last executing test programs: 22m10.775553367s ago: executing program 32 (id=1073): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0x0) 16m48.378483881s ago: executing program 33 (id=1725): write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x118) openat$tun(0xffffffffffffff9c, 0x0, 0x280000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_REG(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r3, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x30, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) 13m17.010167446s ago: executing program 34 (id=2041): socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x441, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000002c0)=[{0x0, 0x1a000}], 0x1, 0x2a}}], 0x48}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, r5}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 11m27.69256957s ago: executing program 35 (id=2183): r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) link(0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, 0x0, 0x1, {0xffff}}) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) 10m46.948035738s ago: executing program 8 (id=2204): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="1cbd7000fcdbdf251c202006fc02fe003c4d60b60000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000840) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) syz_emit_vhci(&(0x7f0000001040)=ANY=[@ANYBLOB="040704a224200e"], 0x7) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000100)=0x1, 0x29) (fail_nth: 1) 10m45.340415047s ago: executing program 8 (id=2267): r0 = syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[@ANYRES16], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000000)={0x20, 0x9, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) timerfd_create(0x8, 0x80000) r1 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) unshare(0x22020400) r2 = fsmount(r1, 0x0, 0x3) r3 = openat(r2, &(0x7f0000000680)='./file0\x00', 0x105c80, 0x22) fchown(r3, 0x0, 0x0) inotify_init1(0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)={0x140, 0x2a, 0xb, 0x0, 0x0, {0x8}, [@typed={0x4, 0x3}, @nested={0x128, 0x1, 0x0, 0x1, [@nested={0x121, 0xde, 0x0, 0x1, [@generic="73ee77f0d238ca193b38ca9fb61bf462c99d3013eb1aae24d54da25652b5d9eb3bcb3571", @generic="74ffb07acc07ce9d46da81076dafb795bc56adcad69006f7e7fbe79a7d220fb7f3a139c913e130599d22e7a1e3e559d872c6aa31c7d73497242e7e9db7e23727e05aad83e9fa958f670ac1c70a4e2aee21b7634e672c308384ebc466cf1f4c0c8f1df75450943c166aebf2e8a3260700654545de822e41bca6e9ba4a0bafda69e19de9327ef50400d37a0e37a24e7e0aa6516b4b78653b60053a41b7e8220f0d61b7cc70cac9812ad9c4cd71e1c62519d8e4b389f3017817a425d643bc37b8f057aef0591cfc434a689c791943e5e0087d9c17c59939702d90fae5593a1e3c3ba8a45c17a51f14c58104e63559b70391d1ce93ab22", @nested={0x4, 0x51}]}]}]}, 0x140}}, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x1, 0x8, 0x4, 0x20810, 0xffffffffffffffff, 0xa2, '\x00', 0x0, r5, 0x5, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002d0001000000000000000000040100800c0000000000000000000000140001"], 0x114}], 0x1}, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$cont(0x18, r9, 0x9, 0x400010000) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e"], 0x44}}, 0x0) 10m42.139261222s ago: executing program 8 (id=2273): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) write$P9_RVERSION(r0, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRESHEX], 0x15) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000080), &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240), 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getrusage(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) setitimer(0x1, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x10, &(0x7f0000000100)=0x1e79, 0x4) write$FUSE_DIRENTPLUS(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r1, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r1, 0x0, 0x0) utime(&(0x7f0000000200)='./file0\x00', 0x0) syz_open_dev$video4linux(&(0x7f00000001c0), 0x1, 0x14bd00) 10m39.092422736s ago: executing program 8 (id=2275): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x24, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x8, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') lchown(&(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r6, r5, 0x25, 0x0, @val=@tcx={@void, @value}}, 0x40) syz_emit_ethernet(0xfed7, &(0x7f00000002c0)=ANY=[], 0x0) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 10m38.610565816s ago: executing program 36 (id=2256): r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) link(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f00000001c0)={0x0, @bt={0x2d0, 0x7c1, 0x1, 0x1, 0xd59f80, 0xc, 0x5, 0x6, 0x81, 0xc, 0x3, 0xe6e, 0x5, 0x1, 0x35, 0x0, {0x4, 0x8001}, 0x3, 0xa3}}) r3 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, 0x0, 0x1, {0xffff}}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) 10m37.870523072s ago: executing program 8 (id=2280): r0 = socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB="2300000000f4ffffff000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) sched_setscheduler(r1, 0x2, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB='T\x00\x00', @ANYRES16, @ANYRES64=0x0, @ANYRES32, @ANYBLOB="2c005e8008000700bb0300000800050003000000080003003e3ed7c7080003000400000008000900030000000c005e8008000900ff070000"], 0x54}, 0x1, 0x0, 0x0, 0x20004000}, 0xd0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r4, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000003240), 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000007c0), 0x100000000002, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000900)={0x2, @pix={0x7, 0x8, 0x34324258, 0x4, 0x5, 0x7, 0xc, 0xfeedcafe, 0x1, 0x0, 0x2, 0x4}}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x2b0, 0x150, 0x150, 0x0, 0xf8010000, 0x380, 0x238, 0x238, 0x380, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x248, 0x2b0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'batadv0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x4}}}, @common=@inet=@sctp={{0x148}, {[], [], [], 0x5, [], 0x0, 0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) syz_emit_ethernet(0x83, &(0x7f00000003c0)=ANY=[@ANYBLOB="e10931d8640abbbbbbbbbbbb86dd60000000004d8800"], 0x0) syz_usb_connect$cdc_ecm(0x0, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109026e00010100200009040000ff020200000524060000052400ffff0d240f01010100000000fcff001524120f00a317a88b045e4f01a607c0ffcb7e392a1524129d55a317a88b045e4f01a607c0ffcb7e392a090581122000000000090582022000000000090503"], 0x0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x5, 0x100, 0x6, [{{0x9, 0x4, 0x0, 0xe4, 0x2, 0x7, 0x1, 0x3, 0xd3, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x9, 0x4, 0xa}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x140, 0x6, 0x9, 0x0, 0x20, 0xcb}, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="050f3f000414100409cfd1e88facdb9e0b5d9a3a6959484cab0710021053050014100a00c200000000f00000f000ff00300000000b10010a5100f9038f70fd"], 0x6, [{0x37, &(0x7f0000000140)=@string={0x37, 0x3, "5e715d730fcaa48ea7facb9ede768a94f9dcef31a49a183dfa274e9fcecbd77d4cb94e2e489b7576698a78fa8d8c7f98a66fa68a97"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x81a}}, {0xe1, &(0x7f0000000280)=@string={0xe1, 0x3, "887302e38ee87c0c6837d4d0c9d3b55d0d7722226a705484a88103e20b6ef1f3f038cfad6011c5566342fb9d26f12592d81863811a0d0750109018c741da0571f6136ed296341873bc16f13f5704111753f19885649ba3958b97ed7c4560d7bedaa7a4a776134a702968e3188ff4d1da65f92fcb8af3c963e27e649b7bf0650f39ffaea506d86959683366df3700561812e27793cd9633e7fe6ad22fc98f106e01c98ddbe76682f22fb5c13365ae066ae9b2fb7e528b531ee5999a7d9f6434e6642a0f9cc28e0d8c3e95da8ad61584b6098ad314fecaa2397240ffb3d5173c"}}]}) 10m36.60537086s ago: executing program 8 (id=2284): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x408840, 0x0) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f0000000040)={0x4, 0x4}) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f0000000080)={0x1, 0x1}) io_uring_register$IORING_REGISTER_PBUF_STATUS(r0, 0x1a, &(0x7f00000000c0)={0x2}, 0x1) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)=0x1, 0x4) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000140)="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") r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000002c0)={r1, 0x1b, 0xf8}, &(0x7f0000000300)={'enc=', 'raw', ' hash=', {'poly1305-simd\x00'}}, &(0x7f0000000380)="a70859e500561d052d8717513235ad9db6e1d93799b2cd0ea79519", &(0x7f00000003c0)="0dcd6585ea37709143ada9cacc5efd8a4dc5e31fde32587a80875075a21676a0c93441cadd3f7d065f056108f43b47db2d02e83a142e903705fde6b6eefc6ee1d4d3465353699601de4a43196993a582b49bff3c231c7f027ec4ae4927e424d93b6e8a03fb3a685913a58fcf987d4163ee0289876dc16a34c28b1fe391a10aa2aa0cbb48f90d1fbfae0f5acf8147009ef3111135319d31c3e1d088763df3ef486bbccc592cc7b73d2316d10dc2f00caa8dbee8ac09cdf8ad779972e1bcba8bf53eefa74f30f2ea3b48cb60441d331fa8012d03ef7af99e3d7107d8a432923ca47f31751b5f6e5c5439ee86f63d114445f4350b33b113dd26") keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f00000004c0)=' hash=', &(0x7f0000000500)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) r3 = add_key$user(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000600)="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", 0x1000, r1) keyctl$search(0xa, r3, &(0x7f0000001600)='blacklist\x00', &(0x7f0000001640)={'syz', 0x3}, r1) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SNDCTL_SEQ_GETTIME(0xffffffffffffffff, 0x80045113, &(0x7f0000001680)) r4 = syz_io_uring_setup(0x8fb, &(0x7f00000016c0)={0x0, 0x6bbe, 0x2000, 0x2, 0x62}, &(0x7f0000001740), &(0x7f0000001780)) r5 = eventfd(0x40) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f00000017c0)=r5, 0x1) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001800), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f0000001840)) r7 = creat(&(0x7f0000001880)='./file0\x00', 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001a00)={'syztnl0\x00', &(0x7f0000001900)={'sit0\x00', 0x0, 0x17, 0x10, 0xffffffff, 0x4, {{0x29, 0x4, 0x2, 0x5, 0xa4, 0x64, 0x0, 0x4, 0x4, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x17}, {[@timestamp={0x44, 0x8, 0xa9, 0x0, 0x1, [0xfffeffff]}, @timestamp_addr={0x44, 0x3c, 0x5c, 0x1, 0x6, [{@broadcast, 0xf}, {@remote, 0x25f}, {@broadcast, 0xe500}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x2}, {@broadcast, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@loopback, 0x9}]}, @cipso={0x86, 0x40, 0xffffffffffffffff, [{0x5, 0x5, "cb43a6"}, {0x1, 0x7, "5139958dea"}, {0x1, 0x5, "769de7"}, {0x5, 0xd, "46f448ef570cbae4c3dffe"}, {0x7, 0xf, "c29fa1e226213800e527114998"}, {0x1, 0xd, "6db356408587dd53dd42df"}]}, @timestamp={0x44, 0x8, 0xa2, 0x0, 0x3, [0x5]}, @noop]}}}}}) sendmsg$nl_route_sched(r7, &(0x7f0000001b00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)=@delqdisc={0x44, 0x25, 0x8, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xf, 0x9}, {0xc, 0x10}, {0xa, 0x7}}, [@qdisc_kind_options=@q_drr={0x8}, @TCA_RATE={0x6, 0x5, {0x7c, 0x8}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xd}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000040) timer_create(0x4, &(0x7f0000001d00)={0x0, 0x26, 0x8, @thr={&(0x7f0000001b40)="8f92ca494fed84a70baedae93bb879ea14367403ba0da84c8fa83db9679fca56545a16d865dae9ecf37089ce6233a370410d616e1ac6e61798bfa414f47316f6097211385bab33932730a74cd9914c9b10537f354053e708a875f2b40fed77d5a1cf77814bd9629b7671552fe72c3d01626e7013b8d11644daa12a9b8e594b56bde59c46c5e752", &(0x7f0000001c00)="cf72b15f288ee3e441e494846a6b61a3884bd5d23c9d90ce35ad4380fdc90c1b31ae0b9d628116f4a4ea4ef8bae93fd87e6df60b2be2baf01afb8d931a5f33ffca0db7931146eb8f7027110d642aaaa718e76b047f033783a9c7cdbc9224d87f8ff1ecfc35a6e39ae32f98aad217e18db7f7be6656ed41939ee9db93036e7f9e9fc174b6531cac43d63a108b5e5bc5d36384db136749c91c038415671d6125f6110d5cd5ad5dfa913e8eb50a9b7d9118b5a6b82c757fafbeb8b586dd141949809202d399d7a3b18e9c386f5554d997510bb6d38673085591f93635f00d398815b89251268311c7238d47a3e3be"}}, &(0x7f0000001d40)) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000001d80)='&-\x00', &(0x7f0000001dc0)) keyctl$get_persistent(0x16, 0xffffffffffffffff, r1) r9 = add_key$fscrypt_provisioning(&(0x7f0000001e00), &(0x7f0000001e40)={'syz', 0x0}, &(0x7f0000001e80)={0x1, 0x0, @c}, 0x29, r1) keyctl$KEYCTL_PKEY_QUERY(0x18, r9, 0x0, &(0x7f0000001ec0)='[\x00', &(0x7f0000001f00)) quotactl_fd$Q_QUOTAOFF(r7, 0xffffffff80000301, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000001f40), &(0x7f0000001f80)={'L-', 0x5}, 0x16, 0x2) add_key$keyring(&(0x7f0000001fc0), &(0x7f0000002000)={'syz', 0x2}, 0x0, 0x0, r1) 10m35.980984146s ago: executing program 37 (id=2284): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x408840, 0x0) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f0000000040)={0x4, 0x4}) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f0000000080)={0x1, 0x1}) io_uring_register$IORING_REGISTER_PBUF_STATUS(r0, 0x1a, &(0x7f00000000c0)={0x2}, 0x1) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)=0x1, 0x4) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000140)="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") r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000002c0)={r1, 0x1b, 0xf8}, &(0x7f0000000300)={'enc=', 'raw', ' hash=', {'poly1305-simd\x00'}}, &(0x7f0000000380)="a70859e500561d052d8717513235ad9db6e1d93799b2cd0ea79519", &(0x7f00000003c0)="0dcd6585ea37709143ada9cacc5efd8a4dc5e31fde32587a80875075a21676a0c93441cadd3f7d065f056108f43b47db2d02e83a142e903705fde6b6eefc6ee1d4d3465353699601de4a43196993a582b49bff3c231c7f027ec4ae4927e424d93b6e8a03fb3a685913a58fcf987d4163ee0289876dc16a34c28b1fe391a10aa2aa0cbb48f90d1fbfae0f5acf8147009ef3111135319d31c3e1d088763df3ef486bbccc592cc7b73d2316d10dc2f00caa8dbee8ac09cdf8ad779972e1bcba8bf53eefa74f30f2ea3b48cb60441d331fa8012d03ef7af99e3d7107d8a432923ca47f31751b5f6e5c5439ee86f63d114445f4350b33b113dd26") keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f00000004c0)=' hash=', &(0x7f0000000500)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) r3 = add_key$user(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000600)="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", 0x1000, r1) keyctl$search(0xa, r3, &(0x7f0000001600)='blacklist\x00', &(0x7f0000001640)={'syz', 0x3}, r1) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SNDCTL_SEQ_GETTIME(0xffffffffffffffff, 0x80045113, &(0x7f0000001680)) r4 = syz_io_uring_setup(0x8fb, &(0x7f00000016c0)={0x0, 0x6bbe, 0x2000, 0x2, 0x62}, &(0x7f0000001740), &(0x7f0000001780)) r5 = eventfd(0x40) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f00000017c0)=r5, 0x1) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001800), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f0000001840)) r7 = creat(&(0x7f0000001880)='./file0\x00', 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001a00)={'syztnl0\x00', &(0x7f0000001900)={'sit0\x00', 0x0, 0x17, 0x10, 0xffffffff, 0x4, {{0x29, 0x4, 0x2, 0x5, 0xa4, 0x64, 0x0, 0x4, 0x4, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x17}, {[@timestamp={0x44, 0x8, 0xa9, 0x0, 0x1, [0xfffeffff]}, @timestamp_addr={0x44, 0x3c, 0x5c, 0x1, 0x6, [{@broadcast, 0xf}, {@remote, 0x25f}, {@broadcast, 0xe500}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x2}, {@broadcast, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@loopback, 0x9}]}, @cipso={0x86, 0x40, 0xffffffffffffffff, [{0x5, 0x5, "cb43a6"}, {0x1, 0x7, "5139958dea"}, {0x1, 0x5, "769de7"}, {0x5, 0xd, "46f448ef570cbae4c3dffe"}, {0x7, 0xf, "c29fa1e226213800e527114998"}, {0x1, 0xd, "6db356408587dd53dd42df"}]}, @timestamp={0x44, 0x8, 0xa2, 0x0, 0x3, [0x5]}, @noop]}}}}}) sendmsg$nl_route_sched(r7, &(0x7f0000001b00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)=@delqdisc={0x44, 0x25, 0x8, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xf, 0x9}, {0xc, 0x10}, {0xa, 0x7}}, [@qdisc_kind_options=@q_drr={0x8}, @TCA_RATE={0x6, 0x5, {0x7c, 0x8}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xd}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000040) timer_create(0x4, &(0x7f0000001d00)={0x0, 0x26, 0x8, @thr={&(0x7f0000001b40)="8f92ca494fed84a70baedae93bb879ea14367403ba0da84c8fa83db9679fca56545a16d865dae9ecf37089ce6233a370410d616e1ac6e61798bfa414f47316f6097211385bab33932730a74cd9914c9b10537f354053e708a875f2b40fed77d5a1cf77814bd9629b7671552fe72c3d01626e7013b8d11644daa12a9b8e594b56bde59c46c5e752", &(0x7f0000001c00)="cf72b15f288ee3e441e494846a6b61a3884bd5d23c9d90ce35ad4380fdc90c1b31ae0b9d628116f4a4ea4ef8bae93fd87e6df60b2be2baf01afb8d931a5f33ffca0db7931146eb8f7027110d642aaaa718e76b047f033783a9c7cdbc9224d87f8ff1ecfc35a6e39ae32f98aad217e18db7f7be6656ed41939ee9db93036e7f9e9fc174b6531cac43d63a108b5e5bc5d36384db136749c91c038415671d6125f6110d5cd5ad5dfa913e8eb50a9b7d9118b5a6b82c757fafbeb8b586dd141949809202d399d7a3b18e9c386f5554d997510bb6d38673085591f93635f00d398815b89251268311c7238d47a3e3be"}}, &(0x7f0000001d40)) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000001d80)='&-\x00', &(0x7f0000001dc0)) keyctl$get_persistent(0x16, 0xffffffffffffffff, r1) r9 = add_key$fscrypt_provisioning(&(0x7f0000001e00), &(0x7f0000001e40)={'syz', 0x0}, &(0x7f0000001e80)={0x1, 0x0, @c}, 0x29, r1) keyctl$KEYCTL_PKEY_QUERY(0x18, r9, 0x0, &(0x7f0000001ec0)='[\x00', &(0x7f0000001f00)) quotactl_fd$Q_QUOTAOFF(r7, 0xffffffff80000301, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000001f40), &(0x7f0000001f80)={'L-', 0x5}, 0x16, 0x2) add_key$keyring(&(0x7f0000001fc0), &(0x7f0000002000)={'syz', 0x2}, 0x0, 0x0, r1) 9m36.055619776s ago: executing program 2 (id=2402): iopl(0x3) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000080)={'filter\x00', 0x0, 0x0, 0x0, [0x2f1, 0x3, 0x6ce, 0xf76, 0x80, 0x4], 0x3, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x0, [{}, {}, {}]}, 0xa8) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) rt_sigqueueinfo(r1, 0x7, 0x0) 9m35.472503263s ago: executing program 2 (id=2404): mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000000000), 0x5, 0x4) r0 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x80000}) fanotify_init(0x79, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), 0x0) socket$inet6(0xa, 0x2, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$xdp(0x2c, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) close(r1) pipe(&(0x7f0000000100)) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="6000000010000304f500"/20, @ANYRES32=0x0, @ANYBLOB="00050000000000003000128009000100766c616e00000000200002800c0002000a0000001f00000006000100000000000600050088a8000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x60}, 0x1, 0x0, 0x0, 0x4004014}, 0x4000000) 9m31.648022162s ago: executing program 2 (id=2411): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 9m30.416089734s ago: executing program 2 (id=2413): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x3f}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000029000000040000002b00000000000007180000000000000029"], 0x30}, 0x0) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000580)="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") r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, &(0x7f0000000180)={0x0, 0x0, 0x1}) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x172) mount$afs(&(0x7f0000000040)=ANY=[@ANYBLOB='#'], &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000100)=""/161, 0xa1) 9m29.7730036s ago: executing program 2 (id=2417): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc}) r5 = syz_open_procfs(0x0, &(0x7f0000000400)='syscall\x00') lseek(r5, 0x8, 0x0) 9m28.320016348s ago: executing program 2 (id=2420): r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) link(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f00000001c0)={0x0, @bt={0x2d0, 0x7c1, 0x1, 0x1, 0xd59f80, 0xc, 0x5, 0x6, 0x81, 0xc, 0x3, 0xe6e, 0x5, 0x1, 0x35, 0x0, {0x4, 0x8001}, 0x3, 0xa3}}) r5 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, 0x0, 0x1, {0xffff}}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) 9m13.1146733s ago: executing program 38 (id=2420): r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) link(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f00000001c0)={0x0, @bt={0x2d0, 0x7c1, 0x1, 0x1, 0xd59f80, 0xc, 0x5, 0x6, 0x81, 0xc, 0x3, 0xe6e, 0x5, 0x1, 0x35, 0x0, {0x4, 0x8001}, 0x3, 0xa3}}) r5 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, 0x0, 0x1, {0xffff}}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) 8m49.203133269s ago: executing program 5 (id=2483): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc}) r5 = syz_open_procfs(0x0, &(0x7f0000000400)='syscall\x00') lseek(r5, 0x8, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000de080000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r6}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES8=r7, @ANYRESDEC=r9, @ANYRES16=r9], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 8m47.721004537s ago: executing program 5 (id=2488): openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x41, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r4}, 0x38) r5 = add_key$user(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key$user(&(0x7f0000000000), 0x0, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000002a000b0000000000000000000400000004000300340001802d0000009848a19789c2e4a36cc01941237c731dccd5aa16ab9e5e98ee304bd8ecc623c7ac976cffc52cc563d3000000"], 0x4c}}, 0x20044080) add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="a6", 0x1, 0x0) keyctl$KEYCTL_MOVE(0x1e, r6, 0xffffffffffffffff, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r5, 0x0, 0x0, 0x1) 8m46.230139512s ago: executing program 5 (id=2489): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB="2300000000f4ffffff000000", @ANYRES32, @ANYBLOB], 0x20) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYRES64=0x0, @ANYRES32, @ANYBLOB="2c005e8008000700bb0300000800050003000000080003003e3ed7c7080003000400000008000900030000000c005e8008000900ff070000"], 0x54}, 0x1, 0x0, 0x0, 0x20004000}, 0xd0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000003240), 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000007c0), 0x100000000002, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000900)={0x2, @pix={0x7, 0x8, 0x34324258, 0x4, 0x5, 0x7, 0xc, 0xfeedcafe, 0x1, 0x0, 0x2, 0x4}}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x2b0, 0x150, 0x150, 0x0, 0xf8010000, 0x380, 0x238, 0x238, 0x380, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x248, 0x2b0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'batadv0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x4}}}, @common=@inet=@sctp={{0x148}, {[], [], [], 0x5, [], 0x0, 0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) syz_emit_ethernet(0x83, &(0x7f00000003c0)=ANY=[@ANYBLOB="e10931d8640abbbbbbbbbbbb86dd60000000004d8800"], 0x0) syz_usb_connect$cdc_ecm(0x0, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109026e00010100200009040000ff020200000524060000052400ffff0d240f01010100000000fcff001524120f00a317a88b045e4f01a607c0ffcb7e392a1524129d55a317a88b045e4f01a607c0ffcb7e392a090581122000000000090582022000000000090503"], 0x0) 8m43.515425165s ago: executing program 5 (id=2499): r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) link(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, 0x0, 0x1, {0xffff}}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) 8m42.304593751s ago: executing program 5 (id=2500): r0 = syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[@ANYRES16], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000000)={0x20, 0x9, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) timerfd_create(0x8, 0x80000) r1 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) unshare(0x22020400) r2 = fsmount(r1, 0x0, 0x3) r3 = openat(r2, &(0x7f0000000680)='./file0\x00', 0x105c80, 0x22) fchown(r3, 0x0, 0x0) inotify_init1(0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)={0x140, 0x2a, 0xb, 0x0, 0x0, {0x8}, [@typed={0x4, 0x3}, @nested={0x128, 0x1, 0x0, 0x1, [@nested={0x121, 0xde, 0x0, 0x1, [@generic="73ee77f0d238ca193b38ca9fb61bf462c99d3013eb1aae24d54da25652b5d9eb3bcb3571", @generic="74ffb07acc07ce9d46da81076dafb795bc56adcad69006f7e7fbe79a7d220fb7f3a139c913e130599d22e7a1e3e559d872c6aa31c7d73497242e7e9db7e23727e05aad83e9fa958f670ac1c70a4e2aee21b7634e672c308384ebc466cf1f4c0c8f1df75450943c166aebf2e8a3260700654545de822e41bca6e9ba4a0bafda69e19de9327ef50400d37a0e37a24e7e0aa6516b4b78653b60053a41b7e8220f0d61b7cc70cac9812ad9c4cd71e1c62519d8e4b389f3017817a425d643bc37b8f057aef0591cfc434a689c791943e5e0087d9c17c59939702d90fae5593a1e3c3ba8a45c17a51f14c58104e63559b70391d1ce93ab22", @nested={0x4, 0x51}]}]}]}, 0x140}}, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x1, 0x8, 0x4, 0x20810, 0xffffffffffffffff, 0xa2, '\x00', 0x0, r5, 0x5, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002d0001000000000000000000040100800c0000000000000000000000140001"], 0x114}], 0x1}, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$cont(0x18, r9, 0x9, 0x400010000) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES16=r11, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600010000000800090001000000050002"], 0x44}}, 0x0) 8m39.460492566s ago: executing program 5 (id=2505): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCFLSH(r2, 0x8910, 0x4000000000000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_VP_INDEX(r6, 0x4068aea3, &(0x7f00000004c0)) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) chdir(&(0x7f0000000340)='./cgroup\x00') r9 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) getdents64(r9, &(0x7f0000000000)=""/168, 0xa8) tkill(0xffffffffffffffff, 0x1c) write$binfmt_script(r8, &(0x7f0000000040), 0x208e24b) 8m22.79142789s ago: executing program 39 (id=2505): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCFLSH(r2, 0x8910, 0x4000000000000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_VP_INDEX(r6, 0x4068aea3, &(0x7f00000004c0)) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) chdir(&(0x7f0000000340)='./cgroup\x00') r9 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) getdents64(r9, &(0x7f0000000000)=""/168, 0xa8) tkill(0xffffffffffffffff, 0x1c) write$binfmt_script(r8, &(0x7f0000000040), 0x208e24b) 6m3.759390613s ago: executing program 4 (id=2767): syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x7a, &(0x7f0000000500)=ANY=[@ANYBLOB="12015002020000202505a1a4400001020301090268000201b510010904000001020d0000052406000105240006000d240f0107000000030010000606241a0300200c241b0100090006fb420001090000020d00000904010102020d000009058202ff0300060d090503020002050003ae2935fc3829e9854260cf87b6b27ec918887b94207e3b27bf778dcf19a5d00ea49e9f14ead9f346940ad49c7444d2e989179cde7a21cc684e61f946ca9d47ab6fb0bb998b922b01c04cde28fb5e6a3477e94f0e"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000008e9d2b36273d583cecde6dba02903bf330dc0648616edd2a9b5ac14f37dcf5c206abb82199f32341c32a056c50fa9d012ff71a9bedd0d6de037923a5426a80a65face9ea55ae724d256527f0e2aaa363af92970a9b66f89d48a889e1403248070000008b567ea55b007bc0b7c21d55c35b42a506e7e200"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r4}, &(0x7f0000000080), &(0x7f0000000180)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r4}, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x8990, &(0x7f0000000180)={'ip6gre0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="23f7eb36000aed", @ANYRES32, @ANYRES32, @ANYBLOB="05000000020000000300"/28], 0x50) r6 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000100)=0x3) r7 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) recvfrom(r7, 0x0, 0x0, 0x0, &(0x7f0000005380)=@in6={0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xc41}, 0x80) syz_emit_ethernet(0x8e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) 6m0.247831261s ago: executing program 4 (id=2774): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x208, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updpolicy={0xb8, 0x15, 0xcb23c9c9931e99e9, 0x1, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}}}, 0xb8}}, 0x4000) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x18, 0x2, 0x0, "a427e6d400fd0000800000000000000200000000000700082000", 0xb5315258}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='\t'], 0xb0) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) r4 = dup3(r3, r2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000001c0)) r6 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10) flock(r6, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r8, r8, 0x0, 0x2) 5m55.967226223s ago: executing program 4 (id=2781): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$lock(r1, 0x5, &(0x7f00000007c0)={0x1, 0x2, 0x6, 0xffffffff}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000c000000180001801400020073797a5f74756e00000000000000000014000380100003"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x480) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) mprotect(&(0x7f000021f000/0x4000)=nil, 0x4000, 0x4) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f0000000240)="0c268a937f1f6588b967481241ba78600e34f65ac618ded89764aa7c58c6d9fca94895abeaf4b4834ff96bbcecc7a95425a3a07e758044ab4ea6f7c555d88fecf98345b8fda1329d0f9d31030aca3a2498906edac630fd74c012df9c259612072d78b0f1d18336405051781b1de8b06663583e87503103db819a3aafd0b9e047a545d07118026f732d0a09f5620bd398c9cf30428605126a52056cb1b55b1224ceb602", 0xa3, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000000)=0x5, 0x4) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000400000000000000090000003c0003"], 0x50}}, 0xc800) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001800), 0x80000, 0x0) read$FUSE(r6, &(0x7f0000003380)={0x2020}, 0xae9) 5m51.628683422s ago: executing program 4 (id=2786): openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key$user(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000002c0), 0x80) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x20044080) r6 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r7 = add_key$user(&(0x7f0000000080), 0x0, &(0x7f00000001c0), 0x0, r6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r7}) keyctl$KEYCTL_MOVE(0x1e, r4, 0xffffffffffffffff, r6, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) 5m50.193931071s ago: executing program 4 (id=2791): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x128, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0xb0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffc}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x44050}, 0x5) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x280, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x34, r2, 0x1, 0x0, 0x0, {0x36}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000200)={{0x1, 0x80a0000, 0xf, 0x9, 0x7, 0x1, 0x3, 0xb6, 0x5, 0x1, 0x6, 0xf}, {0xd000, 0x0, 0x10, 0x9, 0x1, 0x2, 0x1, 0x3, 0xf, 0xc, 0x7, 0x4}, {0x4000, 0x2000, 0x8, 0x6, 0xf0, 0x7, 0x7, 0x8, 0x3, 0x7, 0x10, 0xa8}, {0x2000, 0x3000, 0xb, 0x9, 0x2, 0x3, 0x9, 0x6, 0x4, 0x7, 0x8, 0xb0}, {0xeeee0000, 0xd000, 0x9, 0x8, 0x4, 0x38, 0xe6, 0xa, 0x2, 0x6, 0x1, 0xb}, {0xeeff8002, 0x8000000, 0x8, 0x0, 0x7, 0x42, 0x6, 0x0, 0xc1, 0x7f, 0xff, 0x26}, {0x4000, 0x2000, 0x4, 0x2, 0x6, 0x7, 0x9d, 0x0, 0x21, 0x2, 0x1, 0xe}, {0x0, 0x3000, 0xb, 0xbc, 0x0, 0x3, 0x0, 0x1, 0x4, 0x80, 0x6}, {0x80a0000, 0x8}, {0x4, 0xfffb}, 0x6, 0x0, 0x1, 0x14344, 0x3, 0x6001, 0x0, [0x10000, 0x21, 0x80000000, 0x7]}) 5m50.02188635s ago: executing program 4 (id=2792): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x81) r1 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYRESDEC], 0x20) syz_usbip_server_init(0x1) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000000)={0x2c, &(0x7f0000000040)={0x20, 0x12, 0x7, {0x7, 0x1, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) write$tcp_congestion(r3, 0x0, 0x0) close(r0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001940)=ANY=[@ANYBLOB="5800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="018100008d020600300012800b000100697036746e6c000020000280050009000400000014000200fe8000000000000000000000000000bb080004000063e9"], 0x58}}, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x1000000, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, 0xb5, &(0x7f00000001c0)=[{}], 0x8, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x49, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', r6, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 5m34.825065813s ago: executing program 40 (id=2792): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x81) r1 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYRESDEC], 0x20) syz_usbip_server_init(0x1) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000000)={0x2c, &(0x7f0000000040)={0x20, 0x12, 0x7, {0x7, 0x1, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) write$tcp_congestion(r3, 0x0, 0x0) close(r0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001940)=ANY=[@ANYBLOB="5800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="018100008d020600300012800b000100697036746e6c000020000280050009000400000014000200fe8000000000000000000000000000bb080004000063e9"], 0x58}}, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x1000000, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, 0xb5, &(0x7f00000001c0)=[{}], 0x8, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x49, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', r6, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3m38.433925588s ago: executing program 9 (id=3139): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05", @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB], 0x48}}, 0x0) r4 = syz_usb_connect$uac1(0x2, 0xfb, &(0x7f0000000400)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe9, 0x3, 0x1, 0xb0, 0x0, 0xf2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x7}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x304, 0x5, 0x3, 0x7}, @selector_unit={0x9, 0x24, 0x5, 0x2, 0xfd, "fe328659"}, @processing_unit={0xb, 0x24, 0x7, 0x3, 0x0, 0x1, "f6a16454"}, @processing_unit={0x9, 0x24, 0x7, 0x3, 0x3, 0x2, '(\v'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xd, 0x2, 0x1001}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x3ff, 0x5, 0x9, "0224"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0xb, 0x1, 0x6a, 0x4, "23f69596dc29e9"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x59, 0x2, 0x4, 0x4}, @as_header={0x7, 0x24, 0x1, 0x0, 0xd, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xe, 0x3, 0x1, {0x7, 0x25, 0x1, 0x3, 0xc, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x40, 0x4, 0x6, 0x2}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x200, 0x7fff, 0x0, "610b32da459a"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x1, 0x1, 0xc, 0x5, "", "fb63"}, @as_header={0x7, 0x24, 0x1, 0xe6, 0xff}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x63, 0x3, 0x8a, 0x7, "17ca1de4"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x81, 0x8, 0x8, {0x7, 0x25, 0x1, 0x4, 0xe, 0x2}}}}}}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x201, 0x2, 0x2, 0xf, 0x40, 0x3}, 0x4c, &(0x7f0000000300)={0x5, 0xf, 0x4c, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x5, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0xe, "113948e2ae44455a11c0cf097b137484"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x15, 0x9, 0x2d, 0x9, 0x4}, @wireless={0xb, 0x10, 0x1, 0x4, 0xee, 0x9, 0x2, 0x8, 0x7}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0xff, 0xf0, 0x5, 0x1}, @wireless={0xb, 0x10, 0x1, 0x4, 0x1, 0x1, 0x5, 0x9, 0x5}]}, 0x8, [{0x6a, &(0x7f0000000500)=@string={0x6a, 0x3, "a393c413e4f02d12ed6b7970acb3fa32e7f811d2cc05c7e100c746effc6a5e8c4dfd5a7ef0aa2d015a7c4c5b16f31eb194b25e8fc4176d23e1948b5f322b63402aa68110e94917c091bd0d16ae2e80562a69a5e55dc5d4639a6f3a08cfdebfd72d53c1af81613650"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x40b}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x2409}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x439}}, {0x87, &(0x7f00000006c0)=@string={0x87, 0x3, "3a50efcca13d00d871a0b8999c1418d676e24205287d663c7758a06b4918e578f0bd4eec3921d0e403a9074b3884aa72fb62bb8a576d600e4b2b6bc62dad513253362785bb4254467b68c94ab909ea957d1fd225e58a20374eb42c302e3bef70aef73fe364d06474fcb4fc6d977c72cb4a3fba374eea05a8ec56b7b5739e0e62d9e21fad39"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x180a}}, {0xcf, &(0x7f0000000800)=@string={0xcf, 0x3, "90fc848509ec326dea2eab308360228b23612757de38894e902fa42116738faa07ce9fa9439a72f9d70fcbc9043472e11002bb5465e7521bea8bc5e873410ba7284f897073c69466abb4b1f6f05c5d3fbb505c216a184a60f36a2444ecbc1f1c8f88c456ac1b617629f1afad02233e0c959b3294b5e45a3b5836239aa0299b6b5f161602ad566a3d8b95b4fa14b8ae77f348969f12a0b0b0a82760291ec0d26c9231943291b40c241bc0bc673cc82abcac572bd02051ba1f457797e3906be3339e4b609fecb8941b8bf8159b22"}}]}) syz_usb_control_io(r4, &(0x7f0000000c40)={0x2c, &(0x7f0000000980)={0x0, 0x23, 0x101, {0x101, 0x11, "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"}}, &(0x7f0000000ac0)={0x0, 0x3, 0x89, @string={0x89, 0x3, "c4d62ccb9fd9c5150b397e6366a42014f81244b3d3f73b79e4da272332560936bf8c6ac756dec2f198524067b05d16a76045c9a5511d3d88e5eb3f4b193210f5639c88e92e7faf4028dfc6b444b0673914b9c265a16d2c17632e6db09c9242dd6df71adebe5589c7dafdb2699cac07eb598e6efbc772624aef4922cffa075252ec3ab6c4a1f024"}}, &(0x7f0000000b80)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000bc0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x0, 0x0, 0x1, "4886c8b8", "9e444d72"}}, &(0x7f0000000c00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6c, 0x3, 0x4, 0x7, 0x2, 0x5, 0xce}}}, &(0x7f0000001100)={0x84, &(0x7f0000000c80)={0x40, 0x39, 0x90, "b2d81db4c65b5ab84db9c6ebdef88e7ccbfbc26b9a26a5c17ccd209e251d6487dd74c73aee34cc0ceaf6983952a5ac1e69cf94b4a3b6ad05e4d08a82d9561147890ccd75a68203357305fbbdb69318d9e5304933d9ab7cbc1f54beba6ec98ed018965e12f8013d5931b387c376d4bf40821c70df0bddcbd66c4c7243841bc986cbf35dbb88d11a28533defc6d14c3594"}, &(0x7f0000000d40)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000d80)={0x0, 0x8, 0x1, 0x89}, &(0x7f0000000dc0)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1e0, 0x1}}, &(0x7f0000000e40)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000e80)={0x40, 0x9, 0x1, 0xea}, &(0x7f0000000ec0)={0x40, 0xb, 0x2, "1fef"}, &(0x7f0000000f00)={0x40, 0xf, 0x2, 0xfff7}, &(0x7f0000000f40)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, &(0x7f0000000f80)={0x40, 0x17, 0x6, @local}, &(0x7f0000000fc0)={0x40, 0x19, 0x2, 'iv'}, &(0x7f0000001000)={0x40, 0x1a, 0x2, 0xc}, &(0x7f0000001040)={0x40, 0x1c, 0x1}, &(0x7f0000001080)={0x40, 0x1e, 0x1, 0xc}, &(0x7f00000010c0)={0x40, 0x21, 0x1}}) sendmsg$can_bcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="0600"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000030000b16df9f80fedfa20"], 0x48}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000040000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000014000480080002403734c64208000140000000051400001100010000000000000000000000000a00"], 0xdc}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xa4}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4040044) 3m34.308742042s ago: executing program 9 (id=3144): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_async', 0x80802, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r6, r7}, 0xc) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0xffffffff, r7}, 0x38) io_setup(0xb4, 0x0) r8 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r8, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 3m30.896824209s ago: executing program 9 (id=3147): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00.__\x00..\x00'/32], 0x0, 0x20, 0x0, 0x1, 0x9, 0x10000, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x14) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r4, &(0x7f0000000540)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x0, 0x2000000}}}, 0x10, 0x0, 0x0, 0x0, 0x40, 0x80}, 0x44895) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x62, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109025000010100000009040000160202ffff052406000005240000000d240f0100000000000000000004240200"], 0x0) r6 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r5) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r6) keyctl$KEYCTL_MOVE(0x1e, r6, r6, r5, 0x0) 3m26.874137357s ago: executing program 9 (id=3154): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x11080, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002d0001fffffff3000000000001"], 0x114}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000014c0)=[{{0x0, 0x0, 0x0}, 0xfffffffe}], 0x1, 0x10002, 0x0) 3m26.496045384s ago: executing program 9 (id=3156): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) write$P9_RVERSION(r0, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRESHEX], 0x15) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000080), &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240), 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getrusage(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) setitimer(0x1, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x10, &(0x7f0000000100)=0x1e79, 0x4) write$FUSE_DIRENTPLUS(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) 3m23.404173918s ago: executing program 9 (id=3163): socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)={0x20, 0x12, 0x7, {0x7, 0x1, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) close(0x3) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) close(0x3) 3m21.984835136s ago: executing program 41 (id=3163): socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)={0x20, 0x12, 0x7, {0x7, 0x1, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) close(0x3) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) close(0x3) 13.16569491s ago: executing program 3 (id=3581): socket(0x2, 0x3, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mm_vmscan_write_folio\x00', r0, 0x0, 0x800000}, 0x18) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) pipe2$9p(&(0x7f0000000040), 0x800) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r1, 0x7b1, &(0x7f0000000280)={0x0, 0x6, 0x0, 0x3159}) syz_emit_ethernet(0x4e, &(0x7f0000002600)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty, {[@cipso={0x86, 0x17, 0x2, [{0x1, 0x11, "00410100000000d7d9335e642519d9"}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 13.023317602s ago: executing program 0 (id=3582): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) socket$kcm(0x29, 0x5, 0x0) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000002c0)={'veth1_vlan\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x29, 0x11, 0x80000001, {0xd, @ether_spec={@empty, @remote, 0x10}, {0x0, @remote, 0xf, 0x5, [0x8000, 0x9]}, @usr_ip6_spec={@local, @remote, 0xcce1, 0xff, 0xfe}, {0x0, @random="b7092622f8be", 0x10, 0x8, [0x47680000, 0x7]}, 0x2, 0x8000}}}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r8, 0x4, 0x2, 0x0, 0x0, [0x0], [], [0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x2aa, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000200)={r9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r10}) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r12, 0x1, 0x31, &(0x7f0000001600), 0x4) r13 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r13, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 11.520213918s ago: executing program 0 (id=3585): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x1fffff, 0x10100, 0x0, 0x16e}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) r5 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f00000003c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000040)={'\x00', 0x7ff, 0x1, 0xc, 0xb, 0x59c, 0xffffffffffffffff}) r7 = pidfd_getfd(0xffffffffffffffff, r6, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000280)={[0xebcc]}, 0x0, &(0x7f0000000380)={r8, r9+10000000}, 0x8) accept4$rose(r7, &(0x7f00000000c0)=@short={0xb, @dev, @bcast, 0x1, @default}, &(0x7f0000000100)=0x1c, 0x80400) ioctl$SG_BLKTRACETEARDOWN(r6, 0x1276, 0x0) r10 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) ioctl$CEC_ADAP_S_LOG_ADDRS(r7, 0xc05c6104, &(0x7f0000000200)={"549e2b7b", 0x1000, 0xb9, 0xff, 0x10000, 0xe, "2e0e8ce2761f8b85e792bbdc38e3ae", "3ff12350", "594b1449", "1ed613eb", ["64f50cc4fe4643390d65e7f6", "31f2d5909a40b545460e9989", "f1d83a4571e89567709fb412", "ee623a61b6b00c4117030c75"]}) write$binfmt_script(r10, &(0x7f00000003c0)={'#! ', './file0', [{0x20, '\x00\x95\x9f\x9a\xe7\xd7\x18\xbeJ\x1eS\xc5\xceh\xe8\xdbs\xaf\x198\xb4!\x81C)\xd4\f\xad0\'\x1d\xe7\xa45d9-\x0f\xfe<\xc6\xcen)\xd8\x88O2AE\xcb\xb0\x1f\x85~\xda\xe2\v^*\x1cj\x8a\xd4\x12\x1b\x99\x1c{\xb9'}, {0x20, '}%\\'}, {0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}, {0x20, '\xd8{*,%))'}, {0x20, '\x89\xb1w\x1f\xa9[\x15\xf0\x7f=m?w\x05\xe5\xf3\xa3a\xf9\x1fTZ*\xc4\xe6>\x98T\x80z\xd3b{\xf9-\xc0\x96Z\xd3$\xcc\xa2>\xfd\xc7\xb8C\x00\x00\x00\x00\x00\x00\x00\x88\xd9\xaef\xeb\x9a\xad?\xe8%_\xa3\x16\x02\xe7\xcf_\x9d\x9f#S\xdd\xde\x95C\xf4D*$\x89t,\xf60zu\x81\xb9r:\xb9\xae$\x02j\x80\xf1A\xc1\xef-?\xc3/@\"\xd8\x82\xe1\xef\xd0S\x98\xf7s\x1a\xab\xe5^-'}, {0x20, ' '}], 0xa, "bccf0d17356d818a72dbf639276c97d53553044da95c999a14b1b561c38ff9c514d8a840f86de7a4c0457fa68e0276a27d1b345c87b9ad8d4bec39453f8ef3d98328a6cdd5edc94058631c1e03625e30ff6cf9c259e25c7c1a9d79f412ae96977505e52150f5b6dae2aa99b1bbc19253a46be21087f3df1b05940d877395961233598165289701c46d7c9ca0673b824ddfb5063e1a3651aae4ffd6b0f9a8b300e31b66268ce053745f1f6741f28aeaab786f0f274ec3b40b85559d8c1395e3ca1a2b960cfb701c214525d5a939f3de575e22d522fbfe55ba0b"}, 0x1ca) 11.469890984s ago: executing program 6 (id=3586): socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) syz_open_procfs(0x0, &(0x7f0000000280)='attr/fscreate\x00') openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 11.469185506s ago: executing program 3 (id=3587): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) socket$kcm(0x29, 0x5, 0x0) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000002c0)={'veth1_vlan\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x29, 0x11, 0x80000001, {0xd, @ether_spec={@empty, @remote, 0x10}, {0x0, @remote, 0xf, 0x5, [0x8000, 0x9]}, @usr_ip6_spec={@local, @remote, 0xcce1, 0xff, 0xfe}, {0x0, @random="b7092622f8be", 0x10, 0x8, [0x47680000, 0x7]}, 0x2, 0x8000}}}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r8, 0x4, 0x2, 0x0, 0x0, [0x0], [], [0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x2aa, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000200)={r9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r10}) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c) r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r12, 0x1, 0x31, &(0x7f0000001600), 0x4) r13 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r13, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 10.779253105s ago: executing program 6 (id=3590): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$unix(r1, &(0x7f00000020c0)=[{{&(0x7f00000050c0)=@file={0x0, './file0/file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x44081}}, {{&(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x117, 0x2, [r1]}}], 0x18, 0x850}}], 0x2, 0x88) 10.143971607s ago: executing program 3 (id=3591): syz_usb_connect(0x0, 0x3f, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback={0x0, 0x1ff0000aa}, @private1}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000005500010e0e0000000000000007000000", @ANYRES32, @ANYBLOB=' '], 0x38}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x1c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 9.559824067s ago: executing program 6 (id=3592): openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) mount(&(0x7f0000000300)=@sg0, 0x0, &(0x7f00000003c0)='xfs\x00', 0x0, &(0x7f0000000000)='usrquota') r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x141000, 0xc9) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040801}, 0x4000054) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id, 0x80, 0x0}, 0x804) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000740)=""/189, 0xbd}], 0x1}, 0x0) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1223, 0x3f07, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0xc, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x1, 0x1, 0x7fffffff}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x101100, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000280)={0x24, &(0x7f0000000380)={0x20, 0xb, 0xe9, {0xe9, 0x9, "e912f0d802f1dbd033dcac16170f3fa47b77e316bb61cb02e962c69d35ae9074566f669ffff42407f7ab947cd4d65a9edb9b9739d0b8a7569a8de493c29016abde7bf039eef3bab94a66af57d40f7cefeb8ecdadaec864c1ce25333129267261b96e90cc4818af5a2d3cf4769845c71933e9723955426e0ca40983710e89381249188eddf0723cf51e822f0b69bb18b7d53004bd55feb83063a294e735ec46804b8e044f2523272740b32a270b3e5f9b9e0ccc755933e6a76b44b8b3e87962606432649f3c3fc205eb812b1fb81353160c7d440bcf2c54c3ee0f8f7cb4f1effda5648d78f22a3b"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x83e}}, &(0x7f00000001c0)={0x0, 0x22, 0x18, {[@main=@item_4={0x3, 0x0, 0xc, "9243bd3e"}, @local=@item_4={0x3, 0x2, 0x8, 'BvgZ'}, @main=@item_012={0x2, 0x0, 0xa, "5a80"}, @global=@item_4={0x3, 0x1, 0x7, "d8b798a4"}, @global=@item_4={0x3, 0x1, 0xb, "11730a63"}, @main=@item_012={0x0, 0x0, 0xa}]}}, &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x401, 0xab, 0x1, {0x22, 0xfb8}}}}, &(0x7f0000000680)={0x2c, &(0x7f0000000480)={0x0, 0xb, 0x91, "2972933871be48adbb9ee612a623315302ef69fe8b84da0d791de7be4e375e1e7397d39ee02a236a034030dd5bf3f8c3a060169d4a52de5442cce245e6cdb5b58c568573ed10ae3ef23855ae8c4fc1e4ea3ad33fdfa72e3162247e3c90912c74e3bf7ba0f700064fb1bff44d7e8f8ccfc0ce988e867275f2e9bedcc7adfa966a2033fe56e80a8aebef83e01cc7f39b2d9e"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xdd}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000580)={0x20, 0x1, 0xb0, "4f0bebedfdaaac1e7ab4509bb7880e32a8cdaafb57b5040972c62474a08dcdbc671e69430a5cbf8a87bc3d41a5518ef1305fa0aeddcb8dc6de6cf9c0539bac1cadf841be932680177890250b1fbfb461678151e24b9b755315aee891a178d65dac014bc9b690564e91660519c0e4880e31453d34a1e0b74552565ed619cdedf0ca314813d41361e516a59523f9433172007607ee14122178a49ce50228dffface457c6cea1b68ade61f194018e9010eb"}, &(0x7f0000000640)={0x20, 0x3, 0x1, 0x2}}) r5 = openat$smackfs_ipv6host(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_ipv6host(r5, &(0x7f0000000140)=@l2={{0x7, 0x3a, 0x9, 0x3a, 0x9, 0x3a, 0x9, 0x3a, 0x4080, 0x3a, 0xf54, 0x3a, 0x8, 0x3a, 0x38}, 0x2f, 0x10, 0x20, '(%\''}, 0xb1) syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f0000000800)=ANY=[@ANYBLOB="400a45000000452261639c545d2ce9daa7602630c686377369efa824c337939610aab1b0d2363bdd25d9b77c5bdfd51207b2908fceb19ba6613600e553d7b291cbe2bebf07abfe506392eca6741b39ad760c372aa9ff93e70e79de6e1d05499571a0fd74de3ef2530c3c176106f8aff856ceb8bd739e9d627cf23eb42b3e8293401644582550ebfc26873723c48fd9e6ead697d8864a6098e0ff3ca7cdc65230e81bbba19a704a2330cda3abf66d6fdc165b99bfa3d582be246ca4aa37c42dcd4f087182053f72f25ee734fcc7083dba52a6392b0023000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) 9.317145222s ago: executing program 0 (id=3593): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000140), 0x4) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x4040040) r1 = socket$l2tp6(0xa, 0x2, 0x73) syz_open_dev$evdev(0x0, 0x3, 0xf42afa2682ca92ca) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r3}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x2000000000000147, &(0x7f00000002c0)=ANY=[], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0xfffffffffffffffc}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="360300"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00acf600"/28], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000cfa71ab79fa83a4307000000e2ca3feeaf957aebed3f6c7a98782087e2e99591519c5fa6d9a644769a39d02f0eee7332eca3f559f939d407065535772f94fcd1862de66b4bdc7616717a73a213061fc9974ceb62995a1bdbb2337bf98b9912df865f3bdbcee19b330702d854b829abb1d61b73234493ea45f96f90f1fe92de4af016b0"], 0x48) sendmsg$inet6(r1, &(0x7f0000000940)={&(0x7f0000000340)={0xa, 0x4e21, 0xdb4f, @private0={0xfc, 0x0, '\x00', 0x1}, 0x100}, 0x1c, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="3e89c774ea0737f582"], 0x18}, 0x800) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000400)=@buf) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xf, 0x9, &(0x7f0000000400)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2b) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000440)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x42}}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000d77b3e09d5cdfcb0b86cdd170071174400"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x1c) ioctl$sock_ifreq(r0, 0x8936, &(0x7f0000000000)={'batadv0\x00', @ifru_addrs=@sco={0x1f, @none}}) 8.108926721s ago: executing program 0 (id=3595): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, r3}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000080)={0xc, 0x8, 0xfa00, {&(0x7f0000000400)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="00000000efffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$nl_generic(0x10, 0x3, 0x10) 8.108548044s ago: executing program 7 (id=3596): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x40}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x103b02, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000300)={r1, 0x8001, 0x7, 0x2}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000440)='nilfs2\x00', 0x0) 8.10050088s ago: executing program 3 (id=3597): syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000904000001020d00000524060001052400a9b30d240f01020000000300ff000606241a0c001407240a050905580c241b04000200a90c090003042402020424020004fc020244"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtaction={0x15c, 0x30, 0x1, 0x0, 0x0, {}, [{0x148, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x10000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x100, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0xba, 0x6, "aadf28d3b8a7c5dc9a7e041b7be9bb9da580151e59edca3aacb079e58592624513eb755bf0d7e7e5a976155da3bf891412374008b60a919e6fb82c29726594e62594de5121fd37cf0839121e5d06bf810fcbd867e07eccc09190bb096d8a1f6d838c9122b18f186869b0170f86d4bbc28718f3d9052325c176ede0ae5c63e05514ace48fbe35ac52d54f899e981e300f4e8fc2468d79d9d7fa328a5fb50da88673257944d2bfdec1601345164e96ab097ed2e7a6cf55"}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0xc0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) semget$private(0x0, 0x7, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000180)={@remote, 0xe}) semctl$SETALL(0x0, 0x0, 0xe, 0x0) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r5, 0x40045567, 0x0) write$uinput_user_dev(r5, &(0x7f0000000ec0)={'syz0\x00', {}, 0x0, [0x0, 0xe74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0xb16, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x100e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbcd5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0xc63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x1000, 0x0, 0x0, 0x80000003, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) write$uinput_user_dev(r5, &(0x7f0000000a40)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff], [0x0, 0x3, 0x6, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd5], [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000240), &(0x7f0000000280)=0x4) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) 7.967113641s ago: executing program 7 (id=3598): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x37) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff0000000000", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, 0x0, &(0x7f00000002c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10, 0x0, 0x0, 0x2}]}}, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000080)=0x8, 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'wg2\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)='7', 0x2, 0x0, &(0x7f0000000040)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @random="bf73a9e561c5"}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="b3095d020000f6ffffff00000000afe54c460000", @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0xc, &(0x7f00000019c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa2, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYRES32=r10, @ANYRES32=r0], 0x10) 6.561432167s ago: executing program 0 (id=3599): socket$nl_generic(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x402100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000"]) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000300), 0xc082, 0x0) 6.184033391s ago: executing program 7 (id=3601): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x37) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) r1 = syz_io_uring_setup(0x4aa, &(0x7f0000000380)={0x0, 0xfffffffc, 0x10100, 0x10010000, 0x13a}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8126}}) io_uring_enter(r1, 0x8038d5, 0x416e, 0x0, 0x0, 0x0) 5.388645442s ago: executing program 7 (id=3602): sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020400000a0000000000000001000000000000000500000000a0030006000000ff00024a000000ac1414ff0000000000000000030005002b000000020000000000000000000000000011"], 0x50}, 0x1, 0x7}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000140)='source\x00\xb5\x838\x8d\xbd\xdf\xfe\x9a\xf2RM\xb6\xe0\xf9\xac\xa2\x06\x1cD\xe7C\xa5<\xd1=\x93\xf7\xf7Sn\xcb\xd5\xa7\xc9@D\x81\xff\xaar\xc8\xa9\x13\b\x9a\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f00000001c0)='.\n#)|.\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKAq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x9aM\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n://\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x8d\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcdjjBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xd7`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6g\x00\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997AOJ=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c', 0x0) (fail_nth: 4) writev(0xffffffffffffffff, &(0x7f0000000040), 0x0) 5.353488342s ago: executing program 6 (id=3603): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x27b8, 0x1ed, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, '\x00\x00@\x00'}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000007c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000006c0), 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x668041, 0x0) sendmsg$can_raw(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@can={{0x3, 0x1, 0x1, 0x1}, 0x5, 0x1, 0x0, 0x0, "c089a8b36c6772b5"}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x8000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x2f, 0x0, 0x2f, 0x0, @empty=0x10000e0, @multicast1}}}}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYRES8=r1], 0x78) 3.468097524s ago: executing program 7 (id=3605): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x3c, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x4}]}, 0x3c}}, 0x0) 2.90892692s ago: executing program 7 (id=3606): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000003d000900000000000000000001000000040000001c0001800e0010800c000f00090000000000000008000f00e00000010800020098ad3ad29adc3da1985a4501571a4f69fd704ebd048160e3b78a20e5b61520379b57a080055e7c45ebf353197e0ac496e59607356fef20cab135b4baabe6e083de278c727eef3cc8f7c4db739cd0b0cd1dd3f59da92b62d14b1a5e2dd9c49d0c3e54ae691bd4ca515b", @ANYRES64=r0, @ANYRESHEX=r0], 0x3c}}, 0x40044) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x668, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x3a5182, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000003c80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x400c890}, 0x40800) close(r4) socket$unix(0x1, 0x5, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000340), 0xa, 0x800) ioctl$USBDEVFS_SETINTERFACE(r6, 0x41045508, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) r8 = socket(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001440)=@newtaction={0x18, 0x31, 0x300, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x4892) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="000427bd7000fddbdf2510000000"], 0x14}, 0x1, 0x0, 0x0, 0x20028000}, 0x4000010) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="8f0cb97907081175f37538e486dd", @ANYRESOCT=r10], 0xfdef) syz_open_dev$sndctrl(&(0x7f00000001c0), 0xffffffffffffff01, 0x80800) write$cgroup_subtree(r1, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0xfdef) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000140)=0x1) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES8], 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) 2.607030488s ago: executing program 1 (id=3607): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x4) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x4040040) r1 = socket$l2tp6(0xa, 0x2, 0x73) syz_open_dev$evdev(0x0, 0x3, 0xf42afa2682ca92ca) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r3}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x2000000000000147, &(0x7f00000002c0)=ANY=[], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0xfffffffffffffffc}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="360300"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00acf600"/28], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000cfa71ab79fa83a4307000000e2ca3feeaf957aebed3f6c7a98782087e2e99591519c5fa6d9a644769a39d02f0eee7332eca3f559f939d407065535772f94fcd1862de66b4bdc7616717a73a213061fc9974ceb62995a1bdbb2337bf98b9912df865f3bdbcee19b330702d854b829abb1d61b73234493ea45f96f90f1fe92de4af016b0"], 0x48) sendmsg$inet6(r1, &(0x7f0000000940)={&(0x7f0000000340)={0xa, 0x4e21, 0xdb4f, @private0={0xfc, 0x0, '\x00', 0x1}, 0x100}, 0x1c, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="3e89c774ea0737f582"], 0x18}, 0x800) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000400)=@buf) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xf, 0x9, &(0x7f0000000400)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2b) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000440)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x42}}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000d77b3e09d5cdfcb0b86cdd170071174400"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x1c) ioctl$sock_ifreq(r0, 0x8936, &(0x7f0000000000)={'batadv0\x00', @ifru_addrs=@sco={0x1f, @none}}) 2.407958001s ago: executing program 3 (id=3608): syz_usb_connect(0x0, 0x3f, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback={0x0, 0x1ff0000aa}, @private1}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000005500010e0e0000000000000007000000", @ANYRES32, @ANYBLOB=' '], 0x38}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x1c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.255707652s ago: executing program 1 (id=3609): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, r3}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000080)={0xc, 0x8, 0xfa00, {&(0x7f0000000400)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="00000000efffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$nl_generic(0x10, 0x3, 0x10) 1.151383253s ago: executing program 1 (id=3610): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x4}]}, 0x3c}}, 0x0) 1.032666406s ago: executing program 1 (id=3611): r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x5, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000480)={0x1, @pix_mp={0x99, 0x1d2c, 0x494e4f4b, 0x3, 0x1, [{0x2, 0x7}, {0x9, 0xfb9}, {0x10001}, {0x6, 0x7}, {0x5, 0x3}, {0x7, 0x3}, {0xfffffffe, 0x6}, {0x1, 0xd9}], 0x5e, 0x9, 0x2, 0x2, 0x6}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x103, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2400000026000100000000000000000008000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32], 0x24}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x4, 0x1000085}, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r5, &(0x7f0000019680)=""/102384, 0x18ff0) fremovexattr(0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) set_mempolicy(0x3, &(0x7f0000000d80)=0x7, 0x7f) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000600)) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000080)="290003000100", 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0xc0686611, &(0x7f0000000180)={0x900, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4188aec6, &(0x7f0000000040)={0x5, 0x0, 0x6}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 844.019929ms ago: executing program 6 (id=3612): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x37) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) r1 = syz_io_uring_setup(0x4aa, &(0x7f0000000380)={0x0, 0xfffffffc, 0x10100, 0x10010000, 0x13a}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8126}}) io_uring_enter(r1, 0x8038d5, 0x416e, 0x0, 0x0, 0x0) 312.076401ms ago: executing program 3 (id=3613): openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) mount(&(0x7f0000000300)=@sg0, 0x0, &(0x7f00000003c0)='xfs\x00', 0x0, &(0x7f0000000000)='usrquota') r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x141000, 0xc9) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040801}, 0x4000054) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id, 0x80, 0x0}, 0x804) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000740)=""/189, 0xbd}], 0x1}, 0x0) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1223, 0x3f07, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0xc, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x1, 0x1, 0x7fffffff}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x101100, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000280)={0x24, &(0x7f0000000380)={0x20, 0xb, 0xe9, {0xe9, 0x9, "e912f0d802f1dbd033dcac16170f3fa47b77e316bb61cb02e962c69d35ae9074566f669ffff42407f7ab947cd4d65a9edb9b9739d0b8a7569a8de493c29016abde7bf039eef3bab94a66af57d40f7cefeb8ecdadaec864c1ce25333129267261b96e90cc4818af5a2d3cf4769845c71933e9723955426e0ca40983710e89381249188eddf0723cf51e822f0b69bb18b7d53004bd55feb83063a294e735ec46804b8e044f2523272740b32a270b3e5f9b9e0ccc755933e6a76b44b8b3e87962606432649f3c3fc205eb812b1fb81353160c7d440bcf2c54c3ee0f8f7cb4f1effda5648d78f22a3b"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x83e}}, &(0x7f00000001c0)={0x0, 0x22, 0x18, {[@main=@item_4={0x3, 0x0, 0xc, "9243bd3e"}, @local=@item_4={0x3, 0x2, 0x8, 'BvgZ'}, @main=@item_012={0x2, 0x0, 0xa, "5a80"}, @global=@item_4={0x3, 0x1, 0x7, "d8b798a4"}, @global=@item_4={0x3, 0x1, 0xb, "11730a63"}, @main=@item_012={0x0, 0x0, 0xa}]}}, &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x401, 0xab, 0x1, {0x22, 0xfb8}}}}, &(0x7f0000000680)={0x2c, &(0x7f0000000480)={0x0, 0xb, 0x91, "2972933871be48adbb9ee612a623315302ef69fe8b84da0d791de7be4e375e1e7397d39ee02a236a034030dd5bf3f8c3a060169d4a52de5442cce245e6cdb5b58c568573ed10ae3ef23855ae8c4fc1e4ea3ad33fdfa72e3162247e3c90912c74e3bf7ba0f700064fb1bff44d7e8f8ccfc0ce988e867275f2e9bedcc7adfa966a2033fe56e80a8aebef83e01cc7f39b2d9e"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xdd}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000580)={0x20, 0x1, 0xb0, "4f0bebedfdaaac1e7ab4509bb7880e32a8cdaafb57b5040972c62474a08dcdbc671e69430a5cbf8a87bc3d41a5518ef1305fa0aeddcb8dc6de6cf9c0539bac1cadf841be932680177890250b1fbfb461678151e24b9b755315aee891a178d65dac014bc9b690564e91660519c0e4880e31453d34a1e0b74552565ed619cdedf0ca314813d41361e516a59523f9433172007607ee14122178a49ce50228dffface457c6cea1b68ade61f194018e9010eb"}, &(0x7f0000000640)={0x20, 0x3, 0x1, 0x2}}) r5 = openat$smackfs_ipv6host(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_ipv6host(r5, &(0x7f0000000140)=@l2={{0x7, 0x3a, 0x9, 0x3a, 0x9, 0x3a, 0x9, 0x3a, 0x4080, 0x3a, 0xf54, 0x3a, 0x8, 0x3a, 0x38}, 0x2f, 0x10, 0x20, '(%\''}, 0xb1) syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f0000000800)=ANY=[@ANYBLOB="400a45000000452261639c545d2ce9daa7602630c686377369efa824c337939610aab1b0d2363bdd25d9b77c5bdfd51207b2908fceb19ba6613600e553d7b291cbe2bebf07abfe506392eca6741b39ad760c372aa9ff93e70e79de6e1d05499571a0fd74de3ef2530c3c176106f8aff856ceb8bd739e9d627cf23eb42b3e8293401644582550ebfc26873723c48fd9e6ead697d8864a6098e0ff3ca7cdc65230e81bbba19a704a2330cda3abf66d6fdc165b99bfa3d582be246ca4aa37c42dcd4f087182053f72f25ee734fcc7083dba52a6392b0023000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) 252.065225ms ago: executing program 0 (id=3614): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRESHEX], 0x15) r0 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000080), &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240), 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getrusage(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) setitimer(0x1, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x10, &(0x7f0000000100)=0x1e79, 0x4) write$FUSE_DIRENTPLUS(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r0, 0x0, 0x0) utime(&(0x7f0000000200)='./file0\x00', 0x0) syz_open_dev$video4linux(&(0x7f00000001c0), 0x1, 0x14bd00) 153.405454ms ago: executing program 6 (id=3615): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0000000206010800000000000000000100000005000500050000000900020073797a3200000000050005000100000005000500020000000c00078008000b400000000116000300020073683a6e65742c706f72742c6e65740000002a050dd3f6e256c207bb7e0a9fef"], 0x5c}, 0x1, 0x0, 0x0, 0x4805c}, 0x4000) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) mmap(&(0x7f0000024000/0x4000)=nil, 0x4000, 0x9, 0x8010, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/52, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f0000000500)=""/96, &(0x7f0000000480)=""/66, 0xdddd0000}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_CALL(r5, 0x4008af21, &(0x7f0000000300)={0x1, r6}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r8, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) 83.940906ms ago: executing program 1 (id=3616): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x3c, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x4}]}, 0x3c}}, 0x0) 0s ago: executing program 1 (id=3617): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0xfffffffe}, {}, {}, @queue={0xc7, {0x401, 0xffffffff}}}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0xffffffff]}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) (fail_nth: 1) kernel console output (not intermixed with test programs): dor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1655.242148][ T46] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1655.280800][ T46] usb 8-1: SerialNumber: syz [ 1655.541888][T17694] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1655.727319][T17694] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1655.833281][T17694] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1655.936393][T17694] usb 1-1: Product: syz [ 1655.987794][T17694] usb 1-1: Manufacturer: syz [ 1656.045940][T17694] usb 1-1: SerialNumber: syz [ 1656.158630][T17694] usb 1-1: config 0 descriptor?? [ 1656.203515][T17694] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1656.774022][T17694] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 1656.821978][T17694] sq905c 1-1:0.0: Reading version command failed [ 1656.850847][T17694] sq905c 1-1:0.0: probe with driver sq905c failed with error -71 [ 1656.884663][T17694] usb 1-1: USB disconnect, device number 98 [ 1657.251653][T17692] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1657.349528][ T6311] 0: reclassify loop, rule prio 0, protocol 800 [ 1657.599134][ T46] rndis_host 8-1:1.0: probe with driver rndis_host failed with error -22 [ 1657.665700][T17692] usb 4-1: Using ep0 maxpacket: 16 [ 1657.695148][T17692] usb 4-1: config 1 has an invalid descriptor of length 115, skipping remainder of the config [ 1657.712098][T17692] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 1657.791671][T17692] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1657.879044][ T46] usb 8-1: USB disconnect, device number 47 [ 1657.904526][T17692] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1657.969025][T17692] usb 4-1: SerialNumber: syz [ 1657.976929][T20297] xt_CT: No such helper "pptp" [ 1657.985730][ T6311] 0: reclassify loop, rule prio 0, protocol 800 [ 1658.010578][T17692] cdc_acm 4-1:1.0: skipping garbage [ 1658.015954][T17692] cdc_acm 4-1:1.0: skipping garbage [ 1658.217507][ T5820] usb 4-1: USB disconnect, device number 79 [ 1662.281665][T17694] usb 10-1: new full-speed USB device number 18 using dummy_hcd [ 1663.107745][ T12] 0: reclassify loop, rule prio 0, protocol 800 [ 1664.088796][ T6311] 0: reclassify loop, rule prio 0, protocol 800 [ 1664.879609][T20353] dccp_invalid_packet: P.Data Offset(255) too large [ 1665.541732][T17694] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1666.306641][T17694] usb 7-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1666.362067][T17694] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1666.399144][T17694] usb 7-1: Product: syz [ 1666.414097][T17694] usb 7-1: Manufacturer: syz [ 1666.431709][T17694] usb 7-1: SerialNumber: syz [ 1666.457881][T17694] usb 7-1: config 0 descriptor?? [ 1666.502376][T17694] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1666.941953][ T5874] usb 10-1: new full-speed USB device number 19 using dummy_hcd [ 1666.960962][T17694] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 1666.978728][T17694] sq905c 7-1:0.0: Reading version command failed [ 1666.987119][T17694] sq905c 7-1:0.0: probe with driver sq905c failed with error -71 [ 1667.000822][T17694] usb 7-1: USB disconnect, device number 21 [ 1667.072013][ T5820] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1667.133123][ T5874] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1667.156507][ T5874] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 1667.181114][ T5874] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1667.211237][ T5874] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1667.231269][ T5874] usb 10-1: SerialNumber: syz [ 1667.244394][ T5820] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1667.267190][ T5820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1667.299433][ T5820] usb 4-1: Product: syz [ 1667.320078][ T5820] usb 4-1: Manufacturer: syz [ 1667.329809][ T5820] usb 4-1: SerialNumber: syz [ 1667.339240][ T5820] usb 4-1: config 0 descriptor?? [ 1667.350550][ T5820] ch341 4-1:0.0: ch341-uart converter detected [ 1668.407295][T20397] netlink: 'syz.6.3151': attribute type 1 has an invalid length. [ 1668.421717][T20397] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3151'. [ 1668.448418][T20397] netlink: 'syz.6.3151': attribute type 1 has an invalid length. [ 1668.477435][T20397] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3151'. [ 1668.749513][ T5820] ch341-uart ttyUSB0: failed to read break control: -71 [ 1668.767580][ T5820] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1668.811155][ T5820] usb 4-1: USB disconnect, device number 80 [ 1668.840741][ T5820] ch341 4-1:0.0: device disconnected [ 1668.873201][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.099802][ T6071] 0: reclassify loop, rule prio 0, protocol 800 [ 1670.133974][T15157] 0: reclassify loop, rule prio 0, protocol 800 [ 1670.941980][ T5137] Bluetooth: hci5: command 0x0406 tx timeout [ 1670.942803][ T5874] rndis_host 10-1:1.0: probe with driver rndis_host failed with error -22 [ 1670.978493][ T5874] usb 10-1: USB disconnect, device number 19 [ 1671.485887][T20442] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3159'. [ 1673.301669][ T5874] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1673.634573][ T5874] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1673.647612][ T5874] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1673.691258][ T5874] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1673.724949][ T5874] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1673.742220][T20454] 9pnet_fd: Insufficient options for proto=fd [ 1673.931754][ T5874] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1673.939823][ T5874] usb 7-1: Product: syz [ 1673.944092][ T5874] usb 7-1: Manufacturer: syz [ 1673.948725][ T5874] usb 7-1: SerialNumber: syz [ 1674.100775][T20460] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3161'. [ 1674.932103][ T5874] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1675.007718][ T5874] usb 7-1: USB disconnect, device number 22 [ 1675.093048][ T5874] usblp0: removed [ 1675.761852][T17692] usb 1-1: new full-speed USB device number 99 using dummy_hcd [ 1675.910906][T15157] 0: reclassify loop, rule prio 0, protocol 800 [ 1675.996136][ T6071] 0: reclassify loop, rule prio 0, protocol 800 [ 1676.078451][T17692] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 1676.266917][T17692] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1676.356306][T17692] usb 1-1: config 0 has no interface number 0 [ 1676.397283][T17692] usb 1-1: config 0 interface 251 altsetting 0 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 1676.420754][ T12] bridge_slave_1: left allmulticast mode [ 1676.443019][ T12] bridge_slave_1: left promiscuous mode [ 1676.444246][T17692] usb 1-1: config 0 interface 251 altsetting 0 endpoint 0x8 has invalid maxpacket 80, setting to 64 [ 1676.460900][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1676.490891][ T12] bridge_slave_0: left allmulticast mode [ 1676.512744][ T12] bridge_slave_0: left promiscuous mode [ 1676.515933][T17692] usb 1-1: config 0 interface 251 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 1676.540969][T20489] netlink: 'syz.7.3170': attribute type 1 has an invalid length. [ 1676.544825][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1676.548907][T20489] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3170'. [ 1676.581668][T17692] usb 1-1: config 0 interface 251 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 1676.622462][T17692] usb 1-1: New USB device found, idVendor=1199, idProduct=6839, bcdDevice= 5.65 [ 1676.632049][T17692] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1676.643220][T17692] usb 1-1: Product: syz [ 1676.647617][T17692] usb 1-1: Manufacturer: syz [ 1676.664863][T17692] usb 1-1: SerialNumber: syz [ 1676.692781][T17692] usb 1-1: config 0 descriptor?? [ 1676.706317][T17692] sierra 1-1:0.251: Sierra USB modem converter detected [ 1676.820641][ T5137] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1676.836548][ T5137] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1676.845737][ T5137] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1676.855333][ T5137] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1676.863468][ T5137] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1676.873712][ T5137] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1677.937621][ T12]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 1678.156533][ T12] bond_slave_0: left promiscuous mode [ 1678.179396][ T12]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 1678.207529][ T12] bond_slave_1: left promiscuous mode [ 1678.230751][ T12]  (unregistering): Released all slaves [ 1678.321832][T20492] netlink: 'syz.7.3170': attribute type 1 has an invalid length. [ 1678.348018][T20492] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3170'. [ 1678.502685][T17692] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 1678.542986][T17692] usb 1-1: Sierra USB modem converter now attached to ttyUSB1 [ 1678.629448][T20530] openvswitch: netlink: Multiple metadata blocks provided [ 1678.942621][T18703] Bluetooth: hci2: command tx timeout [ 1678.984787][T17692] usb 1-1: Sierra USB modem converter now attached to ttyUSB2 [ 1679.401831][T17692] usb 1-1: USB disconnect, device number 99 [ 1679.454474][T17692] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1679.528221][T17692] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 1679.564928][T20535] 9pnet_fd: Insufficient options for proto=fd [ 1679.573328][T17692] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 1679.590146][T17692] sierra 1-1:0.251: device disconnected [ 1679.800805][ T12] hsr_slave_0: left promiscuous mode [ 1679.870735][ T12] hsr_slave_1: left promiscuous mode [ 1679.893193][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1679.932417][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1681.037544][T18703] Bluetooth: hci2: command tx timeout [ 1681.342364][ T4880] 0: reclassify loop, rule prio 0, protocol 800 [ 1681.695217][ T6311] 0: reclassify loop, rule prio 0, protocol 800 [ 1683.102112][ T5137] Bluetooth: hci2: command tx timeout [ 1683.500397][T20566] xt_CT: No such helper "pptp" [ 1683.540972][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1683.604055][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1683.669427][T20572] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3185'. [ 1684.459796][T20570] netlink: 'syz.3.3185': attribute type 29 has an invalid length. [ 1684.489190][T20571] netlink: 'syz.3.3185': attribute type 29 has an invalid length. [ 1684.511675][T16048] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1684.523212][T20500] chnl_net:caif_netlink_parms(): no params data found [ 1684.604194][ T5874] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1684.719087][T16048] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1684.729077][T16048] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1684.738801][T20500] bridge0: port 1(bridge_slave_0) entered blocking state [ 1684.747482][T20500] bridge0: port 1(bridge_slave_0) entered disabled state [ 1684.754782][ T5874] usb 4-1: device descriptor read/64, error -71 [ 1684.761392][T16048] usb 7-1: Product: syz [ 1684.766729][T20500] bridge_slave_0: entered allmulticast mode [ 1684.773944][T16048] usb 7-1: Manufacturer: syz [ 1684.778564][T16048] usb 7-1: SerialNumber: syz [ 1684.784639][T20500] bridge_slave_0: entered promiscuous mode [ 1684.801822][T20500] bridge0: port 2(bridge_slave_1) entered blocking state [ 1684.810838][T16048] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1684.815208][T20586] netlink: 'syz.0.3187': attribute type 1 has an invalid length. [ 1684.823220][T20500] bridge0: port 2(bridge_slave_1) entered disabled state [ 1684.845575][T20500] bridge_slave_1: entered allmulticast mode [ 1684.847782][T20586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3187'. [ 1684.853004][T20500] bridge_slave_1: entered promiscuous mode [ 1684.918955][T17703] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1684.928942][T20587] netlink: 'syz.0.3187': attribute type 1 has an invalid length. [ 1684.941086][T20500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1684.943946][T20587] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3187'. [ 1684.998762][T20500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1685.033103][ T5874] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1685.059786][T20500] team0: Port device team_slave_0 added [ 1685.069257][T20500] team0: Port device team_slave_1 added [ 1685.106001][T20500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1685.113401][T20500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1685.140606][T20500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1685.153788][T20500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1685.160737][T20500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1685.187637][ T5137] Bluetooth: hci2: command tx timeout [ 1685.191965][ T5874] usb 4-1: device descriptor read/64, error -71 [ 1685.201741][T20500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1685.223435][ T46] usb 7-1: USB disconnect, device number 23 [ 1685.266717][T20500] hsr_slave_0: entered promiscuous mode [ 1685.272967][T20500] hsr_slave_1: entered promiscuous mode [ 1685.302801][ T5874] usb usb4-port1: attempt power cycle [ 1685.653264][ T5874] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1685.702031][ T5874] usb 4-1: device descriptor read/8, error -71 [ 1685.958308][ T5874] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1685.978924][T20500] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1685.992290][T17703] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 1685.999955][T17703] ath9k_htc: Failed to initialize the device [ 1686.042599][ T5874] usb 4-1: device descriptor read/8, error -71 [ 1686.069466][ T46] usb 7-1: ath9k_htc: USB layer deinitialized [ 1686.097896][T20500] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1686.135836][T20500] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1686.284898][ T5874] usb usb4-port1: unable to enumerate USB device [ 1686.328404][T20500] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1687.331776][T15157] 0: reclassify loop, rule prio 0, protocol 800 [ 1687.461039][ T5949] 0: reclassify loop, rule prio 0, protocol 800 [ 1687.601711][ T46] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1687.750778][T20500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1687.791861][ T46] usb 7-1: Using ep0 maxpacket: 16 [ 1687.805294][T20500] 8021q: adding VLAN 0 to HW filter on device team0 [ 1687.828155][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1687.832891][ T46] usb 7-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 1687.835292][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1687.862124][ T46] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1687.889874][ T46] usb 7-1: Product: syz [ 1687.913744][ T4880] bridge0: port 2(bridge_slave_1) entered blocking state [ 1687.920856][ T4880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1687.931633][ T46] usb 7-1: Manufacturer: syz [ 1687.936257][ T46] usb 7-1: SerialNumber: syz [ 1687.953065][ T46] usb 7-1: config 0 descriptor?? [ 1687.964500][ T46] as10x_usb: device has been detected [ 1687.975673][ T46] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 1688.022343][T20613] netlink: 'syz.3.3197': attribute type 1 has an invalid length. [ 1688.030199][T20613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3197'. [ 1688.043470][T20500] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1688.080399][ T46] usb 7-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 1688.115402][T20613] netlink: 'syz.3.3197': attribute type 1 has an invalid length. [ 1688.154652][T20613] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3197'. [ 1688.210483][ T46] as10x_usb: error during firmware upload part1 [ 1688.220815][T20603] random: crng reseeded on system resumption [ 1688.260940][ T46] Registered device Sky IT Digital Key (green led) [ 1688.489552][T20500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1688.606385][T20500] veth0_vlan: entered promiscuous mode [ 1688.642676][T20500] veth1_vlan: entered promiscuous mode [ 1688.717426][T20500] veth0_macvtap: entered promiscuous mode [ 1688.737654][T20500] veth1_macvtap: entered promiscuous mode [ 1688.788451][T20500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1688.844436][T20500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1688.865921][T20500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1688.878767][T20500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1688.901722][T20500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1688.922600][T20500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1688.949573][T20500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1689.001393][T20500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1689.055052][T20500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1689.075324][T20500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1689.087422][T20635] FAULT_INJECTION: forcing a failure. [ 1689.087422][T20635] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1689.111795][T20500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1689.129953][T20635] CPU: 1 UID: 0 PID: 20635 Comm: syz.3.3198 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 1689.129979][T20635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1689.129992][T20635] Call Trace: [ 1689.129999][T20635] [ 1689.130008][T20635] dump_stack_lvl+0x241/0x360 [ 1689.130036][T20635] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1689.130057][T20635] ? __pfx__printk+0x10/0x10 [ 1689.130088][T20635] ? __pfx_lock_release+0x10/0x10 [ 1689.130124][T20635] should_fail_ex+0x40a/0x550 [ 1689.130157][T20635] _copy_from_iter+0x1df/0x1c40 [ 1689.130181][T20635] ? __virt_addr_valid+0x183/0x530 [ 1689.130211][T20635] ? __pfx_lock_release+0x10/0x10 [ 1689.130251][T20635] ? __alloc_skb+0x28f/0x440 [ 1689.130279][T20635] ? __pfx__copy_from_iter+0x10/0x10 [ 1689.130304][T20635] ? __virt_addr_valid+0x183/0x530 [ 1689.130333][T20635] ? __virt_addr_valid+0x183/0x530 [ 1689.130360][T20635] ? __virt_addr_valid+0x45f/0x530 [ 1689.130388][T20635] ? __phys_addr_symbol+0x2f/0x70 [ 1689.130417][T20635] ? __check_object_size+0x47a/0x730 [ 1689.130452][T20635] netlink_sendmsg+0x742/0xcb0 [ 1689.130486][T20635] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1689.130519][T20635] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1689.130539][T20635] __sock_sendmsg+0x221/0x270 [ 1689.130566][T20635] ____sys_sendmsg+0x53a/0x860 [ 1689.130604][T20635] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1689.130633][T20635] ? __fget_files+0x2a/0x410 [ 1689.130657][T20635] ? __fget_files+0x2a/0x410 [ 1689.130685][T20635] __sys_sendmsg+0x269/0x350 [ 1689.130709][T20635] ? __pfx___sys_sendmsg+0x10/0x10 [ 1689.130740][T20635] ? do_sys_openat2+0x17a/0x1d0 [ 1689.130785][T20635] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1689.130815][T20635] ? do_syscall_64+0x100/0x230 [ 1689.130845][T20635] ? do_syscall_64+0xb6/0x230 [ 1689.130875][T20635] do_syscall_64+0xf3/0x230 [ 1689.130902][T20635] ? clear_bhb_loop+0x35/0x90 [ 1689.130932][T20635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1689.130958][T20635] RIP: 0033:0x7f7e00f8d169 [ 1689.130976][T20635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1689.130993][T20635] RSP: 002b:00007f7e01d35038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1689.131015][T20635] RAX: ffffffffffffffda RBX: 00007f7e011a5fa0 RCX: 00007f7e00f8d169 [ 1689.131030][T20635] RDX: 0000000000000000 RSI: 0000400000000580 RDI: 0000000000000004 [ 1689.131043][T20635] RBP: 00007f7e01d35090 R08: 0000000000000000 R09: 0000000000000000 [ 1689.131055][T20635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1689.131067][T20635] R13: 0000000000000000 R14: 00007f7e011a5fa0 R15: 00007ffe18d965e8 [ 1689.131096][T20635] [ 1689.231755][T20500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1689.233363][ C1] vkms_vblank_simulate: vblank timer overrun [ 1689.238103][T20500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1689.532767][T20500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1689.577002][T20500] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1689.601566][T20500] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1689.610306][T20500] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1689.656327][T20500] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1689.883730][ T5820] usb 7-1: USB disconnect, device number 24 [ 1689.888651][ T6735] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1689.933146][ T6735] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1690.017941][ T5820] Unregistered device Sky IT Digital Key (green led) [ 1690.029656][ T5820] as10x_usb: device has been disconnected [ 1690.045753][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1690.077602][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1690.174362][T20660] FAULT_INJECTION: forcing a failure. [ 1690.174362][T20660] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1690.212852][T20660] CPU: 0 UID: 0 PID: 20660 Comm: syz.0.3203 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 1690.212877][T20660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1690.212889][T20660] Call Trace: [ 1690.212896][T20660] [ 1690.212904][T20660] dump_stack_lvl+0x241/0x360 [ 1690.212930][T20660] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1690.212948][T20660] ? __pfx__printk+0x10/0x10 [ 1690.212981][T20660] ? snprintf+0xda/0x120 [ 1690.213004][T20660] should_fail_ex+0x40a/0x550 [ 1690.213034][T20660] _copy_to_user+0x31/0xb0 [ 1690.213060][T20660] simple_read_from_buffer+0xca/0x150 [ 1690.213100][T20660] proc_fail_nth_read+0x1e9/0x250 [ 1690.213132][T20660] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1690.213164][T20660] ? rw_verify_area+0x243/0x630 [ 1690.213186][T20660] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1690.213216][T20660] vfs_read+0x1f8/0xb40 [ 1690.213240][T20660] ? fdget_pos+0x254/0x320 [ 1690.213260][T20660] ? __pfx___mutex_lock+0x10/0x10 [ 1690.213286][T20660] ? __pfx_vfs_read+0x10/0x10 [ 1690.213311][T20660] ? __fget_files+0x2a/0x410 [ 1690.213332][T20660] ? __fget_files+0x395/0x410 [ 1690.213348][T20660] ? __fget_files+0x2a/0x410 [ 1690.213375][T20660] ksys_read+0x18f/0x2b0 [ 1690.213399][T20660] ? __pfx_ksys_read+0x10/0x10 [ 1690.213423][T20660] ? do_syscall_64+0x100/0x230 [ 1690.213452][T20660] ? do_syscall_64+0xb6/0x230 [ 1690.213479][T20660] do_syscall_64+0xf3/0x230 [ 1690.213505][T20660] ? clear_bhb_loop+0x35/0x90 [ 1690.213533][T20660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1690.213558][T20660] RIP: 0033:0x7fdda7f8bb7c [ 1690.213573][T20660] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1690.213589][T20660] RSP: 002b:00007fdda8e04030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1690.213609][T20660] RAX: ffffffffffffffda RBX: 00007fdda81a5fa0 RCX: 00007fdda7f8bb7c [ 1690.213623][T20660] RDX: 000000000000000f RSI: 00007fdda8e040a0 RDI: 0000000000000006 [ 1690.213634][T20660] RBP: 00007fdda8e04090 R08: 0000000000000000 R09: 0000000000000000 [ 1690.213646][T20660] R10: 0000400000000080 R11: 0000000000000246 R12: 0000000000000001 [ 1690.213658][T20660] R13: 0000000000000000 R14: 00007fdda81a5fa0 R15: 00007fff840c6448 [ 1690.213686][T20660] [ 1690.934927][T20671] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3206'. [ 1691.314117][T20674] /dev/sg0: Can't lookup blockdev [ 1692.514093][ T4880] 0: reclassify loop, rule prio 0, protocol 800 [ 1692.673368][ T8663] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1692.907436][ T8663] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1692.919284][T17703] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1692.977928][ T8663] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1693.029939][T20687] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 1693.037897][ T8663] usb 2-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 1693.037982][ T8663] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1693.052999][ T8663] usb 2-1: config 0 descriptor?? [ 1693.102006][T17703] usb 1-1: Using ep0 maxpacket: 16 [ 1693.117624][T17703] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1693.166853][T17703] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 1693.192127][ T5949] 0: reclassify loop, rule prio 0, protocol 800 [ 1693.198448][T17703] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1693.231550][T17703] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1693.261618][T17703] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1693.266944][T20696] 9pnet_fd: Insufficient options for proto=fd [ 1693.303184][T17703] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1693.322170][T17703] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1693.344150][T17703] usb 1-1: SerialNumber: syz [ 1693.370846][T20681] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1693.387361][T20681] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1693.789784][ T8663] ortek 0003:1223:3F07.003A: unknown main item tag 0x6 [ 1693.796944][ T8663] ortek 0003:1223:3F07.003A: report_id 29495 is invalid [ 1693.817240][ T8663] ortek 0003:1223:3F07.003A: item 0 2 1 8 parsing failed [ 1693.841916][ T8663] ortek 0003:1223:3F07.003A: probe with driver ortek failed with error -22 [ 1693.927250][T17703] usb 1-1: USB disconnect, device number 100 [ 1693.995979][ T8663] usb 2-1: USB disconnect, device number 73 [ 1695.710595][T20739] netlink: 188 bytes leftover after parsing attributes in process `syz.6.3217'. [ 1698.311443][ T6735] 0: reclassify loop, rule prio 0, protocol 800 [ 1698.900118][T20760] xt_CT: No such helper "pptp" [ 1698.958049][ T12] 0: reclassify loop, rule prio 0, protocol 800 [ 1699.466123][T20766] xt_CT: No such helper "pptp" [ 1699.511640][T17703] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1699.577296][T20779] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3226'. [ 1699.671680][T17703] usb 1-1: Using ep0 maxpacket: 16 [ 1700.607756][T17703] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1700.701736][T17703] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 1700.895845][T17703] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1701.941782][T17703] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1702.001733][T17703] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1702.066713][T17703] usb 1-1: string descriptor 0 read error: -71 [ 1702.111821][T17703] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1702.302410][T17703] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1703.275996][T20817] 9pnet_fd: Insufficient options for proto=fd [ 1703.286222][T17703] usb 1-1: can't set config #1, error -71 [ 1703.336170][T17703] usb 1-1: USB disconnect, device number 101 [ 1703.651735][ T8663] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1703.751704][T17703] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1703.855534][ T8663] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1703.871606][ T8663] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1703.895061][ T8663] usb 7-1: Product: syz [ 1703.900187][ T8663] usb 7-1: Manufacturer: syz [ 1703.921348][ T8663] usb 7-1: SerialNumber: syz [ 1703.955536][T17703] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1703.965551][ T8663] usb 7-1: config 0 descriptor?? [ 1703.996973][T17703] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1704.005689][ T8663] ch341 7-1:0.0: ch341-uart converter detected [ 1704.029784][T17703] usb 1-1: Product: syz [ 1704.053118][T17703] usb 1-1: Manufacturer: syz [ 1704.057887][T17703] usb 1-1: SerialNumber: syz [ 1704.069590][ T6735] 0: reclassify loop, rule prio 0, protocol 800 [ 1704.102818][T17703] usb 1-1: config 0 descriptor?? [ 1704.132885][T17703] ch341 1-1:0.0: ch341-uart converter detected [ 1704.193347][ T8663] usb 7-1: failed to receive control message: -71 [ 1704.201855][ T8663] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1704.244840][ T8663] usb 7-1: USB disconnect, device number 25 [ 1704.253212][ T8663] ch341 7-1:0.0: device disconnected [ 1704.602186][T17703] usb 1-1: failed to send control message: -71 [ 1704.608731][T17703] ch341-uart ttyUSB1: probe with driver ch341-uart failed with error -71 [ 1704.684829][T17703] usb 1-1: USB disconnect, device number 102 [ 1704.716990][ T5949] 0: reclassify loop, rule prio 0, protocol 800 [ 1704.928467][T17703] ch341 1-1:0.0: device disconnected [ 1705.221690][ T8663] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 1705.384661][ T8663] usb 8-1: Using ep0 maxpacket: 16 [ 1705.404160][ T8663] usb 8-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1705.439315][ T8663] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 1705.488646][ T8663] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1705.527516][ T8663] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1705.551578][ T8663] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1705.616680][ T8663] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1705.646226][ T8663] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1705.675065][ T8663] usb 8-1: SerialNumber: syz [ 1705.806853][T17694] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1705.812326][T20850] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1705.823119][T20850] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1705.981180][T17694] usb 4-1: Using ep0 maxpacket: 16 [ 1706.021732][T17703] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1706.025838][T17694] usb 4-1: config 0 has an invalid interface number: 25 but max is 0 [ 1706.133473][T17694] usb 4-1: config 0 has no interface number 0 [ 1706.159422][T17694] usb 4-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=f9.12 [ 1706.201632][T17703] usb 1-1: Using ep0 maxpacket: 16 [ 1706.207953][T17694] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1706.222326][T17694] usb 4-1: Product: syz [ 1706.227707][T17694] usb 4-1: Manufacturer: syz [ 1706.235454][T17694] usb 4-1: SerialNumber: syz [ 1706.244061][T17703] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1706.270132][T17694] usb 4-1: config 0 descriptor?? [ 1706.272416][T17703] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 1706.292094][T17703] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1706.296178][T17694] mct_u232 4-1:0.25: MCT U232 converter detected [ 1706.302040][T17703] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1706.302067][T17703] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1706.303155][T17703] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1706.322637][T17694] mct_u232 ttyUSB0: expected endpoint missing [ 1706.364008][T17703] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1706.413364][T17703] usb 1-1: SerialNumber: syz [ 1706.455307][T20865] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1706.464667][T20865] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1706.514529][T20858] Bluetooth: MGMT ver 1.23 [ 1706.554423][T20858] tipc: Started in network mode [ 1706.593824][T20858] tipc: Node identity , cluster identity 4711 [ 1706.994266][T17703] usb 1-1: USB disconnect, device number 103 [ 1707.154314][T17694] usb 4-1: USB disconnect, device number 85 [ 1707.248556][T17694] mct_u232 4-1:0.25: device disconnected [ 1707.418713][T20879] xt_CT: No such helper "pptp" [ 1707.479496][ T5874] usb 8-1: USB disconnect, device number 48 [ 1708.862338][ T5820] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1708.939502][ T29] audit: type=1800 audit(1741230511.806:158): pid=20906 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.3250" name="file1" dev="tmpfs" ino=71 res=0 errno=0 [ 1709.032768][ T5820] usb 7-1: Using ep0 maxpacket: 16 [ 1709.052677][ T5820] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1709.078747][ T5820] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 1709.102815][ T5820] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 115, changing to 10 [ 1709.114667][ T5820] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 25960, setting to 1024 [ 1709.126482][ T5820] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1709.151201][ T5820] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1709.164631][ T5820] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1709.182577][ T5820] usb 7-1: SerialNumber: syz [ 1709.197599][T20885] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1709.212757][ T5820] cdc_acm 7-1:1.0: skipping garbage [ 1709.271656][ T5874] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1709.418148][T17703] usb 7-1: USB disconnect, device number 26 [ 1709.449147][ T5874] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1709.476134][ T5874] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1709.503690][ T5874] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1709.528333][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1709.546692][ T5874] usb 4-1: Product: syz [ 1709.550972][ T5874] usb 4-1: Manufacturer: syz [ 1709.561660][ T5874] usb 4-1: SerialNumber: syz [ 1709.805769][T20911] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1709.828756][ T4880] 0: reclassify loop, rule prio 0, protocol 800 [ 1710.484901][T20392] 0: reclassify loop, rule prio 0, protocol 800 [ 1710.491747][T17694] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1710.681653][T17694] usb 1-1: Using ep0 maxpacket: 16 [ 1710.688646][T17694] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1710.710881][T17694] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1710.730291][T20911] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1710.741369][ T5874] cdc_mbim 4-1:1.0: bind() failure [ 1710.759472][T20946] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3256'. [ 1710.766216][ T5874] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1710.789065][T17694] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1710.809852][ T5874] cdc_ncm 4-1:1.1: bind() failure [ 1710.855741][T17694] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1710.886050][ T5874] usb 4-1: USB disconnect, device number 86 [ 1710.909345][T17694] usb 1-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 1711.032767][T17694] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1711.156784][T17694] usb 1-1: config 0 descriptor?? [ 1711.301668][ T46] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1711.471625][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 1711.502426][ T46] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1711.542456][ T46] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 1711.576536][ T46] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1711.615999][ T46] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1711.642313][T17694] usbhid 1-1:0.0: can't add hid device: -71 [ 1711.646030][ T46] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1711.648309][T17694] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1711.694894][T17694] usb 1-1: USB disconnect, device number 104 [ 1711.735708][ T46] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1711.824732][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1711.923160][ T5137] Bluetooth: hci6: command 0x0406 tx timeout [ 1712.070626][ T46] usb 2-1: SerialNumber: syz [ 1712.097182][T20952] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1712.104570][T20952] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1712.320899][ T5922] usb 2-1: USB disconnect, device number 74 [ 1714.039207][T20984] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3263'. [ 1714.932111][T17694] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 1715.091596][T17694] usb 8-1: Using ep0 maxpacket: 16 [ 1715.106252][T17694] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1715.137193][T17694] usb 8-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 1715.169909][T17694] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1715.435098][T17694] usb 8-1: config 0 descriptor?? [ 1715.726161][ T4880] 0: reclassify loop, rule prio 0, protocol 800 [ 1717.876471][T17694] usbhid 8-1:0.0: can't add hid device: -71 [ 1717.895672][T17694] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1717.946482][T17694] usb 8-1: USB disconnect, device number 49 [ 1718.481634][T17694] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 1718.647150][T17694] usb 8-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1718.674757][T17694] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1718.691678][T17694] usb 8-1: Product: syz [ 1718.697117][T17694] usb 8-1: Manufacturer: syz [ 1718.701924][T17694] usb 8-1: SerialNumber: syz [ 1718.716367][T17694] usb 8-1: config 0 descriptor?? [ 1718.724920][T17694] ch341 8-1:0.0: ch341-uart converter detected [ 1718.959259][T17694] usb 8-1: failed to receive control message: -71 [ 1718.999039][T17694] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1719.117436][T17694] usb 8-1: USB disconnect, device number 50 [ 1719.131836][ T5874] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1719.185228][T17694] ch341 8-1:0.0: device disconnected [ 1719.325121][ T5874] usb 7-1: Using ep0 maxpacket: 16 [ 1719.370455][ T5874] usb 7-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1719.422949][ T5874] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 1719.435018][ T5949] 0: reclassify loop, rule prio 0, protocol 800 [ 1719.479796][ T5874] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1719.522723][ T5874] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1719.548893][ T5874] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1719.664100][ T5874] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1720.063956][ T5874] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1720.074582][ T5874] usb 7-1: SerialNumber: syz [ 1720.519720][T21054] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1720.527663][T21054] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1720.876004][T17694] usb 7-1: USB disconnect, device number 27 [ 1720.897412][T21067] xt_CT: No such helper "pptp" [ 1721.139626][T18064] udevd[18064]: setting mode of /dev/bus/usb/007/027 to 020664 failed: No such file or directory [ 1721.454152][ T6735] 0: reclassify loop, rule prio 0, protocol 800 [ 1721.465199][T18064] udevd[18064]: setting owner of /dev/bus/usb/007/027 to uid=0, gid=0 failed: No such file or directory [ 1723.758701][T21125] dccp_invalid_packet: P.Data Offset(255) too large [ 1724.021773][T17703] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 1724.051654][ T5874] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1724.821419][ T6735] 0: reclassify loop, rule prio 0, protocol 800 [ 1724.873305][T21092] netlink: 'syz.6.3280': attribute type 1 has an invalid length. [ 1724.923460][T21092] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3280'. [ 1725.042996][T17703] usb 8-1: Using ep0 maxpacket: 16 [ 1725.053407][ T5874] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1725.071684][T17703] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1725.082749][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1725.090761][ T5874] usb 2-1: Product: syz [ 1725.115467][T17703] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 115, changing to 10 [ 1725.149279][ T5874] usb 2-1: Manufacturer: syz [ 1725.159539][T17703] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 25960, setting to 1024 [ 1725.173230][ T5874] usb 2-1: SerialNumber: syz [ 1725.194797][ T5874] usb 2-1: config 0 descriptor?? [ 1725.215910][T17703] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1725.238516][ T5874] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1725.284162][T17703] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1725.303141][T17703] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1725.355294][T17703] usb 8-1: SerialNumber: syz [ 1725.410178][T21124] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1725.446562][T17703] cdc_acm 8-1:1.0: skipping garbage [ 1725.472190][ T8663] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1726.367075][ T5874] gspca_sq905c: sq905c_read: usb_control_msg failed (-110) [ 1726.394166][T17703] usb 8-1: USB disconnect, device number 51 [ 1726.400380][ T5874] sq905c 2-1:0.0: Reading version command failed [ 1726.414912][ T5874] sq905c 2-1:0.0: probe with driver sq905c failed with error -110 [ 1727.576785][ T8663] usb 1-1: Using ep0 maxpacket: 16 [ 1727.582434][ T5874] usb 2-1: USB disconnect, device number 75 [ 1727.588992][T15157] 0: reclassify loop, rule prio 0, protocol 800 [ 1727.607458][ T8663] usb 1-1: config 7 has an invalid interface number: 154 but max is 0 [ 1727.673688][ T8663] usb 1-1: config 7 has no interface number 0 [ 1727.692044][ T8663] usb 1-1: config 7 interface 154 has no altsetting 0 [ 1727.705810][ T8663] usb 1-1: New USB device found, idVendor=0438, idProduct=b002, bcdDevice=4d.27 [ 1727.716567][ T8663] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1727.725867][ T8663] usb 1-1: Product: syz [ 1727.730125][ T8663] usb 1-1: Manufacturer: syz [ 1728.680393][ T8663] usb 1-1: SerialNumber: syz [ 1728.744419][ T8663] usb 1-1: can't set config #7, error -71 [ 1728.948631][ T8663] usb 1-1: USB disconnect, device number 105 [ 1729.932362][T17703] usb 8-1: new full-speed USB device number 52 using dummy_hcd [ 1730.123143][T21168] xt_CT: No such helper "pptp" [ 1730.308110][ T6311] 0: reclassify loop, rule prio 0, protocol 800 [ 1730.314942][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.375728][T17703] usb 8-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1730.391606][T17703] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1731.370329][T17703] usb 8-1: config 0 descriptor?? [ 1731.963415][T21191] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3298'. [ 1732.677316][T17703] usb 8-1: can't set config #0, error -71 [ 1732.733172][T17703] usb 8-1: USB disconnect, device number 52 [ 1732.741745][T21192] bridge: RTM_NEWNEIGH with invalid ether address [ 1732.863631][ T6311] 0: reclassify loop, rule prio 0, protocol 800 [ 1733.513152][ T5820] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1733.671629][ T5820] usb 7-1: Using ep0 maxpacket: 16 [ 1734.413544][T17703] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 1734.517486][ T5820] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1734.528991][ T5820] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 115, changing to 10 [ 1734.554986][ T5820] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 25960, setting to 1024 [ 1734.577021][T17703] usb 8-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1734.598606][ T5820] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1735.413951][T17703] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1735.424618][T17703] usb 8-1: Product: syz [ 1735.429751][T17703] usb 8-1: Manufacturer: syz [ 1735.591054][ T5820] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1735.621645][ T5820] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1736.580437][ T5820] usb 7-1: SerialNumber: syz [ 1736.616144][T17703] usb 8-1: SerialNumber: syz [ 1736.621455][ T62] 0: reclassify loop, rule prio 0, protocol 800 [ 1736.642792][T17703] usb 8-1: config 0 descriptor?? [ 1736.874246][T21226] syzkaller1: entered promiscuous mode [ 1736.891017][T17703] usb 8-1: can't set config #0, error -71 [ 1736.907749][ T5820] usb 7-1: can't set config #1, error -71 [ 1736.920599][T21226] syzkaller1: entered allmulticast mode [ 1736.927814][T21227] FAULT_INJECTION: forcing a failure. [ 1736.927814][T21227] name failslab, interval 1, probability 0, space 0, times 0 [ 1736.928885][T17703] usb 8-1: USB disconnect, device number 53 [ 1736.984673][T21227] CPU: 1 UID: 0 PID: 21227 Comm: syz.1.3306 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 1736.984696][T21227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1736.984708][T21227] Call Trace: [ 1736.984715][T21227] [ 1736.984723][T21227] dump_stack_lvl+0x241/0x360 [ 1736.984748][T21227] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1736.984767][T21227] ? __pfx__printk+0x10/0x10 [ 1736.984796][T21227] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 1736.984816][T21227] ? __pfx___might_resched+0x10/0x10 [ 1736.984842][T21227] should_fail_ex+0x40a/0x550 [ 1736.984872][T21227] should_failslab+0xac/0x100 [ 1736.984900][T21227] kmem_cache_alloc_node_noprof+0x77/0x380 [ 1736.984919][T21227] ? __alloc_skb+0x1c3/0x440 [ 1736.984947][T21227] __alloc_skb+0x1c3/0x440 [ 1736.984977][T21227] ? __pfx___alloc_skb+0x10/0x10 [ 1736.985007][T21227] ? __pfx___might_resched+0x10/0x10 [ 1736.985031][T21227] alloc_skb_with_frags+0xc3/0x820 [ 1736.985061][T21227] ? validate_chain+0x11e/0x5920 [ 1736.985087][T21227] sock_alloc_send_pskb+0x91a/0xa60 [ 1736.985120][T21227] ? __lock_acquire+0x1397/0x2100 [ 1736.985146][T21227] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1736.985175][T21227] ? iov_iter_advance+0x8f/0x1e0 [ 1736.985199][T21227] tun_get_user+0xcf6/0x48a0 [ 1736.985232][T21227] ? __lock_acquire+0x1397/0x2100 [ 1736.985264][T21227] ? __pfx_tun_get_user+0x10/0x10 [ 1736.985299][T21227] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1736.985327][T21227] ? tun_get+0x1e/0x2f0 [ 1736.985345][T21227] ? __pfx_lock_release+0x10/0x10 [ 1736.985383][T21227] ? tun_get+0x1e/0x2f0 [ 1736.985400][T21227] ? tun_get+0x27d/0x2f0 [ 1736.985420][T21227] tun_chr_write_iter+0x10d/0x1f0 [ 1736.985442][T21227] vfs_write+0xacf/0xd10 [ 1736.985469][T21227] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1736.985489][T21227] ? __pfx_vfs_write+0x10/0x10 [ 1736.985510][T21227] ? do_sys_openat2+0x17a/0x1d0 [ 1736.985531][T21227] ? __fget_files+0x2a/0x410 [ 1736.985553][T21227] ? __fget_files+0x2a/0x410 [ 1736.985579][T21227] ksys_write+0x18f/0x2b0 [ 1736.985603][T21227] ? __pfx_ksys_write+0x10/0x10 [ 1736.985627][T21227] ? do_syscall_64+0x100/0x230 [ 1736.985661][T21227] ? do_syscall_64+0xb6/0x230 [ 1736.985689][T21227] do_syscall_64+0xf3/0x230 [ 1736.985714][T21227] ? clear_bhb_loop+0x35/0x90 [ 1736.985742][T21227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1736.985767][T21227] RIP: 0033:0x7f0d17b8d169 [ 1736.985783][T21227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1736.985799][T21227] RSP: 002b:00007f0d18946038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1736.985819][T21227] RAX: ffffffffffffffda RBX: 00007f0d17da6080 RCX: 00007f0d17b8d169 [ 1736.985832][T21227] RDX: 0000000000000070 RSI: 0000400000000080 RDI: 0000000000000005 [ 1736.985845][T21227] RBP: 00007f0d18946090 R08: 0000000000000000 R09: 0000000000000000 [ 1736.985856][T21227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1736.985867][T21227] R13: 0000000000000001 R14: 00007f0d17da6080 R15: 00007ffe844319b8 [ 1736.985894][T21227] [ 1736.986172][ T5820] usb 7-1: USB disconnect, device number 28 [ 1738.353442][T21244] xt_CT: No such helper "pptp" [ 1738.819053][ T6071] 0: reclassify loop, rule prio 0, protocol 800 [ 1739.652032][T21260] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3312'. [ 1740.507107][ T29] audit: type=1800 audit(1741230543.276:159): pid=21259 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.3311" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 1740.913992][T21265] FAULT_INJECTION: forcing a failure. [ 1740.913992][T21265] name failslab, interval 1, probability 0, space 0, times 0 [ 1740.985242][T21265] CPU: 0 UID: 0 PID: 21265 Comm: syz.0.3314 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 1740.985270][T21265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1740.985284][T21265] Call Trace: [ 1740.985291][T21265] [ 1740.985301][T21265] dump_stack_lvl+0x241/0x360 [ 1740.985329][T21265] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1740.985350][T21265] ? __pfx__printk+0x10/0x10 [ 1740.985381][T21265] ? fs_reclaim_acquire+0x93/0x130 [ 1740.985406][T21265] ? __pfx___might_resched+0x10/0x10 [ 1740.985428][T21265] ? dynamic_dname+0x144/0x1b0 [ 1740.985455][T21265] should_fail_ex+0x40a/0x550 [ 1740.985489][T21265] should_failslab+0xac/0x100 [ 1740.985532][T21265] __kmalloc_noprof+0xdd/0x4c0 [ 1740.985549][T21265] ? tomoyo_encode+0x26f/0x540 [ 1740.985573][T21265] tomoyo_encode+0x26f/0x540 [ 1740.985593][T21265] ? __pfx_sockfs_dname+0x10/0x10 [ 1740.985618][T21265] tomoyo_realpath_from_path+0x59e/0x5e0 [ 1740.985649][T21265] tomoyo_path_number_perm+0x239/0x770 [ 1740.985677][T21265] ? rcu_read_lock_any_held+0xb7/0x160 [ 1740.985698][T21265] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1740.985719][T21265] ? tomoyo_path_number_perm+0x209/0x770 [ 1740.985747][T21265] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1740.985777][T21265] ? sb_end_write+0xe9/0x1c0 [ 1740.985797][T21265] ? vfs_write+0x7fa/0xd10 [ 1740.985850][T21265] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1740.985880][T21265] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1740.985909][T21265] security_file_ioctl+0xc6/0x2a0 [ 1740.985937][T21265] __se_sys_ioctl+0x46/0x170 [ 1740.985981][T21265] do_syscall_64+0xf3/0x230 [ 1740.986008][T21265] ? clear_bhb_loop+0x35/0x90 [ 1740.986039][T21265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1740.986064][T21265] RIP: 0033:0x7fdda7f8d169 [ 1740.986081][T21265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1740.986097][T21265] RSP: 002b:00007fdda8e04038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1740.986118][T21265] RAX: ffffffffffffffda RBX: 00007fdda81a5fa0 RCX: 00007fdda7f8d169 [ 1740.986132][T21265] RDX: 00004000000016c0 RSI: 0000000000008902 RDI: 0000000000000003 [ 1740.986145][T21265] RBP: 00007fdda8e04090 R08: 0000000000000000 R09: 0000000000000000 [ 1740.986158][T21265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1740.986170][T21265] R13: 0000000000000000 R14: 00007fdda81a5fa0 R15: 00007fff840c6448 [ 1740.986209][T21265] [ 1740.986261][T21265] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1741.992289][ T4880] 0: reclassify loop, rule prio 0, protocol 800 [ 1742.121570][ T8663] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1742.307825][ T8663] usb 4-1: Using ep0 maxpacket: 16 [ 1742.309708][ T8663] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1742.309748][ T8663] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 1742.309774][ T8663] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1742.309799][ T8663] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1742.309822][ T8663] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1742.311080][ T8663] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1742.311111][ T8663] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1742.311133][ T8663] usb 4-1: SerialNumber: syz [ 1742.316992][T21285] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1742.317122][T21285] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1742.416710][T21291] dccp_invalid_packet: P.Data Offset(255) too large [ 1742.691801][ T46] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1742.770313][T17703] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1742.846073][ T46] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1742.871708][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1742.901793][ T46] usb 2-1: Product: syz [ 1742.913559][ T46] usb 2-1: Manufacturer: syz [ 1742.921779][T17703] usb 1-1: Using ep0 maxpacket: 16 [ 1742.931407][ T46] usb 2-1: SerialNumber: syz [ 1742.944077][T17703] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1742.972616][ T46] usb 2-1: config 0 descriptor?? [ 1742.981541][T17703] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 115, changing to 10 [ 1743.014274][ T46] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1743.035345][T17703] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 25960, setting to 1024 [ 1743.091569][T17703] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1743.122938][T17703] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1743.132433][T17703] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1743.177860][T17703] usb 1-1: SerialNumber: syz [ 1743.194632][T21293] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1743.203240][T17703] cdc_acm 1-1:1.0: skipping garbage [ 1743.406468][T17703] usb 1-1: USB disconnect, device number 106 [ 1743.418043][ T46] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 1743.436951][ T46] sq905c 2-1:0.0: Reading version command failed [ 1743.455683][ T46] sq905c 2-1:0.0: probe with driver sq905c failed with error -71 [ 1743.470684][ T46] usb 2-1: USB disconnect, device number 76 [ 1745.167345][T15157] 0: reclassify loop, rule prio 0, protocol 800 [ 1745.174015][T17703] usb 4-1: USB disconnect, device number 87 [ 1746.473797][T21348] netlink: 'syz.3.3328': attribute type 11 has an invalid length. [ 1748.163664][ T12] 0: reclassify loop, rule prio 0, protocol 800 [ 1749.168619][T21384] dccp_invalid_packet: P.Data Offset(255) too large [ 1749.486581][ T46] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1749.646489][T21392] 9pnet_fd: Insufficient options for proto=fd [ 1749.708701][ T46] usb 7-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1749.725375][ T46] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1749.761602][ T46] usb 7-1: Product: syz [ 1749.768124][ T46] usb 7-1: Manufacturer: syz [ 1749.779634][ T46] usb 7-1: SerialNumber: syz [ 1749.793408][ T46] usb 7-1: config 0 descriptor?? [ 1749.814355][ T46] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1751.090942][ T46] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 1751.094623][ T6071] 0: reclassify loop, rule prio 0, protocol 800 [ 1751.194879][ T46] sq905c 7-1:0.0: Reading version command failed [ 1751.223641][ T46] sq905c 7-1:0.0: probe with driver sq905c failed with error -71 [ 1751.317822][ T46] usb 7-1: USB disconnect, device number 29 [ 1752.728017][T21415] FAULT_INJECTION: forcing a failure. [ 1752.728017][T21415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1752.744596][T21415] CPU: 0 UID: 0 PID: 21415 Comm: syz.3.3340 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 1752.744621][T21415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1752.744633][T21415] Call Trace: [ 1752.744640][T21415] [ 1752.744648][T21415] dump_stack_lvl+0x241/0x360 [ 1752.744673][T21415] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1752.744699][T21415] ? dump_stack+0x9/0x15 [ 1752.744721][T21415] should_fail_ex+0x40a/0x550 [ 1752.744751][T21415] _copy_from_iter+0x1df/0x1c40 [ 1752.744772][T21415] ? __virt_addr_valid+0x183/0x530 [ 1752.744806][T21415] ? __pfx_lock_release+0x10/0x10 [ 1752.744837][T21415] ? __alloc_skb+0x28f/0x440 [ 1752.744863][T21415] ? __pfx__copy_from_iter+0x10/0x10 [ 1752.744885][T21415] ? __virt_addr_valid+0x183/0x530 [ 1752.744911][T21415] ? __virt_addr_valid+0x183/0x530 [ 1752.744935][T21415] ? __virt_addr_valid+0x45f/0x530 [ 1752.744962][T21415] ? __phys_addr_symbol+0x2f/0x70 [ 1752.744987][T21415] ? __check_object_size+0x47a/0x730 [ 1752.745019][T21415] netlink_sendmsg+0x742/0xcb0 [ 1752.745051][T21415] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1752.745082][T21415] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1752.745098][T21415] __sock_sendmsg+0x221/0x270 [ 1752.745122][T21415] ____sys_sendmsg+0x53a/0x860 [ 1752.745155][T21415] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1752.745181][T21415] ? __fget_files+0x2a/0x410 [ 1752.745201][T21415] ? __fget_files+0x2a/0x410 [ 1752.745226][T21415] __sys_sendmsg+0x269/0x350 [ 1752.745248][T21415] ? __pfx___sys_sendmsg+0x10/0x10 [ 1752.745276][T21415] ? do_sys_openat2+0x17a/0x1d0 [ 1752.745318][T21415] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1752.745345][T21415] ? do_syscall_64+0x100/0x230 [ 1752.745373][T21415] ? do_syscall_64+0xb6/0x230 [ 1752.745401][T21415] do_syscall_64+0xf3/0x230 [ 1752.745425][T21415] ? clear_bhb_loop+0x35/0x90 [ 1752.745471][T21415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1752.745498][T21415] RIP: 0033:0x7f7e00f8d169 [ 1752.745518][T21415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1752.745535][T21415] RSP: 002b:00007f7dfedf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1752.745556][T21415] RAX: ffffffffffffffda RBX: 00007f7e011a6080 RCX: 00007f7e00f8d169 [ 1752.745571][T21415] RDX: 0000000000000000 RSI: 0000400000000180 RDI: 0000000000000008 [ 1752.745583][T21415] RBP: 00007f7dfedf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1752.745596][T21415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1752.745607][T21415] R13: 0000000000000000 R14: 00007f7e011a6080 R15: 00007ffe18d965e8 [ 1752.745636][T21415] [ 1753.373549][ T6311] 0: reclassify loop, rule prio 0, protocol 800 [ 1753.545180][T18703] Bluetooth: hci1: unexpected event for opcode 0x0c25 [ 1754.090607][T21425] fuse: Bad value for 'user_id' [ 1754.194343][T21425] fuse: Bad value for 'user_id' [ 1754.719838][T21439] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3344'. [ 1754.777784][T21439] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3344'. [ 1754.881707][T21439] netlink: 'syz.1.3344': attribute type 6 has an invalid length. [ 1754.972921][T21439] netlink: 'syz.1.3344': attribute type 5 has an invalid length. [ 1754.985694][T21439] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3344'. [ 1755.053529][T21435] netlink: 'syz.1.3344': attribute type 1 has an invalid length. [ 1755.089544][T21435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3344'. [ 1755.267555][T21456] 9pnet_fd: Insufficient options for proto=fd [ 1756.544904][ T12] 0: reclassify loop, rule prio 0, protocol 800 [ 1757.111933][T17703] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1758.006734][T17703] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1758.043469][T17703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1758.086425][T17703] usb 2-1: Product: syz [ 1758.111550][T17703] usb 2-1: Manufacturer: syz [ 1758.141826][T17703] usb 2-1: SerialNumber: syz [ 1758.169001][T17703] usb 2-1: config 0 descriptor?? [ 1758.209262][T17703] ch341 2-1:0.0: ch341-uart converter detected [ 1758.453433][T21495] fuse: Bad value for 'user_id' [ 1758.478739][T21495] fuse: Bad value for 'user_id' [ 1758.620175][T17703] usb 2-1: failed to send control message: -71 [ 1758.651536][T17703] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1758.699853][T17703] usb 2-1: USB disconnect, device number 77 [ 1758.720978][T17703] ch341 2-1:0.0: device disconnected [ 1758.782363][T21506] FAULT_INJECTION: forcing a failure. [ 1758.782363][T21506] name failslab, interval 1, probability 0, space 0, times 0 [ 1758.804746][T21506] CPU: 1 UID: 0 PID: 21506 Comm: syz.3.3359 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 1758.804773][T21506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1758.804785][T21506] Call Trace: [ 1758.804792][T21506] [ 1758.804801][T21506] dump_stack_lvl+0x241/0x360 [ 1758.804838][T21506] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1758.804856][T21506] ? __pfx__printk+0x10/0x10 [ 1758.804886][T21506] ? __kmalloc_cache_noprof+0x48/0x390 [ 1758.804906][T21506] ? __pfx___might_resched+0x10/0x10 [ 1758.804934][T21506] should_fail_ex+0x40a/0x550 [ 1758.804965][T21506] should_failslab+0xac/0x100 [ 1758.804995][T21506] __kmalloc_cache_noprof+0x70/0x390 [ 1758.805013][T21506] ? resv_map_alloc+0x51/0x2c0 [ 1758.805035][T21506] ? __fget_files+0x2a/0x410 [ 1758.805057][T21506] resv_map_alloc+0x51/0x2c0 [ 1758.805083][T21506] hugetlbfs_get_inode+0x60/0x690 [ 1758.805118][T21506] hugetlb_file_setup+0x204/0x5c0 [ 1758.805150][T21506] ksys_mmap_pgoff+0x20d/0x720 [ 1758.805185][T21506] do_syscall_64+0xf3/0x230 [ 1758.805211][T21506] ? clear_bhb_loop+0x35/0x90 [ 1758.805240][T21506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1758.805264][T21506] RIP: 0033:0x7f7e00f8d169 [ 1758.805280][T21506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1758.805295][T21506] RSP: 002b:00007f7e01d35038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1758.805314][T21506] RAX: ffffffffffffffda RBX: 00007f7e011a5fa0 RCX: 00007f7e00f8d169 [ 1758.805328][T21506] RDX: 0000000000000002 RSI: 0000000000800000 RDI: 0000400000800000 [ 1758.805340][T21506] RBP: 00007f7e01d35090 R08: ffffffffffffffff R09: 0000000000000000 [ 1758.805353][T21506] R10: 000000000007e832 R11: 0000000000000246 R12: 0000000000000001 [ 1758.805364][T21506] R13: 0000000000000000 R14: 00007f7e011a5fa0 R15: 00007ffe18d965e8 [ 1758.805390][T21506] [ 1759.103422][T18561] 0: reclassify loop, rule prio 0, protocol 800 [ 1760.815651][T21522] 9pnet_fd: Insufficient options for proto=fd [ 1761.371923][T17703] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1762.382923][T17703] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1762.537136][T17703] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1762.565222][T17703] usb 1-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 1762.583999][T17703] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1762.614384][T17703] usb 1-1: config 0 descriptor?? [ 1762.651624][ T46] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1762.892839][ T46] usb 2-1: too many configurations: 252, using maximum allowed: 8 [ 1762.915597][ T46] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1762.926831][ T46] usb 2-1: can't read configurations, error -61 [ 1763.061950][ T46] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1763.222423][ T46] usb 2-1: too many configurations: 252, using maximum allowed: 8 [ 1763.249772][T17703] ortek 0003:1223:3F07.003B: unknown main item tag 0x6 [ 1763.263630][ T46] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1763.281705][T17703] ortek 0003:1223:3F07.003B: report_id 29495 is invalid [ 1763.291665][ T46] usb 2-1: can't read configurations, error -61 [ 1763.311538][T17703] ortek 0003:1223:3F07.003B: item 0 2 1 8 parsing failed [ 1763.322633][ T46] usb usb2-port1: attempt power cycle [ 1763.338892][T17703] ortek 0003:1223:3F07.003B: probe with driver ortek failed with error -22 [ 1763.494127][T17694] usb 1-1: USB disconnect, device number 107 [ 1763.803575][T21562] fuse: Bad value for 'user_id' [ 1763.808490][T21562] fuse: Bad value for 'user_id' [ 1763.914711][T21564] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3369'. [ 1765.471933][ T46] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1765.504454][ T12] 0: reclassify loop, rule prio 0, protocol 800 [ 1765.566883][T21578] netlink: 188 bytes leftover after parsing attributes in process `syz.6.3373'. [ 1765.701964][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 1765.773385][ T46] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1765.844891][ T46] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 1765.885961][ T46] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1765.920690][ T46] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1765.967752][ T46] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1765.986207][ T46] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1765.999327][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1766.061887][ T46] usb 2-1: SerialNumber: syz [ 1766.129379][T21595] 9pnet_fd: Insufficient options for proto=fd [ 1766.179082][T21574] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1766.186505][T21574] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1766.415738][T17692] usb 2-1: USB disconnect, device number 81 [ 1766.552408][T17703] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1766.742976][T17703] usb 7-1: config 0 has an invalid interface number: 204 but max is 1 [ 1766.751393][T17703] usb 7-1: config 0 has no interface number 1 [ 1766.759375][T17703] usb 7-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 1766.768708][T17703] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1766.788296][T17703] usb 7-1: Product: syz [ 1766.801016][T17703] usb 7-1: Manufacturer: syz [ 1766.819141][T17703] usb 7-1: SerialNumber: syz [ 1766.852712][T17703] usb 7-1: config 0 descriptor?? [ 1766.948938][T17703] snd-usb-audio 7-1:0.204: probe with driver snd-usb-audio failed with error -22 [ 1767.044661][T18064] udevd[18064]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.204/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1767.303135][ T5820] usb 7-1: USB disconnect, device number 30 [ 1767.938887][T21618] fuse: Bad value for 'user_id' [ 1767.949068][T21618] fuse: Bad value for 'user_id' [ 1768.031825][T17692] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 1768.211621][T17692] usb 8-1: Using ep0 maxpacket: 16 [ 1768.219826][T17692] usb 8-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1768.239748][T17692] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 1768.255951][T17692] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1768.265946][T17692] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1768.341575][T21633] openvswitch: netlink: Multiple metadata blocks provided [ 1769.191586][T17692] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1769.262772][T17692] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1769.293375][T17692] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1769.441552][T17692] usb 8-1: SerialNumber: syz [ 1769.455791][T21614] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1769.470574][T21614] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1770.635233][T15157] 0: reclassify loop, rule prio 0, protocol 800 [ 1770.839403][ T46] usb 8-1: USB disconnect, device number 54 [ 1770.846195][T21648] 9pnet_fd: Insufficient options for proto=fd [ 1770.897340][T21650] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3389'. [ 1770.931744][T21650] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1773.047126][T17692] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 1774.111789][ T46] usb 1-1: new low-speed USB device number 108 using dummy_hcd [ 1774.276167][T17692] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1775.317826][T17692] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1776.121595][T17692] usb 8-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 1776.130697][T17692] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1776.139078][ T6311] 0: reclassify loop, rule prio 0, protocol 800 [ 1776.170824][T17692] usb 8-1: config 0 descriptor?? [ 1776.194613][ T46] usb 1-1: config 15 has an invalid interface number: 144 but max is 0 [ 1776.274868][ T46] usb 1-1: config 15 has no interface number 0 [ 1776.281093][ T46] usb 1-1: config 15 interface 144 altsetting 2 endpoint 0xD has invalid maxpacket 16, setting to 8 [ 1776.301089][T17692] usb 8-1: can't set config #0, error -71 [ 1776.334268][ T46] usb 1-1: config 15 interface 144 altsetting 2 endpoint 0xC has invalid maxpacket 64, setting to 8 [ 1776.364585][T17692] usb 8-1: USB disconnect, device number 55 [ 1776.381958][T15157] 0: reclassify loop, rule prio 0, protocol 800 [ 1776.428925][ T46] usb 1-1: config 15 interface 144 altsetting 2 endpoint 0x4 has invalid maxpacket 32, setting to 8 [ 1776.443032][T18064] udevd[18064]: setting mode of /dev/bus/usb/008/055 to 020664 failed: No such file or directory [ 1776.524298][ T46] usb 1-1: config 15 interface 144 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1776.540138][T18064] udevd[18064]: setting owner of /dev/bus/usb/008/055 to uid=0, gid=0 failed: No such file or directory [ 1776.631599][T17703] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1776.671201][ T46] usb 1-1: config 15 interface 144 altsetting 2 has a duplicate endpoint with address 0xD, skipping [ 1776.880961][ T46] usb 1-1: config 15 interface 144 altsetting 2 endpoint 0x7 is Bulk; changing to Interrupt [ 1776.891281][ T46] usb 1-1: config 15 interface 144 altsetting 2 endpoint 0x6 has invalid maxpacket 1023, setting to 8 [ 1777.021714][T17703] usb 7-1: Using ep0 maxpacket: 16 [ 1778.825746][ T46] usb 1-1: config 15 interface 144 has no altsetting 0 [ 1778.884220][ T46] usb 1-1: string descriptor 0 read error: -71 [ 1778.912194][ T46] usb 1-1: New USB device found, idVendor=2040, idProduct=c010, bcdDevice=75.b4 [ 1778.921336][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1778.942576][T17703] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1778.950184][T17703] usb 7-1: can't read configurations, error -71 [ 1779.005657][ T46] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 1779.030803][T21729] dccp_invalid_packet: P.Data Offset(255) too large [ 1779.050424][ T46] usb 1-1: no configuration chosen from 1 choice [ 1779.080795][ T46] usb 1-1: USB disconnect, device number 108 [ 1780.541693][T17692] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1780.563093][ T46] usb 8-1: new full-speed USB device number 56 using dummy_hcd [ 1780.768907][ T46] usb 8-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1780.794458][T17692] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1780.796931][ T46] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1780.831666][T17692] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1780.859009][ T46] usb 8-1: config 0 descriptor?? [ 1780.876877][ T46] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1780.885336][T17692] usb 4-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 1780.930801][T17692] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1780.971136][T17692] usb 4-1: config 0 descriptor?? [ 1781.351193][ T46] gp8psk: usb in 128 operation failed. [ 1781.422976][ T6311] 0: reclassify loop, rule prio 0, protocol 800 [ 1781.502816][T18561] 0: reclassify loop, rule prio 0, protocol 800 [ 1781.573031][ T46] gp8psk: FW Version = 109.112.104 (0x6d7068) Build 2055/70/250 [ 1781.769870][T17692] ortek 0003:1223:3F07.003C: unknown main item tag 0x6 [ 1782.123478][ T46] gp8psk: usb in 149 operation failed. [ 1782.170320][ T46] gp8psk: failed to get FPGA version [ 1782.178720][T17692] ortek 0003:1223:3F07.003C: report_id 29495 is invalid [ 1782.185839][T17692] ortek 0003:1223:3F07.003C: item 0 2 1 8 parsing failed [ 1782.193523][T17692] ortek 0003:1223:3F07.003C: probe with driver ortek failed with error -22 [ 1782.202252][ T46] gp8psk: usb in 138 operation failed. [ 1782.211974][T17692] usb 4-1: USB disconnect, device number 88 [ 1782.244420][ T46] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1782.281725][ T46] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1782.337447][ T46] usb 8-1: USB disconnect, device number 56 [ 1785.092085][ T46] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1785.295011][ T46] usb 7-1: Using ep0 maxpacket: 16 [ 1785.332833][ T46] usb 7-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1785.376646][ T46] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 1785.417286][ T46] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1785.458403][ T46] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1785.489230][ T46] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1785.543432][ T46] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1785.722646][ T46] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1785.735861][ T46] usb 7-1: SerialNumber: syz [ 1785.761513][T21803] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1785.768819][T21803] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1785.921265][T21823] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3422'. [ 1786.542328][ T46] usb 7-1: USB disconnect, device number 33 [ 1786.661889][T18561] 0: reclassify loop, rule prio 0, protocol 800 [ 1786.847976][T21829] dccp_invalid_packet: P.Data Offset(255) too large [ 1787.506385][ T6311] 0: reclassify loop, rule prio 0, protocol 800 [ 1787.771568][ T46] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1788.291888][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1788.317364][T21855] ªªªªª»: renamed from macvtap0 [ 1788.334401][ T46] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1788.388939][ T46] usb 1-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 1788.447961][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1788.947415][ T46] usb 1-1: config 0 descriptor?? [ 1789.341155][T21868] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1789.699176][ T46] ortek 0003:1223:3F07.003D: unknown main item tag 0x6 [ 1789.730645][ T46] ortek 0003:1223:3F07.003D: report_id 29495 is invalid [ 1789.777356][ T46] ortek 0003:1223:3F07.003D: item 0 2 1 8 parsing failed [ 1789.874571][ T46] ortek 0003:1223:3F07.003D: probe with driver ortek failed with error -22 [ 1789.888716][ T8663] usb 4-1: new full-speed USB device number 89 using dummy_hcd [ 1790.072223][ T46] usb 1-1: USB disconnect, device number 109 [ 1790.158728][ T8663] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1790.243743][ T8663] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 1790.291251][ T8663] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1790.311648][ T8663] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1790.335570][ T8663] usb 4-1: SerialNumber: syz [ 1791.121871][ T46] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1791.681746][ T46] usb 7-1: Using ep0 maxpacket: 16 [ 1791.853613][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.938024][ T5949] 0: reclassify loop, rule prio 0, protocol 800 [ 1792.000068][ T46] usb 7-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1792.524171][ T8663] rndis_host 4-1:1.0: probe with driver rndis_host failed with error -22 [ 1792.532899][ T46] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 1792.547350][ T8663] usb 4-1: USB disconnect, device number 89 [ 1792.553394][ T46] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1792.573080][ T46] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1792.631663][ T46] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1792.683359][ T46] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1793.247166][T18561] 0: reclassify loop, rule prio 0, protocol 800 [ 1793.263005][ T46] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1793.271265][ T46] usb 7-1: SerialNumber: syz [ 1793.280581][T21889] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1793.287989][T21889] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1793.677203][ T5872] usb 7-1: USB disconnect, device number 34 [ 1793.911698][ T46] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1794.283235][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 1794.400028][ T46] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1794.661929][ T46] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 1794.965279][ T46] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1795.011922][ T46] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1795.092065][ T46] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1795.156616][ T46] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1795.181508][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1795.291755][ T46] usb 1-1: SerialNumber: syz [ 1795.298158][T21931] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3442'. [ 1795.347685][T21909] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1795.358207][T21909] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1797.147844][ T46] usb 1-1: USB disconnect, device number 110 [ 1797.511637][T18561] 0: reclassify loop, rule prio 0, protocol 800 [ 1797.671118][T21954] dccp_invalid_packet: P.Data Offset(255) too large [ 1798.481815][ T3074] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 1798.699571][T21953] xt_CT: No such helper "pptp" [ 1798.725539][ T3074] usb 8-1: Using ep0 maxpacket: 16 [ 1798.738193][ T3074] usb 8-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1798.770458][ T3074] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 1798.793018][T18561] 0: reclassify loop, rule prio 0, protocol 800 [ 1798.811422][ T3074] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1798.821650][ T8663] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1798.838679][ T3074] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1798.858813][ T3074] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1798.903311][ T3074] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1798.929120][ T3074] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1798.951245][ T3074] usb 8-1: SerialNumber: syz [ 1798.978459][T21960] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1798.985998][T21960] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1798.993656][ T8663] usb 2-1: Using ep0 maxpacket: 16 [ 1799.010019][ T8663] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1799.051353][ T8663] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1799.121151][ T8663] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 1799.121704][ T5872] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1799.161570][ T8663] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1799.201548][ T8663] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1799.220949][ T8663] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1799.305836][ T5872] usb 7-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1799.328459][ T5872] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1799.345875][ T5872] usb 7-1: Product: syz [ 1799.356414][ T5872] usb 7-1: Manufacturer: syz [ 1799.365524][ T5872] usb 7-1: SerialNumber: syz [ 1799.457423][ T5872] usb 7-1: config 0 descriptor?? [ 1799.462892][ T8663] usb 2-1: SerialNumber: syz [ 1799.478830][T21958] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1799.489228][ T5872] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1800.438955][ T8663] usb 2-1: USB disconnect, device number 82 [ 1800.735336][ T8663] usb 8-1: USB disconnect, device number 57 [ 1801.558190][ T5872] gspca_sq905c: sq905c_read: usb_control_msg failed (-110) [ 1801.572651][ T5872] sq905c 7-1:0.0: Reading version command failed [ 1801.580077][ T5872] sq905c 7-1:0.0: probe with driver sq905c failed with error -110 [ 1801.806029][ T3074] usb 7-1: USB disconnect, device number 35 [ 1802.963544][ T5872] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1803.321336][ T5949] 0: reclassify loop, rule prio 0, protocol 800 [ 1803.337986][ T5872] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1803.968943][T15157] 0: reclassify loop, rule prio 0, protocol 800 [ 1804.272176][ T8663] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1804.280427][T18703] Bluetooth: hci2: command 0x0406 tx timeout [ 1804.320544][ T5872] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1804.342445][ T5872] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1804.445742][ T8663] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1804.458073][ T8663] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1804.505817][ T8663] usb 1-1: config 0 descriptor?? [ 1804.552979][ T8663] cp210x 1-1:0.0: cp210x converter detected [ 1804.581011][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1804.589158][ T5872] usb 2-1: SerialNumber: syz [ 1804.756614][ T8663] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 1804.759907][ T5872] usb 2-1: 0:2 : does not exist [ 1804.795172][ T8663] cp210x 1-1:0.0: querying part number failed [ 1804.838928][ T8663] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1804.856721][ T5872] usb 2-1: USB disconnect, device number 83 [ 1805.410668][T22027] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3462'. [ 1805.656547][T22028] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3460'. [ 1805.985726][T17956] udevd[17956]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1806.959011][ T5922] usb 1-1: USB disconnect, device number 111 [ 1807.013554][ T5922] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1807.085567][ T5922] cp210x 1-1:0.0: device disconnected [ 1810.232784][T18562] 0: reclassify loop, rule prio 0, protocol 800 [ 1810.239570][T18562] 0: reclassify loop, rule prio 0, protocol 800 [ 1813.531867][T21890] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1813.975379][T21890] usb 7-1: Using ep0 maxpacket: 16 [ 1813.995329][T21890] usb 7-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1814.121117][T21890] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 1814.149804][T21890] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1814.245320][T21890] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1814.457618][T21890] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1814.849189][T21890] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1814.903814][T21890] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1814.958945][T21890] usb 7-1: SerialNumber: syz [ 1815.079353][T22094] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1815.107024][T22094] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1815.373486][ T5922] usb 7-1: USB disconnect, device number 36 [ 1816.278809][T22145] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3483'. [ 1816.804800][ T6311] 0: reclassify loop, rule prio 0, protocol 800 [ 1816.814005][ T5949] 0: reclassify loop, rule prio 0, protocol 800 [ 1818.187843][T22156] syzkaller1: entered promiscuous mode [ 1818.311759][T22156] syzkaller1: entered allmulticast mode [ 1818.758313][T22164] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3488'. [ 1822.620277][T18561] 0: reclassify loop, rule prio 0, protocol 800 [ 1822.628680][T15157] 0: reclassify loop, rule prio 0, protocol 800 [ 1824.122012][T17692] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1824.294796][T17692] usb 2-1: Using ep0 maxpacket: 16 [ 1824.330511][T17692] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1824.372090][T17692] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1824.415871][T17692] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1824.443191][T17692] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1824.492966][T17692] usb 2-1: config 0 descriptor?? [ 1824.950091][T17692] microsoft 0003:045E:07DA.003E: invalid report_count 16357 [ 1825.007474][T17692] microsoft 0003:045E:07DA.003E: item 0 2 1 9 parsing failed [ 1825.038659][T17692] microsoft 0003:045E:07DA.003E: parse failed [ 1825.061731][T17692] microsoft 0003:045E:07DA.003E: probe with driver microsoft failed with error -22 [ 1826.001627][ T46] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 1826.381645][ T46] usb 8-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1826.439297][ T46] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1826.477248][ T46] usb 8-1: Product: syz [ 1826.513847][ T46] usb 8-1: Manufacturer: syz [ 1826.552184][ T46] usb 8-1: SerialNumber: syz [ 1826.671873][T22239] FAULT_INJECTION: forcing a failure. [ 1826.671873][T22239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1826.678725][ T46] usb 8-1: config 0 descriptor?? [ 1826.690333][T22239] CPU: 0 UID: 0 PID: 22239 Comm: syz.0.3501 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 1826.690360][T22239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1826.690374][T22239] Call Trace: [ 1826.690382][T22239] [ 1826.690391][T22239] dump_stack_lvl+0x241/0x360 [ 1826.690421][T22239] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1826.690442][T22239] ? __pfx__printk+0x10/0x10 [ 1826.690475][T22239] ? __pfx_lock_release+0x10/0x10 [ 1826.690513][T22239] should_fail_ex+0x40a/0x550 [ 1826.690549][T22239] _copy_from_user+0x2d/0xb0 [ 1826.690577][T22239] copy_msghdr_from_user+0xae/0x680 [ 1826.690609][T22239] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1826.690634][T22239] ? __fget_files+0x2a/0x410 [ 1826.690659][T22239] ? __fget_files+0x2a/0x410 [ 1826.690690][T22239] __sys_sendmsg+0x209/0x350 [ 1826.690716][T22239] ? __pfx___sys_sendmsg+0x10/0x10 [ 1826.690778][T22239] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1826.690810][T22239] ? do_syscall_64+0x100/0x230 [ 1826.690843][T22239] ? do_syscall_64+0xb6/0x230 [ 1826.690874][T22239] do_syscall_64+0xf3/0x230 [ 1826.690903][T22239] ? clear_bhb_loop+0x35/0x90 [ 1826.690935][T22239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1826.690962][T22239] RIP: 0033:0x7fdda7f8d169 [ 1826.690981][T22239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1826.690999][T22239] RSP: 002b:00007fdda8dc2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1826.691022][T22239] RAX: ffffffffffffffda RBX: 00007fdda81a6160 RCX: 00007fdda7f8d169 [ 1826.691037][T22239] RDX: 0000000004040810 RSI: 0000400000000240 RDI: 0000000000000008 [ 1826.691051][T22239] RBP: 00007fdda8dc2090 R08: 0000000000000000 R09: 0000000000000000 [ 1826.691064][T22239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1826.691077][T22239] R13: 0000000000000000 R14: 00007fdda81a6160 R15: 00007fff840c6448 [ 1826.691108][T22239] [ 1826.882932][ C0] vkms_vblank_simulate: vblank timer overrun [ 1826.901264][ T46] ch341 8-1:0.0: ch341-uart converter detected [ 1827.104738][ T46] usb 8-1: failed to receive control message: -32 [ 1827.111435][ T46] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32 [ 1827.123507][T18703] Bluetooth: hci2: command 0x0406 tx timeout [ 1827.178166][ T46] usb 8-1: USB disconnect, device number 58 [ 1827.194775][T22245] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3503'. [ 1827.200018][ T46] ch341 8-1:0.0: device disconnected [ 1827.397562][T22245] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1827.452777][T17692] usb 2-1: USB disconnect, device number 84 [ 1829.282412][ T8940] 0: reclassify loop, rule prio 0, protocol 800 [ 1829.316129][ T8940] 0: reclassify loop, rule prio 0, protocol 800 [ 1829.600281][T22262] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3507'. [ 1831.734452][ T3074] IPVS: starting estimator thread 0... [ 1832.202464][T22280] IPVS: using max 19 ests per chain, 45600 per kthread [ 1833.211145][T22297] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3513'. [ 1834.813076][ T12] 0: reclassify loop, rule prio 0, protocol 800 [ 1835.265038][T18562] 0: reclassify loop, rule prio 0, protocol 800 [ 1835.335340][T22312] program syz.3.3517 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1835.476484][T22316] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3518'. [ 1835.498093][T22316] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1835.811654][ T5872] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1836.902960][ T5872] usb 2-1: Using ep0 maxpacket: 8 [ 1836.952423][ T5872] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1837.119781][ T5872] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 1837.135171][ T5872] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1837.304177][T22346] Invalid ELF header magic: != ELF [ 1837.879188][ T5872] usb 2-1: config 4 has no interface number 0 [ 1838.048804][ T5872] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1838.058733][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1838.085947][ T5872] usb 2-1: Product: syz [ 1838.091880][ T5872] usb 2-1: Manufacturer: syz [ 1838.120920][ T5872] usb 2-1: SerialNumber: syz [ 1838.498647][ T5873] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1838.759432][ T5873] usb 7-1: Using ep0 maxpacket: 16 [ 1838.851655][ T5873] usb 7-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1838.872752][ T5873] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 1838.911817][ T5873] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1838.949876][ T5873] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1838.992942][ T5873] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1838.997482][ T5872] usb 2-1: USB disconnect, device number 85 [ 1839.038172][ T5873] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1839.077976][ T5873] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1839.119217][ T5873] usb 7-1: SerialNumber: syz [ 1839.140958][T22357] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1839.149097][T22357] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1839.405880][ T5872] usb 7-1: USB disconnect, device number 37 [ 1839.821974][T22384] dccp_invalid_packet: P.Data Offset(255) too large [ 1840.383093][ T6311] 0: reclassify loop, rule prio 0, protocol 800 [ 1840.402240][ T8940] 0: reclassify loop, rule prio 0, protocol 800 [ 1840.932409][T22395] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3531'. [ 1840.942508][T22395] netlink: 152 bytes leftover after parsing attributes in process `syz.7.3531'. [ 1841.438721][T22405] evm: overlay not supported [ 1841.948100][T22417] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3536'. [ 1842.072140][T22417] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1842.241749][ T3074] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 1842.450498][ T3074] usb 8-1: Using ep0 maxpacket: 16 [ 1842.473316][ T3074] usb 8-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1842.498578][ T3074] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 1842.711628][ T3074] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1842.711661][ T3074] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1842.711683][ T3074] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1842.712736][ T3074] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1842.712760][ T3074] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1842.712778][ T3074] usb 8-1: SerialNumber: syz [ 1842.747198][T22421] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1842.747486][T22421] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1844.181987][T22438] 9pnet_fd: Insufficient options for proto=fd [ 1844.330947][T22438] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3539'. [ 1844.426375][T22436] xt_CT: No such helper "pptp" [ 1844.574467][T22455] batadv_slave_1: entered promiscuous mode [ 1845.641654][T21890] usb 8-1: USB disconnect, device number 59 [ 1845.804945][T22465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3543'. [ 1845.907397][T22468] ubi31: attaching mtd0 [ 1845.915339][T22468] ubi31: scanning is finished [ 1845.920057][T22468] ubi31: empty MTD device detected [ 1846.438647][ T6311] 0: reclassify loop, rule prio 0, protocol 800 [ 1846.445479][T18562] 0: reclassify loop, rule prio 0, protocol 800 [ 1846.529775][T22468] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 1846.740128][T22453] batadv_slave_1: left promiscuous mode [ 1846.961921][ T5873] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1847.157867][ T5873] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1848.062763][T18703] Bluetooth: hci2: command 0x0406 tx timeout [ 1848.071822][ T5873] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1848.095391][ T5873] usb 7-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 1848.104773][ T5873] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1848.123430][ T5873] usb 7-1: config 0 descriptor?? [ 1848.794545][ T5873] ortek 0003:1223:3F07.003F: unknown main item tag 0x6 [ 1848.802062][ T5873] ortek 0003:1223:3F07.003F: report_id 29495 is invalid [ 1848.809055][ T5873] ortek 0003:1223:3F07.003F: item 0 2 1 8 parsing failed [ 1848.848784][ T5873] ortek 0003:1223:3F07.003F: probe with driver ortek failed with error -22 [ 1849.747711][ T5873] usb 7-1: USB disconnect, device number 38 [ 1851.555351][T22535] openvswitch: netlink: Multiple metadata blocks provided [ 1852.151875][ T5873] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1852.169307][T15157] 0: reclassify loop, rule prio 0, protocol 800 [ 1852.178363][T18562] 0: reclassify loop, rule prio 0, protocol 800 [ 1852.371710][ T5873] usb 7-1: Using ep0 maxpacket: 16 [ 1852.389934][ T5873] usb 7-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1852.401772][ T3074] usb 1-1: new full-speed USB device number 112 using dummy_hcd [ 1852.421550][ T5873] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 1852.452643][ T5873] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1852.481504][ T5873] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1852.491208][ T5873] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1852.537707][ T5873] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1852.547005][ T5873] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1852.561525][ T5873] usb 7-1: SerialNumber: syz [ 1852.584244][T22528] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1852.591674][ T5922] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1852.593650][ T3074] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1852.617830][T22528] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1852.656423][ T3074] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 1852.700437][ T3074] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1852.727995][ T3074] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1852.744382][ T3074] usb 1-1: SerialNumber: syz [ 1852.772101][ T5922] usb 2-1: Using ep0 maxpacket: 32 [ 1852.793043][ T5922] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1852.801420][ T5922] usb 2-1: config 0 has an invalid descriptor of length 194, skipping remainder of the config [ 1852.836728][ T5922] usb 2-1: config 0 has no interface number 0 [ 1852.851849][ T5922] usb 2-1: too many endpoints for config 0 interface 67 altsetting 126: 101, using maximum allowed: 30 [ 1852.891218][ T5922] usb 2-1: config 0 interface 67 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 101 [ 1853.828591][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.878021][ T5922] usb 2-1: config 0 interface 67 has no altsetting 0 [ 1853.895237][ T5922] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1853.918988][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1853.949345][ T5922] usb 2-1: Product: syz [ 1853.970610][ T5922] usb 2-1: Manufacturer: syz [ 1853.996073][ T5922] usb 2-1: SerialNumber: syz [ 1854.030237][ T5922] usb 2-1: config 0 descriptor?? [ 1854.036940][T17694] usb 7-1: USB disconnect, device number 39 [ 1854.627646][ T5922] smsc95xx v2.0.0 [ 1854.669312][ T5922] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1854.700556][ T5922] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -22 [ 1854.767631][ T5922] usb 2-1: USB disconnect, device number 86 [ 1854.958873][ T3074] rndis_host 1-1:1.0: probe with driver rndis_host failed with error -22 [ 1855.085699][T22563] FAULT_INJECTION: forcing a failure. [ 1855.085699][T22563] name failslab, interval 1, probability 0, space 0, times 0 [ 1855.098910][T22563] CPU: 0 UID: 0 PID: 22563 Comm: syz.6.3562 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 1855.098937][T22563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1855.098949][T22563] Call Trace: [ 1855.098958][T22563] [ 1855.098966][T22563] dump_stack_lvl+0x241/0x360 [ 1855.098993][T22563] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1855.099020][T22563] ? dump_stack+0x9/0x15 [ 1855.099043][T22563] should_fail_ex+0x40a/0x550 [ 1855.099076][T22563] should_failslab+0xac/0x100 [ 1855.099109][T22563] __kmalloc_noprof+0xdd/0x4c0 [ 1855.099127][T22563] ? sk_prot_alloc+0xe0/0x210 [ 1855.099156][T22563] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1855.099184][T22563] sk_prot_alloc+0xe0/0x210 [ 1855.099212][T22563] ? sk_alloc+0x27/0x370 [ 1855.099241][T22563] sk_alloc+0x3e/0x370 [ 1855.099274][T22563] __netlink_create+0x65/0x260 [ 1855.099294][T22563] ? __pfx_genl_release+0x10/0x10 [ 1855.099320][T22563] netlink_create+0x3ab/0x560 [ 1855.099346][T22563] ? __pfx_genl_unbind+0x10/0x10 [ 1855.099376][T22563] ? __pfx_genl_bind+0x10/0x10 [ 1855.099403][T22563] __sock_create+0x4c0/0xa30 [ 1855.099437][T22563] __sys_socket+0x150/0x3c0 [ 1855.099463][T22563] ? __pfx___sys_socket+0x10/0x10 [ 1855.099489][T22563] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1855.099518][T22563] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1855.099550][T22563] __x64_sys_socket+0x7a/0x90 [ 1855.099576][T22563] do_syscall_64+0xf3/0x230 [ 1855.099604][T22563] ? clear_bhb_loop+0x35/0x90 [ 1855.099635][T22563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1855.099661][T22563] RIP: 0033:0x7fb7cd98f087 [ 1855.099678][T22563] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1855.099695][T22563] RSP: 002b:00007fb7ce896f78 EFLAGS: 00000287 ORIG_RAX: 0000000000000029 [ 1855.099715][T22563] RAX: ffffffffffffffda RBX: 00007fb7cdba6080 RCX: 00007fb7cd98f087 [ 1855.099730][T22563] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1855.099742][T22563] RBP: 00007fb7ce898090 R08: 0000000000000000 R09: 0000000000000000 [ 1855.099754][T22563] R10: 0000400000000000 R11: 0000000000000287 R12: 0000000000000001 [ 1855.099767][T22563] R13: 000000000000001e R14: 00007fb7cdba6080 R15: 0000400000000000 [ 1855.099795][T22563] [ 1855.141541][ T3074] usb 1-1: USB disconnect, device number 112 [ 1856.672157][T22608] FAULT_INJECTION: forcing a failure. [ 1856.672157][T22608] name failslab, interval 1, probability 0, space 0, times 0 [ 1856.821576][T22608] CPU: 0 UID: 0 PID: 22608 Comm: syz.7.3568 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 1856.821607][T22608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1856.821620][T22608] Call Trace: [ 1856.821627][T22608] [ 1856.821636][T22608] dump_stack_lvl+0x241/0x360 [ 1856.821664][T22608] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1856.821684][T22608] ? __pfx__printk+0x10/0x10 [ 1856.821716][T22608] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 1856.821738][T22608] ? __pfx___might_resched+0x10/0x10 [ 1856.821767][T22608] should_fail_ex+0x40a/0x550 [ 1856.821800][T22608] should_failslab+0xac/0x100 [ 1856.821831][T22608] kmem_cache_alloc_node_noprof+0x77/0x380 [ 1856.821851][T22608] ? __alloc_skb+0x1c3/0x440 [ 1856.821877][T22608] ? br_get_link_af_size_filtered+0xdb/0xd30 [ 1856.821905][T22608] __alloc_skb+0x1c3/0x440 [ 1856.821938][T22608] ? __pfx___alloc_skb+0x10/0x10 [ 1856.821970][T22608] ? if_nlmsg_size+0x540/0x7a0 [ 1856.821993][T22608] rtmsg_ifinfo_build_skb+0x84/0x260 [ 1856.822022][T22608] rtnetlink_event+0x1b1/0x260 [ 1856.822049][T22608] notifier_call_chain+0x1a5/0x3f0 [ 1856.822081][T22608] __netdev_upper_dev_unlink+0x2ba/0x8e0 [ 1856.822114][T22608] ? __pfx___netdev_upper_dev_unlink+0x10/0x10 [ 1856.822146][T22608] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1856.822166][T22608] ? netdev_upper_dev_unlink+0x84/0xd0 [ 1856.822205][T22608] netdev_upper_dev_unlink+0x92/0xd0 [ 1856.822231][T22608] ? __pfx_netdev_upper_dev_unlink+0x10/0x10 [ 1856.822268][T22608] virt_wifi_dellink+0x30c/0x3e0 [ 1856.822294][T22608] ? __pfx_virt_wifi_dellink+0x10/0x10 [ 1856.822321][T22608] ? __bpf_trace_contention_end+0x14f/0x230 [ 1856.822347][T22608] ? __bpf_trace_contention_end+0x170/0x230 [ 1856.822370][T22608] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 1856.822389][T22608] ? __mutex_trylock_common+0x183/0x2e0 [ 1856.822410][T22608] ? __pfx___might_resched+0x10/0x10 [ 1856.822444][T22608] ? rcu_is_watching+0x15/0xb0 [ 1856.822464][T22608] ? trace_contention_end+0x3c/0x120 [ 1856.822485][T22608] ? __mutex_lock+0x397/0x1010 [ 1856.822520][T22608] ? mark_lock+0x9a/0x360 [ 1856.822550][T22608] ? rtnl_dellink+0x394/0x8d0 [ 1856.822573][T22608] ? __pfx___mutex_lock+0x10/0x10 [ 1856.822612][T22608] ? __nla_parse+0x40/0x60 [ 1856.822633][T22608] ? __pfx_virt_wifi_dellink+0x10/0x10 [ 1856.822656][T22608] rtnl_dellink+0x518/0x8d0 [ 1856.822684][T22608] ? __pfx_rtnl_dellink+0x10/0x10 [ 1856.822714][T22608] ? validate_chain+0x11e/0x5920 [ 1856.822734][T22608] ? __pfx_lock_acquire+0x10/0x10 [ 1856.822774][T22608] ? __pfx_lock_release+0x10/0x10 [ 1856.822847][T22608] ? cap_capable+0x139/0x450 [ 1856.822884][T22608] ? __pfx_rtnl_dellink+0x10/0x10 [ 1856.822908][T22608] rtnetlink_rcv_msg+0x791/0xcf0 [ 1856.822928][T22608] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 1856.822954][T22608] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1856.822991][T22608] netlink_rcv_skb+0x206/0x480 [ 1856.823011][T22608] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1856.823035][T22608] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1856.823075][T22608] ? netlink_deliver_tap+0x2e/0x1b0 [ 1856.823098][T22608] netlink_unicast+0x7f6/0x990 [ 1856.823134][T22608] ? __pfx_netlink_unicast+0x10/0x10 [ 1856.823160][T22608] ? __virt_addr_valid+0x45f/0x530 [ 1856.823196][T22608] ? __phys_addr_symbol+0x2f/0x70 [ 1856.823222][T22608] ? __check_object_size+0x47a/0x730 [ 1856.823256][T22608] netlink_sendmsg+0x8de/0xcb0 [ 1856.823287][T22608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1856.823319][T22608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1856.823338][T22608] __sock_sendmsg+0x221/0x270 [ 1856.823363][T22608] ____sys_sendmsg+0x53a/0x860 [ 1856.823400][T22608] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1856.823427][T22608] ? __fget_files+0x2a/0x410 [ 1856.823449][T22608] ? __fget_files+0x2a/0x410 [ 1856.823477][T22608] __sys_sendmsg+0x269/0x350 [ 1856.823499][T22608] ? __pfx___sys_sendmsg+0x10/0x10 [ 1856.823529][T22608] ? do_sys_openat2+0x17a/0x1d0 [ 1856.823589][T22608] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1856.823619][T22608] ? do_syscall_64+0x100/0x230 [ 1856.823649][T22608] ? do_syscall_64+0xb6/0x230 [ 1856.823678][T22608] do_syscall_64+0xf3/0x230 [ 1856.823706][T22608] ? clear_bhb_loop+0x35/0x90 [ 1856.823736][T22608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1856.823763][T22608] RIP: 0033:0x7fdb25d8d169 [ 1856.823780][T22608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1856.823797][T22608] RSP: 002b:00007fdb26c5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1856.823818][T22608] RAX: ffffffffffffffda RBX: 00007fdb25fa5fa0 RCX: 00007fdb25d8d169 [ 1856.823833][T22608] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000005 [ 1856.823845][T22608] RBP: 00007fdb26c5f090 R08: 0000000000000000 R09: 0000000000000000 [ 1856.823857][T22608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1856.823869][T22608] R13: 0000000000000000 R14: 00007fdb25fa5fa0 R15: 00007ffe80f333a8 [ 1856.823898][T22608] [ 1858.268805][T18561] 0: reclassify loop, rule prio 0, protocol 800 [ 1858.275840][ T12] 0: reclassify loop, rule prio 0, protocol 800 [ 1860.316977][T22626] netlink: 'syz.3.3570': attribute type 8 has an invalid length. [ 1860.445536][T22632] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3572'. [ 1861.905481][ T46] usb 8-1: new full-speed USB device number 60 using dummy_hcd [ 1862.242687][ T46] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1863.260845][ T46] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 1863.321741][ T46] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1863.331310][ T46] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1863.458913][ T46] usb 8-1: SerialNumber: syz [ 1863.731535][ T46] usb 8-1: can't set config #1, error -71 [ 1863.738612][ T46] usb 8-1: USB disconnect, device number 60 [ 1863.812778][T22654] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1863.820187][T22654] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1863.826450][T22654] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1863.832585][T22654] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1863.892180][T22654] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1863.898305][T22654] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1863.936366][T22654] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1863.942329][T22654] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1864.073308][T20392] 0: reclassify loop, rule prio 0, protocol 800 [ 1864.080105][ T62] 0: reclassify loop, rule prio 0, protocol 800 [ 1864.234114][T22672] openvswitch: netlink: ufid size 24 bytes exceeds the range (1, 16) [ 1864.294944][T22672] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1864.514918][T22687] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3583'. [ 1864.603732][T22687] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1865.901645][T15251] Bluetooth: hci5: command 0x0406 tx timeout [ 1865.907858][T15251] Bluetooth: hci4: command 0x0c1a tx timeout [ 1865.914025][ T5137] Bluetooth: hci1: command 0x0406 tx timeout [ 1865.991535][T15251] Bluetooth: hci2: command 0x0406 tx timeout [ 1865.997683][T18703] Bluetooth: hci6: command 0x0406 tx timeout [ 1867.234385][T22714] blktrace: Concurrent blktraces are not allowed on sg0 [ 1867.351357][T22721] relay: one or more items not logged [item size (56) > sub-buffer size (42)] [ 1867.511500][T21890] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 1867.694214][T21890] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1867.739740][T21890] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 1867.823425][T21890] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1867.861204][T21890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1867.890022][T21890] usb 2-1: SerialNumber: syz [ 1867.921610][T17703] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1867.987250][T15251] Bluetooth: hci5: command 0x0406 tx timeout [ 1868.063983][T18703] Bluetooth: hci6: command 0x0406 tx timeout [ 1868.070163][T15251] Bluetooth: hci2: command 0x0406 tx timeout [ 1868.279035][T17703] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1868.419871][T17703] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1868.917553][T17703] usb 7-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 1868.986231][T17703] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1869.088287][T17703] usb 7-1: config 0 descriptor?? [ 1870.172856][T17703] ortek 0003:1223:3F07.0040: unknown main item tag 0x6 [ 1870.190401][T17703] ortek 0003:1223:3F07.0040: report_id 29495 is invalid [ 1870.199906][T17703] ortek 0003:1223:3F07.0040: item 0 2 1 8 parsing failed [ 1870.556892][T21890] rndis_host 2-1:1.0: probe with driver rndis_host failed with error -22 [ 1870.567696][T17703] ortek 0003:1223:3F07.0040: probe with driver ortek failed with error -22 [ 1870.569028][T20392] 0: reclassify loop, rule prio 0, protocol 800 [ 1870.580901][T21890] usb 2-1: USB disconnect, device number 87 [ 1870.599680][ T4880] 0: reclassify loop, rule prio 0, protocol 800 [ 1870.871230][T22771] input: syz0 as /devices/virtual/input/input15 [ 1871.272291][T17703] usb 7-1: USB disconnect, device number 40 [ 1873.521663][T17694] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1873.709444][T17694] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1873.860505][T17694] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1873.987407][T17694] usb 7-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1874.016823][T17694] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1874.124111][T17694] usb 7-1: config 0 descriptor?? [ 1874.626304][T22807] openvswitch: netlink: IP tunnel attribute has 10 unknown bytes. [ 1874.827712][T22807] syzkaller0: entered promiscuous mode [ 1874.859779][T22807] syzkaller0: entered allmulticast mode [ 1875.020100][T17694] hid-led 0003:27B8:01ED.0041: hidraw1: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.6-1/input0 [ 1875.061661][T17703] usb 8-1: new full-speed USB device number 61 using dummy_hcd [ 1875.077863][T17694] hid-led 0003:27B8:01ED.0041: ThingM blink(1) initialized [ 1875.696000][T17692] usb 7-1: USB disconnect, device number 41 [ 1876.013193][T17703] usb 8-1: device descriptor read/64, error -71 [ 1876.271508][T17703] usb 8-1: new full-speed USB device number 62 using dummy_hcd [ 1876.675056][T17703] usb 8-1: device descriptor read/64, error -71 [ 1876.858722][T17703] usb usb8-port1: attempt power cycle [ 1876.864835][ T6311] 0: reclassify loop, rule prio 0, protocol 800 [ 1876.871224][ T4880] 0: reclassify loop, rule prio 0, protocol 800 [ 1877.271360][ T29] audit: type=1800 audit(1741230680.146:160): pid=22859 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.3615" name="file1" dev="tmpfs" ino=1016 res=0 errno=0 [ 1877.296469][T22863] FAULT_INJECTION: forcing a failure. [ 1877.296469][T22863] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1877.351770][T17703] usb 8-1: new full-speed USB device number 63 using dummy_hcd [ 1877.359949][T22863] CPU: 1 UID: 0 PID: 22863 Comm: syz.1.3617 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 1877.359976][T22863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1877.359989][T22863] Call Trace: [ 1877.359997][T22863] [ 1877.360006][T22863] dump_stack_lvl+0x241/0x360 [ 1877.360033][T22863] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1877.360054][T22863] ? __pfx__printk+0x10/0x10 [ 1877.360083][T22863] ? scsi_block_when_processing_errors+0x295/0x360 [ 1877.360114][T22863] ? __pfx_lock_release+0x10/0x10 [ 1877.360149][T22863] should_fail_ex+0x40a/0x550 [ 1877.360192][T22863] _copy_from_user+0x2d/0xb0 [ 1877.360217][T22863] sg_write+0x350/0xf10 [ 1877.360267][T22863] ? __pfx_sg_write+0x10/0x10 [ 1877.360310][T22863] ? mark_lock+0x9a/0x360 [ 1877.360359][T22863] ? bpf_lsm_file_permission+0x9/0x10 [ 1877.360384][T22863] ? rw_verify_area+0x243/0x630 [ 1877.360407][T22863] ? __pfx_sg_write+0x10/0x10 [ 1877.360432][T22863] vfs_write+0x29f/0xd10 [ 1877.360458][T22863] ? __mutex_unlock_slowpath+0x227/0x800 [ 1877.360487][T22863] ? __pfx_vfs_write+0x10/0x10 [ 1877.360508][T22863] ? do_sys_openat2+0x17a/0x1d0 [ 1877.360532][T22863] ? __fget_files+0x2a/0x410 [ 1877.360553][T22863] ? __fget_files+0x395/0x410 [ 1877.360570][T22863] ? __fget_files+0x2a/0x410 [ 1877.360596][T22863] ksys_write+0x18f/0x2b0 [ 1877.360621][T22863] ? __pfx_ksys_write+0x10/0x10 [ 1877.360645][T22863] ? do_syscall_64+0x100/0x230 [ 1877.360673][T22863] ? do_syscall_64+0xb6/0x230 [ 1877.360700][T22863] do_syscall_64+0xf3/0x230 [ 1877.360726][T22863] ? clear_bhb_loop+0x35/0x90 [ 1877.360754][T22863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1877.360780][T22863] RIP: 0033:0x7f0d17b8d169 [ 1877.360796][T22863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1877.360812][T22863] RSP: 002b:00007f0d18967038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1877.360848][T22863] RAX: ffffffffffffffda RBX: 00007f0d17da5fa0 RCX: 00007f0d17b8d169 [ 1877.360864][T22863] RDX: 00000000000000c4 RSI: 0000400000000200 RDI: 0000000000000004 [ 1877.360876][T22863] RBP: 00007f0d18967090 R08: 0000000000000000 R09: 0000000000000000 [ 1877.360889][T22863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1877.360901][T22863] R13: 0000000000000000 R14: 00007f0d17da5fa0 R15: 00007ffe844319b8 [ 1877.360930][T22863] [ 1877.594364][ C1] vkms_vblank_simulate: vblank timer overrun [ 1877.681643][ T3074] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1878.186161][ T3074] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1878.221184][ T3074] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1878.249147][T17703] usb 8-1: device not accepting address 63, error -71 [ 1878.273841][ T3074] usb 4-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 1878.304595][ T3074] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1878.343275][ T3074] usb 4-1: config 0 descriptor?? [ 1879.168035][ T3074] ortek 0003:1223:3F07.0042: unknown main item tag 0x6 [ 1879.197155][ T3074] ortek 0003:1223:3F07.0042: report_id 29495 is invalid [ 1879.216513][ T3074] ortek 0003:1223:3F07.0042: item 0 2 1 8 parsing failed [ 1879.229718][ T3074] ortek 0003:1223:3F07.0042: probe with driver ortek failed with error -22 [ 1879.370245][T17694] usb 4-1: USB disconnect, device number 90 [ 1881.984346][ T8940] 0: reclassify loop, rule prio 0, protocol 800 [ 1882.626231][ T8940] 0: reclassify loop, rule prio 0, protocol 800 [ 1887.744940][ T4880] 0: reclassify loop, rule prio 0, protocol 800 [ 1887.758083][ T4880] 0: reclassify loop, rule prio 0, protocol 800 [ 1893.503398][ T6311] 0: reclassify loop, rule prio 0, protocol 800 [ 1899.264320][ T8940] 0: reclassify loop, rule prio 0, protocol 800 [ 1905.021888][ T6311] 0: reclassify loop, rule prio 0, protocol 800 [ 1906.942784][ T4880] 0: reclassify loop, rule prio 0, protocol 800 [ 1910.782326][ T6311] 0: reclassify loop, rule prio 0, protocol 800 [ 1912.062118][ T6311] 0: reclassify loop, rule prio 0, protocol 800 [ 1914.624537][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1916.541935][ T8940] 0: reclassify loop, rule prio 0, protocol 800 [ 1917.102072][ T12] 0: reclassify loop, rule prio 0, protocol 800 [ 1919.742228][ C1] 0: reclassify loop, rule prio 0, protocol 800 [ 1921.662166][ T12] 0: reclassify loop, rule prio 0, protocol 800 [ 1922.302171][ T12] 0: reclassify loop, rule prio 0, protocol 800 [ 1926.783270][T15157] 0: reclassify loop, rule prio 0, protocol 800 [ 1928.062108][ T6311] 0: reclassify loop, rule prio 0, protocol 800 [ 1933.182132][ T6311] 0: reclassify loop, rule prio 0, protocol 800 [ 1936.382041][ T4880] 0: reclassify loop, rule prio 0, protocol 800 [ 1938.942201][ T4880] 0: reclassify loop, rule prio 0, protocol 800 [ 1942.152033][T15157] 0: reclassify loop, rule prio 0, protocol 800 [ 1944.063535][ T6311] 0: reclassify loop, rule prio 0, protocol 800 [ 1947.902082][ T4880] 0: reclassify loop, rule prio 0, protocol 800 [ 1949.181892][T15157] 0: reclassify loop, rule prio 0, protocol 800 [ 1953.662737][T15157] 0: reclassify loop, rule prio 0, protocol 800 [ 1954.952486][ T8940] 0: reclassify loop, rule prio 0, protocol 800 [ 1958.781962][ T8940] 0: reclassify loop, rule prio 0, protocol 800 [ 1960.702899][ T6311] 0: reclassify loop, rule prio 0, protocol 800 [ 1964.542325][ T6311] 0: reclassify loop, rule prio 0, protocol 800 [ 1965.822383][ T4880] 0: reclassify loop, rule prio 0, protocol 800 [ 1970.302500][T15157] 0: reclassify loop, rule prio 0, protocol 800 [ 1970.872176][ T4880] 0: reclassify loop, rule prio 0, protocol 800 [ 1975.902100][ T6311] 0: reclassify loop, rule prio 0, protocol 800 [ 1976.063826][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.071937][ T4880] 0: reclassify loop, rule prio 0, protocol 800 [ 1981.182397][T15157] 0: reclassify loop, rule prio 0, protocol 800 [ 1981.188776][ T8940] 0: reclassify loop, rule prio 0, protocol 800 [ 1986.942764][ T8940] 0: reclassify loop, rule prio 0, protocol 800 [ 1986.949108][ T6311] 0: reclassify loop, rule prio 0, protocol 800 [ 1992.062043][ T6311] 0: reclassify loop, rule prio 0, protocol 800 [ 1992.068394][T15157] 0: reclassify loop, rule prio 0, protocol 800 [ 1997.109277][ T6311] 0: reclassify loop, rule prio 0, protocol 800 [ 1997.822675][ T4880] 0: reclassify loop, rule prio 0, protocol 800 [ 2002.144646][T15157] 0: reclassify loop, rule prio 0, protocol 800 [ 2003.581933][ T12] 0: reclassify loop, rule prio 0, protocol 800 [ 2008.062342][T15157] 0: reclassify loop, rule prio 0, protocol 800 [ 2009.342183][T15157] 0: reclassify loop, rule prio 0, protocol 800 [ 2013.822685][ T4880] 0: reclassify loop, rule prio 0, protocol 800 [ 2014.382190][T18561] 0: reclassify loop, rule prio 0, protocol 800 [ 2019.581811][ T4880] 0: reclassify loop, rule prio 0, protocol 800 [ 2020.221816][ T12] 0: reclassify loop, rule prio 0, protocol 800 [ 2025.272622][T18561] 0: reclassify loop, rule prio 0, protocol 800 [ 2025.341798][T18561] 0: reclassify loop, rule prio 0, protocol 800 [ 2031.101994][ T4880] 0: reclassify loop, rule prio 0, protocol 800 [ 2036.221918][ T12] 0: reclassify loop, rule prio 0, protocol 800 [ 2037.513890][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.141769][ T30] INFO: task kworker/0:12:17696 blocked for more than 143 seconds. [ 2038.149740][ T30] Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 2038.158864][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2038.167657][ T30] task:kworker/0:12 state:D stack:20768 pid:17696 tgid:17696 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 2038.179877][ T30] Workqueue: usb_hub_wq hub_event [ 2038.185702][ T30] Call Trace: [ 2038.189021][ T30] [ 2038.193608][ T30] __schedule+0x18bc/0x4c40 [ 2038.198153][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 2038.203229][ T30] ? __pfx___schedule+0x10/0x10 [ 2038.208081][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2038.214135][ T30] ? __pfx_lock_release+0x10/0x10 [ 2038.219189][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 2038.224443][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 2038.229644][ T30] ? schedule+0x90/0x320 [ 2038.234592][ T30] schedule+0x14b/0x320 [ 2038.238789][ T30] usb_kill_urb+0x1c9/0x300 [ 2038.243331][ T30] ? __pfx_usb_kill_urb+0x10/0x10 [ 2038.248378][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2038.254513][ T30] usb_start_wait_urb+0x1b0/0x520 [ 2038.259575][ T30] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 2038.265195][ T30] usb_control_msg+0x2b1/0x4c0 [ 2038.269978][ T30] ? __pfx_usb_control_msg+0x10/0x10 [ 2038.275342][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 2038.280134][ T30] hub_port_init+0xcbe/0x26f0 [ 2038.284922][ T30] hub_event+0x2962/0x5150 [ 2038.289393][ T30] ? __pfx_hub_event+0x10/0x10 [ 2038.294260][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 2038.299321][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2038.307148][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2038.313625][ T30] ? process_scheduled_works+0x9c6/0x18e0 [ 2038.319364][ T30] process_scheduled_works+0xabe/0x18e0 [ 2038.324982][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 2038.330966][ T30] ? assign_work+0x364/0x3d0 [ 2038.335612][ T30] worker_thread+0x870/0xd30 [ 2038.340234][ T30] ? __kthread_parkme+0x169/0x1d0 [ 2038.345308][ T30] ? __pfx_worker_thread+0x10/0x10 [ 2038.350419][ T30] kthread+0x7a9/0x920 [ 2038.354647][ T30] ? __pfx_kthread+0x10/0x10 [ 2038.359278][ T30] ? __pfx_worker_thread+0x10/0x10 [ 2038.364429][ T30] ? __pfx_kthread+0x10/0x10 [ 2038.369024][ T30] ? __pfx_kthread+0x10/0x10 [ 2038.373738][ T30] ? __pfx_kthread+0x10/0x10 [ 2038.378435][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 2038.383893][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 2038.389116][ T30] ? __pfx_kthread+0x10/0x10 [ 2038.393802][ T30] ret_from_fork+0x4b/0x80 [ 2038.398236][ T30] ? __pfx_kthread+0x10/0x10 [ 2038.402923][ T30] ret_from_fork_asm+0x1a/0x30 [ 2038.407712][ T30] [ 2038.410747][ T30] [ 2038.410747][ T30] Showing all locks held in the system: [ 2038.418865][ T30] 1 lock held by khungtaskd/30: [ 2038.423849][ T30] #0: ffffffff8eb392e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 2038.433856][ T30] 2 locks held by getty/5577: [ 2038.438540][ T30] #0: ffff8880313610a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2038.448350][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x616/0x1770 [ 2038.458478][ T30] 5 locks held by kworker/0:12/17696: [ 2038.463867][ T30] #0: ffff8880216de548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 2038.475220][ T30] #1: ffffc9000488fc60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 2038.487114][ T30] #2: ffff88802a119190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1fe/0x5150 [ 2038.496064][ T30] #3: ffff88802a11c510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x25b9/0x5150 [ 2038.506077][ T30] #4: ffff888029c34468 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x25f7/0x5150 [ 2038.515804][ T30] [ 2038.518121][ T30] ============================================= [ 2038.518121][ T30] [ 2038.526793][ T30] NMI backtrace for cpu 0 [ 2038.526805][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 2038.526822][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2038.526831][ T30] Call Trace: [ 2038.526837][ T30] [ 2038.526844][ T30] dump_stack_lvl+0x241/0x360 [ 2038.526863][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2038.526878][ T30] ? __pfx__printk+0x10/0x10 [ 2038.526909][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 2038.526931][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2038.526947][ T30] ? _printk+0xd5/0x120 [ 2038.526968][ T30] ? __pfx__printk+0x10/0x10 [ 2038.526989][ T30] ? __wake_up_klogd+0xcc/0x110 [ 2038.527008][ T30] ? __pfx__printk+0x10/0x10 [ 2038.527033][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2038.527053][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 2038.527073][ T30] watchdog+0x1058/0x10a0 [ 2038.527095][ T30] ? watchdog+0x1ea/0x10a0 [ 2038.527120][ T30] ? __pfx_watchdog+0x10/0x10 [ 2038.527141][ T30] kthread+0x7a9/0x920 [ 2038.527161][ T30] ? __pfx_kthread+0x10/0x10 [ 2038.527183][ T30] ? __pfx_watchdog+0x10/0x10 [ 2038.527204][ T30] ? __pfx_kthread+0x10/0x10 [ 2038.527224][ T30] ? __pfx_kthread+0x10/0x10 [ 2038.527247][ T30] ? __pfx_kthread+0x10/0x10 [ 2038.527267][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 2038.527285][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 2038.527305][ T30] ? __pfx_kthread+0x10/0x10 [ 2038.527327][ T30] ret_from_fork+0x4b/0x80 [ 2038.527345][ T30] ? __pfx_kthread+0x10/0x10 [ 2038.527367][ T30] ret_from_fork_asm+0x1a/0x30 [ 2038.527393][ T30] [ 2038.527399][ T30] Sending NMI from CPU 0 to CPUs 1: [ 2038.691644][ C1] NMI backtrace for cpu 1 [ 2038.691658][ C1] CPU: 1 UID: 0 PID: 18561 Comm: kworker/u8:2 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 2038.691677][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2038.691687][ C1] Workqueue: bat_events batadv_nc_worker [ 2038.691726][ C1] RIP: 0010:check_preemption_disabled+0x19/0x120 [ 2038.691752][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 57 41 56 41 54 53 48 83 ec 10 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 <65> 8b 1d 8c 19 03 74 65 8b 05 81 19 03 74 a9 ff ff ff 7f 74 26 65 [ 2038.691766][ C1] RSP: 0018:ffffc9000c1a78e8 EFLAGS: 00000286 [ 2038.691779][ C1] RAX: eaaaac084a336600 RBX: 0000000000000001 RCX: ffffffff819cc214 [ 2038.691791][ C1] RDX: 0000000000000000 RSI: ffffffff8c802a00 RDI: ffffffff8c8029c0 [ 2038.691802][ C1] RBP: ffffc9000c1a7aa0 R08: ffffffff903bca77 R09: 1ffffffff207794e [ 2038.691815][ C1] R10: dffffc0000000000 R11: fffffbfff207794f R12: 1ffff92001834f30 [ 2038.691826][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 2038.691838][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 2038.691851][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2038.691862][ C1] CR2: 0000558bbba70600 CR3: 000000000e938000 CR4: 00000000003526f0 [ 2038.691876][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2038.691885][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2038.691895][ C1] Call Trace: [ 2038.691902][ C1] [ 2038.691909][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 2038.691927][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 2038.691951][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2038.691976][ C1] ? nmi_handle+0x2a/0x5a0 [ 2038.692005][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 2038.692023][ C1] ? nmi_handle+0x14f/0x5a0 [ 2038.692045][ C1] ? nmi_handle+0x2a/0x5a0 [ 2038.692067][ C1] ? check_preemption_disabled+0x19/0x120 [ 2038.692090][ C1] ? default_do_nmi+0x63/0x160 [ 2038.692107][ C1] ? exc_nmi+0x123/0x1f0 [ 2038.692122][ C1] ? end_repeat_nmi+0xf/0x53 [ 2038.692147][ C1] ? lock_acquire+0xd4/0x550 [ 2038.692168][ C1] ? check_preemption_disabled+0x19/0x120 [ 2038.692192][ C1] ? check_preemption_disabled+0x19/0x120 [ 2038.692216][ C1] ? check_preemption_disabled+0x19/0x120 [ 2038.692250][ C1] [ 2038.692255][ C1] [ 2038.692262][ C1] rcu_is_watching+0x15/0xb0 [ 2038.692278][ C1] lock_acquire+0xe3/0x550 [ 2038.692299][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 2038.692321][ C1] ? batadv_nc_worker+0xcb/0x610 [ 2038.692343][ C1] ? __pfx_lock_release+0x10/0x10 [ 2038.692364][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2038.692388][ C1] batadv_nc_worker+0xec/0x610 [ 2038.692409][ C1] ? batadv_nc_worker+0xcb/0x610 [ 2038.692430][ C1] ? batadv_nc_worker+0xcb/0x610 [ 2038.692453][ C1] ? process_scheduled_works+0x9c6/0x18e0 [ 2038.692470][ C1] process_scheduled_works+0xabe/0x18e0 [ 2038.692499][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 2038.692520][ C1] ? assign_work+0x364/0x3d0 [ 2038.692539][ C1] worker_thread+0x870/0xd30 [ 2038.692563][ C1] ? __kthread_parkme+0x169/0x1d0 [ 2038.692583][ C1] ? __pfx_worker_thread+0x10/0x10 [ 2038.692601][ C1] kthread+0x7a9/0x920 [ 2038.692620][ C1] ? __pfx_kthread+0x10/0x10 [ 2038.692641][ C1] ? __pfx_worker_thread+0x10/0x10 [ 2038.692659][ C1] ? __pfx_kthread+0x10/0x10 [ 2038.692679][ C1] ? __pfx_kthread+0x10/0x10 [ 2038.692700][ C1] ? __pfx_kthread+0x10/0x10 [ 2038.692721][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 2038.692739][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 2038.692757][ C1] ? __pfx_kthread+0x10/0x10 [ 2038.692778][ C1] ret_from_fork+0x4b/0x80 [ 2038.692795][ C1] ? __pfx_kthread+0x10/0x10 [ 2038.692816][ C1] ret_from_fork_asm+0x1a/0x30 [ 2038.692839][ C1] [ 2038.693797][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 2039.070807][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 2039.081367][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2039.091444][ T30] Call Trace: [ 2039.094735][ T30] [ 2039.097692][ T30] dump_stack_lvl+0x241/0x360 [ 2039.102394][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2039.107706][ T30] ? __pfx__printk+0x10/0x10 [ 2039.112325][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2039.118328][ T30] ? vscnprintf+0x5d/0x90 [ 2039.122686][ T30] panic+0x349/0x880 [ 2039.126606][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 2039.132773][ T30] ? __pfx_panic+0x10/0x10 [ 2039.137203][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 2039.142687][ T30] ? __irq_work_queue_local+0x137/0x410 [ 2039.148262][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 2039.153657][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 2039.159832][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 2039.166045][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 2039.172216][ T30] watchdog+0x1097/0x10a0 [ 2039.176563][ T30] ? watchdog+0x1ea/0x10a0 [ 2039.180992][ T30] ? __pfx_watchdog+0x10/0x10 [ 2039.185674][ T30] kthread+0x7a9/0x920 [ 2039.189748][ T30] ? __pfx_kthread+0x10/0x10 [ 2039.194350][ T30] ? __pfx_watchdog+0x10/0x10 [ 2039.199028][ T30] ? __pfx_kthread+0x10/0x10 [ 2039.203621][ T30] ? __pfx_kthread+0x10/0x10 [ 2039.208306][ T30] ? __pfx_kthread+0x10/0x10 [ 2039.212902][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 2039.218113][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 2039.223339][ T30] ? __pfx_kthread+0x10/0x10 [ 2039.227949][ T30] ret_from_fork+0x4b/0x80 [ 2039.232375][ T30] ? __pfx_kthread+0x10/0x10 [ 2039.236974][ T30] ret_from_fork_asm+0x1a/0x30 [ 2039.241756][ T30] [ 2039.245143][ T30] Kernel Offset: disabled [ 2039.249471][ T30] Rebooting in 86400 seconds..