last executing test programs: 6m8.570882881s ago: executing program 1 (id=1244): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000ff6000/0x3000)=nil}) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x40000000) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000240)={0x1, 0x0, [{0x6000, 0x3e, &(0x7f0000000300)=""/62}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000500)=0x1) (async) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af04, &(0x7f0000000200)) (async, rerun: 32) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000000)=0xc000000) (rerun: 32) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x840}, 0xc, &(0x7f0000000100)={&(0x7f0000001680)=ANY=[@ANYBLOB="3800000004060104000000000000b99d02e7fae0ca43cc67fb797a32000000000900020073797a32000000000900020073957a31000000006cb3f626034dfcd34b3fdc04e96431d26fa135f042eba2b21d8269d772a1fa90018a06f07c236794a013f66d6880e4693216f945cf8b44df54d252f73d13a5061a9267cd4660a2"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40010) (async) r4 = io_uring_setup(0x6280, &(0x7f0000000080)={0x0, 0x10000000, 0x0, 0x0, 0x1d2}) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r5, &(0x7f0000000300)=[{{&(0x7f0000000180)={0xa, 0x4e20, 0x7f, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f00000047c0)=[{&(0x7f0000000200)="07aad2ad60e38e3b46c5853ed0e7ce78234924bcbaf664f8af0e5af74d6084089eef56aa88", 0x25}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000000240)="634594dd5d19e0f46ef941cea3342f221f3ab319d49dc5001f809edee09cc7761e6b852691e59fe7e90743d86bb176be791428f42beac54c7c1e7eaf1be86f68be5ba6a50338f8f18ab3b772374e", 0x4e}, {&(0x7f0000000380)="b3b977ad9e2fddcbce3025f38ed3a4a7c54f43987bd6ce4e1e74612b789c1acd22965d38f1748e69342f31ce968a37c45a2d0e173c35e21f0f350741268612cdfb67082c1362282b9925fc37edd9df93ffda412654722c225bb929b021dfb7ed48e1619231faaae73972603c3133af233e1a95b1e9", 0x75}, {&(0x7f0000002700)="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", 0x1000}, {&(0x7f0000001440)="33cee24171f60e019bc70b8f73aaa39fb730e511cb6e307d7dfce7ba1a3202ef5bdb31f9ea9d563f0ee1957a708d9b34fe6182eba0d7ff20f5e2caeb47660668b89e8ec92c945748d665c8a5f5cfd8144a60bfe134d28cb710f6b1e603c696ff0f5b3dd99b2f5a6bba9ea57e361e4af8da031ce15d221a84685bcc4ed9579facc68483382eab9cb54bc2d164b9", 0x8d}, {&(0x7f0000001500)="230958ddb57cd79bf57aadbda2ff959f02b7b93b1786a3261b74fd9025035a48afa9e1542e70b9db3c883c5a567707f9ffd6ffbb80f5e10f0adca7388623ef764b4b565a7cdab4bf3c6bb1eff4beb95cc9b6a1c5967d22913172648c3517d96ba980", 0x62}, {&(0x7f0000001580)="376ea3f4cf54724984f8ab717d3c0b2171b9f9bfa777192f3483f729298671afa3288c6c04c05eb69d499eb21671601977d32f09122bbc44b6ffc431b5ba3cf420174a8819c3f4a0c21daf2654e53900433f06f64614d3b7f33a2d91bbf9bbd35a6e78d10a9db98e84023a7d9abeb7f2e7efee522d04a8debf9c5ac054af9ded7850b428dba360253a52fdcc6a86a84bef35d5609ff649111aa48dc39be7752edbf53c3044f6650855643c627bcdf781b8af1ddf6dd9cbea4c6e8a336646c645b053c568d742d8bb80ca9b1ce8654aad4310f9f0a06dabf8", 0xd8}, {&(0x7f0000003700)="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", 0x1000}, {&(0x7f0000004700)="7b50c335da8a0385fda523b23924002edd22c834f0dbab939276e42e90065787bc98c4355967f8baf890d45d704eb92f9609924ee5673172f3ad28f07b587f2b9d79bdc7f9f9087a01ab8a20ffc2736172cc0abddedcffb7340d5333e8bdcdfbb96f1dd2b8c5a6c0f166e2a609dc008b17ce8071d934d9afabe90de12f2b18e673fea4a5cd70ff", 0x87}], 0xa, &(0x7f0000004880)=[@hopopts={{0x60, 0x29, 0x36, {0x3c, 0x8, '\x00', [@ra={0x5, 0x2, 0x128a}, @calipso={0x7, 0x18, {0x0, 0x4, 0x70, 0x6, [0x5, 0xfffffffffffffffa]}}, @hao={0xc9, 0x10, @mcast1}, @enc_lim={0x4, 0x1, 0x25}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}, @hopopts={{0x60, 0x29, 0x36, {0x0, 0x8, '\x00', [@pad1, @calipso={0x7, 0x40, {0x2, 0xe, 0x3, 0xb2d, [0x7f, 0x8, 0xfffffffffffffa8d, 0x4, 0x9, 0x3, 0xbbf]}}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x6}}, @hopopts={{0x20, 0x29, 0x36, {0x62, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xf54}}, @dstopts_2292={{0x80, 0x29, 0x4, {0x62, 0xc, '\x00', [@calipso={0x7, 0x30, {0x2, 0xa, 0x37, 0x8, [0x7, 0x1, 0x7, 0x0, 0x0]}}, @hao={0xc9, 0x10, @private0}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x38}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @tclass={{0x14, 0x29, 0x43, 0x8}}], 0x1c0}}], 0x1, 0x880) (async) bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0xfffffffd, 0x1}, 0x20) (async) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) (async) connect$l2tp6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4, 0x2}, 0x20) (async) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 6m8.371931575s ago: executing program 1 (id=1245): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x20000080}, 0x8010) socket$nl_xfrm(0x10, 0x3, 0x6) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x24000408) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r3, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) 6m7.008191512s ago: executing program 4 (id=1252): socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x6020400) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f00000000c0), &(0x7f0000000000)=0x4) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) r3 = syz_open_dev$swradio(&(0x7f00000004c0), 0x1, 0x2) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000500)={0x180, 0xb, 0x0, "d52431fea07d750800604ca6d8fa4f5920388a629ccdfa7df0a8885a0032510e", 0x41414270}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x100083, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) mount$9p_rdma(&(0x7f00000003c0), &(0x7f0000000340)='./file1\x00', &(0x7f0000000300), 0x1000800, &(0x7f0000000440)=ANY=[]) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r10, @ANYBLOB="080005000600000014001780"], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r7, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)={0xf0, r9, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xff, 0x32}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xc7, 0xbe, "6b5278b6f405743c19e64efb8a86a51f6dfef0629fba1ba02339d70f2338ee4a26b6ad9810741b68e68af04486d27e9192abce65072a9019509346be9a011677e362cc2c9c24628b410278b9711e82b633eb07b366ff26de7858d58a36b2263bd788dbc0e61466537cfa5f7ed11198318b716a36eb07e24711458d58c4de374b9a47d8740631e5fa398bb706162e3ebaa774280ab5579505db87a63092ab4f007f16534fb1e0e359c06f17746bab9b11db54a18a722a87453d17be051f80d48313e1cd"}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x3c0}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8004}, 0x2404c084) sendmsg$NFQNL_MSG_VERDICT(r5, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGSOFTCAR(r4, 0x5416, 0x0) 6m6.125747501s ago: executing program 1 (id=1254): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x16, 0x0, 0xb161, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r0}, &(0x7f0000000780), 0x0}, 0x20) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) io_setup(0x81, &(0x7f0000000180)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f0000002340)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r2, 0x0}]) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@ipv6_newrule={0x60, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10018}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_to_hsr\x00'}, @FRA_DST={0x14, 0x1, @private1}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8}, @FRA_SRC={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}, 0x60}, 0x1, 0x0, 0x0, 0x14}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, &(0x7f0000000240)=0x8, 0x4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x4c0840, 0x84) mkdirat(r5, &(0x7f00000002c0)='./file0\x00', 0x4) pwritev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)="e58a594c2895afad503d0f40652cda95abef7d6a773ec404cc951a1f39403ebf420a450e16fea3c10092b962fc6b1da61fad07d99a38e8eb9e7ff3420478515abd13dd2bd35f", 0x46}, {&(0x7f0000000000)="5533382eebbbd1e48f78cfe32bc6008dc9bd4f74563a54cbf7fe7fe9a19309dba896a25e766ba1485e6ca21d0e5339853af1947861e71fa03f738b36", 0x3c}, {&(0x7f0000000140)="954a9ffb760074df1121066d1af2cd224dbf9e41b947c5cb7a1b02930d8ded09f3628e65b18b55eb3da24e08329dff152439a2ad5d78d057050947d81619eaf86d157c7957d74d2f015b4ea6cd330e7c028c9b992ed502c091d7b456fe9e18576e40b0903d712459f38362ee0a373eb54c712720b38185a654971e515cd9aa14413f4bc62eab90f02d2024fc61a3335157d9627002163ff3e795dd63160506f8cf778074389dc4ca1a994cfae5a3eabb", 0xb0}], 0x3, 0x34, 0xfff) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xe) ioctl$TCFLSH(r4, 0x540b, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000002b00)={0x64, r7, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x4) 6m6.021404517s ago: executing program 4 (id=1255): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000200)={0x6, {0x8, 0x1, 0xff, 0x7ff}}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x80000001, 0x0, 0x0, 0xffffffff}, 0x2, 0x0, 0x7, 0x1008, 0x101, 0x14, 0x0, 0x0, 0x0, 0x0, {0xffffffff, 0x0, 0xfffffffd}}}}]}, 0x78}}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000400), 0x6, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e80000001000010026bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="8000000000000000140003006e657464657673696d300000000000000500110072000000ac001680a8000180a4000c"], 0xe8}, 0x1, 0x0, 0x0, 0x6004004}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82f42, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r6, 0x400454ce, 0x1) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0xe) pselect6(0x40, &(0x7f0000000000)={0xfffffffffffffffb, 0xe, 0xfffffffffffffff8, 0x800, 0xd, 0xa46e, 0xfffffffffffffffe, 0x5}, &(0x7f0000000080)={0x0, 0x9, 0x6, 0x0, 0x1, 0xb715, 0x0, 0x7f}, &(0x7f00000000c0)={0x8, 0x10001, 0x100, 0x4e9f, 0x8, 0xe5b, 0x1, 0x7fffffff}, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000180)={&(0x7f0000000140)={[0xc1]}, 0x8}) 6m5.515829153s ago: executing program 1 (id=1256): recvmmsg(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=""/136, 0x88}}], 0x1, 0x2000, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2400000076001f03000000000000000008000000ffffffff0c000d80080003"], 0x24}], 0x1}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000007a80), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000000000007"]) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000001240)=ANY=[@ANYBLOB="01000000000000003b"]) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x2b, 0x80801, 0x1) r7 = socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8}]}}]}, 0x3c}}, 0x0) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty, 0x1}, 0x1c) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x1f, 0x0, 0x78) r10 = socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x2c, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x5b, 0xaa, 0x7f, 0x20, 0x458, 0x706e, 0x3564, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x1, 0x0, 0x0, [@uac_as={[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x2, 0x2}]}]}}]}}]}}, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x48, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r11, {0xc, 0x4}, {}, {0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xfff2}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x40080) r12 = fcntl$dupfd(r2, 0x406, r3) sendmmsg$unix(r12, &(0x7f0000000900)=[{{&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000200)="6f38a036f5f78b82952ed74feceff46431b658029003153bcf9692e7cd9db6ce9666d521e2f8c6ad148e809160664c0d45fc9d5a34b09e69564a769bdef93c94a7943a399643537d74ed7de7b05d20d5", 0x50}, {&(0x7f0000000000)="0bc9ae3456ddbfae6a", 0x9}], 0x2, 0x0, 0x0, 0x40880}}, {{&(0x7f0000000340)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000700)=[{&(0x7f00000003c0)="24180be9de7b62a8b398bf6d5bc5625ee7f24ce9291d076a284d555bcbf934bf42a3ab53331c175aa31d6991b464f4b771152b9cf7552866616c7ac590e7d04999913ed3f95fac0f642bc9dd40bb9bdeeef9f17f18413fba07b2f7c1755d6fdb7df13b2d98ac06ecd76ca0a5457402", 0x6f}, {&(0x7f0000000440)="1720deb0739cca76badf3d6cb03bda9fdf18f41b", 0x14}, {&(0x7f0000000480)="5f5783bd255156dac97755376580d30025b76dfe67ff90b0c3f2f239f00d19e35a551afd94f6c0cf5892731ebcfa15cb90b4357a43a1e0c660e2e843fba7e7080b151f2f707c3afbf740ae8843d8e1e66ab36de9cf29dcb14fdc5449545eafb9ab7fc3ffeff1e8a736638f581afde6b1ecf421da7b4afc6288f6d746d44315d4127a32c266679473a81414d3ec16901bd13132fa", 0x94}, {&(0x7f0000000540)="2ca8224e631693adbcf78b8947067786ec4ddc3f741f8109e4fb784d5f6a9717c3c243a6a5944373bbeb9a718943ac2ab4ba045b185f9938195ab3ba78f6a0efb741642609516ff4d1f5af1bf0a3cd996420e4f25858fcadbd4e436954057014746c6ada0c06", 0x66}, {&(0x7f00000005c0)="85547db8871116feb656496b64ba9e505a1db0a659e38421b00203caaf72273a8ccd2060804e640926cd44de07c59a7edf45", 0x32}, {&(0x7f0000000600)}, {&(0x7f0000000640)="b21e76b2a6322828d43ac8e8a1d5f52ae3aaf32ca80e88a9de0210269c0b1bd2f5a1901ec0e30fd7ddf6350217a778c8a0434086ffac6040bdc1bb929681d8b545ed3125beef1fc8a9b2a13668fcdc5dc8d4031d43729e4a84b0e4890cdd03736de5a9bb67274f275f24aea6e8ff031689c9f8d1731f9e776a2ce16607b5e1edd6e48606d2231911d66e3b8cb472d80cd9da7c6ccfb1", 0x96}], 0x7, 0x0, 0x0, 0x8080}}, {{&(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)="e2042a8d4311bc984126507a1524630f3c1074170f70b39fca26e0f8cd49bde12a9f08612f346d943aad4ae56488d0aaa73c8950a917731fca1a375d6b4237d17e122f1a4409697ada324e427ecf5bcc56455466f1e5f39d061e858af6dcd063cfaed3fc262542fc9fe2b3783498ddb09509fb9e0f54eda2e80061bf3578f3e5e5494ad9f59e94e3", 0x88}], 0x1, 0x0, 0x0, 0x880}}], 0x3, 0x44000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910960000000000070000005157e7c59500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x63, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x62) 6m4.224010303s ago: executing program 4 (id=1260): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f00000002c0)={0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) iopl(0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102384, 0x18ff0) r4 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key(&(0x7f00000000c0)='cifs.idmap\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r4) r6 = openat$binfmt_register(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r6, 0x0, 0x0) keyctl$set_timeout(0xf, r5, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x48}, 0x1, 0x2}, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e00000000000000000000000000400000000000000000000000000000000000000000003800010000000000000003000000000000000000000000000000040000000000000000000000000000000208"], 0x105) 6m2.967840136s ago: executing program 4 (id=1264): openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) inotify_init1(0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) ioctl$PTP_PIN_GETFUNC(r1, 0xc0603d06, &(0x7f0000000300)={'\x00', 0x8, 0x3, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r2, 0x0, 0x1a, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000400)={0xa00965, 0x2}) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff02, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90235fc60040011000a740100643582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 6m2.605627561s ago: executing program 4 (id=1267): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f0000000b00)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000140)="acdea5e99693e328b5540963f2385c2ccb300a4dc25d10149bdab218b38d33d7df327563ebae2aa0eed9a96ded1fe8a39bfa232cad983462053315b229cf3e35fd64fe16bb2a831e2e980859d11a68067451f9d5f2b56afac8fbfd58d59929bcc5f64b9b895535f52f8814", 0x6b}, {&(0x7f0000000300)="f01524dc5ea36c4f3fed5d4c32", 0xd}], 0x2, 0x0, 0x0, 0x20008080}], 0x1, 0x40) 6m2.107866063s ago: executing program 4 (id=1268): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/78, 0x4e}], 0x1, 0x0, 0xb}, 0x0) socket(0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000540)={@random="108f4696b6e3", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x66, 0x0, 0x0, 0x11, 0x0, @dev, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) socket(0x840000000002, 0x3, 0xfa) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x12, 0x4, 0x0, &(0x7f0000000000)=0xffffffffffffffbc) 6m2.02102247s ago: executing program 1 (id=1269): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000001000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x0) 6m1.549896992s ago: executing program 32 (id=1268): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/78, 0x4e}], 0x1, 0x0, 0xb}, 0x0) socket(0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000540)={@random="108f4696b6e3", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x66, 0x0, 0x0, 0x11, 0x0, @dev, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) socket(0x840000000002, 0x3, 0xfa) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x12, 0x4, 0x0, &(0x7f0000000000)=0xffffffffffffffbc) 5m57.760018915s ago: executing program 1 (id=1278): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7e, 0x9e, 0xb4, 0x10, 0x54c, 0x38, 0x16f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0xc5, 0x38}}]}}]}}, 0x0) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x6, 0x0, 0x91, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x7, 0x1, 0x1, 0xfd, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x1b, 0x7, 0x16}}}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x7f, 0x1, 0xc0, 0x40, 0x4}, 0x38, &(0x7f0000000140)={0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x3, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x5, 0x89, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "9caaf3c44360cb6a48add2f56a565401"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x80, 0x2, 0x7, 0x3, 0x3}]}, 0xa, [{0xab, &(0x7f0000000200)=@string={0xab, 0x3, "2cde42c44383635efaa3d1c821bbcd3bb0eef8abd4348afed18cf726b5cf6a2c0c11b17721721e22eb373b17237adf1c6dcc6dfe5326ac1974743bdc637d0590bdc5c0ca2909bc52ea4ea645574378c8ed5f422f276e16576e9656d49a672532fffae089d1dfc844be1c5dbee1c0ebb642b45a8f9b40795145541b5cd15d2f8a0ffdd97c9ffeb2fd5066a79d33e260bfef6b36d5b39d8555b77879d37bb08a35db85a6e55c4c182785"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x81a}}, {0x6a, &(0x7f0000000300)=@string={0x6a, 0x3, "a0a5f9f017e13b396e871a2e3270d12d26db50ef84c67579ad80218841ce0f0224f304b0e615f42a71b0d90f2422a93aea658ef5e420a3f3f64bb71e6eb7ab27234bbffa0208819d5dab11796139498694874f4235c69df5b041dcbb931123648670a6eed8abf1bb"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x300a}}, {0xb1, &(0x7f00000003c0)=@string={0xb1, 0x3, "3a5ac93dc6951e481304238a7833e43bf5be349a90ea9d8fe07835d37c47bce5e1602b2fff0634390a0105f976a85db4a0a96211cc1808274a569bca17b7f86ca104f06437e50f01430279908323c6db5954109d2303f27788df99292d8762d0a7442a10ca9aaae0618cfede5fd49527a00b922018f06d575f724c4cb7175d8b7c5e0b274500e52d940bff5919bb3ca03b04ace60a5895f33678cbadd78f00d5ddeb683af8adde9faf8641f83fd00d"}}, {0xb6, &(0x7f0000000480)=@string={0xb6, 0x3, "a1d1ac4b6ffba3e3d862d996f7741334bc95c1a4960dba43802290e36aa4a94bdfc5ac3609a1f05b54504a4bf0d92f31d9ab38c994ee3c583d65da2957b75c10175ccba4ddf424fd209a3c5f478b829eb6ff84e9a72bf330e13b71fd879a2f41fca4e9687d53421d86ebdb4df22d76405655ea75da745f9e6451992241868d0a72c44ab79d69fca9ca3eca1881dc59500a77ec3db1482828c23d6dc7d7cd110116ae07821f66edb1cc9a4640ba76c1dc0b225618"}}, {0x9a, &(0x7f0000000540)=@string={0x9a, 0x3, "09ebdfd53702efd195c3b39cb4774d85a42bd89f68f9f2624818db6eb7e0e3a28bb2c5b1af5d0607cfd1c5f6d9ca1cb6d79dfd8bf24661419af4d66c88be1fc933605d0567fb6613754cdc52add6a8a0dc04f0d3a864a28d77854ad0c4b31b5dacdd8a202d4f98dba1f10ebcbd92ceca4d0bd7d03ce1c39e9a5a6805d50bedfbf9493a62d11568a060c566fb05c0697e18b6c9ae1d2dd5be"}}, {0xce, &(0x7f0000000600)=@string={0xce, 0x3, "032621149eec465d7fad1066d8940ec9d42e1a47ca67e1a73d2238475b08d634fe6941d1abd550faae139d016764d614bee532eca1db57082482bab3a1064aae8c60303be4b8f02cce157528b4cf821034fa436bc3a722a00bd79635f71a8642f066e5b1d53bffef1152c6a8b137915975d05621efcc40016601f605ceceb5a2adedf5e358cc810279c50a6a6f62320982f79a9af753caa11495eb17d015c7706a4d3f7cb2f7529b906a6433117cb506b2eba62b0307a22f78c600bd55ae69508b367c3603a4fb66c97d92fa"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x1809}}]}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$sock(r1, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x8, 0x1, 0x1}, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000a00)={0x0, 0xa, 0xfe92, 0x8}, 0x0, 0x0, 0x0, 0x0}) 5m57.030361223s ago: executing program 33 (id=1278): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7e, 0x9e, 0xb4, 0x10, 0x54c, 0x38, 0x16f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0xc5, 0x38}}]}}]}}, 0x0) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x6, 0x0, 0x91, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x7, 0x1, 0x1, 0xfd, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x1b, 0x7, 0x16}}}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x7f, 0x1, 0xc0, 0x40, 0x4}, 0x38, &(0x7f0000000140)={0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x3, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x5, 0x89, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "9caaf3c44360cb6a48add2f56a565401"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x80, 0x2, 0x7, 0x3, 0x3}]}, 0xa, [{0xab, &(0x7f0000000200)=@string={0xab, 0x3, "2cde42c44383635efaa3d1c821bbcd3bb0eef8abd4348afed18cf726b5cf6a2c0c11b17721721e22eb373b17237adf1c6dcc6dfe5326ac1974743bdc637d0590bdc5c0ca2909bc52ea4ea645574378c8ed5f422f276e16576e9656d49a672532fffae089d1dfc844be1c5dbee1c0ebb642b45a8f9b40795145541b5cd15d2f8a0ffdd97c9ffeb2fd5066a79d33e260bfef6b36d5b39d8555b77879d37bb08a35db85a6e55c4c182785"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x81a}}, {0x6a, &(0x7f0000000300)=@string={0x6a, 0x3, "a0a5f9f017e13b396e871a2e3270d12d26db50ef84c67579ad80218841ce0f0224f304b0e615f42a71b0d90f2422a93aea658ef5e420a3f3f64bb71e6eb7ab27234bbffa0208819d5dab11796139498694874f4235c69df5b041dcbb931123648670a6eed8abf1bb"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x300a}}, {0xb1, &(0x7f00000003c0)=@string={0xb1, 0x3, "3a5ac93dc6951e481304238a7833e43bf5be349a90ea9d8fe07835d37c47bce5e1602b2fff0634390a0105f976a85db4a0a96211cc1808274a569bca17b7f86ca104f06437e50f01430279908323c6db5954109d2303f27788df99292d8762d0a7442a10ca9aaae0618cfede5fd49527a00b922018f06d575f724c4cb7175d8b7c5e0b274500e52d940bff5919bb3ca03b04ace60a5895f33678cbadd78f00d5ddeb683af8adde9faf8641f83fd00d"}}, {0xb6, &(0x7f0000000480)=@string={0xb6, 0x3, "a1d1ac4b6ffba3e3d862d996f7741334bc95c1a4960dba43802290e36aa4a94bdfc5ac3609a1f05b54504a4bf0d92f31d9ab38c994ee3c583d65da2957b75c10175ccba4ddf424fd209a3c5f478b829eb6ff84e9a72bf330e13b71fd879a2f41fca4e9687d53421d86ebdb4df22d76405655ea75da745f9e6451992241868d0a72c44ab79d69fca9ca3eca1881dc59500a77ec3db1482828c23d6dc7d7cd110116ae07821f66edb1cc9a4640ba76c1dc0b225618"}}, {0x9a, &(0x7f0000000540)=@string={0x9a, 0x3, "09ebdfd53702efd195c3b39cb4774d85a42bd89f68f9f2624818db6eb7e0e3a28bb2c5b1af5d0607cfd1c5f6d9ca1cb6d79dfd8bf24661419af4d66c88be1fc933605d0567fb6613754cdc52add6a8a0dc04f0d3a864a28d77854ad0c4b31b5dacdd8a202d4f98dba1f10ebcbd92ceca4d0bd7d03ce1c39e9a5a6805d50bedfbf9493a62d11568a060c566fb05c0697e18b6c9ae1d2dd5be"}}, {0xce, &(0x7f0000000600)=@string={0xce, 0x3, "032621149eec465d7fad1066d8940ec9d42e1a47ca67e1a73d2238475b08d634fe6941d1abd550faae139d016764d614bee532eca1db57082482bab3a1064aae8c60303be4b8f02cce157528b4cf821034fa436bc3a722a00bd79635f71a8642f066e5b1d53bffef1152c6a8b137915975d05621efcc40016601f605ceceb5a2adedf5e358cc810279c50a6a6f62320982f79a9af753caa11495eb17d015c7706a4d3f7cb2f7529b906a6433117cb506b2eba62b0307a22f78c600bd55ae69508b367c3603a4fb66c97d92fa"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x1809}}]}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$sock(r1, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x8, 0x1, 0x1}, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000a00)={0x0, 0xa, 0xfe92, 0x8}, 0x0, 0x0, 0x0, 0x0}) 2m56.511469585s ago: executing program 2 (id=1961): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0xa4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2m53.200717492s ago: executing program 2 (id=1971): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r0, &(0x7f00000066c0)=[{{&(0x7f00000019c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1400000000000000290000003e0000000000000000000000140000000000000029000000340000002a0c"], 0x30}}], 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000a0000000500000007000000c1000000", @ANYRES32, @ANYBLOB="00000000000000000000109729d890cd913f5ffc", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000740)={r1, &(0x7f0000000780), 0x0}, 0x20) r2 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f00000011c0)={0x0, 0x2, 0x0, 0x400, 0x4, 0x7, 0x4}) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000400)='.\x00', 0x4000423) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)=@known='system.posix_acl_default\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x4000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000080)=@get={0x1, 0x0, 0x22}) shutdown(r5, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x0, 0x5, 0x1, 0x0, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x20000000, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r7) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r6, {0x9}}, './file1\x00'}) syz_genetlink_get_family_id$team(&(0x7f0000000100), r8) 2m52.35454329s ago: executing program 2 (id=1976): r0 = syz_io_uring_setup(0x1841, &(0x7f0000000480)={0x0, 0x5cdb, 0x1088, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x8, 0x3, 0x7f}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a0000002900", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000cb9f2cfcc837c14b000000000000000000000000000000000000000200000000000000ffffe2ffe0ffffff000000000000000000000000000000000000000000000000000000000000e1069346585daf1fd012000002"], 0xb8}}, 0x4004) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="c4000000190001000000000000000000e000000200000000000000000000000000000000000000000000000000000000000000004e2300000a0000002900", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000060000000000000000000000000000000000000000000000f6ffffffffffffffffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000"], 0xc4}}, 0x14) 2m51.884077611s ago: executing program 2 (id=1981): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountstats\x00') preadv2(r1, &(0x7f00000001c0), 0x0, 0xd0d, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000008a7c000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000780), 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x27, 0x2, 0x0, "a677c17a5ac1f393f65906a68dd1f8822c8800", 0x584e4f53}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0xa4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2m48.775653754s ago: executing program 2 (id=1990): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x1000)=nil) socket(0x11, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x82840, 0x132) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0x200, 0xfffffff9, 0xbf5b, 0x0, 0x3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) io_uring_setup(0x175c, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs(0x0, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0xb) r5 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r5, 0xab00, r6) ioctl$NBD_DO_IT(r5, 0xab03) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) socket$key(0xf, 0x3, 0x2) syz_open_dev$video4linux(&(0x7f0000000000), 0x7fffffff, 0x80) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xb, 0x100, 0x4, 0x1, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r7, &(0x7f0000000140), 0x0}, 0x20) 2m32.472591951s ago: executing program 34 (id=1990): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x1000)=nil) socket(0x11, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x82840, 0x132) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0x200, 0xfffffff9, 0xbf5b, 0x0, 0x3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) io_uring_setup(0x175c, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs(0x0, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0xb) r5 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r5, 0xab00, r6) ioctl$NBD_DO_IT(r5, 0xab03) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) socket$key(0xf, 0x3, 0x2) syz_open_dev$video4linux(&(0x7f0000000000), 0x7fffffff, 0x80) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xb, 0x100, 0x4, 0x1, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r7, &(0x7f0000000140), 0x0}, 0x20) 41.165624613s ago: executing program 5 (id=2375): r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x800) fcntl$setlease(r0, 0x400, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x8, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) dup(r5) ioctl$TCSETSW2(0xffffffffffffffff, 0x5453, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2, 0x20}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r6, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) r7 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x26d, 0x11900, 0x0, 0x1f5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r7, 0x2def, 0x0, 0x0, 0x0, 0x0) r10 = socket$l2tp6(0xa, 0x2, 0x73) close_range(r0, r10, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0x5, &(0x7f0000000500)=ANY=[], &(0x7f0000000200)='GPL\x00', 0xc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r11, 0x0, 0x109, 0x8, &(0x7f0000000340)="000000000e3da68767a1b59928f751d376081ff1a0b45c1d48294b901ea5f655b8ec561ccd3675f8fe7f6fb38c914830e7693c98b074ae7877dfcb508e690be68e8f2fd69e04273b7e9bc05cf367adfd85960dcc0a0cde8062ec058224b18293a2211d47318aa8a12db098ec3dfe496fc467bc0f0d9ba99943042c92970836898873a7769af0d790762eac9c1ac9e36c72df72d19e5e8fa52cc89bdfada3a578981714b22e7b10c35f542d5bce115561a5fd4a3978da80099579ae808307a3dc20faaf26df358b0c161117be63b5c0424660fc5b8a3f701bfc6b208763c3285c6df5e2a08e449ed4b2557233fc40ef7d22ca7c03deefc59e72de52fdd49587bbc0d46de3280a404e87", &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 39.716661695s ago: executing program 5 (id=2378): r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x800) fcntl$setlease(r0, 0x400, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x8, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) dup(r6) ioctl$TCSETSW2(r5, 0x5453, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2, 0x20}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r7, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) r8 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x26d, 0x11900, 0x0, 0x1f5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r8, 0x2def, 0x0, 0x0, 0x0, 0x0) r11 = socket$l2tp6(0xa, 0x2, 0x73) close_range(r0, r11, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0x5, &(0x7f0000000500)=ANY=[], &(0x7f0000000200)='GPL\x00', 0xc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r12, 0x0, 0x109, 0x8, &(0x7f0000000340)="000000000e3da68767a1b59928f751d376081ff1a0b45c1d48294b901ea5f655b8ec561ccd3675f8fe7f6fb38c914830e7693c98b074ae7877dfcb508e690be68e8f2fd69e04273b7e9bc05cf367adfd85960dcc0a0cde8062ec058224b18293a2211d47318aa8a12db098ec3dfe496fc467bc0f0d9ba99943042c92970836898873a7769af0d790762eac9c1ac9e36c72df72d19e5e8fa52cc89bdfada3a578981714b22e7b10c35f542d5bce115561a5fd4a3978da80099579ae808307a3dc20faaf26df358b0c161117be63b5c0424660fc5b8a3f701bfc6b208763c3285c6df5e2a08e449ed4b2557233fc40ef7d22ca7c03deefc59e72de52fdd49587bbc0d46de3280a404e87", &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 38.093488274s ago: executing program 5 (id=2380): sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4) socket$kcm(0x11, 0x3, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000010ac05418200000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) unshare(0x60600) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$getownex(r1, 0x409, &(0x7f0000000340)) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xfffffffffffffc5d, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x50}}, 0x0) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, &(0x7f0000000040)=0x3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xb) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/unix\x00') r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getpeername(r5, 0x0, &(0x7f00000000c0)) openat$cgroup_ro(r4, 0x0, 0x275a, 0x0) r7 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) listen(r7, 0x0) r8 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r8, &(0x7f0000000080), 0x10) shutdown(r8, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) close(0x3) 34.19048733s ago: executing program 3 (id=2391): r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x800) fcntl$setlease(r0, 0x400, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x8, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) dup(r6) ioctl$TCSETSW2(r5, 0x5453, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2, 0x20}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r7, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) r8 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x26d, 0x11900, 0x0, 0x1f5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r8, 0x2def, 0x0, 0x0, 0x0, 0x0) r11 = socket$l2tp6(0xa, 0x2, 0x73) close_range(r0, r11, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0x5, &(0x7f0000000500)=ANY=[], &(0x7f0000000200)='GPL\x00', 0xc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r12, 0x0, 0x109, 0x8, &(0x7f0000000340)="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", &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 33.778605848s ago: executing program 5 (id=2394): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@getchain={0x2c, 0x66, 0x300, 0x8, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x8, 0x8}, {0xfff2, 0xa}, {0x3, 0xf}}, [{0x8, 0xb, 0x8a88}]}, 0x2c}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="d60a0000000000006111b00000000000180000000000000000010000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000011c0)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x2, 0x2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[{0x9, 0x3, 0x81, 0x10000}, {0x0, 0xb0, 0x3, 0x8}, {0xfc00, 0x0, 0x0, 0x2}, {0xf, 0x8, 0x4b, 0xc11}, {0xdbb, 0x0, 0x1, 0x195}, {0x0, 0x4, 0x3, 0x9}]}) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000200)={0x6000, 0x100000}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r7, r6, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r8, &(0x7f0000000300)='./file0\x00', 0x8000, &(0x7f0000001dc0)={0x87}, 0x20) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x144, 0x12, 0x1, 0x70bd28, 0x25dfdbfe, {0x13, 0xb, 0xa, 0x0, {0x4e22, 0x4e23, [0x0, 0x7, 0x7, 0xfff], [0x1, 0x9, 0x6, 0x2], 0x0, [0x9, 0x1]}, 0x4af, 0x8}, [@INET_DIAG_REQ_BYTECODE={0xf7, 0x1, "7b3274cf9e73b13f40a423a479e594b1487b0b2111d986b04cfd88b24de577c49ab222e702279a38c1140d359361594b22f06b22f0393299376c3960ce850fefc491d113345b936dc461a75c739b50618fbdeef1c13385206c8ee44ae28e14d007f12a25e1c794acfc9a689f6714ead0fcaaadc57bd62b442edd126d25563795b2751a4e9551b9d7f3a61475f69c792ac838c0196d803904774e4c401367588a926468b95bca5ca589f6ffb1a5e818da0e0bfb598504c4d60def1051d90d7d8b6a04d437dff3303c80e5acd4c5a3f54f1b24687b003003ef8fb3eae7e070bd82f40994cefbbb58646d91df41f1e145abfac095"}]}, 0x144}, 0x1, 0x0, 0x0, 0x20004092}, 0x20008004) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r6, 0x0, &(0x7f0000ff7000/0x2000)=nil, 0x2000, 0xfffffffffffffffc}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) 33.078156214s ago: executing program 3 (id=2397): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000005b80)=@newlink={0x4c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x24, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0xb, 0x0) 31.768166312s ago: executing program 0 (id=2399): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x40000006) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) write(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x40001032, r2, 0x0) open(&(0x7f0000000180)='./file2\x00', 0x1cd842, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000057c0)={0x2020}, 0x2020) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x50}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 31.011102806s ago: executing program 0 (id=2400): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x7f, 0x0, 0x34324152, 0x4, 0xa, [{0x0, 0xf}, {0x20010}, {}, {}, {}, {}, {0x0, 0x800}], 0xf}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r4, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0xae44, 0x42c2000) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat(0xffffffffffffff9c, 0x0, 0x515001, 0x408) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) socket$packet(0x11, 0x0, 0x300) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') 30.977186263s ago: executing program 7 (id=2401): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x20000) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000140)={0xfffffe0e, 0x8, [0xfc88, 0x1]}) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) 30.715582538s ago: executing program 7 (id=2402): r0 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80000) r1 = dup2(r0, 0xffffffffffffffff) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x26c801) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000080)={0x0, 0x0, {0x5, 0x81, 0x9, 0x1}}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x140b, 0x100, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x90) r4 = getpgid(0x0) prlimit64(r4, 0x2, 0x0, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000200)) ioctl$SOUND_MIXER_READ_STEREODEVS(r1, 0x80044dfb, &(0x7f0000000240)) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000280)={r2, 0x0, 0x100, 0x8000000000000000}) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, &(0x7f00000002c0)="65450fc730c4a1a15437c74424001a000000c744240200500000c7442406000000000f011424b9e0080000b8aa000000ba000000000f30c46295bd5f133e470f01d1c401eb5e97e7000000430f6a5808420f0f2d000800001cc442499a5900", 0x5f}], 0x1, 0x40, &(0x7f0000000380), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000003c0)={0x3, 0x8, 0x3}) r6 = syz_usb_connect$cdc_ecm(0x6, 0x87, &(0x7f0000000400)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x1, 0x1, 0xc7, 0x60, 0x7, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0x80, {{0x6, 0x24, 0x6, 0x0, 0x0, '\b'}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x2, 0x8, 0x6}, [@ncm={0x6, 0x24, 0x1a, 0x7, 0x10}, @mdlm={0x15, 0x24, 0x12, 0xa}, @mdlm={0x15, 0x24, 0x12, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0x9c, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x2, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x0, 0x6, 0x2}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x11, 0x7, 0x4, 0xab, 0x40, 0x7}, 0x8, &(0x7f0000000500)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x2, [{0x50, &(0x7f0000000540)=@string={0x50, 0x3, "8beb74ff231b02459c143140464e4ca03203f21cb763e85cf5d19a90f32b128ec311be0825f883fb7e3cd522dba9914278e1655ec88fbdf0a0e6539c56bdb52947320095e16d5c682593b1c99e33"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x2809}}]}) syz_usb_control_io$cdc_ecm(r6, &(0x7f0000000740)={0x14, &(0x7f0000000640)={0x0, 0x5, 0xb3, {0xb3, 0x6, "effcf3817904be790cc282c5aad031c89bf6a996d2307f8a3c167c35445416d3b8b0fc05323d9975d40c648c295775491d6c192c0e55ad6838053ae40463ac7004b223d7393eb5647036ce0ac1aa115fa7667914c7de61c3c5461f6ad0b31026a53cba5471fcfa4d5ce08739bfd86476def29af80a2962b6f05a9fa04e7d391da0beac27e7bdb8abe2d9a8d680eea1af292c2daf6d653294028f3019b25d03cc76b003d03ebed0267f43ff1b9aac5b4c03"}}, &(0x7f0000000700)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000840)={0x1c, &(0x7f0000000780)={0x0, 0x3, 0x7, "20f08f50b17f82"}, &(0x7f00000007c0)={0x0, 0xa, 0x1}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x7}}) r7 = creat(&(0x7f0000000880)='./file0\x00', 0x170) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f00000008c0)={0x9, {{0xa, 0x4e22, 0x73f, @loopback, 0xffffffff}}, {{0xa, 0x4e23, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}}}, 0x108) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000a00)={'tunl0\x00', 0x2}) sched_setscheduler(r4, 0x1, &(0x7f0000000a40)=0x1) r8 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r8, 0x6b, 0x4, &(0x7f0000000a80), &(0x7f0000000ac0)=0x4) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000b00)) mount(&(0x7f0000000b40)=@loop={'/dev/loop', 0x0}, &(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)='omfs\x00', 0x820050, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000c00)=']-]]:&@{\'\x00', &(0x7f0000000c40)='/dev/loop', 0x0) getsockopt$sock_buf(r2, 0x1, 0x37, &(0x7f0000000c80)=""/212, &(0x7f0000000d80)=0xd4) r9 = syz_open_dev$MSR(&(0x7f0000000dc0), 0x6, 0x0) ioctl$SNDRV_PCM_IOCTL_DROP(r2, 0x4143, 0x0) pidfd_getfd(r7, r9, 0x0) 29.959962332s ago: executing program 7 (id=2404): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) sendmsg$can_raw(r2, &(0x7f00000004c0)={&(0x7f00000005c0)={0x1d, r1}, 0x10, &(0x7f0000000500)={&(0x7f00000000c0)=@can={{}, 0x7f, 0x0, 0x4, 0x0, '\b-\x00'}, 0x10}}, 0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000000f1401000000000000000000080045007372b58b"], 0x20}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x1, @local}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=[@mask_cswp={0x58, 0x114, 0x9, {{0xffff, 0x7fff}, &(0x7f0000000280)=0x7ff, 0x0, 0xe3, 0xffffffffffff8000, 0x0, 0xfffffffffffffffd, 0xb, 0x6}}], 0x58}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x28, 0x3d, 0x9, 0x0, 0x0, {0x4}, [@typed={0x4, 0x200}, @typed={0xd, 0x9, 0x0, 0x0, @binary="f463163c2a66215fe6"}]}, 0x28}}, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x7) socket$rds(0x15, 0x5, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000)={0x0, 0xf4, 0x9, 0x1, 0x6c, 0x81, 0xc8, 0x0, 0x9, 0x9, 0x5, 0x2, 0xd5, 0x9}, 0xe) 28.577099098s ago: executing program 6 (id=2407): r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x800) fcntl$setlease(r0, 0x400, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x8, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) dup(r6) ioctl$TCSETSW2(r5, 0x5453, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2, 0x20}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r7, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) r8 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x26d, 0x11900, 0x0, 0x1f5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r8, 0x2def, 0x0, 0x0, 0x0, 0x0) r11 = socket$l2tp6(0xa, 0x2, 0x73) close_range(r0, r11, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0x5, &(0x7f0000000500)=ANY=[], &(0x7f0000000200)='GPL\x00', 0xc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r12, 0x0, 0x109, 0x8, &(0x7f0000000340)="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", &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 28.205585068s ago: executing program 3 (id=2408): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x6, 0x7fffffff) syz_io_uring_setup(0x4b6, &(0x7f0000000080)={0x0, 0x2361, 0x0, 0x2}, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$packet(0x11, 0x2, 0x300) inotify_rm_watch(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7279, 0x0, 0x2, 0x316}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast2, 0x4e21, 0x5d62, 0x4e21, 0xf, 0xa, 0x20, 0xa0, 0x84, 0x0, 0xffffffffffffffff}, {0x81, 0x4, 0xffffffff, 0xfffffffffffffff0, 0xd8f0, 0x2, 0x6, 0x2}, {0x8, 0x207b, 0x100000000, 0x3ff}, 0x9207, 0x6e6bb7, 0x0, 0x1, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d4, 0x33}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3506, 0x1, 0x0, 0x1, 0x2ed, 0x0, 0x3}}, 0xe8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'bond0\x00', 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) setuid(r7) getsockopt$IP_SET_OP_GET_BYINDEX(r5, 0x1, 0x53, &(0x7f0000000540)={0x7, 0x7, 0x4}, &(0x7f0000000580)=0x28) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote, r6}, 0x14) close_range(r5, r5, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000300)={'veth0_macvtap\x00', 0x8}) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x10) ioctl$TCFLSH(r8, 0x540b, 0x1) 594.680667ms ago: executing program 5 (id=2409): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x3, 'Yf\''}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[], 0x0}) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000640)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000c68000/0x3000)=nil, 0x7fffffff, 0x0, 0x0, 0x6, 0x4, 0x5a, 0x0, 0x46}) 594.010473ms ago: executing program 6 (id=2410): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x40000006) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) write(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x40001032, r2, 0x0) open(&(0x7f0000000180)='./file2\x00', 0x1cd842, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000057c0)={0x2020}, 0x2020) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000800000000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970005ca1d7608b565370cebc157dac89924dd23c5071bf0987dd01f8fe83fc8138c7623c9fb0448c8576462abf13ae0518073971918ac87612a714d6bba80e1054b929e9f121cc675464e9c669dc64ac0c81d00d5ec48c6f0cfad8d5da50d14968b460303e1d0fdf5da270f36799835561d97fbe308f461b18100a3006be95746849e05d5dbc1266dfd98b81b782d83df5b4ef755051d331bc5348092e408e1f3634109676a15068f0838d3cfd3a469ee36baea7b6f4d31018caf3a63a998bc74b1f315e9dae30cf2b22dbfaca39e0686107ceb3fe8b0aabb96ea428cf31de620544e74e99eee8dabaa730e3795d54b32b29553821cb220c4e"], 0x50}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 531.249046ms ago: executing program 6 (id=2411): syz_open_procfs(0x0, &(0x7f0000000380)='gid_map\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000064172f2057155081ed29010203010902120001000000000904"], 0x0) 529.554608ms ago: executing program 3 (id=2412): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000040)=0xd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x33}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) poll(&(0x7f0000000080)=[{r2, 0x30}, {r2, 0x1206}, {r2, 0x120}], 0x3, 0x9) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @dev}}) 529.13319ms ago: executing program 7 (id=2413): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 32) r0 = getpid() (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) (async) lsm_set_self_attr(0x68, 0x0, 0x20, 0x0) (async, rerun: 32) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (rerun: 32) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0xb0000000}) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x20, 0xf1, 0x1, 0x20, 0xb48, 0x2003, 0x97c3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x6c, 0xb4, 0x2, 0xc4, 0x32, 0xad, 0x0, [], [{{0x9, 0x5, 0x3, 0x0, 0x8, 0x1, 0x6, 0x6}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0xfd, 0x0, 0xe}}]}}]}}]}}, 0x0) 528.089963ms ago: executing program 0 (id=2414): r0 = socket$kcm(0x2, 0x3, 0x2) recvmsg$kcm(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r2 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x1) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000002600)) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000040)={0x1, 0xff, 0x1f}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0xc0389424, &(0x7f0000000100)={0xd, 0x28, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0]}) socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000940)='net/igmp6\x00') lseek(r7, 0x2027da, 0x0) r8 = socket$kcm(0xa, 0x3, 0x73) sendmsg$kcm(r8, &(0x7f0000000100)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xfb, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="100000000000"], 0x10}, 0x0) close(0x3) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0b0000060000000000000000", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) accept4(r9, &(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x80, 0x80800) 527.169779ms ago: executing program 0 (id=2415): r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@call={0x85, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000d80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x0, r3) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f000086fff4)) r7 = getpid() r8 = getpid() kcmp$KCMP_EPOLL_TFD(r7, r8, 0x7, r3, &(0x7f00000000c0)={r6, r5}) sched_setaffinity(r8, 0x8, &(0x7f0000000100)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r9 = open$dir(&(0x7f0000001640)='./file0\x00', 0x0, 0x0) fdatasync(r9) getsockopt$inet_int(r0, 0x10d, 0x8f, &(0x7f0000000080), &(0x7f00000005c0)=0x4) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x0, 'ip_vti0\x00', {}, 0x82a0}) r10 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x458, 0x5017, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io$hid(r10, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x4, "f59b8434"}]}}, 0x0}, 0x0) 525.23188ms ago: executing program 6 (id=2416): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x58, &(0x7f0000000c40)={&(0x7f0000000140)=ANY=[], 0x48}}, 0x0) syz_emit_vhci(&(0x7f0000001fc0)=ANY=[@ANYBLOB="04080406a60000"], 0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x20000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@dev={0xfe, 0x80, '\x00', 0x8}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f0000000200)={0xfffffffffffffdab, r3}) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000380)=0x1f40) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r3, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r3, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000261000/0xc00000)=nil, 0xc00000, 0x3000003, 0x31, 0xffffffffffffffff, 0x0) getpid() madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@rr={0x7, 0x3, 0x8b}, @noop]}}}], 0x38}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r3}) 524.120489ms ago: executing program 6 (id=2417): openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x402, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 520.128284ms ago: executing program 0 (id=2418): bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x17, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000012000000000000000000181100007f09941d6ef4dede26629314cd9067247b7c2f7c88216f78dd42d358f673286a1faf5b6107411ef721bd8644add9a4ecb5debe11f4f5b7e00e201982cf29faea2b7376c229e8d2db2d0c546351b4778688c4546fbc026af6897c1f4779ce807f6e5a99d9ab8aa43a3cc83c81223300"/143, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000025000000bf0900000000000055090100000000009500000000000000be90000000000000b5020000000000008500000005000000b7000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 519.625023ms ago: executing program 6 (id=2419): setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x90) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="a21428c6c085", @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "bcc1d7", 0x0, 0x6c, 0xff, @loopback, @loopback}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x31, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = syz_io_uring_setup(0x1111, &(0x7f0000000300)={0x0, 0x0, 0x100, 0x0, 0x1fa}, &(0x7f0000000040), &(0x7f00000001c0)) clock_gettime(0x0, &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000400)={0xf0f02a, 0x2}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) syz_open_procfs(r3, 0x0) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) 519.113132ms ago: executing program 0 (id=2420): r0 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r0], &(0x7f0000000f40)=""/4089, 0x4a, 0xff9, 0x8, 0x101, 0x0, @void, @value}, 0x28) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000001280), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x6b) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) setrlimit(0x3, &(0x7f0000000180)={0x10001, 0x10}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r8 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f0000000380)={0x0, 0xffffffca, r9, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000280)={r10, 0xa, 0x7f, 0x0, 0x0, [], [0x0, 0x29, 0x2, 0x4], [], [0x0, 0x0, 0xfbfffffffffffffd]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000340)={0x83ff, 0x2, 0xb5}) link(0x0, 0x0) move_pages(r3, 0x3, &(0x7f0000000040)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f00001fd000/0x4000)=nil, &(0x7f0000285000/0x1000)=nil], 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000300)) close_range(r6, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b434"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, 0x0) 518.680656ms ago: executing program 7 (id=2421): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg$unix(r2, &(0x7f00000004c0)={&(0x7f0000000180), 0x6e, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0xa000}], 0x3}, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 508.766556ms ago: executing program 3 (id=2422): r0 = socket$xdp(0x2c, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) socket$kcm(0x1e, 0x1, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000280)={0x0, 0x2000, 0x800, 0x2}, 0x20) 508.345164ms ago: executing program 5 (id=2423): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x40000006) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ptrace$setsig(0x4203, r0, 0x200, &(0x7f0000000240)={0x1b, 0x1, 0x800}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) write(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x40001032, r2, 0x0) open(&(0x7f0000000180)='./file2\x00', 0x1cd842, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000057c0)={0x2020}, 0x2020) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000800000000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970005ca1d7608b565370cebc157dac89924dd23c5071bf0987dd01f8fe83fc8138c7623c9fb0448c8576462abf13ae0518073971918ac87612a714d6bba80e1054b929e9f121cc675464e9c669dc64ac0c81d00d5ec48c6f0cfad8d5da50d14968b460303e1d0fdf5da270f36799835561d97fbe308f461b18100a3006be95746849e05d5dbc1266dfd98b81b782d83df5b4ef755051d331bc5348092e408e1f3634109676a15068f0838d3cfd3a469ee36baea7b6f4d31018caf3a63a998bc74b1f315e9dae30cf2b22dbfaca39e0686107ceb3fe8b0aabb96ea428cf31de620544e74e99eee8dabaa730e3795d54b32b29553821cb220c4e"], 0x50}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 158.538507ms ago: executing program 7 (id=2424): sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PS_STATE, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x40854) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x20400, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x19}]}}}]}], {0x14, 0x10}}, 0xa0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001c80)="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", 0x231}], 0x1}, 0x44080) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000300)='vegas\x00', 0x6) sendmmsg$inet(r1, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000180)="57a4ee344c1b709018a38df02055772fa641fa186ba8dbaf28c9707440fe22d087f131a1c5ca799d522770b094285e935dbbef508bf235754bb9cf2a912af9283337aa91f819e8f0590788db6fbbd7bb7378260d59955755b99de612f6cc11cd0c355cb35cb919dc84c56623a4a23ee6253aab7efa8f3d4cf3b6af439838c5a578", 0x81}, {&(0x7f0000000380)="72de1879369e4f9daac1bb235192f199fcc52e603636d7e0727505ec32103468ee23f907207557bfa06e50cc19fa683bfc4a457a84f4abe7764ab349db947f2deefe3173fc3a777d179db50bf3e6c029b76032636b54bbe5ffd03435fbc8111a94db4778e1f9e0ecc9da93b0d23ebb22e5cc60612f3e6a2e00593248833030a790aed8ba0d5e4497430e3c7f76bdc89d4e5399428c76d3202d35bfbd93f6b428b86a6fc3665163f0c159a9388c3e8d0593a2a4b8b3874d3e4c272be6fad30eb00e2b4a41394c7d77b644b22dc1f00efd704cb0b2082ac7b0ce7dd51108ce", 0xde}, {&(0x7f0000000080)="79771a", 0x3}, {&(0x7f0000000480)="908e2be94cd629739fef22bc4f3a9b7facea1f86a11fde4d152cb9961def18dfb1ff08786727adc193fbf7251f0a06c5e0012773fca9c95cd3783b7554d09a30a2c0f962e81c7d659c392d9d423d02f84d126c80ef35e3ef1d9300047851166e94", 0x61}, {&(0x7f0000000500)="4e504d0c9277d33e7c98d372cd760091d9fbae4dfcb117b192386a4a727a0813422dd05c9dad49", 0x27}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x20004050) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 3 (id=2425): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, 0x0, &(0x7f00000002c0)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x4}]}}]}]}]}}]}, 0x70}}, 0x0) kernel console output (not intermixed with test programs): 53][ T58] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 614.490475][ T58] usb 6-1: New USB device found, idVendor=0bda, idProduct=0139, bcdDevice=db.d0 [ 614.503633][ T58] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.514305][ T5972] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 614.536518][ T58] usb 6-1: config 0 descriptor?? [ 614.547490][ T25] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 614.563808][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.574128][ T25] usb 4-1: Product: syz [ 614.600845][ T25] usb 4-1: Manufacturer: syz [ 614.605941][ T25] usb 4-1: SerialNumber: syz [ 614.623684][ T25] usb 4-1: config 0 descriptor?? [ 614.632035][ T25] rtl8150 4-1:0.0: couldn't find required endpoints [ 614.655564][ T25] rtl8150 4-1:0.0: probe with driver rtl8150 failed with error -5 [ 614.668756][ T58] rtsx_usb 6-1:0.0: probe with driver rtsx_usb failed with error -22 [ 614.787072][ T25] usb 6-1: USB disconnect, device number 24 [ 614.853653][ T3078] usb 4-1: USB disconnect, device number 69 [ 615.221594][T12917] as10x_usb: device has been detected [ 615.294268][T12917] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 615.349008][T12917] usb 7-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 615.640421][T13191] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2086'. [ 615.748244][T12917] as10x_usb: error during firmware upload part1 [ 615.755338][T12917] Registered device Elgato EyeTV DTT Deluxe [ 615.773190][T12917] usb 7-1: USB disconnect, device number 26 [ 615.863180][T12917] Unregistered device Elgato EyeTV DTT Deluxe [ 615.867272][T12917] as10x_usb: device has been disconnected [ 617.377655][ T42] block nbd2: Possible stuck request ffff888025e978c0: control (read@0,4096B). Runtime 30 seconds [ 617.468136][T12917] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 617.747991][T12917] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 617.884239][T12917] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 618.035218][T12917] usb 7-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 618.182765][ T1051] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.239294][T12917] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.540916][ T29] kauditd_printk_skb: 10508 callbacks suppressed [ 618.540963][ T29] audit: type=1400 audit(2000000223.784:341781): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=12450 comm="udevd" path="/run/udev/data" dev="tmpfs" ino=13 [ 618.624481][ T5972] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 618.704159][T12450] audit: audit_backlog=65 > audit_backlog_limit=64 [ 618.731010][T13099] audit: audit_backlog=65 > audit_backlog_limit=64 [ 618.801806][T10287] audit: audit_backlog=65 > audit_backlog_limit=64 [ 618.808616][T10287] audit: audit_lost=89648 audit_rate_limit=0 audit_backlog_limit=64 [ 618.816809][T10287] audit: backlog limit exceeded [ 618.846941][T12450] audit: audit_lost=89649 audit_rate_limit=0 audit_backlog_limit=64 [ 618.861989][ T5179] audit: audit_backlog=65 > audit_backlog_limit=64 [ 618.867137][T12917] usb 7-1: Product: syz [ 618.872836][T12917] usb 7-1: Manufacturer: syz [ 618.877502][T12917] usb 7-1: SerialNumber: syz [ 618.878909][T13099] audit: audit_lost=89650 audit_rate_limit=0 audit_backlog_limit=64 [ 618.883055][ T27] audit: audit_backlog=65 > audit_backlog_limit=64 [ 618.921360][T12917] usb 7-1: config 0 descriptor?? [ 618.978485][T12917] usb 7-1: can't set config #0, error -71 [ 618.992767][T12917] usb 7-1: USB disconnect, device number 27 [ 619.004439][T13214] xt_hashlimit: invalid interval [ 619.227650][ T1051] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.372274][ T1051] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.995922][ T25] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 621.149844][ T1051] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.202203][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 621.224469][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 621.243071][ T25] usb 7-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 621.275363][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.306699][ T25] usb 7-1: config 0 descriptor?? [ 621.354921][ T3441] wlan1: Trigger new scan to find an IBSS to join [ 621.800329][ T25] stadia 0003:18D1:9400.001A: unbalanced delimiter at end of report description [ 621.834377][ T25] stadia 0003:18D1:9400.001A: parse failed [ 621.854486][ T25] stadia 0003:18D1:9400.001A: probe with driver stadia failed with error -22 [ 621.895424][ T58] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 622.043160][ T25] usb 7-1: USB disconnect, device number 28 [ 622.088965][T13250] netlink: 'syz.0.2103': attribute type 3 has an invalid length. [ 622.096913][T13250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2103'. [ 622.807284][ T58] usb 4-1: unable to get BOS descriptor or descriptor too short [ 622.817550][ T58] usb 4-1: config 1 interface 0 altsetting 191 bulk endpoint 0x82 has invalid maxpacket 1024 [ 622.828966][ T58] usb 4-1: config 1 interface 0 altsetting 191 bulk endpoint 0x3 has invalid maxpacket 1023 [ 622.840137][ T58] usb 4-1: config 1 interface 0 altsetting 191 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 622.855425][ T58] usb 4-1: config 1 interface 0 has no altsetting 0 [ 622.864602][ T58] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 622.875671][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.884819][ T58] usb 4-1: Product: syz [ 622.889106][ T58] usb 4-1: Manufacturer: syz [ 622.893706][ T58] usb 4-1: SerialNumber: syz [ 622.901484][T13240] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 622.910406][T13240] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 623.148778][ T58] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 623.191324][ T58] usb 4-1: USB disconnect, device number 70 [ 623.893009][ T29] kauditd_printk_skb: 12766 callbacks suppressed [ 623.893026][ T29] audit: type=1400 audit(2000000228.770:347540): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13266 comm="modprobe" name="/" dev="sda1" ino=2 [ 623.953872][T13266] audit: audit_backlog=65 > audit_backlog_limit=64 [ 623.971589][T13266] audit: audit_lost=91989 audit_rate_limit=0 audit_backlog_limit=64 [ 624.013751][T13266] audit: backlog limit exceeded [ 624.024450][T13266] audit: audit_backlog=65 > audit_backlog_limit=64 [ 624.026590][T13268] audit: audit_backlog=65 > audit_backlog_limit=64 [ 624.045037][ T29] audit: type=1400 audit(2000000228.770:347541): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13266 comm="modprobe" name="etc" dev="sda1" ino=115 [ 624.063529][T13266] audit: audit_lost=91990 audit_rate_limit=0 audit_backlog_limit=64 [ 624.081938][T13266] audit: backlog limit exceeded [ 624.093156][ T5820] audit: audit_backlog=65 > audit_backlog_limit=64 [ 624.273218][ T1051] bond0 (unregistering): Released all slaves [ 624.308717][ T1051] bond1 (unregistering): Released all slaves [ 624.328222][T13243] mac80211_hwsim hwsim20 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 624.481397][ T1051] tipc: Disabling bearer [ 624.517603][ T1051] tipc: Left network mode [ 625.638939][T13207] wlan1: Trigger new scan to find an IBSS to join [ 626.338871][T13295] FAULT_INJECTION: forcing a failure. [ 626.338871][T13295] name failslab, interval 1, probability 0, space 0, times 0 [ 626.351691][T13295] CPU: 0 UID: 0 PID: 13295 Comm: syz.6.2113 Not tainted 6.14.0-rc2-syzkaller-00228-g04f41cbf03ec #0 [ 626.351712][T13295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 626.351722][T13295] Call Trace: [ 626.351728][T13295] [ 626.351735][T13295] dump_stack_lvl+0x241/0x360 [ 626.351761][T13295] ? __pfx_dump_stack_lvl+0x10/0x10 [ 626.351777][T13295] ? __pfx__printk+0x10/0x10 [ 626.351799][T13295] should_fail_ex+0x40a/0x550 [ 626.351815][T13295] should_failslab+0xac/0x100 [ 626.351830][T13295] ? skb_clone+0x20c/0x390 [ 626.351844][T13295] kmem_cache_alloc_noprof+0x70/0x380 [ 626.351861][T13295] skb_clone+0x20c/0x390 [ 626.351877][T13295] __netlink_deliver_tap+0x3c4/0x7f0 [ 626.351903][T13295] ? netlink_deliver_tap+0x2e/0x1b0 [ 626.351916][T13295] netlink_deliver_tap+0x19d/0x1b0 [ 626.351931][T13295] netlink_unicast+0x7c4/0x990 [ 626.351948][T13295] ? __pfx_netlink_unicast+0x10/0x10 [ 626.351961][T13295] ? __phys_addr_symbol+0x2f/0x70 [ 626.351974][T13295] ? __check_object_size+0x47a/0x730 [ 626.351991][T13295] netlink_sendmsg+0x8de/0xcb0 [ 626.352011][T13295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 626.352032][T13295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 626.352045][T13295] __sock_sendmsg+0x221/0x270 [ 626.352057][T13295] ____sys_sendmsg+0x53a/0x860 [ 626.352074][T13295] ? __pfx_____sys_sendmsg+0x10/0x10 [ 626.352087][T13295] ? __fget_files+0x2a/0x410 [ 626.352098][T13295] ? __fget_files+0x2a/0x410 [ 626.352112][T13295] __sys_sendmsg+0x269/0x350 [ 626.352128][T13295] ? __pfx___sys_sendmsg+0x10/0x10 [ 626.352156][T13295] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 626.352184][T13295] do_syscall_64+0xf3/0x230 [ 626.352196][T13295] ? clear_bhb_loop+0x35/0x90 [ 626.352211][T13295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.352224][T13295] RIP: 0033:0x7fb06a38cde9 [ 626.352233][T13295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 626.352241][T13295] RSP: 002b:00007fb06b10a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 626.352253][T13295] RAX: ffffffffffffffda RBX: 00007fb06a5a6080 RCX: 00007fb06a38cde9 [ 626.352260][T13295] RDX: 0000000000000000 RSI: 00004000000007c0 RDI: 0000000000000005 [ 626.352267][T13295] RBP: 00007fb06b10a090 R08: 0000000000000000 R09: 0000000000000000 [ 626.352273][T13295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 626.352279][T13295] R13: 0000000000000000 R14: 00007fb06a5a6080 R15: 00007ffc29b80748 [ 626.352294][T13295] [ 626.956754][ T5973] wlan1: Trigger new scan to find an IBSS to join [ 627.148195][T13299] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2114'. [ 627.227603][ T1051] hsr_slave_0: left promiscuous mode [ 627.252371][ T1051] hsr_slave_1: left promiscuous mode [ 627.307037][ T1051] veth0_macvtap: left promiscuous mode [ 627.340225][ T1051] veth1_vlan: left promiscuous mode [ 627.345526][ T1051] veth0_vlan: left promiscuous mode [ 627.999519][ T52] wlan1: Creating new IBSS network, BSSID 92:60:e3:14:d3:87 [ 628.479168][ T58] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 628.881927][T13325] delete_channel: no stack [ 628.977690][ T58] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 629.004909][ T58] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 629.042108][ T58] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 629.103404][ T58] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 629.139559][ T58] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 629.164250][ T58] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.196911][ T58] usb 6-1: config 0 descriptor?? [ 629.255333][ T29] kauditd_printk_skb: 6580 callbacks suppressed [ 629.255346][ T29] audit: type=1400 audit(2000000233.802:353018): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13331 comm="kworker/u8:4" name="/" dev="sda1" ino=2 [ 629.300396][ T29] audit: type=1400 audit(2000000233.802:353019): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13331 comm="kworker/u8:4" name="sbin" dev="sda1" ino=1208 [ 629.337206][T13331] audit: audit_backlog=65 > audit_backlog_limit=64 [ 629.341046][ T29] audit: type=1400 audit(2000000233.802:353020): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13331 comm="kworker/u8:4" name="modprobe" dev="sda1" ino=1251 [ 629.386370][T13331] audit: audit_lost=92362 audit_rate_limit=0 audit_backlog_limit=64 [ 629.394122][ T29] audit: type=1400 audit(2000000233.802:353021): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=13331 comm="kworker/u8:4" path="/sbin/modprobe" dev="sda1" ino=1251 [ 629.434921][T13331] audit: backlog limit exceeded [ 629.446424][T13331] audit: audit_backlog=65 > audit_backlog_limit=64 [ 629.467670][T13331] audit: audit_lost=92363 audit_rate_limit=0 audit_backlog_limit=64 [ 629.474714][ T29] audit: type=1400 audit(2000000233.802:353022): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13331 comm="kworker/u8:4" name="/" dev="sda1" ino=2 [ 629.551735][ T58] hdpvr 6-1:0.0: firmware version 0x6d dated ´e\@^1ypHoAqyάۛXH [ 629.579268][ T58] hdpvr 6-1:0.0: untested firmware, the driver might not work. [ 630.251510][ T35] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 630.490015][ T58] hdpvr 6-1:0.0: Could not setup controls [ 630.519866][ T58] hdpvr 6-1:0.0: registering videodev failed [ 630.589847][ T58] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -71 [ 630.645518][ T58] usb 6-1: USB disconnect, device number 25 [ 630.906308][T12917] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 630.930177][ T5973] wlan1: Trigger new scan to find an IBSS to join [ 631.120403][T12917] usb 4-1: Using ep0 maxpacket: 32 [ 631.168109][T12917] usb 4-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice= 6.59 [ 631.227750][T12917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.268148][T12917] usb 4-1: Product: syz [ 631.285224][T12917] usb 4-1: Manufacturer: syz [ 631.719707][T12917] usb 4-1: SerialNumber: syz [ 631.729193][T12917] usb 4-1: config 0 descriptor?? [ 631.964430][ T5901] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 631.994994][T12917] pegasus 4-1:0.0: probe with driver pegasus failed with error -71 [ 632.057434][T12917] usb 4-1: USB disconnect, device number 71 [ 632.068225][T13363] ptrace attach of "./syz-executor exec"[13364] was attempted by "./syz-executor exec"[13363] [ 632.173922][ T5901] usb 6-1: config 9 has an invalid interface number: 176 but max is 0 [ 632.207233][ T5901] usb 6-1: config 9 has no interface number 0 [ 632.228216][ T5901] usb 6-1: config 9 interface 176 altsetting 6 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 632.250083][ T5901] usb 6-1: config 9 interface 176 has no altsetting 0 [ 632.258101][ T5926] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 632.279962][ T5901] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=a4.c3 [ 632.299695][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.314196][ T5901] usb 6-1: Product: syz [ 632.321000][ T5901] usb 6-1: Manufacturer: syz [ 632.325866][ T5901] usb 6-1: SerialNumber: syz [ 632.341811][ T1051] wlan1: Creating new IBSS network, BSSID b2:06:30:e6:5e:51 [ 632.434822][ T5926] usb 8-1: Using ep0 maxpacket: 32 [ 632.447596][ T5926] usb 8-1: config 0 has an invalid interface number: 12 but max is 0 [ 632.462219][ T5926] usb 8-1: config 0 has no interface number 0 [ 632.495415][ T5926] usb 8-1: too many endpoints for config 0 interface 12 altsetting 251: 255, using maximum allowed: 30 [ 632.558716][ T5926] usb 8-1: config 0 interface 12 altsetting 251 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 632.638033][ T5926] usb 8-1: config 0 interface 12 has no altsetting 0 [ 632.655798][ T5926] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 632.675950][ T5926] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.714473][ T5926] usb 8-1: Product: syz [ 632.734894][ T5926] usb 8-1: Manufacturer: syz [ 632.762029][ T5926] usb 8-1: SerialNumber: syz [ 632.775285][T13353] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2126'. [ 632.802858][ T5901] usb 6-1: no audio or video endpoints found [ 632.814490][ T5926] usb 8-1: config 0 descriptor?? [ 632.852512][ T5901] usb 6-1: USB disconnect, device number 26 [ 633.723150][T13360] netlink: 'syz.7.2127': attribute type 1 has an invalid length. [ 634.000815][ T5926] f81534 8-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 634.097166][T13411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2139'. [ 634.754598][ T5926] f81534 8-1:0.12: f81534_find_config_idx: read failed: -71 [ 634.762268][ T5926] f81534 8-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 634.776174][ T29] kauditd_printk_skb: 16171 callbacks suppressed [ 634.776192][ T29] audit: type=1400 audit(2000000238.947:363327): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=13401 comm="syz.5.2138" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 634.861794][ T5926] f81534 8-1:0.12: probe with driver f81534 failed with error -71 [ 634.866040][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 634.876197][ C1] audit: audit_lost=94326 audit_rate_limit=0 audit_backlog_limit=64 [ 634.876399][ T5926] usb 8-1: USB disconnect, device number 2 [ 634.884218][ C1] audit: backlog limit exceeded [ 634.884452][T13101] audit: audit_backlog=65 > audit_backlog_limit=64 [ 634.893740][T12470] audit: audit_backlog=65 > audit_backlog_limit=64 [ 634.895256][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 634.901658][ T29] audit: type=1400 audit(2000000239.041:363328): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5197 comm="udevd" name="bus" dev="sysfs" ino=11 [ 634.907914][ C1] audit: audit_lost=94327 audit_rate_limit=0 audit_backlog_limit=64 [ 634.907931][ C1] audit: backlog limit exceeded [ 634.957197][ T5873] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 635.160407][T13421] overlayfs: conflicting options: userxattr,redirect_dir=follow [ 635.171828][ T5873] usb 6-1: Using ep0 maxpacket: 32 [ 635.189653][ T5873] usb 6-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 635.205015][ T5873] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.276117][ T5873] usb 6-1: Product: syz [ 635.305837][ T5873] usb 6-1: Manufacturer: syz [ 635.334782][ T5873] usb 6-1: SerialNumber: syz [ 635.409683][ T5873] usb 6-1: config 0 descriptor?? [ 635.445387][ T5873] rtl8150 6-1:0.0: couldn't find required endpoints [ 635.496759][ T5873] rtl8150 6-1:0.0: probe with driver rtl8150 failed with error -5 [ 635.507631][T13424] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 635.662322][ T5873] usb 6-1: USB disconnect, device number 27 [ 636.157372][T13439] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2147'. [ 636.451085][T13454] FAULT_INJECTION: forcing a failure. [ 636.451085][T13454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 636.508184][T13454] CPU: 1 UID: 0 PID: 13454 Comm: syz.7.2153 Not tainted 6.14.0-rc2-syzkaller-00228-g04f41cbf03ec #0 [ 636.508210][T13454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 636.508221][T13454] Call Trace: [ 636.508229][T13454] [ 636.508236][T13454] dump_stack_lvl+0x241/0x360 [ 636.508262][T13454] ? __pfx_dump_stack_lvl+0x10/0x10 [ 636.508280][T13454] ? __pfx__printk+0x10/0x10 [ 636.508304][T13454] ? __pfx_lock_release+0x10/0x10 [ 636.508334][T13454] should_fail_ex+0x40a/0x550 [ 636.508359][T13454] _copy_from_user+0x2d/0xb0 [ 636.508380][T13454] __sys_bpf+0x1be/0x820 [ 636.508402][T13454] ? __pfx___sys_bpf+0x10/0x10 [ 636.508434][T13454] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 636.508458][T13454] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 636.508481][T13454] ? do_syscall_64+0x100/0x230 [ 636.508504][T13454] __x64_sys_bpf+0x7c/0x90 [ 636.508524][T13454] do_syscall_64+0xf3/0x230 [ 636.508542][T13454] ? clear_bhb_loop+0x35/0x90 [ 636.508566][T13454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.508585][T13454] RIP: 0033:0x7ff7b4b8cde9 [ 636.508601][T13454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 636.508616][T13454] RSP: 002b:00007ff7b5ac9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 636.508634][T13454] RAX: ffffffffffffffda RBX: 00007ff7b4da5fa0 RCX: 00007ff7b4b8cde9 [ 636.508647][T13454] RDX: 0000000000000094 RSI: 0000400000004340 RDI: 0000000000000005 [ 636.508658][T13454] RBP: 00007ff7b5ac9090 R08: 0000000000000000 R09: 0000000000000000 [ 636.508669][T13454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 636.508679][T13454] R13: 0000000000000000 R14: 00007ff7b4da5fa0 R15: 00007ffd0eaf5bd8 [ 636.508705][T13454] [ 636.731539][T13457] FAULT_INJECTION: forcing a failure. [ 636.731539][T13457] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 636.745436][T13457] CPU: 1 UID: 0 PID: 13457 Comm: syz.5.2154 Not tainted 6.14.0-rc2-syzkaller-00228-g04f41cbf03ec #0 [ 636.745453][T13457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 636.745459][T13457] Call Trace: [ 636.745463][T13457] [ 636.745468][T13457] dump_stack_lvl+0x241/0x360 [ 636.745485][T13457] ? __pfx_dump_stack_lvl+0x10/0x10 [ 636.745495][T13457] ? __pfx__printk+0x10/0x10 [ 636.745513][T13457] ? snprintf+0xda/0x120 [ 636.745529][T13457] should_fail_ex+0x40a/0x550 [ 636.745545][T13457] _copy_to_user+0x31/0xb0 [ 636.745558][T13457] simple_read_from_buffer+0xca/0x150 [ 636.745574][T13457] proc_fail_nth_read+0x1e9/0x250 [ 636.745590][T13457] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 636.745606][T13457] ? rw_verify_area+0x243/0x630 [ 636.745618][T13457] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 636.745633][T13457] vfs_read+0x1f8/0xb40 [ 636.745645][T13457] ? fdget_pos+0x254/0x320 [ 636.745655][T13457] ? __pfx___mutex_lock+0x10/0x10 [ 636.745667][T13457] ? __pfx_vfs_read+0x10/0x10 [ 636.745677][T13457] ? do_sys_openat2+0x17a/0x1d0 [ 636.745688][T13457] ? __fget_files+0x2a/0x410 [ 636.745698][T13457] ? __fget_files+0x395/0x410 [ 636.745706][T13457] ? __fget_files+0x2a/0x410 [ 636.745720][T13457] ksys_read+0x18f/0x2b0 [ 636.745733][T13457] ? __pfx_ksys_read+0x10/0x10 [ 636.745744][T13457] ? do_syscall_64+0x100/0x230 [ 636.745758][T13457] ? do_syscall_64+0xb6/0x230 [ 636.745770][T13457] do_syscall_64+0xf3/0x230 [ 636.745781][T13457] ? clear_bhb_loop+0x35/0x90 [ 636.745797][T13457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.745809][T13457] RIP: 0033:0x7ff9d7f8b7fc [ 636.745819][T13457] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 636.745827][T13457] RSP: 002b:00007ff9d8d31030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 636.745838][T13457] RAX: ffffffffffffffda RBX: 00007ff9d81a5fa0 RCX: 00007ff9d7f8b7fc [ 636.745845][T13457] RDX: 000000000000000f RSI: 00007ff9d8d310a0 RDI: 0000000000000003 [ 636.745851][T13457] RBP: 00007ff9d8d31090 R08: 0000000000000000 R09: 0000000000000000 [ 636.745857][T13457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 636.745862][T13457] R13: 0000000000000001 R14: 00007ff9d81a5fa0 R15: 00007ffd19f59f78 [ 636.745876][T13457] [ 637.629206][T13477] siw: device registration error -23 [ 638.460792][ T35] wlan1: Trigger new scan to find an IBSS to join [ 639.843655][ T25] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 639.906881][T13514] overlayfs: failed to resolve './file1': -2 [ 640.025387][ T25] usb 8-1: Using ep0 maxpacket: 32 [ 640.084319][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 640.382023][T13513] audit_log_start: 23422 callbacks suppressed [ 640.382034][T13513] audit: audit_backlog=65 > audit_backlog_limit=64 [ 640.387550][ T29] audit: type=1400 audit(2000000244.204:373759): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13515 comm="syz.5.2167" name="newroot" dev="tmpfs" ino=2 [ 640.393342][T13514] audit: audit_backlog=65 > audit_backlog_limit=64 [ 640.394810][ T5179] audit: audit_backlog=65 > audit_backlog_limit=64 [ 640.413848][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 640.463338][ T29] audit: type=1400 audit(2000000244.204:373760): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13515 comm="syz.5.2167" name="/" dev="devtmpfs" ino=1 [ 640.463343][T13513] audit: audit_lost=98720 audit_rate_limit=0 audit_backlog_limit=64 [ 640.463376][ T29] audit: type=1400 audit(2000000244.204:373761): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13515 comm="syz.5.2167" name="cpu" dev="devtmpfs" ino=85 [ 640.531859][ T5826] audit: audit_backlog=65 > audit_backlog_limit=64 [ 640.543977][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 640.550542][ C1] audit: audit_lost=98721 audit_rate_limit=0 audit_backlog_limit=64 [ 640.580589][ T25] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 640.657876][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.690067][ T25] usb 8-1: config 0 descriptor?? [ 640.998033][T12917] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 641.091224][T13532] mkiss: ax0: crc mode is auto. [ 641.160931][T12917] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 641.175726][T12917] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 641.233851][T12917] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 641.278644][T12917] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 641.299476][T12917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.344370][T13524] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 641.437504][T13543] FAULT_INJECTION: forcing a failure. [ 641.437504][T13543] name failslab, interval 1, probability 0, space 0, times 0 [ 641.445278][T13503] kvm: kvm [13502]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000000 [ 641.471010][T13543] CPU: 0 UID: 0 PID: 13543 Comm: syz.6.2173 Not tainted 6.14.0-rc2-syzkaller-00228-g04f41cbf03ec #0 [ 641.471034][T13543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 641.471044][T13543] Call Trace: [ 641.471050][T13543] [ 641.471057][T13543] dump_stack_lvl+0x241/0x360 [ 641.471083][T13543] ? __pfx_dump_stack_lvl+0x10/0x10 [ 641.471100][T13543] ? __pfx__printk+0x10/0x10 [ 641.471123][T13543] ? fs_reclaim_acquire+0x93/0x130 [ 641.471142][T13543] ? __pfx___might_resched+0x10/0x10 [ 641.471164][T13543] should_fail_ex+0x40a/0x550 [ 641.471189][T13543] should_failslab+0xac/0x100 [ 641.471212][T13543] __kmalloc_noprof+0xdd/0x4c0 [ 641.471227][T13543] ? kstrtouint_from_user+0x128/0x190 [ 641.471248][T13543] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 641.471270][T13543] tomoyo_realpath_from_path+0xcf/0x5e0 [ 641.471297][T13543] tomoyo_path_number_perm+0x239/0x770 [ 641.471318][T13543] ? __lock_acquire+0x1397/0x2100 [ 641.471343][T13543] ? tomoyo_path_number_perm+0x209/0x770 [ 641.471366][T13543] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 641.471426][T13543] ? __fget_files+0x2a/0x410 [ 641.471447][T13543] ? __fget_files+0x2a/0x410 [ 641.471468][T13543] security_file_ioctl+0xc6/0x2a0 [ 641.471513][T13543] __se_sys_ioctl+0x46/0x170 [ 641.471536][T13543] do_syscall_64+0xf3/0x230 [ 641.471555][T13543] ? clear_bhb_loop+0x35/0x90 [ 641.471585][T13543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.471606][T13543] RIP: 0033:0x7fb06a38cde9 [ 641.471622][T13543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 641.471637][T13543] RSP: 002b:00007fb06b12b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 641.471656][T13543] RAX: ffffffffffffffda RBX: 00007fb06a5a5fa0 RCX: 00007fb06a38cde9 [ 641.471669][T13543] RDX: 0000400000000000 RSI: 000000004014563c RDI: 0000000000000006 [ 641.471681][T13543] RBP: 00007fb06b12b090 R08: 0000000000000000 R09: 0000000000000000 [ 641.471692][T13543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 641.471702][T13543] R13: 0000000000000000 R14: 00007fb06a5a5fa0 R15: 00007ffc29b80748 [ 641.471729][T13543] [ 641.471743][T13543] ERROR: Out of memory at tomoyo_realpath_from_path. [ 641.484704][ T25] savu 0003:1E7D:2D5A.001B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.7-1/input0 [ 641.542716][T13503] kvm: kvm [13502]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 641.750279][T13503] kvm: kvm [13502]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x1 [ 642.156718][T13503] kvm: kvm [13502]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 642.730342][ T35] wlan1: Trigger new scan to find an IBSS to join [ 642.764953][T13557] netlink: 'syz.6.2175': attribute type 3 has an invalid length. [ 643.099409][T13503] kvm: kvm [13502]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x1 [ 643.118039][T12917] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 643.137439][T12917] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input48 [ 643.169494][T13503] kvm: kvm [13502]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x1 [ 643.210262][T13503] kvm: kvm [13502]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4001 [ 643.227520][T13503] kvm_intel: kvm [13502]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x1d9) = 0x1 [ 643.253740][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 643.264312][ T5926] usb 8-1: reset high-speed USB device number 3 using dummy_hcd [ 643.272996][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 643.345511][T12917] usb 4-1: USB disconnect, device number 72 [ 643.351551][ C1] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 643.794246][T13565] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2177'. [ 643.883383][ T1051] wlan1: Creating new IBSS network, BSSID ba:d4:55:84:c0:16 [ 645.231831][T13574] FAULT_INJECTION: forcing a failure. [ 645.231831][T13574] name failslab, interval 1, probability 0, space 0, times 0 [ 645.284344][T13574] CPU: 0 UID: 0 PID: 13574 Comm: syz.3.2179 Not tainted 6.14.0-rc2-syzkaller-00228-g04f41cbf03ec #0 [ 645.284368][T13574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 645.284379][T13574] Call Trace: [ 645.284389][T13574] [ 645.284396][T13574] dump_stack_lvl+0x241/0x360 [ 645.284430][T13574] ? __pfx_dump_stack_lvl+0x10/0x10 [ 645.284445][T13574] ? __pfx__printk+0x10/0x10 [ 645.284469][T13574] ? __kmalloc_noprof+0xb5/0x4c0 [ 645.284485][T13574] ? __pfx___might_resched+0x10/0x10 [ 645.284508][T13574] should_fail_ex+0x40a/0x550 [ 645.284534][T13574] should_failslab+0xac/0x100 [ 645.284558][T13574] __kmalloc_noprof+0xdd/0x4c0 [ 645.284573][T13574] ? do_handle_open+0x50b/0xb00 [ 645.284599][T13574] do_handle_open+0x50b/0xb00 [ 645.284622][T13574] ? __pfx_do_handle_open+0x10/0x10 [ 645.284645][T13574] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 645.284669][T13574] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 645.284689][T13574] ? do_syscall_64+0x100/0x230 [ 645.284710][T13574] ? do_syscall_64+0xb6/0x230 [ 645.284730][T13574] do_syscall_64+0xf3/0x230 [ 645.284748][T13574] ? clear_bhb_loop+0x35/0x90 [ 645.284772][T13574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.284792][T13574] RIP: 0033:0x7fafe098cde9 [ 645.284807][T13574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 645.284822][T13574] RSP: 002b:00007fafe186d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 645.284840][T13574] RAX: ffffffffffffffda RBX: 00007fafe0ba5fa0 RCX: 00007fafe098cde9 [ 645.284853][T13574] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000003 [ 645.284864][T13574] RBP: 00007fafe186d090 R08: 0000000000000000 R09: 0000000000000000 [ 645.284874][T13574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 645.284884][T13574] R13: 0000000000000000 R14: 00007fafe0ba5fa0 R15: 00007ffc083f02b8 [ 645.284910][T13574] [ 645.746824][T13578] audit_log_start: 14434 callbacks suppressed [ 645.746840][T13578] audit: audit_backlog=65 > audit_backlog_limit=64 [ 645.754003][ T29] audit: type=1400 audit(2000000249.180:379739): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13577 comm="syz-executor" name="579" dev="tmpfs" ino=3087 [ 645.761090][T13578] audit: audit_lost=101543 audit_rate_limit=0 audit_backlog_limit=64 [ 645.779806][T13577] audit: audit_backlog=65 > audit_backlog_limit=64 [ 645.803177][ T5820] audit: audit_backlog=65 > audit_backlog_limit=64 [ 645.807862][ T5197] audit: audit_backlog=65 > audit_backlog_limit=64 [ 645.810877][ T5820] audit: audit_lost=101544 audit_rate_limit=0 audit_backlog_limit=64 [ 645.817401][T13020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 645.831337][T13577] audit: audit_lost=101545 audit_rate_limit=0 audit_backlog_limit=64 [ 645.831364][T13577] audit: backlog limit exceeded [ 646.037993][T13560] delete_channel: no stack [ 647.089033][ T5873] usb 8-1: USB disconnect, device number 3 [ 647.476477][T13601] usb 4-1: new low-speed USB device number 73 using dummy_hcd [ 647.987406][T13601] usb 4-1: device descriptor read/64, error -71 [ 648.393778][T13601] usb 4-1: new low-speed USB device number 74 using dummy_hcd [ 648.824205][ T1051] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 648.932358][T13620] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2189'. [ 648.952773][T13620] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2189'. [ 649.377127][T13601] usb 4-1: device descriptor read/64, error -71 [ 649.502546][T13601] usb usb4-port1: attempt power cycle [ 650.712218][T12917] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 650.729205][ T42] block nbd2: Possible stuck request ffff888025e978c0: control (read@0,4096B). Runtime 60 seconds [ 651.101098][ T29] kauditd_printk_skb: 9126 callbacks suppressed [ 651.101268][ T29] audit: type=1400 audit(2000000254.232:383234): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=5197 comm="udevd" path="/etc/udev/hwdb.bin" dev="sda1" ino=235 [ 651.503039][T13630] audit: audit_backlog=65 > audit_backlog_limit=64 [ 651.511038][T13635] audit: audit_backlog=65 > audit_backlog_limit=64 [ 651.517806][ T5197] audit: audit_backlog=65 > audit_backlog_limit=64 [ 651.517980][ T5179] audit: audit_backlog=65 > audit_backlog_limit=64 [ 651.524393][ T5197] audit: audit_lost=103439 audit_rate_limit=0 audit_backlog_limit=64 [ 651.539109][T13635] audit: audit_lost=103440 audit_rate_limit=0 audit_backlog_limit=64 [ 651.539129][T13635] audit: backlog limit exceeded [ 651.539156][T13635] audit: audit_backlog=65 > audit_backlog_limit=64 [ 651.560674][T13099] audit: audit_backlog=65 > audit_backlog_limit=64 [ 651.784369][T12917] usb 8-1: Using ep0 maxpacket: 32 [ 651.800025][T12917] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 651.816704][T12917] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 651.826557][T12917] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 651.870197][T12917] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.894944][T12917] usb 8-1: config 0 descriptor?? [ 652.082131][T13654] netlink: 'syz.5.2199': attribute type 12 has an invalid length. [ 652.195909][T13657] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2200'. [ 652.409330][T13664] netlink: 'syz.0.2201': attribute type 7 has an invalid length. [ 652.588171][T13669] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 652.683344][ T5873] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 652.694870][T13634] kvm: kvm [13632]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000001 [ 652.718753][T12917] savu 0003:1E7D:2D5A.001C: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.7-1/input0 [ 652.728440][T13676] FAULT_INJECTION: forcing a failure. [ 652.728440][T13676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 652.758139][T13634] kvm: kvm [13632]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 652.766890][T13634] kvm: kvm [13632]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x1 [ 652.801461][T13676] CPU: 0 UID: 0 PID: 13676 Comm: syz.6.2205 Not tainted 6.14.0-rc2-syzkaller-00228-g04f41cbf03ec #0 [ 652.801485][T13676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 652.801507][T13676] Call Trace: [ 652.801514][T13676] [ 652.801522][T13676] dump_stack_lvl+0x241/0x360 [ 652.801547][T13676] ? __pfx_dump_stack_lvl+0x10/0x10 [ 652.801563][T13676] ? __pfx__printk+0x10/0x10 [ 652.801587][T13676] ? __pfx_lock_release+0x10/0x10 [ 652.801616][T13676] should_fail_ex+0x40a/0x550 [ 652.801642][T13676] _copy_from_user+0x2d/0xb0 [ 652.801661][T13676] copy_msghdr_from_user+0xae/0x680 [ 652.801685][T13676] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 652.801701][T13676] ? __fget_files+0x2a/0x410 [ 652.801719][T13676] ? __fget_files+0x2a/0x410 [ 652.801741][T13676] __sys_sendmsg+0x209/0x350 [ 652.801768][T13676] ? __pfx___sys_sendmsg+0x10/0x10 [ 652.801800][T13676] ? do_sys_openat2+0x17a/0x1d0 [ 652.801839][T13676] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 652.801859][T13676] ? do_syscall_64+0x100/0x230 [ 652.801879][T13676] ? do_syscall_64+0xb6/0x230 [ 652.801898][T13676] do_syscall_64+0xf3/0x230 [ 652.801914][T13676] ? clear_bhb_loop+0x35/0x90 [ 652.801935][T13676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.801954][T13676] RIP: 0033:0x7fb06a38cde9 [ 652.801968][T13676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 652.801981][T13676] RSP: 002b:00007fb06b12b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 652.802000][T13676] RAX: ffffffffffffffda RBX: 00007fb06a5a5fa0 RCX: 00007fb06a38cde9 [ 652.802011][T13676] RDX: 0000000000000000 RSI: 0000400000000280 RDI: 0000000000000003 [ 652.802021][T13676] RBP: 00007fb06b12b090 R08: 0000000000000000 R09: 0000000000000000 [ 652.802031][T13676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 652.802041][T13676] R13: 0000000000000000 R14: 00007fb06a5a5fa0 R15: 00007ffc29b80748 [ 652.802062][T13676] [ 653.081224][T13634] kvm: kvm [13632]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 653.111920][ T5873] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.123104][ T5873] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.132926][ T5873] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 653.151117][ T5873] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 653.160238][ T5873] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.018193][ T5973] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 654.029813][ T5873] usb 6-1: config 0 descriptor?? [ 654.056162][T13634] kvm: kvm [13632]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x1 [ 654.876201][ T5873] usbhid 6-1:0.0: can't add hid device: -71 [ 654.882240][ T5873] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 654.907477][ T5873] usb 6-1: USB disconnect, device number 28 [ 654.980931][T13696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2210'. [ 655.030067][T13696] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 655.050743][T12917] usb 8-1: USB disconnect, device number 4 [ 655.059784][T13696] macvtap1: entered promiscuous mode [ 655.480209][T13696] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 656.061464][T13601] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 656.466055][ T29] kauditd_printk_skb: 16138 callbacks suppressed [ 656.466074][ T29] audit: type=1400 audit(2000000259.255:389557): lsm=SMACK fn=smack_inode_rmdir action=granted subject="_" object="_" requested=w pid=13020 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 656.495630][ T5491] audit: audit_backlog=65 > audit_backlog_limit=64 [ 656.510288][T13601] usb 6-1: Using ep0 maxpacket: 16 [ 656.515819][T13708] audit: audit_backlog=65 > audit_backlog_limit=64 [ 656.516171][T13696] audit: audit_backlog=65 > audit_backlog_limit=64 [ 656.523098][T13718] audit: audit_backlog=65 > audit_backlog_limit=64 [ 656.541931][ T5491] audit: audit_lost=106726 audit_rate_limit=0 audit_backlog_limit=64 [ 656.543033][T13723] audit: audit_backlog=65 > audit_backlog_limit=64 [ 656.550034][ T5491] audit: backlog limit exceeded [ 656.561937][T13708] audit: audit_lost=106727 audit_rate_limit=0 audit_backlog_limit=64 [ 656.570730][T13718] audit: audit_lost=106728 audit_rate_limit=0 audit_backlog_limit=64 [ 656.582632][T13601] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 656.594053][ T5839] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 656.615684][T13601] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 656.671593][T13601] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 656.687562][T13601] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.788051][ T5839] usb 7-1: Using ep0 maxpacket: 8 [ 656.789377][T13601] usb 6-1: Product: syz [ 656.812165][T13601] usb 6-1: Manufacturer: syz [ 656.815963][ T5839] usb 7-1: config 0 has an invalid interface number: 177 but max is 0 [ 656.830967][T13601] usb 6-1: SerialNumber: syz [ 656.883038][ T5839] usb 7-1: config 0 has no interface number 0 [ 656.884365][T13601] usb 6-1: config 0 descriptor?? [ 656.899025][T13601] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 656.921794][T13601] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 656.941683][ T5839] usb 7-1: config 0 interface 177 altsetting 0 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 657.042387][ T5839] usb 7-1: config 0 interface 177 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 657.135744][ T5839] usb 7-1: config 0 interface 177 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 657.273579][ T5839] usb 7-1: config 0 interface 177 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 657.333122][ T5839] usb 7-1: config 0 interface 177 altsetting 0 endpoint 0x7 has an invalid bInterval 182, changing to 7 [ 657.397350][ T5839] usb 7-1: config 0 interface 177 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 657.433996][ T5839] usb 7-1: config 0 interface 177 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 657.472040][ T5839] usb 7-1: config 0 interface 177 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 657.524959][ T5839] usb 7-1: config 0 interface 177 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 657.548152][ T5839] usb 7-1: config 0 interface 177 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 657.573957][ T5839] usb 7-1: New USB device found, idVendor=0471, idProduct=032d, bcdDevice=d5.bf [ 657.584052][ T5839] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.598091][ T5839] usb 7-1: Product: syz [ 657.611315][ T5839] usb 7-1: Manufacturer: syz [ 657.615941][ T5839] usb 7-1: SerialNumber: syz [ 657.630008][ T5839] usb 7-1: config 0 descriptor?? [ 657.638849][T13718] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 657.647543][T13718] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 657.663621][T13718] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 657.684823][T13718] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 657.734617][T13601] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 657.746311][T13601] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 657.968256][ T5839] gspca_main: gspca_zc3xx-2.14.0 probing 0471:032d [ 657.986629][ T5839] gspca_zc3xx: reg_w_i err -71 [ 658.278071][T13601] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 658.295266][T13601] em28xx 6-1:0.0: No AC97 audio processor [ 658.763569][T13759] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 659.151839][T13738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.165272][ T5839] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 659.200150][ T5839] gspca_zc3xx 7-1:0.177: probe with driver gspca_zc3xx failed with error -71 [ 659.257602][T13738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.273591][ T5839] usb 7-1: USB disconnect, device number 29 [ 659.427266][T12470] udevd[12470]: setting mode of /dev/bus/usb/007/029 to 020664 failed: No such file or directory [ 659.459158][T12470] udevd[12470]: setting owner of /dev/bus/usb/007/029 to uid=0, gid=0 failed: No such file or directory [ 660.088785][ T5973] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 660.139058][ T5839] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 660.251084][T13778] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 660.328609][ T5839] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 660.358646][ T5839] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 660.381394][ T5839] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 660.402999][ T5839] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 660.422249][ T5839] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.451026][ T5839] usb 7-1: config 0 descriptor?? [ 660.527921][ T5874] usb 6-1: USB disconnect, device number 29 [ 660.550480][ T5874] em28xx 6-1:0.0: Disconnecting em28xx [ 660.592713][ T5874] em28xx 6-1:0.0: Freeing device [ 660.869226][ T5839] usbhid 7-1:0.0: can't add hid device: -71 [ 660.875338][ T5839] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 660.903552][ T5839] usb 7-1: USB disconnect, device number 30 [ 660.922377][T13099] udevd[13099]: setting owner of /dev/bus/usb/007/030 to uid=0, gid=0 failed: No such file or directory [ 661.569613][T13786] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 661.682201][T13786] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 661.834245][ T29] kauditd_printk_skb: 12063 callbacks suppressed [ 661.834263][ T29] audit: type=1400 audit(2000000264.278:399623): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11139 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 661.866701][T13786] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 661.870977][T11139] audit: audit_backlog=65 > audit_backlog_limit=64 [ 661.872761][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 661.885696][ C1] audit: audit_lost=107397 audit_rate_limit=0 audit_backlog_limit=64 [ 661.887380][ T5197] audit: audit_backlog=65 > audit_backlog_limit=64 [ 661.893809][ C1] audit: backlog limit exceeded [ 661.906393][ T5197] audit: audit_lost=107398 audit_rate_limit=0 audit_backlog_limit=64 [ 661.907925][ T29] audit: type=1400 audit(2000000264.278:399624): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11139 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 661.915121][T11139] audit: audit_lost=107399 audit_rate_limit=0 audit_backlog_limit=64 [ 661.933963][ T29] audit: type=1400 audit(2000000264.278:399625): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11139 comm="syz-executor" name="133" dev="tmpfs" ino=735 [ 661.995232][T13786] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 662.104631][T13786] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 662.111818][T13786] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 662.552974][ T5873] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 662.949031][ T5873] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 663.007587][ T52] wlan1: Trigger new scan to find an IBSS to join [ 663.644879][ T5873] usb 7-1: New USB device found, idVendor=056a, idProduct=0336, bcdDevice= 0.00 [ 663.655375][ T5873] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.674184][ T5873] usb 7-1: config 0 descriptor?? [ 664.100447][T13601] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 664.138175][ T5873] wacom 0003:056A:0336.001D: unknown main item tag 0x0 [ 664.145178][ T25] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 664.163804][ T5873] wacom 0003:056A:0336.001D: unknown main item tag 0x0 [ 664.184074][ T5873] wacom 0003:056A:0336.001D: hidraw0: USB HID v0.00 Device [HID 056a:0336] on usb-dummy_hcd.6-1/input0 [ 664.295892][T13601] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 664.305216][ T25] usb 8-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 664.336284][T13601] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 664.342006][ T25] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 664.369625][T13601] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 664.393655][T13601] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 664.416198][T13601] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.425185][ T25] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 664.462204][ T25] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 664.472251][ T35] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 664.483056][T13821] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 664.516527][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.555579][T13825] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 664.867777][ T5839] usb 7-1: USB disconnect, device number 31 [ 665.069720][T13827] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 665.468853][ T5873] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 665.469837][ T25] aiptek 8-1:17.0: Aiptek using 400 ms programming speed [ 665.487010][ T25] input: Aiptek as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:17.0/input/input53 [ 665.639285][T13601] aiptek 6-1:17.0: Aiptek using 400 ms programming speed [ 665.674999][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 665.687275][T13601] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input52 [ 665.732574][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 665.777576][T13601] usb 6-1: USB disconnect, device number 30 [ 665.783583][ C0] aiptek 6-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 665.807100][ T5873] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 665.843341][T13857] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2246'. [ 665.954541][ T5873] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 665.973118][T13857] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2246'. [ 665.997390][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.055379][ T5873] usb 4-1: config 0 descriptor?? [ 666.342416][ T5873] usbhid 4-1:0.0: can't add hid device: -71 [ 666.381047][ T5873] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 666.407870][ T35] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.436445][ T5873] usb 4-1: USB disconnect, device number 76 [ 666.565144][ T35] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.788630][ T35] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.826521][ T5839] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 667.001765][ T35] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.073610][ T5839] usb 6-1: Using ep0 maxpacket: 16 [ 667.110896][ T5839] usb 6-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 667.136348][ T5839] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 667.155146][T13875] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2250'. [ 667.163246][ T5839] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 667.188916][T12811] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 667.203562][ T29] kauditd_printk_skb: 19845 callbacks suppressed [ 667.203578][ T29] audit: type=1400 audit(2000000269.282:409936): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5197 comm="udevd" name="hci2" dev="sysfs" ino=226203 [ 667.242113][T12811] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 667.245016][ T29] audit: type=1400 audit(2000000269.282:409937): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5197 comm="udevd" name="rfkill35" dev="sysfs" ino=226214 [ 667.250609][T12811] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 667.269348][ T29] audit: type=1400 audit(2000000269.282:409938): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=5197 comm="udevd" name="uevent" dev="sysfs" ino=226215 [ 667.283256][T12811] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 667.294514][ T5973] wlan1: Trigger new scan to find an IBSS to join [ 667.302903][T12811] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 667.318721][T12811] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 667.334528][ T5839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.344379][T13601] usb 8-1: USB disconnect, device number 5 [ 667.344381][ C1] aiptek 8-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 667.344453][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 667.356182][T13020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 667.372500][T13099] audit: audit_backlog=65 > audit_backlog_limit=64 [ 667.377715][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 667.379244][T13099] audit: audit_lost=110598 audit_rate_limit=0 audit_backlog_limit=64 [ 667.385528][ C1] audit: audit_lost=110599 audit_rate_limit=0 audit_backlog_limit=64 [ 667.385546][ C1] audit: backlog limit exceeded [ 667.403734][ T29] audit: type=1400 audit(2000000269.301:409939): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=5197 comm="udevd" path="/sys/devices/virtual/bluetooth/hci2/rfkill35/uevent" dev="sysfs" ino=226215 [ 667.406973][T13871] team0: No ports can be present during mode change [ 667.447447][ T5839] usb 6-1: config 0 descriptor?? [ 667.456355][T13872] vlan0: entered promiscuous mode [ 667.518575][T13872] team0: Port device vlan0 added [ 667.545688][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 667.592252][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 667.605673][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 667.615974][ T5832] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 667.624967][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 667.985523][T13882] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2249'. [ 668.432160][ T5972] wlan1: Creating new IBSS network, BSSID 2a:1e:3a:72:cc:07 [ 668.603109][T13875] team0 (unregistering): Port device team_slave_0 removed [ 668.645129][T13875] team0 (unregistering): Port device team_slave_1 removed [ 668.667433][T13875] team0 (unregistering): Port device vlan0 removed [ 668.892791][ T5901] usb 6-1: USB disconnect, device number 31 [ 669.512079][ T35] batadv1: left allmulticast mode [ 669.517601][ T35] batadv1: left promiscuous mode [ 669.574401][ T35] bridge0: port 3(batadv1) entered disabled state [ 669.617348][ T35] bridge_slave_1: left allmulticast mode [ 669.623040][ T35] bridge_slave_1: left promiscuous mode [ 669.656994][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.684527][ T35] bridge_slave_0: left allmulticast mode [ 669.712908][ T35] bridge_slave_0: left promiscuous mode [ 669.735052][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.845964][ T5832] Bluetooth: hci2: command tx timeout [ 669.853573][ T25] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 669.881053][T13884] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 670.047584][ T25] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 670.087005][ T25] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 670.129950][ T25] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 670.167279][ T25] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 670.182444][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.234639][T13909] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 670.506100][ T5873] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 671.434743][ T5873] usb 6-1: Using ep0 maxpacket: 16 [ 671.760642][ T5873] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.784310][ T5873] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 671.794326][ T5873] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 671.814885][ T5873] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.827953][ T5873] usb 6-1: config 0 descriptor?? [ 672.015862][T13601] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 672.064920][ T5832] Bluetooth: hci2: command tx timeout [ 672.070572][ T5874] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 672.110063][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 672.122868][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 672.134358][ T35] bond0 (unregistering): Released all slaves [ 672.193311][T13601] usb 8-1: Using ep0 maxpacket: 32 [ 672.214237][ T25] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 672.253494][ T25] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input54 [ 672.308608][ T5874] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 672.309880][ T5873] input: HID 05ac:8241 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:05AC:8241.001E/input/input55 [ 672.368948][ T5874] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 672.402295][T13601] usb 8-1: unable to get BOS descriptor or descriptor too short [ 672.415385][T13601] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 672.423088][T13601] usb 8-1: can't read configurations, error -71 [ 672.450448][ T5874] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 672.473167][ T25] usb 4-1: USB disconnect, device number 77 [ 672.479132][ C1] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 672.480371][ T5873] appleir 0003:05AC:8241.001E: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.5-1/input0 [ 672.487527][ T5874] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 672.510107][ T5874] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.524111][ T5874] usb 7-1: config 0 descriptor?? [ 672.556439][ T29] kauditd_printk_skb: 12451 callbacks suppressed [ 672.556458][ T29] audit: type=1400 audit(2000000274.305:416949): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13932 comm="dhcpcd-run-hook" name="lib" dev="sda1" ino=1562 [ 672.569929][T13932] audit: audit_backlog=65 > audit_backlog_limit=64 [ 672.590460][T13933] audit: audit_backlog=65 > audit_backlog_limit=64 [ 672.594042][T13919] wg1: entered promiscuous mode [ 672.596996][T13933] audit: audit_lost=112442 audit_rate_limit=0 audit_backlog_limit=64 [ 672.597017][T13933] audit: backlog limit exceeded [ 672.602183][ T5197] audit: audit_backlog=65 > audit_backlog_limit=64 [ 672.622796][T13099] audit: audit_backlog=65 > audit_backlog_limit=64 [ 672.623490][T13932] audit: audit_lost=112443 audit_rate_limit=0 audit_backlog_limit=64 [ 672.629477][T13099] audit: audit_lost=112444 audit_rate_limit=0 audit_backlog_limit=64 [ 672.629493][T13099] audit: backlog limit exceeded [ 672.633256][T13919] wg1: entered allmulticast mode [ 672.806792][ T5874] usbhid 7-1:0.0: can't add hid device: -71 [ 672.818342][ T5874] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 672.853059][ T5874] usb 7-1: USB disconnect, device number 32 [ 673.026238][T13874] chnl_net:caif_netlink_parms(): no params data found [ 673.340619][ T5873] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 673.557186][ T5873] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 673.683960][T13601] usb 6-1: reset high-speed USB device number 32 using dummy_hcd [ 673.748789][ T5873] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 673.850026][ T5873] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 673.894516][ T5873] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 673.936565][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.034086][T13874] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.063123][T13874] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.070763][T13874] bridge_slave_0: entered allmulticast mode [ 674.086432][T13874] bridge_slave_0: entered promiscuous mode [ 674.108172][ T35] hsr_slave_0: left promiscuous mode [ 674.120696][ T35] hsr_slave_1: left promiscuous mode [ 674.146613][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 674.173566][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 674.210957][T13939] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 674.225022][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 674.232466][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 674.288716][ T5832] Bluetooth: hci2: command tx timeout [ 674.328999][ T35] veth1_macvtap: left promiscuous mode [ 674.371156][ T35] veth0_macvtap: left promiscuous mode [ 674.612224][ T5901] usb 6-1: USB disconnect, device number 32 [ 675.122471][ T5873] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 675.135102][ T5873] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input56 [ 675.154387][ T5901] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 675.286056][ T35] team0 (unregistering): Port device team_slave_1 removed [ 675.359792][ T5901] usb 6-1: Using ep0 maxpacket: 16 [ 675.404949][ T5901] usb 6-1: config 1 has an invalid descriptor of length 104, skipping remainder of the config [ 675.444370][ T5901] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 675.459591][ T35] team0 (unregistering): Port device team_slave_0 removed [ 675.488245][ T5901] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 675.531551][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.596874][ T5901] usb 6-1: Product: syz [ 675.687636][ T5901] usb 6-1: Manufacturer: syz [ 675.953580][ T5901] usb 6-1: SerialNumber: syz [ 676.270714][ T25] usb 4-1: USB disconnect, device number 78 [ 676.270867][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 676.403033][ T5901] usb 6-1: 0:2 : does not exist [ 676.449277][ T5901] usb 6-1: USB disconnect, device number 33 [ 676.533439][ T5832] Bluetooth: hci2: command tx timeout [ 676.773509][T13978] No control pipe specified [ 677.462031][T13099] udevd[13099]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 677.822297][ T5873] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 677.912916][ T29] kauditd_printk_skb: 23034 callbacks suppressed [ 677.912934][ T29] audit: type=1400 audit(2000000279.328:428544): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=13980 comm="syz.5.2269" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 678.072811][ T5873] usb 6-1: Using ep0 maxpacket: 8 [ 678.089840][ T29] audit: type=1400 audit(2000000279.487:428545): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=13980 comm="syz.5.2269" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 678.114962][ T29] audit: type=1400 audit(2000000279.506:428546): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=13980 comm="syz.5.2269" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 678.115383][T13874] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.159668][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 678.187836][ T29] audit: type=1400 audit(2000000279.534:428547): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=13980 comm="syz.5.2269" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 678.212137][ T29] audit: type=1400 audit(2000000279.572:428548): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=13980 comm="syz.5.2269" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 678.212786][ T5873] usb 6-1: too many endpoints for config 1 interface 0 altsetting 10: 127, using maximum allowed: 30 [ 678.233094][ T29] audit: type=1400 audit(2000000279.572:428549): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=13980 comm="syz.5.2269" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 678.233478][ T29] audit: type=1400 audit(2000000279.600:428550): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=13980 comm="syz.5.2269" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 678.233817][ T29] audit: type=1400 audit(2000000279.600:428551): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=13980 comm="syz.5.2269" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 678.234122][ T29] audit: type=1400 audit(2000000279.600:428552): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=13980 comm="syz.5.2269" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 678.235191][ T29] audit: type=1400 audit(2000000279.600:428553): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=13980 comm="syz.5.2269" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 678.265442][T13874] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.376965][ T5873] usb 6-1: config 1 interface 0 altsetting 10 bulk endpoint 0x82 has invalid maxpacket 64 [ 678.378698][T13874] bridge_slave_1: entered allmulticast mode [ 678.414318][T13874] bridge_slave_1: entered promiscuous mode [ 678.418262][ T5873] usb 6-1: config 1 interface 0 altsetting 10 endpoint 0x3 has invalid maxpacket 61637, setting to 1024 [ 678.548834][ T5873] usb 6-1: config 1 interface 0 altsetting 10 bulk endpoint 0x3 has invalid maxpacket 1024 [ 678.718660][T13874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 678.732670][ T5873] usb 6-1: config 1 interface 0 altsetting 10 has 2 endpoint descriptors, different from the interface descriptor's value: 127 [ 678.748897][T13874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 678.810845][ T5873] usb 6-1: config 1 interface 0 has no altsetting 0 [ 678.846815][ T5873] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 678.867054][ T5873] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.873544][T13874] team0: Port device team_slave_0 added [ 678.899059][T13874] team0: Port device team_slave_1 added [ 678.902446][ T5873] usb 6-1: Product: syz [ 678.928238][ T5873] usb 6-1: Manufacturer: syz [ 678.949493][ T5873] usb 6-1: SerialNumber: syz [ 678.969028][T13981] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 678.992818][T13981] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 679.010636][T13874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 679.024382][ T5874] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 679.047157][T13874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 679.144306][T13874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 679.186090][T13874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 679.208180][ T5874] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 679.228144][T13874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 679.260313][ T5874] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 679.282307][ T5874] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 679.693038][ T5874] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 679.723321][T13874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 679.733498][ T5874] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.754400][ T5901] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 679.988485][ T5874] usb 7-1: config 0 descriptor?? [ 680.015134][ T35] IPVS: stop unused estimator thread 0... [ 680.107326][T13874] hsr_slave_0: entered promiscuous mode [ 680.124784][T13874] hsr_slave_1: entered promiscuous mode [ 680.172612][ T5901] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 680.192259][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.217223][ T5901] usb 4-1: config 0 descriptor?? [ 680.242257][ T5901] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 680.250330][T14005] wg1: entered promiscuous mode [ 680.267484][ T5874] usbhid 7-1:0.0: can't add hid device: -71 [ 680.292477][T14005] wg1: entered allmulticast mode [ 680.309440][ T5874] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 680.332436][ T5874] usb 7-1: USB disconnect, device number 33 [ 680.921719][ T5901] gspca_sunplus: reg_w_riv err -71 [ 680.935110][ T5873] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 680.970020][ T5901] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 681.010690][ T5901] usb 4-1: USB disconnect, device number 79 [ 681.023789][ T5873] usb 6-1: USB disconnect, device number 34 [ 681.351372][T13874] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 681.374514][T13874] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 681.387315][T13874] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 681.400496][T13874] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 681.493974][T12917] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 681.513884][T13874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 681.581998][T13874] 8021q: adding VLAN 0 to HW filter on device team0 [ 681.616387][ T6831] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.623542][ T6831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 681.670114][ T6831] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.677271][ T6831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 681.689703][T12917] usb 8-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 681.739406][T12917] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 681.774988][T12917] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 681.800553][T12917] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 681.836080][T12917] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.869886][T14027] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 682.726883][T13874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 682.861579][T13874] veth0_vlan: entered promiscuous mode [ 682.918348][T12917] aiptek 8-1:17.0: Aiptek using 400 ms programming speed [ 682.922938][T13874] veth1_vlan: entered promiscuous mode [ 682.987136][ T42] block nbd2: Possible stuck request ffff888025e978c0: control (read@0,4096B). Runtime 90 seconds [ 683.124125][ T5874] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 683.148628][T12917] input: Aiptek as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:17.0/input/input57 [ 683.270052][ T29] kauditd_printk_skb: 14877 callbacks suppressed [ 683.270084][ T29] audit: type=1400 audit(2000000284.333:438549): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=14062 comm="dhcpcd-run-hook" name="libbusybox.so.1.35.0" dev="sda1" ino=1104 [ 683.339340][T14062] audit: audit_backlog=65 > audit_backlog_limit=64 [ 683.339778][ T5197] audit: audit_backlog=65 > audit_backlog_limit=64 [ 683.355375][T14056] audit: audit_backlog=65 > audit_backlog_limit=64 [ 683.361180][T13099] audit: audit_backlog=65 > audit_backlog_limit=64 [ 683.373086][ T5182] audit: audit_backlog=65 > audit_backlog_limit=64 [ 683.383173][T14056] audit: audit_lost=117940 audit_rate_limit=0 audit_backlog_limit=64 [ 683.400930][T14062] audit: audit_lost=117941 audit_rate_limit=0 audit_backlog_limit=64 [ 683.404184][T14065] audit: audit_backlog=65 > audit_backlog_limit=64 [ 683.424286][T13874] veth0_macvtap: entered promiscuous mode [ 683.427868][ T5182] audit: audit_lost=117942 audit_rate_limit=0 audit_backlog_limit=64 [ 683.471827][T13874] veth1_macvtap: entered promiscuous mode [ 683.515406][T13874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.551414][T13874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.586602][T13874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.629199][ T5874] usb 7-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 683.644468][ T5874] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 683.672600][ T5874] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 683.686755][ T5874] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 683.698324][T13874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.787925][ T5874] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.841610][T13874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.008907][T14056] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 684.090653][T13874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.277823][T13874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.393853][T13874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.507942][T13874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.551499][T13874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.572601][ T5901] usb 8-1: USB disconnect, device number 8 [ 684.572652][ C1] aiptek 8-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 684.593840][T13874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 684.622147][T13874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.669753][T13874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.709434][T13874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.744731][T13874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.758108][T13874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.797276][T13874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.807125][T13874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.867197][T13874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.882206][T13874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.923081][T13874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.956472][T13874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 685.025642][T13874] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.201714][T13874] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.213814][T13874] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.222661][T13874] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.324349][T14097] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 685.343015][T14097] FAULT_INJECTION: forcing a failure. [ 685.343015][T14097] name failslab, interval 1, probability 0, space 0, times 0 [ 685.356292][T14097] CPU: 1 UID: 0 PID: 14097 Comm: syz.3.2290 Not tainted 6.14.0-rc2-syzkaller-00228-g04f41cbf03ec #0 [ 685.356315][T14097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 685.356327][T14097] Call Trace: [ 685.356333][T14097] [ 685.356341][T14097] dump_stack_lvl+0x241/0x360 [ 685.356367][T14097] ? __pfx_dump_stack_lvl+0x10/0x10 [ 685.356385][T14097] ? __pfx__printk+0x10/0x10 [ 685.356410][T14097] ? kmem_cache_alloc_lru_noprof+0x4d/0x390 [ 685.356435][T14097] ? __pfx___might_resched+0x10/0x10 [ 685.356462][T14097] should_fail_ex+0x40a/0x550 [ 685.356489][T14097] should_failslab+0xac/0x100 [ 685.356513][T14097] ? __d_alloc+0x31/0x740 [ 685.356530][T14097] kmem_cache_alloc_lru_noprof+0x75/0x390 [ 685.356560][T14097] __d_alloc+0x31/0x740 [ 685.356584][T14097] d_alloc+0x4b/0x190 [ 685.356605][T14097] lookup_one_qstr_excl+0xd7/0x2b0 [ 685.356628][T14097] do_renameat2+0x670/0x13f0 [ 685.356669][T14097] ? __virt_addr_valid+0x183/0x530 [ 685.356698][T14097] ? __pfx_do_renameat2+0x10/0x10 [ 685.356729][T14097] ? __virt_addr_valid+0x183/0x530 [ 685.356750][T14097] ? __virt_addr_valid+0x45f/0x530 [ 685.356779][T14097] ? __phys_addr_symbol+0x2f/0x70 [ 685.356808][T14097] ? strncpy_from_user+0x146/0x270 [ 685.356834][T14097] ? getname_flags+0x1e3/0x540 [ 685.356855][T14097] __x64_sys_rename+0x82/0x90 [ 685.356878][T14097] do_syscall_64+0xf3/0x230 [ 685.356898][T14097] ? clear_bhb_loop+0x35/0x90 [ 685.356922][T14097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.356943][T14097] RIP: 0033:0x7fafe098cde9 [ 685.356959][T14097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 685.356974][T14097] RSP: 002b:00007fafe182b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 685.356992][T14097] RAX: ffffffffffffffda RBX: 00007fafe0ba6160 RCX: 00007fafe098cde9 [ 685.357005][T14097] RDX: 0000000000000000 RSI: 0000400000000200 RDI: 0000400000000180 [ 685.357017][T14097] RBP: 00007fafe182b090 R08: 0000000000000000 R09: 0000000000000000 [ 685.357028][T14097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 685.357038][T14097] R13: 0000000000000000 R14: 00007fafe0ba6160 R15: 00007ffc083f02b8 [ 685.357066][T14097] [ 685.698720][ T5874] aiptek 7-1:17.0: Aiptek using 400 ms programming speed [ 685.707521][ T5874] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:17.0/input/input58 [ 685.721697][ C1] aiptek 7-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 685.730208][ T5874] usb 7-1: USB disconnect, device number 34 [ 685.802257][ T5901] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 685.984908][ T1051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.992965][ T1051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 686.048611][ T5901] usb 8-1: config 0 has an invalid interface number: 120 but max is 0 [ 686.057482][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 686.068818][ T5901] usb 8-1: config 0 has no interface number 0 [ 686.114906][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 686.116139][ T5901] usb 8-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid maxpacket 30768, setting to 64 [ 686.197091][ T5901] usb 8-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 686.236384][ T5901] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.270656][ T5901] usb 8-1: config 0 descriptor?? [ 686.293248][ T5901] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.120/input/input59 [ 686.666198][T14118] ip6t_REJECT: ECHOREPLY is not supported [ 687.359658][T14123] FAULT_INJECTION: forcing a failure. [ 687.359658][T14123] name failslab, interval 1, probability 0, space 0, times 0 [ 687.521180][T14123] CPU: 0 UID: 0 PID: 14123 Comm: syz.5.2293 Not tainted 6.14.0-rc2-syzkaller-00228-g04f41cbf03ec #0 [ 687.521205][T14123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 687.521216][T14123] Call Trace: [ 687.521223][T14123] [ 687.521231][T14123] dump_stack_lvl+0x241/0x360 [ 687.521256][T14123] ? __pfx_dump_stack_lvl+0x10/0x10 [ 687.521276][T14123] ? __pfx__printk+0x10/0x10 [ 687.521302][T14123] ? kmem_cache_alloc_noprof+0x48/0x380 [ 687.521326][T14123] ? __pfx___might_resched+0x10/0x10 [ 687.521355][T14123] should_fail_ex+0x40a/0x550 [ 687.521382][T14123] should_failslab+0xac/0x100 [ 687.521405][T14123] ? key_alloc+0x341/0xff0 [ 687.521421][T14123] kmem_cache_alloc_noprof+0x70/0x380 [ 687.521443][T14123] ? key_user_lookup+0x1b2/0x450 [ 687.521463][T14123] key_alloc+0x341/0xff0 [ 687.521482][T14123] ? kmemdup_noprof+0x55/0x70 [ 687.521508][T14123] request_key_auth_new+0x682/0x8d0 [ 687.521534][T14123] ? __pfx_request_key_auth_new+0x10/0x10 [ 687.521565][T14123] request_key_and_link+0x1123/0x19c0 [ 687.521589][T14123] ? request_key_and_link+0x49a/0x19c0 [ 687.521612][T14123] ? __pfx_request_key_and_link+0x10/0x10 [ 687.521629][T14123] ? __might_fault+0xaa/0x120 [ 687.521649][T14123] ? __pfx_down_read+0x10/0x10 [ 687.521672][T14123] ? __pfx_dns_resolver_cmp+0x10/0x10 [ 687.521697][T14123] ? __pfx_keyring_search_iterator+0x10/0x10 [ 687.521731][T14123] __se_sys_request_key+0x271/0x3b0 [ 687.521757][T14123] ? __pfx___se_sys_request_key+0x10/0x10 [ 687.521783][T14123] ? do_syscall_64+0x100/0x230 [ 687.521804][T14123] ? do_syscall_64+0xb6/0x230 [ 687.521826][T14123] do_syscall_64+0xf3/0x230 [ 687.521844][T14123] ? clear_bhb_loop+0x35/0x90 [ 687.521868][T14123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.521889][T14123] RIP: 0033:0x7ff9d7f8cde9 [ 687.521904][T14123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 687.521918][T14123] RSP: 002b:00007ff9d8d31038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 687.521937][T14123] RAX: ffffffffffffffda RBX: 00007ff9d81a5fa0 RCX: 00007ff9d7f8cde9 [ 687.521950][T14123] RDX: 0000400000000080 RSI: 0000400000000040 RDI: 0000400000000000 [ 687.521962][T14123] RBP: 00007ff9d8d31090 R08: 0000000000000000 R09: 0000000000000000 [ 687.521973][T14123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 687.521983][T14123] R13: 0000000000000000 R14: 00007ff9d81a5fa0 R15: 00007ffd19f59f78 [ 687.522011][T14123] [ 688.145615][T13601] usb 8-1: USB disconnect, device number 9 [ 688.657277][ T29] kauditd_printk_skb: 21702 callbacks suppressed [ 688.657337][ T29] audit: type=1400 audit(2000000289.066:447160): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14135 comm="syz.3.2296" name="457" dev="tmpfs" ino=2471 [ 688.740599][ T5820] audit: audit_backlog=65 > audit_backlog_limit=64 [ 688.742234][ T5179] audit: audit_backlog=65 > audit_backlog_limit=64 [ 688.747423][T12450] audit: audit_backlog=66 > audit_backlog_limit=64 [ 688.753897][ T5820] audit: audit_lost=122348 audit_rate_limit=0 audit_backlog_limit=64 [ 688.764560][ C1] audit: audit_backlog=66 > audit_backlog_limit=64 [ 688.768519][T13099] audit: audit_backlog=66 > audit_backlog_limit=64 [ 688.774782][ C1] audit: audit_lost=122349 audit_rate_limit=0 audit_backlog_limit=64 [ 688.774800][ C1] audit: backlog limit exceeded [ 688.775674][ C1] audit: audit_backlog=66 > audit_backlog_limit=64 [ 688.881949][T14142] FAULT_INJECTION: forcing a failure. [ 688.881949][T14142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 688.895099][T14142] CPU: 1 UID: 0 PID: 14142 Comm: syz.6.2298 Not tainted 6.14.0-rc2-syzkaller-00228-g04f41cbf03ec #0 [ 688.895121][T14142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 688.895132][T14142] Call Trace: [ 688.895138][T14142] [ 688.895146][T14142] dump_stack_lvl+0x241/0x360 [ 688.895170][T14142] ? __pfx_dump_stack_lvl+0x10/0x10 [ 688.895187][T14142] ? __pfx__printk+0x10/0x10 [ 688.895212][T14142] ? __pfx_lock_release+0x10/0x10 [ 688.895242][T14142] should_fail_ex+0x40a/0x550 [ 688.895268][T14142] _copy_from_user+0x2d/0xb0 [ 688.895288][T14142] bpf_test_init+0x11f/0x180 [ 688.895314][T14142] bpf_prog_test_run_xdp+0x48e/0x11e0 [ 688.895342][T14142] ? __pfx_lock_release+0x10/0x10 [ 688.895372][T14142] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 688.895396][T14142] ? __fget_files+0x2a/0x410 [ 688.895417][T14142] ? __fget_files+0x2a/0x410 [ 688.895443][T14142] ? fput+0x21b/0x290 [ 688.895458][T14142] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 688.895483][T14142] bpf_prog_test_run+0x2e4/0x360 [ 688.895508][T14142] __sys_bpf+0x487/0x820 [ 688.895530][T14142] ? __pfx___sys_bpf+0x10/0x10 [ 688.895561][T14142] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 688.895585][T14142] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 688.895608][T14142] ? do_syscall_64+0x100/0x230 [ 688.895631][T14142] __x64_sys_bpf+0x7c/0x90 [ 688.895650][T14142] do_syscall_64+0xf3/0x230 [ 688.895670][T14142] ? clear_bhb_loop+0x35/0x90 [ 688.895694][T14142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.895714][T14142] RIP: 0033:0x7fb06a38cde9 [ 688.895730][T14142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 688.895744][T14142] RSP: 002b:00007fb06b12b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 688.895763][T14142] RAX: ffffffffffffffda RBX: 00007fb06a5a5fa0 RCX: 00007fb06a38cde9 [ 688.895775][T14142] RDX: 0000000000000048 RSI: 0000400000000600 RDI: 000000000000000a [ 688.895787][T14142] RBP: 00007fb06b12b090 R08: 0000000000000000 R09: 0000000000000000 [ 688.895798][T14142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 688.895808][T14142] R13: 0000000000000000 R14: 00007fb06a5a5fa0 R15: 00007ffc29b80748 [ 688.895834][T14142] [ 689.131188][ T3441] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 689.298366][ T5901] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 689.620661][ T5901] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 689.658350][ T5901] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 689.669973][ T5901] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 689.710204][ T5901] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 690.186343][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.279850][T14137] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 691.095979][T14160] netlink: 'syz.5.2302': attribute type 1 has an invalid length. [ 691.724312][T14167] input: syz0 as /devices/virtual/input/input61 [ 691.967802][ T5901] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 691.995677][ T5901] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input60 [ 692.124776][T14177] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2306'. [ 692.297419][T14182] ip6erspan0: entered allmulticast mode [ 692.489012][T14182] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2308'. [ 693.265382][T13207] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 693.565080][ T58] usb 1-1: USB disconnect, device number 9 [ 693.571002][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 693.747587][T14195] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2310'. [ 694.016379][ T29] kauditd_printk_skb: 14987 callbacks suppressed [ 694.016419][ T29] audit: type=1400 audit(2000000294.388:453670): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14196 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 [ 694.215534][ T5872] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 694.232033][ T29] audit: type=1400 audit(2000000294.416:453671): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14196 comm="dhcpcd-run-hook" name="sbin" dev="sda1" ino=1208 [ 694.291223][ T29] audit: type=1400 audit(2000000294.416:453672): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14196 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 [ 694.324153][T11139] audit: audit_backlog=65 > audit_backlog_limit=64 [ 694.324945][T14198] audit: audit_backlog=65 > audit_backlog_limit=64 [ 694.330680][T11139] audit: audit_lost=125189 audit_rate_limit=0 audit_backlog_limit=64 [ 694.330701][T11139] audit: backlog limit exceeded [ 694.330860][T11139] audit: audit_backlog=65 > audit_backlog_limit=64 [ 694.330875][T11139] audit: audit_lost=125190 audit_rate_limit=0 audit_backlog_limit=64 [ 694.330890][T11139] audit: backlog limit exceeded [ 694.367143][T14201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2312'. [ 694.446069][T14201] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2312'. [ 694.467742][ T5872] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 694.488823][ T5872] usb 7-1: can't read configurations, error -61 [ 694.503355][T14206] FAULT_INJECTION: forcing a failure. [ 694.503355][T14206] name failslab, interval 1, probability 0, space 0, times 0 [ 694.536795][T13601] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 694.551791][T14206] CPU: 0 UID: 0 PID: 14206 Comm: syz.5.2313 Not tainted 6.14.0-rc2-syzkaller-00228-g04f41cbf03ec #0 [ 694.551813][T14206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 694.551824][T14206] Call Trace: [ 694.551830][T14206] [ 694.551838][T14206] dump_stack_lvl+0x241/0x360 [ 694.551863][T14206] ? __pfx_dump_stack_lvl+0x10/0x10 [ 694.551880][T14206] ? __pfx__printk+0x10/0x10 [ 694.551906][T14206] ? kmem_cache_alloc_noprof+0x48/0x380 [ 694.551930][T14206] ? __pfx___might_resched+0x10/0x10 [ 694.551953][T14206] should_fail_ex+0x40a/0x550 [ 694.551979][T14206] should_failslab+0xac/0x100 [ 694.552002][T14206] ? vm_area_dup+0x27/0x290 [ 694.552024][T14206] kmem_cache_alloc_noprof+0x70/0x380 [ 694.552051][T14206] vm_area_dup+0x27/0x290 [ 694.552076][T14206] __split_vma+0x1bf/0xbf0 [ 694.552107][T14206] ? __pfx___split_vma+0x10/0x10 [ 694.552136][T14206] ? mas_find+0x950/0xbb0 [ 694.552155][T14206] ? process_measurement+0x1aea/0x1fb0 [ 694.552182][T14206] vms_gather_munmap_vmas+0x4c1/0x1600 [ 694.552203][T14206] ? mark_lock+0x9a/0x360 [ 694.552244][T14206] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 694.552275][T14206] ? mas_find+0x8c0/0xbb0 [ 694.552299][T14206] mmap_region+0xa50/0x2fa0 [ 694.552334][T14206] ? validate_chain+0x11e/0x5920 [ 694.552368][T14206] ? __pfx_mmap_region+0x10/0x10 [ 694.552397][T14206] ? _parse_integer_limit+0x1b5/0x200 [ 694.552460][T14206] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 694.552494][T14206] ? mm_get_unmapped_area+0xa8/0xd0 [ 694.552516][T14206] ? shmem_get_unmapped_area+0x2a7/0x8f0 [ 694.552540][T14206] ? cap_mmap_addr+0xaa/0xf0 [ 694.552562][T14206] ? bpf_lsm_mmap_addr+0x9/0x10 [ 694.552581][T14206] ? security_mmap_addr+0x6f/0x250 [ 694.552611][T14206] do_mmap+0xecc/0x13a0 [ 694.552635][T14206] ? ima_file_mmap+0xd6/0x220 [ 694.552659][T14206] ? __pfx_do_mmap+0x10/0x10 [ 694.552674][T14206] ? down_write_killable+0x19e/0x260 [ 694.552694][T14206] ? vm_mmap_pgoff+0x182/0x430 [ 694.552720][T14206] ? __pfx_down_write_killable+0x10/0x10 [ 694.552741][T14206] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 694.552766][T14206] vm_mmap_pgoff+0x214/0x430 [ 694.552795][T14206] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 694.552815][T14206] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 694.552838][T14206] ? do_syscall_64+0x100/0x230 [ 694.552857][T14206] ? ksys_mmap_pgoff+0xdf/0x720 [ 694.552875][T14206] ? __x64_sys_mmap+0x7f/0x140 [ 694.552899][T14206] do_syscall_64+0xf3/0x230 [ 694.552918][T14206] ? clear_bhb_loop+0x35/0x90 [ 694.552942][T14206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.552962][T14206] RIP: 0033:0x7ff9d7f8cde9 [ 694.552977][T14206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 694.552992][T14206] RSP: 002b:00007ff9d8d31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 694.553011][T14206] RAX: ffffffffffffffda RBX: 00007ff9d81a5fa0 RCX: 00007ff9d7f8cde9 [ 694.553024][T14206] RDX: 000000000000000b RSI: 0000000000fbe000 RDI: 0000400000000000 [ 694.553035][T14206] RBP: 00007ff9d8d31090 R08: ffffffffffffffff R09: 0000000000000000 [ 694.553047][T14206] R10: 0000000000000031 R11: 0000000000000246 R12: 0000000000000001 [ 694.553057][T14206] R13: 0000000000000000 R14: 00007ff9d81a5fa0 R15: 00007ffd19f59f78 [ 694.553084][T14206] [ 694.931600][T14211] trusted_key: encrypted_key: master key parameter '' is invalid [ 694.974746][ T5872] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 695.038988][T13601] usb 4-1: Using ep0 maxpacket: 32 [ 695.046628][T13601] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 695.057626][T13601] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 695.067412][T13601] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 695.073669][T14211] usb usb8: usbfs: process 14211 (syz.7.2315) did not claim interface 7 before use [ 695.076729][T13601] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.098574][T13601] usb 4-1: config 0 descriptor?? [ 695.143218][T14216] netlink: 'syz.0.2317': attribute type 2 has an invalid length. [ 695.166866][T14216] netlink: 'syz.0.2317': attribute type 9 has an invalid length. [ 695.174742][T14216] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2317'. [ 695.190449][ T5872] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 695.198076][ T5872] usb 7-1: can't read configurations, error -61 [ 695.205685][ T5872] usb usb7-port1: attempt power cycle [ 695.313030][T14221] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2318'. [ 695.357002][T14221] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2318'. [ 695.434651][ T5874] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 695.629740][ T5874] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 695.888065][ T5872] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 695.939891][ T5872] usb 7-1: device descriptor read/8, error -71 [ 696.009686][ T5874] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 696.065245][ T5874] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 696.140117][ T5874] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 696.167777][ T5874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.180877][T13601] usbhid 4-1:0.0: can't add hid device: -71 [ 696.209676][T13601] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 696.226016][T14218] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 696.251892][T13601] usb 4-1: USB disconnect, device number 80 [ 697.441321][T14255] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2326'. [ 697.459882][T14250] vlan2: entered promiscuous mode [ 697.481148][T14250] bond0: (slave vlan2): Opening slave failed [ 697.645669][T14260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2323'. [ 697.658676][T14260] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2323'. [ 697.675835][ T5872] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 697.699142][ T52] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 697.882784][ T5872] usb 7-1: Using ep0 maxpacket: 16 [ 697.971579][ T5872] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 698.117064][ T5872] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.133376][T13601] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 698.162104][ T5872] usb 7-1: config 0 descriptor?? [ 698.194402][ T5872] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 698.376053][T13601] usb 1-1: Using ep0 maxpacket: 16 [ 698.395253][T13601] usb 1-1: config 0 has an invalid interface number: 122 but max is 2 [ 698.424903][T13601] usb 1-1: config 0 has an invalid interface number: 47 but max is 2 [ 698.450654][T13601] usb 1-1: config 0 has an invalid interface number: 169 but max is 2 [ 698.459095][T13601] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 698.470006][T13601] usb 1-1: config 0 has no interface number 0 [ 698.476922][T13601] usb 1-1: config 0 has no interface number 1 [ 698.490896][T13601] usb 1-1: config 0 has no interface number 2 [ 698.502620][T13601] usb 1-1: config 0 interface 122 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 698.521500][T13601] usb 1-1: config 0 interface 122 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 698.539997][ T5874] aiptek 6-1:17.0: Aiptek using 400 ms programming speed [ 698.541937][T13601] usb 1-1: config 0 interface 47 altsetting 1 has a duplicate endpoint with address 0x1, skipping [ 698.728871][T12917] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 698.753008][ T5874] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input62 [ 698.780301][T13601] usb 1-1: config 0 interface 47 altsetting 1 has an endpoint descriptor with address 0xC7, changing to 0x87 [ 698.949430][ C1] aiptek 6-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 698.957759][T13601] usb 1-1: config 0 interface 47 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 1024 [ 698.961697][ T5874] usb 6-1: USB disconnect, device number 35 [ 699.005211][T12917] usb 4-1: Using ep0 maxpacket: 32 [ 699.079766][T12917] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 699.187883][T12917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 699.214836][T13601] usb 1-1: config 0 interface 169 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 699.218017][T12917] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 699.228505][T13601] usb 1-1: config 0 interface 169 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 699.252736][T13601] usb 1-1: config 0 interface 169 altsetting 4 has a duplicate endpoint with address 0x3, skipping [ 699.275780][T13601] usb 1-1: config 0 interface 169 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 699.300755][T13601] usb 1-1: config 0 interface 169 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 699.311958][T13601] usb 1-1: config 0 interface 169 altsetting 4 has a duplicate endpoint with address 0x3, skipping [ 699.326950][T13601] usb 1-1: config 0 interface 169 altsetting 4 endpoint 0xB has invalid maxpacket 63658, setting to 64 [ 699.353383][T13601] usb 1-1: config 0 interface 169 altsetting 4 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 699.368741][T12917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.375544][ T29] kauditd_printk_skb: 14498 callbacks suppressed [ 699.375559][ T29] audit: type=1400 audit(2000000299.365:461857): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14276 comm="dhcpcd-run-hook" name="var" dev="sda1" ino=1906 [ 699.411502][T14272] kvm: pic: level sensitive irq not supported [ 699.411820][T14272] kvm: pic: non byte read [ 699.436309][T12470] audit: audit_backlog=65 > audit_backlog_limit=64 [ 699.443214][ T5197] audit: audit_backlog=65 > audit_backlog_limit=64 [ 699.450306][T12917] usb 4-1: Product: syz [ 699.461444][T12917] usb 4-1: Manufacturer: syz [ 699.461491][ T5197] audit: audit_lost=127305 audit_rate_limit=0 audit_backlog_limit=64 [ 699.474830][T13601] usb 1-1: config 0 interface 169 altsetting 4 has a duplicate endpoint with address 0x87, skipping [ 699.475716][T12470] audit: audit_lost=127306 audit_rate_limit=0 audit_backlog_limit=64 [ 699.489614][ T29] audit: type=1400 audit(2000000299.383:461858): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14276 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 [ 699.497357][T12917] usb 4-1: SerialNumber: syz [ 699.515408][T14278] audit: audit_backlog=65 > audit_backlog_limit=64 [ 699.519118][T14251] audit: audit_backlog=65 > audit_backlog_limit=64 [ 699.525575][T13601] usb 1-1: config 0 interface 169 altsetting 4 has a duplicate endpoint with address 0x5, skipping [ 699.541968][ T5197] audit: backlog limit exceeded [ 699.544296][T11139] audit: audit_backlog=65 > audit_backlog_limit=64 [ 699.595820][T13601] usb 1-1: config 0 interface 169 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 699.626148][T13601] usb 1-1: config 0 interface 169 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 699.634543][T12917] usb 4-1: config 0 descriptor?? [ 699.662704][T12917] usb 4-1: no audio or video endpoints found [ 699.678145][T13601] usb 1-1: config 0 interface 169 altsetting 4 bulk endpoint 0x6 has invalid maxpacket 1024 [ 699.721039][T13601] usb 1-1: config 0 interface 169 altsetting 4 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 699.770074][T13601] usb 1-1: config 0 interface 169 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 699.791523][T13601] usb 1-1: config 0 interface 169 altsetting 4 has 16 endpoint descriptors, different from the interface descriptor's value: 15 [ 699.819694][T14251] ufs: Invalid option: "}Qx!ա|X7AGuM>AiڔRmd?SP [ 699.819694][T14251] Xe+ :qj@7TR8" or missing value [ 699.859141][T13601] usb 1-1: config 0 interface 122 has no altsetting 0 [ 699.859328][T14251] ufs: wrong mount options [ 699.900119][ T5874] usb 4-1: USB disconnect, device number 81 [ 699.914294][T13601] usb 1-1: config 0 interface 47 has no altsetting 0 [ 699.931933][T13601] usb 1-1: config 0 interface 169 has no altsetting 0 [ 699.967064][T13601] usb 1-1: New USB device found, idVendor=0f11, idProduct=2070, bcdDevice=89.1a [ 699.979196][T13601] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.998575][T13601] usb 1-1: Product: 槵ᑌ᩽鞷猋ឬ⯎홬袽㉔쟜⩋޳秏礏丛じĭ䭜擫⨴媰Ἕ㿿☌韣叮㔌횅 [ 700.043937][T12917] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 700.045693][T13601] usb 1-1: Manufacturer: 橑鋕㦲㫻ﻙ迿娼尯᭗䔥ċ붬嫰Ⅲ뽎ꨨ셰☈蒊ဲಇ숇⽚烄滠︒턽놏ખ譓멿춉贎⁕袴錔ᗦ㪠쀹㞘ᫍᨎᓪ萮늴ᜦ找댜佒□鈒ᅛ㮁爮胂髣偋⫶㹂啍齍⧊㠍翠䔗輵욦 [ 700.089497][T13601] usb 1-1: SerialNumber: П [ 700.107572][T13601] usb 1-1: config 0 descriptor?? [ 700.127827][ T5872] gspca_sonixj: reg_w1 err -110 [ 700.162242][ T5872] sonixj 7-1:0.0: probe with driver sonixj failed with error -110 [ 700.234668][T12917] usb 6-1: Using ep0 maxpacket: 32 [ 700.248979][T12917] usb 6-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 700.258726][T12917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.269764][T12917] usb 6-1: Product: syz [ 700.274083][T12917] usb 6-1: Manufacturer: syz [ 700.280802][T12917] usb 6-1: SerialNumber: syz [ 700.301666][T12917] usb 6-1: config 0 descriptor?? [ 700.310146][T12917] rtl8150 6-1:0.0: couldn't find required endpoints [ 700.317862][T12917] rtl8150 6-1:0.0: probe with driver rtl8150 failed with error -5 [ 700.402704][T14300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.433642][T14300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.526664][ T5872] usb 7-1: USB disconnect, device number 39 [ 700.533282][T12917] usb 6-1: USB disconnect, device number 36 [ 700.623303][T13601] ldusb 1-1:0.122: Interrupt in endpoint not found [ 700.668122][T13601] ldusb 1-1:0.47: Interrupt in endpoint not found [ 700.700074][T13601] ldusb 1-1:0.169: Interrupt in endpoint not found [ 700.897802][T13601] usb 1-1: USB disconnect, device number 10 [ 700.909909][ T5874] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 701.154095][ T5874] usb 4-1: Using ep0 maxpacket: 32 [ 701.250795][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 701.268472][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 701.322669][ T5874] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 701.341481][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.367081][ T5874] usb 4-1: config 0 descriptor?? [ 701.641790][T14315] input: syz0 as /devices/virtual/input/input63 [ 702.536018][ T5874] usbhid 4-1:0.0: can't add hid device: -71 [ 702.554872][T14331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.568547][ T5874] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 702.593809][T14331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.608126][ T5874] usb 4-1: USB disconnect, device number 82 [ 702.657992][T14328] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2340'. [ 704.195356][T14348] No such timeout policy "syz1" [ 704.312611][T14347] input: syz0 as /devices/virtual/input/input64 [ 704.743988][ T29] kauditd_printk_skb: 17508 callbacks suppressed [ 704.744009][ T29] audit: type=1400 audit(2000000304.397:471380): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12470 comm="udevd" name="udev" dev="tmpfs" ino=9 [ 704.747938][T13099] audit: audit_backlog=65 > audit_backlog_limit=64 [ 704.753134][T12470] audit: audit_backlog=66 > audit_backlog_limit=64 [ 704.770862][T13101] audit: audit_backlog=66 > audit_backlog_limit=64 [ 704.798541][T14357] audit: audit_backlog=66 > audit_backlog_limit=64 [ 704.810176][ T29] audit: type=1400 audit(2000000304.397:471381): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12470 comm="udevd" name="data" dev="tmpfs" ino=13 [ 704.814721][T12470] audit: audit_lost=129996 audit_rate_limit=0 audit_backlog_limit=64 [ 704.829918][T14358] audit: audit_backlog=65 > audit_backlog_limit=64 [ 704.852989][T14357] audit: audit_lost=129997 audit_rate_limit=0 audit_backlog_limit=64 [ 704.853102][T13101] audit: audit_lost=129998 audit_rate_limit=0 audit_backlog_limit=64 [ 705.613184][T14371] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 705.699868][T14371] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 705.732978][T14376] batadv_slave_1: entered promiscuous mode [ 705.837630][T14371] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 706.057675][T14366] batadv_slave_1: left promiscuous mode [ 706.456621][ T5872] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 706.627805][ T5872] usb 6-1: Using ep0 maxpacket: 16 [ 707.286916][ T5872] usb 6-1: config 1 has an invalid descriptor of length 111, skipping remainder of the config [ 707.320503][ T5872] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 707.334807][ T5872] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 707.347183][ T5872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.355948][ T5872] usb 6-1: Product: syz [ 707.360477][ T5872] usb 6-1: Manufacturer: syz [ 707.365546][ T5872] usb 6-1: SerialNumber: syz [ 707.652815][ T5872] usb 6-1: 0:2 : does not exist [ 707.666268][ T5872] usb 6-1: unit 6 not found! [ 707.692117][ T5872] usb 6-1: USB disconnect, device number 37 [ 707.728808][ T5873] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 707.728827][T12811] Bluetooth: hci2: command 0x0405 tx timeout [ 707.910703][ T5873] usb 1-1: Using ep0 maxpacket: 32 [ 707.938771][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 708.003127][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 708.033329][T13099] udevd[13099]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 708.062124][ T5873] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 708.079503][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.122840][ T5873] usb 1-1: config 0 descriptor?? [ 709.076361][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 709.082682][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 709.375390][T14465] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 709.871153][ T5873] usbhid 1-1:0.0: can't add hid device: -71 [ 709.877204][ T5873] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 709.912514][ T5873] usb 1-1: USB disconnect, device number 11 [ 709.967557][ T5832] Bluetooth: hci2: command 0x0405 tx timeout [ 710.114046][ T29] kauditd_printk_skb: 17514 callbacks suppressed [ 710.114058][ T29] audit: type=1400 audit(2000000309.448:479292): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5820 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 710.159946][ T29] audit: type=1400 audit(2000000309.458:479293): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=14470 comm="syz.5.2368" saddr=10.128.0.169 src=30008 daddr=10.128.1.81 dest=49638 netif=eth0 [ 710.182483][ C0] vkms_vblank_simulate: vblank timer overrun [ 710.877190][ T5820] audit: audit_backlog=65 > audit_backlog_limit=64 [ 710.884543][T11139] audit: audit_backlog=65 > audit_backlog_limit=64 [ 710.891073][T11139] audit: audit_lost=133239 audit_rate_limit=0 audit_backlog_limit=64 [ 710.944756][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 710.951348][ C1] audit: audit_lost=133240 audit_rate_limit=0 audit_backlog_limit=64 [ 710.959490][ C1] audit: backlog limit exceeded [ 711.132937][ T5820] audit: audit_lost=133241 audit_rate_limit=0 audit_backlog_limit=64 [ 711.237950][ T29] audit: type=1400 audit(2000000309.458:479294): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=14470 comm="syz.5.2368" saddr=10.128.0.169 src=30008 daddr=10.128.1.81 dest=49638 netif=eth0 [ 711.955712][ T5873] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 712.422767][T12811] Bluetooth: hci2: command 0x0405 tx timeout [ 712.989682][ T3441] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 713.150678][ T5873] usb 4-1: Using ep0 maxpacket: 8 [ 713.169641][ T5873] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 713.188183][T14502] tmpfs: Bad value for 'mpol' [ 713.192120][T12917] libceph: connect (1)[c::]:6789 error -101 [ 713.194054][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.213057][T12917] libceph: mon0 (1)[c::]:6789 connect error [ 713.520077][ T5873] usb 4-1: Product: syz [ 713.521078][T12917] libceph: connect (1)[c::]:6789 error -101 [ 713.578308][ T5873] usb 4-1: Manufacturer: syz [ 713.730091][T12917] libceph: mon0 (1)[c::]:6789 connect error [ 713.734019][ T5873] usb 4-1: SerialNumber: syz [ 713.747155][ T5873] usb 4-1: config 0 descriptor?? [ 714.301869][T14510] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 714.817839][ T5874] libceph: connect (1)[c::]:6789 error -101 [ 714.824315][ T5873] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 714.833195][T14498] ceph: No mds server is up or the cluster is laggy [ 714.840015][ T5874] libceph: mon0 (1)[c::]:6789 connect error [ 715.039826][T14479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.063172][T14479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.095075][ T26] block nbd2: Possible stuck request ffff888025e978c0: control (read@0,4096B). Runtime 120 seconds [ 715.169393][T12811] Bluetooth: hci2: command 0x0405 tx timeout [ 715.301109][ T58] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 715.554400][ T58] usb 6-1: Using ep0 maxpacket: 16 [ 716.191354][ T58] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 716.226641][ T58] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 716.245273][ T58] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 716.256988][ T58] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.267599][ T58] usb 6-1: config 0 descriptor?? [ 716.370608][ T5839] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 716.830533][ T5873] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 716.869052][ T5873] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 716.890429][ T5873] usb 4-1: media controller created [ 716.916232][ T5873] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 716.956730][ T5839] usb 1-1: Using ep0 maxpacket: 32 [ 716.987996][ T5839] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 717.082917][ T5839] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 717.124089][ T5839] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 717.129337][ T58] input: HID 05ac:8241 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:05AC:8241.001F/input/input65 [ 717.168416][ T5839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.190132][ T5839] usb 1-1: config 0 descriptor?? [ 717.247195][ T58] appleir 0003:05AC:8241.001F: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.5-1/input0 [ 718.047958][ T5839] usbhid 1-1:0.0: can't add hid device: -71 [ 718.067919][ T5873] i2c i2c-1: Added multiplexed i2c bus 2 [ 718.067955][ T5839] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 718.073606][ T5873] rtl2832 1-0010: Realtek RTL2832 successfully attached [ 718.073976][ T5873] usb 4-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))... [ 718.196404][ T5839] usb 1-1: USB disconnect, device number 12 [ 718.420132][ T58] usb 6-1: reset high-speed USB device number 38 using dummy_hcd [ 718.634025][ T5873] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 718.718852][ T58] usb 6-1: device descriptor read/64, error -32 [ 718.954729][ T5873] usb 4-1: USB disconnect, device number 83 [ 719.100694][ T58] usb 6-1: reset high-speed USB device number 38 using dummy_hcd [ 719.170469][T14561] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 719.292997][ T5872] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 719.504524][ T5872] usb 7-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 719.517447][ T5872] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 719.530036][ T5872] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 719.543175][ T5872] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 719.552254][ T5872] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.563485][T14558] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 720.082916][T13601] usb 6-1: USB disconnect, device number 38 [ 720.258507][ T29] kauditd_printk_skb: 244 callbacks suppressed [ 720.258546][ T29] audit: type=1326 audit(2000000318.896:479360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14566 comm="syz.0.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07c18cde9 code=0x7ffc0000 [ 720.446628][ T29] audit: type=1326 audit(2000000318.896:479361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14566 comm="syz.0.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07c18cde9 code=0x7ffc0000 [ 720.518649][ T5872] aiptek 7-1:17.0: Aiptek using 400 ms programming speed [ 720.609915][ T5872] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:17.0/input/input66 [ 720.678256][ T29] audit: type=1326 audit(2000000318.896:479362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14566 comm="syz.0.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc07c18cde9 code=0x7ffc0000 [ 720.743489][ T29] audit: type=1326 audit(2000000318.896:479363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14566 comm="syz.0.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07c18cde9 code=0x7ffc0000 [ 720.783801][ T29] audit: type=1326 audit(2000000318.896:479364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14566 comm="syz.0.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07c18cde9 code=0x7ffc0000 [ 720.833453][ T29] audit: type=1326 audit(2000000318.896:479365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14566 comm="syz.0.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fc07c18cde9 code=0x7ffc0000 [ 720.929371][ T29] audit: type=1326 audit(2000000318.896:479366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14566 comm="syz.0.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07c18cde9 code=0x7ffc0000 [ 720.992939][ T29] audit: type=1326 audit(2000000318.896:479367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14566 comm="syz.0.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07c18cde9 code=0x7ffc0000 [ 721.056957][ T29] audit: type=1326 audit(2000000318.905:479368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14566 comm="syz.0.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7fc07c18cde9 code=0x7ffc0000 [ 721.093858][ T29] audit: type=1800 audit(2000000318.905:479369): pid=14571 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.2396" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 722.274822][T14586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2400'. [ 722.287334][ T5872] usb 7-1: USB disconnect, device number 41 [ 722.293397][ C0] aiptek 7-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 722.913145][T14589] kvm: pic: level sensitive irq not supported [ 722.913205][T14589] kvm: pic: non byte read [ 723.036167][T14595] atomic_op ffff888029b6a998 conn xmit_atomic 0000000000000000 [ 723.399086][T14421] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 724.593346][T14565] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 724.606818][T14582] team0: No ports can be present during mode change [ 724.624713][T14583] vlan0: entered promiscuous mode [ 725.894897][T12917] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 726.048864][T14586] team0 (unregistering): Port device team_slave_0 removed [ 726.070669][T14586] team0 (unregistering): Port device team_slave_1 removed [ 726.091333][T12917] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 726.104540][T12917] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 726.122392][T12917] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 726.134231][T12917] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 726.150400][T12917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.192927][T14612] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 726.255466][ T5839] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 726.416155][ T5839] usb 7-1: Using ep0 maxpacket: 32 [ 726.457087][ T5839] usb 7-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 726.903281][T14419] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 726.924553][ T5839] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.948327][ T5839] usb 7-1: Product: syz [ 726.953849][ T5839] usb 7-1: Manufacturer: syz [ 726.958650][ T5839] usb 7-1: SerialNumber: syz [ 726.990784][ T5839] usb 7-1: config 0 descriptor?? [ 727.012168][ T5839] rtl8150 7-1:0.0: couldn't find required endpoints [ 727.032008][ T5839] rtl8150 7-1:0.0: probe with driver rtl8150 failed with error -5 [ 727.941941][ T5839] usb 7-1: USB disconnect, device number 42 [ 728.489910][ T5839] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 728.664570][T12917] aiptek 6-1:17.0: Aiptek using 400 ms programming speed [ 728.676348][ T5839] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 728.702392][T12917] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input67 [ 728.746516][ T5839] usb 1-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 728.755599][ T5839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.780226][ C1] aiptek 6-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 728.788524][T12917] usb 6-1: USB disconnect, device number 39 [ 728.826306][ T5839] usb 1-1: config 0 descriptor?? [ 729.288423][ T5839] kye 0003:0458:5017.0020: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 729.339356][ T5839] kye 0003:0458:5017.0020: hidraw0: USB HID v0.00 Device [HID 0458:5017] on usb-dummy_hcd.0-1/input0 [ 729.372130][ T5839] kye 0003:0458:5017.0020: tablet-enabling feature report not found [ 729.396005][ T5839] kye 0003:0458:5017.0020: tablet enabling failed [ 729.507148][ T5839] usb 1-1: USB disconnect, device number 13 [ 731.464315][ T5971] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 732.813305][ T5197] udevd[5197]: worker [12536] /devices/virtual/block/nbd2 is taking a long time [ 747.244777][ T26] block nbd2: Possible stuck request ffff888025e978c0: control (read@0,4096B). Runtime 150 seconds [ 753.299672][T14669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2425'. [ 753.314009][T14669] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2425'. [ 753.399765][ T30] INFO: task syz.2.1990:12844 blocked for more than 143 seconds. [ 753.407571][ T30] Not tainted 6.14.0-rc2-syzkaller-00228-g04f41cbf03ec #0 [ 753.637017][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 753.781075][ T30] task:syz.2.1990 state:D stack:21680 pid:12844 tgid:12844 ppid:5837 task_flags:0x400040 flags:0x00004004 [ 753.832475][ T30] Call Trace: [ 753.835958][ T30] [ 753.839472][ T30] __schedule+0x18bc/0x4c40 [ 754.008225][ T30] ? __pfx___schedule+0x10/0x10 [ 754.019891][ T30] ? __pfx_lock_release+0x10/0x10 [ 754.028777][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 754.037238][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 754.047796][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 754.056611][ T30] ? schedule+0x90/0x320 [ 754.061559][ T30] schedule+0x14b/0x320 [ 754.072911][ T30] schedule_preempt_disabled+0x13/0x30 [ 754.078376][ T30] __mutex_lock+0x817/0x1010 [ 754.087341][ T30] ? __mutex_lock+0x602/0x1010 [ 754.092117][ T30] ? bdev_release+0x17e/0x700 [ 754.099195][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 754.104258][ T30] ? __pfx_ima_file_free+0x10/0x10 [ 754.112604][ T30] bdev_release+0x17e/0x700 [ 754.117306][ T30] ? __pfx_call_rcu+0x10/0x10 [ 754.122124][ T30] blkdev_release+0x15/0x20 [ 754.127224][ T30] ? __pfx_blkdev_release+0x10/0x10 [ 754.132465][ T30] __fput+0x3e9/0x9f0 [ 754.136645][ T30] task_work_run+0x24f/0x310 [ 754.141278][ T30] ? _raw_spin_unlock+0x28/0x50 [ 754.146144][ T30] ? __pfx_task_work_run+0x10/0x10 [ 754.151476][ T30] ? syscall_exit_to_user_mode+0xa3/0x340 [ 754.157220][ T30] syscall_exit_to_user_mode+0x13f/0x340 [ 754.163072][ T30] do_syscall_64+0x100/0x230 [ 754.167679][ T30] ? clear_bhb_loop+0x35/0x90 [ 754.172401][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.178425][ T30] RIP: 0033:0x7f177458cde9 [ 754.189227][ T30] RSP: 002b:00007ffce888f438 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 754.203650][ T30] RAX: 0000000000000000 RBX: 00007f17747a7ba0 RCX: 00007f177458cde9 [ 754.214900][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 754.223430][ T30] RBP: 00007f17747a7ba0 R08: 0000000000000214 R09: 0000001ee888f72f [ 754.231881][ T30] R10: 00007f17747a7ac0 R11: 0000000000000246 R12: 000000000008b2ec [ 754.240951][ T30] R13: 00007f17747a6080 R14: ffffffffffffffff R15: 00007ffce888f550 [ 754.266921][ T30] [ 754.270254][ T30] INFO: task syz.2.1990:12845 blocked for more than 144 seconds. [ 754.337062][ T30] Not tainted 6.14.0-rc2-syzkaller-00228-g04f41cbf03ec #0 [ 754.346391][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 754.367253][ T30] task:syz.2.1990 state:D stack:26584 pid:12845 tgid:12844 ppid:5837 task_flags:0x400140 flags:0x00004004 [ 754.399254][ T30] Call Trace: [ 754.402725][ T30] [ 754.408054][ T30] __schedule+0x18bc/0x4c40 [ 754.412962][ T30] ? __pfx___schedule+0x10/0x10 [ 754.423965][ T30] ? __pfx_lock_release+0x10/0x10 [ 754.431019][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 754.443043][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 754.450662][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 754.464539][ T30] ? schedule+0x90/0x320 [ 754.471218][ T30] schedule+0x14b/0x320 [ 754.475498][ T30] schedule_preempt_disabled+0x13/0x30 [ 754.489372][ T30] __mutex_lock+0x817/0x1010 [ 754.495955][ T30] ? __mutex_lock+0x602/0x1010 [ 754.506812][ T30] ? bdev_release+0x17e/0x700 [ 754.515372][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 754.520783][ T30] ? __pfx_ima_file_free+0x10/0x10 [ 754.531345][ T30] bdev_release+0x17e/0x700 [ 754.542127][ T30] blkdev_release+0x15/0x20 [ 754.549330][ T30] ? __pfx_blkdev_release+0x10/0x10 [ 754.555924][ T30] __fput+0x3e9/0x9f0 [ 754.559913][ T30] task_work_run+0x24f/0x310 [ 754.567638][ T30] ? __pfx_task_work_run+0x10/0x10 [ 754.572762][ T30] ? syscall_exit_to_user_mode+0xa3/0x340 [ 754.580011][ T30] syscall_exit_to_user_mode+0x13f/0x340 [ 754.588174][ T30] do_syscall_64+0x100/0x230 [ 754.592774][ T30] ? clear_bhb_loop+0x35/0x90 [ 754.600982][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.611033][ T30] RIP: 0033:0x7f177458cde9 [ 754.615470][ T30] RSP: 002b:00007f177539f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 754.625673][ T30] RAX: 0000000000000000 RBX: 00007f17747a5fa0 RCX: 00007f177458cde9 [ 754.636897][ T30] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 000000000000000a [ 754.644995][ T30] RBP: 00007f177460e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 754.653159][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 754.661331][ T30] R13: 0000000000000000 R14: 00007f17747a5fa0 R15: 00007ffce888f2d8 [ 754.669396][ T30] [ 754.672915][ T30] [ 754.672915][ T30] Showing all locks held in the system: [ 754.680645][ T30] 1 lock held by khungtaskd/30: [ 754.689900][ T30] #0: ffffffff8eb38f60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 754.700129][ T30] 2 locks held by getty/5578: [ 754.709287][ T30] #0: ffff8880354aa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 754.719296][ T30] #1: ffffc9000330b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x616/0x1770 [ 754.729522][ T30] 1 lock held by udevd/12536: [ 754.734217][ T30] #0: ffff888025dc74c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 754.743904][ T30] 1 lock held by syz.2.1990/12844: [ 754.749121][ T30] #0: ffff888025dc74c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x17e/0x700 [ 754.758916][ T30] 1 lock held by syz.2.1990/12845: [ 754.764041][ T30] #0: ffff888025dc74c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x17e/0x700 [ 754.774199][ T30] 1 lock held by syz-executor/13020: [ 754.779683][ T30] [ 754.782356][ T30] ============================================= [ 754.782356][ T30] [ 754.795390][ T30] NMI backtrace for cpu 0 [ 754.795401][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc2-syzkaller-00228-g04f41cbf03ec #0 [ 754.795412][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 754.795418][ T30] Call Trace: [ 754.795422][ T30] [ 754.795427][ T30] dump_stack_lvl+0x241/0x360 [ 754.795442][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 754.795452][ T30] ? __pfx__printk+0x10/0x10 [ 754.795473][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 754.795491][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 754.795504][ T30] ? _printk+0xd5/0x120 [ 754.795517][ T30] ? __pfx__printk+0x10/0x10 [ 754.795530][ T30] ? __wake_up_klogd+0xcc/0x110 [ 754.795543][ T30] ? __pfx__printk+0x10/0x10 [ 754.795557][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 754.795571][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 754.795583][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 754.795599][ T30] watchdog+0x1058/0x10a0 [ 754.795614][ T30] ? watchdog+0x1ea/0x10a0 [ 754.795629][ T30] ? __pfx_watchdog+0x10/0x10 [ 754.795641][ T30] kthread+0x7a9/0x920 [ 754.795654][ T30] ? __pfx_kthread+0x10/0x10 [ 754.795668][ T30] ? __pfx_watchdog+0x10/0x10 [ 754.795681][ T30] ? __pfx_kthread+0x10/0x10 [ 754.795693][ T30] ? __pfx_kthread+0x10/0x10 [ 754.795708][ T30] ? __pfx_kthread+0x10/0x10 [ 754.795720][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 754.795729][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 754.795739][ T30] ? __pfx_kthread+0x10/0x10 [ 754.795753][ T30] ret_from_fork+0x4b/0x80 [ 754.795764][ T30] ? __pfx_kthread+0x10/0x10 [ 754.795777][ T30] ret_from_fork_asm+0x1a/0x30 [ 754.795794][ T30] [ 754.795799][ T30] Sending NMI from CPU 0 to CPUs 1: [ 754.966431][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x21/0x30 [ 754.967818][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 754.982804][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc2-syzkaller-00228-g04f41cbf03ec #0 [ 754.993315][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 755.003382][ T30] Call Trace: [ 755.006664][ T30] [ 755.009584][ T30] dump_stack_lvl+0x241/0x360 [ 755.014263][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 755.019461][ T30] ? __pfx__printk+0x10/0x10 [ 755.024048][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 755.030056][ T30] ? vscnprintf+0x5d/0x90 [ 755.034377][ T30] panic+0x349/0x880 [ 755.038272][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 755.044424][ T30] ? __pfx_panic+0x10/0x10 [ 755.048838][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 755.054202][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 755.060349][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 755.066500][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 755.072666][ T30] watchdog+0x1097/0x10a0 [ 755.077018][ T30] ? watchdog+0x1ea/0x10a0 [ 755.081431][ T30] ? __pfx_watchdog+0x10/0x10 [ 755.086098][ T30] kthread+0x7a9/0x920 [ 755.090421][ T30] ? __pfx_kthread+0x10/0x10 [ 755.095003][ T30] ? __pfx_watchdog+0x10/0x10 [ 755.099673][ T30] ? __pfx_kthread+0x10/0x10 [ 755.104252][ T30] ? __pfx_kthread+0x10/0x10 [ 755.108834][ T30] ? __pfx_kthread+0x10/0x10 [ 755.113416][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 755.118604][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 755.123792][ T30] ? __pfx_kthread+0x10/0x10 [ 755.128377][ T30] ret_from_fork+0x4b/0x80 [ 755.132786][ T30] ? __pfx_kthread+0x10/0x10 [ 755.137367][ T30] ret_from_fork_asm+0x1a/0x30 [ 755.142128][ T30] [ 755.145362][ T30] Kernel Offset: disabled [ 755.149672][ T30] Rebooting in 86400 seconds..