last executing test programs: 5m49.652068131s ago: executing program 4 (id=125): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x9}, 0x94) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) write$qrtrtun(r4, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r7}, 0x10) (async) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r8) sendmsg$NLBL_MGMT_C_ADD(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x114, r9, 0xe701ac47a3d23ecd, 0x0, 0x2, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x00\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x114}}, 0x8800) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1d, 0x13, &(0x7f0000000040)=@raw=[@tail_call, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @alu={0x4, 0x0, 0xb, 0xb, 0x8, 0x20, 0x10}], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1b, r3, 0x8, &(0x7f0000000180)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0xa, 0x4}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44010}, 0x0) 5m49.517606262s ago: executing program 4 (id=126): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x82, &(0x7f0000000400)={0x0, 0x4}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x100000000}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0], 0x2, 0x9}) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x58, r4, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfeffffff}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}, 0x58}}, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f00000000c0)={0x0, 0x1, [0x8, 0x65872b7b, 0x0, 0xe2fb, 0xc48, 0x7]}) 5m49.320904589s ago: executing program 4 (id=127): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) syz_usb_connect(0x6, 0x2c9, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000480)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x9, 0x2, 0xf4, 0x20, 0x93}, 0x27, &(0x7f00000001c0)=ANY=[@ANYBLOB="050f27000122100470d28dc80cd6131eb38c0c2a95dfe341d8b4efbdbc211460a0c2c3"], 0x4, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x459}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x413}}, {0x27, &(0x7f0000000380)=@string={0x27, 0x3, "418ee8065cf732cccc0c7c788c0a280d098cc2e9d46956fd90faeba9c1b87a048615a2a29d"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x813}}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x84040, 0x0) prlimit64(r2, 0x7, 0x0, 0x0) socket(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) r6 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) write$P9_RSTATu(r6, 0x0, 0x5a) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='vfat\x00', 0xa08410, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) r8 = pidfd_getfd(r6, r4, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r8) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000100)={0x6, 0x73, 0x2, 0xc9f, 0x59, "88bd91aa90758062b5fffd9272e301aa98af75"}) write$UHID_INPUT(r7, &(0x7f0000001980)={0x9, {"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", 0x745}}, 0x1006) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x1f) setns(r1, 0x24020000) syz_clone(0x120e1100, 0x0, 0x0, 0x0, 0x0, 0x0) 5m43.923899885s ago: executing program 4 (id=137): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x75}, 0x94) (async) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x80222, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setaffinity(0x0, 0x6, &(0x7f00000002c0)=0x7) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x1392, 0x18442) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, 0x0) (async) r3 = fcntl$getown(r1, 0x9) ptrace$PTRACE_SETSIGMASK(0x420b, r3, 0x8, &(0x7f00000000c0)={[0x9]}) prlimit64(0x0, 0x9, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) stat(0x0, &(0x7f00000003c0)) (async) getpid() (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000240)={@rand_addr=' \x01\x00', 0x6, 0x0, 0x0, 0xa, 0x1, 0x8009}, 0x20) (async) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101040, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl(0xffffffffffffffff, 0x8b32, &(0x7f0000000040)) (async) setns(0xffffffffffffffff, 0x24020000) socket(0x23, 0x6, 0x401) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCGPKT(r4, 0x80045438, &(0x7f00000011c0)) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private1, 0x0, 0x2, 0x2, 0x8, 0x80}, 0x0) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) 5m42.683897924s ago: executing program 4 (id=141): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x2c}}, 0x50) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) dup(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x8}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000004c0)={&(0x7f000000c000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000/0x9000)=nil, &(0x7f0000013000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000011000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f000000a000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f000000b000/0x4000)=nil, &(0x7f00000003c0)="e63fe9234a9efbef39dd58699354aacba7601ff155a2a05eabc4d92c112058858844035c417046918e8e8f7ace77ce737766f6c6b15a97cd19bd416df2fcf03f4e1ef27f7884420157d3e08c242a7c19cd18d12c38f4dfc06469427ab6bab478e2aeb823bc3deb4cec8f0614ba95b1ceb106a13270c35b9d6d2b8824ed024085103953d9d1fcf6c82227e364a575c2b40326b9e6a38d59a12e99aed48a92209e69616d87388b2257e6ee86ef184f388b8e3738dbf9df2fbbaf2e3e83ce79af3943c784e7e6b20f80068a6d7f239e08384e92e0a4b337cd497bea755c33ad51f55e529638", 0xe4, r4}, 0x68) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x1, 0x4}, 0x4) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) setsockopt$inet_tcp_int(r6, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x100000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140), 0x202, 0x0) r8 = dup(r7) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000540)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0x8b}, 0x1c) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x20, 0xd, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x20001010) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x4e22, @empty}}, 0x0, 0x0, 0x10, 0x0, "12fe8478a8860c6689d054e27b260ab269070baeac7649a6982f1f1fd991cf21257e5cd4059853c7af30dcfa0aef6297c6fcdfd29de6b73c2dac29053d81c40a1094c2dc0d21126c0e1d7bc3bd4b26db"}, 0xd8) 5m42.252798623s ago: executing program 4 (id=146): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000340)={[0x3ffffd, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x213f85fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x5, 0x7, 0x100000000], 0x3000, 0x280384}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknod(&(0x7f0000000040)='./file0\x00', 0x2a8, 0x8001) mount(&(0x7f0000000580)=@nullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='squashfs\x00', 0x0, 0x0) 5m26.558519243s ago: executing program 32 (id=146): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000340)={[0x3ffffd, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x213f85fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x5, 0x7, 0x100000000], 0x3000, 0x280384}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknod(&(0x7f0000000040)='./file0\x00', 0x2a8, 0x8001) mount(&(0x7f0000000580)=@nullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='squashfs\x00', 0x0, 0x0) 16.115896379s ago: executing program 0 (id=1344): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4004) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c830}, 0x0) io_setup(0x5, &(0x7f0000000040)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @broadcast}, 0xc) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty=0xe0, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) mkdir(&(0x7f0000000100)='./control\x00', 0xa0) mount$afs(&(0x7f0000000500)=ANY=[@ANYBLOB="1391b9a4713a5a38ea88108826c9df9bf50d89ec09f0088a8c46a4063235175f0064dd9ceca80a8f5c21a0d9fa0119168508d038e30f6cb18c715ca154dc2caf295abeffffffffffff549ce01ed2e1491c309260"], &(0x7f00000000c0)='./control\x00', &(0x7f0000000000), 0x200000, 0x0) setregid(0xffffffffffffffff, r3) socket$inet(0x2, 0x2, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000780)=@base={0xa, 0x16, 0x800, 0x7f}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000600)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}, @generic={0x61, 0x0, 0x0, 0xa00}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222}, 0x94) close(r5) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r7, 0x4b72, &(0x7f0000000000)={0x0, 0xffffff7e, 0x2, 0x1c, 0x200, &(0x7f0000000040)="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"}) 13.947219769s ago: executing program 0 (id=1350): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x109000, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x4c, r1, 0x8, 0x70bd26, 0x9, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x60814) personality(0x4100001) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000280), 0x0, 0x80200) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x5, 0x4a, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", "0400", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc56849f6236eb1c3c"]}) r3 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x40b80) ioctl$CEC_TRANSMIT(r3, 0xc0386105, &(0x7f0000000d40)={0x2, 0x3, 0x3, 0xfffffffc, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059", 0x0, 0x0, 0x0, 0xfd, 0x5, 0x1}) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000340)={"8171f879", 0x7, 0xb0, 0x0, 0x9, 0x5, "00800000000000f51000", "00598b00", "0200", "01000800", ["dc001000", "0000000000ffe700005a00", "4a218302000000215c384d00", "790000a5a16706008c00edbf"]}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000002100), 0xa00882, &(0x7f0000000300)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004300)={0x50, 0x0, r5, {0x7, 0x29, 0x20, 0x16c0023, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffff}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000006380)="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", 0x2000, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)={0x90, 0x0, 0x9, {0x1, 0x20000000000000, 0x9, 0xf65, 0xfff, 0xe, {0x2, 0x5, 0xfffffffffffffff9, 0x2000000000004cc1, 0x80, 0x7fff, 0xfffffff5, 0x6bd, 0x3, 0x6000, 0x801, r6, 0x0, 0xc, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000280), 0x0, 0x44000010) 10.014287922s ago: executing program 0 (id=1362): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r1 = socket$packet(0x11, 0x2, 0x300) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socket$can_raw(0x1d, 0x3, 0x1) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x2a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r2, @ANYRES64=r1], 0x0) close(0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) (async) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) socket$packet(0x11, 0x2, 0x300) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) creat(&(0x7f0000000080)='./file0\x00', 0x2a) (async) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r2, @ANYRES64=r1], 0x0) (async) close(0x3) (async) 9.110234435s ago: executing program 5 (id=1365): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x1, 0x8010000000000084) r4 = syz_open_dev$vim2m(&(0x7f0000000300), 0x41ffffffffffc, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000500)={0x1, @pix_mp={0x8, 0x401, 0x56595559, 0x9, 0x7, [{0x7306, 0x1000}, {0x2, 0x3}, {0x8, 0x39}, {0x1, 0xfffffff8}, {0x15, 0x3}, {0xa, 0x5}, {0x5c, 0xa100000}, {0x40009, 0x1}], 0x9, 0x5, 0x3, 0x2}}) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r6, 0x0, 0x82, &(0x7f0000000140)={'broute\x00', 0x0, 0x0, 0x0, [0x7, 0x90, 0x0, 0xf, 0x200000000c00003, 0x7]}, 0x0) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000001070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c61737400"], 0x140}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, 0x0, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x600, &(0x7f0000000840)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 8.162354863s ago: executing program 5 (id=1366): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xe0) syz_io_uring_setup(0x1fdb, &(0x7f0000000040)={0x0, 0x6, 0x80, 0x3, 0x5b}, &(0x7f00000000c0), &(0x7f0000000100)) 7.518101297s ago: executing program 5 (id=1369): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1c, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000001c0)='sched_switch\x00', r7, 0x0, 0x6}, 0x18) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x14) r8 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r12, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115}) io_uring_enter(r8, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) shutdown(r11, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180)=0x7) 7.458319598s ago: executing program 3 (id=1370): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x0, 0x0) (async) r1 = open(&(0x7f0000000640)='./file1\x00', 0x48080, 0x0) linkat(r0, &(0x7f0000000100)='./file1\x00', r1, &(0x7f00000001c0)='./file0\x00', 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x2710, 0x2, 0x6000, 0x1000, &(0x7f0000002000/0x1000)=nil}) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095c6e54c89f62b6f62bea670b2e41cb5a364556ac8f22aea91a74cc14f06261b2809989da9995c4afa63f12ffc9f849e502d79f36cd54724eef5eb7a302e498e21acfeb07dbb2301ddaddf005f8aa4ed94e5e08110062f52508cc17f8dce548ce848909b3f64e7829e7bc69a5b546f49e4dcae735dd18d662243d4c6950e9a59952210679ef4b73f85078124c57c95"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (rerun: 64) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, r8, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f00000001c0)=0x7ffe, 0x4) (async) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)="5f7327a543a8f33e22", 0x9}, 0x1, 0x0, 0x0, 0x2400c000}, 0x8051) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4048001) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x850) r9 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) 6.477101921s ago: executing program 5 (id=1372): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x25, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @generic={0xc, 0x4, 0x7, 0x5, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x56}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0xb8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0xffffffff, 0x6c, &(0x7f0000000080)=""/108, 0x41000, 0x46, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x5, 0x8, 0x2, 0x7}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r0, r0], &(0x7f0000000380)=[{0x4, 0x3, 0xf, 0x7}, {0x3, 0x2, 0x10, 0x6}, {0x2, 0x1, 0x5, 0x2}, {0x2, 0x5, 0xa, 0x6}, {0x1, 0x1, 0x6, 0x5}, {0x0, 0x5, 0xf, 0xc}, {0x2, 0x5, 0xd, 0x9}, {0x1, 0x2, 0x2, 0x7}, {0x4, 0x5, 0x3, 0x2}], 0x10, 0xffffff0d}, 0x94) (async) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={@fallback, r1, 0x23, 0x200c, 0x0, @value=r2}, 0x20) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_FUNCS(r3, 0x705, &(0x7f0000000100)=0x9) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit, @map_fd={0x18, 0x7, 0x1, 0x0, r0}]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) 6.449376483s ago: executing program 0 (id=1374): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101, 0x800}}, 0x20}}, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="250000000207010200000000000000000a0000060c00024000000000000000000900010073797a31000000000c"], 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x400801c) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x400000, 0x0) r2 = syz_io_uring_setup(0x24fa, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0], 0x5, 0xa, 0x6, 0x2}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r5, 0xc02064a5, &(0x7f00000004c0)={r6, 0x2, &(0x7f0000000400)=[0x8001, 0x0], &(0x7f0000000440)=[0x3, 0x6, 0x3d, 0x7, 0xd, 0x8], &(0x7f0000000480)=[0x6, 0x3, 0x7, 0x2, 0xfff0, 0x0]}) r7 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='net/softnet_stat\x00') lseek(r8, 0x8001, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r8, 0x10e, 0xa, &(0x7f0000000080)=0x7ff, 0x4) getdents(r7, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0x0, 0xf}, {}, {0x11, 0x10}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x80040000}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c014) ioctl$I2C_PEC(r7, 0x708, 0x7) 6.27020014s ago: executing program 2 (id=1376): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x1, 0x8010000000000084) r4 = syz_open_dev$vim2m(&(0x7f0000000300), 0x41ffffffffffc, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000500)={0x1, @pix_mp={0x8, 0x401, 0x56595559, 0x9, 0x7, [{0x7306, 0x1000}, {0x2, 0x3}, {0x8, 0x39}, {0x1, 0xfffffff8}, {0x15, 0x3}, {0xa, 0x5}, {0x5c, 0xa100000}, {0x40009, 0x1}], 0x9, 0x5, 0x3, 0x2}}) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r6, 0x0, 0x82, &(0x7f0000000140)={'broute\x00', 0x0, 0x0, 0x0, [0x7, 0x90, 0x0, 0xf, 0x200000000c00003, 0x7]}, 0x0) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000001070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c61737400"], 0x140}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, 0x0, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x600, &(0x7f0000000840)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 6.257339743s ago: executing program 1 (id=1377): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$netlink(0x10, 0x3, 0x10) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x600}}, {@max_read={'max_read', 0x3d, 0x3}}, {@blksize={'blksize', 0x3d, 0x1400}}]}}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3b) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000000)={0x4, 0x1, 0x6}) r3 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r3, &(0x7f0000000140)={'full'}, 0xfffffdef) 6.099981741s ago: executing program 0 (id=1378): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0xcc, 0x61, 0x20, 0x10c4, 0x818a, 0x7d8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x23, 0x0, 0x0, 0x3}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000040)={0x0, 0x10, 0x3, "92424a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2040, 0x1a0) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f00000000c0)=0x6) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x80000) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x5c, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0xd}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0xfffffffffffffde8}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}]]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) read$FUSE(r3, &(0x7f0000000680)={0x2020}, 0x2020) r7 = socket$caif_stream(0x25, 0x1, 0x0) recvfrom(r7, &(0x7f0000003880)=""/7, 0x7, 0x2103, &(0x7f00000038c0)=@ieee802154={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0x80) sendmsg$NL80211_CMD_RADAR_DETECT(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x844) recvmmsg(r3, &(0x7f0000003780)=[{{&(0x7f0000000180)=@rc={0x1f, @none}, 0x80, &(0x7f0000001440)=[{&(0x7f0000000200)=""/197, 0xc5}, {&(0x7f0000000300)=""/143, 0x8f}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/78, 0x4e}], 0x4, &(0x7f0000001480)=""/82, 0x52}, 0x7}, {{&(0x7f0000001500)=@l2, 0x80, &(0x7f0000001900)=[{&(0x7f0000001580)=""/116, 0x74}, {&(0x7f0000001600)=""/151, 0x97}, {&(0x7f00000016c0)=""/15, 0xf}, {&(0x7f0000001700)=""/205, 0xcd}, {&(0x7f0000001800)=""/31, 0x1f}, {&(0x7f0000001840)=""/79, 0x4f}, {&(0x7f00000018c0)}], 0x7}, 0x7fffffff}, {{&(0x7f0000001980)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000002000)=[{&(0x7f0000001a00)=""/232, 0xe8}, {&(0x7f0000001b00)=""/126, 0x7e}, {&(0x7f0000001b80)=""/69, 0x45}, {&(0x7f0000001c00)=""/211, 0xd3}, {&(0x7f0000001d00)=""/180, 0xb4}, {&(0x7f0000001dc0)=""/49, 0x31}, {&(0x7f0000001e00)=""/207, 0xcf}, {&(0x7f0000001f00)=""/220, 0xdc}], 0x8, &(0x7f0000002080)=""/205, 0xcd}, 0x2}, {{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000002180)=""/208, 0xd0}, {&(0x7f0000002280)=""/189, 0xbd}, {&(0x7f0000002340)}, {&(0x7f0000002380)=""/182, 0xb6}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/253, 0xfd}, {&(0x7f0000003540)=""/102, 0x66}, {&(0x7f00000035c0)=""/126, 0x7e}], 0x8, &(0x7f00000036c0)=""/137, 0x89}, 0x8}], 0x4, 0x1, 0x0) 5.274489708s ago: executing program 2 (id=1379): r0 = shmget$private(0x0, 0x4000, 0x10, &(0x7f0000000000/0x4000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x5}, {0x6}]}) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') preadv(r1, &(0x7f0000000440)=[{&(0x7f0000000100)=""/230, 0xe6}], 0x1, 0x5f0e, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000580), 0xa, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) dup3(0xffffffffffffffff, r3, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r5, 0x40049366, 0x0) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x28, r4, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 5.274012893s ago: executing program 3 (id=1380): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000002, 0x810, 0xffffffffffffffff, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x10, 0xffffffffffffffff, 0x10000000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x40, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0x0, 0x0, 0x4001) shmctl$SHM_LOCK(0x0, 0xb) getpgid(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) r6 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa, 0x44}, 0x50) close(0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsmount(r6, 0x0, 0x8) fchdir(r3) openat(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0x40800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x71}) writev(r0, &(0x7f0000001380)=[{&(0x7f00000000c0)="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", 0x347}], 0x1) semget(0x3, 0x4, 0x4) 4.14969889s ago: executing program 3 (id=1381): syz_open_dev$loop(&(0x7f0000000000), 0xffff, 0x19f041) (async) r0 = syz_open_dev$loop(&(0x7f0000000000), 0xffff, 0x19f041) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) ioctl$COMEDI_POLL(r3, 0x640f) ioctl$COMEDI_POLL(r3, 0x640f) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000080)={'8255\x00', [0xee, 0x7, 0x8001, 0xa, 0x0, 0x3, 0x9, 0xf, 0x1000, 0x7, 0x3, 0x5, 0x406, 0x100004, 0x10003, 0x7, 0xffffffa3, 0x3, 0x1, 0x65c, 0x85, 0x40010000, 0x800, 0x402e2d6, 0x9, 0xfffffffe, 0x2767, 0x3, 0x7, 0x1, 0x5]}) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x400140, 0x0) bind$802154_dgram(r4, &(0x7f0000000340)={0x24, @short={0x2, 0x1, 0xaaa3}}, 0xb) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) (async) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0x0, 0x2]}}) 4.067989432s ago: executing program 2 (id=1382): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x45) (async) close(0xffffffffffffffff) (async) listen(0xffffffffffffffff, 0x71e4) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/zoneinfo\x00', 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000c80), 0x6, 0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000380)={0x5, 0x100008f}, 0x0) (async) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$int_in(r2, 0x5452, 0x0) (async) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @broadcast}, 0x10) (async) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80a00, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) (async) ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f00000001c0)={'\x00', 0x766, 0x2, 0x7}) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x8, 0x800000002, 0xb}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0x400d, 0x0, 0x9, 0x466}, 0x0, 0x0) (async) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='omfs\x00', 0x200000, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8b32, &(0x7f0000000000)={'tunl0\x00', @remote}) (async) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x2402, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000900)={0x34, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0}) getpid() (async) r4 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) read(r4, 0x0, 0x0) 3.905201684s ago: executing program 2 (id=1383): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1f, 0xf, &(0x7f0000000200)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.714025671s ago: executing program 2 (id=1384): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa0101, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events.local\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@ifindex, r1, 0x3}, 0x12) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x400100, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r6, 0x851, 0x400000000000000) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xcc7c1, 0xe2) mount$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x2, &(0x7f0000000240)={[{'noacl'}]}) r7 = socket$inet(0x2, 0xa, 0x1) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e21, @rand_addr=0x640100fe}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x21}}, {0x2, 0x4e22, @local}, 0x114, 0x0, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0xffff}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c, 0x0}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) 3.596065943s ago: executing program 1 (id=1385): r0 = memfd_create(0x0, 0x5) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0x78) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x74) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xffdffffffffffff9, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r7, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x7e) close_range(r4, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x15, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70000b703000000000000850000001000000095", @ANYRESOCT=r6, @ANYRES64=r3, @ANYRES32=r1, @ANYRESDEC=r7], &(0x7f0000000240)='GPL\x00', 0x85, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x1000000, 0x3}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 3.59261842s ago: executing program 5 (id=1386): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000280)=0x2, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000080000085000000d0000000a50000009700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = dup2(r1, r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) getegid() r3 = syz_usb_connect(0x0, 0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000092e59e208c106901b9750102030109022b0001000010000904db00020dfa000309058000000000fc000705db224370bf09050b02ff03000000ef770bac57a897f52d438b6f2d4f9f291e20236270914337b1a67f4baf700cfc2808853085aabaf801f4c17209764b2f3a64347fdee054777355ec5e298f5c4b1614a61940a433f2253a8baca27809"], 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000001040)={0x14, 0x0, &(0x7f0000000d00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 2.644086201s ago: executing program 2 (id=1387): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0xcd7, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0xff, 0xd2, 0xb0, 0x40, 0x5ac, 0x224, 0xac8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcc5, 0x4, 0x2, 0x81, 0x80, 0x3, [{{0x9, 0x4, 0x3d, 0x0, 0xe, 0x3, 0x88, 0x2, 0x5, [@uac_as={[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x80, 0x1, 0x9, 0x3}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x7f, 0x0, 0xff, "b581"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x1, 0x4, 0x0, 0x4}]}], [{{0x9, 0x5, 0xf, 0x10, 0x3ff, 0xf, 0x40, 0x5}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0xff, 0x1, 0x81, [@generic={0x17, 0x6, "cff880555455558f724448ff222abf439fffa8b754"}, @generic={0xb9, 0x30, "13d27a3cc025b6d072b2bd26c9212aee8ec08d35598d44a5d70d365f03c4926351f744b0a6f303ddccdb491346031cfded3d72cbf4612e09405d9e2b4e3efc104073e3d54baa9929c24f5ad7d18a5cab3060b368312f841394064dcc4f7ee61cb25d771a49483b0639c38f185afce9eceb57a89f9833a8fd933998f38b256b4820616be513d0319251403ac42795cf5455e5b73ddfa007ed80b1376eca1650078ba6f4a6c4ac6c2d579df394718bfec8adba0f1d31ceef"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x1, 0x5b, 0x8, [@generic={0x5a, 0x11, "8f6d1b9867bf3dfbd962adad3594336716d3a6bbaa66a225fdeb83a60e405212359b3e44b0015237d6b7257e4e23ab5e69a7221ae2c3c0c41116776b4330dbb9719943600b86cd026080d444346c9c0cb7c13ed9ff6637b4"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x1, 0x95, 0x2, [@generic={0x30, 0x21, "c7119d8108389d2d0db95b8d959ce4890e03fffac63893257eb7bf4f630b8d32a1759698b7085c0b524a4b6f9046"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x7f}]}}, {{0x9, 0x5, 0x8, 0x4, 0x200, 0xa, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xd, 0x8}, @generic={0x52, 0x0, "94c70daa8d1ca0fda90f82c5ed3914adc514753296955259037898d54d259f17122f0fbf7dbd2571f389599265e48f40662c66582d1ba5cb1eeac2f43d25ad8f138d9c84c050a48dedf5f5ca8c9a5cc8"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x5, 0xa, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x7ff}]}}, {{0x9, 0x5, 0x5, 0x4, 0x400, 0xfc, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x9}, @generic={0xea, 0xb, "f1c06d07c38c2a8a8b692e5db25341d8697cb4bb99b5b4f5997e1d3fad9e9a865a5a2c51cffd707b726cd2cb7f57a99894f540ad7b48d7ba87fb2ac45c1a2610c00643b0a045ac6a612d76c33d005208860da4aa4c4797f979605644986f6658c2a387533215d53d01698f2352f6808a54e7893b0a01ebea3811415738dd3ba5504e80f9250f8448cc669a4d06fe923b2d33fb9df256f6c95fda3c1b91e33c4adfd4d449b9c585448da4017f1e6ecf464a090eb018ad0d9535d0c0d5559b809c17d472de7e41515906b47937db8670c097f8c72cd0587e61323fff331cb8ac621f1f5c799daae23a"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x481e9ca3b63cd418, 0x7, 0x9, 0x61}}, {{0x9, 0x5, 0xd, 0x1, 0x200, 0x5, 0x40, 0xfd, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x3}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3af, 0x3d, 0x8, 0xd, [@generic={0x8b, 0x9, "498d85a9fba33d6154a3a34bc4acc5d4de6c2259c63487b46d145e3a813d4da3283b1bf330d87568952733abcb3ed769b496f41cb170e089dd133ba4465b5e99d4c10fc87d8358490079ae800a3f0284566c47dea6e17ed7d56582ed9c26c66d57827c0b5e7f4046ad006799ad6896227b3b98af46e3315b3b67c34c8f0e0c9cc015b026c35f2059ec"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xc, 0x5}]}}, {{0x9, 0x5, 0x2, 0x8, 0x50, 0x0, 0x6}}, {{0x9, 0x5, 0x3, 0x4, 0x200, 0x8, 0xf, 0x5, [@generic={0xfd, 0x6, "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"}]}}, {{0x9, 0x5, 0x7, 0x16, 0x3ff, 0xff, 0x7, 0x5}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0x2, 0x2, 0x26}}]}}, {{0x9, 0x4, 0x36, 0xf8, 0x2, 0x45, 0x98, 0x3f, 0xfa, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, 'D'}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x800, 0x1, 0x3}, {0x6, 0x24, 0x1a, 0xff, 0x28}, [@dmm={0x7, 0x24, 0x14, 0xfff, 0x9}, @mdlm={0x15, 0x24, 0x12, 0xff}, @mbim_extended={0x8, 0x24, 0x1c, 0x196f, 0x2, 0x6}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0x7f, 0x4d, 0x8}]}, @uac_as={[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x4, 0x40, 0x2f, "cf"}]}], [{{0x9, 0x5, 0x5, 0x0, 0x20, 0x5, 0x0, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x90, 0x2}]}}, {{0x9, 0x5, 0x0, 0xc, 0x40, 0x1, 0x3, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x43, 0xa, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xb3, 0x7b}]}}]}}, {{0x9, 0x4, 0xfc, 0x7, 0xd, 0x3, 0x9b, 0x11, 0x40, [], [{{0x9, 0x5, 0x4, 0x10, 0x200, 0x84, 0x50, 0x28, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x80, 0x6}]}}, {{0x9, 0x5, 0x0, 0x2, 0x40, 0x6, 0xc, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0xfff9}]}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x6, 0x8, 0x5, [@generic={0x9a, 0x1, "dde72d62e8e35836b45914def524b4178186898463deee5d39449072c758e186756b753121ee392c559331e8e613506c676693fff69a73d1d32aba6a99333252250f64756bf5369a7709cef6fc52529ab2c3d42d0321b89a6d0d70bab780545c1bf148e0f24a5982ce2cc1b8854f60ec2279959843a18ca03ed5d3df01d3021595d23b342647e4c823d1fb83516b456d1fadea21665ecf24"}, @generic={0x31, 0xf, "fe7a9a6d86860818a77ee5933efe7a4d3d7751360a6156db24b50290d44c561bde715b5e10919bcba9daf10fb5a267"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x0, 0x8, 0x9}}, {{0x9, 0x5, 0xe, 0x3, 0x8, 0x7, 0x4, 0xc, [@generic={0xbc, 0x10, "47a3cfa0ab3239a4095e932629c505c7247a2993f8a658544b25a9299a1bd1aeada2a0c74161c1602fce8033d5d3646feb2d8424e3ae68af59b9b7c99d7b2c36251aa5d8c8c56ab879a17b40e9dbfab5d8a36654cfd919c92d1ca2253c9dc6bf2e8504ede151e6e024bd6d96e0337e345b946aa7bb8e2fca111ba84e185acb5baf904bc237570b191be8f91847207b1b535dad6233fb79f5de20e82a688ecfe91af13ab062bb1d578aa74dddbefee775ed6f5f17a6f09e9b4faa"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x2, 0x2, 0x5}}, {{0x9, 0x5, 0x80, 0x4, 0x3ff, 0xdb, 0x0, 0x2}}, {{0x9, 0x5, 0x4, 0xc, 0x40, 0x4, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x35}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x4800}]}}, {{0x9, 0x5, 0x3, 0x0, 0x0, 0x10, 0xe, 0xc, [@generic={0x92, 0x1, "501301c8c9199184c7fbd13bbb85ca3ee3eed20882f4ff8e01b65b26adc2004fb65f03e63d1cce6eee0f703661ff9bae788ef69a22454f3d760d2cf842ae68b10c75799e768436d5d991d9ac3e343f27f0e92ea6ff51dc775dc72354b13711c37f6328dc2dbd78faae50220c52ce530782b24201dffb3db2422930b604bd1447babb1f36abf6cc23ab122033935e3ff5"}]}}, {{0x9, 0x5, 0x80, 0x3, 0x8, 0x8, 0x1, 0xff, [@generic={0x77, 0x22, "9f7af8359c9eb6604777af586d9b822ab7b16949a84beb7f171fb47d39975ec0202272120fa9b4cfe3707ae036b958234fa97c9f86e39ca2c03fcfb8aca4d67f9a598ff59993821c9336a8881d61b4f002875c12c1417b3cd12572a1a39a84e8d52c3805be08ebdf80a36adf83f5ac8b4e35b91919"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0xb7, 0x5, 0xc7, [@generic={0x2f, 0x31, "1fa356ad1caadfca40814d68db09465ad03f0288725b006dc21fff7b5fcb53f9bd97aa48584911d6a710841e86"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0x81, 0x4, 0xa4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0xb5ba}]}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x86, 0x15, 0x2, [@generic={0x6, 0x9, "1e512d48"}]}}]}}, {{0x9, 0x4, 0x4f, 0x9, 0xc, 0xc6, 0xcf, 0xf7, 0x7, [], [{{0x9, 0x5, 0x80, 0x0, 0x10, 0xc, 0xa4, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0xff69}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x30, 0x2}]}}, {{0x9, 0x5, 0x80, 0x4, 0x20, 0x80, 0xb, 0x4, [@generic={0xe0, 0x37, "46ac3e601b0958c07ee76526b800e51747e61e21f52603e6473d1720068c3d19eccf9a3b0e54310e36f0a254f5becd5c6ef74611569ed47ca129d2e55c124fbcd341d63ebdf95a1d62c355e8cf607f84745854a9478df6e069c580979dc08a82705153e9fe0b272c2245d9517d72317260dc3135b4296ee695adc4825a225aba138a45be0ff80db28c8a50a61a0a8b2e1aa2758ef8cb6f7b8c2403e2c3419365034b6d4905e118b81fceb35ece79c26cc1e3de2a9fc324f096ecdef715bacd38f6ae090e75a6b1b6d3ed1b46a0b0b2b4821f7a878d1ac2773ca4a0a598f0"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0xae, 0xac, 0x5, [@generic={0x64, 0xb, "f17d3d968a1ddca33ed8127a02e7ffa19f5fdb5b988d43c46198114bd946c4cd7aa7208bf649f12b98cbf26c602df888bb539b821f363f1ac44a018c6b26ddd7051384d2521f324e38320d2a387b900465bb0c66be767003a2fb9f011e373a11b13a"}, @generic={0xc1, 0x9, "ad9ba593a2a14b4065bd8c0034ea83320adf20022498679e91780af3a1ea5a3f84bfb5047fa24afc6001d47c7191b470e27fd295335500e510824315fce0fbd801bdb612cdb29ba4287a7c1fa60a3fb7a2df8e54586248c1009b3e416b3ebafe215e30fcd11b967d1bdffcb06b4e7cd30c1be7d2076d83e9ca44839eac3b7148ef20a6f4ad88474f0103e12d6f68373153a059874d728ddb9d6ae6d54ad134bfa05f25bcc21b7497960aac9cdfbc4e0eb88866fa884ab3505f38402f5165f7"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x40, 0xc0, 0xc7, 0x3b, [@generic={0xf3, 0x30, "1e814fc85b942204a4a0e5087ebbf0d6a2d991ed955b7b595da3e1c943617ef57ec5c23a83ee8b5ab0742c317e41b80f21e1659fe42f625400e5e9081a290dc9769d1a817dad43ce986c314fc100c9dd3ff0f775f5a6edad9207e671ed5608fc3bed0f0c435bbd99fc7ec900bd31573daf5da6e62336e988de86f1f16205e6564e949286cc8d861703af86de92f501bfadcc56faadcf7da39a314c155bf2637e77e35f6cd3b324b30d40803ecd1606d77395088fde36bb5e5061dbc89645a32972c4ee54f5f729a7e3a8bdd2f9483c6fe5b9f41c7d676958d580a6a11cd70838ba45fb01506e02bd8bda5e958018868e8a"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x1, 0x1, 0x97}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x2, 0x2, 0x1, [@generic={0x46, 0x21, "83d8470cd60dbda9e8a6395bb6bd4914869d7206a3a6d258a3e1890a386147da27d8a8164437f7e406b0dfeb66946b7e8a315d3282a721971539f1510d592c95a38ba185"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x20, 0x6, 0x2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0x6}]}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0xf8, 0x8, 0x3}}, {{0x9, 0x5, 0x1, 0x2, 0x8, 0x1, 0xb0, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x200}, @generic={0x3, 0x63, 'X'}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x6, 0x95, 0x6}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x6, 0x4, 0xa1}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0xd5, 0xe, 0xa0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xd}, @generic={0x2, 0x21}]}}]}}]}}]}}, &(0x7f00000000c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0xd3, 0x7, 0x2, 0x8, 0x80}, 0x10, &(0x7f0000000080)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0x20, 0x1, 0x0, 0x5, 0x39}]}, 0x3, [{0x64, &(0x7f0000000e40)=@string={0x64, 0x3, "f45febb54e27b7c59e02300a0d220deba5f4d6390ab5f44c90ea518e10ff6714fb7d47dfb28e30706024fbcd4931204f3982025c6c3a21c5290e8e4cce32d27a2e7ec315f85389b77d5fee5b73ffe3c3113e347c480a319efb5825b4162b55f5b29b"}}, {0xd6, &(0x7f0000000ec0)=@string={0xd6, 0x3, "6b419267c687b051ce71c27ad5c6c778fb8a19af24db3e70f4fb1e4917f29a43861b4c781805a3850e83c49c94723de97b4a694f27b25c362dda2ccf5cc99feae59cce52e779eae3f34cc297dd55b89fe2dc1da455228da64a5dc7d939906ee63b8743c2429f093aaf1dd1a4d2f1c7f0e7ce846f9765869de39f297b25349152370a233048ce08886f09ca1bbb8fa0d82f0db47e58a57131ce89e580b4b9cb858ae9a189990cf1d0ccaac4d13426ce9be1b4c1b10af3fc16f73260d496dd6abc074121dc19ceb29c6527d27051f2d7fd0b5887d1"}}, {0xe6, &(0x7f0000000fc0)=@string={0xe6, 0x3, "66e519f80b25d29b5bfef1e33d7b2571b81776f01eee73e84d5620fb0d6c41592166e97c9de27667e248e8e64e1520fbcafb45ee5e6065e417ad00cf519046aa5e0940610194c8dfa62e290ffd0e307fd256237f2342ae4ba0f619d5def1ac8b88bb11a575a13583162322e5fc8f8843912baef7622654cb32e704f647b24c733b451b972fd5ef0d2911a8e7ba20acd9a5dd900329c4ab208362dc8d52cea315ec5417b44bb7809ec3d349e977e3d86de6771ad303432163e109f5e0d10b9802f260826154ced7237cbff582f4b76eb0cc9b9d4684b11ad1682590b3e8557a36f2f2843b"}}]}) socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000300)=0xa, 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r4, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r5, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) getpeername$l2tp6(0xffffffffffffffff, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 2.332239869s ago: executing program 3 (id=1388): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1f, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000040000000000000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000eb7963b9850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x39}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) 2.329747094s ago: executing program 1 (id=1389): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x1, 0x8010000000000084) r4 = syz_open_dev$vim2m(&(0x7f0000000300), 0x41ffffffffffc, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000500)={0x1, @pix_mp={0x8, 0x401, 0x56595559, 0x9, 0x7, [{0x7306, 0x1000}, {0x2, 0x3}, {0x8, 0x39}, {0x1, 0xfffffff8}, {0x15, 0x3}, {0xa, 0x5}, {0x5c, 0xa100000}, {0x40009, 0x1}], 0x9, 0x5, 0x3, 0x2}}) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r6, 0x0, 0x82, &(0x7f0000000140)={'broute\x00', 0x0, 0x0, 0x0, [0x7, 0x90, 0x0, 0xf, 0x200000000c00003, 0x7]}, 0x0) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000001070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c61737400"], 0x140}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x600, &(0x7f0000000840)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 1.670440403s ago: executing program 0 (id=1390): syz_usb_connect(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba"], 0x0) 1.353717277s ago: executing program 1 (id=1391): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000002, 0x810, 0xffffffffffffffff, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x10, 0xffffffffffffffff, 0x10000000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x40, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0x0, 0x0, 0x4001) shmctl$SHM_LOCK(0x0, 0xb) getpgid(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) r6 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa, 0x44}, 0x50) close(0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsmount(r6, 0x0, 0x8) fchdir(r3) openat(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0x40800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x71}) writev(r0, &(0x7f0000001380)=[{&(0x7f00000000c0)="435b258e1839edfe2975469c3a3a03a0293a029558640d2cd173c7e6b57cc5afce941857a0801affb4febdfaabaf6797edd2fae2e0d2392d8db210df6f060bf4e360cd0cd1fe085c712874339ae78956197850827be9fba0b590f6ef9edeb11cd5f6d7e95a07169d1bfbaa27e374307885d4fa2adf077f28c25b430bf7939f92a27129cbb18e51b0a4346cd5d7aedfe230bf1a0f7053161eceac3dbb9d433765630266c9f590be6bbbde0e06f26582355f28dda65e88906d0ae8aca494a2ec3e23908cb8f4508b7923b0b766c7c9a75287bc9be34492f206a25bf6218de319e69344f4298485f9f6f0d2d39c4da47c1fc2f73a87f9f26894911999d9c8480d8954911fe8e7b8f239910d4f1e00cfe2f435cd3564d4ce99c488233102a87e9f0fd3477806a3893681d73b649bce29e256c3c318da4606cada6483b6da955810af9c3d9263fb3d7b585f27903b726e84e3eb80138fa0086fd6beb2b020c9c610dd1a3fbcf3c23f445f332be82f909162e1bc0688082cfbd2a6f100f0b7927ce0192daa2cafe316db35c2e421ef7d7cc17bd1251bc009ff50a32329d1a127dcfdd4660379e914b68a202192e1898f3c876a7ced54b501a397c9db389c82c121107bd7ff05b9a14151b012c94aff970efaf9bdef9ea3813ef1cfdd6a1f466ae8cbe812c7be83c9a0a8aa40ba8b6df6aa567d6e0ec700a2c4e995c956e161a786d80a98952e48566940e165665fcd5b21ac72ae6d3105ca8a781d49419fd279484ee458912bd2f0dd2be440a207a2fb244f898c6405bfb4f5bd24221f3e2fe1a157229570db534e8644757e19054338b6a1df9873c708f42c15b095e893e23b1f43c73e110e2cc98e06984b044feb5bcc663a171cd41558d06b15d2fa119eac55403176d55d298846fa87a4aefb9c66fa13ceec288c0c811c4468e7d2c391f68870a5dc9f32edbe125cc2cc975d6b88b132164cb686f4d210563fb01782806840585c6054d6aebc1741b2c4855f80f7f299954fd22ae4c0216a140c56d4429336a09d6be7ba4f31d2ee95044a40f6f549cbfca82cd62ed7e0bf76577e7629b02d10b97fd5d7bd916130a573d85cd3c62abc3732763c8dd1e6d64bc9110af370485fcf023b26255556049bce01a7679b209ad5a0f3746f64e3e4ce3f37c49485140ae3ce808d8a44adeb", 0x347}], 0x1) semctl$SEM_STAT_ANY(0x0, 0x4, 0x14, &(0x7f0000000440)=""/239) 615.491609ms ago: executing program 1 (id=1392): socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0xb0, r2, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x0, 0x77}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x224}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfdb}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x3}]}, 0xb0}, 0x1, 0x0, 0x0, 0x7b1e31ffed6a1588}, 0x20000000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) syz_genetlink_get_family_id$nfc(&(0x7f0000000800), r4) syz_open_dev$evdev(0x0, 0x2, 0x8a2b81) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) socket$igmp(0x2, 0x3, 0x2) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) accept4$bt_l2cap(r5, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x800) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44095}, 0x4) 368.161041ms ago: executing program 1 (id=1393): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) r5 = eventfd2(0x5, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000001c0)={0x2, r5}) r6 = syz_io_uring_setup(0x4bf9, &(0x7f0000000280)={0x0, 0x10000000, 0x10100, 0x0, 0x200004}, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r6, 0x2d3e, 0x0, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) open(&(0x7f0000000040)='./file0\x00', 0x103040, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES16=r4, @ANYRES16], 0x40}, 0x1, 0x0, 0x0, 0x81}, 0x0) 235.988121ms ago: executing program 3 (id=1394): mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) socket(0x22, 0x2, 0x4) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00') 163.667095ms ago: executing program 3 (id=1395): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x246, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x80, 0xdb, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x2, 0x8, {0x9, 0x21, 0x200, 0x3, 0x1, {0x22, 0xedd}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7, 0x7, 0x5}}}}}]}}]}}, 0x0) syz_emit_ethernet(0xea, &(0x7f0000000340)={@multicast, @multicast, @void, {@ipv4={0x800, @igmp={{0x10, 0x4, 0x0, 0x39, 0xdc, 0x64, 0x0, 0x6, 0x2, 0x0, @multicast1, @remote, {[@timestamp={0x44, 0xc, 0x63, 0x0, 0x6, [0xc, 0x2]}, @lsrr={0x83, 0x1f, 0x29, [@dev={0xac, 0x14, 0x14, 0x23}, @local, @remote, @dev={0xac, 0x14, 0x14, 0x2e}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}]}}, {0x14, 0x4f, 0x0, @private=0xa010101, "377169d67f88d6572fc948b2f840d49e6be7a49004cd9d9bef7fd6f020058287327cb3cea963b8cac12c2833a529f1f85c30c4d71c12df4fef3cdfdb4368d7191e462506896b4fbd89bf1442bea973655052b8b5cd389c983f19394807268a688c276e88d9d3cbdee76a9881cc74f482a4bc8c6bc56bb37623192dea15be3c692512e5deb2d05cf60e866c70fdc41c9770fced78"}}}}}, &(0x7f0000000440)={0x1, 0x2, [0x327, 0x43e, 0x3fa, 0x177]}) syz_usb_connect$cdc_ecm(0x5, 0x97, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x1, 0x1, 0xfb, 0x80, 0x7, [{{0x9, 0x4, 0x0, 0x25, 0x3, 0x2, 0x6, 0x0, 0x9, {{0xb, 0x24, 0x6, 0x0, 0x0, "c18cb4775f84"}, {0x5, 0x24, 0x0, 0x7ff}, {0xd, 0x24, 0xf, 0x1, 0x3b, 0x3, 0x5, 0x3}, [@dmm={0x7, 0x24, 0x14, 0x8a2, 0x3}, @dmm={0x7, 0x24, 0x14, 0x7, 0x80}, @country_functional={0xa, 0x24, 0x7, 0xf7, 0x2, [0x9, 0x1000]}, @ncm={0x6, 0x24, 0x1a, 0x6, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x6, 0xfff8}, @mdlm={0x15, 0x24, 0x12, 0x1}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x9, 0x6, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x8, 0x1, 0xfc}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x3, 0x4, 0x7}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x0, 0x80, 0x7, 0x86, 0x8, 0xd}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x2, [{0xef, &(0x7f0000000200)=@string={0xef, 0x3, "58cc6add70ed19053f7dc26662333a3c3f0273483ee35d69bbf7893b6e61489a463187a0caed55a990fd596ae5a74bf3d7dfab52ac5bd14b4c2d235193949efbc4b0951a7de0b960e4e315daa328f30182e71cc2315a9a12ab9f48b6ca9afc1bc6659b306f98e59b9adfcfba038372c849dc96bdf10a158eb053ab3be14b43300a0468a094529efec7c5aa35b633c4b8733b770dfb31ece6f0d5b02678af90c62ccda53cc993961abfd539b31b4777df7edb261e2a10e09d67e45024990209504e520ecb7ff06852c5d92149271a53961a832522ece63407d7b9c271221a9c91d50a2f73ae4cf36c7be5bb8861"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x443}}]}) 0s ago: executing program 5 (id=1396): mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xdddd1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r3, 0x5, 0x80000000, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1671}]]}, 0x30}}, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0xdddd0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r8 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ftruncate(r9, 0x5) sendfile(r8, r9, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): ID v0.00 Device [syz1] on syz0 [ 302.315040][ T5172] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 302.675014][ T5172] usb 2-1: Using ep0 maxpacket: 32 [ 302.689002][ T5172] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 302.708591][ T5172] usb 2-1: config 0 has no interface number 0 [ 302.725140][ T5172] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 302.753211][ T5172] usb 2-1: config 0 interface 85 has no altsetting 0 [ 302.769108][ T5172] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 302.787923][ T5172] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.807756][ T5172] usb 2-1: Product: syz [ 302.812205][ T5172] usb 2-1: Manufacturer: syz [ 302.823409][ T5172] usb 2-1: SerialNumber: syz [ 302.866301][ T5172] usb 2-1: config 0 descriptor?? [ 303.478347][ T9008] xt_SECMARK: invalid mode: 2 [ 307.002677][ T5172] appletouch 2-1:0.85: Failed to request geyser raw mode [ 307.061084][ T5172] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 307.385247][ T5172] usb 2-1: USB disconnect, device number 25 [ 307.397938][ T9015] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 307.552646][ T9016] PKCS8: Unsupported PKCS#8 version [ 308.295192][ T5922] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 308.365622][ T9034] netlink: 68 bytes leftover after parsing attributes in process `syz.0.765'. [ 308.408335][ T6003] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 308.695177][ T5922] usb 3-1: Using ep0 maxpacket: 16 [ 308.789364][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.810911][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.856542][ T5922] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 308.883745][ T6003] usb 4-1: Using ep0 maxpacket: 32 [ 308.915136][ T5922] usb 3-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00 [ 308.924510][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.947368][ T6003] usb 4-1: config index 0 descriptor too short (expected 50356, got 796) [ 308.959151][ T6003] usb 4-1: config 41 has too many interfaces: 195, using maximum allowed: 32 [ 308.976344][ T5922] usb 3-1: config 0 descriptor?? [ 308.994997][ T6003] usb 4-1: config 41 has an invalid descriptor of length 0, skipping remainder of the config [ 309.032719][ T6003] usb 4-1: config 41 has 0 interfaces, different from the descriptor's value: 195 [ 309.058719][ T6003] usb 4-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 309.074225][ T6003] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.101721][ T6003] usb 4-1: Product: syz [ 309.118624][ T6003] usb 4-1: Manufacturer: syz [ 309.128208][ T6003] usb 4-1: SerialNumber: syz [ 309.405079][ T6003] usb 4-1: USB disconnect, device number 34 [ 309.418378][ T5922] lg-g15 0003:046D:C227.000E: hidraw0: USB HID v0.00 Device [HID 046d:c227] on usb-dummy_hcd.2-1/input0 [ 309.624853][ T9018] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 309.647193][ T6003] usb 3-1: USB disconnect, device number 36 [ 310.301944][ T9056] FAULT_INJECTION: forcing a failure. [ 310.301944][ T9056] name failslab, interval 1, probability 0, space 0, times 0 [ 310.315953][ T9056] CPU: 0 UID: 0 PID: 9056 Comm: syz.2.771 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 310.315980][ T9056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 310.315996][ T9056] Call Trace: [ 310.316004][ T9056] [ 310.316013][ T9056] dump_stack_lvl+0x189/0x250 [ 310.316040][ T9056] ? __pfx____ratelimit+0x10/0x10 [ 310.316061][ T9056] ? __pfx_dump_stack_lvl+0x10/0x10 [ 310.316090][ T9056] ? __pfx__printk+0x10/0x10 [ 310.316116][ T9056] ? __pfx___might_resched+0x10/0x10 [ 310.316137][ T9056] ? fs_reclaim_acquire+0x7d/0x100 [ 310.316164][ T9056] should_fail_ex+0x414/0x560 [ 310.316191][ T9056] should_failslab+0xa8/0x100 [ 310.316213][ T9056] __kmalloc_noprof+0xcb/0x4f0 [ 310.316230][ T9056] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 310.316248][ T9056] ? sock_kmalloc+0xd6/0x160 [ 310.316271][ T9056] sock_kmalloc+0xd6/0x160 [ 310.316293][ T9056] hash_sendmsg+0x666/0x11d0 [ 310.316339][ T9056] ? __pfx_hash_sendmsg+0x10/0x10 [ 310.316360][ T9056] __sock_sendmsg+0x21c/0x270 [ 310.316386][ T9056] ____sys_sendmsg+0x52d/0x830 [ 310.316421][ T9056] ? __pfx_____sys_sendmsg+0x10/0x10 [ 310.316459][ T9056] ? import_iovec+0x74/0xa0 [ 310.316489][ T9056] ___sys_sendmsg+0x21f/0x2a0 [ 310.316520][ T9056] ? __pfx____sys_sendmsg+0x10/0x10 [ 310.316588][ T9056] ? __fget_files+0x2a/0x420 [ 310.316608][ T9056] ? __fget_files+0x3a0/0x420 [ 310.316641][ T9056] __sys_sendmmsg+0x227/0x430 [ 310.316676][ T9056] ? __pfx___sys_sendmmsg+0x10/0x10 [ 310.316702][ T9056] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 310.316754][ T9056] ? ksys_write+0x22a/0x250 [ 310.316775][ T9056] ? __pfx_ksys_write+0x10/0x10 [ 310.316790][ T9056] ? rcu_is_watching+0x15/0xb0 [ 310.316818][ T9056] __x64_sys_sendmmsg+0xa0/0xc0 [ 310.316846][ T9056] do_syscall_64+0xfa/0x3b0 [ 310.316869][ T9056] ? lockdep_hardirqs_on+0x9c/0x150 [ 310.316889][ T9056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.316907][ T9056] ? clear_bhb_loop+0x60/0xb0 [ 310.316931][ T9056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.316950][ T9056] RIP: 0033:0x7f2e79d8eb69 [ 310.316972][ T9056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.316990][ T9056] RSP: 002b:00007f2e7ab50038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 310.317011][ T9056] RAX: ffffffffffffffda RBX: 00007f2e79fb5fa0 RCX: 00007f2e79d8eb69 [ 310.317024][ T9056] RDX: 0000000000000001 RSI: 0000200000001a80 RDI: 0000000000000004 [ 310.317037][ T9056] RBP: 00007f2e7ab50090 R08: 0000000000000000 R09: 0000000000000000 [ 310.317049][ T9056] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000001 [ 310.317061][ T9056] R13: 0000000000000000 R14: 00007f2e79fb5fa0 R15: 00007ffdc6cbcb98 [ 310.317099][ T9056] [ 310.673379][ T9062] netlink: 24 bytes leftover after parsing attributes in process `syz.5.774'. [ 310.688185][ T9062] genirq: Flags mismatch irq 4. 00200000 (pcmmio) vs. 00200080 (ttyS0) [ 310.915152][ T5922] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 311.476167][ T7003] veth0_to_bond: left promiscuous mode [ 311.486704][ T5922] usb 3-1: unable to get BOS descriptor or descriptor too short [ 311.500211][ T5922] usb 3-1: not running at top speed; connect to a high speed hub [ 311.509651][ T5922] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 311.520754][ T5922] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 311.549220][ T5922] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 311.568461][ T5922] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8193, setting to 64 [ 311.594840][ T5922] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 311.621152][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.637496][ T5922] usb 3-1: Product: syz [ 311.650759][ T5922] usb 3-1: Manufacturer: syz [ 311.661120][ T5922] usb 3-1: SerialNumber: syz [ 311.934222][ T5922] usb 3-1: 0:2 : does not exist [ 311.990472][ T5922] usb 3-1: USB disconnect, device number 37 [ 312.233388][ T9097] FAULT_INJECTION: forcing a failure. [ 312.233388][ T9097] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 312.248589][ T9097] CPU: 1 UID: 0 PID: 9097 Comm: syz.3.783 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 312.248616][ T9097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 312.248629][ T9097] Call Trace: [ 312.248636][ T9097] [ 312.248644][ T9097] dump_stack_lvl+0x189/0x250 [ 312.248671][ T9097] ? __pfx____ratelimit+0x10/0x10 [ 312.248693][ T9097] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.248715][ T9097] ? __pfx__printk+0x10/0x10 [ 312.248753][ T9097] should_fail_ex+0x414/0x560 [ 312.248779][ T9097] _copy_to_user+0x31/0xb0 [ 312.248817][ T9097] simple_read_from_buffer+0xe1/0x170 [ 312.248844][ T9097] proc_fail_nth_read+0x1df/0x250 [ 312.248871][ T9097] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 312.248898][ T9097] ? rw_verify_area+0x258/0x650 [ 312.248926][ T9097] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 312.248952][ T9097] vfs_read+0x200/0x980 [ 312.248986][ T9097] ? __pfx___mutex_lock+0x10/0x10 [ 312.249008][ T9097] ? __pfx_vfs_read+0x10/0x10 [ 312.249044][ T9097] ? __fget_files+0x2a/0x420 [ 312.249071][ T9097] ? __fget_files+0x3a0/0x420 [ 312.249090][ T9097] ? __fget_files+0x2a/0x420 [ 312.249121][ T9097] ksys_read+0x145/0x250 [ 312.249142][ T9097] ? __pfx_ksys_read+0x10/0x10 [ 312.249157][ T9097] ? rcu_is_watching+0x15/0xb0 [ 312.249184][ T9097] ? do_syscall_64+0xbe/0x3b0 [ 312.249209][ T9097] do_syscall_64+0xfa/0x3b0 [ 312.249229][ T9097] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.249249][ T9097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.249267][ T9097] ? clear_bhb_loop+0x60/0xb0 [ 312.249291][ T9097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.249310][ T9097] RIP: 0033:0x7fafdc58d57c [ 312.249327][ T9097] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 312.249344][ T9097] RSP: 002b:00007fafdd443030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 312.249364][ T9097] RAX: ffffffffffffffda RBX: 00007fafdc7b5fa0 RCX: 00007fafdc58d57c [ 312.249379][ T9097] RDX: 000000000000000f RSI: 00007fafdd4430a0 RDI: 0000000000000005 [ 312.249391][ T9097] RBP: 00007fafdd443090 R08: 0000000000000000 R09: 0000000000000000 [ 312.249404][ T9097] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000001 [ 312.249416][ T9097] R13: 0000000000000000 R14: 00007fafdc7b5fa0 R15: 00007ffc5b262dc8 [ 312.249448][ T9097] [ 312.654492][ T9104] program syz.2.786 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 312.665912][ T9104] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 312.676649][ T9104] netlink: 20 bytes leftover after parsing attributes in process `syz.2.786'. [ 312.698589][ T9104] overlayfs: missing 'lowerdir' [ 312.838601][ T5922] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 312.858277][ T30] audit: type=1804 audit(312.819:114): pid=9108 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.0.787" name=2F6E6577726F6F742F32392F66696C65302FE91F7189591E9233614B dev="hugetlbfs" ino=22961 res=1 errno=0 [ 313.015054][ T5922] usb 6-1: Using ep0 maxpacket: 16 [ 313.026940][ T5922] usb 6-1: unable to get BOS descriptor or descriptor too short [ 313.043985][ T5922] usb 6-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.055729][ T6003] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 313.083250][ T5922] usb 6-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024 [ 313.106085][ T5922] usb 6-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 313.112212][ T9114] nfs: Unknown parameter '/dev/sequencer' [ 313.126577][ T5922] usb 6-1: config 1 interface 0 has no altsetting 0 [ 313.137794][ T5922] usb 6-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 313.147792][ T5922] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.156409][ T5922] usb 6-1: Product: syz [ 313.160960][ T5922] usb 6-1: Manufacturer: syz [ 313.181273][ T5922] usb 6-1: SerialNumber: syz [ 313.215721][ T9099] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 313.232907][ T30] audit: type=1804 audit(313.189:115): pid=9117 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.790" name="/newroot/167/file0" dev="tmpfs" ino=913 res=1 errno=0 [ 313.253667][ T6003] usb 3-1: Using ep0 maxpacket: 16 [ 313.260607][ T9117] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 313.277390][ T9117] ref_ctr increment failed for inode: 0x391 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88801a474600 [ 313.282647][ T6003] usb 3-1: config 0 interface 0 has no altsetting 0 [ 313.314455][ T6003] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 313.347212][ T6003] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.390409][ T6003] usb 3-1: config 0 descriptor?? [ 313.585794][ T9] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 315.363157][ T6003] usbhid 3-1:0.0: can't add hid device: -71 [ 315.370129][ T9] usb 4-1: device descriptor read/64, error -71 [ 315.383724][ T6003] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 315.417322][ T6003] usb 3-1: USB disconnect, device number 38 [ 315.426796][ T5922] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input20 [ 315.463078][ T5194] bcm5974 6-1:1.0: could not read from device [ 315.472348][ T5194] bcm5974 6-1:1.0: could not read from device [ 315.472604][ T5922] usb 6-1: USB disconnect, device number 17 [ 315.490297][ T5194] bcm5974 6-1:1.0: could not read from device [ 315.621577][ T9129] 9pnet_fd: Insufficient options for proto=fd [ 315.638689][ T9] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 315.650746][ T9129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.794'. [ 315.655201][ T24] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 315.805109][ T9] usb 4-1: device descriptor read/64, error -71 [ 315.825129][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 315.834880][ T24] usb 1-1: config index 0 descriptor too short (expected 3858, got 27) [ 315.845246][ T24] usb 1-1: config 140 has too many interfaces: 121, using maximum allowed: 32 [ 315.854566][ T24] usb 1-1: config 140 has an invalid interface descriptor of length 6, skipping [ 315.864327][ T24] usb 1-1: config 140 has an invalid descriptor of length 0, skipping remainder of the config [ 315.875128][ T24] usb 1-1: config 140 has 0 interfaces, different from the descriptor's value: 121 [ 315.892137][ T24] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 315.901770][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.914070][ T24] usb 1-1: Product: syz [ 315.919009][ T24] usb 1-1: Manufacturer: syz [ 315.924237][ T24] usb 1-1: SerialNumber: syz [ 315.945227][ T9] usb usb4-port1: attempt power cycle [ 316.162363][ T24] usb 1-1: USB disconnect, device number 22 [ 316.315331][ T5901] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 316.526138][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.526170][ T5901] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 316.526215][ T5901] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 316.526238][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.546051][ T5901] usb 3-1: config 0 descriptor?? [ 316.876376][ T30] audit: type=1326 audit(316.829:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9143 comm="syz.0.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9da98eb69 code=0x7ffc0000 [ 316.914547][ T30] audit: type=1326 audit(316.829:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9143 comm="syz.0.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9da98eb69 code=0x7ffc0000 [ 316.937984][ T30] audit: type=1326 audit(316.849:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9143 comm="syz.0.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa9da98eb69 code=0x7ffc0000 [ 316.960835][ T30] audit: type=1326 audit(316.849:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9143 comm="syz.0.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9da98eb69 code=0x7ffc0000 [ 317.006014][ T5901] kovaplus 0003:1E7D:2D50.000F: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.2-1/input0 [ 317.133793][ T30] audit: type=1326 audit(316.849:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9143 comm="syz.0.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9da98eb69 code=0x7ffc0000 [ 317.155996][ T30] audit: type=1326 audit(316.849:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9143 comm="syz.0.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa9da98d4d0 code=0x7ffc0000 [ 317.209700][ T30] audit: type=1326 audit(316.849:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9143 comm="syz.0.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9da98eb69 code=0x7ffc0000 [ 317.350788][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.358353][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.414000][ T30] audit: type=1326 audit(316.849:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9143 comm="syz.0.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7fa9da98eb69 code=0x7ffc0000 [ 317.415377][ T9131] netlink: 56 bytes leftover after parsing attributes in process `syz.2.795'. [ 317.645606][ T9] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 317.845948][ T9131] netlink: 12 bytes leftover after parsing attributes in process `syz.2.795'. [ 317.970602][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 317.970633][ T30] audit: type=1326 audit(317.929:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9143 comm="syz.0.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9da98eb69 code=0x7ffc0000 [ 318.068474][ T30] audit: type=1326 audit(317.929:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9143 comm="syz.0.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9da98eb69 code=0x7ffc0000 [ 318.117201][ T9] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 318.203006][ T9] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 318.221055][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.245106][ T9] usb 4-1: Product: syz [ 318.261658][ T9] usb 4-1: Manufacturer: syz [ 318.275026][ T9] usb 4-1: SerialNumber: syz [ 318.299488][ T9] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 319.068429][ T9] usb 4-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 319.102797][ T9163] loop2: detected capacity change from 0 to 7 [ 319.132932][ T9163] loop2: p4 [ 319.140845][ T9163] loop2: partition table partially beyond EOD, truncated [ 319.152774][ T24] usb 4-1: USB disconnect, device number 38 [ 319.161103][ T9163] loop2: p4 size 4294967295 extends beyond EOD, truncated [ 319.461534][ T5901] kovaplus 0003:1E7D:2D50.000F: couldn't init struct kovaplus_device [ 319.471504][ T5901] kovaplus 0003:1E7D:2D50.000F: couldn't install mouse [ 319.491633][ T5901] kovaplus 0003:1E7D:2D50.000F: probe with driver kovaplus failed with error -71 [ 319.512701][ T5901] usb 3-1: USB disconnect, device number 39 [ 319.545148][ T8278] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 319.574033][ T9180] 9pnet_fd: Insufficient options for proto=fd [ 319.609821][ T9182] netlink: 248 bytes leftover after parsing attributes in process `syz.2.810'. [ 319.621080][ T9182] netlink: 156 bytes leftover after parsing attributes in process `syz.2.810'. [ 319.654845][ T9180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.809'. [ 319.785238][ T8278] usb 6-1: Using ep0 maxpacket: 8 [ 319.992928][ T8278] usb 6-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 320.044849][ T8278] usb 6-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 320.077751][ T8278] usb 6-1: Product: syz [ 320.082069][ T8278] usb 6-1: Manufacturer: syz [ 320.102742][ T8278] usb 6-1: SerialNumber: syz [ 320.126629][ T8278] usb 6-1: config 0 descriptor?? [ 320.138135][ T8278] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 320.341627][ T8278] gspca_zc3xx: reg_w_i err -71 [ 320.346848][ T24] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 320.355055][ T8278] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 320.355126][ T5901] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 320.381197][ T8278] usb 6-1: USB disconnect, device number 18 [ 320.492551][ T9195] block device autoloading is deprecated and will be removed. [ 320.517542][ T5901] usb 4-1: device descriptor read/64, error -71 [ 320.533605][ T9198] netlink: 'syz.2.814': attribute type 1 has an invalid length. [ 320.535082][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 320.575407][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 320.605954][ T24] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 320.619834][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.622273][ T9198] 8021q: adding VLAN 0 to HW filter on device bond3 [ 320.659443][ T24] usb 1-1: Product: syz [ 320.663719][ T24] usb 1-1: Manufacturer: syz [ 320.673071][ T24] usb 1-1: SerialNumber: syz [ 320.703945][ T24] usb 1-1: config 0 descriptor?? [ 320.785059][ T5901] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 320.925081][ T5901] usb 4-1: device descriptor read/64, error -71 [ 321.037366][ T5901] usb usb4-port1: attempt power cycle [ 321.119164][ T24] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 321.168912][ T24] gs_usb 1-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 321.181618][ T24] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 321.226310][ T24] usb 1-1: USB disconnect, device number 23 [ 321.269236][ T9214] loop6: detected capacity change from 0 to 7 [ 321.280272][ T9214] Dev loop6: unable to read RDB block 7 [ 321.292907][ T9214] loop6: unable to read partition table [ 321.300441][ T9214] loop6: partition table beyond EOD, truncated [ 321.307706][ T9214] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 321.388081][ T9216] FAULT_INJECTION: forcing a failure. [ 321.388081][ T9216] name failslab, interval 1, probability 0, space 0, times 0 [ 321.415046][ T5901] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 321.423303][ T9216] CPU: 0 UID: 0 PID: 9216 Comm: syz.2.819 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 321.423330][ T9216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 321.423341][ T9216] Call Trace: [ 321.423349][ T9216] [ 321.423357][ T9216] dump_stack_lvl+0x189/0x250 [ 321.423392][ T9216] ? __pfx____ratelimit+0x10/0x10 [ 321.423413][ T9216] ? __pfx_dump_stack_lvl+0x10/0x10 [ 321.423435][ T9216] ? __pfx__printk+0x10/0x10 [ 321.423466][ T9216] ? __pfx___might_resched+0x10/0x10 [ 321.423486][ T9216] ? fs_reclaim_acquire+0x7d/0x100 [ 321.423514][ T9216] should_fail_ex+0x414/0x560 [ 321.423539][ T9216] should_failslab+0xa8/0x100 [ 321.423561][ T9216] __kmalloc_noprof+0xcb/0x4f0 [ 321.423575][ T9216] ? kfree+0x4d/0x440 [ 321.423597][ T9216] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 321.423623][ T9216] tomoyo_realpath_from_path+0xe3/0x5d0 [ 321.423647][ T9216] ? tomoyo_domain+0xda/0x130 [ 321.423673][ T9216] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 321.423691][ T9216] tomoyo_path_number_perm+0x1e8/0x5a0 [ 321.423711][ T9216] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 321.423744][ T9216] ? __lock_acquire+0xab9/0xd20 [ 321.423778][ T9216] ? __fget_files+0x2a/0x420 [ 321.423799][ T9216] ? __fget_files+0x2a/0x420 [ 321.423816][ T9216] ? __fget_files+0x3a0/0x420 [ 321.423833][ T9216] ? __fget_files+0x2a/0x420 [ 321.423855][ T9216] security_file_ioctl+0xcb/0x2d0 [ 321.423875][ T9216] __se_sys_ioctl+0x47/0x170 [ 321.423902][ T9216] do_syscall_64+0xfa/0x3b0 [ 321.423919][ T9216] ? lockdep_hardirqs_on+0x9c/0x150 [ 321.423936][ T9216] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.423953][ T9216] ? clear_bhb_loop+0x60/0xb0 [ 321.423973][ T9216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.423989][ T9216] RIP: 0033:0x7f2e79d8eb69 [ 321.424003][ T9216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.424018][ T9216] RSP: 002b:00007f2e7ab50038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 321.424036][ T9216] RAX: ffffffffffffffda RBX: 00007f2e79fb5fa0 RCX: 00007f2e79d8eb69 [ 321.424049][ T9216] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000004 [ 321.424060][ T9216] RBP: 00007f2e7ab50090 R08: 0000000000000000 R09: 0000000000000000 [ 321.424070][ T9216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.424080][ T9216] R13: 0000000000000000 R14: 00007f2e79fb5fa0 R15: 00007ffdc6cbcb98 [ 321.424107][ T9216] [ 321.424117][ T9216] ERROR: Out of memory at tomoyo_realpath_from_path. [ 321.712209][ T5901] usb 4-1: device descriptor read/8, error -71 [ 321.957261][ T5901] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 322.006498][ T9216] loop6: detected capacity change from 0 to 7 [ 322.061472][ T5901] usb 4-1: device descriptor read/8, error -71 [ 322.097218][ T9216] Dev loop6: unable to read RDB block 7 [ 322.127987][ T9216] loop6: unable to read partition table [ 322.166741][ T9216] loop6: partition table beyond EOD, truncated [ 322.225821][ T9216] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 322.248721][ T5901] usb usb4-port1: unable to enumerate USB device [ 322.306769][ T9229] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 322.313546][ T9229] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 322.320350][ T9229] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 322.327164][ T9229] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 322.334438][ T9229] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 322.341629][ T9229] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 322.348750][ T9229] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 322.355569][ T9229] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 322.362370][ T9229] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 322.369118][ T9229] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 322.378381][ T9223] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 322.514655][ T9232] vivid-001: disconnect [ 323.033275][ T9227] vivid-001: reconnect [ 323.206239][ T9237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.321309][ T9237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.442946][ T9246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.825'. [ 323.452269][ T9] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 323.833491][ T9] usb 3-1: device descriptor read/all, error -61 [ 323.957328][ T5901] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 324.085296][ T9] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 324.154195][ T9252] netlink: 18 bytes leftover after parsing attributes in process `syz.0.828'. [ 324.298325][ T5901] usb 2-1: Using ep0 maxpacket: 8 [ 324.312244][ T5901] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 324.325299][ T5901] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 324.341729][ T5901] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 324.419328][ T5901] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 324.459466][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.511154][ T5901] usb 2-1: Product: syz [ 324.518071][ T5901] usb 2-1: Manufacturer: syz [ 324.535055][ T5901] usb 2-1: SerialNumber: syz [ 324.599150][ T5901] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 324.624827][ T5901] cdc_ncm 2-1:1.0: bind() failure [ 324.644393][ T9263] loop2: detected capacity change from 0 to 7 [ 324.658240][ T9263] loop2: p4 [ 324.661802][ T9263] loop2: partition table partially beyond EOD, truncated [ 324.670820][ T9263] loop2: p4 size 4294967295 extends beyond EOD, truncated [ 324.804506][ T9267] 9pnet_fd: Insufficient options for proto=fd [ 324.815133][ T24] usb 2-1: USB disconnect, device number 26 [ 324.878538][ T9267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.831'. [ 325.431212][ T9279] trusted_key: encrypted_key: insufficient parameters specified [ 325.458271][ T9279] trusted_key: encrypted_key: master key parameter 'defau,t' is invalid [ 325.720645][ T9291] usb usb1: check_ctrlrecip: process 9291 (syz.0.837) requesting ep 01 but needs 81 [ 328.916589][ T9324] bridge0: entered promiscuous mode [ 328.921849][ T9324] bridge0: entered allmulticast mode [ 328.965402][ T6003] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 329.185522][ T6003] usb 6-1: Using ep0 maxpacket: 32 [ 329.224444][ T6003] usb 6-1: config 0 has an invalid interface number: 29 but max is 0 [ 329.267481][ T6003] usb 6-1: config 0 has no interface number 0 [ 329.282073][ T6003] usb 6-1: config 0 interface 29 has no altsetting 0 [ 329.319214][ T6003] usb 6-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 329.642684][ T9344] netlink: 'syz.3.854': attribute type 1 has an invalid length. [ 329.660438][ T9344] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.854'. [ 329.729539][ T6003] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.755006][ T6003] usb 6-1: Product: syz [ 329.799832][ T6003] usb 6-1: Manufacturer: syz [ 329.807207][ T6003] usb 6-1: SerialNumber: syz [ 329.816555][ T24] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 329.828763][ T6003] usb 6-1: config 0 descriptor?? [ 329.965219][ T24] usb 2-1: device descriptor read/64, error -71 [ 330.018121][ T9351] netlink: 20 bytes leftover after parsing attributes in process `syz.2.855'. [ 330.087019][ T6003] peak_usb 6-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 330.226104][ T24] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 330.296814][ T6003] peak_usb 6-1:0.29 can0: sending command failure: -8 [ 330.303903][ T6003] peak_usb 6-1:0.29 can0: sending command failure: -8 [ 330.358805][ T6003] peak_usb 6-1:0.29 can0: sending command failure: -8 [ 330.375337][ T24] usb 2-1: device descriptor read/64, error -71 [ 330.423185][ T6003] peak_usb 6-1:0.29: probe with driver peak_usb failed with error -8 [ 330.495849][ T24] usb usb2-port1: attempt power cycle [ 330.507845][ T6003] usb 6-1: USB disconnect, device number 19 [ 331.021902][ T24] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 331.104600][ T24] usb 2-1: device descriptor read/8, error -71 [ 331.304414][ T9379] 9pnet_fd: Insufficient options for proto=fd [ 331.365255][ T24] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 331.445890][ T24] usb 2-1: device descriptor read/8, error -71 [ 331.465664][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout [ 331.598210][ T24] usb usb2-port1: unable to enumerate USB device [ 331.637362][ T9379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.863'. [ 332.515129][ T6003] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 332.707176][ T6003] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 332.721021][ T6003] usb 3-1: config 0 has no interface number 0 [ 332.737409][ T6003] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 332.755880][ T6003] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.774755][ T6003] usb 3-1: Product: syz [ 332.793196][ T6003] usb 3-1: Manufacturer: syz [ 332.802313][ T6003] usb 3-1: SerialNumber: syz [ 332.862461][ T6003] usb 3-1: config 0 descriptor?? [ 333.438630][ T9400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.466245][ T9400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.539147][ T9414] netlink: 'syz.1.873': attribute type 2 has an invalid length. [ 333.700237][ T9418] Invalid logical block size (201) [ 333.861617][ T9424] gfs2: not a GFS2 filesystem [ 334.098435][ T6003] usb 3-1: Firmware version (0.0) predates our first public release. [ 334.230233][ T6003] usb 3-1: Please update to version 0.2 or newer [ 334.411684][ T6003] usb 3-1: USB disconnect, device number 42 [ 337.075412][ T9457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.886'. [ 337.425194][ T5922] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 338.192457][ T9482] 9pnet_fd: Insufficient options for proto=fd [ 338.214871][ T9481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.894'. [ 338.652236][ T9503] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 338.659263][ T9503] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 338.674502][ T9503] vhci_hcd vhci_hcd.0: Device attached [ 338.745204][ T9504] usbip_core: unknown command [ 338.754573][ T9504] vhci_hcd: unknown pdu 0 [ 338.763604][ T6003] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 338.775065][ T9504] usbip_core: unknown command [ 338.781704][ T3482] vhci_hcd: stop threads [ 338.787645][ T3482] vhci_hcd: release socket [ 338.792323][ T3482] vhci_hcd: disconnect device [ 338.856366][ T9] vhci_hcd: vhci_device speed not set [ 338.937071][ T6003] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 338.946539][ T6003] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 338.964078][ T6003] usb 4-1: config 0 has no interface number 0 [ 338.972581][ T6003] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 338.986676][ T6003] usb 4-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 339.001574][ T6003] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 339.002915][ T9508] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 339.010911][ T6003] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.026792][ T6003] usb 4-1: config 0 descriptor?? [ 339.075971][ T6003] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 339.307504][ T7012] usb 4-1: Unsupported hardware version: 0x7c7da0f8 [ 339.314499][ T7012] usb 4-1: could not get hw params (-22) [ 339.320717][ T7012] usb 4-1: could not probe fw (-22) [ 339.948181][ T8278] usb 4-1: USB disconnect, device number 43 [ 340.470389][ T9524] 9pnet_fd: Insufficient options for proto=fd [ 340.510668][ T9524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.906'. [ 341.093544][ T9529] sit0: Master is either lo or non-ether device [ 341.107241][ T9529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.908'. [ 342.093545][ T9532] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 342.429576][ T9559] Invalid ELF header len 1 [ 342.488425][ T9561] Invalid logical block size (1792) [ 342.728606][ T9569] netlink: 156 bytes leftover after parsing attributes in process `syz.3.918'. [ 342.786319][ T9570] netlink: 'syz.3.918': attribute type 10 has an invalid length. [ 344.643594][ T9586] tipc: Enabled bearer , priority 0 [ 344.843267][ T9586] tipc: Disabling bearer [ 345.135310][ T9] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 345.305065][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 345.312906][ T9] usb 6-1: config index 0 descriptor too short (expected 50356, got 796) [ 345.326838][ T9] usb 6-1: config 41 has too many interfaces: 195, using maximum allowed: 32 [ 345.337157][ T9] usb 6-1: config 41 has an invalid descriptor of length 0, skipping remainder of the config [ 345.348362][ T5172] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 345.351409][ T9] usb 6-1: config 41 has 0 interfaces, different from the descriptor's value: 195 [ 345.383949][ T9] usb 6-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 345.398099][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.407103][ T9] usb 6-1: Product: syz [ 345.411752][ T9] usb 6-1: Manufacturer: syz [ 345.416935][ T9] usb 6-1: SerialNumber: syz [ 346.045388][ T5172] usb 4-1: Using ep0 maxpacket: 32 [ 346.052512][ T5172] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 346.064233][ T5172] usb 4-1: config 0 has no interface number 0 [ 346.070595][ T5172] usb 4-1: config 0 interface 2 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.082968][ T5172] usb 4-1: config 0 interface 2 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.093195][ T5172] usb 4-1: config 0 interface 2 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 346.110369][ T5172] usb 4-1: config 0 interface 2 has no altsetting 0 [ 346.118359][ T5172] usb 4-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 346.128099][ T5172] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.179186][ T9609] Invalid logical block size (5120) [ 346.250019][ T5172] usb 4-1: config 0 descriptor?? [ 346.302281][ T9] usb 6-1: USB disconnect, device number 21 [ 346.622191][ T9620] netlink: 156 bytes leftover after parsing attributes in process `syz.1.932'. [ 346.701467][ T9621] netlink: 'syz.1.932': attribute type 10 has an invalid length. [ 347.613967][ T5172] usbhid 4-1:0.2: can't add hid device: -71 [ 347.625174][ T5172] usbhid 4-1:0.2: probe with driver usbhid failed with error -71 [ 347.769559][ T5172] usb 4-1: USB disconnect, device number 44 [ 347.991318][ T9625] loop6: detected capacity change from 0 to 524287999 [ 348.020623][ T9628] vlan2: entered promiscuous mode [ 348.044278][ T9628] macvtap0: entered promiscuous mode [ 348.175663][ T9639] tmpfs: Cannot enable quota on remount [ 348.932774][ T9651] Invalid logical block size (17746) [ 349.220567][ T9655] vlan2: entered promiscuous mode [ 349.230467][ T9655] bond0: entered promiscuous mode [ 349.246192][ T9655] bond_slave_0: entered promiscuous mode [ 349.252776][ T9655] bond_slave_1: entered promiscuous mode [ 349.259786][ T9661] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 349.272021][ T9655] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 349.425223][ T9] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 349.485116][ T5923] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 349.525205][ T5922] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 349.645391][ T5923] usb 4-1: Using ep0 maxpacket: 32 [ 349.667045][ T9] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 349.696001][ T5923] usb 4-1: config index 0 descriptor too short (expected 50356, got 796) [ 349.711811][ T5922] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 349.723023][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.735570][ T5923] usb 4-1: config 41 has too many interfaces: 195, using maximum allowed: 32 [ 349.744416][ T5923] usb 4-1: config 41 has an invalid descriptor of length 0, skipping remainder of the config [ 349.760057][ T5922] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 349.775308][ T9] usb 2-1: config 0 descriptor?? [ 349.786343][ T5922] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.4d [ 349.803325][ T5923] usb 4-1: config 41 has 0 interfaces, different from the descriptor's value: 195 [ 349.814031][ T5922] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.822418][ T5901] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 349.843517][ T5923] usb 4-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 349.870329][ T5922] usb 6-1: config 0 descriptor?? [ 349.878184][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.887884][ T5923] usb 4-1: Product: syz [ 349.893175][ T5923] usb 4-1: Manufacturer: syz [ 349.899105][ T5923] usb 4-1: SerialNumber: syz [ 349.975240][ T5901] usb 3-1: device descriptor read/64, error -71 [ 350.051562][ T9669] netlink: 156 bytes leftover after parsing attributes in process `syz.0.947'. [ 350.103879][ T5922] usb 6-1: string descriptor 0 read error: -71 [ 350.127540][ T9670] netlink: 'syz.0.947': attribute type 10 has an invalid length. [ 350.329375][ T9670] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 350.365597][ T5901] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 350.374310][ T5922] hdpvr 6-1:0.0: Could not find bulk-in endpoint [ 350.443144][ T5922] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -12 [ 350.636462][ T5922] usb 6-1: USB disconnect, device number 22 [ 350.667276][ T5901] usb 3-1: device descriptor read/64, error -71 [ 350.796153][ T5901] usb usb3-port1: attempt power cycle [ 350.819054][ T5923] usb 4-1: USB disconnect, device number 45 [ 350.938604][ T9] pegasus 2-1:0.0: probe with driver pegasus failed with error -71 [ 350.956522][ T9] usb 2-1: USB disconnect, device number 31 [ 351.389948][ T5901] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 351.425013][ T5901] usb 3-1: device descriptor read/8, error -71 [ 351.839231][ T5901] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 351.875462][ T5901] usb 3-1: device descriptor read/8, error -71 [ 351.919085][ T9683] netlink: 20 bytes leftover after parsing attributes in process `syz.3.952'. [ 351.931387][ T9687] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 351.938062][ T9687] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 351.950829][ T9687] vhci_hcd vhci_hcd.0: Device attached [ 351.996446][ T5901] usb usb3-port1: unable to enumerate USB device [ 352.185822][ T5172] usb 33-1: new low-speed USB device number 5 using vhci_hcd [ 352.405555][ T8278] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 352.565136][ T8278] usb 2-1: Using ep0 maxpacket: 8 [ 352.728139][ T8278] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 352.755630][ T8278] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 352.780856][ T8278] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.795940][ T8278] usb 2-1: config 0 descriptor?? [ 353.012103][ T8278] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 353.181932][ T9717] netlink: 128 bytes leftover after parsing attributes in process `syz.2.959'. [ 353.191266][ T9717] netlink: 128 bytes leftover after parsing attributes in process `syz.2.959'. [ 353.239021][ T9718] netlink: 'syz.2.959': attribute type 10 has an invalid length. [ 354.555158][ T9688] vhci_hcd: connection reset by peer [ 354.579251][ T3482] vhci_hcd: stop threads [ 354.583981][ T3482] vhci_hcd: release socket [ 354.601655][ T3482] vhci_hcd: disconnect device [ 354.855742][ T5908] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 354.945222][ T8278] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 354.965087][ T9] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 355.007692][ T5908] usb 6-1: unable to get BOS descriptor or descriptor too short [ 355.016636][ T5908] usb 6-1: not running at top speed; connect to a high speed hub [ 355.053587][ T5908] usb 6-1: config 17 has an invalid interface number: 8 but max is 1 [ 355.061976][ T5938] usb 2-1: USB disconnect, device number 32 [ 355.068981][ T5908] usb 6-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 355.103550][ T5908] usb 6-1: config 17 has no interface number 0 [ 355.115287][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 355.126213][ T8278] usb 3-1: Using ep0 maxpacket: 32 [ 355.129135][ T9] usb 4-1: config 1 has an invalid interface number: 220 but max is 1 [ 355.131512][ T5908] usb 6-1: config 17 interface 8 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 355.145915][ T9] usb 4-1: config 1 has an invalid interface number: 76 but max is 1 [ 355.157759][ T5908] usb 6-1: config 17 interface 8 has no altsetting 0 [ 355.175724][ T8278] usb 3-1: config index 0 descriptor too short (expected 50356, got 796) [ 355.184768][ T8278] usb 3-1: config 41 has too many interfaces: 195, using maximum allowed: 32 [ 355.194781][ T9] usb 4-1: config 1 has no interface number 0 [ 355.201373][ T8278] usb 3-1: config 41 has an invalid descriptor of length 0, skipping remainder of the config [ 355.215791][ T9] usb 4-1: config 1 has no interface number 1 [ 355.227478][ T5908] usb 6-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 355.237462][ T9] usb 4-1: config 1 interface 220 has no altsetting 0 [ 355.245000][ T8278] usb 3-1: config 41 has 0 interfaces, different from the descriptor's value: 195 [ 355.254685][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.263024][ T9] usb 4-1: config 1 interface 76 has no altsetting 0 [ 355.265746][ T9] usb 4-1: New USB device found, idVendor=1bc7, idProduct=0023, bcdDevice=b2.a4 [ 355.285015][ T5908] usb 6-1: Product: syz [ 355.289540][ T5908] usb 6-1: Manufacturer: syz [ 355.291992][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.302902][ T9] usb 4-1: Product: syz [ 355.307684][ T8278] usb 3-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 355.310421][ T9] usb 4-1: Manufacturer: syz [ 355.323425][ T8278] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.331817][ T9] usb 4-1: SerialNumber: syz [ 355.336665][ T5908] usb 6-1: SerialNumber: syz [ 355.339746][ T8278] usb 3-1: Product: syz [ 355.347507][ T8278] usb 3-1: Manufacturer: syz [ 355.352603][ T8278] usb 3-1: SerialNumber: syz [ 355.467967][ T9734] hugetlbfs: syz.0.966 (9734): Using mlock ulimits for SHM_HUGETLB is obsolete [ 355.486653][ T5938] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 355.695507][ T5938] usb 2-1: device descriptor read/64, error -71 [ 355.727824][ T9722] netlink: 'syz.5.961': attribute type 2 has an invalid length. [ 355.969293][ T9] usb 4-1: USB disconnect, device number 46 [ 355.986005][ T5938] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 356.048191][ T8278] usb 3-1: USB disconnect, device number 47 [ 356.179583][ T5938] usb 2-1: device descriptor read/64, error -71 [ 356.233843][ T9739] netlink: 72 bytes leftover after parsing attributes in process `syz.0.967'. [ 356.308467][ T5938] usb usb2-port1: attempt power cycle [ 356.935371][ T5938] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 356.983044][ T5938] usb 2-1: device descriptor read/8, error -71 [ 357.108447][ T9756] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 357.289568][ T5938] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 357.298478][ T5172] vhci_hcd: vhci_device speed not set [ 357.356659][ T5938] usb 2-1: device descriptor read/8, error -71 [ 357.557624][ T5938] usb usb2-port1: unable to enumerate USB device [ 357.986048][ T5908] usb 6-1: selecting invalid altsetting 0 [ 358.078385][ T5908] usb 6-1: USB disconnect, device number 23 [ 358.243895][ T9768] netlink: 128 bytes leftover after parsing attributes in process `syz.2.973'. [ 358.253041][ T9768] netlink: 128 bytes leftover after parsing attributes in process `syz.2.973'. [ 358.303379][ T9769] netlink: 'syz.2.973': attribute type 10 has an invalid length. [ 359.618147][ T9776] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 359.624826][ T9776] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 359.639788][ T9776] vhci_hcd vhci_hcd.0: Device attached [ 359.701019][ T6997] Bluetooth: (null): Too short H5 packet [ 359.721165][ T6997] Bluetooth: (null): Invalid header checksum [ 359.862783][ T6997] Bluetooth: (null): Invalid header checksum [ 359.877400][ T5908] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 361.699440][ T9813] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.725930][ T9813] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.746711][ T9813] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.764688][ T9813] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.949125][ T9777] vhci_hcd: connection reset by peer [ 361.960531][ T7012] vhci_hcd: stop threads [ 361.983755][ T7012] vhci_hcd: release socket [ 362.014744][ T7012] vhci_hcd: disconnect device [ 362.457179][ T9831] netlink: 128 bytes leftover after parsing attributes in process `syz.3.986'. [ 362.466992][ T9831] netlink: 128 bytes leftover after parsing attributes in process `syz.3.986'. [ 362.519791][ T9832] netlink: 'syz.3.986': attribute type 10 has an invalid length. [ 364.390915][ T9833] 9pnet_fd: Insufficient options for proto=fd [ 364.402467][ T9833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.988'. [ 364.443474][ T5938] libceph: connect (1)[c::]:6789 error -101 [ 364.865321][ T5901] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 365.055179][ T5901] usb 2-1: Using ep0 maxpacket: 32 [ 365.100857][ T5901] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 365.155105][ T5901] usb 2-1: config 0 has no interface number 0 [ 365.197725][ T5901] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 365.248075][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.284535][ T5901] usb 2-1: Product: syz [ 365.318452][ T5901] usb 2-1: Manufacturer: syz [ 365.356245][ T5901] usb 2-1: SerialNumber: syz [ 365.402106][ T5901] usb 2-1: config 0 descriptor?? [ 365.451584][ T5908] vhci_hcd: vhci_device speed not set [ 365.810824][ T5938] libceph: mon0 (1)[c::]:6789 connect error [ 366.975818][ T9840] xt_CT: No such helper "netbios-ns" [ 367.038875][ T5901] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 367.166275][ T5901] radio-si470x 2-1:0.35: probe with driver radio-si470x failed with error -5 [ 367.255589][ T5938] libceph: connect (1)[c::]:6789 error -101 [ 367.261967][ T5938] libceph: mon0 (1)[c::]:6789 connect error [ 367.630606][ T9834] ceph: No mds server is up or the cluster is laggy [ 367.985158][ T5901] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 368.029796][ T5901] usbhid 2-1:0.35: couldn't find an input interrupt endpoint [ 368.063477][ T5901] usb 2-1: USB disconnect, device number 37 [ 368.321966][ T9859] netlink: 40 bytes leftover after parsing attributes in process `syz.1.996'. [ 368.473787][ T9864] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 369.691965][ T9875] 9pnet_fd: Insufficient options for proto=fd [ 369.700707][ T9875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.999'. [ 370.694762][ T9883] netlink: 120 bytes leftover after parsing attributes in process `syz.5.1001'. [ 370.704146][ T9883] netlink: 120 bytes leftover after parsing attributes in process `syz.5.1001'. [ 370.732807][ T9883] netlink: 'syz.5.1001': attribute type 10 has an invalid length. [ 371.139011][ T9894] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1006'. [ 371.155217][ T9894] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1006'. [ 371.162455][ T9884] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1002'. [ 371.798380][ T9] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 371.819053][ T9910] netlink: 'syz.0.1008': attribute type 15 has an invalid length. [ 371.832290][ T9910] netlink: 723 bytes leftover after parsing attributes in process `syz.0.1008'. [ 371.986752][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 372.004154][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.056130][ T9] usb 2-1: New USB device found, idVendor=0404, idProduct=0755, bcdDevice= 0.00 [ 372.085447][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.120121][ T9] usb 2-1: config 0 descriptor?? [ 372.258920][ T9924] 9pnet_fd: Insufficient options for proto=fd [ 372.291898][ T9924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1012'. [ 372.355325][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 372.365132][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 372.386833][ T9] usb 2-1: USB disconnect, device number 38 [ 372.400520][ T9919] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1011'. [ 374.513961][ T9936] netlink: 120 bytes leftover after parsing attributes in process `syz.5.1016'. [ 374.523665][ T9936] netlink: 120 bytes leftover after parsing attributes in process `syz.5.1016'. [ 374.578706][ T9937] netlink: 'syz.5.1016': attribute type 10 has an invalid length. [ 376.045466][ T5908] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 376.441983][ T9956] kAFS: No cell specified [ 376.453096][ T5908] usb 3-1: config 1 has an invalid descriptor of length 205, skipping remainder of the config [ 376.489188][ T5908] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 376.531750][ T5908] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice=4e.a7 [ 376.576582][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 376.584820][ T5908] usb 3-1: SerialNumber: syz [ 376.661442][ T2957] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.829894][ T5908] usb 3-1: 0:2 : does not exist [ 376.850385][ T2957] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.882086][ T5908] usb 3-1: USB disconnect, device number 48 [ 376.973705][ T2957] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.134761][ T2957] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.176898][ T9967] pim6reg: entered allmulticast mode [ 377.192784][ T9968] pim6reg: left allmulticast mode [ 377.304063][ T2957] bridge_slave_1: left allmulticast mode [ 377.310422][ T2957] bridge_slave_1: left promiscuous mode [ 377.317302][ T2957] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.328151][ T2957] bridge_slave_0: left allmulticast mode [ 377.345984][ T2957] bridge_slave_0: left promiscuous mode [ 377.353995][ T2957] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.405114][ T5923] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 377.425227][ T9] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 377.565872][ T5923] usb 4-1: Using ep0 maxpacket: 32 [ 377.583692][ T5923] usb 4-1: config 0 interface 0 has no altsetting 0 [ 377.603606][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 377.609172][ T5923] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 377.620280][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 377.629307][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 377.636675][ T9] usb 2-1: config 8 has an invalid interface number: 39 but max is 0 [ 377.636703][ T9] usb 2-1: config 8 has no interface number 0 [ 377.636743][ T9] usb 2-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 377.636770][ T9] usb 2-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 377.636792][ T9] usb 2-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 377.636816][ T9] usb 2-1: config 8 interface 39 has no altsetting 0 [ 377.638942][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 377.703358][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 377.705225][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.724261][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 377.737920][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 377.798004][ T9984] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1029'. [ 377.807770][ T9984] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1029'. [ 377.889996][ T9986] netlink: 'syz.2.1029': attribute type 10 has an invalid length. [ 378.352880][ T5923] usb 4-1: Product: syz [ 378.357292][ T5923] usb 4-1: Manufacturer: syz [ 378.362220][ T5923] usb 4-1: SerialNumber: syz [ 378.369732][ T5923] usb 4-1: config 0 descriptor?? [ 378.375303][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.386279][ T9] usb 2-1: Product: syz [ 378.391041][ T9] usb 2-1: Manufacturer: syz [ 378.396327][ T9] usb 2-1: SerialNumber: syz [ 378.598955][ T5923] gs_usb 4-1:0.0: Couldn't get device config: (err=-32) [ 378.626856][ T5923] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -32 [ 378.649248][ T5923] usb 4-1: USB disconnect, device number 47 [ 378.742683][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.749269][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.094328][ T9] ipheth 2-1:8.39: ipheth_enable_ncm: usb_control_msg: 0 [ 379.348468][ T2957] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 379.434647][ T2957] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 379.453258][ T2957] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 379.477683][ T2957] bond0 (unregistering): Released all slaves [ 379.520912][ T9] ipheth 2-1:8.39: Apple iPhone USB Ethernet device attached [ 380.035603][ T5938] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 380.122508][ T5839] Bluetooth: hci0: command tx timeout [ 380.215770][ T5938] usb 3-1: Using ep0 maxpacket: 16 [ 380.293635][ T5938] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 380.423880][ T5938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 380.447579][ T2957] hsr_slave_0: left promiscuous mode [ 380.460587][ T5908] usb 2-1: USB disconnect, device number 39 [ 380.467123][ T2957] hsr_slave_1: left promiscuous mode [ 380.473053][ T2957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.487390][ T2957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.496095][ T5938] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 380.508938][ T2957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.516486][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.526231][ T2957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.654433][ T5938] usb 3-1: Product: syz [ 380.664478][ T5938] usb 3-1: Manufacturer: syz [ 380.676569][ T5938] usb 3-1: SerialNumber: syz [ 380.715959][ T5938] usb 3-1: config 0 descriptor?? [ 380.752785][ T2957] veth1_macvtap: left promiscuous mode [ 380.761669][ T5938] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 380.779381][ T2957] veth0_macvtap: left promiscuous mode [ 380.786755][ T5938] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 381.754476][ T2957] veth1_vlan: left promiscuous mode [ 381.774773][ T2957] veth0_vlan: left promiscuous mode [ 382.186816][ T5839] Bluetooth: hci0: command tx timeout [ 382.204137][ T5938] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 382.213552][ T5938] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 382.643241][ T5923] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 382.826061][ T5923] usb 6-1: Using ep0 maxpacket: 32 [ 382.836165][ T5923] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 382.847111][ T5923] usb 6-1: config 0 has no interface number 0 [ 382.853382][ T5923] usb 6-1: config 0 interface 184 has no altsetting 0 [ 382.868465][ T5923] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 382.877920][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.901398][ T5923] usb 6-1: Product: syz [ 382.905752][ T5923] usb 6-1: Manufacturer: syz [ 382.910532][ T5923] usb 6-1: SerialNumber: syz [ 382.931419][ T5923] usb 6-1: config 0 descriptor?? [ 382.961999][ T5923] smsc75xx v1.0.0 [ 382.979883][ T2957] team0 (unregistering): Port device team_slave_1 removed [ 383.051101][ T2957] team0 (unregistering): Port device team_slave_0 removed [ 383.058391][T10039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.058825][T10039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.156741][T10042] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1042'. [ 383.166174][T10042] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1042'. [ 383.175741][T10042] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1042'. [ 383.310360][T10046] netlink: 'syz.3.1042': attribute type 10 has an invalid length. [ 383.535962][ T5938] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 383.543515][ T5938] em28xx 3-1:0.0: No AC97 audio processor [ 383.883177][ T5923] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 383.960315][ T5923] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 384.004881][ T5923] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 384.016130][ T5923] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 384.028612][ T5923] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 384.044080][ T5923] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 384.059796][ T5923] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 384.072435][ T5923] usb 6-1: USB disconnect, device number 24 [ 384.094386][ T5938] usb 3-1: USB disconnect, device number 49 [ 384.103713][ T5938] em28xx 3-1:0.0: Disconnecting em28xx [ 384.121268][ T5938] em28xx 3-1:0.0: Freeing device [ 384.255184][ T5839] Bluetooth: hci0: command tx timeout [ 384.348907][T10050] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1043'. [ 384.520337][T10052] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 384.826239][ T5908] ipheth 2-1:8.39: Apple iPhone USB Ethernet now disconnected [ 384.999451][T10065] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 385.705514][ T9982] chnl_net:caif_netlink_parms(): no params data found [ 385.996290][T10071] xt_bpf: check failed: parse error [ 386.005616][ T5938] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 386.097754][ T9982] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.105603][ T9982] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.112991][ T9982] bridge_slave_0: entered allmulticast mode [ 386.121190][ T9982] bridge_slave_0: entered promiscuous mode [ 386.132596][ T9982] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.143481][ T9982] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.151742][ T9982] bridge_slave_1: entered allmulticast mode [ 386.159788][ T9982] bridge_slave_1: entered promiscuous mode [ 386.177701][T10081] netlink: 248 bytes leftover after parsing attributes in process `syz.5.1051'. [ 386.179562][ T5938] usb 3-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 386.195173][T10081] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1051'. [ 386.207025][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.226068][ T5938] usb 3-1: Product: syz [ 386.235200][ T5908] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 386.249301][ T5938] usb 3-1: Manufacturer: syz [ 386.249768][T10081] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1051'. [ 386.263626][ T5938] usb 3-1: SerialNumber: syz [ 386.297143][ T9982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.299512][ T5938] usb 3-1: config 0 descriptor?? [ 386.313207][T10084] netlink: 144 bytes leftover after parsing attributes in process `syz.5.1051'. [ 386.318792][ T9982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.335743][ T5839] Bluetooth: hci0: command tx timeout [ 386.395326][ T5908] usb 2-1: Using ep0 maxpacket: 16 [ 386.405312][ T5908] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 386.413941][ T5908] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.585449][ T5908] usb 2-1: config 0 has no interface number 0 [ 386.591757][ T5908] usb 2-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 386.593365][ T9982] team0: Port device team_slave_0 added [ 386.603564][ T5908] usb 2-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 386.603598][ T5908] usb 2-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 386.603623][ T5908] usb 2-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 386.603645][ T5908] usb 2-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 386.603668][ T5908] usb 2-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 386.603715][ T5908] usb 2-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 386.603737][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.694573][ T9982] team0: Port device team_slave_1 added [ 386.766403][ T5908] usb 2-1: config 0 descriptor?? [ 386.772446][T10074] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 386.786569][ T5908] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 386.814169][ T9982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.825917][ T9982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.852966][ T9982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.872975][ T9982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.880547][ T9982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.907802][ T30] audit: type=1326 audit(386.829:153): auid=0 uid=0 gid=0 ses=1 subj=_ pid=10092 comm="syz.5.1053" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0b6438eb69 code=0x0 [ 386.936436][ T9982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.026553][ T5938] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 387.045014][ T5938] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 387.065199][ T5938] asix 3-1:0.0: probe with driver asix failed with error -71 [ 387.091804][ T5938] usb 3-1: USB disconnect, device number 50 [ 387.149881][ T5908] snd-usb-audio 2-1:0.126: probe with driver snd-usb-audio failed with error -12 [ 387.169381][ T5908] usb 2-1: USB disconnect, device number 40 [ 387.197834][ T9982] hsr_slave_0: entered promiscuous mode [ 387.217115][ T9982] hsr_slave_1: entered promiscuous mode [ 387.223453][ T9982] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 387.245051][ T9982] Cannot create hsr debugfs directory [ 387.562767][T10106] netlink: 'syz.2.1056': attribute type 12 has an invalid length. [ 388.389390][T10114] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1057'. [ 388.399112][T10114] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1057'. [ 388.408571][T10114] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1057'. [ 388.667230][T10117] netlink: 'syz.1.1057': attribute type 10 has an invalid length. [ 389.402948][T10128] IPVS: set_ctl: invalid protocol: 43 172.30.0.3:20000 [ 389.517016][ T5908] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 389.589327][ T9982] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 389.604535][ T9982] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 389.626881][ T9982] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 389.658236][ T9982] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 389.675143][ T5908] usb 4-1: Using ep0 maxpacket: 32 [ 389.693391][ T5908] usb 4-1: config index 0 descriptor too short (expected 26090, got 796) [ 389.706422][ T5908] usb 4-1: config 231 has too many interfaces: 103, using maximum allowed: 32 [ 389.728367][ T5908] usb 4-1: config 231 has an invalid descriptor of length 0, skipping remainder of the config [ 389.757476][ T5908] usb 4-1: config 231 has 0 interfaces, different from the descriptor's value: 103 [ 389.782611][ T5908] usb 4-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 389.793480][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.812275][ T5908] usb 4-1: Product: syz [ 389.828254][ T5908] usb 4-1: Manufacturer: syz [ 389.849908][ T5908] usb 4-1: SerialNumber: syz [ 389.977842][ T9982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.043937][ T9982] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.094361][ T5908] usb 4-1: USB disconnect, device number 48 [ 390.132418][ T3482] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.139842][ T3482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.168629][ T3482] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.175788][ T3482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.533921][ T30] audit: type=1326 audit(390.489:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10141 comm="syz.5.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6438eb69 code=0x7fc00000 [ 390.697537][ T9982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.903383][ T9982] veth0_vlan: entered promiscuous mode [ 390.990374][ T9982] veth1_vlan: entered promiscuous mode [ 391.185747][T10181] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1073'. [ 391.195513][T10181] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1073'. [ 391.204892][T10181] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1073'. [ 391.328316][T10184] netlink: 'syz.3.1073': attribute type 10 has an invalid length. [ 392.869762][ T9982] veth0_macvtap: entered promiscuous mode [ 392.972577][ T9982] veth1_macvtap: entered promiscuous mode [ 393.014658][ T9982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.061823][ T9982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.078443][ T9982] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.090325][ T9982] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.101557][ T9982] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.112007][ T9982] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.265671][ T5938] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 393.377205][ T6997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.392031][ T6997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.496065][ T5938] usb 6-1: Using ep0 maxpacket: 16 [ 393.519916][ T5938] usb 6-1: config index 0 descriptor too short (expected 17700, got 36) [ 393.577224][ T5938] usb 6-1: config 0 has too many interfaces: 52, using maximum allowed: 32 [ 393.675256][ T5938] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 52 [ 393.772120][ T5938] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.895907][ T5938] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.919621][ T7010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.932211][ T5938] usb 6-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 393.945822][ T7010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.957317][ T5938] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.020087][ T5938] usb 6-1: config 0 descriptor?? [ 394.155410][T10208] xt_TCPMSS: Only works on TCP SYN packets [ 394.645113][ T5908] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 394.712478][T10216] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 394.825169][ T5908] usb 4-1: Using ep0 maxpacket: 32 [ 394.832881][ T5908] usb 4-1: config index 0 descriptor too short (expected 26090, got 796) [ 394.844175][ T5908] usb 4-1: config 231 has too many interfaces: 103, using maximum allowed: 32 [ 394.856445][ T5908] usb 4-1: config 231 has an invalid descriptor of length 0, skipping remainder of the config [ 394.883901][ T5908] usb 4-1: config 231 has 0 interfaces, different from the descriptor's value: 103 [ 394.912914][ T5908] usb 4-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 394.922644][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.931478][ T5908] usb 4-1: Product: syz [ 394.939327][ T5908] usb 4-1: Manufacturer: syz [ 394.952037][ T5908] usb 4-1: SerialNumber: syz [ 395.210981][ T5908] usb 4-1: USB disconnect, device number 49 [ 395.551661][T10224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.569917][T10224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.804018][ T5922] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 396.035723][ T5922] usb 2-1: device descriptor read/64, error -71 [ 396.098639][ T5938] usbhid 6-1:0.0: can't add hid device: -71 [ 396.107410][ T5938] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 396.132502][ T5938] usb 6-1: USB disconnect, device number 25 [ 396.301107][T10242] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1087'. [ 396.310520][T10242] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1087'. [ 396.320048][ T5922] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 396.328782][T10242] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1087'. [ 396.359390][ T9] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 396.372272][T10243] netlink: 'syz.5.1087': attribute type 10 has an invalid length. [ 397.835038][ T5922] usb 2-1: device descriptor read/64, error -71 [ 397.951309][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 397.957694][ T5922] usb usb2-port1: attempt power cycle [ 397.968541][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 398.008941][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 398.032609][T10249] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1089'. [ 398.064853][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 398.077899][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.086153][ T9] usb 4-1: Product: syz [ 398.090094][T10251] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1090'. [ 398.090525][ T9] usb 4-1: Manufacturer: syz [ 398.109140][ T9] usb 4-1: SerialNumber: syz [ 398.132628][ T9] usb 4-1: config 0 descriptor?? [ 398.160720][ T9] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 398.184092][ T9] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 398.348967][ T5922] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 398.525129][T10265] wg1 speed is unknown, defaulting to 1000 [ 398.678467][T10265] wg1 speed is unknown, defaulting to 1000 [ 399.185198][ T9] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 399.217656][ T9] em28xx 4-1:0.0: Config register raw data: 0x41 [ 399.231747][T10265] wg1 speed is unknown, defaulting to 1000 [ 399.288258][T10265] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 399.298361][ T5922] usb 2-1: device descriptor read/8, error -71 [ 399.484825][T10265] wg1 speed is unknown, defaulting to 1000 [ 399.790307][T10273] 9pnet_fd: Insufficient options for proto=fd [ 399.875291][T10273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1097'. [ 400.121116][T10276] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 400.142476][T10265] wg1 speed is unknown, defaulting to 1000 [ 400.155146][T10276] overlayfs: missing 'lowerdir' [ 400.286268][T10265] wg1 speed is unknown, defaulting to 1000 [ 400.464456][T10265] wg1 speed is unknown, defaulting to 1000 [ 400.495167][ T9] usb 4-1: USB disconnect, device number 50 [ 400.501976][ T9] em28xx 4-1:0.0: Disconnecting em28xx [ 401.084809][ T9] em28xx 4-1:0.0: Freeing device [ 401.299496][T10284] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1100'. [ 401.311605][T10284] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1100'. [ 401.321338][T10284] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1100'. [ 401.359551][T10285] netlink: 'syz.0.1100': attribute type 10 has an invalid length. [ 402.966232][T10285] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 403.285271][T10265] wg1 speed is unknown, defaulting to 1000 [ 403.311449][T10300] syz.3.1104 (10300): /proc/10299/oom_adj is deprecated, please use /proc/10299/oom_score_adj instead. [ 404.038033][T10308] loop2: detected capacity change from 0 to 7 [ 404.072177][T10308] loop2: p4 [ 404.108967][T10308] loop2: partition table partially beyond EOD, truncated [ 404.165475][T10308] loop2: p4 size 4294967295 extends beyond EOD, truncated [ 404.900479][ T30] audit: type=1326 audit(404.859:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10328 comm="syz.2.1114" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e79d8eb69 code=0x0 [ 405.103639][T10347] loop2: detected capacity change from 0 to 7 [ 405.134779][T10347] Dev loop2: unable to read RDB block 7 [ 405.339591][T10347] loop2: unable to read partition table [ 405.465373][T10347] loop2: partition table beyond EOD, truncated [ 405.472738][T10351] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1117'. [ 405.485248][T10347] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 405.756757][ T5938] usb 4-1: new low-speed USB device number 51 using dummy_hcd [ 405.835081][T10355] siw: device registration error -23 [ 405.957394][ T5938] usb 4-1: unable to get BOS descriptor or descriptor too short [ 405.990597][ T5938] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 406.048248][ T5938] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 406.091539][ T5172] kernel write not supported for file bpf-prog (pid: 5172 comm: kworker/1:2) [ 406.201008][T10359] ocfs2_dlmfs: Unknown parameter 'cmac(aes)' [ 407.612897][T10367] loop2: detected capacity change from 0 to 7 [ 407.672384][T10367] loop2: p4 [ 407.679631][T10367] loop2: partition table partially beyond EOD, truncated [ 407.745248][T10367] loop2: p4 size 4294967295 extends beyond EOD, truncated [ 407.996740][T10369] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1122'. [ 408.187007][T10375] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 408.445226][ T43] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 408.487734][ T5938] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 408.503922][ T5938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.543089][ T5938] usb 4-1: can't set config #1, error -71 [ 408.566190][ T5938] usb 4-1: USB disconnect, device number 51 [ 408.708728][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 408.721022][ T43] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 408.730263][ T43] usb 3-1: config 0 has no interface number 0 [ 408.741327][ T43] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 408.751835][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.327539][ T43] usb 3-1: Product: syz [ 409.334083][ T43] usb 3-1: Manufacturer: syz [ 409.339803][ T43] usb 3-1: SerialNumber: syz [ 409.363674][ T43] usb 3-1: config 0 descriptor?? [ 409.372366][ T43] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 409.382345][ T43] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5 [ 409.521512][T10395] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 409.577986][ T43] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 409.601237][ T43] usbhid 3-1:0.35: couldn't find an input interrupt endpoint [ 409.628435][T10398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1131'. [ 411.288016][ T5938] usb 3-1: USB disconnect, device number 51 [ 412.605076][ T5938] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 412.869736][ T5938] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 412.880934][ T5938] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 412.893360][ T5938] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 415.591471][T10443] Invalid logical block size (199600449) [ 415.639898][ T5938] usb 3-1: string descriptor 0 read error: -71 [ 415.648107][ T5938] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 415.681448][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.740406][ T5938] usb 3-1: can't set config #1, error -71 [ 415.765784][ T5938] usb 3-1: USB disconnect, device number 52 [ 415.997524][T10453] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1143'. [ 416.007310][T10453] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1143'. [ 416.017328][T10453] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1143'. [ 416.041571][T10448] 9pnet_fd: Insufficient options for proto=fd [ 416.050659][T10448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1144'. [ 416.086091][T10454] netlink: 'syz.2.1143': attribute type 10 has an invalid length. [ 416.597640][T10451] wg1 speed is unknown, defaulting to 1000 [ 417.150446][ T30] audit: type=1326 audit(417.089:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10457 comm="syz.0.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a1b8eb69 code=0x7ffc0000 [ 417.379167][ T30] audit: type=1326 audit(417.089:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10457 comm="syz.0.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a1b8eb69 code=0x7ffc0000 [ 417.479165][ T30] audit: type=1326 audit(417.139:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10457 comm="syz.0.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f41a1b8eb69 code=0x7ffc0000 [ 417.545294][ T30] audit: type=1326 audit(417.139:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10457 comm="syz.0.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a1b8eb69 code=0x7ffc0000 [ 417.570788][ T30] audit: type=1326 audit(417.149:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10457 comm="syz.0.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a1b8eb69 code=0x7ffc0000 [ 417.595464][ T30] audit: type=1326 audit(417.149:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10457 comm="syz.0.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f41a1b8eb69 code=0x7ffc0000 [ 417.686155][ T30] audit: type=1326 audit(417.149:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10457 comm="syz.0.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a1b8eb69 code=0x7ffc0000 [ 417.803904][T10472] siw: device registration error -23 [ 417.821439][T10477] 9pnet_fd: Insufficient options for proto=fd [ 417.847505][ T30] audit: type=1326 audit(417.159:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10457 comm="syz.0.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a1b8eb69 code=0x7ffc0000 [ 417.980292][ T30] audit: type=1326 audit(417.179:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10457 comm="syz.0.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41a1b8eb69 code=0x7ffc0000 [ 418.028694][ T30] audit: type=1326 audit(417.179:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10457 comm="syz.0.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a1b8eb69 code=0x7ffc0000 [ 418.175134][T10488] trusted_key: encrypted_key: master key parameter 'use' is invalid [ 418.991525][T10488] fuse: Bad value for 'fd' [ 419.066095][ T6003] Process accounting resumed [ 419.277179][T10492] Invalid logical block size (1101653259) [ 419.351193][T10482] Process accounting resumed [ 420.598409][T10514] block nbd5: shutting down sockets [ 420.962130][ T5839] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 421.665752][T10535] Invalid logical block size (1163001856) [ 421.733273][T10534] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 422.683548][T10557] FAULT_INJECTION: forcing a failure. [ 422.683548][T10557] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 422.696973][T10557] CPU: 1 UID: 0 PID: 10557 Comm: syz.5.1171 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 422.696999][T10557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 422.697012][T10557] Call Trace: [ 422.697020][T10557] [ 422.697028][T10557] dump_stack_lvl+0x189/0x250 [ 422.697056][T10557] ? __pfx____ratelimit+0x10/0x10 [ 422.697077][T10557] ? __pfx_dump_stack_lvl+0x10/0x10 [ 422.697099][T10557] ? __pfx__printk+0x10/0x10 [ 422.697125][T10557] ? __might_fault+0xb0/0x130 [ 422.697157][T10557] should_fail_ex+0x414/0x560 [ 422.697182][T10557] _copy_from_user+0x2d/0xb0 [ 422.697209][T10557] memdup_user+0x5e/0xd0 [ 422.697234][T10557] strndup_user+0x68/0xd0 [ 422.697258][T10557] __se_sys_mount+0x9c/0x410 [ 422.697287][T10557] ? __pfx___se_sys_mount+0x10/0x10 [ 422.697316][T10557] ? do_syscall_64+0xbe/0x3b0 [ 422.697335][T10557] ? __x64_sys_mount+0x20/0xc0 [ 422.697359][T10557] do_syscall_64+0xfa/0x3b0 [ 422.697391][T10557] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.697410][T10557] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 422.697428][T10557] ? clear_bhb_loop+0x60/0xb0 [ 422.697451][T10557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.697470][T10557] RIP: 0033:0x7f0b6438eb69 [ 422.697487][T10557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.697505][T10557] RSP: 002b:00007f0b6520a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 422.697526][T10557] RAX: ffffffffffffffda RBX: 00007f0b645b6160 RCX: 00007f0b6438eb69 [ 422.697541][T10557] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000000000000000 [ 422.697554][T10557] RBP: 00007f0b6520a090 R08: 0000200000000240 R09: 0000000000000000 [ 422.697566][T10557] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 422.697578][T10557] R13: 0000000000000000 R14: 00007f0b645b6160 R15: 00007ffde2723358 [ 422.697610][T10557] [ 423.294349][T10568] 9pnet_fd: Insufficient options for proto=fd [ 423.320405][T10568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1174'. [ 423.489787][T10565] siw: device registration error -23 [ 423.510657][T10576] netlink: 'syz.3.1177': attribute type 10 has an invalid length. [ 423.535103][T10576] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.542673][T10576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.551683][T10576] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.559228][T10576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.592473][T10576] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 423.921691][T10577] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 423.967286][T10577] qnx6: wrong signature (magic) in superblock #1. [ 423.974654][T10577] qnx6: unable to read the first superblock [ 424.638721][T10594] bridge0: entered promiscuous mode [ 424.665393][T10594] bridge0: entered allmulticast mode [ 424.687735][T10599] tipc: Started in network mode [ 424.701121][T10599] tipc: Node identity de67647570c8, cluster identity 4711 [ 424.743245][T10599] tipc: Enabled bearer , priority 0 [ 424.813291][T10599] tipc: Disabling bearer [ 424.933019][T10590] delete_channel: no stack [ 425.233240][ T5922] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 425.600272][T10614] FAULT_INJECTION: forcing a failure. [ 425.600272][T10614] name failslab, interval 1, probability 0, space 0, times 0 [ 425.613291][T10614] CPU: 1 UID: 0 PID: 10614 Comm: syz.5.1187 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 425.613316][T10614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 425.613327][T10614] Call Trace: [ 425.613335][T10614] [ 425.613342][T10614] dump_stack_lvl+0x189/0x250 [ 425.613363][T10614] ? __pfx____ratelimit+0x10/0x10 [ 425.613375][T10614] ? __pfx_dump_stack_lvl+0x10/0x10 [ 425.613386][T10614] ? __pfx__printk+0x10/0x10 [ 425.613403][T10614] ? __pfx___might_resched+0x10/0x10 [ 425.613414][T10614] ? fs_reclaim_acquire+0x7d/0x100 [ 425.613429][T10614] should_fail_ex+0x414/0x560 [ 425.613445][T10614] should_failslab+0xa8/0x100 [ 425.613458][T10614] __kmalloc_cache_noprof+0x70/0x3d0 [ 425.613468][T10614] ? __se_sys_mount+0x165/0x410 [ 425.613478][T10614] ? memdup_user+0x99/0xd0 [ 425.613493][T10614] __se_sys_mount+0x165/0x410 [ 425.613508][T10614] ? __pfx___se_sys_mount+0x10/0x10 [ 425.613518][T10614] ? rcu_is_watching+0x15/0xb0 [ 425.613532][T10614] ? do_syscall_64+0xbe/0x3b0 [ 425.613543][T10614] ? __x64_sys_mount+0x20/0xc0 [ 425.613556][T10614] do_syscall_64+0xfa/0x3b0 [ 425.613566][T10614] ? lockdep_hardirqs_on+0x9c/0x150 [ 425.613577][T10614] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.613587][T10614] ? clear_bhb_loop+0x60/0xb0 [ 425.613605][T10614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.613615][T10614] RIP: 0033:0x7f0b6438eb69 [ 425.613625][T10614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.613634][T10614] RSP: 002b:00007f0b6522b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 425.613646][T10614] RAX: ffffffffffffffda RBX: 00007f0b645b6080 RCX: 00007f0b6438eb69 [ 425.613654][T10614] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000000000000000 [ 425.613661][T10614] RBP: 00007f0b6522b090 R08: 0000200000000240 R09: 0000000000000000 [ 425.613668][T10614] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 425.613673][T10614] R13: 0000000000000000 R14: 00007f0b645b6080 R15: 00007ffde2723358 [ 425.613689][T10614] [ 425.885552][ T5922] usb 2-1: Using ep0 maxpacket: 8 [ 425.896422][ T5922] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 425.906339][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.918272][ T5922] usb 2-1: Product: syz [ 425.923265][ T5922] usb 2-1: Manufacturer: syz [ 425.930276][ T5922] usb 2-1: SerialNumber: syz [ 426.206137][ T5922] usb 2-1: config 0 descriptor?? [ 426.425869][ T5922] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 426.801515][T10622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.882780][T10622] netlink: 'syz.5.1189': attribute type 29 has an invalid length. [ 426.908088][T10622] netlink: 'syz.5.1189': attribute type 29 has an invalid length. [ 426.936994][T10621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.339130][T10630] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 427.436301][ T5922] gspca_sunplus: reg_w_riv err -71 [ 427.441665][ T5922] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 427.453518][ T5922] usb 2-1: USB disconnect, device number 45 [ 427.617237][T10637] x_tables: unsorted underflow at hook 3 [ 427.852156][T10637] netlink: 'syz.3.1193': attribute type 10 has an invalid length. [ 428.260484][ T977] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 428.304109][T10645] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1196'. [ 428.538827][ T977] usb 6-1: unable to get BOS descriptor or descriptor too short [ 428.547882][ T977] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 428.559787][ T977] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 428.572472][ T977] usb 6-1: config 1 interface 1 has no altsetting 0 [ 428.639199][T10653] FAULT_INJECTION: forcing a failure. [ 428.639199][T10653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 428.652748][T10653] CPU: 0 UID: 0 PID: 10653 Comm: syz.1.1198 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 428.652777][T10653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 428.652793][T10653] Call Trace: [ 428.652804][T10653] [ 428.652812][T10653] dump_stack_lvl+0x189/0x250 [ 428.652837][T10653] ? irqentry_exit+0x74/0x90 [ 428.652861][T10653] ? __pfx_dump_stack_lvl+0x10/0x10 [ 428.652914][T10653] should_fail_ex+0x414/0x560 [ 428.652940][T10653] _copy_from_user+0x2d/0xb0 [ 428.652967][T10653] __se_sys_mount+0x18a/0x410 [ 428.652987][T10653] ? lockdep_hardirqs_on+0x9c/0x150 [ 428.653014][T10653] ? __pfx___se_sys_mount+0x10/0x10 [ 428.653043][T10653] ? __x64_sys_mount+0x20/0xc0 [ 428.653067][T10653] do_syscall_64+0xfa/0x3b0 [ 428.653091][T10653] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.653109][T10653] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 428.653127][T10653] ? clear_bhb_loop+0x60/0xb0 [ 428.653150][T10653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.653215][T10653] RIP: 0033:0x7fca0358eb69 [ 428.653230][T10653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.653245][T10653] RSP: 002b:00007fca04405038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 428.653264][T10653] RAX: ffffffffffffffda RBX: 00007fca037b6160 RCX: 00007fca0358eb69 [ 428.653276][T10653] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000000000000000 [ 428.653288][T10653] RBP: 00007fca04405090 R08: 0000200000000240 R09: 0000000000000000 [ 428.653301][T10653] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 428.653313][T10653] R13: 0000000000000000 R14: 00007fca037b6160 R15: 00007ffdfcc39058 [ 428.653346][T10653] [ 428.959621][ T977] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 428.962646][T10652] libceph: resolve '400' (ret=-3): failed [ 428.975544][ T977] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.983885][ T977] usb 6-1: Product: syz [ 428.988750][ T977] usb 6-1: Manufacturer: syz [ 428.993668][ T977] usb 6-1: SerialNumber: syz [ 429.072392][T10655] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 429.327875][T10657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.391262][T10657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.848438][T10671] tipc: Can't bind to reserved service type 1 [ 430.135065][ T43] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 430.275066][ T43] usb 2-1: device descriptor read/64, error -71 [ 430.555208][ T43] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 430.708457][ T43] usb 2-1: device descriptor read/64, error -71 [ 430.829518][ T43] usb usb2-port1: attempt power cycle [ 430.846736][ T977] usb 6-1: 2:1 : invalid UAC_AS_GENERAL desc [ 431.053160][ T5839] Bluetooth: hci2: unexpected event for opcode 0x0405 [ 431.708950][ T977] usb 6-1: USB disconnect, device number 26 [ 431.711067][T10679] syz.3.1205: attempt to access beyond end of device [ 431.711067][T10679] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 431.769307][T10679] (syz.3.1205,10679,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 431.785993][T10679] (syz.3.1205,10679,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 431.793932][T10679] (syz.3.1205,10679,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 431.819080][T10679] (syz.3.1205,10679,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 431.922088][T10685] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.016129][ T43] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 432.038362][ T43] usb 2-1: device descriptor read/8, error -71 [ 432.059135][T10688] netlink: 'syz.5.1208': attribute type 4 has an invalid length. [ 432.286656][ T43] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 432.315971][ T43] usb 2-1: device descriptor read/8, error -71 [ 432.355153][ T5172] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 432.426906][ T43] usb usb2-port1: unable to enumerate USB device [ 432.474620][T10695] mkiss: ax0: crc mode is auto. [ 432.507064][ T5172] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 432.582777][ T5172] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 432.652357][ T5172] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 432.695819][ T5172] usb 4-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 432.712983][ T5172] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.721243][ T5172] usb 4-1: Product: syz [ 432.725507][ T5172] usb 4-1: Manufacturer: syz [ 432.730128][ T5172] usb 4-1: SerialNumber: syz [ 432.748578][ T5172] usb 4-1: config 0 descriptor?? [ 432.975575][ T5172] powermate: unknown product id 0240 [ 432.998187][ T5172] powermate: Expected payload of 3--6 bytes, found 0 bytes! [ 433.225577][ T5172] powermate 4-1:0.0: probe with driver powermate failed with error -5 [ 433.268454][ T5172] usb 4-1: USB disconnect, device number 52 [ 433.795644][T10714] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1215'. [ 434.104333][T10721] siw: device registration error -23 [ 437.460863][T10763] Process accounting resumed [ 437.975831][ T977] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 438.382145][ T977] usb 2-1: Using ep0 maxpacket: 16 [ 438.388643][T10782] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1237'. [ 438.403218][ T977] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 438.416614][ T977] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 438.425950][ T977] usb 2-1: config 1 has no interface number 1 [ 438.432400][ T977] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 438.452450][ T977] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 438.473770][ T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.505325][ T5938] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 438.525366][ T977] usb 2-1: Product: syz [ 438.529677][ T977] usb 2-1: Manufacturer: syz [ 438.541509][ T977] usb 2-1: SerialNumber: syz [ 438.624079][T10789] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20001 [ 438.665212][ T5938] usb 4-1: Using ep0 maxpacket: 32 [ 438.676986][ T5938] usb 4-1: unable to get BOS descriptor or descriptor too short [ 438.687897][ T5938] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023 [ 438.705032][ T5938] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 438.736857][ T5938] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 438.772418][ T5938] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 438.842519][ T5938] usb 4-1: string descriptor 0 read error: -22 [ 438.871635][ T977] usb 2-1: USB disconnect, device number 50 [ 438.872363][ T5938] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 438.998523][T10794] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1241'. [ 439.577503][T10793] 9pnet_fd: Insufficient options for proto=fd [ 439.584105][ T5938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.588815][T10793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1242'. [ 439.648564][T10780] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 439.665457][T10798] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1243'. [ 439.687435][ T5938] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 439.712917][T10802] Invalid logical block size (-625016833) [ 439.730299][T10804] netlink: 'syz.2.1239': attribute type 10 has an invalid length. [ 440.042096][T10807] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 440.071118][T10807] qnx6: wrong signature (magic) in superblock #1. [ 440.072893][ T5938] usb 4-1: USB disconnect, device number 53 [ 440.084071][T10807] qnx6: unable to read the first superblock [ 440.155957][ T977] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 440.256019][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.262432][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.405036][ T977] usb 6-1: Using ep0 maxpacket: 16 [ 440.412789][ T977] usb 6-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 1023 [ 440.447235][T10815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.456228][ T977] usb 6-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 8 [ 440.471450][ T977] usb 6-1: config 1 interface 0 has no altsetting 0 [ 440.480439][T10815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.495772][ T977] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 440.509372][ T977] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.517679][ T977] usb 6-1: Product: 껍氋䙐郬ꈎ梩摽Ꟛ隃㉽헯歓㗯歂褸➄괣ྲྀ䆆ѩ休鿯녑䣤ᶪ☛혎鑎膉⤘줷ꘘ떋Є㽡᳔䣥ꮍ륰뱀睤ꥯ췫㺁Ḳ㚧鰘辁鄻嵐⭈믂쇧㯻녽신ਞꚪ▦◿寎珹힢뉴 [ 440.540877][ T977] usb 6-1: Manufacturer: 睙学迨ળ⭇ﺫ듼洞釈쟰츺㗚澃힤祢쭌砆䦃ﰠ఩뒎ꃇ┡罒蜆팯 [ 440.553478][ T977] usb 6-1: SerialNumber: Б [ 440.562430][T10799] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 440.569925][T10799] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 440.605057][ T5172] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 440.765060][ T5172] usb 2-1: Using ep0 maxpacket: 32 [ 440.777822][ T5172] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 440.791080][T10799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.795117][ T5172] usb 2-1: config 0 has no interface number 0 [ 440.802152][T10799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.826759][ T5172] usb 2-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 440.847142][ T5172] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.848153][T10799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.858064][ T5172] usb 2-1: Product: syz [ 440.877663][T10799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.888412][ T5172] usb 2-1: Manufacturer: syz [ 440.893154][ T5172] usb 2-1: SerialNumber: syz [ 440.900229][T10799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.929164][T10799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.937984][ T5172] usb 2-1: config 0 descriptor?? [ 440.958142][ T5172] hub 2-1:0.89: bad descriptor, ignoring hub [ 440.964492][ T5172] hub 2-1:0.89: probe with driver hub failed with error -5 [ 440.975727][T10799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.995252][T10799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.004646][T10799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.015998][ T5172] option 2-1:0.89: GSM modem (1-port) converter detected [ 441.025783][T10799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.034448][ T5172] usb 2-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 441.235618][ T977] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 27 if 0 alt 7 proto 2 vid 0x0525 pid 0xA4A8 [ 441.251014][ T977] usb 6-1: USB disconnect, device number 27 [ 441.267876][ T977] usblp0: removed [ 441.279631][ T5172] usb 2-1: USB disconnect, device number 51 [ 441.301184][ T5172] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 441.321343][ T5172] option 2-1:0.89: device disconnected [ 441.456611][T10847] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1254'. [ 441.547212][T10849] Invalid logical block size (-21931) [ 441.581834][T10851] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1256'. [ 441.595298][ T5172] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 441.653313][T10853] wg1 speed is unknown, defaulting to 1000 [ 441.693587][T10854] vxcan1: entered allmulticast mode [ 441.769511][ T5172] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.809939][ T5172] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 441.832471][ T5172] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.859980][ T5172] usb 4-1: config 0 descriptor?? [ 441.872692][ T5172] pwc: Askey VC010 type 2 USB webcam detected. [ 442.693397][T10880] vxfs: WRONG superblock magic 00000000 at 1 [ 442.701400][T10880] vxfs: WRONG superblock magic 00000000 at 8 [ 442.707667][T10880] vxfs: can't find superblock. [ 442.718415][ T5172] pwc: recv_control_msg error -32 req 02 val 2b00 [ 442.728063][ T5172] pwc: recv_control_msg error -32 req 02 val 2700 [ 442.817013][T10877] ceph: No mds server is up or the cluster is laggy [ 442.835253][ T5938] libceph: connect (1)[c::]:6789 error -101 [ 442.844288][ T5938] libceph: mon0 (1)[c::]:6789 connect error [ 443.121530][ T5938] libceph: connect (1)[c::]:6789 error -101 [ 443.171339][ T5938] libceph: mon0 (1)[c::]:6789 connect error [ 443.665552][T10891] Invalid logical block size (-21674) [ 444.583666][ T5172] pwc: recv_control_msg error -71 req 04 val 1000 [ 444.638835][ T5172] pwc: recv_control_msg error -71 req 04 val 1300 [ 444.735939][ T5172] pwc: recv_control_msg error -71 req 04 val 1400 [ 444.758230][ T5172] pwc: recv_control_msg error -71 req 02 val 2000 [ 444.787623][ T5172] pwc: recv_control_msg error -71 req 02 val 2100 [ 444.808014][ T5172] pwc: recv_control_msg error -71 req 04 val 1500 [ 444.828156][ T5172] pwc: recv_control_msg error -71 req 02 val 2500 [ 444.835526][ T5172] pwc: recv_control_msg error -71 req 02 val 2400 [ 444.965400][ T5172] pwc: recv_control_msg error -71 req 02 val 2600 [ 444.973674][ T5172] pwc: recv_control_msg error -71 req 02 val 2900 [ 444.989446][ T5172] pwc: recv_control_msg error -71 req 02 val 2800 [ 444.997381][ T5172] pwc: recv_control_msg error -71 req 04 val 1100 [ 445.004334][ T5172] pwc: recv_control_msg error -71 req 04 val 1200 [ 445.075338][ T5172] pwc: Registered as video103. [ 445.082314][ T5172] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input25 [ 445.179802][ T5172] usb 4-1: USB disconnect, device number 54 [ 445.451275][T10931] overlayfs: failed to clone lowerpath [ 445.511121][T10931] overlayfs: workdir and upperdir must reside under the same mount [ 445.547187][T10931] overlayfs: workdir and upperdir must reside under the same mount [ 445.684790][T10936] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1277'. [ 445.948355][T10950] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1281'. [ 445.958108][T10950] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1281'. [ 445.967354][T10950] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1281'. [ 446.014633][T10951] netlink: 'syz.1.1281': attribute type 10 has an invalid length. [ 446.740147][T10953] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1282'. [ 446.750213][T10953] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1282'. [ 446.760517][T10953] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1282'. [ 446.807560][T10955] netlink: 'syz.3.1282': attribute type 10 has an invalid length. [ 448.155825][ T977] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 448.751248][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 448.751985][ T30] audit: type=1326 audit(448.699:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10974 comm="syz.0.1287" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f41a1b8eb69 code=0x0 [ 448.828038][T10976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1287'. [ 448.838960][ C0] Unknown status report in ack skb [ 448.865491][ T977] usb 3-1: device descriptor read/64, error -71 [ 449.103612][ T5172] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 449.125158][ T977] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 449.747475][ T5172] usb 4-1: config 0 has no interfaces? [ 449.795067][ T977] usb 3-1: device descriptor read/64, error -71 [ 449.828406][ T5172] usb 4-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.04 [ 449.842073][ T5172] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.859906][ T5172] usb 4-1: config 0 descriptor?? [ 449.983172][T11003] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1294'. [ 449.992911][T11003] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1294'. [ 450.041908][T11003] netlink: 'syz.1.1294': attribute type 10 has an invalid length. [ 450.095293][ T5922] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 450.122632][ T977] usb usb3-port1: attempt power cycle [ 450.861234][ T5908] usb 4-1: USB disconnect, device number 55 [ 450.937292][ T5922] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 450.975076][ T5922] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 451.015870][ T5922] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 451.043110][ T5922] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 451.075012][ T5922] usb 6-1: SerialNumber: syz [ 451.083105][T11009] gretap0: entered promiscuous mode [ 451.096724][ T5922] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 451.099183][T11009] vlan2: entered promiscuous mode [ 451.125372][ T5922] usb-storage 6-1:1.0: USB Mass Storage device detected [ 451.162776][ T5922] usb-storage 6-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 451.183188][ T5922] scsi host1: usb-storage 6-1:1.0 [ 451.812599][T11026] __nla_validate_parse: 1 callbacks suppressed [ 451.812617][T11026] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1301'. [ 451.950815][T11033] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 452.009832][T11026] bond2: entered promiscuous mode [ 452.055009][T11026] bond2: entered allmulticast mode [ 453.233117][T11052] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1306'. [ 453.242449][T11052] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1306'. [ 453.252207][T11052] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1306'. [ 453.293376][T11053] netlink: 'syz.2.1306': attribute type 10 has an invalid length. [ 454.741979][ T43] usb 6-1: USB disconnect, device number 28 [ 455.248378][T11067] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1311'. [ 457.441678][T11093] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1318'. [ 457.451607][T11093] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1318'. [ 457.460782][T11093] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1318'. [ 457.502859][T11094] netlink: 'syz.0.1318': attribute type 10 has an invalid length. [ 458.811383][ T5908] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 458.819514][ T43] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 459.007395][ T5908] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 459.019296][ T5908] usb 4-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 459.030817][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 459.041013][ T43] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 459.059038][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.235813][ T43] usb 6-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 459.245289][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.253488][ T43] usb 6-1: Product: syz [ 459.350780][T11102] IPv6: addrconf: prefix option has invalid lifetime [ 459.933461][ T43] usb 6-1: Manufacturer: syz [ 459.940150][ T5908] usb 4-1: config 0 descriptor?? [ 459.945582][ T43] usb 6-1: SerialNumber: syz [ 459.962617][ T5908] usb 4-1: bad CDC descriptors [ 459.973885][ T43] usb 6-1: config 0 descriptor?? [ 459.994904][ T43] usb 6-1: can't set config #0, error -71 [ 460.003301][ T43] usb 6-1: USB disconnect, device number 29 [ 460.860800][T11126] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1326'. [ 461.227897][ T5908] usb 4-1: USB disconnect, device number 56 [ 462.199268][T11134] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1330'. [ 462.209291][T11134] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1330'. [ 462.219072][T11134] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1330'. [ 462.250664][T11134] netlink: 'syz.2.1330': attribute type 10 has an invalid length. [ 463.530502][T11139] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 463.654892][T11155] overlayfs: failed to resolve './file1': -2 [ 464.409454][ C1] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 465.099977][T11176] ext2: Unexpected value for 'acl' [ 466.027128][T11173] wg1 speed is unknown, defaulting to 1000 [ 466.142554][T11188] kAFS: unparsable volume name [ 466.163393][T11185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1343'. [ 466.185372][T11185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1343'. [ 467.741718][T11213] openvswitch: netlink: Message has 16 unknown bytes. [ 467.974883][T11215] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1348'. [ 469.363420][ T9] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 469.739164][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 469.751478][ T9] usb 6-1: config 3 has no interfaces? [ 469.760391][ T9] usb 6-1: New USB device found, idVendor=0421, idProduct=0099, bcdDevice=9c.f0 [ 469.780043][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.115063][T11239] trusted_key: syz.2.1356 sent an empty control message without MSG_MORE. [ 470.127372][ T9] usb 6-1: Product: syz [ 470.131756][ T9] usb 6-1: Manufacturer: syz [ 470.136830][ T9] usb 6-1: SerialNumber: syz [ 470.545570][ T6003] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 470.789241][ T6003] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 470.906175][ T5922] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 470.958833][ T6003] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 471.150706][ T6003] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 471.171989][ T6003] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 471.185826][ T5922] usb 2-1: Using ep0 maxpacket: 8 [ 471.213375][ T5922] usb 2-1: config 0 has an invalid interface number: 191 but max is 0 [ 471.225079][ T5922] usb 2-1: config 0 has no interface number 0 [ 471.234292][ T6003] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 471.245324][ T6003] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.262038][ T5922] usb 2-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=f5.41 [ 471.274722][ T6003] usb 4-1: config 0 descriptor?? [ 471.280151][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.292032][ T5922] usb 2-1: Product: syz [ 471.301666][ T5922] usb 2-1: Manufacturer: syz [ 471.308948][ T5922] usb 2-1: SerialNumber: syz [ 471.317757][ T5922] usb 2-1: config 0 descriptor?? [ 471.534281][T11248] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1359'. [ 471.557749][ T5922] usb 2-1: MBOX3: Invalid descriptor size=18. [ 471.570084][ T5922] usb 2-1: USB disconnect, device number 52 [ 471.709963][ T6003] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 471.724746][ T6003] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 471.875360][ T43] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 471.985621][ T5922] usb 4-1: USB disconnect, device number 57 [ 472.027240][ T43] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 472.040123][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 472.052081][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 472.062474][ T43] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 472.075710][ T43] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 472.085255][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.098715][ T43] usb 3-1: config 0 descriptor?? [ 472.251630][ T9] usb 6-1: USB disconnect, device number 30 [ 472.405270][ T5908] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 472.445817][T11267] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1365'. [ 472.455202][T11267] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1365'. [ 472.464641][T11267] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1365'. [ 472.518835][T11268] netlink: 'syz.5.1365': attribute type 10 has an invalid length. [ 473.294788][ T43] usbhid 3-1:0.0: can't add hid device: -71 [ 473.303084][ T43] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 473.314732][T11270] sp0: Synchronizing with TNC [ 473.325994][ T43] usb 3-1: USB disconnect, device number 56 [ 473.424162][ T5908] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 473.434841][ T5908] usb 2-1: config 0 has no interface number 0 [ 473.442163][ T5908] usb 2-1: config 0 interface 188 has no altsetting 0 [ 473.452139][ T5908] usb 2-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=dc.ab [ 473.462999][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.628822][ T5908] usb 2-1: config 0 descriptor?? [ 473.673983][ T5908] ftdi_sio 2-1:0.188: FTDI USB Serial Device converter detected [ 473.774274][ T5908] ftdi_sio ttyUSB0: unknown device type: 0xdcab [ 473.879947][ T5922] usb 2-1: USB disconnect, device number 53 [ 473.899046][ T5922] ftdi_sio 2-1:0.188: device disconnected [ 473.937545][T11275] netlink: 'syz.2.1368': attribute type 1 has an invalid length. [ 474.005522][T11275] 8021q: adding VLAN 0 to HW filter on device bond4 [ 474.048698][T11275] macvlan3: entered promiscuous mode [ 474.058988][T11275] macvlan3: entered allmulticast mode [ 474.201532][T11275] bond4: entered promiscuous mode [ 474.208707][T11275] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 474.225484][T11275] bond4: left promiscuous mode [ 475.305043][ T9] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 475.362108][T11315] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1376'. [ 475.371906][T11315] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1376'. [ 475.381451][T11315] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1376'. [ 475.411731][T11315] netlink: 'syz.2.1376': attribute type 10 has an invalid length. [ 476.224477][ T30] audit: type=1326 audit(476.189:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11317 comm="syz.2.1379" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e79d8eb69 code=0x0 [ 476.719895][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 476.855578][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 476.879816][ T9] usb 6-1: config 4 interface 0 has no altsetting 0 [ 476.889944][ T9] usb 6-1: string descriptor 0 read error: -22 [ 476.896648][ T9] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 476.906499][ T9] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 476.923395][ T9] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 477.157911][T11326] tipc: Enabling of bearer rejected, failed to enable media [ 477.266141][ T9] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 477.288172][ T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 477.305366][ T9] usb 6-1: media controller created [ 477.377774][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 477.409986][T11334] omfs: Invalid superblock (0) [ 477.425693][T11332] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 477.457187][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 477.585361][ T9] usb 6-1: USB disconnect, device number 31 [ 478.682083][T11346] random: crng reseeded on system resumption [ 478.890991][ T5923] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 479.195070][ T5923] usb 6-1: Using ep0 maxpacket: 32 [ 479.207485][ T5923] usb 6-1: config 0 has an invalid interface number: 219 but max is 0 [ 479.237804][ T5923] usb 6-1: config 0 has no interface number 0 [ 479.260745][T11356] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1389'. [ 479.270201][T11356] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1389'. [ 479.279378][T11356] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1389'. [ 479.297143][ T5923] usb 6-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 479.315083][ T43] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 479.334220][T11357] netlink: 'syz.1.1389': attribute type 10 has an invalid length. [ 479.355234][ T5923] usb 6-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 479.427568][ T5923] usb 6-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 479.511261][ T5923] usb 6-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 479.592490][ T5923] usb 6-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 479.703552][ T5923] usb 6-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 479.932256][ T5923] usb 6-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 480.006541][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.063227][ T5923] usb 6-1: Product: syz [ 480.078116][ T5923] usb 6-1: Manufacturer: syz [ 480.082774][ T5923] usb 6-1: SerialNumber: syz [ 480.111022][ T5923] usb 6-1: config 0 descriptor?? [ 480.117691][T11344] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 480.125273][T11344] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 480.216667][ T43] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 480.227894][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.237004][ T43] usb 3-1: Product: syz [ 480.242797][ T43] usb 3-1: Manufacturer: syz [ 480.248804][ T43] usb 3-1: SerialNumber: syz [ 480.313565][ T43] usb 3-1: config 0 descriptor?? [ 480.446088][ T5923] etas_es58x 6-1:0.219: Starting syz syz (Serial Number syz) [ 480.644749][ T5923] etas_es58x 6-1:0.219: could not parse product info: '424242424242' [ 480.781172][ T43] usb 3-1: USB disconnect, device number 57 [ 480.833778][ T8278] usb 6-1: USB disconnect, device number 32 [ 480.849898][ T8278] etas_es58x 6-1:0.219: Disconnecting syz syz [ 481.285101][ T43] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 481.425157][ T43] usb 3-1: device descriptor read/64, error -71 [ 481.443039][T11378] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN PTI [ 481.455069][T11378] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 481.463492][T11378] CPU: 0 UID: 0 PID: 11378 Comm: syz.5.1396 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 481.473643][T11378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 481.483880][T11378] RIP: 0010:iter_file_splice_write+0xa9b/0x1000 [ 481.490412][T11378] Code: 00 74 08 4c 89 f7 e8 14 5b e0 ff 49 8b 1e 49 c7 06 00 00 00 00 48 83 c3 08 48 89 d8 48 c1 e8 03 49 be 00 00 00 00 00 fc ff df <42> 80 3c 30 00 44 8b 64 24 04 74 08 48 89 df e8 e1 5a e0 ff 4c 8b [ 481.510583][T11378] RSP: 0018:ffffc9000c617820 EFLAGS: 00010202 [ 481.515057][ T8278] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 481.516723][T11378] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff88802fea8000 [ 481.516741][T11378] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 7ffffffffffffffa [ 481.516754][T11378] RBP: ffffc9000c617a30 R08: ffff88805999074f R09: 1ffff1100b3320e9 [ 481.516770][T11378] R10: dffffc0000000000 R11: ffffffff81fe9d40 R12: dffffc0000000000 [ 481.557265][T11378] R13: 7ffffffffffffffa R14: dffffc0000000000 R15: ffff888034432828 [ 481.565327][T11378] FS: 00007f0b6524c6c0(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 [ 481.574272][T11378] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 481.580962][T11378] CR2: 0000000005ffffe8 CR3: 0000000028b50000 CR4: 00000000003526f0 [ 481.588960][T11378] Call Trace: [ 481.592377][T11378] [ 481.595506][T11378] ? __pfx_iter_file_splice_write+0x10/0x10 [ 481.601478][T11378] ? rcu_read_lock_any_held+0xb3/0x120 [ 481.606947][T11378] ? __pfx_iter_file_splice_write+0x10/0x10 [ 481.612855][T11378] direct_splice_actor+0x101/0x160 [ 481.618062][T11378] splice_direct_to_actor+0x5a5/0xcc0 [ 481.623556][T11378] ? __pfx_direct_splice_actor+0x10/0x10 [ 481.629185][T11378] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 481.635082][T11378] do_splice_direct+0x181/0x270 [ 481.639929][T11378] ? __pfx_do_splice_direct+0x10/0x10 [ 481.645702][T11378] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 481.651619][T11378] ? rw_verify_area+0x258/0x650 [ 481.656490][T11378] do_sendfile+0x4da/0x7e0 [ 481.660926][T11378] ? __pfx_do_sendfile+0x10/0x10 [ 481.665122][ T43] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 481.665858][T11378] ? __se_sys_futex+0x36f/0x400 [ 481.675026][ T8278] usb 4-1: Using ep0 maxpacket: 16 [ 481.678392][T11378] __se_sys_sendfile64+0x13e/0x190 [ 481.678426][T11378] ? __pfx___se_sys_futex+0x10/0x10 [ 481.685697][ T8278] usb 4-1: config 1 interface 0 has no altsetting 0 [ 481.688740][T11378] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 481.688776][T11378] ? do_syscall_64+0xbe/0x3b0 [ 481.696815][ T8278] usb 4-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice= 0.40 [ 481.700794][T11378] do_syscall_64+0xfa/0x3b0 [ 481.700825][T11378] ? lockdep_hardirqs_on+0x9c/0x150 [ 481.706946][ T8278] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.711400][T11378] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.711431][T11378] ? clear_bhb_loop+0x60/0xb0 [ 481.711450][T11378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.711471][T11378] RIP: 0033:0x7f0b6438eb69 [ 481.721108][ T8278] usb 4-1: Product: syz [ 481.725266][T11378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 481.725290][T11378] RSP: 002b:00007f0b6524c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 481.725309][T11378] RAX: ffffffffffffffda RBX: 00007f0b645b5fa0 RCX: 00007f0b6438eb69 [ 481.725323][T11378] RDX: 0000000000000000 RSI: 000000000000000b RDI: 000000000000000a [ 481.725333][T11378] RBP: 00007f0b64411df1 R08: 0000000000000000 R09: 0000000000000000 [ 481.725344][T11378] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000000 [ 481.725355][T11378] R13: 0000000000000000 R14: 00007f0b645b5fa0 R15: 00007ffde2723358 [ 481.725378][T11378] [ 481.730813][ T8278] usb 4-1: Manufacturer: syz [ 481.738792][T11378] Modules linked in: [ 481.739397][T11378] ---[ end trace 0000000000000000 ]--- [ 481.750270][ T8278] usb 4-1: SerialNumber: syz [ 481.758712][T11378] RIP: 0010:iter_file_splice_write+0xa9b/0x1000 [ 481.806389][ T43] usb 3-1: device descriptor read/64, error -71 [ 481.810175][T11378] Code: 00 74 08 4c 89 f7 e8 14 5b e0 ff 49 8b 1e 49 c7 06 00 00 00 00 48 83 c3 08 48 89 d8 48 c1 e8 03 49 be 00 00 00 00 00 fc ff df <42> 80 3c 30 00 44 8b 64 24 04 74 08 48 89 df e8 e1 5a e0 ff 4c 8b [ 481.890167][T11378] RSP: 0018:ffffc9000c617820 EFLAGS: 00010202 [ 481.896331][T11378] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff88802fea8000 [ 481.904513][T11378] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 7ffffffffffffffa [ 481.912728][T11378] RBP: ffffc9000c617a30 R08: ffff88805999074f R09: 1ffff1100b3320e9 [ 481.925373][ T43] usb usb3-port1: attempt power cycle [ 481.973522][T11375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.982883][T11375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.988718][T11378] R10: dffffc0000000000 R11: ffffffff81fe9d40 R12: dffffc0000000000 [ 481.997314][ T8278] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input27 [ 482.000019][T11378] R13: 7ffffffffffffffa R14: dffffc0000000000 R15: ffff888034432828 [ 482.009747][ T5194] bcm5974 4-1:1.0: could not read from device [ 482.019678][T11378] FS: 00007f0b6524c6c0(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 [ 482.024141][ T5194] bcm5974: mode switch failed [ 482.037065][T11378] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 482.043715][T11378] CR2: 00007fca03784198 CR3: 0000000028b50000 CR4: 00000000003526f0 [ 482.055653][T11378] Kernel panic - not syncing: Fatal exception [ 482.071945][T11378] Kernel Offset: disabled [ 482.076281][T11378] Rebooting in 86400 seconds..