703.577054][T12017] netlink: 'syz.6.1380': attribute type 27 has an invalid length. [ 704.715706][ T3008] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 705.001467][ T8390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.093333][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.599250][T12033] netlink: 'syz.6.1385': attribute type 1 has an invalid length. [ 705.620025][T12033] netlink: 198060 bytes leftover after parsing attributes in process `syz.6.1385'. [ 706.769920][ T2202] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 706.859367][T12045] affs: No valid root block on device loop6 [ 707.773778][T12058] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1390'. [ 707.885395][ T5876] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 708.011054][ T2202] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 708.105981][ T5876] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 708.119846][ T5876] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 708.130716][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.149862][ T5876] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 708.164838][ T5876] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 708.189863][ T5876] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 708.243685][ T5876] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 708.259967][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 708.278382][ T5876] usb 2-1: Product: syz [ 708.282839][ T5876] usb 2-1: Manufacturer: syz [ 708.300121][ T5876] cdc_wdm 2-1:1.0: skipping garbage [ 708.305400][ T5876] cdc_wdm 2-1:1.0: skipping garbage [ 708.322917][ T5876] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 708.340076][ T5876] cdc_wdm 2-1:1.0: Unknown control protocol [ 708.589342][T12070] lo speed is unknown, defaulting to 1000 [ 708.620015][ T29] audit: type=1400 audit(1732318732.668:523): avc: denied { ioctl } for pid=12064 comm="syz.0.1393" path="socket:[30057]" dev="sockfs" ino=30057 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 708.709948][ T5875] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 708.779938][ T8] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 708.871538][ T5875] usb 6-1: config 0 has an invalid interface number: 46 but max is 8 [ 708.879014][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -EPIPE [ 708.879883][ T5875] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 708.926919][ T5875] usb 6-1: config 0 has no interface number 0 [ 708.935153][ T5875] usb 6-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 708.957881][ T8] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 708.974479][ T8] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 708.996114][ T5875] usb 6-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 709.008300][ T8] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 709.026482][ T5875] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.037716][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.053494][ T5875] usb 6-1: Product: syz [ 709.057952][ T5875] usb 6-1: Manufacturer: syz [ 709.068488][ T5875] usb 6-1: SerialNumber: syz [ 709.085015][T12049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 709.095588][ T8] usb 7-1: config 0 descriptor?? [ 709.102417][ T5875] usb 6-1: config 0 descriptor?? [ 709.115403][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.126177][T12049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.144014][T12066] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 709.158014][ T5875] ums-karma 6-1:0.46: USB Mass Storage device detected [ 709.166250][ T8] usb 2-1: USB disconnect, device number 37 [ 709.172653][ T7435] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 709.224094][ T5875] ums-karma 6-1:0.46: probe with driver ums-karma failed with error -5 [ 710.120350][ T1020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.390556][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 710.813730][ T5875] usb 6-1: USB disconnect, device number 34 [ 711.695286][ T7435] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 711.874006][ T5876] usb 7-1: USB disconnect, device number 40 [ 712.063350][ T29] audit: type=1326 audit(1732318736.108:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12095 comm="syz.6.1400" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f03d617e819 code=0x0 [ 712.288874][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.140090][T12116] SELinux: policydb version 2094917270 does not match my version range 15-33 [ 713.149215][T12116] SELinux: failed to load policy [ 713.410011][ T3008] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 714.095995][T12129] netlink: 'syz.5.1406': attribute type 1 has an invalid length. [ 714.103896][T12129] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1406'. [ 714.494343][T12101] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 714.541765][ T8] libceph: connect (1)[c::]:6789 error -113 [ 714.568812][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 715.955597][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.975499][T12123] ceph: No mds server is up or the cluster is laggy [ 715.990996][T12136] netlink: 'syz.0.1407': attribute type 27 has an invalid length. [ 716.113030][T10843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.138081][ T2202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.200523][T12136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.214879][T12136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.224903][T12136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.237694][T12136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.250488][T12136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.261935][T12136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.273395][T12136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.344857][ T5875] libceph: connect (1)[c::]:6789 error -113 [ 716.352962][ T5875] libceph: mon0 (1)[c::]:6789 connect error [ 716.463072][ T3008] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 716.615690][T12148] : renamed from bond0 (while UP) [ 717.590143][ T5875] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 718.132680][ T5875] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 718.144185][ T5875] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 718.244136][ T5875] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.287132][ T5875] usb 8-1: config 0 descriptor?? [ 718.300323][ T1020] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 718.334929][ T29] audit: type=1400 audit(1732318742.378:525): avc: denied { write } for pid=12164 comm="syz.6.1415" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 720.100721][ T3008] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 720.267572][T12184] siw: device registration error -23 [ 720.380678][T10843] usb 8-1: USB disconnect, device number 11 [ 720.556835][ T5876] libceph: connect (1)[c::]:6789 error -113 [ 720.565710][ T5876] libceph: mon0 (1)[c::]:6789 connect error [ 721.043654][ T25] libceph: connect (1)[c::]:6789 error -113 [ 721.049730][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 721.107920][T12180] ceph: No mds server is up or the cluster is laggy [ 721.199924][T12193] syz.7.1419: attempt to access beyond end of device [ 721.199924][T12193] loop7: rw=0, sector=64, nr_sectors = 2 limit=0 [ 721.213151][T12193] isofs_fill_super: bread failed, dev=loop7, iso_blknum=16, block=32 [ 721.227169][T12193] netlink: 'syz.7.1419': attribute type 1 has an invalid length. [ 721.235045][T12193] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1419'. [ 721.838343][ T3008] net_ratelimit: 364 callbacks suppressed [ 721.838361][ T3008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.955401][ T5830] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 722.470229][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.478252][T12202] FAULT_INJECTION: forcing a failure. [ 722.478252][T12202] name failslab, interval 1, probability 0, space 0, times 0 [ 722.481384][ T5830] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 722.491153][T12202] CPU: 1 UID: 0 PID: 12202 Comm: syz.7.1424 Not tainted 6.12.0-syzkaller-07749-g28eb75e178d3 #0 [ 722.502017][ T5830] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 722.512218][T12202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 722.512238][T12202] Call Trace: [ 722.512246][T12202] [ 722.512256][T12202] dump_stack_lvl+0x16c/0x1f0 [ 722.512283][T12202] should_fail_ex+0x497/0x5b0 [ 722.512310][T12202] ? fs_reclaim_acquire+0xae/0x150 [ 722.552902][T12202] should_failslab+0xc2/0x120 [ 722.557594][T12202] __kmalloc_node_noprof+0xd1/0x430 [ 722.562809][T12202] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 722.568353][T12202] __kvmalloc_node_noprof+0xad/0x1a0 [ 722.573631][T12202] ? __pfx_br_dev_setup+0x10/0x10 [ 722.578658][T12202] alloc_netdev_mqs+0xbbc/0x1510 [ 722.583606][T12202] rtnl_create_link+0xc10/0xfa0 [ 722.588462][T12202] rtnl_newlink+0xa93/0x1c50 [ 722.593057][T12202] ? __pfx_rtnl_newlink+0x10/0x10 [ 722.598082][T12202] ? __pfx___lock_acquire+0x10/0x10 [ 722.603275][T12202] ? cred_has_capability.isra.0+0x192/0x2f0 [ 722.609224][T12202] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 722.615504][T12202] ? find_held_lock+0x2d/0x110 [ 722.620304][T12202] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 722.625430][T12202] ? __pfx_lock_release+0x10/0x10 [ 722.630466][T12202] ? trace_lock_acquire+0x14a/0x1d0 [ 722.635668][T12202] ? __pfx_rtnl_newlink+0x10/0x10 [ 722.640700][T12202] rtnetlink_rcv_msg+0x95b/0xea0 [ 722.645644][T12202] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 722.651141][T12202] netlink_rcv_skb+0x16b/0x440 [ 722.655934][T12202] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 722.661396][T12202] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 722.666691][T12202] ? netlink_deliver_tap+0x1ae/0xd30 [ 722.671977][T12202] netlink_unicast+0x53c/0x7f0 [ 722.676747][T12202] ? __pfx_netlink_unicast+0x10/0x10 [ 722.682042][T12202] netlink_sendmsg+0x8b8/0xd70 [ 722.686816][T12202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 722.692108][T12202] ____sys_sendmsg+0xaaf/0xc90 [ 722.696872][T12202] ? copy_msghdr_from_user+0x10b/0x160 [ 722.702337][T12202] ? __pfx_____sys_sendmsg+0x10/0x10 [ 722.707630][T12202] ___sys_sendmsg+0x135/0x1e0 [ 722.712409][T12202] ? __pfx____sys_sendmsg+0x10/0x10 [ 722.717624][T12202] ? __pfx_lock_release+0x10/0x10 [ 722.722640][T12202] ? trace_lock_acquire+0x14a/0x1d0 [ 722.727844][T12202] ? __fget_files+0x206/0x3a0 [ 722.732526][T12202] __sys_sendmsg+0x16e/0x220 [ 722.737189][T12202] ? __pfx___sys_sendmsg+0x10/0x10 [ 722.742397][T12202] do_syscall_64+0xcd/0x250 [ 722.746899][T12202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.752785][T12202] RIP: 0033:0x7fd722b7e819 [ 722.757202][T12202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 722.776819][T12202] RSP: 002b:00007fd723999038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 722.785234][T12202] RAX: ffffffffffffffda RBX: 00007fd722d35fa0 RCX: 00007fd722b7e819 [ 722.793204][T12202] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 722.801179][T12202] RBP: 00007fd723999090 R08: 0000000000000000 R09: 0000000000000000 [ 722.809153][T12202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 722.817116][T12202] R13: 0000000000000000 R14: 00007fd722d35fa0 R15: 00007ffff3eb79b8 [ 722.825098][T12202] [ 722.847139][ T2994] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 722.864249][ T5830] usb 6-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 722.878879][ T5830] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.919676][T12205] 9pnet_fd: Insufficient options for proto=fd [ 722.957217][ T5830] usb 6-1: config 0 descriptor?? [ 723.940058][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.527927][ T5830] usbhid 6-1:0.0: can't add hid device: -71 [ 724.576427][ T5830] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 724.740105][ T5830] usb 6-1: USB disconnect, device number 35 [ 724.745486][T12220] loop7: detected capacity change from 0 to 16384 [ 724.910574][T12220] loop7: detected capacity change from 16384 to 16383 [ 724.982086][ T3008] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 724.991358][T12224] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1429'. [ 725.411806][ T8] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 725.412402][ T25] libceph: connect (1)[c::]:6789 error -113 [ 725.425720][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 725.571870][ T8] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 725.700736][ T25] libceph: connect (1)[c::]:6789 error -113 [ 725.727054][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 725.768847][ T8] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 725.778774][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.793563][ T8] usb 2-1: config 0 descriptor?? [ 726.474427][ T25] libceph: connect (1)[c::]:6789 error -113 [ 726.540642][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 726.763996][ T3008] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 726.917861][T12229] ceph: No mds server is up or the cluster is laggy [ 727.007281][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.349953][ T25] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 727.411443][T12256] bridge1: entered promiscuous mode [ 727.530721][ T25] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 727.540266][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.567968][ T2994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.581443][ T25] usb 1-1: config 0 descriptor?? [ 727.886751][ T7435] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 728.137596][ T25] ath6kl: Failed to submit usb control message: -71 [ 728.144445][ T25] ath6kl: unable to send the bmi data to the device: -71 [ 728.151670][ T25] ath6kl: Unable to send get target info: -71 [ 728.168664][ T25] ath6kl: Failed to init ath6kl core: -71 [ 728.175143][ T25] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 728.193369][ T25] usb 1-1: USB disconnect, device number 36 [ 728.250322][T10843] usb 2-1: USB disconnect, device number 38 [ 728.400154][T12267] 9pnet_fd: p9_fd_create_tcp (12267): problem connecting socket to 127.0.0.1 [ 729.656109][ T2994] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 729.960020][T12281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1444'. [ 730.066698][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.135192][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.639092][T12282] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 730.970264][T12285] Bluetooth: (null): Invalid header checksum [ 731.071469][ T8390] Bluetooth: (null): Invalid header checksum [ 731.111874][ T8390] Bluetooth: (null): Invalid header checksum [ 731.481498][ T1020] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 732.144108][T12317] netlink: 'syz.0.1452': attribute type 1 has an invalid length. [ 732.152062][T12317] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1452'. [ 732.761803][ T2202] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 733.632460][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.640984][ T1020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.805231][T12330] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1456'. [ 735.334981][T12345] syz.7.1459: attempt to access beyond end of device [ 735.334981][T12345] loop7: rw=0, sector=64, nr_sectors = 2 limit=0 [ 735.348208][T12345] isofs_fill_super: bread failed, dev=loop7, iso_blknum=16, block=32 [ 735.365670][T12345] netlink: 'syz.7.1459': attribute type 1 has an invalid length. [ 735.373624][T12345] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1459'. [ 736.015042][ T1020] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 736.277804][T12349] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1462'. [ 736.398481][T12349] xt_bpf: check failed: parse error [ 736.474295][T12352] bridge1: entered promiscuous mode [ 736.629909][ T5876] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 736.903436][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.055393][ T5876] usb 8-1: Using ep0 maxpacket: 8 [ 737.068047][T12358] netlink: 'syz.6.1464': attribute type 27 has an invalid length. [ 737.212647][ T1020] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 737.224063][T10843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.245791][ T5876] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 737.275446][ T5876] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 737.303784][ T5876] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 737.314191][ T5876] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 737.361181][ T5876] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 737.374898][ T5876] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 737.400279][ T5876] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.519948][ T8] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 737.619970][T10843] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 737.633745][ T5876] usb 8-1: usb_control_msg returned -32 [ 737.639609][ T5876] usbtmc 8-1:16.0: can't read capabilities [ 737.726586][T12367] SELinux: policydb version 2094917270 does not match my version range 15-33 [ 737.735847][T12367] SELinux: failed to load policy [ 737.893110][T10843] usb 6-1: device descriptor read/64, error -71 [ 738.286925][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 738.294634][ T8] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 41 [ 738.365463][ T8] usb 1-1: can't read configurations, error -22 [ 738.409912][T10843] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 738.470508][ T1020] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 738.510042][ T8] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 738.569986][T10843] usb 6-1: device descriptor read/64, error -71 [ 738.650077][ T5875] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 738.659885][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 738.668295][ T8] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 41 [ 738.680236][ T8] usb 1-1: can't read configurations, error -22 [ 738.686753][T10843] usb usb6-port1: attempt power cycle [ 738.687164][ T8] usb usb1-port1: attempt power cycle [ 738.800022][ T5875] usb 2-1: Using ep0 maxpacket: 8 [ 738.812161][ T5875] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 738.829366][ T5875] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 738.838748][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.849318][ T5875] usb 2-1: config 0 descriptor?? [ 738.856979][ T5875] iowarrior 2-1:0.0: no interrupt-in endpoint found [ 739.040097][ T8] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 739.075470][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 739.082899][ T1020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.102642][ T8] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 41 [ 739.116650][ T8] usb 1-1: can't read configurations, error -22 [ 739.119663][T10843] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 739.163233][T10843] usb 6-1: device descriptor read/8, error -71 [ 739.201351][T12377] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1470'. [ 739.251173][ T8] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 739.280652][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 739.287356][ T8] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 41 [ 739.296394][ T8] usb 1-1: can't read configurations, error -22 [ 739.303117][ T8] usb usb1-port1: unable to enumerate USB device [ 739.409919][T10843] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 739.424175][ T5876] usb 8-1: USB disconnect, device number 12 [ 739.450738][T10843] usb 6-1: device descriptor read/8, error -71 [ 739.610073][ T8390] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 739.639785][T10843] usb usb6-port1: unable to enumerate USB device [ 739.767670][T12383] Bluetooth: (null): Invalid header checksum [ 740.243531][ T8390] Bluetooth: (null): Invalid header checksum [ 740.259495][ T8390] Bluetooth: (null): Invalid header checksum [ 740.280123][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.284579][ T8390] Bluetooth: (null): Invalid header checksum [ 740.305245][ T8390] Bluetooth: (null): Invalid header checksum [ 740.321903][ T8390] Bluetooth: (null): Invalid header checksum [ 740.546438][T12392] netlink: 'syz.0.1473': attribute type 27 has an invalid length. [ 740.574502][T12392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.649624][T12392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.649713][ T5876] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 740.709220][T12392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.793516][T12392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.849952][T12392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.941218][ T5876] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 740.969967][ T5876] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 741.014946][ T5876] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 741.060616][T12392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.069468][ T5876] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 741.090202][ T5876] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 741.105398][T12392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.117010][ T5876] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 741.129426][ T5876] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 741.137595][ T5876] usb 7-1: Product: syz [ 741.146634][ T5876] usb 7-1: Manufacturer: syz [ 741.155407][ T5876] cdc_wdm 7-1:1.0: skipping garbage [ 741.164159][ T5876] cdc_wdm 7-1:1.0: skipping garbage [ 741.170735][ T5876] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 741.176837][ T5876] cdc_wdm 7-1:1.0: Unknown control protocol [ 741.204773][T12392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.458225][ T5876] usb 2-1: USB disconnect, device number 39 [ 741.530865][ T1020] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 741.907515][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -EPIPE [ 742.009966][T12403] lo speed is unknown, defaulting to 1000 [ 742.061503][T12406] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 742.123062][ T29] audit: type=1400 audit(1732318766.168:526): avc: denied { read } for pid=12399 comm="syz.1.1478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 742.171553][T12385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 742.219710][T12385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 742.296540][ T8] usb 7-1: USB disconnect, device number 41 [ 742.962829][ T3008] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 743.362761][T12427] bridge0: port 3(erspan0) entered blocking state [ 743.380739][T12427] bridge0: port 3(erspan0) entered disabled state [ 743.387619][T12427] erspan0: entered allmulticast mode [ 743.406154][T12427] erspan0: entered promiscuous mode [ 743.423680][T12427] bridge0: port 3(erspan0) entered blocking state [ 743.430728][T12427] bridge0: port 3(erspan0) entered forwarding state [ 743.998277][T12433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1483'. [ 744.080778][ T2994] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 744.210044][ T5876] net_ratelimit: 363 callbacks suppressed [ 744.210063][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.224791][ T8390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.245388][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.863400][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.938295][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.087476][T12443] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1487'. [ 745.123269][T12443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1487'. [ 745.176716][ T29] audit: type=1400 audit(1732318769.218:527): avc: denied { setopt } for pid=12442 comm="syz.0.1487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 745.326015][T12448] Bluetooth: (null): Invalid header checksum [ 745.930528][ T8390] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 747.271771][ T2994] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 747.465449][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.472242][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.929553][T12474] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 747.960724][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.163292][T12480] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1498'. [ 748.202257][ T5830] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 748.379895][ T5830] usb 2-1: Using ep0 maxpacket: 32 [ 748.385740][T10843] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 748.400173][ T5830] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 748.427078][ T5830] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 748.460560][ T2202] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 748.486599][ T5830] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 748.512459][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.537926][ T5830] usb 2-1: config 0 descriptor?? [ 748.549925][T10843] usb 1-1: Using ep0 maxpacket: 8 [ 748.555153][ T5830] hub 2-1:0.0: bad descriptor, ignoring hub [ 748.561318][T10843] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 748.561356][T10843] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 748.561396][T10843] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 748.561421][T10843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.606785][T10843] usb 1-1: config 0 descriptor?? [ 748.614431][T10843] iowarrior 1-1:0.0: no interrupt-in endpoint found [ 748.678089][ T5830] hub 2-1:0.0: probe with driver hub failed with error -5 [ 748.711615][ T5830] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 748.842754][T12489] : renamed from bond0 (while UP) [ 749.620709][ T29] audit: type=1400 audit(1732318773.648:528): avc: denied { bind } for pid=12496 comm="syz.6.1503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 749.804527][ T3008] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 749.849393][ T29] audit: type=1400 audit(1732318773.648:529): avc: denied { connect } for pid=12496 comm="syz.6.1503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 750.820958][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.853068][ T2994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.861342][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.870340][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.855889][T10843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.322974][ T8] usb 1-1: USB disconnect, device number 41 [ 752.661370][T12515] SELinux: policydb version 2094917270 does not match my version range 15-33 [ 752.670524][T12515] SELinux: failed to load policy [ 752.718131][T10843] usb 2-1: USB disconnect, device number 40 [ 752.871828][ T8390] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 754.557512][T12531] netlink: 'syz.5.1509': attribute type 27 has an invalid length. [ 754.623948][T12528] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 754.689984][ T8] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 754.840108][ T8390] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 754.970572][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.031902][ T8] usb 8-1: Using ep0 maxpacket: 8 [ 755.078553][ T8] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 755.104077][ T8] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 755.117772][ T8] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 755.126935][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.138675][ T8] usb 8-1: config 0 descriptor?? [ 755.145848][ T8] iowarrior 8-1:0.0: no interrupt-in endpoint found [ 755.524630][T12540] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1512'. [ 755.619159][T12542] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 755.674485][ T3008] Bluetooth: hci5: Frame reassembly failed (-84) [ 756.225702][ T5876] libceph: connect (1)[c::]:6789 error -113 [ 756.232775][ T5876] libceph: mon0 (1)[c::]:6789 connect error [ 756.275302][ T7435] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 756.515763][ T5876] libceph: connect (1)[c::]:6789 error -113 [ 757.268238][T12549] ceph: No mds server is up or the cluster is laggy [ 757.280016][ T5876] libceph: mon0 (1)[c::]:6789 connect error [ 757.424443][ T9] usb 8-1: USB disconnect, device number 13 [ 757.510759][T12553] netlink: 'syz.6.1516': attribute type 27 has an invalid length. [ 757.802620][ T53] Bluetooth: hci5: command 0x1003 tx timeout [ 757.820111][T11076] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 757.845445][ T7435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.645941][T12566] SELinux: policydb version 2094917270 does not match my version range 15-33 [ 758.655010][T12566] SELinux: failed to load policy [ 758.819078][T10843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.827394][T10843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.855464][ T1020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.409925][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.420332][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.756430][T12579] capability: warning: `syz.6.1523' uses 32-bit capabilities (legacy support in use) [ 759.881930][ T5876] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 759.934066][T12579] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1523'. [ 759.947323][ T8390] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 760.033497][ T5928] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 760.481377][ T5876] usb 1-1: Using ep0 maxpacket: 8 [ 760.498020][ T5928] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 760.525920][ T5876] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 760.544614][ T5928] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 760.555930][ T5876] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 760.576819][ T5928] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 760.589661][ T5876] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 760.603474][ T5928] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 760.627988][ T5876] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 761.490107][T12597] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1526'. [ 761.512343][ T5928] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 761.523578][ T5876] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 761.536778][ T5876] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 761.547059][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.597824][ T5928] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 761.676361][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 761.720270][ T5928] usb 2-1: Product: syz [ 761.724550][ T5928] usb 2-1: Manufacturer: syz [ 761.793019][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 761.812226][ T5928] cdc_wdm 2-1:1.0: skipping garbage [ 761.817528][ T5928] cdc_wdm 2-1:1.0: skipping garbage [ 761.825251][ T5928] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 761.831256][ T5928] cdc_wdm 2-1:1.0: Unknown control protocol [ 761.913890][ T5876] usb 1-1: usb_control_msg returned -32 [ 761.919544][ T5876] usbtmc 1-1:16.0: can't read capabilities [ 761.990114][ T5830] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 762.059543][ T29] audit: type=1400 audit(1732318786.098:530): avc: denied { name_bind } for pid=12598 comm="syz.6.1527" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 762.139991][ T5830] usb 8-1: Using ep0 maxpacket: 8 [ 762.163909][ T5830] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 762.179065][ T5830] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 762.195637][T12607] overlay: Unknown parameter 'fowner>00000000000000000000' [ 762.203417][ T5830] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 762.214880][ T5830] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 762.225393][ T5830] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 762.245234][ T5830] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 762.254436][ T5830] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.387075][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -EPIPE [ 762.447393][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.471873][ T5830] usb 8-1: usb_control_msg returned -32 [ 762.479699][ T5830] usbtmc 8-1:16.0: can't read capabilities [ 762.588996][T12575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 762.602711][T12575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 762.614970][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 762.615328][ T5830] usb 2-1: USB disconnect, device number 41 [ 762.621631][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 762.621657][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 762.667683][ T5876] libceph: connect (1)[c::]:6789 error -113 [ 762.680370][ T5876] libceph: mon0 (1)[c::]:6789 connect error [ 762.940819][ T1020] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 762.941475][ T5876] libceph: connect (1)[c::]:6789 error -113 [ 762.954730][ T5876] libceph: mon0 (1)[c::]:6789 connect error [ 763.045097][T12622] Bluetooth: (null): Invalid header checksum [ 763.156487][ T1020] Bluetooth: (null): Invalid header checksum [ 763.165929][ T3008] Bluetooth: (null): Invalid header checksum [ 763.264338][ T3008] Bluetooth: (null): Invalid header checksum [ 763.382159][ T7435] Bluetooth: (null): Invalid header checksum [ 763.476157][ T5928] usb 1-1: USB disconnect, device number 42 [ 763.539121][ T5876] libceph: connect (1)[c::]:6789 error -113 [ 763.545479][ T5876] libceph: mon0 (1)[c::]:6789 connect error [ 763.616156][T12626] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 763.631297][ T29] audit: type=1400 audit(1732318787.658:531): avc: denied { mounton } for pid=12625 comm="syz.1.1533" path="/306/file0/bus" dev="ramfs" ino=31985 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 763.664080][T12626] overlayfs: failed to set xattr on upper [ 763.679148][T12626] overlayfs: ...falling back to redirect_dir=nofollow. [ 763.726134][T12626] overlayfs: ...falling back to uuid=null. [ 763.833488][T12630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1534'. [ 763.910760][T12630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1534'. [ 763.949941][ T9] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 763.957706][ T9008] block nbd1: NBD_DISCONNECT [ 763.988057][T12611] ceph: No mds server is up or the cluster is laggy [ 764.050317][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.101855][T12635] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1536'. [ 764.131646][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 764.150009][ T7435] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 764.160944][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 233, setting to 64 [ 764.203479][ T9] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 764.229275][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.285132][ T9] usb 2-1: Product: syz [ 764.334985][ T9] usb 2-1: Manufacturer: syz [ 764.341335][ T9] usb 2-1: SerialNumber: syz [ 764.348807][ T9] usb 2-1: config 0 descriptor?? [ 764.359545][T12627] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 764.459116][ T5876] kernel read not supported for file /video37 (pid: 5876 comm: kworker/1:3) [ 764.703235][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.735537][T10843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.761850][ T25] usb 8-1: USB disconnect, device number 14 [ 764.867965][T10843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.081891][ T9] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 765.105229][ T12] usb 2-1: Failed to submit usb control message: -71 [ 765.118251][ T12] usb 2-1: unable to send the bmi data to the device: -71 [ 765.125801][ T12] usb 2-1: unable to get target info from device [ 765.132591][ T12] usb 2-1: could not get target info (-71) [ 765.138743][ T12] usb 2-1: could not probe fw (-71) [ 765.150696][ T9] usb 2-1: USB disconnect, device number 42 [ 765.557437][T12650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1539'. [ 766.046962][ T3008] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 767.240011][ T25] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 767.409971][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 767.416948][ T25] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 767.449875][ T25] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 767.497552][ T25] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 767.543684][ T25] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 767.784579][ T25] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 767.915743][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.462373][ T2994] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 768.490852][ T25] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 768.499983][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.552568][ T25] usb 2-1: usb_control_msg returned -32 [ 769.558204][ T25] usbtmc 2-1:16.0: can't read capabilities [ 769.811522][T12713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.920330][ T9] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 769.949931][ T5877] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 769.970647][ T8] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 770.189944][T12738] usbtmc 2-1:16.0: usb_control_msg returned -71 [ 770.199274][ T25] usb 2-1: USB disconnect, device number 43 [ 770.220023][ T5877] usb 7-1: Using ep0 maxpacket: 8 [ 770.234193][ T5877] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 770.266302][ T5877] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 770.298763][ T5877] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 770.306478][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 770.311538][ T5877] usb 7-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 770.344744][ T5877] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 770.345231][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 770.376987][ T5877] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.426639][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 770.433482][ T5877] usbtmc 7-1:16.0: bulk endpoints not found [ 770.437077][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 770.448098][ T3008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.456012][ T9] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 770.476103][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.485341][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.495313][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.498857][ T8] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 770.512707][ T9] usb 6-1: config 0 descriptor?? [ 770.519456][ T8] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 770.529658][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 770.539892][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 770.550932][ T8] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 770.563960][ T8] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 770.573060][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.584023][ T9] iowarrior 6-1:0.0: no interrupt-in endpoint found [ 770.635815][T12713] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 770.869765][ T8] usb 1-1: usb_control_msg returned -32 [ 770.875903][ T8] usbtmc 1-1:16.0: can't read capabilities [ 771.232735][T12746] usbtmc 1-1:16.0: send_request_dev_dep_msg_in returned -90 [ 771.526115][T12749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1552'. [ 771.882887][ T5877] usb 1-1: USB disconnect, device number 43 [ 771.894818][T12754] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 772.765459][T12763] siw: device registration error -23 [ 772.901043][ T3008] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 773.132352][T12759] ceph: No mds server is up or the cluster is laggy [ 773.145483][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.225955][ T9] usb 7-1: USB disconnect, device number 42 [ 773.259193][ T8] libceph: connect (1)[c::]:6789 error -113 [ 773.270068][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 773.302922][T10843] usb 6-1: USB disconnect, device number 40 [ 773.857023][ T9] libceph: connect (1)[c::]:6789 error -113 [ 773.963112][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 774.099428][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.132883][ T1020] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 774.334545][T12789] : renamed from bond0 (while UP) [ 774.921237][ T9] libceph: connect (1)[c::]:6789 error -113 [ 774.933661][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 775.562290][T12713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.040744][ T9] libceph: connect (1)[c::]:6789 error -113 [ 776.046834][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 776.396774][T12713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.620768][T10843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.182682][ T8] libceph: connect (1)[c::]:6789 error -113 [ 777.188797][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 777.190098][T10843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.210129][T12765] ceph: No mds server is up or the cluster is laggy [ 777.290731][ T2994] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 778.438112][T12819] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1568'. [ 778.445726][ T29] audit: type=1400 audit(1732318802.478:532): avc: denied { ioctl } for pid=12818 comm="syz.5.1568" path="socket:[32830]" dev="sockfs" ino=32830 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 778.512910][T12819] capability: warning: `syz.5.1568' uses deprecated v2 capabilities in a way that may be insecure [ 779.057528][ T1020] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 779.586018][T12834] lo speed is unknown, defaulting to 1000 [ 779.813905][T12835] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 780.294445][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.311323][ T2994] Bluetooth: (null): Invalid header checksum [ 780.338410][ T2994] Bluetooth: (null): Invalid header checksum [ 780.680617][ T3008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.751872][ T2994] Bluetooth: (null): Invalid header checksum [ 780.781733][ T2994] Bluetooth: (null): Invalid header checksum [ 780.800516][ T2994] Bluetooth: (null): Invalid header checksum [ 780.840458][ T2994] Bluetooth: (null): Invalid header checksum [ 780.960067][ T2994] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 781.098776][ T3008] Bluetooth: (null): Invalid header checksum [ 781.116646][ T3008] Bluetooth: (null): Invalid header checksum [ 781.150001][ T8] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 781.903931][ T8] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 781.916254][ T8] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 781.933350][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.199995][T11076] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 782.354976][T12713] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 782.441855][ T8] usb 1-1: config 0 descriptor?? [ 782.449595][ T8] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 783.322700][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.116139][T12735] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 784.437943][ T25] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 784.680135][ T25] usb 7-1: Using ep0 maxpacket: 8 [ 784.719194][ T25] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 784.969950][ T25] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 785.019695][ T25] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 785.044566][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.049605][ T8] usb 1-1: USB disconnect, device number 44 [ 785.072202][ T25] usb 7-1: config 0 descriptor?? [ 785.094326][ T25] iowarrior 7-1:0.0: no interrupt-in endpoint found [ 785.520934][T12883] SELinux: policydb version 2094917270 does not match my version range 15-33 [ 785.530286][T12883] SELinux: failed to load policy [ 786.119941][T10843] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 786.132371][ T8390] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 786.360028][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.453011][T12729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.631001][T10843] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 786.924131][T10843] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 786.934790][T10843] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 786.944554][T10843] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.961395][T12876] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 786.976565][T10843] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 787.209690][T12876] FAULT_INJECTION: forcing a failure. [ 787.209690][T12876] name failslab, interval 1, probability 0, space 0, times 0 [ 787.390525][T12876] CPU: 0 UID: 0 PID: 12876 Comm: syz.7.1583 Not tainted 6.12.0-syzkaller-07749-g28eb75e178d3 #0 [ 787.401002][T12876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 787.411067][T12876] Call Trace: [ 787.414350][T12876] [ 787.417293][T12876] dump_stack_lvl+0x16c/0x1f0 [ 787.421983][T12876] should_fail_ex+0x497/0x5b0 [ 787.426666][T12876] ? fs_reclaim_acquire+0xae/0x150 [ 787.431810][T12876] should_failslab+0xc2/0x120 [ 787.436496][T12876] __kmalloc_node_noprof+0xd1/0x430 [ 787.441702][T12876] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 787.447166][T12876] ? ns_capable_noaudit+0xda/0x110 [ 787.452269][T12876] __kvmalloc_node_noprof+0xad/0x1a0 [ 787.457582][T12876] proc_sys_call_handler+0x39c/0x6f0 [ 787.462888][T12876] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 787.468690][T12876] ? trace_lock_acquire+0x14a/0x1d0 [ 787.473901][T12876] ? ksys_write+0x12b/0x250 [ 787.478429][T12876] vfs_write+0x5ae/0x1150 [ 787.482761][T12876] ? __pfx_proc_sys_write+0x10/0x10 [ 787.487959][T12876] ? __pfx___mutex_lock+0x10/0x10 [ 787.493016][T12876] ? __pfx_vfs_write+0x10/0x10 [ 787.497827][T12876] ksys_write+0x12b/0x250 [ 787.502183][T12876] ? __pfx_ksys_write+0x10/0x10 [ 787.505336][T12896] lo speed is unknown, defaulting to 1000 [ 787.507057][T12876] do_syscall_64+0xcd/0x250 [ 787.517297][T12876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.523215][T12876] RIP: 0033:0x7fd722b7e819 [ 787.527649][T12876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 787.547281][T12876] RSP: 002b:00007fd723999038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 787.555725][T12876] RAX: ffffffffffffffda RBX: 00007fd722d35fa0 RCX: 00007fd722b7e819 [ 787.558738][T12897] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 787.563695][T12876] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 000000000000000a [ 787.563712][T12876] RBP: 00007fd723999090 R08: 0000000000000000 R09: 0000000000000000 [ 787.563725][T12876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 787.563738][T12876] R13: 0000000000000000 R14: 00007fd722d35fa0 R15: 00007ffff3eb79b8 [ 787.563766][T12876] [ 787.605471][ C0] vkms_vblank_simulate: vblank timer overrun [ 787.644062][T12729] Bluetooth: hci5: Frame reassembly failed (-84) [ 787.726039][T10843] usb 8-1: USB disconnect, device number 15 [ 787.793997][T12729] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 787.839120][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.950050][ T5876] usb 7-1: USB disconnect, device number 43 [ 788.201014][ T8] usb 6-1: new low-speed USB device number 41 using dummy_hcd [ 788.370408][ T8] usb 6-1: too many configurations: 179, using maximum allowed: 8 [ 788.402938][ T8] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 788.410968][ T8] usb 6-1: can't read configurations, error -61 [ 788.480958][T12909] team0 (unregistering): Port device team_slave_0 removed [ 788.513989][T12909] team0 (unregistering): Port device team_slave_1 removed [ 788.560268][ T8] usb 6-1: new low-speed USB device number 42 using dummy_hcd [ 788.689123][T12914] loop7: detected capacity change from 0 to 16384 [ 788.733288][ T8] usb 6-1: too many configurations: 179, using maximum allowed: 8 [ 788.739895][T12914] loop7: detected capacity change from 16384 to 16383 [ 788.743671][ T8] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 788.760139][ T8] usb 6-1: can't read configurations, error -61 [ 788.768034][ T8] usb usb6-port1: attempt power cycle [ 788.985016][ T1020] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 789.042008][T12918] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1591'. [ 789.086632][T12918] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1591'. [ 789.118454][ T9008] block nbd0: NBD_DISCONNECT [ 789.283717][ T8] usb 6-1: new low-speed USB device number 43 using dummy_hcd [ 789.310895][ T8] usb 6-1: too many configurations: 179, using maximum allowed: 8 [ 789.320957][ T8] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 789.328561][ T8] usb 6-1: can't read configurations, error -61 [ 789.506738][ T8] usb 6-1: new low-speed USB device number 44 using dummy_hcd [ 789.702028][T11076] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 789.903450][ T8] usb 6-1: too many configurations: 179, using maximum allowed: 8 [ 789.953659][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.989607][ T8] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 790.003314][ T8] usb 6-1: can't read configurations, error -61 [ 790.062415][ T8] usb usb6-port1: unable to enumerate USB device [ 790.110067][T10843] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 790.145702][T12931] netlink: 'syz.7.1594': attribute type 27 has an invalid length. [ 790.263164][T12729] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 790.280248][T10843] usb 7-1: Using ep0 maxpacket: 8 [ 790.293614][T10843] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 790.306392][T10843] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 790.316939][T10843] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 790.326166][T10843] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.351896][T10843] usb 7-1: config 0 descriptor?? [ 792.024479][T12940] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1595'. [ 792.045514][T10843] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 792.191082][ T8] usb 7-1: USB disconnect, device number 44 [ 792.198890][ T8] iowarrior 7-1:0.0: I/O-Warror #0 now disconnected [ 792.206111][T12735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.507336][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.284299][ T1020] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 794.328159][T12957] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1601'. [ 794.435436][T12962] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 794.502571][T12962] macvlan2: entered allmulticast mode [ 794.508161][T12962] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 795.171320][T12962] batman_adv: batadv0: Adding interface: macvlan2 [ 795.177854][T12962] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 795.203539][ T29] audit: type=1400 audit(1732318818.658:533): avc: denied { mount } for pid=12955 comm="syz.5.1602" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 795.353760][ T29] audit: type=1400 audit(1732318819.318:534): avc: denied { unmount } for pid=7180 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 795.387506][T12962] batman_adv: batadv0: Interface activated: macvlan2 [ 795.824057][T12976] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 796.744455][ T29] audit: type=1400 audit(1732318819.878:535): avc: denied { read } for pid=12969 comm="syz.6.1606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 796.750242][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.929590][ T1020] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 797.950136][ T29] audit: type=1400 audit(1732318819.878:536): avc: denied { getopt } for pid=12969 comm="syz.6.1606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 798.100269][ T1020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.110058][T10843] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 798.810360][T12988] overlayfs: conflicting options: nfs_export=on,index=off [ 798.827727][T12989] FAULT_INJECTION: forcing a failure. [ 798.827727][T12989] name failslab, interval 1, probability 0, space 0, times 0 [ 798.882381][T12989] CPU: 1 UID: 0 PID: 12989 Comm: syz.0.1609 Not tainted 6.12.0-syzkaller-07749-g28eb75e178d3 #0 [ 798.892886][T12989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 798.902963][T12989] Call Trace: [ 798.906256][T12989] [ 798.909203][T12989] dump_stack_lvl+0x16c/0x1f0 [ 798.913906][T12989] should_fail_ex+0x497/0x5b0 [ 798.918645][T12989] should_failslab+0xc2/0x120 [ 798.923358][T12989] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 798.928766][T12989] ? skb_clone+0x190/0x3f0 [ 798.933221][T12989] skb_clone+0x190/0x3f0 [ 798.937502][T12989] netlink_deliver_tap+0xabd/0xd30 [ 798.942652][T12989] netlink_unicast+0x6b4/0x7f0 [ 798.947456][T12989] ? __pfx_netlink_unicast+0x10/0x10 [ 798.952774][T12989] ? genl_rcv_msg+0x4bd/0x800 [ 798.957500][T12989] netlink_ack+0x6a8/0xb90 [ 798.961963][T12989] netlink_rcv_skb+0x348/0x440 [ 798.966762][T12989] ? __pfx_genl_rcv_msg+0x10/0x10 [ 798.971832][T12989] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 798.977167][T12989] ? down_read+0xc9/0x330 [ 798.981526][T12989] ? __pfx_down_read+0x10/0x10 [ 798.986338][T12989] ? netlink_deliver_tap+0x1ae/0xd30 [ 798.991667][T12989] genl_rcv+0x28/0x40 [ 798.995674][T12989] netlink_unicast+0x53c/0x7f0 [ 799.000474][T12989] ? __pfx_netlink_unicast+0x10/0x10 [ 799.005805][T12989] netlink_sendmsg+0x8b8/0xd70 [ 799.010627][T12989] ? __pfx_netlink_sendmsg+0x10/0x10 [ 799.015981][T12989] ____sys_sendmsg+0xaaf/0xc90 [ 799.020770][T12989] ? copy_msghdr_from_user+0x10b/0x160 [ 799.026256][T12989] ? __pfx_____sys_sendmsg+0x10/0x10 [ 799.031584][T12989] ___sys_sendmsg+0x135/0x1e0 [ 799.036291][T12989] ? __pfx____sys_sendmsg+0x10/0x10 [ 799.041534][T12989] ? __pfx_lock_release+0x10/0x10 [ 799.046600][T12989] ? trace_lock_acquire+0x14a/0x1d0 [ 799.051833][T12989] ? __fget_files+0x206/0x3a0 [ 799.056550][T12989] __sys_sendmsg+0x16e/0x220 [ 799.061173][T12989] ? __pfx___sys_sendmsg+0x10/0x10 [ 799.066339][T12989] do_syscall_64+0xcd/0x250 [ 799.070880][T12989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.076810][T12989] RIP: 0033:0x7f155f17e819 [ 799.081248][T12989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 799.100881][T12989] RSP: 002b:00007f155ff77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 799.109322][T12989] RAX: ffffffffffffffda RBX: 00007f155f335fa0 RCX: 00007f155f17e819 [ 799.117322][T12989] RDX: 0000000000008008 RSI: 0000000020000080 RDI: 0000000000000003 [ 799.125323][T12989] RBP: 00007f155ff77090 R08: 0000000000000000 R09: 0000000000000000 [ 799.133322][T12989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 799.141365][T12989] R13: 0000000000000000 R14: 00007f155f335fa0 R15: 00007ffd0df04698 [ 799.149386][T12989] [ 799.170148][T10843] usb 6-1: device not accepting address 45, error -71 [ 799.529963][T10843] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 799.605702][ T9] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 799.632224][T12713] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 799.679911][T10843] usb 6-1: Using ep0 maxpacket: 8 [ 799.686633][T10843] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 799.698030][T10843] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 799.722478][T10843] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.752941][T10843] usb 6-1: config 0 descriptor?? [ 799.878696][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.901345][ T9] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 799.919943][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.935532][ T9] usb 1-1: config 0 descriptor?? [ 799.955714][ T9] cp210x 1-1:0.0: cp210x converter detected [ 800.186214][ T9] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 800.283619][ T9] cp210x 1-1:0.0: querying part number failed [ 800.667694][T10843] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 800.678744][ T9] usb 1-1: cp210x converter now attached to ttyUSB0 [ 801.543923][ T3008] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 801.752299][T13024] Bluetooth: (null): Invalid header checksum [ 802.170950][ T8390] Bluetooth: (null): Invalid header checksum [ 802.196147][ T8390] Bluetooth: (null): Invalid header checksum [ 802.196723][T13026] netlink: 'syz.6.1622': attribute type 29 has an invalid length. [ 802.208735][ T8390] Bluetooth: (null): Invalid header checksum [ 802.221065][ T8390] Bluetooth: (null): Invalid header checksum [ 802.226552][ T5830] usb 6-1: USB disconnect, device number 46 [ 802.235696][ T8390] Bluetooth: (null): Invalid header checksum [ 802.248468][ T5830] iowarrior 6-1:0.0: I/O-Warror #0 now disconnected [ 802.293843][T13026] netlink: 'syz.6.1622': attribute type 29 has an invalid length. [ 802.380607][T13026] netlink: 516 bytes leftover after parsing attributes in process `syz.6.1622'. [ 802.409934][T10843] usb 1-1: USB disconnect, device number 45 [ 802.447931][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.466799][T10843] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 802.495435][T10843] cp210x 1-1:0.0: device disconnected [ 802.607837][T13035] FAULT_INJECTION: forcing a failure. [ 802.607837][T13035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 802.680606][T13035] CPU: 1 UID: 0 PID: 13035 Comm: syz.0.1626 Not tainted 6.12.0-syzkaller-07749-g28eb75e178d3 #0 [ 802.691089][T13035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 802.701147][T13035] Call Trace: [ 802.704411][T13035] [ 802.707345][T13035] dump_stack_lvl+0x16c/0x1f0 [ 802.712014][T13035] should_fail_ex+0x497/0x5b0 [ 802.716680][T13035] _copy_to_user+0x32/0xd0 [ 802.721169][T13035] simple_read_from_buffer+0xd0/0x160 [ 802.726527][T13035] proc_fail_nth_read+0x198/0x270 [ 802.731587][T13035] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 802.737167][T13035] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 802.742716][T13035] vfs_read+0x1df/0xbe0 [ 802.746912][T13035] ? __fget_files+0x1fc/0x3a0 [ 802.751607][T13035] ? __pfx___mutex_lock+0x10/0x10 [ 802.756633][T13035] ? __pfx_vfs_read+0x10/0x10 [ 802.761323][T13035] ? __fget_files+0x206/0x3a0 [ 802.766006][T13035] ksys_read+0x12b/0x250 [ 802.770267][T13035] ? __pfx_ksys_read+0x10/0x10 [ 802.775042][T13035] do_syscall_64+0xcd/0x250 [ 802.779556][T13035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.785444][T13035] RIP: 0033:0x7f155f17d25c [ 802.789853][T13035] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 802.809475][T13035] RSP: 002b:00007f155ff77030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 802.817885][T13035] RAX: ffffffffffffffda RBX: 00007f155f335fa0 RCX: 00007f155f17d25c [ 802.825851][T13035] RDX: 000000000000000f RSI: 00007f155ff770a0 RDI: 0000000000000005 [ 802.833824][T13035] RBP: 00007f155ff77090 R08: 0000000000000000 R09: 0000000000000000 [ 802.841788][T13035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 802.849767][T13035] R13: 0000000000000000 R14: 00007f155f335fa0 R15: 00007ffd0df04698 [ 802.857855][T13035] [ 802.865673][T13038] SELinux: policydb version 2094917270 does not match my version range 15-33 [ 802.874694][T13038] SELinux: failed to load policy [ 803.433999][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.461449][T13042] netlink: 'syz.5.1625': attribute type 27 has an invalid length. [ 803.780396][ T2973] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 804.289518][ T29] audit: type=1400 audit(1732318828.278:537): avc: denied { read } for pid=13045 comm="syz.0.1629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 804.360657][T12735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.481148][T13059] lo speed is unknown, defaulting to 1000 [ 805.510432][T13058] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 805.576462][T12729] Bluetooth: hci5: Frame reassembly failed (-84) [ 806.681072][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.637886][T11076] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 807.859061][ T2994] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 807.918845][ T5877] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 807.926684][T10843] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 807.961617][ T29] audit: type=1400 audit(1732318832.008:538): avc: denied { getopt } for pid=13082 comm="syz.7.1640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 808.329942][ T5877] usb 1-1: Using ep0 maxpacket: 8 [ 808.336988][ T5877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 808.351542][ T5877] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 808.362616][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.375221][T10843] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 808.389954][T10843] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.536407][ T5877] usb 1-1: config 0 descriptor?? [ 808.546091][T10843] usb 7-1: config 0 descriptor?? [ 808.567560][T10843] cp210x 7-1:0.0: cp210x converter detected [ 808.842141][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.050956][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.188346][ T1020] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 809.292685][T10843] cp210x 7-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 809.317426][T10843] cp210x 7-1:0.0: querying part number failed [ 809.571635][T10843] usb 7-1: cp210x converter now attached to ttyUSB0 [ 809.601796][ T5877] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 810.542870][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.594888][ T2994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.237177][ T5830] usb 7-1: USB disconnect, device number 45 [ 811.337135][ T8] usb 1-1: USB disconnect, device number 46 [ 811.337729][ T9008] udevd[9008]: setting owner of /dev/ttyUSB0 to uid=0, gid=18 failed: No such file or directory [ 811.346641][ T5830] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 811.403857][ T5830] cp210x 7-1:0.0: device disconnected [ 811.473203][ T8] iowarrior 1-1:0.0: I/O-Warror #0 now disconnected [ 811.707388][T13117] netlink: 'syz.6.1649': attribute type 1 has an invalid length. [ 811.715255][T13117] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1649'. [ 812.520859][ T1020] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 813.621090][T13142] siw: device registration error -23 [ 813.670870][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.038148][T13141] affs: No valid root block on device loop1 [ 814.348461][ T25] libceph: connect (1)[c::]:6789 error -113 [ 814.354632][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 814.416977][T13139] ceph: No mds server is up or the cluster is laggy [ 814.825163][T10843] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 815.410436][T10843] usb 1-1: Using ep0 maxpacket: 8 [ 815.439694][T10843] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 815.449106][T10843] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 815.464026][T10843] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 815.597285][ T2994] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 815.641782][T10843] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 815.755838][T13150] Bluetooth: (null): Invalid header checksum [ 815.826548][T10843] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 815.839743][T10843] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 815.849158][T10843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.971800][T10843] usb 1-1: can't set config #16, error -71 [ 816.019931][ T5875] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 816.145981][T10843] usb 1-1: USB disconnect, device number 47 [ 816.158087][T13171] netlink: 'syz.7.1660': attribute type 1 has an invalid length. [ 816.166032][T13171] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1660'. [ 816.407684][ T5875] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 816.419857][ T5875] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 816.437794][ T5875] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 816.452237][ T8390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.452462][ T5875] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.480232][T10843] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 816.481748][ T5875] usb 6-1: config 0 descriptor?? [ 816.498675][T13174] netlink: 'syz.6.1662': attribute type 27 has an invalid length. [ 816.510402][ T5830] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 816.541956][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.667762][T10843] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 816.678532][T10843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.691285][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.770197][T10843] usb 1-1: config 0 descriptor?? [ 816.770348][ T5830] usb 2-1: Using ep0 maxpacket: 8 [ 816.842989][ T5830] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 816.843221][T10843] cp210x 1-1:0.0: cp210x converter detected [ 816.854286][ T5830] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 816.880411][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.009175][ T5875] keytouch 0003:0926:3333.000E: fixing up Keytouch IEC report descriptor [ 817.030411][T10843] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 817.042542][T12735] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 817.043024][ T5875] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.000E/input/input38 [ 817.062584][T10843] cp210x 1-1:0.0: querying part number failed [ 817.068130][ T5830] usb 2-1: config 0 descriptor?? [ 817.082410][T10843] usb 1-1: cp210x converter now attached to ttyUSB0 [ 817.185995][ T5875] keytouch 0003:0926:3333.000E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 817.237102][ T5875] usb 6-1: USB disconnect, device number 47 [ 817.451401][ T5830] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 818.518368][ T1020] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 819.540264][T10843] usb 1-1: USB disconnect, device number 48 [ 819.959903][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.278474][ T5877] usb 2-1: USB disconnect, device number 44 [ 821.284907][T10843] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 821.490555][T13207] xt_CT: You must specify a L4 protocol and not use inversions on it [ 822.017552][T10843] cp210x 1-1:0.0: device disconnected [ 822.035216][ T29] audit: type=1400 audit(1732318845.868:539): avc: denied { wake_alarm } for pid=13197 comm="syz.5.1670" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 822.084770][T13213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1672'. [ 822.107494][ T5877] iowarrior 2-1:0.0: I/O-Warror #0 now disconnected [ 822.209024][T13213] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 822.298883][ T2994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.538574][T13219] netlink: 'syz.7.1673': attribute type 1 has an invalid length. [ 822.546449][T13219] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1673'. [ 822.930281][T12713] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 823.063988][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.308678][T13230] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13230 comm=syz.7.1678 [ 824.940412][T10843] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 825.371781][ T5830] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 825.773231][T12713] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 825.787654][ T5830] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 825.798939][ T5830] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 825.949907][T10843] usb 1-1: Using ep0 maxpacket: 8 [ 825.956443][T10843] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 825.967505][T10843] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 825.976779][T10843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.019882][T13247] Bluetooth: (null): Invalid header checksum [ 826.126411][ T8390] Bluetooth: (null): Invalid header checksum [ 826.177931][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.186328][ T5830] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 826.195523][ T5830] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.213348][T10843] usb 1-1: config 0 descriptor?? [ 826.230142][ T8390] Bluetooth: (null): Invalid header checksum [ 826.310884][ T5830] usb 7-1: config 0 descriptor?? [ 826.425921][T10843] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 826.608028][T13265] netlink: 'syz.5.1688': attribute type 1 has an invalid length. [ 826.616007][T13265] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1688'. [ 826.625095][T13265] FAULT_INJECTION: forcing a failure. [ 826.625095][T13265] name failslab, interval 1, probability 0, space 0, times 0 [ 826.638568][T13265] CPU: 1 UID: 0 PID: 13265 Comm: syz.5.1688 Not tainted 6.12.0-syzkaller-07749-g28eb75e178d3 #0 [ 826.649024][T13265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 826.659102][T13265] Call Trace: [ 826.662394][T13265] [ 826.665342][T13265] dump_stack_lvl+0x16c/0x1f0 [ 826.670046][T13265] should_fail_ex+0x497/0x5b0 [ 826.674740][T13265] ? fs_reclaim_acquire+0xae/0x150 [ 826.679862][T13265] should_failslab+0xc2/0x120 [ 826.684543][T13265] __kmalloc_node_noprof+0xd1/0x430 [ 826.689742][T13265] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 826.695214][T13265] __kvmalloc_node_noprof+0xad/0x1a0 [ 826.700522][T13265] ? __pfx_vti6_dev_setup+0x10/0x10 [ 826.705737][T13265] alloc_netdev_mqs+0xbbc/0x1510 [ 826.710683][T13265] rtnl_create_link+0xc10/0xfa0 [ 826.715542][T13265] rtnl_newlink+0xa93/0x1c50 [ 826.720139][T13265] ? __pfx_rtnl_newlink+0x10/0x10 [ 826.725172][T13265] ? __pfx___lock_acquire+0x10/0x10 [ 826.730365][T13265] ? cred_has_capability.isra.0+0x192/0x2f0 [ 826.736264][T13265] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 826.742510][T13265] ? find_held_lock+0x2d/0x110 [ 826.747283][T13265] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 826.752415][T13265] ? __pfx_lock_release+0x10/0x10 [ 826.757448][T13265] ? trace_lock_acquire+0x14a/0x1d0 [ 826.762663][T13265] ? __pfx_rtnl_newlink+0x10/0x10 [ 826.767697][T13265] rtnetlink_rcv_msg+0x95b/0xea0 [ 826.772644][T13265] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 826.778116][T13265] netlink_rcv_skb+0x16b/0x440 [ 826.782881][T13265] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 826.788342][T13265] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 826.793637][T13265] ? netlink_deliver_tap+0x1ae/0xd30 [ 826.798923][T13265] netlink_unicast+0x53c/0x7f0 [ 826.803693][T13265] ? __pfx_netlink_unicast+0x10/0x10 [ 826.808983][T13265] netlink_sendmsg+0x8b8/0xd70 [ 826.813775][T13265] ? __pfx_netlink_sendmsg+0x10/0x10 [ 826.819075][T13265] ____sys_sendmsg+0xaaf/0xc90 [ 826.823839][T13265] ? copy_msghdr_from_user+0x10b/0x160 [ 826.829302][T13265] ? __pfx_____sys_sendmsg+0x10/0x10 [ 826.834598][T13265] ___sys_sendmsg+0x135/0x1e0 [ 826.839277][T13265] ? __pfx____sys_sendmsg+0x10/0x10 [ 826.844520][T13265] ? __pfx_lock_release+0x10/0x10 [ 826.849543][T13265] ? trace_lock_acquire+0x14a/0x1d0 [ 826.854747][T13265] ? __fget_files+0x206/0x3a0 [ 826.859428][T13265] __sys_sendmsg+0x16e/0x220 [ 826.864028][T13265] ? __pfx___sys_sendmsg+0x10/0x10 [ 826.869558][T13265] do_syscall_64+0xcd/0x250 [ 826.874063][T13265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.879951][T13265] RIP: 0033:0x7fceddf7e819 [ 826.884366][T13265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 826.903966][T13265] RSP: 002b:00007fcedee46038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 826.912382][T13265] RAX: ffffffffffffffda RBX: 00007fcede135fa0 RCX: 00007fceddf7e819 [ 826.920347][T13265] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 826.928309][T13265] RBP: 00007fcedee46090 R08: 0000000000000000 R09: 0000000000000000 [ 826.936270][T13265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 826.944255][T13265] R13: 0000000000000000 R14: 00007fcede135fa0 R15: 00007ffc83a87b28 [ 826.952242][T13265] [ 826.971266][ T5830] usbhid 7-1:0.0: can't add hid device: -71 [ 826.977316][ T5830] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 826.988798][ T5830] usb 7-1: USB disconnect, device number 46 [ 827.261124][T10843] usb 1-1: USB disconnect, device number 49 [ 827.276154][T10843] iowarrior 1-1:0.0: I/O-Warror #0 now disconnected [ 827.308294][T12735] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 828.533133][ T5830] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 828.690141][T10843] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 828.741784][ T2994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.750539][ T3008] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 828.850242][T10843] usb 1-1: Using ep0 maxpacket: 8 [ 828.855135][T13301] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1698'. [ 828.856769][T10843] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 828.864444][ T5830] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 829.032995][ T5830] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.034631][T10843] usb 1-1: New USB device found, idVendor=056a, idProduct=2090, bcdDevice= 0.00 [ 829.052116][ T5830] usb 8-1: config 0 descriptor?? [ 829.057622][T10843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.083073][T10843] usb 1-1: config 0 descriptor?? [ 829.089441][ T5830] cp210x 8-1:0.0: cp210x converter detected [ 829.091562][T10843] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 829.265869][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.285471][ T5830] usb 8-1: cp210x converter now attached to ttyUSB0 [ 830.283301][T13300] ceph: No mds server is up or the cluster is laggy [ 830.800289][T10843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.870190][ T2994] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 831.936631][ T5830] usb 8-1: USB disconnect, device number 16 [ 831.950773][ T5830] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 831.958736][ T5830] cp210x 8-1:0.0: device disconnected [ 832.243889][T13337] Bluetooth: (null): Invalid header checksum [ 832.429909][T12735] Bluetooth: (null): Invalid header checksum [ 832.705595][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.724055][ T5877] usb 1-1: USB disconnect, device number 50 [ 832.740956][ T8390] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 832.761042][T12735] Bluetooth: (null): Invalid header checksum [ 833.177050][T13343] Bluetooth: (null): Invalid header checksum [ 833.204522][T13341] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.212164][T13341] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.278386][T13341] bridge0: entered allmulticast mode [ 833.524416][T13346] bridge_slave_1: left allmulticast mode [ 833.538539][T13346] bridge_slave_1: left promiscuous mode [ 833.546527][T13346] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.622110][T13346] bridge_slave_0: left allmulticast mode [ 833.627913][T13346] bridge_slave_0: left promiscuous mode [ 833.636704][T13346] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.474994][ T2994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.591152][ T8390] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 834.897807][T13366] netlink: 'syz.5.1710': attribute type 1 has an invalid length. [ 834.905709][T13366] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1710'. [ 835.385106][T13372] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 835.395746][T13372] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 835.404810][T13372] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 835.412945][T13372] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 835.620007][ T29] audit: type=1400 audit(1732318859.598:540): avc: denied { read } for pid=13356 comm="syz.7.1711" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 835.859730][ T29] audit: type=1400 audit(1732318859.598:541): avc: denied { open } for pid=13356 comm="syz.7.1711" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 835.981328][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.213127][T13362] ceph: No mds server is up or the cluster is laggy [ 836.359022][ T1020] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 836.656782][ T25] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 837.080264][ T25] usb 8-1: Using ep0 maxpacket: 8 [ 837.092360][ T25] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 837.512164][ T25] usb 8-1: New USB device found, idVendor=056a, idProduct=2090, bcdDevice= 0.00 [ 837.610548][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.741294][ T25] usb 8-1: config 0 descriptor?? [ 837.749301][ T25] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 837.807215][T13400] FAULT_INJECTION: forcing a failure. [ 837.807215][T13400] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 837.810073][ T29] audit: type=1400 audit(1732318861.848:542): avc: denied { write } for pid=13399 comm="syz.0.1719" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 837.862031][T13400] CPU: 1 UID: 0 PID: 13400 Comm: syz.0.1719 Not tainted 6.12.0-syzkaller-07749-g28eb75e178d3 #0 [ 837.872510][T13400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 837.882582][T13400] Call Trace: [ 837.885869][T13400] [ 837.888785][T13400] dump_stack_lvl+0x16c/0x1f0 [ 837.893466][T13400] should_fail_ex+0x497/0x5b0 [ 837.898170][T13400] _copy_to_user+0x32/0xd0 [ 837.902598][T13400] simple_read_from_buffer+0xd0/0x160 [ 837.908001][T13400] proc_fail_nth_read+0x198/0x270 [ 837.913038][T13400] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 837.918610][T13400] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 837.924204][T13400] vfs_read+0x1df/0xbe0 [ 837.928403][T13400] ? __fget_files+0x1fc/0x3a0 [ 837.933115][T13400] ? __pfx___mutex_lock+0x10/0x10 [ 837.938170][T13400] ? __pfx_vfs_read+0x10/0x10 [ 837.942872][T13400] ? __fget_files+0x206/0x3a0 [ 837.947580][T13400] ksys_read+0x12b/0x250 [ 837.951840][T13400] ? __pfx_ksys_read+0x10/0x10 [ 837.956627][T13400] do_syscall_64+0xcd/0x250 [ 837.961234][T13400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.967140][T13400] RIP: 0033:0x7f155f17d25c [ 837.971574][T13400] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 837.991205][T13400] RSP: 002b:00007f155ff77030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 837.999663][T13400] RAX: ffffffffffffffda RBX: 00007f155f335fa0 RCX: 00007f155f17d25c [ 838.007645][T13400] RDX: 000000000000000f RSI: 00007f155ff770a0 RDI: 0000000000000004 [ 838.015629][T13400] RBP: 00007f155ff77090 R08: 0000000000000000 R09: 0000000000000000 [ 838.023619][T13400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 838.031600][T13400] R13: 0000000000000000 R14: 00007f155f335fa0 R15: 00007ffd0df04698 [ 838.039612][T13400] [ 838.111415][T13404] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1721'. [ 838.167536][T13404] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1721'. [ 839.008933][ T2973] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 839.067615][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.522362][ T5830] usb 8-1: USB disconnect, device number 17 [ 840.257531][T13439] netlink: 'syz.5.1727': attribute type 1 has an invalid length. [ 840.265495][T13439] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1727'. [ 840.814873][ T2973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.920135][ T5830] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 841.389656][T10843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.157300][T12729] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 843.425983][T13455] tty tty21: ldisc open failed (-12), clearing slot 20 [ 843.589046][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.731104][ T5830] usb 8-1: device descriptor read/all, error -71 [ 844.127110][T13469] lo speed is unknown, defaulting to 1000 [ 844.186328][T13470] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 844.708095][T12729] Bluetooth: hci5: Frame reassembly failed (-84) [ 845.403013][T10843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.422758][ T3008] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 846.338475][ T29] audit: type=1400 audit(1732318870.378:543): avc: denied { setopt } for pid=13501 comm="syz.0.1743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 847.084962][ T53] Bluetooth: hci5: command 0xfc11 tx timeout [ 847.145284][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.164893][T13505] 9pnet_virtio: no channels available for device syz [ 847.173156][T11076] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 847.191043][ T3008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.339605][ T8390] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 847.911252][T13511] netlink: 'syz.5.1742': attribute type 27 has an invalid length. [ 849.001520][T13522] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 849.010603][T13522] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 849.035614][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.145991][ T2994] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 850.000294][ T29] audit: type=1400 audit(1732318873.878:544): avc: denied { listen } for pid=13524 comm="syz.1.1748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 850.291094][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.749987][ T8] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 850.789957][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 850.940182][ T25] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 850.967463][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 851.039988][ T8] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 851.088696][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.160697][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 851.162375][ T8] usb 8-1: config 0 descriptor?? [ 851.181973][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 851.209539][ T25] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 851.237173][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.321810][ T25] usb 2-1: config 0 descriptor?? [ 851.556953][ T25] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 851.713189][ T8] keytouch 0003:0926:3333.000F: fixing up Keytouch IEC report descriptor [ 851.740474][ T8] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0926:3333.000F/input/input42 [ 851.841480][ T8] keytouch 0003:0926:3333.000F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0 [ 851.961069][T12729] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 852.009151][ T8] usb 2-1: USB disconnect, device number 45 [ 852.018796][ T8] iowarrior 2-1:0.0: I/O-Warror #0 now disconnected [ 852.073931][T13548] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1754'. [ 852.268026][ T25] usb 8-1: USB disconnect, device number 20 [ 852.268062][ C0] keytouch 0003:0926:3333.000F: usb_submit_urb(ctrl) failed: -19 [ 852.398541][T12729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.942482][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.360985][T12729] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 854.792999][T13572] netlink: 'syz.5.1759': attribute type 1 has an invalid length. [ 854.800944][T13572] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1759'. [ 854.950008][ T5875] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 855.088883][ T5875] usb 2-1: device descriptor read/64, error -71 [ 855.108218][T13582] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1763'. [ 855.261976][T13582] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1763'. [ 855.364284][ T5875] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 855.740877][ T5875] usb 2-1: device descriptor read/64, error -71 [ 855.813283][T13595] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 855.822319][T13595] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 855.839934][T12729] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 855.850637][ T5875] usb usb2-port1: attempt power cycle [ 856.190058][ T5875] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 856.212940][ T5875] usb 2-1: device descriptor read/8, error -71 [ 856.256257][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.489584][T13597] lo speed is unknown, defaulting to 1000 [ 856.670027][ T5875] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 856.690545][ T5875] usb 2-1: device descriptor read/8, error -71 [ 856.800182][ T5875] usb usb2-port1: unable to enumerate USB device [ 856.808607][T13603] FAULT_INJECTION: forcing a failure. [ 856.808607][T13603] name failslab, interval 1, probability 0, space 0, times 0 [ 856.821388][T13603] CPU: 0 UID: 0 PID: 13603 Comm: syz.7.1767 Not tainted 6.12.0-syzkaller-07749-g28eb75e178d3 #0 [ 856.831844][T13603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 856.841922][T13603] Call Trace: [ 856.845208][T13603] [ 856.848156][T13603] dump_stack_lvl+0x16c/0x1f0 [ 856.852830][T13603] should_fail_ex+0x497/0x5b0 [ 856.857502][T13603] should_failslab+0xc2/0x120 [ 856.862179][T13603] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 856.867539][T13603] ? dst_alloc+0x99/0x1a0 [ 856.872159][T13603] dst_alloc+0x99/0x1a0 [ 856.876302][T13603] ? hlock_class+0x4e/0x130 [ 856.880822][T13603] rt_dst_alloc+0x35/0x3a0 [ 856.885278][T13603] ip_route_input_slow+0x165e/0x3910 [ 856.890566][T13603] ? __pfx_ip_route_input_slow+0x10/0x10 [ 856.896203][T13603] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 856.901842][T13603] ? lock_acquire+0x2f/0xb0 [ 856.906330][T13603] ? ip_route_input_noref+0xb6/0x2e0 [ 856.911621][T13603] ip_route_input_noref+0x121/0x2e0 [ 856.916835][T13603] ? __pfx_ip_route_input_noref+0x10/0x10 [ 856.922577][T13603] ? tcp_v4_early_demux+0xae/0xb50 [ 856.927680][T13603] ? sock_wfree+0x11c/0x880 [ 856.932183][T13603] ip_rcv_finish_core.constprop.0+0x46f/0x2290 [ 856.938363][T13603] ip_rcv+0x1c0/0x5d0 [ 856.942362][T13603] ? __pfx_ip_rcv+0x10/0x10 [ 856.946869][T13603] __netif_receive_skb_one_core+0x199/0x1e0 [ 856.952768][T13603] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 856.959180][T13603] ? trace_lock_acquire+0x14a/0x1d0 [ 856.964378][T13603] ? ktime_get_with_offset+0x273/0x3a0 [ 856.969839][T13603] ? netif_receive_skb+0x109/0x7b0 [ 856.974975][T13603] __netif_receive_skb+0x1d/0x160 [ 856.980014][T13603] netif_receive_skb+0x13f/0x7b0 [ 856.984950][T13603] ? __pfx_netif_receive_skb+0x10/0x10 [ 856.990424][T13603] ? __pfx___lock_acquire+0x10/0x10 [ 856.995652][T13603] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 857.001844][T13603] tun_rx_batched.isra.0+0x3eb/0x730 [ 857.007163][T13603] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 857.012985][T13603] ? lock_acquire+0x2f/0xb0 [ 857.017499][T13603] ? tun_get_user+0x13e6/0x3e40 [ 857.022361][T13603] tun_get_user+0x2a16/0x3e40 [ 857.027074][T13603] ? find_held_lock+0x2d/0x110 [ 857.031972][T13603] ? __pfx_tun_get_user+0x10/0x10 [ 857.037031][T13603] ? find_held_lock+0x2d/0x110 [ 857.041797][T13603] ? __pfx_lock_release+0x10/0x10 [ 857.046839][T13603] tun_chr_write_iter+0xdc/0x210 [ 857.051771][T13603] vfs_write+0x5ae/0x1150 [ 857.056098][T13603] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 857.061642][T13603] ? trace_lock_acquire+0x14a/0x1d0 [ 857.066846][T13603] ? __pfx_vfs_write+0x10/0x10 [ 857.071622][T13603] ? __fget_files+0x40/0x3a0 [ 857.076217][T13603] ksys_write+0x12b/0x250 [ 857.080554][T13603] ? __pfx_ksys_write+0x10/0x10 [ 857.085430][T13603] do_syscall_64+0xcd/0x250 [ 857.089941][T13603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.095843][T13603] RIP: 0033:0x7fd722b7d2ff [ 857.100273][T13603] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 857.120314][T13603] RSP: 002b:00007fd723999000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 857.128721][T13603] RAX: ffffffffffffffda RBX: 00007fd722d35fa0 RCX: 00007fd722b7d2ff [ 857.136685][T13603] RDX: 000000000000003a RSI: 0000000020000100 RDI: 00000000000000c8 [ 857.144665][T13603] RBP: 00007fd723999090 R08: 0000000000000000 R09: 0000000000000000 [ 857.152635][T13603] R10: 000000000000003a R11: 0000000000000293 R12: 0000000000000001 [ 857.160612][T13603] R13: 0000000000000000 R14: 00007fd722d35fa0 R15: 00007ffff3eb79b8 [ 857.168611][T13603] [ 857.181428][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.352267][ T29] audit: type=1400 audit(1732318881.398:545): avc: denied { append } for pid=13604 comm="syz.6.1768" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 857.411191][T12735] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 857.616237][T13612] FAULT_INJECTION: forcing a failure. [ 857.616237][T13612] name failslab, interval 1, probability 0, space 0, times 0 [ 857.629002][T13612] CPU: 1 UID: 0 PID: 13612 Comm: syz.6.1771 Not tainted 6.12.0-syzkaller-07749-g28eb75e178d3 #0 [ 857.639422][T13612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 857.650096][T13612] Call Trace: [ 857.653414][T13612] [ 857.656364][T13612] dump_stack_lvl+0x16c/0x1f0 [ 857.661065][T13612] should_fail_ex+0x497/0x5b0 [ 857.665825][T13612] should_failslab+0xc2/0x120 [ 857.670517][T13612] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 857.675925][T13612] ? dst_alloc+0x99/0x1a0 [ 857.680279][T13612] dst_alloc+0x99/0x1a0 [ 857.684457][T13612] ? fib_validate_source+0x13d/0x730 [ 857.689757][T13612] rt_dst_alloc+0x35/0x3a0 [ 857.694334][T13612] ip_route_input_slow+0x165e/0x3910 [ 857.699670][T13612] ? __pfx_ip_route_input_slow+0x10/0x10 [ 857.705342][T13612] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 857.711040][T13612] ? lock_acquire+0x2f/0xb0 [ 857.715562][T13612] ? ip_route_input_noref+0xb6/0x2e0 [ 857.720867][T13612] ip_route_input_noref+0x121/0x2e0 [ 857.726115][T13612] ? __pfx_ip_route_input_noref+0x10/0x10 [ 857.731879][T13612] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 857.737575][T13612] ? sock_wfree+0x11c/0x880 [ 857.742102][T13612] ip_rcv_finish_core.constprop.0+0x46f/0x2290 [ 857.748322][T13612] ip_rcv+0x1c0/0x5d0 [ 857.752331][T13612] ? __pfx_ip_rcv+0x10/0x10 [ 857.756846][T13612] __netif_receive_skb_one_core+0x199/0x1e0 [ 857.762745][T13612] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 857.769206][T13612] ? trace_lock_acquire+0x14a/0x1d0 [ 857.774429][T13612] ? ktime_get_with_offset+0x273/0x3a0 [ 857.779921][T13612] ? netif_receive_skb+0x109/0x7b0 [ 857.785348][T13612] __netif_receive_skb+0x1d/0x160 [ 857.790410][T13612] netif_receive_skb+0x13f/0x7b0 [ 857.795380][T13612] ? __pfx_netif_receive_skb+0x10/0x10 [ 857.800894][T13612] ? __pfx___lock_acquire+0x10/0x10 [ 857.806115][T13612] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 857.810096][ T5875] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 857.812268][T13612] tun_rx_batched.isra.0+0x3eb/0x730 [ 857.812307][T13612] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 857.830956][T13612] ? lock_acquire+0x2f/0xb0 [ 857.835478][T13612] ? tun_get_user+0x13e6/0x3e40 [ 857.840428][T13612] tun_get_user+0x2a16/0x3e40 [ 857.845140][T13612] ? find_held_lock+0x2d/0x110 [ 857.849933][T13612] ? __pfx_tun_get_user+0x10/0x10 [ 857.854963][T13612] ? find_held_lock+0x2d/0x110 [ 857.859735][T13612] ? __pfx_lock_release+0x10/0x10 [ 857.864793][T13612] tun_chr_write_iter+0xdc/0x210 [ 857.869761][T13612] vfs_write+0x5ae/0x1150 [ 857.874144][T13612] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 857.879707][T13612] ? trace_lock_acquire+0x14a/0x1d0 [ 857.884924][T13612] ? __pfx_vfs_write+0x10/0x10 [ 857.889737][T13612] ? __fget_files+0x40/0x3a0 [ 857.894380][T13612] ksys_write+0x12b/0x250 [ 857.898707][T13612] ? __pfx_ksys_write+0x10/0x10 [ 857.903574][T13612] do_syscall_64+0xcd/0x250 [ 857.908095][T13612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.914010][T13612] RIP: 0033:0x7f03d617d2ff [ 857.918419][T13612] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 857.938029][T13612] RSP: 002b:00007f03d6eea000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 857.946491][T13612] RAX: ffffffffffffffda RBX: 00007f03d6335fa0 RCX: 00007f03d617d2ff [ 857.954485][T13612] RDX: 000000000000002a RSI: 00000000200000c0 RDI: 00000000000000c8 [ 857.962471][T13612] RBP: 00007f03d6eea090 R08: 0000000000000000 R09: 0000000000000000 [ 857.970518][T13612] R10: 000000000000002a R11: 0000000000000293 R12: 0000000000000001 [ 857.971591][ T5875] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 857.978504][T13612] R13: 0000000000000001 R14: 00007f03d6335fa0 R15: 00007fff661d5ab8 [ 857.978542][T13612] [ 858.447947][ T5875] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 858.499453][ T5875] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 858.557353][ T5875] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 858.621756][ T5875] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 858.731436][ T5875] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 858.767636][ T8390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.844509][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 858.884745][ T5875] usb 2-1: Product: syz [ 858.894233][ T5875] usb 2-1: Manufacturer: syz [ 858.909690][ T5875] cdc_wdm 2-1:1.0: skipping garbage [ 858.923183][ T5875] cdc_wdm 2-1:1.0: skipping garbage [ 858.955519][ T5875] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 859.100401][ T1020] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 859.134217][ T8] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 859.369966][ T8] usb 8-1: Using ep0 maxpacket: 8 [ 859.419332][ T8] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 859.478983][ T8] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 859.506824][ T8] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 859.518268][ T8] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 859.532820][ T8] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 859.548792][ T8] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 859.558554][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.610051][ T5877] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 859.746008][T13631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 859.759418][T13631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 859.793399][ T8] usb 8-1: usb_control_msg returned -32 [ 859.799159][ T8] usbtmc 8-1:16.0: can't read capabilities [ 859.902902][T13634] bridge0: port 3(erspan0) entered disabled state [ 859.936896][ T5877] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 859.951538][ T5877] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.146053][ T5877] usb 6-1: config 0 descriptor?? [ 860.405393][ T5877] cp210x 6-1:0.0: cp210x converter detected [ 860.441563][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.463205][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.474213][ T29] audit: type=1400 audit(1732318884.518:546): avc: denied { connect } for pid=13633 comm="syz.6.1779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 860.500283][T13634] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.500801][T12729] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 860.507599][T13634] bridge0: port 1(bridge_slave_0) entered disabled state [ 860.533134][ T5877] usb 6-1: cp210x converter now attached to ttyUSB0 [ 860.624604][ T29] audit: type=1400 audit(1732318884.658:547): avc: denied { getopt } for pid=13633 comm="syz.6.1779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 860.712300][T13634] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 860.727651][T13634] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 860.814823][T13634] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.824333][T13634] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.828918][ T5875] usb 8-1: USB disconnect, device number 21 [ 860.833250][T13634] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.833338][T13634] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.842396][T13636] usbtmc 8-1:16.0: usb_control_msg returned -71 [ 860.877698][ T25] usb 2-1: USB disconnect, device number 50 [ 860.950816][T13634] bridge1: left promiscuous mode [ 860.957340][T13643] team_slave_0: entered promiscuous mode [ 860.963537][T13643] team_slave_1: entered promiscuous mode [ 861.018280][T13643] team_slave_0: left promiscuous mode [ 861.025664][T13643] team_slave_1: left promiscuous mode [ 966.079787][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 966.086791][ C1] rcu: (detected by 1, t=10503 jiffies, g=46945, q=35 ncpus=2) [ 966.094427][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10501 (4295033708-4295023207), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 966.107798][ C1] rcu: rcu_preempt kthread starved for 10501 jiffies! g46945 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 966.118997][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 966.128967][ C1] rcu: RCU grace-period kthread stack dump: [ 966.134907][ C1] task:rcu_preempt state:R running task stack:27872 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 966.147129][ C1] Call Trace: [ 966.150462][ C1] [ 966.153410][ C1] __schedule+0xe5a/0x5ae0 [ 966.157876][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 966.163133][ C1] ? __pfx___schedule+0x10/0x10 [ 966.168022][ C1] ? schedule+0x298/0x350 [ 966.172369][ C1] ? __pfx_lock_release+0x10/0x10 [ 966.177402][ C1] ? trace_lock_acquire+0x14a/0x1d0 [ 966.182619][ C1] ? lock_acquire+0x2f/0xb0 [ 966.187130][ C1] ? schedule+0x1fd/0x350 [ 966.191477][ C1] schedule+0xe7/0x350 [ 966.195585][ C1] schedule_timeout+0x124/0x280 [ 966.200465][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 966.205863][ C1] ? __pfx_process_timeout+0x10/0x10 [ 966.211193][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 966.217042][ C1] ? prepare_to_swait_event+0xf3/0x470 [ 966.222628][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 966.227444][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 966.232745][ C1] ? rcu_gp_init+0xc82/0x1630 [ 966.237436][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 966.242682][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 966.248522][ C1] rcu_gp_kthread+0x271/0x380 [ 966.253217][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 966.258425][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 966.263632][ C1] ? __kthread_parkme+0x148/0x220 [ 966.268670][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 966.273890][ C1] kthread+0x2c1/0x3a0 [ 966.277970][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 966.283186][ C1] ? __pfx_kthread+0x10/0x10 [ 966.287786][ C1] ret_from_fork+0x45/0x80 [ 966.292208][ C1] ? __pfx_kthread+0x10/0x10 [ 966.296806][ C1] ret_from_fork_asm+0x1a/0x30 [ 966.301601][ C1] [ 966.304625][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 966.310955][ C1] Sending NMI from CPU 1 to CPUs 0: [ 966.316177][ C0] NMI backtrace for cpu 0 [ 966.316190][ C0] CPU: 0 UID: 0 PID: 1020 Comm: kworker/u8:5 Not tainted 6.12.0-syzkaller-07749-g28eb75e178d3 #0 [ 966.316209][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 966.316221][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 966.316247][ C0] RIP: 0010:lock_is_held_type+0x0/0x150 [ 966.316265][ C0] Code: e8 95 71 2a f6 90 0f 0b 90 90 eb e0 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 41 57 41 56 41 55 41 bd ff ff ff ff 41 54 55 53 48 83 [ 966.316280][ C0] RSP: 0018:ffffc90000007d78 EFLAGS: 00000046 [ 966.316293][ C0] RAX: 0000000000010002 RBX: 0000000000000001 RCX: ffffffff893105a6 [ 966.316305][ C0] RDX: ffff8880269f4880 RSI: 00000000ffffffff RDI: ffff88801cf0f300 [ 966.316317][ C0] RBP: 000000000003da8c R08: 0000000000000005 R09: 0000000000000000 [ 966.316328][ C0] R10: 0000000000000001 R11: 0000000000000004 R12: ffff88801cf0f340 [ 966.316339][ C0] R13: ffff8880b862cb00 R14: ffff88801cf0f340 R15: ffff88802543e000 [ 966.316351][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 966.316368][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 966.316381][ C0] CR2: 00007f77a2491f98 CR3: 000000007b8d0000 CR4: 00000000003526f0 [ 966.316392][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 966.316403][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 966.316414][ C0] Call Trace: [ 966.316420][ C0] [ 966.316428][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 966.316477][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 966.316530][ C0] ? nmi_handle+0x1a9/0x5c0 [ 966.316567][ C0] ? __pfx_lock_is_held_type+0x10/0x10 [ 966.316602][ C0] ? default_do_nmi+0x6a/0x160 [ 966.316647][ C0] ? exc_nmi+0x170/0x1e0 [ 966.316673][ C0] ? end_repeat_nmi+0xf/0x53 [ 966.316694][ C0] ? advance_sched+0x176/0xc60 [ 966.316719][ C0] ? __pfx_lock_is_held_type+0x10/0x10 [ 966.316735][ C0] ? __pfx_lock_is_held_type+0x10/0x10 [ 966.316752][ C0] ? __pfx_lock_is_held_type+0x10/0x10 [ 966.316769][ C0] [ 966.316774][ C0] [ 966.316780][ C0] advance_sched+0x707/0xc60 [ 966.316805][ C0] ? timerqueue_del+0x83/0x150 [ 966.316826][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 966.316848][ C0] ? __pfx_advance_sched+0x10/0x10 [ 966.316871][ C0] __hrtimer_run_queues+0x20a/0xae0 [ 966.316895][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 966.316915][ C0] ? read_tsc+0x9/0x20 [ 966.316939][ C0] hrtimer_interrupt+0x392/0x8e0 [ 966.316965][ C0] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 966.316985][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 966.317010][ C0] [ 966.317015][ C0] [ 966.317026][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 966.317045][ C0] RIP: 0010:crng_make_state+0x2b5/0x6d0 [ 966.317065][ C0] Code: fc 4d 85 ed 0f 85 cf 01 00 00 e8 f6 53 84 fc 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 54 56 84 fc 48 85 db 0f 85 59 02 00 00 <48> 83 c4 20 5b 5d 41 5c 41 5d 41 5e 41 5f e9 c8 53 84 fc e8 c3 53 [ 966.317081][ C0] RSP: 0018:ffffc90004057a78 EFLAGS: 00000293 [ 966.317094][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8509e160 [ 966.317105][ C0] RDX: ffff8880269f4880 RSI: ffffffff8509e16e RDI: 0000000000000007 [ 966.317116][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 966.317127][ C0] R10: 0000000000000000 R11: ad555bc4adbc3a2a R12: ffff8880b863b170 [ 966.317138][ C0] R13: 0000000000000200 R14: 0000000000000002 R15: 0000000000000018 [ 966.317152][ C0] ? crng_make_state+0x480/0x6d0 [ 966.317169][ C0] ? crng_make_state+0x48e/0x6d0 [ 966.317187][ C0] ? crng_make_state+0x48e/0x6d0 [ 966.317206][ C0] _get_random_bytes+0x122/0x1e0 [ 966.317223][ C0] ? __pfx__get_random_bytes+0x10/0x10 [ 966.317243][ C0] ? __alloc_skb+0x1fe/0x380 [ 966.317267][ C0] ? do_csum+0x26f/0x2d0 [ 966.317288][ C0] nsim_dev_trap_report_work+0x7a9/0xd00 [ 966.317317][ C0] process_one_work+0x9c5/0x1ba0 [ 966.317339][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 966.317360][ C0] ? __pfx_process_one_work+0x10/0x10 [ 966.317381][ C0] ? assign_work+0x1a0/0x250 [ 966.317397][ C0] worker_thread+0x6c8/0xf00 [ 966.317420][ C0] ? __pfx_worker_thread+0x10/0x10 [ 966.317437][ C0] kthread+0x2c1/0x3a0 [ 966.317457][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 966.317479][ C0] ? __pfx_kthread+0x10/0x10 [ 966.317500][ C0] ret_from_fork+0x45/0x80 [ 966.317516][ C0] ? __pfx_kthread+0x10/0x10 [ 966.317536][ C0] ret_from_fork_asm+0x1a/0x30 [ 966.317564][ C0]