last executing test programs: 10m59.020374898s ago: executing program 2 (id=135): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_getattr(r0, &(0x7f0000000140)={0x38}, 0x38, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x20000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) 10m51.954246834s ago: executing program 2 (id=155): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x0, &(0x7f0000000180)}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4}, 0xe) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)={0x3, 'xfrm0\x00', {0x3}, 0x7}) connect$bt_l2cap(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 10m47.333368942s ago: executing program 2 (id=153): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) 10m43.65090045s ago: executing program 2 (id=158): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x0, &(0x7f0000000180)}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4}, 0xe) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)={0x3, 'xfrm0\x00', {0x3}, 0x7}) connect$bt_l2cap(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 10m40.308404064s ago: executing program 2 (id=161): openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0x8, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3], 0x0, 0x41905}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10m31.024599795s ago: executing program 2 (id=180): r0 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaa"], 0x26) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000280), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$alg(0x26, 0x5, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000180)={0xae, {{0xa, 0x4e20, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}}}, 0x88) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x22}, {r0, 0x4023}, {r2, 0x410}], 0x3, &(0x7f00000000c0), &(0x7f0000000100)={[0x3ff]}, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000108ffffffc30000000000000000", @ANYRES32=0x0, @ANYBLOB="004000000000000008001b0000000000de72089bd79749e3ad88b751383f8ccecee94d74aab990b05fc036e9100e9a46"], 0x28}}, 0x0) 10m15.204319361s ago: executing program 32 (id=180): r0 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaa"], 0x26) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000280), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$alg(0x26, 0x5, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000180)={0xae, {{0xa, 0x4e20, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}}}, 0x88) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x22}, {r0, 0x4023}, {r2, 0x410}], 0x3, &(0x7f00000000c0), &(0x7f0000000100)={[0x3ff]}, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000108ffffffc30000000000000000", @ANYRES32=0x0, @ANYBLOB="004000000000000008001b0000000000de72089bd79749e3ad88b751383f8ccecee94d74aab990b05fc036e9100e9a46"], 0x28}}, 0x0) 10m0.777548674s ago: executing program 0 (id=217): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) socket$inet(0x2, 0x3, 0x5) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='ext4_free_inode\x00', r5}, 0x56) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$loop(&(0x7f00000001c0), 0x1e6, 0x10000) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x633, 0x0, 0x0, {{@in=@multicast2, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@loopback, 0x0, 0x32}, @in=@local, {}, {0xac2, 0x0, 0x0, 0x5}, {}, 0x2, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f00000003c0)='ip_vti0\x00') socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, 0x1, 0x1, 0x3, 0x0, 0x0, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x20000014}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4d811}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x51}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 9m53.010312194s ago: executing program 0 (id=227): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x0, &(0x7f0000000180)}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4}, 0xe) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)={0x3, 'xfrm0\x00', {0x3}, 0x7}) connect$bt_l2cap(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 9m45.053511938s ago: executing program 0 (id=234): r0 = socket(0x28, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, 0x0, 0x0) listen(r2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$vsock_stream(r0, 0x0, 0x0) accept4$unix(r2, 0x0, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x9000, 0x6}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8}, @NFTA_SET_POLICY={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000000003"], 0x1c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000008580100000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c01038040000080080003400000000234000280300002"], 0x1ec}}, 0x0) 9m40.274462294s ago: executing program 0 (id=242): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='sched_switch\x00', r4}, 0x18) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x2, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r8, &(0x7f0000000100)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x82, &(0x7f00000000c0)={r6}, &(0x7f0000000100)=0xc) openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000010000104000000000008000008794ee0", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x4c}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[], 0x0) 9m33.112789042s ago: executing program 0 (id=255): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = timerfd_create(0x0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000000)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r3}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000240)=0x5) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)}, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r7 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000002ec0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x10041, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) 9m32.188376664s ago: executing program 0 (id=257): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x0, &(0x7f0000000180)}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4}, 0xe) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)={0x3, 'xfrm0\x00', {0x3}, 0x7}) connect$bt_l2cap(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 9m16.91733226s ago: executing program 33 (id=257): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x0, &(0x7f0000000180)}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4}, 0xe) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)={0x3, 'xfrm0\x00', {0x3}, 0x7}) connect$bt_l2cap(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2m28.364163575s ago: executing program 4 (id=1204): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, r1, 0x303, 0x0, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000001c0), 0x1187}}], 0x2, 0x40488a4) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000240)={0x34, &(0x7f0000000440)={0x20, 0xe, 0x2, "e923"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000018000600"/28], 0x48) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x3}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x3}, &(0x7f0000000100)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="18e5ffffffffffffff0000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000001000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2m24.90859704s ago: executing program 4 (id=1214): socket(0x28, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000"], 0x1c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000008580100000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c01038040000080080003400000000234000280300002"], 0x1ec}}, 0x0) 2m24.290970531s ago: executing program 4 (id=1216): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) (fail_nth: 2) 2m23.784990298s ago: executing program 4 (id=1217): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000040)="660fc77200f34998f3410fc736460f1a6086f2360f211e0f20c035020000000f22c0400f21ee66470f3880649d05b9800000c00f3235004000000f30430f92c6", 0x40}], 0x1, 0x0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000380)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000002140)={{0x12, 0x1, 0x0, 0x8d, 0xdf, 0xb2, 0x40, 0xb49, 0x64f, 0xd4fd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xde, 0x0, 0x1, 0xe6, 0xf6, 0x52, 0x0, [], [{{0x9, 0x5, 0xc}}]}}]}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x458, 0x500f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x10, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x3d, 0x2, 0x3, 0x1, 0x3, 0x7f, {0x9, 0x21, 0x101, 0xff, 0x1, {0x22, 0xa9c}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0x5, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x8, 0x6, 0x8}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x2, 0x9, 0xe, 0x8, 0x4}, 0x24, &(0x7f0000000080)={0x5, 0xf, 0x24, 0x2, [@ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x4, 0x4, 0x7, 0xf000, 0xff81, [0xffff5f, 0x3f00, 0x10100ff, 0xc030]}]}, 0x2, [{0xc2, &(0x7f00000000c0)=@string={0xc2, 0x3, "273cb14ae5ea4ce9bf6f7a2e3f3523b8669f22cebbde2ae3f5fa05ff7af2cab99ce51723d76ab8b76f1c63651fd70fe0e4e586332458c3d34fa4f7278cfd830d8be1c5b2203687fd83a8bdb7de1de1f6cebcf0efe8feac454e9a8120aabb296acfdde21de0bebc7a57841c49df8d0316012e2570e05bc96b0a9e868389611d2fbd4f3c83b6e46fdabec7c3a9089265c142029e1363c1cbec97cb40c0913d65481b1055f30f30c30ff49ca35f69220d3e09fedb415bc11021da55682c4bf8e459"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x430}}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m20.117152823s ago: executing program 4 (id=1227): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x19}}, {{0x0, 0x0, 0x0}}], 0x5e, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000980)="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", 0x1ae}, {&(0x7f0000000800)="6a8fa35a5ac69c3f3504610b7a65154b8a319d412cae86d445126356a7ea73e2cc685d4a2c125a1898bb727147075b79a19e162ca01c17cdb0398d7303a2955433e8f9de6d144dddc2ca170b10d505c3eb024dcacee0c139b5a9044f1f3a0fd4e958406a6ba551087ed89e2312e678f38707c8f37e5c8fe3cb977b7035046ea60fc263c1f72c13c1c7be3f14407e96c832dd5b10a03966185a38402e2cf26722ddeb0e262b9354a7db169109b0adec288e14e03b42147a29ba7f26c6886c05bea9ef56a3bb171e67a92b838a19c3a646fbd5bc79dadd977983eb0587e61bbc7a2d3f3fc63e5704464ed8e57027a8dc835d5f71cf96a13d0a6440492610145b7f71a28bbc1834493d9c63412a741186a0d3a3d18e00f622045954020e1d4bf3c51439ec5ea6c35004bb016ec740a9c2bbccd7daec478949021a69ce9a14", 0x13d}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) 2m18.921158985s ago: executing program 4 (id=1231): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083", 0x2d}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 2m18.625523423s ago: executing program 34 (id=1231): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083", 0x2d}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 2m15.888849074s ago: executing program 6 (id=1238): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000113c0)={0x0, 0x0, &(0x7f0000011380)={&(0x7f0000000240)=@deltfilter={0x7c, 0x2d, 0x100, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r0, {0xa, 0xfff2}, {0x7}, {0xffe1, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x6}}, @TCA_RATE={0x6, 0x5, {0x0, 0x40}}, @TCA_RATE={0x6, 0x5, {0x8, 0x8}}, @TCA_RATE={0x6, 0x5, {0x8, 0xcd}}, @TCA_RATE={0x6, 0x5, {0xff, 0x80}}, @TCA_CHAIN={0x8, 0xb, 0xfffffff9}, @TCA_CHAIN={0x8, 0xb, 0xce}, @filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x2}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x3}]}}]}, 0x7c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000002d0000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000001d80), &(0x7f0000001d40)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000300), 0x0}, 0x20) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r3, 0x8008f512, &(0x7f0000000900)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r4, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000008}, 0x20004011) 2m15.400288894s ago: executing program 6 (id=1242): r0 = syz_open_dev$vivid(&(0x7f0000001f00), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000003480)={0x0, 0x5, 0x2, 0x0, 0x2}) (fail_nth: 1) 2m14.979367932s ago: executing program 6 (id=1244): r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1d, 0x0, &(0x7f0000000500)) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r5 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r5, &(0x7f0000000180)={&(0x7f0000000000)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000540)="ce2472cd9cd5ba17ea7670dac7b1917a639d1f0437df7ed58ba7edc6e7308d50a47f0c686871fdd52ab8691623bc4d342337fee6a8be42119b9a41c44804925f9a1f80687d1c3f801eea3134f1ef61e8b4f5c0be7d2a428b35d6be062d6afca4a65245c4e0a58eea1e46ac5e0f5afb88caaa1df2e4e0e34b41e01bc6e9f872797df706b34cf85b0cf7155a18bd53e654c88de0ddb00da52ed79b1ba177720c96b80ec60ab0a991667e5cc6355105cbda239068e0354bbc5df4716f5347c60b39b16faf8f4114f8504686fe52b5", 0xcd}], 0x1, &(0x7f00000010c0)=[{0x78, 0x1, 0x0, "979017086741d0e0fd315474454a70b693616b0df60b8ac6d8fe01d5c0e805fd21d43f63d4e89af64588c9c88f10e17cdf642852a163f4cffc3b3c9f834efda7f31d9bbb2c62c12d57e4fd7970f3f9e01d22f745c3b82a3053907be4d9ad48b0a3498d16b7c43aad"}, {0x80, 0x101, 0x9, "3ec47700a24f05061104b69cae427a3a89499126c3ca951def16db63993ac2ba711ccd4efbd64a082687647cee0dfd05ed2abbff51d65131993bd658e388f531bbbfc566f124d06e151b6a8f310dc3e09d08c2bbfe0ac2cdb117935501686411d1e7f8f148886867e2be"}, {0x80, 0x10c, 0x2, "251ee94012f90d541088591250c80138a3ca515fe5b05f77d71889abbf49389f60902ee2fbefe4b15bc646c3e881e489d321fd89a2a7937ed83b9f09ca58e91894d0e31e91c45583f848bb8b2ac0e9bfebea6a2ee57f498a015415909eb8917b74965f9ef074888bbb0cf530e2"}, {0x40, 0x88, 0x0, "48c8ea1a2e56b02e9a574c25f0c4f705123b2dde4e1ce89b49e49c3176801316e7507385b7370de9eacd3e25bf1d"}, {0x20, 0xf9, 0xafa, "62b9e5fa94934334d6181c2c8c879055"}, {0x38, 0x119, 0x17, "fc24c851fe837a7b350558e7ee515b2ed360b6783a3eb5292ef75101044bde9f52c5"}, {0x1010, 0x112, 0x7, "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"}, {0x90, 0x10c, 0x1, "478e6db80c72473e32569d51b8cf97d963d51e182ad1180016ff0c57b000b1e3c5ba52691d916b38ea9f6a36d22ed6faf4895e8e38a2d72abbb017cf4e3cc3636fc75b53275b140e680143f70ba5214e0cc147afa74b0e385304ec1c20e596f33204a53cdbab08d10df11e84d62e71dfded519dfd60a0452242b2e6b"}], 0x12b0}, 0x8040888) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) 2m13.20076706s ago: executing program 6 (id=1246): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x40}, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0xd) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000240)=0x10, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7528e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) clock_getres(0x9, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000280)=0x1800000, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000927000/0x3000)=nil, 0x3000}, 0x2}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_cmd={0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) 2m12.07704955s ago: executing program 6 (id=1250): bpf$MAP_CREATE(0x0, 0x0, 0x50) setreuid(0xee01, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x0, 0x100000}, &(0x7f00000001c0), &(0x7f0000000280)) io_uring_enter(r4, 0x47f9, 0x0, 0x0, 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000740)={0x48}) bpf$MAP_DELETE_ELEM(0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xb0}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x5, 0x8}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000040)) r6 = add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000000)={'syz', 0x3}, &(0x7f0000000080)="f0", 0x1, 0xfffffffffffffffe) keyctl$link(0x8, r6, r6) keyctl$get_persistent(0x16, 0x0, r6) socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket(0x40000000015, 0x5, 0x0) 2m10.769919135s ago: executing program 6 (id=1252): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x2000000, 0x0) 1m55.144271927s ago: executing program 35 (id=1252): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x2000000, 0x0) 18.76673217s ago: executing program 5 (id=1482): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = fsopen(0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x3c, 0x0, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_io_uring_setup(0x1114, &(0x7f0000000300), &(0x7f00000001c0), &(0x7f0000000180)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r9, 0x40186f40, 0x20000502) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x19, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0xffffffffffffff9f, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001600f1ac00f14f52c94b8ad945000000699fd532fca48af3fc40eca3710b2a5aee20d27bfd34dee018ea9c976cec731481ff80dc7723a17daa42408eac235e051945c305ccd4b8943e84bb2ea8bdedc4a70f3dd3c742a1f3b9fd09295842b0d5a4715266be4026d619020fad1cefc380f849721898"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 15.089150417s ago: executing program 5 (id=1488): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='sched_switch\x00', r4}, 0x18) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x2, &(0x7f0000000080)=@assoc_value, &(0x7f0000000000)=0x8) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000100)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x82, 0x0, &(0x7f0000000100)) openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000010000104000000000008000008794ee0", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[], 0x0) 11.701109156s ago: executing program 8 (id=1495): r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef", @ANYRES16=r0], 0x0) 11.048834192s ago: executing program 5 (id=1499): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x20, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x48910) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000180)={0x2, {{0x2, 0x4e22, @local}}, 0x0, 0xa, [{{0x2, 0x4e22, @empty}}, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e22, @broadcast}}, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e24, @broadcast}}, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1d}}}, {{0x2, 0x4e22, @empty}}, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3c}}}, {{0x2, 0x4e24, @multicast2}}]}, 0x590) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000840)={{0x0, 0x0, 0x3224, 0x3, 0x8, 0x8000000000000001, 0xfff, 0x7, 0x2, 0xf, 0x9, 0x7fffffff, 0x2, 0x3, 0x5}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000000900)={{r4, 0x9, 0x9ce8, 0x9, 0x4, 0x9, 0x4, 0x8, 0x6, 0x6, 0x5, 0x8000000000000001, 0x100000000, 0x8, 0x18000000}}) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000000900)={{r4, 0x9, 0x9ce8, 0x9, 0x4, 0x9, 0x4, 0x8, 0x6, 0x6, 0x5, 0x8000000000000001, 0x100000000, 0x8, 0x18000000}}) ioctl$UI_DEV_CREATE(r2, 0x5501) syz_genetlink_get_family_id$nl80211(&(0x7f0000001940), r2) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001940), r2) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x38, r5, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x37}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x400000d) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000001b40)={@empty, @multicast2}, &(0x7f0000001b80)=0xc) (async) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000001b40)={@empty, @multicast2, 0x0}, &(0x7f0000001b80)=0xc) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001dc0)={r2, 0x20, &(0x7f0000001d80)={&(0x7f0000001c40)=""/53, 0x35, 0x0, &(0x7f0000001c80)=""/228, 0xe4}}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001dc0)={r2, 0x20, &(0x7f0000001d80)={&(0x7f0000001c40)=""/53, 0x35, 0x0, &(0x7f0000001c80)=""/228, 0xe4}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001e80)={{r2, 0xffffffffffffffff}, &(0x7f0000001e00), &(0x7f0000001e40)='%+9llu \x00'}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001ec0)=@bloom_filter={0x1e, 0xa05, 0x4, 0x6, 0x20800, 0x1, 0x3800, '\x00', 0x0, r2, 0x2, 0x0, 0x5, 0xd, @void, @value, @void, @value}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001fc0)={0xe, 0x10, &(0x7f0000001a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2a21, 0x0, 0x0, 0x0, 0x101}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@alu={0x7, 0x0, 0xb, 0xa, 0x0, 0xfffffffffffffffc, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001ac0)='GPL\x00', 0xf6, 0x20, &(0x7f0000001b00)=""/32, 0x41100, 0x40, '\x00', r6, @sk_skb=0x1, r2, 0x8, &(0x7f0000001bc0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000001c00)={0x0, 0x10, 0x1, 0x4}, 0x10, r7, 0xffffffffffffffff, 0x1, &(0x7f0000001f40)=[r2, r2, r8, r2, r9, r2], &(0x7f0000001f80)=[{0x3, 0x1, 0xc}], 0x10, 0x6, @void, @value}, 0x94) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000002140)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x1094000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x14, 0x0, 0x2, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20004084}, 0x24000080) r11 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r11, 0x8954, &(0x7f0000002180)={{0x2, 0x4e20, @multicast1}, {0x6, @local}, 0x20, {0x2, 0x4e21, @multicast1}, 'netpci0\x00'}) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000002200)={'tunl0\x00'}) (async) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000002200)={'tunl0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002380)={&(0x7f0000002240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa0, 0xa0, 0x4, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x7, 0x1}, {0x8}, {0x4, 0x1}, {0x9, 0x5}, {0xf, 0x1}]}, @volatile={0x10, 0x0, 0x0, 0x9, 0x4}, @float={0xf, 0x0, 0x0, 0x10, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0x9}}, @const={0xa, 0x0, 0x0, 0xa, 0x2}, @fwd={0x5}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x1, 0x5}]}, {0x0, [0x0, 0x30]}}, &(0x7f0000002300)=""/91, 0xbc, 0x5b, 0x1, 0x2, 0x0, @void, @value}, 0x28) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000003a40)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003a00)={&(0x7f0000002400)={0x160c, r5, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80, 0x3d}}}}, [@NL80211_ATTR_CSA_IES={0x30, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0x1a6, 0x5, 0x3ff, 0xbd, 0x0]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x18, 0x2]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x12, 0xbb, [0x7ff, 0xb6, 0x0, 0x0, 0x3, 0x0, 0x1]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x33}], @NL80211_ATTR_CSA_IES={0xb74, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x3, 0x336]}, @beacon_params=[@NL80211_ATTR_BEACON_TAIL={0xb4, 0xf, [@perr={0x84, 0x88, {0x1, 0x8, [{{}, @device_b, 0x75, @void, 0x1}, {{0x0, 0x1}, @device_b, 0x5, @value=@broadcast, 0x27}, {{0x0, 0x1}, @device_b, 0x5, @value=@broadcast, 0x24}, {{0x0, 0x1}, @broadcast, 0x6, @value, 0x4}, {{0x0, 0x1}, @device_b, 0xa6, @value=@broadcast, 0x40}, {{0x0, 0x1}, @device_a, 0x9, @value=@broadcast, 0x21}, {{}, @device_b, 0x5, @void, 0x38}, {{}, @broadcast, 0x80000000, @void, 0x2a}]}}, @ssid={0x0, 0x3, @random="87907c"}, @prep={0x83, 0x1f, {{}, 0x5, 0x9, @broadcast, 0x0, @void, 0xfffffffa, 0x4, @device_b, 0x8}}]}, @NL80211_ATTR_PROBE_RESP={0x346, 0x91, "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"}, @NL80211_ATTR_IE_PROBE_RESP={0x2b, 0x7f, [@mesh_id={0x72, 0x6}, @ht={0x2d, 0x1a, {0x8, 0x1, 0x0, 0x0, {0x8, 0xd16, 0x0, 0x20}, 0x1, 0x7, 0x4}}, @dsss={0x3, 0x1, 0xab}]}, @NL80211_ATTR_IE={0x15e, 0x2a, [@supported_rates={0x1, 0x8, [{0x36, 0x1}, {0x18, 0x1}, {0x24, 0x1}, {0x9, 0x1}, {0x1b}, {0x48, 0x1}, {0x9, 0x1}, {0x9}]}, @tim={0x5, 0x14, {0x6, 0x6e, 0xf7, "1dc25095888e964943863c595b5ebb232e"}}, @preq={0x82, 0x30, {{}, 0x0, 0x6, 0x6666, @device_b, 0x5, @void, 0x5, 0xf89, 0x2, [{{0x0, 0x0, 0x1}, @device_a, 0xd}, {{0x1}, @device_b, 0xffff9752}]}}, @ibss={0x6, 0x2}, @mic={0x8c, 0x10, {0x532, "382a9f542d9e", @short="36be7718ecf2cec8"}}, @challenge={0x10, 0x1, 0xfd}, @mic={0x8c, 0x10, {0xe39, "46a4879fab43", @short="5caa5079bcaf56f9"}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x6, 0x21}}, @random={0x7, 0xbb, "3453f5e8e051d2bb7e28de40a748614063061e4650844b1b23b866eb34a6eb16bb094dafa44b174a15fc1feb9617e5dfecd5f71103ba097a6dd9195b0fcf28aa4a1ccba55844335eaaed373598e939d91163390a6c44c33b13c63086fe38b3db9a4c517ee3e29fd3f182482c4b9caaea0f0865bbce3c5782ddeb9e518b33a36f8729ae6dd48dca646f7e45d0d3215b50a2b956a4fc075e58504a14f6e14ca6cec67ba70c547ed7619b8bc84afa7b06f41e9ea59aef7853ced7e198"}, @rann={0x7e, 0x15, {{0x0, 0x49}, 0x10, 0x20, @device_b, 0x5000, 0x1, 0xffff0000}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x10b, 0x80, [@cf={0x4, 0x6, {0x0, 0x0, 0x7}}, @mesh_id={0x72, 0x6}, @challenge={0x10, 0x1, 0xe9}, @ibss={0x6, 0x2, 0x4}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @rann={0x7e, 0x15, {{0x0, 0x8}, 0x6, 0x80, @broadcast, 0x2, 0x6, 0x5}}, @challenge={0x10, 0x1, 0xbe}, @tim={0x5, 0xd1, {0xfa, 0x1a, 0x91, "41839e074d172daada16a3fb6a14cf786a2e6a3bc5cf68a5f809a632366cbc7057dc41b87f198257c9a5ca93beed84039a068b5af849ae15dc3896b3b176f7ce6627b950962c24f471a8ee8049549746f0befd020718ac2bcbfda1b02d10807b483c920ff6254ee86b16862900ba0cf5a64cd6a2f652cb29bab81706445e527a6d1ec0676f1fd3944c8148959434c2a1d1164c4040b0d23965bdfe6687c6c12c67ea54edd8f627bca3ba3cfd3b2a39b5bf538c50775ddfa31bd8c6d0fa9b20cf91ef63ec4f1ea82a4db2552ac45e"}}]}, @NL80211_ATTR_IE={0x40, 0x2a, [@ht={0x2d, 0x1a, {0x1040, 0x3, 0x0, 0x0, {0x1, 0x3, 0x0, 0x5, 0x0, 0x1, 0x1}, 0x1, 0xa, 0x3}}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0xffffffffffffffff, 0x0, 0x2, 0x5, 0x29}}, @rann={0x7e, 0x15, {{0x0, 0x4}, 0x81, 0x10, @device_a, 0x0, 0x1, 0x6f4}}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x566]}, @beacon_params=[@NL80211_ATTR_IE={0x7c, 0x2a, [@ht={0x2d, 0x1a, {0x800, 0x2, 0x3, 0x0, {0xf9, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x300, 0x400, 0x7}}, @preq={0x82, 0x51, {{0x0, 0x1, 0x1}, 0x0, 0xfa, 0x5, @device_b, 0x5, @void, 0x5, 0x1, 0x5, [{{0x1}, @device_a, 0x3}, {{0x1, 0x0, 0x1}}, {{0x1}, @device_a, 0x1}, {{0x1}, @device_b, 0xa4}, {{}, @broadcast, 0x5}]}}, @mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x9, 0x50}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x86, 0x80, [@sec_chan_ofs={0x3e, 0x1}, @random={0x3, 0x8, "4544392fa458006e"}, @preq={0x82, 0x51, {{}, 0x2, 0x4, 0x0, @broadcast, 0x10001, @void, 0x78, 0x6, 0x5, [{{0x1}, @device_b, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x6}, {{}, @broadcast, 0x614}, {{0x1, 0x0, 0x1}, @device_a, 0x1ff}, {{0x0, 0x0, 0x1}, @device_b, 0x200}]}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @gcr_ga={0xbd, 0x6, @device_b}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x0, 0x2, @broadcast, 0x9, 0x0, 0x3f4}}]}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE_PROBE_RESP={0x82, 0x7f, [@random_vendor={0xdd, 0x74, "b4b56821900c4462fce67c933f5a51769bed5768699af136328fdb3759b7c01554d33927d0a70053980ace3efbe0cf419f5e1a45c676e594675a16e9189292727a71488599469dfde38d7dd1dcd69f850158f0ad79beaf446bd99419806b7ceedb3fb751167a8b979f064a5bf7b33f6714e0067c"}, @gcr_ga={0xbd, 0x6, @broadcast}]}, @NL80211_ATTR_BEACON_TAIL={0x102, 0xf, [@fast_bss_trans={0x37, 0xfc, {0x1, 0x8, "76801244300a0a01794a4953668a02dd", "79928ffd84aa2f06252e3722707a27b7c86bebca053f72b2e20a605767e49ac5", "49524c387fc4c70bd68f49247a3501bef7401ae02b194bb7cf67c385fbed2f11", [{0x4, 0x3, "9ea680"}, {0x2, 0x12, "b469bdf0df30ad397a415f29e9881de1c21e"}, {0x1, 0x27, "6325f94ee66e1caf3f0bbe58982c33a8f9ff8f45695e14a1152648cb3a3b63aee1167c3607626c"}, {0x3, 0x6, "c60177ebd4a7"}, {0x1, 0x5, "cba2a05c36"}, {0x4, 0x1e, "2f8b2007931d8e70b7a07f8d97c5bd1d9cc2dae0ad76ef655a6c1a97e177"}, {0x4, 0x12, "f803bc99c4b5116c5fa2a520ae49ac26e0d9"}, {0x1, 0x23, "ceccb4b5b9cf3368c4c270836a8280884653969969700f996521e315c9c4899f326520"}]}}]}, @NL80211_ATTR_FTM_RESPONDER={0x134, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xf0, 0x2, "6391df42185329aa117fdc9d89f607a020eaf79c99e95c613af8a22f996af9de1e4dd95f13bfce9f178c10e2ce6cace5fc7fde5b6752fa20f3ed18060f410fade13009edfd5507ae0d2b3d3339669924fc22d9c9b6abefa9daf16cfc64f8af1083c4eddbd1c7248b7a9628fb17c91dff4384460d804e275d1652b2b867ab47bedf71fd19713bbe3609d57c57f0a4e69c167f3d66d8e703581c71252d95308fe5b3490f75ca7c563a22f9c5c96f6195e26bfee5ee44c22d78b8452d613a3c5c364091257f0871617171fbfd10954f0b3f2659f2f9e9431d91d629f7bcb0d4880123359a554edb13378e49d350"}, @NL80211_FTM_RESP_ATTR_LCI={0x3e, 0x2, "bb99fb13def29ce3c568c2d9cc35c41b45919034d19bf5559ee258a72715f305c855c22b9859b41b8156e8d2496d2a23c703566662eff1377c4d"}]}, @NL80211_ATTR_FTM_RESPONDER={0x90, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x8c, 0x2, "398be2914f54804eb74553e7c3f52daa57583c3f653e8e06d6b9b7c05211778a096d056b5714647fe4dbcb899c4eb1981fbbb2e11a5c0a7c024594348b8152433a3d3b906aeee1de06d8afacfa763e3f078ec38c2df9c6d53046fd53bf38c1f98cadbc96a4ddb34be6ff3c798b4d4703b298272f7dc5c16337deb3d954de2891f85048419104aac5"}]}, @NL80211_ATTR_IE_PROBE_RESP={0xc, 0x7f, [@ibss={0x6, 0x2, 0x4}, @ibss={0x6, 0x2, 0x6}]}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_BEACON_TAIL={0x16, 0xf, [@supported_rates={0x1, 0x1, [{0x24}]}, @dsss={0x3, 0x1, 0x3}, @dsss={0x3, 0x1, 0x9}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0xffffffffffffffff, 0x7f, 0xe1}}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x81, 0x4928]}]}, @NL80211_ATTR_CSA_IES={0x30, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x6]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0x1000, 0x3b1, 0x4, 0x21ce, 0x40]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0x5, 0x7, 0x6, 0xfffb, 0x2, 0x8000, 0x6]}]}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xb}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}], @NL80211_ATTR_CSA_IES={0x9b8, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x10, 0xbb, [0x1, 0x6, 0x4, 0x6, 0xfffc, 0x5]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0x1, 0x1, 0x9, 0x63, 0x8]}, @beacon_params=[@NL80211_ATTR_PROBE_RESP={0x3e6, 0x91, "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"}, @NL80211_ATTR_IE_ASSOC_RESP={0x1b3, 0x80, [@random_vendor={0xdd, 0x56, "fb3b70bb6cdd3c4486ff3643c73deef0f82002c5c9811f6d3273c44d099794110615b0ed918cd0e468716c980da1391436e1d834ac912eb9ce843262c8e4622672e41311c0cd0a057e9fc133b827c7734532b2075ef3"}, @supported_rates={0x1, 0x7, [{0x36, 0x1}, {0x9, 0x1}, {0x48}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x12}]}, @link_id={0x65, 0x12, {@initial, @broadcast, @broadcast}}, @preq={0x82, 0x62, {{0x1, 0x1, 0x0, 0x0, 0x1}, 0x81, 0x3, 0x3, @device_b, 0x387, @value=@device_b, 0x0, 0x3, 0x6, [{{0x1}, @device_a, 0x9}, {{0x1, 0x0, 0x1}, @device_b, 0x4}, {{0x1, 0x0, 0x1}, @broadcast, 0x1}, {{}, @device_b, 0x6}, {{0x1}, @device_a, 0x5}, {{0x0, 0x0, 0x1}, @device_a, 0xffffff33}]}}, @challenge={0x10, 0x1, 0x5c}, @fast_bss_trans={0x37, 0xb2, {0x8, 0x5, "ac2a3fcdb4334fba07a48e6f9ef88be7", "4f413cc50ea188b9df8bb1ab4b0663c0bb2b651974f74cfa6442d48ec4eeb727", "d2807cf29f3c21fe6725e3675da253de45ec2afc7e113461f1072b4e9bc0a4fe", [{0x3, 0x16, "8b0c92d8ae83dbeb1553214fbddcb691d501f77c7fab"}, {0x1, 0x6, "bd5038e93001"}, {0x2, 0x26, "dd0bba48d1e968d2fd82555e91b83938b82e074f505b51b974ade7ef565096952ee6a3d891ff"}, {0x1, 0x3, "15662b"}, {0x3, 0x11, "10a0a6524ee069130c81cce19c6ee554f9"}]}}, @rann={0x7e, 0x15, {{0x0, 0x4}, 0x4, 0x9, @device_b, 0x1, 0xfffffff6, 0x1}}, @cf={0x4, 0x6, {0x2, 0x4, 0x8863, 0x9}}]}, @NL80211_ATTR_FTM_RESPONDER={0x98, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xf, 0x2, "c48d02afb938017f5df496"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x7b, 0x2, "bc157c83af0602883bc1bf8a686ee73069842b0d0567d9917c74ffdc681526c45fa90f3fee2f76398e167f22ca706d2602588774170f65e9db1db3d4061ee036e24909e4bace84a8ec423a17a161a09254e2d4029feaaf45fcc7b0876555980feebcf1e990ba517b2875a5dc487941615828382fc81393"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_BEACON_TAIL={0x28, 0xf, [@peer_mgmt={0x75, 0x6, {0x0, 0x7, @val, @void, @void}}, @ht={0x2d, 0x1a, {0x1000, 0x1, 0x2, 0x0, {0x0, 0x7, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x800, 0x10000, 0x7}}]}, @NL80211_ATTR_BEACON_HEAD={0x303, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {0xff}, @broadcast, @device_a, @from_mac=@device_b, {0x1, 0x3}}, 0x4, @random=0x9299, 0x2, @val={0x0, 0xe, @random="53cf4708cbd528454edd57bce8d9"}, @val={0x1, 0x2, [{0x1}, {0x19}]}, @val={0x3, 0x1, 0xb6}, @val={0x4, 0x6, {0x58, 0x4, 0x5, 0xd4a}}, @val={0x6, 0x2, 0x8}, @void, @void, @val={0x2a, 0x1, {0x1}}, @val={0x3c, 0x4, {0x0, 0x8, 0xab, 0x3}}, @val={0x2d, 0x1a, {0x4000, 0x0, 0x2, 0x0, {0x9a, 0x0, 0x0, 0xc9, 0x0, 0x1}, 0x1, 0x1, 0xc3}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x7, 0xb, 0x1b, 0x1}}, [{0xdd, 0x1d, "06d59dbdec277a898da99c5fa5789d8fb8e7535cf65277b3bf15f20e65"}, {0xdd, 0x39, "a0415b7cdbefc60172f945f0db5f3fbb0af99c88b2bb205b1ef78d64b2e1edd3518d11f4e9586fea76fdb46fcbe560f4a73f647627f1d243ac"}, {0xdd, 0x4a, "7507f8fd8f6d0211d15246175d9e093943574a8ba27b82a5f316e03e9d40df8250d174b6960ae414d3826c32a23753d75ad99516b67fb6bb2957868478430d2ab345cae14107eb9adad9"}, {0xdd, 0x3e, "55525e4d4b43c7453cb440e07cbe2d9f515e4129208cd6ad744a106853bd170efdf7473968748ce8ca148815f26dfbe22d85d35f07bd68adec0e8e0902d8"}, {0xdd, 0x9d, "2b497c2829ce87402cbed81f7ec97b4ca5516002089d2fe3bb2b99733e18aad97dd63e98fe3c227c12accc4e3558468930d5e066c26c331156c1a2d1472c78cd2aabc8d52a1891f8733de2631b46c7812a6ff7dc83dede05c8ad2b199b0f9b8512bc06900a2828f6505ee07bd0f120953e56a35e0de543bdafcbaca37a953f5e30226729a4ce162e6811ff063c610e8c787f4d472893b4d5a7a5c2be69"}, {0xdd, 0xfc, "0bb5ab9620520d52f3be26c9624e16da57b6ed23832c5ecf6c31d15687cd1055b68be7ef15ac7ae4f10d776d0bdee6d5bf182b63eee2e2d40906c0750abe1ff22cf528c93775f150daa67b416e8052d7f2e702316c1f3d8513352c4f62cc4d3f5c22b1fe0dadb1e626558809312c50f67931907dbcde1c7188998e49cde79702254ab5c10aa0a0c60aad91884a0c47df7f6eacadbb2fb3e343ab0d9624f01ef2dc06a4f657f4dfb0fcc4e27c57568efb6082dd98ab0c078154e8e161eb67d29d2f01ec4dbe11910d82639f69ed6154d48e3eb8d34110fec5b33d865a055d9bbcf4e3ce40edc6cc971aa61d245739ab326d9696f763441071aa4400c6"}]}}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0xf]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0xb, 0x0, 0x8, 0x1000]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x16, 0xba, [0x750, 0x200, 0x3d40, 0x1, 0x1, 0x4, 0x7cb5, 0x0, 0x3]}]}]}, 0x160c}, 0x1, 0x0, 0x0, 0x40884}, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000003a80)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000003a80)={'wlan1\x00'}) connect$vsock_stream(r2, &(0x7f0000003ac0)={0x28, 0x0, 0xffffffff, @host}, 0x10) sendmsg$sock(r2, &(0x7f0000004000)={&(0x7f0000003b00)=@isdn={0x22, 0x7, 0x5, 0x5, 0xff}, 0x80, &(0x7f0000003f00)=[{&(0x7f0000003b80)="10f43d83af8da71b0ccf3084c37430626ce13956ff8972fcf2b50eb9d0114ea0c19167317e2758e787d46e8a20ed81aa335be81b8ef3379d3ad993c76fa15537af02d3838df5c99c1f92f5f56f5c4a9709a366050a3cbb8651394e0ab32013e7ef8d1f73948b768a3689ea0e5c9c7045c4a6f20b251292147fe430c6e752fe7c295a32a6aaf86f3ab5d30841ba802b6bb628d724d672de210c965f65eb6c18a1b78908ef9152b36fcff22ffc2629eb4340762a0dfd97a80047df467ac6783b1b", 0xc0}, {&(0x7f0000003c40)="0743c710f7e76ad0abebd45b67e482a3d5cdce76d548c26ad9c2a4510d958cb4fefacaa421eac977ba40577a92e6c347d1bc7f16afacd23dc3d136caa2858cd1d4e73a38cfbbdfcb6758bacd16cc1876916c90ef9383df6d6086b0c1ef73feeebbb99ef3605d468a9cf888e490b1c0571b6e04815d442290626eef2e6e7000f202c2ab178ed7e50b005e0598b87cc0747ec78ebcd24c79e672494dea4cca96f5c55f6b1ed50ff94d59c74ab97d58d0ac6650ab212a6482533431f8ea88703169389e48b62c48163169f27933eb2243d628690ab6f3a432c317442af61afc148d5120f31392c90b95d4e3b2", 0xeb}, {&(0x7f0000003d40)="385f6c9dba3a277f8698de49e7c13366df6a6b498a4a7ddb583ab08a2ef41a69c4ad6c08729dfd2b690d247367a8a069ff53553de31bed4281b8af282de7eac5aa788b70fb19447af5089e731778b337e08ab32a5bfaa7b6ca760400df9829a6667a10dbaef552a9ec990f4502c1", 0x6e}, {&(0x7f0000003dc0)="4cb5be74f11afa37585cf089a5addd684a27d7917c75f99818", 0x19}, {&(0x7f0000003e00)="3ff4f43fd1c99bfac035a82bed2237b981db9048234bbe3a10685edfbbe835c9c5a8adb944230b6faac8a17cfeaae67ab0562e03ecf44ed267108b1db21d6a16eb7b0fc0012a8da892a9fed20c7422b2a21ee3584df72bd5e6f006dbdea10a47b1e3eef5c6641e32a6d5869a2732748ec1ffbd6319988ddc7965cc181549f4f799f9248dabf3f8134570b16a95f57bba2c86d959ea907ddc9fc9610b1e210389ab1d749c6a576577ad52d134abc8a49ed35ec841232ac71c042884a1e7a41c40ce9f73cd9909dd246ae937aaf22fc7", 0xcf}], 0x5, &(0x7f0000003f80)=[@mark={{0x14, 0x1, 0x24, 0x4ee3}}, @mark={{0x14, 0x1, 0x24, 0x78b}}, @mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x8000000000000000}}], 0x78}, 0x8080) (async) sendmsg$sock(r2, &(0x7f0000004000)={&(0x7f0000003b00)=@isdn={0x22, 0x7, 0x5, 0x5, 0xff}, 0x80, &(0x7f0000003f00)=[{&(0x7f0000003b80)="10f43d83af8da71b0ccf3084c37430626ce13956ff8972fcf2b50eb9d0114ea0c19167317e2758e787d46e8a20ed81aa335be81b8ef3379d3ad993c76fa15537af02d3838df5c99c1f92f5f56f5c4a9709a366050a3cbb8651394e0ab32013e7ef8d1f73948b768a3689ea0e5c9c7045c4a6f20b251292147fe430c6e752fe7c295a32a6aaf86f3ab5d30841ba802b6bb628d724d672de210c965f65eb6c18a1b78908ef9152b36fcff22ffc2629eb4340762a0dfd97a80047df467ac6783b1b", 0xc0}, {&(0x7f0000003c40)="0743c710f7e76ad0abebd45b67e482a3d5cdce76d548c26ad9c2a4510d958cb4fefacaa421eac977ba40577a92e6c347d1bc7f16afacd23dc3d136caa2858cd1d4e73a38cfbbdfcb6758bacd16cc1876916c90ef9383df6d6086b0c1ef73feeebbb99ef3605d468a9cf888e490b1c0571b6e04815d442290626eef2e6e7000f202c2ab178ed7e50b005e0598b87cc0747ec78ebcd24c79e672494dea4cca96f5c55f6b1ed50ff94d59c74ab97d58d0ac6650ab212a6482533431f8ea88703169389e48b62c48163169f27933eb2243d628690ab6f3a432c317442af61afc148d5120f31392c90b95d4e3b2", 0xeb}, {&(0x7f0000003d40)="385f6c9dba3a277f8698de49e7c13366df6a6b498a4a7ddb583ab08a2ef41a69c4ad6c08729dfd2b690d247367a8a069ff53553de31bed4281b8af282de7eac5aa788b70fb19447af5089e731778b337e08ab32a5bfaa7b6ca760400df9829a6667a10dbaef552a9ec990f4502c1", 0x6e}, {&(0x7f0000003dc0)="4cb5be74f11afa37585cf089a5addd684a27d7917c75f99818", 0x19}, {&(0x7f0000003e00)="3ff4f43fd1c99bfac035a82bed2237b981db9048234bbe3a10685edfbbe835c9c5a8adb944230b6faac8a17cfeaae67ab0562e03ecf44ed267108b1db21d6a16eb7b0fc0012a8da892a9fed20c7422b2a21ee3584df72bd5e6f006dbdea10a47b1e3eef5c6641e32a6d5869a2732748ec1ffbd6319988ddc7965cc181549f4f799f9248dabf3f8134570b16a95f57bba2c86d959ea907ddc9fc9610b1e210389ab1d749c6a576577ad52d134abc8a49ed35ec841232ac71c042884a1e7a41c40ce9f73cd9909dd246ae937aaf22fc7", 0xcf}], 0x5, &(0x7f0000003f80)=[@mark={{0x14, 0x1, 0x24, 0x4ee3}}, @mark={{0x14, 0x1, 0x24, 0x78b}}, @mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x8000000000000000}}], 0x78}, 0x8080) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000004100)={&(0x7f0000004040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000040c0)={&(0x7f0000004080)={0x20, 0x1, 0x3, 0x301, 0x0, 0x0, {0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x9}}]}, 0x20}}, 0x41) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000004200)={&(0x7f0000004140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000041c0)={&(0x7f0000004180)={0x40, r5, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x4000, 0x2, 0x4, 0x0, {0x8, 0x4, 0x0, 0x3f7, 0x0, 0x1, 0x1}, 0x400, 0x8, 0x6}}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044844}, 0x840) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000004240)={0x2, {0x2, 0x0, 0x200, 0x4, 0xfff, 0xf}}) syz_open_dev$vbi(&(0x7f0000004280), 0x1, 0x2) (async) syz_open_dev$vbi(&(0x7f0000004280), 0x1, 0x2) 10.674910622s ago: executing program 5 (id=1501): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001439) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001440)={{r1}, 0x0, &(0x7f0000001400)}, 0x20) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) get_mempolicy(0x0, 0x0, 0x3, &(0x7f0000ffc000/0x4000)=nil, 0x4) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001401) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x20001400) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200400, 0x0) 9.536883662s ago: executing program 8 (id=1503): bpf$MAP_CREATE(0x0, 0x0, 0x50) setreuid(0xee01, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x0, 0x100000}, &(0x7f00000001c0), &(0x7f0000000280)) io_uring_enter(r4, 0x47f9, 0x0, 0x0, 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000740)={0x48}) bpf$MAP_DELETE_ELEM(0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xb0}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x5, 0x8}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) r6 = add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000000)={'syz', 0x3}, &(0x7f0000000080)="f0", 0x1, 0xfffffffffffffffe) keyctl$link(0x8, r6, r6) keyctl$get_persistent(0x16, 0x0, r6) socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket(0x40000000015, 0x5, 0x0) 9.324799127s ago: executing program 3 (id=1504): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) write$cgroup_pid(r1, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) syz_clone3(&(0x7f0000000380)={0x4208000, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) fchown(0xffffffffffffffff, 0x0, 0xee01) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg(r7, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000d40)="9b3837ab", 0x33fe0}], 0x1}}], 0x1, 0x44040050) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x6}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x3000c81c) shutdown(r4, 0x2) 9.092581601s ago: executing program 7 (id=1505): r0 = syz_open_dev$dri(&(0x7f0000000200), 0x100000000000, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0xb6f68000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400100, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r6 = dup(r5) syz_kvm_setup_cpu$x86(r6, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x36) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f59104"]) read$eventfd(r6, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000000c0)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f00000002c0)=0x9, 0x62) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000001740)={0x0, 0x4, {}, {0xffffffffffffffff}, 0x6ffd, 0x9}) getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000140)) 8.039824231s ago: executing program 7 (id=1507): r0 = syz_open_dev$dri(&(0x7f0000000200), 0x100000000000, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0xb6f68000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400100, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = dup(0xffffffffffffffff) syz_kvm_setup_cpu$x86(r6, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x36) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f59104"]) read$eventfd(r6, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000000c0)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f00000002c0)=0x9, 0x62) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000001740)={0x0, 0x4, {}, {0xffffffffffffffff}, 0x6ffd, 0x9}) getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000140)) 7.015530476s ago: executing program 3 (id=1508): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) 6.761129791s ago: executing program 3 (id=1509): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x140, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c2594f90fa3c92b", 0x14}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="000006"], 0x0, 0x0, 0x0, 0x0}, 0x0) 6.65835675s ago: executing program 7 (id=1510): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x21, 0x5, 0x128200}}, 0xfffffffffffffea1) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x1) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000000080)={0x10, 0xffffffffffffffda, r3}, 0x10) lsetxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x2) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000940)={{}, 'syz0\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10000, 0x10b) syz_open_dev$tty20(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000009feffff720a00fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed030407000000c00000001d440000000000006b0a00fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$UI_DEV_CREATE(r0, 0x5501) 6.188497789s ago: executing program 5 (id=1511): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x21, 0x5, 0x128200}}, 0xfffffffffffffea1) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x1) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000000080)={0x10, 0xffffffffffffffda, r3}, 0x10) lsetxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x2) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000940)={{}, 'syz0\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10000, 0x10b) syz_open_dev$tty20(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000009feffff720a00fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed030407000000c00000001d440000000000006b0a00fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$UI_DEV_CREATE(r0, 0x5501) 3.983228697s ago: executing program 3 (id=1512): syz_pidfd_open(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) dup(0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = dup(0xffffffffffffffff) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, 0x0, 0x3fffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001b80)={0x54, r4, 0x1, 0xffffffff, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @multicast1}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x24018011}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r4, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x4004010) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_uring_setup(0x2ad6, &(0x7f0000000280)={0x0, 0x400ffb1, 0x800}) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) 3.904594686s ago: executing program 1 (id=1513): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffff"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x0, 0x0) r4 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r4, 0x3) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000040), 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f0000001500), 0x588, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) 3.822704154s ago: executing program 7 (id=1514): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r0, &(0x7f0000000000)=@other={'lock', ' ', 'io+mem'}, 0xc) close(r0) 3.733106571s ago: executing program 5 (id=1515): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, r1, 0x303, 0x0, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000001c0), 0x1187}}], 0x2, 0x40488a4) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000240)={0x34, &(0x7f0000000440)={0x20, 0xe, 0x2, "e923"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000018000600"/28], 0x48) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x3}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x3}, &(0x7f0000000100)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="18e5ffffffffffffff0000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000001000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2.706490248s ago: executing program 1 (id=1516): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x40}, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0xd) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000240)=0x10, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7528e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0xfe, 0x0, 0x7ffffffe}]}) clock_getres(0x9, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000280)=0x1800000, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000927000/0x3000)=nil, 0x3000}, 0x2}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) 2.68981511s ago: executing program 7 (id=1517): syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1a01, 0x0) write$rfkill(r0, &(0x7f0000000100)={0x9, 0x3, 0x0, 0x0, 0x1}, 0x8) socket(0x1e, 0xa, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/xfrm_stat\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) set_robust_list(&(0x7f0000000600)={0x0, 0x8000000000000000}, 0x18) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000002c0)="ad56be00000000008000000000ae4782733cac1bb3000000", 0x18) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000080)={{0x3, 0x1, 0xf7bd, 0x3, 0x3}}) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000780)=[{{&(0x7f00000000c0)={0xa, 0x2, 0x0, @private2={0xfc, 0x2, '\x00', 0x5}, 0x5}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000240)="ad", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000140)="b2ec", 0x2}], 0x1}}], 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8447000b4e230f00004e22a2bc5603ca00000f7f89004e00200000000101ff05c00e03000200000000000100000000005839c97b910000", 0x48}], 0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3ff, 0xfffffffe, 0x34325241, 0x3, 0x0, [{0x8, 0xf}, {0x8, 0x29f6ebcd}, {0xd, 0x8}, {0x5, 0x8}, {0x2, 0x3}, {0x0, 0x3}, {0x6, 0x409}, {0x10001, 0x1800000}], 0x0, 0xd, 0x2, 0x3078182a3427730f, 0x1}}) 1.911246394s ago: executing program 8 (id=1518): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) write$cgroup_pid(r1, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) syz_clone3(&(0x7f0000000380)={0x4208000, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) fchown(0xffffffffffffffff, 0x0, 0xee01) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg(r7, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000d40)="9b3837ab", 0x33fe0}], 0x1}}], 0x1, 0x44040050) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x6}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x3000c81c) shutdown(r4, 0x2) 1.661218017s ago: executing program 1 (id=1519): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[], 0x20) 1.493141849s ago: executing program 1 (id=1520): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) write$cgroup_pid(r1, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) syz_clone3(&(0x7f0000000380)={0x4208000, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) fchown(0xffffffffffffffff, 0x0, 0xee01) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r4, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000020c0)="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", 0xffffffffffffff4f, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg(r7, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000d40)="9b3837ab", 0x33fe0}], 0x1}}], 0x1, 0x44040050) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x6}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x3000c81c) shutdown(r4, 0x2) 843.098741ms ago: executing program 7 (id=1521): unshare(0x400) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x4004) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000018c0)=ANY=[@ANYBLOB="240000001800091be003614830f7add2e3677ab00400000000000000000a00800000000038b3dc976d6d0b450830ee6e33c6827ecb263f1bf443f0071fb403216998b3fe5876ffe91c40d3b1f7e91ba5e9aab50b379f35f238859ef366d40b2ffb2ae141f37bceb24e04693aef3c8997d344cb6059925f3a8e33da7b3704d407ef5251fd8f6718177b881f1dd072b5f2cec60f52e93a3b5f485a16ade0be2f70511c483930dc7aa93e90dfcd6641985f2ac8"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) unshare(0xc060100) clock_gettime(0x0, &(0x7f0000000180)) r2 = socket$alg(0x26, 0x5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001580)=[{{&(0x7f0000000000)={0x2, 0x4, @empty}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="ed894255", 0x4}, {0x0}, {&(0x7f0000001c40)="f9237e904bb6b2b27653a8d1958368ec058b27b38eb8e6f0bd9b60889be4c7451bb994ec78b4612f011fa329d17201be8ceb7695ec71c54f55628aaf08f80b5157a06cec74ceb93463f2d328caa880b269ce121cc7e23222d3d320435631d0a02d3300b45b20217e4d59080f21eba10c2a7b4c4808c134f9b1c41a7244a5929d208b814a865be60bb71e9efa1806aa5efc", 0x91}, {&(0x7f0000001a40)="91882d01e512bb5f98f539759fdaa3cc610475d55d44ee2c044dc767ee1d6797bb6e829f77fad5b1ddc01e1884f7b3399bd618b1a45b63977fcb86b0262d4f22eb6e03538a8a885b70568134c964565cf9d23a90ef633b83b35c93497146f2013c86263e191a6f387a4c52ba8fef572f2374758927cb7f85ad1836d06450858d55b127f9035e41c1bb5cf4bf23ea1ac5700adbecb0feac5c85c963cf6bc1f25b9d091bdf2d7869b113159e8f3ed0e0344323423698c69e4f8b0d10378b4b3ac5492fe99937c43a031f78627219e37efb4b6dd041c2f3438f7b090d670e9a3e45bc8b0f90b213db87db472abd006e6b5468bcc55662497819cb", 0xf9}, {&(0x7f0000001b40)="b9605f33416f768bf561d3aa32b73c9c968295026066935dfc0ff3fc5214c4ecc3a444debc9d8e0da9a20f4e8597ad01f522f8e3cfbf438a8ec94bd24144d836940d17d10a0e8c0a7f6a6bb681ba07e6f88143fd02aa9e74a4a7d3c18b4dd02b73594424c23a6b99bab807a92fd4cf54ee92e35e1a451d12f9ce2c", 0x7b}], 0x5}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000001780)=[{{&(0x7f00000001c0)=@hci, 0x80, &(0x7f0000000240)=[{&(0x7f0000000040)=""/32, 0x20}, {&(0x7f0000000100)=""/2, 0x2}], 0x2, &(0x7f0000000280)=""/5, 0x5}, 0x8}, {{&(0x7f0000000300)=@ethernet, 0x80, &(0x7f0000000500), 0x0, &(0x7f0000000540)=""/106, 0x6a}, 0x8}, {{&(0x7f00000005c0)=@phonet, 0x80, &(0x7f0000000900)=[{&(0x7f0000000640)=""/144, 0x90}, {&(0x7f0000000700)=""/196, 0xc4}, {&(0x7f0000000800)=""/223, 0xdf}], 0x3}, 0x10000}, {{&(0x7f0000000940)=@alg, 0x80, &(0x7f0000000e00)=[{&(0x7f00000009c0)=""/135, 0x87}, {&(0x7f0000000a80)=""/162, 0xa2}, {&(0x7f0000000b40)=""/56, 0x38}, {&(0x7f0000000bc0)=""/161, 0xa1}, {&(0x7f0000001340)=""/86, 0x56}, {&(0x7f0000000d00)=""/32, 0x20}, {&(0x7f0000000d40)=""/179, 0xb3}], 0x7, &(0x7f0000000c80)=""/87, 0x57}, 0xf}, {{&(0x7f0000000f00)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000000f80)=""/166, 0xa6}, {&(0x7f0000001040)=""/228, 0xe4}, {&(0x7f0000001140)=""/216, 0xd8}, {&(0x7f0000001240)=""/234, 0xea}, {&(0x7f00000016c0)=""/163, 0xa3}, {&(0x7f0000001400)=""/96, 0x60}, {&(0x7f0000001480)=""/44, 0x2c}, {&(0x7f0000000140)=""/7, 0x7}, {&(0x7f00000015c0)=""/246, 0xf6}, {&(0x7f0000000380)=""/133, 0x85}, {&(0x7f0000001d00)=""/111, 0x6f}, {&(0x7f0000001d80)=""/100, 0x64}], 0xc}, 0x7}], 0x5, 0x40000023, &(0x7f0000001500)) bind$alg(r2, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) 773.170044ms ago: executing program 3 (id=1522): r0 = socket$inet_smc(0x2b, 0x1, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001680)={0x20001a, 0xf9}, 0x20) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x75) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000480)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000080)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000340)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000600)=""/81}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000900)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x20000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001700)=ANY=[@ANYBLOB="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"], 0x1060}, 0x1, 0x0, 0x0, 0x4000045}, 0x4000000) 672.288875ms ago: executing program 8 (id=1523): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x1c2681) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f00000000c0)=[{0x5, 0x3, 0x0, 0x0, @time, {}, {0x0, 0x1}, @result}], 0x1c) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_TMR_TEMPO(r4, 0xc0045405, 0x0) getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000000080)={@loopback, @multicast2, 0x0}, &(0x7f0000000200)=0xc) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r6, &(0x7f0000000000)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null]}, 0x48) ioctl$int_in(r6, 0x5421, &(0x7f0000000100)=0x5) connect$netrom(r6, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x2}}, [@null, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @default, @bcast]}, 0x48) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, '\x00', r5, r7, 0x0, 0x4, 0x5, 0x0, @void, @value, @void, @value}, 0x50) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f0000000140)={0x9, 0xfffffff7, 0x1, 'queue0\x00', 0x8}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) 379.659338ms ago: executing program 8 (id=1524): r0 = socket$can_raw(0x1d, 0x3, 0x1) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x300, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 333.038799ms ago: executing program 3 (id=1525): pipe2$9p(0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x21, 0x5, 0x128200}}, 0xfffffffffffffea1) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x1) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000000080)={0x10, 0xffffffffffffffda, r3}, 0x10) lsetxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x2) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000940)={{}, 'syz0\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10000, 0x10b) syz_open_dev$tty20(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000009feffff720a00fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed030407000000c00000001d440000000000006b0a00fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$UI_DEV_CREATE(r0, 0x5501) 248.052908ms ago: executing program 1 (id=1526): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000580)='br_fdb_add\x00', r1, 0x0, 0x9}, 0x18) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 102.044915ms ago: executing program 8 (id=1527): r0 = socket$inet_smc(0x2b, 0x1, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001680)={0x20001a, 0xf9}, 0x20) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001700)=ANY=[@ANYBLOB="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"], 0x1060}, 0x1, 0x0, 0x0, 0x4000045}, 0x4000000) 0s ago: executing program 1 (id=1528): bpf$MAP_CREATE(0x0, 0x0, 0x50) setreuid(0xee01, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x0, 0x100000}, &(0x7f00000001c0), &(0x7f0000000280)) io_uring_enter(r4, 0x47f9, 0x0, 0x0, 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000740)={0x48}) bpf$MAP_DELETE_ELEM(0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xb0}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x5, 0x8}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) r6 = add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000000)={'syz', 0x3}, &(0x7f0000000080)="f0", 0x1, 0xfffffffffffffffe) keyctl$link(0x8, r6, r6) keyctl$get_persistent(0x16, 0x0, r6) socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket(0x40000000015, 0x5, 0x0) kernel console output (not intermixed with test programs): 9 using dummy_hcd [ 652.523199][T10905] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 652.700551][ T5874] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 652.713178][ T1212] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 652.731418][ T1212] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 652.753415][ T1212] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 652.768335][ T1212] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.776573][ T1212] usb 7-1: Product: syz [ 652.793409][ T1212] usb 7-1: Manufacturer: syz [ 652.804250][ T1212] usb 7-1: SerialNumber: syz [ 652.832509][ T1212] usb 7-1: config 0 descriptor?? [ 652.847020][T10891] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 652.854461][T10891] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 652.868820][ T5874] usb 5-1: Using ep0 maxpacket: 16 [ 652.881156][ T5874] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 652.895861][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.922287][ T5874] usb 5-1: Product: syz [ 652.927323][ T5874] usb 5-1: Manufacturer: syz [ 652.933205][ T5874] usb 5-1: SerialNumber: syz [ 652.945225][ T5874] r8152-cfgselector 5-1: Unknown version 0x0000 [ 652.952467][ T5874] r8152-cfgselector 5-1: config 0 descriptor?? [ 653.064486][T10891] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 653.071893][T10891] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 653.300710][T10919] netlink: 'syz.1.1143': attribute type 21 has an invalid length. [ 653.309144][ T5873] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 653.327166][T10919] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1143'. [ 653.345963][T10919] netlink: 'syz.1.1143': attribute type 5 has an invalid length. [ 653.355803][T10919] netlink: 'syz.1.1143': attribute type 6 has an invalid length. [ 653.364419][T10919] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1143'. [ 653.481083][ T1212] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 653.491031][ T5873] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 653.512992][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 653.534457][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 255, setting to 64 [ 653.535082][ T5874] r8152-cfgselector 5-1: Unknown version 0x0000 [ 653.553383][ T5874] r8152-cfgselector 5-1: bad CDC descriptors [ 653.599321][ T5873] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 653.608510][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.616555][ T5873] usb 4-1: Product: syz [ 653.621374][ T5873] usb 4-1: Manufacturer: syz [ 653.625990][ T5873] usb 4-1: SerialNumber: syz [ 653.659346][ T5873] usb 4-1: config 0 descriptor?? [ 653.664943][T10908] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 653.892451][ T25] r8152-cfgselector 5-1: USB disconnect, device number 24 [ 654.390508][T10932] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 654.997774][ T1212] dm9601 7-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 655.010246][ T5873] rc_core: IR keymap rc-streamzap not found [ 655.016189][ T5873] Registered IR keymap rc-empty [ 655.021827][ T5873] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 655.034340][ T5873] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input83 [ 655.047485][ T1212] usb 7-1: USB disconnect, device number 9 [ 655.110963][ T29] audit: type=1326 audit(1734075308.680:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10938 comm="syz.6.1148" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab51b85d19 code=0x0 [ 655.140145][ T5873] usb 4-1: USB disconnect, device number 29 [ 655.882701][T10941] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 656.486881][T10958] netlink: 830 bytes leftover after parsing attributes in process `syz.6.1154'. [ 656.768118][ T5873] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 656.930647][ T5873] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 656.961485][ T5873] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 656.988062][ T5873] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 657.003098][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.015426][ T5873] usb 4-1: Product: syz [ 657.024132][ T5873] usb 4-1: Manufacturer: syz [ 657.190660][ T5873] usb 4-1: SerialNumber: syz [ 657.225960][ T5873] usb 4-1: config 0 descriptor?? [ 657.234423][T10959] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 657.265499][T10959] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 657.320626][ T5876] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 657.509933][ T5876] usb 5-1: Using ep0 maxpacket: 16 [ 657.590806][ T5876] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 657.712762][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.833826][ T5876] usb 5-1: Product: syz [ 657.927872][ T5876] usb 5-1: Manufacturer: syz [ 657.932803][ T5876] usb 5-1: SerialNumber: syz [ 657.964781][ T5876] r8152-cfgselector 5-1: Unknown version 0x0000 [ 657.971178][ T5876] r8152-cfgselector 5-1: config 0 descriptor?? [ 658.886570][T10984] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 659.410756][T10959] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 659.421368][T10959] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 659.439122][ T5876] r8152-cfgselector 5-1: Unknown version 0x0000 [ 659.445530][ T5876] r8152-cfgselector 5-1: bad CDC descriptors [ 659.617975][ T1212] r8152-cfgselector 5-1: USB disconnect, device number 25 [ 659.627194][ T5873] Error reading MAC address [ 659.660365][ T5873] usb 4-1: USB disconnect, device number 30 [ 660.107037][T11013] FAULT_INJECTION: forcing a failure. [ 660.107037][T11013] name failslab, interval 1, probability 0, space 0, times 0 [ 660.228805][T11013] CPU: 1 UID: 0 PID: 11013 Comm: syz.5.1171 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 660.239661][T11013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 660.249803][T11013] Call Trace: [ 660.253116][T11013] [ 660.256063][T11013] dump_stack_lvl+0x241/0x360 [ 660.260810][T11013] ? __pfx_dump_stack_lvl+0x10/0x10 [ 660.266030][T11013] ? __pfx__printk+0x10/0x10 [ 660.270627][T11013] ? kmem_cache_alloc_noprof+0x48/0x380 [ 660.276185][T11013] ? __pfx___might_resched+0x10/0x10 [ 660.281486][T11013] should_fail_ex+0x3b0/0x4e0 [ 660.286185][T11013] should_failslab+0xac/0x100 [ 660.290879][T11013] ? security_file_alloc+0x32/0x310 [ 660.296095][T11013] kmem_cache_alloc_noprof+0x70/0x380 [ 660.301615][T11013] security_file_alloc+0x32/0x310 [ 660.306743][T11013] init_file+0x91/0x280 [ 660.310922][T11013] alloc_empty_file+0xb8/0x1d0 [ 660.315699][T11013] path_openat+0x107/0x3590 [ 660.320216][T11013] ? __pfx_lock_release+0x10/0x10 [ 660.325257][T11013] ? unwind_next_frame+0x18e6/0x22d0 [ 660.330555][T11013] ? __pfx_validate_chain+0x10/0x10 [ 660.335764][T11013] ? 0xffffffffa0001a20 [ 660.339945][T11013] ? 0xffffffffa0001a20 [ 660.344129][T11013] ? __pfx_validate_chain+0x10/0x10 [ 660.349343][T11013] ? is_bpf_text_address+0x285/0x2a0 [ 660.354662][T11013] ? is_bpf_text_address+0x26/0x2a0 [ 660.359873][T11013] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 660.366050][T11013] ? kernel_text_address+0xa7/0xe0 [ 660.371173][T11013] ? __pfx_path_openat+0x10/0x10 [ 660.376122][T11013] ? unwind_get_return_address+0x4d/0x90 [ 660.381780][T11013] ? arch_stack_walk+0xfd/0x150 [ 660.386650][T11013] do_filp_open+0x27f/0x4e0 [ 660.391197][T11013] ? __pfx_do_filp_open+0x10/0x10 [ 660.396531][T11013] ? do_open_execat+0x99/0x480 [ 660.401360][T11013] do_open_execat+0x165/0x480 [ 660.406050][T11013] ? __pfx_do_open_execat+0x10/0x10 [ 660.411261][T11013] ? __pfx_lock_release+0x10/0x10 [ 660.416292][T11013] alloc_bprm+0x28/0xa30 [ 660.420562][T11013] ? __phys_addr_symbol+0x2f/0x70 [ 660.425597][T11013] ? __check_object_size+0x47a/0x730 [ 660.430901][T11013] ? __might_fault+0xc6/0x120 [ 660.435604][T11013] do_execveat_common+0x18c/0x6f0 [ 660.440679][T11013] __x64_sys_execveat+0xc4/0xe0 [ 660.445552][T11013] do_syscall_64+0xf3/0x230 [ 660.450080][T11013] ? clear_bhb_loop+0x35/0x90 [ 660.454790][T11013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.460694][T11013] RIP: 0033:0x7fd650985d19 [ 660.465118][T11013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 660.484737][T11013] RSP: 002b:00007fd6516e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 660.493163][T11013] RAX: ffffffffffffffda RBX: 00007fd650b75fa0 RCX: 00007fd650985d19 [ 660.501146][T11013] RDX: 0000000000000000 RSI: 0000000020000140 RDI: ffffffffffffff9c [ 660.509133][T11013] RBP: 00007fd6516e5090 R08: 0000000000000000 R09: 0000000000000000 [ 660.517111][T11013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.525089][T11013] R13: 0000000000000000 R14: 00007fd650b75fa0 R15: 00007fff491b7728 [ 660.533081][T11013] [ 661.355940][T11032] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 663.103117][T11050] futex_wake_op: syz.3.1182 tries to shift op by -1; fix this program [ 663.127554][T11051] netlink: 'syz.5.1181': attribute type 1 has an invalid length. [ 663.250563][T11051] 8021q: adding VLAN 0 to HW filter on device bond1 [ 663.986879][T11062] FAULT_INJECTION: forcing a failure. [ 663.986879][T11062] name failslab, interval 1, probability 0, space 0, times 0 [ 664.206918][T11062] CPU: 1 UID: 0 PID: 11062 Comm: syz.3.1186 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 664.217732][T11062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 664.227803][T11062] Call Trace: [ 664.231115][T11062] [ 664.234070][T11062] dump_stack_lvl+0x241/0x360 [ 664.238801][T11062] ? __pfx_dump_stack_lvl+0x10/0x10 [ 664.244037][T11062] ? __pfx__printk+0x10/0x10 [ 664.248656][T11062] ? __kmalloc_noprof+0xb5/0x4c0 [ 664.253617][T11062] ? __pfx___might_resched+0x10/0x10 [ 664.258929][T11062] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 664.264932][T11062] should_fail_ex+0x3b0/0x4e0 [ 664.269648][T11062] should_failslab+0xac/0x100 [ 664.274367][T11062] __kmalloc_noprof+0xdd/0x4c0 [ 664.279154][T11062] ? cap_capable+0x1b4/0x250 [ 664.283775][T11062] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 664.290049][T11062] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 664.296153][T11062] genl_rcv_msg+0x802/0xec0 [ 664.300691][T11062] ? __pfx_genl_rcv_msg+0x10/0x10 [ 664.305746][T11062] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 664.311684][T11062] ? __pfx_lock_acquire+0x10/0x10 [ 664.316741][T11062] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 664.322160][T11062] ? __pfx___might_resched+0x10/0x10 [ 664.327538][T11062] netlink_rcv_skb+0x1e3/0x430 [ 664.332335][T11062] ? __pfx_genl_rcv_msg+0x10/0x10 [ 664.337399][T11062] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 664.342732][T11062] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 664.348236][T11062] genl_rcv+0x28/0x40 [ 664.352254][T11062] netlink_unicast+0x7f6/0x990 [ 664.357078][T11062] ? __pfx_netlink_unicast+0x10/0x10 [ 664.362414][T11062] ? __pfx___phys_addr+0x10/0x10 [ 664.366480][T11066] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1185'. [ 664.367369][T11062] ? __phys_addr_symbol+0x2f/0x70 [ 664.367401][T11062] ? __check_object_size+0x47a/0x730 [ 664.386593][T11062] netlink_sendmsg+0x8e4/0xcb0 [ 664.391414][T11062] ? __pfx_netlink_sendmsg+0x10/0x10 [ 664.396744][T11062] ? __pfx_netlink_sendmsg+0x10/0x10 [ 664.402086][T11062] __sock_sendmsg+0x221/0x270 [ 664.406807][T11062] ____sys_sendmsg+0x52a/0x7e0 [ 664.411611][T11062] ? __pfx_____sys_sendmsg+0x10/0x10 [ 664.416921][T11062] ? __fget_files+0x2a/0x410 [ 664.421546][T11062] ? __fget_files+0x2a/0x410 [ 664.426172][T11062] __sys_sendmsg+0x269/0x350 [ 664.430794][T11062] ? finish_task_switch+0x1e5/0x870 [ 664.436062][T11062] ? __pfx___sys_sendmsg+0x10/0x10 [ 664.441228][T11062] ? __pfx_vfs_write+0x10/0x10 [ 664.446051][T11062] ? __pfx___schedule+0x10/0x10 [ 664.450953][T11062] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 664.457313][T11062] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 664.463674][T11062] ? do_syscall_64+0xb6/0x230 [ 664.468396][T11062] do_syscall_64+0xf3/0x230 [ 664.472945][T11062] ? clear_bhb_loop+0x35/0x90 [ 664.477677][T11062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.483625][T11062] RIP: 0033:0x7f58f3f85d19 [ 664.488076][T11062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 664.507710][T11062] RSP: 002b:00007f58f4d0c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 664.516160][T11062] RAX: ffffffffffffffda RBX: 00007f58f4175fa0 RCX: 00007f58f3f85d19 [ 664.524160][T11062] RDX: 000000000000c000 RSI: 0000000020000000 RDI: 0000000000000006 [ 664.532166][T11062] RBP: 00007f58f4d0c090 R08: 0000000000000000 R09: 0000000000000000 [ 664.540181][T11062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 664.548196][T11062] R13: 0000000000000000 R14: 00007f58f4175fa0 R15: 00007ffda06c16f8 [ 664.556197][T11062] [ 665.448600][T11083] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 665.620134][T11084] FAULT_INJECTION: forcing a failure. [ 665.620134][T11084] name failslab, interval 1, probability 0, space 0, times 0 [ 665.738665][T11084] CPU: 1 UID: 0 PID: 11084 Comm: syz.4.1189 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 665.749506][T11084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 665.759588][T11084] Call Trace: [ 665.762895][T11084] [ 665.765845][T11084] dump_stack_lvl+0x241/0x360 [ 665.770560][T11084] ? __pfx_dump_stack_lvl+0x10/0x10 [ 665.775879][T11084] ? __pfx__printk+0x10/0x10 [ 665.780506][T11084] ? fs_reclaim_acquire+0x93/0x130 [ 665.785654][T11084] ? __pfx___might_resched+0x10/0x10 [ 665.790990][T11084] should_fail_ex+0x3b0/0x4e0 [ 665.795710][T11084] should_failslab+0xac/0x100 [ 665.800424][T11084] __kmalloc_noprof+0xdd/0x4c0 [ 665.805217][T11084] ? kstrtouint_from_user+0x128/0x190 [ 665.810624][T11084] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 665.816386][T11084] tomoyo_realpath_from_path+0xcf/0x5e0 [ 665.821970][T11084] tomoyo_path_number_perm+0x236/0x860 [ 665.827451][T11084] ? __lock_acquire+0x1397/0x2100 [ 665.832511][T11084] ? tomoyo_path_number_perm+0x206/0x860 [ 665.838177][T11084] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 665.844224][T11084] ? __fget_files+0x2a/0x410 [ 665.848843][T11084] ? __fget_files+0x2a/0x410 [ 665.853465][T11084] security_file_ioctl+0xc6/0x2a0 [ 665.858520][T11084] __se_sys_ioctl+0x46/0x170 [ 665.863144][T11084] do_syscall_64+0xf3/0x230 [ 665.867680][T11084] ? clear_bhb_loop+0x35/0x90 [ 665.872394][T11084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.878323][T11084] RIP: 0033:0x7f1fe3585d19 [ 665.882765][T11084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 665.902392][T11084] RSP: 002b:00007f1fe13d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 665.910845][T11084] RAX: ffffffffffffffda RBX: 00007f1fe3776080 RCX: 00007f1fe3585d19 [ 665.918844][T11084] RDX: 0000000000000002 RSI: 000000000000540a RDI: 0000000000000003 [ 665.926838][T11084] RBP: 00007f1fe13d5090 R08: 0000000000000000 R09: 0000000000000000 [ 665.934831][T11084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 665.942823][T11084] R13: 0000000000000001 R14: 00007f1fe3776080 R15: 00007ffcc43f1f98 [ 665.950830][T11084] [ 666.079635][T11084] ERROR: Out of memory at tomoyo_realpath_from_path. [ 666.337811][ T5873] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 666.499590][ T5873] usb 2-1: config 0 has an invalid interface number: 206 but max is 1 [ 666.526269][ T5873] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 666.544412][ T5873] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 666.555785][ T5873] usb 2-1: config 0 has no interface number 0 [ 666.586851][T11109] input: syz0 as /devices/virtual/input/input85 [ 666.587334][ T5873] usb 2-1: config 0 interface 206 altsetting 2 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 666.644517][ T5873] usb 2-1: config 0 interface 206 altsetting 2 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 666.948820][ T5873] usb 2-1: config 0 interface 206 altsetting 2 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 666.998189][ T5874] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 667.004046][ T5873] usb 2-1: config 0 interface 206 altsetting 2 has 5 endpoint descriptors, different from the interface descriptor's value: 7 [ 667.017858][T11113] input: syz0 as /devices/virtual/input/input86 [ 667.418627][ T5873] usb 2-1: config 0 interface 206 has no altsetting 0 [ 667.584717][ T5874] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 667.607801][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 667.622948][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 667.680231][ T5873] usb 2-1: New USB device found, idVendor=0499, idProduct=1007, bcdDevice=df.8f [ 667.725120][T11115] input: syz0 as /devices/virtual/input/input87 [ 667.732629][ T5874] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 667.742593][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.753662][ T5874] usb 4-1: Product: syz [ 667.762030][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.762907][ T5874] usb 4-1: Manufacturer: syz [ 667.775653][ T5874] usb 4-1: SerialNumber: syz [ 667.830938][ T5873] usb 2-1: Product: syz [ 667.992595][ T5874] usb 4-1: config 0 descriptor?? [ 668.015554][ T5874] streamzap 4-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 668.019759][ T5873] usb 2-1: Manufacturer: syz [ 668.043178][ T5873] usb 2-1: SerialNumber: syz [ 668.050514][ T5873] usb 2-1: config 0 descriptor?? [ 668.059402][T11089] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 668.248867][T10937] usb 4-1: USB disconnect, device number 31 [ 668.300662][T11089] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1193'. [ 668.318067][T11118] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1200'. [ 669.424690][ T5873] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 670.917555][T11136] FAULT_INJECTION: forcing a failure. [ 670.917555][T11136] name failslab, interval 1, probability 0, space 0, times 0 [ 670.931662][T11136] CPU: 0 UID: 0 PID: 11136 Comm: syz.3.1202 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 670.942461][T11136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 670.952539][T11136] Call Trace: [ 670.955838][T11136] [ 670.958788][T11136] dump_stack_lvl+0x241/0x360 [ 670.963504][T11136] ? __pfx_dump_stack_lvl+0x10/0x10 [ 670.968733][T11136] ? __pfx__printk+0x10/0x10 [ 670.973347][T11136] ? kmem_cache_alloc_noprof+0x48/0x380 [ 670.978928][T11136] ? __pfx___might_resched+0x10/0x10 [ 670.984258][T11136] should_fail_ex+0x3b0/0x4e0 [ 670.989080][T11136] should_failslab+0xac/0x100 [ 670.993811][T11136] ? getname_flags+0xb7/0x540 [ 670.998505][T11136] kmem_cache_alloc_noprof+0x70/0x380 [ 671.003915][T11136] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 671.009942][T11136] getname_flags+0xb7/0x540 [ 671.014474][T11136] do_readlinkat+0xd8/0x3a0 [ 671.019011][T11136] ? __pfx_do_readlinkat+0x10/0x10 [ 671.024160][T11136] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 671.030523][T11136] ? do_syscall_64+0x100/0x230 [ 671.035417][T11136] __x64_sys_readlink+0x7f/0x90 [ 671.040300][T11136] do_syscall_64+0xf3/0x230 [ 671.044855][T11136] ? clear_bhb_loop+0x35/0x90 [ 671.049580][T11136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.055514][T11136] RIP: 0033:0x7f58f3f85d19 [ 671.059956][T11136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 671.079595][T11136] RSP: 002b:00007f58f1df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000059 [ 671.088048][T11136] RAX: ffffffffffffffda RBX: 00007f58f4176160 RCX: 00007f58f3f85d19 [ 671.096054][T11136] RDX: 000000000000008c RSI: 0000000020000480 RDI: 00000000200000c0 [ 671.104052][T11136] RBP: 00007f58f1df6090 R08: 0000000000000000 R09: 0000000000000000 [ 671.112050][T11136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 671.120054][T11136] R13: 0000000000000000 R14: 00007f58f4176160 R15: 00007ffda06c16f8 [ 671.128077][T11136] [ 671.204004][ T5873] usb 2-1: USB disconnect, device number 17 [ 671.510967][ T6651] udevd[6651]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.206/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 672.238496][T11149] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 673.072561][ T5876] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 673.090656][T11155] netlink: 252 bytes leftover after parsing attributes in process `syz.3.1209'. [ 673.237820][ T5876] usb 5-1: Using ep0 maxpacket: 16 [ 673.301779][ T5876] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 673.311211][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.327498][ T5876] usb 5-1: Product: syz [ 673.334612][ T5876] usb 5-1: Manufacturer: syz [ 673.342399][ T5876] usb 5-1: SerialNumber: syz [ 673.376355][ T5876] r8152-cfgselector 5-1: Unknown version 0x0000 [ 673.392291][ T5876] r8152-cfgselector 5-1: config 0 descriptor?? [ 674.269251][ T5876] r8152-cfgselector 5-1: Unknown version 0x0000 [ 674.285101][ T5876] r8152-cfgselector 5-1: bad CDC descriptors [ 674.310519][ T5876] r8152-cfgselector 5-1: USB disconnect, device number 26 [ 674.868224][T11171] input: syz0 as /devices/virtual/input/input88 [ 675.115697][T11176] netlink: 'syz.4.1214': attribute type 1 has an invalid length. [ 675.147781][T11176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1214'. [ 675.372321][T11163] input: syz0 as /devices/virtual/input/input89 [ 675.475677][T11184] FAULT_INJECTION: forcing a failure. [ 675.475677][T11184] name failslab, interval 1, probability 0, space 0, times 0 [ 675.503899][T11184] CPU: 1 UID: 0 PID: 11184 Comm: syz.4.1216 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 675.514777][T11184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 675.524834][T11184] Call Trace: [ 675.528156][T11184] [ 675.531097][T11184] dump_stack_lvl+0x241/0x360 [ 675.535800][T11184] ? __pfx_dump_stack_lvl+0x10/0x10 [ 675.541004][T11184] ? __pfx__printk+0x10/0x10 [ 675.545600][T11184] ? fs_reclaim_acquire+0x93/0x130 [ 675.550712][T11184] ? __pfx___might_resched+0x10/0x10 [ 675.556000][T11184] ? dynamic_dname+0x141/0x1b0 [ 675.560784][T11184] should_fail_ex+0x3b0/0x4e0 [ 675.565467][T11184] should_failslab+0xac/0x100 [ 675.570145][T11184] __kmalloc_noprof+0xdd/0x4c0 [ 675.574913][T11184] ? tomoyo_encode+0x26f/0x540 [ 675.579703][T11184] tomoyo_encode+0x26f/0x540 [ 675.584292][T11184] ? __pfx_sockfs_dname+0x10/0x10 [ 675.589341][T11184] tomoyo_realpath_from_path+0x59e/0x5e0 [ 675.594983][T11184] tomoyo_path_number_perm+0x236/0x860 [ 675.600458][T11184] ? __lock_acquire+0x1397/0x2100 [ 675.605481][T11184] ? tomoyo_path_number_perm+0x206/0x860 [ 675.611110][T11184] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 675.617103][T11184] ? __fget_files+0x2a/0x410 [ 675.621688][T11184] ? __fget_files+0x2a/0x410 [ 675.626274][T11184] security_file_ioctl+0xc6/0x2a0 [ 675.631297][T11184] __se_sys_ioctl+0x46/0x170 [ 675.635890][T11184] do_syscall_64+0xf3/0x230 [ 675.640427][T11184] ? clear_bhb_loop+0x35/0x90 [ 675.645110][T11184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.651000][T11184] RIP: 0033:0x7f1fe3585d19 [ 675.655430][T11184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 675.675040][T11184] RSP: 002b:00007f1fe13f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 675.683460][T11184] RAX: ffffffffffffffda RBX: 00007f1fe3775fa0 RCX: 00007f1fe3585d19 [ 675.691428][T11184] RDX: 0000000000000000 RSI: 00000000c0c89425 RDI: 0000000000000004 [ 675.699398][T11184] RBP: 00007f1fe13f6090 R08: 0000000000000000 R09: 0000000000000000 [ 675.707369][T11184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 675.715343][T11184] R13: 0000000000000000 R14: 00007f1fe3775fa0 R15: 00007ffcc43f1f98 [ 675.723327][T11184] [ 675.840349][T11184] ERROR: Out of memory at tomoyo_realpath_from_path. [ 676.186414][T11189] input: syz0 as /devices/virtual/input/input90 [ 676.748762][T11191] ======================================================= [ 676.748762][T11191] WARNING: The mand mount option has been deprecated and [ 676.748762][T11191] and is ignored by this kernel. Remove the mand [ 676.748762][T11191] option from the mount to silence this warning. [ 676.748762][T11191] ======================================================= [ 677.237763][ T5873] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 677.528545][T11207] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 677.710865][ T5873] usb 5-1: config 0 has an invalid interface number: 222 but max is 0 [ 677.719352][ T5873] usb 5-1: config 0 has no interface number 0 [ 677.725644][ T5873] usb 5-1: config 0 interface 222 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 677.741665][ T5873] usb 5-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd [ 677.751147][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.760291][ T5873] usb 5-1: Product: syz [ 677.764698][ T5873] usb 5-1: Manufacturer: syz [ 677.801583][ T5873] usb 5-1: SerialNumber: syz [ 677.850084][ T5873] usb 5-1: config 0 descriptor?? [ 677.887966][T11208] bond0: option mode: unable to set because the bond device has slaves [ 678.081202][T11191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.115325][T11191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.162130][ T5874] usb 5-1: USB disconnect, device number 27 [ 680.525315][T11232] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 680.693982][T11234] netlink: 'syz.3.1229': attribute type 1 has an invalid length. [ 680.703743][T11234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1229'. [ 681.129653][T11241] input: syz0 as /devices/virtual/input/input91 [ 681.716542][T11235] 9pnet: Unknown protocol version 9p2000.?U6u [ 681.953661][T10330] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 681.962611][T10330] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 681.974266][T10330] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 682.373119][T11251] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 682.563887][T11249] netlink: 252 bytes leftover after parsing attributes in process `syz.5.1234'. [ 682.984859][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 683.000205][ T5840] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 683.009875][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 683.531782][T11261] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 683.960062][T11244] chnl_net:caif_netlink_parms(): no params data found [ 684.233218][T11244] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.241901][ T5874] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 684.278039][T11244] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.305523][T11244] bridge_slave_0: entered allmulticast mode [ 684.346631][T11280] FAULT_INJECTION: forcing a failure. [ 684.346631][T11280] name failslab, interval 1, probability 0, space 0, times 0 [ 684.349157][T11244] bridge_slave_0: entered promiscuous mode [ 684.376867][T11280] CPU: 1 UID: 0 PID: 11280 Comm: syz.6.1242 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 684.387715][T11280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 684.388116][T11244] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.397780][T11280] Call Trace: [ 684.397808][T11280] [ 684.397819][T11280] dump_stack_lvl+0x241/0x360 [ 684.397858][T11280] ? __pfx_dump_stack_lvl+0x10/0x10 [ 684.413089][T11244] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.415762][T11280] ? __pfx__printk+0x10/0x10 [ 684.415799][T11280] ? fs_reclaim_acquire+0x93/0x130 [ 684.421180][ T5874] usb 4-1: Using ep0 maxpacket: 8 [ 684.428025][T11280] ? __pfx___might_resched+0x10/0x10 [ 684.428073][T11280] should_fail_ex+0x3b0/0x4e0 [ 684.428115][T11280] should_failslab+0xac/0x100 [ 684.428152][T11280] __kmalloc_noprof+0xdd/0x4c0 [ 684.428174][T11280] ? kstrtouint_from_user+0x128/0x190 [ 684.428200][T11280] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 684.428236][T11280] tomoyo_realpath_from_path+0xcf/0x5e0 [ 684.441983][T11244] bridge_slave_1: entered allmulticast mode [ 684.442997][T11280] tomoyo_path_number_perm+0x236/0x860 [ 684.443027][T11280] ? __lock_acquire+0x1397/0x2100 [ 684.453822][ T5874] usb 4-1: config 0 has an invalid interface number: 33 but max is 1 [ 684.457642][T11280] ? tomoyo_path_number_perm+0x206/0x860 [ 684.457676][T11280] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 684.457761][T11280] ? __fget_files+0x2a/0x410 [ 684.468727][T11244] bridge_slave_1: entered promiscuous mode [ 684.473603][T11280] ? __fget_files+0x2a/0x410 [ 684.473651][T11280] security_file_ioctl+0xc6/0x2a0 [ 684.479402][ T5874] usb 4-1: config 0 has no interface number 1 [ 684.485070][T11280] __se_sys_ioctl+0x46/0x170 [ 684.545965][T11280] do_syscall_64+0xf3/0x230 [ 684.550498][T11280] ? clear_bhb_loop+0x35/0x90 [ 684.555201][T11280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.561118][T11280] RIP: 0033:0x7fab51b85d19 [ 684.565543][T11280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 684.585155][T11280] RSP: 002b:00007fab528cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 684.593667][T11280] RAX: ffffffffffffffda RBX: 00007fab51d75fa0 RCX: 00007fab51b85d19 [ 684.601643][T11280] RDX: 0000000020003480 RSI: 00000000c0145608 RDI: 0000000000000003 [ 684.609616][T11280] RBP: 00007fab528cf090 R08: 0000000000000000 R09: 0000000000000000 [ 684.617592][T11280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 684.625562][T11280] R13: 0000000000000000 R14: 00007fab51d75fa0 R15: 00007fffaf6de538 [ 684.633550][T11280] [ 684.636708][ T5874] usb 4-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 684.649061][ T5874] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 684.655606][T11280] ERROR: Out of memory at tomoyo_realpath_from_path. [ 684.671757][ T5874] usb 4-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 684.681430][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.689810][ T5874] usb 4-1: Product: syz [ 684.694233][ T5874] usb 4-1: Manufacturer: syz [ 684.698928][ T5874] usb 4-1: SerialNumber: syz [ 684.706663][ T5874] usb 4-1: config 0 descriptor?? [ 684.716998][ T5874] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 684.751569][T11244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.780676][T11244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 685.108181][ T5834] Bluetooth: hci0: command tx timeout [ 685.110061][T11244] team0: Port device team_slave_0 added [ 685.118555][T11268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1239'. [ 685.151154][T11244] team0: Port device team_slave_1 added [ 685.187958][T11289] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 685.321423][ T5874] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 685.333774][ T5874] usb 4-1: USB disconnect, device number 32 [ 685.342444][ T5874] pvrusb2: Device being rendered inoperable [ 685.353366][ T5874] pvrusb2: Device being rendered inoperable [ 685.406510][T11244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 685.420896][T11244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 685.632973][T11244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 685.649487][T11244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 685.656631][T11244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 685.686005][T11244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 686.072529][T11297] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 686.428423][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.434999][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.520380][T11244] hsr_slave_0: entered promiscuous mode [ 686.623483][T11244] hsr_slave_1: entered promiscuous mode [ 686.666930][T11244] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 686.699456][T11244] Cannot create hsr debugfs directory [ 686.964285][T11302] FAULT_INJECTION: forcing a failure. [ 686.964285][T11302] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 687.032125][T11302] CPU: 1 UID: 0 PID: 11302 Comm: syz.3.1247 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 687.042955][T11302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 687.053051][T11302] Call Trace: [ 687.056379][T11302] [ 687.059347][T11302] dump_stack_lvl+0x241/0x360 [ 687.064090][T11302] ? __pfx_dump_stack_lvl+0x10/0x10 [ 687.069331][T11302] ? __pfx__printk+0x10/0x10 [ 687.073965][T11302] ? __pfx_lock_release+0x10/0x10 [ 687.079048][T11302] should_fail_ex+0x3b0/0x4e0 [ 687.083758][T11302] _copy_from_iter+0x1e9/0x1c20 [ 687.088629][T11302] ? __virt_addr_valid+0x183/0x530 [ 687.093764][T11302] ? __alloc_skb+0x28f/0x440 [ 687.098370][T11302] ? __pfx__copy_from_iter+0x10/0x10 [ 687.103679][T11302] ? __virt_addr_valid+0x183/0x530 [ 687.108810][T11302] ? __virt_addr_valid+0x183/0x530 [ 687.113937][T11302] ? __virt_addr_valid+0x45f/0x530 [ 687.119064][T11302] ? __phys_addr_symbol+0x2f/0x70 [ 687.124095][T11302] ? __check_object_size+0x47a/0x730 [ 687.129425][T11302] netlink_sendmsg+0x73d/0xcb0 [ 687.134221][T11302] ? __pfx_netlink_sendmsg+0x10/0x10 [ 687.139517][T11302] ? __pfx_netlink_sendmsg+0x10/0x10 [ 687.144799][T11302] __sock_sendmsg+0x221/0x270 [ 687.149497][T11302] ____sys_sendmsg+0x52a/0x7e0 [ 687.154289][T11302] ? __pfx_____sys_sendmsg+0x10/0x10 [ 687.159590][T11302] ? __fget_files+0x2a/0x410 [ 687.164178][T11302] ? __fget_files+0x2a/0x410 [ 687.168797][T11302] __sys_sendmsg+0x269/0x350 [ 687.173426][T11302] ? __pfx_lock_release+0x10/0x10 [ 687.178465][T11302] ? __pfx___sys_sendmsg+0x10/0x10 [ 687.183580][T11302] ? __pfx_vfs_write+0x10/0x10 [ 687.188376][T11302] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 687.194716][T11302] ? do_syscall_64+0x100/0x230 [ 687.199581][T11302] ? do_syscall_64+0xb6/0x230 [ 687.204273][T11302] do_syscall_64+0xf3/0x230 [ 687.208810][T11302] ? clear_bhb_loop+0x35/0x90 [ 687.213523][T11302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.219438][T11302] RIP: 0033:0x7f58f3f85d19 [ 687.223857][T11302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 687.243467][T11302] RSP: 002b:00007f58f4d0c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 687.251898][T11302] RAX: ffffffffffffffda RBX: 00007f58f4175fa0 RCX: 00007f58f3f85d19 [ 687.259885][T11302] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 687.267865][T11302] RBP: 00007f58f4d0c090 R08: 0000000000000000 R09: 0000000000000000 [ 687.275847][T11302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 687.283809][T11302] R13: 0000000000000000 R14: 00007f58f4175fa0 R15: 00007ffda06c16f8 [ 687.291798][T11302] [ 687.297867][ T5834] Bluetooth: hci0: command tx timeout [ 687.795361][T11304] input: syz0 as /devices/virtual/input/input92 [ 688.240731][T11314] netlink: 'syz.3.1249': attribute type 12 has an invalid length. [ 688.418878][T11244] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 688.432476][T11314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1249'. [ 688.452725][T11244] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 688.518763][T11244] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 688.561074][T11316] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 688.629414][T11244] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 688.799705][T11244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 688.831625][T11244] 8021q: adding VLAN 0 to HW filter on device team0 [ 688.845237][ T3563] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.852477][ T3563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 688.919531][ T3563] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.926760][ T3563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 689.247475][T11328] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1254'. [ 689.327884][ T5876] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 689.332564][T11244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 689.347879][ T5834] Bluetooth: hci0: command tx timeout [ 689.517971][ T5876] usb 2-1: Using ep0 maxpacket: 16 [ 689.529075][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 689.542124][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 689.569234][ T5876] usb 2-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00 [ 689.592419][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.626300][ T5876] usb 2-1: config 0 descriptor?? [ 689.686068][T11244] veth0_vlan: entered promiscuous mode [ 689.706856][T11244] veth1_vlan: entered promiscuous mode [ 689.727876][ T8] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 689.786100][T11244] veth0_macvtap: entered promiscuous mode [ 689.815836][T11244] veth1_macvtap: entered promiscuous mode [ 689.895723][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 689.931496][ T8] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 689.964322][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.986190][T11244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 690.022978][ T8] usb 4-1: Product: syz [ 690.038853][T11341] FAULT_INJECTION: forcing a failure. [ 690.038853][T11341] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 690.052227][ T8] usb 4-1: Manufacturer: syz [ 690.068731][T11244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.097726][ T8] usb 4-1: SerialNumber: syz [ 690.167834][ T8] r8152-cfgselector 4-1: Unknown version 0x0000 [ 690.176887][T11244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 690.187925][ T29] audit: type=1804 audit(1734075343.750:7): pid=11342 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.1253" name="/newroot/271/bus/bus" dev="overlay" ino=1478 res=1 errno=0 [ 690.219692][T11341] CPU: 0 UID: 0 PID: 11341 Comm: syz.5.1257 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 690.230521][T11341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 690.240616][T11341] Call Trace: [ 690.243919][T11341] [ 690.246867][T11341] dump_stack_lvl+0x241/0x360 [ 690.251580][T11341] ? __pfx_dump_stack_lvl+0x10/0x10 [ 690.256811][T11341] ? __pfx__printk+0x10/0x10 [ 690.261437][T11341] ? snprintf+0xda/0x120 [ 690.265715][T11341] should_fail_ex+0x3b0/0x4e0 [ 690.270434][T11341] _copy_to_user+0x31/0xb0 [ 690.274883][T11341] simple_read_from_buffer+0xca/0x150 [ 690.280320][T11341] proc_fail_nth_read+0x1e9/0x250 [ 690.285379][T11341] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 690.290956][T11341] ? rw_verify_area+0x55e/0x6f0 [ 690.295832][T11341] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 690.301418][T11341] vfs_read+0x1fc/0xb70 [ 690.305610][T11341] ? do_sock_setsockopt+0x3e2/0x720 [ 690.310838][T11341] ? __pfx_vfs_read+0x10/0x10 [ 690.315557][T11341] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 690.321480][T11341] ? do_sock_setsockopt+0x3e2/0x720 [ 690.326705][T11341] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 690.332291][T11341] ksys_read+0x18f/0x2b0 [ 690.336558][T11341] ? __pfx_ksys_read+0x10/0x10 [ 690.341347][T11341] ? do_syscall_64+0x100/0x230 [ 690.346150][T11341] ? do_syscall_64+0xb6/0x230 [ 690.350887][T11341] do_syscall_64+0xf3/0x230 [ 690.355424][T11341] ? clear_bhb_loop+0x35/0x90 [ 690.360153][T11341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.366078][T11341] RIP: 0033:0x7fd65098472c [ 690.370603][T11341] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 690.390256][T11341] RSP: 002b:00007fd6516e5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 690.398692][T11341] RAX: ffffffffffffffda RBX: 00007fd650b75fa0 RCX: 00007fd65098472c [ 690.406680][T11341] RDX: 000000000000000f RSI: 00007fd6516e50a0 RDI: 0000000000000004 [ 690.414668][T11341] RBP: 00007fd6516e5090 R08: 0000000000000000 R09: 0000000000000000 [ 690.422657][T11341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 690.430647][T11341] R13: 0000000000000000 R14: 00007fd650b75fa0 R15: 00007fff491b7728 [ 690.438649][T11341] [ 690.449084][ T8] r8152-cfgselector 4-1: config 0 descriptor?? [ 690.473808][T11244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.524730][T11244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 690.545332][T11244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.555711][T11244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 690.566679][T11244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.576845][T11244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 690.588540][T11244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.600186][T11244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 690.667373][T11244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 690.678921][T11244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.690242][T11244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 690.701137][T11244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.736203][T11244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 690.807181][ T5876] usbhid 2-1:0.0: can't add hid device: -71 [ 690.827596][ T5876] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 690.873351][T11244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.900152][T11244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 690.936542][ T5876] usb 2-1: USB disconnect, device number 18 [ 690.959018][T11244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.970074][T11244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 690.980663][T11244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.998926][T11244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 691.016964][T11244] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.048359][T11244] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.133249][T11244] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.142537][ T8] r8152-cfgselector 4-1: Unknown version 0x0000 [ 691.149336][ T8] r8152-cfgselector 4-1: bad CDC descriptors [ 691.178540][T11244] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.427998][ T5834] Bluetooth: hci0: command tx timeout [ 691.622589][ T7829] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.670186][ T7829] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 691.932392][ T3563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.012847][ T3563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.991182][T11359] input: syz0 as /devices/virtual/input/input93 [ 694.857402][T11368] input: syz0 as /devices/virtual/input/input94 [ 695.359768][T11374] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1264'. [ 696.252557][T11385] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 696.882059][ T5873] r8152-cfgselector 4-1: USB disconnect, device number 33 [ 697.227845][T10937] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 697.398094][T10937] usb 6-1: Using ep0 maxpacket: 32 [ 697.415035][T10937] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 697.420135][T11397] input: syz0 as /devices/virtual/input/input95 [ 697.518078][ T5873] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 697.575645][T10937] usb 6-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 697.633880][T10937] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.686274][T10937] usb 6-1: Product: syz [ 697.693102][ T5873] usb 8-1: Using ep0 maxpacket: 16 [ 697.743557][ T5873] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 697.787145][T10937] usb 6-1: Manufacturer: syz [ 697.821963][T10937] usb 6-1: SerialNumber: syz [ 697.843913][ T5873] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 697.870213][T10937] usb 6-1: config 0 descriptor?? [ 697.973018][T10937] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 697.987711][ T5873] usb 8-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00 [ 698.000869][ T5873] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.018804][ T5873] usb 8-1: config 0 descriptor?? [ 698.720082][ T29] audit: type=1804 audit(1734075352.310:8): pid=11402 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.7.1269" name="/newroot/1/bus/bus" dev="overlay" ino=31 res=1 errno=0 [ 698.962733][ T5873] usbhid 8-1:0.0: can't add hid device: -71 [ 698.968791][ T5873] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 698.983142][ T5873] usb 8-1: USB disconnect, device number 2 [ 699.151498][T10937] gspca_sunplus: reg_w_riv err -71 [ 701.027977][T11423] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 702.453333][T10937] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 702.490533][T11424] input: syz0 as /devices/virtual/input/input96 [ 702.491582][T10937] usb 6-1: USB disconnect, device number 19 [ 703.477802][T10937] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 703.795432][T11433] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 703.910453][T10937] usb 2-1: Using ep0 maxpacket: 16 [ 703.928475][T10937] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 703.958021][T10937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.995947][T10937] usb 2-1: Product: syz [ 704.063640][T10937] usb 2-1: Manufacturer: syz [ 704.089322][T10937] usb 2-1: SerialNumber: syz [ 704.130566][T10937] r8152-cfgselector 2-1: Unknown version 0x0000 [ 704.136896][T10937] r8152-cfgselector 2-1: config 0 descriptor?? [ 704.177803][ T5873] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 704.329708][ T5873] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 704.347766][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 704.631861][ T5873] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 704.642106][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.650962][ T5873] usb 4-1: Product: syz [ 704.655303][ T5873] usb 4-1: Manufacturer: syz [ 704.661595][ T5873] usb 4-1: SerialNumber: syz [ 704.673136][ T5873] usb 4-1: config 0 descriptor?? [ 704.689695][ T5873] streamzap 4-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 704.842221][T10937] r8152-cfgselector 2-1: Unknown version 0x0000 [ 704.867535][T10937] r8152-cfgselector 2-1: bad CDC descriptors [ 704.912851][ T5874] usb 4-1: USB disconnect, device number 34 [ 705.330192][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 705.357953][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 705.388916][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 705.403479][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 705.411259][ T5840] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 705.423616][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 706.282375][T11439] chnl_net:caif_netlink_parms(): no params data found [ 707.726108][T11457] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 707.967847][ T5834] Bluetooth: hci3: command tx timeout [ 708.555126][ T8] r8152-cfgselector 2-1: USB disconnect, device number 19 [ 708.637886][T11467] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1286'. [ 708.746863][T11439] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.754441][T11439] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.773296][T11439] bridge_slave_0: entered allmulticast mode [ 708.948500][T11439] bridge_slave_0: entered promiscuous mode [ 709.231388][T11475] Bluetooth: MGMT ver 1.23 [ 709.280567][T11478] input: syz0 as /devices/virtual/input/input97 [ 709.636402][ T3563] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.655511][T11439] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.665774][T11439] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.675241][T11439] bridge_slave_1: entered allmulticast mode [ 709.682120][T11439] bridge_slave_1: entered promiscuous mode [ 709.804084][ T3563] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.814743][ T8] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 709.865472][T11439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 709.870490][T11482] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1291'. [ 709.879777][T11439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 709.923010][ T3563] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.988793][ T5834] Bluetooth: hci3: command tx timeout [ 710.002235][ T8] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 710.011557][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.028699][ T8] usb 2-1: config 0 descriptor?? [ 710.037773][ T5873] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 710.045988][ T8] cp210x 2-1:0.0: cp210x converter detected [ 710.131160][ T5875] libceph: connect (1)[c::]:6789 error -101 [ 710.140404][ T3563] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.153469][ T5875] libceph: mon0 (1)[c::]:6789 connect error [ 710.192598][T11439] team0: Port device team_slave_0 added [ 710.202001][T11439] team0: Port device team_slave_1 added [ 710.249146][ T5873] usb 8-1: Using ep0 maxpacket: 16 [ 710.256627][ T5873] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 710.276296][T11439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 710.287825][ T5873] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 710.307865][T11439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 710.334152][ T5873] usb 8-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00 [ 710.342963][T11439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 710.350381][ T5873] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.364143][T11439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 710.376427][T11439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 710.380984][ T5873] usb 8-1: config 0 descriptor?? [ 710.408073][T11439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 710.429985][ T5875] libceph: connect (1)[c::]:6789 error -101 [ 710.444862][ T5875] libceph: mon0 (1)[c::]:6789 connect error [ 710.456983][ T8] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 710.497137][ T8] usb 2-1: cp210x converter now attached to ttyUSB0 [ 710.516063][T11439] hsr_slave_0: entered promiscuous mode [ 710.548260][T11439] hsr_slave_1: entered promiscuous mode [ 710.571685][T11439] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 710.587796][T11439] Cannot create hsr debugfs directory [ 710.820828][T11484] ceph: No mds server is up or the cluster is laggy [ 711.266918][ T29] audit: type=1804 audit(1734075364.840:9): pid=11497 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.7.1290" name="/newroot/7/bus/bus" dev="overlay" ino=72 res=1 errno=0 [ 711.421959][ T3563] bridge_slave_1: left allmulticast mode [ 711.465309][ T3563] bridge_slave_1: left promiscuous mode [ 711.506207][ T3563] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.574183][ T5873] usbhid 8-1:0.0: can't add hid device: -71 [ 711.583968][ T5873] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 711.599769][ T3563] bridge_slave_0: left allmulticast mode [ 711.613586][ T5873] usb 8-1: USB disconnect, device number 3 [ 711.637499][ T3563] bridge_slave_0: left promiscuous mode [ 711.643781][ T3563] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.361208][ T5834] Bluetooth: hci3: command tx timeout [ 712.850166][T11508] netlink: 324 bytes leftover after parsing attributes in process `syz.5.1296'. [ 713.124071][ T5873] usb 2-1: USB disconnect, device number 20 [ 713.612496][ T5873] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 713.625090][T11513] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 714.089800][ T5873] cp210x 2-1:0.0: device disconnected [ 714.137912][ T5875] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 714.382933][T11520] input: syz0 as /devices/virtual/input/input98 [ 714.428202][ T5840] Bluetooth: hci3: command tx timeout [ 714.607995][ T5875] usb 4-1: Using ep0 maxpacket: 16 [ 714.731414][ T5875] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 714.751026][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.768411][T11522] FAULT_INJECTION: forcing a failure. [ 714.768411][T11522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 714.783933][ T5875] usb 4-1: Product: syz [ 714.795777][ T5875] usb 4-1: Manufacturer: syz [ 714.804195][ T5875] usb 4-1: SerialNumber: syz [ 714.812057][T11524] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1301'. [ 714.828152][T11522] CPU: 1 UID: 0 PID: 11522 Comm: syz.7.1300 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 714.838933][T11522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 714.849041][T11522] Call Trace: [ 714.852352][T11522] [ 714.855299][T11522] dump_stack_lvl+0x241/0x360 [ 714.859989][T11522] ? __pfx_dump_stack_lvl+0x10/0x10 [ 714.865188][T11522] ? __pfx__printk+0x10/0x10 [ 714.869776][T11522] ? __pfx_lock_release+0x10/0x10 [ 714.874800][T11522] ? __import_iovec+0x3a8/0x870 [ 714.879662][T11522] should_fail_ex+0x3b0/0x4e0 [ 714.884349][T11522] _copy_from_user+0x2f/0xc0 [ 714.888942][T11522] ____sys_sendmsg+0x2ef/0x7e0 [ 714.893705][T11522] ? __pfx_____sys_sendmsg+0x10/0x10 [ 714.899007][T11522] ? __fget_files+0x2a/0x410 [ 714.903630][T11522] ? __fget_files+0x2a/0x410 [ 714.908222][T11522] __sys_sendmsg+0x269/0x350 [ 714.912828][T11522] ? __pfx_lock_release+0x10/0x10 [ 714.917854][T11522] ? __pfx___sys_sendmsg+0x10/0x10 [ 714.922970][T11522] ? __pfx_vfs_write+0x10/0x10 [ 714.927762][T11522] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 714.934140][T11522] ? do_syscall_64+0x100/0x230 [ 714.938910][T11522] ? do_syscall_64+0xb6/0x230 [ 714.943589][T11522] do_syscall_64+0xf3/0x230 [ 714.948094][T11522] ? clear_bhb_loop+0x35/0x90 [ 714.952798][T11522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.958715][T11522] RIP: 0033:0x7fc518185d19 [ 714.963125][T11522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 714.982727][T11522] RSP: 002b:00007fc51903c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 714.991144][T11522] RAX: ffffffffffffffda RBX: 00007fc518375fa0 RCX: 00007fc518185d19 [ 714.999121][T11522] RDX: 0000000004080000 RSI: 0000000020000900 RDI: 0000000000000003 [ 715.007087][T11522] RBP: 00007fc51903c090 R08: 0000000000000000 R09: 0000000000000000 [ 715.015049][T11522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 715.023013][T11522] R13: 0000000000000000 R14: 00007fc518375fa0 R15: 00007ffca70c3218 [ 715.030991][T11522] [ 715.254238][ T5875] r8152-cfgselector 4-1: Unknown version 0x0000 [ 715.261034][ T5875] r8152-cfgselector 4-1: config 0 descriptor?? [ 715.455924][ T3563] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 715.669262][ T5876] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 715.731032][ T3563] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 715.780707][ T3563] bond0 (unregistering): Released all slaves [ 715.792917][ T5875] r8152-cfgselector 4-1: Unknown version 0x0000 [ 715.799392][ T5875] r8152-cfgselector 4-1: bad CDC descriptors [ 715.857797][ T5876] usb 6-1: Using ep0 maxpacket: 32 [ 715.894735][ T5876] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 715.931446][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 716.030876][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 716.100546][ T5876] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 716.114899][ T5876] usb 6-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00 [ 716.124650][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.135415][ T5876] usb 6-1: config 0 descriptor?? [ 716.585010][ T5876] logitech 0003:046D:C287.0003: hidraw0: USB HID v0.00 Device [HID 046d:c287] on usb-dummy_hcd.5-1/input0 [ 716.662356][ T5876] logitech 0003:046D:C287.0003: no inputs found [ 716.755885][ T3563] hsr_slave_0: left promiscuous mode [ 716.787987][ T3563] hsr_slave_1: left promiscuous mode [ 716.803051][ T3563] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 716.828108][ T3563] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 716.849506][T11530] xt_addrtype: ipv6 does not support BROADCAST matching [ 716.879604][ T3563] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 716.904759][ T3563] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 716.978215][ T5877] usb 6-1: USB disconnect, device number 20 [ 717.031606][ T3563] veth1_macvtap: left promiscuous mode [ 717.218179][ T3563] veth0_macvtap: left promiscuous mode [ 717.241386][ T3563] veth1_vlan: left promiscuous mode [ 717.289661][ T3563] veth0_vlan: left promiscuous mode [ 718.526631][T11559] FAULT_INJECTION: forcing a failure. [ 718.526631][T11559] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 718.574194][T11559] CPU: 1 UID: 0 PID: 11559 Comm: syz.7.1307 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 718.585110][T11559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 718.595193][T11559] Call Trace: [ 718.598499][T11559] [ 718.601450][T11559] dump_stack_lvl+0x241/0x360 [ 718.606163][T11559] ? __pfx_dump_stack_lvl+0x10/0x10 [ 718.611382][T11559] ? __pfx__printk+0x10/0x10 [ 718.615997][T11559] ? __pfx_lock_release+0x10/0x10 [ 718.621049][T11559] should_fail_ex+0x3b0/0x4e0 [ 718.625761][T11559] _copy_from_user+0x2f/0xc0 [ 718.630387][T11559] copy_msghdr_from_user+0xae/0x680 [ 718.635644][T11559] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 718.641462][T11559] ? __fget_files+0x2a/0x410 [ 718.646078][T11559] ? __fget_files+0x2a/0x410 [ 718.650725][T11559] __sys_sendmsg+0x209/0x350 [ 718.655326][T11559] ? __pfx_lock_release+0x10/0x10 [ 718.660358][T11559] ? __pfx___sys_sendmsg+0x10/0x10 [ 718.665493][T11559] ? __pfx_vfs_write+0x10/0x10 [ 718.670303][T11559] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 718.676632][T11559] ? do_syscall_64+0x100/0x230 [ 718.681415][T11559] ? do_syscall_64+0xb6/0x230 [ 718.686103][T11559] do_syscall_64+0xf3/0x230 [ 718.690625][T11559] ? clear_bhb_loop+0x35/0x90 [ 718.695321][T11559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.701230][T11559] RIP: 0033:0x7fc518185d19 [ 718.705654][T11559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 718.725270][T11559] RSP: 002b:00007fc51903c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 718.733700][T11559] RAX: ffffffffffffffda RBX: 00007fc518375fa0 RCX: 00007fc518185d19 [ 718.741684][T11559] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 718.749668][T11559] RBP: 00007fc51903c090 R08: 0000000000000000 R09: 0000000000000000 [ 718.757654][T11559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 718.765643][T11559] R13: 0000000000000000 R14: 00007fc518375fa0 R15: 00007ffca70c3218 [ 718.773636][T11559] [ 718.827903][ T5877] r8152-cfgselector 4-1: USB disconnect, device number 35 [ 718.955092][T11566] netlink: 324 bytes leftover after parsing attributes in process `syz.7.1310'. [ 719.204742][T11570] input: syz0 as /devices/virtual/input/input99 [ 719.336746][ T5877] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 719.607916][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 719.657190][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 719.706281][ T3563] team0 (unregistering): Port device team_slave_1 removed [ 719.731285][ T5877] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 719.763685][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.818996][ T5877] usb 4-1: config 0 descriptor?? [ 719.868249][ T3563] team0 (unregistering): Port device team_slave_0 removed [ 720.038521][ T5877] pyra 0003:1E7D:2CF6.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 720.248805][ T5877] pyra 0003:1E7D:2CF6.0004: couldn't init struct pyra_device [ 720.256284][ T5877] pyra 0003:1E7D:2CF6.0004: couldn't install mouse [ 720.298670][ T5877] pyra 0003:1E7D:2CF6.0004: probe with driver pyra failed with error -32 [ 720.330999][ T5877] usb 4-1: USB disconnect, device number 36 [ 720.724163][T11576] FAULT_INJECTION: forcing a failure. [ 720.724163][T11576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 720.737343][T11576] CPU: 1 UID: 0 PID: 11576 Comm: syz.3.1312 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 720.748135][T11576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 720.758313][T11576] Call Trace: [ 720.761613][T11576] [ 720.764568][T11576] dump_stack_lvl+0x241/0x360 [ 720.769323][T11576] ? __pfx_dump_stack_lvl+0x10/0x10 [ 720.774559][T11576] ? __pfx__printk+0x10/0x10 [ 720.779189][T11576] ? lockdep_hardirqs_on+0x99/0x150 [ 720.784419][T11576] ? __pfx_lock_release+0x10/0x10 [ 720.789475][T11576] should_fail_ex+0x3b0/0x4e0 [ 720.794203][T11576] _copy_from_user+0x2f/0xc0 [ 720.798835][T11576] sk_setsockopt+0x2d4/0x33b0 [ 720.803538][T11576] ? mark_lock+0x20/0x360 [ 720.807901][T11576] ? __pfx_sk_setsockopt+0x10/0x10 [ 720.813037][T11576] ? __pfx___schedule+0x10/0x10 [ 720.817916][T11576] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 720.823927][T11576] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 720.829931][T11576] do_sock_setsockopt+0x2fb/0x720 [ 720.834985][T11576] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 720.840563][T11576] ? __x64_sys_setsockopt+0x1cd/0x280 [ 720.845969][T11576] __x64_sys_setsockopt+0x1ee/0x280 [ 720.851194][T11576] do_syscall_64+0xf3/0x230 [ 720.855729][T11576] ? clear_bhb_loop+0x35/0x90 [ 720.860444][T11576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.866365][T11576] RIP: 0033:0x7f58f3f85d19 [ 720.870799][T11576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 720.890425][T11576] RSP: 002b:00007f58f1df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 720.898888][T11576] RAX: ffffffffffffffda RBX: 00007f58f4176160 RCX: 00007f58f3f85d19 [ 720.906881][T11576] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000007 [ 720.914871][T11576] RBP: 00007f58f1df6090 R08: 0000000000000004 R09: 0000000000000000 [ 720.922861][T11576] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 720.930867][T11576] R13: 0000000000000000 R14: 00007f58f4176160 R15: 00007ffda06c16f8 [ 720.938878][T11576] [ 721.370437][T11578] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1313'. [ 722.524479][T11588] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1315'. [ 722.600553][T11439] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 722.882675][T11439] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 722.978088][ T5873] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 723.176414][ T5873] usb 4-1: Using ep0 maxpacket: 16 [ 723.272491][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 723.383312][T11439] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 723.685162][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 723.695027][ T5873] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00 [ 723.704149][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.714724][ T5873] usb 4-1: config 0 descriptor?? [ 723.887534][T11439] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 724.306299][ T29] audit: type=1804 audit(1734075377.890:10): pid=11607 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.1316" name="/newroot/282/bus/bus" dev="overlay" ino=1527 res=1 errno=0 [ 724.458785][ T29] audit: type=1326 audit(1734075377.970:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11603 comm="syz.1.1320" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c30785d19 code=0x0 [ 724.501141][T11605] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1320'. [ 724.631379][T11439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 724.660207][ T25] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 724.743678][T11439] 8021q: adding VLAN 0 to HW filter on device team0 [ 724.784954][ T6743] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.792148][ T6743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 724.827336][ T7829] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.834476][ T7829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 724.837851][ T25] usb 8-1: Using ep0 maxpacket: 16 [ 724.871024][ T5873] usb 4-1: string descriptor 0 read error: -71 [ 724.891984][ T5873] uclogic 0003:5543:006E.0005: failed retrieving string descriptor #200: -71 [ 724.917751][ T25] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 724.945873][ T5873] uclogic 0003:5543:006E.0005: failed retrieving pen parameters: -71 [ 724.957748][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.965788][ T25] usb 8-1: Product: syz [ 725.002797][ T5873] uclogic 0003:5543:006E.0005: failed probing pen v2 parameters: -71 [ 725.011821][ T25] usb 8-1: Manufacturer: syz [ 725.016447][ T25] usb 8-1: SerialNumber: syz [ 725.023732][ T5873] uclogic 0003:5543:006E.0005: failed probing parameters: -71 [ 725.039966][ T5873] uclogic 0003:5543:006E.0005: probe with driver uclogic failed with error -71 [ 725.058231][ T25] r8152-cfgselector 8-1: Unknown version 0x0000 [ 725.066402][ T25] r8152-cfgselector 8-1: config 0 descriptor?? [ 725.072925][ T5873] usb 4-1: USB disconnect, device number 37 [ 726.370582][ T25] r8152-cfgselector 8-1: Unknown version 0x0000 [ 726.377015][ T25] r8152-cfgselector 8-1: bad CDC descriptors [ 726.589992][T11439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 727.088995][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.197989][ T5873] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 727.254836][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.395265][ T5873] usb 4-1: Using ep0 maxpacket: 16 [ 727.421564][ T5873] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 727.557138][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 727.570794][T10937] r8152-cfgselector 8-1: USB disconnect, device number 4 [ 727.582132][ T5873] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 727.637754][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.645822][ T5873] usb 4-1: Product: syz [ 727.705539][ T5873] usb 4-1: Manufacturer: syz [ 727.721292][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.742038][ T5873] usb 4-1: SerialNumber: syz [ 727.780340][ T5873] usb 4-1: config 0 descriptor?? [ 727.803326][ T5873] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 727.826995][ T5873] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 727.905637][T11661] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1325'. [ 728.130719][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.168103][T11665] tipc: Started in network mode [ 728.180853][T11665] tipc: Node identity aee, cluster identity 1024 [ 728.204364][T11665] tipc: Node number set to 2798 [ 728.252011][T11439] veth0_vlan: entered promiscuous mode [ 728.322136][T11439] veth1_vlan: entered promiscuous mode [ 728.526202][ T5873] em28xx 4-1:0.0: chip ID is em2874 [ 728.861546][T11674] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 729.723553][T11439] veth0_macvtap: entered promiscuous mode [ 730.120154][T11679] binfmt_misc: register: failed to install interpreter file ./file0 [ 730.174901][T11677] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 730.190748][T11439] veth1_macvtap: entered promiscuous mode [ 730.360935][T11439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 730.381552][T11439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.458293][T11439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 730.473614][T11439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.486371][T11439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 730.586493][T11439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.607314][T11684] input: syz0 as /devices/virtual/input/input100 [ 730.659890][T11439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 730.709776][T11439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.983600][T11439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 731.013356][T11439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.029029][T11439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 731.040272][T11439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 731.050980][T11439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.061281][T11439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 731.072195][T11439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.082400][T11439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 731.093279][T11439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.103525][T11439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 731.114706][T11439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.125219][T11439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 731.136813][T11439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.152626][T11439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 731.258000][ T52] bridge_slave_1: left allmulticast mode [ 731.269009][ T52] bridge_slave_1: left promiscuous mode [ 731.278252][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.717775][T10216] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 731.919006][ T5873] usb 4-1: USB disconnect, device number 38 [ 731.919352][ T52] bridge_slave_0: left allmulticast mode [ 731.925707][ T5873] em28xx 4-1:0.0: Disconnecting em28xx [ 731.945373][ T5873] em28xx 4-1:0.0: Freeing device [ 732.013731][ T52] bridge_slave_0: left promiscuous mode [ 732.037930][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.108115][T10216] usb 6-1: Using ep0 maxpacket: 16 [ 732.123885][T10216] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 732.134086][T10216] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.168743][T10216] usb 6-1: Product: syz [ 732.172969][T10216] usb 6-1: Manufacturer: syz [ 732.183895][T11704] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1336'. [ 732.190561][T10216] usb 6-1: SerialNumber: syz [ 732.209868][T10216] r8152-cfgselector 6-1: Unknown version 0x0000 [ 732.216311][T10216] r8152-cfgselector 6-1: config 0 descriptor?? [ 732.700459][ T5877] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 732.836407][T10216] r8152-cfgselector 6-1: Unknown version 0x0000 [ 732.843708][T10216] r8152-cfgselector 6-1: bad CDC descriptors [ 733.173700][ T5877] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 733.395074][ T5877] usb 8-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 733.463043][ T5877] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.474772][ T5877] usb 8-1: config 0 descriptor?? [ 733.580723][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 733.594610][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 733.605594][ T52] bond0 (unregistering): Released all slaves [ 733.676823][T11439] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.718972][T11703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 733.757890][T11439] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.769008][T11439] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.798112][T11703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 733.812453][T11439] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.207199][ T5877] uclogic 0003:5543:0003.0006: No inputs registered, leaving [ 734.263420][ T5877] uclogic 0003:5543:0003.0006: hidraw0: USB HID v0.01 Device [HID 5543:0003] on usb-dummy_hcd.7-1/input0 [ 734.503213][T11719] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 734.814167][T11722] No source specified [ 734.883060][ T5874] usb 8-1: USB disconnect, device number 5 [ 735.177739][ T5873] r8152-cfgselector 6-1: USB disconnect, device number 21 [ 735.778848][ T5877] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 735.807456][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 735.817109][T11743] kvm: MONITOR instruction emulated as NOP! [ 735.843500][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 735.870232][ T52] hsr_slave_0: left promiscuous mode [ 735.876359][ T52] hsr_slave_1: left promiscuous mode [ 735.901463][T11754] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1347'. [ 735.911525][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 735.919138][T10937] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 735.931235][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 735.941814][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 735.947882][ T5877] usb 6-1: Using ep0 maxpacket: 16 [ 735.957773][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 735.976178][ T5877] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 735.999079][ T5877] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 736.004823][ T52] veth1_macvtap: left promiscuous mode [ 736.020598][ T5877] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00 [ 736.024751][ T52] veth0_macvtap: left promiscuous mode [ 736.035724][ T5877] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.047553][ T52] veth1_vlan: left promiscuous mode [ 736.068520][ T52] veth0_vlan: left promiscuous mode [ 736.076249][ T5877] usb 6-1: config 0 descriptor?? [ 736.111471][T10937] usb 8-1: Using ep0 maxpacket: 8 [ 737.045201][T10937] usb 8-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 737.056979][T10937] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 737.065087][T10937] usb 8-1: Product: syz [ 737.069408][T10937] usb 8-1: Manufacturer: syz [ 737.075194][T10937] usb 8-1: SerialNumber: syz [ 737.090668][ T5877] usb 6-1: string descriptor 0 read error: -71 [ 737.095563][T10937] usb 8-1: config 0 descriptor?? [ 737.102575][ T5877] uclogic 0003:5543:006E.0007: failed retrieving string descriptor #200: -71 [ 737.107742][T10937] usbtest 8-1:0.0: FX2 device [ 737.116494][ T5877] uclogic 0003:5543:006E.0007: failed retrieving pen parameters: -71 [ 737.125202][ T5877] uclogic 0003:5543:006E.0007: failed probing pen v2 parameters: -71 [ 737.126059][T10937] usbtest 8-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 737.133730][ T5877] uclogic 0003:5543:006E.0007: failed probing parameters: -71 [ 737.157367][ T5877] uclogic 0003:5543:006E.0007: probe with driver uclogic failed with error -71 [ 737.206565][ T5877] usb 6-1: USB disconnect, device number 22 [ 737.316344][T10216] usb 8-1: USB disconnect, device number 6 [ 737.372354][ T52] team0 (unregistering): Port device team_slave_1 removed [ 737.418700][ T52] team0 (unregistering): Port device team_slave_0 removed [ 737.791235][T11761] fuse: Bad value for 'fd' [ 738.115345][T11764] input: syz0 as /devices/virtual/input/input101 [ 738.928598][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.955946][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.375182][T10216] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 739.445921][T11784] FAULT_INJECTION: forcing a failure. [ 739.445921][T11784] name failslab, interval 1, probability 0, space 0, times 0 [ 739.465086][T11784] CPU: 1 UID: 0 PID: 11784 Comm: syz.5.1353 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 739.475911][T11784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 739.478982][T11783] netlink: 300 bytes leftover after parsing attributes in process `syz.7.1354'. [ 739.485980][T11784] Call Trace: [ 739.486017][T11784] [ 739.486028][T11784] dump_stack_lvl+0x241/0x360 [ 739.506030][T11784] ? __pfx_dump_stack_lvl+0x10/0x10 [ 739.511279][T11784] ? __pfx__printk+0x10/0x10 [ 739.515925][T11784] ? kmem_cache_alloc_noprof+0x48/0x380 [ 739.521531][T11784] ? __pfx___might_resched+0x10/0x10 [ 739.526853][T11784] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 739.527793][T10216] usb 4-1: Using ep0 maxpacket: 16 [ 739.532841][T11784] should_fail_ex+0x3b0/0x4e0 [ 739.532885][T11784] should_failslab+0xac/0x100 [ 739.532920][T11784] ? skb_clone+0x20c/0x390 [ 739.532946][T11784] kmem_cache_alloc_noprof+0x70/0x380 [ 739.532987][T11784] skb_clone+0x20c/0x390 [ 739.533018][T11784] nfnetlink_rcv+0x575/0x2ab0 [ 739.533051][T11784] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 739.533096][T11784] ? __dev_queue_xmit+0x1775/0x3f50 [ 739.533121][T11784] ? kasan_save_track+0x51/0x80 [ 739.533156][T11784] ? sock_sendmsg+0x134/0x200 [ 739.533188][T11784] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 739.533236][T11784] ? ref_tracker_free+0x643/0x7e0 [ 739.533260][T11784] ? __asan_memcpy+0x40/0x70 [ 739.533286][T11784] ? __pfx_ref_tracker_free+0x10/0x10 [ 739.533334][T11784] ? netlink_deliver_tap+0x2e/0x1b0 [ 739.533357][T11784] ? skb_clone+0x240/0x390 [ 739.533384][T11784] ? __pfx_lock_release+0x10/0x10 [ 739.533411][T11784] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 739.533447][T11784] ? netlink_deliver_tap+0x2e/0x1b0 [ 739.533473][T11784] netlink_unicast+0x7f6/0x990 [ 739.533515][T11784] ? __pfx_netlink_unicast+0x10/0x10 [ 739.543390][T10216] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 739.548050][T11784] ? __virt_addr_valid+0x45f/0x530 [ 739.548086][T11784] ? __phys_addr_symbol+0x2f/0x70 [ 739.548112][T11784] ? __check_object_size+0x47a/0x730 [ 739.548153][T11784] netlink_sendmsg+0x8e4/0xcb0 [ 739.548191][T11784] ? __pfx_netlink_sendmsg+0x10/0x10 [ 739.553571][T10216] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.557956][T11784] ? __pfx_netlink_sendmsg+0x10/0x10 [ 739.557986][T11784] __sock_sendmsg+0x221/0x270 [ 739.558024][T11784] sock_sendmsg+0x134/0x200 [ 739.558061][T11784] ? __pfx_sock_sendmsg+0x10/0x10 [ 739.562395][T10216] usb 4-1: Product: syz [ 739.566982][T11784] ? iov_iter_bvec+0x4e/0x180 [ 739.567020][T11784] splice_to_socket+0xa10/0x10b0 [ 739.567077][T11784] ? __pfx_splice_to_socket+0x10/0x10 [ 739.573512][T10216] usb 4-1: Manufacturer: syz [ 739.577981][T11784] ? __lock_acquire+0x1397/0x2100 [ 739.578031][T11784] ? bpf_lsm_file_permission+0x9/0x10 [ 739.584262][T10216] usb 4-1: SerialNumber: syz [ 739.587559][T11784] ? security_file_permission+0x74/0x280 [ 739.587594][T11784] ? rw_verify_area+0x1c3/0x6f0 [ 739.754615][T11784] ? __pfx_splice_to_socket+0x10/0x10 [ 739.760050][T11784] do_splice+0xd68/0x18e0 [ 739.764411][T11784] ? __pfx_lock_release+0x10/0x10 [ 739.769463][T11784] ? vfs_write+0x730/0xd30 [ 739.773901][T11784] ? __mutex_unlock_slowpath+0x21e/0x790 [ 739.779558][T11784] ? pipe_clear_nowait+0x196/0x220 [ 739.784690][T11784] ? __pfx_do_splice+0x10/0x10 [ 739.789469][T11784] ? __fget_files+0x2a/0x410 [ 739.794096][T11784] __se_sys_splice+0x2e0/0x450 [ 739.798906][T11784] ? __pfx___se_sys_splice+0x10/0x10 [ 739.804227][T11784] ? do_syscall_64+0x100/0x230 [ 739.809020][T11784] ? __x64_sys_splice+0x21/0xf0 [ 739.813904][T11784] do_syscall_64+0xf3/0x230 [ 739.818443][T11784] ? clear_bhb_loop+0x35/0x90 [ 739.823149][T11784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.829083][T11784] RIP: 0033:0x7fd650985d19 [ 739.833514][T11784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 739.853148][T11784] RSP: 002b:00007fd64e7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 739.861588][T11784] RAX: ffffffffffffffda RBX: 00007fd650b76080 RCX: 00007fd650985d19 [ 739.869575][T11784] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 739.877557][T11784] RBP: 00007fd64e7f6090 R08: 0000000000007fff R09: 0000000000000000 [ 739.885557][T11784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 739.893538][T11784] R13: 0000000000000001 R14: 00007fd650b76080 R15: 00007fff491b7728 [ 739.901533][T11784] [ 740.033378][T10216] r8152-cfgselector 4-1: Unknown version 0x0000 [ 740.040242][T10216] r8152-cfgselector 4-1: config 0 descriptor?? [ 740.258005][ T5877] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 740.687822][ T5877] usb 8-1: device descriptor read/64, error -71 [ 740.720604][T10216] r8152-cfgselector 4-1: Unknown version 0x0000 [ 740.727891][T10216] r8152-cfgselector 4-1: bad CDC descriptors [ 740.928534][ T5877] usb 8-1: new low-speed USB device number 8 using dummy_hcd [ 741.077882][ T5877] usb 8-1: device descriptor read/64, error -71 [ 741.228420][ T5877] usb usb8-port1: attempt power cycle [ 741.388249][T10937] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 741.577788][T10937] usb 9-1: Using ep0 maxpacket: 16 [ 741.597125][T10937] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 741.634283][T10937] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 741.692519][T10937] usb 9-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00 [ 741.707926][ T5877] usb 8-1: new low-speed USB device number 9 using dummy_hcd [ 741.736752][T10937] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.757973][ T5877] usb 8-1: device descriptor read/8, error -71 [ 741.793351][T10937] usb 9-1: config 0 descriptor?? [ 742.107714][ T5877] usb 8-1: new low-speed USB device number 10 using dummy_hcd [ 742.281923][ T5877] usb 8-1: device descriptor read/8, error -71 [ 742.399476][ T5877] usb usb8-port1: unable to enumerate USB device [ 743.044006][T10937] usb 9-1: string descriptor 0 read error: -71 [ 743.073307][T10937] uclogic 0003:5543:006E.0008: failed retrieving string descriptor #200: -71 [ 743.082391][T10937] uclogic 0003:5543:006E.0008: failed retrieving pen parameters: -71 [ 743.090704][T10937] uclogic 0003:5543:006E.0008: failed probing pen v2 parameters: -71 [ 743.098941][T10937] uclogic 0003:5543:006E.0008: failed probing parameters: -71 [ 743.106579][T10937] uclogic 0003:5543:006E.0008: probe with driver uclogic failed with error -71 [ 743.136791][T10937] usb 9-1: USB disconnect, device number 2 [ 743.278499][T11836] fuse: Bad value for 'fd' [ 743.721527][T11838] input: syz0 as /devices/virtual/input/input102 [ 744.158108][T11842] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1363'. [ 744.177745][ T25] r8152-cfgselector 4-1: USB disconnect, device number 39 [ 744.329508][T11844] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1365'. [ 744.368144][T11844] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1365'. [ 744.678492][T11859] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1379'. [ 744.717853][T11859] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1379'. [ 747.267791][T10216] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 747.419465][T10216] usb 2-1: Using ep0 maxpacket: 16 [ 747.434914][T10216] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 747.446951][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.453506][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.474818][T10216] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 747.581770][T10216] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 747.590952][T10216] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.599158][T10216] usb 2-1: Product: syz [ 747.603362][T10216] usb 2-1: Manufacturer: syz [ 747.608115][T10216] usb 2-1: SerialNumber: syz [ 747.625359][T10216] usb 2-1: config 0 descriptor?? [ 747.643927][T10216] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 747.661087][T10216] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 748.829625][T10216] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 748.880560][T11891] binfmt_misc: register: failed to install interpreter file ./file0 [ 748.898212][T11891] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 749.308035][ T25] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 749.802457][T11927] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 749.888345][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 749.909653][T10216] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 749.921367][T10216] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 749.959297][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 749.970368][T10216] em28xx 2-1:0.0: No AC97 audio processor [ 749.971477][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 749.994165][ T25] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00 [ 750.003558][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.015414][ T25] usb 6-1: config 0 descriptor?? [ 750.555936][ T5875] usb 2-1: USB disconnect, device number 21 [ 750.562968][ T5875] em28xx 2-1:0.0: Disconnecting em28xx [ 750.877302][ T5875] em28xx 2-1:0.0: Freeing device [ 750.937952][ T51] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 751.097734][ T25] usb 6-1: string descriptor 0 read error: -71 [ 751.106277][ T25] uclogic 0003:5543:006E.0009: failed retrieving string descriptor #200: -71 [ 751.130947][ T25] uclogic 0003:5543:006E.0009: failed retrieving pen parameters: -71 [ 751.187572][ T51] usb 4-1: Using ep0 maxpacket: 16 [ 751.231864][ T51] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 751.255847][ T51] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.272291][ T25] uclogic 0003:5543:006E.0009: failed probing pen v2 parameters: -71 [ 751.274585][T11937] fuse: Bad value for 'fd' [ 751.288198][T11941] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1378'. [ 751.298556][ T51] usb 4-1: Product: syz [ 751.310209][ T25] uclogic 0003:5543:006E.0009: failed probing parameters: -71 [ 751.318239][ T51] usb 4-1: Manufacturer: syz [ 751.322875][ T51] usb 4-1: SerialNumber: syz [ 751.344949][ T25] uclogic 0003:5543:006E.0009: probe with driver uclogic failed with error -71 [ 751.396796][ T51] r8152-cfgselector 4-1: Unknown version 0x0000 [ 751.416666][ T51] r8152-cfgselector 4-1: config 0 descriptor?? [ 751.486783][T11942] input: syz0 as /devices/virtual/input/input103 [ 751.506024][ T25] usb 6-1: USB disconnect, device number 23 [ 752.407868][ T51] r8152-cfgselector 4-1: Unknown version 0x0000 [ 752.432363][ T51] r8152-cfgselector 4-1: bad CDC descriptors [ 753.824670][T11970] input: syz0 as /devices/virtual/input/input104 [ 755.778021][ T25] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 756.167959][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 756.174864][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 756.186443][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 756.203779][ T25] usb 2-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00 [ 756.283715][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.349240][ T25] usb 2-1: config 0 descriptor?? [ 757.300666][ T29] audit: type=1804 audit(1734075410.640:12): pid=12007 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.1386" name="/newroot/299/bus/bus" dev="overlay" ino=1639 res=1 errno=0 [ 758.740852][ T25] usbhid 2-1:0.0: can't add hid device: -71 [ 758.746916][ T25] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 758.758169][ T25] usb 2-1: USB disconnect, device number 22 [ 759.121039][T12021] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1393'. [ 759.168550][ T51] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 759.176293][ T5875] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 759.267093][ T25] r8152-cfgselector 4-1: USB disconnect, device number 40 [ 759.341044][T12027] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1396'. [ 759.388606][ T51] usb 6-1: Using ep0 maxpacket: 16 [ 759.585713][ T5875] usb 9-1: config 0 has no interfaces? [ 759.648313][ T51] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 759.660346][ T51] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 759.670858][ T51] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00 [ 759.681039][ T51] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.685408][T12032] input: syz0 as /devices/virtual/input/input105 [ 759.747371][ T51] usb 6-1: config 0 descriptor?? [ 759.827193][ T5875] usb 9-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 759.898530][ T5875] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.906727][ T5875] usb 9-1: Product: syz [ 759.943724][ T5875] usb 9-1: Manufacturer: syz [ 759.961069][ T5875] usb 9-1: SerialNumber: syz [ 760.012288][ T5875] usb 9-1: config 0 descriptor?? [ 760.305574][ T5874] usb 9-1: USB disconnect, device number 3 [ 760.792690][ T29] audit: type=1804 audit(1734075414.130:13): pid=12038 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.5.1391" name="/newroot/249/bus/bus" dev="overlay" ino=1368 res=1 errno=0 [ 760.851639][ T51] usbhid 6-1:0.0: can't add hid device: -71 [ 760.857753][ T51] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 760.867982][ T51] usb 6-1: USB disconnect, device number 24 [ 761.065187][T12041] input: syz0 as /devices/virtual/input/input106 [ 762.819743][T12058] 9pnet_fd: Insufficient options for proto=fd [ 765.058075][ T5875] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 765.269492][T12090] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1407'. [ 765.317848][ T5875] usb 4-1: too many configurations: 75, using maximum allowed: 8 [ 765.373100][ T5875] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 765.387792][ T5875] usb 4-1: can't read configurations, error -61 [ 767.035884][ T5875] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 768.238727][ T5875] usb 4-1: too many configurations: 75, using maximum allowed: 8 [ 768.249045][ T5875] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 768.256683][ T5875] usb 4-1: can't read configurations, error -61 [ 768.265586][ T5875] usb usb4-port1: attempt power cycle [ 768.415908][T12113] fuse: Bad value for 'fd' [ 768.838156][T12118] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1412'. [ 769.273605][T12126] input: syz0 as /devices/virtual/input/input107 [ 769.697815][ T5875] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 770.130071][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 770.141050][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 770.152691][ T5875] usb 4-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 770.180047][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.245129][ T5875] usb 4-1: config 0 descriptor?? [ 770.687955][T12122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 770.696788][T12122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 773.171288][ T5875] usbhid 4-1:0.0: can't add hid device: -71 [ 773.225199][T12159] netlink: 830 bytes leftover after parsing attributes in process `syz.7.1420'. [ 773.317841][ T5875] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 773.420034][ T5875] usb 4-1: USB disconnect, device number 43 [ 773.697595][T12173] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 773.746156][T12173] FAULT_INJECTION: forcing a failure. [ 773.746156][T12173] name failslab, interval 1, probability 0, space 0, times 0 [ 773.760741][T12173] CPU: 1 UID: 0 PID: 12173 Comm: syz.7.1423 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 773.771560][T12173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 773.781649][T12173] Call Trace: [ 773.784969][T12173] [ 773.787924][T12173] dump_stack_lvl+0x241/0x360 [ 773.792643][T12173] ? __pfx_dump_stack_lvl+0x10/0x10 [ 773.797872][T12173] ? __pfx__printk+0x10/0x10 [ 773.802488][T12173] ? __kmalloc_noprof+0xb5/0x4c0 [ 773.807436][T12173] ? __pfx___might_resched+0x10/0x10 [ 773.812743][T12173] ? rcu_is_watching+0x15/0xb0 [ 773.817530][T12173] should_fail_ex+0x3b0/0x4e0 [ 773.822249][T12173] should_failslab+0xac/0x100 [ 773.826963][T12173] __kmalloc_noprof+0xdd/0x4c0 [ 773.831748][T12173] ? _iommufd_object_alloc+0x24/0x1a0 [ 773.837151][T12173] _iommufd_object_alloc+0x24/0x1a0 [ 773.842376][T12173] iommufd_hwpt_paging_alloc+0x151/0x910 [ 773.848036][T12173] ? __pfx_iommufd_get_object+0x10/0x10 [ 773.853615][T12173] iommufd_hwpt_alloc+0x56d/0xbd0 [ 773.858662][T12173] ? __pfx_iommufd_hwpt_alloc+0x10/0x10 [ 773.864226][T12173] ? __might_fault+0xc6/0x120 [ 773.868929][T12173] iommufd_fops_ioctl+0x4d6/0x5a0 [ 773.873991][T12173] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 773.879550][T12173] ? irqentry_exit+0x63/0x90 [ 773.884155][T12173] ? lockdep_hardirqs_on+0x99/0x150 [ 773.889373][T12173] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 773.894930][T12173] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 773.900483][T12173] ? do_vfs_ioctl+0x152/0x2e40 [ 773.905260][T12173] ? __se_sys_ioctl+0x8e/0x170 [ 773.910038][T12173] ? __se_sys_ioctl+0xe6/0x170 [ 773.914818][T12173] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 773.920382][T12173] __se_sys_ioctl+0xf5/0x170 [ 773.924987][T12173] do_syscall_64+0xf3/0x230 [ 773.929513][T12173] ? clear_bhb_loop+0x35/0x90 [ 773.934234][T12173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.940148][T12173] RIP: 0033:0x7fc518185d19 [ 773.944572][T12173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 773.964364][T12173] RSP: 002b:00007fc51901b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 773.972792][T12173] RAX: ffffffffffffffda RBX: 00007fc518376080 RCX: 00007fc518185d19 [ 773.980858][T12173] RDX: 00000000200001c0 RSI: 0000000000003b89 RDI: 0000000000000009 [ 773.988836][T12173] RBP: 00007fc51901b090 R08: 0000000000000000 R09: 0000000000000000 [ 773.996828][T12173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 774.004803][T12173] R13: 0000000000000000 R14: 00007fc518376080 R15: 00007ffca70c3218 [ 774.012794][T12173] [ 774.237782][ T51] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 774.440346][ T5875] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 774.451276][ T51] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 774.464460][ T51] usb 9-1: config 0 interface 0 has no altsetting 0 [ 774.476355][ T51] usb 9-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 774.485723][ T51] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.495174][ T51] usb 9-1: Product: syz [ 774.499472][ T51] usb 9-1: Manufacturer: syz [ 774.504097][ T51] usb 9-1: SerialNumber: syz [ 774.549335][ T51] usb 9-1: config 0 descriptor?? [ 774.641867][ T51] streamzap 9-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 774.682557][ T5875] usb 4-1: config 0 has no interfaces? [ 774.690871][ T5875] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 774.702381][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.719077][ T5875] usb 4-1: Product: syz [ 774.723524][ T5875] usb 4-1: Manufacturer: syz [ 774.728990][ T5875] usb 4-1: SerialNumber: syz [ 774.736705][ T5875] usb 4-1: config 0 descriptor?? [ 774.844595][ T5875] usb 9-1: USB disconnect, device number 4 [ 774.867767][ T1212] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 775.027837][ T1212] usb 6-1: Using ep0 maxpacket: 32 [ 775.034821][ T5877] usb 4-1: USB disconnect, device number 44 [ 775.052159][ T1212] usb 6-1: config 0 has an invalid interface number: 126 but max is 0 [ 775.080998][ T1212] usb 6-1: config 0 has no interface number 0 [ 775.101293][ T1212] usb 6-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 775.142684][ T1212] usb 6-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 775.171043][ T1212] usb 6-1: config 0 interface 126 has no altsetting 0 [ 775.255680][ T1212] usb 6-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 775.362320][ T1212] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.433809][ T1212] usb 6-1: Product: syz [ 775.495661][ T1212] usb 6-1: Manufacturer: syz [ 775.513262][ T1212] usb 6-1: SerialNumber: syz [ 775.524418][ T1212] usb 6-1: config 0 descriptor?? [ 775.530688][T12184] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 775.553410][T12184] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 775.583849][T12204] input: syz0 as /devices/virtual/input/input108 [ 776.272738][ T1212] ir_usb 6-1:0.126: IR Dongle converter detected [ 776.366771][ T1212] usb 6-1: IRDA class descriptor not found, device not bound [ 777.126877][ T1212] usb 6-1: USB disconnect, device number 25 [ 778.878829][T12224] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1436'. [ 779.457770][T10216] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 780.027231][T10216] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 780.256306][T10216] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 780.459177][T12258] bpf: Bad value for 'gid' [ 781.282173][T10216] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 781.294850][T10216] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 781.304008][T10216] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.312864][T10216] usb 2-1: Product: syz [ 781.317070][T10216] usb 2-1: Manufacturer: syz [ 781.323350][T10216] usb 2-1: SerialNumber: syz [ 781.535996][ T1212] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 781.669212][T12262] netlink: 'syz.3.1444': attribute type 1 has an invalid length. [ 781.758103][ T1212] usb 9-1: Using ep0 maxpacket: 16 [ 781.773124][ T1212] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 781.782768][ T1212] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.817652][ T1212] usb 9-1: Product: syz [ 781.842763][ T1212] usb 9-1: Manufacturer: syz [ 781.853405][T12262] bond5: entered allmulticast mode [ 781.867210][ T1212] usb 9-1: SerialNumber: syz [ 781.882905][T12262] 8021q: adding VLAN 0 to HW filter on device bond5 [ 781.895449][ T1212] r8152-cfgselector 9-1: Unknown version 0x0000 [ 781.934434][ T1212] r8152-cfgselector 9-1: config 0 descriptor?? [ 781.951474][T12262] bond4: (slave bond5): making interface the new active one [ 781.977303][T12262] bond4: (slave bond5): Enslaving as an active interface with an up link [ 782.120881][ T5874] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 782.130810][T10216] usb 2-1: config 0 descriptor?? [ 782.140101][T10216] streamzap 2-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 782.318588][ T5875] usb 2-1: USB disconnect, device number 23 [ 782.375441][ T5874] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 782.415388][ T5874] usb 8-1: config 0 interface 0 has no altsetting 0 [ 782.574855][ T5874] usb 8-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 782.657814][ T5874] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.769201][ T5874] usb 8-1: config 0 descriptor?? [ 783.033579][ T5874] usb 8-1: can't set config #0, error -71 [ 783.056102][ T5874] usb 8-1: USB disconnect, device number 11 [ 785.307408][T12295] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 787.131189][ T1212] r8152-cfgselector 9-1: Unknown version 0x0000 [ 787.138320][ T1212] r8152-cfgselector 9-1: bad CDC descriptors [ 787.169675][ T1212] r8152-cfgselector 9-1: USB disconnect, device number 5 [ 787.228022][ T5876] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 787.838158][ T5876] usb 4-1: Using ep0 maxpacket: 32 [ 788.166802][ T5876] usb 4-1: config 0 has an invalid descriptor of length 68, skipping remainder of the config [ 788.207919][ T5876] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 788.297848][ T5876] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 788.337937][ T5876] usb 4-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0 [ 788.363947][ T5876] usb 4-1: Manufacturer: syz [ 788.420021][ T5876] usb 4-1: config 0 descriptor?? [ 790.435532][T12323] netlink: 'syz.7.1457': attribute type 1 has an invalid length. [ 790.483940][T10216] usb 4-1: USB disconnect, device number 45 [ 790.594926][T12323] bond2: entered allmulticast mode [ 790.623303][T12320] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1457'. [ 790.649460][T12323] 8021q: adding VLAN 0 to HW filter on device bond2 [ 790.692241][T12323] bond1: (slave bond2): making interface the new active one [ 790.711255][T12323] bond1: (slave bond2): Enslaving as an active interface with an up link [ 790.807744][ T5876] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 790.917839][T10216] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 790.982648][ T5876] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 791.015315][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 791.068634][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 791.110134][T10216] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 791.137876][T10216] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 791.168379][ T5876] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 791.198094][ T5876] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.206231][ T5876] usb 6-1: Product: syz [ 791.254367][T10216] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 791.278236][ T5876] usb 6-1: Manufacturer: syz [ 791.283017][ T5876] usb 6-1: SerialNumber: syz [ 791.307922][T10216] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.359754][ T5876] usb 6-1: config 0 descriptor?? [ 791.370307][T10216] usb 4-1: Product: syz [ 791.374648][T10216] usb 4-1: Manufacturer: syz [ 791.423853][T10216] usb 4-1: SerialNumber: syz [ 791.434602][ T5876] streamzap 6-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 791.489031][T10216] usb 4-1: config 0 descriptor?? [ 791.871484][ T5840] Bluetooth: hci5: SCO packet for unknown connection handle 1909 [ 792.080126][T10216] streamzap 4-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 792.243079][ T1212] usb 6-1: USB disconnect, device number 26 [ 792.335452][T10216] usb 4-1: USB disconnect, device number 46 [ 793.005932][T12381] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1468'. [ 793.018015][T10216] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 793.137776][ T1212] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 793.169228][T10216] usb 8-1: device descriptor read/64, error -71 [ 793.527463][T12391] overlay: Unknown parameter '/' [ 794.417843][T10216] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 794.857855][ T1212] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 794.875919][ T1212] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 794.906606][ T1212] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 794.986689][ T1212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 795.060083][ T1212] usb 2-1: SerialNumber: syz [ 795.212290][T10216] usb 8-1: device descriptor read/64, error -71 [ 795.328005][T10216] usb usb8-port1: attempt power cycle [ 795.465711][ T1212] usb 2-1: 0:2 : does not exist [ 795.477795][ T1212] usb 2-1: USB disconnect, device number 24 [ 795.663555][T12411] bpf: Bad value for 'gid' [ 796.236355][T10929] udevd[10929]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 796.389113][T12400] syz.3.1471 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 796.420897][T12400] xt_hashlimit: size too large, truncated to 1048576 [ 796.639778][T12416] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1474'. [ 797.728168][T10216] usb usb8-port1: Cannot enable. Maybe the USB cable is bad? [ 797.857847][T10216] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 797.956656][T10216] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 798.137355][T10216] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 798.461206][T10216] usb 8-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 798.472502][T10216] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.489185][T10216] usb 8-1: Product: syz [ 798.493409][T10216] usb 8-1: Manufacturer: syz [ 798.498257][T10216] usb 8-1: SerialNumber: syz [ 798.518097][T10216] usb 8-1: config 0 descriptor?? [ 798.708306][ T5877] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 798.772693][T10216] streamzap 8-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 798.799410][T10216] usb 8-1: USB disconnect, device number 15 [ 798.907727][ T5877] usb 6-1: Using ep0 maxpacket: 16 [ 798.935557][ T5877] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 798.960546][ T5877] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 798.992476][ T5877] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00 [ 799.013781][ T5877] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.248113][ T5877] usb 6-1: config 0 descriptor?? [ 799.298338][ T5876] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 799.437836][ T5876] usb 2-1: device descriptor read/64, error -71 [ 800.246729][ T5877] usb 6-1: string descriptor 0 read error: -71 [ 800.284065][ T5876] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 800.328451][ T5877] uclogic 0003:5543:006E.000A: failed retrieving string descriptor #200: -71 [ 800.337295][ T5877] uclogic 0003:5543:006E.000A: failed retrieving pen parameters: -71 [ 800.396666][ T5877] uclogic 0003:5543:006E.000A: failed probing pen v2 parameters: -71 [ 800.409430][ T5877] uclogic 0003:5543:006E.000A: failed probing parameters: -71 [ 800.431234][ T5877] uclogic 0003:5543:006E.000A: probe with driver uclogic failed with error -71 [ 800.497154][ T5877] usb 6-1: USB disconnect, device number 27 [ 800.508805][ T5876] usb 2-1: device descriptor read/64, error -71 [ 800.633970][ T5876] usb usb2-port1: attempt power cycle [ 801.378959][T12459] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 801.638467][ T5876] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 802.257272][ T5876] usb 2-1: device descriptor read/8, error -71 [ 803.539823][T12464] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 803.583850][T12464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1484'. [ 803.957058][T12479] overlay: Unknown parameter '/' [ 804.718850][T12488] FAULT_INJECTION: forcing a failure. [ 804.718850][T12488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 804.776639][T12488] CPU: 0 UID: 0 PID: 12488 Comm: syz.1.1487 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 804.787501][T12488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 804.797606][T12488] Call Trace: [ 804.800932][T12488] [ 804.803992][T12488] dump_stack_lvl+0x241/0x360 [ 804.808733][T12488] ? __pfx_dump_stack_lvl+0x10/0x10 [ 804.813981][T12488] ? __pfx__printk+0x10/0x10 [ 804.818622][T12488] ? vfs_write+0x730/0xd30 [ 804.823088][T12488] should_fail_ex+0x3b0/0x4e0 [ 804.827824][T12488] _copy_from_user+0x2f/0xc0 [ 804.832470][T12488] move_addr_to_kernel+0x82/0x150 [ 804.837552][T12488] __sys_connect+0xb6/0x2d0 [ 804.842099][T12488] ? __fget_files+0x2a/0x410 [ 804.846749][T12488] ? __pfx___sys_connect+0x10/0x10 [ 804.851923][T12488] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 804.858303][T12488] ? do_syscall_64+0x100/0x230 [ 804.863125][T12488] __x64_sys_connect+0x7a/0x90 [ 804.867940][T12488] do_syscall_64+0xf3/0x230 [ 804.872508][T12488] ? clear_bhb_loop+0x35/0x90 [ 804.877244][T12488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.883189][T12488] RIP: 0033:0x7f0c30785d19 [ 804.887647][T12488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 804.907304][T12488] RSP: 002b:00007f0c3157a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 804.915777][T12488] RAX: ffffffffffffffda RBX: 00007f0c30975fa0 RCX: 00007f0c30785d19 [ 804.923799][T12488] RDX: 000000000000001c RSI: 0000000020000200 RDI: 0000000000000003 [ 804.931815][T12488] RBP: 00007f0c3157a090 R08: 0000000000000000 R09: 0000000000000000 [ 804.939835][T12488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 804.947853][T12488] R13: 0000000000000000 R14: 00007f0c30975fa0 R15: 00007ffe8633b378 [ 804.955887][T12488] [ 805.219993][ T1212] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 805.589478][ T1212] usb 9-1: not running at top speed; connect to a high speed hub [ 805.609601][ T1212] usb 9-1: config 75 has an invalid interface number: 217 but max is 1 [ 805.627743][ T1212] usb 9-1: config 75 has an invalid interface number: 5 but max is 1 [ 805.635899][ T1212] usb 9-1: config 75 contains an unexpected descriptor of type 0x2, skipping [ 805.708321][ T1212] usb 9-1: config 75 has an invalid descriptor of length 0, skipping remainder of the config [ 805.727852][ T1212] usb 9-1: config 75 has no interface number 0 [ 805.734093][ T1212] usb 9-1: config 75 has no interface number 1 [ 805.746962][ T1212] usb 9-1: config 75 interface 217 altsetting 143 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 805.761093][ T1212] usb 9-1: too many endpoints for config 75 interface 5 altsetting 3: 73, using maximum allowed: 30 [ 805.772364][ T1212] usb 9-1: config 75 interface 5 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 73 [ 805.785899][ T1212] usb 9-1: config 75 interface 217 has no altsetting 0 [ 805.793731][ T1212] usb 9-1: config 75 interface 5 has no altsetting 0 [ 805.908015][ T5834] Bluetooth: hci0: command 0x0406 tx timeout [ 806.131126][ T1212] usb 9-1: Dual-Role OTG device on HNP port [ 806.154707][ T1212] usb 9-1: New USB device found, idVendor=0499, idProduct=1028, bcdDevice=29.ef [ 806.163966][ T1212] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.177885][ T1212] usb 9-1: Product: И [ 806.182060][ T1212] usb 9-1: Manufacturer: Љ [ 806.186596][ T1212] usb 9-1: SerialNumber: 㳧䩣骥໭萛䇘偧䢢끬Ȱ嬁枧⌰뉡Ⅲ䬀ꈽ耱ꇗ刁⣈즁涭貃☒䕄냞漸쵛渓ㆾ䟫㸻눽눜绥䟓ᇠ幡足岳끦ꭌⵝ稱㈩湠꺷諸愩얅猈繄ꔩဌ㈋ઇ嬯⿟넓퇈蕹㨎⿜ঠꤥ乡㔨由㫿 [ 806.383314][ T5840] Bluetooth: hci1: unexpected event for opcode 0x0c1b [ 806.465160][T12522] x_tables: ip_tables: tcp match: only valid for protocol 6 [ 806.599589][ T1212] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 806.624835][ T1212] snd-usb-audio 9-1:75.217: probe with driver snd-usb-audio failed with error -2 [ 806.698595][ T1212] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 806.771439][ T1212] snd-usb-audio 9-1:75.5: probe with driver snd-usb-audio failed with error -2 [ 806.814337][ T1212] usb 9-1: USB disconnect, device number 6 [ 807.155016][T10929] udevd[10929]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:75.5/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 807.179212][ T51] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 807.589357][T12536] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 807.818805][ T51] usb 8-1: Using ep0 maxpacket: 16 [ 807.874318][ T51] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 807.885975][ T51] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.903234][ T51] usb 8-1: Product: syz [ 808.057267][ T51] usb 8-1: Manufacturer: syz [ 808.104723][ T51] usb 8-1: SerialNumber: syz [ 808.165888][ T51] r8152-cfgselector 8-1: Unknown version 0x0000 [ 808.206981][ T51] r8152-cfgselector 8-1: config 0 descriptor?? [ 808.527845][ T8] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 808.567819][ T25] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 808.695550][ T8] usb 4-1: unable to get BOS descriptor or descriptor too short [ 808.714554][ T8] usb 4-1: not running at top speed; connect to a high speed hub [ 808.740604][ T25] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 808.748489][ T8] usb 4-1: config 9 has an invalid interface number: 5 but max is 0 [ 808.768209][ T25] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 808.788150][ T8] usb 4-1: config 9 has no interface number 0 [ 808.804700][ T8] usb 4-1: config 9 interface 5 altsetting 9 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 808.827282][ T8] usb 4-1: config 9 interface 5 altsetting 9 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 808.851699][ T8] usb 4-1: config 9 interface 5 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 808.873296][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.880489][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.899525][ T25] usb 9-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 808.909375][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.917453][ T25] usb 9-1: Product: syz [ 808.928422][ T8] usb 4-1: config 9 interface 5 has no altsetting 0 [ 808.940329][ T8] usb 4-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8 [ 808.950087][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.960212][ T8] usb 4-1: Product: syz [ 808.964412][ T8] usb 4-1: Manufacturer: syz [ 808.988928][ T25] usb 9-1: Manufacturer: syz [ 808.993771][ T25] usb 9-1: SerialNumber: syz [ 809.010500][ T25] usb 9-1: config 0 descriptor?? [ 809.016713][ T8] usb 4-1: SerialNumber: syz [ 809.167062][T12565] overlay: Unknown parameter '/' [ 809.828149][ T8] usb 4-1: USB disconnect, device number 47 [ 810.055124][ T25] streamzap 9-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 810.089027][ T25] usb 9-1: USB disconnect, device number 7 [ 810.402137][ T51] r8152-cfgselector 8-1: Unknown version 0x0000 [ 810.408849][ T51] r8152-cfgselector 8-1: bad CDC descriptors [ 810.449465][ T51] r8152-cfgselector 8-1: USB disconnect, device number 16 [ 812.838119][ T51] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 813.006539][T12614] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 813.129918][ T51] usb 2-1: Using ep0 maxpacket: 16 [ 813.204004][ T51] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 813.213525][ T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.231927][ T51] usb 2-1: Product: syz [ 813.236250][ T51] usb 2-1: Manufacturer: syz [ 813.248050][ T1212] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 813.257228][ T51] usb 2-1: SerialNumber: syz [ 813.278172][ T51] r8152-cfgselector 2-1: Unknown version 0x0000 [ 813.291784][ T51] r8152-cfgselector 2-1: config 0 descriptor?? [ 813.417714][ T1212] usb 4-1: Using ep0 maxpacket: 16 [ 813.425347][ T1212] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 813.441445][ T1212] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 813.477757][ T1212] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00 [ 813.486919][ T1212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.538338][ T1212] usb 4-1: config 0 descriptor?? [ 813.764490][T12634] input: syz0 as /devices/virtual/input/input109 [ 815.009143][T12632] input: syz0 as /devices/virtual/input/input110 [ 815.134878][ T1212] usb 4-1: string descriptor 0 read error: -71 [ 815.143401][ T1212] uclogic 0003:5543:006E.000B: failed retrieving string descriptor #200: -71 [ 815.153085][ T1212] uclogic 0003:5543:006E.000B: failed retrieving pen parameters: -71 [ 815.198738][ T1212] uclogic 0003:5543:006E.000B: failed probing pen v2 parameters: -71 [ 815.212269][ T1212] uclogic 0003:5543:006E.000B: failed probing parameters: -71 [ 815.221198][ T1212] uclogic 0003:5543:006E.000B: probe with driver uclogic failed with error -71 [ 815.583921][ T1212] usb 4-1: USB disconnect, device number 48 [ 815.609992][ T51] r8152-cfgselector 2-1: Unknown version 0x0000 [ 815.722268][ T51] r8152-cfgselector 2-1: bad CDC descriptors [ 815.754914][ T51] r8152-cfgselector 2-1: USB disconnect, device number 29 [ 817.590177][ T51] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 817.777857][ T51] usb 6-1: Using ep0 maxpacket: 16 [ 817.796684][ T51] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 817.841199][ T51] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.855208][ T51] usb 6-1: Product: syz [ 817.860956][T12643] tipc: Started in network mode [ 817.865940][ T51] usb 6-1: Manufacturer: syz [ 817.880491][ T51] usb 6-1: SerialNumber: syz [ 817.885424][T12643] tipc: Node identity e0000001, cluster identity 4711 [ 817.899405][ T51] r8152-cfgselector 6-1: Unknown version 0x0000 [ 817.909107][ T51] r8152-cfgselector 6-1: config 0 descriptor?? [ 817.915453][T12643] tipc: Enabling of bearer rejected, failed to enable media [ 818.999378][ T51] r8152-cfgselector 6-1: Unknown version 0x0000 [ 819.005804][ T51] r8152-cfgselector 6-1: bad CDC descriptors [ 819.096976][T12699] netlink: 1788 bytes leftover after parsing attributes in process `syz.3.1522'. [ 819.547219][T12717] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1526'. [ 924.657586][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 924.664642][ C1] rcu: 0-...!: (1 GPs behind) idle=5bdc/1/0x4000000000000000 softirq=48978/48989 fqs=1 [ 924.675594][ C1] rcu: (detected by 1, t=10502 jiffies, g=44753, q=429 ncpus=2) [ 924.683344][ C1] Sending NMI from CPU 1 to CPUs 0: [ 924.683380][ C0] NMI backtrace for cpu 0 [ 924.683393][ C0] CPU: 0 UID: 0 PID: 12710 Comm: syz.3.1525 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 924.683413][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 924.683424][ C0] RIP: 0010:__lock_acquire+0x1c0/0x2100 [ 924.683450][ C0] Code: 2f 01 00 00 85 d2 0f 84 27 01 00 00 48 8b 44 24 40 48 8d 98 e0 0a 00 00 83 fa 31 0f 83 cf 1c 00 00 48 8d 04 92 4c 8d 6c c3 f8 <4c> 89 eb 48 c1 eb 03 0f b6 04 33 84 c0 0f 85 15 17 00 00 48 83 bc [ 924.683464][ C0] RSP: 0018:ffffc90000007a10 EFLAGS: 00000087 [ 924.683480][ C0] RAX: 000000000000000a RBX: ffff88807c8d0ae0 RCX: ffffffff9a375903 [ 924.683493][ C0] RDX: 0000000000000002 RSI: dffffc0000000000 RDI: 0000000000000bd6 [ 924.683504][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 924.683514][ C0] R10: dffffc0000000000 R11: fffffbfff203072f R12: ffff88807c8d0000 [ 924.683527][ C0] R13: ffff88807c8d0b28 R14: 0000000000000bd6 R15: ffff8880245a3300 [ 924.683540][ C0] FS: 000055559284c500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 924.683554][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 924.683566][ C0] CR2: 0000000020003c80 CR3: 000000007b58a000 CR4: 00000000003526f0 [ 924.683580][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 924.683590][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 924.683601][ C0] Call Trace: [ 924.683606][ C0] [ 924.683615][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 924.683635][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 924.683654][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 924.683678][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 924.683702][ C0] ? nmi_handle+0x14f/0x5a0 [ 924.683720][ C0] ? nmi_handle+0x2a/0x5a0 [ 924.683739][ C0] ? __lock_acquire+0x1c0/0x2100 [ 924.683755][ C0] ? default_do_nmi+0x63/0x160 [ 924.683773][ C0] ? exc_nmi+0x123/0x1f0 [ 924.683789][ C0] ? end_repeat_nmi+0xf/0x53 [ 924.683818][ C0] ? __lock_acquire+0x1c0/0x2100 [ 924.683836][ C0] ? __lock_acquire+0x1c0/0x2100 [ 924.683853][ C0] ? __lock_acquire+0x1c0/0x2100 [ 924.683870][ C0] [ 924.683876][ C0] [ 924.683885][ C0] ? debug_object_deactivate+0x2d5/0x390 [ 924.683910][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 924.683935][ C0] lock_acquire+0x1ed/0x550 [ 924.683951][ C0] ? advance_sched+0xab/0xca0 [ 924.683973][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 924.683995][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 924.684017][ C0] ? __hrtimer_run_queues+0x477/0xd30 [ 924.684039][ C0] ? __pfx_lock_release+0x10/0x10 [ 924.684058][ C0] ? __pfx_advance_sched+0x10/0x10 [ 924.684076][ C0] _raw_spin_lock+0x2e/0x40 [ 924.684094][ C0] ? advance_sched+0xab/0xca0 [ 924.684111][ C0] advance_sched+0xab/0xca0 [ 924.684129][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 924.684150][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 924.684173][ C0] ? __pfx_advance_sched+0x10/0x10 [ 924.684192][ C0] __hrtimer_run_queues+0x59b/0xd30 [ 924.684219][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 924.684241][ C0] ? sched_clock+0x4a/0x70 [ 924.684264][ C0] ? read_tsc+0x9/0x20 [ 924.684285][ C0] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 924.684306][ C0] hrtimer_interrupt+0x403/0xa40 [ 924.684335][ C0] __sysvec_apic_timer_interrupt+0x110/0x420 [ 924.684372][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 924.684408][ C0] [ 924.684413][ C0] [ 924.684419][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 924.684461][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x37/0x70 [ 924.684480][ C0] Code: 80 d4 03 00 65 8b 15 80 76 64 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 1c 16 00 00 00 74 2c 8b 91 f8 15 00 00 <83> fa 02 75 21 48 8b 91 00 16 00 00 48 8b 32 48 8d 7e 01 8b 89 fc [ 924.684494][ C0] RSP: 0018:ffffc9000c36f578 EFLAGS: 00000246 [ 924.684509][ C0] RAX: ffffffff81e94070 RBX: 0000000000000000 RCX: ffff88807c8d0000 [ 924.684522][ C0] RDX: 0000000000000000 RSI: ffffffff8c5ec3e0 RDI: ffffffff8c5ec3a0 [ 924.684535][ C0] RBP: ffffc9000c36f658 R08: ffffffff81e9405d R09: 1ffff11004f87e3c [ 924.684549][ C0] R10: dffffc0000000000 R11: ffffed1004f87e3d R12: 1ffff9200186deb8 [ 924.684562][ C0] R13: dffffc0000000000 R14: 0000000000000001 R15: 00007f58f1cbf000 [ 924.684577][ C0] ? vm_insert_page+0x4fd/0x710 [ 924.684604][ C0] ? vm_insert_page+0x510/0x710 [ 924.684633][ C0] vm_insert_page+0x510/0x710 [ 924.684659][ C0] ? vmalloc_to_page+0x1cf/0x4a0 [ 924.684678][ C0] ? __pfx_vm_insert_page+0x10/0x10 [ 924.684709][ C0] kcov_mmap+0xd7/0x140 [ 924.684739][ C0] __mmap_region+0x2204/0x2cd0 [ 924.684766][ C0] ? __pfx___mmap_region+0x10/0x10 [ 924.684798][ C0] ? __pfx_validate_chain+0x10/0x10 [ 924.684825][ C0] ? arch_get_unmapped_area_topdown+0x28e/0xc50 [ 924.684847][ C0] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 924.684870][ C0] ? cap_mmap_addr+0x163/0x2c0 [ 924.684889][ C0] mmap_region+0x226/0x2c0 [ 924.684910][ C0] do_mmap+0x8f0/0x1000 [ 924.684931][ C0] ? __pfx_do_mmap+0x10/0x10 [ 924.684948][ C0] ? __pfx_down_write_killable+0x10/0x10 [ 924.684974][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 924.684999][ C0] vm_mmap_pgoff+0x1dd/0x3d0 [ 924.685022][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 924.685043][ C0] ? __fget_files+0x2a/0x410 [ 924.685059][ C0] ? __fget_files+0x395/0x410 [ 924.685074][ C0] ? __fget_files+0x2a/0x410 [ 924.685091][ C0] ksys_mmap_pgoff+0x4eb/0x720 [ 924.685109][ C0] ? __x64_sys_mmap+0x7f/0x140 [ 924.685127][ C0] do_syscall_64+0xf3/0x230 [ 924.685151][ C0] ? clear_bhb_loop+0x35/0x90 [ 924.685175][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.685198][ C0] RIP: 0033:0x7f58f3f85d53 [ 924.685213][ C0] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 924.685228][ C0] RSP: 002b:00007ffda06c17c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 924.685244][ C0] RAX: ffffffffffffffda RBX: 00007f58f41762d8 RCX: 00007f58f3f85d53 [ 924.685256][ C0] RDX: 0000000000000003 RSI: 0000000000400000 RDI: 00007f58f19d5000 [ 924.685267][ C0] RBP: 00007f58f4176240 R08: 00000000000000db R09: 0000000000000000 [ 924.685278][ C0] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000003 [ 924.685288][ C0] R13: 00007f58f4176240 R14: 0000000000000003 R15: 00000000000008f3 [ 924.685305][ C0] [ 924.685375][ C1] rcu: rcu_preempt kthread starved for 10495 jiffies! g44753 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 925.324492][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 925.334516][ C1] rcu: RCU grace-period kthread stack dump: [ 925.340437][ C1] task:rcu_preempt state:R running task stack:26072 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 925.352255][ C1] Call Trace: [ 925.355553][ C1] [ 925.358510][ C1] __schedule+0x17fb/0x4be0 [ 925.363074][ C1] ? __pfx___schedule+0x10/0x10 [ 925.367959][ C1] ? __pfx_lock_release+0x10/0x10 [ 925.373023][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 925.379384][ C1] ? schedule+0x90/0x320 [ 925.383655][ C1] schedule+0x14b/0x320 [ 925.387843][ C1] schedule_timeout+0x15a/0x290 [ 925.392719][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 925.398131][ C1] ? __pfx_process_timeout+0x10/0x10 [ 925.403473][ C1] ? prepare_to_swait_event+0x330/0x350 [ 925.409058][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 925.413937][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 925.419188][ C1] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 925.425121][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 925.430461][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 925.436478][ C1] ? finish_swait+0xd4/0x1e0 [ 925.441094][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 925.445804][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 925.451032][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 925.456957][ C1] ? __kthread_parkme+0x169/0x1d0 [ 925.462021][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 925.467290][ C1] kthread+0x2f0/0x390 [ 925.471388][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 925.476613][ C1] ? __pfx_kthread+0x10/0x10 [ 925.481237][ C1] ret_from_fork+0x4b/0x80 [ 925.485681][ C1] ? __pfx_kthread+0x10/0x10 [ 925.490436][ C1] ret_from_fork_asm+0x1a/0x30 [ 925.495247][ C1] [ 925.498286][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 925.504621][ C1] CPU: 1 UID: 0 PID: 1107 Comm: kworker/u8:6 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 925.515488][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 925.525561][ C1] Workqueue: events_unbound toggle_allocation_gate [ 925.532103][ C1] RIP: 0010:smp_call_function_many_cond+0x19f3/0x2c60 [ 925.538914][ C1] Code: 45 8b 65 00 44 89 e6 83 e6 01 31 ff e8 56 e9 0b 00 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 01 e5 0b 00 eb 38 f3 90 <42> 0f b6 04 23 84 c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 e5 e4 [ 925.558542][ C1] RSP: 0018:ffffc90003f6f6e0 EFLAGS: 00000293 [ 925.564637][ C1] RAX: ffffffff8193790b RBX: 1ffff110170c8c65 RCX: ffff888027188000 [ 925.572634][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 925.580632][ C1] RBP: ffffc90003f6f8e0 R08: ffffffff819378da R09: 1ffffffff284dd10 [ 925.588626][ C1] R10: dffffc0000000000 R11: fffffbfff284dd11 R12: dffffc0000000000 [ 925.596619][ C1] R13: ffff8880b8646328 R14: ffff8880b873f940 R15: 0000000000000000 [ 925.604610][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 925.613574][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 925.620184][ C1] CR2: 00007f0c309626e0 CR3: 000000000e736000 CR4: 00000000003526f0 [ 925.628181][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 925.636173][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 925.644169][ C1] Call Trace: [ 925.647462][ C1] [ 925.650321][ C1] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 925.656690][ C1] ? print_other_cpu_stall+0x1481/0x15c0 [ 925.662359][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 925.668198][ C1] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 925.674473][ C1] ? rcu_sched_clock_irq+0xa26/0x10e0 [ 925.679877][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 925.685557][ C1] ? update_process_times+0x242/0x2f0 [ 925.690944][ C1] ? tick_nohz_handler+0x37c/0x500 [ 925.696095][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 925.701586][ C1] ? __hrtimer_run_queues+0x551/0xd30 [ 925.707016][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 925.712765][ C1] ? sched_clock+0x4a/0x70 [ 925.717209][ C1] ? read_tsc+0x9/0x20 [ 925.721302][ C1] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 925.727404][ C1] ? hrtimer_interrupt+0x403/0xa40 [ 925.732584][ C1] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 925.738773][ C1] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 925.744609][ C1] [ 925.747556][ C1] [ 925.750501][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 925.756691][ C1] ? smp_call_function_many_cond+0x19da/0x2c60 [ 925.762874][ C1] ? smp_call_function_many_cond+0x1a0b/0x2c60 [ 925.769061][ C1] ? smp_call_function_many_cond+0x19f3/0x2c60 [ 925.775258][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 925.780331][ C1] ? __pfx___text_poke+0x10/0x10 [ 925.785293][ C1] ? process_scheduled_works+0x976/0x1840 [ 925.791048][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 925.797401][ C1] ? __pfx___might_resched+0x10/0x10 [ 925.802718][ C1] ? __pfx___mutex_trylock_common+0x10/0x10 [ 925.808635][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 925.813686][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 925.818845][ C1] text_poke_bp_batch+0x352/0xb30 [ 925.823901][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 925.829914][ C1] ? arch_jump_label_transform_apply+0x17/0x30 [ 925.836100][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 925.841682][ C1] ? arch_jump_label_transform_queue+0x9b/0x100 [ 925.847969][ C1] ? process_scheduled_works+0x976/0x1840 [ 925.853722][ C1] text_poke_finish+0x30/0x50 [ 925.858434][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 925.864452][ C1] static_key_enable_cpuslocked+0x136/0x260 [ 925.870406][ C1] static_key_enable+0x1a/0x20 [ 925.875206][ C1] toggle_allocation_gate+0xbc/0x260 [ 925.880523][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 925.886446][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 925.892811][ C1] process_scheduled_works+0xa66/0x1840 [ 925.898416][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 925.904439][ C1] ? assign_work+0x364/0x3d0 [ 925.909065][ C1] worker_thread+0x870/0xd30 [ 925.913681][ C1] ? __kthread_parkme+0x169/0x1d0 [ 925.918727][ C1] ? __pfx_worker_thread+0x10/0x10 [ 925.923887][ C1] kthread+0x2f0/0x390 [ 925.927991][ C1] ? __pfx_worker_thread+0x10/0x10 [ 925.933131][ C1] ? __pfx_kthread+0x10/0x10 [ 925.937746][ C1] ret_from_fork+0x4b/0x80 [ 925.942179][ C1] ? __pfx_kthread+0x10/0x10 [ 925.946792][ C1] ret_from_fork_asm+0x1a/0x30 [ 925.951593][ C1]