last executing test programs: 2m51.711915698s ago: executing program 3 (id=815): socket(0x10, 0x803, 0x0) setitimer(0x0, &(0x7f0000000080)={{0x8840000, 0x200}, {0x0, 0x8}}, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x2a800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x28000, 0x0) read$FUSE(r3, &(0x7f000000b180)={0x2020}, 0x2020) 2m50.36377643s ago: executing program 3 (id=817): syz_open_dev$I2C(0x0, 0x0, 0x2080) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0900000004000000e27f00000100000012000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000010cb9c5b8300000000ff0000000000f2330d5f64bed90000000000000000000081"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x12e010, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x1c, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x408042, 0xbe599c78853d95a5) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) setsockopt$inet6_int(r0, 0x29, 0xb, 0x0, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000180)={0x4, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2m47.536007807s ago: executing program 3 (id=818): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000094ae94405f0520c4336a000000010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000030c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003100)={0x1c, r4, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008041}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f00000031c0)={0x3d00, r4, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x2020, 0x61}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x4}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x18c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x168, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCAN_SSIDS={0xa4, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x9, 0x0, @random="3c0c83323a"}, {0xa, 0x0, @default_ap_ssid}, {0x13, 0x0, @random="7245d419cb8a466d9d4197fd618791"}, {0xa, 0x0, @default_ap_ssid}, {0x1b, 0x0, @random="69529925426a726d895a0be7a712e14ab133b1997e4b41"}, {0x1f, 0x0, @random="5901caf0810c7dd5691aa1b3b0f091819587f9c581724c162d1d5b"}, {0x12, 0x0, @random="47f93a39389198cba1dccf580b43"}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x5c}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x2c, 0x84, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="b52876cca9c3"}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7}]}]}, @NL80211_ATTR_SCAN_SSIDS={0x74, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x19, 0x0, @random="0e64cac26d09a0ac2eb0980ef60735cf24c74e1633"}, {0xa, 0x0, @default_ibss_ssid}, {0x24, 0x0, @random="e17c7999c2774ef856383b48145a03edc7149debea3ca66303e5923ab75a755e"}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x2}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x11ec, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_PKT_PATTERN={0x11d0, 0x4, 0x0, 0x1, [{0x1090, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x1004, 0x1, "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"}, @NL80211_PKTPAT_PATTERN={0x85, 0x2, "1d602b1752f64d4400d672d709e99b1647620ef2d15b3eded5aaa0290fb5f43b1710518b88c3a646886074db8df545036b7789228e90e7aa2d7e3004c5136836f8044a8370fcdde2afc1bfea3205be7a3c1f0a90b665edac989dfc60819a68c1780cc11e5668ba5740f1421046fa2b90509c3273598120b35c7b34a603b974326e"}]}, {0x13c, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x1d, 0x1, "93b8b8928822dbc7c2815bfca8e9cf8d60cb81031085686827"}, @NL80211_PKTPAT_PATTERN={0x5a, 0x2, "5085384a4b496cdcd0113fea1a5bfdc4bfd6635d2425ab70fe7dcbf1c7a6be06a4618c6b8a64c0261cfb57bc701a1a20d6e9614a494937b62f426248ad6cccbc5197d351ab257f9f43a1a8e07fd457a00d4726e4b2da"}, @NL80211_PKTPAT_MASK={0x52, 0x1, "8401b50ce03dfdbcb18267bb7eadf9d6009d1265b31693620b10113b5dac90ea828ff3e57289f9a09c233b9e49a25a299dbd328a453e3ced020958845f43754fa01189862510b0f4f6effdb50a83"}, @NL80211_PKTPAT_MASK={0x65, 0x1, "fd1190d42a2ec18b2be7174a32b4cb83ab3e4ad904fcfc27ad9b52a74ad8e010f7c54d627681ffbc88e6a1b935c44ce3a3928747e8a620e3a8a43432f97d621de8aa72434fb951b8a76faefb65316c2cf509691c867b990df6b5e5dcfbd921066a"}]}]}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x290c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_PKT_PATTERN={0x828, 0x4, 0x0, 0x1, [{0x32c, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0xa8, 0x2, "0b0cedfad5b90911da99ba181399f5d7f247a23d51807cd610c401618b44e49021a6f07dc01c8b6ae9769aa90a284a998969b2c32c5f965107092d5aab83ebfc88debb68a6cbdfab257f777d30f6c0ac3ccfb89a1d7be2baa93d42b37a0e03b5128a54ed8976144f28cd5d79591ae35e783907fb2cea7290cf7efd425529085f6cadbaf43f151c0d4eb2355ef9edd23954eb84bb9265e2f889df1776896363427de768a6"}, @NL80211_PKTPAT_PATTERN={0x27d, 0x2, "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"}]}, {0x274, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0xf0, 0x2, "d8a4336e96ba96c9ab0061772bedd48d8ff3283103eb3583335c0725dcb287e4cd561925426a7072cafc0d76964c81496b76081750a84e20b10d14cb4b7feec62758fd054d60b984f59d4df70d02be9c0b91387bc410964f87109f0cdecfcdd6c63479f72d48128fcd69073cfbadee7c0ee7c5e51cedd2f5a65a906250ba57f00d5ffcb61f5d7e922871bd9cbe6657cc5566179aece9688d975d9cdf7b97b6ee73ef839a1b0a3c3399eeda5f7f17044360a8075174827aa7d750a8ceda2635f67ef46778144bc3296313060c84a81fff625500193ac36afd0fd91dee8286ccc4b38f6b5364a0f53b4d6cc14a"}, @NL80211_PKTPAT_PATTERN={0x3b, 0x2, "b2a01fb827d8d4ba0b4a288a347e53d79110858e248af139d3400673292a2012287fa57749129cda35891c41798bea9fc82da94b5bee81"}, @NL80211_PKTPAT_MASK={0x70, 0x1, "7858d8f87c674c3d743e48f3e3d7dd13f32c5f586bbc5bb43b1a87c71edc2618a8df3af1f3dc40a85cc1471dc9cd1dc6bffd96d61c0ce6b686cd472c2b77c745687fd15cc490b6b1c453fac89d8e02b61cd6ba6bb1e2a4cb8e5e4d26700d763ace6e3d55bc635c2c372d46ec"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x5}, @NL80211_PKTPAT_MASK={0x7e, 0x1, "21d4b02fa4641367cc0966f99444432ec5d84cf04f950186b6d10fb1e02f349c1665c4dc28d86a5577e13ab1683747e5f679e8050d883776ebb8635bb7aad2a3ff57ff99edede564c6a4149386a910eb7e2b4d2377ba76525edfb16f88469f7ca6970ad283b6829bf30bccdce9a5d51a7cbebfd71f34c4f47500"}, @NL80211_PKTPAT_PATTERN={0x4b, 0x2, "e33cd8ae3cc0d7fcc0a14c3b3b2684601240ab0d793fa8c5c78b84ae36b7dcf90dd87021a14c0e8963c3e126b1ecfa7261a6ee04be12f14d13a988ad7309535c23bf48b7a2ab56"}]}, {0x284, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1}, @NL80211_PKTPAT_PATTERN={0x9d, 0x2, "f69f2f01297cc061705fea104c2192dfd2bb5930c47c9b731971effc3c61276b43a31d1ce022d47b3dfaa21404af2cb74b392be64ffacc1a2eb27ffd7a2b48e1c437af0b2411ad3502d3fadfcba4e84b9beefd83d6d68f2c79b67f3318e6ca512e01972ffb5fb8a293384f5cd9dd9d8d85a54dc344423040dfd39650db60d4e861c01fd0b942fec6deaa6427bb1a1e5ab05333e9301def2475"}, @NL80211_PKTPAT_PATTERN={0x7a, 0x2, "036b20189f1209e920894368f71f961af48e3bcbaf0d0eb465d1be5e7a007466671406ed317773f0215c5b1d25f601df7768ab3dd60f8c96055700fb5620a0e51a7349704a3bdd3446a2ac612de9330375924efff686a62e91addb8a302d96f57b5471256330eb5fd571d7364a7704eab7155dec6c75"}, @NL80211_PKTPAT_MASK={0xb8, 0x1, "e4a331018cc13c2bf75cb063624691444f116546fd9498a072cb6a46583cdbaadafadd72c24c408f27b4af99324da016e1b97765e7595bd1d7bf68f5bfbba0b0b89b847ba2e97f1a990394a4620199f1e51dcaa81a0374d49a9987ee62cc5a198104d3dd43248e066ac259d277be650e9d731e95243246800bb42bf4278a9b086c4cec35238cee79cd04907b4b140caed6d31f58d77129ef0680852b87b9ff902ec7c7b15630ffd4c255b8bfcd1d9055602e92a1"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x6}, @NL80211_PKTPAT_MASK={0x9b, 0x1, "07a51c9c185f1fe3c678a26af1450b1869d4014502d4571fe26d1c41f945a679c565fafca4a555ee61cf780b75d391d6b0fba25e53fc7e93c8113423b59c872cb90286241f0e915dc46629a5a542eaa0f3f759ad13a8d6a4c07fbf6405f00f77fa64432dde4f5a556314e808d713cefafa2841d0f0696133631ecc3455e9519a0972d0ac583d1c8950e7f7ff63098e50f02e9581d258ea"}]}]}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x20d8, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @private=0xa010100}, @NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0x1}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0x100c, 0x8, {0x6, 0x8, "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"}}, @NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x5}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x18}}, @NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0x1004, 0xa, "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"}, @NL80211_WOWLAN_TCP_WAKE_MASK={0xa3, 0xb, "9ba458029b58d27e32bf91ee3e04b8688348665b6efff803d4f980de872690bdf3e65fdf129e9e4e4e4a394f1534c0c033c18128a1b6bba42bad31eb0f5e61904322f6e4b33a050a48db17d7eaecfada8361ee0221c77c4cb34284ede8eb0dd02b4151306b6c52c4c5f555acbb787c90bb7bf5988cf73b9f62a5fd032e762ff1a9e72b36d039b60cf0c21b0c23f7df4fba7c663c5ff752bd942b26dae14146"}]}, @NL80211_WOWLAN_TRIG_ANY={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x14, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x18, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}]}]}, 0x3d00}, 0x1, 0x0, 0x0, 0x4}, 0x404c001) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000540)={{@local, 0x2}, 0x0, 0x9, 0xffffffff, 0x40}) 2m47.31636445s ago: executing program 0 (id=819): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) (rerun: 64) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, &(0x7f0000000080)) (async) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @pic={0x6, 0x9, 0x7, 0x80, 0x5, 0x9, 0x9, 0x10, 0x5, 0xf7, 0x9, 0x8, 0x1, 0x9, 0x4, 0x1}}) 2m45.708458699s ago: executing program 0 (id=824): shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="fcffffff00"/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000fe00850000008200000018110000", @ANYRES32=r1, @ANYRES32], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00'}) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_INIT(r7, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000700000000000000000000000095009a0000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x240}, 0x94) socket$kcm(0x10, 0x2, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f00000002c0)="ae24a21f9a824666f9acf0e0163f", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x3}, 0x50) 2m41.614694609s ago: executing program 0 (id=827): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x2000201a}) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) syz_emit_ethernet(0x19a, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60eaff0201642c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000e"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r2, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r2, 0x1) r3 = dup(r1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000480)=@ethtool_gfeatures={0x2e, 0x10000000000000e1}}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0000001baaaaaaaaaabbaaaaaaaaaabb86dd698bd9fb0420060100000000000099ddce897c1687a04fba6a00000000000000000001fe8800000000735021aa7557cfc80cc95c3e"], 0x5a) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000200)='ecryptfs\x00', 0x0, 0x0) 2m41.515807575s ago: executing program 3 (id=828): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9c, 0x32, 0x3f, 0x8, 0x4a5, 0x3003, 0x3ab2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x28, 0xf0, 0xf6}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000640)={0x14, 0x0, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x1, 0xd) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2m41.194284429s ago: executing program 4 (id=830): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911036000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x2c, &(0x7f00000004c0)=0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0xfffffffa, 0x401, 0xff, 0x34000, 0x1, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x0, 0xc}, 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0x0, 0x0, 0x18}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f00000001c0), &(0x7f0000000200)=r0}, 0x20) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000300)={0x28, 0x0, 0x2710}, 0x10) getsockopt(r2, 0x1, 0x4, 0x0, &(0x7f0000000200)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fcntl$getown(r3, 0x9) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') pread64(r4, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYRES16], 0x40}, 0x1, 0x0, 0x0, 0x20008094}, 0x4c014) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x9}, 0x8) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x44}, 0x1, 0x1000000}, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x1000, 0x2}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r9, r8, 0x0) 2m40.475110123s ago: executing program 4 (id=832): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b3426c8928f3d97cb", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f0000000000)=""/35, 0x23) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)={0x524, 0x0, 0x712, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x7b}}}}, [@NL80211_ATTR_TX_RATES={0xf0, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0xc, 0x5, 0x36, 0x5, 0x4, 0x1, 0x30, 0x60, 0x4, 0x1, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x7, 0x7, 0x2, 0x5, 0x0, 0x4, 0x800]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x4, 0x8}, {0x6, 0x4}, {0x1, 0x1}, {0x0, 0x8}, {0x5, 0x2}, {0x2, 0x7}, {0x4, 0x6}, {0x4, 0xa}, {0x7, 0x3}, {0x1, 0x7}, {0x1, 0x6}, {0x5, 0x1}, {0x3, 0x1}, {0x7, 0xa}, {0x3}, {0x7, 0x8}, {0x0, 0x1}, {0x1, 0xa}, {0x1, 0x8}, {0x4, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x4, 0x7fff, 0x3, 0x36, 0xfffc, 0x2, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0xff}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x5, 0x24, 0x1b, 0x5, 0x36, 0x9, 0x12, 0x6c, 0x5, 0x12, 0x1, 0x60, 0x60, 0x1b, 0x60, 0x24, 0x6, 0x3, 0x18]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x4, 0x5, 0x6c, 0xc, 0x36, 0x6c]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x3, 0x4, 0x3, 0x32bf, 0x5, 0x7, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0xa0, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0xe, 0x2, [{0x6, 0x8}, {0x2, 0x2}, {0x4, 0x3}, {0x7, 0x5}, {0x4, 0x1}, {0x2, 0x2}, {0x7, 0x1}, {0x7, 0xa}, {0x2, 0x5}, {0x0, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x4, 0xb2c, 0xffff, 0x1, 0x7b4, 0x3, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x10, 0xab40, 0x0, 0x3, 0x6, 0x7, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x4f, 0x8, 0x401, 0x5, 0x9, 0x9db0, 0x100]}}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xf, 0x2, [{0x5, 0x7}, {0x0, 0x7}, {0x5}, {0x5, 0x7}, {0x1, 0x1}, {0x3, 0xa}, {0x5, 0x9}, {0x2, 0xa}, {0x1, 0x3}, {0x6, 0x8}, {0x3, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1, 0x6, 0x4, 0xae, 0xde, 0x0, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x3, 0x0, 0xd32, 0x7, 0x3, 0x6, 0x4]}}]}]}, @NL80211_ATTR_TX_RATES={0x9c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x1, 0x9]}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x32, 0x2, [{0x0, 0x9}, {0x7, 0x7}, {0x1, 0x3}, {0x6, 0xa}, {0x4}, {0x5, 0x9}, {0x0, 0xa}, {0x0, 0x7}, {0x5, 0x8}, {0x4, 0x8}, {0x1, 0x5}, {0x4}, {0x4, 0x9}, {0x7, 0x7}, {0x6, 0x6}, {0x6, 0x9}, {0x1, 0x4}, {0x0, 0x3}, {0x1, 0x1}, {0x5, 0x9}, {0x6, 0xf}, {0x6, 0x3}, {0x6, 0x1}, {0x5}, {0x4}, {0x0, 0x6}, {0x2, 0x7}, {0x4, 0xa}, {0x3, 0x6}, {0x1, 0x3}, {0x2, 0x6}, {0x1, 0x8}, {0x5, 0x1}, {0x0, 0x2}, {0x6, 0x4}, {0x0, 0xa}, {0x4, 0x6}, {0x1, 0x8}, {0x3, 0x9}, {0x4, 0x2}, {0x1, 0x6}, {0x4, 0x5}, {0x2, 0x9}, {}, {0x2, 0x7}, {0x4, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0xfffa, 0x3, 0x0, 0x2, 0x8000, 0x9, 0x5a7]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x2, 0x30, 0x6, 0x2, 0x6, 0x24, 0x3, 0x1b, 0xb, 0xc, 0x24, 0x1, 0x6c, 0x12, 0x3, 0x18, 0x36, 0x16, 0x30, 0x48, 0x5, 0x60, 0x30, 0x25, 0x1, 0x5, 0x1b, 0x12, 0xa040ec3ec88fa962, 0x5]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0xc, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x1f4, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xe, 0x0, 0x1, 0x1000, 0x4, 0x14, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x1, 0x7, 0x8, 0x9, 0x9, 0x4, 0xb]}}]}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x1, 0x7}, {0x0, 0x5}, {0x1, 0x5}, {0x4, 0x2}, {0x2, 0x6}, {0x6, 0x1}, {0x4, 0x9}, {0x0, 0x2}, {0x2}, {0x6, 0x3}, {0x1, 0x3}, {0x0, 0x4}, {0x1, 0x9}, {0x3, 0x5}, {0x0, 0x1}, {0x6, 0x6}, {}, {0x7, 0x4}, {0x3, 0x8}, {0x1, 0x6}, {0x4, 0x7}, {0x3, 0x5}, {0x1, 0x9}, {0x3, 0x2}, {0x0, 0x4}, {0x4, 0x2}, {0x1, 0x8}, {0x0, 0x9}, {0x1, 0x6}, {0x1, 0x7}, {0x5, 0x3}, {0x0, 0x8}, {}, {0x1, 0x4}, {0x1, 0x3}, {0x2, 0x5}, {0x4, 0x3}, {0x0, 0xa}, {0x3, 0x1}, {0x0, 0x8}, {0x7, 0x8}, {0x3, 0x7}, {0x7, 0x6}, {0x5, 0x4}, {0x4, 0x6}, {0x2, 0x4}, {0x5, 0x5}, {0x0, 0x6}, {0x2, 0x7}, {0x7, 0x7}, {0x4, 0x3}, {0x4, 0x6}, {0x7, 0x5}, {0x5, 0x3}, {0x2, 0x9}, {0x5, 0x2}, {0x6, 0x4}, {0x2, 0x5}, {0x6, 0x2}, {0x1, 0x9}, {0x4, 0x4}, {0x1, 0x7}, {0x1, 0x7}, {0x1, 0x5}]}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x30, 0x48, 0x4, 0x0, 0x6c, 0x30, 0x48, 0x4, 0x3, 0x48, 0x36, 0x12]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc63, 0x0, 0xcfce, 0x3, 0x1, 0x2, 0x6, 0x54]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xb0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x5, 0x5e2, 0x9348, 0x2, 0x2, 0x0, 0x80a7]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x24, 0x5, 0x6, 0x4, 0x48, 0x9, 0x4, 0x48, 0x1b, 0x30, 0x5]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x6, 0x8}, {0x3, 0x9}, {0x3, 0x8}, {0x7, 0x1}, {}, {0x3, 0x6}, {0x3}, {0x0, 0x3}, {0x3, 0x1}, {0x5, 0x4}, {0x7, 0x6}, {0x3, 0x1}, {0x1, 0x5}, {0x7, 0xa}, {0x0, 0x4}, {0x3}, {0x5, 0x6}, {0x3, 0x6}, {0x1, 0x4}, {0x6, 0x8}, {0x0, 0x1}, {0x7, 0x6}, {0x6, 0x2}, {0x4}, {0x3, 0xa}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x3}, {}, {0x7, 0x8}, {}, {0x0, 0x4}, {0x0, 0x5}, {0x0, 0x6}, {0x1, 0x9}, {0x3, 0x2}, {0x3, 0x5}, {0x6, 0x2}, {0x0, 0x7}, {0x7, 0x3}, {0x1, 0x8}, {0x2, 0x7}, {0x7, 0x8}, {0x6, 0x5}, {0x2, 0x6}, {0x1, 0x1}, {0x3, 0x2}, {0x5, 0x6}, {0x3, 0x4}, {0x0, 0x7}, {0x7, 0x4}, {0x0, 0xa}, {0x1, 0x3}, {0x0, 0x4}, {0x5, 0xa}, {0x4, 0x4}, {0x0, 0x6}, {0x2, 0x7}, {0x0, 0x7}, {0x0, 0xa}, {0x5, 0x9}, {0x0, 0x8}, {0x2, 0x4}, {0x7}, {0x4, 0xa}, {0x5, 0x7}, {0x6, 0x8}, {0x4, 0x5}, {0x1, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x4, 0x1, 0xfc94, 0x1, 0xd, 0x1, 0x3]}}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0xc, 0x8, 0x0, 0x4, 0xa870, 0xf, 0x800]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x80, 0x4, 0x3, 0xa9ea, 0x3, 0x2, 0x6]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x12, 0x12, 0x18, 0x6, 0xb, 0x3b, 0x18, 0x58, 0x1b, 0x36, 0x6a]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x5, 0xfff8, 0x1, 0xff, 0x9, 0x800, 0x8]}}]}]}, @NL80211_ATTR_TX_RATES={0xdc, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x7, 0x6, 0x8, 0xd5, 0x3, 0x181, 0x3]}}]}, @NL80211_BAND_60GHZ={0xc0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x19, 0x2, [{0x1, 0xa}, {0x1, 0x1}, {0x2, 0x8}, {0x5, 0x9}, {0x2, 0x2}, {0x2, 0xa}, {0x6, 0x3}, {0x2, 0x3}, {0x5}, {0x7}, {0x7, 0x7}, {0x0, 0x7}, {0x1, 0x2}, {0x4, 0xa}, {0x2, 0x6}, {0x3, 0x3}, {0x6, 0x9}, {0x6, 0x6}, {0x2}, {0x7, 0x5}, {0x1, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x3, 0x7}, {0x7, 0x2}, {0x3, 0x9}, {0x0, 0x4}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x1}, {0x3, 0x9}, {0x5, 0xa}, {0x0, 0x9}, {0x4, 0x8}, {0x7, 0x4}, {0x4, 0x1}, {0x5, 0x7}, {0x7, 0x1}, {0x1, 0x7}, {0x1, 0x2}, {0x6, 0x6}, {0x1, 0x3}, {0x5, 0x8}, {}, {}, {}, {0x3, 0x9}, {0x2, 0x6}, {0x0, 0x9}, {}, {0x4, 0x8}, {0x4, 0x6}, {0x7, 0x9}, {0x6, 0x5}, {0x4, 0x8}, {0x7, 0x7}, {0x7, 0x1}, {0x6, 0xa}, {0x5, 0x4}, {0x1, 0x8}, {0x0, 0x4}, {0x3, 0x9}, {0x4, 0x5}, {0x2, 0x1}, {0x6, 0x3}, {}, {0x6, 0x5}, {0x3, 0x2}, {0x5}, {0x4, 0x7}, {0x6, 0x7}, {0x0, 0x5}, {0x5, 0x6}, {0x0, 0x9}, {0x1, 0x8}, {0x2, 0x2}, {0x0, 0x8}, {0x7, 0x6}, {0x2, 0x2}, {0x7, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x2, 0x2}, {0x5, 0x9}, {0x6, 0x9}, {0x1, 0x5}, {0x5, 0xa}, {0x5, 0x4}, {0x5, 0x3}, {}, {0x1, 0x4}, {0x2, 0x4}, {0x7, 0x1}, {0x3}, {0x4, 0x5}, {0x5, 0x7}, {0x3}, {0x3, 0xa}, {0x3, 0x9}, {0x6}, {0x1, 0x5}, {0x2, 0x9}, {0x1, 0x8}, {0x1}, {0x3, 0x7}, {0x2, 0x3}, {0x3, 0x3}, {0x5, 0x9}, {0x0, 0x5}, {0x3, 0x4}, {0x6, 0x9}, {0x1, 0x6}, {0x3, 0xa}, {0x1, 0xa}, {0x1, 0x2}, {}, {0x7, 0x1}, {0x2, 0x5}, {0x0, 0x5}, {0x2, 0x3}, {0x5, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7, 0xfff9, 0x7, 0x7f, 0x8, 0x1b88, 0x8]}}]}]}]}, 0x524}, 0x1, 0x0, 0x0, 0x4000000}, 0x41040) 2m40.297224062s ago: executing program 4 (id=833): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r3, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) 2m40.186351484s ago: executing program 0 (id=834): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r0, 0x3) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x40, 0x101100) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x0, 0x1, 0xfffffffc, 0x6, 0x4, 0x0, "5d0c21fcec1e0000000000000000b2ff", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000380)={0xffffff07, 0x100, "8c749713864f33cc6d21cfa7df910d11471366238181c7a008db11883c7c3686", 0x2ce5, 0x6, 0x8000, 0x8, 0x1, 0x3, 0x7, 0xde1, [0x4, 0x1, 0x4, 0x8]}) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0xff, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '@\x00', 0x14, 0x6, 0x1, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0xf}}}}}}}, 0x0) 2m40.15651004s ago: executing program 4 (id=835): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000300)="0fc71c3e2e0f09b8010000000f01d92e360f01cfb805000000b9003000000f01c1b9800000c00f3235002000000f300f01cfb930030000b800800000ba000000000f302e0f015d0b66b801018ed8", 0x4e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='[', 0x1, 0x20004840, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r4 = syz_open_pts(0xffffffffffffffff, 0x4142) ioctl$GIO_FONT(r4, 0x4b60, &(0x7f0000000640)=""/151) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b00010000000009040800010300000009", @ANYBLOB="8fcf"], 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8) add_key(&(0x7f00000002c0)='cifs.idmap\x00', &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, &(0x7f00000003c0)={0xed, 0x0, 0x8000000000000000}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(0xffffffffffffffff, 0x5, &(0x7f0000000080)={{r5, r6+60000000}}, &(0x7f00000000c0)) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m38.806814536s ago: executing program 3 (id=837): shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="fcffffff00"/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000fe00850000008200000018110000", @ANYRES32=r1, @ANYRES32], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00'}) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_INIT(r7, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000700000000000000000000000095009a0000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x240}, 0x94) socket$kcm(0x10, 0x2, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f00000002c0)="ae24a21f9a824666f9acf0e0163f", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x3}, 0x50) 2m37.322237397s ago: executing program 3 (id=839): sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000001c0), 0x10131, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000240)={'tunl0\x00', 0x0, 0x20, 0x7, 0x151, 0x8, {{0xa, 0x4, 0x0, 0x4, 0x28, 0x66, 0x0, 0x6, 0x4, 0x0, @local, @remote, {[@noop, @rr={0x7, 0x13, 0xf9, [@multicast2, @rand_addr=0x64010100, @private=0xa010101, @empty]}]}}}}}) socket$inet6(0xa, 0x2, 0x0) prctl$PR_MCE_KILL(0x35, 0x0, 0x10) 2m34.966685378s ago: executing program 4 (id=841): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) r0 = syz_io_uring_setup(0x16ba, &(0x7f0000000680)={0x0, 0x10007d89, 0x10100, 0x3, 0x85}, &(0x7f0000000540)=0x0, &(0x7f0000000700)=0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000980)={@multicast1, @local, 0x0}, &(0x7f00000009c0)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="98090000", @ANYRES16=0x0, @ANYBLOB="000428bd7000ffdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="4401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000800000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="0800070000000000400001002400010071756575655f4b640000000000000000000000000000000010000000000000000500030003e8ffff070004001406000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="bc0002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400bbbf000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000010000008000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000104000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="f400028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="f801028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e00004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c00040040000707020000008000048001010000060002020100010038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040089d5000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000700000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000700000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400ff07000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400cf00000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000000000008000100", @ANYRES32=0x0, @ANYBLOB="30010280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000200000008000600", @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000500000008000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000800000038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040005000000"], 0x998}, 0x1, 0x0, 0x0, 0xc081}, 0x800) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) r7 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r7, &(0x7f0000000200)={0xa, 0x0, 0xfffffff9, @mcast2, 0x7ff, 0x2}, 0x20) getpgid(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200"], 0x0}, 0x94) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x1d39, 0xcec, 0x0, 0x0, 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r11, @ANYBLOB=',wfdno=', @ANYRESHEX=r12, @ANYBLOB="2c6163636573733da3c8fdf51edc7fcf4772981c7fe8640c52138165e25e149e9feb5ad9adb32c785941581380d1703f2a1d93997ede8e1f69685cb8e2449bedd55ddb925fc1c2ea78ead3c0ca7d52bf2ab7de8985a704ea2690210ba714a3e9bbe965fd6b0ba4e0ee2e6035afe4557316fb60fef990de7906bdf16a075b28a4c444abd84a595777fa400c834cbbefce43efda84bed7", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 2m34.611621149s ago: executing program 2 (id=842): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000004b6fd0004800000ffffffffeeff0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000004c0)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 2m33.860646035s ago: executing program 4 (id=843): write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x0, 0x85, "00000000000000000000ffff00"}) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000100)={0xa, 0x80, 0x1, 0x1, 0x8, "c098e7b0bd21430de428cf78b7adfdec60be6a", 0x1, 0x5}) syz_open_pts(0xffffffffffffffff, 0x100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(0xffffffffffffffff) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x24, 0x1402, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) setpriority(0x2, 0x0, 0x1) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="11", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r2, r3, 0x0, 0x8000fb00) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000280)={0x0, 0xec25, 0x400, 0x3, 0x40000330}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r4, 0x47ba, 0x0, 0x28, 0x0, 0x0) 2m33.804357615s ago: executing program 0 (id=844): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x29, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002200), r0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0xffffffffffffffff, 0x3, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000300)={0x30, r2, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)={r4}) 2m33.715584261s ago: executing program 1 (id=845): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r3, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) 2m33.139563002s ago: executing program 0 (id=846): sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000001c0), 0x10131, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}], 0x12) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000240)={'tunl0\x00', 0x0, 0x20, 0x7, 0x151, 0x8, {{0xa, 0x4, 0x0, 0x4, 0x28, 0x66, 0x0, 0x6, 0x4, 0x0, @local, @remote, {[@noop, @rr={0x7, 0x13, 0xf9, [@multicast2, @rand_addr=0x64010100, @private=0xa010101, @empty]}]}}}}}) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000340)={{{@in=@broadcast, @in6=@loopback, 0x4e20, 0x401, 0x4e20, 0x7, 0xa, 0x80, 0xa0, 0x2, r4}, {0x23e4b4dc, 0xe72f, 0x2, 0xd6, 0x300000000000000, 0x8, 0x8, 0x80000001}, {0xf6c, 0x1, 0x6, 0x9f}, 0x7fff, 0x6e6bb4, 0x0, 0x1, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d4, 0x33}, 0xa, @in=@private=0xa010100, 0x3507, 0x2, 0x1, 0x3, 0xa, 0x7f, 0xf78}}, 0xe8) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) prctl$PR_MCE_KILL(0x35, 0x0, 0x10) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) 2m32.921619711s ago: executing program 2 (id=847): syz_extract_tcp_res(&(0x7f0000000140)={0x41424344}, 0x101, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000200)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x15, 0x4, 0x3, 0x3f, 0x5c, 0x66, 0x0, 0xdd, 0x1, 0x0, @private=0xa010100, @private=0xa010102, {[@timestamp_prespec={0x44, 0x24, 0x7b, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff800000}, {@loopback, 0x9}, {@loopback, 0x800}, {@loopback, 0xc}]}, @rr={0x7, 0x1b, 0x4, [@multicast2, @rand_addr=0x64010101, @loopback, @private=0xa010100, @multicast1, @loopback]}]}}, @address_reply={0x12, 0x0, 0x0, 0x7}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000640)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @multicast2, @local}, {{0x0, 0x4e22, r0, 0x41424344, 0x0, 0x2, 0x5, 0x4}}}}}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000080)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000009c0), &(0x7f00000002c0)=0x8) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4627, 0xffffff81, @empty, 0x80}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000055c0)=[{{&(0x7f0000001640)={0xa, 0xf, 0xfffffc01, @ipv4={'\x00', '\xff\xff', @loopback}, 0xe}, 0x1c, &(0x7f0000002880)=[{&(0x7f0000000040)="9c43", 0xffe3}], 0x1}}], 0x1, 0x4001c00) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000040), 0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x7f, 0xffffffff}) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000480)='GPL\x00', 0x4000, 0x0, 0x0, 0x1e00, 0x46, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 2m32.920662415s ago: executing program 1 (id=848): r0 = timerfd_create(0x0, 0x800) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x3c, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x10c, 0x10, 0x7, 0x0, 0x25dfdbfc, {{@in6=@empty, @in6=@mcast1, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0xee00}, {@in=@empty, 0x0, 0x2b}, @in6=@local, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x6}, {0x40100, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @extra_flags={0x8, 0x23, 0x9}]}, 0x10c}}, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000380)={0x0, 0x5edc, 0x1b200, 0x1, 0x40000333, 0x0, r0}, &(0x7f0000000000)=0x0, &(0x7f0000000240)=0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x20, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r8, 0x0, 0x16, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x10000000000) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4e23, 0xe9db8df3, @local, 0x2}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r9, 0x5761, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000010"]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x958028, &(0x7f0000000080)=ANY=[@ANYBLOB="6d6f6465a971a6ba3d303030303030303030303030303030303030303030"]) setsockopt$sock_linger(r6, 0x1, 0x3e, &(0x7f0000000180)={0x200000000000001}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000400)=""/245, 0xf5}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r10, 0x891c, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e20, @empty}}) timerfd_gettime(r0, &(0x7f0000000040)) 2m25.949667443s ago: executing program 2 (id=849): shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="fcffffff00"/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000fe00850000008200000018110000", @ANYRES32=r1, @ANYRES32], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00'}) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_INIT(r7, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000700000000000000000000000095009a0000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x240}, 0x94) socket$kcm(0x10, 0x2, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f00000002c0)="ae24a21f9a824666f9acf0e0163f", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x3}, 0x50) 2m22.108140292s ago: executing program 1 (id=850): socket(0x10, 0x803, 0x0) setitimer(0x0, &(0x7f0000000080)={{0x8840000, 0x200}, {0x0, 0x8}}, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x2a800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x28000, 0x0) read$FUSE(r2, &(0x7f000000b180)={0x2020}, 0x2020) 2m20.136022842s ago: executing program 32 (id=839): sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000001c0), 0x10131, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000240)={'tunl0\x00', 0x0, 0x20, 0x7, 0x151, 0x8, {{0xa, 0x4, 0x0, 0x4, 0x28, 0x66, 0x0, 0x6, 0x4, 0x0, @local, @remote, {[@noop, @rr={0x7, 0x13, 0xf9, [@multicast2, @rand_addr=0x64010100, @private=0xa010101, @empty]}]}}}}}) socket$inet6(0xa, 0x2, 0x0) prctl$PR_MCE_KILL(0x35, 0x0, 0x10) 2m15.529154196s ago: executing program 33 (id=846): sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000001c0), 0x10131, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}], 0x12) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000240)={'tunl0\x00', 0x0, 0x20, 0x7, 0x151, 0x8, {{0xa, 0x4, 0x0, 0x4, 0x28, 0x66, 0x0, 0x6, 0x4, 0x0, @local, @remote, {[@noop, @rr={0x7, 0x13, 0xf9, [@multicast2, @rand_addr=0x64010100, @private=0xa010101, @empty]}]}}}}}) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000340)={{{@in=@broadcast, @in6=@loopback, 0x4e20, 0x401, 0x4e20, 0x7, 0xa, 0x80, 0xa0, 0x2, r4}, {0x23e4b4dc, 0xe72f, 0x2, 0xd6, 0x300000000000000, 0x8, 0x8, 0x80000001}, {0xf6c, 0x1, 0x6, 0x9f}, 0x7fff, 0x6e6bb4, 0x0, 0x1, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d4, 0x33}, 0xa, @in=@private=0xa010100, 0x3507, 0x2, 0x1, 0x3, 0xa, 0x7f, 0xf78}}, 0xe8) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) prctl$PR_MCE_KILL(0x35, 0x0, 0x10) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) 2m14.355453386s ago: executing program 34 (id=843): write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x0, 0x85, "00000000000000000000ffff00"}) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000100)={0xa, 0x80, 0x1, 0x1, 0x8, "c098e7b0bd21430de428cf78b7adfdec60be6a", 0x1, 0x5}) syz_open_pts(0xffffffffffffffff, 0x100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(0xffffffffffffffff) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x24, 0x1402, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) setpriority(0x2, 0x0, 0x1) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="11", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r2, r3, 0x0, 0x8000fb00) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000280)={0x0, 0xec25, 0x400, 0x3, 0x40000330}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r4, 0x47ba, 0x0, 0x28, 0x0, 0x0) 2m13.486826905s ago: executing program 2 (id=854): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000ae4000/0x2000)=nil, 0x2000, 0x1000002, 0x14, r1, 0x9a38d000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) close(r1) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r6, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmsg$nl_generic(r0, 0x0, 0x48010) sendmmsg$inet(r6, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000400)="a2", 0x1}], 0x1, &(0x7f0000000180)=ANY=[], 0xc8}}], 0x1, 0x4008451) 2m13.459618035s ago: executing program 1 (id=855): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000300)="0fc71c3e2e0f09b8010000000f01d92e360f01cfb805000000b9003000000f01c1b9800000c00f3235002000000f300f01cfb930030000b800800000ba000000000f302e0f015d0b66b801018ed8", 0x4e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='[', 0x1, 0x20004840, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r4 = syz_open_pts(0xffffffffffffffff, 0x4142) ioctl$GIO_FONT(r4, 0x4b60, &(0x7f0000000640)=""/151) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b00010000000009040800010300000009", @ANYBLOB="8fcf"], 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) add_key(&(0x7f00000002c0)='cifs.idmap\x00', &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, &(0x7f00000003c0)={0xed, 0x0, 0x8000000000000000}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(0xffffffffffffffff, 0x5, &(0x7f0000000080)={{r6, r7+60000000}}, &(0x7f00000000c0)) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m7.16827883s ago: executing program 1 (id=856): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10f, &(0x7f0000000300)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x5c, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x3000}) io_uring_enter(r2, 0x47f5, 0x2000000, 0x0, 0x0, 0x0) 2m4.44676037s ago: executing program 2 (id=857): openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x1800) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(&(0x7f0000000040), 0x100, 0x2) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6400000002070103000000000000000002000007240007"], 0x64}, 0x1, 0x0, 0x0, 0x440c0}, 0x4040804) getpid() sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x1e, &(0x7f0000000500)=ANY=[@ANYBLOB="0000000000000000b702000014000000b7030400000000008500000083000000bf09000000000000550901", @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="34000000020000010000110000000000d96e6c8d5e85080045"], 0x34}], 0x1}, 0x40000) 1m54.835199326s ago: executing program 1 (id=858): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001680), 0x109801) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r1, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d40)=ANY=[@ANYBLOB="34000000020101010000000000000000020000000500034000183c0608001a4000001445080015"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000100) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000280)={0x3, 'batadv0\x00', {0x1}, 0x4}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="ab672efc6453b95d3712b8b127e3898e805ff81121ca9bb991d8af12749e8b560b623c085d63f31b6c34b875a0f500a0744c45fc90c16330078c6ad4491b7bdb49d8093adab1f82ad1742f43fe422a9bc4311f948ad3fa1ec1959311da23c7769697a8d263774b16f5acd844c15b3141feee547434b7a844f69ba03ac6f7747d2bb680bf1a88d466cf603172562537b989e806f28601513dfde342d7fa739418fe641e06abe5424dcfa15e85a166722c55beafcc05b90a95d9a1", @ANYRES64=r3], 0x5a}, 0x1, 0x0, 0x0, 0x448d3}, 0x48081) r4 = syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0022070000008123d1df51afa4fbb4cdcb050c0e40c2e0439151"], 0x0}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000540)='/sys/power/pm_test', 0x200, 0x16) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r12, &(0x7f00000002c0)=ANY=[@ANYBLOB="1d"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r12, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) r14 = dup2(0xffffffffffffffff, r2) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000880)={&(0x7f0000000700)={0x144, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x20}, @NBD_ATTR_BACKEND_IDENTIFIER={0xd, 0xa, '\x86#)(+/%,['}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_SOCKETS={0x7c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}]}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r14}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8000000000000000}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}]}, 0x144}, 0x1, 0x0, 0x0, 0x24000004}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x13}, 0x4}, 0x1c) 1m51.603510646s ago: executing program 2 (id=859): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x629, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x7, 0x10002, 0x0, 0x5, 0x4, 0x8008, 0x402, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x9, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xc, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x4, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x7c9d, 0x9, 0x8, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x7], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1f3, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x7, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x20000004, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1000]}, 0x45c) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000004b6fd0004800000ffffffffeeff0000", @ANYRES32, @ANYBLOB='\x00'/20], 0x50) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000004c0)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 1m47.490023961s ago: executing program 7 (id=853): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) r0 = syz_io_uring_setup(0x16ba, &(0x7f0000000680)={0x0, 0x10007d89, 0x10100, 0x3, 0x85}, &(0x7f0000000540)=0x0, &(0x7f0000000700)=0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000980)={@multicast1, @local, 0x0}, &(0x7f00000009c0)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="98090000", @ANYRES16=0x0, @ANYBLOB="000428bd7000ffdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="4401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000800000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="0800070000000000400001002400010071756575655f4b640000000000000000000000000000000010000000000000000500030003e8ffff070004001406000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="bc0002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400bbbf000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0002028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040000000000080007000000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b7570000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000010000008000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000104000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="f400028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000700000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400ff07000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400cf00000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000000000008000100", @ANYRES32=0x0, @ANYBLOB="30010280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000200000008000600", @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000500000008000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000800000038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040005000000"], 0x998}, 0x1, 0x0, 0x0, 0xc081}, 0x800) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) r7 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r7, &(0x7f0000000200)={0xa, 0x0, 0xfffffff9, @mcast2, 0x7ff, 0x2}, 0x20) getpgid(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200"], 0x0}, 0x94) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x1d39, 0xcec, 0x0, 0x0, 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r11, @ANYBLOB=',wfdno=', @ANYRESHEX=r12, @ANYBLOB="2c6163636573733da3c8fdf51edc7fcf4772981c7fe8640c52138165e25e149e9feb5ad9adb32c785941581380d1703f2a1d93997ede8e1f69685cb8e2449bedd55ddb925fc1c2ea78ead3c0ca7d52bf2ab7de8985a704ea2690210ba714a3e9bbe965fd6b0ba4e0ee2e6035afe4557316fb60fef990de7906bdf16a075b28a4c444abd84a595777fa400c834cbbefce43efda84bed7", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 1m31.528955458s ago: executing program 35 (id=858): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001680), 0x109801) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r1, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d40)=ANY=[@ANYBLOB="34000000020101010000000000000000020000000500034000183c0608001a4000001445080015"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000100) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000280)={0x3, 'batadv0\x00', {0x1}, 0x4}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="ab672efc6453b95d3712b8b127e3898e805ff81121ca9bb991d8af12749e8b560b623c085d63f31b6c34b875a0f500a0744c45fc90c16330078c6ad4491b7bdb49d8093adab1f82ad1742f43fe422a9bc4311f948ad3fa1ec1959311da23c7769697a8d263774b16f5acd844c15b3141feee547434b7a844f69ba03ac6f7747d2bb680bf1a88d466cf603172562537b989e806f28601513dfde342d7fa739418fe641e06abe5424dcfa15e85a166722c55beafcc05b90a95d9a1", @ANYRES64=r3], 0x5a}, 0x1, 0x0, 0x0, 0x448d3}, 0x48081) r4 = syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0022070000008123d1df51afa4fbb4cdcb050c0e40c2e0439151"], 0x0}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000540)='/sys/power/pm_test', 0x200, 0x16) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r12, &(0x7f00000002c0)=ANY=[@ANYBLOB="1d"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r12, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) r14 = dup2(0xffffffffffffffff, r2) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000880)={&(0x7f0000000700)={0x144, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x20}, @NBD_ATTR_BACKEND_IDENTIFIER={0xd, 0xa, '\x86#)(+/%,['}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_SOCKETS={0x7c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}]}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r14}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8000000000000000}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}]}, 0x144}, 0x1, 0x0, 0x0, 0x24000004}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x13}, 0x4}, 0x1c) 1m22.1359732s ago: executing program 36 (id=859): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x629, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x7, 0x10002, 0x0, 0x5, 0x4, 0x8008, 0x402, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x9, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xc, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x4, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x7c9d, 0x9, 0x8, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x7], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1f3, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x7, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x20000004, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1000]}, 0x45c) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000004b6fd0004800000ffffffffeeff0000", @ANYRES32, @ANYBLOB='\x00'/20], 0x50) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000004c0)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 34.01431671s ago: executing program 7 (id=853): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) r0 = syz_io_uring_setup(0x16ba, &(0x7f0000000680)={0x0, 0x10007d89, 0x10100, 0x3, 0x85}, &(0x7f0000000540)=0x0, &(0x7f0000000700)=0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000980)={@multicast1, @local, 0x0}, &(0x7f00000009c0)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="98090000", @ANYRES16=0x0, @ANYBLOB="000428bd7000ffdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="4401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000800000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="0800070000000000400001002400010071756575655f4b640000000000000000000000000000000010000000000000000500030003e8ffff070004001406000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="bc0002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400bbbf000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000010000008000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000104000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="f400028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000700000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400ff07000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400cf00000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000000000008000100", @ANYRES32=0x0, @ANYBLOB="30010280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000200000008000600", @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000500000008000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000800000038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040005000000"], 0x998}, 0x1, 0x0, 0x0, 0xc081}, 0x800) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) r7 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r7, &(0x7f0000000200)={0xa, 0x0, 0xfffffff9, @mcast2, 0x7ff, 0x2}, 0x20) getpgid(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200"], 0x0}, 0x94) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x1d39, 0xcec, 0x0, 0x0, 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r11, @ANYBLOB=',wfdno=', @ANYRESHEX=r12, @ANYBLOB="2c6163636573733da3c8fdf51edc7fcf4772981c7fe8640c52138165e25e149e9feb5ad9adb32c785941581380d1703f2a1d93997ede8e1f69685cb8e2449bedd55ddb925fc1c2ea78ead3c0ca7d52bf2ab7de8985a704ea2690210ba714a3e9bbe965fd6b0ba4e0ee2e6035afe4557316fb60fef990de7906bdf16a075b28a4c444abd84a595777fa400c834cbbefce43efda84bed7", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 30.797409432s ago: executing program 8 (id=860): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000180), &(0x7f00000002c0)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000000)={@initdev}, &(0x7f00000000c0)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) unshare(0x20040600) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='hugetlbfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1230023, &(0x7f0000000100)={[{@nr_inodes}]}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r2, r2, 0x2f, 0x0, @val=@perf_event={0x3}}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f0000000040)=@in4={0x21, 0x1ffe, 0x2, 0x8, {0x2, 0x4e20, @broadcast}}, 0x24) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20000808) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="3000000076000d0b2bbd7000000000000008000100020000000400090004001800080001000200"/48], 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r5, &(0x7f0000000840)={0x20f, 0x2, 0x0, {{0x51f, 0xce, 0x0, 0x0, {}, 0x2810000, 0x8, 0x1, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x83\x00\xb5\x00\x00+YN\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, '\x00\x00\x9f\xd2\x8f43\xb6\x02\"K\xdd_MR\xb8=a\xcb\v!\x89A\x16\x95\xef\xe2\xefH\xb2\x11\x1d\x1c6\x04\x82\xe6\xc7\x8e\x1e{\xb8\x8e7\x9d*\xec\xff\xfe\xc3\xa1\x9e^\x17<\x8b\x04\xcfr\f\xa4+\xfd3\x8c\xb7\x0f\xdaP+\x89/\xb0\xdd\x83{\x9e\xc6S\x05\x0f\r|\xdcE\x99\x7f\xa6w;\xbf\xe1\xbdp\xee\x03\xe4\xaf\xb4\x99\xa2\x9b\xd3\xde\xce/F@\xf8V\x02\x1c\xde\xe9\xdcoR\x1e{\xc0jv\xa9\x1eg\xba\x8d\xf3\xcc%:\xbcY\x1a\x15\a\x7f\x89\x92\xeaWv\x80\xff\xec\x87\xa9\x06\xd0(\x8am\xbf2\xa2$\x01T6{\x1e\x05v\x1a;\xac\xde\xab\xba\x82\xb3\xccLFl\xe0\x0e&\x81\xb2\xffk\x94\"\xd8\x01\b\n\x96\xc8\xc8r\xa6\xad\xd7\xd7 D3\x82\xaea\xb3U89\xde#4]\v\xdd\xcc\t\x878\x97\x03\xf81\xa0\x948\x91\xf0\xfa\x9eo\x9b\xb5w\x86\xd9R\xc2\x9a\x8c\xbd\xb8M\xd5\xed~\xd8\xab\xf6\x0f\xacKC\x1b\xbfo\x0e\xc9\x006\xf5\xe4', 0x2f19639a8414712, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8r\x9aE\x1b4\a\xdb\xda\xb2\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00\x13\x12D\xf7s=\xa4*&%\x00\x00\x00_\ro \xe5\xfd\xac\xfb\xa5l\xf3\xe7\xa3\xc0\x14\x19N\x13\xa4\x92G\x7f\x92\'\xe4{\x1a^,)\xee\xec\x05}d\xc2\xb5\x9e\\\xa6\a\x1e\x06l\xa4\x86,\xff\b\x9f\xd5\x9fo\xb8\x8cLi\x14\xd0\x9a\xf7\xf6'}, 0xfffffed4, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, 0x0, 0xee01}}, 0x20f) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 0s ago: executing program 5 (id=851): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x8000) read$alg(r1, &(0x7f0000000000)=""/35, 0x23) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)={0x524, 0x0, 0x712, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x7b}}}}, [@NL80211_ATTR_TX_RATES={0xf0, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0xc, 0x5, 0x36, 0x5, 0x4, 0x1, 0x30, 0x60, 0x4, 0x1, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x7, 0x7, 0x2, 0x5, 0x0, 0x4, 0x800]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x4, 0x8}, {0x6, 0x4}, {0x1, 0x1}, {0x0, 0x8}, {0x5, 0x2}, {0x2, 0x7}, {0x4, 0x6}, {0x4, 0xa}, {0x7, 0x3}, {0x1, 0x7}, {0x1, 0x6}, {0x5, 0x1}, {0x3, 0x1}, {0x7, 0xa}, {0x3}, {0x7, 0x8}, {0x0, 0x1}, {0x1, 0xa}, {0x1, 0x8}, {0x4, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x4, 0x7fff, 0x3, 0x36, 0xfffc, 0x2, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0xff}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x5, 0x24, 0x1b, 0x5, 0x36, 0x9, 0x12, 0x6c, 0x5, 0x12, 0x1, 0x60, 0x60, 0x1b, 0x60, 0x24, 0x6, 0x3, 0x18]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x4, 0x5, 0x6c, 0xc, 0x36, 0x6c]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x3, 0x4, 0x3, 0x32bf, 0x5, 0x7, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0xa0, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0xe, 0x2, [{0x6, 0x8}, {0x2, 0x2}, {0x4, 0x3}, {0x7, 0x5}, {0x4, 0x1}, {0x2, 0x2}, {0x7, 0x1}, {0x7, 0xa}, {0x2, 0x5}, {0x0, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x4, 0xb2c, 0xffff, 0x1, 0x7b4, 0x3, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x10, 0xab40, 0x0, 0x3, 0x6, 0x7, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x4f, 0x8, 0x401, 0x5, 0x9, 0x9db0, 0x100]}}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xf, 0x2, [{0x5, 0x7}, {0x0, 0x7}, {0x5}, {0x5, 0x7}, {0x1, 0x1}, {0x3, 0xa}, {0x5, 0x9}, {0x2, 0xa}, {0x1, 0x3}, {0x6, 0x8}, {0x3, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1, 0x6, 0x4, 0xae, 0xde, 0x0, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x3, 0x0, 0xd32, 0x7, 0x3, 0x6, 0x4]}}]}]}, @NL80211_ATTR_TX_RATES={0x9c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x1, 0x9]}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x32, 0x2, [{0x0, 0x9}, {0x7, 0x7}, {0x1, 0x3}, {0x6, 0xa}, {0x4}, {0x5, 0x9}, {0x0, 0xa}, {0x0, 0x7}, {0x5, 0x8}, {0x4, 0x8}, {0x1, 0x5}, {0x4}, {0x4, 0x9}, {0x7, 0x7}, {0x6, 0x6}, {0x6, 0x9}, {0x1, 0x4}, {0x0, 0x3}, {0x1, 0x1}, {0x5, 0x9}, {0x6, 0xf}, {0x6, 0x3}, {0x6, 0x1}, {0x5}, {0x4}, {0x0, 0x6}, {0x2, 0x7}, {0x4, 0xa}, {0x3, 0x6}, {0x1, 0x3}, {0x2, 0x6}, {0x1, 0x8}, {0x5, 0x1}, {0x0, 0x2}, {0x6, 0x4}, {0x0, 0xa}, {0x4, 0x6}, {0x1, 0x8}, {0x3, 0x9}, {0x4, 0x2}, {0x1, 0x6}, {0x4, 0x5}, {0x2, 0x9}, {}, {0x2, 0x7}, {0x4, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0xfffa, 0x3, 0x0, 0x2, 0x8000, 0x9, 0x5a7]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x2, 0x30, 0x6, 0x2, 0x6, 0x24, 0x3, 0x1b, 0xb, 0xc, 0x24, 0x1, 0x6c, 0x12, 0x3, 0x18, 0x36, 0x16, 0x30, 0x48, 0x5, 0x60, 0x30, 0x25, 0x1, 0x5, 0x1b, 0x12, 0xa040ec3ec88fa962, 0x5]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0xc, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x1f4, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xe, 0x0, 0x1, 0x1000, 0x4, 0x14, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x1, 0x7, 0x8, 0x9, 0x9, 0x4, 0xb]}}]}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x1, 0x7}, {0x0, 0x5}, {0x1, 0x5}, {0x4, 0x2}, {0x2, 0x6}, {0x6, 0x1}, {0x4, 0x9}, {0x0, 0x2}, {0x2}, {0x6, 0x3}, {0x1, 0x3}, {0x0, 0x4}, {0x1, 0x9}, {0x3, 0x5}, {0x0, 0x1}, {0x6, 0x6}, {}, {0x7, 0x4}, {0x3, 0x8}, {0x1, 0x6}, {0x4, 0x7}, {0x3, 0x5}, {0x1, 0x9}, {0x3, 0x2}, {0x0, 0x4}, {0x4, 0x2}, {0x1, 0x8}, {0x0, 0x9}, {0x1, 0x6}, {0x1, 0x7}, {0x5, 0x3}, {0x0, 0x8}, {}, {0x1, 0x4}, {0x1, 0x3}, {0x2, 0x5}, {0x4, 0x3}, {0x0, 0xa}, {0x3, 0x1}, {0x0, 0x8}, {0x7, 0x8}, {0x3, 0x7}, {0x7, 0x6}, {0x5, 0x4}, {0x4, 0x6}, {0x2, 0x4}, {0x5, 0x5}, {0x0, 0x6}, {0x2, 0x7}, {0x7, 0x7}, {0x4, 0x3}, {0x4, 0x6}, {0x7, 0x5}, {0x5, 0x3}, {0x2, 0x9}, {0x5, 0x2}, {0x6, 0x4}, {0x2, 0x5}, {0x6, 0x2}, {0x1, 0x9}, {0x4, 0x4}, {0x1, 0x7}, {0x1, 0x7}, {0x1, 0x5}]}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x30, 0x48, 0x4, 0x0, 0x6c, 0x30, 0x48, 0x4, 0x3, 0x48, 0x36, 0x12]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc63, 0x0, 0xcfce, 0x3, 0x1, 0x2, 0x6, 0x54]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xb0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x5, 0x5e2, 0x9348, 0x2, 0x2, 0x0, 0x80a7]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x24, 0x5, 0x6, 0x4, 0x48, 0x9, 0x4, 0x48, 0x1b, 0x30, 0x5]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x6, 0x8}, {0x3, 0x9}, {0x3, 0x8}, {0x7, 0x1}, {}, {0x3, 0x6}, {0x3}, {0x0, 0x3}, {0x3, 0x1}, {0x5, 0x4}, {0x7, 0x6}, {0x3, 0x1}, {0x1, 0x5}, {0x7, 0xa}, {0x0, 0x4}, {0x3}, {0x5, 0x6}, {0x3, 0x6}, {0x1, 0x4}, {0x6, 0x8}, {0x0, 0x1}, {0x7, 0x6}, {0x6, 0x2}, {0x4}, {0x3, 0xa}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x3}, {}, {0x7, 0x8}, {}, {0x0, 0x4}, {0x0, 0x5}, {0x0, 0x6}, {0x1, 0x9}, {0x3, 0x2}, {0x3, 0x5}, {0x6, 0x2}, {0x0, 0x7}, {0x7, 0x3}, {0x1, 0x8}, {0x2, 0x7}, {0x7, 0x8}, {0x6, 0x5}, {0x2, 0x6}, {0x1, 0x1}, {0x3, 0x2}, {0x5, 0x6}, {0x3, 0x4}, {0x0, 0x7}, {0x7, 0x4}, {0x0, 0xa}, {0x1, 0x3}, {0x0, 0x4}, {0x5, 0xa}, {0x4, 0x4}, {0x0, 0x6}, {0x2, 0x7}, {0x0, 0x7}, {0x0, 0xa}, {0x5, 0x9}, {0x0, 0x8}, {0x2, 0x4}, {0x7}, {0x4, 0xa}, {0x5, 0x7}, {0x6, 0x8}, {0x4, 0x5}, {0x1, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x4, 0x1, 0xfc94, 0x1, 0xd, 0x1, 0x3]}}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0xc, 0x8, 0x0, 0x4, 0xa870, 0xf, 0x800]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x80, 0x4, 0x3, 0xa9ea, 0x3, 0x2, 0x6]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x12, 0x12, 0x18, 0x6, 0xb, 0x3b, 0x18, 0x58, 0x1b, 0x36, 0x6a]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x5, 0xfff8, 0x1, 0xff, 0x9, 0x800, 0x8]}}]}]}, @NL80211_ATTR_TX_RATES={0xdc, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x7, 0x6, 0x8, 0xd5, 0x3, 0x181, 0x3]}}]}, @NL80211_BAND_60GHZ={0xc0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x19, 0x2, [{0x1, 0xa}, {0x1, 0x1}, {0x2, 0x8}, {0x5, 0x9}, {0x2, 0x2}, {0x2, 0xa}, {0x6, 0x3}, {0x2, 0x3}, {0x5}, {0x7}, {0x7, 0x7}, {0x0, 0x7}, {0x1, 0x2}, {0x4, 0xa}, {0x2, 0x6}, {0x3, 0x3}, {0x6, 0x9}, {0x6, 0x6}, {0x2}, {0x7, 0x5}, {0x1, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x3, 0x7}, {0x7, 0x2}, {0x3, 0x9}, {0x0, 0x4}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x1}, {0x3, 0x9}, {0x5, 0xa}, {0x0, 0x9}, {0x4, 0x8}, {0x7, 0x4}, {0x4, 0x1}, {0x5, 0x7}, {0x7, 0x1}, {0x1, 0x7}, {0x1, 0x2}, {0x6, 0x6}, {0x1, 0x3}, {0x5, 0x8}, {}, {}, {}, {0x3, 0x9}, {0x2, 0x6}, {0x0, 0x9}, {}, {0x4, 0x8}, {0x4, 0x6}, {0x7, 0x9}, {0x6, 0x5}, {0x4, 0x8}, {0x7, 0x7}, {0x7, 0x1}, {0x6, 0xa}, {0x5, 0x4}, {0x1, 0x8}, {0x0, 0x4}, {0x3, 0x9}, {0x4, 0x5}, {0x2, 0x1}, {0x6, 0x3}, {}, {0x6, 0x5}, {0x3, 0x2}, {0x5}, {0x4, 0x7}, {0x6, 0x7}, {0x0, 0x5}, {0x5, 0x6}, {0x0, 0x9}, {0x1, 0x8}, {0x2, 0x2}, {0x0, 0x8}, {0x7, 0x6}, {0x2, 0x2}, {0x7, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x2, 0x2}, {0x5, 0x9}, {0x6, 0x9}, {0x1, 0x5}, {0x5, 0xa}, {0x5, 0x4}, {0x5, 0x3}, {}, {0x1, 0x4}, {0x2, 0x4}, {0x7, 0x1}, {0x3}, {0x4, 0x5}, {0x5, 0x7}, {0x3}, {0x3, 0xa}, {0x3, 0x9}, {0x6}, {0x1, 0x5}, {0x2, 0x9}, {0x1, 0x8}, {0x1}, {0x3, 0x7}, {0x2, 0x3}, {0x3, 0x3}, {0x5, 0x9}, {0x0, 0x5}, {0x3, 0x4}, {0x6, 0x9}, {0x1, 0x6}, {0x3, 0xa}, {0x1, 0xa}, {0x1, 0x2}, {}, {0x7, 0x1}, {0x2, 0x5}, {0x0, 0x5}, {0x2, 0x3}, {0x5, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7, 0xfff9, 0x7, 0x7f, 0x8, 0x1b88, 0x8]}}]}]}]}, 0x524}, 0x1, 0x0, 0x0, 0x4000000}, 0x41040) kernel console output (not intermixed with test programs): pfs: Bad value for 'mpol' [ 239.904888][ T7388] tipc: Started in network mode [ 239.904922][ T7388] tipc: Node identity 5ad5f5d58392, cluster identity 4711 [ 239.905780][ T7388] tipc: Enabled bearer , priority 0 [ 239.948949][ T7388] syzkaller0: entered promiscuous mode [ 239.948975][ T7388] syzkaller0: entered allmulticast mode [ 239.967563][ T7388] tipc: Resetting bearer [ 240.004847][ T7384] tipc: Resetting bearer [ 240.025098][ T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 240.111421][ T7384] tipc: Disabling bearer [ 240.142756][ T1826] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 240.200237][ T10] usb 1-1: config 160 has an invalid interface number: 200 but max is 0 [ 240.200263][ T10] usb 1-1: config 160 has no interface number 0 [ 240.200308][ T10] usb 1-1: config 160 interface 200 has no altsetting 0 [ 240.203569][ T10] usb 1-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 240.203597][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.203615][ T10] usb 1-1: Product: syz [ 240.203627][ T10] usb 1-1: Manufacturer: syz [ 240.203639][ T10] usb 1-1: SerialNumber: syz [ 240.358959][ T1826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.359071][ T1826] usb 3-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 240.359094][ T1826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.458075][ T1826] usb 3-1: config 0 descriptor?? [ 240.730064][ T7385] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 240.827074][ T31] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 240.934604][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 240.934711][ T10] usb 1-1: MIDIStreaming interface descriptor not found [ 240.961728][ T1826] logitech-djreceiver 0003:046D:C71F.000D: reserved main item tag 0xd [ 240.961764][ T1826] logitech-djreceiver 0003:046D:C71F.000D: unknown main item tag 0x5 [ 240.992362][ T31] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 240.992388][ T31] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 240.992405][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 240.992456][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 240.992479][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 240.995511][ T31] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 240.995539][ T31] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 240.995556][ T31] usb 2-1: Product: syz [ 240.995568][ T31] usb 2-1: Manufacturer: syz [ 241.253720][ T1826] logitech-djreceiver 0003:046D:C71F.000D: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.2-1/input0 [ 242.182233][ T31] cdc_wdm 2-1:1.0: skipping garbage [ 242.182253][ T31] cdc_wdm 2-1:1.0: skipping garbage [ 242.220969][ T31] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 242.221001][ T31] cdc_wdm 2-1:1.0: Unknown control protocol [ 242.241534][ T1826] usb 3-1: USB disconnect, device number 16 [ 242.621331][ T10] usb 1-1: USB disconnect, device number 12 [ 243.875008][ T1825] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 244.228740][ T1825] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.229168][ T1825] usb 3-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 244.229183][ T1825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.304204][ T1825] usb 3-1: config 0 descriptor?? [ 245.623418][ T31] usb 2-1: USB disconnect, device number 17 [ 245.834487][ T1825] logitech-djreceiver 0003:046D:C71F.000E: reserved main item tag 0xd [ 245.834522][ T1825] logitech-djreceiver 0003:046D:C71F.000E: unknown main item tag 0x5 [ 245.926864][ T1825] logitech-djreceiver 0003:046D:C71F.000E: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.2-1/input0 [ 245.994516][ T1825] usb 3-1: USB disconnect, device number 17 [ 246.145575][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 247.444731][ T7456] netlink: 56 bytes leftover after parsing attributes in process `syz.2.454'. [ 247.512831][ T7456] gtp0: entered allmulticast mode [ 247.803688][ T7457] fido_id[7457]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 248.179406][ T7471] geneve2: entered promiscuous mode [ 248.179423][ T7471] geneve2: entered allmulticast mode [ 248.299703][ T37] kauditd_printk_skb: 83 callbacks suppressed [ 248.299723][ T37] audit: type=1326 audit(1761499248.109:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7473 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a395befc9 code=0x7ffc0000 [ 248.299768][ T37] audit: type=1326 audit(1761499248.109:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7473 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a395befc9 code=0x7ffc0000 [ 248.299806][ T37] audit: type=1326 audit(1761499248.109:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7473 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7a395befc9 code=0x7ffc0000 [ 248.299844][ T37] audit: type=1326 audit(1761499248.109:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7473 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a395befc9 code=0x7ffc0000 [ 248.299883][ T37] audit: type=1326 audit(1761499248.109:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7473 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a395befc9 code=0x7ffc0000 [ 248.299921][ T37] audit: type=1326 audit(1761499248.109:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7473 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f7a395befc9 code=0x7ffc0000 [ 248.299958][ T37] audit: type=1326 audit(1761499248.109:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7473 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a395befc9 code=0x7ffc0000 [ 248.300002][ T37] audit: type=1326 audit(1761499248.109:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7473 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a395befc9 code=0x7ffc0000 [ 248.300043][ T37] audit: type=1326 audit(1761499248.109:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7473 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f7a395befc9 code=0x7ffc0000 [ 248.300084][ T37] audit: type=1326 audit(1761499248.109:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7473 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a395befc9 code=0x7ffc0000 [ 249.695065][ T7487] IPv6: Can't replace route, no match found [ 251.420918][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 251.598159][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.598191][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 251.598202][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.601283][ T9] usb 5-1: config 0 descriptor?? [ 252.055094][ T9] logitech-djreceiver 0003:046D:C71F.000F: reserved main item tag 0xd [ 252.055130][ T9] logitech-djreceiver 0003:046D:C71F.000F: unknown main item tag 0x5 [ 252.131076][ T9] logitech-djreceiver 0003:046D:C71F.000F: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.4-1/input0 [ 252.358658][ T31] usb 5-1: USB disconnect, device number 15 [ 252.765155][ T7512] FAULT_INJECTION: forcing a failure. [ 252.765155][ T7512] name failslab, interval 1, probability 0, space 0, times 0 [ 252.765191][ T7512] CPU: 1 UID: 0 PID: 7512 Comm: syz.0.473 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 252.765211][ T7512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 252.765238][ T7512] Call Trace: [ 252.765245][ T7512] [ 252.765256][ T7512] dump_stack_lvl+0x189/0x250 [ 252.765289][ T7512] ? __pfx____ratelimit+0x10/0x10 [ 252.765312][ T7512] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.765338][ T7512] ? __pfx__printk+0x10/0x10 [ 252.765388][ T7512] ? __pfx___might_resched+0x10/0x10 [ 252.765407][ T7512] ? fs_reclaim_acquire+0x7d/0x100 [ 252.765513][ T7512] should_fail_ex+0x46c/0x600 [ 252.765541][ T7512] should_failslab+0xa8/0x100 [ 252.765568][ T7512] __kmalloc_noprof+0xcc/0x7d0 [ 252.765590][ T7512] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 252.765640][ T7512] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 252.765672][ T7512] genl_family_rcv_msg_doit+0xb8/0x300 [ 252.765703][ T7512] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 252.765728][ T7512] ? rcu_is_watching+0x15/0xb0 [ 252.765748][ T7512] ? cap_capable+0x11f/0x460 [ 252.765776][ T7512] ? safesetid_security_capable+0xa9/0x1a0 [ 252.765804][ T7512] ? bpf_lsm_capable+0x9/0x20 [ 252.765824][ T7512] ? security_capable+0x7e/0x2e0 [ 252.765852][ T7512] genl_rcv_msg+0x60e/0x790 [ 252.765881][ T7512] ? __pfx_genl_rcv_msg+0x10/0x10 [ 252.765901][ T7512] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 252.765918][ T7512] ? __pfx_nl80211_join_mesh+0x10/0x10 [ 252.765936][ T7512] ? __pfx_nl80211_post_doit+0x10/0x10 [ 252.765954][ T7512] ? __lock_acquire+0xab9/0xd20 [ 252.765983][ T7512] netlink_rcv_skb+0x208/0x470 [ 252.766002][ T7512] ? __pfx_genl_rcv_msg+0x10/0x10 [ 252.766022][ T7512] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 252.766055][ T7512] ? netlink_deliver_tap+0x2e/0x1b0 [ 252.766071][ T7512] ? netlink_deliver_tap+0x2e/0x1b0 [ 252.766092][ T7512] genl_rcv+0x28/0x40 [ 252.766111][ T7512] netlink_unicast+0x846/0xa10 [ 252.766145][ T7512] ? __pfx_netlink_unicast+0x10/0x10 [ 252.766170][ T7512] ? netlink_sendmsg+0x642/0xb30 [ 252.766186][ T7512] ? skb_put+0x11b/0x210 [ 252.766210][ T7512] netlink_sendmsg+0x805/0xb30 [ 252.766226][ T7512] ? is_bpf_text_address+0x26/0x2b0 [ 252.766259][ T7512] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.766287][ T7512] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 252.766309][ T7512] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.766328][ T7512] __sock_sendmsg+0x21c/0x270 [ 252.766355][ T7512] ____sys_sendmsg+0x508/0x820 [ 252.766385][ T7512] ? __pfx_____sys_sendmsg+0x10/0x10 [ 252.766413][ T7512] ? import_iovec+0x74/0xa0 [ 252.766437][ T7512] ___sys_sendmsg+0x21f/0x2a0 [ 252.766459][ T7512] ? __pfx____sys_sendmsg+0x10/0x10 [ 252.766519][ T7512] ? __fget_files+0x2a/0x420 [ 252.766540][ T7512] ? __fget_files+0x3a6/0x420 [ 252.766574][ T7512] __x64_sys_sendmsg+0x1a1/0x260 [ 252.766598][ T7512] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 252.766635][ T7512] ? __pfx_ksys_write+0x10/0x10 [ 252.766661][ T7512] ? do_syscall_64+0xbe/0xfa0 [ 252.766686][ T7512] do_syscall_64+0xfa/0xfa0 [ 252.766705][ T7512] ? lockdep_hardirqs_on+0x9c/0x150 [ 252.766726][ T7512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.766743][ T7512] ? clear_bhb_loop+0x60/0xb0 [ 252.766765][ T7512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.766783][ T7512] RIP: 0033:0x7f09c01befc9 [ 252.766800][ T7512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.766816][ T7512] RSP: 002b:00007f09be41e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.766836][ T7512] RAX: ffffffffffffffda RBX: 00007f09c0415fa0 RCX: 00007f09c01befc9 [ 252.766850][ T7512] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 252.766861][ T7512] RBP: 00007f09be41e090 R08: 0000000000000000 R09: 0000000000000000 [ 252.766872][ T7512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.766884][ T7512] R13: 00007f09c0416038 R14: 00007f09c0415fa0 R15: 00007ffe36905148 [ 252.766916][ T7512] [ 256.522439][ T7559] geneve2: entered promiscuous mode [ 256.522465][ T7559] geneve2: entered allmulticast mode [ 257.044761][ T37] kauditd_printk_skb: 88 callbacks suppressed [ 257.044781][ T37] audit: type=1326 audit(1761499256.350:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7584 comm="syz.4.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8a87efc9 code=0x7ffc0000 [ 257.044829][ T37] audit: type=1326 audit(1761499256.350:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7584 comm="syz.4.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8a87efc9 code=0x7ffc0000 [ 257.044869][ T37] audit: type=1326 audit(1761499256.350:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7584 comm="syz.4.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fda8a87efc9 code=0x7ffc0000 [ 257.044910][ T37] audit: type=1326 audit(1761499256.350:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7584 comm="syz.4.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8a87efc9 code=0x7ffc0000 [ 257.044949][ T37] audit: type=1326 audit(1761499256.350:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7584 comm="syz.4.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8a87efc9 code=0x7ffc0000 [ 257.044987][ T37] audit: type=1326 audit(1761499256.350:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7584 comm="syz.4.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fda8a87efc9 code=0x7ffc0000 [ 257.045026][ T37] audit: type=1326 audit(1761499256.350:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7584 comm="syz.4.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8a87efc9 code=0x7ffc0000 [ 257.045085][ T37] audit: type=1326 audit(1761499256.350:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7584 comm="syz.4.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8a87efc9 code=0x7ffc0000 [ 257.045130][ T37] audit: type=1326 audit(1761499256.350:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7584 comm="syz.4.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fda8a87efc9 code=0x7ffc0000 [ 257.045170][ T37] audit: type=1326 audit(1761499256.350:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7584 comm="syz.4.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8a87efc9 code=0x7ffc0000 [ 258.092222][ T31] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 259.473405][ T31] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 259.473432][ T31] usb 3-1: config 0 has no interface number 0 [ 259.473476][ T31] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 259.473497][ T31] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 259.473520][ T31] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 259.473543][ T31] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 259.473565][ T31] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 259.473604][ T31] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 259.473625][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.576520][ T31] usb 3-1: config 0 descriptor?? [ 259.595983][ T7591] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 259.596189][ T7591] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 259.659957][ T31] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 260.883426][ T7617] Process accounting resumed [ 263.480395][ T5901] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 263.698588][ T5901] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 263.698625][ T5901] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 263.698646][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.781709][ T5901] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 265.533942][ T7648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.534624][ T7648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.635995][ T5801] Bluetooth: hci4: command 0x0405 tx timeout [ 266.233033][ T5901] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -110 [ 266.233054][ T5901] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 266.235237][ T5901] stv0680 1-1:4.0: last error: 87, command = 0xb1 [ 266.288061][ T7656] 9pnet_fd: p9_fd_create_tcp (7656): problem connecting socket to 127.0.0.1 [ 266.485284][ T10] usb 1-1: USB disconnect, device number 13 [ 266.594907][ T7658] trusted_key: syz.1.500 sent an empty control message without MSG_MORE. [ 267.007619][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 267.007864][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 267.709023][ T7662] loop2: detected capacity change from 0 to 7 [ 267.756750][ T7662] Dev loop2: unable to read RDB block 7 [ 267.756782][ T7662] loop2: unable to read partition table [ 267.757014][ T7662] loop2: partition table beyond EOD, truncated [ 267.757349][ T7662] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 268.055925][ T1825] usb 3-1: USB disconnect, device number 18 [ 268.132557][ T1825] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 268.963331][ T7675] geneve2: entered promiscuous mode [ 268.963360][ T7675] geneve2: entered allmulticast mode [ 270.538932][ T7694] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 271.380662][ T5881] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 271.563192][ T5881] usb 4-1: Using ep0 maxpacket: 8 [ 271.579269][ T5881] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 271.579296][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.579313][ T5881] usb 4-1: Product: syz [ 271.579325][ T5881] usb 4-1: Manufacturer: syz [ 271.579338][ T5881] usb 4-1: SerialNumber: syz [ 271.879385][ T5881] usb 4-1: config 0 descriptor?? [ 272.192593][ T5881] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 272.240590][ T5901] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 272.418366][ T5881] gspca_sunplus: reg_w_riv err -71 [ 272.418465][ T5881] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 272.450195][ T5881] usb 4-1: USB disconnect, device number 15 [ 272.537639][ T5901] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 272.537693][ T5901] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 272.537716][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.638710][ T5901] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 273.524028][ T7725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.524563][ T7725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.818947][ T5901] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 273.819005][ T5901] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 273.937773][ T5901] stv0680 2-1:4.0: last error: 87, command = 0xb1 [ 274.241390][ T10] usb 2-1: USB disconnect, device number 18 [ 277.174663][ T7747] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 277.372769][ T7757] fuse: Unknown parameter 'grou00000000000000000000' [ 279.784036][ T7770] hub 9-0:1.0: USB hub found [ 279.786773][ T7770] hub 9-0:1.0: 1 port detected [ 279.986210][ T5881] IPVS: starting estimator thread 0... [ 279.991463][ T7771] tipc: Started in network mode [ 279.991491][ T7771] tipc: Node identity 9eb19d7008dc, cluster identity 4711 [ 279.991694][ T7771] tipc: Enabled bearer , priority 0 [ 279.999866][ T7771] syzkaller0: entered promiscuous mode [ 279.999890][ T7771] syzkaller0: entered allmulticast mode [ 280.116649][ T7775] IPVS: using max 8 ests per chain, 19200 per kthread [ 280.320642][ T7771] tipc: Resetting bearer [ 280.458399][ T7774] bond1: entered promiscuous mode [ 280.458427][ T7774] bond1: entered allmulticast mode [ 280.458981][ T7774] 8021q: adding VLAN 0 to HW filter on device bond1 [ 280.556139][ T7767] tipc: Resetting bearer [ 281.614237][ T49] tipc: Node number set to 2523766128 [ 281.750234][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 282.133591][ T7767] tipc: Disabling bearer [ 282.147779][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 282.166098][ T9] usb 5-1: config 64 has an invalid interface number: 186 but max is 2 [ 282.166126][ T9] usb 5-1: config 64 has an invalid interface number: 219 but max is 2 [ 282.166147][ T9] usb 5-1: config 64 has an invalid interface number: 177 but max is 2 [ 282.166165][ T9] usb 5-1: config 64 has no interface number 0 [ 282.166179][ T9] usb 5-1: config 64 has no interface number 1 [ 282.166193][ T9] usb 5-1: config 64 has no interface number 2 [ 282.166269][ T9] usb 5-1: config 64 interface 186 altsetting 4 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 282.166309][ T9] usb 5-1: config 64 interface 219 altsetting 4 bulk endpoint 0x8 has invalid maxpacket 1024 [ 282.166340][ T9] usb 5-1: config 64 interface 219 altsetting 4 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 282.166364][ T9] usb 5-1: config 64 interface 219 altsetting 4 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 282.166388][ T9] usb 5-1: config 64 interface 219 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 282.166410][ T9] usb 5-1: config 64 interface 219 altsetting 4 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 282.166433][ T9] usb 5-1: config 64 interface 219 altsetting 4 has a duplicate endpoint with address 0xA, skipping [ 282.166454][ T9] usb 5-1: config 64 interface 219 altsetting 4 bulk endpoint 0x5 has invalid maxpacket 64 [ 282.166474][ T9] usb 5-1: config 64 interface 219 altsetting 4 has an endpoint descriptor with address 0x3A, changing to 0xA [ 282.166496][ T9] usb 5-1: config 64 interface 219 altsetting 4 has a duplicate endpoint with address 0xA, skipping [ 282.166516][ T9] usb 5-1: config 64 interface 219 altsetting 4 has a duplicate endpoint with address 0xA, skipping [ 282.166536][ T9] usb 5-1: config 64 interface 219 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 282.166569][ T9] usb 5-1: config 64 interface 177 altsetting 2 has a duplicate endpoint with address 0xC, skipping [ 282.166586][ T9] usb 5-1: config 64 interface 177 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 282.166607][ T9] usb 5-1: config 64 interface 186 has no altsetting 0 [ 282.166623][ T9] usb 5-1: config 64 interface 219 has no altsetting 0 [ 282.166639][ T9] usb 5-1: config 64 interface 177 has no altsetting 0 [ 282.173027][ T9] usb 5-1: New USB device found, idVendor=1199, idProduct=68a5, bcdDevice=4a.8c [ 282.173055][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.173073][ T9] usb 5-1: Product: ⃸ᯕ㦻̛㤚乚鵝≚≃͛佲鞥䧎䲢 [ 282.173087][ T9] usb 5-1: Manufacturer: ࠧ [ 282.173100][ T9] usb 5-1: SerialNumber: Ё [ 283.199389][ T9] usb 5-1: selecting invalid altsetting 0 [ 283.199412][ T9] usb 5-1: Could not set interface, error -22 [ 283.636295][ T9] usb 5-1: USB disconnect, device number 16 [ 283.983457][ T37] kauditd_printk_skb: 96 callbacks suppressed [ 283.983475][ T37] audit: type=1326 audit(1761499281.587:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7812 comm="syz.1.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35bfd3efc9 code=0x7ffc0000 [ 283.983588][ T37] audit: type=1326 audit(1761499281.587:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7812 comm="syz.1.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35bfd3efc9 code=0x7ffc0000 [ 283.984105][ T37] audit: type=1326 audit(1761499281.587:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7812 comm="syz.1.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f35bfd3efc9 code=0x7ffc0000 [ 283.984230][ T37] audit: type=1326 audit(1761499281.587:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7812 comm="syz.1.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35bfd3efc9 code=0x7ffc0000 [ 283.984371][ T37] audit: type=1326 audit(1761499281.587:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7812 comm="syz.1.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35bfd3efc9 code=0x7ffc0000 [ 283.984706][ T37] audit: type=1326 audit(1761499281.587:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7812 comm="syz.1.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f35bfd3efc9 code=0x7ffc0000 [ 284.108415][ T37] audit: type=1326 audit(1761499281.708:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7812 comm="syz.1.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35bfd3efc9 code=0x7ffc0000 [ 284.108484][ T37] audit: type=1326 audit(1761499281.708:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7812 comm="syz.1.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35bfd3efc9 code=0x7ffc0000 [ 284.176707][ T37] audit: type=1326 audit(1761499281.764:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7812 comm="syz.1.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35bfd3efc9 code=0x7ffc0000 [ 284.176757][ T37] audit: type=1326 audit(1761499281.764:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7812 comm="syz.1.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35bfd3efc9 code=0x7ffc0000 [ 284.300352][ T7819] fuse: Unknown parameter 'grou00000000000000000000' [ 285.375248][ T5901] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 285.376421][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 285.526624][ T5901] usb 5-1: device descriptor read/64, error -32 [ 285.864119][ T5901] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 286.132466][ T7847] kvm: kvm [7846]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000 [ 286.247474][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.247505][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1792, setting to 1024 [ 286.249046][ T5901] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 286.249070][ T5901] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 286.249088][ T5901] usb 5-1: Manufacturer: syz [ 286.258396][ T5901] usb 5-1: config 0 descriptor?? [ 286.259430][ T7840] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 287.974928][ T7840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.975450][ T7840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.978653][ T5901] usbhid 5-1:0.0: can't add hid device: -71 [ 287.978774][ T5901] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 287.997215][ T5901] usb 5-1: USB disconnect, device number 18 [ 288.090086][ T49] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 288.251359][ T49] usb 1-1: Using ep0 maxpacket: 32 [ 288.259739][ T49] usb 1-1: config 0 has an invalid interface number: 167 but max is 0 [ 288.259764][ T49] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.259781][ T49] usb 1-1: config 0 has no interface number 0 [ 288.259834][ T49] usb 1-1: config 0 interface 167 altsetting 1 bulk endpoint 0xA has invalid maxpacket 1024 [ 288.259857][ T49] usb 1-1: config 0 interface 167 altsetting 1 endpoint 0x6 has an invalid bInterval 46, changing to 7 [ 288.259880][ T49] usb 1-1: config 0 interface 167 altsetting 1 endpoint 0x6 has invalid maxpacket 8278, setting to 1024 [ 288.259904][ T49] usb 1-1: config 0 interface 167 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 288.259927][ T49] usb 1-1: config 0 interface 167 has no altsetting 0 [ 288.351033][ T49] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=20.63 [ 288.351061][ T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.351080][ T49] usb 1-1: Product: syz [ 288.351093][ T49] usb 1-1: Manufacturer: syz [ 288.351106][ T49] usb 1-1: SerialNumber: syz [ 288.388114][ T49] usb 1-1: config 0 descriptor?? [ 288.388982][ T7861] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 288.732612][ T7875] netlink: 'syz.3.554': attribute type 13 has an invalid length. [ 291.233323][ T49] usbtest 1-1:0.167: couldn't get endpoints, -22 [ 291.233426][ T49] usbtest 1-1:0.167: probe with driver usbtest failed with error -22 [ 291.532226][ T7893] hub 9-0:1.0: USB hub found [ 291.549678][ T7893] hub 9-0:1.0: 1 port detected [ 292.066955][ T49] usb 1-1: USB disconnect, device number 14 [ 292.421284][ T7899] fuse: Unknown parameter 'group_i00000000000000000000' [ 294.596395][ T7915] netlink: 28 bytes leftover after parsing attributes in process `syz.3.565'. [ 294.946881][ T7910] kvm: kvm [7908]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000 [ 295.249050][ T7915] netlink: 'syz.3.565': attribute type 8 has an invalid length. [ 295.311473][ T37] kauditd_printk_skb: 52 callbacks suppressed [ 295.311490][ T37] audit: type=1326 audit(1761499292.185:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7919 comm="syz.1.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35bfd3efc9 code=0x7ffc0000 [ 295.311530][ T37] audit: type=1326 audit(1761499292.185:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7919 comm="syz.1.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35bfd3efc9 code=0x7ffc0000 [ 295.312647][ T37] audit: type=1326 audit(1761499292.185:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7919 comm="syz.1.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f35bfd3efc9 code=0x7ffc0000 [ 295.312685][ T37] audit: type=1326 audit(1761499292.185:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7919 comm="syz.1.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35bfd3efc9 code=0x7ffc0000 [ 295.312710][ T37] audit: type=1326 audit(1761499292.185:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7919 comm="syz.1.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35bfd3efc9 code=0x7ffc0000 [ 295.313333][ T37] audit: type=1326 audit(1761499292.185:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7919 comm="syz.1.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f35bfd3efc9 code=0x7ffc0000 [ 295.313358][ T37] audit: type=1326 audit(1761499292.185:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7919 comm="syz.1.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35bfd3efc9 code=0x7ffc0000 [ 295.313386][ T37] audit: type=1326 audit(1761499292.185:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7919 comm="syz.1.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35bfd3efc9 code=0x7ffc0000 [ 295.313939][ T37] audit: type=1326 audit(1761499292.185:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7919 comm="syz.1.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f35bfd3efc9 code=0x7ffc0000 [ 295.313963][ T37] audit: type=1326 audit(1761499292.185:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7919 comm="syz.1.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35bfd3efc9 code=0x7ffc0000 [ 296.621860][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 297.447384][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 297.447412][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 297.447434][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 297.447453][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 297.447495][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 297.447516][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.516375][ T9] usb 3-1: config 0 descriptor?? [ 297.735763][ T9] hdpvr 3-1:0.0: firmware version 0x8 dated [ 298.850235][ T9] hdpvr 3-1:0.0: Could not setup controls [ 298.850998][ T9] hdpvr 3-1:0.0: registering videodev failed [ 298.912588][ T9] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -71 [ 298.934247][ T7945] fuse: Unknown parameter 'group_i00000000000000000000' [ 298.935299][ T9] usb 3-1: USB disconnect, device number 19 [ 302.982085][ T49] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 303.178795][ T49] usb 5-1: Using ep0 maxpacket: 8 [ 303.182441][ T49] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 303.182458][ T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.182468][ T49] usb 5-1: Product: syz [ 303.182475][ T49] usb 5-1: Manufacturer: syz [ 303.182482][ T49] usb 5-1: SerialNumber: syz [ 303.191682][ T49] usb 5-1: config 0 descriptor?? [ 303.419459][ T49] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 303.844103][ T7975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.846227][ T7975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.804280][ T49] gspca_sunplus: reg_w_riv err -71 [ 304.805094][ T49] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 305.470146][ T49] usb 5-1: USB disconnect, device number 19 [ 305.684231][ T8001] fuse: Unknown parameter 'group_i00000000000000000000' [ 305.855417][ T5901] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 305.972310][ T8004] geneve2: entered promiscuous mode [ 305.972336][ T8004] geneve2: entered allmulticast mode [ 306.030513][ T5901] usb 4-1: device descriptor read/64, error -71 [ 306.345253][ T8010] netlink: 'syz.4.590': attribute type 2 has an invalid length. [ 307.099560][ T5901] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 307.237090][ T5901] usb 4-1: device descriptor read/64, error -71 [ 307.398907][ T5901] usb usb4-port1: attempt power cycle [ 307.783005][ T5901] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 308.062276][ T5901] usb 4-1: device descriptor read/8, error -71 [ 308.464631][ T8010] !: entered promiscuous mode [ 308.548688][ T5901] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 308.563370][ T5901] usb 4-1: device descriptor read/8, error -71 [ 308.680456][ T5901] usb usb4-port1: unable to enumerate USB device [ 309.224275][ T8024] 9p: Unknown access argument Grd Re^Z٭: -22 [ 309.315423][ T37] kauditd_printk_skb: 33 callbacks suppressed [ 309.315440][ T37] audit: type=1326 audit(1761499305.290:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8021 comm="syz.1.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35bfd3efc9 code=0x7ffc0000 [ 309.315485][ T37] audit: type=1326 audit(1761499305.290:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8021 comm="syz.1.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35bfd3efc9 code=0x7ffc0000 [ 309.316956][ T37] audit: type=1326 audit(1761499305.290:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8021 comm="syz.1.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f35bfd3efc9 code=0x7ffc0000 [ 309.316985][ T37] audit: type=1326 audit(1761499305.290:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8021 comm="syz.1.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35bfd3efc9 code=0x7ffc0000 [ 309.317007][ T37] audit: type=1326 audit(1761499305.290:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8021 comm="syz.1.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35bfd3efc9 code=0x7ffc0000 [ 309.320303][ T37] audit: type=1326 audit(1761499305.290:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8021 comm="syz.1.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f35bfd3efc9 code=0x7ffc0000 [ 309.320354][ T37] audit: type=1326 audit(1761499305.290:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8021 comm="syz.1.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35bfd3efc9 code=0x7ffc0000 [ 309.320383][ T37] audit: type=1326 audit(1761499305.290:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8021 comm="syz.1.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35bfd3efc9 code=0x7ffc0000 [ 309.320988][ T37] audit: type=1326 audit(1761499305.290:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8021 comm="syz.1.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f35bfd3efc9 code=0x7ffc0000 [ 309.321014][ T37] audit: type=1326 audit(1761499305.290:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8021 comm="syz.1.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35bfd3efc9 code=0x7ffc0000 [ 311.012105][ T8037] netlink: 20 bytes leftover after parsing attributes in process `syz.4.599'. [ 311.167645][ T8039] loop7: detected capacity change from 0 to 16384 [ 311.542136][ T8028] Process accounting resumed [ 311.855286][ T10] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 311.979932][ T8048] fuse: Unknown parameter 'group_id00000000000000000000' [ 312.018534][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 312.019094][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 312.020045][ T10] usb 3-1: config 5 has an invalid interface number: 249 but max is 0 [ 312.020059][ T10] usb 3-1: config 5 has no interface number 0 [ 312.020076][ T10] usb 3-1: config 5 interface 249 has no altsetting 0 [ 312.024351][ T10] usb 3-1: New USB device found, idVendor=19d2, idProduct=50fc, bcdDevice=cf.8b [ 312.024366][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.024376][ T10] usb 3-1: Product: syz [ 312.024383][ T10] usb 3-1: Manufacturer: syz [ 312.024390][ T10] usb 3-1: SerialNumber: syz [ 312.790470][ T10] usb 3-1: bad CDC descriptors [ 312.821336][ T10] usb 3-1: USB disconnect, device number 20 [ 313.266503][ T5972] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 313.437784][ T5972] usb 1-1: Using ep0 maxpacket: 16 [ 313.440392][ T5972] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 313.440421][ T5972] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 313.449436][ T5972] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 313.449463][ T5972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.449481][ T5972] usb 1-1: Product: syz [ 313.449493][ T5972] usb 1-1: Manufacturer: syz [ 313.449506][ T5972] usb 1-1: SerialNumber: syz [ 313.516724][ T5972] usb 1-1: config 0 descriptor?? [ 313.534111][ T5972] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 313.534141][ T5972] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 314.809649][ T37] kauditd_printk_skb: 42 callbacks suppressed [ 314.809666][ T37] audit: type=1326 audit(1761499310.425:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8050 comm="syz.0.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c01befc9 code=0x7ffc0000 [ 314.812512][ T37] audit: type=1326 audit(1761499310.425:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8050 comm="syz.0.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c01befc9 code=0x7ffc0000 [ 314.814145][ T37] audit: type=1326 audit(1761499310.425:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8050 comm="syz.0.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09c01befc9 code=0x7ffc0000 [ 314.816109][ T37] audit: type=1326 audit(1761499310.425:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8050 comm="syz.0.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c01befc9 code=0x7ffc0000 [ 314.855134][ T37] audit: type=1326 audit(1761499310.462:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8050 comm="syz.0.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c01befc9 code=0x7ffc0000 [ 314.857358][ T37] audit: type=1326 audit(1761499310.462:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8050 comm="syz.0.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09c01befc9 code=0x7ffc0000 [ 314.858422][ T37] audit: type=1326 audit(1761499310.462:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8050 comm="syz.0.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c01befc9 code=0x7ffc0000 [ 314.858811][ T37] audit: type=1326 audit(1761499310.462:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8050 comm="syz.0.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c01befc9 code=0x7ffc0000 [ 314.859105][ T37] audit: type=1326 audit(1761499310.462:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8050 comm="syz.0.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09c01befc9 code=0x7ffc0000 [ 315.227094][ T37] audit: type=1326 audit(1761499310.771:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8050 comm="syz.0.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c01befc9 code=0x7ffc0000 [ 315.734237][ T5972] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 315.822640][ T5972] em28xx 1-1:0.0: Config register raw data: 0xb4 [ 315.822663][ T5972] em28xx 1-1:0.0: I2S Audio (3 sample rate(s)) [ 315.822677][ T5972] em28xx 1-1:0.0: No AC97 audio processor [ 316.860920][ T8073] loop6: detected capacity change from 0 to 7 [ 316.866181][ T8073] Dev loop6: unable to read RDB block 7 [ 316.866226][ T8073] loop6: unable to read partition table [ 316.867429][ T8073] loop6: partition table beyond EOD, truncated [ 316.867450][ T8073] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 318.699495][ T8075] Process accounting resumed [ 318.858349][ T5881] usb 1-1: USB disconnect, device number 15 [ 319.125647][ T9] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 319.143162][ T8091] warning: `syz.0.617' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 319.292880][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 319.293644][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 319.295180][ T9] usb 3-1: config 5 has an invalid interface number: 249 but max is 0 [ 319.295202][ T9] usb 3-1: config 5 has no interface number 0 [ 319.295232][ T9] usb 3-1: config 5 interface 249 has no altsetting 0 [ 319.336365][ T9] usb 3-1: New USB device found, idVendor=19d2, idProduct=50fc, bcdDevice=cf.8b [ 319.336393][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.336410][ T9] usb 3-1: Product: syz [ 319.336423][ T9] usb 3-1: Manufacturer: syz [ 319.336436][ T9] usb 3-1: SerialNumber: syz [ 320.040515][ T8107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.620'. [ 321.262009][ T9] usb 3-1: bad CDC descriptors [ 321.314102][ T9] usb 3-1: USB disconnect, device number 21 [ 324.397562][ T49] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 324.479487][ T37] kauditd_printk_skb: 36 callbacks suppressed [ 324.479507][ T37] audit: type=1326 audit(1761499319.433:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8131 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a395befc9 code=0x7ffc0000 [ 324.479564][ T37] audit: type=1326 audit(1761499319.442:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8131 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a395befc9 code=0x7ffc0000 [ 324.479604][ T37] audit: type=1326 audit(1761499319.442:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8131 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7a395befc9 code=0x7ffc0000 [ 324.479643][ T37] audit: type=1326 audit(1761499319.442:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8131 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a395befc9 code=0x7ffc0000 [ 324.479685][ T37] audit: type=1326 audit(1761499319.442:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8131 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a395befc9 code=0x7ffc0000 [ 324.479724][ T37] audit: type=1326 audit(1761499319.442:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8131 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f7a395befc9 code=0x7ffc0000 [ 324.479763][ T37] audit: type=1326 audit(1761499319.442:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8131 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a395befc9 code=0x7ffc0000 [ 324.479802][ T37] audit: type=1326 audit(1761499319.442:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8131 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a395befc9 code=0x7ffc0000 [ 324.479841][ T37] audit: type=1326 audit(1761499319.442:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8131 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f7a395befc9 code=0x7ffc0000 [ 324.479881][ T37] audit: type=1326 audit(1761499319.442:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8131 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a395befc9 code=0x7ffc0000 [ 325.731011][ T49] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 325.731037][ T49] usb 5-1: config 0 has no interface number 0 [ 325.731080][ T49] usb 5-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 325.733950][ T49] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 325.733977][ T49] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 325.733995][ T49] usb 5-1: Product: syz [ 325.734008][ T49] usb 5-1: SerialNumber: syz [ 325.739606][ T49] usb 5-1: config 0 descriptor?? [ 325.747107][ T49] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 326.006938][ T8135] Process accounting resumed [ 326.097930][ T8130] kvm: pic: non byte write [ 326.110229][ T8107] team0 (unregistering): Port device team_slave_0 removed [ 326.240236][ T8107] team0 (unregistering): Port device team_slave_1 removed [ 327.668469][ T9] usb 5-1: USB disconnect, device number 20 [ 327.910404][ T8161] FAULT_INJECTION: forcing a failure. [ 327.910404][ T8161] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 327.910519][ T8161] CPU: 0 UID: 0 PID: 8161 Comm: syz.3.634 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 327.910539][ T8161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 327.910551][ T8161] Call Trace: [ 327.910559][ T8161] [ 327.910567][ T8161] dump_stack_lvl+0x189/0x250 [ 327.910596][ T8161] ? __pfx____ratelimit+0x10/0x10 [ 327.910618][ T8161] ? __pfx_dump_stack_lvl+0x10/0x10 [ 327.910641][ T8161] ? __pfx__printk+0x10/0x10 [ 327.910662][ T8161] ? __might_fault+0xb0/0x130 [ 327.910695][ T8161] should_fail_ex+0x46c/0x600 [ 327.910723][ T8161] _copy_from_user+0x2d/0xb0 [ 327.910742][ T8161] ___sys_sendmsg+0x158/0x2a0 [ 327.910766][ T8161] ? __pfx____sys_sendmsg+0x10/0x10 [ 327.910822][ T8161] ? __fget_files+0x2a/0x420 [ 327.910843][ T8161] ? __fget_files+0x3a6/0x420 [ 327.910875][ T8161] __x64_sys_sendmsg+0x1a1/0x260 [ 327.910897][ T8161] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 327.910926][ T8161] ? __pfx_ksys_write+0x10/0x10 [ 327.910951][ T8161] ? do_syscall_64+0xbe/0xfa0 [ 327.910976][ T8161] do_syscall_64+0xfa/0xfa0 [ 327.910994][ T8161] ? lockdep_hardirqs_on+0x9c/0x150 [ 327.911014][ T8161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.911032][ T8161] ? clear_bhb_loop+0x60/0xb0 [ 327.911059][ T8161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.911075][ T8161] RIP: 0033:0x7f8d2a08efc9 [ 327.911092][ T8161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.911107][ T8161] RSP: 002b:00007f8d282f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 327.911127][ T8161] RAX: ffffffffffffffda RBX: 00007f8d2a2e5fa0 RCX: 00007f8d2a08efc9 [ 327.911140][ T8161] RDX: 0000000020040040 RSI: 0000200000000d00 RDI: 0000000000000005 [ 327.911152][ T8161] RBP: 00007f8d282f6090 R08: 0000000000000000 R09: 0000000000000000 [ 327.911163][ T8161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.911174][ T8161] R13: 00007f8d2a2e6038 R14: 00007f8d2a2e5fa0 R15: 00007ffe9af3dd18 [ 327.911205][ T8161] [ 330.028534][ T37] kauditd_printk_skb: 52 callbacks suppressed [ 330.028549][ T37] audit: type=1326 audit(1761499324.643:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8170 comm="syz.3.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2a08efc9 code=0x7ffc0000 [ 330.028577][ T37] audit: type=1326 audit(1761499324.643:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8170 comm="syz.3.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2a08efc9 code=0x7ffc0000 [ 332.068189][ T8185] FAULT_INJECTION: forcing a failure. [ 332.068189][ T8185] name failslab, interval 1, probability 0, space 0, times 0 [ 332.068222][ T8185] CPU: 1 UID: 0 PID: 8185 Comm: syz.1.641 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 332.068242][ T8185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 332.068252][ T8185] Call Trace: [ 332.068260][ T8185] [ 332.068268][ T8185] dump_stack_lvl+0x189/0x250 [ 332.068297][ T8185] ? __pfx____ratelimit+0x10/0x10 [ 332.068317][ T8185] ? __pfx_dump_stack_lvl+0x10/0x10 [ 332.068340][ T8185] ? __pfx__printk+0x10/0x10 [ 332.068363][ T8185] ? __pfx___might_resched+0x10/0x10 [ 332.068385][ T8185] should_fail_ex+0x46c/0x600 [ 332.068412][ T8185] should_failslab+0xa8/0x100 [ 332.068438][ T8185] __kmalloc_noprof+0xcc/0x7d0 [ 332.068460][ T8185] ? kfree+0x51/0x950 [ 332.068474][ T8185] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 332.068501][ T8185] tomoyo_realpath_from_path+0xe3/0x5d0 [ 332.068534][ T8185] tomoyo_check_open_permission+0x1c1/0x3b0 [ 332.068560][ T8185] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 332.068583][ T8185] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 332.068636][ T8185] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 332.068658][ T8185] ? tomoyo_file_open+0x169/0x230 [ 332.068684][ T8185] security_file_open+0xb1/0x270 [ 332.068702][ T8185] do_dentry_open+0x378/0x1350 [ 332.068724][ T8185] ? devcgroup_check_permission+0x2f/0x950 [ 332.068761][ T8185] vfs_open+0x3b/0x350 [ 332.068775][ T8185] ? path_openat+0x2ed9/0x3840 [ 332.068797][ T8185] path_openat+0x2ef1/0x3840 [ 332.068823][ T8185] ? try_to_take_rt_mutex+0x840/0xb00 [ 332.068869][ T8185] ? __pfx_path_openat+0x10/0x10 [ 332.068888][ T8185] ? do_raw_spin_lock+0x121/0x290 [ 332.068919][ T8185] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 332.068941][ T8185] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.068962][ T8185] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 332.068988][ T8185] do_filp_open+0x1fa/0x410 [ 332.069009][ T8185] ? __pfx_do_filp_open+0x10/0x10 [ 332.069024][ T8185] ? rt_mutex_slowunlock+0x493/0x8a0 [ 332.069062][ T8185] ? alloc_fd+0x64f/0x6c0 [ 332.069093][ T8185] do_sys_openat2+0x121/0x1c0 [ 332.069113][ T8185] ? __pfx_do_sys_openat2+0x10/0x10 [ 332.069132][ T8185] ? ksys_write+0x230/0x260 [ 332.069153][ T8185] ? __pfx_ksys_write+0x10/0x10 [ 332.069175][ T8185] __x64_sys_openat+0x138/0x170 [ 332.069198][ T8185] do_syscall_64+0xfa/0xfa0 [ 332.069216][ T8185] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.069235][ T8185] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.069251][ T8185] ? clear_bhb_loop+0x60/0xb0 [ 332.069270][ T8185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.069286][ T8185] RIP: 0033:0x7f35bfd3efc9 [ 332.069302][ T8185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.069316][ T8185] RSP: 002b:00007f35bdf9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 332.069335][ T8185] RAX: ffffffffffffffda RBX: 00007f35bff95fa0 RCX: 00007f35bfd3efc9 [ 332.069347][ T8185] RDX: 0000000000082000 RSI: 0000200000000040 RDI: 00000000ffffff9c [ 332.069357][ T8185] RBP: 00007f35bdf9e090 R08: 0000000000000000 R09: 0000000000000000 [ 332.069366][ T8185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.069377][ T8185] R13: 00007f35bff96038 R14: 00007f35bff95fa0 R15: 00007ffe281f25d8 [ 332.069406][ T8185] [ 332.069415][ T8185] ERROR: Out of memory at tomoyo_realpath_from_path. [ 332.488219][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 332.659260][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 332.769238][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 332.769296][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 332.769322][ T9] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 332.769344][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 332.769367][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 332.771447][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 332.771498][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 332.771524][ T9] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 332.771547][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 332.771571][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 332.774718][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 332.774774][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 332.774799][ T9] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 332.774822][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 332.774845][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 332.858847][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 332.858989][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 333.828431][ T9] usb 5-1: string descriptor 0 read error: -22 [ 333.828592][ T9] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 333.828613][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.008637][ T9] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 334.158909][ T8188] bond1: entered promiscuous mode [ 334.158936][ T8188] bond1: entered allmulticast mode [ 334.159418][ T8188] 8021q: adding VLAN 0 to HW filter on device bond1 [ 334.182406][ T8201] loop6: detected capacity change from 0 to 524288000 [ 334.202355][ T5972] usb 5-1: USB disconnect, device number 21 [ 334.467826][ T8201] support for the xor transformation has been removed. [ 335.214347][ T5881] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 335.397985][ T5881] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 335.398002][ T5881] usb 1-1: config 0 has no interface number 0 [ 335.398034][ T5881] usb 1-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 335.400186][ T5881] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 335.400213][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 335.400231][ T5881] usb 1-1: Product: syz [ 335.400243][ T5881] usb 1-1: SerialNumber: syz [ 335.411031][ T5881] usb 1-1: config 0 descriptor?? [ 335.416975][ T5881] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 335.518634][ T49] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 335.697541][ T49] usb 4-1: Using ep0 maxpacket: 8 [ 336.204867][ T49] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 336.204892][ T49] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.204909][ T49] usb 4-1: config 0 has no interface number 0 [ 336.204960][ T49] usb 4-1: config 0 interface 186 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 336.267161][ T49] usb 4-1: New USB device found, idVendor=07c0, idProduct=1500, bcdDevice=b8.c5 [ 336.267188][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.267205][ T49] usb 4-1: Product: syz [ 336.267218][ T49] usb 4-1: Manufacturer: syz [ 336.267230][ T49] usb 4-1: SerialNumber: syz [ 336.285618][ T49] usb 4-1: config 0 descriptor?? [ 336.298824][ T49] iowarrior 4-1:0.186: no interrupt-in endpoint found [ 336.511001][ T8216] fuse: Bad value for 'fd' [ 341.254698][ T5972] usb 4-1: USB disconnect, device number 20 [ 341.408680][ T10] usb 1-1: USB disconnect, device number 16 [ 341.776736][ T8235] netlink: 88 bytes leftover after parsing attributes in process `syz.0.657'. [ 341.930311][ T8237] netlink: 44 bytes leftover after parsing attributes in process `syz.0.658'. [ 341.930331][ T8237] netlink: 32 bytes leftover after parsing attributes in process `syz.0.658'. [ 341.981557][ T49] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 342.146104][ T49] usb 4-1: unable to get BOS descriptor or descriptor too short [ 342.146615][ T49] usb 4-1: not running at top speed; connect to a high speed hub [ 342.147696][ T49] usb 4-1: config 5 has an invalid interface number: 249 but max is 0 [ 342.147711][ T49] usb 4-1: config 5 has no interface number 0 [ 342.147728][ T49] usb 4-1: config 5 interface 249 has no altsetting 0 [ 342.149720][ T49] usb 4-1: New USB device found, idVendor=19d2, idProduct=50fc, bcdDevice=cf.8b [ 342.149735][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.149745][ T49] usb 4-1: Product: syz [ 342.149752][ T49] usb 4-1: Manufacturer: syz [ 342.149759][ T49] usb 4-1: SerialNumber: syz [ 342.467844][ T49] usb 4-1: bad CDC descriptors [ 342.505303][ T49] usb 4-1: USB disconnect, device number 21 [ 342.804825][ T5972] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 343.157410][ T5972] usb 1-1: Using ep0 maxpacket: 8 [ 343.161432][ T5972] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 343.161490][ T5972] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 343.161516][ T5972] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 343.161539][ T5972] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 343.161563][ T5972] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 343.163469][ T5972] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 343.163530][ T5972] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 343.163556][ T5972] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 343.163579][ T5972] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 343.163602][ T5972] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 343.165330][ T5972] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 343.165408][ T5972] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 343.165433][ T5972] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 343.165457][ T5972] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 343.165480][ T5972] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 343.169827][ T5972] usb 1-1: string descriptor 0 read error: -22 [ 343.169971][ T5972] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 343.169991][ T5972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.143005][ T5972] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 344.352369][ T991] usb 1-1: USB disconnect, device number 17 [ 346.002471][ T8266] netlink: 88 bytes leftover after parsing attributes in process `syz.4.668'. [ 346.343211][ T49] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 347.048818][ T49] usb 2-1: Using ep0 maxpacket: 8 [ 347.146009][ T49] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 347.146038][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.146056][ T49] usb 2-1: Product: syz [ 347.146068][ T49] usb 2-1: Manufacturer: syz [ 347.146081][ T49] usb 2-1: SerialNumber: syz [ 347.284055][ T5901] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 347.305069][ T49] usb 2-1: config 0 descriptor?? [ 347.479358][ T5901] usb 3-1: unable to get BOS descriptor or descriptor too short [ 347.481460][ T5901] usb 3-1: not running at top speed; connect to a high speed hub [ 347.484355][ T5901] usb 3-1: config 5 has an invalid interface number: 249 but max is 0 [ 347.484377][ T5901] usb 3-1: config 5 has no interface number 0 [ 347.484406][ T5901] usb 3-1: config 5 interface 249 has no altsetting 0 [ 347.526205][ T5901] usb 3-1: New USB device found, idVendor=19d2, idProduct=50fc, bcdDevice=cf.8b [ 347.526221][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.526272][ T5901] usb 3-1: Product: syz [ 347.526280][ T5901] usb 3-1: Manufacturer: syz [ 347.526287][ T5901] usb 3-1: SerialNumber: syz [ 347.634309][ T49] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 347.634631][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 347.634747][ T49] gspca_sunplus: reg_w_riv err -32 [ 347.634797][ T49] sunplus 2-1:0.0: probe with driver sunplus failed with error -32 [ 347.638515][ T49] usb 2-1: USB disconnect, device number 19 [ 347.757909][ T8285] tipc: Enabled bearer , priority 0 [ 347.954145][ T5901] usb 3-1: bad CDC descriptors [ 348.008138][ T5901] usb 3-1: USB disconnect, device number 22 [ 348.449296][ T49] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 348.611948][ T49] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 348.611975][ T49] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 348.611988][ T49] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 348.611998][ T49] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 348.612019][ T49] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 348.612030][ T49] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.617476][ T49] usb 1-1: config 0 descriptor?? [ 348.682374][ T5901] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 348.715358][ T8303] netlink: 'syz.2.680': attribute type 4 has an invalid length. [ 348.770462][ T5972] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 348.834211][ T5901] usb 2-1: Using ep0 maxpacket: 16 [ 348.840402][ T5901] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 348.840433][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 348.878835][ T5901] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 348.878930][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.878948][ T5901] usb 2-1: Product: syz [ 348.878960][ T5901] usb 2-1: Manufacturer: syz [ 348.878972][ T5901] usb 2-1: SerialNumber: syz [ 348.909012][ T49] hdpvr 1-1:0.0: firmware version 0x8 dated [ 348.917724][ T5901] usb 2-1: config 0 descriptor?? [ 348.961121][ T5901] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 348.961154][ T5901] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 348.976904][ T5972] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 348.976930][ T5972] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 348.976948][ T5972] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 348.976981][ T5972] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 348.977022][ T5972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 348.977042][ T5972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 348.977061][ T5972] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 348.981287][ T5972] usb 4-1: string descriptor 0 read error: -22 [ 348.981446][ T5972] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 348.981467][ T5972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.998767][ T5972] usb 4-1: config 0 descriptor?? [ 349.004862][ T5972] hub 4-1:0.0: bad descriptor, ignoring hub [ 349.004900][ T5972] hub 4-1:0.0: probe with driver hub failed with error -5 [ 349.028801][ T5972] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input12 [ 349.144415][ T37] audit: type=1326 audit(1761499342.537:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8296 comm="syz.0.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c01befc9 code=0x7ffc0000 [ 349.149749][ T37] audit: type=1326 audit(1761499342.547:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8296 comm="syz.0.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f09c01befc9 code=0x7ffc0000 [ 349.151124][ T37] audit: type=1326 audit(1761499342.547:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8296 comm="syz.0.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c01befc9 code=0x7ffc0000 [ 349.153689][ T37] audit: type=1326 audit(1761499342.547:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8296 comm="syz.0.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c01befc9 code=0x7ffc0000 [ 349.159669][ T37] audit: type=1326 audit(1761499342.547:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8296 comm="syz.0.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f09c01befc9 code=0x7ffc0000 [ 349.159977][ T37] audit: type=1326 audit(1761499342.556:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8296 comm="syz.0.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c01befc9 code=0x7ffc0000 [ 349.160549][ T37] audit: type=1326 audit(1761499342.556:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8296 comm="syz.0.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c01befc9 code=0x7ffc0000 [ 349.160949][ T37] audit: type=1326 audit(1761499342.556:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8296 comm="syz.0.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f09c01befc9 code=0x7ffc0000 [ 349.164720][ T37] audit: type=1326 audit(1761499342.556:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8296 comm="syz.0.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c01befc9 code=0x7ffc0000 [ 349.168147][ T37] audit: type=1326 audit(1761499342.565:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8296 comm="syz.0.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c01befc9 code=0x7ffc0000 [ 349.326055][ T991] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 349.496923][ T991] usb 5-1: Using ep0 maxpacket: 8 [ 349.499368][ T991] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 349.499421][ T991] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 349.499446][ T991] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 349.499469][ T991] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 349.499491][ T991] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 349.501101][ T991] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 349.501135][ T991] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 349.501156][ T991] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 349.501178][ T991] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 349.501201][ T991] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 349.502778][ T991] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 349.502829][ T991] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 349.502854][ T991] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 349.502876][ T991] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 349.502898][ T991] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 349.596493][ T991] usb 5-1: string descriptor 0 read error: -22 [ 349.596643][ T991] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 349.596665][ T991] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.832462][ T991] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 349.920250][ T5901] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 349.939684][ T5901] em28xx 2-1:0.0: Config register raw data: 0xb4 [ 349.939712][ T5901] em28xx 2-1:0.0: I2S Audio (3 sample rate(s)) [ 349.939725][ T5901] em28xx 2-1:0.0: No AC97 audio processor [ 350.038788][ T49] hdpvr 1-1:0.0: Could not setup controls [ 350.045584][ T49] hdpvr 1-1:0.0: registering videodev failed [ 350.121145][ T49] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -71 [ 350.151947][ T49] usb 1-1: USB disconnect, device number 18 [ 350.159527][ T5972] usb 5-1: USB disconnect, device number 22 [ 350.956487][ T5901] usb 2-1: USB disconnect, device number 20 [ 352.005960][ T5972] IPVS: starting estimator thread 0... [ 352.008544][ T8318] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 352.096669][ T8320] IPVS: using max 15 ests per chain, 36000 per kthread [ 352.683417][ T5972] usb 4-1: USB disconnect, device number 22 [ 352.864977][ T5901] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 352.962456][ T8338] fuse: Bad value for 'fd' [ 353.768370][ T5901] usb 2-1: Using ep0 maxpacket: 8 [ 353.772760][ T5901] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 353.772786][ T5901] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.772803][ T5901] usb 2-1: config 0 has no interface number 0 [ 353.772853][ T5901] usb 2-1: config 0 interface 186 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 353.804244][ T5901] usb 2-1: New USB device found, idVendor=07c0, idProduct=1500, bcdDevice=b8.c5 [ 353.804278][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.804300][ T5901] usb 2-1: Product: syz [ 353.804312][ T5901] usb 2-1: Manufacturer: syz [ 353.804324][ T5901] usb 2-1: SerialNumber: syz [ 353.868527][ T5901] usb 2-1: config 0 descriptor?? [ 353.873187][ T5901] iowarrior 2-1:0.186: no interrupt-in endpoint found [ 355.708590][ T5901] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 355.879405][ T5901] usb 3-1: Using ep0 maxpacket: 8 [ 355.896056][ T5901] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 355.896118][ T5901] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 355.896144][ T5901] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 355.896167][ T5901] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 355.896190][ T5901] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 355.899222][ T5901] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 355.899276][ T5901] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 355.899308][ T5901] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 355.899331][ T5901] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 355.899355][ T5901] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 355.905328][ T5901] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 355.905385][ T5901] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 355.905410][ T5901] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 355.905433][ T5901] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 355.905456][ T5901] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 355.972901][ T5901] usb 3-1: string descriptor 0 read error: -22 [ 355.973063][ T5901] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 355.973084][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.137867][ T5901] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 356.307467][ T5972] usb 3-1: USB disconnect, device number 23 [ 356.454982][ T10] usb 2-1: USB disconnect, device number 21 [ 356.600731][ T8361] loop6: detected capacity change from 0 to 7 [ 356.605659][ T8361] Dev loop6: unable to read RDB block 7 [ 356.605690][ T8361] loop6: unable to read partition table [ 356.605821][ T8361] loop6: partition table beyond EOD, truncated [ 356.605854][ T8361] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 357.036115][ T8366] overlayfs: missing 'lowerdir' [ 357.036554][ T5972] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 357.207284][ C0] vkms_vblank_simulate: vblank timer overrun [ 357.290463][ T5972] usb 4-1: Using ep0 maxpacket: 8 [ 357.390904][ C0] vkms_vblank_simulate: vblank timer overrun [ 357.616108][ C0] vkms_vblank_simulate: vblank timer overrun [ 358.214286][ C0] vkms_vblank_simulate: vblank timer overrun [ 358.266624][ T5972] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 358.266735][ T5972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.266755][ T5972] usb 4-1: Product: syz [ 358.266767][ T5972] usb 4-1: Manufacturer: syz [ 358.266780][ T5972] usb 4-1: SerialNumber: syz [ 358.322439][ T5972] usb 4-1: config 0 descriptor?? [ 358.663767][ C0] vkms_vblank_simulate: vblank timer overrun [ 358.775731][ T5972] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 358.781023][ T8378] fuse: Bad value for 'fd' [ 358.781454][ T5972] gspca_sunplus: reg_w_riv err -71 [ 358.781550][ T5972] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 358.806099][ T5972] usb 4-1: USB disconnect, device number 23 [ 358.943065][ T8384] netlink: 84 bytes leftover after parsing attributes in process `syz.2.704'. [ 359.268707][ T31] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 360.198977][ C0] vkms_vblank_simulate: vblank timer overrun [ 360.254773][ T31] usb 5-1: unable to get BOS descriptor or descriptor too short [ 360.255798][ T31] usb 5-1: not running at top speed; connect to a high speed hub [ 360.270592][ T31] usb 5-1: config 5 has an invalid interface number: 249 but max is 0 [ 360.270617][ T31] usb 5-1: config 5 has no interface number 0 [ 360.270648][ T31] usb 5-1: config 5 interface 249 has no altsetting 0 [ 360.294710][ T31] usb 5-1: New USB device found, idVendor=19d2, idProduct=50fc, bcdDevice=cf.8b [ 360.294745][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.294762][ T31] usb 5-1: Product: syz [ 360.294775][ T31] usb 5-1: Manufacturer: syz [ 360.294787][ T31] usb 5-1: SerialNumber: syz [ 360.339172][ T37] kauditd_printk_skb: 108 callbacks suppressed [ 360.339189][ T37] audit: type=1326 audit(1761499353.004:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8391 comm="syz.2.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a395befc9 code=0x7ffc0000 [ 360.339234][ T37] audit: type=1326 audit(1761499353.004:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8391 comm="syz.2.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a395befc9 code=0x7ffc0000 [ 360.339272][ T37] audit: type=1326 audit(1761499353.004:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8391 comm="syz.2.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7a395befc9 code=0x7ffc0000 [ 360.339312][ T37] audit: type=1326 audit(1761499353.004:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8391 comm="syz.2.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a395befc9 code=0x7ffc0000 [ 360.339351][ T37] audit: type=1326 audit(1761499353.004:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8391 comm="syz.2.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a395befc9 code=0x7ffc0000 [ 360.339390][ T37] audit: type=1326 audit(1761499353.004:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8391 comm="syz.2.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f7a395befc9 code=0x7ffc0000 [ 360.339428][ T37] audit: type=1326 audit(1761499353.004:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8391 comm="syz.2.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a395befc9 code=0x7ffc0000 [ 360.339467][ T37] audit: type=1326 audit(1761499353.014:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8391 comm="syz.2.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a395befc9 code=0x7ffc0000 [ 360.339568][ T37] audit: type=1326 audit(1761499353.014:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8391 comm="syz.2.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7a395befc9 code=0x7ffc0000 [ 360.339609][ T37] audit: type=1326 audit(1761499353.014:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8391 comm="syz.2.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a395befc9 code=0x7ffc0000 [ 361.488804][ C0] vkms_vblank_simulate: vblank timer overrun [ 362.060488][ T5972] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 362.132991][ T31] usb 5-1: bad CDC descriptors [ 362.157317][ T31] usb 5-1: USB disconnect, device number 23 [ 362.219013][ T5972] usb 1-1: Using ep0 maxpacket: 8 [ 362.221757][ T5972] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 362.221815][ T5972] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 362.221829][ T5972] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 362.221906][ T5972] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 362.221919][ T5972] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 362.223992][ T5972] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 362.224024][ T5972] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 362.224038][ T5972] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 362.224050][ T5972] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 362.224063][ T5972] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 362.227134][ T5972] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 362.227185][ T5972] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 362.227210][ T5972] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 362.227234][ T5972] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 362.227256][ T5972] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 362.278031][ T5972] usb 1-1: string descriptor 0 read error: -22 [ 362.295047][ T5972] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 362.295076][ T5972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.344250][ T5972] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 362.538041][ T5972] usb 1-1: USB disconnect, device number 19 [ 363.835878][ T8419] netlink: 84 bytes leftover after parsing attributes in process `syz.3.717'. [ 364.335703][ T5901] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 364.531076][ T5901] usb 5-1: device descriptor read/64, error -71 [ 364.828605][ T5901] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 365.439021][ T8433] fuse: Bad value for 'fd' [ 365.447388][ T5901] usb 5-1: device descriptor read/64, error -71 [ 365.586924][ T5901] usb usb5-port1: attempt power cycle [ 366.731622][ T37] kauditd_printk_skb: 46 callbacks suppressed [ 366.731638][ T37] audit: type=1326 audit(1761499358.963:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8431 comm="syz.1.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35bfd3efc9 code=0x7ffc0000 [ 366.731681][ T37] audit: type=1326 audit(1761499358.963:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8431 comm="syz.1.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35bfd3efc9 code=0x7ffc0000 [ 366.762299][ T5901] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 366.802775][ T5901] usb 5-1: device descriptor read/8, error -71 [ 366.804370][ T8436] Process accounting resumed [ 367.061677][ T5901] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 367.119647][ T5901] usb 5-1: device descriptor read/8, error -71 [ 367.233213][ T5901] usb usb5-port1: unable to enumerate USB device [ 368.345239][ T5901] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 368.511590][ T5901] usb 5-1: unable to get BOS descriptor or descriptor too short [ 368.512369][ T5901] usb 5-1: not running at top speed; connect to a high speed hub [ 368.513921][ T5901] usb 5-1: config 5 has an invalid interface number: 249 but max is 0 [ 368.513943][ T5901] usb 5-1: config 5 has no interface number 0 [ 368.513974][ T5901] usb 5-1: config 5 interface 249 has no altsetting 0 [ 368.518493][ T5901] usb 5-1: New USB device found, idVendor=19d2, idProduct=50fc, bcdDevice=cf.8b [ 368.518520][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.518538][ T5901] usb 5-1: Product: syz [ 368.518550][ T5901] usb 5-1: Manufacturer: syz [ 368.518563][ T5901] usb 5-1: SerialNumber: syz [ 368.708064][ T31] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 368.879515][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 368.882231][ T31] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 368.882337][ T31] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 368.882363][ T31] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 368.882385][ T31] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 368.882466][ T31] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 368.887983][ T31] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 368.888085][ T31] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 368.888109][ T31] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 368.888141][ T31] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 368.888219][ T31] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 368.903532][ T31] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 368.912165][ T31] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 368.912199][ T31] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 368.915231][ T31] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 368.915260][ T31] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 369.067723][ T31] usb 4-1: string descriptor 0 read error: -22 [ 369.067980][ T31] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 369.068002][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.369334][ T31] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 369.394001][ T5901] usb 5-1: bad CDC descriptors [ 370.177337][ T5901] usb 5-1: USB disconnect, device number 28 [ 370.318096][ T5972] usb 4-1: USB disconnect, device number 24 [ 370.953051][ T991] IPVS: starting estimator thread 0... [ 371.019107][ T8473] tipc: Enabled bearer , priority 0 [ 371.032997][ T8473] syzkaller0: entered promiscuous mode [ 371.033021][ T8473] syzkaller0: entered allmulticast mode [ 371.049372][ T8476] IPVS: using max 9 ests per chain, 21600 per kthread [ 371.325774][ T8473] tipc: Resetting bearer [ 371.359350][ T31] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 371.500856][ T31] usb 1-1: device descriptor read/64, error -71 [ 371.621224][ T8472] tipc: Resetting bearer [ 371.776348][ T31] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 371.915279][ T31] usb 1-1: device descriptor read/64, error -71 [ 371.955586][ T8472] tipc: Disabling bearer [ 372.045346][ T31] usb usb1-port1: attempt power cycle [ 372.149017][ T8489] dvmrp0: entered allmulticast mode [ 372.406949][ T31] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 372.428899][ T31] usb 1-1: device descriptor read/8, error -71 [ 372.526425][ T991] IPVS: starting estimator thread 0... [ 372.538322][ T8502] tipc: Started in network mode [ 372.538348][ T8502] tipc: Node identity 9a13a6370917, cluster identity 4711 [ 372.538532][ T8502] tipc: Enabled bearer , priority 0 [ 372.545733][ T8502] syzkaller0: entered promiscuous mode [ 372.546530][ T8502] syzkaller0: entered allmulticast mode [ 372.706656][ T31] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 372.728733][ T31] usb 1-1: device descriptor read/8, error -71 [ 372.770500][ T8504] IPVS: using max 9 ests per chain, 21600 per kthread [ 373.437853][ T31] usb usb1-port1: unable to enumerate USB device [ 373.571077][ T8510] tipc: Resetting bearer [ 373.713952][ T31] tipc: Node number set to 2466555447 [ 373.736320][ T8501] tipc: Resetting bearer [ 373.829002][ T991] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 373.883473][ T8518] kvm: kvm [8517]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000 [ 373.930476][ T8501] tipc: Disabling bearer [ 373.992516][ T991] usb 4-1: unable to get BOS descriptor or descriptor too short [ 373.993291][ T991] usb 4-1: not running at top speed; connect to a high speed hub [ 373.995141][ T991] usb 4-1: config 5 has an invalid interface number: 249 but max is 0 [ 373.995165][ T991] usb 4-1: config 5 has no interface number 0 [ 373.995200][ T991] usb 4-1: config 5 interface 249 has no altsetting 0 [ 373.999136][ T991] usb 4-1: New USB device found, idVendor=19d2, idProduct=50fc, bcdDevice=cf.8b [ 373.999165][ T991] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.999187][ T991] usb 4-1: Product: syz [ 373.999201][ T991] usb 4-1: Manufacturer: syz [ 373.999216][ T991] usb 4-1: SerialNumber: syz [ 374.428222][ T991] usb 4-1: bad CDC descriptors [ 374.466846][ T991] usb 4-1: USB disconnect, device number 25 [ 375.090387][ T991] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 375.261722][ T991] usb 5-1: Using ep0 maxpacket: 8 [ 375.899308][ T991] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 375.899366][ T991] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 375.899391][ T991] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 375.899414][ T991] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 375.899437][ T991] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 375.900597][ T991] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 375.900649][ T991] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 375.900699][ T991] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 375.900726][ T991] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 375.900748][ T991] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 375.977645][ T991] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 375.978984][ T991] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 375.979012][ T991] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 375.979034][ T991] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 375.979057][ T991] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 376.088995][ T991] usb 5-1: string descriptor 0 read error: -22 [ 376.089155][ T991] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 376.089177][ T991] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.170710][ T991] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 376.212942][ T49] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 376.373886][ T9] usb 5-1: USB disconnect, device number 29 [ 376.375557][ T49] usb 4-1: config 252 has an invalid interface number: 191 but max is 0 [ 376.375582][ T49] usb 4-1: config 252 has no interface number 0 [ 376.386812][ T49] usb 4-1: New USB device found, idVendor=054c, idProduct=0069, bcdDevice=6d.6f [ 376.386848][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.386866][ T49] usb 4-1: Product: syz [ 376.386878][ T49] usb 4-1: Manufacturer: syz [ 376.386890][ T49] usb 4-1: SerialNumber: syz [ 376.463851][ T49] usb-storage 4-1:252.191: USB Mass Storage device detected [ 376.504717][ T49] usb-storage 4-1:252.191: Quirks match for vid 054c pid 0069: 1 [ 376.704606][ T991] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 376.735323][ T31] usb 4-1: USB disconnect, device number 26 [ 376.867880][ T991] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 376.867905][ T991] usb 1-1: config 0 has no interface number 0 [ 376.867951][ T991] usb 1-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 376.870701][ T991] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 376.870734][ T991] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 376.870752][ T991] usb 1-1: Product: syz [ 376.870765][ T991] usb 1-1: SerialNumber: syz [ 376.877256][ T991] usb 1-1: config 0 descriptor?? [ 376.902671][ T991] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 378.169241][ T991] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 378.332144][ T991] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 378.332172][ T991] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 378.332194][ T991] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 378.332213][ T991] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 378.332249][ T991] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 378.332267][ T991] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.399781][ T991] usb 5-1: config 0 descriptor?? [ 378.643792][ T991] hdpvr 5-1:0.0: firmware version 0x8 dated [ 378.661029][ T5972] usb 1-1: USB disconnect, device number 24 [ 378.725116][ T5989] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 378.778630][ T31] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 378.863304][ T37] audit: type=1326 audit(1761499370.337:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8549 comm="syz.4.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8a87efc9 code=0x7ffc0000 [ 378.863456][ T37] audit: type=1326 audit(1761499370.337:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8549 comm="syz.4.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8a87efc9 code=0x7ffc0000 [ 378.874768][ T5989] usb 3-1: device descriptor read/64, error -71 [ 378.910184][ T37] audit: type=1326 audit(1761499370.337:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8549 comm="syz.4.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7fda8a87efc9 code=0x7ffc0000 [ 378.910233][ T37] audit: type=1326 audit(1761499370.384:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8549 comm="syz.4.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8a87efc9 code=0x7ffc0000 [ 378.911005][ T37] audit: type=1326 audit(1761499370.384:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8549 comm="syz.4.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8a87efc9 code=0x7ffc0000 [ 378.940919][ T37] audit: type=1326 audit(1761499370.403:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8549 comm="syz.4.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7fda8a87efc9 code=0x7ffc0000 [ 378.943528][ T37] audit: type=1326 audit(1761499370.422:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8549 comm="syz.4.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8a87efc9 code=0x7ffc0000 [ 378.945047][ T37] audit: type=1326 audit(1761499370.422:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8549 comm="syz.4.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8a87efc9 code=0x7ffc0000 [ 378.965157][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 379.110903][ T31] usb 2-1: config 0 has an invalid interface number: 57 but max is 0 [ 379.110928][ T31] usb 2-1: config 0 has no interface number 0 [ 379.110976][ T31] usb 2-1: config 0 interface 57 has no altsetting 0 [ 379.111642][ T37] audit: type=1326 audit(1761499370.581:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8549 comm="syz.4.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7fda8a87efc9 code=0x7ffc0000 [ 379.112468][ T37] audit: type=1326 audit(1761499370.581:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8549 comm="syz.4.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8a87efc9 code=0x7ffc0000 [ 379.117114][ T31] usb 2-1: New USB device found, idVendor=0c72, idProduct=0011, bcdDevice=3a.c0 [ 379.117141][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.117159][ T31] usb 2-1: Product: syz [ 379.117171][ T31] usb 2-1: Manufacturer: syz [ 379.117183][ T31] usb 2-1: SerialNumber: syz [ 379.142367][ T5989] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 379.181483][ T31] usb 2-1: config 0 descriptor?? [ 379.454952][ T5989] usb 3-1: device descriptor read/64, error -71 [ 379.576616][ T5989] usb usb3-port1: attempt power cycle [ 380.221774][ T991] hdpvr 5-1:0.0: Could not setup controls [ 380.224266][ T991] hdpvr 5-1:0.0: registering videodev failed [ 380.240746][ T991] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -71 [ 380.247427][ T991] usb 5-1: USB disconnect, device number 30 [ 380.377753][ T31] usb 2-1: USB disconnect, device number 22 [ 380.628018][ T5989] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 380.649958][ T5989] usb 3-1: device descriptor read/8, error -71 [ 380.667938][ T5972] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 380.702879][ T49] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 380.820695][ T5972] usb 4-1: Using ep0 maxpacket: 8 [ 380.828981][ T5972] usb 4-1: config 6 has an invalid interface number: 204 but max is 2 [ 380.829009][ T5972] usb 4-1: config 6 contains an unexpected descriptor of type 0x1, skipping [ 380.829026][ T5972] usb 4-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 380.829042][ T5972] usb 4-1: config 6 has an invalid interface number: 65 but max is 2 [ 380.829061][ T5972] usb 4-1: config 6 has an invalid interface number: 225 but max is 2 [ 380.829079][ T5972] usb 4-1: config 6 has an invalid descriptor of length 246, skipping remainder of the config [ 380.829097][ T5972] usb 4-1: config 6 has no interface number 0 [ 380.829111][ T5972] usb 4-1: config 6 has no interface number 1 [ 380.829125][ T5972] usb 4-1: config 6 has no interface number 2 [ 380.829223][ T5972] usb 4-1: config 6 interface 204 altsetting 1 endpoint 0x3 has invalid maxpacket 8860, setting to 64 [ 380.829248][ T5972] usb 4-1: config 6 interface 204 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 380.829277][ T5972] usb 4-1: config 6 interface 204 altsetting 1 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 380.829301][ T5972] usb 4-1: config 6 interface 204 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 380.829321][ T5972] usb 4-1: config 6 interface 204 altsetting 1 endpoint 0xE has invalid wMaxPacketSize 0 [ 380.829341][ T5972] usb 4-1: config 6 interface 204 altsetting 1 endpoint 0x4 has invalid maxpacket 1535, setting to 64 [ 380.829363][ T5972] usb 4-1: config 6 interface 204 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 380.829388][ T5972] usb 4-1: config 6 interface 204 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 380.829406][ T5972] usb 4-1: config 6 interface 204 altsetting 1 has a duplicate endpoint with address 0xE, skipping [ 380.829426][ T5972] usb 4-1: config 6 interface 204 altsetting 1 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 380.829450][ T5972] usb 4-1: config 6 interface 204 altsetting 1 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 380.829472][ T5972] usb 4-1: config 6 interface 204 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 380.829507][ T5972] usb 4-1: config 6 interface 65 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 380.829527][ T5972] usb 4-1: config 6 interface 65 altsetting 0 has an endpoint descriptor with address 0x73, changing to 0x3 [ 380.829548][ T5972] usb 4-1: config 6 interface 65 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 380.829567][ T5972] usb 4-1: config 6 interface 65 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 380.829587][ T5972] usb 4-1: config 6 interface 65 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 380.829608][ T5972] usb 4-1: config 6 interface 65 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 380.829627][ T5972] usb 4-1: config 6 interface 65 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 380.829676][ T5972] usb 4-1: config 6 interface 225 altsetting 69 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 380.829700][ T5972] usb 4-1: config 6 interface 204 has no altsetting 0 [ 380.829718][ T5972] usb 4-1: config 6 interface 225 has no altsetting 0 [ 380.840024][ T5972] usb 4-1: New USB device found, idVendor=19d2, idProduct=1276, bcdDevice=65.60 [ 380.840051][ T5972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.840068][ T5972] usb 4-1: Product: 영㙸藅쎌뫚漥姊ﭢ⋎ꁕ釱ᆎ䪓 [ 380.840082][ T5972] usb 4-1: Manufacturer: й [ 380.840094][ T5972] usb 4-1: SerialNumber: 䆧兕䝐ୠꓙ냎認䬐⁤ꗤ挐璘ῑ坍∍朑辡㬵䓘爵唿⻦㚍榐䂠쫴⍂㍮܅䖶聚췰뜷᧠䤒ﳶ瘳ꃂ軆坎⫺푐퉸办휘 [ 381.260264][ T49] usb 1-1: Using ep0 maxpacket: 8 [ 381.305911][ T5989] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 381.330314][ T49] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 381.330370][ T49] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 381.330395][ T49] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 381.330417][ T49] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 381.330440][ T49] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 381.343845][ T8575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.352699][ T8575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.381153][ T5972] option 4-1:6.204: GSM modem (1-port) converter detected [ 381.387048][ T5989] usb 3-1: device descriptor read/8, error -71 [ 381.387124][ T49] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 381.387174][ T49] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 381.387199][ T49] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 381.387230][ T49] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 381.387254][ T49] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 381.440527][ T49] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 381.440585][ T49] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 381.440610][ T49] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 381.440632][ T49] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 381.440655][ T49] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 381.531274][ T5989] usb usb3-port1: unable to enumerate USB device [ 381.663929][ T49] usb 1-1: string descriptor 0 read error: -22 [ 381.664244][ T49] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 381.664267][ T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.706900][ T49] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 381.819602][ T8575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.851982][ T8575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.976410][ T5989] usb 1-1: USB disconnect, device number 25 [ 382.122934][ T8575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.123479][ T8575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.370609][ T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 382.766089][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 382.768444][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.768472][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.768508][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 382.768529][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.773938][ T10] usb 3-1: config 0 descriptor?? [ 382.783475][ T10] hub 3-1:0.0: USB hub found [ 383.644737][ T10] hub 3-1:0.0: 1 port detected [ 383.935690][ T5989] usb 4-1: USB disconnect, device number 27 [ 384.021370][ T5989] option 4-1:6.204: device disconnected [ 384.174291][ T10] usb 3-1: USB disconnect, device number 28 [ 385.192894][ T5989] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 385.379623][ T5989] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 385.379682][ T5989] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 385.379703][ T5989] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.412777][ T49] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 385.434795][ T5989] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 385.567034][ T49] usb 5-1: Using ep0 maxpacket: 16 [ 385.569626][ T49] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 385.569656][ T49] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 385.573187][ T49] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 385.573213][ T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.573231][ T49] usb 5-1: Product: syz [ 385.573244][ T49] usb 5-1: Manufacturer: syz [ 385.573256][ T49] usb 5-1: SerialNumber: syz [ 385.795266][ T49] usb 5-1: config 0 descriptor?? [ 385.812926][ T49] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 385.813109][ T49] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 386.550733][ T37] kauditd_printk_skb: 37 callbacks suppressed [ 386.550798][ T37] audit: type=1326 audit(1761499377.531:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8619 comm="syz.4.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8a87efc9 code=0x7ffc0000 [ 386.551550][ T37] audit: type=1326 audit(1761499377.540:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8619 comm="syz.4.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8a87efc9 code=0x7ffc0000 [ 386.551975][ T37] audit: type=1326 audit(1761499377.540:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8619 comm="syz.4.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda8a87efc9 code=0x7ffc0000 [ 386.552342][ T37] audit: type=1326 audit(1761499377.540:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8619 comm="syz.4.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8a87efc9 code=0x7ffc0000 [ 386.552843][ T37] audit: type=1326 audit(1761499377.540:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8619 comm="syz.4.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8a87efc9 code=0x7ffc0000 [ 386.553222][ T37] audit: type=1326 audit(1761499377.540:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8619 comm="syz.4.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda8a87efc9 code=0x7ffc0000 [ 386.554266][ T37] audit: type=1326 audit(1761499377.540:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8619 comm="syz.4.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8a87efc9 code=0x7ffc0000 [ 386.554785][ T37] audit: type=1326 audit(1761499377.540:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8619 comm="syz.4.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8a87efc9 code=0x7ffc0000 [ 386.555363][ T37] audit: type=1326 audit(1761499377.540:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8619 comm="syz.4.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda8a87efc9 code=0x7ffc0000 [ 386.555768][ T37] audit: type=1326 audit(1761499377.540:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8619 comm="syz.4.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8a87efc9 code=0x7ffc0000 [ 386.585921][ T8635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.586468][ T8635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.457513][ T5989] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 387.457533][ T5989] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 387.461253][ T5989] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 387.494979][ T49] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 387.502179][ T49] em28xx 5-1:0.0: Config register raw data: 0xb4 [ 387.502201][ T49] em28xx 5-1:0.0: I2S Audio (3 sample rate(s)) [ 387.502214][ T49] em28xx 5-1:0.0: No AC97 audio processor [ 387.719629][ T10] usb 4-1: USB disconnect, device number 28 [ 388.385378][ T10] usb 5-1: USB disconnect, device number 31 [ 388.538198][ T8650] FAULT_INJECTION: forcing a failure. [ 388.538198][ T8650] name failslab, interval 1, probability 0, space 0, times 0 [ 388.538234][ T8650] CPU: 1 UID: 0 PID: 8650 Comm: syz.3.788 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 388.538246][ T8650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 388.538255][ T8650] Call Trace: [ 388.538262][ T8650] [ 388.538267][ T8650] dump_stack_lvl+0x189/0x250 [ 388.538287][ T8650] ? __pfx____ratelimit+0x10/0x10 [ 388.538300][ T8650] ? __pfx_dump_stack_lvl+0x10/0x10 [ 388.538313][ T8650] ? __pfx__printk+0x10/0x10 [ 388.538325][ T8650] ? __lock_acquire+0xab9/0xd20 [ 388.538344][ T8650] should_fail_ex+0x46c/0x600 [ 388.538368][ T8650] ? __alloc_skb+0x112/0x2d0 [ 388.538383][ T8650] should_failslab+0xa8/0x100 [ 388.538405][ T8650] ? __alloc_skb+0x112/0x2d0 [ 388.538413][ T8650] kmem_cache_alloc_node_noprof+0x78/0x6e0 [ 388.538427][ T8650] ? is_bpf_text_address+0x292/0x2b0 [ 388.538443][ T8650] __alloc_skb+0x112/0x2d0 [ 388.538454][ T8650] _sctp_make_chunk+0x5e/0x430 [ 388.538470][ T8650] sctp_make_shutdown+0xb1/0x3d0 [ 388.538483][ T8650] ? __pfx_sctp_make_shutdown+0x10/0x10 [ 388.538502][ T8650] sctp_sf_do_9_2_start_shutdown+0x2b/0x4c0 [ 388.538517][ T8650] ? sctp_sf_do_9_2_prm_shutdown+0xd2/0x140 [ 388.538533][ T8650] sctp_do_sm+0x1e7/0x5a20 [ 388.538542][ T8650] ? __pfx_sctp_pname+0x10/0x10 [ 388.538556][ T8650] ? __lock_acquire+0xab9/0xd20 [ 388.538570][ T8650] ? __pfx_sctp_do_sm+0x10/0x10 [ 388.538600][ T8650] ? rt_spin_lock+0x1c1/0x3e0 [ 388.538611][ T8650] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 388.538623][ T8650] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 388.538636][ T8650] sctp_primitive_SHUTDOWN+0x98/0xc0 [ 388.538653][ T8650] sctp_sendmsg_check_sflags+0x1b1/0x2e0 [ 388.538669][ T8650] sctp_sendmsg+0xcd4/0x2590 [ 388.538847][ T8650] ? __pfx_sctp_sendmsg+0x10/0x10 [ 388.538866][ T8650] ? __lock_acquire+0xab9/0xd20 [ 388.538900][ T8650] ? sock_rps_record_flow+0x19/0x410 [ 388.538925][ T8650] ? inet_sendmsg+0x2f4/0x370 [ 388.538943][ T8650] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 388.538967][ T8650] __sock_sendmsg+0x19c/0x270 [ 388.538991][ T8650] ____sys_sendmsg+0x534/0x820 [ 388.539014][ T8650] ? __pfx_____sys_sendmsg+0x10/0x10 [ 388.539040][ T8650] ? import_iovec+0x74/0xa0 [ 388.539061][ T8650] ___sys_sendmsg+0x21f/0x2a0 [ 388.539081][ T8650] ? __pfx____sys_sendmsg+0x10/0x10 [ 388.539135][ T8650] ? __fget_files+0x2a/0x420 [ 388.539156][ T8650] ? __fget_files+0x3a6/0x420 [ 388.539185][ T8650] __sys_sendmmsg+0x22d/0x430 [ 388.539208][ T8650] ? __pfx___sys_sendmmsg+0x10/0x10 [ 388.539237][ T8650] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 388.539273][ T8650] ? ksys_write+0x230/0x260 [ 388.539296][ T8650] ? __pfx_ksys_write+0x10/0x10 [ 388.539321][ T8650] __x64_sys_sendmmsg+0xa0/0xc0 [ 388.539342][ T8650] do_syscall_64+0xfa/0xfa0 [ 388.539361][ T8650] ? lockdep_hardirqs_on+0x9c/0x150 [ 388.539381][ T8650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.539398][ T8650] ? clear_bhb_loop+0x60/0xb0 [ 388.539419][ T8650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.539437][ T8650] RIP: 0033:0x7f8d2a08efc9 [ 388.539456][ T8650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.539471][ T8650] RSP: 002b:00007f8d282f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 388.539490][ T8650] RAX: ffffffffffffffda RBX: 00007f8d2a2e5fa0 RCX: 00007f8d2a08efc9 [ 388.539504][ T8650] RDX: 0000000000000001 RSI: 0000200000003640 RDI: 0000000000000003 [ 388.539516][ T8650] RBP: 00007f8d282f6090 R08: 0000000000000000 R09: 0000000000000000 [ 388.539527][ T8650] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001 [ 388.539537][ T8650] R13: 00007f8d2a2e6038 R14: 00007f8d2a2e5fa0 R15: 00007ffe9af3dd18 [ 388.539570][ T8650] [ 390.365272][ T8655] syzkaller1: entered promiscuous mode [ 390.365288][ T8655] syzkaller1: entered allmulticast mode [ 390.525950][ T8660] Process accounting resumed [ 391.126164][ T10] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 391.425626][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 391.428347][ T10] usb 3-1: config 253 has an invalid interface number: 176 but max is 0 [ 391.428371][ T10] usb 3-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 391.428388][ T10] usb 3-1: config 253 has no interface number 0 [ 391.428432][ T10] usb 3-1: config 253 interface 176 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 391.428465][ T10] usb 3-1: config 253 interface 176 has no altsetting 0 [ 391.434610][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice=25.28 [ 391.434635][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.434652][ T10] usb 3-1: Product: syz [ 391.434664][ T10] usb 3-1: Manufacturer: syz [ 391.434677][ T10] usb 3-1: SerialNumber: syz [ 391.476097][ T10] usb 3-1: cannot find UAC_HEADER [ 391.726413][ T8666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.731734][ T8666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.938051][ T10] snd-usb-audio 3-1:253.176: probe with driver snd-usb-audio failed with error -22 [ 391.960351][ T10] usb 3-1: USB disconnect, device number 29 [ 392.115285][ T5938] udevd[5938]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:253.176/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 400.897526][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 400.897597][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 401.581671][ T10] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 401.745498][ T10] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 401.745527][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.780875][ T10] usb 4-1: config 0 descriptor?? [ 401.851390][ T10] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 401.910795][ T8764] fuse: Unknown parameter 'use00000000000000000000' [ 402.525029][ T10] gspca_sunplus: reg_w_riv err -71 [ 402.527410][ T10] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 402.548560][ T10] usb 4-1: USB disconnect, device number 29 [ 403.068603][ T5801] Bluetooth: hci4: command 0x0405 tx timeout [ 405.626032][ T8780] 9p: Unknown access argument Grd Re^Z٭: -22 [ 407.198589][ T8790] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 407.198815][ T8790] Error validating options; rc = [-22] [ 407.237046][ T10] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 407.407986][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 407.415732][ T10] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 407.415758][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.415776][ T10] usb 4-1: Product: syz [ 407.415787][ T10] usb 4-1: Manufacturer: syz [ 407.415799][ T10] usb 4-1: SerialNumber: syz [ 407.468870][ T10] usb 4-1: config 0 descriptor?? [ 407.701876][ T10] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 407.835671][ T49] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 408.008962][ T49] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 408.009018][ T49] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 408.009040][ T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.052702][ T49] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 408.872627][ T31] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 409.019759][ T10] gspca_sunplus: reg_w_riv err -71 [ 409.019832][ T10] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 409.038305][ T10] usb 4-1: USB disconnect, device number 30 [ 409.046108][ T31] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 409.046133][ T31] usb 5-1: config 0 has no interface number 0 [ 409.046176][ T31] usb 5-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 409.048444][ T31] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 409.048468][ T31] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 409.048487][ T31] usb 5-1: Product: syz [ 409.048499][ T31] usb 5-1: SerialNumber: syz [ 409.175420][ T31] usb 5-1: config 0 descriptor?? [ 409.179487][ T31] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 409.181700][ T49] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 409.181718][ T49] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 409.246374][ T49] stv0680 2-1:4.0: last error: 87, command = 0xb1 [ 409.248006][ T8817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.250473][ T8817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.413508][ T8814] kvm: pic: non byte write [ 409.466868][ T31] usb 2-1: USB disconnect, device number 23 [ 410.995759][ T9] usb 5-1: USB disconnect, device number 32 [ 411.523952][ T31] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 411.687536][ T31] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 411.687561][ T31] usb 2-1: config 0 has no interface number 0 [ 411.689530][ T31] usb 2-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 411.692836][ T31] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 411.692869][ T31] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 411.692887][ T31] usb 2-1: Product: syz [ 411.692901][ T31] usb 2-1: SerialNumber: syz [ 411.704992][ T31] usb 2-1: config 0 descriptor?? [ 411.851752][ T31] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 412.238849][ T31] usb 2-1: USB disconnect, device number 24 [ 414.635897][ T8843] loop6: detected capacity change from 0 to 7 [ 414.648325][ T8843] Dev loop6: unable to read RDB block 7 [ 414.648369][ T8843] loop6: unable to read partition table [ 414.648600][ T8843] loop6: partition table beyond EOD, truncated [ 414.648617][ T8843] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 415.841569][ T8845] cgroup: fork rejected by pids controller in /syz4 [ 452.009520][ T5807] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 455.657137][ T5801] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 457.717619][ T8911] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 460.847315][ T8919] loop6: detected capacity change from 0 to 7 [ 465.081427][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 465.081507][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 466.192107][ T5807] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 466.222410][ T5807] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 467.309260][ T5807] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 467.331037][ T5807] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 468.372901][ T5807] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 472.769172][ T5807] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 472.838024][ T5807] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 472.841333][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 473.830930][ T5808] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 473.887905][ T5808] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 476.020436][ T5808] Bluetooth: hci4: command tx timeout [ 479.056625][ T5801] Bluetooth: hci5: command tx timeout [ 479.056902][ T5801] Bluetooth: hci4: command tx timeout [ 481.891994][ T5808] Bluetooth: hci4: command tx timeout [ 481.892028][ T5808] Bluetooth: hci5: command tx timeout [ 484.113038][ T5801] Bluetooth: hci5: command tx timeout [ 484.113073][ T5801] Bluetooth: hci4: command tx timeout [ 487.323779][ T5801] Bluetooth: hci5: command tx timeout [ 526.255959][ T5801] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 526.259451][ T5808] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 526.445123][ T5808] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 526.447073][ T5808] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 528.928112][ T8942] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 528.928955][ T8943] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 529.998864][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 529.998933][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 538.635303][ T5808] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 538.801575][ T61] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 539.697842][ T5808] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 540.784769][ T8949] Bluetooth: hci7: Opcode 0x0c03 failed: -4 [ 541.856513][ T5801] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 541.869681][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 541.874311][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 541.885488][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 542.905875][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 542.907093][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 542.933027][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 544.041952][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 545.125679][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 545.126520][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 549.138664][ T61] Bluetooth: hci3: command tx timeout [ 549.518630][ T61] Bluetooth: hci0: command tx timeout [ 551.442662][ T61] Bluetooth: hci3: command tx timeout [ 552.576484][ T61] Bluetooth: hci0: command tx timeout [ 553.591444][ T61] Bluetooth: hci3: command tx timeout [ 555.332537][ T61] Bluetooth: hci0: command tx timeout [ 556.724756][ T61] Bluetooth: hci3: command tx timeout [ 558.772391][ T5801] Bluetooth: hci0: command tx timeout [ 568.421234][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 570.203033][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 570.212780][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 570.214588][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 571.284739][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 576.908129][ T61] Bluetooth: hci1: command tx timeout [ 578.367955][ T38] INFO: task syz.4.843:8845 blocked for more than 144 seconds. [ 578.367979][ T38] Not tainted syzkaller #0 [ 578.367988][ T38] Blocked by coredump. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 578.367994][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 578.368004][ T38] task:syz.4.843 state:D stack:25000 pid:8845 tgid:8844 ppid:5804 task_flags:0x400548 flags:0x00080000 [ 578.368052][ T38] Call Trace: [ 578.368058][ T38] [ 578.368069][ T38] __schedule+0x16f3/0x4c20 [ 578.368219][ T38] ? __pfx___schedule+0x10/0x10 [ 578.393950][ T38] ? schedule+0x91/0x360 [ 578.393988][ T38] schedule+0x165/0x360 [ 578.415416][ T38] schedule_timeout+0x9a/0x270 [ 578.436708][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 578.575795][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 578.575835][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 578.807168][ T38] ? wait_for_completion+0x267/0x5d0 [ 578.807202][ T38] wait_for_completion+0x2bf/0x5d0 [ 578.807233][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 578.807261][ T38] ? io_wq_put_and_exit+0x160/0x650 [ 578.807292][ T38] ? io_wq_put_and_exit+0x160/0x650 [ 578.807310][ T38] io_wq_put_and_exit+0x316/0x650 [ 578.807337][ T38] io_uring_clean_tctx+0x11f/0x1a0 [ 578.807360][ T38] ? __pfx_io_uring_clean_tctx+0x10/0x10 [ 578.807383][ T38] ? io_uring_drop_tctx_refs+0x131/0x1c0 [ 578.807404][ T38] io_uring_cancel_generic+0x6ca/0x7d0 [ 578.807434][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 578.807453][ T38] ? __pfx_io_uring_cancel_generic+0x10/0x10 [ 578.807476][ T38] ? __pfx_autoremove_wake_function+0x10/0x10 [ 578.807499][ T38] ? rt_spin_unlock+0x150/0x200 [ 578.807522][ T38] ? io_uring_unreg_ringfd+0x52f/0x540 [ 578.807548][ T38] do_exit+0x345/0x2300 [ 578.807585][ T38] ? __pfx_do_exit+0x10/0x10 [ 578.807606][ T38] ? rt_mutex_slowunlock+0x614/0x8a0 [ 578.807624][ T38] ? rt_spin_lock+0x1c1/0x3e0 [ 578.807657][ T38] do_group_exit+0x21c/0x2d0 [ 578.807674][ T38] ? rt_spin_unlock+0x161/0x200 [ 578.807695][ T38] get_signal+0x125d/0x1310 [ 578.807739][ T38] arch_do_signal_or_restart+0xa0/0x790 [ 578.807763][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 578.807783][ T38] ? __se_sys_futex+0x36f/0x400 [ 578.807818][ T38] ? exit_to_user_mode_loop+0x40/0x130 [ 578.807844][ T38] exit_to_user_mode_loop+0x72/0x130 [ 578.807868][ T38] do_syscall_64+0x2bd/0xfa0 [ 578.807978][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 578.807999][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.808018][ T38] ? clear_bhb_loop+0x60/0xb0 [ 578.808038][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.808055][ T38] RIP: 0033:0x7fda8a87efc9 [ 578.808071][ T38] RSP: 002b:00007fda88ade0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 578.808092][ T38] RAX: fffffffffffffe00 RBX: 00007fda8aad5fa8 RCX: 00007fda8a87efc9 [ 578.808106][ T38] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fda8aad5fa8 [ 578.808118][ T38] RBP: 00007fda8aad5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 578.808130][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 578.808141][ T38] R13: 00007fda8aad6038 R14: 00007fff87cc5aa0 R15: 00007fff87cc5b88 [ 578.808174][ T38] [ 578.808202][ T38] [ 578.808202][ T38] Showing all locks held in the system: [ 578.808217][ T38] 1 lock held by khungtaskd/38: [ 578.808228][ T38] #0: ffffffff8d5aa4c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 578.808295][ T38] 2 locks held by kworker/0:4/1826: [ 578.808323][ T38] 2 locks held by getty/5559: [ 578.808332][ T38] #0: ffff88823bf360a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70