last executing test programs: 18m22.474336359s ago: executing program 4 (id=339): r0 = socket(0x200000100000011, 0x803, 0x0) (async, rerun: 32) unshare(0x400) (rerun: 32) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) (async) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newlink={0x40, 0x10, 0x439, 0x70bd2b, 0x4000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x3, 0xa}, {0x4, 0x7}]}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x40810) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/167, 0x0}) r7 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r7}) syz_usb_connect(0x3, 0x2d, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000061c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da09"], 0x0) 18m21.512247122s ago: executing program 4 (id=345): r0 = socket$inet(0x2, 0x801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) r1 = epoll_create1(0x0) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x6, 0x0, 0x5, 0x1}, {0x1, 0x6, 0x0, 0xd}]}, 0x10) r3 = openat$smackfs_ptrace(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r3, &(0x7f0000000800)=[{&(0x7f00000007c0)=""/20, 0x14}], 0x1, 0x8, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000002c0)={0x60000002}) 18m20.717341791s ago: executing program 4 (id=348): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="050000007000fedbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x200000b1}, 0x11) userfaultfd(0x801) socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r4], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa8fe, 0x40000002, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x40000, 0x0, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r5, 0x29, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="000a000000000fd60730000000000a0000000000000000000000000000000000000000000000080000000d00000000000000000000ef60fc4bd8ecc4e3200000000006004dee00000000000032acaace3269d47147"], 0xd0060) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfea8, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f00000000c0)='./file0\x00', 0x60004ce) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x80}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x81, 0x8}}}}}}}]}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x8, 0x1c, 0x9, 0x800, 0x40, @private0, @mcast2, 0x8, 0x700, 0x6, 0x6}}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x2c, 0x0, 0x431, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0xfffffffffffffe24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x0, 0x1, r7}]}]}, 0x2c}}, 0x48084) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 18m17.502983212s ago: executing program 4 (id=355): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000300), 0x82880, 0x0) ioctl$FBIOBLANK(r2, 0x4611, 0x1) ioctl$FBIO_WAITFORVSYNC(r2, 0x40044620, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000340)={0xc1, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102384, 0x18ff0) fsopen(&(0x7f00000001c0)='binder\x00', 0x1) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000003, @mcast2, 0x6}, 0x1c) write(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rpc\x00') r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="01000000030020006102000002000000000000001d09", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r5}, 0x0, 0x0, 0x300}, 0x20) bind$alg(r4, 0x0, 0x0) r6 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000280)='\xb7\"\xde\x1e\xda\x1f\xd5\xdeIt\xf0', &(0x7f0000000080)='r \xf5\x86\xbci\xc9\x01bx1\xcb\xb6q\xba', 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bond0\x00'}) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r7}, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) 18m13.41823572s ago: executing program 4 (id=364): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x40000, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000200)="449d060721b9e6bb51f2f6f20504", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) socket$inet(0x2, 0x4000000000000001, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000001700)=0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$unix(0x1, 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x1a0c000, 0x0) 18m7.580934265s ago: executing program 4 (id=378): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000ac6ee6414162661a020000000000000000000003000000000300000002000000000fffff00000000000000010500000010"], 0x0, 0x4e}, 0x28) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0800450000b00000000000019078ac1e0001ac1414aa0300907803240000450000000000000000010000ac1414aaac4a1de87ed29557141400867100000000050ce256b28c59881681fb520009789607671442eb000e7434954373561de584b703c80009e706d30bd224f80007cfa11cab1a0010c600000000000000000000000000000a6580a5e97612fe86001273bc2300ad9d19a30000000000000000000cc8f46976e79e56c7a95e860c000000000006"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r6, 0x331, 0x0, 0xa6ff, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) syz_open_dev$cec(0x0, 0x0, 0x0) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) futex(0x0, 0x6, 0x1, &(0x7f0000000280), 0x0, 0x1) r8 = fsmount(r7, 0x0, 0x70) fchdir(r8) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r9, &(0x7f0000000140)='2', 0x1, 0x8000c61) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x10) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r10, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 17m52.354625698s ago: executing program 32 (id=378): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000ac6ee6414162661a020000000000000000000003000000000300000002000000000fffff00000000000000010500000010"], 0x0, 0x4e}, 0x28) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0800450000b00000000000019078ac1e0001ac1414aa0300907803240000450000000000000000010000ac1414aaac4a1de87ed29557141400867100000000050ce256b28c59881681fb520009789607671442eb000e7434954373561de584b703c80009e706d30bd224f80007cfa11cab1a0010c600000000000000000000000000000a6580a5e97612fe86001273bc2300ad9d19a30000000000000000000cc8f46976e79e56c7a95e860c000000000006"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r6, 0x331, 0x0, 0xa6ff, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) syz_open_dev$cec(0x0, 0x0, 0x0) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) futex(0x0, 0x6, 0x1, &(0x7f0000000280), 0x0, 0x1) r8 = fsmount(r7, 0x0, 0x70) fchdir(r8) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r9, &(0x7f0000000140)='2', 0x1, 0x8000c61) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x10) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r10, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 3m5.928912676s ago: executing program 0 (id=2384): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYRESOCT=0x0], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="20000104000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000200)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f903, 0x0, '\x00', @string=0x0}}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) time(0xfffffffffffffffc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x4d92, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x8, 0x2, 0x44540, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="01000000782303d2064b5bce71aacec9adc30027", @ANYRES16=r8, @ANYBLOB="010000000000fcdbdf252400000018000180140002006970365f767469300000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x8000, 0x10, 0x1, 0x1, {{0x9, 0x4, 0x0, 0x39, 0x24, 0x65, 0x0, 0x5, 0x29, 0x0, @remote, @multicast1, {[@lsrr={0x83, 0x7, 0xce, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x83, 0x9, "85944cba3980ee"}]}}}}}) 3m1.580444144s ago: executing program 0 (id=2391): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) iopl(0x3) rt_sigsuspend(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0x8, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = gettid() r5 = syz_open_procfs(r4, &(0x7f0000000040)='timerslack_ns\x00') write$FUSE_NOTIFY_RETRIEVE(r5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r7, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x28, r8, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xf2, 0x22}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) 2m57.210256233s ago: executing program 0 (id=2396): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}], 0x1) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r1, &(0x7f00000021c0), 0x2000, 0x0) syz_fuse_handle_req(r1, &(0x7f0000004300)="d5c2280baf4e05cfa1d1112770cf43a123827586f0f2675b130041ff58ba6533ea7947f2f65b1d458fe88a96133ea3927f41fa6976fad8c967c88679769ee674b80debcd1ec6ce1eb490888bd66a52141fa82f51882b22a8e36ff462b51560307cd0048156800ad137f359719a9c5d6ad6a8c999984f22461c4ca6614ca4cbbd5e9103a3459228e3bd35e3c1cd5f2a83fbefafe7c5a39617ba1d856f37977da077ffcf4d52f5bb3feffa9e100b0279cb635a61ae9f5f4491bb1c9f04c041818a1ae9a25cbca38c4b4754a8be4f52db20ca464b3b4faf0ea8ff193b414e7b7a4ec8aec2e77adc43d09c62d37fc0aa6296a56a9445f264a245d41e77de26c2694cc5885ebd454a3b78b60172e3e6a2fd79efa8b5fbbe827512aa0656920858da51616244ad32e53ed039a270c042662bc966a8fa05e23a51c76585a6f753e57c63b5a1dd11c4ce8773702c5c759471b79ee9bed600d99853afda9b675f071bdf6ff4eb99cb1ae0128ac1f8132f9b7bef82221276395e59f1323c9f9f6bb937a9db0bc2088670ffc3e6233ba73d4e324df7bc866e84e82ab707ab8aadd593913dd3533cddb396e804a63155ad6911962bc49bad21faba90b5570b62d98eb5328214a7198b36ea6df9a72dc248311040e01539112e1d6bcb4ed9d7fb70d22768ec6603e4727b6ed2616eb9108524985ccd70f1361f68b1fb7088829acdd59ec5af9e84409737f0d852a3c55993cb7398b5640c458bc036115b86de7b8e68f1cff882ee5707040571c3e5c9602c773459cfecad4917d8ba2902bd64a676e2c6e507d06dbc806c13c0fd18175087440ce7d7300dfe745b8e98ac63b400e449a3f2518c6112c9864fde68f580ebc2d72e4bbd03f16a7289be813c258b02f76ce901afdafc69046c947c9e801ac635b2a95cca291c052c7f8149c92aaeaab41edb34a70604a7538c4bb6486b983416843fe6a65d7b828d66deb991e71526b7627e71c6a795a02e787bc561ec4b65d4742a129c59bc71b323850cb416f3d32494d6dbfe3ea73cb473b093ae0b0ebbbd3e3251ece756b3cc381f05ea1b8c3f7fbcbb16fc446fc084725e6c3a608221aad8d8179112f9e5ee3697346a0dc0645e530df523cf4daea14764c25da2da863adebaccefc2c83a9257b3131ac2fe04a27bf3aea8979b6f3091b4fef99e203725368d297bad3b020273d0b606d2368e2ecb0776349cb86bbcbaa5c910636527e3cbeca06b4135170d8808c5f113fcd77ecb2f099d1e663617a46ffc5275c8fcc339d315ca1583f66fe7a7e6430405c0be889826c07fcafa17f04e08bc39570a1f499092d390c5dba82d259f652307ff941e9f1f569a48144da846f14452df295553de6ef4e9ba0cd98dd16cf89d8bead08eacd4eea71cc5f8232349f2d8519b1172c724d3bbc41535eed310d8e12ad89051cf6f243f243366622023ab1b7039a89152e7db97f291bb3f0213c445c25caf5f0a5a2b382c841cd8a490dc97d008966e94ed0b5ce07bcc0c13b39c349e4b596147a633f3a73ab6012a1582d3d283293bd7c01f99cdbad8e18d24867c39ed0dc3fc3cc800edd23af24b225acb2cca5aa264bcda40e1432cf2cc0050efdff48fd49ae4225a983d1b12facbaaba73294eb225fff64a677d0ed2cd71bab61b3fde8a1fdae638d2036283a8a4ff5a548d05cb706f56ce7e3f55a688fa6c70393c53c33be11f34a38f61f80c8e94e50fc9d7c3695d234705bb9e0b2a8316cf54d7963f548d49f153bf796d0970ed1264c19d79eb77fd0aad4844796cec73a08206b9eca76f2ad76318a20d52e7d3338eac40d03775cca0c2b29a451cb10bc141289c2703198e7137200a360463000fab97d0da72a7b4e8aadfa8a2e559a7d06bf49d6d4a932cb29994ef7ca0c1beabf05b898bb2338e89a67373d50614300f13523fe451d4058e5a522d364ec884099ee3c6e6db8d4ec1e5dc08d127b6301a308a1d6798878c28ef828b91b529a22b7519d249a189a7eb942b94ce26148ea8bf16a44261cd9691ba980ec2d0c710dbee41756cb39b88213ad5763239ae7636e983580c41a40b0f3a3af9fa6f995ed1981d073f63a623554bb01869bdfda190bc8d9507cc067b897e1c5f0d087cf8dfcb171169541fa3cce7c3a620544c74f2d3234935a0acf6c804c43992812925cbaaa24f497e7a00efb20c45c7acb80adb3322cbe0f08d1015b40f5ae1366003ebea977b7b95f803487d10aedca3fd018cfa7b267dae604ed0ada202cbebd731f86b7c6764911d4ff0c75a318ee43b1b556781ac58fbd773b2bd0dd693f9b12fa149bbe392cb2d6bf72015912f4a120e47654d42d14107c67b4502b5ad62044d0022c7f8b255a3e46da4bb8f9e44515e4076ce7b1aefd57c4e264b2cbee4a9e8612ce8517b028067644c927a9ce7564449c8fb0471a87b9b76f374c7c2559379a3004326bdc91be5ec52672dc5fac0883ec527f2a1248601bb9267c3123568b815b90b40ba06c250e3068dee2d7fc232141eaaa130443a5775d049464ec454a7c980d9eebaa4f67a75075a6bc28ded9a5f07fe658a2b9eafa37f14055155409d1aa50be6343d13d515d0531b84644d2f58c280d6d008dee95607f67eb74c900f664d97f411f4ac6afc18f11b6fb75e78b3ff25680ed3bbf5b20969678475b86faa02a751e4cec87735645753f245047371c9e6e2e7ab5a9ea3182b4c96934a21b9df3628b478f5ef705aeda49a0609d4b8f5bf34424581557d029438306002fd4e9cff5a2d4e7d5e23c2992032d314b8fbb46ccda250070fc1b679c9c8646c5fe22d8fe2e0fff73d8153fc46ef7885aeaa2d1eabbe455544d46fdef8e3ef9debfe589870942bcc7196e62736e927c311782b5e4da2889d530a7c1550bff4909d2055941655cbcc5c924a477c80fc3b8a904cd9e62f5fb005b5b00154db5becbe327c0f3ec8314ef3fb53977ec24ff7d15aa83a13b23ab99c5332306023005d2dfb70d3ea2aefababd019ae16d304c083e38997cc94bdeb746fc151849c98dc2a23554e6fe789d3aba8bf4e31133c7f93a3cdcd884271dfdd2c45be398a5349ef5d08456178dfafa31cb4c607f09394d71b3405b3d615c7c59c125db88f72380140345d24c56094711dd833221d6b7c5864d049585605c1301c31982d19e403b601b797fe99d0bbfe30d647a913da72b4c5306f6123e7c572828308a9a8f4c686d07125d0006229c2e890ff7d3c354dde61ccd3b26069a81a98e112e61a930f253d607cda5023f002a09df6b1371638d9661c5a06bed166434f07120ad21476de8ad47296af4b449d581cddc74f9be42a84596fb0634f330a856216a9b32b080c8b66e9f51a758b9ca2e1215ddfe633714ca512032f6547217b1a60fcdb27ac8a04bc7851718b38607bc92c13118a323c3221bad99a8639762abcc4a08654da9938aeb301c55546f5ae7f61439dd883a1b2dede156a57c805ab12337d5381a2fb25b32916a8827fc4de8e2ecc70eeebeb01659d6bf88055477b863fb897d5db275a0c222d261e7df79474858b721e57747fe8997faaf36f5f175b23dd3c5efb2b93fb5824da18d635cd7027a3b0b1c87e7c90a5681682b8a7c47dc82fdd3f329c7b60270100dec8ccdd310245b92f4b0bd9a92e1f2a5733b1b91966be15a4761b06f6fe3b05b60ee7964b4d028257c2210ca88031db0590190d3714c1b6ec86e2821dca03db2fc0c9f0ad9800d1773c8037e9b38c7eb7c99618b731e0526f8453c7e1bb67cffcc2d96cc297e1f917b13dd7dda2a8b12191ed107c1e076ffd4965b9415f830be97935cac23a87f07e26354273c2663c7ef19a27dfe08543fa057e1285c909051602981f5929078214058684bc80bed493f6ef853012cb654d180e414fd484f5cb2cfd06c9b753f417697ff42794649e05fcaa3d53ad0fdfbb0db57dc549115e59978b14dd621370d136176098af2f39a2de72482a29b616e8b308b3d9b46ac9abf3d57ff89fe59b5a97966cc4b97d06c20ee4fd765e1c2abce54dc271a7c7efe656648800c27a9988583b4b76572222cb28916b9ff5f6f649de93923179809405c879a90cb450f604cbe8af55cf2a6d844a59ab0393b394e09c79e1b3c403af6eba69330f6969f78a49eb7022e77a39363f11e07fcc69f670f63c11497352f3f5bfea0aee446da35428cebe28f1c2d23ef3ff97e16ceeb2f88ab19b2b69dcdcc81b947b483cc06c776c52232489f86f4c377eb38056042e2e9e0943fc0ef1490df472b9b244235598894a2ffc296f0a2e4257baca6a3ea8cfb1a22ea8295ab9e5faaa2a9e964ae7625dbf945cdbb369265f429d475ab69413cc5bcb89af57b1b966bd0076f799a401d4b46e5045aceb1ef36e5bbfb037bb7681f2a38ef1df9b84baa3598201d13a813165355bf052bb5e456dc0abdefed995b4eb37a39b313af800f6029243a6a7bec75a23389a90034cac8df6713b919028a14649d756d0093550278aad494de2dfeb76220fd3ee5be31f73839ace7f0d6da650e26f5ded30471ed55d2e814fc1b89102e5917b4e58840ecc211eaffa5a2937abeb882ccdf29308e3ac30e23d66ee79c29b4fb7e793a55e344cac298e30f1ca3333df8b58f43126a3404a61501ce06b75e6e6a4bf13dbfb05efd7b9b4219efd428c8f7f345884640d19f5515abcce05f315f00e65d9aa8022890a23da45ede06f455d66e0c96bbf7e9cc74eddca999a51174b4784eba8a9ebed13415de6bd0f160443d43b78181cfa381313a54e25f6751a38f290e5972ff7f70692e18c4737af2a7f6d4eac52ea594a22be4fd00fac1484e6d2d4d3196b49212b49598f5bc77b34d8a3633cf7212c869557d6eb27bf0d0a02555d9318194e9de9c9730ac72daee7cad6c2d4b248a8744515670766a8f1c739917fb859d98974532477989f4c24345f120f5320fdb8d8d56fa6ff2511e701bab399513cecb3e740e3761d02685a765f5267554d0f9243b51620197adc3b561b59c58f334307220db357c1121d7dbf593898b5d2c505f333445c084a6cbc6a7e5252724c83fcee85e304534780a01e7ecceb2ef53ffb6bc6cb9051b1400493ce55d62c01e972fff3cc7d0b68a2dd4d263c9191df1b629e323797f570083f122db3df6abb6fd6c4a351bb7500c7241e4392ac76e04259968e517a43e907cb0b0533d6750b9587a1a5d852639c6b789d333e848e3ad66cbf19c5ee5a641036cb7a858f822f657dec36cc134d6c1a629cfce1f1e24dbb73d09fba04f53b2c6309d71d92211a1f08535244eefcbb52e095626bcc78b950db1cb8facc3660fa705dceef155b00aef3291367ffcea06b5abe588bbdcea2637761308dc65509798b6a494dae4a75c1922c1234248dbfcabfaab3088a0dad09a135a45d75105314020f3ba8901dc39ee624a32e9f863ff55844974b44e57b30302cd0c349f3cc091befd5665f918c298ba89454fb811ce573e41f27490853a52abd6144e85d77de88c3f2e5506c8de40a3957e65936f3b294ce92610b63cec888cb16fe0e8a7af3dd142da96b57f602cc64ba69966724584c2872e5fc42348a324ff082a3ecfded82c3e5b7292d3726c4800176acab6a7a1479a0b5fea79f299e90ffdb1b3843e2349b8f8dc7881145b3796380474c2ceb57e27726c9e50b746a2b12a214fea9cfd6c668363fe6e402710665118928fedb2f4900322b0c7d2c348881ea52278dae765c14b51fd5e8f000602aa3978d83b76056410c2260931e35d841793c8a36b191f93c33c0e4e6367ef45a1cf5145d774861224afbb11a7b77bb94492ec49827f713f8309d80d22e17701046e04c5b277f7b423cbbada01e6d40beb56e755e583b8f3de4b67c4b5ac83771b805fa7af49de2fc8b9a223293d83e7eb4eea3a3af1d1221e5d458e7cab60eaf1b51550a1b125ce018d76096f16d922f4aba48a728ec1b7d4812fe2ca789261b6d8e0c8edb3ba9007649084899c4f6b7986c1cb4a98d412c801fb91675ee42e2bb511bff6700772d3c03a7cb6adb41cbddc33053f8f65c164e9bd47b931510046506b169216d0a04edc479bc51c28acc536ced3834a7a9ce8fb55b72fa186a559437bf41f04b733e05986c915bc19f1b2f99d3bae6c13873d32e3c809b71881c3075f8dd1746f36409ac7934c25236ee2752560fcdd5175037a6fc5f0da58a229418ce30f3e64f9eb6ff3fe4498f47fdd69ceac5e792c8c9f087316f334b7f75e3432d3f1d03ee97c8f16485ec906c94e6c9580f7d03d98a8da85ec118b77c6c1d3b2e99fbf4b45e66cb4f8817f786d1f90e1e5e250be8c240a9648a219a02e62acbd72d1b0c0b42c75065a35664ea6a03cb05ea179f2e8e50e3d7ed53d31cdc10cf5fce48781fa338e3ee819f410540f045cb0edd7b2d219993faaa97cf95aa6144e889a02069421291d05eade30693a751039fece452c22d1afba081d1c40178fed7684cae475fcc365484118a184670cd7aa2758bdb01058ea9b244d5241f627bc5be11c9395e3cb839b0eac7842a312e1fc8b4ddae2aa4ef907ca5c9b847785051323e16d5497c4424289496277475bba67da750fa05bd8be730e4aabaeb94641fa2263dd3d4eb511b4fa40b8cf8b16d7aded1163f2258add79b04e1eb888afa27d057de2523863fc2da38d44cc69ae2d455900eede5fce69d7e9f8707cdb2456a45dda14d257eee4982f86259b855a0293068aa4aeff9439bc06c8ed5a370fe46fa88fa9bb92872166ac69152d1cbb4720eec5b9a057890cbb838aef12091454fe721395b46f9fa29ec1829fedf65aaec1176bb9eb15511bd77e7d4fe7321b3e0dfda95e5c90c3663956477885d6d94b280f58edbc77e864dca73536cd4988bcde2a3edb91704ad59148d85a001e393cebdb56ee088fa1033cdc6fbcbea30e2974035bfe29cee1eace13e30950bb4658886dae7e565ffd7b71e41feecbcac35fd97c81a8fff9d2a1d43f183c6e984671e06645eb0a60228d1b6c12c28bc6eaa4b9125c57b48ced2e199ed3acf12dbe10af4a56f2f5dca829fd07fc3f7e0de6913c73be0ada3e43bcbe70de784de699d0b51d7a56a3eacaf5d7dcd77d73cfb82e04633574213e05dc98850d822bc6dc90dc3fd6184296287342e2243fe6f0cf94e6d02a1b900d0c718e2afbe7fea2fafa375f209fb9cef5d844b861a1029aa3dd7081e81fe6501bbb413dcd23e013f279ef87e082335ade324b7688054992ccc63fbf9153213ab6d07ed0b79945d19639aaa5dd10e53aafe57f1e323300246cb1d6ede1eb1f319ca6fe1b0cc8e733b34818425888110b6eabe2db302310d0a8bcdd5342146b29c535cc9a95a455c8926d77323a31b948d47dc611815a329654a252fd09dbcec5f3cd8bc7e465759eb8e72ff6fd4ef1f375e4e8762a58148622d14480b7bb9aca2eeab3367a7376c9c85e6ba1735e56a2fcc6baf92c8d21942883f318eab7a568fc7ff01885a7089aa7661b15d73799bc0b8f8ce6a3b61adb6949965a223850b6825616c036e099952e04fde7cf086b5e76d45b86ab78b322f9af580173f2e798a39df7cade0d365c9d46d3fb36970f8a99d7b20a1b275afff852126f21ac24ca8c34deb49ba511f4d9edb4f56941aaaa477253f9bfc9a25a2694bbbe3b917074dd4eb6f1be20395ac33dd932a7ccf0604d64257b5af3faf271c145c190a528e471a7f23a53b5f9ea1bd0cc36410e9c538e91dd01d162edde856087b60dcba2042e65b6ae7b81787bd3308db9eb025b6fd930a9eb74a30883b83cfa8be5270dd3ee3408db7f7b136adebb3ee30f0e0b8835a0ded325363e4a2991cafd4a73483954c0f5d3358b25780608fa48f3f527c7e617ec12eb017df33f5088676d8bc476da251e608394e3d8fc0883fd4d1804f8e07f5e12ffa4ee80365a88abf29936bf1b255539fef95f5cf3bebcd26817edb28e7b6adf4851dcfe8aa1aa097f67c51557326ccf9c46ee2780d491e87774324d4dc5e199b0cdef01094ea72bd5ad5fe1be6c9d545df3dc5de550665d220718a2c0baed2833cfb1428e2d1c2b9ea1e29f4b07fd6c51492643d4000716cd1e8a4f9d58b6b04b805d8962495323fd62949b17348418201664c6f2f651f99d73f8d17bb5e52dba2e6f94fa33f816d74bb6a45bd6cbdbd07f530406227c8fd11f390e805bbc17bc0e81076a27c0be023b64777afec0a7a0c3f53f03bc2ca72ae2873d68217a1a6905f414c2cb1b9561dfd07850a026da5f5775a66f8f3a6bc29b48c8a81b06ba30994ba8e7e233e3a3a5d886767ea6de91fbfc0a594c2375d62e71c7209d87d0f6c7a79a0d80da328e93f08650ec745495c771410913d094e4190075b7225761172eb420c82ab493548f6de38e17d3e687a89ce77c67c58b875c48c8a4d1664cbc6f67df357e040444fcd515d92d5823fc3ef6485208b6f3eda8cd09ea3b004f7eb06ac268ae8c3bf571aa3f619222a47540f9af340c80c587f7226e3d715b18c3ee41f64777d3a0a09f32190ad67922f6ecc63c956a715c3c42a6aaaf5e588d119210083ceaa414820b62fef87a678cd3f24f8fa3cdb6629b041cd7555974313f56d1b0e117ea925dc95e18b5d3f4ba9812f1067022945c3f5d547370d45853c4db3c9ca4436d7e649e1ac3ec02f9c1e9139849b46027d4b276cb0eb4b09848999f466f528290e47ba9540ceca89390db3fcbacb1d566e22e917f01f4442bd4dd0d350d057ffdf5b3549ca559901e6ff5147bdc25c11b23f1678f02c20e4e2e6f339b262e2b82eae0b15b4227f1d514f99ec78fbcf80c8f6f243536f2d7a809de05ae5e1d676fe950ad3513f801bbe4d16737def4b5ec4b62f8562cd5432bd372645202edeb286662d7e8d0dadac5b91c903c2756bdc4f5a7c931f2c3f7feace2b83f5459a196000e2ed1e1b2accaa9d637d5e408340161331c4b0047bf2ab31d317bb1c8f6e1b3d52f9f240bd971a447942dd4b73301781656aad9ce9b01aed907b7eb3a78397b97e601b04a4cb028d327ef32cf20c34e8dad9c9b1f981ab5c06a2b0271852e2a1016ee460d8568391c9ece5a2b8f29cbc6f2d6cc2e66c30c96df548e67dd6ad8c1ff09dfa22b2e8b2c52a3948c4febb0910c2d34c0604a5ef930cd53be69a4bed9c9ee057178ece02a6b4df4624191590952888bdfafd2dbeca128d500872a8b236fba9623672c4dc15f56a761ee0c54026112fc464f72d3039587f009b94930dac0dbe444a939b38c0f5bce7aa366bfc2bb909db231178228846f71a56ab219e28cef1b102c1bfadbe8f0916d10a573b8cb38cc2cc2ec496a410a4e82847006d2ed4bac927a63a00416d0bfce59cc69aaf78ddc9566f23582999a655c8ad3b217486fb5a037ce089baf344d55bbd475be4e90b10e92c9c1bae3202c2d63355549f0ac95058724fea81ff9cec027e7b93e2cee43af81c6978fee5faf6216118785251b8ca023115b2f87d5d4b10c29aa3616628ab40a8ef36668ef57d7f9be505eabc01947ca222362818a71b3d63e5725a4d8a2c619b1867f70daa07703360d026d6f65247330be1ba84ddaaa7779591ca261beda4f4c094af65c5c276fe3bfb89f067c8c54af67e78f61bdc114ed4aa869c3adf282d7a8e7272579e9fd9e47611e0dc89f97561110e0141c69b1fa114e27b3d1e2c825ea008a370e08cd0a0610edef20cdd8a7cda0922fff046edfd2ff391a10ffce5dd6045619ce9af6b03f4193d858a76b201ed5beb0f11321707b7b593b23adaee4a0c0caf39dfeebcbd2948030435dc94ca00990c728502ec4686194f0f454304a422023c1b2c5b1ebbcd8cd50fa2d11361e3bbdc306e2739e27de300eda27b1c1ea62d773104cea77c18037c6bcc76423621b45abbe789b384bfdfb46efa1627ff29d9d840bf6e1f05e7e13fae6383e42ce153dcb062fa0cefd0fe9298ddbe77fd78d7036b5a815504b48267203da08ca685bfe8ae89c031074bbe5d3d6dcc6a3a8a8a4d3102765c3b714867f4516df62f214351b97bb8b5697a9f9a9dd78627342b239c524a3943d1d70f8cdd7391f05e7395731a8fc05210c6733ea256040bbbb53389229b84dafaaa3db1d5eca2971d9e550149461f1a672eae2319a99beed48934520666bc54b63085a744b5fc9a9b089b16c50ae945f74adcd4c5d064a12a6e103ef59bcc035a755ad31836eb7d04e5900d3800c822b96b466a9f6611f46b8a7d6131f91c625a5604de5bf01e5ca5d99a714c8dc1160260010f8d55f9125ee453b61c911bdf0824caa804c76d6512802875c5433de9b2e8b6c579a67fec5d2bc64ed3d1c313854221b75c9a0ed42af6f5354e7b1d1bf8661baa1261e68fc20d14b5652d25a536f208bff2b90fefa163a232696e655bcf95bed39355ec865e272fed582aae18858f5096ece40b9108efb00147f9c2ced59bfe2a79826851850ed95b35908dfb4d9ab7da0668a1fa8933ac4f6534e9598481477791fd1a1c269011ac9fe81f0491790e8aac121ffc00e38a7619a1855e6899abc2c670375a3ba4ac0cf652da89a70628cee1a35ae17b3490102e3c88ca324d06fce2151bc9de49472cf6e76ccb16d2a9cbf4161812e2c7758d73631024190fe9b71935de6968b289d3503b497f3f4b6306446ae9c312f8f1c63c1f7e62652173d9ed48cb128815bd44a12061f9b73fbdc6674ab9e0d01807f7bcfa0aa59168420e5ad8b72d7b576e273a1d229934fce2867689a41cb17767cf9defe1a96515a677ba08e10e187a3ce2f1d78e6b43b0d46c36163a1967b203df4f53379ee98422e973ab5c090adff21b5cc84fc78358021f681a0f0fd744f687e4f6c295470bf8f548d2d3dc841481dd51db9124cacde83bc9fef44a3e69e1cb28579d897f3013ac6133395328247fdcc152e5563678258936576196ced017c79bb6a4ea501a44cb25e5af1697afbdb3abb316837470ffdbe985ac3967334a90731602d3fac4f5c2758f04ec9c161a7cf330b7c7549fb62e6c15d07a7203c94edd3a8141c91b2029d6a90b14322337e6610822d9d7bff58c10d9c6cff71822f6456a421a65fdaa5d2c793f256a4e7a39f0d85d65fb95479eff79345c0615c9bbb4fb3324f9360b70dc709b0200042e8461b8cee9ce30beab3e276df48f41f001262fc14153f9764e13b50397442e00d7b11266bde10a3b7f83818086ff0015409679e4472d9e0215804fa9d21cebfa5cb5099cf88750cbeaaf58c2743f2746ea4cb73760ba88a07b91b68553716d563af5d7702219d0c600916dc54242d825c6d68320baf234a39f0b9ea9e6a4a72c4d5829b2f28508f54b33c7e0394a43fe23e7940d9b04bbe790d903a2d2c979e0ea79931b934d094fa2d5948c05cf278c341d788f2061ff617c9fa4700b1e1f0fbfa1b8c42848f2ea01cd318a8748c3336622ead25527ddbcd8a12ba3a5183f4419deb13558ed0ec99e73448c21ede0dbee9c01fc7675e54c60d4dee29c0f8fe81af6fe7b726f5d3c50dac634aefbf1ca6aa4df1b340a4109acf30939f6094c8591218729788111bfde98cd96d4b04b25bcd1bcb7f826241995573bae00", 0x2000, &(0x7f0000008c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x78, 0x0, 0x7, {0xe, 0xcbff, 0x0, {0x5, 0xfffffffffffffff9, 0x1, 0x9, 0xa, 0x80000006, 0x1000005, 0x6, 0x101, 0x2000, 0x4, 0xffffffffffffffff, 0x0, 0x3, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x10) 2m54.931788777s ago: executing program 0 (id=2400): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000300)={@private2, 0x0}, &(0x7f0000000340)=0x14) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000540)={@ipv4={'\x00', '\xff\xff', @remote}, r3}, 0x14) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) setresgid(0x0, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x40, 0xbbba, 0x2, 0x0, 0x2, {}, {0x80004, 0x2}, {0x4004000}, {0x0, 0x8}, 0x2, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x800f, 0x2, 0xff, 0x80, 0x0, 0x11, 0x0, 0x0, 0x9}) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) fchdir(r4) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x14, 0x0, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe}, 0x14}}, 0x20) 2m54.165271824s ago: executing program 0 (id=2404): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000780), 0xc0000, 0x0) r2 = socket(0x15, 0x5, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x2, 0x1, @private0, 0x5}, 0x1c) getsockname$packet(r2, 0x0, &(0x7f0000000500)) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000006000/0x4000)=nil) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x2000001) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0xf, &(0x7f0000000080)=[0x3, 0x3ff, 0x4, 0xb, 0x660, 0xfffffff9, 0xe0, 0xfffffff7, 0x9, 0xf4, 0xffffffff, 0x2, 0x200, 0x4, 0x6], 0x0, 0x4}) 2m52.459992929s ago: executing program 0 (id=2409): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r0, @ANYRES64=r2], 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f000063d000/0x2000)=nil, 0x2000, 0x100000a, 0x4010, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x0, 0x85) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) r7 = syz_open_dev$loop(&(0x7f0000000100), 0x80000006, 0x48002) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003b00)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}], 0x1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r8, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r8, &(0x7f0000000540)="663a1cb35c0aad31161b46b0ea16adc33dc54662a3bb10081cdfdcc2fb603b78fec114ef7658004ab3afcb108faf797ac5059610f28ad0b62dbc59f1e8fc55bbe44e0f3241909eae52610cb45bb96dcb6ec4d2f3a563453f3e76eae010bd24110e9bef4e946cc5cc86a6e6485d5607f26efc17d2d51467395bfadd794824fe3efa12ebfdd2a74a403c96", 0x8a) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000400)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000000240)={0x50, 0x0, r10, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r9, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x0) 2m35.725550474s ago: executing program 33 (id=2409): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r0, @ANYRES64=r2], 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f000063d000/0x2000)=nil, 0x2000, 0x100000a, 0x4010, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x0, 0x85) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) r7 = syz_open_dev$loop(&(0x7f0000000100), 0x80000006, 0x48002) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003b00)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}], 0x1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r8, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r8, &(0x7f0000000540)="663a1cb35c0aad31161b46b0ea16adc33dc54662a3bb10081cdfdcc2fb603b78fec114ef7658004ab3afcb108faf797ac5059610f28ad0b62dbc59f1e8fc55bbe44e0f3241909eae52610cb45bb96dcb6ec4d2f3a563453f3e76eae010bd24110e9bef4e946cc5cc86a6e6485d5607f26efc17d2d51467395bfadd794824fe3efa12ebfdd2a74a403c96", 0x8a) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000400)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000000240)={0x50, 0x0, r10, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r9, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x0) 26.132383524s ago: executing program 1 (id=2681): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x219}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) listen(0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x18}) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000)=0x7, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$KVM_GET_MSRS_cpu(r0, 0xc008ae88, &(0x7f0000000240)={0x2, 0x0, [{0x271, 0x0, 0x5}, {0x648, 0x0, 0x2}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000680), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f00000000c0)=0x58, 0xa) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x7, 0x2480) ioctl$HDIO_GETGEO(r4, 0x301, &(0x7f0000000180)) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f0000002540), 0x0, 0x406, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4040}, 0x20008000) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'geneve0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r7, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000400010000001c001a8018000a80140007"], 0x58}, 0x1, 0x2}, 0x0) syz_open_dev$video(&(0x7f0000000100), 0xfffffffffffff269, 0x450041) 21.560492588s ago: executing program 6 (id=2688): r0 = socket$packet(0x11, 0x2, 0x300) vmsplice(r0, &(0x7f0000000200)=[{&(0x7f0000000040)="d5c96999ca37019933a5c6229a559f09c4858d6680129f55069484cb9b1b651e73532e59f66d2878de4e3f966af44f53726ef6b28a75a16463ca149ba490383c", 0x40}, {&(0x7f00000001c0)="a217f6d3ecc1668f4b327cf39d98302948fbaf4c4f71da", 0x17}, {&(0x7f0000000340)="1224817bf71d05ddb16a548e6550bdaa37f31c417fc59b02c627daeadea645b51187c404a97e1b7cc5f05d2af2fdeddc987a5e37253a14c35a32204ae385bda7af7b05707fa4bc469ed3582a93db31607025f64dfd8cae8231dcebb461ee79293a3b2cd26888627685e22447ae959eb1493e0eef48ac1be5fcfda516ca20b8da486894431f", 0x85}], 0x3, 0x5) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a118000200ff05000100060e1208000f0100810401a80016ea1f000840042e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r3, 0x1) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r4, 0x6) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000280)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a4, &(0x7f0000000180)={{@any, 0xffffffff}, @host, 0x0, 0x6}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) uname(&(0x7f00000001c0)=""/62) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r5 = mq_open(&(0x7f0000000500)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05|\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\x8cJ\xe6\"\xf6\x8e\x94\x0e$\xb1\xbdU\xd7jo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2\x1e\xd8\xdfJ\xcc\xd7\x9b\xfa\xf0\x0f\x05\xf1\xc4 \xde@\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1cd\x11\x97\xa8\xd0U\x17qbK\x8a\xdc6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xec\x87\x1b\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8\x99$\xfb(\x9b5\xcbF4?O\x1d\xd7\x01*\xc9\xd6L\x86 \x1b\xab9\x1b\x12k\xf9\xec\xd8\x16E\x11-\xfd\x10\x89\x8d\xccbP\x14\x89w\xef\x90\x1d\xc9\x02\xeb\x01V\xfbm\x86\x8a\xc1.m\xd0\xa2\xa4\xc9\a;(\n\xc0\"\x1f\xe4\x1d\x85\xb3\x95\xec\xbb\x9b\x01\x85\xffx\xf2\a\f=\xd1\xcf\xec\xb8!\v\x958\xbf\x15b-\x92\xd6\xb5\xbf\xe2\x92\xc2\xa3}\xd0;\xd1\x96\x86\x8a\x1b\xe1w\xf9\xb0\xd2\xab\xc9\x8a\x19\n\xc5o\x1e\x13/\xe4\x91\x7f\xa5\xf1\xddW\x8c\x02\x805\x91o\xb0\xab\x80\xb2\"\"\xe5\xec\xff\xac\x82\x88\\\xfd0\xec\xb9\x11.\\[1A\xf7', 0x40, 0x15b, 0x0) mq_getsetattr(r5, &(0x7f0000000300)={0x800, 0x0, 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x5ce, 0x0, &(0x7f0000000000), 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000b00)=0x7) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 21.462470292s ago: executing program 1 (id=2689): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x3232, 0x100, 0x0, 0x3de}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r3], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x400000080001001, 0x0, 0x0, 0x22}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, &(0x7f0000000100)={0x1, 0x0, [0x5, 0x3, 0x15b7, 0x40, 0x5, 0x100, 0x40, 0x1]}) 17.025553128s ago: executing program 1 (id=2693): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = open(0x0, 0x145142, 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, 0x0, 0x0, r1) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0, 0x0, 0xd}, 0x18) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) sendmmsg$unix(r10, &(0x7f000000a640)=[{{&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000340)="18032c6eaec9f21d997288bcb6685d62cea842ea6f75e4d82d3277d79223361fc6a63fa9fb2356", 0x27}, {&(0x7f00000003c0)="ac99b464f40b7a3268462fd6046c5419a5d5f412c29ea1e8a25789", 0x1b}, {&(0x7f00000004c0)="9bf8543e0317cd09989c8bb6f1aee241ef82824a3796c3d7e44f9be0cddb16033fda51d83c1430608ad08a1aa59b9b471ea825db8746350abc375a6863cb83818bebe5293d210dcb40c0fe71824869c543c714125b664951a528ef01cdb91cd665f4a8000b0f6c1b7033775e53c9dbf24a37", 0x72}, {&(0x7f0000000400)="140934", 0x3}, {&(0x7f0000000580)="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", 0xfe}, {&(0x7f0000000680)="e9605d1bf768a01675779ca54fbb6ddd1ddc0dc2a5b4744bd82f5dc528ff4df21c61cadd0a5a0cdbf0d44bc91821c44c6c71516f798f852c6ca3ae6def9eb1fbff1be559618caef49d8f742d0db3628fab355b256481f037fef1e610ee80cd4c8f3914056661e111380a6ea46c27003b4c21c638ae722261b4c1cfa40a847d4fcb97243e66ca90f3fd5a58117dd5f1139cb886447a34f2648ce6cb963062489381e29b20cd774bd7ebb95312e5428aa69aac57e2ce6e737207d49772022f3c41d1e51aebf12c9e681e4b914580a7013a2c08589394193ea736", 0xd9}, {&(0x7f0000000780)="a342672f3770540944a9c677c3d509efad68d107e91b479fe31e0239e5facae41593ed6a19498439ef6d32b935fc1e4eedca0e2c7485a77bc41c43285cab8259ddaa24d0a9a15e98ae8adeb26de6fb9d862770d03a86260da41e6d68413925f1f2082392068847b7632290913cd8be1fa166fd05c4db0e2f919c9cb208a6c394440bba67d443b4baed4eeb93c9501439d5df4be89502a2550d5e04156c2e3fe2b037f58ea0a27f50099d55", 0xab}, {&(0x7f0000000840)="4540b126b6d17376850fe2f67bdc4864a030c510a42d", 0x16}, {&(0x7f0000000880)="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", 0xfc}, {&(0x7f0000000980)="d0e69b91eb196cbc91aee327a04f62d8fb60b7e15005c1a3328329c9b0254d0cba3cef8df8ed4ae8dfafc590ecb6360e659932b32cfc3e3603cb0fb6ced17d289b269e2c451c78d6731387ad64dc00514735fce90426a716", 0x58}], 0xa, &(0x7f0000000cc0)=[@rights={{0x30, 0x1, 0x1, [r0, r10, r0, 0xffffffffffffffff, r3, r6, r6, r10]}}, @cred={{0x1c, 0x1, 0x2, {r8}}}, @cred={{0x1c, 0x1, 0x2, {r8}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88, 0x800}}, {{&(0x7f0000000d80)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001640)=[{&(0x7f0000000e00)="9af4a3641c8acb90e6bb1e8c59b55f6f36888c95138377b4f1c588414702377e1c19088e80190739232cdae1b2fc87384e03b9c1493cc046d647e1142f10d78a817125b7531e59aba8b62fd3552f9e1050f52b9d6935d43cd7ee999f71218c91624efb8ba96b82001a4353fd50d43a3e35cfe2682bec0e98935d2860bbd24cbb98870b0302cec6448acd222ae97c5bc58de46793e4f4de9e6ff3699869bf9b7931f9ced777a0c958dbe9346e696c2880326371fe7624ce67ac830936aa66549bd71a34c7cda396", 0xc7}, {&(0x7f0000000f00)="53c9f7d432312c38c1ddbd2f2da879a67f1a8c88aabc555ecb6f06903a4a4edbc4cd0789012092354b6d980b43a187a376d3569971034b4a6637406d12152b35dcfba4089b11e1d4ea8c1c14e2cf056b1c1d7f6aae3fff004b0aac98b85717127b759a18e9d3100733754a11c7ea61c37c3dbaae5c3f199e097a647cc0e910866d2f21e94cc617795f6fa032cd1f3b946d65e2bac8d1c37df169d46c00e3f3a5bf16c70d472abea86b74621d7e09ae7f20534e970a36283af68a7f765fc066afd864aa996c089f", 0xc7}, {&(0x7f0000001000)="bf1dc6135e15f5670769010774c3efdcdde74dc7510b06cb515fcfcb573e3fa4a7bc6acd640d374ee0b0015da24fdb1cbc892f32375f800e3fcc99af837214f1838148d605dd1319e6819e14f70d8b5f02e444df9472051fb1c6157c01eed622dc5473036ca39030d9a44424fced44081a973400150936ef74d04e5551605211f5030a77bf1f42ca6a118d662f6350199cc5fe42f70cf6076429dfcaaf1f06e646e2be53347ff80d7123796c0c54fbf2a59be78188f03810554d970ce18eb85f4f4184235ec1cb961e83b1e7bbbade7bfa6bc3b4da5921c61b412aff5a501205ed4b20f2a87be7", 0xe7}, {&(0x7f0000001100)="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", 0xff}, {&(0x7f0000001200)="ffa55abe9da5a2380424f1821f03d39c6c773c81fd5553b766b3c61b81ac15e9f7435c5fbb8629ccbb", 0x29}, {&(0x7f0000001240)="f1c1473c67d9342d25d438040336f4cb0560773dcfee0a35c5129416ca750272853409afda84c72b058e336b03310b591e2d511870220f387c688b887168c46ad54d942706d6773535865d24e8998f0f669749bbeee83b7e57a1a8d4c0d9c95ccdad189785b5746d0a2d74105c24eff2aa9e60c8c6638aa8445d1a3640032d7faeef78f0988477aba1fd628522522ccebb3db13ac62a5042f38da902eaed96d94aa58be723ff9e6b61ea849ab0c02926a5db983ff9e660dc2b31e851785cee385ff71ba244a959bafcd7da16cf9b0627822c20c4f60cbee3bf8f1e33d517fedcca109431", 0xe4}, {&(0x7f0000000ac0)="a0a15bf9d7b7fc3162a5986fdff1686ae11ce5d7dca89ec31b6919b9f777b0a3aca140aa878e870c9667a3a803f745552f99e889125e24fc0f0d2f5fd18de1f4f781e6053d92b27d1c7211994e76107056955c3069f464045b2fee868bfa6b62d677399d93d0357039ebfa3a0eec93c97d4efef426b2d1e426b6e0e9465c50414d2f7bc55ec06b51b63bbf", 0x8b}, {&(0x7f0000001400)="4f9e8497c8b285c866ab120d9ad48c4e7f6a9372651faa97003f0e0a3620b07f0e9c37f466d006ad2a4fc20f0269aa99679aa42375427c00f55c74268aec01b7e94d61110d38723bc2bac628ca5220ade4a18dc529126b70b83d4401cc1d8b296cc80d467c1b1929b7d4a5c5c4e5bfb4371a07ad2d0707a9fc9a8eebb044bdacd8130221cf6828d003fdc7d6e8a51136b4fc67ca5953fcdb6b2e6de1bafc0f3f3ca96f0ff7f003c24bf8aa50fc3564a83e3fe50bd4b1a90ad5c52dd98e595e76e8a0929d241e096283349d1f45ae05c6b3916dabe913971dba80850844d77ecf56cb1e5da0055909481a", 0xea}, {&(0x7f0000001500)="36a1e721c1ee528702f75da69ce9862d1db83566850660c49290d4c2ddd7eb446eb9b7b27aa413ca33b5b6d3bfca405fb245af", 0x33}, {&(0x7f0000001540)="fcfded91135b6b155b9f5d2787f644d1be518bb9a03c39b55959bd5892d4e5f245cc4a0255c9522a223e2271b62b57578f851e94972ab4656489931884378ce5eadf60526f9d37ec3479bcb510a117690aa8023d6b55868fe377ffacea047a0d955630f2f53fd5e434779767bc4b4374eca66918e8fa2aa2a36e289ef897912899b2abcc58c9a48d65fd5d41b898f7a647e90dbf9fc8737ad771c02c706722ff752a0786c009b1903d6ebfa265028941ee96fbd60693e6da368f25a06d3094ae5283c5bb35e1d5ea9ec13c4e2e72036d5e072794e015de8105a3362de73d505ad7db9a601c59", 0xe6}], 0xa, &(0x7f0000001800)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r0, r0, 0xffffffffffffffff, r11]}}, @rights={{0x18, 0x1, 0x1, [r5, r3]}}, @rights={{0x1c, 0x1, 0x1, [r2, 0xffffffffffffffff, r4]}}, @cred={{0x1c, 0x1, 0x2, {r8}}}, @rights={{0x12, 0x1, 0x1, [r5]}}, @cred={{0x1c}}], 0xb8, 0x8004}}, {{&(0x7f00000018c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001e40)=[{&(0x7f0000002400)="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", 0x1000}, {&(0x7f0000001940)="0f5ff073f004f013bac7dc50a2abe648cd0f079361e97530c876f6fa1d9693629fd1dc6b05714905b5341cf17c60c6a8c957d401b9d52e89fd4bfa40b82800e5006c677fe4d2eb2016aa011ed425a02d3b0c727a9ccdfab452c237e6c5c0d38a8930fdc2710ae363180228a17af1e06b26c7321cbdee177934d9f894e2ec7c3d6ce92de74b08e972c350213fdfea624bb84cf4936922e14d2fcfde00d8f2f3ac20b479d8e32a6c083304906a71548c17809eba0801e5d7cd83779e1c9ea1536620a1c8493737e92d5a19c76767fa2525e6d1637adee361b19de15d4c654e90f12f4d974c9ab13151685e624787a1236372afe64387767801eed22f1112", 0xfd}, {&(0x7f0000001a40)="c4e2573a71e5c994000943f5ae838574c0d84e6af5cb6647bb3b398e2100b58902932e70d28cf18f8b26bfb037bc7b887fdc216d096a41191c1fc1c8b54249639f", 0x41}, {&(0x7f0000001ac0)="aae9e1ac316be976c3c6a26fe4ef924a518c64371813e13bbff6a7adfbdc76", 0x1f}, {&(0x7f0000001b00)="f23853fdf00c6002d17656d4f6f72e9c23e130d92a4339aaeed60ed7cc7b6c3a", 0x20}, {&(0x7f0000001b40)="1f9adaa3f3b04429c51b3e86d6f7111ac67810ce60a51d414d7161d7d08c8eabdf8bf4e5f9833bb88de07e146ae038d021c75e623b305bf02e0e9c466237851d4bcfee12cf77251460ce608c36640f0d2ca0df3d9ca1564aaa837c70e092bd50ec32a6f5a123fa67a5dc1c7ede32407e1623d85badca74ed5453f97f8dcf528c70da9b57a86d5aa18f7af0b4457f6b7a854dd112f90805e46656b9ee3611fa1cfa69e74100cf8e719a", 0xa9}, {&(0x7f0000001c00)="30515620e0df8bead3297793b61461142169c81bef9cefdf572e440da7d13daf40fe6166fbe752918bc4b2cfd463834f429f1ffff46383e6a53e75bd036fd8698151baae4af80da3f36570473240fc6877a2d9154dcba7a4ff53b82de2d985509bc3c42fa45f5302a3d9b0b19045001071f60ebc1ce44c356f8ee12ab4c80d2fd185df50e2c651b4b9830c6bb6505288f8cdf83bf8c3425043a75622234acb8b5edb6c5e16e0b1db8f0de40f41481a6976a928602f6c7fcaa0e75aa23f", 0xbd}, {&(0x7f0000001cc0)="512dc18c2fec0a99e94d44afe17ec047eae666450f80942ce8c44a12a75c54de575a53ca2a8d793cab0e8dfb6ad9b1279d73da8442edb4cb371eefd747e0349c4fe8aedb7946ce35d1f1ffdc09e6809cef81b9b58228672c0d379c267afa9bd88d23579b4a01af58cd99f22665e2432379d5fe6aa9f095d516ff858a1e3f584eb58a5b5b398385839b2e4108ec7442645b10dce16dfa2fca1f7ce44d699f49", 0x9f}, {&(0x7f0000001d80)="bff8d61680e9ed63f2e6db01846f3247f52f191a2219a512bda044da968c75a90e229d57a343dd1d8abda134d42e2109d9dc41ef2654852fdae161ad7eefacd9fed1663cfcec3f19b52eee9eb7055241848bf8f083a58bd436aa2a80cef06188c4efd83f3be070bd29a813a015bd2cdfd9a11823d1041c2405d18f5f922a2723b7880d6de2d05d43b5792144a3b716dc", 0x90}], 0x9, 0x0, 0x0, 0x2004c044}}, {{&(0x7f0000001f00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002080)=[{&(0x7f0000001f80)="3000d0d85a8314f68224f079737929a8dfafc875e55957c5273b82a1559688a3e44f84b87a038ede1ce3ebe0d72d8f5fafa755c420c485532aa0dbefd73173b6b131bcc1f9e503f3960f9b61cab46acf72abaf95c6f5d71831709ab819b1c46e93aef0166babaede57e29203c72ad92b94a80385213e498252da8d2d799d567fdcb823d44f931abaf5770c225d15f59186ef4c9c0de0fc3ff747980774ef52c9167128ea4cf3277e3b85c6ef2a9040e67044e0d32574aa6f51e7de7120cfe6430b30bc676ad78b87298fbb22e2e88b", 0xcf}], 0x1, &(0x7f0000002140)=[@rights={{0x20, 0x1, 0x1, [r9, r11, r4, r0]}}, @rights={{0x18, 0x1, 0x1, [r11, r10]}}, @rights={{0x34, 0x1, 0x1, [r9, r3, r11, 0xffffffffffffffff, r9, 0xffffffffffffffff, r2, r5, r11]}}, @rights={{0x20, 0x1, 0x1, [r10, r10, r3, r0]}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, r4, r9]}}], 0xb8, 0x4000}}, {{&(0x7f0000002200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000036c0)=[{&(0x7f0000002280)="0d73d471b378b27bf9b46f8c177866a681507b3c0c415f967e2ca82a21c657596e6d0ad0", 0x24}, {&(0x7f0000003400)="0f5e38e89475884592113d8a7528ec64cb79942e7b61bcddf8deda44388d71ecd6b88df45bf0417e07a5502c430478136dcd8dd65ed9fa1c5e9ae8a69b93ff9536b6a566f22c1f96acf392407a0c8fcf33dcd4a7e4879a49af5fc10cd1fc8c29977c96fa7884eaf8afe68b904e2146943adecc49701fee7a8f00cd7d9d4fc114a89ed4f5302f2aefbfab413ad113fb9703d0fba47f2e1d8b5921a5642c64d5a10a88df274e918eca8456249f7ea6babcd4babaca0886e38d3fff01cf3536ca82c4ff084c7986777d", 0xc8}, {&(0x7f00000022c0)="344aa3d3", 0x4}, {&(0x7f0000002300)="3380b8927df210b32174e18a2688cb152400b07243b6380510d74ef5403cd738e7afd30fc1d33234799f75209cd264cbea5b12b0c070be2e3ea74da9e5565684839db48df9b0defc6bffc364170ffd82b4842b98dad09deb240c7532c6a3ddd1e7e665a8b09d", 0x66}, {&(0x7f0000003500)="f2adefdaf6c38a54deabf091c8c538f00a6288120b0ca89bb9a14cdeb237a1d5bed602d2038151c1c59dc3b0bcd3a5ee262f26085e3cc0f239afd50670995a75cd6f283299ea6667fae0a344f05a143201ee6fee3fe198d56d08be809ba0e7181edc8299ed97e3600e6a07b8a6257797f9fee984dea99404b59e198152e70fc3f7c876997403c1078b4777bc08a2bfd8b614a5d8e3ea1327d5fadac60396dfcfbf7fd3e1e45420abb9350101d7ba5db2df654cdffdcb2846ebc2626edee421c40ce948585bf583824077d8a17572fd9780495f8e3f1fcc02158defc1bd6a1a3928cca9c8834738", 0xe7}, {&(0x7f0000003600)="0e493d85b045536362be6e8eeaf5ccaec5a2fedd10c095c0eee5429c914073fedd0f561e384924ffee4e7175f0327fff7248ea373342c1ffb850226a4591302e2a9271c4752b4be6c2679e7d157f3d265aa1a89baee926b4a113df17cab54e29f1540e15e987b8d2e83c9f67783cc6d3dbc0a38b42bace95ed0425f586fec79a27552c8f3227922b6b52cdc96b8b459605506705e68469f68b121c5b408e7d3a8811313972a011180e0ad353cf0a", 0xae}], 0x6, &(0x7f00000077c0)=[@cred={{0x1c, 0x1, 0x2, {r8}}}, @rights={{0x1c, 0x1, 0x1, [r0, r11, r6]}}, @cred={{0x1c, 0x1, 0x2, {r8}}}], 0x60}}, {{&(0x7f0000007840)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000007d80)=[{&(0x7f00000078c0)="a7a3f6bb49aef21300d684b540354bc89b96c2447050aa152ece7317d5d39a9a1bde64289ecdba14e263a8e28bd0a1f0616bf1ceb736ea3bf1d8deab6f605004df147f7e4dfc616b285f979bbd2ca7746c6eb3eb740e87d26b21db1b3afaee1445af41cbba78c84158337ba6e83a9323e954c90393c3225215915be9fc48270799ddf200acc22aed9e21234409e446c30ac8f4c34096424fe0f4d1e90be9ed89976078a4a057990e830f5e9a08e3d42b730effd442693d518192c175545b1a5376c88b022c6736e47c45eee34877f5257cbf1482313113b7f5524a", 0xdb}, {&(0x7f00000079c0)="3157f56db64deb2d403dfdb21ffa766a9fd854de8677a347adaa7922838ec6461850181bbcbb096c5b086685bf14fddfbba3743a59e2655354392c27603ad1cb65904808e12ca079cd35498b7585611099f1e66f9f46a49fe42b1992096b0218e909d553febfeb3a98c4882fd9e591e1d8dd01a449872f7e946d82eb233c556705cbd64a104ef53ed52772", 0x8b}, {&(0x7f0000007a80)="feea2e91302d78f85492e7be8fe10d3d6428a83f55c6fdd18122d3f5a18ba26780c65fd8b966eef6cdeef9ef10a829498328f0f057664702f332b556d7a1c29eaedea628de23fcc11dcddab4a3bc1dd3e2ea0d1724adb6ea4d61336acb80db02e41d8af015bdd8b0473adbc280121fbf25f6f30285424ea926eccc3d8e9e9e351d662a15d5444bb3938cef6591280a60f08acb3a09e7866b4782201f21e2ad6dc58afd692d2b0c58c5fdd6c12beb2de54c2394a9295e0d49f39cd4be6d21261cdcd00c0b29156b7fec527220617221b7394d3dac7de6815527fa9ff1a44be14663e418632ccb9642", 0xe8}, {&(0x7f0000007b80)="ad86c1e0411a2bbd8081f86092352192944307a06472a130a061998f809fa05304f5e54f6bbb98844970945516c60fa6ca2138c4990d05180aab4695b4086c5ec5ce7f3712c8d1cb3eed39e53bf32e59224ea843e7752a9d5d5e0a51bc107a042078b3bcfd999df3ecd71feeb63ae60f33e71e63050d750ef76ceeb14aad70b349fc266ad84b0b2424cd08be857371287ae3a356", 0x94}, {&(0x7f0000007c40)="bafdcb79068f40693bac315f88aa1f0af0c1754ee8ec0b2d9a7375f0c31343c4b53f4909bbc9d485d3a2b1e35702c8e0dd7431b92e38c0fce2530619ce755d414910693de03f7a0653ca11b71335a70d270178df6256ac2d9070d2816d9721d825928a045e259cd4a51913", 0x6b}, {&(0x7f0000007cc0)="8d7c34307fe8879fae55e5fb3245d5de20d6cf32badbdbc5e68a5abfbca441722fd73279a943c52ffa6cd69c8f6b6ab07c55896bb90fdbf9b6aa3bbf5c2aa4c6b1f70fee5da90581eea030e6f4a865c8f3a0aecce236c014ba879bdb0e72e5994f7bf674a76f5947fae6a176580e9bbbe7c72f24194f18434921a49e15f55cc72eb6b563bd69c0326c816655d49e8eea9faae3de8bbbfe8b736d6139220decda52945b1163127c", 0xa7}], 0x6, &(0x7f000000a100)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r10, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5]}}, @cred={{0x1c, 0x1, 0x2, {r8}}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @rights={{0x1c, 0x1, 0x1, [r10, 0xffffffffffffffff, r6]}}, @cred={{0x1c, 0x1, 0x2, {r8}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r8}}}, @cred={{0x1c}}], 0x108, 0x4000000}}, {{&(0x7f000000a240)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f000000a580)=[{&(0x7f000000a2c0)="ce1b4020e4cbb2377e92caf200d204ba14dfbc8f9905fbb0a4a770b9b80c48e8fec87d96e0f4bf5d3c46f08d129c0a16104c22", 0x33}, {&(0x7f000000a300)="25a3a6d1bdc8c94150548aeb2c9bde874dcc49e2ae46b724833026af8f4cac8599550f5cf7b2feb537187abaeb2f0c9030e7529e1a40fc8e1e4b9ef5d5b69d0f4055bec8109edec15e0636c0af787140479ca9e9b252d8c9df47c49f699af2ff8af56ce558f0652200", 0x69}, {&(0x7f000000a380)="bd3f3291991bb237e61b77a196522651b35d4a2f0064cda189c67605549bf0c9b6bbd07db0ba54dc1ee0cc6d23522eee9b5b96db8495624909b4801c3b17973a452b02eded4bc40424b3d75dfe534cd488aa3e110781a975fe48b65d917c585c266fa64155d96e3588f3521299", 0x6d}, {&(0x7f000000a400)="ad37b5479700228a3824c0cf24419f4a34766b7d450861dea97cff1e4e8fd6a60c2c6196461781d42c52b737212c7ab0cd9cc69df689cdc1a591488494e77a6936244a62dde4b205e9e81ad24ffce8e83e5e5b08b54801528682ca727dcc28b503848b0052f7026c25fbd96da295f11c4e", 0x71}, {&(0x7f000000a480)="ccb8b7b0e41565e63d82d50a84245f1d2e552f7d6be59fdfa960f5bbbae464cf4164743a64130708e0e590500220c9ea462699c6499b4ac862e558cd699b28a22ca3964eaca38237da7ddec573d705342418460f2d49e99991845db94a68b16260bc149c0260b96f0c763f8ea6fbfb8bdafb051f240a10c0fac9e653eeec31f3e5a2b27c8ca3c739c8c86557e947778639bd989149217f738bd902d86f6f725e8b8073e88fae2f7056993fa08853e915b3bb2673e151b600f9e4f53bc59b911c181965fdfe4782575df18be4d84c8eb7b88e", 0xd2}], 0x5, &(0x7f000000a600)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x4008000}}], 0x7, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r12}, 0x10) r13 = io_uring_setup(0x7d2e, &(0x7f0000002380)={0x0, 0xffffffff, 0x1046}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r13, 0x12, 0x0, 0x0) r14 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r14, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) socket$nl_route(0x10, 0x3, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) 16.935838511s ago: executing program 6 (id=2694): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f00000013c0), 0x0}, 0x20) r1 = socket(0x10, 0x3, 0x6) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f00000001c0), &(0x7f0000000240)='%-5lx \x00'}, 0x20) r2 = socket(0x10, 0x3, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x38}, {0x0}], 0x2}) io_uring_enter(r3, 0x4d10, 0x2, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x1c, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0x1000}, @TCA_PIE_LIMIT={0x8, 0x2, 0x7f}, @TCA_PIE_ALPHA={0x8, 0x4, 0x3}]}}]}, 0x48}}, 0x20000000) 11.097951291s ago: executing program 2 (id=2695): syz_emit_ethernet(0x119, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x401c2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4b0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x4000000, 0x0, 0x1, 0x10d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) fchdir(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1}, 0x6e) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000003000)=@abs={0x1}, 0x4f) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f00000000c0)=@abs={0x1}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd=r1, 0x7, {0x0, r5}, 0x2}) read$msr(0xffffffffffffffff, &(0x7f00000000c0)=""/98, 0x62) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) 11.042969864s ago: executing program 1 (id=2696): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) rt_sigaction(0x1e, &(0x7f0000000080)={&(0x7f0000000200)="2437460f1c2bc4a2f99c9022000000c4a2f1002746c44179700d32233333a738e7c44240f29a3b470000a5c4c4a14d590c9736fe0d094e486ff5f5bb559a00000f75bed5370b1c2665d2950e000000db37", 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000300)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='stat\x00') lseek(r3, 0x9, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x24, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa8}}, 0x0) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000180)='./control\x00', 0x64000ba6) inotify_add_watch(r6, &(0x7f0000000180)='./control\x00', 0xa4000960) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)=0xffff0018) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getownex(r2, 0x10, &(0x7f0000000280)={0x0, 0x0}) sched_setparam(r8, &(0x7f00000002c0)=0xfffffc00) ioctl$PIO_UNISCRNMAP(r7, 0x4b46, &(0x7f00000000c0)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x3, 0xc, 0x101, 0x6, 0x7, 0x6b4, 0x510000000, 0x6, 0x40}, 0x0) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0) 10.974458723s ago: executing program 6 (id=2697): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8401, 0x16) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x26100, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x600, @loopback}, 0x1c) 10.892698915s ago: executing program 5 (id=2698): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000300)={@private2, 0x0}, &(0x7f0000000340)=0x14) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000540)={@ipv4={'\x00', '\xff\xff', @remote}, r3}, 0x14) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r5 = memfd_create(0x0, 0x3) setresgid(0x0, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x40, 0xbbba, 0x2, 0x0, 0x2, {}, {0x80004, 0x2}, {0x4004000}, {0x0, 0x8}, 0x2, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x800f, 0x2, 0xff, 0x80, 0x0, 0x11, 0x0, 0x0, 0x9}) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) fchdir(r4) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x14, r8, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe}, 0x14}}, 0x20) 10.89066812s ago: executing program 3 (id=2699): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000300)={@private2, 0x0}, &(0x7f0000000340)=0x14) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000540)={@ipv4={'\x00', '\xff\xff', @remote}, r3}, 0x14) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r5 = memfd_create(0x0, 0x3) setresgid(0x0, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x40, 0xbbba, 0x2, 0x0, 0x2, {}, {0x80004, 0x2}, {0x4004000}, {0x0, 0x8}, 0x2, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x800f, 0x2, 0xff, 0x80, 0x0, 0x11, 0x0, 0x0, 0x9}) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) fchdir(r4) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x14, r8, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe}, 0x14}}, 0x20) 8.782902569s ago: executing program 2 (id=2700): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e00000008000000040000000004000000010100", @ANYBLOB="040300000000000000d0000000000000000000005ace042300", @ANYRES32=r1, @ANYRES32, @ANYBLOB="0300000003000000050000000e00"/24, @ANYRES32, @ANYBLOB], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x2, 0x0, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0xffffffffffffffff, 0x1, &(0x7f00000003c0)=[&(0x7f0000ffd000/0x2000)=nil], 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000300014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40400c5}, 0x40004) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x22002, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@canfd={{0x3, 0x0, 0x0, 0x1}, 0x28, 0x0, 0x0, 0x0, "e246ee5e1a8a0e0042ff0f0000f199e1a984f14bc933440f0000000000000067bbbb5475018ab6927f2778bfc1000000f500"}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x840) ioctl$FBIOBLANK(r7, 0x4611, 0x2) socket$kcm(0xa, 0x3, 0x87) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01f71800000000000000240000002400000002000000000000000000000400000003000000000000000000000000000000000000000d02"], 0xffffffffffffffff, 0x3e, 0x0, 0xa}, 0x28) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x7, 0xd, 0x3, 0x4, 0x6, 0xade2}, {0xa, 0x5, 0x2, 0x7fffffff, 0x6, 0x2}], ['\x00']}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000280)="df", 0x0, 0x2}, 0x20) 8.726301996s ago: executing program 5 (id=2701): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000300)={@private2, 0x0}, &(0x7f0000000340)=0x14) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000540)={@ipv4={'\x00', '\xff\xff', @remote}, r3}, 0x14) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) setresgid(0x0, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x40, 0xbbba, 0x2, 0x0, 0x2, {}, {0x80004, 0x2}, {0x4004000}, {0x0, 0x8}, 0x2, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x800f, 0x2, 0xff, 0x80, 0x0, 0x11, 0x0, 0x0, 0x9}) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) fchdir(r4) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x14, 0x0, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe}, 0x14}}, 0x20) 8.655199123s ago: executing program 3 (id=2702): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x48081) shutdown(0xffffffffffffffff, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'macvlan1\x00', 0x0}) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000040)={@private1={0xfc, 0x1, '\x00', 0x1}, r2}, 0x14) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0xfffc, 0x7, @empty, 0x200}, 0x1c) setsockopt(r3, 0x1, 0x9, &(0x7f0000000040), 0x29) 8.545412521s ago: executing program 6 (id=2703): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x3232, 0x100, 0x0, 0x3de}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r3], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x400000080001001, 0x0, 0x0, 0x22}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, &(0x7f0000000100)={0x1, 0x0, [0x5, 0x3, 0x15b7, 0x40, 0x5, 0x100, 0x40, 0x1]}) 7.429717735s ago: executing program 5 (id=2704): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x4001, 0x0) ioctl$COMEDI_RANGEINFO(r0, 0x80106408, &(0x7f0000000140)={0x9, 0x0}) 6.827507806s ago: executing program 3 (id=2705): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = epoll_create1(0x0) r5 = userfaultfd(0x80801) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, 0x0) epoll_pwait2(r4, &(0x7f0000000280)=[{}], 0x1, &(0x7f0000000300)={0x0, 0x989680}, 0x0, 0x0) 6.674268166s ago: executing program 5 (id=2706): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e00000008000000040000000004000000010100", @ANYRES32=0x1, @ANYBLOB="040300000000000000d0000000000000000000005ace0423", @ANYRES32=r1, @ANYRES32, @ANYBLOB="0300000003000000050000000e00"/24, @ANYRES32, @ANYBLOB], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x2, 0x0, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0xffffffffffffffff, 0x1, &(0x7f00000003c0)=[&(0x7f0000ffd000/0x2000)=nil], 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000300014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40400c5}, 0x40004) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x22002, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@canfd={{0x3, 0x0, 0x0, 0x1}, 0x28, 0x0, 0x0, 0x0, "e246ee5e1a8a0e0042ff0f0000f199e1a984f14bc933440f0000000000000067bbbb5475018ab6927f2778bfc1000000f500"}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x840) ioctl$FBIOBLANK(r7, 0x4611, 0x2) socket$kcm(0xa, 0x3, 0x87) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01f71800000000000000240000002400000002000000000000000000000400000003000000000000000000000000000000000000000d02"], 0xffffffffffffffff, 0x3e, 0x0, 0xa}, 0x28) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x7, 0xd, 0x3, 0x4, 0x6, 0xade2}, {0xa, 0x5, 0x2, 0x7fffffff, 0x6, 0x2}], ['\x00']}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000280)="df", 0x0, 0x2}, 0x20) 6.02499848s ago: executing program 2 (id=2707): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = open(0x0, 0x145142, 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, 0x0, 0x0, r1) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0, 0x0, 0xd}, 0x18) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) sendmmsg$unix(r10, &(0x7f000000a640)=[{{&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000340)="18032c6eaec9f21d997288bcb6685d62cea842ea6f75e4d82d3277d79223361fc6a63fa9fb2356", 0x27}, {&(0x7f00000003c0)="ac99b464f40b7a3268462fd6046c5419a5d5f412c29ea1e8a25789", 0x1b}, {&(0x7f00000004c0)="9bf8543e0317cd09989c8bb6f1aee241ef82824a3796c3d7e44f9be0cddb16033fda51d83c1430608ad08a1aa59b9b471ea825db8746350abc375a6863cb83818bebe5293d210dcb40c0fe71824869c543c714125b664951a528ef01cdb91cd665f4a8000b0f6c1b7033775e53c9dbf24a37", 0x72}, {&(0x7f0000000400)="140934", 0x3}, {&(0x7f0000000580)="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", 0xfe}, {&(0x7f0000000680)="e9605d1bf768a01675779ca54fbb6ddd1ddc0dc2a5b4744bd82f5dc528ff4df21c61cadd0a5a0cdbf0d44bc91821c44c6c71516f798f852c6ca3ae6def9eb1fbff1be559618caef49d8f742d0db3628fab355b256481f037fef1e610ee80cd4c8f3914056661e111380a6ea46c27003b4c21c638ae722261b4c1cfa40a847d4fcb97243e66ca90f3fd5a58117dd5f1139cb886447a34f2648ce6cb963062489381e29b20cd774bd7ebb95312e5428aa69aac57e2ce6e737207d49772022f3c41d1e51aebf12c9e681e4b914580a7013a2c08589394193ea736", 0xd9}, {&(0x7f0000000780)="a342672f3770540944a9c677c3d509efad68d107e91b479fe31e0239e5facae41593ed6a19498439ef6d32b935fc1e4eedca0e2c7485a77bc41c43285cab8259ddaa24d0a9a15e98ae8adeb26de6fb9d862770d03a86260da41e6d68413925f1f2082392068847b7632290913cd8be1fa166fd05c4db0e2f919c9cb208a6c394440bba67d443b4baed4eeb93c9501439d5df4be89502a2550d5e04156c2e3fe2b037f58ea0a27f50099d55", 0xab}, {&(0x7f0000000840)="4540b126b6d17376850fe2f67bdc4864a030c510a42d", 0x16}, {&(0x7f0000000880)="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", 0xfc}, {&(0x7f0000000980)="d0e69b91eb196cbc91aee327a04f62d8fb60b7e15005c1a3328329c9b0254d0cba3cef8df8ed4ae8dfafc590ecb6360e659932b32cfc3e3603cb0fb6ced17d289b269e2c451c78d6731387ad64dc00514735fce90426a716", 0x58}], 0xa, &(0x7f0000000cc0)=[@rights={{0x30, 0x1, 0x1, [r0, r10, r0, 0xffffffffffffffff, r3, r6, r6, r10]}}, @cred={{0x1c, 0x1, 0x2, {r8}}}, @cred={{0x1c, 0x1, 0x2, {r8}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88, 0x800}}, {{&(0x7f0000000d80)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001640)=[{&(0x7f0000000e00)="9af4a3641c8acb90e6bb1e8c59b55f6f36888c95138377b4f1c588414702377e1c19088e80190739232cdae1b2fc87384e03b9c1493cc046d647e1142f10d78a817125b7531e59aba8b62fd3552f9e1050f52b9d6935d43cd7ee999f71218c91624efb8ba96b82001a4353fd50d43a3e35cfe2682bec0e98935d2860bbd24cbb98870b0302cec6448acd222ae97c5bc58de46793e4f4de9e6ff3699869bf9b7931f9ced777a0c958dbe9346e696c2880326371fe7624ce67ac830936aa66549bd71a34c7cda396", 0xc7}, {&(0x7f0000000f00)="53c9f7d432312c38c1ddbd2f2da879a67f1a8c88aabc555ecb6f06903a4a4edbc4cd0789012092354b6d980b43a187a376d3569971034b4a6637406d12152b35dcfba4089b11e1d4ea8c1c14e2cf056b1c1d7f6aae3fff004b0aac98b85717127b759a18e9d3100733754a11c7ea61c37c3dbaae5c3f199e097a647cc0e910866d2f21e94cc617795f6fa032cd1f3b946d65e2bac8d1c37df169d46c00e3f3a5bf16c70d472abea86b74621d7e09ae7f20534e970a36283af68a7f765fc066afd864aa996c089f", 0xc7}, {&(0x7f0000001000)="bf1dc6135e15f5670769010774c3efdcdde74dc7510b06cb515fcfcb573e3fa4a7bc6acd640d374ee0b0015da24fdb1cbc892f32375f800e3fcc99af837214f1838148d605dd1319e6819e14f70d8b5f02e444df9472051fb1c6157c01eed622dc5473036ca39030d9a44424fced44081a973400150936ef74d04e5551605211f5030a77bf1f42ca6a118d662f6350199cc5fe42f70cf6076429dfcaaf1f06e646e2be53347ff80d7123796c0c54fbf2a59be78188f03810554d970ce18eb85f4f4184235ec1cb961e83b1e7bbbade7bfa6bc3b4da5921c61b412aff5a501205ed4b20f2a87be7", 0xe7}, {&(0x7f0000001100)="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", 0xff}, {&(0x7f0000001200)="ffa55abe9da5a2380424f1821f03d39c6c773c81fd5553b766b3c61b81ac15e9f7435c5fbb8629ccbb", 0x29}, {&(0x7f0000001240)="f1c1473c67d9342d25d438040336f4cb0560773dcfee0a35c5129416ca750272853409afda84c72b058e336b03310b591e2d511870220f387c688b887168c46ad54d942706d6773535865d24e8998f0f669749bbeee83b7e57a1a8d4c0d9c95ccdad189785b5746d0a2d74105c24eff2aa9e60c8c6638aa8445d1a3640032d7faeef78f0988477aba1fd628522522ccebb3db13ac62a5042f38da902eaed96d94aa58be723ff9e6b61ea849ab0c02926a5db983ff9e660dc2b31e851785cee385ff71ba244a959bafcd7da16cf9b0627822c20c4f60cbee3bf8f1e33d517fedcca109431", 0xe4}, {&(0x7f0000000ac0)="a0a15bf9d7b7fc3162a5986fdff1686ae11ce5d7dca89ec31b6919b9f777b0a3aca140aa878e870c9667a3a803f745552f99e889125e24fc0f0d2f5fd18de1f4f781e6053d92b27d1c7211994e76107056955c3069f464045b2fee868bfa6b62d677399d93d0357039ebfa3a0eec93c97d4efef426b2d1e426b6e0e9465c50414d2f7bc55ec06b51b63bbf", 0x8b}, {&(0x7f0000001400)="4f9e8497c8b285c866ab120d9ad48c4e7f6a9372651faa97003f0e0a3620b07f0e9c37f466d006ad2a4fc20f0269aa99679aa42375427c00f55c74268aec01b7e94d61110d38723bc2bac628ca5220ade4a18dc529126b70b83d4401cc1d8b296cc80d467c1b1929b7d4a5c5c4e5bfb4371a07ad2d0707a9fc9a8eebb044bdacd8130221cf6828d003fdc7d6e8a51136b4fc67ca5953fcdb6b2e6de1bafc0f3f3ca96f0ff7f003c24bf8aa50fc3564a83e3fe50bd4b1a90ad5c52dd98e595e76e8a0929d241e096283349d1f45ae05c6b3916dabe913971dba80850844d77ecf56cb1e5da0055909481a", 0xea}, {&(0x7f0000001500)="36a1e721c1ee528702f75da69ce9862d1db83566850660c49290d4c2ddd7eb446eb9b7b27aa413ca33b5b6d3bfca405fb245af", 0x33}, {&(0x7f0000001540)="fcfded91135b6b155b9f5d2787f644d1be518bb9a03c39b55959bd5892d4e5f245cc4a0255c9522a223e2271b62b57578f851e94972ab4656489931884378ce5eadf60526f9d37ec3479bcb510a117690aa8023d6b55868fe377ffacea047a0d955630f2f53fd5e434779767bc4b4374eca66918e8fa2aa2a36e289ef897912899b2abcc58c9a48d65fd5d41b898f7a647e90dbf9fc8737ad771c02c706722ff752a0786c009b1903d6ebfa265028941ee96fbd60693e6da368f25a06d3094ae5283c5bb35e1d5ea9ec13c4e2e72036d5e072794e015de8105a3362de73d505ad7db9a601c59", 0xe6}], 0xa, &(0x7f0000001800)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r0, r0, 0xffffffffffffffff, r11]}}, @rights={{0x18, 0x1, 0x1, [r5, r3]}}, @rights={{0x1c, 0x1, 0x1, [r2, 0xffffffffffffffff, r4]}}, @cred={{0x1c, 0x1, 0x2, {r8}}}, @rights={{0x12, 0x1, 0x1, [r5]}}, @cred={{0x1c}}], 0xb8, 0x8004}}, {{&(0x7f00000018c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001e40)=[{&(0x7f0000002400)="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", 0x1000}, {&(0x7f0000001940)="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", 0xfd}, {&(0x7f0000001a40)="c4e2573a71e5c994000943f5ae838574c0d84e6af5cb6647bb3b398e2100b58902932e70d28cf18f8b26bfb037bc7b887fdc216d096a41191c1fc1c8b54249639f", 0x41}, {&(0x7f0000001ac0)="aae9e1ac316be976c3c6a26fe4ef924a518c64371813e13bbff6a7adfbdc76", 0x1f}, {&(0x7f0000001b00)="f23853fdf00c6002d17656d4f6f72e9c23e130d92a4339aaeed60ed7cc7b6c3a", 0x20}, {&(0x7f0000001b40)="1f9adaa3f3b04429c51b3e86d6f7111ac67810ce60a51d414d7161d7d08c8eabdf8bf4e5f9833bb88de07e146ae038d021c75e623b305bf02e0e9c466237851d4bcfee12cf77251460ce608c36640f0d2ca0df3d9ca1564aaa837c70e092bd50ec32a6f5a123fa67a5dc1c7ede32407e1623d85badca74ed5453f97f8dcf528c70da9b57a86d5aa18f7af0b4457f6b7a854dd112f90805e46656b9ee3611fa1cfa69e74100cf8e719a", 0xa9}, {&(0x7f0000001c00)="30515620e0df8bead3297793b61461142169c81bef9cefdf572e440da7d13daf40fe6166fbe752918bc4b2cfd463834f429f1ffff46383e6a53e75bd036fd8698151baae4af80da3f36570473240fc6877a2d9154dcba7a4ff53b82de2d985509bc3c42fa45f5302a3d9b0b19045001071f60ebc1ce44c356f8ee12ab4c80d2fd185df50e2c651b4b9830c6bb6505288f8cdf83bf8c3425043a75622234acb8b5edb6c5e16e0b1db8f0de40f41481a6976a928602f6c7fcaa0e75aa23f", 0xbd}, {&(0x7f0000001cc0)="512dc18c2fec0a99e94d44afe17ec047eae666450f80942ce8c44a12a75c54de575a53ca2a8d793cab0e8dfb6ad9b1279d73da8442edb4cb371eefd747e0349c4fe8aedb7946ce35d1f1ffdc09e6809cef81b9b58228672c0d379c267afa9bd88d23579b4a01af58cd99f22665e2432379d5fe6aa9f095d516ff858a1e3f584eb58a5b5b398385839b2e4108ec7442645b10dce16dfa2fca1f7ce44d699f49", 0x9f}, {&(0x7f0000001d80)="bff8d61680e9ed63f2e6db01846f3247f52f191a2219a512bda044da968c75a90e229d57a343dd1d8abda134d42e2109d9dc41ef2654852fdae161ad7eefacd9fed1663cfcec3f19b52eee9eb7055241848bf8f083a58bd436aa2a80cef06188c4efd83f3be070bd29a813a015bd2cdfd9a11823d1041c2405d18f5f922a2723b7880d6de2d05d43b5792144a3b716dc", 0x90}], 0x9, 0x0, 0x0, 0x2004c044}}, {{&(0x7f0000001f00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002080)=[{&(0x7f0000001f80)="3000d0d85a8314f68224f079737929a8dfafc875e55957c5273b82a1559688a3e44f84b87a038ede1ce3ebe0d72d8f5fafa755c420c485532aa0dbefd73173b6b131bcc1f9e503f3960f9b61cab46acf72abaf95c6f5d71831709ab819b1c46e93aef0166babaede57e29203c72ad92b94a80385213e498252da8d2d799d567fdcb823d44f931abaf5770c225d15f59186ef4c9c0de0fc3ff747980774ef52c9167128ea4cf3277e3b85c6ef2a9040e67044e0d32574aa6f51e7de7120cfe6430b30bc676ad78b87298fbb22e2e88b", 0xcf}], 0x1, &(0x7f0000002140)=[@rights={{0x20, 0x1, 0x1, [r9, r11, r4, r0]}}, @rights={{0x18, 0x1, 0x1, [r11, r10]}}, @rights={{0x34, 0x1, 0x1, [r9, r3, r11, 0xffffffffffffffff, r9, 0xffffffffffffffff, r2, r5, r11]}}, @rights={{0x20, 0x1, 0x1, [r10, r10, r3, r0]}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, r4, r9]}}], 0xb8, 0x4000}}, {{&(0x7f0000002200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000036c0)=[{&(0x7f0000002280)="0d73d471b378b27bf9b46f8c177866a681507b3c0c415f967e2ca82a21c657596e6d0ad0", 0x24}, {&(0x7f0000003400)="0f5e38e89475884592113d8a7528ec64cb79942e7b61bcddf8deda44388d71ecd6b88df45bf0417e07a5502c430478136dcd8dd65ed9fa1c5e9ae8a69b93ff9536b6a566f22c1f96acf392407a0c8fcf33dcd4a7e4879a49af5fc10cd1fc8c29977c96fa7884eaf8afe68b904e2146943adecc49701fee7a8f00cd7d9d4fc114a89ed4f5302f2aefbfab413ad113fb9703d0fba47f2e1d8b5921a5642c64d5a10a88df274e918eca8456249f7ea6babcd4babaca0886e38d3fff01cf3536ca82c4ff084c7986777d", 0xc8}, {&(0x7f00000022c0)="344aa3d3", 0x4}, {&(0x7f0000002300)="3380b8927df210b32174e18a2688cb152400b07243b6380510d74ef5403cd738e7afd30fc1d33234799f75209cd264cbea5b12b0c070be2e3ea74da9e5565684839db48df9b0defc6bffc364170ffd82b4842b98dad09deb240c7532c6a3ddd1e7e665a8b09d", 0x66}, {&(0x7f0000003500)="f2adefdaf6c38a54deabf091c8c538f00a6288120b0ca89bb9a14cdeb237a1d5bed602d2038151c1c59dc3b0bcd3a5ee262f26085e3cc0f239afd50670995a75cd6f283299ea6667fae0a344f05a143201ee6fee3fe198d56d08be809ba0e7181edc8299ed97e3600e6a07b8a6257797f9fee984dea99404b59e198152e70fc3f7c876997403c1078b4777bc08a2bfd8b614a5d8e3ea1327d5fadac60396dfcfbf7fd3e1e45420abb9350101d7ba5db2df654cdffdcb2846ebc2626edee421c40ce948585bf583824077d8a17572fd9780495f8e3f1fcc02158defc1bd6a1a3928cca9c8834738", 0xe7}, {&(0x7f0000003600)="0e493d85b045536362be6e8eeaf5ccaec5a2fedd10c095c0eee5429c914073fedd0f561e384924ffee4e7175f0327fff7248ea373342c1ffb850226a4591302e2a9271c4752b4be6c2679e7d157f3d265aa1a89baee926b4a113df17cab54e29f1540e15e987b8d2e83c9f67783cc6d3dbc0a38b42bace95ed0425f586fec79a27552c8f3227922b6b52cdc96b8b459605506705e68469f68b121c5b408e7d3a8811313972a011180e0ad353cf0a", 0xae}], 0x6, &(0x7f00000077c0)=[@cred={{0x1c, 0x1, 0x2, {r8}}}, @rights={{0x1c, 0x1, 0x1, [r0, r11, r6]}}, @cred={{0x1c, 0x1, 0x2, {r8}}}], 0x60}}, {{&(0x7f0000007840)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000007d80)=[{&(0x7f00000078c0)="a7a3f6bb49aef21300d684b540354bc89b96c2447050aa152ece7317d5d39a9a1bde64289ecdba14e263a8e28bd0a1f0616bf1ceb736ea3bf1d8deab6f605004df147f7e4dfc616b285f979bbd2ca7746c6eb3eb740e87d26b21db1b3afaee1445af41cbba78c84158337ba6e83a9323e954c90393c3225215915be9fc48270799ddf200acc22aed9e21234409e446c30ac8f4c34096424fe0f4d1e90be9ed89976078a4a057990e830f5e9a08e3d42b730effd442693d518192c175545b1a5376c88b022c6736e47c45eee34877f5257cbf1482313113b7f5524a", 0xdb}, {&(0x7f00000079c0)="3157f56db64deb2d403dfdb21ffa766a9fd854de8677a347adaa7922838ec6461850181bbcbb096c5b086685bf14fddfbba3743a59e2655354392c27603ad1cb65904808e12ca079cd35498b7585611099f1e66f9f46a49fe42b1992096b0218e909d553febfeb3a98c4882fd9e591e1d8dd01a449872f7e946d82eb233c556705cbd64a104ef53ed52772", 0x8b}, {&(0x7f0000007a80)="feea2e91302d78f85492e7be8fe10d3d6428a83f55c6fdd18122d3f5a18ba26780c65fd8b966eef6cdeef9ef10a829498328f0f057664702f332b556d7a1c29eaedea628de23fcc11dcddab4a3bc1dd3e2ea0d1724adb6ea4d61336acb80db02e41d8af015bdd8b0473adbc280121fbf25f6f30285424ea926eccc3d8e9e9e351d662a15d5444bb3938cef6591280a60f08acb3a09e7866b4782201f21e2ad6dc58afd692d2b0c58c5fdd6c12beb2de54c2394a9295e0d49f39cd4be6d21261cdcd00c0b29156b7fec527220617221b7394d3dac7de6815527fa9ff1a44be14663e418632ccb9642", 0xe8}, {&(0x7f0000007b80)="ad86c1e0411a2bbd8081f86092352192944307a06472a130a061998f809fa05304f5e54f6bbb98844970945516c60fa6ca2138c4990d05180aab4695b4086c5ec5ce7f3712c8d1cb3eed39e53bf32e59224ea843e7752a9d5d5e0a51bc107a042078b3bcfd999df3ecd71feeb63ae60f33e71e63050d750ef76ceeb14aad70b349fc266ad84b0b2424cd08be857371287ae3a356", 0x94}, {&(0x7f0000007c40)="bafdcb79068f40693bac315f88aa1f0af0c1754ee8ec0b2d9a7375f0c31343c4b53f4909bbc9d485d3a2b1e35702c8e0dd7431b92e38c0fce2530619ce755d414910693de03f7a0653ca11b71335a70d270178df6256ac2d9070d2816d9721d825928a045e259cd4a51913", 0x6b}, {&(0x7f0000007cc0)="8d7c34307fe8879fae55e5fb3245d5de20d6cf32badbdbc5e68a5abfbca441722fd73279a943c52ffa6cd69c8f6b6ab07c55896bb90fdbf9b6aa3bbf5c2aa4c6b1f70fee5da90581eea030e6f4a865c8f3a0aecce236c014ba879bdb0e72e5994f7bf674a76f5947fae6a176580e9bbbe7c72f24194f18434921a49e15f55cc72eb6b563bd69c0326c816655d49e8eea9faae3de8bbbfe8b736d6139220decda52945b1163127c", 0xa7}], 0x6, &(0x7f000000a100)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r10, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5]}}, @cred={{0x1c, 0x1, 0x2, {r8}}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @rights={{0x1c, 0x1, 0x1, [r10, 0xffffffffffffffff, r6]}}, @cred={{0x1c, 0x1, 0x2, {r8}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r8}}}, @cred={{0x1c}}], 0x108, 0x4000000}}, {{&(0x7f000000a240)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f000000a580)=[{&(0x7f000000a2c0)="ce1b4020e4cbb2377e92caf200d204ba14dfbc8f9905fbb0a4a770b9b80c48e8fec87d96e0f4bf5d3c46f08d129c0a16104c22", 0x33}, {&(0x7f000000a300)="25a3a6d1bdc8c94150548aeb2c9bde874dcc49e2ae46b724833026af8f4cac8599550f5cf7b2feb537187abaeb2f0c9030e7529e1a40fc8e1e4b9ef5d5b69d0f4055bec8109edec15e0636c0af787140479ca9e9b252d8c9df47c49f699af2ff8af56ce558f0652200", 0x69}, {&(0x7f000000a380)="bd3f3291991bb237e61b77a196522651b35d4a2f0064cda189c67605549bf0c9b6bbd07db0ba54dc1ee0cc6d23522eee9b5b96db8495624909b4801c3b17973a452b02eded4bc40424b3d75dfe534cd488aa3e110781a975fe48b65d917c585c266fa64155d96e3588f3521299", 0x6d}, {&(0x7f000000a400)="ad37b5479700228a3824c0cf24419f4a34766b7d450861dea97cff1e4e8fd6a60c2c6196461781d42c52b737212c7ab0cd9cc69df689cdc1a591488494e77a6936244a62dde4b205e9e81ad24ffce8e83e5e5b08b54801528682ca727dcc28b503848b0052f7026c25fbd96da295f11c4e", 0x71}, {&(0x7f000000a480)="ccb8b7b0e41565e63d82d50a84245f1d2e552f7d6be59fdfa960f5bbbae464cf4164743a64130708e0e590500220c9ea462699c6499b4ac862e558cd699b28a22ca3964eaca38237da7ddec573d705342418460f2d49e99991845db94a68b16260bc149c0260b96f0c763f8ea6fbfb8bdafb051f240a10c0fac9e653eeec31f3e5a2b27c8ca3c739c8c86557e947778639bd989149217f738bd902d86f6f725e8b8073e88fae2f7056993fa08853e915b3bb2673e151b600f9e4f53bc59b911c181965fdfe4782575df18be4d84c8eb7b88e", 0xd2}], 0x5, &(0x7f000000a600)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x4008000}}], 0x7, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r12}, 0x10) r13 = io_uring_setup(0x7d2e, &(0x7f0000002380)={0x0, 0xffffffff, 0x1046}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r13, 0x12, 0x0, 0x0) r14 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r14, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) socket$nl_route(0x10, 0x3, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) 5.005298714s ago: executing program 3 (id=2708): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$I2C_FUNCS(r1, 0x705, &(0x7f0000000040)=0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) close(r3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r3, r2, 0x0, r3}, 0x10) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = eventfd(0x5) r6 = eventfd(0x1) unshare(0x24020400) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000000)={r5, 0x8, 0x2, r6}) 3.814841982s ago: executing program 2 (id=2709): open_tree(0xffffffffffffff9c, 0x0, 0x89901) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x12, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="140000000000000029"], 0x18}}, {{&(0x7f00000003c0)={0xa, 0x4e22, 0xffffff02, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x81}, 0x1c, 0x0}}], 0x2, 0x4005c80) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r4, 0x3b8a, &(0x7f0000000300)={0x28, 0x0, r7, 0x1000, &(0x7f00000003c0)=""/4096}) ptrace(0x10, r3) 3.760148328s ago: executing program 6 (id=2710): socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_create_resource$binfmt(0x0) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000200)='.\x00', 0x449) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x14, &(0x7f0000000040)=0x6) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0xc0, 0x61) mount(&(0x7f0000000500)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0) inotify_add_watch(r1, &(0x7f0000000180)='./file1\x00', 0x2) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x200) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x1, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0x86, 0x4, 0x0, @loopback, @local}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000280)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', r5, 0x1, 0x7, 0x700000, 0x1, {{0x5, 0x4, 0x1, 0x3b, 0x14, 0x65, 0x0, 0x0, 0x2f, 0x0, @private=0xa010101, @broadcast}}}}) r6 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x80000006) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x29a382, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$dri(&(0x7f0000000480), 0x1, 0x20002) socket$kcm(0x2, 0x5, 0x84) 3.709187761s ago: executing program 5 (id=2711): syz_emit_ethernet(0x119, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x401c2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4b0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x4000000, 0x0, 0x1, 0x10d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) fchdir(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1}, 0x6e) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000003000)=@abs={0x1}, 0x4f) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f00000000c0)=@abs={0x1}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd=r1, 0x7, {0x0, r5}, 0x2}) read$msr(0xffffffffffffffff, &(0x7f00000000c0)=""/98, 0x62) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) 3.486313279s ago: executing program 3 (id=2712): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000300)={@private2, 0x0}, &(0x7f0000000340)=0x14) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000540)={@ipv4={'\x00', '\xff\xff', @remote}, r3}, 0x14) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r5 = memfd_create(0x0, 0x3) setresgid(0x0, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x40, 0xbbba, 0x2, 0x0, 0x2, {}, {0x80004, 0x2}, {0x4004000}, {0x0, 0x8}, 0x2, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x800f, 0x2, 0xff, 0x80, 0x0, 0x11, 0x0, 0x0, 0x9}) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) fchdir(r4) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x14, r8, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe}, 0x14}}, 0x20) 3.247875592s ago: executing program 2 (id=2713): r0 = socket$alg(0x26, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xe}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x7}]}}}]}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x24040800}, 0x44) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sync() r3 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0x211a, 0x0, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x2, r0, 0x0}) io_uring_enter(r3, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 1.921774282s ago: executing program 1 (id=2714): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000300)={@private2, 0x0}, &(0x7f0000000340)=0x14) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000540)={@ipv4={'\x00', '\xff\xff', @remote}, r3}, 0x14) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) setresgid(0x0, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x40, 0xbbba, 0x2, 0x0, 0x2, {}, {0x80004, 0x2}, {0x4004000}, {0x0, 0x8}, 0x2, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x800f, 0x2, 0xff, 0x80, 0x0, 0x11, 0x0, 0x0, 0x9}) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) fchdir(r4) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x14, 0x0, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe}, 0x14}}, 0x20) 1.913563802s ago: executing program 2 (id=2715): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x50, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'rose0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}]]}, 0x50}}, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}, {0x85, 0x0, 0x0, 0x2d}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r4}, 0xc) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddb357f7adf97affffffff7d1800"}) syz_open_pts(r6, 0x0) (async) ioctl$TCSETA(r6, 0x5406, &(0x7f0000000000)={0x6, 0x8000, 0x6, 0x1, 0x5}) ioctl$TIOCGPTPEER(r6, 0x5441, 0x0) r7 = dup(r6) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp, @sack_perm, @sack_perm, @window={0x3, 0x4, 0x7fff}, @timestamp, @sack_perm, @mss={0x2, 0x2}, @window={0x3, 0x8001, 0x101}], 0x8) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv4_delroute={0x44, 0x19, 0x901, 0x70bd29, 0x80, {0x2, 0x18, 0x10, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @private0}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) r9 = getpid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r9, 0x0, 0xee00}}}], 0x20, 0x8000}, 0x4000041) (async) syz_open_procfs(r9, &(0x7f0000000180)='cgroup\x00') (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r11}, &(0x7f0000000040), &(0x7f0000000140)=r10}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r11, &(0x7f00000000c0), 0x0}, 0x20) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) 1.424322773s ago: executing program 5 (id=2716): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000796412000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000106608000000001000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, 0x0, &(0x7f0000000240)) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mount(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000800), 0x161200, 0x0) openat$smackfs_ipv6host(0xffffff9c, 0x0, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x0, 0x0) sendfile(r2, r3, &(0x7f0000000000)=0x1, 0x7ff) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f00000018c0)=""/98, 0x62}], 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB='$'], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="540000001c000103000000000000000007000000", @ANYRES32=r6, @ANYBLOB="4000a6080a000200ffffffffffff0000bd57ebc394bd9fc51f2eb0cd4ce4e44ca49edfc64387d6e4169101755cb19021ea6fd27a763fe6e5f195892948bd9bb6458d6244b7c0ee46539c36b298ba17dd84903d5f1f54d4ec7a07d1b8444ea4386124d6e7c9e3f6a6463044e6d286f0b16e145adf137ae5a69e4b3635434a0659e261db85"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 1.234312033s ago: executing program 3 (id=2717): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000500)=ANY=[@ANYRESDEC], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='rxrpc_call\x00', r0}, 0x18) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f00000000c0)={0x1, 0x0, 0xffff17f2, 0xc}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000200)={&(0x7f0000000180)=[r3], &(0x7f00000001c0)=[0xfffffffffffffff7, 0x2], 0x1, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, &(0x7f0000000280)={r3, r4, 0xffffffffffffffff, 0x3, 0x1}) r5 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x12, r5, 0x0) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r6, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000001600010a00001000ca800c00a800f8"], 0x24}}, 0x0) sendmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r6, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) recvmsg$kcm(r6, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x12000) 636.95204ms ago: executing program 6 (id=2718): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000796412000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000106608000000001000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, 0x0, &(0x7f0000000240)) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mount(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000800), 0x161200, 0x0) openat$smackfs_ipv6host(0xffffff9c, 0x0, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x0, 0x0) sendfile(r2, r3, &(0x7f0000000000)=0x1, 0x7ff) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f00000018c0)=""/98, 0x62}], 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB='$'], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="540000001c000103000000000000000007000000", @ANYRES32, @ANYBLOB="4000a6080a000200ffffffffffff0000bd57ebc394bd9fc51f2eb0cd4ce4e44ca49edfc64387d6e4169101755cb19021ea6fd27a763fe6e5f195892948bd9bb6458d6244b7c0ee46539c36b298ba17dd84903d5f1f54d4ec7a07d1b8444ea4386124d6e7c9e3f6a6463044e6d286f0b16e145adf137ae5a69e4b3635434a0659e261db85"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 0s ago: executing program 1 (id=2719): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000796412000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000106608000000001000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, 0x0, &(0x7f0000000240)) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mount(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000800), 0x161200, 0x0) openat$smackfs_ipv6host(0xffffff9c, 0x0, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x0, 0x0) sendfile(r2, r3, &(0x7f0000000000)=0x1, 0x7ff) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f00000018c0)=""/98, 0x62}], 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB='$'], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="540000001c000103000000000000000007000000", @ANYRES32, @ANYBLOB="4000a6080a000200ffffffffffff0000bd57ebc394bd9fc51f2eb0cd4ce4e44ca49edfc64387d6e4169101755cb19021ea6fd27a763fe6e5f195892948bd9bb6458d6244b7c0ee46539c36b298ba17dd84903d5f1f54d4ec7a07d1b8444ea4386124d6e7c9e3f6a6463044e6d286f0b16e145adf137ae5a69e4b3635434a0659e261db85"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x8000) kernel console output (not intermixed with test programs): device number 37 [ 976.626658][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 976.626722][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 976.810575][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 977.524305][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 977.534120][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 977.551014][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 977.642318][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 977.698712][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.064150][T14019] netlink: 'syz.5.1987': attribute type 6 has an invalid length. [ 979.129055][ T10] usb 2-1: usb_control_msg returned -71 [ 979.174636][ T10] usbtmc 2-1:16.0: can't read capabilities [ 979.253479][ T10] usb 2-1: USB disconnect, device number 34 [ 980.007248][T14041] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1993'. [ 981.104822][T14047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1993'. [ 983.116970][T14063] netlink: 160720 bytes leftover after parsing attributes in process `syz.3.2000'. [ 983.585242][ T10] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 984.089557][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 984.451336][T14079] netlink: 160720 bytes leftover after parsing attributes in process `syz.0.2002'. [ 984.478874][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 984.536642][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 984.552136][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 984.579409][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 984.663229][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 984.704774][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.854265][T14083] batadv3: entered promiscuous mode [ 984.867793][T14083] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 984.878678][ T5903] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 986.022422][ T5903] usb 1-1: Using ep0 maxpacket: 8 [ 986.039759][ T5903] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 986.065662][ T10] usb 4-1: GET_CAPABILITIES returned 0 [ 986.071229][ T10] usbtmc 4-1:16.0: can't read capabilities [ 986.288520][T14090] netlink: 'syz.5.2006': attribute type 1 has an invalid length. [ 986.298853][T14090] trusted_key: encrypted_key: insufficient parameters specified [ 986.742852][ T5903] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 986.794174][ T10] usb 4-1: USB disconnect, device number 42 [ 986.950794][ T5903] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 987.114160][ T5903] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 987.182107][ T5903] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 987.217786][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.497980][ T5889] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 987.859623][ T5889] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 987.880740][ T5889] usb 3-1: config 0 has no interface number 0 [ 987.899638][ T5889] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 987.911377][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.953586][ T5889] usb 3-1: Product: syz [ 987.983664][ T5889] usb 3-1: Manufacturer: syz [ 988.008324][ T5889] usb 3-1: SerialNumber: syz [ 988.047439][ T5889] usb 3-1: config 0 descriptor?? [ 988.313808][ T5889] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 988.379618][ T5889] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 988.396795][T14105] input: syz0 as /devices/virtual/input/input33 [ 988.430044][ T5889] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 988.461881][ T5889] usb 3-1: media controller created [ 988.494629][ T5903] usb 1-1: can't set config #16, error -71 [ 988.550144][ T5903] usb 1-1: USB disconnect, device number 38 [ 988.580489][ T5889] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 988.592801][T14111] vxcan0: tx drop: invalid da for name 0x00000000000000f5 [ 989.363351][T14123] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 989.856918][ T5889] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 990.531662][ T5889] usb 3-1: USB disconnect, device number 40 [ 990.647125][T14132] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2018'. [ 992.790558][T14142] netlink: 'syz.2.2019': attribute type 1 has an invalid length. [ 992.799176][T14142] trusted_key: encrypted_key: insufficient parameters specified [ 995.453218][T14157] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 20, id = 0 [ 996.178237][T14156] netlink: 160720 bytes leftover after parsing attributes in process `syz.0.2023'. [ 996.459716][T14169] vxcan0: tx drop: invalid da for name 0x00000000000000f5 [ 996.551523][T14169] input: syz0 as /devices/virtual/input/input34 [ 996.808041][ T10] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 997.140525][T14176] netlink: 160720 bytes leftover after parsing attributes in process `syz.5.2021'. [ 997.189842][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 997.206442][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 997.231899][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 997.263592][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 997.309058][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 997.406918][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 997.422745][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.470845][ T5949] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 998.119108][ T10] usb 1-1: GET_CAPABILITIES returned 0 [ 998.130183][ T10] usbtmc 1-1:16.0: can't read capabilities [ 998.240457][ T5949] usb 6-1: Using ep0 maxpacket: 8 [ 998.255348][ T5949] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 998.265414][ T5949] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 998.283545][ T5949] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 998.305018][ T5949] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 998.329088][ T5949] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 998.350925][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 998.360143][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 998.369229][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 998.378502][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 998.387572][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 998.463077][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 998.472339][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 998.481628][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 998.503441][ T5949] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.504719][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 998.504783][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 998.504838][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 998.505068][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 998.505121][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 998.505191][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 998.505426][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 998.505489][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 998.736885][T14188] bridge0: entered allmulticast mode [ 999.057227][T14196] netlink: 'syz.3.2030': attribute type 1 has an invalid length. [ 999.066821][T14196] trusted_key: encrypted_key: insufficient parameters specified [ 999.961905][ T5889] usb 1-1: USB disconnect, device number 39 [ 1000.155010][ T5949] usb 6-1: usb_control_msg returned -71 [ 1000.160723][ T5949] usbtmc 6-1:16.0: can't read capabilities [ 1000.196909][ T5949] usb 6-1: USB disconnect, device number 29 [ 1001.436582][ T10] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1001.622409][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 1001.643886][ T10] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1001.655049][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.714421][ T10] usb 6-1: Product: syz [ 1001.735845][ T10] usb 6-1: Manufacturer: syz [ 1001.766363][ T10] usb 6-1: SerialNumber: syz [ 1001.804678][ T10] usb 6-1: config 0 descriptor?? [ 1001.850953][ T10] gspca_main: se401-2.14.0 probing 047d:5003 [ 1002.420355][ T10] gspca_se401: Frame size: 0x0 1/16th janggu [ 1002.426608][ T10] gspca_se401: Frame size: 0x0 1/16th janggu [ 1002.452642][ T10] gspca_se401: Frame size: 0x0 1/16th janggu [ 1002.481040][ T10] gspca_se401: Frame size: 1x0 bayer [ 1002.513525][ T10] gspca_se401: Frame size: 0x0 1/16th janggu [ 1002.546254][ T10] gspca_se401: Frame size: 0x0 1/16th janggu [ 1002.638935][ T10] input: se401 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input35 [ 1002.676979][ T10] usb 6-1: USB disconnect, device number 30 [ 1005.356494][T14241] netlink: 160720 bytes leftover after parsing attributes in process `syz.2.2039'. [ 1005.510876][ T10] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1005.514546][T14244] netlink: 'syz.0.2042': attribute type 1 has an invalid length. [ 1005.530571][T14244] trusted_key: encrypted_key: insufficient parameters specified [ 1006.396515][ T5949] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1006.523917][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1006.548503][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1006.632983][ T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1006.642794][ T5949] usb 3-1: Using ep0 maxpacket: 8 [ 1006.649194][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.657513][ T10] usb 6-1: Product: syz [ 1006.661783][ T10] usb 6-1: Manufacturer: syz [ 1006.666550][ T10] usb 6-1: SerialNumber: syz [ 1006.877715][ T5949] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1006.902582][ T5949] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1006.957684][ T5949] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1007.091421][ T5949] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1007.689731][ T5949] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1007.703001][ T5949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.947900][ T10] usb 6-1: USB disconnect, device number 31 [ 1008.094882][ T5845] libceph: connect (1)[c::]:6789 error -101 [ 1008.115405][ T5845] libceph: mon0 (1)[c::]:6789 connect error [ 1008.163171][T14165] udevd[14165]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1008.213473][ T5889] libceph: connect (1)[c::]:6789 error -101 [ 1008.235182][ T5889] libceph: mon0 (1)[c::]:6789 connect error [ 1008.249961][T14263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2047'. [ 1008.262983][T14263] bridge0: port 3(syz_tun) entered disabled state [ 1008.271087][T14263] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.278643][T14263] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.288150][T14263] bridge0: left allmulticast mode [ 1008.474862][ T5845] libceph: connect (1)[c::]:6789 error -101 [ 1008.481144][ T5845] libceph: mon0 (1)[c::]:6789 connect error [ 1008.517945][ T5889] libceph: connect (1)[c::]:6789 error -101 [ 1008.524976][ T5889] libceph: mon0 (1)[c::]:6789 connect error [ 1009.309917][ T10] libceph: connect (1)[c::]:6789 error -101 [ 1009.325472][ T5889] libceph: connect (1)[c::]:6789 error -101 [ 1009.343956][ T5889] libceph: mon0 (1)[c::]:6789 connect error [ 1009.368722][T14259] ceph: No mds server is up or the cluster is laggy [ 1009.452844][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1009.471620][T14255] ceph: No mds server is up or the cluster is laggy [ 1010.994143][ T5949] usb 3-1: can't set config #16, error -71 [ 1011.065369][ T5949] usb 3-1: USB disconnect, device number 41 [ 1012.036220][ T5845] IPVS: starting estimator thread 0... [ 1012.157838][T14288] IPVS: using max 48 ests per chain, 115200 per kthread [ 1013.016011][ T6477] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1013.420420][ T5903] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1014.317387][ T5903] usb 4-1: Using ep0 maxpacket: 8 [ 1014.337951][ T5903] usb 4-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 1014.368594][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.401837][ T5903] usb 4-1: Product: syz [ 1014.483368][ T5903] usb 4-1: Manufacturer: syz [ 1014.551403][ T5903] usb 4-1: SerialNumber: syz [ 1014.578548][ T5903] usb 4-1: config 0 descriptor?? [ 1015.081663][ T5903] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 1015.322854][ T5903] gspca_sn9c2028: read1 error -32 [ 1015.530475][ T5903] gspca_sn9c2028: read1 error -32 [ 1015.536342][ T5903] gspca_sn9c2028: read1 error 0 [ 1015.541290][ T5903] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -5 [ 1016.529696][T14315] vxcan0: tx drop: invalid da for name 0x00000000000000f5 [ 1016.539627][T14315] input: syz0 as /devices/virtual/input/input36 [ 1017.404208][ T5949] usb 4-1: USB disconnect, device number 43 [ 1017.457698][T14326] netlink: 160720 bytes leftover after parsing attributes in process `syz.5.2064'. [ 1018.111400][ T10] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1018.360836][T14331] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2066'. [ 1018.432822][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 1018.462623][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1018.513215][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1018.564583][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1018.630186][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1018.693502][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1018.715523][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.028048][ T10] usb 6-1: usb_control_msg returned -71 [ 1019.033823][ T10] usbtmc 6-1:16.0: can't read capabilities [ 1019.246122][ T6385] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1019.288036][ T10] usb 6-1: USB disconnect, device number 32 [ 1020.389477][T14354] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.2073'. [ 1021.373200][ T10] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1021.939914][ T10] usb 1-1: device descriptor read/64, error -71 [ 1022.206454][ T10] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1022.366680][ T10] usb 1-1: device descriptor read/64, error -71 [ 1022.506403][ T10] usb usb1-port1: attempt power cycle [ 1022.885371][T14369] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1023.125059][ T10] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1023.183269][ T10] usb 1-1: device descriptor read/8, error -71 [ 1023.633684][ T10] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1023.795698][ T10] usb 1-1: device descriptor read/8, error -71 [ 1023.918043][T14378] FAULT_INJECTION: forcing a failure. [ 1023.918043][T14378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1023.937861][ T10] usb usb1-port1: unable to enumerate USB device [ 1024.034375][ T5949] usb 2-1: new low-speed USB device number 35 using dummy_hcd [ 1024.072698][T14378] CPU: 0 UID: 0 PID: 14378 Comm: syz.5.2080 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1024.072727][T14378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1024.072738][T14378] Call Trace: [ 1024.072747][T14378] [ 1024.072755][T14378] dump_stack_lvl+0x189/0x250 [ 1024.072785][T14378] ? __pfx____ratelimit+0x10/0x10 [ 1024.072807][T14378] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1024.072830][T14378] ? __pfx__printk+0x10/0x10 [ 1024.072857][T14378] ? __might_fault+0xb0/0x130 [ 1024.072891][T14378] should_fail_ex+0x414/0x560 [ 1024.072915][T14378] _copy_from_user+0x2d/0xb0 [ 1024.072938][T14378] ___sys_sendmsg+0x158/0x2a0 [ 1024.072968][T14378] ? __pfx____sys_sendmsg+0x10/0x10 [ 1024.073038][T14378] ? __fget_files+0x2a/0x420 [ 1024.073058][T14378] ? __fget_files+0x3a0/0x420 [ 1024.073091][T14378] __x64_sys_sendmsg+0x19b/0x260 [ 1024.073124][T14378] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1024.073177][T14378] ? __pfx_ksys_write+0x10/0x10 [ 1024.073193][T14378] ? rcu_is_watching+0x15/0xb0 [ 1024.073222][T14378] ? do_syscall_64+0xbe/0x3b0 [ 1024.073249][T14378] do_syscall_64+0xfa/0x3b0 [ 1024.073268][T14378] ? lockdep_hardirqs_on+0x9c/0x150 [ 1024.073290][T14378] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.073309][T14378] ? clear_bhb_loop+0x60/0xb0 [ 1024.073334][T14378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.073353][T14378] RIP: 0033:0x7f4fb2b8ebe9 [ 1024.073371][T14378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1024.073389][T14378] RSP: 002b:00007f4fb0df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1024.073411][T14378] RAX: ffffffffffffffda RBX: 00007f4fb2db5fa0 RCX: 00007f4fb2b8ebe9 [ 1024.073425][T14378] RDX: 0000000000040000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1024.073439][T14378] RBP: 00007f4fb0df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1024.073451][T14378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1024.073463][T14378] R13: 00007f4fb2db6038 R14: 00007f4fb2db5fa0 R15: 00007fff527b43a8 [ 1024.073497][T14378] [ 1024.715667][ T5949] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1024.852244][ T5949] usb 2-1: config 0 has no interface number 0 [ 1024.997653][ T5949] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1025.076298][ T5949] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1025.129524][ T5949] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1025.177847][ T5949] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1025.355967][ T6385] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1025.716139][ T5949] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1025.797843][ T5949] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1025.956781][ T5949] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1026.224657][ T5845] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1027.066086][ T5845] usb 6-1: Using ep0 maxpacket: 8 [ 1027.071310][ T5949] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.126360][ T5845] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1027.141211][ T5949] usb 2-1: config 0 descriptor?? [ 1027.146397][ T5845] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1027.179032][ T5949] usb 2-1: can't set config #0, error -71 [ 1027.189653][ T5845] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1027.219688][ T5949] usb 2-1: USB disconnect, device number 35 [ 1027.232108][ T5845] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1027.278528][ T5845] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1027.326483][ T5845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.721807][T14417] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2090'. [ 1029.797238][ T5845] usb 6-1: can't set config #16, error -71 [ 1029.828247][ T5845] usb 6-1: USB disconnect, device number 33 [ 1031.271292][T14432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2094'. [ 1032.148996][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1032.609255][T14443] No control pipe specified [ 1036.659786][T14455] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2103'. [ 1038.354298][ T4055] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1039.868668][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1039.875291][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1042.782206][T14489] batadv2: entered promiscuous mode [ 1042.907862][T14489] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1043.269389][T14495] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2111'. [ 1043.347762][T14492] batadv2: entered promiscuous mode [ 1043.403696][T14492] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1043.613611][ T5889] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1044.051988][ T5889] usb 1-1: Using ep0 maxpacket: 8 [ 1044.391387][ T5889] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1044.434622][ T5889] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1044.925725][ T5889] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1044.934994][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1045.046058][ T5889] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1045.095575][ T5889] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1045.411830][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.448982][T14512] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2112'. [ 1045.830082][ T5949] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1045.991396][ T5889] usb 1-1: GET_CAPABILITIES returned 0 [ 1046.003760][T14515] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2116'. [ 1046.015684][ T5889] usbtmc 1-1:16.0: can't read capabilities [ 1046.479624][ T5949] usb 4-1: Using ep0 maxpacket: 8 [ 1047.778529][ T5889] usb 1-1: USB disconnect, device number 44 [ 1049.335899][ T5845] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1049.552769][ T5845] usb 3-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 1049.603095][ T5845] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1049.648495][ T5845] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1049.700669][ T5845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.756176][ T5845] usb 3-1: config 0 descriptor?? [ 1049.863524][ T5949] usb 4-1: device descriptor read/all, error -71 [ 1050.044418][T14525] netlink: 'syz.2.2119': attribute type 10 has an invalid length. [ 1050.091473][T14525] syz_tun: entered promiscuous mode [ 1050.131549][T14531] ptrace attach of "./syz-executor exec"[5836] was attempted by ""[14531] [ 1050.260246][T14525] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1050.272726][T14534] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.403330][ T5845] usb 3-1: string descriptor 0 read error: -71 [ 1050.426881][ T5845] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1050.445309][ T5845] usb 3-1: USB disconnect, device number 42 [ 1050.491761][T14534] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2122'. [ 1050.636733][T14540] batadv4: entered promiscuous mode [ 1050.720540][T14540] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 1052.286594][T14556] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2128'. [ 1052.375031][T14556] netlink: 'syz.5.2128': attribute type 2 has an invalid length. [ 1054.104007][ T5903] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1054.367856][ T5903] usb 6-1: config 0 has an invalid interface number: 156 but max is 0 [ 1054.411482][ T5903] usb 6-1: config 0 has no interface number 0 [ 1054.444120][ T5903] usb 6-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1054.503915][ T5903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.531955][T14576] netlink: 168976 bytes leftover after parsing attributes in process `syz.1.2133'. [ 1054.604870][ T5903] usb 6-1: config 0 descriptor?? [ 1054.633033][ T5903] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1054.830723][ T5949] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1054.951461][ T5903] spca561 6-1:0.156: probe with driver spca561 failed with error -22 [ 1055.012133][ T5949] usb 2-1: Using ep0 maxpacket: 8 [ 1055.030779][ T5949] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1055.041008][ T5949] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1055.051263][ T5949] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1055.057078][ T5903] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1055.127870][ T5903] usb 6-1: MIDIStreaming interface descriptor not found [ 1055.142509][ T5949] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1055.493053][ T5949] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1055.502381][ T5949] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.035915][ T5949] usb 2-1: GET_CAPABILITIES returned 0 [ 1056.055577][ T5949] usbtmc 2-1:16.0: can't read capabilities [ 1056.075447][ T5903] usb 6-1: USB disconnect, device number 34 [ 1056.334006][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1056.343587][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1056.353386][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1057.086082][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1057.095205][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1057.104281][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1057.113348][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1057.122404][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1057.131452][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1057.140643][ C0] vkms_vblank_simulate: vblank timer overrun [ 1057.517614][ T5889] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 1057.533600][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1057.542713][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1057.551780][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1057.594261][ T5949] usb 2-1: USB disconnect, device number 36 [ 1057.806441][ T5889] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1057.840710][ T5889] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1057.907774][ T5889] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1058.039874][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.320680][ T5889] usb 4-1: usb_control_msg returned -32 [ 1058.326656][ T5889] usbtmc 4-1:16.0: can't read capabilities [ 1058.772050][T14607] xt_hashlimit: size too large, truncated to 1048576 [ 1059.156069][T14609] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2141'. [ 1060.486401][ T5896] usb 4-1: USB disconnect, device number 46 [ 1065.001470][T14676] netlink: 168976 bytes leftover after parsing attributes in process `syz.3.2155'. [ 1065.306019][ T5889] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1065.477294][ T5889] usb 4-1: Using ep0 maxpacket: 8 [ 1065.578936][ T5889] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1065.589649][ T5889] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1065.600471][ T5889] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1065.626541][ T5889] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1065.702403][ T5889] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1065.853239][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.096983][ T5949] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1066.375334][ T5949] usb 3-1: Using ep0 maxpacket: 32 [ 1067.040634][ T5889] usb 4-1: GET_CAPABILITIES returned 0 [ 1067.059505][ T5949] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1067.059885][ T5889] usbtmc 4-1:16.0: can't read capabilities [ 1067.069319][ T5949] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1067.069354][ T5949] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1067.089337][ T5949] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1067.103433][ T5949] usb 3-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 1067.111744][ T5949] usb 3-1: Product: syz [ 1067.122412][ T5949] usb 3-1: Manufacturer: syz [ 1067.128260][ T5949] usb 3-1: SerialNumber: syz [ 1067.161136][ T5949] usb 3-1: config 0 descriptor?? [ 1067.298259][ T5889] usb 4-1: USB disconnect, device number 47 [ 1067.611276][ T5949] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 1067.825630][ T5949] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 1067.835131][ T5949] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -121 [ 1068.063148][T14678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1068.493841][T14678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1068.604683][ T5889] usb 3-1: USB disconnect, device number 43 [ 1070.796729][T14710] batadv4: entered promiscuous mode [ 1070.872542][T14710] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 1071.037178][T14713] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2167'. [ 1071.255909][T14718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2167'. [ 1072.436055][T14735] netlink: 'syz.1.2172': attribute type 1 has an invalid length. [ 1072.460531][T14735] trusted_key: encrypted_key: master key parameter '' is invalid [ 1076.829232][ T5949] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1077.023466][ T5949] usb 1-1: Using ep0 maxpacket: 16 [ 1077.075289][ T5949] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 1077.098730][ T5949] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1077.117726][ T5949] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1077.139171][ T5949] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1077.291902][ T5845] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1077.306359][ T5949] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1077.322467][ T5949] usb 1-1: config 0 has no interface number 0 [ 1077.974543][ T5949] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1077.986178][ T5949] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1077.997015][ T5949] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1078.009175][ T5949] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1078.023402][ T5949] usb 1-1: config 0 interface 125 has no altsetting 0 [ 1078.044794][ T5949] usb 1-1: config 0 interface 125 has no altsetting 2 [ 1078.061707][ T5949] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1078.080196][ T5949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.099228][ T5949] usb 1-1: Product: syz [ 1078.110045][ T5949] usb 1-1: Manufacturer: syz [ 1078.120811][ T5949] usb 1-1: SerialNumber: syz [ 1078.133388][ T5845] usb 2-1: Using ep0 maxpacket: 32 [ 1078.146505][ T5949] usb 1-1: config 0 descriptor?? [ 1078.161256][ T5845] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1078.190721][ T5845] usb 2-1: can't read configurations, error -61 [ 1078.232209][ T5949] usb 1-1: selecting invalid altsetting 2 [ 1078.389837][ T5845] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1078.667701][ T5845] usb 2-1: Using ep0 maxpacket: 32 [ 1078.686979][ T5845] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1078.700521][ T5845] usb 2-1: can't read configurations, error -61 [ 1078.750143][ T5845] usb usb2-port1: attempt power cycle [ 1078.858777][T14780] netlink: 168976 bytes leftover after parsing attributes in process `syz.5.2186'. [ 1079.192909][ T10] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1079.206778][ T5845] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1079.235055][ T5845] usb 2-1: Using ep0 maxpacket: 32 [ 1079.243359][ T5845] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1079.252860][ T5845] usb 2-1: can't read configurations, error -61 [ 1079.586119][ T5949] get_1284_register timeout [ 1079.597900][ C0] usb 1-1: async_complete: urb error -104 [ 1079.603861][ C0] usb 1-1: async_complete: urb error -104 [ 1079.630069][ T5949] uss720 1-1:0.125: probe with driver uss720 failed with error -5 [ 1079.663371][ T5845] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1079.672794][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 1079.685638][ T5845] usb 2-1: Using ep0 maxpacket: 32 [ 1079.699827][ T5845] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1079.726870][ T5845] usb 2-1: can't read configurations, error -61 [ 1079.751719][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1079.761907][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1079.776280][ T5845] usb usb2-port1: unable to enumerate USB device [ 1079.784191][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1079.797634][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1079.817767][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1079.828017][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.217845][ T5845] usb 1-1: USB disconnect, device number 45 [ 1081.765408][T14796] FAULT_INJECTION: forcing a failure. [ 1081.765408][T14796] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1081.782398][T14796] CPU: 0 UID: 0 PID: 14796 Comm: syz.1.2189 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1081.782425][T14796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1081.782436][T14796] Call Trace: [ 1081.782444][T14796] [ 1081.782451][T14796] dump_stack_lvl+0x189/0x250 [ 1081.782484][T14796] ? __pfx____ratelimit+0x10/0x10 [ 1081.782504][T14796] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1081.782526][T14796] ? __pfx__printk+0x10/0x10 [ 1081.782562][T14796] should_fail_ex+0x414/0x560 [ 1081.782591][T14796] strncpy_from_user+0x36/0x290 [ 1081.782624][T14796] getname_flags+0xf3/0x540 [ 1081.782652][T14796] io_openat2_prep+0x259/0x530 [ 1081.782683][T14796] io_submit_sqes+0x90c/0x1c50 [ 1081.782749][T14796] __se_sys_io_uring_enter+0x2df/0x2b20 [ 1081.782791][T14796] ? ksys_write+0x1cb/0x250 [ 1081.782816][T14796] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1081.782835][T14796] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1081.782860][T14796] ? __pfx_vfs_write+0x10/0x10 [ 1081.782885][T14796] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1081.782916][T14796] ? __fget_files+0x3a0/0x420 [ 1081.782950][T14796] ? fput+0xa0/0xd0 [ 1081.782977][T14796] ? ksys_write+0x22a/0x250 [ 1081.783001][T14796] ? __pfx_ksys_write+0x10/0x10 [ 1081.783028][T14796] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 1081.783053][T14796] do_syscall_64+0xfa/0x3b0 [ 1081.783077][T14796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.783096][T14796] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1081.783123][T14796] ? clear_bhb_loop+0x60/0xb0 [ 1081.783156][T14796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.783176][T14796] RIP: 0033:0x7fc61c78ebe9 [ 1081.783197][T14796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1081.783215][T14796] RSP: 002b:00007fc61d560038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1081.783238][T14796] RAX: ffffffffffffffda RBX: 00007fc61c9b6090 RCX: 00007fc61c78ebe9 [ 1081.783253][T14796] RDX: 0000000000006aaf RSI: 0000000000004536 RDI: 0000000000000006 [ 1081.783267][T14796] RBP: 00007fc61d560090 R08: 0000000000000000 R09: 0000000000000000 [ 1081.783280][T14796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1081.783293][T14796] R13: 00007fc61c9b6128 R14: 00007fc61c9b6090 R15: 00007ffe73252f08 [ 1081.783329][T14796] [ 1082.017570][ C0] vkms_vblank_simulate: vblank timer overrun [ 1085.907377][ T5916] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1085.937493][ T10] usb 6-1: usb_control_msg returned -110 [ 1086.185564][ T10] usbtmc 6-1:16.0: can't read capabilities [ 1086.860439][ T5916] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1086.924509][ T5916] usb 4-1: config 0 has no interface number 0 [ 1086.981134][ T5916] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1087.009383][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.047964][ T5916] usb 4-1: Product: syz [ 1087.059096][ T5916] usb 4-1: Manufacturer: syz [ 1087.081274][ T5916] usb 4-1: SerialNumber: syz [ 1087.124265][ T5916] usb 4-1: config 0 descriptor?? [ 1087.260801][ T10] usb 6-1: USB disconnect, device number 35 [ 1087.447740][ T5916] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1087.495811][ T5916] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1087.525259][ T5916] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1087.624159][ T5916] usb 4-1: media controller created [ 1087.787132][T14837] input: syz0 as /devices/virtual/input/input39 [ 1088.381674][ T5916] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1088.717594][ T5916] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1090.180443][T14851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2204'. [ 1090.208192][ T5916] usb 4-1: USB disconnect, device number 48 [ 1091.884412][T14851] macvlan2: entered promiscuous mode [ 1091.952804][T14851] bond0: entered promiscuous mode [ 1091.989790][T14851] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1092.548594][T14882] netlink: 168976 bytes leftover after parsing attributes in process `syz.2.2211'. [ 1092.671064][ T5889] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1092.858592][ T5889] usb 1-1: config 0 has an invalid descriptor of length 153, skipping remainder of the config [ 1092.876224][ T5889] usb 1-1: too many endpoints for config 0 interface 0 altsetting 208: 142, using maximum allowed: 30 [ 1092.954895][ T5889] usb 1-1: config 0 interface 0 altsetting 208 has 0 endpoint descriptors, different from the interface descriptor's value: 142 [ 1093.007953][ T5916] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1093.405321][ T10] kernel write not supported for file /cpu/0/msr (pid: 10 comm: kworker/0:1) [ 1093.579420][ T5916] usb 3-1: Using ep0 maxpacket: 8 [ 1095.848342][ T5889] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1095.855130][ T5889] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1096.278977][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.291101][ T5889] usb 1-1: config 0 descriptor?? [ 1096.296909][ T5889] usb 1-1: can't set config #0, error -71 [ 1096.454983][ T5889] usb 1-1: USB disconnect, device number 46 [ 1097.725243][T14899] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2218'. [ 1097.780710][ T5889] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1098.573808][ T5896] hid-generic 0035:0004:0034.000C: unknown main item tag 0x0 [ 1098.648827][ T5889] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1098.700767][T14901] syz_tun: entered allmulticast mode [ 1098.710374][ T5896] hid-generic 0035:0004:0034.000C: unknown main item tag 0x0 [ 1098.721993][ T5889] usb 1-1: config 0 has no interface number 0 [ 1098.796147][ T5896] hid-generic 0035:0004:0034.000C: unknown main item tag 0x0 [ 1098.826637][ T5889] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1098.853644][ T5896] hid-generic 0035:0004:0034.000C: unknown main item tag 0x0 [ 1098.885010][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.909416][ T5896] hid-generic 0035:0004:0034.000C: unknown main item tag 0x0 [ 1099.330698][ T5889] usb 1-1: Product: syz [ 1099.786213][ T5896] hid-generic 0035:0004:0034.000C: unknown main item tag 0x0 [ 1099.795484][ T5889] usb 1-1: Manufacturer: syz [ 1099.832732][ T5889] usb 1-1: SerialNumber: syz [ 1099.851457][ T5896] hid-generic 0035:0004:0034.000C: unknown main item tag 0x0 [ 1099.906837][ T5889] usb 1-1: config 0 descriptor?? [ 1099.929263][ T5896] hid-generic 0035:0004:0034.000C: unknown main item tag 0x0 [ 1099.984376][T14896] syz_tun: left allmulticast mode [ 1099.999312][ T5889] usb 1-1: can't set config #0, error -71 [ 1100.042452][ T5896] hid-generic 0035:0004:0034.000C: unknown main item tag 0x0 [ 1100.105708][ T5889] usb 1-1: USB disconnect, device number 47 [ 1100.137865][ T5896] hid-generic 0035:0004:0034.000C: unknown main item tag 0x0 [ 1100.208741][ T5896] hid-generic 0035:0004:0034.000C: unknown main item tag 0x0 [ 1100.305580][ T5896] hid-generic 0035:0004:0034.000C: hidraw0: HID v0.09 Device [syz0] on syz1 [ 1100.679598][T14914] fido_id[14914]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1100.698666][T14916] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1101.297241][ T5916] usb 3-1: unable to read config index 0 descriptor/start: -110 [ 1101.393895][ T5916] usb 3-1: can't read configurations, error -110 [ 1105.052850][ T5889] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1105.367526][T14960] netlink: 160720 bytes leftover after parsing attributes in process `syz.2.2233'. [ 1105.385171][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1105.391774][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1105.566134][ T5889] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1105.618591][ T5889] usb 6-1: config 0 has no interface number 0 [ 1106.221434][ T5916] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1106.341068][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 1106.349354][ T5889] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1106.358735][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.366975][ T5889] usb 6-1: Product: syz [ 1106.371315][ T5889] usb 6-1: Manufacturer: syz [ 1106.376048][ T5889] usb 6-1: SerialNumber: syz [ 1106.436686][ T5889] usb 6-1: config 0 descriptor?? [ 1106.507833][ T5916] usb 3-1: device descriptor read/64, error -32 [ 1106.833872][ T5889] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1106.941424][ T5916] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1107.280020][T14950] vxcan0: tx drop: invalid da for name 0x00000000000000f5 [ 1107.305221][ T5889] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1107.465943][T14950] input: syz0 as /devices/virtual/input/input40 [ 1107.518567][ T5889] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1107.529208][ T5916] usb 3-1: Using ep0 maxpacket: 8 [ 1107.540242][ T5916] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1107.550060][ T5916] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1107.550570][ T5889] usb 6-1: media controller created [ 1107.689210][ T5916] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1107.740429][ T5916] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1107.773784][ T5889] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1108.344693][ T5916] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1108.359037][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.430563][ T5889] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1108.905552][ T5889] usb 6-1: USB disconnect, device number 36 [ 1109.016504][ T5916] usb 3-1: can't set config #16, error -71 [ 1109.192481][ T5916] usb 3-1: USB disconnect, device number 47 [ 1112.781131][T15009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2245'. [ 1112.845120][T15009] bond0: (slave syz_tun): Releasing backup interface [ 1113.875198][T15011] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2246'. [ 1113.990176][T15021] trusted_key: encrypted_key: insufficient parameters specified [ 1115.426253][T15033] netlink: 160720 bytes leftover after parsing attributes in process `syz.3.2249'. [ 1115.973833][ T10] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1116.251878][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 1117.002615][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1117.036935][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1117.068836][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1117.125788][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1117.192356][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1117.482875][T15048] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1117.523633][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.690053][T15072] netlink: 'syz.0.2262': attribute type 1 has an invalid length. [ 1120.713444][T15072] trusted_key: encrypted_key: master key parameter '' is invalid [ 1121.421683][ T10] usb 4-1: usb_control_msg returned -71 [ 1121.469104][ T10] usbtmc 4-1:16.0: can't read capabilities [ 1121.511043][ T10] usb 4-1: USB disconnect, device number 49 [ 1121.802950][T15075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2263'. [ 1124.909500][T15103] batadv3: entered promiscuous mode [ 1124.925099][T15103] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 1126.964927][ T5845] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1127.073649][T15128] netlink: 160720 bytes leftover after parsing attributes in process `syz.0.2276'. [ 1127.133709][ T5889] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 1127.204074][T15129] batadv4: entered promiscuous mode [ 1127.216933][T15129] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 1127.438994][ T5845] usb 2-1: Using ep0 maxpacket: 8 [ 1127.648259][ T5889] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 1127.732339][ T5903] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1127.758666][ T5889] usb 4-1: config 0 has no interface number 0 [ 1128.097182][ T5845] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1128.105244][ T5845] usb 2-1: config 0 has no interface number 0 [ 1128.117074][ T5845] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1128.138396][ T5845] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1128.147506][ T5845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.199479][ T5845] usb 2-1: config 0 descriptor?? [ 1128.257155][ T5845] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1128.261894][ T5889] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1128.296433][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.315689][ T5889] usb 4-1: Product: syz [ 1128.319991][ T5889] usb 4-1: Manufacturer: syz [ 1128.337249][ T5889] usb 4-1: SerialNumber: syz [ 1128.342338][ T5903] usb 1-1: Using ep0 maxpacket: 8 [ 1128.364809][ T5903] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1128.375017][ T5903] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1128.399144][ T5889] usb 4-1: config 0 descriptor?? [ 1128.415332][ T5903] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1128.449223][T15136] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2279'. [ 1128.484505][ T5889] yurex 4-1:0.50: Could not find endpoints [ 1128.503170][T15136] netlink: 'syz.2.2279': attribute type 5 has an invalid length. [ 1128.511217][ T5903] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1128.528989][ T5845] usb 2-1: USB disconnect, device number 41 [ 1128.561188][ T5903] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1128.621174][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.880441][ T5845] usb 4-1: USB disconnect, device number 50 [ 1128.977195][ T5903] usb 1-1: GET_CAPABILITIES returned 0 [ 1129.002922][ T5903] usbtmc 1-1:16.0: can't read capabilities [ 1129.377243][ T5903] usb 1-1: USB disconnect, device number 48 [ 1132.199129][T15189] FAULT_INJECTION: forcing a failure. [ 1132.199129][T15189] name failslab, interval 1, probability 0, space 0, times 0 [ 1132.253893][T15189] CPU: 0 UID: 0 PID: 15189 Comm: syz.3.2291 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1132.253925][T15189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1132.253937][T15189] Call Trace: [ 1132.253945][T15189] [ 1132.253954][T15189] dump_stack_lvl+0x189/0x250 [ 1132.253984][T15189] ? __pfx____ratelimit+0x10/0x10 [ 1132.254008][T15189] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1132.254030][T15189] ? __pfx__printk+0x10/0x10 [ 1132.254064][T15189] ? __pfx___might_resched+0x10/0x10 [ 1132.254086][T15189] ? fs_reclaim_acquire+0x7d/0x100 [ 1132.254115][T15189] should_fail_ex+0x414/0x560 [ 1132.254145][T15189] should_failslab+0xa8/0x100 [ 1132.254167][T15189] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1132.254187][T15189] ? sk_prot_alloc+0x57/0x220 [ 1132.254223][T15189] sk_prot_alloc+0x57/0x220 [ 1132.254249][T15189] ? sk_alloc+0x24/0x370 [ 1132.254279][T15189] sk_alloc+0x3a/0x370 [ 1132.254313][T15189] inet6_create+0x7f0/0x1260 [ 1132.254336][T15189] ? inet6_create+0x83/0x1260 [ 1132.254367][T15189] __sock_create+0x4b0/0x9f0 [ 1132.254403][T15189] mptcp_subflow_create_socket+0xfd/0xb40 [ 1132.254434][T15189] ? __lock_acquire+0xab9/0xd20 [ 1132.254456][T15189] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 1132.254498][T15189] __mptcp_nmpc_sk+0x148/0x750 [ 1132.254526][T15189] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1132.254548][T15189] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 1132.254589][T15189] mptcp_setsockopt+0xe2e/0x3460 [ 1132.254614][T15189] ? __lock_acquire+0xab9/0xd20 [ 1132.254650][T15189] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 1132.254689][T15189] ? __fget_files+0x2a/0x420 [ 1132.254717][T15189] ? sock_common_setsockopt+0x36/0xc0 [ 1132.254743][T15189] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1132.254769][T15189] do_sock_setsockopt+0x179/0x1b0 [ 1132.254806][T15189] __x64_sys_setsockopt+0x13f/0x1b0 [ 1132.254842][T15189] do_syscall_64+0xfa/0x3b0 [ 1132.254863][T15189] ? lockdep_hardirqs_on+0x9c/0x150 [ 1132.254883][T15189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1132.254903][T15189] ? clear_bhb_loop+0x60/0xb0 [ 1132.254934][T15189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1132.254953][T15189] RIP: 0033:0x7f988038ebe9 [ 1132.254971][T15189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1132.254988][T15189] RSP: 002b:00007f9881240038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1132.255012][T15189] RAX: ffffffffffffffda RBX: 00007f98805b5fa0 RCX: 00007f988038ebe9 [ 1132.255027][T15189] RDX: 000000000000004e RSI: 0000000000000029 RDI: 0000000000000003 [ 1132.255039][T15189] RBP: 00007f9881240090 R08: e80167985de45f57 R09: 0000000000000000 [ 1132.255052][T15189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1132.255064][T15189] R13: 00007f98805b6038 R14: 00007f98805b5fa0 R15: 00007ffca5241d18 [ 1132.255098][T15189] [ 1132.541874][ C0] vkms_vblank_simulate: vblank timer overrun [ 1132.964200][T15205] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2295'. [ 1132.993139][T15205] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1133.002956][ T5845] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1133.381165][ T5845] usb 2-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=86.cf [ 1133.467994][ T5845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.597674][ T5845] ums-cypress 2-1:1.0: USB Mass Storage device detected [ 1133.911002][T15202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2294'. [ 1134.145982][ T5903] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 1134.464162][ T5903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1134.840241][ T5903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1134.994115][ T5903] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 1135.100889][ T5903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.363133][ T5903] usb 6-1: config 0 descriptor?? [ 1136.078820][ T5845] usb 2-1: USB disconnect, device number 42 [ 1136.385262][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 1138.163127][ T5903] usbhid 6-1:0.0: can't add hid device: -71 [ 1138.192904][ T5903] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1138.278111][ T5903] usb 6-1: USB disconnect, device number 37 [ 1138.465699][ T5838] Bluetooth: hci5: command 0x1003 tx timeout [ 1138.473290][ T5833] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1138.985122][T15276] netlink: 'syz.5.2310': attribute type 1 has an invalid length. [ 1140.254979][T15283] netlink: 160720 bytes leftover after parsing attributes in process `syz.2.2309'. [ 1141.105108][ T5845] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1141.828230][ T5845] usb 3-1: Using ep0 maxpacket: 8 [ 1142.814355][ T5845] usb 3-1: device descriptor read/all, error -71 [ 1143.584813][ T5903] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1143.755803][ T5903] usb 2-1: Using ep0 maxpacket: 32 [ 1143.771202][ T5903] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1143.783352][ T5903] usb 2-1: config 0 has no interface number 0 [ 1143.804319][ T5903] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1143.835470][ T5903] usb 2-1: config 0 interface 1 has no altsetting 0 [ 1143.859260][ T5903] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1143.871905][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.900981][ T5903] usb 2-1: Product: syz [ 1143.913472][ T5903] usb 2-1: Manufacturer: syz [ 1143.931157][ T5903] usb 2-1: SerialNumber: syz [ 1143.957353][ T5903] usb 2-1: config 0 descriptor?? [ 1144.189794][T15314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1144.235831][T15314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1144.274556][ T5903] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1144.318812][ T5903] cx231xx 2-1:0.1: Not found matching IAD interface [ 1144.361682][ T5903] usb 2-1: USB disconnect, device number 43 [ 1144.684849][T15331] FAULT_INJECTION: forcing a failure. [ 1144.684849][T15331] name failslab, interval 1, probability 0, space 0, times 0 [ 1144.705264][T15331] CPU: 0 UID: 0 PID: 15331 Comm: syz.3.2324 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1144.705292][T15331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1144.705303][T15331] Call Trace: [ 1144.705312][T15331] [ 1144.705320][T15331] dump_stack_lvl+0x189/0x250 [ 1144.705348][T15331] ? __pfx____ratelimit+0x10/0x10 [ 1144.705370][T15331] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1144.705392][T15331] ? __pfx__printk+0x10/0x10 [ 1144.705424][T15331] ? __pfx___might_resched+0x10/0x10 [ 1144.705444][T15331] ? fs_reclaim_acquire+0x7d/0x100 [ 1144.705471][T15331] should_fail_ex+0x414/0x560 [ 1144.705496][T15331] should_failslab+0xa8/0x100 [ 1144.705519][T15331] __kmalloc_noprof+0xcb/0x4f0 [ 1144.705536][T15331] ? kfree+0x4d/0x440 [ 1144.705561][T15331] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1144.705592][T15331] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1144.705620][T15331] ? tomoyo_domain+0xda/0x130 [ 1144.705658][T15331] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1144.705677][T15331] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1144.705701][T15331] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1144.705754][T15331] ? __lock_acquire+0xab9/0xd20 [ 1144.705794][T15331] ? __fget_files+0x2a/0x420 [ 1144.705819][T15331] ? __fget_files+0x2a/0x420 [ 1144.705840][T15331] ? __fget_files+0x3a0/0x420 [ 1144.705860][T15331] ? __fget_files+0x2a/0x420 [ 1144.705887][T15331] security_file_ioctl+0xcb/0x2d0 [ 1144.705913][T15331] __se_sys_ioctl+0x47/0x170 [ 1144.705945][T15331] do_syscall_64+0xfa/0x3b0 [ 1144.705967][T15331] ? lockdep_hardirqs_on+0x9c/0x150 [ 1144.705988][T15331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1144.706008][T15331] ? clear_bhb_loop+0x60/0xb0 [ 1144.706032][T15331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1144.706052][T15331] RIP: 0033:0x7f988038ebe9 [ 1144.706072][T15331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1144.706090][T15331] RSP: 002b:00007f9881240038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1144.706112][T15331] RAX: ffffffffffffffda RBX: 00007f98805b5fa0 RCX: 00007f988038ebe9 [ 1144.706126][T15331] RDX: 0000200000000300 RSI: 00000000c00c643c RDI: 0000000000000003 [ 1144.706139][T15331] RBP: 00007f9881240090 R08: 0000000000000000 R09: 0000000000000000 [ 1144.706151][T15331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1144.706163][T15331] R13: 00007f98805b6038 R14: 00007f98805b5fa0 R15: 00007ffca5241d18 [ 1144.706197][T15331] [ 1144.706511][T15331] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1145.847369][T15347] netlink: 'syz.5.2328': attribute type 10 has an invalid length. [ 1145.968399][ T5845] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1146.474565][ T5845] usb 4-1: Using ep0 maxpacket: 8 [ 1146.567348][ T5845] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1146.577130][ T5845] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1147.111014][ T5845] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1147.216109][ T5845] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1147.375505][ T5845] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1147.595236][ T5845] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.993121][ T5845] usb 4-1: GET_CAPABILITIES returned 0 [ 1148.006249][ T5845] usbtmc 4-1:16.0: can't read capabilities [ 1148.071376][T15365] kvm: pic: non byte read [ 1148.076523][T15365] kvm: pic: level sensitive irq not supported [ 1148.076607][T15365] kvm: pic: non byte read [ 1148.118048][T15365] kvm: pic: level sensitive irq not supported [ 1148.118135][T15365] kvm: pic: non byte read [ 1148.177920][T15365] kvm: pic: level sensitive irq not supported [ 1148.178008][T15365] kvm: pic: non byte read [ 1148.206348][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1148.215453][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1148.224527][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1148.233625][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1148.242704][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1148.255653][T15365] kvm: pic: level sensitive irq not supported [ 1148.255737][T15365] kvm: pic: non byte read [ 1148.256595][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1148.262182][T15365] kvm: pic: level sensitive irq not supported [ 1148.266405][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1148.276182][T15365] kvm: pic: non byte read [ 1148.282372][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1148.291565][T15365] kvm: pic: level sensitive irq not supported [ 1148.296416][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1148.305081][T15365] kvm: pic: non byte read [ 1148.310841][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1148.320632][T15365] kvm: pic: level sensitive irq not supported [ 1148.324324][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1148.333343][T15365] kvm: pic: non byte read [ 1148.361830][T15365] kvm: pic: level sensitive irq not supported [ 1148.361913][T15365] kvm: pic: non byte read [ 1148.381062][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1148.390199][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1148.399315][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1148.474045][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1148.483374][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 1148.578821][ T5845] usb 4-1: USB disconnect, device number 51 [ 1148.638091][T15374] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2335'. [ 1152.279835][T15409] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2345'. [ 1152.384367][T15411] netlink: 'syz.5.2344': attribute type 1 has an invalid length. [ 1156.406012][T15415] binder: 15412:15415 ioctl c1105518 200000000640 returned -22 [ 1156.435384][T15427] 9pnet_fd: Insufficient options for proto=fd [ 1157.096552][ T5903] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1157.545094][ T5903] usb 1-1: Using ep0 maxpacket: 8 [ 1157.675265][ T5903] usb 1-1: config 0 has no interfaces? [ 1157.734323][ T5903] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55 [ 1157.734360][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.734384][ T5903] usb 1-1: Product: syz [ 1157.734401][ T5903] usb 1-1: Manufacturer: syz [ 1157.734418][ T5903] usb 1-1: SerialNumber: syz [ 1157.739530][ T5903] usb 1-1: config 0 descriptor?? [ 1158.018024][T15435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2351'. [ 1158.068187][T15455] netlink: 'syz.2.2356': attribute type 1 has an invalid length. [ 1158.507547][T15435] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2351'. [ 1158.555252][ T5916] usb 1-1: USB disconnect, device number 49 [ 1160.276035][T15475] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2361'. [ 1160.873130][T15479] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 1160.879695][T15479] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1161.073044][T15479] vhci_hcd vhci_hcd.0: Device attached [ 1161.318857][ T5916] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1161.439682][ T5845] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 1161.476148][T15484] vhci_hcd: connection reset by peer [ 1161.484102][ T36] vhci_hcd: stop threads [ 1161.489540][ T36] vhci_hcd: release socket [ 1161.494176][ T36] vhci_hcd: disconnect device [ 1161.608840][ T5916] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1161.673054][ T5916] usb 2-1: config 0 has no interface number 0 [ 1161.728469][ T5916] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1161.749593][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.795270][ T5916] usb 2-1: Product: syz [ 1161.822835][ T5916] usb 2-1: Manufacturer: syz [ 1161.849194][ T5916] usb 2-1: SerialNumber: syz [ 1161.867059][ T5916] usb 2-1: config 0 descriptor?? [ 1162.159676][ T5916] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1163.028033][T15485] vxcan0: tx drop: invalid da for name 0x00000000000000f5 [ 1163.032969][ T5916] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1163.143057][T15485] input: syz0 as /devices/virtual/input/input42 [ 1163.250757][ T5916] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1163.327764][ T5916] usb 2-1: media controller created [ 1163.412768][ T5916] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1164.173810][ T5916] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1164.564398][ T5916] usb 2-1: USB disconnect, device number 44 [ 1166.923779][ T30] audit: type=1326 audit(1755771434.316:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15530 comm="syz.0.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7da798ebe9 code=0x7ffc0000 [ 1166.931504][ T5845] vhci_hcd: vhci_device speed not set [ 1166.950823][ C0] vkms_vblank_simulate: vblank timer overrun [ 1167.037322][ T30] audit: type=1326 audit(1755771434.316:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15530 comm="syz.0.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7da798ebe9 code=0x7ffc0000 [ 1167.081176][ T30] audit: type=1326 audit(1755771434.316:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15530 comm="syz.0.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7da798ebe9 code=0x7ffc0000 [ 1167.134423][ T30] audit: type=1326 audit(1755771434.316:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15530 comm="syz.0.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7da798ebe9 code=0x7ffc0000 [ 1167.308258][ T30] audit: type=1326 audit(1755771434.326:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15530 comm="syz.0.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7da798ebe9 code=0x7ffc0000 [ 1167.805935][ T30] audit: type=1326 audit(1755771434.326:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15530 comm="syz.0.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7da798ebe9 code=0x7ffc0000 [ 1167.840050][ T30] audit: type=1326 audit(1755771434.326:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15530 comm="syz.0.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7da798ebe9 code=0x7ffc0000 [ 1167.882443][ T30] audit: type=1326 audit(1755771434.326:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15530 comm="syz.0.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7da798ebe9 code=0x7ffc0000 [ 1168.004046][ T30] audit: type=1326 audit(1755771434.326:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15530 comm="syz.0.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7da798ebe9 code=0x7ffc0000 [ 1168.206745][T15549] netlink: 'syz.1.2379': attribute type 1 has an invalid length. [ 1168.620828][ T30] audit: type=1326 audit(1755771434.326:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15530 comm="syz.0.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7da798ebe9 code=0x7ffc0000 [ 1169.209792][T15556] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2380'. [ 1170.441271][T15558] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2382'. [ 1170.570209][ T5845] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1170.906974][ T5845] usb 1-1: device descriptor read/64, error -71 [ 1171.173203][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1171.182450][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1171.459581][ T5845] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1171.612525][ T5845] usb 1-1: device descriptor read/64, error -71 [ 1172.416746][ T5845] usb usb1-port1: attempt power cycle [ 1173.232236][ T5845] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1174.166021][ T5845] usb 1-1: device descriptor read/8, error -71 [ 1175.738909][T15599] netlink: 'syz.2.2393': attribute type 1 has an invalid length. [ 1178.812976][T15614] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2395'. [ 1179.310333][T15624] netlink: 'syz.1.2397': attribute type 1 has an invalid length. [ 1179.318296][T15624] netlink: 236 bytes leftover after parsing attributes in process `syz.1.2397'. [ 1182.032640][T15643] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2402'. [ 1184.301686][ T5845] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1184.482522][ T5845] usb 4-1: Using ep0 maxpacket: 16 [ 1184.505535][ T5845] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1185.017105][ T5845] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1185.035051][ T5845] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1185.044545][ T5845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.059969][ T5845] usb 4-1: Product: syz [ 1185.070725][ T5845] usb 4-1: Manufacturer: syz [ 1185.083769][ T5845] usb 4-1: SerialNumber: syz [ 1185.734872][ T5845] usb 4-1: cannot find UAC_HEADER [ 1185.777843][ T5845] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1185.843980][ T5845] usb 4-1: USB disconnect, device number 52 [ 1187.242628][T14165] udevd[14165]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1188.481771][T15692] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2419'. [ 1190.947357][T15704] --map-set only usable from mangle table [ 1192.160892][T15711] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1192.874035][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1192.874055][ T30] audit: type=1326 audit(1755771459.537:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15713 comm="syz.1.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61c78ebe9 code=0x7ffc0000 [ 1193.058209][ T5845] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1193.137020][ T30] audit: type=1326 audit(1755771459.537:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15713 comm="syz.1.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61c78ebe9 code=0x7ffc0000 [ 1193.205656][ T30] audit: type=1326 audit(1755771459.650:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15713 comm="syz.1.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7fc61c78ebe9 code=0x7ffc0000 [ 1193.237727][ T30] audit: type=1326 audit(1755771459.659:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15713 comm="syz.1.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61c78ebe9 code=0x7ffc0000 [ 1193.356390][ T5845] usb 4-1: Using ep0 maxpacket: 8 [ 1193.452667][ T5845] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1193.557905][ T5845] usb 4-1: config 179 has no interface number 0 [ 1194.113798][ T30] audit: type=1326 audit(1755771459.659:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15713 comm="syz.1.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61c78ebe9 code=0x7ffc0000 [ 1194.113868][ T5845] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1194.210008][ T30] audit: type=1326 audit(1755771459.659:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15713 comm="syz.1.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc61c78ebe9 code=0x7ffc0000 [ 1194.242456][ T5845] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1194.357391][ T30] audit: type=1326 audit(1755771459.659:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15713 comm="syz.1.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61c78ebe9 code=0x7ffc0000 [ 1194.357945][ T30] audit: type=1326 audit(1755771459.659:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15713 comm="syz.1.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc61c78ebe9 code=0x7ffc0000 [ 1194.358954][ T30] audit: type=1326 audit(1755771459.659:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15713 comm="syz.1.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61c78ebe9 code=0x7ffc0000 [ 1194.364271][ T30] audit: type=1326 audit(1755771459.659:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15713 comm="syz.1.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61c78ebe9 code=0x7ffc0000 [ 1194.399673][ T5845] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1194.399735][ T5845] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1194.399950][ T5845] usb 4-1: config 179 interface 65 has no altsetting 0 [ 1194.421905][ T5845] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1194.422432][ T5845] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.494585][ C0] vkms_vblank_simulate: vblank timer overrun [ 1195.199212][T15714] netlink: 'syz.3.2425': attribute type 10 has an invalid length. [ 1195.207214][T15714] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2425'. [ 1196.076547][ T5845] usb 4-1: USB disconnect, device number 53 [ 1196.612773][T15738] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2432'. [ 1199.535957][T15771] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2438'. [ 1199.920029][T15772] batadv5: entered promiscuous mode [ 1199.926292][T15772] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 1200.392275][ T5903] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1200.692126][ T5903] usb 6-1: Using ep0 maxpacket: 16 [ 1202.030263][ T5903] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1202.044798][ T5903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1202.056461][ T5903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1202.066201][ T5903] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1202.077642][ T5903] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1202.093241][ T5903] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1202.106027][ T5903] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1202.114943][ T5903] usb 6-1: Manufacturer: syz [ 1202.131492][ T5903] usb 6-1: config 0 descriptor?? [ 1202.556379][T15789] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2445'. [ 1202.611822][ T5903] rc_core: IR keymap rc-hauppauge not found [ 1202.623303][ T5903] Registered IR keymap rc-empty [ 1202.628537][ T5903] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1202.687136][ T5903] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1202.777028][ T5903] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1202.847321][ T5903] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input43 [ 1203.000638][ T5903] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1203.061019][ T5903] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1203.830532][ T5903] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1203.854359][ T5903] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1203.894736][ T5903] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1203.935067][ T5903] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1203.984444][ T5903] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1204.024336][ T5903] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1204.055268][ T5903] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1204.079677][ T5903] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1204.142033][ T5889] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1204.156650][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1204.168681][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1204.172476][ T5903] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1204.185615][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1204.215509][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1204.226753][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1204.234014][ T5903] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1204.272259][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1204.285791][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1204.295010][ T5833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1204.303973][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1204.315690][ T5889] usb 2-1: Using ep0 maxpacket: 32 [ 1204.335466][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1204.400675][ T5903] usb 6-1: USB disconnect, device number 38 [ 1204.424546][ T5889] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1204.466848][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.475786][ T5889] usb 2-1: Product: syz [ 1204.480186][ T5889] usb 2-1: Manufacturer: syz [ 1204.485318][ T5889] usb 2-1: SerialNumber: syz [ 1204.535337][ T5889] usb 2-1: config 0 descriptor?? [ 1205.034282][ T5889] airspy 2-1:0.0: Board ID: 00 [ 1205.099258][ T5889] airspy 2-1:0.0: Firmware version: [ 1205.329025][ T5903] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1205.698948][ T5903] usb 6-1: Using ep0 maxpacket: 8 [ 1205.727902][ T5903] usb 6-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 1205.766517][ T5903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.774735][ T5903] usb 6-1: Product: syz [ 1205.817069][ T5903] usb 6-1: Manufacturer: syz [ 1205.822584][ T5903] usb 6-1: SerialNumber: syz [ 1205.832685][ T5903] usb 6-1: config 0 descriptor?? [ 1205.844910][ T5903] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 1206.251224][ T5903] gspca_sn9c2028: read1 error -71 [ 1206.303990][ T5903] gspca_sn9c2028: read1 error -71 [ 1206.326249][ T5903] gspca_sn9c2028: read1 error -71 [ 1206.331638][ T5903] sn9c2028 6-1:0.0: probe with driver sn9c2028 failed with error -71 [ 1206.405829][ T5903] usb 6-1: USB disconnect, device number 39 [ 1206.473024][ T5889] airspy 2-1:0.0: Registered as swradio24 [ 1206.478998][ T5889] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1206.536364][ T5833] Bluetooth: hci5: command tx timeout [ 1207.097748][T15802] chnl_net:caif_netlink_parms(): no params data found [ 1207.155280][ T5889] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1207.212204][ T5903] usb 2-1: USB disconnect, device number 45 [ 1207.496968][ T5889] usb 3-1: Using ep0 maxpacket: 8 [ 1207.520284][ T5889] usb 3-1: config 8 has an invalid interface number: 125 but max is 0 [ 1207.528628][ T5889] usb 3-1: config 8 has no interface number 0 [ 1207.558655][ T5889] usb 3-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=26.ec [ 1207.572294][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1207.580542][ T5889] usb 3-1: Product: syz [ 1207.584919][ T5889] usb 3-1: Manufacturer: syz [ 1207.589661][ T5889] usb 3-1: SerialNumber: syz [ 1208.304125][ T5889] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 1208.396715][T15846] batadv5: entered promiscuous mode [ 1208.403153][T15846] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 1208.424824][T15802] bridge0: port 1(bridge_slave_0) entered blocking state [ 1208.443901][T15802] bridge0: port 1(bridge_slave_0) entered disabled state [ 1208.473605][T15802] bridge_slave_0: entered allmulticast mode [ 1208.537266][T15802] bridge_slave_0: entered promiscuous mode [ 1208.575685][T15802] bridge0: port 2(bridge_slave_1) entered blocking state [ 1208.614424][T15802] bridge0: port 2(bridge_slave_1) entered disabled state [ 1208.646506][T15802] bridge_slave_1: entered allmulticast mode [ 1208.694545][T15802] bridge_slave_1: entered promiscuous mode [ 1208.758821][ T5833] Bluetooth: hci5: command tx timeout [ 1208.858585][T15857] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2461'. [ 1209.656562][T15802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1209.727670][T15802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1209.940784][ T5889] gspca_m5602: Failed to find a sensor [ 1209.957568][ T5889] ALi m5602 3-1:8.125: ALi m5602 webcam failed [ 1210.009150][ T5889] usb 3-1: USB disconnect, device number 51 [ 1210.981975][ T5833] Bluetooth: hci5: command tx timeout [ 1211.049614][T15802] team0: Port device team_slave_0 added [ 1211.098962][T15802] team0: Port device team_slave_1 added [ 1211.548947][T15802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1211.556023][T15802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1211.592839][T15880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2467'. [ 1211.718277][T15802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1211.747932][T15802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1211.758997][T15802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1211.797813][T15802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1212.496964][ T5889] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1212.541423][T15802] hsr_slave_0: entered promiscuous mode [ 1212.561495][T15802] hsr_slave_1: entered promiscuous mode [ 1212.591718][T15802] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1212.622884][T15802] Cannot create hsr debugfs directory [ 1212.670658][ T5889] usb 2-1: Using ep0 maxpacket: 8 [ 1212.723661][ T5889] usb 2-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 1212.753518][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.794313][ T5889] usb 2-1: Product: syz [ 1212.803875][ T5889] usb 2-1: Manufacturer: syz [ 1212.808592][ T5889] usb 2-1: SerialNumber: syz [ 1213.216199][ T5833] Bluetooth: hci5: command tx timeout [ 1213.380972][ T5889] usb 2-1: config 0 descriptor?? [ 1213.410900][ T5889] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 1213.954846][ T5889] gspca_sn9c2028: read1 error -110 [ 1214.131885][ T5889] gspca_sn9c2028: read1 error -32 [ 1214.138055][ T5889] gspca_sn9c2028: read1 error -32 [ 1214.143556][ T5889] sn9c2028 2-1:0.0: probe with driver sn9c2028 failed with error -32 [ 1214.256464][ T5845] usb 2-1: USB disconnect, device number 46 [ 1215.177737][T15802] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1215.198933][T15802] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1215.211510][T15802] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1215.229649][T15802] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1215.689770][T15930] syz.3.2478 (15930): drop_caches: 4 [ 1215.696546][ T5889] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1215.730897][T15802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1215.866800][ T5889] usb 3-1: Using ep0 maxpacket: 32 [ 1215.882330][ T5889] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1215.902604][T15802] 8021q: adding VLAN 0 to HW filter on device team0 [ 1215.929879][ T4055] bridge0: port 1(bridge_slave_0) entered blocking state [ 1215.937161][ T4055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1215.946512][ T5889] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1216.056689][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1216.094083][ T5889] usb 3-1: Product: syz [ 1216.098373][ T5889] usb 3-1: Manufacturer: syz [ 1216.144718][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1216.151962][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1216.161759][ T5889] usb 3-1: SerialNumber: syz [ 1216.210120][ T5889] usb 3-1: config 0 descriptor?? [ 1216.259085][T15918] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1216.901069][ T5845] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1217.008594][ T5889] usb 3-1: USB disconnect, device number 52 [ 1217.122337][ T5845] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 1217.131145][ T5845] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1217.205018][ T5845] usb 4-1: config 0 has no interface number 0 [ 1217.235233][ T5845] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 1217.244840][ T5845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.266094][ T5845] usb 4-1: Product: syz [ 1217.270751][ T5845] usb 4-1: Manufacturer: syz [ 1217.275421][ T5845] usb 4-1: SerialNumber: syz [ 1217.442090][ T5845] usb 4-1: config 0 descriptor?? [ 1217.572283][ T5845] ims_pcu 4-1:0.41: Missing CDC union descriptor [ 1220.653865][ T5845] ims_pcu 4-1:0.41: probe with driver ims_pcu failed with error -22 [ 1221.757666][ T5896] usb 4-1: USB disconnect, device number 54 [ 1221.773778][T15802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1222.052676][T15957] ip6gre1: entered allmulticast mode [ 1222.166968][T15958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2484'. [ 1222.177751][T15958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2484'. [ 1223.743573][T15972] loop6: detected capacity change from 0 to 2098 [ 1225.484887][T15802] veth0_vlan: entered promiscuous mode [ 1225.665588][T15802] veth1_vlan: entered promiscuous mode [ 1226.991871][T15802] veth0_macvtap: entered promiscuous mode [ 1227.032772][T15802] veth1_macvtap: entered promiscuous mode [ 1227.136678][T15802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1227.200547][T15802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1227.254186][T15802] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.293876][T15802] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.322676][T15802] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.394798][T15802] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.785597][ T5845] usb 4-1: new low-speed USB device number 55 using dummy_hcd [ 1228.644851][ T8121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1228.665446][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1228.676976][ T5845] usb 4-1: No LPM exit latency info found, disabling LPM. [ 1228.702672][ T8121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1228.710780][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1228.726702][ T5845] usb 4-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1228.770756][ T5845] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1231.029560][ T5845] usb 4-1: New USB device found, idVendor=1b96, idProduct=0001, bcdDevice= 0.40 [ 1231.095474][ T5845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.511261][ T5845] usb 4-1: can't set config #1, error -71 [ 1231.763913][ T5845] usb 4-1: USB disconnect, device number 55 [ 1231.790181][T16035] netlink: 160720 bytes leftover after parsing attributes in process `syz.6.2502'. [ 1232.782251][ T5903] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1233.686145][ T5903] usb 7-1: Using ep0 maxpacket: 8 [ 1235.115474][T16053] 9pnet_fd: Insufficient options for proto=fd [ 1236.585016][ T5903] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1236.595257][ T5903] usb 7-1: can't read configurations, error -71 [ 1236.753526][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.760043][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1237.447246][T16070] syz.2.2513: attempt to access beyond end of device [ 1237.447246][T16070] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1237.470827][T16070] syz.2.2513: attempt to access beyond end of device [ 1237.470827][T16070] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1237.484493][T16070] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1237.502831][T16070] syz.2.2513: attempt to access beyond end of device [ 1237.502831][T16070] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1237.516239][T16070] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1237.532811][T16070] syz.2.2513: attempt to access beyond end of device [ 1237.532811][T16070] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1237.549080][T16070] syz.2.2513: attempt to access beyond end of device [ 1237.549080][T16070] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1237.588105][ T5896] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 1237.892752][T16070] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1238.224600][T16070] syz.2.2513: attempt to access beyond end of device [ 1238.224600][T16070] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1238.224735][T16070] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1238.226041][T16070] syz.2.2513: attempt to access beyond end of device [ 1238.226041][T16070] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1238.412366][T16070] syz.2.2513: attempt to access beyond end of device [ 1238.412366][T16070] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1238.413174][T16070] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1238.419983][T16070] syz.2.2513: attempt to access beyond end of device [ 1238.419983][T16070] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1238.425085][T16070] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1238.438584][ T5896] usb 6-1: config 0 has an invalid interface number: 30 but max is 0 [ 1238.438616][ T5896] usb 6-1: config 0 has no interface number 0 [ 1238.439554][ T5896] usb 6-1: New USB device found, idVendor=0572, idProduct=d811, bcdDevice=94.e2 [ 1238.439732][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.443752][T16070] syz.2.2513: attempt to access beyond end of device [ 1238.443752][T16070] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1238.449299][T16070] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1238.452132][T16070] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1238.452306][T16070] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 1238.516131][ T5896] usb 6-1: config 0 descriptor?? [ 1238.627474][ T5896] dvb-usb: found a 'Mygica D689 DMB-TH' in warm state. [ 1238.936534][ T5845] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1239.074120][ T5896] usb 6-1: setting power ON [ 1239.079866][ T5896] dvb-usb: bulk message failed: -22 (2/0) [ 1239.116959][ T5845] usb 7-1: Using ep0 maxpacket: 32 [ 1239.157732][ T5845] usb 7-1: config 0 has an invalid interface number: 247 but max is 0 [ 1239.180693][ T5845] usb 7-1: config 0 has no interface number 0 [ 1239.186865][ T5845] usb 7-1: too many endpoints for config 0 interface 247 altsetting 208: 212, using maximum allowed: 30 [ 1239.235601][ T5845] usb 7-1: config 0 interface 247 altsetting 208 has 0 endpoint descriptors, different from the interface descriptor's value: 212 [ 1239.255611][T16065] xt_CT: No such helper "pptp" [ 1239.280249][ T5845] usb 7-1: config 0 interface 247 has no altsetting 0 [ 1239.287130][ T5845] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1239.298828][ T5896] dvb-usb: bulk message failed: -22 (1/0) [ 1239.330788][ T5845] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.387360][ T5845] usb 7-1: config 0 descriptor?? [ 1239.565085][ T5896] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1239.645760][ T5896] dvb-usb: Mygica D689 DMB-TH error while loading driver (-19) [ 1239.711767][ T5896] dvb_usb_cxusb 6-1:0.30: probe with driver dvb_usb_cxusb failed with error -22 [ 1239.765577][ T5896] usb 6-1: USB disconnect, device number 40 [ 1240.828666][T16101] netlink: 160720 bytes leftover after parsing attributes in process `syz.2.2518'. [ 1240.922612][ T5845] usb 7-1: string descriptor 0 read error: -71 [ 1240.942113][ T5845] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1241.033009][ T5845] gspca_nw80x: reg_w err -71 [ 1241.123954][ T5845] nw80x 7-1:0.247: probe with driver nw80x failed with error -71 [ 1241.347357][T16011] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1241.753389][ T5845] usb 7-1: USB disconnect, device number 4 [ 1242.017238][T16011] usb 3-1: Using ep0 maxpacket: 8 [ 1242.051642][T16011] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1242.765871][T16011] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1242.779077][T16011] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1242.789363][T16011] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1242.803101][T16011] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1242.812493][T16011] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1243.612910][T16011] usb 3-1: GET_CAPABILITIES returned 0 [ 1243.618691][T16011] usbtmc 3-1:16.0: can't read capabilities [ 1243.725820][T16011] usb 3-1: USB disconnect, device number 53 [ 1246.649850][T16137] netlink: 'syz.1.2527': attribute type 1 has an invalid length. [ 1246.660029][T16137] trusted_key: encrypted_key: insufficient parameters specified [ 1246.772395][T16011] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1247.017389][T15488] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1247.223523][T16011] usb 7-1: Using ep0 maxpacket: 32 [ 1247.261390][T16011] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 1247.301026][T16011] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1247.344676][T16011] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1247.379636][T16011] usb 7-1: config 1 has no interface number 0 [ 1247.385826][T16011] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 48, changing to 9 [ 1247.497330][T16011] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 8196, setting to 1024 [ 1247.510490][T16011] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1247.523496][T16011] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1247.532794][T16011] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1247.549980][T15488] usb 4-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=db.e9 [ 1247.563364][T15488] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1247.637286][T16011] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 1247.657904][T15488] usb 4-1: config 0 descriptor?? [ 1247.778936][T15488] pcwd_usb: The device isn't a Human Interface Device [ 1248.055493][T15488] usb 4-1: USB disconnect, device number 56 [ 1248.290841][T16011] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now attached [ 1249.460929][T15488] snd_usb_pod 7-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 1251.327373][T16162] netlink: 'syz.3.2535': attribute type 1 has an invalid length. [ 1251.335263][T16162] netlink: 236 bytes leftover after parsing attributes in process `syz.3.2535'. [ 1252.046227][ T5916] usb 7-1: USB disconnect, device number 5 [ 1252.061162][ T5916] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 1254.457905][ T5896] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1254.579003][T16187] netlink: 160720 bytes leftover after parsing attributes in process `syz.6.2541'. [ 1255.275884][ T5896] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1255.356446][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1255.389680][ T5896] usb 3-1: config 0 descriptor?? [ 1255.525198][T16072] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1255.809885][ T5896] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1256.595075][ T5896] [drm:udl_init] *ERROR* Selecting channel failed [ 1256.704229][T16072] usb 7-1: Using ep0 maxpacket: 8 [ 1256.750551][ T5896] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 1256.780549][T16072] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1256.805476][ T5896] [drm] Initialized udl on minor 2 [ 1256.814337][T16072] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1256.839743][ T5896] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1256.860998][T16072] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1256.895929][ T5896] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1256.903953][T16072] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1256.922781][ T5903] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1256.996589][T16205] batadv4: entered promiscuous mode [ 1257.007037][T16205] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 1257.862336][T16072] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1258.464474][ T5903] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1258.485745][T16072] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.498480][ T5903] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1258.572598][ T5896] usb 3-1: USB disconnect, device number 54 [ 1258.849729][T16207] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1260.528332][ T5916] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 1261.395441][ T5916] usb 2-1: config 4 has an invalid interface number: 231 but max is 0 [ 1261.419749][ T5916] usb 2-1: config 4 has no interface number 0 [ 1261.456054][ T5916] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1261.486787][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.544436][ T5916] usb 2-1: Product: syz [ 1261.573423][ T5916] usb 2-1: Manufacturer: syz [ 1261.605660][ T5916] usb 2-1: SerialNumber: syz [ 1261.837663][ T5916] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 1262.315354][ T5916] vp7045: USB control message 'in' went wrong. [ 1262.346058][ T5916] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1262.397082][ T5916] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 1262.960393][ T5896] usb 2-1: USB disconnect, device number 47 [ 1264.001979][T16072] usb 7-1: can't set config #16, error -110 [ 1264.079113][T16072] usb 7-1: USB disconnect, device number 6 [ 1266.777165][T16264] netlink: 'syz.2.2561': attribute type 1 has an invalid length. [ 1266.802658][T16264] trusted_key: encrypted_key: insufficient parameters specified [ 1269.207769][T16011] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1269.367667][T16011] usb 6-1: Using ep0 maxpacket: 32 [ 1269.391498][T16011] usb 6-1: config 0 has an invalid interface number: 145 but max is 1 [ 1269.474742][T16011] usb 6-1: config 0 has an invalid interface number: 43 but max is 1 [ 1269.483031][T16011] usb 6-1: config 0 has an invalid descriptor of length 248, skipping remainder of the config [ 1269.551556][T16011] usb 6-1: config 0 has no interface number 0 [ 1269.747891][T16011] usb 6-1: config 0 has no interface number 1 [ 1269.783508][T16011] usb 6-1: config 0 interface 43 altsetting 250 bulk endpoint 0xF has invalid maxpacket 1023 [ 1269.994985][T16011] usb 6-1: config 0 interface 43 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1270.662716][T16011] usb 6-1: config 0 interface 145 has no altsetting 0 [ 1270.669564][T16011] usb 6-1: config 0 interface 43 has no altsetting 0 [ 1271.377361][T16011] usb 6-1: string descriptor 0 read error: -71 [ 1271.383782][T16011] usb 6-1: New USB device found, idVendor=06cd, idProduct=0104, bcdDevice=c8.6a [ 1271.462832][T16011] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.485714][T16011] usb 6-1: config 0 descriptor?? [ 1272.414473][T16295] batadv1: entered promiscuous mode [ 1272.425471][T16295] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1272.831209][T16011] usb 6-1: can't set config #0, error -71 [ 1272.839019][T16011] usb 6-1: USB disconnect, device number 41 [ 1273.479219][T16309] netlink: 456 bytes leftover after parsing attributes in process `syz.2.2574'. [ 1273.489458][T16309] netlink: 1636 bytes leftover after parsing attributes in process `syz.2.2574'. [ 1275.020296][T16316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2575'. [ 1276.951226][T16324] Falling back ldisc for ptm0. [ 1277.120920][T16332] netlink: 'syz.3.2579': attribute type 1 has an invalid length. [ 1277.148580][T16332] trusted_key: encrypted_key: insufficient parameters specified [ 1279.019765][T16342] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 1279.516886][ T5916] IPVS: starting estimator thread 0... [ 1279.641287][T16346] IPVS: using max 33 ests per chain, 79200 per kthread [ 1281.737780][T16366] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1281.747309][T16366] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1284.941549][T16380] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2593'. [ 1285.224393][T16385] Invalid logical block size (5) [ 1285.392727][T16392] netlink: 160720 bytes leftover after parsing attributes in process `syz.5.2594'. [ 1285.541534][ T5889] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1285.594445][T16072] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1285.701196][T16011] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1285.776197][ T5889] usb 3-1: device descriptor read/64, error -71 [ 1285.840538][T16072] usb 2-1: device descriptor read/64, error -71 [ 1286.035449][ T5889] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1286.898503][T16072] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1286.898574][T16011] usb 6-1: Using ep0 maxpacket: 8 [ 1287.058514][ T5889] usb 3-1: device descriptor read/64, error -71 [ 1287.123161][T16072] usb 2-1: device descriptor read/64, error -71 [ 1287.195888][T16402] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1287.205067][T16402] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1288.042751][T16072] usb usb2-port1: attempt power cycle [ 1288.048720][ T5889] usb usb3-port1: attempt power cycle [ 1288.128755][T16011] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1288.196226][T16011] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1288.356742][T16011] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1288.537474][T16011] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1288.608801][T16072] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1288.628649][ T5889] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1288.636263][T16011] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1288.636295][T16011] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.918707][T16072] usb 2-1: device not accepting address 50, error -71 [ 1289.068379][ T5889] usb 3-1: device not accepting address 57, error -71 [ 1290.080236][T16011] usb 6-1: can't set config #16, error -71 [ 1290.662662][T16072] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1291.043613][T16011] usb 6-1: USB disconnect, device number 42 [ 1291.051680][T16420] netlink: 160720 bytes leftover after parsing attributes in process `syz.3.2604'. [ 1291.077995][T16072] usb 4-1: Using ep0 maxpacket: 8 [ 1291.155619][T16072] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1291.165858][T16072] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1291.176308][T16072] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1291.187517][T16072] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1291.201620][T16072] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1291.211328][T16072] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1291.426055][T16432] bio_check_eod: 2 callbacks suppressed [ 1291.426075][T16432] syz.2.2607: attempt to access beyond end of device [ 1291.426075][T16432] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1291.446998][T16432] syz.2.2607: attempt to access beyond end of device [ 1291.446998][T16432] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1291.463126][T16432] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1291.477539][T16432] syz.2.2607: attempt to access beyond end of device [ 1291.477539][T16432] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1291.516761][T16432] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1291.540496][T16432] syz.2.2607: attempt to access beyond end of device [ 1291.540496][T16432] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1291.557333][T16432] syz.2.2607: attempt to access beyond end of device [ 1291.557333][T16432] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1291.570780][T16432] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1291.580615][T16432] syz.2.2607: attempt to access beyond end of device [ 1291.580615][T16432] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1291.594042][T16432] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1291.615073][T16432] syz.2.2607: attempt to access beyond end of device [ 1291.615073][T16432] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1291.624714][T16072] usb 4-1: GET_CAPABILITIES returned 0 [ 1291.639686][T16432] syz.2.2607: attempt to access beyond end of device [ 1291.639686][T16432] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1291.654004][T16432] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1291.654241][T16072] usbtmc 4-1:16.0: can't read capabilities [ 1291.672936][T16432] syz.2.2607: attempt to access beyond end of device [ 1291.672936][T16432] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1291.687257][T16432] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1291.705914][T16432] syz.2.2607: attempt to access beyond end of device [ 1291.705914][T16432] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1291.723164][T16432] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1291.738763][T16432] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1291.748817][T16432] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 1292.243417][T16072] usb 4-1: USB disconnect, device number 57 [ 1292.387052][T16438] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2608'. [ 1293.436418][T16452] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1293.445526][T16452] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1294.334024][T16457] batadv2: entered promiscuous mode [ 1294.414780][T16457] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1294.724648][T16462] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2615'. [ 1294.744693][T16462] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2615'. [ 1294.753832][T16462] netlink: 58 bytes leftover after parsing attributes in process `syz.2.2615'. [ 1294.922619][T16471] program syz.3.2617 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1295.056045][T16471] program syz.3.2617 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1295.445994][T16471] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1295.530059][T16466] netlink: 'syz.5.2616': attribute type 1 has an invalid length. [ 1296.744282][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 1296.744303][ T30] audit: type=1326 audit(1755771556.736:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16485 comm="syz.3.2622" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f988038ebe9 code=0x0 [ 1298.440259][T16504] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2626'. [ 1299.675756][T16507] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2625'. [ 1299.687917][T16507] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1301.195639][T16526] loop6: detected capacity change from 0 to 524287999 [ 1301.208234][T16526] buffer_io_error: 10 callbacks suppressed [ 1301.208280][T16526] Buffer I/O error on dev loop6, logical block 0, async page read [ 1301.223030][T16526] Buffer I/O error on dev loop6, logical block 0, async page read [ 1301.231299][T16526] Buffer I/O error on dev loop6, logical block 0, async page read [ 1301.240095][T16526] Buffer I/O error on dev loop6, logical block 0, async page read [ 1301.261074][T16526] Buffer I/O error on dev loop6, logical block 0, async page read [ 1301.271014][T16526] Buffer I/O error on dev loop6, logical block 0, async page read [ 1301.281853][T16526] Buffer I/O error on dev loop6, logical block 0, async page read [ 1301.290971][T16526] Buffer I/O error on dev loop6, logical block 0, async page read [ 1301.299816][T16526] ldm_validate_partition_table(): Disk read failed. [ 1301.307049][T16526] Buffer I/O error on dev loop6, logical block 0, async page read [ 1301.316124][T16526] Buffer I/O error on dev loop6, logical block 0, async page read [ 1301.326514][T16526] Dev loop6: unable to read RDB block 0 [ 1301.336727][T16526] loop6: unable to read partition table [ 1301.344533][T16526] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 1303.335698][T15488] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1304.789060][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1304.833865][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1304.886437][T15488] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1305.310261][T15488] usb 3-1: config 0 has no interface number 0 [ 1305.560749][ T6477] Bluetooth: hci6: Frame reassembly failed (-84) [ 1305.561115][ T6477] Bluetooth: hci6: Frame reassembly failed (-84) [ 1305.561338][ T6477] Bluetooth: hci6: Frame reassembly failed (-84) [ 1305.561572][ T6477] Bluetooth: hci6: Frame reassembly failed (-84) [ 1305.561844][ T6477] Bluetooth: hci6: Frame reassembly failed (-84) [ 1305.562064][ T6477] Bluetooth: hci6: Frame reassembly failed (-84) [ 1305.705501][T16535] netlink: 'syz.1.2634': attribute type 1 has an invalid length. [ 1305.740326][T15488] usb 3-1: string descriptor 0 read error: -71 [ 1305.740555][T15488] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1305.740584][T15488] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.799899][T15488] usb 3-1: config 0 descriptor?? [ 1305.800583][T15488] usb 3-1: can't set config #0, error -71 [ 1305.803337][T15488] usb 3-1: USB disconnect, device number 59 [ 1307.539918][ T5833] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1308.589249][T16545] tty tty22: ldisc open failed (-12), clearing slot 21 [ 1309.033652][T16573] bio_check_eod: 2 callbacks suppressed [ 1309.033702][T16573] syz.3.2643: attempt to access beyond end of device [ 1309.033702][T16573] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1309.055924][T16573] syz.3.2643: attempt to access beyond end of device [ 1309.055924][T16573] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1309.070078][T16573] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1309.081434][T16573] syz.3.2643: attempt to access beyond end of device [ 1309.081434][T16573] nbd3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1309.095163][T16573] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1309.110125][T16573] syz.3.2643: attempt to access beyond end of device [ 1309.110125][T16573] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1309.126792][T16573] syz.3.2643: attempt to access beyond end of device [ 1309.126792][T16573] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1309.142412][T16573] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1309.154047][T16573] syz.3.2643: attempt to access beyond end of device [ 1309.154047][T16573] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1309.167654][T16573] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1309.181102][T16573] syz.3.2643: attempt to access beyond end of device [ 1309.181102][T16573] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1309.195270][T16573] syz.3.2643: attempt to access beyond end of device [ 1309.195270][T16573] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1309.209035][T16573] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1309.219412][T16573] syz.3.2643: attempt to access beyond end of device [ 1309.219412][T16573] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1309.232919][T16573] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1309.246457][T16573] syz.3.2643: attempt to access beyond end of device [ 1309.246457][T16573] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1309.260754][T16573] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1309.271103][T16573] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1309.280916][T16573] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 1313.195083][ T5916] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1313.518214][ T5916] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1313.536797][ T5916] usb 4-1: config 0 has no interface number 0 [ 1313.556565][ T5916] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1314.511851][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.673922][ T5916] usb 4-1: Product: syz [ 1314.673953][ T5916] usb 4-1: Manufacturer: syz [ 1314.673969][ T5916] usb 4-1: SerialNumber: syz [ 1314.694073][ T5916] usb 4-1: config 0 descriptor?? [ 1315.124498][ T5916] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1315.183954][ T5916] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1315.279364][ T5916] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1315.288216][ T5916] usb 4-1: media controller created [ 1315.449129][ T5916] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1315.536708][T16618] netlink: 'syz.5.2654': attribute type 1 has an invalid length. [ 1315.562295][T16625] input: syz0 as /devices/virtual/input/input44 [ 1317.344823][ T5916] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 1317.792608][T15488] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 1317.798988][T15488] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 1317.807173][ T5833] Bluetooth: hci5: command 0x0c1a tx timeout [ 1318.133484][T16636] xt_TCPMSS: Only works on TCP SYN packets [ 1318.277707][ T5916] usb 4-1: USB disconnect, device number 58 [ 1319.305437][T16646] batadv3: entered promiscuous mode [ 1319.330501][T16646] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 1327.108721][T16701] batadv3: entered promiscuous mode [ 1327.118807][T16701] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 1329.171250][T16707] netlink: 'syz.5.2677': attribute type 1 has an invalid length. [ 1329.196551][T16707] trusted_key: encrypted_key: insufficient parameters specified [ 1331.535668][T16724] bio_check_eod: 2 callbacks suppressed [ 1331.535690][T16724] syz.6.2680: attempt to access beyond end of device [ 1331.535690][T16724] nbd6: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1331.555261][T16724] syz.6.2680: attempt to access beyond end of device [ 1331.555261][T16724] nbd6: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1331.569678][T16724] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1331.582180][T16724] syz.6.2680: attempt to access beyond end of device [ 1331.582180][T16724] nbd6: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1331.595802][T16724] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1331.617122][T16724] syz.6.2680: attempt to access beyond end of device [ 1331.617122][T16724] nbd6: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1331.632673][T16724] syz.6.2680: attempt to access beyond end of device [ 1331.632673][T16724] nbd6: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1331.647809][T16724] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1331.665480][T16724] syz.6.2680: attempt to access beyond end of device [ 1331.665480][T16724] nbd6: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1331.680447][T16724] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1331.693425][T16724] syz.6.2680: attempt to access beyond end of device [ 1331.693425][T16724] nbd6: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1331.707370][T16724] syz.6.2680: attempt to access beyond end of device [ 1331.707370][T16724] nbd6: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1331.721026][T16724] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1331.731472][T16724] syz.6.2680: attempt to access beyond end of device [ 1331.731472][T16724] nbd6: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1331.745151][T16724] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1331.768555][T16724] syz.6.2680: attempt to access beyond end of device [ 1331.768555][T16724] nbd6: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1331.783765][T16724] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1331.795720][T16724] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1331.805673][T16724] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1) [ 1332.438701][T16730] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095516 [ 1333.501312][T15488] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1333.846691][T15488] usb 3-1: Using ep0 maxpacket: 8 [ 1334.162900][T15488] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x82 has invalid maxpacket 24385, setting to 1024 [ 1334.210097][T15488] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1334.231487][T15488] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1334.298884][T15488] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1334.326967][T15488] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.355674][T15488] usb 3-1: Product: syz [ 1334.370486][T15488] usb 3-1: Manufacturer: syz [ 1334.384697][T15488] usb 3-1: SerialNumber: syz [ 1334.414007][T16745] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2688'. [ 1334.435102][T16736] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1335.570906][T16752] netlink: 'syz.3.2690': attribute type 1 has an invalid length. [ 1335.587897][T16752] trusted_key: encrypted_key: insufficient parameters specified [ 1338.785624][T15488] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 1341.542822][T15488] usb 3-1: USB disconnect, device number 60 [ 1344.626973][T16763] batadv4: entered promiscuous mode [ 1344.644378][T16763] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 1352.289071][T16834] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1352.748631][T16843] bio_check_eod: 2 callbacks suppressed [ 1352.748676][T16843] syz.6.2710: attempt to access beyond end of device [ 1352.748676][T16843] nbd6: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1352.771500][T16843] syz.6.2710: attempt to access beyond end of device [ 1352.771500][T16843] nbd6: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1352.785126][T16843] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1352.801962][T16843] syz.6.2710: attempt to access beyond end of device [ 1352.801962][T16843] nbd6: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1352.815587][T16843] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1352.830478][T16843] syz.6.2710: attempt to access beyond end of device [ 1352.830478][T16843] nbd6: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1352.845229][T16843] syz.6.2710: attempt to access beyond end of device [ 1352.845229][T16843] nbd6: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1352.858795][T16843] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1352.869778][T16843] syz.6.2710: attempt to access beyond end of device [ 1352.869778][T16843] nbd6: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1352.883637][T16843] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1352.896911][T16843] syz.6.2710: attempt to access beyond end of device [ 1352.896911][T16843] nbd6: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1352.911004][T16843] syz.6.2710: attempt to access beyond end of device [ 1352.911004][T16843] nbd6: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1352.924652][T16843] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1352.935225][T16843] syz.6.2710: attempt to access beyond end of device [ 1352.935225][T16843] nbd6: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1352.948885][T16843] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1352.961030][T16843] syz.6.2710: attempt to access beyond end of device [ 1352.961030][T16843] nbd6: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1352.975912][T16843] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1352.986674][T16843] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1352.996451][T16843] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1) [ 1355.771764][ T31] INFO: task syz.0.2409:15659 blocked for more than 143 seconds. [ 1355.814355][ T31] Not tainted 6.16.0-syzkaller #0 [ 1355.988973][T16872] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2718'. [ 1356.166431][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1356.198135][ T31] task:syz.0.2409 state:D stack:25096 pid:15659 tgid:15659 ppid:5844 task_flags:0x400040 flags:0x00004006 [ 1356.305041][ T31] Call Trace: [ 1356.357898][ T31] [ 1356.418724][ T31] __schedule+0x16aa/0x4c90 [ 1356.455057][ T31] ? schedule+0x165/0x360 [ 1356.470092][ T31] ? __pfx___schedule+0x10/0x10 [ 1356.486352][ T31] ? schedule+0x91/0x360 [ 1356.502681][ T31] schedule+0x165/0x360 [ 1356.517611][ T31] __fuse_simple_request+0xf15/0x18d0 [ 1356.539162][ T31] ? __pfx___fuse_simple_request+0x10/0x10 [ 1356.565800][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1356.610828][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1356.701097][ T31] fuse_flush+0x5d4/0x800 [ 1356.705621][ T31] ? __pfx_locks_remove_posix+0x10/0x10 [ 1356.711248][ T31] ? __pfx_fuse_flush+0x10/0x10 [ 1356.717662][ T31] ? __pfx_fuse_flush+0x10/0x10 [ 1356.733520][ T31] filp_flush+0xba/0x190 [ 1356.738861][ T31] filp_close+0x1d/0x40 [ 1356.788226][ T31] __se_sys_close_range+0x359/0x650 [ 1356.796588][ T31] ? __pfx___se_sys_close_range+0x10/0x10 [ 1356.873976][T16877] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2719'. [ 1356.889087][ T31] ? rcu_is_watching+0x15/0xb0 [ 1356.904608][ T31] ? do_syscall_64+0xbe/0x3b0 [ 1356.909896][ T31] do_syscall_64+0xfa/0x3b0 [ 1356.936769][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1356.943909][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1357.011030][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1357.016462][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1357.032846][ T31] RIP: 0033:0x7f7da798ebe9 [ 1357.037997][ T31] RSP: 002b:00007ffeea899258 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1357.048670][ T31] RAX: ffffffffffffffda RBX: 0000000000113547 RCX: 00007f7da798ebe9 [ 1357.062666][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1357.072189][ T31] RBP: 00007f7da7bb7da0 R08: 0000000000000001 R09: 0000001eea89954f [ 1357.080649][ T31] R10: 0000001b30320000 R11: 0000000000000246 R12: 00007f7da7bb609c [ 1357.089696][ T31] R13: 00007f7da7bb6090 R14: ffffffffffffffff R15: 00007ffeea899370 [ 1357.098345][ T31] [ 1357.102346][ T31] [ 1357.102346][ T31] Showing all locks held in the system: [ 1357.114354][ T31] 1 lock held by khungtaskd/31: [ 1357.119832][ T31] #0: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1357.138513][ T31] 2 locks held by getty/5595: [ 1357.161568][ T31] #0: ffff8880350b20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1357.224903][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1357.266912][ T31] 1 lock held by syz-executor/5822: [ 1357.276530][ T31] 2 locks held by kworker/u8:8/6278: [ 1357.282918][ T31] #0: ffff888146a97148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1357.306967][ T31] #1: ffffc9000bf37bc0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1357.390089][ T31] 5 locks held by kworker/u8:10/6477: [ 1357.407216][ T31] 2 locks held by kworker/u8:5/12862: [ 1357.414080][ T31] [ 1357.497769][ T31] ============================================= [ 1357.497769][ T31] [ 1357.507319][ T31] NMI backtrace for cpu 0 [ 1357.507339][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1357.507361][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1357.507374][ T31] Call Trace: [ 1357.507383][ T31] [ 1357.507392][ T31] dump_stack_lvl+0x189/0x250 [ 1357.507418][ T31] ? __wake_up_klogd+0xd9/0x110 [ 1357.507448][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1357.507470][ T31] ? __pfx__printk+0x10/0x10 [ 1357.507511][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1357.507546][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1357.507572][ T31] ? _printk+0xcf/0x120 [ 1357.507603][ T31] ? __pfx__printk+0x10/0x10 [ 1357.507631][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1357.507665][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1357.507698][ T31] watchdog+0xfee/0x1030 [ 1357.507731][ T31] ? watchdog+0x1de/0x1030 [ 1357.507769][ T31] kthread+0x70e/0x8a0 [ 1357.507800][ T31] ? __pfx_watchdog+0x10/0x10 [ 1357.507828][ T31] ? __pfx_kthread+0x10/0x10 [ 1357.507858][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1357.507877][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1357.507896][ T31] ? __pfx_kthread+0x10/0x10 [ 1357.507924][ T31] ret_from_fork+0x3fc/0x770 [ 1357.507949][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1357.507977][ T31] ? __switch_to_asm+0x39/0x70 [ 1357.508001][ T31] ? __switch_to_asm+0x33/0x70 [ 1357.508024][ T31] ? __pfx_kthread+0x10/0x10 [ 1357.508052][ T31] ret_from_fork_asm+0x1a/0x30 [ 1357.508095][ T31] [ 1357.508104][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1357.665107][ C1] NMI backtrace for cpu 1 [ 1357.665126][ C1] CPU: 1 UID: 0 PID: 6278 Comm: kworker/u8:8 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1357.665146][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1357.665157][ C1] Workqueue: bat_events batadv_nc_worker [ 1357.665187][ C1] RIP: 0010:lock_release+0x29a/0x3e0 [ 1357.665205][ C1] Code: c7 c6 fc b6 8d e8 66 56 c8 09 b8 ff ff ff ff 65 0f c1 05 49 83 fe 10 83 f8 01 75 51 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 44 24 20 00 02 00 00 75 56 f7 c3 00 02 00 00 74 01 fb 65 48 8b [ 1357.665219][ C1] RSP: 0000:ffffc9000bf379b8 EFLAGS: 00000046 [ 1357.665235][ C1] RAX: 0000000000000001 RBX: 0000000000000202 RCX: 957a065d7d32d900 [ 1357.665247][ C1] RDX: 0000000000000002 RSI: ffffffff8db6fcc6 RDI: ffffffff8be1ba40 [ 1357.665260][ C1] RBP: ffff8880255f8b40 R08: 0000000000000000 R09: ffffffff8b345592 [ 1357.665272][ C1] R10: dffffc0000000000 R11: ffffffff8b3454c0 R12: 0000000000000002 [ 1357.665284][ C1] R13: 0000000000000002 R14: ffffffff8e13f0e0 R15: ffff8880255f8000 [ 1357.665296][ C1] FS: 0000000000000000(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000 [ 1357.665310][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1357.665323][ C1] CR2: 0000200000032000 CR3: 0000000028f3c000 CR4: 00000000003526f0 [ 1357.665340][ C1] Call Trace: [ 1357.665348][ C1] [ 1357.665356][ C1] ? batadv_nc_worker+0xd2/0x610 [ 1357.665380][ C1] ? batadv_nc_worker+0xd2/0x610 [ 1357.665402][ C1] batadv_nc_worker+0x28c/0x610 [ 1357.665426][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1357.665445][ C1] process_scheduled_works+0xade/0x17b0 [ 1357.665476][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1357.665501][ C1] worker_thread+0x8a0/0xda0 [ 1357.665520][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1357.665549][ C1] ? __kthread_parkme+0x7b/0x200 [ 1357.665577][ C1] kthread+0x70e/0x8a0 [ 1357.665598][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1357.665615][ C1] ? __pfx_kthread+0x10/0x10 [ 1357.665636][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1357.665650][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1357.665666][ C1] ? __pfx_kthread+0x10/0x10 [ 1357.665686][ C1] ret_from_fork+0x3fc/0x770 [ 1357.665704][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1357.665723][ C1] ? __switch_to_asm+0x39/0x70 [ 1357.665741][ C1] ? __switch_to_asm+0x33/0x70 [ 1357.665758][ C1] ? __pfx_kthread+0x10/0x10 [ 1357.665778][ C1] ret_from_fork_asm+0x1a/0x30 [ 1357.665805][ C1] [ 1357.667620][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1357.913658][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1357.923393][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1357.933456][ T31] Call Trace: [ 1357.936748][ T31] [ 1357.939700][ T31] dump_stack_lvl+0x99/0x250 [ 1357.944329][ T31] ? __asan_memcpy+0x40/0x70 [ 1357.948938][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1357.954150][ T31] ? __pfx__printk+0x10/0x10 [ 1357.958768][ T31] panic+0x2db/0x790 [ 1357.962689][ T31] ? __pfx_panic+0x10/0x10 [ 1357.967286][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 1357.973110][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1357.978625][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1357.984817][ T31] watchdog+0x102d/0x1030 [ 1357.989187][ T31] ? watchdog+0x1de/0x1030 [ 1357.993647][ T31] kthread+0x70e/0x8a0 [ 1357.997742][ T31] ? __pfx_watchdog+0x10/0x10 [ 1358.002456][ T31] ? __pfx_kthread+0x10/0x10 [ 1358.007089][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1358.012325][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1358.017809][ T31] ? __pfx_kthread+0x10/0x10 [ 1358.022436][ T31] ret_from_fork+0x3fc/0x770 [ 1358.027040][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1358.032163][ T31] ? __switch_to_asm+0x39/0x70 [ 1358.036944][ T31] ? __switch_to_asm+0x33/0x70 [ 1358.041735][ T31] ? __pfx_kthread+0x10/0x10 [ 1358.046359][ T31] ret_from_fork_asm+0x1a/0x30 [ 1358.051158][ T31] [ 1358.054434][ T31] Kernel Offset: disabled [ 1358.059201][ T31] Rebooting in 86400 seconds..