last executing test programs: 1m21.731184741s ago: executing program 4 (id=562): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000002180)={0xa, 0x4e21, 0x8, @local, 0x8}, 0x1c, 0x0}}], 0x1, 0x240880d1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r2 = syz_open_pts(r1, 0x80) r3 = dup3(r2, r1, 0x80000) read(r3, 0x0, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) mount$fuse(0x0, 0x0, 0x0, 0x8400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000200)={0x100, r5}, 0x0) close(r4) syz_usb_connect$cdc_ncm(0x3, 0x7e, &(0x7f0000000780)=ANY=[@ANYBLOB="12010003020000102505a1a44000010203010902"], &(0x7f0000000640)={0x0, 0x0, 0x19, &(0x7f0000000240)=ANY=[@ANYBLOB="050f1900016a"]}) 1m21.086093593s ago: executing program 3 (id=567): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000060000000000000000000702fffef8ffffffb7f37c355ac5b3f4bfc53503000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x40) socket(0x2a, 0x2, 0x0) write$tcp_mem(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000001080500000000000000100002000001140093407c8f31a8999e23521be9bca191048008000140000000040800014000000009"], 0x28}}, 0x20008040) recvmmsg(r0, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0}, 0x101}], 0x1, 0x40010021, 0x0) ppoll(0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m19.174055093s ago: executing program 3 (id=570): prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) fanotify_init(0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB="000000001820000000000000", @ANYRES32, @ANYBLOB="826a20f2b01c2f9895e274927cc6959afd5da7ed539d133c803409ebfd490ed2538d8822445b452f89851386542ae7742a20eeec6f83b6dd12213dba4ceda994846c03509d05f258893dc5b89f48af3c0bcdbfad9494992c0104a1d6ca36af92f64ad098be488e2521eeec8083653f605b0f06ab27331623c9f5d767d3af94e658b698f07ae511bd7d5016eb42fb789164f366dc63cbdf95c97e7d93dbc84e0dbffecf39a8a964740301ad521197084f16de261f022a02ea61a0c1c17ef759830b5c0899f4e911b47b41b0fdc8d2a16135b099cc77ce99566f19b5fc1ed2dd0ea5271e84aa7f69768244c0cb6378df0e06ec8ba9e51af2b61ac10ba0fde47ca39099709569aad72a6cfd9a4d8d10939b01bc32300f0ed1b25a93bc72cdf1f920154b76df8776f086e27c9a736dd94eddbcfe2928f1544e81215d743f842ec8792848aae3cc281b92779a4758ae104c055cd47e49f3844457", @ANYRES64=0x0], 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f00000001c0)={&(0x7f0000000040), 0x0, 0x0, &(0x7f0000000180)=""/34, 0x22}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000bf660000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000db60000b70300000000008385000000710000009500000000000000", @ANYRESOCT=r0], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffce7, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610418000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4}, 0x94) 1m18.782093263s ago: executing program 3 (id=572): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001a000100000000000000000002000000000000000030000008000100ac1414001ed15999d48e34ac31d07771b4b46f01f5780e083e1d1b4fc68262d1593bd7dca6fc4cec1897d373d7d8603857ae8d85c0b0ca5882648598d49944bdeebbe8a4fc30cff1dd1ca73b4c4866f306d4ca"], 0x24}}, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r0, 0xc008aec1, &(0x7f0000000140)={0x6, 0x0, [{0x6, 0x9, 0x8, 0xa1ed, 0x4, 0x3ff, 0x1}, {0x0, 0x2138, 0x2, 0x6, 0x5, 0xbcef, 0x5}, {0x1, 0x3, 0x4, 0x5, 0x0, 0x3, 0x8001}, {0x6, 0x0, 0x2, 0xff, 0x101, 0x66d, 0x400}, {0x80000000, 0x502, 0x1, 0x4, 0x401, 0xffff, 0x3}, {0x2, 0x7, 0x4, 0x400, 0x7, 0x6, 0xffb6}]}) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"]) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 1m18.781497263s ago: executing program 0 (id=573): r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x400201) readv(r0, &(0x7f0000000280)=[{&(0x7f00000029c0)=""/4110, 0x100e}, {0x0}, {&(0x7f0000000180)=""/11, 0xb}, {&(0x7f0000000200)=""/4, 0x4}, {&(0x7f0000000240)=""/37, 0x25}, {&(0x7f0000004040)=""/4096, 0x1000}], 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r1, &(0x7f0000000980)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$HIDIOCGRAWPHYS(r1, 0x80404805, &(0x7f0000000140)) (async) setresuid(r2, r2, 0x0) (async) fsetxattr$security_capability(r0, &(0x7f0000000000), &(0x7f0000000040)=@v3={0x3000000, [{0x5, 0x1}, {0x8e, 0x1}], r2}, 0x18, 0x1) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003a00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5e0, 0x0, 0x0, 0x118, 0x118, 0x330, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, &(0x7f00000000c0), {[{{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xff000000, 0xff0000ff, 0xffffff00, 0xff], 'veth1_to_bond\x00', 'syzkaller1\x00', {}, {0x1fe}, 0x3a, 0x37, 0x6, 0xd}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@local, @ipv4=@private=0xa010102, 0x3f, 0x3a, 0x7ff}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xff, 0x1}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@icmp6={{0x28}, {0x5, "a4ef"}}, @inet=@rpfilter={{0x28}}]}, @HL={0x28, 'HL\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffffff, 0xffffffff, 0xff000000, 0xff000000], [0xffffff00, 0xffffff00, 0xffffffff, 0xff], 'vcan0\x00', 'dvmrp1\x00', {}, {}, 0x2e, 0x1, 0x2, 0x8}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xf20, 0x4, @ipv6=@empty, 0x4e21}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x640) 1m18.487576954s ago: executing program 0 (id=575): sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) (async) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f00000003c0)=""/189) (async) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x18, r2, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) (async) ioprio_set$uid(0x3, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000040)=0x7, 0x4) (async) sendfile(r0, r0, 0x0, 0x200000) 1m17.309744504s ago: executing program 3 (id=576): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) r4 = syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xb423, 0x0, 0x5, 0x199}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r3, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r4, 0x3516, 0x3e44, 0x8, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x1c, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x17, 0x0, 0x0, @u32=0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008080}, 0x200c0084) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) (async) connect$unix(r0, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) (async) syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xb423, 0x0, 0x5, 0x199}, &(0x7f00000001c0), &(0x7f0000000040)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r3, 0x0, 0x0, 0x0, 0x80800}) (async) io_uring_enter(r4, 0x3516, 0x3e44, 0x8, 0x0, 0x0) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x1c, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x17, 0x0, 0x0, @u32=0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008080}, 0x200c0084) (async) 1m17.227313534s ago: executing program 0 (id=578): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) (async) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) (async) sendmsg$nl_route_sched(r4, 0x0, 0x880) connect$inet(r3, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) (async) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) (async) r6 = dup2(r5, r5) write$tun(r6, &(0x7f0000000180)=ANY=[@ANYRES64, @ANYRESHEX=r0], 0x46) recvmmsg(r6, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x28, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x28}}, 0x0) (async) syz_io_uring_setup(0x466, &(0x7f0000000440)={0x0, 0x3a0c, 0x80, 0x2, 0x804}, &(0x7f0000000280), &(0x7f0000000040)) 1m17.141790628s ago: executing program 4 (id=579): r0 = userfaultfd(0x801) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) (async) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x4000000007) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) socket$inet6_udplite(0xa, 0x2, 0x88) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) (async) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) syz_io_uring_setup(0x117, 0x0, 0x0, 0x0) (async) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) close(0x3) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_open_dev$video(&(0x7f0000003200), 0x7, 0x0) ioctl$VIDIOC_S_FBUF(r4, 0x4030560b, &(0x7f00000032c0)={0x0, 0x0, 0x0}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r6, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xfffffffffffffffb}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000500)={0x28, 0x4, r6, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x10001}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0, 0x1}) 1m17.017774637s ago: executing program 0 (id=580): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000060000000000000000000702fffef8ffffffb7f37c355ac5b3f4bfc53503000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x40) socket(0x2a, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000001080500000000000000100002000001140093407c8f31a8999e23521be9bca191048008000140000000040800014000000009"], 0x28}}, 0x20008040) recvmmsg(r0, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0}, 0x101}], 0x1, 0x40010021, 0x0) ppoll(0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m16.661731129s ago: executing program 4 (id=582): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000180)=0xd, 0x4) (async) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000180)=0xd, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000000c0)=0x63ba, 0x4) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000000)=0xdd, 0x4) sendmmsg$inet6(r2, &(0x7f00000002c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c, 0x0}}], 0x1, 0x40000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0xffffffffffffffb0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002b0009ef"], 0x14}}, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r5], 0x48}}, 0x0) recvmmsg(r3, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10000, 0x0) (async) recvmmsg(r3, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10000, 0x0) recvmmsg(r2, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0x5}], 0x1, 0x40002042, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(r6, &(0x7f0000000300)=""/135, 0x87, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x69, @empty, 0x1000}, 0x1c) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="180300000000000000000000000000008510000006000000180000000000000000000000000000006500000000000000180000000000000000000000000000009500000000000000d83ce17294231c369500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) (async) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) close(r1) (async) close(r1) 1m15.725096181s ago: executing program 4 (id=583): socket$packet(0x11, 0x2, 0x300) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4842, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xe) (async) ioctl$TCSETSW2(r2, 0x5408, 0x0) (async) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="000086dd0203030009000a004000623d885d009c11fffc000000000000000000000000000000ff0200000000000000000000000000014e224e21009c90"], 0xd2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x65205, 0x1c900}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x2020d}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x94}, 0x0) 1m15.353510584s ago: executing program 0 (id=586): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000a40)=[{{&(0x7f0000000380)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000480)="b8cd9f9b1f1d61f56c6beb9e400a4d99be987e0d1320c4b2867c4c9b91068ef4aed00a2d1d7321ea956c1ea41c45589363c22898421ba04b23ec77bdd412c6c8d601c9ab2f9747dfdba73d28b399019ff398e20f855234a34cf65908941354006493b220606769e3498705f7d84cf26a12b12f60b8621ee81dc57a2cc9b2edb0cec39dec71993ae597321b187feae4c82127", 0x92}, {&(0x7f0000000640)="ccf249e64219fe6b6372d4a4f9dfe161d84fe5458d073603acef2186c1722b9638354c8ea34a6963622586f61d8c211e5880fcf8c9411a155ea89af3d7aea61ed758e9149d35cb26a9d108f2a1c8101caf8c4c28371cb901a7436b412c607d10fca165fbb09adfdec102b1137cb9cdf707dc24d8477c4e2a5036ad7cf7aa26f9abea9b8e715cfd0211ff18389fa67e50286ca4c50254c04b149e78fba4c60110b82c5fac998bcabc609010af0f5758adbc68a540edcca282e790749d14139bd50f028e490b9113b4a1d3ac75c365103fb7b735ff2952e905e25fa9c99aad5ecc0f29673a11ae3cf693c4", 0xea}, {&(0x7f0000000740)="2fbd42f7ceea1923aed2bb1e34765eebffe11a730b39e149bcf39222e2ba3173c737240f8bcd28e9c6ade227e9a4bddb8d09beee335ace62ea3e63ee1ff97683034722df7521bed3a4dee3b671e6cd617d8d04c258da2c970fb634a098385cff995b73cd6356c6be4c459343a64c68063e4c2437e340bed0c8a240152a8ad32654d984dd129cdcc5a1889b5c2c1038a34a910d0d3d8a4806fd3a8f805903e044210ab159258cdbed291c60a87c15f0fc4ff4b67d299a547565915a0aa11a3515470e4d9eaaf4fa444e9f", 0xca}, {&(0x7f0000000540)="03d820172ef20dcc6a1f1f0b481cd97948413db033b937046ff935a9d11e023a9145f3d0793103693db14cc5e3ef93d60d7ad3c7cbd1edf9bed458b5ca814e262856f36271d8e243f2d790e082e482e60a7828972e796253e7e11e71708d94c2d55213834c8958b3d7c481f15ac037284d3770fcee7028d17ce1d359c28a555931aba5e3bba941c793e639006d90", 0x8e}, {&(0x7f00000002c0)="aa6b4dee273ea7f00d47b08fa01969ba6078a2842765174a99e0bdb8a906174a4648e79f25731d28cdc607cc4e3036b14b4651ea12b929a040272f04eac1e223", 0x40}, {&(0x7f0000000840)="68ea8d0a35538a201398381b4cda8feb3fe20a423a2a10b950c631b06eb7b90d6ca342ca52d1702e67399d76e2479593580aee04a5a494232c612ccca17f91ee0f35ce32a5b19c6e35985287f63fec64aadfa3d293e05632abe31d1a7231eb7221a19da82f40060d10f88e0cd2b241d4d884fe4ca6575f23722b115fd538ae4b102d418883dfa433626a75f7841f8bc46c3e7bf09df27231261160403899b824c304408db301166bf73c1fe1f1e8e5cfc8fd998f0c8d900f4f554fe923fcda6325b2782ce0", 0xc5}, {&(0x7f0000000940)="bc8cc547c62ca94d676233", 0xb}, {&(0x7f0000000980)="c93a42b182d39a2d27b0c694b2333f335f8d9fdf92aad525d451a58e59cdeb8ab7046abb6d2aad354f8d74ca88dbe774e50513bb5ba7b084ab", 0x39}], 0x8, 0x0, 0x0, 0x4000000}}], 0x1, 0x24008045) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = eventfd2(0x8001, 0x1) r8 = eventfd(0x8008) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000100)={0x1, 0x0, 0x4, r8}) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000000)={0x25a, 0x0, 0x0, r7, 0x5}) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) lsetxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100), &(0x7f0000000600)=@v3={0x3000000, [{0x4, 0x3}, {0xffff, 0xc4}]}, 0x18, 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000000480)=ANY=[], 0xc, 0x1) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f0000000140)='./file0\x00', 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x10000000001}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000010401080000000000000000000000060800035b000001090800054000001e000600064000020000060006400003000006000640000600000a0002000000000702020000"], 0x48}}, 0x4008885) 1m15.300430928s ago: executing program 3 (id=587): syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0x1a, {"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", 0x1000}}, 0x1006) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="040000000000000008003f006563060008001b"], 0x30}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r5, &(0x7f0000000180), 0x8) ioctl$SIOCX25SSUBSCRIP(r5, 0x89e1, &(0x7f0000000200)={'ip6tnl0\x00', 0xfffffffffffffffa, 0x2}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) 1m15.141755483s ago: executing program 4 (id=588): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002300)=@o_path={0x0, 0x0, 0x4000}, 0x18) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002340), 0x208400, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002200)={0x6, 0x0, 0x0, &(0x7f0000001100)='GPL\x00', 0xc79, 0x1000, &(0x7f0000001140)=""/4096, 0x1f00, 0xe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x48, 0x10, &(0x7f0000002180)={0x0, 0x20000, 0xb, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x1, 0x1, r1, r1, r0, r1, r0], 0x0, 0x10, 0x5}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_open_dev$video(0x0, 0x7, 0x0) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000040)=0x9) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) lseek(r3, 0xfffffffffffffff5, 0x1) mount$fuse(0x0, &(0x7f00000025c0)='./file0\x00', 0x0, 0xa0001c, &(0x7f0000002640)=ANY=[]) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0xc801}, 0x2c000010) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) preadv2(r2, 0x0, 0x0, 0x9, 0x4, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xdc}}, 0x0) syz_emit_ethernet(0xb6, &(0x7f0000002600)=ANY=[@ANYBLOB="aaaaaaaa000086dd603000bb00c02b00fc020000000000000000000000000000000000000000f28958d7e50634fe14315e05000000000000c910fe8000000000000000000000000000aac2040000000800010004017005020006050200020103000000050200060008004e21004890780300000002000000f9b303e6b62a1ea4588e0ab08e87b69a244e716ca673fbd171db66747e"], 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002004000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) read$FUSE(r3, &(0x7f0000000580)={0x2020}, 0x1614) socket$netlink(0x10, 0x3, 0x6) 1m14.92853128s ago: executing program 0 (id=589): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000480)=ANY=[], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(0xffffffffffffffff, 0x0, 0x0) (async) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000700)=0x4000000) (async) write(r1, &(0x7f0000000000)="0a000000010001", 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) syz_open_procfs(0x0, 0x0) (async) syz_usb_connect$cdc_ecm(0x2, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x16, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x8, 0x2}, [@acm={0x4, 0x24, 0x2, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40}}], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x240}}}}}]}}]}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x1e, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="85000000c4000000040000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1}, 0x94) (async) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) 1m14.549660993s ago: executing program 32 (id=589): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000480)=ANY=[], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(0xffffffffffffffff, 0x0, 0x0) (async) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000700)=0x4000000) (async) write(r1, &(0x7f0000000000)="0a000000010001", 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) syz_open_procfs(0x0, 0x0) (async) syz_usb_connect$cdc_ecm(0x2, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x16, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x8, 0x2}, [@acm={0x4, 0x24, 0x2, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40}}], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x240}}}}}]}}]}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x1e, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="85000000c4000000040000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1}, 0x94) (async) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) 1m14.52640191s ago: executing program 3 (id=592): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) write$FUSE_NOTIFY_RESEND(0xffffffffffffffff, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r2 = dup(r1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) write$binfmt_script(r3, &(0x7f00000003c0)={'#! ', './file0', [{0x20, '\\--^^'}, {0x20, 'freezer.parent_freezing\x00'}, {0x20, ':^\xce&'}, {0x20, 'freezer.parent_freezing\x00'}, {0x20, '9p\x00'}, {0x20, '.(-:]&-&$![-'}], 0xa, "3e26757b99cf8ea1bbcfe42bda0b6e76526d8bc6dfbfb24cd8bfc38b391c308516a37495d3d82064424365b016ade34dde63506a998f13c859f01faa6017daa506f9b3a96de7a8ae6b5fc4bd36786a4daf415f314384b98e1799"}, 0xb3) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x34, r4, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}]}, 0x34}}, 0xc800) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x14, r4, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x12, 0xffffffffffffffff, 0xe7bee000) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) 1m14.374024925s ago: executing program 33 (id=592): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) write$FUSE_NOTIFY_RESEND(0xffffffffffffffff, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r2 = dup(r1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) write$binfmt_script(r3, &(0x7f00000003c0)={'#! ', './file0', [{0x20, '\\--^^'}, {0x20, 'freezer.parent_freezing\x00'}, {0x20, ':^\xce&'}, {0x20, 'freezer.parent_freezing\x00'}, {0x20, '9p\x00'}, {0x20, '.(-:]&-&$![-'}], 0xa, "3e26757b99cf8ea1bbcfe42bda0b6e76526d8bc6dfbfb24cd8bfc38b391c308516a37495d3d82064424365b016ade34dde63506a998f13c859f01faa6017daa506f9b3a96de7a8ae6b5fc4bd36786a4daf415f314384b98e1799"}, 0xb3) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x34, r4, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}]}, 0x34}}, 0xc800) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x14, r4, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x12, 0xffffffffffffffff, 0xe7bee000) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) 1m14.329771515s ago: executing program 4 (id=593): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0xa) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000040)=0x4, 0x8) sysfs$2(0x2, 0x80000001, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYRESDEC=r2], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000001300)=""/102392, 0x18ff8) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000080)) r7 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) 1m14.149447905s ago: executing program 34 (id=593): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0xa) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000040)=0x4, 0x8) sysfs$2(0x2, 0x80000001, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYRESDEC=r2], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000001300)=""/102392, 0x18ff8) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000080)) r7 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) 25.875445668s ago: executing program 6 (id=706): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b87034100000040000000ff000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setitimer(0x1, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, 0x0) getitimer(0x1, &(0x7f0000000800)) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x1, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x7, 0x1, 0x3, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x4, 0x3d, 0x6}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x0, 0x61, 0xd, 0x40, 0x8}, 0x26, &(0x7f0000000080)={0x5, 0xf, 0x26, 0x4, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x0, 0x3, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "005074263a54c11725c68ab5eeb4fb31"}]}, 0x3, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x401}}, {0x69, &(0x7f0000000240)=@string={0x69, 0x3, "ad0d0d8b4ec2712ef42803f5b5a4495c233f6217ac1f4abd43583dace352a1781f1e004eebd2e5494d5358905e19504a4c492f6d40a84f804ca20f81e57697b7c05df11591b5b6cef6fc2df31c42c068cee62ba2a900c317836f8a260fb247275c73b85fbcb6a7"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x403}}]}) 21.389596927s ago: executing program 6 (id=711): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={0x0, 0x0, 0x4000}, 0x18) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={0x0, 0x0, 0x4000}, 0x18) open$dir(&(0x7f0000000000)='./file0\x00', 0x20000, 0x7c) (async) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x20000, 0x7c) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(&(0x7f00000000c0), 0x3, 0x2) (async) syz_open_dev$radio(&(0x7f00000000c0), 0x3, 0x2) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, &(0x7f0000000400)) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0xffffffff, 0x1f, 0x7, 0xfffffffa, 0x3, "a4c82192e6aed8e8950470331d04006c9957ed"}) (async) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0xffffffff, 0x1f, 0x7, 0xfffffffa, 0x3, "a4c82192e6aed8e8950470331d04006c9957ed"}) mkdirat(r0, &(0x7f0000002000)='./file0\x00', 0x0) (async) mkdirat(r0, &(0x7f0000002000)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYRES8, @ANYRESDEC=r1]) (async) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYRES8, @ANYRESDEC=r1]) mount(0x0, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0)='bpf\x00', 0x210000e, &(0x7f0000000040)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) symlinkat(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r4, &(0x7f0000000180)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0x9362, 0x0) readlinkat(r4, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) readlinkat(r4, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000008000000000000000000600000000"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r5}, 0x10) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r7, 0x300}}, 0x18) 21.196032312s ago: executing program 6 (id=713): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000bd544c4e2c9216331dd07d8817f8077d38a32048ea5dd5bb"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getpid() getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={0x0, 0xcda, 0x10}, &(0x7f00000001c0)=0xc) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000300)={r3, 0x3, 0x80}, 0x8) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregset(0x4205, r4, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='0', 0x1, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r6, 0x8b2a, &(0x7f0000000040)) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x10, r5, 0x8000000) r10 = syz_io_uring_setup(0x10d2, 0x0, &(0x7f0000000080), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, 0x0, &(0x7f0000001880)=@IORING_OP_RECVMSG={0xa, 0xc8, 0x19, r7, 0x0, &(0x7f0000001840)={&(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000400)=""/157, 0x9d}, {&(0x7f00000004c0)=""/202, 0xca}], 0x2, &(0x7f0000001740)=""/203, 0xcb}, 0x0, 0x40, 0x1, {0x3}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001500010027bd7000ecdbdf25021804ff", @ANYRES32=r8, @ANYBLOB="1400d90078d2897ad3dc1a0cc174f4653c11006c"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x800) 16.969922341s ago: executing program 6 (id=720): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000300)=0xb, 0x4) getpid() r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000740)={"35995b3a25c3e0bc7160913e414ec5d5ee2111aa6c027c91a4c543ffabca666f92ee3ebea9594cb3d407c23bd010146bae93bea39396b7f0fe56ca9623e1670617902dfb8c0eeadd2b7ef3e24ebef0fdc07c34fe15ca5f4bc73f51cd874e82cc4ed92d0d64965fe4e4d002181a1f4c606a82b1a60cf8a63ac51b72fbf93c08d02d8526893dbc29c3c8a5f4c1d4452c41d4e0b2d5c9d4a8c04671ce234cef82106d8a6c3d96bb93c57835e1d54a3aa8c73a6a7c2310582d323ebc6a095db9ef8d5c8c43fd502fd4467261b8a8ef20738ee7e0124504421b365d6ac470406519ee498cd55a21a87ee672b83102cc5c44c44c21af1e3e94bc054f0c0c80df2993392f231189b02fa749f257fc9d5efdbe2bcdfdfabdd4b5a924bd76c22d0aeaaed35444212429c2aaf541f5d21ae6f159fb9d021bd2925d5666830f08bcf644634ae4a52a5819295d131e896c2d33ca1f2c6287a0bef9bbbe837c8926760d9558c57549a520e9ef08bdf04fe55c78a1520148f07c2412a6199d263ec7dca8d8b012786a5f31cc12da4a4408fe75b8a6f41b2f6eff11ea03670c11a5bd4ad993458b1373b3bea5a347fac48a0c90a5b8bc2e5a672fd6d3fe07abb6583918b4e0c96e37cab919312870e99240f734cb25688b1af836262d8a37a746339b466b62f0674b7640bca75a871dd42ccf8eac3cc57813dadc4efc006ce3c27fce88590c5218a303973d132ee685d16dd6529c7694ec3acd36020bfbfe264aa3d3d7fe2664e81921b606a4cd27d400b3c2ce4450202feec5047698e0661a7d03dd58ed0cf0becc8038182c12f9d5631847150de1913beae13d16592063b8f0bf9de88612cf55c6bec2c682d97730e40ec868c4d26b46e686f411236681ac82344e9127de11e4ef86af257e5e59eea4e97997edbc435fa6360ef2c88303d8a10f9e215620ad0bac5c6a8b20d5e1928a05870b09ca9106074872c98905ef0f39165893df28840a078775936d33e3eb7bb9705337004134f1e970c611d7623604043cf070d4f69611408274e3564d004c3bf4708b97a3c548fe4b0990501bce8ea24f1b7e2f4c32038017730a8fc6e418a35418c302d38c831f27a895406124423c76340c8b03f0787dca8631df417088034bc3f772b44cc92b67ba48c003853fc52302345d3f69bbc31f261e17c7d9d2af06a9b432d03cdf7c9e76ade81749e16f99263ea01bc05efc6bed460169560fec5cfce5443e9d52c17b967c2bfd35a6a63bd25273a6bf8a07aa1dd3cd5bc2a1554f358280daafe60b594282d5c5ddfeada670dc50072804d18f281c259721610d3dd1ec754c0f934d1b6347de585e1cb17b95a1618f0750ac685cb991c2df5e1f73d0353129ccfb83ab883987d00a2a4396192ce713b99f501b3dd8ec22a73f0279f49765ef250510526d774a625ea50985ce04d022b7"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000280)={"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"}) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400003900120002002800000019002dfd7fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r7, 0xffffffffffffffff, 0x31, 0x0, @val=@netfilter={0x1, 0x1, 0x7}}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000d0c000/0x1000)=nil, 0x1000, 0x0) r8 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$binfmt_script(r8, &(0x7f0000000140)={'#! ', './file0', [{0x20, 'tx\xe8\x9b^\xfb^$\rBuij\r\xd9\xef\xd2Et^Q\v\x9fOFL\x95`Z\xae\xc3a\xfe%\x94\x1a\xebt\xc6\x06\x8fD,\xf7\xae#\x80\x80\xdf\xa3\xcaO\xc6\x8a\x91\x90\xadR\aW\xe1\xf3n\xca\xa3\x8f\xd6F\x03\x0e\x9b\xe5yb\xfc\xa19wUs\x83\xf1{&\n\x1d\x8e\x82y\x1a.B\x0e\xea\x17\xc7\xe7H\xa9\xd4\x8e\xe7 gD\x89*\xb5c\xc5\x8a\xe6R\xe5YGq\xf5\xb6\x95\xbc\x112\x9bno\xc8\x06\xb6\b\xcc\x03{Sn\x94G\x01\xb4\xffJQ8t\x99vY\xaaf\xc7,\x9f\xbb\x15G\x1cr\x19\xef\xab\n\xa8\xbc\xbd\xa2E\x16\x1cm\xbd=\x98\x7fU\xcbg\x15%\x95\xb11\x017\x83*\x14\xcbt\xc2\xcb\x04\x1e~?\xb9j\x18\x96\x84EA\xeaB\a\x83\xba\xdco<\x00'/256}]}, 0x10c) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 16.05337758s ago: executing program 6 (id=722): syz_usb_connect$uac1(0x0, 0x97, &(0x7f0000000d80)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0x2, 0xb0, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x1d}, [@feature_unit={0x13, 0x24, 0x6, 0x3, 0x6, 0x6, [0x3, 0x3, 0x7, 0x1, 0x6, 0x4899e9e2046cc556], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x8, 0x3, 0x49, 0xf6, "ec1f777d"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xd0, 0x33, 0x4, {0x7, 0x25, 0x1, 0x1, 0x8, 0x8001}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x10, 0xc, 0x2002}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x2, 0x1, 0x8, {0x7, 0x25, 0x1, 0x0, 0x40, 0x5}}}}}}}]}}, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f00000001c0)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r3) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x38, r4, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x40}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x38}}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, 0x0) socket$netlink(0x10, 0x3, 0x12) 13.628334161s ago: executing program 5 (id=730): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002300)=@o_path={0x0, 0x0, 0x4000}, 0x18) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002340), 0x208400, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002200)={0x6, 0x0, 0x0, &(0x7f0000001100)='GPL\x00', 0xc79, 0x1000, &(0x7f0000001140)=""/4096, 0x1f00, 0xe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x48, 0x10, &(0x7f0000002180)={0x0, 0x20000, 0xb, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x1, 0x1, r1, r1, r0, r1, r0], 0x0, 0x10, 0x5}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_open_dev$video(0x0, 0x7, 0x0) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000040)=0x9) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) lseek(r3, 0xfffffffffffffff5, 0x1) mount$fuse(0x0, &(0x7f00000025c0)='./file0\x00', 0x0, 0xa0001c, &(0x7f0000002640)=ANY=[]) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0xc801}, 0x2c000010) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) preadv2(r2, 0x0, 0x0, 0x9, 0x4, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xdc}}, 0x0) syz_emit_ethernet(0xb6, &(0x7f0000002600)=ANY=[@ANYBLOB="aaaaaaaa000086dd603000bb00c02b00fc020000000000000000000000000000000000000000f28958d7e50634fe14315e05000000000000c910fe8000000000000000000000000000aac2040000000800010004017005020006050200020103000000050200060008004e21004890780300000002000000f9b303e6b62a1ea4588e0ab08e87b69a244e716ca673fbd171db66747e1d814e47886b958c954b34481b1a7f7945e415108c2a03f040733cb8006d39137a59c3000000000000b3595d94c9428e878ea044a5f6ce15e75c5f57c3f0389729c7ae841e40df0338234480f19a79284b66227d5097d59aad55422d723efa716bf05ab4378e4b99bfbde8f43a824a64876a675a17b59614015aa20c3477b56d17dfce94ba95183c9d9b9398ca81a32211ba"], 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002004000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) read$FUSE(r3, &(0x7f0000000580)={0x2020}, 0x1614) socket$netlink(0x10, 0x3, 0x6) 12.386133699s ago: executing program 5 (id=733): open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x19e) (async) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x19e) socket$inet_udp(0x2, 0x2, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000004100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000004000002850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) sendmsg$sock(r4, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e23, 0x41d, @loopback, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x51, 0x1}}], 0x18}, 0x4010084) syz_emit_ethernet(0x32, &(0x7f0000001480)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3, 0x24, 0x67, 0x0, 0x5, 0x11, 0x0, @private=0xa010101, @local}, {0x4e23, 0x4e22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x6, 0x0, @val=0x80}}}}}}}, 0x0) (async) syz_emit_ethernet(0x32, &(0x7f0000001480)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3, 0x24, 0x67, 0x0, 0x5, 0x11, 0x0, @private=0xa010101, @local}, {0x4e23, 0x4e22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x6, 0x0, @val=0x80}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket(0x10, 0x80002, 0x0) (async) r5 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r5, @ANYRESDEC], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616e733d66642c723ed366646e", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',version=9p2000.u,\x00']) 12.085582761s ago: executing program 5 (id=734): socket$inet_smc(0x2b, 0x1, 0x0) syz_emit_ethernet(0x82, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@multiplanar_overlay={0x5, 0x8, 0x4, 0x2, 0xc8f, {0x0, 0xea60}, {0x5, 0xd, 0x6, 0x8, 0x5, 0x4d}, 0x1000, 0x3, {0x0}, 0x6}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe78, 0x0, 0x0, 0x10, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) socket$kcm(0x29, 0x2, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000100)={0x0, 0xf786, 0x800, 0x0, 0x36c}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x18}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000002ec0)=ANY=[@ANYBLOB="84010000000000009c110000000000008510000002000000850000007600000095000000000000009500a5050000000077d8f3b4000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d75357f21699cdc6751dfb265a0e3ccae669e173a649c1cfd6587d472d64e7cc955d77578f4c35235138d5421f9453559c35da860e8ef14142b2a3e314422b854421eed734ceb1efeecb9c66854c3b3ffe1b4ce25d7c983c005c03bf3a48dfe3e26e7a23129d6606fd28a697a9d552af6d9a9df2c3af333e2008e11bbec0727cb3f647535deb6277f5696833a71011a7d06602e2fd5234712596b696418f163d1a13ed38a682f87925bfa753f541cd027edd68149ee99eebc6f7d6dd4ae59af7588c8e1f4efab57644ccb1973d7879b70a70001040000000000000000d7900a820b63278f4e9a217b98ef7042ad2a923132f208fd8289eaf8cd00000000000009d27d753a300800000000000000a5686f2fccc33e3e34c3969c5ad781302d40e97a8ad10ce0cbe17366d5ac6af2fca2360a15b80400d52040ef7b28d300747877e176fe4c4b8e40dbf260f5a9f7eee30293c1b163b795d0aef4deb851a30000f569dc8f39943f889008e1ec914faa9e6cd0b3b4b3b5db666ebeb49d6a62019d76459e70b459543c4ac42e53b4ad4c77cff373ebd95848f01864e456969cd28000170996016aceb583df5ee4dd722e8c350af489f9a900000000a0dcc36b3d7c734a9cce0439f832a20d7cbdcda5dff3ba92dd66afb9d74aa222038994dcd3e7784dbea1e51a15b0f1a040cc63177f8fafa3192fc8e5552da1a982ab8dfe31ad1a0968faa47c2069d6bf09c3aa4f0fc128cb578d99b08a150b4cc4b22f6a464c6398c952519818a44a1b223ff502df87865c276588ea478e328e8277e811b99ce1acfecaf8e2c55ccc4b8eae0a61635514e99ffd438784060f23ba74c0b30b1180d935832deb686d789ba1d436d116394534e88492a42b8bf050c719661a2dc50b3a1dcfbc871e5c27e3d7260f6fa589e40000b89db451ff994845f6b49c12e89291398bcb3c06ef1289f74e0b0e2cab592d35f82a69e7284223a171c616b1f0fee6c4711d7aecb69746064d2c096554975d605ebebf3d5cf32a9a09915ae3f3d4eb96615d7b237da56cd5e9904a19e145f25b6d98eb2c019967f553b61d0e80d6913cee9f8d18469a654a239a84a85debbc02846ac5791278f18c6759e3b513a68284d2efc30587e433431b2896a3bd48020af67e9ac071b2dd6dc3b9efae4ff03558fa619aea909c7f2416e7e7da1c51ccc7e6ac27412f728dc6d80da8adf317ca863ed683897321f8c8bb5a5d953d6783b7a06353ee496bbdff418de3e53234df87756eb99e330253cf5da4aa1a9648a38f07e2d302b4165983db4f7b8972923fffa8c03c288512a3a38fbd7c816a44634f7a03fab30811b7b93257bea4369ba46024dee5e9b0b2c3d3324e9b7c1f99ab9bb3f498b1485373b79ec84a67dad4e37575dab87ce55a9a69ed856a4c4410d1242ac1bd1539094a641cc086c2c53e363beafc74ab4e9ff320373705cbf5644586ffe60d293944fa2d9dc18b55f1af5c42f27747bef1ffd0c1766f062d47d61bf9f64e6ee288fa7fc12d48da526527b9f5c318c93ec447cb8b5eee7aa8a1e85696af3dfef96657c0545c8ebd96528d9c28828e5befd80d684b03b6d153da3e3cbd3bfbf4a9375b8ad04a1d241bcb5d5505cb6cc7a44e2e24bd0b1ca4879caaff59d0ce39dc7f3fea447f4e46967855208e63ec988bd2692afefbed2b001205e4b30ee8fe417defa566a73ace8f01f7181de0ef25f1744896a3c38859e6148c42454949cd64b1a888e7fe9c2d86bb01023b6ddeb67f5eb038af3e460c771518a4126c338b0390d459361e03adf6e6b558b3651a0e33d101b5febfff8279421778d4a914512ca803da18db6fcf89715c2d338f78d8b9220171b41f528f857a7cb79ca990de1208777e13faaa9b9cb9e67797b07d9eb9e909410b50c5d981d9a72aa36498b630519d1530ef00000000000000000000373494cd59e8ba04ec8db8379bd2044c652dff399a9f8bfa4e9c507f049d18837464276830461ee203ba51f6102d262fc9a26bc3638ecce24e65c55da6efaa462f03d0e119c963a8c7a522b59f5a7b44d018cb2648383073d9e032492cae44350bc0a85697f431392eb22cae093e85954af97d6d7b2e6e8f43353062275ad1578a431594243452a2bfb89f91d8eaac038e9e17136e7c698f73faaabb3d00000000000080014573789425c4c32da528d89356aa6d2ae6da082e756c80cf39053431080ea6cbf9997a5a0ddad0b9d12bc3f880476ab32f0feaac5f16e61f7b72b8c9082eec423c6b3eaecfdcc9ec72795e7696421c83b76c2d6bac19bc875d009679778d8ef97d7e05329649d97b0dc54bea9b650873de2d3d702690176e0b23ee5cb5e469a8d1612d611722e6200e3a297d92f8e1de98326c5ef2b89d4e2d47767cd755783e5d865e373338e96ceb8399f296c59b2d70ca27735ecaff62982616d3ac1ab041733bce119d8002a6c8a2b08b32551b2313b1a2ff41b3f04af61c69c85cb2da48215727271bac2ffdeb62d9f5dc4845f1c3f63dc806e615ee8d28d6d7f181e30807afa27f41d0364c746a65a4af7464db68f3c433d88dd625db35fded2c86d75af88efaf20c8b37c644b6c4e773a9589200faa553bc92f952b75ddbfa18ab73979f46947b35914286d2499a0b8c970000000000000000f4fe74e0c26ab52329bd600627b256ca44dd121ffc8dbb6e5f70cbe03efccac70375b30cc927574d254d1b46c607e8b1ca7d1511568c3ef4b6b885f4582bdcef74e5e010627fc8e4fe00000000000000000000869d9640f06b11df2971909b90133983308ea4f033de613763f32d913bcbe9dd082a6fff197a20730269e6cfd31275395833f1c2b8a50a94c30cceae2a11fe9b9b835d0da73891c0b3ce22dea6bf31e7f51808cf72f44b4455b77a778440795e152dc1b7bb0a5636aa4742ce4d331a47de5836539cdf289176527277b70c8162aaf6f9475418b478329f3565450acfaf41ba88c7eab8cabfa97e35081967bb92a264b07e8003d2f15537e72a1e4ca5ec1e2aaaf8236ecdefbaf512c75e636b6b6f518ad20521f909b12e9bc97e408e0dc82f950d12705f35708bc862196abb27e8d7991b5273987f38c4706289ff4f6130cee76465d487a07a74452f87da2029bd3debd9870335d58d3fe1ac80574fa3ea312997ab81bc6f569ffdb10ba3f20a86d95128d13e0c778998d3b3114bfb07bd61e4bff8a5e2ce4aa572c63e09b44ca4a181bcfe4eec3ce843c65c4948169fe639a186acc2b4a96c6b8d4d2e6d53ab97bea01eab953e6e89e3af34d4ada217bc6fda0fb2095c49195d0d6f365ca80a955b9ec81240a84ef672afa369fc8e3d444ba35d0f51a0065a3b982d09dfc6874fc0d8079b185447cb8a695e132d4d613a529d9c77e2a8f7320ecf698e8a2b170fd601dc1a9767a38b10788e92d1356f6a6c1bcfb2d31b46e735db13f1be80bac1b6be04fd98610000000000000000000000000000139af5493f74751c5e2501a4936bc4a0fa516117f4ccadc692003adee0a080eba2f1059660c0ee0e9aec72d4d0fe095632e4f641b0e34c611c5b3e0ba05fa36542d4f237dda323910672a9097d68398fd3539686e4288db0d6bf7cb8a1835f46dfe11865a66ef47e736dada06677a5bca133d6cbc8fe5c4557e51b006bdccd7c5f32ff1d9e8b130f77df09236870fb3de5b87b4f8acc13df534eba329b8667b4dd0c"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) io_setup(0x8, &(0x7f0000004200)=0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r8 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x3, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e22, 0x0, @private2}}}, 0x108) r9 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r9, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x12f, 0x0) io_submit(r6, 0x1, &(0x7f0000000040)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x2}]) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000040)=r5}, 0x20) 11.250232539s ago: executing program 7 (id=735): openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(0x0, 0x0) semget$private(0x0, 0x0, 0x587) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000400)) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x10, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}, 0x18000}], 0x1, 0x10142, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYRES64=r0], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000004) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @func_proto, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x3e, 0x0, 0x1}, 0x28) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r6}, 0x18) syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401"], 0x0) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r7, 0x707, &(0x7f0000000040)={&(0x7f0000000440)=[{0x1, 0x800, 0x0, 0x0}, {0x7, 0x0, 0x0, 0x0}], 0x2}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="661c3400000073e0a06b4ea023566d0f6cd19a6ae6d8b8262016cefea1626f88c08d5e24a52b462372cd9bebeafbe7e0ae5e15c49c3559ea0d2a2b01254305b3053f87a661a0422ec27c0913889cb4273652c045b173daa2e67da511f8d07a6c9811d7305f54c7a46b980000000000006a33144b3de084c8599b3dfc", @ANYRES16=r5, @ANYBLOB="010000000000000000000300000008000200000000000800040000000000080005006401010208000100", @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x805}, 0x4000040) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'dummy0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x4000010) accept4(r3, 0x0, &(0x7f00000002c0), 0x0) 10.889991723s ago: executing program 5 (id=737): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xb, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES16, @ANYRES32=0x0, @ANYRES8=r3], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fbfbdf25270000000e0001006e655f64657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r9, 0x847ba, 0x0, 0xe, 0x0, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b0400000000000000000200000024000480200001800700010063740000140002800800024000000002080001400000001609000100020073797a3200000000140000001100010180000000000000000000000a00"/120], 0x78}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x0, 0x6, 0x0, @remote, @remote}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x2}}}}}}, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000057c000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) 7.533832925s ago: executing program 7 (id=740): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x40081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) (async) write$binfmt_aout(r0, 0x0, 0xff2e) r1 = creat(&(0x7f0000001380)='./file0\x00', 0x12c) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000001940)={0x10, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xa, "d492a4c7072d10"}) (async, rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000001c0)={0x0, ""/256, 0x0}) (rerun: 32) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000002940)={r2, r3, "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", "8bcca72277e0b850ef8d34dc3610fd146dfe39334792d8012c781895ec4e6818a7a779c1e8381911ece5777dba4428c54056dffee962714e4398e4f9242d9e815302b015462c26fc7a567e5aabf239edd39a3989ba763c5ed2c3fe3e11768d37bb13b2562e682d270f30164148c447955b39f709d14eaf2cfcaa148f3ad67d4c595f05194ac516b78beeb60ed7a600e8af104a95407ada8c05f672d0e4b7ce34558a0172334890fb4727122356771852cf68818bc4b4c3760d0a5003f52c37a1465f0a677f4b495f9d686864553fef44264edc9a1c480fb05778c8d274791b5ce40eea85480bcf17c3b6fa95adb4e8891fd2b99ee2ab3886a32047c69730f6fd7ab332080ef9e0f02fa165d4ed846ed735f60ed0fd8955e73d651313cea928a214a62912025e2b642675a337a9e2b7490b5ede30af581ede88c0781c44c271382de1d5b26f0ebccef0b6b07070d42c99e5249a2e797965f5f6f514fe023c55d236e0ecc44325e92800baefa0abd92f38bb42204a3824e99d3ff28280b1b07b3f49660accd999cfeca35dc26b2905a90f87aa327ed7e10fb8182817493529c4b9f23b5f064c29d48f1ff8e4305fc3a8e9134226cf11ae9d13510aa20b4177efcef4af701efaf7fdf49d2943d58a3198155fcbf0ea36a9ffcccbacfa4b8e494f28b520a704fdc5c121a1020598e3f063742d3b81b8c720cecf60f2c587e5313a274a5a38a660636be4b5d0d9cf998d64e60907925131eccef7dcc5aefdd5b97ca5f7fda2037288ee5cee92c4080552616092682518eefc92b0388fe16c24ffb3878afd744f4459463d0791690e31a206e2287039dfdb88ac89eb92515f8ebaa5b7658c47110e32ca55832ad14a0f0050c3d16f1434571c2716a1184fdbee14f2d7df350309825235d582b66f3dc5da76bc952864f32f4be812848757e699c786fc1137c079aafede890e9683c23c6f1797542cc4197c8888a7521e37f6a7edfa63fcc59954373fd6ad44684ceacf890d4b08ecb9416caa23f99eb2b97eac087ef27464e43bb04d608bbb81bbd2f28e32ff39ffb5e87ed852c71814d2e94fb125b8fe2fadb401571c15f673151cfefe840990cbe6fc5b24da79ef05d3cffcd12faa46136f119d7a4b6c60452a033dc4fea3f4d497bf4c823945d5b765388121ae466e7cee6d24bd14556733258e210c89d359449c56fb7ce0ea5d4e57003f27a081955b7847d8bb78dc2b50673ee4fd92daad745d449b641908bb973d9ff337a26569fb81169383814d8b4450f9bda65efe35be65b361a130be96fbd2b4ff3613a39d6bdad402ec1ad8c835f7c8bbc5606c21ab663af310f3d47e229486fe91424d7841f1073e65b1896141bfe3d0d725b6a61d10d17820dc159fc6e8fe9b4bc857b112b992db3c97c657601de2835517069da7e2bc1dbf0578b4d3cbf0fbb748253a98050112536871bffc4431adf89a38fb25febf639f6b6e20997e5793eecc78b900e9e0f4581877a233db5e0195e68e7536fea6ba9d4716185a91b94d8cedb3c39bd995840da3db47db4f4829e495dc81ef35b58ef28d75482cba0bbf5b33d32e92eafdba676195ba371ef18da30ea98827adaa34a7b355a2da4e3cf860a28ad75077cfcd89c0089a7f9f43f1559735ce8e1370132533b9dc6cb174f9712de8fba90eaa0da8de374fff09045706193c13d64ab65caf75056b1a958682607cc6f968bc756cbd6577fe506da4864f5413bd8c754824657b52a2b11daef8c2ae05ebaa269224aef65fcc0f03add811075d7f1506e8dec34e1c4eae47b6a90a52283e5d218dbafb49140e37950760134e9d51feb1818a9bfabb90f7f3ec1fa85b97fe947936ff394cafd66c844ee0a139d5647242568b1851b7295cb188667f875af35a72aef31b280298d42c8348808c26b27984586dd6d5bbef1ac49efa4e9d940b2fa4360daa0884e85e48b9094365c39e148e452194e0509b8e061bc2bd4d54bdf7394b247f13139acdde8b01f604975e6f10c45206cf96bfffb72164a09b05b2bcfc372e287b9bed02fad2818244872c98ff0927ed923b86a6ff482bf787ae978c1e2371d58ba156d3597984143b2a3a56ac58d986c5210e3cf061db29b5be0e3fa309cba5b30697f2abdb5456c0e3c4505e8833546c8d5a9fc403e4ebb5a4c95aea09d4f89c17524576037c0a7673d3a497149daecfc837a3bd9499a260c7de4206f0e63b245cfd4fdac3c3455e02b40e66f257dc4fec76be6a2099a9f8eae81d051d9222dfa918463e35dd7e852402d6168f6ef993dcd564c5283a90a5c6beb87a97abd54895b8344c7196958799b90aef07d57819281e67b5dca7d6bc1fc388f5839e3a0b828377ec08b0a84cc38bbc9df4e86c962c6e2c862c18eea9c833370494d2f6e116710e48e006fa7d1df5e7728a29bb9dc3c7a80dba2eb45573191795b97089834c73a5978dec3aa010d6453653ca252b2e7ba40f51da279e137bb2267ae19a8e60a0ae7fe2b6735e834c22afb62fff5f90724967a44c823ebc8cd3fb6b30128cbc8c64a31b09fd27c97b131046b84afd0832e7cbf963f8d06fdb901a04d20325ce18a44743e4eeb61e53548a2a56628ec60d1afdd286724b49addba18aa14e3b1bfb7a6b4332a1077800ee05e4e1e13e2d5760fde83f30a6c3822463d08bb70ea2146b6b253b892ef7c570390433a691d98cac206b1af22d852e3341ee412228ef95a2b6967de1ab209205de809beff234de35ff53873803401efe6a910f116e2e019aafceaca4155c41b78f726ba7b2d03036ad422fa38f884c991e8035323f8621106217fe9478f487a85db74e50da1fdb7ac05a4b3a8f5e0710905bd2de39c5fb5a2f1047debefd828b767880b0304d5f58cfe38252781040485adddeaa9a4c926d1be82791096b558cdc2259c34d13628caccf1290acbf559a37821c43eb54db8b60500e9f230bc588e8f48a9724340a0905236d99acc45ef75d56cf096826b9b9f5522946550f9a0b63d5df0edb96bbc07d502fe746d0d3eaf7dadc7df99072ce6379f3b6a379681a38017f5a804545d10005c89c500d39cb61204057028e28676fe4b078f5e194942698ca900e9fadffc3503f76cb933d982370a27a990a7b1d6addd10d5d0616348dd98ba2ed4492c6c3ea5f526bd314bc4f3b48b43c6a057da743d8b63d49933ba1f4f84e5a5eedd7ec0aedbab33c7c7d2bfbf259d35e96c882710297fd1a1aa50479c7690ba7f2828647fff1a7f1358620486e62c7a25ca839d5deff6f6ef7b2d284997c6e62f59f274a9d7d042283ea464dacdd0fc1b8fa1a9909b3a182058ced02a8477267f8eadc3b77acb29ebdeb02ca8e18f7c4e389ebbc96cb1df8e70dae8d562f99db6f215d41d46803e2e3967794e76cca68fa5edb874d56b0c1e4e431b024da862b773ec8c772c3267e09831e0a04a42999ea8d15e5f37ebaa461c4f6b783cf1e10a82639f556fcc2a2bd351fc8e606ac0a191943f5f146efcc82437c0451e1a7f06a7806aa0d78d1df2a7a051991994401b0feecfe738e4930444ec082e1d98ec91725e8c136053c6b7cd42ae316213def00a46d6aeb99da45425afdc6ebe48eb293961b0aa906d71c198537148a36980d42a15033ec144ee8a9c5f98cf02033f8d809ea68796d88bc08163308b6d902907357b625de15718ccae0a2949e86fdeb3b785565d39812a99295e7c0e1e20d6dc127fb241935aa342a3464827bbf65571db26d6d0f0fdc5d4041eb8d37f17c2b488a0985d3ded3586fbfb8d157357f2df4a72eee18fa16065c1b674df30f2e61b6d88ed66695cfeb07f277a8a228d933a2f0b0827e9f43189cbf1bc6c1ebf5d7c99d79633cac0c5cad210bffd6c19c67ca966a72dd3717c2b77a1d59824a711abfcef2f960b1f13af9627b847311df8ad3b104b49ac49b82fca56f01d9e467b730860a993a2be7d0ffa36cf47424c0ebefc4f4ade1b72d18dd65cba04184ef09cffe74ed17070cee51a75ec2b6777b2bd3058bb08557e863a4f80041412c8b3875804dc21fb6b61cf8a90a2c561137f0675f61a4df9151ee0af6dc94ed72e494b3bde957fdd1b32c4e970eaf29ed8affef476ffb15c126dfbb4b7dd2e54261c2ff56884b6d7f7dd41013c68409a65471cb70d5a702d8005643b50d65ae67f638280f4037a2b97c1b924a1d0f956676274c9313068318348cd709bc06c19aedbcbd8dac464e9c982a264a4c72f55ac664f827df4ecb408feff325b5f26ba12997c6a61db7c98df9fba6e82a41330876e959879564bc862ffbbd176d7f299daac918e996f7335569fc47f25df3d0f8f410dd6a7c6095fccea4061f6b53fa202fd90533b9e6f4d083b05b596a1d81e8755a82d6a88265e9e6366856c0ef5cfb792c29c004ff3ecf872db1657ae21acff5a25d5e4283c85b2133f0238d204d94003894d5ca4d3ebad7934907bcc7787b24782acfc7935ed5edcdb286ab98e5c1facca1407b5b0f64a9cfa4b4d76df3183a39cbeabe01b9f63b85ea431b7c5d0c36c7c98295b3bc7464cb37e649acebab5231b07d7513d0b4620fb1790afff2a2d3384f47b72d3b2d4d5fc13c8c37c527f10a6e2afbbb552afad96c11d8846371860fef02acb32c9e99feafacf60d28ebce1e3ef49535b1df9356160d361e51626a2cc1e85dfcfa8c7236ed34c010a702d04cb9c86b1597766e05bc62b81edec6cfbeae57cdb90ca1597cc5121e41159788fa706fa5961e0b923a2a79b3ec67f303342875cf09335723e099e4db34003b864ddd2e749fc3d95284d2216754c68286252967f77cafaf2c21d65d1701450e7ff0fc8983ac046bd2b5f914a8fd4c6785f4769fbddf9a6bc33e741049621061ecced22df100b3f8c74ec7a5f519997e50b0b919adddb77012342ff46f728d94fc9e272b2675450e626ec1137a371ecf3f05ef9ad572e484e1b0a7bf2834ec7ca1c380be42cdee610d08aa3e0e717a27e9f160f776683ad3fe0bed3295e12bb8e3517fc4aaae8b2df5dcb3bc11a4741e23f72e7f2c37ef2efb25a0341dcb84c889b6c0d5eee0142f194a40aa3b81aa95be8dda660fbab130a1955009d4ae78a52bc8e58da598fa9b914ca17b0589e33f2e4fa18e276e241806392354bbe6f5dedc5dbcbed98c8f6353e1f8076304d1ab049e367325a7f52cd699763014384cbb92648fa6c88d797d53334041b1122275e78523b66f787c871b2e0f63312ae6c1c208ca1e2123c981a12c953400a55e8a8d168ed62c30d03a2579b4428810e88f21ae0efb9d7539d9a40357bc15bd068ecc9174f27864301ca2ac767edaf3b343486ad5b62e3348d251933752580ef6e6494304fb1a52319830b1bd82ab0289b560b5dc1ef8305e7659e84f09aff3ee617facd315786723f0f82c"}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000100)={r3, 0x5}) 7.409459466s ago: executing program 6 (id=741): syz_init_net_socket$x25(0x9, 0x5, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x4}) (async) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) (async) mbind(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x4005, &(0x7f0000000200)=0x81, 0x5, 0x0) set_mempolicy_home_node(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x0, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@deltclass={0x30, 0x29, 0x30a, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xe, 0x9}, {0x2, 0x1000a}, {0xc, 0x3}}, [@tclass_kind_options=@c_mqprio={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8c5) (async) r2 = socket$netlink(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) r3 = eventfd2(0x3, 0x1) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000080)={0x203, 0xdddd0000, 0x0, r3, 0x6}) dup(r0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x2) getpid() (async) syz_open_procfs(0xffffffffffffffff, 0x0) (async) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000280)=@abs={0x0, 0x0, 0xfffffffe}, 0xffffffffffffff2a) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x22}) (async) r7 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x2000000000, 0x1) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r7, 0xc1485544, &(0x7f00000001c0)=0x4e1) 6.94650125s ago: executing program 2 (id=742): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x8, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="ae6f000000000000000000000000000018010000b9326df4cc34ed82c533", @ANYRES32, @ANYRES8=0x0], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='io_uring_cqe_overflow\x00', r4, 0x0, 0x20000000000010dc}, 0x18) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000000)) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01034000000000000000010000000900010073797a3100000000080002400000000140000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000030000000050a01020000000000000000010020000c00024000000000000000010900010073797a31000000000400048014000000110001"], 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0x200000d4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0xfffffffffffffef7) r8 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf371, 0x10100, 0xfffffffe, 0x1}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/124, 0x7c}], 0x1) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<'], 0x38}}, 0x80) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r11, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r11, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r8, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) 6.357749743s ago: executing program 1 (id=743): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) read(r1, &(0x7f0000000240)=""/123, 0x7b) r2 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r2, 0x89ef, &(0x7f0000000000)=0x2) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61125200000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000fff07006706000020000000170200000ee60000bf050000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad35010000000000840400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc83df03395287fd51a700ea6553f304000000815dcf00c3eebc52267b042d196bde7c382d21ff79a8583a7482c5994747e19325b1ee980cbd800d845dacbcf5ad8cdbc7abf9"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) 5.57421756s ago: executing program 2 (id=744): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x140, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0xa0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}]}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff3b41}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff9}]}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xd7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xebb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe5b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x4001}, 0x20040001) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a803f0003"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x741}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x200}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x14, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0xc}, @NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0xb}]}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x3}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'vlan0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x1) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) socket(0x10, 0x3, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x140, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0xa0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}]}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff3b41}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff9}]}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xd7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xebb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe5b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x4001}, 0x20040001) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) (async) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x741}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x200}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x14, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0xc}, @NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0xb}]}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x3}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'vlan0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x1) (async) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) (async) 5.425442877s ago: executing program 7 (id=745): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) r2 = memfd_secret(0x80000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000340)={{0x7, 0x2, 0x1, 0x4, 'syz1\x00'}, 0x5, 0x100, 0x1, 0x0, 0x0, 0x3, 'syz1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=@newtaction={0xe74, 0x30, 0x300, 0x0, 0x0, {}, [{0xe60, 0x1, [@m_nat={0x154, 0xa, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0xf88, 0x2, 0xfffffffc, 0x9}, @remote, @rand_addr=0x64010100, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x8, 0x1, 0x7, 0xcd}, @broadcast, @multicast1, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x8001, 0x4, 0x9, 0x8}, @empty, @empty, 0xff}}]}, {0xb1, 0x6, "c7c4a24533c98aa23349d4db80c3235f5f6d6869f4361fe025cedeba4485a8974d88fd3c1c28ef6d5104efe13613b196d5d15039a5641bb602c76961e32ed6f4b78ef32bb7ff1934da085fabb5d51cb969897fc49587674d6f88f72443004d2ece4a4214c7177cd306c27e21047e79c69c0bd1d1ce7061156e655e5cdc387e4c041b38f04002f67a2bc0dd044e0dd5badb1473b7131ddeb8c33fd6d42d132cffe62200a76f6e1dffc6b5b272fe"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_connmark={0x100, 0x18, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80000000, 0x7, 0x1, 0x1, 0x8001}, 0x8000}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10000, 0x7, 0x8, 0x81, 0xffffff59}, 0xf32}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x1, 0x10000000, 0x1, 0x1}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x0, 0xffffffffffffffff, 0x5, 0x3fff80}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0xb, 0x2, 0x7, 0xffffffff}, 0x26}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x7, 0x3, 0x2, 0xfff}, 0x8}}]}, {0x25, 0x6, "7b30339ea75e36860c291fc9bbfde5286cfa23fe57dfe5557946936dc06ce84e9f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_police={0x95c, 0xf, 0x0, 0x0, {{0xb}, {0x89c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x3, 0x2, 0x6, 0x0, 0x100, 0x5c5, 0xff, 0x7, 0x9, 0x1a, 0x10000, 0x7, 0x9, 0x9, 0x2, 0x7, 0x6000000, 0x8, 0x401, 0x1000, 0xf75, 0x60, 0x5, 0x200, 0x8, 0x8, 0x4cf, 0x5, 0x2d, 0x80000001, 0xfffff801, 0x9, 0x8, 0x10000, 0x6, 0x80000001, 0x7, 0x3, 0x3, 0x39a0, 0x7, 0x2, 0x8, 0x3, 0x4, 0x0, 0x4, 0x4, 0x0, 0x7, 0x2, 0x9, 0x4, 0x2, 0xfffffffb, 0xffffff1a, 0x4, 0x8, 0x3, 0xb, 0x4, 0xff, 0x8, 0x0, 0x1, 0xff, 0x4, 0x103, 0x4a82bd51, 0x5, 0x5, 0x7fff, 0x1, 0x5, 0x6, 0xc356, 0x0, 0x7, 0x7f, 0x2, 0xc, 0x7f, 0x0, 0x5, 0x2, 0x4b0, 0x1, 0x1, 0x0, 0x8, 0x0, 0x3, 0x6f, 0x6, 0x0, 0x7, 0x7, 0xf0b7, 0x8, 0xf4f5, 0x2, 0x101, 0x4, 0xfffffe00, 0x0, 0x1, 0x0, 0xa0, 0x7, 0x2, 0x7, 0x7, 0x3, 0x81, 0x4, 0xfffffffb, 0xfffffe01, 0x5, 0x7, 0x7, 0xfffffff6, 0xf, 0xfffffffa, 0x1, 0x69f, 0x7, 0x0, 0x6, 0xfffffffe, 0xffff, 0xc0000000, 0x25f, 0x8, 0x2, 0x400, 0x40, 0x6, 0x80000000, 0x399c, 0x4, 0x5, 0x400, 0x10, 0xa, 0x1, 0x5, 0x3, 0x3, 0xffffff9f, 0x848, 0x1, 0x5, 0x1, 0x4, 0x2, 0xc, 0x8, 0x200, 0xa, 0x5, 0x7, 0x2, 0x6, 0x4, 0x0, 0x9, 0x10000, 0x0, 0x5, 0x0, 0x6, 0x8055, 0xdb, 0x6615, 0xa, 0x4, 0xff, 0x4e, 0x2, 0x3, 0x9, 0x6, 0x100, 0x369, 0x3, 0xfffffff5, 0x7, 0x4, 0x2, 0x53, 0x0, 0x3, 0x2, 0xa97, 0x3, 0x0, 0x200, 0x8, 0x7, 0x23a, 0x8, 0x4, 0x6, 0x10, 0x86b, 0x9, 0xffff0000, 0x2, 0x3, 0x6, 0x3, 0x8, 0xffff, 0x4, 0x9, 0x9, 0x3, 0x5, 0x7ff, 0x88b, 0x7, 0x7fffffff, 0xfff, 0x10, 0x3, 0x8000, 0x3, 0x40, 0x9, 0x6, 0xff, 0xd06, 0xc, 0x7, 0x1, 0x401, 0x10000, 0x4, 0x5, 0x1, 0x7ff, 0x7, 0x80, 0xc, 0xfffffffe, 0x5, 0xfffffff8, 0x2, 0x36de, 0x4, 0xff, 0x0, 0x8, 0x0, 0xc98]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x6, 0x4, 0xe, 0x80, 0x2, 0x8, 0x6, 0x8000, 0x4, 0x6, 0x101, 0x7c4, 0x3ff, 0xa7b3, 0x5, 0x0, 0x4, 0x10001, 0x7b, 0xfd, 0x7c, 0x0, 0x3, 0xfd, 0x401, 0x7fffffff, 0x1, 0x7ca, 0xfffffff7, 0xe, 0x101, 0x1, 0xfffffff7, 0x9, 0x9, 0x52, 0x5, 0x1, 0x9, 0x3, 0x5, 0x4, 0xfffffffa, 0x7f, 0xd, 0x200, 0x13b1, 0x10000, 0x3c5, 0x7fff, 0x4, 0xcff, 0x10001, 0x5, 0x8, 0x2, 0xc979, 0x6, 0x3, 0x8000, 0x3, 0x81, 0x0, 0x4, 0x1f3, 0x100, 0x7, 0xd7, 0xd3e4, 0x0, 0x3, 0x10001, 0xc56, 0x3ff, 0x4, 0x6, 0x1, 0xd0, 0xad5, 0x2, 0xfffffffc, 0x42, 0x4, 0x5, 0xffff, 0x3, 0x7, 0x8, 0x2, 0x4, 0x6, 0x0, 0x401, 0x0, 0x401, 0x31c2, 0x81, 0x3, 0x5, 0x9, 0x8, 0x8, 0x1, 0x9, 0x0, 0xc0, 0x0, 0x592, 0xc, 0x1, 0x4, 0x0, 0x1a, 0x5f0bbd9d, 0x0, 0x2, 0x101, 0xffff, 0x380, 0xbb, 0x4, 0x8000, 0x0, 0x1, 0x1, 0xfffffff8, 0x3, 0xd0f4, 0x51, 0xc9, 0x0, 0xbb6f, 0x7fffffff, 0x7ff, 0x8001, 0xffffffff, 0x4, 0x3, 0x31, 0x1eab, 0xa82, 0x7, 0x3, 0x8, 0x1, 0x7, 0x7, 0x6, 0x3, 0x1, 0x7, 0x1, 0xfd8, 0x2, 0x3ff, 0x6, 0x4, 0x6, 0x7ff, 0x0, 0x2, 0x13, 0xc, 0x3, 0x0, 0x42, 0xa8, 0x40, 0x4, 0x7fffffff, 0x1, 0x80000000, 0x3, 0x2, 0xfffffe01, 0x5, 0x4, 0x3, 0x9, 0xc0000000, 0xfffffffd, 0x5, 0x5, 0x9, 0x100, 0x5, 0x0, 0x7, 0x2, 0x4, 0x28, 0x8, 0x1, 0x4a3849ce, 0x6, 0x936, 0xa0d, 0xffffffff, 0x0, 0x2, 0xde5, 0x7, 0x80, 0x5, 0x1, 0x7ff, 0x2, 0x1, 0x1ff, 0x7, 0x5, 0x4, 0xff, 0x2, 0xa, 0x3, 0x4, 0x22d, 0x6, 0x101, 0xcf, 0xaa, 0x8, 0x9, 0x1, 0x200, 0x401, 0x7, 0x0, 0x0, 0x2, 0x7ff, 0x100000, 0x0, 0x101, 0x1, 0x7, 0x9, 0x4, 0xd, 0x768, 0x7b52, 0x0, 0xffffff75, 0x9, 0xffffffff, 0x77, 0xf8, 0x9, 0x7, 0xffffffff, 0x64c, 0x80, 0x6, 0x6]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x0, 0x600, 0x7, 0x9, {0x0, 0x1, 0x800, 0x4, 0x0, 0x8d37}, {0x2, 0x2, 0x3, 0x9, 0x3, 0x1}, 0x9, 0xd, 0x40000000}}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x800}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x82fa}]]}, {0x95, 0x6, "968b3d6e6b0e531fe82345c050554b825ef3b85c70899cf186481a0fece9d15d3d46cc39752e47ba2c5dd4aa705fd7e6392768d96d6b7414e4a8d812bc7d89d3f0821536d7d2790916eaf60fdc0062cb179598bc7271d279e1e096d00cdd731c1535b0367d9d02c50ed9a6a6ae46b3ad2f82f4cfa7c130efdb88476307cf603b517815bc8ddb7b2f6c7d62e4ad89ada310"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ct={0xbc, 0x5, 0x0, 0x0, {{0x7}, {0x74, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @local}, @TCA_CT_LABELS={0x14, 0x7, "c9225c80b1fa3acfb56a90c0d1d0ffdb"}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x8000}, @TCA_CT_LABELS={0x14, 0x7, "baae241b89951fcab9bbaf670044f94b"}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x6e24}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @empty}, @TCA_CT_LABELS={0x14, 0x7, "cc762af47eaf1302c756ea90287e2177"}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @rand_addr=0x64010101}]}, {0x23, 0x6, "0881d44107b647f18ec46601ccec1604043f920e2ed4c6c631432d6a83512c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x110, 0x4, 0x0, 0x0, {{0xb}, {0xbc, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5, 0x50b, 0x3, 0x101, 0xfffffffa}, 0x7}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0xaa, 0x4, 0x8000, 0x4}, 0x4}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, @TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x100, 0x4, 0xfffffff8, 0x9}, 0xf}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}]}, {0x29, 0x6, "d10684841abf2f532e5ca1bd644d779747d946c4f48549868da131195748e4b2af02a06ab0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbmod={0xe0, 0x3, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xc9a, 0xffff, 0x5, 0x0, 0x8}, 0x10}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7}]}, {0x85, 0x6, "5265e229691b154a876dbccbd112c7e362938af112a2f795566346677a8b73400d9e25c9ffbab9002e7fc303fadff34180bfae0a1a17cbaab2fdb9e17abffeff308e91eed74fb9d383ad3c9dd9e32619045d98716f0c1142c6fdbf11dfcb596f34835334aa0d34195a6389106cc7e38d20e400eccdaafd68c31d46d9ddf8cc0e59"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0xe74}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = gettid() sched_setscheduler(r3, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() r5 = socket(0x1e, 0x1, 0x1) connect$tipc(r5, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x0, 0x1}, 0x2}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, r9, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) keyctl$set_timeout(0xf, 0x0, 0x1) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x30b85, 0x1000}, [@IFLA_IFNAME={0x14, 0x3, 'batadv_slave_1\x00'}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x0) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r11, r1, 0x25, 0x4, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0xbe, &(0x7f00000008c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x500, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @local}, {0x800, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "6fdfa0d2001efbb3e29a4ac275ca11b984ff5def6ed2e4ea9bc0eabdd34c732b", "df23520b57e4c98679c7795a27c7bf3e7d776b600ba8d82d6ba417e219edd86fb708441efcf75fe803412dae374281c2", "5df814aa2e34e4f8a759805b993e2d69a8f476de686861a9850edbe3", {"2cfee9b9d5b0b2b171b51f9174963b0c", "e40ca7e0a7b4bbc4bc9720c876a57954"}}}}}}}, 0x0) 5.069618889s ago: executing program 5 (id=746): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) symlink(0x0, &(0x7f0000001300)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x4, 0xffffffffffffffff}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000300)={0x70001, 0x0, [0x40000000000, 0x64f, 0x6, 0x6, 0xfffffffffffffffc, 0x4ffff, 0x29, 0x1]}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e00f20c06635000000400f22c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x5b}], 0x1, 0x0, 0x0, 0x0) r4 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$smackfs_change_rule(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e6f696e6c696e655f64617461c669207b7d5c2d2e3a7b2b5d2423032072574e2077786174"], 0x25) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.069075045s ago: executing program 1 (id=747): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0xfffffffd}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000009570da0e5d1ef1d2a7ea116f09ffeb43598712fbeccc1973f7d82ded57c9e0622a3f9000b2df28cc09e13ca8e74d3a239b51a1ccaf66d21b933f6ee2e79f15fe4116b3ef79f76909ba57380c1eb62b8690b067b8dd9d23cb9a80e15762d3563d6ed1868cde6c4993f8f32eefbfbf1618ae1e5e93c7e9f091f874900e28a0f620f52868bd384e5a63431437814961af793d5492851f4eade9346ac367073159cc5e215a562517e6a8dc8853b39fc4bd794006d639b52d504c5e23a6f32cd7ad94b359872606db6b1e8f8a70d94e2da6f4f43f936f33e7eab69265ffd5b49eae66afe3f117c91e75370e542f945a84115f774b130d1b81"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x1e}], 0x8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000001500)=@udp6}, 0x20) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000180)=@abs, 0x6e) 4.23844078s ago: executing program 7 (id=748): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) syz_create_resource$binfmt(0x0) (async) r1 = syz_io_uring_setup(0x495, &(0x7f0000000540)={0x0, 0xe140, 0x0, 0x0, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0}) (async) io_uring_enter(r1, 0x3516, 0x100000, 0x0, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x500000, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) (async, rerun: 64) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (rerun: 64) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000000a05"], 0x14}, 0x1, 0x0, 0x0, 0x2400a051}, 0x44000) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 4.196416409s ago: executing program 2 (id=749): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="85000000890000007b00000000000000270000000a0000009500000000000000ed5f0be3755142ae31484cd0115bab2d0589e8ab9f429b60317312f13bd708a35c0670c61fc97c4551f58ae3bbfb9f1d97582f15f3922a3c39716ebdd3c864aec6bc39f3bf389d21e614314b44d3a320471dc33ceec91a1512761160808845c885e7e75118ae8702a167ce7d0ca850e435f105f4c7702c8505fc4669acef909579390b1a6795fae716b04fba77244be06160107ab2a3a30645bbec6570170c1d362e6d6209fa0809ffbcc48bfa0175374dc3"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() r1 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0xb8ee, 0x1, 0xffdfffee, 0x1c3}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_SYMLINKAT={0x26, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r0, {0x8000}}, './file0\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{0x1}, &(0x7f0000000780), &(0x7f00000007c0)=r0}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r5, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="030000000400000004000f000a00000000000000c707dee3eb117883b5463aa248d0e620d961d4b99732b593f284d13a6398effae110db78a7da3f395b4df49e5c0207f7c74e5d645843ab898374b939e4491161023a8754b1792e", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0100000006000000060000000500000040400000", @ANYRES32, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000010000000100000000000000001f14c81dbfb9df108c66ebc7d2f114c326230ecb2db7dfbada3abe3c984a3b18961390440bc5d12155a84864"], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x50) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_mr_cache\x00') read$FUSE(r8, &(0x7f0000000e00)={0x2020}, 0x2020) pipe2(&(0x7f00000009c0), 0x0) r9 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x212082, 0x0) statx(r9, &(0x7f0000000040)='./file0\x00', 0x6000, 0x7931c76006612e80, 0x0) 2.997351877s ago: executing program 1 (id=750): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)=@multiplanar_mmap={0x5, 0x3, 0x4, 0x70000, 0x101, {}, {0x4, 0xc, 0x8, 0xf7, 0x2, 0x1, "29b5bb1e"}, 0xf, 0x1, {&(0x7f0000000040)=[{0xe, 0x2, {}, 0x7}, {0x5, 0x1, {0x9}, 0x4}]}, 0xcde7}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x224000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x8, 0x14003) mmap$snddsp_status(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x3000002, 0x2010, r3, 0x82000000) fcntl$setstatus(r2, 0x4, 0x2800) (async) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000000240)={0x1d, r4}, 0x10) (async) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000280)=0x5f620ad4, 0x2, 0x1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r5, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x1d22, 0x25}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x0, 0x5, 0x6]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000090) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='iocost_iocg_forgive_debt\x00', r2, 0x0, 0x100000001}, 0x18) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)={0x154, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_KEYS={0xd0, 0x51, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "264eb3da19fb0b23d06328c4c5"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "3bc456acf2b70990353d268ccc"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "049fc5fabac8f21fd7e5b68663"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "3e49b59c533ebbff0c106c6273"}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "4f11da069675d07f0b79cbb0cc"}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "822c269b426ad92cebbc0043fe"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "215c29b61b"}]}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x9}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x3e}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xce}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff53}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}]}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x154}, 0x1, 0x0, 0x0, 0x8000}, 0x20000881) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r2) sendmsg$NL80211_CMD_SET_WOWLAN(r7, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, r8, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x1, 0x57}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x10008010}, 0x20000000) (async) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000a40)={&(0x7f0000000a00)=[{0x24, 0x8200, 0xeb, &(0x7f0000000840)="968b568df04153a4caf64fe353f3500e9a52fb6d0bbc7a60827e3fcd30241114c73b3445e89e823fc87364e293469a2b6721eec9db5514821b53043a79633908e9bdd8398630c973892f89d9f22851abc98532c84036ee8aa61889a89af2889d46e336253317b4400741435b3a48849fa0ee0e06f5e9dae462efca25acf4bee0b9e01b977e9a36439e1581a4f9fc7bc8104ddfae17794e295f4ee8b4e39b3ce7dc8785eb91f874f28b0228ed3a73039e8db1f1c741152b313906c8e64576fcfdbb7c2bff31d9d928c0c622ae884e45f279b04aec11b728a6312b6653eea250286ff31ef2e8b56f08694c99"}, {0x8001, 0x3a00, 0xa1, &(0x7f0000000940)="9c0a60c87c96a45570b8414af18452321327c621d433716bc30817ee8cfe54aaa08ef062ec2a4b0096182c879d42e6b03064a68c4938fce3872fa1b43069837ecdf3c2afdadb68a61580d123c241c333fb7aa78da25f4f5bc150ac40709d4a1e6305cca15280205acc3a4672e375c3a3eae24af6c82aed0c6510b2e63c0e07987c703689a772ec3ff060b869810269a62955cfdca9badd29746451d7e29bcf2587"}], 0x2}) (async) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000a80)={{0x2, 0x2, 0x8000, 0x3, 0x1}, 0x200, 0x3, 'id0\x00', 'timer0\x00', 0x0, 0x8000000000000000, 0x800, 0x10, 0x8}) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) syz_io_uring_setup(0x1daa, &(0x7f0000000b80)={0x0, 0x2ecb, 0x1, 0x2, 0x1be, 0x0, r2}, &(0x7f0000000c00), &(0x7f0000000c40)) (async) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000c80), 0x1094c0, 0x0) ioctl$RTC_VL_READ(r9, 0x80047013, &(0x7f0000000cc0)) (async) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000d00)=""/250, 0xfa, 0x100, &(0x7f0000000e00)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x2}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x48) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000e80)) (async) r10 = add_key$keyring(&(0x7f0000000ec0), &(0x7f0000000f00)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r10, 0xffffffffffffffff, 0xd4) 2.978740356s ago: executing program 5 (id=751): r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000003cc0), r1) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/pid_for_children\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd) r2 = socket(0x14, 0x2, 0x4) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) accept$netrom(r2, &(0x7f0000000100)={{0x3, @null}, [@null, @remote, @default, @rose, @default, @remote, @default, @rose]}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = syz_open_dev$vivid(&(0x7f0000000080), 0x0, 0x2) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000140)={0xa00000, 0xd, 0x4, r5, 0x0, &(0x7f0000000100)={0x9b0951, 0x7fff, '\x00', @value64=0x5c4f}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={r6, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r6, 0x11, 0x6, @broadcast}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001b00)=@getchain={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20008050) 2.777302766s ago: executing program 2 (id=752): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x1ff) io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x7, 0xfff, 0xffffffffffffffff, &(0x7f00000000c0)="1521cd75837d8a1cd17d422a5bc8bfdd2039b070e230eff464d93b9d22ade240c3fbc3b58d43134093a769d5703cdf4b89dc414c30c7796db1f96c5314df79cede08cbc4f2423ad6aab4faa6d7ef77d22152cc7abb6049e82ad665dd89eef5", 0x5f, 0x4, 0x0, 0x1, r0}]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r1, &(0x7f0000000400)=""/207, 0xcf, 0x4eb) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x1ff) (async) io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x7, 0xfff, 0xffffffffffffffff, &(0x7f00000000c0)="1521cd75837d8a1cd17d422a5bc8bfdd2039b070e230eff464d93b9d22ade240c3fbc3b58d43134093a769d5703cdf4b89dc414c30c7796db1f96c5314df79cede08cbc4f2423ad6aab4faa6d7ef77d22152cc7abb6049e82ad665dd89eef5", 0x5f, 0x4, 0x0, 0x1, r0}]) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') (async) pread64(r1, &(0x7f0000000400)=""/207, 0xcf, 0x4eb) (async) 2.581799972s ago: executing program 1 (id=753): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TOS={0x5, 0x5, 0xa}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x4}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x50}}, 0x0) r1 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) r2 = dup(r1) preadv2(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x154, 0x15, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_USERDATA={0x50, 0x8, "57dce08b8e8a6db7e80c0130526ac94a6c9b175cb1993b62a2276c833ac854988b4a0b779c3061f133e38335ab4a280cd03fc1b11b9f2a9eb7e4ee1dc56f8771b121a0fe0a18189496dd7eda"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_USERDATA={0x9e, 0x8, "b99ce2a98a6165db03730a39cd2c5581d8179678c13d0e7d91f0bbd0295ecac5751c5abf56bdc0436dc03357a63c8ad96e5e833c08cd3c14e9f04dc04ae557613989de35441ca900789463514ae973097d9125289ea41efd472a7a8adcff22dd39eeb2cd1144e1defd9d4b55de454626ef415450c8062cb422939a4c2e212270c68433abd275e96c8af1242838090617f2bc572e146c3b6a062f"}]}, 0x154}, 0x1, 0x0, 0x0, 0x40010}, 0x20000000) 2.420826688s ago: executing program 2 (id=754): setresgid(0xee00, 0x0, 0x0) setfsgid(0x0) (async) setfsgid(0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x400, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) (async, rerun: 32) chdir(&(0x7f0000000100)='./file0\x00') (async, rerun: 32) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x62dec0, 0x24) (async, rerun: 64) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) (rerun: 64) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2000000003) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000dbdf25070600"/20, @ANYRES32=0x0, @ANYBLOB="00010000210000000a000200bbbbbbbbbbbb000024000e000008000000000000fdffffffffffffff01800000000000000100077f0000000008002c0000010000"], 0x58}, 0x1, 0x0, 0x0, 0x90000}, 0x44) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000080), 0x10) (async, rerun: 64) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0500000008000000f100000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0300000001000000042200e0ac0000001b34ba6b471f0adc"], 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x800) (async, rerun: 64) r3 = socket$nl_crypto(0x10, 0x3, 0x15) (async) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000a023b94d30fd6abe8000000010000000000000000000000f8ca44dfaa000000"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000200)={0x7f}) (async) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r4}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="0600"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="003b36000000070000000000000000000000f7ffffff"], 0x48}}, 0x400d0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r6 = accept4(r3, &(0x7f0000000600)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x80, 0x100000) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002080)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYBLOB="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", @ANYBLOB="01878687a328fdb8da5a354c910638e1815d939420850cdc4b328af61b7ff8f128e27e531e04c42baab4803f7adceb98edf4955f62d67a87b6c865040000000000f581b6fb", @ANYRES32=r1], 0xac}}, 0x4000) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) 2.41148961s ago: executing program 7 (id=755): ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, 0x0, &(0x7f00000000c0), 0x4003) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dvmrp1\x00'}) remap_file_pages(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000009, 0xfffffffffffff001, 0x800) 2.209579776s ago: executing program 1 (id=756): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x4000000, {0x2, 0x4e22, @multicast1}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x0, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0xfdf8, 0x0, 0xfffffffffffffffe, 0x3}) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x4) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f00000002c0)=@sg0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) r5 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r1, 0xffffffffffffffff) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, 0x1401, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000090) add_key(&(0x7f0000000540)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="38000000101401002cbd7000ffdbdf25060003"], 0x38}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) r8 = syz_open_dev$video(&(0x7f0000000180), 0xc407, 0x800) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000140)={'dvmrp1\x00', {0x2, 0x0, @private}}) ioctl$VIDIOC_CREATE_BUFS(r8, 0xc100565c, &(0x7f0000000040)={0x9, 0x5, 0x1, {0xa, @pix_mp={0xaeda, 0x4006, 0x33565348, 0x5, 0x3, [{0x74, 0x2d}, {0x8, 0xe}, {0x4}, {0x6, 0x8}, {0xff1, 0x6}, {0xff, 0x203}, {0x0, 0x3}, {0x6, 0xffffe59a}], 0x3, 0x0, 0x3, 0x1, 0x7}}, 0x10000}) 2.127652293s ago: executing program 7 (id=757): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x4000000, {0x2, 0x4e22, @multicast1}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x0, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0xfdf8, 0x0, 0xfffffffffffffffe, 0x3}) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x4) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f00000002c0)=@sg0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) r5 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r1, 0xffffffffffffffff) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, 0x1401, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000090) add_key(&(0x7f0000000540)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="38000000101401002cbd7000ffdbdf25060003"], 0x38}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) r8 = syz_open_dev$video(&(0x7f0000000180), 0xc407, 0x800) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000140)={'dvmrp1\x00', {0x2, 0x0, @private}}) ioctl$VIDIOC_CREATE_BUFS(r8, 0xc100565c, &(0x7f0000000040)={0x9, 0x5, 0x1, {0xa, @pix_mp={0xaeda, 0x4006, 0x33565348, 0x5, 0x3, [{0x74, 0x2d}, {0x8, 0xe}, {0x4}, {0x6, 0x8}, {0xff1, 0x6}, {0xff, 0x203}, {0x0, 0x3}, {0x6, 0xffffe59a}], 0x3, 0x0, 0x3, 0x1, 0x7}}, 0x10000}) 1.89180028s ago: executing program 2 (id=758): r0 = socket(0x28, 0x5, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) (async) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x359000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) (async) munlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) sendmsg$IEEE802154_SET_MACPARAMS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0xe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004800}, 0x4040000) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000002600), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fbdbdf25010000000c000200d6400000000000001c0007800c00018008000100", @ANYRES32=r0, @ANYBLOB="04e400000002001d", @ANYRES32=r4, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 0s ago: executing program 1 (id=759): r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x11cac6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="4606090000000080"], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) prlimit64(0x0, 0x2, &(0x7f0000000240)={0x8, 0x248}, 0x0) (async) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r1, 0x1, 0x5, &(0x7f0000000440)=0x1, 0x4) (async, rerun: 64) sendmsg$inet(r1, &(0x7f00000006c0)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}], 0x2}, 0x24008004) (async, rerun: 64) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r3, 0x0, &(0x7f00004fc000/0x2000)=nil, 0x2000, 0x802}) (async) ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, &(0x7f00000001c0)={0x28, 0x4, r3, r3, 0x3, 0xfffffffffffffff9, 0x4003}) (async) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) (async, rerun: 32) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (rerun: 32) madvise(&(0x7f00008d7000/0x1000)=nil, 0x1000, 0x4) (async) mremap(&(0x7f00008d5000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) readv(r5, &(0x7f0000000480)=[{&(0x7f0000000640)=""/87, 0xffffffffffffffc1}], 0x1) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r6) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000000340)={&(0x7f0000000300), 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000e1fb1e7afd97ff9afa3b280fd2bc4e038129e5b0e584940f0b6e8b7f1973d5863e81e016bab8570d9dea302658f8ad4eabb9313583100aa047b812355b4c7a90a2dd1730b00892d6fba6b626fd7927013ac71917af7d7ce3429ad06dff504bf118852ea62020c676171043464f2692a34c2b9300d8fb74e61ddf082240d65c2835ca047d8001a3e03eea98dcb9fe431c945f53ff080022512510e52a9efe1255b84ec4205653f72696fa9817d31519a8c6a771", @ANYRES16=r7, @ANYBLOB="1000ffffffffffffffff10c67dc63136e4bd67a5b6bb574400000200060005000000cfa6747a030100"/51], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4001) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'tunl0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)=ANY=[@ANYBLOB="04c6c7c2930182be0ab32f8a961ad0", @ANYRES32=r8, @ANYBLOB="0000720708000831f47c7ae00fd2a49eaf5b93d83d82ac81db"], 0x24}, 0x1, 0x0, 0x0, 0x4002001}, 0x200400c0) (async, rerun: 32) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x2, 0x800, 0xffffffff}) (async, rerun: 32) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000100)='H', 0x0}, 0x20) bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r9, &(0x7f0000000100), 0x6) syz_usb_connect(0x4, 0x48, &(0x7f00000000c0)=ANY=[], 0x0) kernel console output (not intermixed with test programs): r after parsing attributes in process `syz.4.348'. [ 265.352223][ T7296] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 266.367014][ T7313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.353'. [ 266.434670][ T7313] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.444040][ T7313] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.451876][ T3092] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 267.046249][ T3092] usb 5-1: Using ep0 maxpacket: 8 [ 267.071405][ T3092] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 267.138527][ T3092] usb 5-1: config 179 has no interface number 0 [ 267.198264][ T3092] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 267.257595][ T3092] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 267.273684][ T3092] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 267.288990][ T3092] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 267.302293][ T3092] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 267.321321][ T3092] usb 5-1: config 179 interface 65 has no altsetting 0 [ 267.328705][ T3092] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 267.347810][ T3092] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.591007][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 267.622007][ T5911] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 267.930103][ T3092] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input5 [ 267.930737][ T9] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 267.954167][ T5911] usb 4-1: Using ep0 maxpacket: 32 [ 267.981695][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.025705][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.036970][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.055448][ T9] usb 2-1: Product: syz [ 268.060220][ T5911] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 268.071370][ T5189] input input5: unable to receive magic message: -110 [ 268.089268][ T9] usb 2-1: Manufacturer: syz [ 268.094218][ T9] usb 2-1: SerialNumber: syz [ 268.104357][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.126756][ T9] usb 2-1: config 0 descriptor?? [ 268.142382][ T5911] usb 4-1: config 0 descriptor?? [ 268.179334][ T5911] hub 4-1:0.0: USB hub found [ 268.237460][ T5189] input input5: unable to receive magic message: -32 [ 268.257752][ T7327] sctp: [Deprecated]: syz.0.358 (pid 7327) Use of struct sctp_assoc_value in delayed_ack socket option. [ 268.257752][ T7327] Use struct sctp_sack_info instead [ 268.292192][ T5189] input input5: unable to receive magic message: -71 [ 268.313981][ T5831] usb 5-1: USB disconnect, device number 15 [ 268.314040][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 268.329375][ C1] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 268.340984][ T9] usb 2-1: ignoring: probably an ADSL modem [ 268.384926][ T7328] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 268.423272][ T5911] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 268.452172][ T5911] usbhid 4-1:0.0: can't add hid device: -71 [ 268.468518][ T5911] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 268.526235][ T5911] usb 4-1: USB disconnect, device number 19 [ 269.528489][ T7336] smc: net device bond0 applied user defined pnetid SYZ2 [ 269.536493][ T7336] smc: net device bond0 erased user defined pnetid SYZ2 [ 269.587220][ T7336] 9pnet_fd: Insufficient options for proto=fd [ 269.619371][ T9] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 269.661667][ T9] usb 2-1: USB disconnect, device number 16 [ 269.668914][ T30] kauditd_printk_skb: 85 callbacks suppressed [ 269.668926][ T30] audit: type=1800 audit(1755944871.297:100): pid=7344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.362" name="/" dev="9p" ino=14355223812286978 res=0 errno=0 [ 270.066068][ T7358] input: syz1 as /devices/virtual/input/input6 [ 271.480857][ T5831] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 271.730210][ T5831] usb 1-1: Using ep0 maxpacket: 32 [ 271.745938][ T5831] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 271.759006][ T5831] usb 1-1: config 0 has no interface number 0 [ 271.795751][ T5831] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 271.813276][ T5831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.829524][ T5831] usb 1-1: Product: syz [ 271.848662][ T5831] usb 1-1: Manufacturer: syz [ 271.869888][ T5831] usb 1-1: SerialNumber: syz [ 271.887886][ T5831] usb 1-1: config 0 descriptor?? [ 271.904448][ T5831] smsc95xx v2.0.0 [ 272.189109][ T36] Bluetooth: hci5: Frame reassembly failed (-84) [ 272.196805][ T36] Bluetooth: hci5: Frame reassembly failed (-84) [ 272.642184][ T3092] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 272.814000][ T3092] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 272.830305][ T3092] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 272.865170][ T3092] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 272.899267][ T3092] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 272.928850][ T3092] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 272.964666][ T3092] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.986583][ T3092] usb 4-1: Product: syz [ 272.994744][ T3092] usb 4-1: Manufacturer: syz [ 272.999737][ T3092] usb 4-1: SerialNumber: syz [ 273.001036][ T7405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.036714][ T7405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.059311][ T3092] usb 4-1: config 0 descriptor?? [ 273.079693][ T3092] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 273.230699][ T9] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 273.300535][ T3092] scsi host1: usb-storage 4-1:0.0 [ 273.380102][ T9] usb 2-1: device descriptor read/64, error -71 [ 273.755813][ T9] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 274.238948][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 274.259697][ T5831] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 274.309655][ T5831] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 274.332973][ T5831] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 274.344305][ T9] usb 2-1: device descriptor read/64, error -71 [ 274.354741][ T3092] ums-isd200 4-1:0.0: Max LUN 192 is not valid, using 0 instead [ 274.355785][ T5831] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 274.408632][ T5831] usb 1-1: USB disconnect, device number 15 [ 274.459918][ T9] usb usb2-port1: attempt power cycle [ 274.544139][ T7413] usb 4-1: reset high-speed USB device number 20 using dummy_hcd [ 274.829784][ T9] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 274.881260][ T9] usb 2-1: device descriptor read/8, error -71 [ 275.130032][ T24] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 275.130032][ T9] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 275.161213][ T9] usb 2-1: device descriptor read/8, error -71 [ 275.271348][ T9] usb usb2-port1: unable to enumerate USB device [ 275.351438][ T24] usb 1-1: config 0 has an invalid interface number: 30 but max is 0 [ 275.402151][ T24] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 275.433184][ T3092] usb 4-1: USB disconnect, device number 20 [ 275.468000][ T24] usb 1-1: config 0 has no interface number 0 [ 275.514452][ T24] usb 1-1: config 0 interface 30 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 275.571862][ T24] usb 1-1: config 0 interface 30 has no altsetting 0 [ 275.609790][ T24] usb 1-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=74.47 [ 275.659983][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.691886][ T24] usb 1-1: config 0 descriptor?? [ 275.744125][ T24] usb 1-1: unknown interface protocol 0x41, assuming v1 [ 275.777492][ T24] usb 1-1: 30:2 : does not exist [ 275.937624][ T3092] usb 1-1: USB disconnect, device number 16 [ 276.558318][ T7449] netlink: 388 bytes leftover after parsing attributes in process `syz.4.390'. [ 277.100898][ T7455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.127685][ T7455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.359967][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 277.559647][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 277.569790][ T9] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 277.584588][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.618950][ T9] usb 5-1: config 0 has no interface number 0 [ 277.636105][ T9] usb 5-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 277.679757][ T9] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 277.735792][ T9] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 277.768079][ T9] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid maxpacket 2053, setting to 1024 [ 277.975197][ T9] usb 5-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 278.332469][ T9] usb 5-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 278.387842][ T9] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 278.452701][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.512256][ T9] usb 5-1: config 0 descriptor?? [ 278.518354][ T7454] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 278.543928][ T7454] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 278.568062][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 278.719839][ T3092] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 278.789255][ T9] usb 5-1: USB disconnect, device number 16 [ 279.459542][ T3092] usb 1-1: Using ep0 maxpacket: 16 [ 279.466984][ T3092] usb 1-1: config 0 has an invalid interface number: 226 but max is 0 [ 279.475657][ T3092] usb 1-1: config 0 has no interface number 0 [ 279.481950][ T3092] usb 1-1: config 0 interface 226 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.497334][ T3092] usb 1-1: config 0 interface 226 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.507804][ T3092] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 279.540645][ T3092] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.630920][ T24] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 279.655439][ T3092] usb 1-1: config 0 descriptor?? [ 279.910075][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 279.947342][ T7486] Invalid source name [ 279.951551][ T7486] UBIFS error (pid: 7486): cannot open "/dev/sg0", error -22 [ 279.986125][ T7486] netlink: 'syz.4.400': attribute type 3 has an invalid length. [ 280.425331][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 280.446577][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 280.587413][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 280.600381][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 280.613045][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 280.642060][ T24] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f [ 280.652655][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.661298][ T24] usb 2-1: Product: syz [ 280.665968][ T24] usb 2-1: Manufacturer: syz [ 280.677673][ T24] usb 2-1: SerialNumber: syz [ 280.708316][ T24] usb 2-1: config 0 descriptor?? [ 280.799163][ T3092] usbhid 1-1:0.226: can't add hid device: -71 [ 280.814749][ T3092] usbhid 1-1:0.226: probe with driver usbhid failed with error -71 [ 280.857821][ T3092] usb 1-1: USB disconnect, device number 17 [ 280.988239][ T24] kvaser_usb 2-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 281.031791][ T24] usb 2-1: USB disconnect, device number 21 [ 281.758379][ T9] IPVS: starting estimator thread 0... [ 281.767813][ T7513] netlink: 16 bytes leftover after parsing attributes in process `syz.0.407'. [ 281.879587][ T7514] IPVS: using max 29 ests per chain, 69600 per kthread [ 283.699648][ T3092] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 283.909587][ T3092] usb 1-1: Using ep0 maxpacket: 16 [ 283.920834][ T3092] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.941264][ T3092] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.951459][ T3092] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 283.965458][ T3092] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 283.974818][ T3092] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.993775][ T3092] usb 1-1: config 0 descriptor?? [ 284.850544][ T5903] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 284.983053][ T3092] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max [ 285.041996][ T3092] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 285.061211][ T3092] microsoft 0003:045E:07DA.0004: no inputs found [ 285.068229][ T3092] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 285.080465][ T5903] usb 5-1: Using ep0 maxpacket: 32 [ 285.093454][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 285.119250][ T3092] usb 1-1: USB disconnect, device number 18 [ 285.135428][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 285.191440][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 285.204753][ T7564] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 285.236391][ T7567] tty tty25: ldisc open failed (-12), clearing slot 24 [ 285.248951][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 285.272166][ T5903] usb 5-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 285.290163][ T7564] CIFS mount error: No usable UNC path provided in device string! [ 285.290163][ T7564] [ 285.305769][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.315337][ T7570] netlink: 'syz.0.422': attribute type 32 has an invalid length. [ 285.324441][ T5903] usb 5-1: Product: syz [ 285.389738][ T7564] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 285.417730][ T5903] usb 5-1: Manufacturer: syz [ 285.449615][ T5903] usb 5-1: SerialNumber: syz [ 285.470514][ T5903] usb 5-1: config 0 descriptor?? [ 285.487555][ T5903] cypress_m8 5-1:0.0: HID->COM RS232 Adapter converter detected [ 285.521258][ T5903] cyphidcom ttyUSB0: required endpoint is missing [ 285.745490][ T7574] fido_id[7574]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 285.856297][ T7543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.875904][ T7543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.901628][ T5911] usb 5-1: USB disconnect, device number 17 [ 286.939966][ T5903] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 287.198081][ T5911] cypress_m8 5-1:0.0: device disconnected [ 287.350941][ T5903] usb 1-1: Using ep0 maxpacket: 8 [ 287.376533][ T5903] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 287.387754][ T7591] netlink: 24 bytes leftover after parsing attributes in process `syz.2.428'. [ 287.389849][ T5903] usb 1-1: config 0 has no interface number 0 [ 287.425705][ T5903] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 287.452100][ T5903] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 287.464825][ T5903] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 287.477638][ T7593] FAULT_INJECTION: forcing a failure. [ 287.477638][ T7593] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 287.486082][ T5903] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 287.520384][ T5903] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 287.530106][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.546760][ T5903] usb 1-1: Product: syz [ 287.559809][ T7593] CPU: 0 UID: 0 PID: 7593 Comm: syz.3.427 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 287.559836][ T7593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 287.559848][ T7593] Call Trace: [ 287.559856][ T7593] [ 287.559864][ T7593] dump_stack_lvl+0x189/0x250 [ 287.559891][ T7593] ? __pfx____ratelimit+0x10/0x10 [ 287.559910][ T7593] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.559931][ T7593] ? __pfx__printk+0x10/0x10 [ 287.559953][ T7593] ? __might_fault+0xb0/0x130 [ 287.559982][ T7593] should_fail_ex+0x414/0x560 [ 287.560008][ T7593] _copy_from_user+0x2d/0xb0 [ 287.560034][ T7593] __sys_bpf+0x1ed/0x860 [ 287.560063][ T7593] ? __pfx___sys_bpf+0x10/0x10 [ 287.560099][ T7593] ? ksys_write+0x22a/0x250 [ 287.560125][ T7593] ? __pfx_ksys_write+0x10/0x10 [ 287.560139][ T7593] ? rcu_is_watching+0x15/0xb0 [ 287.560167][ T7593] __x64_sys_bpf+0x7c/0x90 [ 287.560191][ T7593] do_syscall_64+0xfa/0x3b0 [ 287.560209][ T7593] ? lockdep_hardirqs_on+0x9c/0x150 [ 287.560228][ T7593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.560245][ T7593] ? clear_bhb_loop+0x60/0xb0 [ 287.560268][ T7593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.560285][ T7593] RIP: 0033:0x7fe64ed8ebe9 [ 287.560307][ T7593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.560323][ T7593] RSP: 002b:00007fe64cfb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 287.560349][ T7593] RAX: ffffffffffffffda RBX: 00007fe64efb6180 RCX: 00007fe64ed8ebe9 [ 287.560363][ T7593] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 287.560375][ T7593] RBP: 00007fe64cfb4090 R08: 0000000000000000 R09: 0000000000000000 [ 287.560387][ T7593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.560398][ T7593] R13: 00007fe64efb6218 R14: 00007fe64efb6180 R15: 00007fffc5e93f78 [ 287.560428][ T7593] [ 287.560623][ T5903] usb 1-1: Manufacturer: syz [ 287.772174][ T7596] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.834045][ T7596] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 288.062092][ T5903] usb 1-1: SerialNumber: syz [ 288.142541][ T5903] usb 1-1: config 0 descriptor?? [ 288.349548][ T5911] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 288.676245][ T5903] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 288.804955][ T7577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.859531][ T5911] usb 5-1: Using ep0 maxpacket: 16 [ 288.876435][ T7577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.910387][ T5911] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.939699][ T5911] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 288.948791][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.974365][ T10] kernel write not supported for file bpf-prog (pid: 10 comm: kworker/0:1) [ 288.998696][ T9] usb 1-1: USB disconnect, device number 19 [ 289.025867][ T5911] usb 5-1: config 0 descriptor?? [ 289.036212][ T30] audit: type=1804 audit(1755944890.667:101): pid=7605 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.431" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=15096 res=1 errno=0 [ 289.085514][ T5911] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input8 [ 289.775751][ T9] usb 5-1: USB disconnect, device number 18 [ 289.782362][ T5189] bcm5974 5-1:0.0: could not read from device [ 289.893224][ T6809] bcm5974 5-1:0.0: could not read from device [ 290.530897][ T7618] netlink: 10 bytes leftover after parsing attributes in process `syz.0.434'. [ 292.253550][ T7639] netlink: 'syz.2.437': attribute type 10 has an invalid length. [ 292.930369][ T7639] team0: Port device `ëÿÿ added [ 292.993202][ T7650] netlink: 56 bytes leftover after parsing attributes in process `syz.1.442'. [ 293.319551][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 293.491487][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.539376][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.627206][ T10] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 293.659626][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.688455][ T10] usb 5-1: config 0 descriptor?? [ 294.002134][ T7669] FAULT_INJECTION: forcing a failure. [ 294.002134][ T7669] name failslab, interval 1, probability 0, space 0, times 1 [ 294.089544][ T7669] CPU: 0 UID: 0 PID: 7669 Comm: syz.1.445 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 294.089573][ T7669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 294.089585][ T7669] Call Trace: [ 294.089592][ T7669] [ 294.089601][ T7669] dump_stack_lvl+0x189/0x250 [ 294.089628][ T7669] ? __pfx____ratelimit+0x10/0x10 [ 294.089652][ T7669] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.089673][ T7669] ? __pfx__printk+0x10/0x10 [ 294.089703][ T7669] ? __pfx___might_resched+0x10/0x10 [ 294.089728][ T7669] should_fail_ex+0x414/0x560 [ 294.089752][ T7669] should_failslab+0xa8/0x100 [ 294.089772][ T7669] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 294.089790][ T7669] ? __get_vm_area_node+0x13f/0x300 [ 294.089811][ T7669] __get_vm_area_node+0x13f/0x300 [ 294.089836][ T7669] __vmalloc_node_range_noprof+0x301/0x12f0 [ 294.089857][ T7669] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 294.089889][ T7669] ? is_bpf_text_address+0x26/0x2b0 [ 294.089932][ T7669] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 294.089952][ T7669] ? __might_fault+0xb0/0x130 [ 294.089972][ T7669] ? _parse_integer_limit+0x1ae/0x1f0 [ 294.089999][ T7669] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 294.090025][ T7669] __vmalloc_noprof+0xb1/0xf0 [ 294.090046][ T7669] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 294.090078][ T7669] bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 294.090111][ T7669] bpf_prog_alloc+0x3c/0x1a0 [ 294.090142][ T7669] bpf_prog_load+0x735/0x1930 [ 294.090182][ T7669] ? __pfx_bpf_prog_load+0x10/0x10 [ 294.090233][ T7669] ? bpf_lsm_bpf+0x9/0x20 [ 294.090254][ T7669] ? security_bpf+0x7e/0x300 [ 294.090279][ T7669] __sys_bpf+0x5f1/0x860 [ 294.090308][ T7669] ? __pfx___sys_bpf+0x10/0x10 [ 294.090347][ T7669] ? ksys_write+0x22a/0x250 [ 294.090368][ T7669] ? __pfx_ksys_write+0x10/0x10 [ 294.090401][ T7669] __x64_sys_bpf+0x7c/0x90 [ 294.090426][ T7669] do_syscall_64+0xfa/0x3b0 [ 294.090446][ T7669] ? lockdep_hardirqs_on+0x9c/0x150 [ 294.090466][ T7669] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.090484][ T7669] ? clear_bhb_loop+0x60/0xb0 [ 294.090507][ T7669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.090526][ T7669] RIP: 0033:0x7f0341f8ebe9 [ 294.090542][ T7669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.090559][ T7669] RSP: 002b:00007f0342dd0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 294.090580][ T7669] RAX: ffffffffffffffda RBX: 00007f03421b6180 RCX: 00007f0341f8ebe9 [ 294.090594][ T7669] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 294.090607][ T7669] RBP: 00007f0342dd0090 R08: 0000000000000000 R09: 0000000000000000 [ 294.090619][ T7669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.090631][ T7669] R13: 00007f03421b6218 R14: 00007f03421b6180 R15: 00007fff8af97a38 [ 294.090662][ T7669] [ 294.090710][ T7669] syz.1.445: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 294.139210][ T7668] tipc: Started in network mode [ 294.163180][ T10] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0 [ 294.218247][ T7668] tipc: Node identity 2a80623e7f9, cluster identity 4711 [ 294.391217][ T10] hid-steam 0003:28DE:1142.0005: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 294.392461][ T7669] ,cpuset=/,mems_allowed=0-1 [ 294.427280][ T7669] CPU: 1 UID: 0 PID: 7669 Comm: syz.1.445 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 294.427305][ T7669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 294.427322][ T7669] Call Trace: [ 294.427331][ T7669] [ 294.427340][ T7669] dump_stack_lvl+0x189/0x250 [ 294.427366][ T7669] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 294.427396][ T7669] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.427418][ T7669] ? __pfx__printk+0x10/0x10 [ 294.427443][ T7669] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 294.427467][ T7669] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 294.427499][ T7669] warn_alloc+0x214/0x310 [ 294.427528][ T7669] ? __pfx_warn_alloc+0x10/0x10 [ 294.427552][ T7669] ? __get_vm_area_node+0x13f/0x300 [ 294.427577][ T7669] ? __get_vm_area_node+0x2b5/0x300 [ 294.427604][ T7669] __vmalloc_node_range_noprof+0x326/0x12f0 [ 294.427628][ T7669] ? is_bpf_text_address+0x26/0x2b0 [ 294.427674][ T7669] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 294.427694][ T7669] ? __might_fault+0xb0/0x130 [ 294.427714][ T7669] ? _parse_integer_limit+0x1ae/0x1f0 [ 294.427742][ T7669] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 294.427770][ T7669] __vmalloc_noprof+0xb1/0xf0 [ 294.427790][ T7669] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 294.427822][ T7669] bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 294.427856][ T7669] bpf_prog_alloc+0x3c/0x1a0 [ 294.427888][ T7669] bpf_prog_load+0x735/0x1930 [ 294.427929][ T7669] ? __pfx_bpf_prog_load+0x10/0x10 [ 294.427981][ T7669] ? bpf_lsm_bpf+0x9/0x20 [ 294.428002][ T7669] ? security_bpf+0x7e/0x300 [ 294.428027][ T7669] __sys_bpf+0x5f1/0x860 [ 294.428057][ T7669] ? __pfx___sys_bpf+0x10/0x10 [ 294.428097][ T7669] ? ksys_write+0x22a/0x250 [ 294.428118][ T7669] ? __pfx_ksys_write+0x10/0x10 [ 294.428144][ T7669] __x64_sys_bpf+0x7c/0x90 [ 294.428170][ T7669] do_syscall_64+0xfa/0x3b0 [ 294.428191][ T7669] ? lockdep_hardirqs_on+0x9c/0x150 [ 294.428211][ T7669] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.428230][ T7669] ? clear_bhb_loop+0x60/0xb0 [ 294.428254][ T7669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.428273][ T7669] RIP: 0033:0x7f0341f8ebe9 [ 294.428290][ T7669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.428308][ T7669] RSP: 002b:00007f0342dd0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 294.428333][ T7669] RAX: ffffffffffffffda RBX: 00007f03421b6180 RCX: 00007f0341f8ebe9 [ 294.428347][ T7669] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 294.428360][ T7669] RBP: 00007f0342dd0090 R08: 0000000000000000 R09: 0000000000000000 [ 294.428372][ T7669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.428384][ T7669] R13: 00007f03421b6218 R14: 00007f03421b6180 R15: 00007fff8af97a38 [ 294.428415][ T7669] [ 294.428423][ T7669] Mem-Info: [ 294.551009][ T10] hid-steam 0003:28DE:1142.0005: Steam wireless receiver connected [ 294.551357][ T10] hid-steam 0003:28DE:1142.0005: No HID_FEATURE_REPORT submitted - nothing to read [ 294.602805][ T7669] active_anon:267 inactive_anon:18039 isolated_anon:0 [ 294.602805][ T7669] active_file:9408 inactive_file:41699 isolated_file:0 [ 294.602805][ T7669] unevictable:768 dirty:170 writeback:0 [ 294.602805][ T7669] slab_reclaimable:10314 slab_unreclaimable:98864 [ 294.602805][ T7669] mapped:42593 shmem:13524 pagetables:1362 [ 294.602805][ T7669] sec_pagetables:0 bounce:0 [ 294.602805][ T7669] kernel_misc_reclaimable:0 [ 294.602805][ T7669] free:1303836 free_pcp:15464 free_cma:0 [ 294.646919][ T10] hid-steam 0003:28DE:1142.0006: unknown main item tag 0x0 [ 294.736157][ T7668] tipc: Enabled bearer , priority 0 [ 294.780854][ C0] vkms_vblank_simulate: vblank timer overrun [ 294.848726][ T7669] Node 0 active_anon:1068kB inactive_anon:74556kB active_file:37428kB inactive_file:166796kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:172572kB dirty:680kB writeback:0kB shmem:54760kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12300kB pagetables:5412kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 295.039830][ T10] hid-steam 0003:28DE:1142.0006: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 295.300685][ T7669] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 295.576814][ T7670] syzkaller0: entered promiscuous mode [ 295.755245][ T7670] syzkaller0: entered allmulticast mode [ 295.778728][ T3092] tipc: Node number set to 1427137086 [ 295.829561][ T7669] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 295.953501][ T7669] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 295.988075][ T7669] Node 0 DMA32 free:1286680kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1100kB inactive_anon:66096kB active_file:35756kB inactive_file:166728kB unevictable:1536kB writepending:688kB present:3129332kB managed:2560996kB mlocked:0kB bounce:0kB free_pcp:60132kB local_pcp:22676kB free_cma:0kB [ 296.020702][ C0] vkms_vblank_simulate: vblank timer overrun [ 296.036102][ T7685] tmpfs: Unknown parameter 'noswÒäñR )ŽÒç£|õá°ê{èŠSq›mß4†Ö.]8]1™s‚êÒ 0 [ 296.036102][ T7685] È­:5]0)R¢¿D2Ë8Ð' [ 296.038687][ T7669] lowmem_reserve[]: [ 296.058192][ T7687] syz.0.450: attempt to access beyond end of device [ 296.058192][ T7687] loop1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 296.075809][ T7669] 0 0 1 1 1 [ 296.078833][ T7680] tipc: Resetting bearer [ 296.085727][ T7669] Node 0 Normal free:8kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1772kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 296.086861][ T7687] syz.0.450: attempt to access beyond end of device [ 296.086861][ T7687] loop1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 296.114774][ C0] vkms_vblank_simulate: vblank timer overrun [ 296.136273][ T3092] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 296.149878][ T7666] tipc: Resetting bearer [ 296.150866][ T7669] lowmem_reserve[]: 0 0 0 0 0 [ 296.160746][ T7669] Node 1 Normal free:3904976kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:18152kB local_pcp:10344kB free_cma:0kB [ 296.192053][ C0] vkms_vblank_simulate: vblank timer overrun [ 296.211194][ T7669] lowmem_reserve[]: 0 0 0 0 0 [ 296.220760][ T7669] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 296.233886][ T7669] Node 0 DMA32: 192*4kB (UME) 93*8kB (UM) 0*16kB 298*32kB (U) 138*64kB (UME) 107*128kB (UME) 102*256kB (UME) 33*512kB (UME) 13*1024kB (UM) 4*2048kB (M) 290*4096kB (UM) = 1285928kB [ 296.236927][ T7666] tipc: Disabling bearer [ 296.252412][ T7669] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 296.270932][ T7669] Node 1 Normal: 178*4kB (UE) 57*8kB (UME) 32*16kB (UME) 78*32kB (UME) 30*64kB (UME) 6*128kB (UME) 5*256kB (UME) 3*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 950*4096kB (M) = 3904976kB [ 296.289967][ T7669] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 296.300787][ T7669] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 296.319627][ T3092] usb 4-1: Using ep0 maxpacket: 8 [ 296.329121][ T7669] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 296.329571][ T3092] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 296.352085][ T7669] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 296.353811][ T3092] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.370720][ T7669] 66328 total pagecache pages [ 296.387518][ T7669] 0 pages in swap cache [ 296.390399][ T3092] pvrusb2: Hardware description: Terratec Grabster AV400 [ 296.399298][ T3092] pvrusb2: ********** [ 296.408574][ T10] usb 5-1: USB disconnect, device number 19 [ 296.409838][ T3092] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 296.417837][ T7669] Free swap = 124996kB [ 296.432973][ T3092] pvrusb2: Important functionality might not be entirely working. [ 296.442152][ T3092] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 296.457320][ T3092] pvrusb2: ********** [ 296.463902][ T7669] Total swap = 124996kB [ 296.470232][ T10] hid-steam 0003:28DE:1142.0005: Steam wireless receiver disconnected [ 296.482728][ T7669] 2097051 pages RAM [ 296.490776][ T7669] 0 pages HighMem/MovableOnly [ 296.505536][ T7669] 424695 pages reserved [ 296.521801][ T7669] 0 pages cma reserved [ 296.586289][ T2342] pvrusb2: Invalid write control endpoint [ 296.879003][ T7682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.736098][ T7682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.737922][ T2342] pvrusb2: Invalid write control endpoint [ 297.803841][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 297.817414][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 297.831152][ T7684] syz.4.448 (7684) used greatest stack depth: 19928 bytes left [ 297.857005][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 297.877525][ T2342] pvrusb2: Device being rendered inoperable [ 297.916913][ T7682] pvrusb2: Attempted to execute control transfer when device not ok [ 297.998403][ T5903] usb 4-1: USB disconnect, device number 21 [ 298.006010][ T2342] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 298.058119][ T2342] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 298.233194][ T2342] pvrusb2: Attached sub-driver cx25840 [ 298.250052][ T5952] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 298.295290][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 298.784349][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 298.885171][ T5952] usb 2-1: too many configurations: 97, using maximum allowed: 8 [ 298.895627][ T5952] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 298.912014][ T5952] usb 2-1: can't read configurations, error -61 [ 299.049529][ T5952] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 299.246064][ T5952] usb 2-1: too many configurations: 97, using maximum allowed: 8 [ 299.258177][ T5952] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 299.266285][ T5952] usb 2-1: can't read configurations, error -61 [ 299.277893][ T5952] usb usb2-port1: attempt power cycle [ 299.659547][ T5952] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 299.704045][ T5952] usb 2-1: too many configurations: 97, using maximum allowed: 8 [ 299.739337][ T5952] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 299.770248][ T5952] usb 2-1: can't read configurations, error -61 [ 299.839671][ T5903] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 299.919768][ T5952] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 299.981221][ T5952] usb 2-1: too many configurations: 97, using maximum allowed: 8 [ 300.047031][ T5903] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 300.068796][ T5952] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 300.103081][ T5903] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.130508][ T5952] usb 2-1: can't read configurations, error -61 [ 300.190992][ T5903] usb 1-1: config 0 has no interface number 0 [ 300.197635][ T5903] usb 1-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 300.328300][ T5952] usb usb2-port1: unable to enumerate USB device [ 301.024101][ T5903] usb 1-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239 [ 301.285573][ T5903] usb 1-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 301.376628][ T7734] 9pnet_fd: Insufficient options for proto=fd [ 301.405072][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.436324][ T5903] usb 1-1: Product: syz [ 301.440813][ T5903] usb 1-1: Manufacturer: syz [ 301.451817][ T5903] usb 1-1: SerialNumber: syz [ 301.504631][ T5903] usb 1-1: config 0 descriptor?? [ 301.813096][ T7748] PKCS8: Unsupported PKCS#8 version [ 301.849602][ T5903] HFC-S_USB 1-1:0.117: probe with driver HFC-S_USB failed with error -5 [ 301.888379][ T7735] smc: net device bond0 applied user defined pnetid SYZ2 [ 302.006947][ T7743] smc: net device bond0 erased user defined pnetid SYZ2 [ 302.016725][ T5967] usb 3-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 302.081029][ T5903] usb 1-1: USB disconnect, device number 20 [ 302.088942][ T7750] tipc: Started in network mode [ 302.114109][ T7750] tipc: Node identity 080211, cluster identity 4711 [ 302.131389][ T5967] dvb_usb_ec168 3-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 302.157942][ T5967] usb 3-1: USB disconnect, device number 18 [ 302.178295][ T7750] tipc: Enabled bearer , priority 0 [ 302.335095][ T7751] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 302.376208][ T7751] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 302.518505][ T7767] netlink: 60 bytes leftover after parsing attributes in process `syz.4.468'. [ 302.574480][ T7762] netlink: 60 bytes leftover after parsing attributes in process `syz.4.468'. [ 302.643203][ T5911] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 302.916446][ T7780] Invalid source name [ 302.921440][ T7780] UBIFS error (pid: 7780): cannot open "./file0", error -22 [ 302.926560][ T5911] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 302.945009][ T7780] Invalid source name [ 302.949730][ T5967] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 302.950613][ T7780] UBIFS error (pid: 7780): cannot open "./file0", error -22 [ 302.957777][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.975607][ T5911] usb 3-1: Product: syz [ 302.980242][ T5911] usb 3-1: Manufacturer: syz [ 302.984980][ T5911] usb 3-1: SerialNumber: syz [ 302.998908][ T5911] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 303.020760][ T10] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 303.091010][ T5967] usb 5-1: device descriptor read/64, error -71 [ 303.296595][ C0] usb 3-1: ath9k_htc: invalid pkt_len (b408) [ 303.302854][ C0] usb 3-1: ath9k_htc: invalid pkt_len (b408) [ 303.350371][ T5967] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 303.398985][ T5911] tipc: Node number set to 134353152 [ 304.085670][ T5967] usb 5-1: device descriptor read/64, error -71 [ 304.139501][ T10] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 304.227911][ T5967] usb usb5-port1: attempt power cycle [ 304.436468][ T10] ath9k_htc: Failed to initialize the device [ 304.489793][ T5903] usb 3-1: USB disconnect, device number 19 [ 304.599747][ T5967] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 304.641924][ T5903] usb 3-1: ath9k_htc: USB layer deinitialized [ 304.681671][ T5967] usb 5-1: device descriptor read/8, error -71 [ 304.808306][ T7790] 9pnet_fd: Insufficient options for proto=fd [ 304.858351][ T7796] smc: net device bond0 applied user defined pnetid SYZ2 [ 304.867703][ T7797] smc: net device bond0 erased user defined pnetid SYZ2 [ 304.929722][ T5967] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 304.972019][ T5967] usb 5-1: device descriptor read/8, error -71 [ 305.039849][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 305.103405][ T5967] usb usb5-port1: unable to enumerate USB device [ 305.205026][ T30] audit: type=1326 audit(1755944906.837:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7813 comm="syz.0.482" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a9098ebe9 code=0x0 [ 305.229583][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 305.248170][ T9] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 305.258665][ T9] usb 2-1: config 0 has no interface number 0 [ 305.290235][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 305.302415][ T7805] syz.3.480 (7805) used greatest stack depth: 15960 bytes left [ 305.319695][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.339571][ T9] usb 2-1: Product: syz [ 305.343797][ T9] usb 2-1: Manufacturer: syz [ 305.360116][ T9] usb 2-1: SerialNumber: syz [ 305.371584][ T9] usb 2-1: config 0 descriptor?? [ 305.380278][ T9] smsc95xx v2.0.0 [ 305.419609][ T5911] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 305.549527][ T5967] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 305.581571][ T5911] usb 3-1: Using ep0 maxpacket: 8 [ 305.588437][ T5911] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.598822][ T5911] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 305.613760][ T5911] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 305.624220][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 305.635167][ T5911] usb 3-1: SerialNumber: syz [ 305.643519][ T5911] usb 3-1: config 0 descriptor?? [ 305.655140][ T5911] hso 3-1:0.0: Can't find BULK IN endpoint [ 305.713154][ T5967] usb 1-1: config 0 interface 0 has no altsetting 0 [ 305.727858][ T5967] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 305.737524][ T5967] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.765123][ T5967] usb 1-1: config 0 descriptor?? [ 305.780835][ T7800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.794950][ T7800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.803938][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 305.816282][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 305.856442][ T5911] usb 3-1: USB disconnect, device number 20 [ 306.027885][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 306.040824][ T9] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -61 [ 306.201302][ T5967] isku 0003:1E7D:3264.0007: unexpected long global item [ 306.210595][ T5967] isku 0003:1E7D:3264.0007: parse failed [ 306.218901][ T5967] isku 0003:1E7D:3264.0007: probe with driver isku failed with error -22 [ 306.233419][ T7800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.245002][ T7800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.265660][ T5967] usb 2-1: USB disconnect, device number 26 [ 306.299547][ T5952] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 306.427933][ T7832] ip6tnl2: entered promiscuous mode [ 306.436630][ T7832] ip6tnl2: entered allmulticast mode [ 306.444652][ T7832] team0: Device ip6tnl2 is of different type [ 306.501000][ T5952] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 306.514928][ T5952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.531644][ T5952] usb 5-1: Product: syz [ 306.535943][ T5952] usb 5-1: Manufacturer: syz [ 306.544199][ T5952] usb 5-1: SerialNumber: syz [ 306.607576][ T7833] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 306.609394][ T5952] usb 5-1: config 0 descriptor?? [ 306.985561][ T7842] smc: net device bond0 applied user defined pnetid SYZ2 [ 307.001179][ T7840] smc: net device bond0 erased user defined pnetid SYZ2 [ 307.102440][ T7842] 9pnet_fd: Insufficient options for proto=fd [ 307.177750][ T7825] loop2: detected capacity change from 0 to 7 [ 307.187690][ T7825] loop2: [ 307.190920][ T7825] loop2: partition table partially beyond EOD, truncated [ 307.259673][ T5952] usb 5-1: USB disconnect, device number 24 [ 307.399925][ T5911] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 307.422340][ T7844] netlink: 'syz.1.492': attribute type 10 has an invalid length. [ 307.461541][ T7844] syz_tun: entered promiscuous mode [ 307.493465][ T7844] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 307.566039][ T5911] usb 3-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.10 [ 307.591183][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.615409][ T5911] usb 3-1: Product: syz [ 307.621733][ T5911] usb 3-1: Manufacturer: syz [ 307.627630][ T5911] usb 3-1: SerialNumber: syz [ 307.639933][ T5911] usb 3-1: config 0 descriptor?? [ 307.650024][ T5911] go7007 3-1:0.0: probe with driver go7007 failed with error -12 [ 307.666891][ T7849] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 307.782834][ T7851] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 307.849249][ T5911] usb 3-1: USB disconnect, device number 21 [ 307.931369][ T7856] No source specified [ 308.326840][ T5911] usb 1-1: USB disconnect, device number 21 [ 310.807516][ T5952] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 310.855689][ T7887] tipc: Enabled bearer , priority 10 [ 310.980922][ T5952] usb 1-1: Using ep0 maxpacket: 16 [ 310.998019][ T5952] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 311.006757][ T5952] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.017125][ T5952] usb 1-1: config 0 has no interface number 0 [ 311.030955][ T5952] usb 1-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 311.041162][ T5952] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.049603][ T5952] usb 1-1: Product: syz [ 311.054064][ T5952] usb 1-1: Manufacturer: syz [ 311.058802][ T5952] usb 1-1: SerialNumber: syz [ 311.078796][ T5952] usb 1-1: config 0 descriptor?? [ 311.298203][ T7891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.309190][ T5952] usb 1-1: Found UVC 0.00 device syz (046c:14e8) [ 311.317983][ T7891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.332771][ T5952] usb 1-1: No valid video chain found. [ 311.502237][ T5952] usb 1-1: USB disconnect, device number 22 [ 311.740615][ T7900] netlink: 24 bytes leftover after parsing attributes in process `syz.4.508'. [ 311.773644][ T7902] x_tables: duplicate underflow at hook 2 [ 311.780045][ T5967] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 312.254631][ T5911] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 312.286294][ T7907] program syz.1.511 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 312.300433][ T5967] usb 4-1: Using ep0 maxpacket: 16 [ 312.308712][ T5967] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 312.320700][ T5967] usb 4-1: config 0 has no interface number 0 [ 312.335394][ T5967] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 312.348552][ T5967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.366808][ T5967] usb 4-1: Product: syz [ 312.374307][ T5967] usb 4-1: Manufacturer: syz [ 312.382170][ T5967] usb 4-1: SerialNumber: syz [ 312.393785][ T5967] usb 4-1: config 0 descriptor?? [ 312.404966][ T5967] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 312.422821][ T5911] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 312.436752][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.445448][ T5911] usb 3-1: Product: syz [ 312.453722][ T5911] usb 3-1: Manufacturer: syz [ 312.458571][ T5911] usb 3-1: SerialNumber: syz [ 312.484397][ T5911] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 312.507223][ T10] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 312.589852][ T9] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 312.762043][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 312.799533][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 312.849606][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 312.858798][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.903615][ T9] usb 2-1: Product: syz [ 312.913508][ T9] usb 2-1: Manufacturer: syz [ 312.917746][ T7922] netlink: 28 bytes leftover after parsing attributes in process `syz.4.514'. [ 312.918436][ T9] usb 2-1: SerialNumber: syz [ 312.970031][ T5903] usb 3-1: USB disconnect, device number 22 [ 312.995527][ T7926] MTD: Attempt to mount non-MTD device "/dev/nbd0" [ 313.013052][ T7926] cramfs: wrong magic [ 313.983026][ T5967] gspca_spca1528: reg_w err -110 [ 313.995355][ T10] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 314.328734][ T10] ath9k_htc: Failed to initialize the device [ 314.566013][ T5903] usb 3-1: ath9k_htc: USB layer deinitialized [ 314.899260][ T5967] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110 [ 314.930238][ T9] usb 2-1: 0:2 : does not exist [ 315.026875][ T9] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 315.267829][ T9] usb 2-1: USB disconnect, device number 27 [ 315.384481][ T3499] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 315.427310][ T7005] udevd[7005]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 315.629659][ T5903] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 315.649611][ T5896] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 315.784248][ T7955] process 'syz.1.522' launched './file0' with NULL argv: empty string added [ 315.802206][ T5903] usb 1-1: Using ep0 maxpacket: 16 [ 315.809541][ T5896] usb 5-1: Using ep0 maxpacket: 32 [ 315.810587][ T5903] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 315.816955][ T5896] usb 5-1: config 0 has an invalid interface number: 48 but max is 0 [ 315.836463][ T5896] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 315.848766][ T5896] usb 5-1: config 0 has no interface number 0 [ 315.848785][ T5903] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.863730][ T5896] usb 5-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 315.876404][ T5903] usb 1-1: config 0 has no interface number 0 [ 315.879223][ T5896] usb 5-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 315.896304][ T5903] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 315.901377][ T5896] usb 5-1: config 0 interface 48 has no altsetting 0 [ 315.923090][ T5896] usb 5-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=d2.a2 [ 315.926906][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.947399][ T5903] usb 1-1: Product: syz [ 315.947435][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.961548][ T5967] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 315.973634][ T5903] usb 1-1: Manufacturer: syz [ 315.978418][ T5903] usb 1-1: SerialNumber: syz [ 315.978513][ T5896] usb 5-1: Product: syz [ 315.989004][ T5896] usb 5-1: Manufacturer: syz [ 315.994774][ T5903] usb 1-1: config 0 descriptor?? [ 315.996946][ T5896] usb 5-1: SerialNumber: syz [ 316.015795][ T5896] usb 5-1: config 0 descriptor?? [ 316.086137][ T7961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.523'. [ 316.100604][ T5967] usb 3-1: device descriptor read/64, error -71 [ 316.449670][ T5967] usb 3-1: new low-speed USB device number 24 using dummy_hcd [ 316.654362][ T7968] netlink: 16 bytes leftover after parsing attributes in process `syz.0.519'. [ 316.729985][ T5896] keyspan 5-1:0.48: Keyspan 1 port adapter converter detected [ 316.737794][ T5896] keyspan 5-1:0.48: found no endpoint descriptor for endpoint 87 [ 316.747244][ T5896] keyspan 5-1:0.48: found no endpoint descriptor for endpoint 7 [ 316.757140][ T5896] keyspan 5-1:0.48: found no endpoint descriptor for endpoint 81 [ 316.765545][ T5896] keyspan 5-1:0.48: found no endpoint descriptor for endpoint 1 [ 316.836190][ T5896] keyspan 5-1:0.48: found no endpoint descriptor for endpoint 2 [ 316.845261][ T5896] keyspan 5-1:0.48: found no endpoint descriptor for endpoint 85 [ 316.899724][ T5967] usb 3-1: device descriptor read/64, error -71 [ 316.948852][ T5896] keyspan 5-1:0.48: found no endpoint descriptor for endpoint 5 [ 317.153022][ T5896] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 317.278269][ T5967] usb usb3-port1: attempt power cycle [ 317.391858][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.417894][ T5952] usb 4-1: USB disconnect, device number 22 [ 317.446537][ T5896] usb 5-1: USB disconnect, device number 25 [ 317.495498][ T5896] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 317.552454][ T7972] overlay: Unknown parameter 'uid<00000000000000000000' [ 317.552821][ T5896] keyspan 5-1:0.48: device disconnected [ 318.032218][ T5967] usb 3-1: new low-speed USB device number 25 using dummy_hcd [ 318.448079][ T5952] usb 1-1: USB disconnect, device number 23 [ 318.473503][ T5967] usb 3-1: device descriptor read/8, error -71 [ 318.691657][ T30] audit: type=1326 audit(1755944920.327:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7982 comm="syz.0.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a9098ebe9 code=0x7ffc0000 [ 318.732901][ T5967] usb 3-1: new low-speed USB device number 26 using dummy_hcd [ 318.780146][ T30] audit: type=1326 audit(1755944920.327:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7982 comm="syz.0.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f7a9098ebe9 code=0x7ffc0000 [ 318.862421][ T30] audit: type=1326 audit(1755944920.327:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7982 comm="syz.0.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a9098ebe9 code=0x7ffc0000 [ 318.977916][ T5967] usb 3-1: device not accepting address 26, error -71 [ 318.986320][ T30] audit: type=1326 audit(1755944920.367:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7982 comm="syz.0.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f7a9098ebe9 code=0x7ffc0000 [ 319.019868][ T5967] usb usb3-port1: unable to enumerate USB device [ 319.054783][ T30] audit: type=1326 audit(1755944920.367:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7982 comm="syz.0.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a9098ebe9 code=0x7ffc0000 [ 319.083732][ T8004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.533'. [ 319.092823][ T30] audit: type=1326 audit(1755944920.367:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7982 comm="syz.0.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7a9098ebe9 code=0x7ffc0000 [ 319.092870][ T30] audit: type=1326 audit(1755944920.367:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7982 comm="syz.0.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a9098ebe9 code=0x7ffc0000 [ 319.165911][ T30] audit: type=1326 audit(1755944920.367:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7982 comm="syz.0.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f7a9098ebe9 code=0x7ffc0000 [ 319.194760][ T30] audit: type=1326 audit(1755944920.367:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7982 comm="syz.0.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a9098ebe9 code=0x7ffc0000 [ 319.229256][ T30] audit: type=1326 audit(1755944920.367:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7982 comm="syz.0.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7a9098ebe9 code=0x7ffc0000 [ 319.375724][ T8014] netlink: 'syz.4.536': attribute type 9 has an invalid length. [ 319.385524][ T8014] netlink: 'syz.4.536': attribute type 6 has an invalid length. [ 319.399544][ T5967] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 319.540566][ T5967] usb 3-1: device descriptor read/64, error -71 [ 319.655514][ T8024] netlink: 'syz.4.539': attribute type 5 has an invalid length. [ 319.674975][ T8024] ip6erspan0: entered promiscuous mode [ 319.680833][ T5903] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 319.789702][ T5967] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 319.850024][ T5903] usb 4-1: Using ep0 maxpacket: 8 [ 319.858385][ T5903] usb 4-1: config 0 has an invalid interface number: 151 but max is 1 [ 319.883026][ T5903] usb 4-1: config 0 has no interface number 1 [ 319.889208][ T5903] usb 4-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 319.928800][ T5903] usb 4-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 319.943298][ T5967] usb 3-1: device descriptor read/64, error -71 [ 319.963682][ T5903] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 319.976777][ T5903] usb 4-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 319.987441][ T5903] usb 4-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 320.006796][ T5903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 320.023701][ T5903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 320.045476][ T5903] usb 4-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 320.056657][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.069936][ T5967] usb usb3-port1: attempt power cycle [ 320.071383][ T5903] usb 4-1: Product: syz [ 320.071402][ T5903] usb 4-1: Manufacturer: syz [ 320.071418][ T5903] usb 4-1: SerialNumber: syz [ 320.084092][ T5903] usb 4-1: config 0 descriptor?? [ 320.090298][ T8017] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 320.094076][ T5903] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 320.098518][ T5903] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 320.098968][ T5903] usb 4-1: invalid MIDI in EP 0 [ 320.437961][ T5967] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 320.454306][ T5903] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 320.472869][ T5967] usb 3-1: device descriptor read/8, error -71 [ 320.501701][ T8034] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 320.609768][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 320.721265][ T5967] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 320.743335][ T5967] usb 3-1: device descriptor read/8, error -71 [ 320.860886][ T5967] usb usb3-port1: unable to enumerate USB device [ 321.395265][ T8045] xt_TCPMSS: Only works on TCP SYN packets [ 321.419526][ T48] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 321.622522][ T48] usb 2-1: device descriptor read/64, error -71 [ 321.866088][ T48] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 322.039590][ T48] usb 2-1: device descriptor read/64, error -71 [ 322.160797][ T48] usb usb2-port1: attempt power cycle [ 322.234329][ T5903] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 322.295054][ T5896] usb 4-1: USB disconnect, device number 23 [ 322.450255][ T5903] usb 1-1: Using ep0 maxpacket: 8 [ 322.461202][ T5903] usb 1-1: config 6 has an invalid interface number: 2 but max is 0 [ 322.509685][ T48] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 322.517575][ T5903] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 322.535407][ T5903] usb 1-1: config 6 has no interface number 0 [ 322.556806][ T5903] usb 1-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 322.572549][ T48] usb 2-1: device descriptor read/8, error -71 [ 322.601482][ T5903] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 322.631680][ T5903] usb 1-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 322.668088][ T8063] netlink: 'syz.3.552': attribute type 3 has an invalid length. [ 322.699207][ T8063] netlink: 56 bytes leftover after parsing attributes in process `syz.3.552'. [ 322.711303][ T5903] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 322.720833][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.728862][ T5903] usb 1-1: Product: syz [ 322.734111][ T5903] usb 1-1: Manufacturer: syz [ 322.738993][ T5903] usb 1-1: SerialNumber: syz [ 322.755286][ T5903] hso 1-1:6.2: Failed to find INT IN ep [ 322.821099][ T48] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 322.851023][ T48] usb 2-1: device descriptor read/8, error -71 [ 322.879590][ T24] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 322.960783][ T5911] usb 1-1: USB disconnect, device number 24 [ 322.963633][ T48] usb usb2-port1: unable to enumerate USB device [ 322.973146][ T5896] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 323.029613][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 323.036742][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.048792][ T24] usb 3-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 323.058985][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.075109][ T24] usb 3-1: config 0 descriptor?? [ 323.129770][ T5896] usb 4-1: Using ep0 maxpacket: 8 [ 323.138235][ T5896] usb 4-1: config 5 has an invalid interface number: 35 but max is 1 [ 323.148111][ T5896] usb 4-1: config 5 has an invalid interface number: 4 but max is 1 [ 323.157360][ T5896] usb 4-1: config 5 has an invalid interface number: 4 but max is 1 [ 323.165521][ T5896] usb 4-1: config 5 has no interface number 0 [ 323.172622][ T5896] usb 4-1: config 5 has no interface number 1 [ 323.179493][ T5896] usb 4-1: config 5 interface 35 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 323.193262][ T5896] usb 4-1: config 5 interface 4 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 323.206318][ T5896] usb 4-1: config 5 interface 35 has no altsetting 0 [ 323.214449][ T5896] usb 4-1: config 5 interface 4 has no altsetting 0 [ 323.221265][ T5896] usb 4-1: config 5 interface 4 has no altsetting 1 [ 323.230686][ T5896] usb 4-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=d4.1b [ 323.240462][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.248672][ T5896] usb 4-1: Product: syz [ 323.254621][ T5896] usb 4-1: Manufacturer: syz [ 323.259251][ T5896] usb 4-1: SerialNumber: syz [ 323.486448][ T5896] ttusbir 4-1:5.35: cannot find expected altsetting [ 323.533761][ T5896] ttusbir 4-1:5.4: cannot find expected altsetting [ 323.544321][ T24] aquacomputer_d5next 0003:0C70:F00E.0008: hidraw0: USB HID v0.83 Device [HID 0c70:f00e] on usb-dummy_hcd.2-1/input0 [ 323.569871][ T5896] usb 4-1: USB disconnect, device number 24 [ 323.703032][ T8062] netlink: 'syz.2.551': attribute type 1 has an invalid length. [ 323.851930][ T8062] loop6: detected capacity change from 0 to 63 [ 323.853785][ T8079] /dev/nullb0: Can't open blockdev [ 323.861430][ T8075] bond1: (slave gretap1): making interface the new active one [ 323.874913][ T8062] Buffer I/O error on dev loop6, logical block 0, async page read [ 323.883478][ T8062] Buffer I/O error on dev loop6, logical block 0, async page read [ 323.892364][ T8062] Buffer I/O error on dev loop6, logical block 0, async page read [ 323.894362][ T8075] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 323.905866][ T8082] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 323.948052][ T8082] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 323.975337][ T8062] loop6: unable to read partition table [ 323.989924][ T8062] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 324.021007][ T8082] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 324.036331][ T8082] Buffer I/O error on dev loop6, logical block 3, lost async page write [ 324.046279][ T8082] Buffer I/O error on dev loop6, logical block 4, lost async page write [ 324.060820][ T8082] Buffer I/O error on dev loop6, logical block 5, lost async page write [ 324.071285][ T8082] Buffer I/O error on dev loop6, logical block 6, lost async page write [ 324.098255][ T24] usb 3-1: USB disconnect, device number 31 [ 324.631633][ T8092] netlink: 24 bytes leftover after parsing attributes in process `syz.4.559'. [ 325.057377][ T8097] smc: net device bond0 applied user defined pnetid SYZ2 [ 325.073963][ T8097] smc: net device bond0 erased user defined pnetid SYZ2 [ 325.332463][ T8100] fuse: Unknown parameter 'ootmode' [ 325.473854][ T8104] netlink: 40 bytes leftover after parsing attributes in process `syz.0.563'. [ 325.545650][ T8104] netlink: 'syz.0.563': attribute type 6 has an invalid length. [ 325.555157][ T8104] netlink: 24 bytes leftover after parsing attributes in process `syz.0.563'. [ 325.568158][ T8104] syz.0.563 (8104): attempted to duplicate a private mapping with mremap. This is not supported. [ 325.585640][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 325.585657][ T30] audit: type=1326 audit(1755944927.217:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8103 comm="syz.0.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a9098ebe9 code=0x7ffc0000 [ 325.664740][ T30] audit: type=1326 audit(1755944927.217:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8103 comm="syz.0.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a9098ebe9 code=0x7ffc0000 [ 325.686136][ C1] vkms_vblank_simulate: vblank timer overrun [ 325.700073][ T30] audit: type=1326 audit(1755944927.217:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8103 comm="syz.0.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f7a9098ebe9 code=0x7ffc0000 [ 325.721613][ C1] vkms_vblank_simulate: vblank timer overrun [ 325.728775][ T30] audit: type=1326 audit(1755944927.267:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8103 comm="syz.0.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a9098ebe9 code=0x7ffc0000 [ 325.753909][ T30] audit: type=1326 audit(1755944927.267:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8103 comm="syz.0.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a9098ebe9 code=0x7ffc0000 [ 325.853198][ T8106] veth1_macvtap: left promiscuous mode [ 325.869213][ T8106] macsec0: entered promiscuous mode [ 327.659655][ T5911] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 327.819575][ T5911] usb 5-1: Using ep0 maxpacket: 16 [ 327.873507][ T5911] usb 5-1: config 0 has no interfaces? [ 327.904029][ T5911] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 327.933394][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.986243][ T5911] usb 5-1: Product: syz [ 328.022577][ T5911] usb 5-1: Manufacturer: syz [ 328.028713][ T5911] usb 5-1: SerialNumber: syz [ 328.069069][ T5911] usb 5-1: config 0 descriptor?? [ 328.074289][ T5831] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 328.235736][ T5831] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.269651][ T5831] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.305328][ T5831] usb 3-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 328.339460][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.369725][ T5831] usb 3-1: config 0 descriptor?? [ 329.447077][ T8146] smc: net device bond0 applied user defined pnetid SYZ2 [ 329.460917][ T8146] smc: net device bond0 erased user defined pnetid SYZ2 [ 329.646294][ T5831] razer 0003:1532:010E.0009: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.2-1/input0 [ 329.812357][ T5831] usb 5-1: USB disconnect, device number 26 [ 331.136681][ T10] usb 3-1: USB disconnect, device number 32 [ 331.144551][ T8185] netlink: 12 bytes leftover after parsing attributes in process `syz.4.582'. [ 331.770894][ T10] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 331.929558][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 331.938241][ T10] usb 3-1: config index 0 descriptor too short (expected 14875, got 27) [ 331.949648][ T10] usb 3-1: config 0 has an invalid descriptor of length 133, skipping remainder of the config [ 331.961085][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 331.973538][ T10] usb 3-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=b4.25 [ 332.006340][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.016699][ T10] usb 3-1: Product: syz [ 332.024972][ T10] usb 3-1: Manufacturer: syz [ 332.031423][ T10] usb 3-1: SerialNumber: syz [ 332.039014][ T10] usb 3-1: config 0 descriptor?? [ 332.128026][ T6520] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.238244][ T6520] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.315971][ T10] usb 3-1: USB disconnect, device number 33 [ 332.445101][ T6520] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.544451][ T6520] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.583929][ T8202] binder: 8201:8202 ioctl 4018620d 0 returned -22 [ 332.593738][ T8202] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 332.606921][ T8202] binder: 8201:8202 ioctl c0306201 200000000240 returned -11 [ 333.041957][ T6520] bridge_slave_1: left allmulticast mode [ 333.089660][ T6520] bridge_slave_1: left promiscuous mode [ 333.096397][ T6520] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.191157][ T6520] bridge_slave_0: left allmulticast mode [ 333.196860][ T6520] bridge_slave_0: left promiscuous mode [ 333.231224][ T6520] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.216948][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 334.227666][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 334.236147][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 334.245006][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 334.255420][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 334.448924][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 334.460018][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 334.484717][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 334.493147][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 334.507462][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 334.533827][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 334.546292][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 334.561426][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 334.571066][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 334.578775][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 334.883628][ T8238] netlink: 'syz.2.598': attribute type 39 has an invalid length. [ 335.233482][ T6520] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.295661][ T6520] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.358905][ T6520] bond0 (unregistering): Released all slaves [ 336.065399][ T8246] netlink: 24 bytes leftover after parsing attributes in process `syz.2.601'. [ 336.232441][ T6520] hsr_slave_0: left promiscuous mode [ 336.245113][ T6520] hsr_slave_1: left promiscuous mode [ 336.265688][ T6520] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.293719][ T6520] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.324882][ T6520] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.349935][ T5839] Bluetooth: hci0: command tx timeout [ 336.363553][ T6520] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.541572][ T8259] program syz.2.602 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 336.600290][ T5839] Bluetooth: hci1: command tx timeout [ 336.657219][ T8260] program syz.2.602 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 336.673575][ T8260] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 336.685171][ T5839] Bluetooth: hci4: command tx timeout [ 336.687899][ T6520] veth1_macvtap: left promiscuous mode [ 336.741475][ T6520] veth0_macvtap: left promiscuous mode [ 336.748629][ T6520] veth1_vlan: left promiscuous mode [ 336.765247][ T6520] veth0_vlan: left promiscuous mode [ 337.485625][ T6520] team0 (unregistering): Port device team_slave_1 removed [ 337.530161][ T6520] team0 (unregistering): Port device team_slave_0 removed [ 337.975478][ T8259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.602'. [ 338.440847][ T8276] cramfs: Unknown parameter 'discard' [ 338.499667][ T5839] Bluetooth: hci0: command tx timeout [ 338.669794][ T5839] Bluetooth: hci1: command tx timeout [ 338.749689][ T5839] Bluetooth: hci4: command tx timeout [ 339.053278][ T8227] chnl_net:caif_netlink_parms(): no params data found [ 339.235618][ T8222] chnl_net:caif_netlink_parms(): no params data found [ 339.334685][ T8284] netlink: 52 bytes leftover after parsing attributes in process `syz.1.606'. [ 339.678059][ T8227] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.694656][ T8227] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.713216][ T8227] bridge_slave_0: entered allmulticast mode [ 339.724865][ T8227] bridge_slave_0: entered promiscuous mode [ 339.730840][ T5903] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 339.787339][ T8227] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.804810][ T8299] netlink: 24 bytes leftover after parsing attributes in process `syz.2.608'. [ 339.820294][ T8227] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.827484][ T8227] bridge_slave_1: entered allmulticast mode [ 339.845196][ T8227] bridge_slave_1: entered promiscuous mode [ 339.875021][ T8231] chnl_net:caif_netlink_parms(): no params data found [ 339.900008][ T5903] usb 2-1: device descriptor read/64, error -71 [ 339.966228][ T8227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.994566][ T6520] IPVS: stop unused estimator thread 0... [ 340.002308][ T8227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.150029][ T5903] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 340.261461][ T8222] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.280127][ T8222] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.299302][ T8222] bridge_slave_0: entered allmulticast mode [ 340.299540][ T5903] usb 2-1: device descriptor read/64, error -71 [ 340.318895][ T8222] bridge_slave_0: entered promiscuous mode [ 340.382473][ T8227] team0: Port device team_slave_0 added [ 340.423924][ T8222] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.432554][ T8222] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.440118][ T8222] bridge_slave_1: entered allmulticast mode [ 340.448131][ T8222] bridge_slave_1: entered promiscuous mode [ 340.451307][ T5903] usb usb2-port1: attempt power cycle [ 340.481218][ T8227] team0: Port device team_slave_1 added [ 340.520512][ T5839] Bluetooth: hci0: command tx timeout [ 340.591563][ T6520] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.631370][ T8222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.645383][ T8222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.709575][ T6520] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.749571][ T5839] Bluetooth: hci1: command tx timeout [ 340.764372][ T8227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.780060][ T8227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.806535][ T8227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.817771][ T5903] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 340.830054][ T5839] Bluetooth: hci4: command tx timeout [ 340.840641][ T8227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.847616][ T8227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.874512][ T8227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.885671][ T5903] usb 2-1: device descriptor read/8, error -71 [ 340.898130][ T8222] team0: Port device team_slave_0 added [ 340.944558][ T8222] team0: Port device team_slave_1 added [ 340.997486][ T6520] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.015273][ T8231] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.024207][ T8231] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.034322][ T8231] bridge_slave_0: entered allmulticast mode [ 341.044735][ T8231] bridge_slave_0: entered promiscuous mode [ 341.055831][ T8231] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.063460][ T8231] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.070880][ T8231] bridge_slave_1: entered allmulticast mode [ 341.077910][ T8231] bridge_slave_1: entered promiscuous mode [ 341.086668][ T8222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.094519][ T8222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.099664][ T5951] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 341.125527][ T8222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.143946][ T8222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.152932][ T5903] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 341.161652][ T8222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.187848][ T8222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.211211][ T5903] usb 2-1: device descriptor read/8, error -71 [ 341.245509][ T6520] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.282709][ T5951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 341.292859][ T5951] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 341.295636][ T8231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.313857][ T5951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 341.328830][ T5951] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 341.331416][ T8231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.344470][ T5951] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 341.349631][ T5903] usb usb2-port1: unable to enumerate USB device [ 341.363849][ T5951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.377713][ T5951] usb 3-1: config 0 descriptor?? [ 341.457181][ T8227] hsr_slave_0: entered promiscuous mode [ 341.465940][ T8227] hsr_slave_1: entered promiscuous mode [ 341.474660][ T8227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 341.482518][ T8227] Cannot create hsr debugfs directory [ 341.567697][ T8231] team0: Port device team_slave_0 added [ 341.656644][ T5951] hdpvr 3-1:0.0: unexpected answer of status request, len -71 [ 341.670718][ T5951] hdpvr 3-1:0.0: device init failed [ 341.676181][ T5951] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 341.707591][ T5951] usb 3-1: USB disconnect, device number 34 [ 341.790101][ T8231] team0: Port device team_slave_1 added [ 341.846582][ T8222] hsr_slave_0: entered promiscuous mode [ 341.855874][ T8222] hsr_slave_1: entered promiscuous mode [ 341.862815][ T8222] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 341.870885][ T8222] Cannot create hsr debugfs directory [ 341.964508][ T8231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.971740][ T8231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.998965][ T8231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.053727][ T8231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.065611][ T8231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.092310][ T8231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.279919][ T6520] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.515041][ T8231] hsr_slave_0: entered promiscuous mode [ 342.522298][ T8231] hsr_slave_1: entered promiscuous mode [ 342.528718][ T8231] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 342.543167][ T8231] Cannot create hsr debugfs directory [ 342.589737][ T5839] Bluetooth: hci0: command tx timeout [ 342.829683][ T5839] Bluetooth: hci1: command tx timeout [ 342.911364][ T5839] Bluetooth: hci4: command tx timeout [ 343.482101][ T8352] cramfs: Unknown parameter 'discard' [ 343.546895][ T6520] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.081357][ T6520] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.340025][ T6520] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.799550][ T8227] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 345.910149][ T8227] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 346.068165][ T8227] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 346.274026][ T8227] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 347.047457][ T6520] bridge_slave_1: left allmulticast mode [ 347.061182][ T6520] bridge_slave_1: left promiscuous mode [ 347.068781][ T6520] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.280112][ T6520] bridge_slave_0: left promiscuous mode [ 347.289730][ T6520] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.410503][ T8411] cramfs: Unknown parameter 'discard' [ 348.921616][ T6520] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.935971][ T6520] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.946287][ T6520] bond0 (unregistering): Released all slaves [ 348.952483][ T5951] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 349.202077][ T5951] usb 3-1: config 0 has an invalid descriptor of length 143, skipping remainder of the config [ 349.219860][ T5951] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 349.234267][ T5951] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice=40.00 [ 349.244732][ T5951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.263586][ T5951] usb 3-1: config 0 descriptor?? [ 349.294785][ T8419] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 349.581864][ T6520] team0: Port device bond0 removed [ 349.595321][ T6520] bond0 (unregistering): Released all slaves [ 349.613954][ T8421] netlink: 'syz.1.626': attribute type 1 has an invalid length. [ 349.621658][ T8421] netlink: 216 bytes leftover after parsing attributes in process `syz.1.626'. [ 349.848528][ T8227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.860191][ T8222] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 349.883319][ T8222] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 350.080863][ T8227] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.090088][ T6520] tipc: Left network mode [ 350.091131][ T8222] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 350.268102][ T6520] tipc: Disabling bearer [ 350.365414][ T6520] tipc: Left network mode [ 350.640891][ T8222] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 350.871780][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.878969][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.948561][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.955799][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.093016][ T8446] netlink: 252 bytes leftover after parsing attributes in process `syz.1.629'. [ 351.109477][ T8231] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 351.153934][ T8231] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 351.213833][ T8446] netlink: 28 bytes leftover after parsing attributes in process `syz.1.629'. [ 351.241356][ T8231] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 351.297121][ T8231] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 351.710062][ T5903] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 351.738733][ T48] usb 3-1: USB disconnect, device number 35 [ 351.803654][ T6520] hsr_slave_0: left promiscuous mode [ 351.819800][ T6520] hsr_slave_1: left promiscuous mode [ 351.826018][ T6520] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.834563][ T6520] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.845573][ T6520] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.857376][ T6520] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.895974][ T6520] hsr_slave_0: left promiscuous mode [ 351.905528][ T6520] hsr_slave_1: left promiscuous mode [ 351.975696][ T6520] veth1_macvtap: left promiscuous mode [ 351.983999][ T6520] veth0_macvtap: left promiscuous mode [ 351.994837][ T6520] veth1_vlan: left allmulticast mode [ 352.002068][ T6520] veth1_vlan: left promiscuous mode [ 352.015630][ T6520] veth0_macvtap: left promiscuous mode [ 352.026533][ T6520] veth1_vlan: left promiscuous mode [ 352.049150][ T5903] usb 2-1: Using ep0 maxpacket: 8 [ 352.054510][ T6520] veth0_vlan: left promiscuous mode [ 352.057337][ T5903] usb 2-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.08 [ 352.070956][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.085770][ T5903] usb 2-1: config 0 descriptor?? [ 352.095656][ T5903] go7007 2-1:0.0: probe with driver go7007 failed with error -12 [ 352.110800][ T8465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.631'. [ 352.302231][ T5967] usb 2-1: USB disconnect, device number 36 [ 352.773218][ T6520] team0 (unregistering): Port device team_slave_1 removed [ 352.837446][ T6520] team0 (unregistering): Port device team_slave_0 removed [ 354.424401][ T8222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.508082][ T8231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.621586][ T8480] program syz.1.633 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 354.663722][ T8222] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.742172][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.749383][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.820030][ T5903] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 356.152991][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.160228][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.183188][ T8227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.241481][ T8231] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.314494][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.321914][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.337041][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.344383][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.513725][ T5903] usb 2-1: device descriptor read/64, error -71 [ 356.790075][ T5903] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 356.949535][ T5903] usb 2-1: device descriptor read/64, error -71 [ 357.065140][ T5903] usb usb2-port1: attempt power cycle [ 357.236939][ T6520] IPVS: stop unused estimator thread 0... [ 357.254662][ T8222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.384409][ T8227] veth0_vlan: entered promiscuous mode [ 357.406945][ T8519] could not allocate digest TFM handle digest_null-generic [ 357.411473][ T8227] veth1_vlan: entered promiscuous mode [ 357.450015][ T5903] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 357.476643][ T8231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.492069][ T5903] usb 2-1: device descriptor read/8, error -71 [ 357.593136][ T8227] veth0_macvtap: entered promiscuous mode [ 357.653100][ T8227] veth1_macvtap: entered promiscuous mode [ 357.759832][ T5903] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 357.828882][ T5903] usb 2-1: device descriptor read/8, error -71 [ 357.918203][ T8227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.017082][ T5903] usb usb2-port1: unable to enumerate USB device [ 358.252911][ T8227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.354962][ T8227] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.379643][ T8227] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.398896][ T8227] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.417163][ T8227] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.826782][ T6520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.877835][ T6520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.989187][ T8222] veth0_vlan: entered promiscuous mode [ 359.030869][ T8559] netlink: 20 bytes leftover after parsing attributes in process `syz.2.641'. [ 359.072902][ T1334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.095860][ T1334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.105919][ T8222] veth1_vlan: entered promiscuous mode [ 359.130680][ T8231] veth0_vlan: entered promiscuous mode [ 359.192548][ T8231] veth1_vlan: entered promiscuous mode [ 359.284173][ T8222] veth0_macvtap: entered promiscuous mode [ 359.328858][ T8222] veth1_macvtap: entered promiscuous mode [ 359.373899][ T8231] veth0_macvtap: entered promiscuous mode [ 359.405801][ T8222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.433329][ T8231] veth1_macvtap: entered promiscuous mode [ 359.458551][ T8222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.476600][ T8231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.517030][ T8222] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.529959][ T8222] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.539333][ T8222] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.551811][ T8222] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.566795][ T8231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.614497][ T8231] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.624036][ T8231] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.634878][ T8231] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.645718][ T8231] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.981339][ T7169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.997887][ T7169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.084429][ T7169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.125815][ T7169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.699020][ T6520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.727285][ T6520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.499631][ T6520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.527484][ T6520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.071715][ T8594] syz_tun: entered allmulticast mode [ 362.077371][ T8594] syz_tun: left allmulticast mode [ 362.088356][ T8596] dvmrp1: entered allmulticast mode [ 362.866573][ T5951] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 366.771651][ T8653] random: crng reseeded on system resumption [ 367.369608][ T5952] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 367.597641][ T8673] netlink: 8 bytes leftover after parsing attributes in process `syz.5.655'. [ 367.630192][ T8673] netlink: 8 bytes leftover after parsing attributes in process `syz.5.655'. [ 367.721732][ T8670] netlink: 300 bytes leftover after parsing attributes in process `syz.7.656'. [ 367.736667][ T8673] netlink: 8 bytes leftover after parsing attributes in process `syz.5.655'. [ 367.825041][ T5952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.897413][ T5952] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 367.912660][ T5952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.950188][ T8673] netlink: 8 bytes leftover after parsing attributes in process `syz.5.655'. [ 367.970946][ T5952] usb 2-1: config 0 descriptor?? [ 367.999629][ T8673] netlink: 8 bytes leftover after parsing attributes in process `syz.5.655'. [ 368.027439][ T8673] netlink: 8 bytes leftover after parsing attributes in process `syz.5.655'. [ 368.041105][ T8673] netlink: 8 bytes leftover after parsing attributes in process `syz.5.655'. [ 368.139810][ T8673] netlink: 8 bytes leftover after parsing attributes in process `syz.5.655'. [ 368.265072][ T8673] netlink: 8 bytes leftover after parsing attributes in process `syz.5.655'. [ 369.941413][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 370.088059][ T5952] usbhid 2-1:0.0: can't add hid device: -71 [ 370.104127][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 370.106686][ T5952] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 370.132933][ T8710] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.141947][ T8710] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.150891][ T8710] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.155208][ T5952] usb 2-1: USB disconnect, device number 41 [ 370.166925][ T10] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 370.191206][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 370.191239][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 370.191259][ T10] usb 6-1: SerialNumber: syz [ 370.212506][ T10] cdc_ether 6-1:1.0: skipping garbage [ 370.212523][ T10] cdc_ether 6-1:1.0: skipping garbage [ 370.212531][ T10] cdc_ether 6-1:1.0: invalid descriptor buffer length [ 370.212543][ T10] usb 6-1: bad CDC descriptors [ 370.309853][ T5903] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 370.517031][ T10] usb 6-1: USB disconnect, device number 2 [ 370.539602][ T5903] usb 7-1: Using ep0 maxpacket: 16 [ 370.548781][ T5903] usb 7-1: too many endpoints for config 0 interface 0 altsetting 255: 254, using maximum allowed: 30 [ 370.548827][ T5903] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 197, changing to 11 [ 370.549750][ T5903] usb 7-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 370.549781][ T5903] usb 7-1: config 0 interface 0 has no altsetting 0 [ 370.549841][ T5903] usb 7-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00 [ 370.549865][ T5903] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.576622][ T5903] usb 7-1: config 0 descriptor?? [ 370.809205][ T5903] topre 0003:0853:0148.000A: hidraw0: USB HID vc9.b6 Device [HID 0853:0148] on usb-dummy_hcd.6-1/input0 [ 371.038710][ T5952] usb 7-1: USB disconnect, device number 3 [ 371.194543][ T8732] netlink: 'syz.6.669': attribute type 10 has an invalid length. [ 371.209345][ T8732] veth0_vlan: left promiscuous mode [ 371.213908][ T8732] veth0_vlan: entered promiscuous mode [ 371.220756][ T8732] team0: Device veth0_vlan failed to register rx_handler [ 371.231918][ T8732] netlink: 'syz.6.669': attribute type 10 has an invalid length. [ 371.232031][ T8732] veth0_vlan: left promiscuous mode [ 371.233906][ T8732] veth0_vlan: entered promiscuous mode [ 371.241170][ T8732] team0: Device veth0_vlan failed to register rx_handler [ 371.249368][ T8732] netlink: 'syz.6.669': attribute type 10 has an invalid length. [ 371.249633][ T8732] veth0_vlan: left promiscuous mode [ 371.251603][ T8732] veth0_vlan: entered promiscuous mode [ 371.255851][ T8732] team0: Device veth0_vlan failed to register rx_handler [ 371.263535][ T8732] netlink: 'syz.6.669': attribute type 10 has an invalid length. [ 371.263831][ T8732] veth0_vlan: left promiscuous mode [ 371.266297][ T8732] veth0_vlan: entered promiscuous mode [ 371.271480][ T8732] team0: Device veth0_vlan failed to register rx_handler [ 371.281256][ T8732] netlink: 'syz.6.669': attribute type 10 has an invalid length. [ 371.281370][ T8732] veth0_vlan: left promiscuous mode [ 371.283162][ T8732] veth0_vlan: entered promiscuous mode [ 371.289332][ T8732] team0: Device veth0_vlan failed to register rx_handler [ 371.299597][ T8732] netlink: 'syz.6.669': attribute type 10 has an invalid length. [ 371.299714][ T8732] veth0_vlan: left promiscuous mode [ 371.302727][ T8732] veth0_vlan: entered promiscuous mode [ 371.310441][ T8732] team0: Device veth0_vlan failed to register rx_handler [ 371.321022][ T8732] netlink: 'syz.6.669': attribute type 10 has an invalid length. [ 371.321134][ T8732] veth0_vlan: left promiscuous mode [ 371.323309][ T8732] veth0_vlan: entered promiscuous mode [ 371.329139][ T8732] team0: Device veth0_vlan failed to register rx_handler [ 371.337183][ T8732] netlink: 'syz.6.669': attribute type 10 has an invalid length. [ 371.337304][ T8732] veth0_vlan: left promiscuous mode [ 371.339556][ T8732] veth0_vlan: entered promiscuous mode [ 371.345524][ T8732] team0: Device veth0_vlan failed to register rx_handler [ 371.355691][ T8732] netlink: 'syz.6.669': attribute type 10 has an invalid length. [ 371.355878][ T8732] veth0_vlan: left promiscuous mode [ 371.358639][ T8732] veth0_vlan: entered promiscuous mode [ 371.363841][ T8732] team0: Device veth0_vlan failed to register rx_handler [ 371.371789][ T8732] netlink: 'syz.6.669': attribute type 10 has an invalid length. [ 371.371901][ T8732] veth0_vlan: left promiscuous mode [ 371.373697][ T8732] veth0_vlan: entered promiscuous mode [ 371.377603][ T8732] team0: Device veth0_vlan failed to register rx_handler [ 371.385277][ T8732] veth0_vlan: left promiscuous mode [ 371.387802][ T8732] veth0_vlan: entered promiscuous mode [ 371.392475][ T8732] team0: Device veth0_vlan failed to register rx_handler [ 371.402226][ T8732] veth0_vlan: left promiscuous mode [ 371.404144][ T8732] veth0_vlan: entered promiscuous mode [ 371.408387][ T8732] team0: Device veth0_vlan failed to register rx_handler [ 371.416405][ T8732] veth0_vlan: left promiscuous mode [ 371.418378][ T8732] veth0_vlan: entered promiscuous mode [ 371.422890][ T8732] team0: Device veth0_vlan failed to register rx_handler [ 371.432537][ T8732] veth0_vlan: left promiscuous mode [ 371.434431][ T8732] veth0_vlan: entered promiscuous mode [ 371.438842][ T8732] team0: Device veth0_vlan failed to register rx_handler [ 371.452104][ T8732] veth0_vlan: left promiscuous mode [ 371.453967][ T8732] veth0_vlan: entered promiscuous mode [ 371.458379][ T8732] team0: Device veth0_vlan failed to register rx_handler [ 371.466742][ T8732] veth0_vlan: left promiscuous mode [ 371.468538][ T8732] veth0_vlan: entered promiscuous mode [ 371.473505][ T8732] team0: Device veth0_vlan failed to register rx_handler [ 371.481231][ T8732] veth0_vlan: left promiscuous mode [ 371.483087][ T8732] veth0_vlan: entered promiscuous mode [ 371.487440][ T8732] team0: Device veth0_vlan failed to register rx_handler [ 371.495141][ T8732] veth0_vlan: left promiscuous mode [ 371.496937][ T8732] veth0_vlan: entered promiscuous mode [ 371.501695][ T8732] team0: Device veth0_vlan failed to register rx_handler [ 371.509147][ T8732] veth0_vlan: left promiscuous mode [ 371.511357][ T8732] veth0_vlan: entered promiscuous mode [ 371.516958][ T8732] team0: Device veth0_vlan failed to register rx_handler [ 371.524334][ T8732] veth0_vlan: left promiscuous mode [ 371.526413][ T8732] veth0_vlan: entered promiscuous mode [ 371.530451][ T8732] team0: Device veth0_vlan failed to register rx_handler [ 371.538031][ T8732] veth0_vlan: left promiscuous mode [ 371.540966][ T8732] veth0_vlan: entered promiscuous mode [ 371.544821][ T8732] team0: Device veth0_vlan failed to register rx_handler [ 371.553360][ T8732] veth0_vlan: left promiscuous mode [ 371.555506][ T8732] veth0_vlan: entered promiscuous mode [ 371.559334][ T8732] team0: Device veth0_vlan failed to register rx_handler [ 371.567791][ T8732] veth0_vlan: left promiscuous mode [ 371.569951][ T8732] veth0_vlan: entered promiscuous mode [ 371.574006][ T8732] team0: Device veth0_vlan failed to register rx_handler [ 371.581687][ T8732] veth0_vlan: left promiscuous mode [ 371.584809][ T8732] veth0_vlan: entered promiscuous mode [ 371.589320][ T8732] team0: Device veth0_vlan failed to register rx_handler [ 371.597333][ T8732] veth0_vlan: left promiscuous mode [ 371.600283][ T8732] veth0_vlan: entered promiscuous mode [ 371.606919][ T8732] team0: Device veth0_vlan failed to register rx_handler [ 371.614814][ T8732] veth0_vlan: left promiscuous mode [ 371.616758][ T8732] veth0_vlan: entered promiscuous mode [ 371.621157][ T8732] team0: Device veth0_vlan failed to register rx_handler [ 371.628869][ T8732] veth0_vlan: left promiscuous mode [ 371.630703][ T8732] veth0_vlan: entered promiscuous mode [ 371.636240][ T8732] team0: Device veth0_vlan failed to register rx_handler [ 371.644869][ T8732] veth0_vlan: left promiscuous mode [ 371.646697][ T8732] veth0_vlan: entered promiscuous mode [ 371.652514][ T8732] team0: Device veth0_vlan failed to register rx_handler [ 371.660261][ T8732] veth0_vlan: left promiscuous mode [ 371.662113][ T8732] veth0_vlan: entered promiscuous mode [ 371.667116][ T8732] team0: Device veth0_vlan failed to register rx_handler [ 371.674847][ T8732] veth0_vlan: left promiscuous mode [ 371.676674][ T8732] veth0_vlan: entered promiscuous mode [ 371.682007][ T8732] team0: Device veth0_vlan failed to register rx_handler [ 371.690074][ T8732] veth0_vlan: left promiscuous mode [ 371.692094][ T8732] veth0_vlan: entered promiscuous mode [ 371.696523][ T8732] team0: Device veth0_vlan failed to register rx_handler [ 371.704439][ T8732] veth0_vlan: left promiscuous mode [ 371.706317][ T8732] veth0_vlan: entered promiscuous mode [ 371.712763][ T8732] team0: Device veth0_vlan failed to register rx_handler [ 371.722036][ T8732] veth0_vlan: left promiscuous mode [ 371.723896][ T8732] veth0_vlan: entered promiscuous mode [ 371.728278][ T8732] team0: Device veth0_vlan failed to register rx_handler [ 372.455738][ T8728] fido_id[8728]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 374.302844][ T30] audit: type=1326 audit(1755944975.927:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8765 comm="syz.1.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0341f8ebe9 code=0x7ffc0000 [ 374.526133][ T48] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 374.785181][ T30] audit: type=1326 audit(1755944975.927:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8765 comm="syz.1.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0341f8ebe9 code=0x7ffc0000 [ 374.871248][ T8774] __nla_validate_parse: 47 callbacks suppressed [ 374.871269][ T8774] netlink: 16 bytes leftover after parsing attributes in process `syz.5.671'. [ 375.122041][ T30] audit: type=1326 audit(1755944975.927:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8765 comm="syz.1.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0341f8d69f code=0x7ffc0000 [ 375.205812][ T30] audit: type=1326 audit(1755944975.927:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8765 comm="syz.1.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0341f8ebe9 code=0x7ffc0000 [ 375.230276][ T48] usb 3-1: Using ep0 maxpacket: 8 [ 375.240123][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.259502][ T48] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 375.260096][ T30] audit: type=1326 audit(1755944975.927:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8765 comm="syz.1.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0341f8ebe9 code=0x7ffc0000 [ 375.297493][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.329589][ T48] usb 3-1: config 0 descriptor?? [ 375.333026][ T30] audit: type=1326 audit(1755944975.927:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8765 comm="syz.1.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0341f8d69f code=0x7ffc0000 [ 375.435937][ T30] audit: type=1326 audit(1755944975.927:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8765 comm="syz.1.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0341f8ebe9 code=0x7ffc0000 [ 375.528400][ T30] audit: type=1326 audit(1755944975.927:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8765 comm="syz.1.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0341f8ebe9 code=0x7ffc0000 [ 375.729521][ T30] audit: type=1326 audit(1755944975.927:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8765 comm="syz.1.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0341f8d550 code=0x7ffc0000 [ 375.757215][ T30] audit: type=1326 audit(1755944975.927:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8765 comm="syz.1.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f0341f90417 code=0x7ffc0000 [ 375.797093][ T48] hid-multitouch 0003:0EEF:72C4.000B: unknown main item tag 0x0 [ 375.846014][ T48] hid-multitouch 0003:0EEF:72C4.000B: unknown main item tag 0x0 [ 375.881798][ T48] hid-multitouch 0003:0EEF:72C4.000B: unknown main item tag 0x0 [ 375.961227][ T48] hid-multitouch 0003:0EEF:72C4.000B: unknown main item tag 0x0 [ 375.990241][ T48] hid-multitouch 0003:0EEF:72C4.000B: unknown main item tag 0x0 [ 376.074556][ T48] hid-multitouch 0003:0EEF:72C4.000B: hidraw0: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.2-1/input0 [ 376.169553][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 376.179981][ T48] usb 3-1: USB disconnect, device number 36 [ 376.191420][ T8810] netlink: 64 bytes leftover after parsing attributes in process `syz.6.685'. [ 376.269706][ T5903] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 376.310752][ T8809] fido_id[8809]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 376.367522][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 376.390603][ T10] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.417066][ T10] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.454481][ T5903] usb 2-1: Using ep0 maxpacket: 32 [ 376.461459][ T10] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 376.468747][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.471787][ T10] usb 8-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 376.509829][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.527648][ T5903] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 376.528170][ T10] usb 8-1: Product: syz [ 376.546051][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.569543][ T10] usb 8-1: Manufacturer: syz [ 376.579545][ T24] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 376.604594][ T5903] usb 2-1: config 0 descriptor?? [ 376.625833][ T5903] hub 2-1:0.0: USB hub found [ 376.626567][ T10] hub 8-1:4.0: USB hub found [ 376.760721][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 376.801750][ T24] usb 7-1: New USB device found, idVendor=04a5, idProduct=301a, bcdDevice=3a.b2 [ 376.818382][ T10] hub 8-1:4.0: 2 ports detected [ 376.823735][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.835815][ T5903] hub 2-1:0.0: 1 port detected [ 376.854130][ T24] usb 7-1: Product: syz [ 376.859223][ T24] usb 7-1: Manufacturer: syz [ 376.869400][ T24] usb 7-1: SerialNumber: syz [ 376.885497][ T24] usb 7-1: config 0 descriptor?? [ 377.005254][ T8837] netlink: 4 bytes leftover after parsing attributes in process `syz.5.690'. [ 377.878974][ T10] hub 8-1:4.0: hub_hub_status failed (err = -32) [ 377.909833][ T10] hub 8-1:4.0: config failed, can't get hub status (err -32) [ 377.950603][ T5952] hub 2-1:0.0: hub_ext_port_status failed (err = 0) [ 378.140782][ T8798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.156778][ T8798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.182936][ T8855] netlink: 20 bytes leftover after parsing attributes in process `syz.5.694'. [ 378.280120][ T5903] usb 2-1: USB disconnect, device number 42 [ 378.289944][ T5952] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 378.510655][ T5952] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 378.534342][ T5952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.559233][ T5952] usb 3-1: Product: syz [ 378.573706][ T5952] usb 3-1: Manufacturer: syz [ 378.578382][ T5952] usb 3-1: SerialNumber: syz [ 378.615628][ T5952] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 378.636387][ T5903] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 378.754947][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.902681][ T5952] usb 3-1: USB disconnect, device number 37 [ 379.669920][ T48] usb 8-1: USB disconnect, device number 2 [ 379.722755][ T5903] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 379.753584][ T5903] ath9k_htc: Failed to initialize the device [ 379.784827][ T5952] usb 3-1: ath9k_htc: USB layer deinitialized [ 380.249003][ T8902] netlink: 8 bytes leftover after parsing attributes in process `syz.7.702'. [ 380.287620][ T8904] xt_nat: multiple ranges no longer supported [ 380.582362][ T10] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 380.679592][ T24] usb 7-1: USB disconnect, device number 4 [ 380.809569][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 380.845247][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.916708][ T8918] netlink: 112 bytes leftover after parsing attributes in process `syz.5.705'. [ 380.935350][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 380.935369][ T30] audit: type=1326 audit(1755944982.567:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8913 comm="syz.7.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6c98ebe9 code=0x7ffc0000 [ 380.948207][ T10] usb 3-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 381.055977][ T30] audit: type=1326 audit(1755944982.567:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8913 comm="syz.7.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7ffb6c98ebe9 code=0x7ffc0000 [ 381.178437][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.270865][ T10] usb 3-1: config 0 descriptor?? [ 381.283643][ T30] audit: type=1326 audit(1755944982.567:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8913 comm="syz.7.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6c98ebe9 code=0x7ffc0000 [ 381.399685][ T8926] validate_nla: 24 callbacks suppressed [ 381.399706][ T8926] netlink: 'syz.6.706': attribute type 10 has an invalid length. [ 381.481788][ T8926] netlink: 40 bytes leftover after parsing attributes in process `syz.6.706'. [ 381.529547][ T30] audit: type=1326 audit(1755944982.567:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8913 comm="syz.7.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7ffb6c98ebe9 code=0x7ffc0000 [ 381.709574][ T30] audit: type=1326 audit(1755944982.567:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8913 comm="syz.7.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6c98ebe9 code=0x7ffc0000 [ 381.731982][ T10] hid-u2fzero 0003:10C4:8ACF.000C: unknown main item tag 0x3 [ 381.763754][ T10] hid-u2fzero 0003:10C4:8ACF.000C: item fetching failed at offset 4/5 [ 381.772122][ T8926] team0: Port device geneve0 added [ 381.806425][ T10] hid-u2fzero 0003:10C4:8ACF.000C: probe with driver hid-u2fzero failed with error -22 [ 381.822398][ T48] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 381.878490][ T30] audit: type=1326 audit(1755944982.567:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8913 comm="syz.7.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ffb6c98ebe9 code=0x7ffc0000 [ 382.134317][ T30] audit: type=1326 audit(1755944982.567:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8913 comm="syz.7.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6c98ebe9 code=0x7ffc0000 [ 382.536397][ T48] usb 7-1: Using ep0 maxpacket: 16 [ 382.827975][ T30] audit: type=1326 audit(1755944982.567:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8913 comm="syz.7.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6c98ebe9 code=0x7ffc0000 [ 385.539324][ T48] usb 7-1: unable to get BOS descriptor set [ 385.556372][ T48] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 385.605331][ T48] usb 7-1: can't read configurations, error -71 [ 385.675065][ T24] usb 3-1: USB disconnect, device number 38 [ 388.435473][ T8977] cramfs: Unknown parameter 'discard' [ 390.845558][ T8999] syz_tun: entered allmulticast mode [ 391.005704][ T9003] netlink: 830 bytes leftover after parsing attributes in process `syz.1.721'. [ 391.040192][ T9004] netlink: 830 bytes leftover after parsing attributes in process `syz.1.721'. [ 392.230035][ T48] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 392.413410][ T48] usb 7-1: Using ep0 maxpacket: 16 [ 392.440631][ T48] usb 7-1: unable to get BOS descriptor or descriptor too short [ 392.457537][ T48] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 392.477906][ T48] usb 7-1: config 1 has no interface number 1 [ 392.525666][ T48] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 392.612202][ T48] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 392.660018][ T48] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.707571][ T48] usb 7-1: Product: syz [ 392.721689][ T48] usb 7-1: Manufacturer: syz [ 392.726360][ T48] usb 7-1: SerialNumber: syz [ 392.786452][ T9028] pim6reg: entered allmulticast mode [ 392.842690][ T9028] lo speed is unknown, defaulting to 1000 [ 392.869667][ T9028] lo speed is unknown, defaulting to 1000 [ 392.894188][ T9028] lo speed is unknown, defaulting to 1000 [ 393.094481][ T9028] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 393.134441][ T5952] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 393.281754][ T9028] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 393.349661][ T5952] usb 8-1: Using ep0 maxpacket: 32 [ 393.367385][ T9028] lo speed is unknown, defaulting to 1000 [ 393.395913][ T5952] usb 8-1: unable to get BOS descriptor or descriptor too short [ 393.398431][ T9028] lo speed is unknown, defaulting to 1000 [ 393.454792][ T9028] lo speed is unknown, defaulting to 1000 [ 393.455245][ T5952] usb 8-1: config 7 has an invalid interface number: 212 but max is 0 [ 393.467352][ T9028] lo speed is unknown, defaulting to 1000 [ 393.486263][ T9028] lo speed is unknown, defaulting to 1000 [ 393.498313][ T5952] usb 8-1: config 7 has no interface number 0 [ 393.515095][ T5952] usb 8-1: config 7 interface 212 has no altsetting 0 [ 394.452187][ T5952] usb 8-1: New USB device found, idVendor=10c4, idProduct=8281, bcdDevice= 9.4c [ 394.462622][ T5952] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.479506][ T5952] usb 8-1: Product: syz [ 394.483750][ T5952] usb 8-1: Manufacturer: syz [ 394.499266][ T5952] usb 8-1: SerialNumber: syz [ 394.516682][ T5952] cp210x 8-1:7.212: cp210x converter detected [ 394.707591][ T9062] 9pnet_fd: Insufficient options for proto=fd [ 394.716158][ T5952] cp210x 8-1:7.212: failed to get vendor val 0x370b size 1: -71 [ 394.741414][ T5952] cp210x 8-1:7.212: querying part number failed [ 394.768529][ T5952] usb 8-1: cp210x converter now attached to ttyUSB0 [ 394.785268][ T5952] usb 8-1: USB disconnect, device number 3 [ 394.806528][ T5952] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 394.821189][ T9067] netlink: 'syz.2.731': attribute type 10 has an invalid length. [ 394.845523][ T5952] cp210x 8-1:7.212: device disconnected [ 394.889602][ T5903] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 394.962115][ T9067] team0: Port device `ëÿÿ removed [ 395.001983][ T9067] bond0: (slave `ëÿÿ): Enslaving as an active interface with an up link [ 395.112306][ T5903] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.915671][ T5903] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 395.926239][ T5903] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 395.936764][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.962907][ T5903] usb 2-1: config 0 descriptor?? [ 396.283312][ T9081] ptrace attach of "./syz-executor exec"[5841] was attempted by ""[9081] [ 396.639276][ T9084] netlink: 'syz.2.736': attribute type 3 has an invalid length. [ 396.719563][ T5951] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 397.719601][ T5951] usb 8-1: Using ep0 maxpacket: 32 [ 398.064244][ T5903] Bluetooth: Can't get state to change to load ram patch err [ 398.094973][ T5951] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 398.116238][ T5903] Bluetooth: Loading patch file failed [ 398.122373][ T48] usb 7-1: 2:1 : no UAC_FORMAT_TYPE desc [ 398.132201][ T5903] ath3k 2-1:0.0: probe with driver ath3k failed with error -71 [ 398.152166][ T5951] usb 8-1: config 0 has no interface number 0 [ 398.166149][ T9087] netlink: 'syz.5.737': attribute type 83 has an invalid length. [ 398.206521][ T5903] usb 2-1: USB disconnect, device number 43 [ 398.438661][ T5951] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 398.463164][ T5951] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.566691][ T9097] netlink: 'syz.2.738': attribute type 3 has an invalid length. [ 399.360112][ T5951] usb 8-1: Product: syz [ 399.364400][ T5951] usb 8-1: Manufacturer: syz [ 399.369067][ T5951] usb 8-1: SerialNumber: syz [ 399.380696][ T9098] netlink: 12 bytes leftover after parsing attributes in process `syz.5.737'. [ 399.445489][ T24] usb 7-1: USB disconnect, device number 7 [ 399.675284][ T5951] usb 8-1: config 0 descriptor?? [ 399.853754][ T5951] usb 8-1: can't set config #0, error -71 [ 400.086128][ T7005] udevd[7005]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 400.104400][ T5951] usb 8-1: USB disconnect, device number 4 [ 401.644562][ T9121] netlink: 'syz.2.744': attribute type 12 has an invalid length. [ 401.717221][ T9121] netlink: 'syz.2.744': attribute type 29 has an invalid length. [ 401.798944][ T9121] netlink: 148 bytes leftover after parsing attributes in process `syz.2.744'. [ 401.917138][ T9121] netlink: 35 bytes leftover after parsing attributes in process `syz.2.744'. [ 403.162988][ T9141] syz.1.747 (9141): /proc/9136/oom_adj is deprecated, please use /proc/9136/oom_score_adj instead. [ 405.312590][ T9184] netlink: 'syz.1.756': attribute type 3 has an invalid length. [ 406.589728][ T9187] netlink: 'syz.7.757': attribute type 3 has an invalid length. [ 407.174633][ T9194] [ 407.178249][ T9194] ====================================================== [ 407.185640][ T9194] WARNING: possible circular locking dependency detected [ 407.192724][ T9194] 6.16.0-syzkaller #0 Not tainted [ 407.197779][ T9194] ------------------------------------------------------ [ 407.204819][ T9194] syz.2.758/9194 is trying to acquire lock: [ 407.210822][ T9194] ffff8880257a3988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 407.222373][ T9194] [ 407.222373][ T9194] but task is already holding lock: [ 407.229748][ T9194] ffff8880257a3a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x93e/0x18f0 [ 407.239359][ T9194] [ 407.239359][ T9194] which lock already depends on the new lock. [ 407.239359][ T9194] [ 407.251633][ T9194] [ 407.251633][ T9194] the existing dependency chain (in reverse order) is: [ 407.261058][ T9194] [ 407.261058][ T9194] -> #2 (&nbd->config_lock){+.+.}-{4:4}: [ 407.268917][ T9194] lock_acquire+0x120/0x360 [ 407.273963][ T9194] __mutex_lock+0x182/0xe80 [ 407.278989][ T9194] refcount_dec_and_mutex_lock+0x30/0xa0 [ 407.285143][ T9194] nbd_config_put+0x2c/0x790 [ 407.290255][ T9194] nbd_release+0xfe/0x140 [ 407.295108][ T9194] bdev_release+0x533/0x650 [ 407.300145][ T9194] blkdev_release+0x15/0x20 [ 407.306323][ T9194] __fput+0x449/0xa70 [ 407.310838][ T9194] fput_close_sync+0x119/0x200 [ 407.316494][ T9194] __x64_sys_close+0x7f/0x110 [ 407.321711][ T9194] do_syscall_64+0xfa/0x3b0 [ 407.326760][ T9194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.333171][ T9194] [ 407.333171][ T9194] -> #1 (&disk->open_mutex){+.+.}-{4:4}: [ 407.341153][ T9194] lock_acquire+0x120/0x360 [ 407.346458][ T9194] __mutex_lock+0x182/0xe80 [ 407.351523][ T9194] __del_gendisk+0x129/0x9e0 [ 407.357611][ T9194] del_gendisk+0xe8/0x160 [ 407.362476][ T9194] nbd_dev_remove_work+0x47/0xe0 [ 407.367937][ T9194] process_scheduled_works+0xade/0x17b0 [ 407.374005][ T9194] worker_thread+0x8a0/0xda0 [ 407.379114][ T9194] kthread+0x70e/0x8a0 [ 407.383708][ T9194] ret_from_fork+0x3fc/0x770 [ 407.388904][ T9194] ret_from_fork_asm+0x1a/0x30 [ 407.394207][ T9194] [ 407.394207][ T9194] -> #0 (&set->update_nr_hwq_lock){++++}-{4:4}: [ 407.402826][ T9194] validate_chain+0xb9b/0x2140 [ 407.409522][ T9194] __lock_acquire+0xab9/0xd20 [ 407.414745][ T9194] lock_acquire+0x120/0x360 [ 407.419854][ T9194] down_write+0x96/0x1f0 [ 407.424623][ T9194] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 407.430885][ T9194] nbd_start_device+0x16c/0xac0 [ 407.436253][ T9194] nbd_genl_connect+0x135b/0x18f0 [ 407.442157][ T9194] genl_family_rcv_msg_doit+0x215/0x300 [ 407.448302][ T9194] genl_rcv_msg+0x60e/0x790 [ 407.453454][ T9194] netlink_rcv_skb+0x205/0x470 [ 407.458738][ T9194] genl_rcv+0x28/0x40 [ 407.463231][ T9194] netlink_unicast+0x75c/0x8e0 [ 407.468513][ T9194] netlink_sendmsg+0x805/0xb30 [ 407.473793][ T9194] __sock_sendmsg+0x21c/0x270 [ 407.478987][ T9194] ____sys_sendmsg+0x505/0x830 [ 407.484269][ T9194] ___sys_sendmsg+0x21f/0x2a0 [ 407.489473][ T9194] __x64_sys_sendmsg+0x19b/0x260 [ 407.494947][ T9194] do_syscall_64+0xfa/0x3b0 [ 407.500178][ T9194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.507651][ T9194] [ 407.507651][ T9194] other info that might help us debug this: [ 407.507651][ T9194] [ 407.518853][ T9194] Chain exists of: [ 407.518853][ T9194] &set->update_nr_hwq_lock --> &disk->open_mutex --> &nbd->config_lock [ 407.518853][ T9194] [ 407.533124][ T9194] Possible unsafe locking scenario: [ 407.533124][ T9194] [ 407.540563][ T9194] CPU0 CPU1 [ 407.547234][ T9194] ---- ---- [ 407.552594][ T9194] lock(&nbd->config_lock); [ 407.557474][ T9194] lock(&disk->open_mutex); [ 407.564710][ T9194] lock(&nbd->config_lock); [ 407.571823][ T9194] lock(&set->update_nr_hwq_lock); [ 407.577022][ T9194] [ 407.577022][ T9194] *** DEADLOCK *** [ 407.577022][ T9194] [ 407.585250][ T9194] 3 locks held by syz.2.758/9194: [ 407.590699][ T9194] #0: ffffffff8f5701f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 407.598897][ T9194] #1: ffffffff8f570008 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 407.607869][ T9194] #2: ffff8880257a3a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x93e/0x18f0 [ 407.617981][ T9194] [ 407.617981][ T9194] stack backtrace: [ 407.623966][ T9194] CPU: 0 UID: 0 PID: 9194 Comm: syz.2.758 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 407.623987][ T9194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 407.624000][ T9194] Call Trace: [ 407.624012][ T9194] [ 407.624020][ T9194] dump_stack_lvl+0x189/0x250 [ 407.624043][ T9194] ? __pfx_dump_stack_lvl+0x10/0x10 [ 407.624061][ T9194] ? __pfx__printk+0x10/0x10 [ 407.624081][ T9194] ? print_lock_name+0xde/0x100 [ 407.624102][ T9194] print_circular_bug+0x2ee/0x310 [ 407.624122][ T9194] check_noncircular+0x134/0x160 [ 407.624152][ T9194] validate_chain+0xb9b/0x2140 [ 407.624178][ T9194] __lock_acquire+0xab9/0xd20 [ 407.624196][ T9194] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 407.624217][ T9194] lock_acquire+0x120/0x360 [ 407.624231][ T9194] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 407.624255][ T9194] ? kernfs_add_one+0xf0/0x520 [ 407.624276][ T9194] down_write+0x96/0x1f0 [ 407.624295][ T9194] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 407.624321][ T9194] ? __pfx_down_write+0x10/0x10 [ 407.624341][ T9194] ? kernfs_add_one+0xf0/0x520 [ 407.624362][ T9194] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 407.624384][ T9194] ? sysfs_add_file_mode_ns+0x238/0x300 [ 407.624400][ T9194] ? sysfs_add_file_mode_ns+0x259/0x300 [ 407.624419][ T9194] nbd_start_device+0x16c/0xac0 [ 407.624441][ T9194] ? __nla_parse+0x40/0x60 [ 407.624459][ T9194] ? device_create_file+0xf4/0x1c0 [ 407.624482][ T9194] nbd_genl_connect+0x135b/0x18f0 [ 407.624504][ T9194] ? __pfx_nbd_genl_connect+0x10/0x10 [ 407.624527][ T9194] ? __nla_parse+0x40/0x60 [ 407.624546][ T9194] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 407.624568][ T9194] genl_family_rcv_msg_doit+0x215/0x300 [ 407.624588][ T9194] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 407.624614][ T9194] genl_rcv_msg+0x60e/0x790 [ 407.624632][ T9194] ? __pfx_genl_rcv_msg+0x10/0x10 [ 407.624648][ T9194] ? __pfx_nbd_genl_connect+0x10/0x10 [ 407.624671][ T9194] netlink_rcv_skb+0x205/0x470 [ 407.624693][ T9194] ? __pfx_genl_rcv_msg+0x10/0x10 [ 407.624709][ T9194] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 407.624736][ T9194] ? down_read+0x1ad/0x2e0 [ 407.624755][ T9194] genl_rcv+0x28/0x40 [ 407.624769][ T9194] netlink_unicast+0x75c/0x8e0 [ 407.624792][ T9194] netlink_sendmsg+0x805/0xb30 [ 407.624817][ T9194] ? __pfx_netlink_sendmsg+0x10/0x10 [ 407.624841][ T9194] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 407.624857][ T9194] ? __pfx_netlink_sendmsg+0x10/0x10 [ 407.624878][ T9194] __sock_sendmsg+0x21c/0x270 [ 407.624898][ T9194] ____sys_sendmsg+0x505/0x830 [ 407.624923][ T9194] ? __pfx_____sys_sendmsg+0x10/0x10 [ 407.624949][ T9194] ? import_iovec+0x74/0xa0 [ 407.624972][ T9194] ___sys_sendmsg+0x21f/0x2a0 [ 407.624996][ T9194] ? __pfx____sys_sendmsg+0x10/0x10 [ 407.625031][ T9194] ? __fget_files+0x2a/0x420 [ 407.625049][ T9194] ? __fget_files+0x3a0/0x420 [ 407.625069][ T9194] __x64_sys_sendmsg+0x19b/0x260 [ 407.625093][ T9194] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 407.625120][ T9194] ? rcu_is_watching+0x15/0xb0 [ 407.625139][ T9194] ? do_syscall_64+0xbe/0x3b0 [ 407.625158][ T9194] do_syscall_64+0xfa/0x3b0 [ 407.625175][ T9194] ? lockdep_hardirqs_on+0x9c/0x150 [ 407.625190][ T9194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.625206][ T9194] ? clear_bhb_loop+0x60/0xb0 [ 407.625223][ T9194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.625239][ T9194] RIP: 0033:0x7fedfd98ebe9 [ 407.625255][ T9194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.625270][ T9194] RSP: 002b:00007fedfe801038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 407.625286][ T9194] RAX: ffffffffffffffda RBX: 00007fedfdbb5fa0 RCX: 00007fedfd98ebe9 [ 407.625299][ T9194] RDX: 0000000000004000 RSI: 00002000000027c0 RDI: 0000000000000005 [ 407.625315][ T9194] RBP: 00007fedfda11e19 R08: 0000000000000000 R09: 0000000000000000 [ 407.625326][ T9194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 407.625336][ T9194] R13: 00007fedfdbb6038 R14: 00007fedfdbb5fa0 R15: 00007ffe533c7148 [ 407.625354][ T9194] [ 408.078361][ T5840] block nbd0: Receive control failed (result -107) [ 408.100343][ T9194] nbd0: detected capacity change from 0 to 32 [ 408.211636][ T7005] block nbd0: Dead connection, failed to find a fallback [ 408.218720][ T7005] block nbd0: shutting down sockets [ 408.251526][ T7005] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 408.265854][ T7005] Buffer I/O error on dev nbd0, logical block 0, async page read [ 408.266951][ T9201] mmap: syz.1.759 (9201): VmData 37728256 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 408.290808][ T7005] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 408.301176][ T7005] Buffer I/O error on dev nbd0, logical block 0, async page read [ 408.309099][ T7005] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 408.318772][ T7005] Buffer I/O error on dev nbd0, logical block 0, async page read [ 408.328026][ T7005] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 408.337398][ T7005] Buffer I/O error on dev nbd0, logical block 0, async page read [ 408.346229][ T7005] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 408.355595][ T7005] Buffer I/O error on dev nbd0, logical block 0, async page read [ 408.363655][ T7005] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 408.372892][ T7005] Buffer I/O error on dev nbd0, logical block 0, async page read [ 408.380803][ T7005] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 408.392874][ T7005] Buffer I/O error on dev nbd0, logical block 0, async page read [ 408.401306][ T7005] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 408.410542][ T7005] Buffer I/O error on dev nbd0, logical block 0, async page read [ 408.418547][ T7005] ldm_validate_partition_table(): Disk read failed. [ 408.425461][ T7005] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 408.440522][ T7005] Buffer I/O error on dev nbd0, logical block 0, async page read [ 408.448552][ T7005] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 408.458058][ T7005] Buffer I/O error on dev nbd0, logical block 0, async page read [ 408.469109][ T7005] Dev nbd0: unable to read RDB block 0 [ 408.477615][ T7005] nbd0: unable to read partition table [ 408.503374][ T7005] ldm_validate_partition_table(): Disk read failed. [ 408.512078][ T7005] Dev nbd0: unable to read RDB block 0 [ 408.518867][ T7005] nbd0: unable to read partition table