last executing test programs: 9m43.91128129s ago: executing program 32 (id=358): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d214"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r1, 0x24, &(0x7f0000000040)={0x2, 0x2, 0x8, 0xfffffffffffffff8, 0xffffffffffffffff}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1b, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a0300000000f5ffffff00010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) socket$isdn_base(0x22, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2m19.569382542s ago: executing program 33 (id=1949): syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x213b2000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x8}]}}, 0x0}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_control_io(r2, &(0x7f0000000880)={0x2c, &(0x7f00000005c0)={0x20, 0x11, 0x67, {0x67, 0x21, "d3a91e767417d006b1c1545b6603aed755d204be83e78ff41d3531a63400b963366aa37ef45da2f1899042ce7aca40f99b73d64328c211a300088e70caba93070346c989a4d5f2baeb3af9d34bfb714c5efbe086a4eb31e849b50b409b1839476f35627f75"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1001}}, &(0x7f0000000d80)={0x0, 0xf, 0x102, {0x5, 0xf, 0x102, 0x5, [@generic={0x3, 0x10, 0xb}, @wireless={0xb, 0x10, 0x1, 0x4, 0x60, 0xff, 0x0, 0x1, 0x6}, @generic={0xd0, 0x10, 0x1, "02447d08334bea7b1d94d35f8620b1a756e793ca3a663e4917f621b68f2e0b08b094da0a25f2d4c19ef1c368e16c11bd31d59bbe0dfcc0fb33291a7f013e709db7e6fea962557c49564b1796302aeac716b688cd12f18e817195551902b1a63bf397a3fa45810978807fd215b7a0e6753ae6908963c66b5cd85de553b3f56068c126ed6d832999b776b625c4c5e65c2118cda377a10873bd5a461df95eaf30e3de5c36f623c957cd5d6cdd353ac71eae4f2b91999eb9bd8f5f48f9b8810b7f3c4b04c83f564b36aac8a61842b0"}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x1, 0x1, 0xe01}, @ssp_cap={0x18, 0x10, 0xa, 0xfb, 0x3, 0x9, 0x780, 0x1ae3, [0xc000, 0xff0000, 0xc00f]}]}}, &(0x7f00000004c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x8, 0x5, 0x9, "f29df053", "871f4628"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf9, 0x8, 0x9, 0x4, 0x0, 0x9, 0x7}}}, &(0x7f0000000cc0)={0x84, &(0x7f00000008c0)=ANY=[@ANYBLOB="0af771ce0000000000fc51e69242543c1956"], &(0x7f0000000900)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000980)={0x20, 0x0, 0x4, {0x2}}, &(0x7f00000009c0)={0x20, 0x0, 0x8, {0x1000, 0x10, [0x0]}}, &(0x7f0000000a00)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000a40)={0x40, 0x9, 0x1, 0x81}, &(0x7f0000000a80)={0x40, 0xb, 0x2, "3bc8"}, &(0x7f0000000ac0)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000b00)={0x40, 0x13, 0x6, @random="ed30b532b1bc"}, &(0x7f0000000b40)={0x40, 0x17, 0x6, @random="c1af5482199c"}, &(0x7f0000000b80)={0x40, 0x19, 0x2, "3aab"}, &(0x7f0000000bc0)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000c00)={0x40, 0x1c, 0x1, 0xd5}, &(0x7f0000000c40)={0x40, 0x1e, 0x1}, &(0x7f0000000c80)={0x40, 0x21, 0x1, 0xf1}}) waitid$P_PIDFD(0x3, r0, &(0x7f0000000640), 0x0, &(0x7f00000006c0)) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000040)={0x4, 0x0, 0x3, 0x1d, 0x100, &(0x7f00000000c0)="387ed7626d850509a2d6c1aa38f15cd00f85c263cb226db671261fff7ce9c555f18dafae3530db6dd493f2a3cc88721b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef494c89092883b902a41cd75387ef6f7bc7d460d5e665f398ff95596dc94ec97003c7e6f3c82fbd8de6e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1aed6e850ecb3421143c5c4ded0f06affc524dcf3208272619b6a952db5bc96141b26c54d13c7a5416287a3b6f7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8da0dbf5e20d604413ed2ddf9bcbf881caf811852806175d63892a15234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa0284abe90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695efbd649f42f310859122c0d2c1e558dc6586958a283762386ecf369274e43003a0fdff59ea515eb44504901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc5092548feaef7204a12cece59181fcb5bad8c24bd9f8f78d17ab82831325501e80d899e9252f99d3a2666343392fda11504800f4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd333b30d3ce2f50dddeea3447aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b68986af3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9000400002f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d01000100df6f40a80ace2bb8a2aad3b0c66915927db4233181943d88c0c76d5969e2043db5bd77fd60ba0f013139929ccfec965c0c769785a4d23332ba1f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fd81bc31152538db50f47dc38ba908a0d808687e478a609fe0daa02d4e9c618b99266e7f2e98597e2813e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d472dd0e1338688ba782b41bde141f99c4894ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e87dde71929f918b98c4cbfcb11a90139264a9ee8081973167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d2195ff9c6320c85bddc42915e4f3a5db642447bc2195a3d64e04c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e0e32b75ce814731c542091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00"}) syz_usb_ep_write(r2, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES16=r5, @ANYBLOB="01000000000000000000170000000c0006"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000440)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={0x2, 0x1, 0x0, 0x2, 0x2, 0x0, 0x70bd2c}, 0x10}, 0x19}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) socket$inet(0x2, 0x800, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000050) 1m50.807647874s ago: executing program 34 (id=2261): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001800010000000b00000000000a000000fe0000000000000014000500fc02000000000000"], 0x30}}, 0x0) 1m42.106641603s ago: executing program 35 (id=2215): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETLED(r4, 0x4b32, 0x6) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002380)='/proc/vmallocinfo\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000200)={0x2020}, 0x2020) ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f0000000080)=0x32) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x1, 0xd00) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r6, 0x40045010, &(0x7f0000000080)=0x8079) write$dsp(r6, &(0x7f0000000040)="c7", 0x1) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_devices(r5, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000140)=ANY=[@ANYBLOB="62a02a3a3409777777"], 0xa) 1m37.250981274s ago: executing program 36 (id=2249): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) r1 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000080)={0x8, 0x9, 0x10000007}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, 0x0) r6 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x6) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000b80)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1a, 0x1b, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit]}, &(0x7f0000000540)='GPL\x00', 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @tracing=0x1a, r0, 0x8, &(0x7f0000000640)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0x2, 0x8000, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000000001010000000000000000100008500000002000000000300000000000000000000000000000901"], 0x0, 0x4a}, 0x28) fcntl$lock(r7, 0x6, &(0x7f0000000000)={0x1, 0x1, 0x2, 0x3}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x8, 0xf, 0x0, &(0x7f0000000200)='syzkaller\x00', 0xa, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) 1m33.036153296s ago: executing program 37 (id=2278): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x6, &(0x7f0000000200)=0x11) mmap(&(0x7f00004d4000/0x3000)=nil, 0x3000, 0xb635773f06ebbee6, 0x12, 0xffffffffffffffff, 0xdb713000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bf"], &(0x7f00000004c0)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x7) ioctl$PIO_UNIMAPCLR(r3, 0x4b68, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x10001, 0x0, 0x0, 0x4, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x7fffffff, 0x2}, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffe) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="18020000010000000000000001000000850000002000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000950000000000000081b6aa30e105e054565856a66c8f87c9a0112a6bd3a88433a09189c24f6266f6e892e21356e13fde196f7339f5933efeaa9a34ee25a9bbab43e583ca518db44d5fc7c93dd9ac58eb016e2b6c"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1m22.481594785s ago: executing program 38 (id=2322): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x80, 0x1c, {0x200f, 0x3, 0x9, 0x2, 0x7, 0x7ffa, 0x3, 0x3, 0x6, 0xfffc, 0x2, 0xf8}}, 0x0, 0x0, 0x0, 0x0}) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) r0 = socket(0x2a, 0x2, 0x0) accept4$nfc_llcp(r0, 0x0, 0x0, 0x800) r1 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000300)=0xd0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000100)=0xf0) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x3, 0x120}, @l2cap_cid_signaling={{0x11c}, [@l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x8, 0x7}}, @l2cap_info_req={{0xa, 0x8, 0x2}, {0x7}}, @l2cap_conf_req={{0x4, 0x3, 0x42}, {0x9, 0x9, [@l2cap_conf_rfc={0x4, 0x9, {0x3, 0x9, 0xf9, 0x8, 0x3, 0x2}}, @l2cap_conf_efs={0x6, 0x10, {0x0, 0x1, 0x81, 0x401, 0x0, 0x200}}, @l2cap_conf_efs={0x6, 0x10, {0x6, 0x0, 0x81, 0x1, 0x7, 0x78}}, @l2cap_conf_mtu={0x1, 0x2, 0x5}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x0, 0x1, 0x6, 0xcc, 0x4f97}}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x7, 0x2}, {0x5}}, @l2cap_move_chan_req={{0xe, 0x58, 0x3}, {0x5, 0x7f}}, @l2cap_info_rsp={{0xb, 0x6c, 0xb8}, {0x6, 0xd, "5f7e8faf6f5c5949c75594e77b5a1076b248df8060b9696bc2c616a43adce185c3f0269a96d5c83d7e29640f9dd41d34a6e572ddfe13f5419d1a4bc0254a47d2bec03831439755d8ceeebf279f39541fc07f03493b0d9725c0b8312def41a27946eebf8cb0af578e7b515378f65676442e9402c7098a5840cdb1f101594a1317247074b37b2689a6866e9b4e70c527a0b8f37c964b88da569eefeeebb298e373486440d935250a06eb31751778ab33a2fdd01ced"}}]}}, 0x125) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0700000004000000180000008e02000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000001a0000000000faffffff0000002000c83bef4692a108db576beb437ce36ae8d0b8f8c502641c9a5bdeaf7c7767d2920c19e2036d2c840100b113ee07ac8c64bf31369055000000000000"], 0x48) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4081) socket$rxrpc(0x21, 0x2, 0xa) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) 1m14.424270705s ago: executing program 1 (id=2460): bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1, 0x4, 0x9fd, 0x84, 0x105}, 0x50) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x9) r0 = mq_open(&(0x7f0000000880)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05V\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x22043, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r1, 0x0, 0x1}, 0x18) chmod(0x0, 0x89) mq_getsetattr(r0, 0x0, 0x0) 1m14.25680198s ago: executing program 1 (id=2462): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) prlimit64(r0, 0x7, &(0x7f0000000000)={0x3, 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$binder(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1008008, &(0x7f0000000040)={[{@max={'max', 0x3d, 0x1}}]}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, 0xffffffffffffffff, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000002c0)={r4, 0x7, 0x30}, &(0x7f00000000c0)=0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={r4, 0xf3a}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) memfd_secret(0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r5, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) 1m13.303139004s ago: executing program 1 (id=2463): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x44000) 1m13.24548167s ago: executing program 1 (id=2465): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r2, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x1b}}}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x800}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x2}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x40) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020600) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008a02"]) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_open_dev$sg(&(0x7f0000000400), 0x2, 0x0) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{0xc0010015}]}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan0\x00'}) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='2\x00\b\x00', @ANYRES16=r8, @ANYBLOB="000028bd7000ffdbdf250b00000006000a00a2aa000006000a00feff0000"], 0x24}}, 0x20040004) r9 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000440), 0x2000, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r9, 0x80044dfb, &(0x7f0000000480)) pselect6(0x40, &(0x7f0000000080)={0x3, 0x5, 0xf, 0x5, 0x1000, 0x7, 0x0, 0x80}, &(0x7f00000000c0)={0x38, 0xd, 0xffff, 0x7, 0x3ff, 0x9, 0x2b27a4b1, 0x1}, 0x0, 0x0, 0x0) 1m12.970834116s ago: executing program 1 (id=2466): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1d, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000780)=@generic={&(0x7f0000000740)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x17, &(0x7f0000000580)=ANY=[@ANYBLOB="180000008100000000000000090000001801000020786c2500000000002020207b000007010000f8ffffffb702000008000000b703000002000000850000000600000040850200100000000ca1fefff01822312fba2368ffffff7f5c0400ffffffff181100"/115, @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000183900000300000000000000000000003419f8fffcffffff1800000006000000000000001ade726b9500000000000000"], &(0x7f0000000180)='GPL\x00', 0x4, 0xa9, &(0x7f00000004c0)=""/169, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000007c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000800)=[{0x3, 0x81, 0x5, 0x5}, {0x1, 0x1, 0x10a, 0x8}, {0x0, 0x4, 0x3, 0x3}, {0x3, 0x1, 0xe, 0xb}, {0x2, 0x2, 0x2}, {0x2, 0x4, 0x7, 0x6}, {0x3, 0x4, 0x2}, {0x1, 0x1, 0x8, 0x4}, {0x0, 0x2, 0xf, 0x5}], 0x10, 0x4}, 0x94) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f00000002c0)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) close_range(r8, 0xffffffffffffffff, 0x0) 1m8.195140161s ago: executing program 39 (id=2407): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/comedi4\x00', 0x101000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0x541b, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$rdma_cm(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'dummy0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) 1m6.420308625s ago: executing program 2 (id=2492): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x40002, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000100)=0x1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)=0x3) write$binfmt_script(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x2, 0x4, 0x5fa3}, 0x50) socketpair(0x2, 0x80000, 0x80000001, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r4, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r4, &(0x7f0000000140)="aa", &(0x7f0000000000)=@tcp6=r5}, 0x20) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r4, &(0x7f0000000600), &(0x7f0000000340)=@udp6=r7, 0x1}, 0x20) 57.946377422s ago: executing program 40 (id=2466): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1d, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000780)=@generic={&(0x7f0000000740)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x17, &(0x7f0000000580)=ANY=[@ANYBLOB="180000008100000000000000090000001801000020786c2500000000002020207b000007010000f8ffffffb702000008000000b703000002000000850000000600000040850200100000000ca1fefff01822312fba2368ffffff7f5c0400ffffffff181100"/115, @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000183900000300000000000000000000003419f8fffcffffff1800000006000000000000001ade726b9500000000000000"], &(0x7f0000000180)='GPL\x00', 0x4, 0xa9, &(0x7f00000004c0)=""/169, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000007c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000800)=[{0x3, 0x81, 0x5, 0x5}, {0x1, 0x1, 0x10a, 0x8}, {0x0, 0x4, 0x3, 0x3}, {0x3, 0x1, 0xe, 0xb}, {0x2, 0x2, 0x2}, {0x2, 0x4, 0x7, 0x6}, {0x3, 0x4, 0x2}, {0x1, 0x1, 0x8, 0x4}, {0x0, 0x2, 0xf, 0x5}], 0x10, 0x4}, 0x94) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f00000002c0)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) close_range(r8, 0xffffffffffffffff, 0x0) 57.17323879s ago: executing program 41 (id=2469): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1d, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000780)=@generic={&(0x7f0000000740)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x17, &(0x7f0000000580)=ANY=[@ANYBLOB="180000008100000000000000090000001801000020786c2500000000002020207b000007010000f8ffffffb702000008000000b703000002000000850000000600000040850200100000000ca1fefff01822312fba2368ffffff7f5c0400ffffffff181100"/115, @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000183900000300000000000000000000003419f8fffcffffff1800000006000000000000001ade726b9500000000000000"], &(0x7f0000000180)='GPL\x00', 0x4, 0xa9, &(0x7f00000004c0)=""/169, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000007c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000800)=[{0x3, 0x81, 0x5, 0x5}, {0x1, 0x1, 0x10a, 0x8}, {0x0, 0x4, 0x3, 0x3}, {0x3, 0x1, 0xe, 0xb}, {0x2, 0x2, 0x2}, {0x2, 0x4, 0x7, 0x6}, {0x3, 0x4, 0x2}, {0x1, 0x1, 0x8, 0x4}, {0x0, 0x2, 0xf, 0x5}], 0x10, 0x4}, 0x94) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f00000002c0)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) close_range(r8, 0xffffffffffffffff, 0x0) (fail_nth: 1) 51.311670462s ago: executing program 42 (id=2492): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x40002, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000100)=0x1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)=0x3) write$binfmt_script(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x2, 0x4, 0x5fa3}, 0x50) socketpair(0x2, 0x80000, 0x80000001, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r4, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r4, &(0x7f0000000140)="aa", &(0x7f0000000000)=@tcp6=r5}, 0x20) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r4, &(0x7f0000000600), &(0x7f0000000340)=@udp6=r7, 0x1}, 0x20) 48.035997146s ago: executing program 3 (id=2585): r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/smackfs/direct\x00', 0x2, 0x0) writev(r0, &(0x7f0000002680)=[{&(0x7f00000001c0)='-', 0x1}], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r2, &(0x7f0000000440)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={0xffffffffffffffff, 0x4000, {0x0, 0x0, 0x0, 0x2ead, 0xf4f, 0x0, 0x0, 0x0, 0x8, "339f8207be82b3f78449f73eca0539e4ff740250ceaac510c3b3d741dd17c1c50d38127d218ef1e83323791c58d665000200dfff00", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174ff10000000000000010e200", [0x0, 0xfffffffffffffffd]}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_clone(0xa04c280, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x34, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000092df5510ac05269289b201020301090222000100000000090400000103e900000907000000000000000705d77b5d"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg$sock(r1, &(0x7f0000002e40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="e6a8702e03df353803111ba4367d1742237044fe4acd6b00307e5fc3045861974684fcc4b447164b7a3c0e13c0f8ad4c04b40e80d354effecf3e383be24dd3515fbe20c6d5f716d9aad416181f41", 0x4e}], 0x1, &(0x7f0000000180)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0x48}}, {{&(0x7f0000000300)=@phonet={0x23, 0x10, 0x5, 0x93}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000380)="a18e03239348878382e2f7506a3aed04abbca9efb0f2f9da0c597c6f331b500ca72d9de7190a60a73898bdbd03b92bdd9ab1ceb09bc501bf1f13e17294877b5585550a63219a79ff31939785d92cb27f296a604d96595b04d3", 0x59}, {&(0x7f0000001480)="ec65f11f4304595e2cb216e8a1bb701c555ba509b007dfaa1c3d2e83c79d41e92e1552a71c62f292e304c93328bfcf47ba5edc521c86fd3e9888682c996c45fa004f79a3aa647ec1cd42b95bde22582422e55d149e0efd7427dcd4516540192d43", 0x61}, {&(0x7f0000000200)="98164b88c31d554c41755433e57f3c809c04eaf48e4024dd4d76c2794c25", 0x1e}, {&(0x7f0000001500)="17ec39944a0b34f33b67a136976000cb00b1a499d3655b4f18e03939b1d58939c299d438cc0152a5117612dd7ce99d6d0a43d9b1f8886ba4d942b07bf05291f122a353cdba6ec21d93a372eaa37863fa79e76f5f721755843ce89ea0147833c7f09faddc23751e41a987a2019660860b365c6ea37b8e6202f43c6131c6d7dcfd16aa2dd341f06236f22fdf4eab95", 0x8e}], 0x4}}, {{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f00000015c0)="60f62ced9c8dfd244a7b43de7a0c7d2506e52f13fc0423bfd76bdc968bd3118786205b03e25ca81e2a43b417dc980e8405fe668ab8bca5c7e0490c2863227dd330a3d7bd42938089aa492c7e9b6309827fed016571a55e857139cef9dcb5adef716527000902c4c153bb87926b39db37b152e02cabfa7d5d4042830b2e2f5c048e097fc0a768d1b4f72305246248eb1dd02a10972e2cb375c0e84a3170e5d9ecdb8226f90074e21cb4257fbadd943870194e419bf01b5b50076ab132759ffa78f54c00746303bc24050a1f56c76afef749d43629ae6ec7b752a40b44b929e38a918e2b20ee531a64ef01150e59efb72afe1145fa44a79b1fca8299a6065b1fcd1bfdbcb36263fa9fb83c6435f9dbf38c0a988feaaaa0472801e42d128f15d17ee526f81086918c9f145dc0e7faac6d8a86b7b3f288bc895a9e54ae156473f16a89d92aebeba52197e7244d668690d493bcd25e48da98ee26935b500c29b8a13706468b424ea0bbb12d8e9bc18cc0b977229a24f748c361a114704284d104c243644bbe2527ac4af601eaa601ccfc7116606d2cd7e4c94d2fc9953202988925c06f366b29c47290ac9358ff96ba34032e391df77b2de5f31f9c50296aaf6bd55d4d66c403143c40f99d95819e6c09e905ade8876816999a1c25d10bd0fb603d645398ed1762e7209d418c67a518f1f5e5dd369fa233cbd004015c0b58e80be83f96a2ea87aac097edb1bca53cfad4158e8f389160254c067203b2b64ca5594d0ae18fd477884ab4bf5cc8d5cdbf6c38479d26cf80b38727ec2620931d559e27fced89acf053ba8260369b6a584338b4e1ccbfcb5aca3a50b6ce8036104fb2f4358ae8bffbd5d7bc38a2d739cb18a6dda71c355a8847715f931c0a2526949d4740977e9d0754f1e28be4c9871f1ce089c742cad577e2cc732a3f0e120a244acfa2b9372a6f6b6553f879f514ce66a10ca4ad709bdccf23f702e56252dc4c67237493611e017df2a747da23e395a38aa387af2e9370fe919a813b20a1b0cdc90e770f2ca82fd0e84e91402af56e18e77e0e8f64301c43155ce1868bbdd88bf1ddd1670430a01616e784298117e8ed207b018dd73edba306119e5863ee1adcf44d0ada90adf463e2710c7d22097db6a45096de18b883e650020764680d8ef6a3f7c9d5c947bdd4ceec17ee3b2fed0d0dc9260e3283f097eeda4ce3cf4271b46205d0df89732ebdc4da09f332b62feb423fffce19d2699b1d00bd1dd0e9c9e1e925c2cd1546e119d31174f0ddf120d30228cef74b7026c3dd4b80df92deeb920e4a12a06db5c01c03645b4e8d74999af9de8c74187f0407598be753ca023d8607d912eb38b3ea7d8ad425908023df9c05de460eb85866c4de94bbb71ca8b59a65ce07d26e54ba1c48889c6be2226ead3fdf6ee43b048df91e171727732c8ef73ea7ee44fa8df48ed4c1f0398521780c8e2016ee5f7f5e860a3584d553ecc754c27dc96752db5317e3ffae34d9015b24c5fafaf262f9c38dfdff97dd89f205def409a42fcc2f1a6a06ed4393cb0d2580ec89d400756b7a89a4d2ee74f99317f8f54d60c8f8b92eb12fdc8c09890c3c45caf1950970e9987bc437ddbca97f5b88394d208ea3905bb44fdc5d86f29da9351931c2e99c95f96941c0379484fa47befafe1557a43bc4e1463e821c4aeb212447ef17d26cc780fb6dba32db849dc44c8f2e6874341355dcc3922ebf8c951ae464aef54745c0fb5bdc1ef12fb5a7b87de44576c4acc0ac57a66a79853f3cc495232d10d1a7e536878f72c7aa7eec47b97de298a50faa6ff24d16910d3b41933003e3555fdfd75d1786d7a6528c616ddf2f03b4770c60fd502d5210a8b9e88f52f84a2df7fac2dae5b2653acfd68acf25323d09279b92caabdc8e40c1d2f70bec5d0398085fe87330c6e873cf51a399175dbdf0d9301582907128fb708ce2813774f6db3707d45c34c2ce34eff7a4e83192d4cc26b7644c7aecd0b4ffc52636ffd9d02c39462676abb75740c59381944c2ce3078c305a6ac85559ae72c372075488210c47db94d3b2bb9322525fbba0842918cfa0459a8445d576ad6491b389078b8efd81479dae72dd81affea855760309277b0b8e26dacf6d500ece20d67abaa5b23dc134d3848aa3274a0c632aced3e035cd7d87680139ebebc1551f188740970957b02514b1c97d346a5b0f79c79a0916ce8e13c954e8ebab6727756cfd73be76126dd07325dce5e9092d506e82f520ff1c9b4bb5de226d4ed01cf245370e04a121442b288be9c3f3b5b3ee61ee4a934b479396547648f2b622f8f1c9b0273774ac50598e9b8cc6f6fd4e5c533744b53d5e2d135aeb403371020df153c8ae2b8dc72f1f7af24a7a83ad3df2cb052b087e00f86861907d98faeb0cd3b90180d501e47cf7abe40e9a44cda706da6afca1e8e905010946028e489cac5f9b016a76be213f8ade15487cb23256e3ec3cc354ab1ca012a252fe4e3a07a29c528a9035cc1018a1878f1c8fa4e593c9679475b9ba0ae2fcf8b4cac9264494f7854e16c2f7083a4507646ef31dc645f3e364166fff7d8bc47af1755cacf3f6f1295d2b48ff5d144e0e253106ddda1dcf2ee9e2b9343abe2d7dcbcc475e6e48691503a62331d1c481823d6e9535f84f0939feb4f19d4731ee9b1ad8005400f1f48191f22de9ab276bf46bfd1f9909ae5a5fa9e02bececb9b156dfc9dfd69eb637eca52f8ee23559efed3f9da56e41d998c078fbeb34b463c1ea26ced8ba458035feb7632ea1865fe0dc9257650cca3cb06cd05e3ec6da1592793b553796b45a8a8712dff37c20f1d95e3d08d0c237945047cd943e42e5d8a4d659021931b2f87d19ec169380e463c7884e09568fff9b23309eb7743c5840730b4fe5753d17a805d0bc1d96c602e576cfab705dec78a350980a782e92984ed4ca4d39e5a08257f97deaefa46c81c52973eccef60baa9c4c672d6652c40aeb3b29de928215abfbf34ae88e94f7f66f92b2086ef4916ad27337e8e4dbf1af582d82bb2959568b1867907995bd484e6c45a065980d6ab00f6abb1b9b08fb77bef0c0dc57a987c17f1a58d368563d59bc2cd733c4b3e803ee25bae1c62eaa7e810ece10acec768a331ecfcf7d9d0c79e08c4cd3eac18e6d34e124484bae75351db35725850e8704bb06609408d3ea1733a32e06024c34e410adc2ccc71c51aa334bc59e717ad3d028e718f6f821067104539620d386c66fa5c38244f59493794dc55806e704419cd35424b174b858b850eb581aea2943e51d8370cd5d0580cb03eebcd23ab8fa98d83e5202803750d1222cea13c9eb18f7664435403e9bc10d93687b713b08fdae46eed7f8623363ddab73cb456d3767a8746288c0a1499ed9f368467dd19538256258c24eabdbe42bf46091f1af471f9c7efbcca7e8953bd313e63715c1440160a139c7e7649a6610c6cd16f1e23484a490ad043a8c9d90fc8639f7a37a2321316c04296005f7006fff034c3ca5e2e4c6946d1c84c01be43e687ca725d33fc28061b5731675345a9ca0111f55441e17365e1aaf40c0f4bfa3c88a83f8e5d8eaeb1cfc53f15aaa52aa99208b6344dfbbac69e96014e12dd56a32ee7a65f98dcb47a4a37be672971af3592a58af6cf3ce7e4c402583ef3b926d4bc927ae5180dd9d70a5954fc0da2572a5612bc5a2fdef8ee8200ce641c21c2875f985ed2cfb9e10747f304bd3bf8025d41cb685c8ca0898d1768d8e6c9e8ba451b7c3b0bbab4e10ae451ea557684b8350c313b6dbbe0edb76fa623b7c3d743200bfaecad750c97795fbe6bc4c551700fc86d3050bcdef9ead09662e3a29a5524befaba974f7e07f98db9592ce8493ff8e394266970b8ef4a5a4ed0d3cf6a6589c82bf7696fc6dfd2e25e7b241086a518408e13f333defd2ea1dd10f1f71ab188d60ed76fecbdf9651b6ed1897fd4d7ccf9fbe48abcedcd911d6de19200529d3b96730384fbb6aefcb38b8deb1eea6b6f67fc2642788fbff29c9ecc694e8cc38a7b14fddbef3f78984add52d57da53c6117ad029fa8665ee4b32715d6c128458be6b009d3f75ce1875011605074733217c0c195973f36b43d4f7c426e06739ceeb2c229d890967dbedf6280246c457db8fa9d1aedaff906c941e127cabd7334e710d954d6ed556e61ac8fde372cc0f965eebd278b6ef472fbccb3c25570e62aa6878f80e0e097b358c8401c8619d0751c6163519e0dba054e2209b37db6c5e8667d4b614fbd031f14c68f298e920219bb92d746ebdb698ebf8facccf487cdb7d37bb1ea384349e900bb20536a9868172e6a452d0ab8370704455f17ab527f9d4b6c743386ccc0049dd3a37e311207428d706a4d61a3481fe5ce7bd78f9962c0f329da495a3e9085db59de062fbef856d49c60694fcd62a56a434ee9522167d1b509572b602e47182eb9e23cb07bebc1e7949ce457cfb223701d616f732ddb26610f77112e73f3a0fe750dd37bdfb5a92f843dc8e905788b41b127a173ed932a3a5b757222eb89c00112a6dd357d04ad9b09dd3384a5e633f0626ae3ea58ff5848fe4d8fe735500bcafed170fe4d83337c61ffdc0d916a24dac1a126d67ed41580889c7f1c42fec4e9a01c6f29f26f0ae4a7b8b91d209aba7ecafa36fd65d53215a67f84cbe862d2de7dfb618255f7dd8030ac12a7073d24c9972e03f5f4fd8cd61914dc6c78b03084bd9e8bffe4827880ef82ddb44fac1a6eecb4773d9b77910ab967c3ad28731af23439afe8163e7b01713ddd7d392bcf37a87acffd4a60813ce373d0560dc6c7b0d914c859270934dbb0fdd1d85dfbd8358c9b844d130927686a9811d00e7eaed70b9b4c8e5d993a8e5d25b989be23e64d9d41672208a33024448209a8288e10d62f13fd1f1919f431d76e151a894a6e8338387d9e5dc290844b13b12ad1977d9401c2bb585d9b07290a93d4bf2de99d5b37413f7771da61e63e9bc87ca40f28f43d41d5932bec9d101d938a1f0559c816cad7e71cad37562bcdfc8fa6629efc66fe992163be5f4b20c2ddfaf3b05b6e9f923040e268709e650fb19cf33eca95fd09b3b42dd66a09ee397ab2ea267e0e529e611c32c5dcf8f5cc40c28ab76ec0d0fe1643194fb53333e200539f06a732aaaf013e27b5ce01f6c35b6610c7223c7a580bd56865618eeb72007e888d04cb0d1fe0b01ad8c454915ff4749ea85289bbd90adc9654559697c2b809c5182e646d52d32ae5e12e8c5458a68fe81a33ff401b9361162a5f77dc94bdc1c70addf8542508662e76fadf0d88f2ce4361a169287574f8f98a2fba35112f7b70ed05079af57145e933840c06902bc258a2dee802591acd1f2d2b09f623f784ddf52f40ea1bdec5b3264626f8959fc67598c56adabda81d54214ad26ff8f171359c968f6ed1e2738a5306a8496e52c53043cc266d61033e9e65abfd0054ebbf2e5d639567ae308a22f1fbfa928ab886f5e8fb67be6f0d9b1ea1d0c190ae855df32571dd8bdb2503a8fe71dae9b376cc3c01e985b0960083842f935e32a2d5f27d5dfbebd3a85bf1da55e237a8005e7cf748bd9988ab9be0a4ad514534142da8c44ab2c166705038781de560500f86652248232098a6f2bb31145c300d922623c913e96ba7badb80bb86ab8c5b506503cf8dd29ed178fd619d27bbc68ffb6adb2c3f49d6f5b3f9b20c02a19814cd330f89ff8bdc032641ffa3726e02593c49a5707c991c7553b04cc5b26d4f5e782dafbd6c05f56ffe18eddecd1a87fe56baba5fb0075893132b467b26b1cf2", 0x1000}], 0x1, &(0x7f0000002600)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x10}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x727}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}], 0x78}}, {{&(0x7f0000002680)=@l2tp6={0xa, 0x0, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x3}, 0x80, &(0x7f0000002900)=[{&(0x7f0000002700)="d3e2bc08221d8dc250c98b2084992adb7ae6a8c97608917f0d6f2fc04bdf85df43fc93137e3e8f5875c89d8445fd07122b3489365571037f9c7dea68196471174e6b860231b93bf8cb369782d4129525053257bd97addcf99d52a710f2642f3590846eaeb5053c3a38033f61d15870e6bcefd90c458efaec239184a517c4d16847009737ec905bff090901661a9495adcd70827a853f92ed65127d0c20ec25b0fbc31cfb47bd92808c4d667253a39d40c39f4aa8b646a2a78543764c9ac1810f124fe1bf1292fce080c24c09ad0e6e05cef2b0967d495200277766e552170bfdeaf9bb4b201e360787bbfa7db82cdb62320fb4d828e5083917", 0xf9}, {&(0x7f0000002800)="c3687a1a7fc8a6051aa8bbfda93aa4b733867f5811e73b8670180babe9886fbc8b08300f07ceebe48bdddfa2b3f656897f1ce4d39b36e26a4cd4b9726117f7bc43ee26b29a9a9219ecd058f3584e670774336e5a6d2d9dde200976ee4806c67fa083adcc92c8f27556f3b63c02d694a045d68f5d95b7594d6d723fc1fa55a89d844cd975cd8b6465e6dd19b4aa2edb59ba6a061443d345436403f76003918a", 0x9f}, {&(0x7f00000028c0)="948e131f9404ac8fc902191824c3d020c5481237555a9202383f399705d02a", 0x1f}], 0x3, &(0x7f0000002940)=[@txtime={{0x18, 0x1, 0x3d, 0x100}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}], 0x30}}, {{&(0x7f0000002980)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e24}}, 0x80, &(0x7f0000002a80)=[{&(0x7f0000002a00)="0184dce874720b53172051ad145d3c2de674387fe4e9c8f4e04048434de5c524c3a77aa4d9eeb110ec10d4255ebafbd6140c28192b247f979bc55f8637043f250088", 0x42}], 0x1}}, {{&(0x7f0000002ac0)=@hci={0x1f, 0x3}, 0x80, &(0x7f0000002d80)=[{&(0x7f0000002b40)="9c79f1ae047187fe135f8d290ff8bd55fbd3c7873c2c423c2a35c0fcadccc7b8d4264a18ca5e28b33a92697ee872c3ac3197e07fcbb5d25929cad78cfccbb48a98d9ee9b8b5e04a957c2b9d6e95cb6319596f5be2c82547fc9d676fca0fbc2979b135ff2514599c06add2cb188896754c0291628ff5655cc81e60a60ce3c714278f8d7", 0x83}, {&(0x7f0000002c00)="2ecf79eb28a693b43d49426e6900c072c56ac3efedd7fc87d69cbbda276a2d3e417a01c9526034a6e4d53a77855ab0fe1a991f432a2cadac6d91557b19529be67deedc6a8421fefa7121a72c083f85a3dbb610dd0409b65cf9929fd80216441d3c3c59281ef14fa5197a35e40da2f7f9b3064d06953d2978b0a6d80759b6502790b15348d965f69e1e1d465e8a26ba02bb16fd649f50093b9316ac466f", 0x9d}, {&(0x7f0000002cc0)="541ddcc23ef99f3c70af892fddb504989d0a282c86ef821da7f680738e43c85d1ab4e29f1ed862b2e0341f68c58b3ee9616eedb75dec0c26ce537da09037c6eb167d230210cca1f8cff3bad0803aaf9e5dff97bcefaedc7d9760025c198489cf5dc3bca046ef4847bceea6b2e943faed60fef03f343bdde90fcf4b7aaea397c542f0", 0x82}], 0x3, &(0x7f0000002dc0)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0xfffffff3}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x80000001}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x78}}], 0x6, 0x1) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 47.272160116s ago: executing program 3 (id=2589): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2c8, 0x20a, 0x278, 0x2c8, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x4, 0x6, 0x3, 0x1, 0x400}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf2eaaf407c114bfd, 0x0, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x27, 0x3, 0x80000000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) r6 = syz_open_procfs(0x0, 0x0) pread64(r6, &(0x7f0000000c40)=""/102400, 0x19000, 0x3) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$UHID_INPUT(r6, 0x0, 0x54) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) userfaultfd(0x1) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="48000000100001002abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"/309], 0x48}}, 0x40000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x202000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x2f, 0x5, 0x8, 0xc, 0x69, @private0, @local, 0x1, 0x8, 0x2, 0x6}}) 46.152285103s ago: executing program 3 (id=2592): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa5b49000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$phonet(0x23, 0x2, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) symlink(&(0x7f00000049c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000059c0)='./file0\x00') 45.190846069s ago: executing program 3 (id=2593): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) 45.110320763s ago: executing program 3 (id=2595): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x2003, 0xc, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x90) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000140)=@id={0x1e, 0x3, 0x3, {0x4e23}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24000000}, 0x0) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 44.990955215s ago: executing program 3 (id=2597): r0 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103000000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x3, 0x1b04, 0x0, 0x3ff, 0x9, 0x7, 0xe, 0x2d, 0xbf0, 0x3, 0x8, 0x8}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000001040), 0x0, 0x0) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000001080)) syz_usb_connect$cdc_ncm(0x5, 0x99, &(0x7f0000000200)={{0x12, 0x1, 0x50, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x87, 0x2, 0x1, 0x6, 0x20, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "77bd"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x7f, 0xe, 0x5}, {0x6, 0x24, 0x1a, 0xe, 0x20}, [@network_terminal={0x7, 0x24, 0xa, 0x0, 0xc2, 0x3, 0x81}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0x1, 0x6, 0xfa}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0xf, 0x6, 0x9}, @dmm={0x7, 0x24, 0x14, 0x7, 0x7}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x5, 0x8fd8}, @obex={0x5, 0x24, 0x15, 0xf}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x75, 0xf7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0xb, 0x41, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x81, 0x62, 0x3}}}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x7, 0x5, 0xa, 0x10, 0x7}, 0x2d, &(0x7f0000000040)={0x5, 0xf, 0x2d, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0xea, 0x7f, 0x4, 0x8, 0x5}, @wireless={0xb, 0x10, 0x1, 0xc, 0x13, 0x1, 0xf1, 0x7f, 0x7}, @wireless={0xb, 0x10, 0x1, 0xc, 0xc6, 0x34, 0xf8, 0x9, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0xa, 0x6, 0x7}]}, 0x7, [{0xa0, &(0x7f00000002c0)=@string={0xa0, 0x3, "d2d9fbb0a033a8de694b14b500d14f6ff4bbc7596f01a5fa8715824f7d1223487c5f04945c9b38a11c250ce2671bd80962d04ef93444c395521cb3c753c44a5625a41c5264d9e79875964c6774d5deb9bff056c9388ffc8cabee1268587b8c63988972f8b57fc681924b2c140134d84e0f7f2e97b016867b155e5b8da687590fe69b091acb9f4c4deb8801149524d2a07962d6a94e999221b0fab483c09f"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x809}}, {0xf6, &(0x7f0000000600)=@string={0xf6, 0x3, "49d6a1763f98f9efdc22409e1daaf9f95ab5a8d5ce4abd89900d2293fd5c56984ec5798ccfc83910b5d10f95824b2007847adcf744789fde9fc985793debfd434fa729e064ff1fb3d5d37e8871666aa9d9fd96f2bb443dc8602b8ebfdc36c06987a7bae2ffc1e044807c1b9beb1375477aa88cb41dab86a2dc8978e955a502970f9c841c1cfc435ddb9eeeea5eb09b5de7f334de6471f7410c8d05ccc1008860641b09222ee2fa66720f4ce8f84b3cba97bc5dd9c4532c328b339fa41e8936a5c5975289c5f6674b136cc0b0eb58a7e85e0c0de9c36e56d5775866865e7e9e8264af9094a3b234023d3a2a1ab7372d98eb6d5eed"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1407}}, {0xa1, &(0x7f0000000400)=@string={0xa1, 0x3, "f61b35ceac45044851d0396202d414b929805d41c98d7591b8fceae93c8993831203e7349c41c590c4feae0195625b65d214a2761c9f51f3993f20218a3e056e95066624cf97c2d13a75368aaa14a5ec83bdbb9ab6ae10dc6404a4da426c6fe379a7c7abe1051468e166f4b12d6b9941d81ffa7b0c9b705b3f2f6f8eac33ae47e42d7009fc8a0953dce880ff11e76ce5604c2cb1bf72b5ae660dee1288fb8b"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0xfcff}}]}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x2000009, 0x28012, r2, 0x3cb2e000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) chown(0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f0000000000)=0x100000001, 0x4) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mremap(&(0x7f0000be4000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f00005f0000/0x2000)=nil) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000001401"], 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x8044) 41.135166278s ago: executing program 7 (id=2612): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}]}], {0x14, 0x10}}, 0xc0}}, 0x0) 41.008190271s ago: executing program 7 (id=2613): r0 = syz_io_uring_setup(0x5284, &(0x7f0000000200)={0x0, 0x3416, 0x13100, 0x2, 0xfffffffd}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r3}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000000)=0x639) request_key(&(0x7f00000030c0)='dns_resolver\x00', &(0x7f0000005780)={'syz', 0x0}, &(0x7f0000001780)='\'\xaa\x94f\x9e\x04\x00*:\f_o\x05!%;', 0xfffffffffffffffb) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f000000ddc0)={0x2020}, 0x2020) syz_fuse_handle_req(r6, &(0x7f00000021c0)="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", 0x2000, 0x0) read$FUSE(r5, &(0x7f0000005800)={0x2020}, 0x2020) readv(r5, &(0x7f0000000180)=[{&(0x7f0000000200)=""/147, 0x48}, {0x0, 0x2}], 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x6, 0xff00, 0x0, 'syz0\x00', 0xfffffffd}, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) clock_getres(0x6, 0x0) 40.199138426s ago: executing program 43 (id=2548): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r3, 0x80047456, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = socket$unix(0x1, 0x5, 0x0) r6 = dup2(r5, r4) close_range(r6, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0x2, &(0x7f0000000100)=0xf, 0x4) 40.038201381s ago: executing program 44 (id=2534): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00769a7d8200010000001495595915303d6000"}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000020000103000000000000000002000000000000001a0000000c000b40"], 0x28}}, 0x0) syz_open_pts(r0, 0xe8000) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (rerun: 32) pipe(&(0x7f0000000200)={0xffffffffffffffff}) syz_genetlink_get_family_id$wireguard(0x0, r2) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async, rerun: 64) socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x800) (async) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) (async) timer_create(0x3, 0x0, &(0x7f0000044000)) (async) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r4 = syz_io_uring_setup(0xec5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x184}, &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x4003, &(0x7f00000000c0), 0x1, 0x8}) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) io_uring_enter(r4, 0x2, 0x10a5, 0x3, 0x0, 0x0) (async) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x84c0, 0x0, 0xffffffff, 0x121}, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x9048}}) (async, rerun: 64) io_uring_enter(r3, 0x47f6, 0xfffffffc, 0x0, 0x0, 0x0) (async, rerun: 64) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r10 = openat$cgroup_ro(r3, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r10, &(0x7f0000000140)=ANY=[@ANYRES16=r9], 0x118) 39.788921729s ago: executing program 7 (id=2621): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000000202010200000000000000000a000006300002802c00"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x44000) 39.633964407s ago: executing program 7 (id=2622): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x62, 0xfffffffffffffe74, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000cc0)=""/265, 0xcb95, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x3ff}, 0x24) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fadvise64(r0, 0x3, 0x7, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000040000a14ba81932be97478aa4d6586bff90000001000010000000032f98fccc99f869a0a"], 0x28}}, 0x0) 38.972370809s ago: executing program 7 (id=2625): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x3eb, 0x110, 0x70bd2a, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x6024ce9059548ade}, 0x8040) 38.946345421s ago: executing program 7 (id=2626): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae09, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000240), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="00010052e8d4a50000000000008500000087fbff01840000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_io_uring_setup(0x1f6a, &(0x7f0000000480)={0x0, 0x149, 0x0, 0x0, 0x387}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = dup(r5) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r6, 0x0, 0x0, 0x0, 0x80800, 0x1}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r6, 0x5111) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.kill\x00', 0x0, 0x0) r8 = syz_io_uring_setup(0x6be9, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333, 0x0, r7}, &(0x7f0000000dc0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r8, 0x52a, 0x0, 0xe, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x8080, 0x0) ioctl$VIDIOC_OVERLAY(r7, 0x4004560e, &(0x7f00000001c0)=0x2) 36.081344767s ago: executing program 8 (id=2637): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', 0x0, 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) 36.023194915s ago: executing program 8 (id=2638): openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000480), 0x88000, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x8, &(0x7f0000000000)=[{0x1ff, 0x6, 0xd, 0x7}, {0x9, 0xc, 0x5, 0xffffffff}, {0x1, 0x8, 0x2, 0x8}, {0x5, 0xfb, 0x8, 0xb}, {0x1ff, 0x40, 0xff, 0x2}, {0x1000, 0x5, 0x5, 0x2}, {0x7a3e, 0x3, 0xfe, 0xb}, {0x4, 0x81, 0x0, 0x848}]}) close_range(r0, 0xffffffffffffffff, 0x0) 35.908348547s ago: executing program 8 (id=2640): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) timer_create(0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, 0x0, 0x0) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="b90103606989068c3c270040f00000", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x18) lsm_list_modules(0x0, 0x0, 0x0) 35.907909017s ago: executing program 8 (id=2641): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000000202010200000000000000000a000006300002802c0001801400"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x44000) 35.869818094s ago: executing program 8 (id=2642): ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b4b, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='neigh_create\x00', r0}, 0x18) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, &(0x7f00000002c0)="fc0048001c000704ab5b2509b86803000aab087a0400000001481193210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) 35.84476528s ago: executing program 9 (id=2643): openat$comedi(0xffffffffffffff9c, &(0x7f0000000400)='/dev/comedi0\x00', 0xa0400, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x2000, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 35.780219342s ago: executing program 8 (id=2644): syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x8000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) mknod$loop(0x0, 0x2000, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000240)=ANY=[]) keyctl$clear(0x5, 0xffffffffffffffff) syz_pidfd_open(0x0, 0x0) syz_usb_connect(0x6, 0x75, &(0x7f0000000780)=ANY=[@ANYBLOB="1201010240d85bc7b1131100345c010203010902630002040800070904880400c192fa280724060000d2cf0524001c620d240f0100000000020005f29011cc03080353ee97050a2401f90a00020102092403060703020208"], &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x9, 0x2, 0xf4, 0x20, 0x93}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000280), 0x800000000020001, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {}, {}, 0x20000, 0x1, {0x0}}) close(r7) prlimit64(r4, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) 35.779730464s ago: executing program 9 (id=2645): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000ba05000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001001e5cf4f400001e00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000900000085000000060000009500000000000000"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) (async) listen(r2, 0x6) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) (async) accept4(r3, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x29, 0x93, 0x89, 0xfffffff6, 0x38, @mcast2, @empty, 0x7, 0x40, 0x4, 0x2}}) (rerun: 32) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mount$9p_xen(&(0x7f0000000000), &(0x7f0000000380)='./file0\x00', &(0x7f0000000400), 0x100800, &(0x7f0000000440)={'trans=xen,', {[{@ignoreqv}], [{@pcr={'pcr', 0x3d, 0x29}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}]}}) (async) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000004c0)={0x4, {{0x2, 0x4e24, @rand_addr=0x64010102}}}, 0x88) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e20, @local}, 0x114, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x3, 0x2}) 35.768355673s ago: executing program 9 (id=2646): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x128, r1, 0x300, 0x70bd25, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x128}, 0x1, 0x0, 0x0, 0x4c15}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa8eaaaaaaaaaa86dd6000ed6a00142c00fe8000000000000000000000000000bbfed3"], 0x0) 35.711055859s ago: executing program 9 (id=2647): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000008000000000c0000000c000000020000000000000000"], 0x0, 0x26}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='fsi_master_gpio_cmd_same_addr\x00', 0xffffffffffffffff, 0x0, 0x9b02}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_emit_ethernet(0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb0004aaaa73f60421890673b05a2bee31027a6986d00ef5ee2871de597fbf7888c89bd8a201bc5bdd52b96a71d09def8d4a63ff5a8339d9cecca1374f33b21851bb9af8e6518d1bc5745643f960755840e9c6346f44e631c12255173d3eae26cb118ac56f98f20f71054f1eff30c2af5c13e3f21fe9404028c0745cde691dddb38d04b95f77e4f9d8d5cdef37d54a175f0abf9a4fb23cecc689b296da7dc63723f93a512f2c7d64c3064e47deb50b43ea92034bb39bb4a5c331fdc75533e1a41b5ab26226fd8a4caaee43b03550dc2f28f1ae782f62dcf859b24f6b75a3632df79d07af19c37605948567ea"], 0x0) r0 = getpid() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f00000002c0)="0d4432e04dbb7825505740da6e1e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sched_setscheduler(0x0, 0x0, &(0x7f0000000540)=0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000800000000000000000000000850000009700000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000000e00000095"], &(0x7f0000000680)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="5becbc0e0d7cca6073a4f11d1b00", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[], 0xd40}}, 0x0) 35.667303841s ago: executing program 9 (id=2648): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', 0x0, 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) 35.618149257s ago: executing program 9 (id=2649): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) fchownat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x109000, 0x0) fsetxattr(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="3569d00c4d5bb2bbc2ad014aea44a7fb1f1e08639158877aead2c0baff39e111d5041d5629a47b1882629f99ae4e7f9f054ba778d85e0228a4963c541263632d69af0cf68cf615f59347aad8862c8f1c0bdc8b069cbafd6fdfe9ac566f08493c44cd61"], 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000100)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000eef30f5165446c66bad004ec800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x42}], 0x1, 0x8, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000100)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000eef30f5165446c66bad004ec800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x42}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x5, 0x4, 0x4, 0x1000, &(0x7f0000018000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000440)={0xa, 0x4e23, 0x4, @remote, 0xfffffff1}, 0x1c) connect$inet6(r6, &(0x7f0000000540)={0xa, 0x4e21, 0x1, @local, 0x7ff}, 0x1c) r7 = syz_io_uring_setup(0x5c2, &(0x7f0000000640)={0x0, 0x0, 0x800, 0x3, 0x3d9}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) (async) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) timerfd_settime(r10, 0x3, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) (async) timerfd_settime(r10, 0x3, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r12 = dup(r11) sendmsg$inet(r12, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000001100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c0000000000000000000000070000004404730001000000e736f53aa500a029b4fff380b1208d2517faab10d57912ea57285a512c15273dd90873706db2ce3f1fd2709c8fca22cf77f29736f1e80045368c6d61cfefe19acae96300000000000000022fa79f00000000d114c4e16cb59c3b813222b23474ebab0566f62853"], 0x40}, 0x0) (async) sendmsg$inet(r12, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000001100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c0000000000000000000000070000004404730001000000e736f53aa500a029b4fff380b1208d2517faab10d57912ea57285a512c15273dd90873706db2ce3f1fd2709c8fca22cf77f29736f1e80045368c6d61cfefe19acae96300000000000000022fa79f00000000d114c4e16cb59c3b813222b23474ebab0566f62853"], 0x40}, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) read$char_usb(r12, &(0x7f0000000080)=""/139, 0xfdef) (async) read$char_usb(r12, &(0x7f0000000080)=""/139, 0xfdef) syz_io_uring_submit(r8, r9, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x51, 0x0, 0x80, 0x2, 0x0, 0x127}) io_uring_enter(r7, 0x6e2, 0x3900, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r7, 0x18, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x31, {0x5, 0x1}}, 0x1) (async) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r7, 0x18, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x31, {0x5, 0x1}}, 0x1) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x100, 0x0, 0xf1, 0x800, 0x8000000000000, 0x5, 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0xbd9], 0x8000000, 0x3c4210}) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x100, 0x0, 0xf1, 0x800, 0x8000000000000, 0x5, 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0xbd9], 0x8000000, 0x3c4210}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x98, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x280000000000000}]}}]}, 0x98}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 29.544810564s ago: executing program 45 (id=2597): r0 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103000000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x3, 0x1b04, 0x0, 0x3ff, 0x9, 0x7, 0xe, 0x2d, 0xbf0, 0x3, 0x8, 0x8}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000001040), 0x0, 0x0) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000001080)) syz_usb_connect$cdc_ncm(0x5, 0x99, &(0x7f0000000200)={{0x12, 0x1, 0x50, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x87, 0x2, 0x1, 0x6, 0x20, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "77bd"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x7f, 0xe, 0x5}, {0x6, 0x24, 0x1a, 0xe, 0x20}, [@network_terminal={0x7, 0x24, 0xa, 0x0, 0xc2, 0x3, 0x81}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0x1, 0x6, 0xfa}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0xf, 0x6, 0x9}, @dmm={0x7, 0x24, 0x14, 0x7, 0x7}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x5, 0x8fd8}, @obex={0x5, 0x24, 0x15, 0xf}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x75, 0xf7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0xb, 0x41, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x81, 0x62, 0x3}}}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x7, 0x5, 0xa, 0x10, 0x7}, 0x2d, &(0x7f0000000040)={0x5, 0xf, 0x2d, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0xea, 0x7f, 0x4, 0x8, 0x5}, @wireless={0xb, 0x10, 0x1, 0xc, 0x13, 0x1, 0xf1, 0x7f, 0x7}, @wireless={0xb, 0x10, 0x1, 0xc, 0xc6, 0x34, 0xf8, 0x9, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0xa, 0x6, 0x7}]}, 0x7, [{0xa0, &(0x7f00000002c0)=@string={0xa0, 0x3, "d2d9fbb0a033a8de694b14b500d14f6ff4bbc7596f01a5fa8715824f7d1223487c5f04945c9b38a11c250ce2671bd80962d04ef93444c395521cb3c753c44a5625a41c5264d9e79875964c6774d5deb9bff056c9388ffc8cabee1268587b8c63988972f8b57fc681924b2c140134d84e0f7f2e97b016867b155e5b8da687590fe69b091acb9f4c4deb8801149524d2a07962d6a94e999221b0fab483c09f"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x809}}, {0xf6, &(0x7f0000000600)=@string={0xf6, 0x3, "49d6a1763f98f9efdc22409e1daaf9f95ab5a8d5ce4abd89900d2293fd5c56984ec5798ccfc83910b5d10f95824b2007847adcf744789fde9fc985793debfd434fa729e064ff1fb3d5d37e8871666aa9d9fd96f2bb443dc8602b8ebfdc36c06987a7bae2ffc1e044807c1b9beb1375477aa88cb41dab86a2dc8978e955a502970f9c841c1cfc435ddb9eeeea5eb09b5de7f334de6471f7410c8d05ccc1008860641b09222ee2fa66720f4ce8f84b3cba97bc5dd9c4532c328b339fa41e8936a5c5975289c5f6674b136cc0b0eb58a7e85e0c0de9c36e56d5775866865e7e9e8264af9094a3b234023d3a2a1ab7372d98eb6d5eed"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1407}}, {0xa1, &(0x7f0000000400)=@string={0xa1, 0x3, "f61b35ceac45044851d0396202d414b929805d41c98d7591b8fceae93c8993831203e7349c41c590c4feae0195625b65d214a2761c9f51f3993f20218a3e056e95066624cf97c2d13a75368aaa14a5ec83bdbb9ab6ae10dc6404a4da426c6fe379a7c7abe1051468e166f4b12d6b9941d81ffa7b0c9b705b3f2f6f8eac33ae47e42d7009fc8a0953dce880ff11e76ce5604c2cb1bf72b5ae660dee1288fb8b"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0xfcff}}]}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x2000009, 0x28012, r2, 0x3cb2e000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) chown(0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f0000000000)=0x100000001, 0x4) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mremap(&(0x7f0000be4000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f00005f0000/0x2000)=nil) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000001401"], 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x8044) 27.746198959s ago: executing program 1 (id=2666): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x6, &(0x7f0000000200)=0x11) mmap(&(0x7f00004d4000/0x3000)=nil, 0x3000, 0xb635773f06ebbee6, 0x12, 0xffffffffffffffff, 0xdb713000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f00000004c0)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x7) ioctl$PIO_UNIMAPCLR(r3, 0x4b68, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x10001, 0x0, 0x0, 0x4, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x7fffffff, 0x2}, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffe) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0xf8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 23.836033036s ago: executing program 46 (id=2626): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae09, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000240), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="00010052e8d4a50000000000008500000087fbff01840000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_io_uring_setup(0x1f6a, &(0x7f0000000480)={0x0, 0x149, 0x0, 0x0, 0x387}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = dup(r5) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r6, 0x0, 0x0, 0x0, 0x80800, 0x1}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r6, 0x5111) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.kill\x00', 0x0, 0x0) r8 = syz_io_uring_setup(0x6be9, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333, 0x0, r7}, &(0x7f0000000dc0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r8, 0x52a, 0x0, 0xe, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x8080, 0x0) ioctl$VIDIOC_OVERLAY(r7, 0x4004560e, &(0x7f00000001c0)=0x2) 20.53788306s ago: executing program 47 (id=2649): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) fchownat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x109000, 0x0) fsetxattr(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="3569d00c4d5bb2bbc2ad014aea44a7fb1f1e08639158877aead2c0baff39e111d5041d5629a47b1882629f99ae4e7f9f054ba778d85e0228a4963c541263632d69af0cf68cf615f59347aad8862c8f1c0bdc8b069cbafd6fdfe9ac566f08493c44cd61"], 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000100)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000eef30f5165446c66bad004ec800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x42}], 0x1, 0x8, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000100)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000eef30f5165446c66bad004ec800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x42}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x5, 0x4, 0x4, 0x1000, &(0x7f0000018000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000440)={0xa, 0x4e23, 0x4, @remote, 0xfffffff1}, 0x1c) connect$inet6(r6, &(0x7f0000000540)={0xa, 0x4e21, 0x1, @local, 0x7ff}, 0x1c) r7 = syz_io_uring_setup(0x5c2, &(0x7f0000000640)={0x0, 0x0, 0x800, 0x3, 0x3d9}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) (async) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) timerfd_settime(r10, 0x3, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) (async) timerfd_settime(r10, 0x3, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r12 = dup(r11) sendmsg$inet(r12, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000001100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c0000000000000000000000070000004404730001000000e736f53aa500a029b4fff380b1208d2517faab10d57912ea57285a512c15273dd90873706db2ce3f1fd2709c8fca22cf77f29736f1e80045368c6d61cfefe19acae96300000000000000022fa79f00000000d114c4e16cb59c3b813222b23474ebab0566f62853"], 0x40}, 0x0) (async) sendmsg$inet(r12, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000001100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c0000000000000000000000070000004404730001000000e736f53aa500a029b4fff380b1208d2517faab10d57912ea57285a512c15273dd90873706db2ce3f1fd2709c8fca22cf77f29736f1e80045368c6d61cfefe19acae96300000000000000022fa79f00000000d114c4e16cb59c3b813222b23474ebab0566f62853"], 0x40}, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) read$char_usb(r12, &(0x7f0000000080)=""/139, 0xfdef) (async) read$char_usb(r12, &(0x7f0000000080)=""/139, 0xfdef) syz_io_uring_submit(r8, r9, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x51, 0x0, 0x80, 0x2, 0x0, 0x127}) io_uring_enter(r7, 0x6e2, 0x3900, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r7, 0x18, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x31, {0x5, 0x1}}, 0x1) (async) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r7, 0x18, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x31, {0x5, 0x1}}, 0x1) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x100, 0x0, 0xf1, 0x800, 0x8000000000000, 0x5, 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0xbd9], 0x8000000, 0x3c4210}) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x100, 0x0, 0xf1, 0x800, 0x8000000000000, 0x5, 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0xbd9], 0x8000000, 0x3c4210}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x98, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x280000000000000}]}}]}, 0x98}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 20.507606295s ago: executing program 48 (id=2644): syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x8000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) mknod$loop(0x0, 0x2000, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000240)=ANY=[]) keyctl$clear(0x5, 0xffffffffffffffff) syz_pidfd_open(0x0, 0x0) syz_usb_connect(0x6, 0x75, &(0x7f0000000780)=ANY=[@ANYBLOB="1201010240d85bc7b1131100345c010203010902630002040800070904880400c192fa280724060000d2cf0524001c620d240f0100000000020005f29011cc03080353ee97050a2401f90a00020102092403060703020208"], &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x9, 0x2, 0xf4, 0x20, 0x93}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000280), 0x800000000020001, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {}, {}, 0x20000, 0x1, {0x0}}) close(r7) prlimit64(r4, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) 19.709022235s ago: executing program 4 (id=2694): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c", 0x8) accept4(r0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x0, 0x0, &(0x7f0000000180)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0xf2, 0x51, 0x8, 0x8, 0xc0}, 0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r2, &(0x7f0000000040)=ANY=[], 0xc) io_setup(0x5, &(0x7f0000000540)=0x0) r4 = syz_open_procfs(0x0, 0x0) io_submit(r3, 0x1, &(0x7f0000000880)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r4, 0x0}]) close(0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv4_delrule={0x1c, 0x21, 0x1}, 0x1c}, 0x1, 0x2000000}, 0x44044) 17.736932115s ago: executing program 4 (id=2701): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000580)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0xe000) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109022400010000000009040000025c291d0009058e00000000000009050b"], 0x0) 16.294165895s ago: executing program 2 (id=2689): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') bind(0xffffffffffffffff, &(0x7f0000000480)=@in={0x2, 0x4e24, @local}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x50, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 32) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async, rerun: 32) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) read$dsp(r3, &(0x7f0000000600)=""/128, 0x80) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0xfffffffffffffd75, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYRES16=r3], 0x90}, 0x1, 0x0, 0x0, 0x4008041}, 0x0) (async, rerun: 32) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x2d}, 0x94) (async, rerun: 32) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r4, r6, 0x25, 0x0, @val=@tracing={0x0, 0x3}}, 0x20) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r7) sendmsg$NET_DM_CMD_START(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={0x14, r8, 0x1, 0x80000}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4800) (async) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r7, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="000028bd7000fddbdf25300000000500360800000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc080}, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) (async) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffffff, 0x100000) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000028000701000000080000000005"], 0x20}}, 0x40080c0) 16.197907534s ago: executing program 2 (id=2708): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@ifindex, 0xffffffffffffffff, 0x11, 0x2038}, 0x20) r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r2, 0x107, 0x18, &(0x7f0000000800)={r1, 0x1, 0x6, @random="be189782b5ba"}, 0x10) sendto$packet(r2, &(0x7f0000000040)="02030007ffff0000000045", 0xff4b, 0x4000050, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000001701000003000000010000000000000000000000000000001701000002000000000000007005baa38d33e2e1650de8f13f421b2d4b60252e76171216e42961c3b08d4d3dacb0a7089ff7cbfd613d46fa95d6e2f6e76ac3266c9b1a531c4bcf0e7071f117cca4e883b4a6eb5dee7a9ab4d05d7ee311ab1c55b817285e0c3714ee6137e3b8553de667701a7c93437583b5f0b285a188098c1ac4ebac40b315ff8db6f736992497879a42b95248fed4d4888970573d0e88ceead26d97e172588a3ad30fbd01b7bbeeaa668e835f7ae3113fe2d949bb47bc0b2c62541714cc0538601ae4bab19d69a5addee134dd447034da6dd89704603d31a3d25b9d5f46cfd43d9e29aac7422920d98e1463256bd4cc929373ad9000000000faf6a95a04ad3b9db9b230f8224a3d6db187a94e5dadfe181d20d3a4bd08e8b0e6eeb79fdee230dd852a36dfc9046d03b8f316b2d460ca5d08c515d914db8ce430ea0237911c440ee750fe787aaffa83b809651c529e4cf68c8219a827ea003c59e3e51b00cd7f9464f37be2eb3e1475819ad37edcc238b85ab205a2b394916815d9cf7bf3f8e3d19a4697756299e21f2afd3ae31e0f09b8153965635216de47156f4e5fc97cb04f9c5e13256be1d9e0a94f9c6387940de1bcd7b532d16ebba216601cf23be6a7c259550bd059a5a7aee85eb558de8201c1d9c7b29e27313f61cf0b07dd790071bdbceabdd32ce2bcc279b1575a1431b03e5dc37307d15a2782175c87dad1a3aadf48b382bea4ae0b423edee0e12ada4c1dacc40bf387630792ab5c7ed6e2ef7e8a77268b0ff8978ccddfa8da4521d24b3fddc70d181c20caa9a584df9b2e"], 0x18}], 0x4924924924924fd, 0x0) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') read$FUSE(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) 16.044740505s ago: executing program 2 (id=2711): r0 = socket(0x5, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) getsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000001c0), &(0x7f0000000240)=0x4) r1 = epoll_create1(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x7}], 0x1, 0x2000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r4, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r5, @ANYRES8=r2], 0x80}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x2017be01}) 15.972257914s ago: executing program 4 (id=2712): r0 = syz_open_dev$ndb(&(0x7f0000000300), 0x0, 0x20000) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000340)={0xff, 0x6, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000002c0), r4) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5414, 0x0) keyctl$restrict_keyring(0x3, 0xfffffffffffffffb, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r5, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r5, 0xc1105518, &(0x7f0000000400)={{0x1, 0x0, 0x5, 0x3, 'syz0\x00', 0x4}, 0x4, 0x100, 0x1, r1, 0x6, 0x6, 'syz0\x00', &(0x7f0000000040)=['\x00', '\x00', 'quota\x00', '\x00', '\x00', '\x00'], 0xb}) ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f00000000c0)={0x0, 0x6, 0x40, 0x6, 0x1, "aeda1c16102a4bac41fab346ddb7f0b6529e0a", 0xffffff01, 0xf3af}) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_QUERYSTD(r6, 0x8008563f, 0x0) 15.927961622s ago: executing program 2 (id=2713): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x34000, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="0a000600080211000000000038005080080003000dac0f00110001"], 0x60}}, 0x0) 15.917283365s ago: executing program 0 (id=2714): ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0xf, 0x187040) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0xc00864c0, &(0x7f00000000c0)={r1}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001100)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)="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", 0x1000, r2}, 0x68) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001180), 0x10000, 0x0) write$smackfs_ptrace(r3, &(0x7f00000011c0)=0x1, 0x14) fcntl$setpipe(r0, 0x407, 0x9) ptrace(0x11, 0x0) syz_usb_connect(0x2, 0x144, &(0x7f0000001200)={{0x12, 0x1, 0x0, 0x74, 0x67, 0x7a, 0x40, 0xbda, 0x138, 0x495f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x132, 0x1, 0x9, 0x68, 0x0, 0x7, [{{0x9, 0x4, 0x5f, 0xf9, 0x6, 0x34, 0x2f, 0xfb, 0x5, [], [{{0x9, 0x5, 0x7, 0x19, 0x0, 0xd, 0x0, 0x0, [@generic={0x7b, 0xd, "a606a3df2671fc212066c2a02750d96284b8a2420a49bff1b01d9becc19d27bb93219600d0897ed41763e19668ce0f5ebfb64f8620251033e231ea1243dfadc0db746827752ccd8f0faa6f163e6c1daf83839e18b0b8371e5248cbedf17143c5c771a6d8ffa1a32820365404b71c76a67f267f33ae35fef647"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0xe, 0xb, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xeb, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x83, 0x8}]}}, {{0x9, 0x5, 0x5, 0x3, 0x40, 0x0, 0x21, 0xb}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0x7, 0x6, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x4}]}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0x4, 0x6, 0x9c}}, {{0x9, 0x5, 0xa, 0x4, 0x10, 0x53, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0xff57}, @generic={0x53, 0x10, "6af15aeea00222f9add95c5bf86a9f90e42f7be98de4f75d93bbbe82ec0aa853075adc6c2d93aa27ca100ce12097afb6e93bdfba5e84302a7f0d88a60a59c9feeae323b11a359c01eb2d1daea94454b51e"}]}}]}}]}}]}}, &(0x7f0000001600)={0xa, &(0x7f0000001380)={0xa, 0x6, 0x110, 0x3, 0x2, 0x3, 0x40}, 0x41, &(0x7f00000013c0)={0x5, 0xf, 0x41, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0xc, 0xe, 0x5}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0x5, 0x1, 0x3, 0x5}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x5, 0x0, 0x8, [0xc000]}, @ss_container_id={0x14, 0x10, 0x4, 0x12, "cd77a46eae29cebc82a854773469bb8d"}]}, 0x4, [{0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0x420}}, {0xfc, &(0x7f0000001480)=@string={0xfc, 0x3, "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"}}, {0x4, &(0x7f0000001580)=@lang_id={0x4, 0x3, 0x2c09}}, {0x4, &(0x7f00000015c0)=@lang_id={0x4, 0x3, 0x437}}]}) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000001680)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x1a30, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x40, 0x3, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x2, 0xb9, {0x9, 0x21, 0x8, 0xfe, 0x1, {0x22, 0x5bb}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xf8, 0x5, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x80, 0x4, 0xa}}]}}}]}}]}}, &(0x7f0000001780)={0xa, &(0x7f00000016c0)={0xa, 0x6, 0x300, 0xc, 0xc3, 0xc3, 0x10, 0x3}, 0x5, &(0x7f0000001700)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000001740)=@lang_id={0x4, 0x3, 0x402}}]}) r4 = open(&(0x7f00000017c0)='./file0\x00', 0x1100, 0x151) ioctl$SW_SYNC_IOC_INC(r3, 0x40045701, &(0x7f0000001800)=0x5) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000001840)=0xffffffffffffffff, 0x4) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001880)={0x0, 0x1800000000000, 0x0, [0x50b1, 0xfffffffffffffff9, 0x0, 0x6, 0x6], [0x4, 0x200, 0x1, 0x1, 0x34a23e79, 0x7, 0x8000000000000000, 0x9, 0x8, 0x7, 0x7, 0x100000001, 0x3, 0x6, 0xbf, 0xffffffffffffff00, 0x8000000000000000, 0x5, 0xfffffffffffffff5, 0xfff, 0x6, 0x3f, 0x401, 0x5, 0x4, 0x6, 0x7, 0x40, 0x1000, 0x2, 0x8000, 0x6, 0x8, 0xffffffff, 0xac, 0xf39, 0x8, 0xfffffffffffffffa, 0x1, 0xfffffffffffffff9, 0x0, 0xf, 0x3, 0x4, 0x3, 0x8ea, 0xffffffffffffff81, 0x8, 0x1, 0x9, 0x5, 0x7ff, 0x10000, 0x300000000000000, 0x0, 0x2, 0x8000000000000000, 0x19, 0x10001, 0x9, 0x9, 0xeb4d, 0xffffffffffffff81, 0x0, 0x400, 0x2, 0x7f, 0x3ff, 0x8, 0x9, 0xf, 0x2b, 0x0, 0x5, 0x5, 0xffffffff, 0x10001, 0x3, 0x67, 0x9, 0x10, 0x6, 0x8, 0xffff, 0x7, 0x8000000000000000, 0x6, 0x9, 0x5, 0x7, 0x7, 0x9, 0x200, 0x6, 0x23f6, 0x10000, 0x8, 0x9, 0xffffffffffff8000, 0x1fe, 0x3, 0x6, 0x7fff, 0xf51, 0x930f, 0x7, 0xbe, 0x7fffffffffffffff, 0x1, 0x9, 0xd2b8, 0x5dd4, 0x7e9, 0x0, 0x0, 0xfffffffffffffffd, 0x1, 0x9, 0x5, 0x1, 0x52c38c76]}) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000001cc0)={r6, 0x0, 0x80000000, 0x1}) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000002100)={0x4, &(0x7f00000020c0)=[{0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000021c0)={r7, &(0x7f0000002140)=""/122}) fcntl$getownex(r4, 0x10, &(0x7f0000002200)={0x0, 0x0}) ptrace$ARCH_SHSTK_ENABLE(0x1e, r8, 0x3, 0x5001) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002240), 0x121001, 0x0) r10 = openat$cgroup_procs(r4, &(0x7f0000002280)='cgroup.procs\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r9, 0xc0189372, &(0x7f00000022c0)={{0x1, 0x1, 0x18, r10, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000002300)={{0x1, 0x1, 0x18, r0, {0x2be1}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000002340)={{0x1, 0x1, 0x18, r10}, './file0\x00'}) setsockopt$TIPC_IMPORTANCE(r11, 0x10f, 0x7f, &(0x7f0000002380), 0x4) dup(r0) ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) ioctl$KVM_CAP_HYPERV_TLBFLUSH(r11, 0x4068aea3, &(0x7f00000023c0)) 15.836161442s ago: executing program 2 (id=2715): syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000000904000001030000b4d53d2c20fb597f0500090581030002000007"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dcbeec0696c37b64e3b24da3183dbe97e805165c0f63cdc2e82818254950ee03568b88091e6a86450545c0e18e09"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r4, r3, 0x2, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000380)=r5, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r5, 0x4) write$UHID_INPUT(r2, &(0x7f0000000000)={0x7, {"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", 0x1000}}, 0x1006) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000080)="97") r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r7 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) close(r7) r8 = socket$xdp(0x2c, 0x3, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x108000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f0000000180)=0x10, 0x4) bind$xdp(r8, &(0x7f0000000200)={0x2c, 0x1, r10, 0xffffffff}, 0x10) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) r12 = dup(r11) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000005000000050000000020008000000a20de5c1000d1c000000030000000000000005000000000000000b0000003f000004100000000000b37400000c00000000090000000300000000000000000000020200000000003a95"], &(0x7f00000002c0)=""/200, 0x6a, 0xc8, 0x1}, 0x28) write$UHID_INPUT(r12, &(0x7f0000002080)={0xf, {"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", 0x104d}}, 0x1006) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @remote, @local, @local, @loopback}}}}, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x7) 15.043188214s ago: executing program 4 (id=2718): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f00000007c0)={0x48, 0x2, r2}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r2, 0x40000, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) 14.004768524s ago: executing program 4 (id=2721): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003f40), 0x0, 0x22, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000300)=0x8, 0x4) r2 = socket$inet(0x2, 0x1, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10, 0x2}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r2, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) syz_emit_ethernet(0x2c, &(0x7f0000000540)={@local, @multicast, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x23}, {[@cipso={0x86, 0x6}]}}, "cb8a"}}}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000040)={'lo\x00'}) r8 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/udp\x00') ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) r9 = socket$l2tp6(0xa, 0x2, 0x73) syz_usb_connect(0x0, 0x2d2, &(0x7f0000000340)=ANY=[@ANYBLOB="120100008b216740420709204661010203010902c002010000000009047500efd08de70009050201ff"], 0x0) sendto$inet6(r9, &(0x7f0000000a00)="92b94cc310", 0x5, 0x4044810, &(0x7f0000000b00)={0xa, 0x4e22, 0x1000, @remote}, 0x1c) r10 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000001c0)={0x4, r6, 'id0\x00'}) r12 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x80042, 0x0) r13 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) accept(r8, &(0x7f0000000400)=@sco={0x1f, @fixed}, &(0x7f0000000480)=0x80) r14 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r15 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000380)='/sys/fs/smackfs/doi\x00', 0x2, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r15, 0x8004f50e, &(0x7f00000003c0)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="60000000071400042cbd7000ebdbdf25080044006f793f1127f9b79cdd0000010083ecfcfe40d129341a4ea8ce3e265cfbd7ec3c76f92c5388a6729e084ac8a29b6b87cdd5566ce8afc9c3c0ce6a2c040ce805d1b8e5eba53c523e1e812f092ccca66196d8f677d3fa37e487e765409145a665616fc05961de8b8f18329c31d436bc224fc69936d8513649000171eba276bfd96771390a4bd12753d6dfa4c0f2a78be012f7670eba08479a392f0c44a0dc30891350a64b279a161b856456f454f5ee61a8eff868c71460a7be00c8356da92fa4b1e253796f68c747bba090c979719e157cfe0b6cd0", @ANYRES32=r10, @ANYBLOB='\b\x00D\x00', @ANYRES32=r11, @ANYBLOB="080001000200000008004400", @ANYRES32=r12, @ANYBLOB="080001000100000008004400", @ANYRES32=r13, @ANYBLOB="01000400", @ANYRES32=r14, @ANYBLOB="080001000200000005005400010000000500540000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x8080005) 13.940212269s ago: executing program 0 (id=2722): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x49}, 0x94) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) r3 = openat$cgroup_ro(r2, &(0x7f0000000240)='io.stat\x00', 0x275a, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r7, &(0x7f0000000480), &(0x7f0000000340)=@udp6=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r8, r5, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x2e, &(0x7f0000000a80)=ANY=[], 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r9, 0x84, 0x21, &(0x7f0000000180)=[@in={0x2, 0x0, @local}], 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r10) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0xf8, r11, 0x100, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{}, {0x0, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0xfffffd89}}, 0x20048881) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r13, @ANYBLOB="050003"], 0x28}}, 0x80) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00012abd7000fbdbdf251400000005000c0001000000050019000000000008000200010000000500180001050018000000000008010000080000000000000003000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x400d0c0) r14 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r14, 0x660c) 13.895157156s ago: executing program 0 (id=2724): sched_setaffinity(0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000004c0)='cdg\x00', 0x4) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201fb0000000008530846010000000000010902"], 0x0) shutdown(r1, 0x1) 12.393256013s ago: executing program 49 (id=2666): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x6, &(0x7f0000000200)=0x11) mmap(&(0x7f00004d4000/0x3000)=nil, 0x3000, 0xb635773f06ebbee6, 0x12, 0xffffffffffffffff, 0xdb713000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f00000004c0)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x7) ioctl$PIO_UNIMAPCLR(r3, 0x4b68, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x10001, 0x0, 0x0, 0x4, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x7fffffff, 0x2}, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffe) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0xf8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 11.660483888s ago: executing program 0 (id=2733): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0x1c09, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x408, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x8, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x6, 0x9, 0x9}}]}}}]}}]}}, 0x0) stat(&(0x7f0000000100)='./bus\x00', 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000080)='./file0/../file0/../file0/../file0\x00', 0x800, &(0x7f00000000c0), 0x48) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000080)='\x00') syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0x1c09, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x408, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x8, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x6, 0x9, 0x9}}]}}}]}}]}}, 0x0) (async) stat(&(0x7f0000000100)='./bus\x00', 0x0) (async) mount_setattr(0xffffffffffffffff, &(0x7f0000000080)='./file0/../file0/../file0/../file0\x00', 0x800, &(0x7f00000000c0), 0x48) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) sched_setaffinity(0x0, 0x0, 0x0) (async) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000080)='\x00') (async) 11.548168224s ago: executing program 4 (id=2734): syz_open_dev$sndctrl(&(0x7f0000001440), 0x1, 0x2001) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x121201, 0x0) write$dsp(r0, &(0x7f0000000400)="d2", 0x1) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000100)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = landlock_create_ruleset(&(0x7f00000004c0)={0x0, 0x1}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r4, 0x2, &(0x7f0000000500)={0x1}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r4, 0x2, &(0x7f0000000000)={0x1}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000140)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000040)="0f2330f30f22660f20c06635100000000f22c036650f01c466b9ee0a00000f328fc9a002c8660fd1edb8cd008ed066b94f0a000066b80900000066ba000000000f30baf80c66b839f7b38566efbafc0cb000ee", 0x53}], 0x1, 0x63, &(0x7f0000000240)=[@cr4={0x1, 0x2509e0}], 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) r6 = syz_open_pts(r1, 0x101) r7 = dup3(r6, r1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x4, 0x100) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r9, 0xc0884123, &(0x7f0000000280)={0x2, "f6654c9e6687261d04d6acf6c0ae89727499f9d6c43324273df798e2d16ffba95f160c8a4ebe25843c4b8715df24719d5de90c51347ea0899145020c8625e3c9", {0x62, 0x3ff}}) bind$inet6(r8, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r8, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r8, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902"], 0x0) shutdown(r8, 0x1) write$UHID_INPUT(r7, 0x0, 0x0) 10.259993618s ago: executing program 0 (id=2740): r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x228000, 0x0) ioctl$SNDCTL_TMR_START(r0, 0x5402) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x4bf8, 0xb2000) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000080)={0x5, r1, 'id1\x00'}) r3 = getpgrp(0xffffffffffffffff) r4 = syz_open_procfs(r3, &(0x7f0000000100)='net/ip_vs_stats_percpu\x00') ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000140)={0x0, 0x2}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8090) r6 = mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, 0x0, 0x2, 0x4000010, r4, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f00000002c0)="3ab22b1c02e0f0f8343599c51abd307ada1e56e00fd77be7ed94367a9216582ed8fc0cc67771e8c443dbc3c5045f7d79f817346255c63c02a4fe1b270e1abd4465cb788f951dd3c8", 0x0, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r8, 0x223, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x49}}}}, [@NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x20000080) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="e3fc940487019867ed8cd597074ba273e4bc714c636717a10271efe0dbbb0577ab7e75fb692206bdb595224277e3693fa8f24101d692df4f5a04257725cf8d11a874f69d971c91507ff734505f87c9b9c3a0a1505e1a1fea7429ef01986011648c8bfcfc0d2a7e830fabd149c6cb9daf06c4bbbc989392e172fc867e3f5ab606c2f2fcf106c7417eae9d5e52fc4825bd873c86e31239019727e6ab90acb321c3f3abb76fd13406e00c15effc3091171efe833c6fc0fa6c5bb0cf5e080481e296cbcdd314ab52e7b6fb9902d40be7666b6bb1b5af79fa780fd85323872a55b57470c38d8431124da9fac1", 0xea) r9 = syz_open_dev$ndb(&(0x7f00000005c0), 0x0, 0x100) r10 = dup(r9) ioctl$VIDIOC_STREAMOFF(r10, 0x40045613, &(0x7f0000000600)=0xfd5f) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) r12 = mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x0, 0x2, 0x4000010, r7, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r12, 0x20, &(0x7f0000000680)="80d8025fd4b7bb58c5dad517d04b656075c32c7304071437bc82b1d7559efe294c6f2ee3a0767b79bbf085a25c901d4b376efd1311598e7ed345bdfe74dc7676739050ccddaf2d6c", 0x0, 0x48) write$uinput_user_dev(r4, &(0x7f0000000700)={'syz0\x00', {0x2, 0x80, 0x3, 0xe0d}, 0x55, [0x8000, 0x6, 0xd, 0xe, 0x3, 0x1, 0x1, 0x4, 0x8, 0x408, 0x9, 0x3, 0x5, 0x6, 0x98, 0x10001, 0x2, 0x5, 0x4, 0x1ff, 0xfffffffc, 0x10000, 0x100, 0x9, 0x9, 0x9, 0x384, 0x6, 0xff, 0x100, 0xf, 0xffff, 0xf7, 0xe2, 0x80, 0x80000001, 0x401, 0x10, 0x9, 0x0, 0xfff, 0x28, 0x7040, 0x6, 0xd43d, 0xfffffffb, 0x400, 0x800, 0x6, 0x3, 0x9, 0x7ff, 0x0, 0xfffffffb, 0x3, 0x3, 0x717, 0x5, 0x45ee, 0x9, 0x68641792, 0x6, 0x2, 0x5], [0xffffff6b, 0x9, 0x8ca2, 0x5, 0x8, 0x4, 0x1, 0x8, 0x6, 0x7, 0x8, 0x1, 0xffff, 0x2, 0x10000, 0x239, 0x1a, 0xe, 0x9, 0x6, 0x6, 0x0, 0x7, 0xfffffffe, 0xdc, 0x3, 0xa632, 0x400, 0x80, 0x7, 0x0, 0x7, 0x8, 0x80, 0x3, 0x1, 0x8001, 0x7, 0x7, 0xfbb2, 0x6, 0x3, 0x8, 0x0, 0x6, 0x1, 0x6, 0x3, 0x3, 0x3, 0x5, 0x40, 0x8, 0xffffffbd, 0x5, 0x4, 0xfff, 0x1, 0x1, 0x8, 0x2, 0x81, 0x0, 0x7], [0x40, 0x1, 0x624, 0x4, 0x2, 0x0, 0x1, 0x1000, 0x3, 0x4, 0x5, 0x10000, 0x200, 0xfffffffc, 0x4, 0x3, 0x7, 0x2, 0x7, 0x7, 0x9, 0xe4, 0xffffffc0, 0x7, 0x3, 0x3, 0x3, 0x1, 0x4, 0x3, 0x8, 0xad50, 0x2, 0x2, 0x3ff, 0xffffffff, 0x0, 0xe, 0x0, 0x1c4, 0x5, 0x200, 0x4, 0x2, 0x7fffffff, 0x9, 0xa848, 0x800, 0x5, 0x1, 0x4, 0x8000, 0x2, 0x9, 0x10001, 0x3ff5, 0xffffffff, 0x2e00, 0xe0, 0x4, 0x0, 0x9, 0x6f, 0x7], [0x5, 0x4, 0x3, 0x3, 0x4, 0x765, 0x8, 0xe8, 0x1ff, 0x7f, 0x1, 0x0, 0x40, 0x7fff, 0x401, 0x1000, 0x7, 0x7ff, 0x4, 0x84, 0x4, 0x2aff, 0x9, 0xb09, 0x5, 0x9, 0x4040000, 0x7ff, 0x9, 0x2, 0x4, 0x10, 0x0, 0x5, 0xe, 0x8600, 0x0, 0x4, 0x649ed735, 0xd, 0x3, 0x3, 0x8000, 0x8, 0x3, 0x800, 0xff, 0xffff8000, 0x4, 0x1ff, 0x80000001, 0x3, 0x2, 0x3, 0x9, 0x2, 0x9, 0x8, 0x1, 0x1, 0x9, 0x9, 0x9, 0xe0c]}, 0x45c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000bc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r10, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, r8, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r13}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x40) openat$comedi(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/comedi4\x00', 0x4000, 0x0) r14 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x0, 0x100000b, 0x4010, r0, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r14, 0x20, &(0x7f0000000d00)="ca53c7713035bf11ce7d627d49a669907b87ab2e5fc041d9b1c7f0f4a080618d014677cac3974373cfded67297b9571d0c406eedd5eeef912e2bfb95890bd78af4d1a694e070708d", 0x0, 0x48) statx(r2, &(0x7f00000021c0)='./file0\x00', 0x4000, 0x10, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r4, &(0x7f0000002380)=[{{&(0x7f0000000d80)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000002140)=[{&(0x7f0000000e00)="8f941d77d100a2fc2d3c184c420fe1854b8bc09c73d4b492aea161", 0x1b}, {&(0x7f0000000e40)="a8b3415d47719a878300e434356f933b5c29aa92ad9d36a8f2abdd0f948bec5ac98e77c5b6e1e73f1399e2f8af547d86b94cc08cae6dc72fe91c2fea93ca1483a5ec49c2c4db01a779190700d6d62be0a30d23101c1d7f831bc01946c1c11abb467fc5fd354d51742a93350f21b4c0247e63d8235a7e5d0e88273c36283740dc273ceba32562dc7bdbd785b75eec3f906eefcb327974ad2801179bb2e1f0cd9233805e70fc3e267f61f7f701f57425122a4984dd9d1a406655630e05111b5a2b018a1719fe33e6b2c41fd97037c229450d351b0d6a0cb8c007c1638a839a4e17c2b9f3b8cf3dd5ccd984b2", 0xeb}, {&(0x7f0000000f40)="daeda7290e3b364b6259b3f03d6ab2c6affa5ea1e91de14650c359eb45015d73b7ae2c720346b360ad921d11ce93252556309e8aa5f2386b99ded1bef0ce38a5e73f9ac795c86a8ed4a67dc7387bfc4b55b23f6784e3a57884f75736fe7bc1b272c33c01aeac2769bd0672b5224068f1d984bf7ca5614d1dca986fc5b68b7acc29e5e95ddff495d3bbc1913e84c0cd143f1a3b859619a83e2370d857d622d5ddb5a060b40258d3d0b8e640e3fd4a5760ba28", 0xb2}, {&(0x7f0000001000)="3698922a0a28db6ce44e6628a27f1749", 0x10}, {&(0x7f0000001040)="dfb6e335d6c69176b27e4187ee9d4e38711ccd53811b28fb10d5aafddc18e351fb57e2f9dfeb3fb524a68fb49eac88f1b7e71fc8033d3c4b8a43b8421b81b915b49f8f70c8265f12884d8461812c4876b94f2ea2dfcf98ddc145846a797412b3ece5a4c95cd2bb947a7fb319b6a6d23a06477aa6d4fe523ab905f394b86478a3244727eb84f7b01297375b295cb33f3c8e76a3aa0350c83e5a37378af2447f184c398a05d760591c9e1b767d5ef51dc1f1410656ea58b0fc2c35ad690e53fe84c5bd434cd44a166726f274612395d67d13ce", 0xd2}, {&(0x7f0000001140)="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", 0x1000}], 0x6, &(0x7f0000002300)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xffffffffffffffff, r15}}}, @rights={{0x38, 0x1, 0x1, [r11, 0xffffffffffffffff, r5, r7, r11, r9, r9, r0, r4, r9]}}], 0x58, 0x4040050}}], 0x1, 0x40000) 10.238171059s ago: executing program 0 (id=2741): r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x100000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="0800050002010900680000800900456f002000660000401190780a010102ac1414aa4f204e22000c9078c1020000"], 0x2e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000440)=0x5) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000040)=0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="81ddd951c081442042dc90d406b9dddb3f9430aebb9a993e9b645524fceeb2efdb5193275c0fef07980b22464729cf588de1a46105c5b38e4952e5529563d86567fe82cda97663f9d333bf2e620ec8fb5c8740c27e3652376c1511307107ccec12dbba351fcb4d4896c18799cc62f9350816da6fae9813193bf9bac630aa7d567d", @ANYRESDEC=r4], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x310, 0x220, 0xffffffff, 0x310, 0xf0, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [0xff], 'ip6tnl0\x00', 'veth0_to_batadv\x00', {}, {}, 0x3a}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@mcast1, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[0xff000000, 0x0, 0xff000000]}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id=0x1, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0x775, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x53e) r9 = syz_io_uring_complete(0x0) sendmsg$nl_route_sched(r9, 0x0, 0x8040) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 6.092595115s ago: executing program 5 (id=2752): r0 = socket(0x10, 0x3, 0x4) (async) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000740)={0xfffffffc, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x6c, 0x14, 0xf0b, 0x0, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, {0x8}, {0xb, 0xfff9}, {0x4, 0x6}}, [@TCA_STAB={0x48, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0xfff8, 0xa, 0x1, 0x0, 0x82}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x14, 0x14, 0xd, 0x1, 0x2, 0x2, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x48000}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000071120b000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2c, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.067201206s ago: executing program 5 (id=2753): r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 5.99220593s ago: executing program 5 (id=2754): syz_emit_ethernet(0xce, &(0x7f00000008c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x9, 0x4, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local, {[@timestamp={0x44, 0xc, 0x8, 0x0, 0x0, [0x0, 0x0]}, @rr={0x7, 0x3, 0xd7}]}}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "6fdfa0d2001efbb3e29a4ac275ca11b984ff5def6ed2e4ea9bc0eabdd34c732b", "df23520b57e4c98679c7795a27c7bf3e7d776b600ba8d82d6ba417e219edd86fb708441efcf75fe803412dae374281c2", "5df814aa2e34e4f8a759805b993e2d69a8f476de686861a9850edbe3", {"2cfee9b9d5b0b2b171b51f9174963b0c", "e40ca7e0a7b4bbc4bc9720c876a57954"}}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000060000000405"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000200), 0x7fff, r2}, 0x38) 5.50609494s ago: executing program 5 (id=2755): sched_setaffinity(0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000004c0)='cdg\x00', 0x4) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r1, &(0x7f0000000380)="e8", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201fb0000000008530846010000000000010902"], 0x0) shutdown(r1, 0x1) 5.248360396s ago: executing program 6 (id=2756): r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/smackfs/direct\x00', 0x2, 0x0) writev(r0, &(0x7f0000002680)=[{&(0x7f00000001c0)='-', 0x1}], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r2, &(0x7f0000000440)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={0xffffffffffffffff, 0x4000, {0x0, 0x0, 0x0, 0x2ead, 0xf4f, 0x0, 0x0, 0x0, 0x8, "339f8207be82b3f78449f73eca0539e4ff740250ceaac510c3b3d741dd17c1c50d38127d218ef1e83323791c58d665000200dfff00", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174ff10000000000000010e200", [0x0, 0xfffffffffffffffd]}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_clone(0xa04c280, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x34, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000092df5510ac05269289b201020301090222000100000000090400000103e900000907000000000000000705d77b5d"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg$sock(r1, &(0x7f0000002e40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="e6a8702e03df353803111ba4367d1742237044fe4acd6b00307e5fc3045861974684fcc4b447164b7a3c0e13c0f8ad4c04b40e80d354effecf3e383be24dd3515fbe20c6d5f716d9aad416181f41", 0x4e}], 0x1, &(0x7f0000000180)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0x48}}, {{&(0x7f0000000300)=@phonet={0x23, 0x10, 0x5, 0x93}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000380)="a18e03239348878382e2f7506a3aed04abbca9efb0f2f9da0c597c6f331b500ca72d9de7190a60a73898bdbd03b92bdd9ab1ceb09bc501bf1f13e17294877b5585550a63219a79ff31939785d92cb27f296a604d96595b04d3", 0x59}, {&(0x7f0000001480)="ec65f11f4304595e2cb216e8a1bb701c555ba509b007dfaa1c3d2e83c79d41e92e1552a71c62f292e304c93328bfcf47ba5edc521c86fd3e9888682c996c45fa004f79a3aa647ec1cd42b95bde22582422e55d149e0efd7427dcd4516540192d43", 0x61}, {&(0x7f0000000200)="98164b88c31d554c41755433e57f3c809c04eaf48e4024dd4d76c2794c25", 0x1e}, {&(0x7f0000001500)="17ec39944a0b34f33b67a136976000cb00b1a499d3655b4f18e03939b1d58939c299d438cc0152a5117612dd7ce99d6d0a43d9b1f8886ba4d942b07bf05291f122a353cdba6ec21d93a372eaa37863fa79e76f5f721755843ce89ea0147833c7f09faddc23751e41a987a2019660860b365c6ea37b8e6202f43c6131c6d7dcfd16aa2dd341f06236f22fdf4eab95", 0x8e}], 0x4}}, {{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f00000015c0)="60f62ced9c8dfd244a7b43de7a0c7d2506e52f13fc0423bfd76bdc968bd3118786205b03e25ca81e2a43b417dc980e8405fe668ab8bca5c7e0490c2863227dd330a3d7bd42938089aa492c7e9b6309827fed016571a55e857139cef9dcb5adef716527000902c4c153bb87926b39db37b152e02cabfa7d5d4042830b2e2f5c048e097fc0a768d1b4f72305246248eb1dd02a10972e2cb375c0e84a3170e5d9ecdb8226f90074e21cb4257fbadd943870194e419bf01b5b50076ab132759ffa78f54c00746303bc24050a1f56c76afef749d43629ae6ec7b752a40b44b929e38a918e2b20ee531a64ef01150e59efb72afe1145fa44a79b1fca8299a6065b1fcd1bfdbcb36263fa9fb83c6435f9dbf38c0a988feaaaa0472801e42d128f15d17ee526f81086918c9f145dc0e7faac6d8a86b7b3f288bc895a9e54ae156473f16a89d92aebeba52197e7244d668690d493bcd25e48da98ee26935b500c29b8a13706468b424ea0bbb12d8e9bc18cc0b977229a24f748c361a114704284d104c243644bbe2527ac4af601eaa601ccfc7116606d2cd7e4c94d2fc9953202988925c06f366b29c47290ac9358ff96ba34032e391df77b2de5f31f9c50296aaf6bd55d4d66c403143c40f99d95819e6c09e905ade8876816999a1c25d10bd0fb603d645398ed1762e7209d418c67a518f1f5e5dd369fa233cbd004015c0b58e80be83f96a2ea87aac097edb1bca53cfad4158e8f389160254c067203b2b64ca5594d0ae18fd477884ab4bf5cc8d5cdbf6c38479d26cf80b38727ec2620931d559e27fced89acf053ba8260369b6a584338b4e1ccbfcb5aca3a50b6ce8036104fb2f4358ae8bffbd5d7bc38a2d739cb18a6dda71c355a8847715f931c0a2526949d4740977e9d0754f1e28be4c9871f1ce089c742cad577e2cc732a3f0e120a244acfa2b9372a6f6b6553f879f514ce66a10ca4ad709bdccf23f702e56252dc4c67237493611e017df2a747da23e395a38aa387af2e9370fe919a813b20a1b0cdc90e770f2ca82fd0e84e91402af56e18e77e0e8f64301c43155ce1868bbdd88bf1ddd1670430a01616e784298117e8ed207b018dd73edba306119e5863ee1adcf44d0ada90adf463e2710c7d22097db6a45096de18b883e650020764680d8ef6a3f7c9d5c947bdd4ceec17ee3b2fed0d0dc9260e3283f097eeda4ce3cf4271b46205d0df89732ebdc4da09f332b62feb423fffce19d2699b1d00bd1dd0e9c9e1e925c2cd1546e119d31174f0ddf120d30228cef74b7026c3dd4b80df92deeb920e4a12a06db5c01c03645b4e8d74999af9de8c74187f0407598be753ca023d8607d912eb38b3ea7d8ad425908023df9c05de460eb85866c4de94bbb71ca8b59a65ce07d26e54ba1c48889c6be2226ead3fdf6ee43b048df91e171727732c8ef73ea7ee44fa8df48ed4c1f0398521780c8e2016ee5f7f5e860a3584d553ecc754c27dc96752db5317e3ffae34d9015b24c5fafaf262f9c38dfdff97dd89f205def409a42fcc2f1a6a06ed4393cb0d2580ec89d400756b7a89a4d2ee74f99317f8f54d60c8f8b92eb12fdc8c09890c3c45caf1950970e9987bc437ddbca97f5b88394d208ea3905bb44fdc5d86f29da9351931c2e99c95f96941c0379484fa47befafe1557a43bc4e1463e821c4aeb212447ef17d26cc780fb6dba32db849dc44c8f2e6874341355dcc3922ebf8c951ae464aef54745c0fb5bdc1ef12fb5a7b87de44576c4acc0ac57a66a79853f3cc495232d10d1a7e536878f72c7aa7eec47b97de298a50faa6ff24d16910d3b41933003e3555fdfd75d1786d7a6528c616ddf2f03b4770c60fd502d5210a8b9e88f52f84a2df7fac2dae5b2653acfd68acf25323d09279b92caabdc8e40c1d2f70bec5d0398085fe87330c6e873cf51a399175dbdf0d9301582907128fb708ce2813774f6db3707d45c34c2ce34eff7a4e83192d4cc26b7644c7aecd0b4ffc52636ffd9d02c39462676abb75740c59381944c2ce3078c305a6ac85559ae72c372075488210c47db94d3b2bb9322525fbba0842918cfa0459a8445d576ad6491b389078b8efd81479dae72dd81affea855760309277b0b8e26dacf6d500ece20d67abaa5b23dc134d3848aa3274a0c632aced3e035cd7d87680139ebebc1551f188740970957b02514b1c97d346a5b0f79c79a0916ce8e13c954e8ebab6727756cfd73be76126dd07325dce5e9092d506e82f520ff1c9b4bb5de226d4ed01cf245370e04a121442b288be9c3f3b5b3ee61ee4a934b479396547648f2b622f8f1c9b0273774ac50598e9b8cc6f6fd4e5c533744b53d5e2d135aeb403371020df153c8ae2b8dc72f1f7af24a7a83ad3df2cb052b087e00f86861907d98faeb0cd3b90180d501e47cf7abe40e9a44cda706da6afca1e8e905010946028e489cac5f9b016a76be213f8ade15487cb23256e3ec3cc354ab1ca012a252fe4e3a07a29c528a9035cc1018a1878f1c8fa4e593c9679475b9ba0ae2fcf8b4cac9264494f7854e16c2f7083a4507646ef31dc645f3e364166fff7d8bc47af1755cacf3f6f1295d2b48ff5d144e0e253106ddda1dcf2ee9e2b9343abe2d7dcbcc475e6e48691503a62331d1c481823d6e9535f84f0939feb4f19d4731ee9b1ad8005400f1f48191f22de9ab276bf46bfd1f9909ae5a5fa9e02bececb9b156dfc9dfd69eb637eca52f8ee23559efed3f9da56e41d998c078fbeb34b463c1ea26ced8ba458035feb7632ea1865fe0dc9257650cca3cb06cd05e3ec6da1592793b553796b45a8a8712dff37c20f1d95e3d08d0c237945047cd943e42e5d8a4d659021931b2f87d19ec169380e463c7884e09568fff9b23309eb7743c5840730b4fe5753d17a805d0bc1d96c602e576cfab705dec78a350980a782e92984ed4ca4d39e5a08257f97deaefa46c81c52973eccef60baa9c4c672d6652c40aeb3b29de928215abfbf34ae88e94f7f66f92b2086ef4916ad27337e8e4dbf1af582d82bb2959568b1867907995bd484e6c45a065980d6ab00f6abb1b9b08fb77bef0c0dc57a987c17f1a58d368563d59bc2cd733c4b3e803ee25bae1c62eaa7e810ece10acec768a331ecfcf7d9d0c79e08c4cd3eac18e6d34e124484bae75351db35725850e8704bb06609408d3ea1733a32e06024c34e410adc2ccc71c51aa334bc59e717ad3d028e718f6f821067104539620d386c66fa5c38244f59493794dc55806e704419cd35424b174b858b850eb581aea2943e51d8370cd5d0580cb03eebcd23ab8fa98d83e5202803750d1222cea13c9eb18f7664435403e9bc10d93687b713b08fdae46eed7f8623363ddab73cb456d3767a8746288c0a1499ed9f368467dd19538256258c24eabdbe42bf46091f1af471f9c7efbcca7e8953bd313e63715c1440160a139c7e7649a6610c6cd16f1e23484a490ad043a8c9d90fc8639f7a37a2321316c04296005f7006fff034c3ca5e2e4c6946d1c84c01be43e687ca725d33fc28061b5731675345a9ca0111f55441e17365e1aaf40c0f4bfa3c88a83f8e5d8eaeb1cfc53f15aaa52aa99208b6344dfbbac69e96014e12dd56a32ee7a65f98dcb47a4a37be672971af3592a58af6cf3ce7e4c402583ef3b926d4bc927ae5180dd9d70a5954fc0da2572a5612bc5a2fdef8ee8200ce641c21c2875f985ed2cfb9e10747f304bd3bf8025d41cb685c8ca0898d1768d8e6c9e8ba451b7c3b0bbab4e10ae451ea557684b8350c313b6dbbe0edb76fa623b7c3d743200bfaecad750c97795fbe6bc4c551700fc86d3050bcdef9ead09662e3a29a5524befaba974f7e07f98db9592ce8493ff8e394266970b8ef4a5a4ed0d3cf6a6589c82bf7696fc6dfd2e25e7b241086a518408e13f333defd2ea1dd10f1f71ab188d60ed76fecbdf9651b6ed1897fd4d7ccf9fbe48abcedcd911d6de19200529d3b96730384fbb6aefcb38b8deb1eea6b6f67fc2642788fbff29c9ecc694e8cc38a7b14fddbef3f78984add52d57da53c6117ad029fa8665ee4b32715d6c128458be6b009d3f75ce1875011605074733217c0c195973f36b43d4f7c426e06739ceeb2c229d890967dbedf6280246c457db8fa9d1aedaff906c941e127cabd7334e710d954d6ed556e61ac8fde372cc0f965eebd278b6ef472fbccb3c25570e62aa6878f80e0e097b358c8401c8619d0751c6163519e0dba054e2209b37db6c5e8667d4b614fbd031f14c68f298e920219bb92d746ebdb698ebf8facccf487cdb7d37bb1ea384349e900bb20536a9868172e6a452d0ab8370704455f17ab527f9d4b6c743386ccc0049dd3a37e311207428d706a4d61a3481fe5ce7bd78f9962c0f329da495a3e9085db59de062fbef856d49c60694fcd62a56a434ee9522167d1b509572b602e47182eb9e23cb07bebc1e7949ce457cfb223701d616f732ddb26610f77112e73f3a0fe750dd37bdfb5a92f843dc8e905788b41b127a173ed932a3a5b757222eb89c00112a6dd357d04ad9b09dd3384a5e633f0626ae3ea58ff5848fe4d8fe735500bcafed170fe4d83337c61ffdc0d916a24dac1a126d67ed41580889c7f1c42fec4e9a01c6f29f26f0ae4a7b8b91d209aba7ecafa36fd65d53215a67f84cbe862d2de7dfb618255f7dd8030ac12a7073d24c9972e03f5f4fd8cd61914dc6c78b03084bd9e8bffe4827880ef82ddb44fac1a6eecb4773d9b77910ab967c3ad28731af23439afe8163e7b01713ddd7d392bcf37a87acffd4a60813ce373d0560dc6c7b0d914c859270934dbb0fdd1d85dfbd8358c9b844d130927686a9811d00e7eaed70b9b4c8e5d993a8e5d25b989be23e64d9d41672208a33024448209a8288e10d62f13fd1f1919f431d76e151a894a6e8338387d9e5dc290844b13b12ad1977d9401c2bb585d9b07290a93d4bf2de99d5b37413f7771da61e63e9bc87ca40f28f43d41d5932bec9d101d938a1f0559c816cad7e71cad37562bcdfc8fa6629efc66fe992163be5f4b20c2ddfaf3b05b6e9f923040e268709e650fb19cf33eca95fd09b3b42dd66a09ee397ab2ea267e0e529e611c32c5dcf8f5cc40c28ab76ec0d0fe1643194fb53333e200539f06a732aaaf013e27b5ce01f6c35b6610c7223c7a580bd56865618eeb72007e888d04cb0d1fe0b01ad8c454915ff4749ea85289bbd90adc9654559697c2b809c5182e646d52d32ae5e12e8c5458a68fe81a33ff401b9361162a5f77dc94bdc1c70addf8542508662e76fadf0d88f2ce4361a169287574f8f98a2fba35112f7b70ed05079af57145e933840c06902bc258a2dee802591acd1f2d2b09f623f784ddf52f40ea1bdec5b3264626f8959fc67598c56adabda81d54214ad26ff8f171359c968f6ed1e2738a5306a8496e52c53043cc266d61033e9e65abfd0054ebbf2e5d639567ae308a22f1fbfa928ab886f5e8fb67be6f0d9b1ea1d0c190ae855df32571dd8bdb2503a8fe71dae9b376cc3c01e985b0960083842f935e32a2d5f27d5dfbebd3a85bf1da55e237a8005e7cf748bd9988ab9be0a4ad514534142da8c44ab2c166705038781de560500f86652248232098a6f2bb31145c300d922623c913e96ba7badb80bb86ab8c5b506503cf8dd29ed178fd619d27bbc68ffb6adb2c3f49d6f5b3f9b20c02a19814cd330f89ff8bdc032641ffa3726e02593c49a5707c991c7553b04cc5b26d4f5e782dafbd6c05f56ffe18eddecd1a87fe56baba5fb0075893132b467b26b1cf2", 0x1000}], 0x1, &(0x7f0000002600)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x10}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x727}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}], 0x78}}, {{&(0x7f0000002680)=@l2tp6={0xa, 0x0, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x3}, 0x80, &(0x7f0000002900)=[{&(0x7f0000002700)="d3e2bc08221d8dc250c98b2084992adb7ae6a8c97608917f0d6f2fc04bdf85df43fc93137e3e8f5875c89d8445fd07122b3489365571037f9c7dea68196471174e6b860231b93bf8cb369782d4129525053257bd97addcf99d52a710f2642f3590846eaeb5053c3a38033f61d15870e6bcefd90c458efaec239184a517c4d16847009737ec905bff090901661a9495adcd70827a853f92ed65127d0c20ec25b0fbc31cfb47bd92808c4d667253a39d40c39f4aa8b646a2a78543764c9ac1810f124fe1bf1292fce080c24c09ad0e6e05cef2b0967d495200277766e552170bfdeaf9bb4b201e360787bbfa7db82cdb62320fb4d828e5083917", 0xf9}, {&(0x7f0000002800)="c3687a1a7fc8a6051aa8bbfda93aa4b733867f5811e73b8670180babe9886fbc8b08300f07ceebe48bdddfa2b3f656897f1ce4d39b36e26a4cd4b9726117f7bc43ee26b29a9a9219ecd058f3584e670774336e5a6d2d9dde200976ee4806c67fa083adcc92c8f27556f3b63c02d694a045d68f5d95b7594d6d723fc1fa55a89d844cd975cd8b6465e6dd19b4aa2edb59ba6a061443d345436403f76003918a", 0x9f}, {&(0x7f00000028c0)="948e131f9404ac8fc902191824c3d020c5481237555a9202383f399705d02a", 0x1f}], 0x3, &(0x7f0000002940)=[@txtime={{0x18, 0x1, 0x3d, 0x100}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}], 0x30}}, {{&(0x7f0000002980)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e24}}, 0x80, &(0x7f0000002a80)=[{&(0x7f0000002a00)="0184dce874720b53172051ad145d3c2de674387fe4e9c8f4e04048434de5c524c3a77aa4d9eeb110ec10d4255ebafbd6140c28192b247f979bc55f8637043f250088", 0x42}], 0x1}}, {{&(0x7f0000002ac0)=@hci={0x1f, 0x3}, 0x80, &(0x7f0000002d80)=[{&(0x7f0000002b40)="9c79f1ae047187fe135f8d290ff8bd55fbd3c7873c2c423c2a35c0fcadccc7b8d4264a18ca5e28b33a92697ee872c3ac3197e07fcbb5d25929cad78cfccbb48a98d9ee9b8b5e04a957c2b9d6e95cb6319596f5be2c82547fc9d676fca0fbc2979b135ff2514599c06add2cb188896754c0291628ff5655cc81e60a60ce3c714278f8d7299aff15936a0cddb7cc8f81c203442db5db6b083854fcff65b880f8457d079c0bb8dc29b2b7", 0xa9}, {&(0x7f0000002c00)="2ecf79eb28a693b43d49426e6900c072c56ac3efedd7fc87d69cbbda276a2d3e417a01c9526034a6e4d53a77855ab0fe1a991f432a2cadac6d91557b19529be67deedc6a8421fefa7121a72c083f85a3dbb610dd0409b65cf9929fd80216441d3c3c59281ef14fa5197a35e40da2f7f9b3064d06953d2978b0a6d80759b6502790b15348d965f69e1e1d465e8a26ba02bb16fd649f50093b9316ac466f", 0x9d}, {&(0x7f0000002cc0)="541ddcc23ef99f3c70af892fddb504989d0a282c86ef821da7f680738e43c85d1ab4e29f1ed862b2e0341f68c58b3ee9616eedb75dec0c26ce537da09037c6eb167d230210cca1f8cff3bad0803aaf9e5dff97bcefaedc7d9760025c198489cf5dc3bca046ef4847bceea6b2e943faed60fef03f343bdde90fcf4b7aaea397c542f0", 0x82}], 0x3, &(0x7f0000002dc0)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0xfffffff3}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x80000001}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x78}}], 0x6, 0x1) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.720483526s ago: executing program 6 (id=2757): symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000240)={0x0, 0x0, 0x8}, 0x18) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f00000000c0)=""/75, &(0x7f0000000040)=0x4b) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffc, 0x6, 0x0, @scatter={0x1, 0x3, &(0x7f00000006c0)=[{0x0}]}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r5 = io_uring_setup(0xd71, &(0x7f0000000580)={0x0, 0x78ba, 0x2, 0x2, 0x20003d6}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 4.068097684s ago: executing program 5 (id=2758): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x40}, 0x0) accept4(r1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000440)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000004000000000950000000000000000007da0ed75a5ca413a00a48e187eeeca5174a4e900268f4e3e8c6181baf16de8e6621435"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x34, &(0x7f00000000c0)=r4, 0x4) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0xe, &(0x7f0000002500)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 3.756250198s ago: executing program 6 (id=2759): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = socket$packet(0x11, 0x2, 0x300) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x0, 0x891018, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) 3.522953537s ago: executing program 6 (id=2760): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x44000) 3.492595954s ago: executing program 5 (id=2761): syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000ffffffff0000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0xd313b529a64cfd3c, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x0, 0xe, 0x0, &(0x7f0000000640)="0cffffdf71c8afefeba000dee560", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.416282647s ago: executing program 6 (id=2762): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff0a}, 0x90) clock_nanosleep(0x9, 0xfcfdffff, &(0x7f00000004c0), 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000012c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000069000010000000004000050018010000696c6c2500000000002020207b1af8ff00000000bfa1000000000000070100fef7ffffffb702000008000000b703000000400005850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xfcc, &(0x7f0000001e00)=""/4044, 0x100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r3 = socket(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0xf4) prlimit64(0x0, 0x9, &(0x7f0000000040), 0x0) r5 = memfd_create(&(0x7f0000000300)='-B\xd5NI\xc5j\x9a\b\x00\x00\x00\b\x84\xa2{\x00\v\x18\x004\xa6Ey\xdb\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xc83\x12\xd7\xdb\x93\xcc]x\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x81\x01\xe5\x98\r\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r6 = dup(r5) r7 = fanotify_init(0x0, 0x0) fanotify_mark(r7, 0x1, 0x40000033, r6, 0x0) fremovexattr(r5, &(0x7f0000000000)=@known='system.posix_acl_access\x00') mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4008, 0x2) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r4, &(0x7f0000000200), &(0x7f0000001500)=@tcp=r3}, 0x20) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0xbc, 0x22, 0x800, 0x70bd28, 0x25dfdbfe, {0xf}, [@generic="4def3abf624504143e9544d5dac69781a30f4255a258cb710315024e59f8415477e58cc43838accdb6d0ef10c423984d69fa13d978bc5b24c2a94ad4a04d4f7ef45d41398f6c6c2166ba6c3853e31c71f9ff8a94c6ab3ca68dd5fa5324a6bfc7564ca651036a94a86472a05e378dfa45c8b656ae3ba9d5532c51839b7a72acdefb401b51b6d1a6e93173745970358f15d0543e5329f4e4d9601a2ea0227eec70c1d4", @typed={0x4, 0xce}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4}, 0x1) 3.398393889s ago: executing program 6 (id=2763): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x217d) fcntl$setstatus(r0, 0x4, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000001ec0), 0x800, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0, @ANYRES8=0x0, @ANYRESOCT=r2, @ANYRES8=r2, @ANYRESDEC, @ANYRES32=r1], 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r4, 0x114, 0x5, &(0x7f0000000100), 0x4) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000480)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r5, 0x3b8a, &(0x7f0000000380)={0x28, 0x0, r8, 0x0, 0x0}) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32, @ANYRESDEC=r7], &(0x7f00000003c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r9}, 0x18) socket$netlink(0x10, 0x3, 0x14) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79ae, 0x3180, 0x7ffe, 0x40024e}, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000002f40)=""/4098, 0x1002) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000200)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x400000, 'syz0\x00', 0x5}, 0x5, 0x100, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 0s ago: executing program 50 (id=2715): syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000000904000001030000b4d53d2c20fb597f0500090581030002000007"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dcbeec0696c37b64e3b24da3183dbe97e805165c0f63cdc2e82818254950ee03568b88091e6a86450545c0e18e09"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r4, r3, 0x2, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000380)=r5, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r5, 0x4) write$UHID_INPUT(r2, &(0x7f0000000000)={0x7, {"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", 0x1000}}, 0x1006) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000080)="97") r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r7 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) close(r7) r8 = socket$xdp(0x2c, 0x3, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x108000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f0000000180)=0x10, 0x4) bind$xdp(r8, &(0x7f0000000200)={0x2c, 0x1, r10, 0xffffffff}, 0x10) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) r12 = dup(r11) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000005000000050000000020008000000a20de5c1000d1c000000030000000000000005000000000000000b0000003f000004100000000000b37400000c00000000090000000300000000000000000000020200000000003a95"], &(0x7f00000002c0)=""/200, 0x6a, 0xc8, 0x1}, 0x28) write$UHID_INPUT(r12, &(0x7f0000002080)={0xf, {"a2e3ad21e08eeb661b5e190987f70e06d038e7ff7fc6e5539b0d650e8b089b3f313b68090890e0878f0e1ac6e7049b3146959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07440936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x104d}}, 0x1006) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @remote, @local, @local, @loopback}}}}, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x7) kernel console output (not intermixed with test programs): d length. [ 539.892180][ T5912] usb 5-1: USB disconnect, device number 26 [ 539.916807][ T5912] em28xx 5-1:0.0: Disconnecting em28xx [ 539.939201][ T5912] em28xx 5-1:0.0: Freeing device [ 540.102405][T10695] FAULT_INJECTION: forcing a failure. [ 540.102405][T10695] name failslab, interval 1, probability 0, space 0, times 0 [ 540.130377][T10695] CPU: 0 UID: 0 PID: 10695 Comm: syz.1.1312 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 540.130410][T10695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 540.130424][T10695] Call Trace: [ 540.130432][T10695] [ 540.130441][T10695] dump_stack_lvl+0x189/0x250 [ 540.130471][T10695] ? __pfx____ratelimit+0x10/0x10 [ 540.130505][T10695] ? __pfx_dump_stack_lvl+0x10/0x10 [ 540.130529][T10695] ? __pfx__printk+0x10/0x10 [ 540.130564][T10695] ? __pfx___might_resched+0x10/0x10 [ 540.130596][T10695] ? fs_reclaim_acquire+0x7d/0x100 [ 540.130627][T10695] should_fail_ex+0x414/0x560 [ 540.130661][T10695] should_failslab+0xa8/0x100 [ 540.130682][T10695] kmem_cache_alloc_noprof+0x73/0x3c0 [ 540.130711][T10695] ? getname_flags+0xb8/0x540 [ 540.130736][T10695] getname_flags+0xb8/0x540 [ 540.130761][T10695] do_sys_openat2+0xbc/0x1c0 [ 540.130788][T10695] ? __pfx_do_sys_openat2+0x10/0x10 [ 540.130811][T10695] ? ksys_write+0x22a/0x250 [ 540.130842][T10695] ? __pfx_ksys_write+0x10/0x10 [ 540.130875][T10695] __x64_sys_open+0x11e/0x150 [ 540.130903][T10695] do_syscall_64+0xfa/0x3b0 [ 540.130921][T10695] ? lockdep_hardirqs_on+0x9c/0x150 [ 540.130951][T10695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.130971][T10695] ? clear_bhb_loop+0x60/0xb0 [ 540.130995][T10695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.131015][T10695] RIP: 0033:0x7f2e9ff8e929 [ 540.131031][T10695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 540.131049][T10695] RSP: 002b:00007f2e9ddd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 540.131079][T10695] RAX: ffffffffffffffda RBX: 00007f2ea01b6080 RCX: 00007f2e9ff8e929 [ 540.131094][T10695] RDX: 0000000000000005 RSI: 00000000000a5941 RDI: 0000200000000200 [ 540.131106][T10695] RBP: 00007f2e9ddd5090 R08: 0000000000000000 R09: 0000000000000000 [ 540.131119][T10695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 540.131131][T10695] R13: 0000000000000001 R14: 00007f2ea01b6080 R15: 00007ffcf2f14458 [ 540.131162][T10695] [ 542.217458][T10711] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1317'. [ 542.260348][T10717] sp0: Synchronizing with TNC [ 543.159961][T10712] [U] è [ 544.907313][T10729] netlink: 'syz.4.1322': attribute type 21 has an invalid length. [ 545.056353][T10736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1323'. [ 545.063205][T10737] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 545.106293][T10739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1325'. [ 548.336852][T10763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1333'. [ 548.439112][T10763] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 548.846765][T10766] sp0: Synchronizing with TNC [ 549.233923][T10770] kernel read not supported for file /Ù“㎀Dg@]¦¢šeñÎh (pid: 10770 comm: syz.4.1335) [ 549.300000][T10764] [U] è [ 549.419771][ T30] audit: type=1800 audit(1751745324.258:33): pid=10770 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.1335" name=D99310E38E804467405DA6A29A65F1CE1868 dev="mqueue" ino=32317 res=0 errno=0 [ 549.452229][T10772] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 549.484281][T10772] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 549.560956][T10770] 9pnet_fd: Insufficient options for proto=fd [ 549.684266][T10778] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 549.703359][T10778] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 549.750113][T10782] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1337'. [ 549.885666][ T54] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 550.041082][ T54] usb 6-1: Using ep0 maxpacket: 8 [ 550.054363][ T54] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 550.082570][ T54] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 550.130774][ T54] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 551.967856][ T54] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 552.075338][ T54] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 552.240957][ T54] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 552.448088][ T54] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.449189][T10820] netlink: 'syz.3.1351': attribute type 8 has an invalid length. [ 553.465241][ T54] usb 6-1: usb_control_msg returned -71 [ 553.569426][ T54] usbtmc 6-1:16.0: can't read capabilities [ 553.581625][ T54] usb 6-1: USB disconnect, device number 20 [ 553.825572][ T5912] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 553.980330][ T5912] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 554.004580][ T5912] usb 4-1: config 0 has no interface number 0 [ 554.014344][T10841] FAULT_INJECTION: forcing a failure. [ 554.014344][T10841] name failslab, interval 1, probability 0, space 0, times 0 [ 554.040912][T10841] CPU: 1 UID: 0 PID: 10841 Comm: syz.0.1361 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 554.040937][T10841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 554.040949][T10841] Call Trace: [ 554.040957][T10841] [ 554.040965][T10841] dump_stack_lvl+0x189/0x250 [ 554.040990][T10841] ? __pfx____ratelimit+0x10/0x10 [ 554.041021][T10841] ? __pfx_dump_stack_lvl+0x10/0x10 [ 554.041043][T10841] ? __pfx__printk+0x10/0x10 [ 554.041074][T10841] ? __pfx___might_resched+0x10/0x10 [ 554.041095][T10841] ? fs_reclaim_acquire+0x7d/0x100 [ 554.041120][T10841] should_fail_ex+0x414/0x560 [ 554.041153][T10841] should_failslab+0xa8/0x100 [ 554.041173][T10841] __kmalloc_noprof+0xcb/0x4f0 [ 554.041197][T10841] ? kfree+0x4d/0x440 [ 554.041220][T10841] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 554.041247][T10841] tomoyo_realpath_from_path+0xe3/0x5d0 [ 554.041269][T10841] ? tomoyo_domain+0xda/0x130 [ 554.041296][T10841] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 554.041325][T10841] tomoyo_path_number_perm+0x1e8/0x5a0 [ 554.041355][T10841] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 554.041399][T10841] ? __lock_acquire+0xab9/0xd20 [ 554.041438][T10841] ? __fget_files+0x2a/0x420 [ 554.041458][T10841] ? __fget_files+0x2a/0x420 [ 554.041474][T10841] ? __fget_files+0x3a0/0x420 [ 554.041491][T10841] ? __fget_files+0x2a/0x420 [ 554.041512][T10841] security_file_ioctl+0xcb/0x2d0 [ 554.041543][T10841] __se_sys_ioctl+0x47/0x170 [ 554.041570][T10841] do_syscall_64+0xfa/0x3b0 [ 554.041589][T10841] ? lockdep_hardirqs_on+0x9c/0x150 [ 554.041616][T10841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.041633][T10841] ? clear_bhb_loop+0x60/0xb0 [ 554.041656][T10841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.041673][T10841] RIP: 0033:0x7f603e98e929 [ 554.041690][T10841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 554.041706][T10841] RSP: 002b:00007f603f8c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 554.041726][T10841] RAX: ffffffffffffffda RBX: 00007f603ebb5fa0 RCX: 00007f603e98e929 [ 554.041740][T10841] RDX: 00002000000000c0 RSI: 00000000c040564a RDI: 0000000000000003 [ 554.041752][T10841] RBP: 00007f603f8c2090 R08: 0000000000000000 R09: 0000000000000000 [ 554.041764][T10841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.041775][T10841] R13: 0000000000000000 R14: 00007f603ebb5fa0 R15: 00007ffd16c8ab08 [ 554.041804][T10841] [ 554.041812][T10841] ERROR: Out of memory at tomoyo_realpath_from_path. [ 554.055320][ T5912] usb 4-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 554.321761][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.445121][T10854] fuse: Bad value for 'group_id' [ 554.450177][T10854] fuse: Bad value for 'group_id' [ 555.325519][ T5912] usb 4-1: config 0 descriptor?? [ 555.345112][ T5912] usb 4-1: bad CDC descriptors [ 555.440907][ T54] usb 4-1: USB disconnect, device number 29 [ 555.540566][T10861] sp0: Synchronizing with TNC [ 555.625591][ T121] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 556.323844][T10859] [U] è [ 557.316889][ T121] usb 6-1: too many configurations: 151, using maximum allowed: 8 [ 557.334149][ T121] usb 6-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 557.374856][ T121] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 557.400769][ T121] usb 6-1: Product: syz [ 557.441627][ T121] usb 6-1: Manufacturer: syz [ 557.451735][ T121] usb 6-1: SerialNumber: syz [ 557.471875][ T121] usb 6-1: config 0 descriptor?? [ 557.691867][ T121] usb 6-1: bad CDC descriptors [ 557.725897][ T121] usb 6-1: USB disconnect, device number 21 [ 559.238573][T10891] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1377'. [ 559.336246][T10894] fuse: Bad value for 'group_id' [ 559.341269][T10894] fuse: Bad value for 'group_id' [ 559.515524][ T54] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 560.075912][ T54] usb 1-1: Using ep0 maxpacket: 32 [ 560.116735][ T54] usb 1-1: config 0 has an invalid interface number: 107 but max is 0 [ 560.180674][ T54] usb 1-1: config 0 has no interface number 0 [ 560.208186][ T54] usb 1-1: config 0 interface 107 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 560.253362][ T54] usb 1-1: config 0 interface 107 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 560.388800][T10899] overlay: Unknown parameter 'fowner<00000000000000000000' [ 560.394144][ T54] usb 1-1: New USB device found, idVendor=0403, idProduct=fa01, bcdDevice=82.8d [ 560.475709][ T54] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.563841][ T54] usb 1-1: Product: syz [ 560.639103][ T54] usb 1-1: Manufacturer: syz [ 560.646824][ T54] usb 1-1: SerialNumber: syz [ 560.659519][ T54] usb 1-1: config 0 descriptor?? [ 560.875871][ T121] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 560.889060][ T54] ftdi_sio 1-1:0.107: FTDI USB Serial Device converter detected [ 560.897915][ T54] ftdi_sio ttyUSB0: unknown device type: 0x828d [ 560.907196][ T54] usb 1-1: USB disconnect, device number 43 [ 560.915268][ T54] ftdi_sio 1-1:0.107: device disconnected [ 561.029459][ T121] usb 2-1: Using ep0 maxpacket: 8 [ 561.038431][ T121] usb 2-1: config 0 has an invalid interface number: 122 but max is 0 [ 561.046830][ T5926] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 561.055254][ T121] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.065782][ T121] usb 2-1: config 0 has no interface number 0 [ 561.072385][ T121] usb 2-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 561.083896][ T121] usb 2-1: config 0 interface 122 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 561.094707][ T121] usb 2-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 561.104868][ T121] usb 2-1: config 0 interface 122 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 8 [ 561.120286][ T121] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 561.129728][ T121] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.140033][ T121] usb 2-1: Product: syz [ 561.144315][ T121] usb 2-1: Manufacturer: syz [ 561.149330][ T121] usb 2-1: SerialNumber: syz [ 561.180007][ T121] usb 2-1: config 0 descriptor?? [ 561.218496][ T5926] usb 5-1: Using ep0 maxpacket: 8 [ 561.228250][ T5926] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 561.239071][ T5926] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 561.461748][ T5926] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 561.473517][ T5926] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 561.484650][ T5926] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 561.496729][ T5926] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 561.504356][ T5926] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 561.521038][ T5926] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 561.535154][T10905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.545142][T10905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.105156][ T5926] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 562.116460][ T5926] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 562.117509][T10933] fuse: Bad value for 'fd' [ 562.128460][ T5926] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 562.142578][ T5926] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 562.163833][ T121] usb 2-1: NFC: intf ffff8880298ec000 id ffffffff8eb40dc0 [ 562.252575][T10936] fuse: Bad value for 'group_id' [ 562.257720][T10936] fuse: Bad value for 'group_id' [ 562.575467][ T5926] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 562.587627][ T121] usb 2-1: USB disconnect, device number 22 [ 562.595475][ T5926] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 562.611981][ T5926] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 562.708874][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.715218][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.732650][ T5926] usb 5-1: string descriptor 0 read error: -22 [ 562.753100][ T5926] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 562.789211][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.820240][ T5926] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 563.023067][ T5912] usb 5-1: USB disconnect, device number 27 [ 563.234638][T10951] program syz.1.1397 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 563.265559][ T5926] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 563.458124][ T5926] usb 6-1: Using ep0 maxpacket: 32 [ 563.532698][ T5926] usb 6-1: config 32 has an invalid interface number: 76 but max is 0 [ 563.725280][ T5926] usb 6-1: config 32 has no interface number 0 [ 563.825750][ T30] audit: type=1326 audit(1751745338.688:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10944 comm="syz.3.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f730f18e929 code=0x7fc00000 [ 563.852679][ T5926] usb 6-1: config 32 interface 76 altsetting 0 endpoint 0xC has an invalid bInterval 129, changing to 11 [ 563.881826][ T5926] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.e3 [ 563.891096][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.907460][ T5926] usbtest 6-1:32.76: Linux gadget zero [ 563.913308][ T5926] usbtest 6-1:32.76: high-speed {control in/out int-out} tests (+alt) [ 564.217178][ T5926] usb 6-1: USB disconnect, device number 22 [ 565.611134][T10977] syz.5.1405: attempt to access beyond end of device [ 565.611134][T10977] nbd5: rw=0, sector=64, nr_sectors = 1 limit=0 [ 565.708830][T10977] syz.5.1405: attempt to access beyond end of device [ 565.708830][T10977] nbd5: rw=0, sector=256, nr_sectors = 1 limit=0 [ 565.721862][T10977] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 565.731622][T10977] syz.5.1405: attempt to access beyond end of device [ 565.731622][T10977] nbd5: rw=0, sector=512, nr_sectors = 1 limit=0 [ 565.747520][T10977] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 565.758354][T10977] syz.5.1405: attempt to access beyond end of device [ 565.758354][T10977] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0 [ 565.775699][T10977] syz.5.1405: attempt to access beyond end of device [ 565.775699][T10977] nbd5: rw=0, sector=512, nr_sectors = 2 limit=0 [ 565.812223][T10977] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 565.921271][T10977] syz.5.1405: attempt to access beyond end of device [ 565.921271][T10977] nbd5: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 565.938524][T10977] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 567.102797][T10977] syz.5.1405: attempt to access beyond end of device [ 567.102797][T10977] nbd5: rw=0, sector=64, nr_sectors = 4 limit=0 [ 567.688204][T10977] syz.5.1405: attempt to access beyond end of device [ 567.688204][T10977] nbd5: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 567.777225][ T5898] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 568.219165][ T5898] usb 1-1: Using ep0 maxpacket: 16 [ 568.456008][ T5898] usb 1-1: too many configurations: 101, using maximum allowed: 8 [ 568.466805][T10977] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 568.497628][ T5898] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 568.516217][ T5898] usb 1-1: can't read configurations, error -61 [ 569.071070][T10977] syz.5.1405: attempt to access beyond end of device [ 569.071070][T10977] nbd5: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 569.306631][T10977] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 569.348755][T10977] syz.5.1405: attempt to access beyond end of device [ 569.348755][T10977] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 569.405197][T10977] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 569.426081][T10977] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 569.446823][T10977] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 569.470963][ T5898] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 569.568348][T10978] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 569.589984][T10978] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 569.640996][T10978] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 569.661282][T10978] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 569.684756][T11000] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1413'. [ 569.694760][T10978] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 569.728298][T10978] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 569.756926][T11003] netlink: 'syz.3.1411': attribute type 13 has an invalid length. [ 569.777596][T10978] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 569.825778][T10978] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 569.847731][T10978] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 569.977303][T11007] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.1415'. [ 570.105844][ T5898] usb 1-1: device descriptor read/64, error -71 [ 570.169053][T11011] netlink: 'syz.5.1417': attribute type 6 has an invalid length. [ 570.177101][T11011] netlink: 'syz.5.1417': attribute type 7 has an invalid length. [ 570.184817][T11011] netlink: 'syz.5.1417': attribute type 8 has an invalid length. [ 570.230449][ T5898] usb usb1-port1: attempt power cycle [ 570.887009][ T5898] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 571.232863][ T5898] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 571.242549][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.268574][ T5898] usb 1-1: config 0 descriptor?? [ 571.307688][ T5898] gspca_main: spca508-2.14.0 probing 8086:0110 [ 571.743198][ T5898] gspca_spca508: reg_read err -71 [ 571.820609][ T5898] gspca_spca508: reg_read err -71 [ 571.909760][ T5898] gspca_spca508: reg_read err -71 [ 571.985284][ T5898] gspca_spca508: reg_read err -71 [ 572.084351][ T5898] gspca_spca508: reg write: error -71 [ 572.632302][ T5898] spca508 1-1:0.0: probe with driver spca508 failed with error -71 [ 573.902606][ T5898] usb 1-1: USB disconnect, device number 46 [ 574.166030][ T5912] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 574.525972][ T5912] usb 4-1: Using ep0 maxpacket: 8 [ 574.965533][ T5912] usb 4-1: config 1 has an invalid interface number: 128 but max is 1 [ 574.979893][ T5912] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 575.003233][ T5912] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 575.013114][ T5912] usb 4-1: config 1 has no interface number 0 [ 575.021641][ T5912] usb 4-1: config 1 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.072897][ T5912] usb 4-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 575.139027][ T5912] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 575.161565][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.209234][ T5912] usb 4-1: Product: syz [ 575.217372][ T5912] usb 4-1: Manufacturer: syz [ 575.222681][ T5912] usb 4-1: SerialNumber: syz [ 575.311688][ T5912] cdc_wdm 4-1:1.128: skipping garbage [ 575.320056][ T5912] cdc_wdm 4-1:1.128: cdc-wdm0: USB WDM device [ 575.327338][ T5912] cdc_wdm 4-1:1.128: Unknown control protocol [ 575.849616][T11059] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 575.904486][ T5898] usb 4-1: USB disconnect, device number 30 [ 576.285296][T11081] sp0: Synchronizing with TNC [ 577.091283][T11079] [U] è [ 577.430109][T11099] comedi comedi0: dt2817: I/O port conflict (0x4,5) [ 578.485672][ T5912] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 578.566002][ T5898] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 578.639633][ T5912] usb 5-1: New USB device found, idVendor=04a5, idProduct=3035, bcdDevice=b8.ef [ 578.656524][T11122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1452'. [ 578.675758][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.702151][ T5912] usb 5-1: Product: syz [ 578.711579][ T5912] usb 5-1: Manufacturer: syz [ 578.751100][ T5912] usb 5-1: SerialNumber: syz [ 578.756187][ T5898] usb 1-1: Using ep0 maxpacket: 8 [ 578.767517][ T5898] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 579.244040][ T5898] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 579.255360][ T5912] usb 5-1: config 0 descriptor?? [ 579.261892][ T5898] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 579.274888][ T5912] gspca_main: benq-2.14.0 probing 04a5:3035 [ 579.280906][ T5898] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 579.292995][ T5898] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 579.498848][ T5898] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 579.657589][ T5926] usb 5-1: USB disconnect, device number 28 [ 579.774173][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.467971][ T5898] usb 1-1: usb_control_msg returned -71 [ 580.505923][ T5898] usbtmc 1-1:16.0: can't read capabilities [ 580.552142][ T5898] usb 1-1: USB disconnect, device number 47 [ 580.733540][T11143] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1459'. [ 581.015850][T11154] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 581.039348][T11154] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 581.066980][T11154] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 581.261493][T11168] tun0: tun_chr_ioctl cmd 2148553947 [ 581.288570][T11168] tun0: tun_chr_ioctl cmd 1074025675 [ 581.311065][T11168] tun0: persist enabled [ 581.328992][T11168] tun0: tun_chr_ioctl cmd 1074025675 [ 581.365553][T11168] tun0: persist disabled [ 581.689048][T11181] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1475'. [ 581.735517][T11181] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1475'. [ 581.805590][ T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 581.986119][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 582.000395][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 582.021229][ T9] usb 4-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 582.034682][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.070760][ T9] usb 4-1: Product: syz [ 582.074981][ T9] usb 4-1: Manufacturer: syz [ 582.092529][ T9] usb 4-1: SerialNumber: syz [ 582.111048][ T9] usb 4-1: config 0 descriptor?? [ 582.132063][ T9] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -12 [ 582.205480][ T5926] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 582.231380][ T9] hid-generic 009C:0008:0003.0009: unknown main item tag 0x0 [ 582.242313][ T9] hid-generic 009C:0008:0003.0009: unknown main item tag 0x0 [ 582.250669][ T9] hid-generic 009C:0008:0003.0009: unknown main item tag 0x0 [ 582.261265][ T9] hid-generic 009C:0008:0003.0009: unknown main item tag 0x0 [ 582.268977][ T9] hid-generic 009C:0008:0003.0009: unknown main item tag 0x0 [ 582.279505][ T9] hid-generic 009C:0008:0003.0009: unknown main item tag 0x0 [ 582.287338][ T9] hid-generic 009C:0008:0003.0009: unknown main item tag 0x0 [ 582.295200][ T9] hid-generic 009C:0008:0003.0009: unknown main item tag 0x0 [ 582.306985][ T9] hid-generic 009C:0008:0003.0009: unknown main item tag 0x0 [ 582.314403][ T9] hid-generic 009C:0008:0003.0009: unknown main item tag 0x0 [ 582.324425][ T9] hid-generic 009C:0008:0003.0009: unknown main item tag 0x0 [ 582.336121][ T9] hid-generic 009C:0008:0003.0009: unknown main item tag 0x0 [ 582.343535][ T9] hid-generic 009C:0008:0003.0009: unknown main item tag 0x0 [ 582.351349][ T9] hid-generic 009C:0008:0003.0009: unknown main item tag 0x0 [ 582.360278][ T9] hid-generic 009C:0008:0003.0009: unknown main item tag 0x0 [ 582.365969][ T5926] usb 5-1: Using ep0 maxpacket: 8 [ 582.376870][ T9] hid-generic 009C:0008:0003.0009: hidraw0: HID v0.05 Device [syz1] on syz0 [ 582.386064][ T5926] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 583.588184][T11226] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1490'. [ 583.717260][ T5926] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 584.985838][ T9] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 585.308824][ T9] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 585.376099][ T9] usb 6-1: can't read configurations, error -22 [ 585.577523][ T5926] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 585.587457][ T5926] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 585.595948][ T9] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 585.597490][ T5926] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 585.619780][ T5926] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 585.628951][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.640456][ T5926] usb 5-1: can't set config #16, error -71 [ 585.664537][ T5926] usb 5-1: USB disconnect, device number 29 [ 585.715891][ T121] usb 4-1: USB disconnect, device number 31 [ 585.749424][T11235] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 585.755970][T11235] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 585.766537][T11235] vhci_hcd vhci_hcd.0: Device attached [ 585.773727][T11236] vhci_hcd: connection closed [ 585.775232][ T6199] vhci_hcd: stop threads [ 585.792883][ T9] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 585.801081][ T9] usb 6-1: can't read configurations, error -22 [ 585.817678][ T6199] vhci_hcd: release socket [ 585.822595][ T9] usb usb6-port1: attempt power cycle [ 585.845334][ T6199] vhci_hcd: disconnect device [ 586.704973][T11255] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1501'. [ 587.098143][T10620] Bluetooth: hci2: unexpected event for opcode 0x0c20 [ 588.928343][ T30] audit: type=1326 audit(2000000000.020:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11273 comm="syz.0.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603e98e929 code=0x7fc00000 [ 588.956804][ T30] audit: type=1326 audit(2000000000.020:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11273 comm="syz.0.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603e98e929 code=0x7fc00000 [ 589.113062][ T30] audit: type=1326 audit(2000000000.020:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11273 comm="syz.0.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603e98e929 code=0x7fc00000 [ 589.134523][ C0] vkms_vblank_simulate: vblank timer overrun [ 589.144050][ T30] audit: type=1326 audit(2000000000.020:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11273 comm="syz.0.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603e98e929 code=0x7fc00000 [ 589.161658][T11282] SET target dimension over the limit! [ 589.165613][ C0] vkms_vblank_simulate: vblank timer overrun [ 589.181345][ T30] audit: type=1326 audit(2000000000.020:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11273 comm="syz.0.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603e98e929 code=0x7fc00000 [ 590.045475][ T30] audit: type=1326 audit(2000000000.020:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11273 comm="syz.0.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603e98e929 code=0x7fc00000 [ 590.068228][ T30] audit: type=1326 audit(2000000000.020:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11273 comm="syz.0.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603e98e929 code=0x7fc00000 [ 590.103792][ T30] audit: type=1326 audit(2000000000.020:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11273 comm="syz.0.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603e98e929 code=0x7fc00000 [ 590.151942][ T30] audit: type=1326 audit(2000000000.030:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11273 comm="syz.0.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603e98e929 code=0x7fc00000 [ 590.174206][ T30] audit: type=1326 audit(2000000000.030:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11273 comm="syz.0.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603e98e929 code=0x7fc00000 [ 590.575693][ T10] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 590.755667][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 590.878737][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 591.596011][T11319] loop2: detected capacity change from 0 to 7 [ 591.604463][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 591.619923][T11319] Dev loop2: unable to read RDB block 7 [ 591.625813][T11319] loop2: AHDI p1 p2 p3 [ 591.630016][T11319] loop2: partition table partially beyond EOD, truncated [ 591.638387][T11319] loop2: p1 start 1601398130 is beyond EOD, truncated [ 591.645161][T11319] loop2: p2 start 1702059890 is beyond EOD, truncated [ 591.889414][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 591.899273][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.907607][ T10] usb 1-1: Product: syz [ 591.911884][ T10] usb 1-1: Manufacturer: syz [ 591.925927][ T10] usb 1-1: SerialNumber: syz [ 592.292635][T11329] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1515'. [ 592.303609][T11327] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1515'. [ 592.579396][ T10] usb 1-1: 0:2 : does not exist [ 592.635444][ T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 592.791687][ T9] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 592.803867][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 592.822594][ T9] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c04, bcdDevice= 0.00 [ 592.837904][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.858044][ T9] usb 4-1: config 0 descriptor?? [ 593.302509][ T9] corsair-psu 0003:1B1C:1C04.000A: hidraw0: USB HID v0.01 Device [HID 1b1c:1c04] on usb-dummy_hcd.3-1/input0 [ 593.366664][ T54] usb 1-1: USB disconnect, device number 48 [ 593.487297][ T9] corsair-psu 0003:1B1C:1C04.000A: unable to initialize device (-71) [ 593.496938][T11344] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.518604][ T6209] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.526296][ T6209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 593.538156][ T9] corsair-psu 0003:1B1C:1C04.000A: probe with driver corsair-psu failed with error -71 [ 593.567396][ T9] usb 4-1: USB disconnect, device number 32 [ 596.681979][T11407] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1552'. [ 596.910607][T11412] bio_check_eod: 14 callbacks suppressed [ 596.910627][T11412] syz.0.1551: attempt to access beyond end of device [ 596.910627][T11412] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 596.910738][T11412] efs: cannot read volume header [ 596.976697][T11411] comedi comedi0: Minor 14 could not be opened [ 598.329580][T11422] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1556'. [ 598.545101][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 599.788651][T11439] FAULT_INJECTION: forcing a failure. [ 599.788651][T11439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 599.907698][T11439] CPU: 1 UID: 0 PID: 11439 Comm: syz.5.1560 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 599.907719][T11439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 599.907728][T11439] Call Trace: [ 599.907733][T11439] [ 599.907740][T11439] dump_stack_lvl+0x189/0x250 [ 599.907760][T11439] ? __pfx____ratelimit+0x10/0x10 [ 599.907782][T11439] ? __pfx_dump_stack_lvl+0x10/0x10 [ 599.907797][T11439] ? __pfx__printk+0x10/0x10 [ 599.907815][T11439] ? __might_fault+0xb0/0x130 [ 599.907843][T11439] should_fail_ex+0x414/0x560 [ 599.907867][T11439] _copy_from_iter+0x1db/0x16f0 [ 599.907883][T11439] ? rcu_is_watching+0x15/0xb0 [ 599.907900][T11439] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 599.907921][T11439] ? __pfx__copy_from_iter+0x10/0x10 [ 599.907936][T11439] ? __build_skb_around+0x257/0x3e0 [ 599.907954][T11439] ? netlink_sendmsg+0x642/0xb30 [ 599.907971][T11439] ? skb_put+0x11b/0x210 [ 599.907989][T11439] netlink_sendmsg+0x6b2/0xb30 [ 599.908012][T11439] ? __pfx_netlink_sendmsg+0x10/0x10 [ 599.908034][T11439] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 599.908054][T11439] ? __pfx_netlink_sendmsg+0x10/0x10 [ 599.908071][T11439] __sock_sendmsg+0x219/0x270 [ 599.908086][T11439] ____sys_sendmsg+0x505/0x830 [ 599.908108][T11439] ? __pfx_____sys_sendmsg+0x10/0x10 [ 599.908132][T11439] ? import_iovec+0x74/0xa0 [ 599.908150][T11439] ___sys_sendmsg+0x21f/0x2a0 [ 599.908169][T11439] ? __pfx____sys_sendmsg+0x10/0x10 [ 599.908211][T11439] ? __fget_files+0x2a/0x420 [ 599.908224][T11439] ? __fget_files+0x3a0/0x420 [ 599.908244][T11439] __x64_sys_sendmsg+0x19b/0x260 [ 599.908263][T11439] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 599.908288][T11439] ? __pfx_ksys_write+0x10/0x10 [ 599.908306][T11439] ? rcu_is_watching+0x15/0xb0 [ 599.908323][T11439] ? do_syscall_64+0xbe/0x3b0 [ 599.908339][T11439] do_syscall_64+0xfa/0x3b0 [ 599.908351][T11439] ? lockdep_hardirqs_on+0x9c/0x150 [ 599.908371][T11439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.908384][T11439] ? clear_bhb_loop+0x60/0xb0 [ 599.908400][T11439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.908413][T11439] RIP: 0033:0x7f8a2818e929 [ 599.908425][T11439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 599.908437][T11439] RSP: 002b:00007f8a28fed038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 599.908452][T11439] RAX: ffffffffffffffda RBX: 00007f8a283b5fa0 RCX: 00007f8a2818e929 [ 599.908462][T11439] RDX: 00000000240008c4 RSI: 0000200000000000 RDI: 0000000000000004 [ 599.908470][T11439] RBP: 00007f8a28fed090 R08: 0000000000000000 R09: 0000000000000000 [ 599.908478][T11439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 599.908486][T11439] R13: 0000000000000000 R14: 00007f8a283b5fa0 R15: 00007fff837efb88 [ 599.908506][T11439] [ 600.300206][T11441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1562'. [ 600.354293][T11451] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1562'. [ 600.374972][T11451] netlink: 'syz.0.1562': attribute type 7 has an invalid length. [ 600.396683][T11451] netlink: 'syz.0.1562': attribute type 8 has an invalid length. [ 600.404644][T11451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1562'. [ 600.581565][T11455] SET target dimension over the limit! [ 600.599212][T11456] SET target dimension over the limit! [ 601.404318][T11463] 9pnet_fd: Insufficient options for proto=fd [ 601.825200][T11486] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1575'. [ 601.840931][T11483] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1575'. [ 601.941669][ T5926] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 601.983309][T11489] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1576'. [ 602.631742][ T5926] usb 6-1: Using ep0 maxpacket: 16 [ 602.692983][ T5926] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 602.714519][ T5926] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 602.761200][ T5926] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 602.780625][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.804734][ T5926] usb 6-1: Product: syz [ 602.821144][ T5926] usb 6-1: Manufacturer: syz [ 602.834870][ T5926] usb 6-1: SerialNumber: syz [ 603.270972][T11500] SET target dimension over the limit! [ 603.298837][T11503] FAULT_INJECTION: forcing a failure. [ 603.298837][T11503] name failslab, interval 1, probability 0, space 0, times 0 [ 603.362727][T11503] CPU: 0 UID: 0 PID: 11503 Comm: syz.0.1580 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 603.362753][T11503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 603.362764][T11503] Call Trace: [ 603.362772][T11503] [ 603.362780][T11503] dump_stack_lvl+0x189/0x250 [ 603.362807][T11503] ? __pfx____ratelimit+0x10/0x10 [ 603.362837][T11503] ? __pfx_dump_stack_lvl+0x10/0x10 [ 603.362858][T11503] ? __pfx__printk+0x10/0x10 [ 603.362889][T11503] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 603.362922][T11503] should_fail_ex+0x414/0x560 [ 603.362956][T11503] should_failslab+0xa8/0x100 [ 603.362976][T11503] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 603.363005][T11503] ? __alloc_skb+0x112/0x2d0 [ 603.363032][T11503] __alloc_skb+0x112/0x2d0 [ 603.363059][T11503] xfrm_send_state_notify+0x884/0x18b0 [ 603.363089][T11503] ? __pfx_xfrm_send_state_notify+0x10/0x10 [ 603.363109][T11503] ? km_state_notify+0x25/0x1f0 [ 603.363139][T11503] ? km_state_notify+0x25/0x1f0 [ 603.363160][T11503] ? km_state_notify+0x25/0x1f0 [ 603.363182][T11503] ? __pfx_xfrm_send_state_notify+0x10/0x10 [ 603.363204][T11503] km_state_notify+0x110/0x1f0 [ 603.363230][T11503] xfrm_add_sa+0x3728/0x4050 [ 603.363271][T11503] ? __pfx_xfrm_add_sa+0x10/0x10 [ 603.363300][T11503] ? __nla_parse+0x40/0x60 [ 603.363325][T11503] xfrm_user_rcv_msg+0x7a0/0xab0 [ 603.363355][T11503] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 603.363413][T11503] ? __mutex_trylock_common+0x153/0x260 [ 603.363441][T11503] ? __pfx___mutex_trylock_common+0x10/0x10 [ 603.363469][T11503] ? rcu_is_watching+0x15/0xb0 [ 603.363491][T11503] ? trace_contention_end+0x39/0x120 [ 603.363521][T11503] netlink_rcv_skb+0x205/0x470 [ 603.363546][T11503] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 603.363572][T11503] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 603.363612][T11503] ? netlink_deliver_tap+0x2e/0x1b0 [ 603.363635][T11503] ? netlink_deliver_tap+0x2e/0x1b0 [ 603.363660][T11503] xfrm_netlink_rcv+0x79/0x90 [ 603.363685][T11503] netlink_unicast+0x758/0x8d0 [ 603.363721][T11503] netlink_sendmsg+0x805/0xb30 [ 603.363759][T11503] ? __pfx_netlink_sendmsg+0x10/0x10 [ 603.363813][T11503] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 603.363845][T11503] ? __pfx_netlink_sendmsg+0x10/0x10 [ 603.363879][T11503] __sock_sendmsg+0x219/0x270 [ 603.363905][T11503] ____sys_sendmsg+0x505/0x830 [ 603.363941][T11503] ? __pfx_____sys_sendmsg+0x10/0x10 [ 603.363983][T11503] ? import_iovec+0x74/0xa0 [ 603.364014][T11503] ___sys_sendmsg+0x21f/0x2a0 [ 603.364047][T11503] ? __pfx____sys_sendmsg+0x10/0x10 [ 603.364121][T11503] ? __fget_files+0x2a/0x420 [ 603.364141][T11503] ? __fget_files+0x3a0/0x420 [ 603.364177][T11503] __x64_sys_sendmsg+0x19b/0x260 [ 603.364209][T11503] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 603.364263][T11503] ? rcu_is_watching+0x15/0xb0 [ 603.364289][T11503] ? trace_sys_enter+0x25/0x120 [ 603.364317][T11503] do_syscall_64+0xfa/0x3b0 [ 603.364337][T11503] ? lockdep_hardirqs_on+0x9c/0x150 [ 603.364371][T11503] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.364394][T11503] ? clear_bhb_loop+0x60/0xb0 [ 603.364430][T11503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.364452][T11503] RIP: 0033:0x7f603e98e929 [ 603.364471][T11503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 603.364490][T11503] RSP: 002b:00007f603f8c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 603.364514][T11503] RAX: ffffffffffffffda RBX: 00007f603ebb5fa0 RCX: 00007f603e98e929 [ 603.364531][T11503] RDX: 0000000000004810 RSI: 00002000000035c0 RDI: 0000000000000003 [ 603.364545][T11503] RBP: 00007f603f8c2090 R08: 0000000000000000 R09: 0000000000000000 [ 603.364558][T11503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 603.364571][T11503] R13: 0000000000000000 R14: 00007f603ebb5fa0 R15: 00007ffd16c8ab08 [ 603.364606][T11503] [ 603.435003][ T121] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 603.570410][ T5859] Bluetooth: hci5: unexpected event 0x02 length: 0 < 1 [ 603.819701][ T5926] usb 6-1: 0:2 : does not exist [ 603.839500][ T5926] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 603.863997][ T5926] usb 6-1: USB disconnect, device number 26 [ 603.969684][ T121] usb 4-1: Using ep0 maxpacket: 16 [ 603.977028][ T121] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.002152][ T121] usb 4-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00 [ 604.011410][ T121] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.030020][ T121] usb 4-1: config 0 descriptor?? [ 604.104646][ T9] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 604.257419][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 604.271529][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 604.282232][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 604.294765][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.307642][ T9] usb 1-1: config 0 descriptor?? [ 604.788865][ T121] apple 0003:05AC:027C.000B: item fetching failed at offset 0/5 [ 604.816371][ T121] apple 0003:05AC:027C.000B: parse failed [ 604.837350][ T121] apple 0003:05AC:027C.000B: probe with driver apple failed with error -22 [ 604.874434][ T121] usb 4-1: USB disconnect, device number 33 [ 605.089300][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 605.096908][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 605.135192][ T9] usb 1-1: USB disconnect, device number 49 [ 605.235472][T11531] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1589'. [ 605.248031][T11530] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1589'. [ 605.584581][ T5859] Bluetooth: hci5: command 0x1003 tx timeout [ 605.591934][T10620] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 606.243308][T11555] SET target dimension over the limit! [ 606.959044][T11571] evm: overlay not supported [ 607.270935][T11548] input: syz0 as /devices/virtual/input/input56 [ 607.337923][T11578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1604'. [ 607.444616][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 607.444635][ T30] audit: type=1326 audit(2000000018.551:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11565 comm="syz.1.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9ff8e929 code=0x7fc00000 [ 607.460795][T11586] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1608'. [ 607.584808][ T9] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 607.806850][T11594] batman_adv: batadv0: Adding interface: ipvlan2 [ 607.826227][T11594] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 607.914695][T11594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.954699][T11594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.994575][T11594] batman_adv: batadv0: Interface activated: ipvlan2 [ 608.135607][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 608.144803][ T9] usb 5-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 608.154222][ T9] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 608.166055][ T9] usb 5-1: Product: syz [ 608.170810][ T9] usb 5-1: Manufacturer: syz [ 608.184769][ T9] usb 5-1: SerialNumber: syz [ 608.192244][ T9] usb 5-1: config 0 descriptor?? [ 608.702302][ T9] usb 5-1: USB disconnect, device number 30 [ 608.859345][T11613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1617'. [ 609.238369][T11616] trusted_key: encrypted_key: insufficient parameters specified [ 610.566848][T11636] fusectl: Unknown parameter '['‹ [ 610.566848][T11636] ' [ 610.795821][ T30] audit: type=1326 audit(2000000021.901:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11624 comm="syz.1.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9ff8e929 code=0x7fc00000 [ 611.116062][ T5898] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 611.276502][ T5898] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 611.298088][ T5898] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 611.317707][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.326328][ T5898] usb 1-1: Product: syz [ 611.331409][ T5898] usb 1-1: Manufacturer: syz [ 611.336630][ T5898] usb 1-1: SerialNumber: syz [ 611.347087][ T5898] usb 1-1: config 0 descriptor?? [ 611.357803][ T5898] ims_pcu 1-1:0.0: Missing CDC union descriptor [ 611.364774][ T5898] ims_pcu 1-1:0.0: probe with driver ims_pcu failed with error -22 [ 611.650443][ T121] usb 1-1: USB disconnect, device number 50 [ 611.684416][ T5926] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 611.716856][T11653] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 611.780940][T11664] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1633'. [ 611.791313][T11664] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1633'. [ 611.836713][T11664] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1633'. [ 611.864187][ T5926] usb 4-1: Using ep0 maxpacket: 32 [ 611.877761][ T5926] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 611.892970][ T5926] usb 4-1: config 0 has no interface number 0 [ 611.903494][ T5926] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 611.915782][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.932927][ T5926] usb 4-1: Product: syz [ 611.938950][ T5926] usb 4-1: Manufacturer: syz [ 611.943819][ T5926] usb 4-1: SerialNumber: syz [ 612.007692][ T5926] usb 4-1: config 0 descriptor?? [ 612.034444][ T5926] smsc95xx v2.0.0 [ 612.440500][ T5926] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 612.467033][ T5926] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 612.867065][T11683] fuse: Unknown parameter 'group_i00000000000000000000' [ 614.181185][T11657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.189959][T11657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.287942][ T5926] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 614.339940][ T5926] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 614.434520][ T5898] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 614.443329][ T5926] usb 4-1: USB disconnect, device number 34 [ 614.624222][ T5898] usb 1-1: Using ep0 maxpacket: 8 [ 614.637879][ T5898] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 614.653214][ T5898] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 614.697357][ T5898] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 614.707750][T10620] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 614.716458][T10620] Bluetooth: hci2: Injecting HCI hardware error event [ 614.725376][T10620] Bluetooth: hci2: hardware error 0x00 [ 614.760494][ T5898] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 614.771991][ T5898] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 614.793178][ T5898] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 614.802868][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.020696][ T5898] usb 1-1: usb_control_msg returned -71 [ 615.038565][ T5898] usbtmc 1-1:16.0: can't read capabilities [ 615.059875][ T5898] usb 1-1: USB disconnect, device number 51 [ 616.500690][T11709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1647'. [ 616.647023][T11716] netlink: 'syz.3.1650': attribute type 83 has an invalid length. [ 616.784472][T10620] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 617.138322][T11726] fuse: Unknown parameter 'group_i00000000000000000000' [ 618.019102][T11727] Falling back ldisc for ttyprintk. [ 618.553876][ T5926] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 619.279546][ T5926] usb 6-1: Using ep0 maxpacket: 8 [ 619.743764][ T5926] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 619.762967][ T5926] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 619.811536][ T5926] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 619.853750][ T5926] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 619.900141][ T5926] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 619.971965][ T5926] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 620.043682][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.337139][ T5926] usb 6-1: usb_control_msg returned -71 [ 620.342729][ T5926] usbtmc 6-1:16.0: can't read capabilities [ 620.371409][ T5926] usb 6-1: USB disconnect, device number 27 [ 621.261439][T11770] fuse: Unknown parameter 'group_id00000000000000000000' [ 622.043989][ T5898] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 622.203963][ T5898] usb 1-1: Using ep0 maxpacket: 32 [ 622.217708][ T5898] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 622.227871][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.263461][ T5898] usb 1-1: config 0 descriptor?? [ 622.279113][ T5898] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 622.556142][T11787] ntfs3(nullb0): Primary boot signature is not NTFS. [ 622.563144][T11787] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 623.270016][ T5898] gspca_nw80x: reg_r err -32 [ 623.305178][ T5898] nw80x 1-1:0.0: probe with driver nw80x failed with error -32 [ 623.695658][ T5926] usb 1-1: USB disconnect, device number 52 [ 623.715777][T11807] bridge0: port 1(syz_tun) entered blocking state [ 623.722991][T11807] bridge0: port 1(syz_tun) entered disabled state [ 623.861106][T11807] syz_tun: entered allmulticast mode [ 623.881276][T11807] syz_tun: entered promiscuous mode [ 624.509791][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.518405][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.584209][ T980] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 624.587005][T11810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1681'. [ 624.793801][ T980] usb 4-1: Using ep0 maxpacket: 32 [ 624.831248][ T980] usb 4-1: config 0 has no interfaces? [ 624.852947][ T980] usb 4-1: New USB device found, idVendor=2001, idProduct=7e19, bcdDevice=59.1b [ 624.886572][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.930681][ T980] usb 4-1: Product: syz [ 624.951839][ T980] usb 4-1: Manufacturer: syz [ 624.963608][ T980] usb 4-1: SerialNumber: syz [ 624.979708][ T980] usb 4-1: config 0 descriptor?? [ 625.068437][ T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 625.192542][T11804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.206467][T11804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.235249][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 625.237727][ T980] usb 4-1: USB disconnect, device number 35 [ 625.248110][ T9] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 625.261648][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 625.275546][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 625.287750][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 625.298106][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 625.467587][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 625.489085][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.719802][ T9] usb 5-1: usb_control_msg returned -71 [ 625.733671][ T9] usbtmc 5-1:16.0: can't read capabilities [ 625.769815][ T9] usb 5-1: USB disconnect, device number 31 [ 625.884682][T11827] ALSA: mixer_oss: invalid index 40000 [ 626.113492][ T980] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 626.265360][ T980] usb 6-1: config 0 has an invalid interface number: 95 but max is 0 [ 626.283330][ T980] usb 6-1: config 0 has no interface number 0 [ 626.289463][ T980] usb 6-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 626.334265][ T980] usb 6-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 626.370956][ T980] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.382901][ T980] usb 6-1: Product: syz [ 626.393322][ T980] usb 6-1: Manufacturer: syz [ 626.397951][ T980] usb 6-1: SerialNumber: syz [ 626.421127][ T980] usb 6-1: config 0 descriptor?? [ 626.429996][T11825] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 626.581783][T11849] input: syz1 as /devices/virtual/input/input57 [ 627.653400][ T5919] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 627.717812][T11862] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1696'. [ 627.945597][ T980] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 627.953046][ T980] usb 6-1: MIDIStreaming interface descriptor not found [ 627.964047][ T5919] usb 4-1: Using ep0 maxpacket: 8 [ 627.986837][ T5919] usb 4-1: unable to get BOS descriptor or descriptor too short [ 627.997262][T11866] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1697'. [ 628.012022][ T5919] usb 4-1: config 4 has an invalid interface number: 147 but max is 0 [ 628.020680][ T5919] usb 4-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 628.029643][ T5919] usb 4-1: config 4 has no interface number 0 [ 628.040107][ T5919] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 628.066641][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.100009][ T5919] usb 4-1: Product: syz [ 628.107387][ T980] usb 6-1: USB disconnect, device number 28 [ 628.120729][ T5919] usb 4-1: Manufacturer: syz [ 628.138698][ T5919] usb 4-1: SerialNumber: syz [ 628.446875][T11855] ntfs3: Unknown parameter 'ZÏ$’vÝ¢r@{ÉžT11mF‹žGPò1e‰ÜMãu’Ò×#¥È[XB·^Ä"4o––ô»2&°ÊuÑ5ëØÊäo¸;qÁáýË4ý(´‘j¾' [ 628.481942][T11855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 628.499107][T11855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 628.995667][T11880] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 629.067770][T11882] syz.5.1702: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 629.163532][T11882] CPU: 0 UID: 0 PID: 11882 Comm: syz.5.1702 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 629.163564][T11882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 629.163577][T11882] Call Trace: [ 629.163584][T11882] [ 629.163593][T11882] dump_stack_lvl+0x189/0x250 [ 629.163622][T11882] ? __pfx_dump_stack_lvl+0x10/0x10 [ 629.163645][T11882] ? __pfx__printk+0x10/0x10 [ 629.163671][T11882] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 629.163697][T11882] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 629.163725][T11882] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 629.163753][T11882] warn_alloc+0x214/0x310 [ 629.163773][T11882] ? stack_depot_save_flags+0x40/0x900 [ 629.163828][T11882] ? __pfx_warn_alloc+0x10/0x10 [ 629.163855][T11882] ? kasan_save_track+0x4f/0x80 [ 629.163889][T11882] ? xskq_create+0x56/0x170 [ 629.163926][T11882] ? xsk_init_queue+0xb0/0x110 [ 629.163957][T11882] ? xsk_setsockopt+0x4de/0x710 [ 629.163985][T11882] ? do_sock_setsockopt+0x25a/0x3e0 [ 629.164013][T11882] ? __x64_sys_setsockopt+0x18b/0x220 [ 629.164039][T11882] ? do_syscall_64+0xfa/0x3b0 [ 629.164059][T11882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.164091][T11882] __vmalloc_node_range_noprof+0x125/0x12f0 [ 629.164150][T11882] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 629.164181][T11882] ? __kasan_kmalloc+0x93/0xb0 [ 629.164218][T11882] vmalloc_user_noprof+0xad/0xf0 [ 629.164247][T11882] ? xskq_create+0xbf/0x170 [ 629.164283][T11882] xskq_create+0xbf/0x170 [ 629.164322][T11882] xsk_init_queue+0xb0/0x110 [ 629.164359][T11882] xsk_setsockopt+0x4de/0x710 [ 629.164395][T11882] ? __pfx_xsk_setsockopt+0x10/0x10 [ 629.164442][T11882] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 629.164476][T11882] ? __pfx_xsk_setsockopt+0x10/0x10 [ 629.164510][T11882] do_sock_setsockopt+0x25a/0x3e0 [ 629.164542][T11882] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 629.164577][T11882] ? __fget_files+0x2a/0x420 [ 629.164610][T11882] __x64_sys_setsockopt+0x18b/0x220 [ 629.164647][T11882] do_syscall_64+0xfa/0x3b0 [ 629.164667][T11882] ? lockdep_hardirqs_on+0x9c/0x150 [ 629.164703][T11882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.164726][T11882] ? clear_bhb_loop+0x60/0xb0 [ 629.164754][T11882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.164776][T11882] RIP: 0033:0x7f8a2818e929 [ 629.164796][T11882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 629.164816][T11882] RSP: 002b:00007f8a28fed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 629.164841][T11882] RAX: ffffffffffffffda RBX: 00007f8a283b5fa0 RCX: 00007f8a2818e929 [ 629.164858][T11882] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 629.164872][T11882] RBP: 00007f8a28210b39 R08: 0000000000007e00 R09: 0000000000000000 [ 629.164887][T11882] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 629.164902][T11882] R13: 0000000000000000 R14: 00007f8a283b5fa0 R15: 00007fff837efb88 [ 629.164938][T11882] [ 629.165397][T11882] Mem-Info: [ 629.479019][T11882] active_anon:6000 inactive_anon:3685 isolated_anon:0 [ 629.479019][T11882] active_file:14232 inactive_file:42623 isolated_file:0 [ 629.479019][T11882] unevictable:768 dirty:214 writeback:0 [ 629.479019][T11882] slab_reclaimable:12556 slab_unreclaimable:111520 [ 629.479019][T11882] mapped:29687 shmem:7112 pagetables:1056 [ 629.479019][T11882] sec_pagetables:0 bounce:0 [ 629.479019][T11882] kernel_misc_reclaimable:0 [ 629.479019][T11882] free:1294128 free_pcp:12308 free_cma:0 [ 629.525387][T11882] Node 0 active_anon:24000kB inactive_anon:14740kB active_file:56728kB inactive_file:170492kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118748kB dirty:856kB writeback:0kB shmem:26908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12484kB pagetables:4092kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 629.562341][T11882] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 629.599232][T11882] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 629.641429][T11882] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 629.648771][T11882] Node 0 DMA32 free:1253864kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23996kB inactive_anon:14700kB active_file:54964kB inactive_file:170424kB unevictable:1536kB writepending:856kB present:3129332kB managed:2560900kB mlocked:0kB bounce:0kB free_pcp:37812kB local_pcp:14760kB free_cma:0kB [ 629.688743][T11882] lowmem_reserve[]: 0 0 1 1 1 [ 629.696112][T11882] Node 0 Normal free:20kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:40kB active_file:1764kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 629.749409][T10620] Bluetooth: hci1: command 0x0406 tx timeout [ 629.765063][T11882] lowmem_reserve[]: 0 0 0 0 0 [ 629.769921][T11882] Node 1 Normal free:3907224kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:11520kB local_pcp:2528kB free_cma:0kB [ 629.819694][ T5926] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 629.853479][ T5926] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 629.901269][ T5919] usb 4-1: Found UVC 0.02 device syz (04f2:b746) [ 629.914245][T11882] lowmem_reserve[]: 0 0 0 0 0 [ 629.918992][T11882] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 629.933256][ T5919] usb 4-1: No valid video chain found. [ 629.970875][ T5919] usb 4-1: USB disconnect, device number 36 [ 629.997540][T11882] Node 0 DMA32: 1587*4kB (UME) 538*8kB (UME) 16*16kB (UME) 374*32kB (UME) 258*64kB (UME) 45*128kB (UM) 62*256kB (UM) 20*512kB (UM) 12*1024kB (UME) 6*2048kB (UM) 283*4096kB (UM) = 1255004kB [ 630.077627][T11882] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 630.120902][T11882] Node 1 Normal: 158*4kB (UE) 42*8kB (UME) 35*16kB (UME) 183*32kB (UME) 53*64kB (UME) 13*128kB (UME) 6*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 949*4096kB (M) = 3907224kB [ 630.161800][T11882] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 630.581168][T11882] Node 0 hugepages_total=3 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 630.657761][T11882] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 631.584049][ T10] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 631.784960][T11882] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 631.943156][T11882] 63956 total pagecache pages [ 631.947890][T11882] 0 pages in swap cache [ 631.952059][T11882] Free swap = 124996kB [ 631.988456][T11882] Total swap = 124996kB [ 632.008676][T11882] 2097051 pages RAM [ 632.012620][T11882] 0 pages HighMem/MovableOnly [ 632.020877][T11898] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1708'. [ 632.041363][T11882] 424719 pages reserved [ 632.056272][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 632.068029][ T10] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 632.076525][T10620] Bluetooth: hci3: command 0x0406 tx timeout [ 632.083210][ T5926] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 632.089313][ T5926] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 632.096939][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 632.107288][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 632.117629][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 632.121342][T11882] 0 pages cma reserved [ 632.134246][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 632.172546][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 632.199192][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.491876][ T10] usb 1-1: usb_control_msg returned -71 [ 632.502480][T11910] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1713'. [ 632.503029][ T10] usbtmc 1-1:16.0: can't read capabilities [ 632.520145][T11908] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1713'. [ 632.530301][ T10] usb 1-1: USB disconnect, device number 53 [ 632.536778][ T9] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 632.547652][T11909] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1710'. [ 632.723184][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 632.732457][ T9] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 632.741882][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 632.752080][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 632.761874][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 632.772176][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 632.786893][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 632.796333][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.853026][ T5912] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 633.005250][ T5912] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 633.021910][ T5912] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 633.034358][ T5912] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64 [ 633.045685][ T5912] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 633.061807][ T5912] usb 6-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 633.071539][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.192972][ T9] usb 4-1: GET_CAPABILITIES returned 0 [ 633.198510][ T9] usbtmc 4-1:16.0: can't read capabilities [ 633.205772][ T5912] usb 6-1: Product: syz [ 633.210255][ T5912] usb 6-1: Manufacturer: syz [ 633.223822][ T5912] usb 6-1: SerialNumber: syz [ 633.231079][ T5912] usb 6-1: config 0 descriptor?? [ 633.237037][T11912] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 633.333241][ T5912] rc_core: IR keymap rc-imon-rsc not found [ 633.343281][ T5912] Registered IR keymap rc-empty [ 633.349055][ T5912] rc rc0: iMON Station as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 633.353177][T11864] usb 4-1: USB disconnect, device number 37 [ 633.377157][ T5912] input: iMON Station as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input58 [ 633.458246][ T980] usb 6-1: USB disconnect, device number 29 [ 633.553086][ T9] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 633.572976][ T5919] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 633.583852][T11926] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1718'. [ 633.593526][T11925] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1718'. [ 633.713337][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 633.723158][ T5919] usb 1-1: Using ep0 maxpacket: 16 [ 633.730958][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 633.750425][ T5919] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 633.760817][ T9] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 633.769753][ T5919] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 633.772679][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.792251][ T9] usb 5-1: config 0 descriptor?? [ 633.801882][ T9] as10x_usb: device has been detected [ 633.808584][ T9] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 633.820241][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.832636][ T9] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 633.841910][ T5919] usb 1-1: config 0 descriptor?? [ 633.901476][ T9] as10x_usb: error during firmware upload part1 [ 633.908865][ T9] Registered device nBox DVB-T Dongle [ 634.048676][ T9] usb 5-1: USB disconnect, device number 32 [ 634.118029][ T9] Unregistered device nBox DVB-T Dongle [ 634.119744][ T9] as10x_usb: device has been disconnected [ 634.141030][T11932] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1720'. [ 634.223048][ T5926] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 634.223187][T10620] Bluetooth: hci4: command 0x0406 tx timeout [ 634.256731][ T5926] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 634.269388][ T5919] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 634.307775][ T5919] microsoft 0003:045E:07DA.000C: item fetching failed at offset 30/34 [ 634.345923][ T5919] microsoft 0003:045E:07DA.000C: parse failed [ 634.361366][ T5919] microsoft 0003:045E:07DA.000C: probe with driver microsoft failed with error -22 [ 634.547301][ T5912] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 634.666918][T11920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.679615][T11920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 634.698939][ T9] usb 1-1: USB disconnect, device number 54 [ 634.709628][T11939] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1722'. [ 634.719740][ T5912] usb 4-1: device descriptor read/64, error -71 [ 635.650392][ T5912] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 636.037540][T11955] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1727'. [ 636.057272][ T5912] usb 4-1: device descriptor read/64, error -71 [ 636.064868][T11952] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1727'. [ 636.269646][ T5912] usb usb4-port1: attempt power cycle [ 636.346326][T11966] 8021q: adding VLAN 0 to HW filter on device bond1 [ 636.370695][T11966] 8021q: adding VLAN 0 to HW filter on device bond1 [ 636.381842][T11966] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 636.392746][T11966] bond1: (slave vti0): Error -95 calling set_mac_address [ 636.393209][ T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 636.562823][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 636.569666][ T9] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 636.586530][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 636.604633][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 636.614575][ T5912] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 636.622318][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 636.632606][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 636.648643][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 636.658000][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.669458][ T5912] usb 4-1: device descriptor read/8, error -71 [ 636.880940][ T9] usb 5-1: usb_control_msg returned -71 [ 636.892830][ T9] usbtmc 5-1:16.0: can't read capabilities [ 636.949249][ T9] usb 5-1: USB disconnect, device number 33 [ 636.971330][ T5912] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 637.034949][ T5912] usb 4-1: device descriptor read/8, error -71 [ 637.143478][ T5912] usb usb4-port1: unable to enumerate USB device [ 637.592239][ T30] audit: type=1326 audit(2000000048.702:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11972 comm="syz.1.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9ff8e929 code=0x7fc00000 [ 637.810292][ T30] audit: type=1326 audit(2000000048.702:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11972 comm="syz.1.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9ff8e929 code=0x7fc00000 [ 637.838853][ T30] audit: type=1326 audit(2000000048.702:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11972 comm="syz.1.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9ff8e929 code=0x7fc00000 [ 637.941409][ T30] audit: type=1326 audit(2000000048.732:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11972 comm="syz.1.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9ff8e929 code=0x7fc00000 [ 638.241359][ T30] audit: type=1326 audit(2000000048.732:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11972 comm="syz.1.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9ff8e929 code=0x7fc00000 [ 638.363428][ T30] audit: type=1326 audit(2000000048.732:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11972 comm="syz.1.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9ff8e929 code=0x7fc00000 [ 638.697775][ T30] audit: type=1326 audit(2000000048.732:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11972 comm="syz.1.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9ff8e929 code=0x7fc00000 [ 638.744799][ T30] audit: type=1326 audit(2000000048.742:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11972 comm="syz.1.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9ff8e929 code=0x7fc00000 [ 638.767341][ T30] audit: type=1326 audit(2000000048.742:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11972 comm="syz.1.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9ff8e929 code=0x7fc00000 [ 638.772898][T11990] __nla_validate_parse: 5 callbacks suppressed [ 638.772915][T11990] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1739'. [ 638.788910][ T30] audit: type=1326 audit(2000000048.742:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11972 comm="syz.1.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9ff8e929 code=0x7fc00000 [ 638.848914][T11995] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1742'. [ 638.883390][ T5926] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 639.149936][ T5926] usb 1-1: config 0 has an invalid interface number: 190 but max is 0 [ 639.163366][T12008] netlink: 'syz.4.1746': attribute type 83 has an invalid length. [ 639.203824][T12009] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1745'. [ 639.920292][ T5926] usb 1-1: config 0 has no interface number 0 [ 640.034250][ T5926] usb 1-1: config 0 interface 190 has no altsetting 0 [ 640.064801][ T5926] usb 1-1: New USB device found, idVendor=0411, idProduct=017f, bcdDevice=85.ac [ 640.074189][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.082213][ T5926] usb 1-1: Product: syz [ 640.101708][ T5926] usb 1-1: Manufacturer: syz [ 640.110524][ T5926] usb 1-1: SerialNumber: syz [ 640.125242][ T5926] usb 1-1: config 0 descriptor?? [ 640.141224][ T5926] usb 1-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 640.215679][T12015] sp0: Synchronizing with TNC [ 641.134607][T12013] [U] è [ 642.142554][ T5926] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 642.330250][T12032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1754'. [ 642.417883][ T5926] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 642.428828][ T5926] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 642.444426][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.480234][ T5926] usb 6-1: config 0 descriptor?? [ 642.488471][ T5926] pwc: Askey VC010 type 2 USB webcam detected. [ 642.634176][T12036] 9pnet_fd: Insufficient options for proto=fd [ 642.757711][ T5926] pwc: send_video_command error -71 [ 642.764717][ T5926] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 642.772416][ T5926] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 642.783722][ T5926] usb 6-1: USB disconnect, device number 30 [ 642.835136][T12040] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1757'. [ 643.272630][ T5926] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 643.290675][ T5898] usb 1-1: USB disconnect, device number 55 [ 643.505095][ T5926] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 643.524311][ T5926] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 643.541817][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.581971][ T5926] usb 6-1: config 0 descriptor?? [ 643.597826][ T5926] pwc: Askey VC010 type 2 USB webcam detected. [ 643.942411][ T5898] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 644.069734][ T5926] pwc: recv_control_msg error -32 req 02 val 2b00 [ 644.092366][ T5926] pwc: recv_control_msg error -32 req 02 val 2700 [ 644.100200][ T5926] pwc: recv_control_msg error -32 req 02 val 2c00 [ 644.108430][ T5926] pwc: recv_control_msg error -32 req 04 val 1000 [ 644.116508][ T5926] pwc: recv_control_msg error -32 req 04 val 1300 [ 644.124674][ T5926] pwc: recv_control_msg error -32 req 04 val 1400 [ 644.762513][ T5898] usb 1-1: Using ep0 maxpacket: 16 [ 644.776689][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 644.861749][ T5926] pwc: recv_control_msg error -32 req 02 val 2000 [ 644.863518][ T5898] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 644.908685][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.922195][ T5898] usb 1-1: Product: syz [ 644.927031][ T5898] usb 1-1: Manufacturer: syz [ 644.936159][ T5898] usb 1-1: SerialNumber: syz [ 644.947499][ T5898] usb 1-1: config 0 descriptor?? [ 644.966913][ T5898] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 644.977059][ T5898] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 645.909488][ T5898] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 646.292258][ T5926] pwc: recv_control_msg error -71 req 02 val 2100 [ 646.311270][ T5926] pwc: recv_control_msg error -71 req 04 val 1500 [ 646.318583][ T5926] pwc: recv_control_msg error -71 req 02 val 2500 [ 646.325644][ T5926] pwc: recv_control_msg error -71 req 02 val 2400 [ 646.332727][ T5926] pwc: recv_control_msg error -71 req 02 val 2600 [ 646.346732][ T5926] pwc: recv_control_msg error -71 req 02 val 2900 [ 646.362584][ T5926] pwc: recv_control_msg error -71 req 02 val 2800 [ 646.369581][ T5926] pwc: recv_control_msg error -71 req 04 val 1100 [ 646.382559][ T5926] pwc: recv_control_msg error -71 req 04 val 1200 [ 646.407860][ T5926] pwc: Registered as video103. [ 646.427889][ T5926] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input59 [ 646.441493][ T5926] usb 6-1: USB disconnect, device number 31 [ 646.664239][T12094] trusted_key: encrypted_key: insufficient parameters specified [ 646.705712][T12093] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1772'. [ 647.435083][ T5898] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 647.491252][ T5898] em28xx 1-1:0.0: board has no eeprom [ 647.502193][ T5926] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 647.728459][ T5898] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 647.770509][ T5898] em28xx 1-1:0.0: dvb set to bulk mode. [ 648.533089][ T10] em28xx 1-1:0.0: Binding DVB extension [ 648.550101][ T5898] usb 1-1: USB disconnect, device number 56 [ 648.557790][ T5898] em28xx 1-1:0.0: Disconnecting em28xx [ 648.820451][ T5926] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 648.852121][ T5926] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 648.890023][T12116] syzkaller1: entered promiscuous mode [ 648.899504][ T5926] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 648.922357][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.955575][T12116] syzkaller1: entered allmulticast mode [ 648.964534][ T5926] usb 6-1: Product: syz [ 648.968736][ T5926] usb 6-1: Manufacturer: syz [ 649.009212][ T5926] usb 6-1: SerialNumber: syz [ 649.155900][ T10] em28xx 1-1:0.0: Registering input extension [ 649.164314][ T5898] em28xx 1-1:0.0: Closing input extension [ 649.187727][ T5898] em28xx 1-1:0.0: Freeing device [ 649.195458][T12119] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1780'. [ 649.911655][T12142] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1788'. [ 650.842024][T12148] FAULT_INJECTION: forcing a failure. [ 650.842024][T12148] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 650.858766][T12151] netlink: 'syz.1.1789': attribute type 1 has an invalid length. [ 650.893172][T12148] CPU: 0 UID: 0 PID: 12148 Comm: syz.3.1791 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 650.893196][T12148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 650.893207][T12148] Call Trace: [ 650.893215][T12148] [ 650.893223][T12148] dump_stack_lvl+0x189/0x250 [ 650.893248][T12148] ? __pfx____ratelimit+0x10/0x10 [ 650.893278][T12148] ? __pfx_dump_stack_lvl+0x10/0x10 [ 650.893299][T12148] ? __pfx__printk+0x10/0x10 [ 650.893325][T12148] ? __might_fault+0xb0/0x130 [ 650.893364][T12148] should_fail_ex+0x414/0x560 [ 650.893396][T12148] _copy_from_iter+0x1db/0x16f0 [ 650.893426][T12148] ? policy_nodemask+0x27c/0x720 [ 650.893454][T12148] ? __pfx__copy_from_iter+0x10/0x10 [ 650.893480][T12148] ? set_page_refcounted+0xa0/0x1e0 [ 650.893507][T12148] ? page_copy_sane+0x4e/0x280 [ 650.893528][T12148] copy_page_from_iter+0xdd/0x170 [ 650.893551][T12148] tun_get_user+0x1c4d/0x3ce0 [ 650.893575][T12148] ? tun_get_user+0x693/0x3ce0 [ 650.893608][T12148] ? __pfx_tun_get_user+0x10/0x10 [ 650.893635][T12148] ? __lock_acquire+0xab9/0xd20 [ 650.893659][T12148] ? ref_tracker_alloc+0x318/0x460 [ 650.893686][T12148] ? __lock_acquire+0xab9/0xd20 [ 650.893705][T12148] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 650.893740][T12148] ? tun_get+0x1c/0x2f0 [ 650.893765][T12148] ? tun_get+0x1c/0x2f0 [ 650.893800][T12148] ? tun_get+0x1c/0x2f0 [ 650.893828][T12148] tun_chr_write_iter+0x113/0x200 [ 650.893858][T12148] vfs_write+0x548/0xa90 [ 650.893896][T12148] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 650.893922][T12148] ? __pfx_vfs_write+0x10/0x10 [ 650.893965][T12148] ? __fget_files+0x2a/0x420 [ 650.893997][T12148] ksys_write+0x145/0x250 [ 650.894033][T12148] ? __pfx_ksys_write+0x10/0x10 [ 650.894069][T12148] ? rcu_is_watching+0x15/0xb0 [ 650.894095][T12148] ? do_syscall_64+0xbe/0x3b0 [ 650.894121][T12148] do_syscall_64+0xfa/0x3b0 [ 650.894142][T12148] ? lockdep_hardirqs_on+0x9c/0x150 [ 650.894176][T12148] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.894198][T12148] ? clear_bhb_loop+0x60/0xb0 [ 650.894229][T12148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.894250][T12148] RIP: 0033:0x7f730f18d3df [ 650.894268][T12148] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 650.894287][T12148] RSP: 002b:00007f730ff51000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 650.894309][T12148] RAX: ffffffffffffffda RBX: 00007f730f3b5fa0 RCX: 00007f730f18d3df [ 650.894325][T12148] RDX: 0000000000000032 RSI: 0000200000000240 RDI: 00000000000000c8 [ 650.894339][T12148] RBP: 00007f730ff51090 R08: 0000000000000000 R09: 0000000000000000 [ 650.894352][T12148] R10: 0000000000000032 R11: 0000000000000293 R12: 0000000000000001 [ 650.894365][T12148] R13: 0000000000000000 R14: 00007f730f3b5fa0 R15: 00007ffc45435718 [ 650.894398][T12148] [ 650.926122][ T5926] cdc_ncm 6-1:1.0: bind() failure [ 651.453620][ T5926] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 651.553651][ T5926] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 651.616088][ T5926] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 651.655631][ T5926] usb 6-1: USB disconnect, device number 32 [ 651.842088][ T54] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 651.981916][ T54] usb 1-1: device descriptor read/64, error -71 [ 652.231985][ T54] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 652.266987][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 652.267032][ T30] audit: type=1326 audit(2000000063.373:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12193 comm="syz.4.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52c78e929 code=0x7ffc0000 [ 652.343188][ T30] audit: type=1326 audit(2000000063.373:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12193 comm="syz.4.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52c78e929 code=0x7ffc0000 [ 652.366412][ T30] audit: type=1326 audit(2000000063.413:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12193 comm="syz.4.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fa52c78e929 code=0x7ffc0000 [ 652.382050][ T54] usb 1-1: device descriptor read/64, error -71 [ 652.388383][ T30] audit: type=1326 audit(2000000063.413:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12193 comm="syz.4.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52c78e929 code=0x7ffc0000 [ 652.416587][ T30] audit: type=1326 audit(2000000063.413:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12193 comm="syz.4.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fa52c78e929 code=0x7ffc0000 [ 652.438533][ T30] audit: type=1326 audit(2000000063.413:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12193 comm="syz.4.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52c78e929 code=0x7ffc0000 [ 652.461473][ T30] audit: type=1326 audit(2000000063.413:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12193 comm="syz.4.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52c78e929 code=0x7ffc0000 [ 652.512143][ T54] usb usb1-port1: attempt power cycle [ 652.737084][T12210] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1812'. [ 652.892252][ T54] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 652.923037][ T54] usb 1-1: device descriptor read/8, error -71 [ 653.425484][ T54] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 653.465441][ T54] usb 1-1: device descriptor read/8, error -71 [ 653.738135][ T54] usb usb1-port1: unable to enumerate USB device [ 654.642167][ T54] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 654.801975][ T54] usb 6-1: Using ep0 maxpacket: 32 [ 654.826853][ T54] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 654.865366][ T54] usb 6-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 654.908907][ T54] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.931843][ T54] usb 6-1: Product: syz [ 654.936062][ T54] usb 6-1: Manufacturer: syz [ 654.953081][ T54] usb 6-1: SerialNumber: syz [ 654.971302][T12241] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1823'. [ 654.981345][ T54] usb 6-1: config 0 descriptor?? [ 655.010420][ T54] usbtouchscreen 6-1:0.0: probe with driver usbtouchscreen failed with error -12 [ 656.345685][T12264] overlayfs: conflicting options: userxattr,metacopy=on [ 656.856840][T12263] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.900295][T12263] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.728523][T12263] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.769679][ T10] usb 6-1: USB disconnect, device number 33 [ 658.866399][T12263] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.852542][T12291] usb usb8: usbfs: process 12291 (syz.3.1835) did not claim interface 0 before use [ 659.958554][T12263] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.998782][T12263] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.039322][T12263] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.059674][T12263] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.508311][T12317] syz.4.1847: attempt to access beyond end of device [ 660.508311][T12317] loop4: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 660.559684][T12317] gfs2: error -5 reading superblock [ 661.978370][T12331] macsec0: entered allmulticast mode [ 662.054184][T12331] bridge0: entered allmulticast mode [ 662.086738][T12336] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1851'. [ 662.726978][T12338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.736225][T12338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 662.964217][T12359] FAULT_INJECTION: forcing a failure. [ 662.964217][T12359] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 663.002746][T12359] CPU: 1 UID: 0 PID: 12359 Comm: syz.0.1857 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 663.002772][T12359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 663.002783][T12359] Call Trace: [ 663.002791][T12359] [ 663.002800][T12359] dump_stack_lvl+0x189/0x250 [ 663.002825][T12359] ? __pfx____ratelimit+0x10/0x10 [ 663.002856][T12359] ? __pfx_dump_stack_lvl+0x10/0x10 [ 663.002876][T12359] ? __pfx__printk+0x10/0x10 [ 663.002901][T12359] ? __might_fault+0xb0/0x130 [ 663.002940][T12359] should_fail_ex+0x414/0x560 [ 663.002972][T12359] _copy_from_user+0x2d/0xb0 [ 663.003005][T12359] do_sock_getsockopt+0x1cd/0x650 [ 663.003032][T12359] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 663.003058][T12359] ? do_syscall_64+0x40/0x3b0 [ 663.003076][T12359] ? __fget_files+0x3a0/0x420 [ 663.003093][T12359] ? __fget_files+0x2a/0x420 [ 663.003118][T12359] __x64_sys_getsockopt+0x1a5/0x250 [ 663.003141][T12359] ? do_syscall_64+0x40/0x3b0 [ 663.003161][T12359] ? do_syscall_64+0x40/0x3b0 [ 663.003183][T12359] do_syscall_64+0xfa/0x3b0 [ 663.003200][T12359] ? lockdep_hardirqs_on+0x9c/0x150 [ 663.003228][T12359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.003247][T12359] ? clear_bhb_loop+0x60/0xb0 [ 663.003270][T12359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.003288][T12359] RIP: 0033:0x7f603e98e929 [ 663.003304][T12359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 663.003321][T12359] RSP: 002b:00007f603f8c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 663.003342][T12359] RAX: ffffffffffffffda RBX: 00007f603ebb5fa0 RCX: 00007f603e98e929 [ 663.003356][T12359] RDX: 000000000000271b RSI: 0000000000000114 RDI: 0000000000000003 [ 663.003367][T12359] RBP: 00007f603f8c2090 R08: 00002000000000c0 R09: 0000000000000000 [ 663.003380][T12359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 663.003391][T12359] R13: 0000000000000000 R14: 00007f603ebb5fa0 R15: 00007ffd16c8ab08 [ 663.003420][T12359] [ 663.213800][ C1] vkms_vblank_simulate: vblank timer overrun [ 664.048403][T12377] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 664.150573][ T10] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 664.941354][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 664.948477][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 665.007073][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 665.030037][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.069693][ T10] usb 1-1: config 0 descriptor?? [ 665.418086][T12395] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1871'. [ 665.446992][T12393] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1871'. [ 665.669581][ T10] input: HID 05ac:8241 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:8241.000D/input/input67 [ 665.827048][ T10] appleir 0003:05AC:8241.000D: input,hiddev0,hidraw0: USB HID v0.05 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 666.004209][ T10] usb 1-1: USB disconnect, device number 61 [ 666.204523][T12405] FAULT_INJECTION: forcing a failure. [ 666.204523][T12405] name failslab, interval 1, probability 0, space 0, times 0 [ 666.220160][T12405] CPU: 1 UID: 0 PID: 12405 Comm: syz.4.1875 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 666.220185][T12405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 666.220197][T12405] Call Trace: [ 666.220204][T12405] [ 666.220212][T12405] dump_stack_lvl+0x189/0x250 [ 666.220238][T12405] ? __pfx____ratelimit+0x10/0x10 [ 666.220268][T12405] ? __pfx_dump_stack_lvl+0x10/0x10 [ 666.220289][T12405] ? __pfx__printk+0x10/0x10 [ 666.220311][T12405] ? kasan_record_aux_stack+0xbd/0xd0 [ 666.220334][T12405] ? fib_netdev_event+0x318/0x490 [ 666.220352][T12405] ? __dev_notify_flags+0x18d/0x2e0 [ 666.220375][T12405] ? netif_change_flags+0xe8/0x1a0 [ 666.220396][T12405] ? do_setlink+0xc55/0x41c0 [ 666.220422][T12405] ? rtnetlink_rcv_msg+0x7cc/0xb70 [ 666.220440][T12405] ? netlink_rcv_skb+0x205/0x470 [ 666.220461][T12405] ? netlink_unicast+0x758/0x8d0 [ 666.220484][T12405] should_fail_ex+0x414/0x560 [ 666.220517][T12405] should_failslab+0xa8/0x100 [ 666.220537][T12405] __kmalloc_cache_noprof+0x70/0x3d0 [ 666.220565][T12405] ? nsim_fib_event_nb+0x187/0x1080 [ 666.220599][T12405] nsim_fib_event_nb+0x187/0x1080 [ 666.220639][T12405] notifier_call_chain+0x1b6/0x3e0 [ 666.220665][T12405] ? atomic_notifier_call_chain+0x26/0x180 [ 666.220690][T12405] atomic_notifier_call_chain+0xda/0x180 [ 666.220715][T12405] call_fib_notifiers+0x31/0x60 [ 666.220739][T12405] fib_table_flush+0xbe9/0x11a0 [ 666.220786][T12405] ? __pfx_fib_table_flush+0x10/0x10 [ 666.220838][T12405] fib_disable_ip+0xfd/0x170 [ 666.220863][T12405] fib_netdev_event+0x318/0x490 [ 666.220886][T12405] notifier_call_chain+0x1b6/0x3e0 [ 666.220916][T12405] __dev_notify_flags+0x18d/0x2e0 [ 666.220943][T12405] ? __pfx___dev_notify_flags+0x10/0x10 [ 666.220973][T12405] ? __dev_change_flags+0x4cc/0x6d0 [ 666.221003][T12405] ? __pfx___dev_change_flags+0x10/0x10 [ 666.221039][T12405] netif_change_flags+0xe8/0x1a0 [ 666.221068][T12405] do_setlink+0xc55/0x41c0 [ 666.221095][T12405] ? __kernel_text_address+0xd/0x40 [ 666.221126][T12405] ? arch_stack_walk+0xfc/0x150 [ 666.221153][T12405] ? __pfx_do_setlink+0x10/0x10 [ 666.221195][T12405] ? __lock_acquire+0xab9/0xd20 [ 666.221222][T12405] ? __mutex_trylock_common+0x153/0x260 [ 666.221249][T12405] ? __pfx___mutex_trylock_common+0x10/0x10 [ 666.221278][T12405] ? rcu_is_watching+0x15/0xb0 [ 666.221300][T12405] ? trace_contention_end+0x39/0x120 [ 666.221323][T12405] ? __mutex_lock+0x330/0xe80 [ 666.221352][T12405] ? rtnl_newlink+0x8db/0x1c70 [ 666.221372][T12405] ? rcu_is_watching+0x15/0xb0 [ 666.221394][T12405] ? __pfx___mutex_lock+0x10/0x10 [ 666.221423][T12405] ? ns_capable+0x8a/0xf0 [ 666.221444][T12405] ? rtnl_link_get_net_capable+0x16a/0x350 [ 666.221472][T12405] rtnl_newlink+0x149f/0x1c70 [ 666.221491][T12405] ? netlink_sendmsg+0x805/0xb30 [ 666.221527][T12405] ? __pfx_rtnl_newlink+0x10/0x10 [ 666.221572][T12405] ? kasan_quarantine_put+0xdd/0x220 [ 666.221597][T12405] ? lockdep_hardirqs_on+0x9c/0x150 [ 666.221633][T12405] ? nlmon_xmit+0xb0/0x100 [ 666.221652][T12405] ? kmem_cache_free+0x18f/0x400 [ 666.221687][T12405] ? __local_bh_enable_ip+0x12d/0x1c0 [ 666.221707][T12405] ? lockdep_hardirqs_on+0x9c/0x150 [ 666.221736][T12405] ? __local_bh_enable_ip+0x12d/0x1c0 [ 666.221756][T12405] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 666.221780][T12405] ? __dev_queue_xmit+0x27e/0x3a70 [ 666.221808][T12405] ? __dev_queue_xmit+0x27e/0x3a70 [ 666.221833][T12405] ? __dev_queue_xmit+0x27e/0x3a70 [ 666.221870][T12405] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 666.221902][T12405] ? __lock_acquire+0xab9/0xd20 [ 666.221952][T12405] ? __pfx_rtnl_newlink+0x10/0x10 [ 666.221990][T12405] rtnetlink_rcv_msg+0x7cc/0xb70 [ 666.222017][T12405] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 666.222039][T12405] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 666.222058][T12405] ? ref_tracker_free+0x63a/0x7d0 [ 666.222087][T12405] ? __copy_skb_header+0xa7/0x550 [ 666.222117][T12405] ? __pfx_ref_tracker_free+0x10/0x10 [ 666.222149][T12405] ? __skb_clone+0x63/0x7a0 [ 666.222184][T12405] netlink_rcv_skb+0x205/0x470 [ 666.222210][T12405] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 666.222234][T12405] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 666.222274][T12405] ? netlink_deliver_tap+0x2e/0x1b0 [ 666.222297][T12405] ? netlink_deliver_tap+0x2e/0x1b0 [ 666.222329][T12405] netlink_unicast+0x758/0x8d0 [ 666.222363][T12405] netlink_sendmsg+0x805/0xb30 [ 666.222399][T12405] ? __pfx_netlink_sendmsg+0x10/0x10 [ 666.222434][T12405] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 666.222463][T12405] ? __pfx_netlink_sendmsg+0x10/0x10 [ 666.222495][T12405] __sock_sendmsg+0x219/0x270 [ 666.222519][T12405] ____sys_sendmsg+0x505/0x830 [ 666.222552][T12405] ? __pfx_____sys_sendmsg+0x10/0x10 [ 666.222589][T12405] ? import_iovec+0x74/0xa0 [ 666.222618][T12405] ___sys_sendmsg+0x21f/0x2a0 [ 666.222647][T12405] ? __pfx____sys_sendmsg+0x10/0x10 [ 666.222851][T12405] ? __fget_files+0x2a/0x420 [ 666.222879][T12405] ? __fget_files+0x3a0/0x420 [ 666.222911][T12405] __x64_sys_sendmsg+0x19b/0x260 [ 666.222943][T12405] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 666.222992][T12405] ? __pfx_ksys_write+0x10/0x10 [ 666.223017][T12405] ? rcu_is_watching+0x15/0xb0 [ 666.223045][T12405] ? do_syscall_64+0xbe/0x3b0 [ 666.223070][T12405] do_syscall_64+0xfa/0x3b0 [ 666.223089][T12405] ? lockdep_hardirqs_on+0x9c/0x150 [ 666.223119][T12405] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.223139][T12405] ? clear_bhb_loop+0x60/0xb0 [ 666.223164][T12405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.223183][T12405] RIP: 0033:0x7fa52c78e929 [ 666.223201][T12405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 666.223218][T12405] RSP: 002b:00007fa52d586038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 666.223240][T12405] RAX: ffffffffffffffda RBX: 00007fa52c9b5fa0 RCX: 00007fa52c78e929 [ 666.223255][T12405] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 666.223268][T12405] RBP: 00007fa52d586090 R08: 0000000000000000 R09: 0000000000000000 [ 666.223280][T12405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 666.223292][T12405] R13: 0000000000000000 R14: 00007fa52c9b5fa0 R15: 00007fffaeefa208 [ 666.223324][T12405] [ 666.820012][ C1] vkms_vblank_simulate: vblank timer overrun [ 667.460316][T12405] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 668.091079][ T10] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 668.130023][T12424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1882'. [ 668.388671][T12428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1882'. [ 668.589288][T12424] veth0_to_bond: entered allmulticast mode [ 668.773256][ T10] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 668.899241][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.914364][ T10] usb 5-1: config 0 descriptor?? [ 668.921973][ T10] cp210x 5-1:0.0: cp210x converter detected [ 669.644938][ T30] audit: type=1326 audit(2000000080.754:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12433 comm="syz.5.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a2818e929 code=0x7fc00000 [ 669.645017][ T30] audit: type=1326 audit(2000000080.754:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12433 comm="syz.5.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a2818e929 code=0x7fc00000 [ 669.645057][ T30] audit: type=1326 audit(2000000080.754:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12433 comm="syz.5.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a2818e929 code=0x7fc00000 [ 669.645121][ T30] audit: type=1326 audit(2000000080.754:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12433 comm="syz.5.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a2818e929 code=0x7fc00000 [ 669.645162][ T30] audit: type=1326 audit(2000000080.754:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12433 comm="syz.5.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a2818e929 code=0x7fc00000 [ 669.645202][ T30] audit: type=1326 audit(2000000080.754:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12433 comm="syz.5.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a2818e929 code=0x7fc00000 [ 669.645261][ T30] audit: type=1326 audit(2000000080.754:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12433 comm="syz.5.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a2818e929 code=0x7fc00000 [ 669.645301][ T30] audit: type=1326 audit(2000000080.754:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12433 comm="syz.5.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a2818e929 code=0x7fc00000 [ 669.645341][ T30] audit: type=1326 audit(2000000080.764:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12433 comm="syz.5.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a2818e929 code=0x7fc00000 [ 669.645400][ T30] audit: type=1326 audit(2000000080.764:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12433 comm="syz.5.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a2818e929 code=0x7fc00000 [ 669.673908][ C1] vkms_vblank_simulate: vblank timer overrun [ 669.920613][ C1] vkms_vblank_simulate: vblank timer overrun [ 671.295951][ T10] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 671.296003][ T10] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 671.307238][ T10] usb 5-1: cp210x converter now attached to ttyUSB0 [ 671.313927][ T10] usb 5-1: USB disconnect, device number 34 [ 671.323172][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 671.323516][ T10] cp210x 5-1:0.0: device disconnected [ 671.815953][T12469] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 671.826502][T12465] set match dimension is over the limit! [ 671.847680][T12469] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 672.130029][T12472] program syz.5.1894 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 672.950592][T12481] netlink: 'syz.3.1898': attribute type 1 has an invalid length. [ 674.560082][T12506] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1903'. [ 674.606986][T12503] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1903'. [ 675.539333][T12513] sp0: Synchronizing with TNC [ 676.112090][T12511] [U] è [ 676.413023][T12524] syz.1.1911: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 676.433377][T12524] CPU: 1 UID: 0 PID: 12524 Comm: syz.1.1911 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 676.433403][T12524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 676.433414][T12524] Call Trace: [ 676.433423][T12524] [ 676.433432][T12524] dump_stack_lvl+0x189/0x250 [ 676.433463][T12524] ? __pfx_dump_stack_lvl+0x10/0x10 [ 676.433482][T12524] ? __pfx__printk+0x10/0x10 [ 676.433503][T12524] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 676.433524][T12524] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 676.433545][T12524] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 676.433568][T12524] warn_alloc+0x214/0x310 [ 676.433583][T12524] ? stack_depot_save_flags+0x40/0x900 [ 676.433611][T12524] ? __pfx_warn_alloc+0x10/0x10 [ 676.433628][T12524] ? kasan_save_track+0x4f/0x80 [ 676.433650][T12524] ? xskq_create+0x56/0x170 [ 676.433673][T12524] ? xsk_init_queue+0xb0/0x110 [ 676.433693][T12524] ? xsk_setsockopt+0x4de/0x710 [ 676.433713][T12524] ? do_sock_setsockopt+0x25a/0x3e0 [ 676.433730][T12524] ? __x64_sys_setsockopt+0x18b/0x220 [ 676.433748][T12524] ? do_syscall_64+0xfa/0x3b0 [ 676.433767][T12524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.433790][T12524] __vmalloc_node_range_noprof+0x125/0x12f0 [ 676.433851][T12524] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 676.433874][T12524] ? __kasan_kmalloc+0x93/0xb0 [ 676.433903][T12524] vmalloc_user_noprof+0xad/0xf0 [ 676.433920][T12524] ? xskq_create+0xbf/0x170 [ 676.433948][T12524] xskq_create+0xbf/0x170 [ 676.433978][T12524] xsk_init_queue+0xb0/0x110 [ 676.434006][T12524] xsk_setsockopt+0x4de/0x710 [ 676.434034][T12524] ? __pfx_xsk_setsockopt+0x10/0x10 [ 676.434078][T12524] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 676.434105][T12524] ? __pfx_xsk_setsockopt+0x10/0x10 [ 676.434131][T12524] do_sock_setsockopt+0x25a/0x3e0 [ 676.434157][T12524] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 676.434184][T12524] ? __fget_files+0x2a/0x420 [ 676.434209][T12524] __x64_sys_setsockopt+0x18b/0x220 [ 676.434238][T12524] do_syscall_64+0xfa/0x3b0 [ 676.434254][T12524] ? lockdep_hardirqs_on+0x9c/0x150 [ 676.434281][T12524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.434298][T12524] ? clear_bhb_loop+0x60/0xb0 [ 676.434320][T12524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.434337][T12524] RIP: 0033:0x7f2e9ff8e929 [ 676.434352][T12524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 676.434368][T12524] RSP: 002b:00007f2e9ddf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 676.434387][T12524] RAX: ffffffffffffffda RBX: 00007f2ea01b5fa0 RCX: 00007f2e9ff8e929 [ 676.434400][T12524] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000008 [ 676.434411][T12524] RBP: 00007f2ea0010b39 R08: 0000000000000004 R09: 0000000000000000 [ 676.434422][T12524] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 676.434432][T12524] R13: 0000000000000000 R14: 00007f2ea01b5fa0 R15: 00007ffcf2f14458 [ 676.434459][T12524] [ 676.438107][T12524] Mem-Info: [ 676.581086][ T10] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 676.600606][T12524] active_anon:6015 inactive_anon:6004 isolated_anon:0 [ 676.600606][T12524] active_file:15360 inactive_file:41584 isolated_file:0 [ 676.600606][T12524] unevictable:768 dirty:160 writeback:0 [ 676.600606][T12524] slab_reclaimable:12152 slab_unreclaimable:113353 [ 676.600606][T12524] mapped:29593 shmem:9515 pagetables:1070 [ 676.600606][T12524] sec_pagetables:0 bounce:0 [ 676.600606][T12524] kernel_misc_reclaimable:0 [ 676.600606][T12524] free:1278299 free_pcp:23477 free_cma:0 [ 676.798483][ C1] vkms_vblank_simulate: vblank timer overrun [ 676.805109][T12524] Node 0 active_anon:23992kB inactive_anon:20204kB active_file:61220kB inactive_file:166336kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118376kB dirty:668kB writeback:0kB shmem:32668kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12560kB pagetables:4236kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 676.822938][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 676.838933][ C1] vkms_vblank_simulate: vblank timer overrun [ 676.839135][T12524] Node 1 active_anon:0kB inactive_anon:0kB active_file:220kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:20kB dirty:0kB writeback:0kB shmem:1540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 676.881794][ C1] vkms_vblank_simulate: vblank timer overrun [ 676.889790][T12524] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 676.918698][ C1] vkms_vblank_simulate: vblank timer overrun [ 676.926496][T12524] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 676.932687][T12524] Node 0 DMA32 free:1204016kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23988kB inactive_anon:16264kB active_file:59456kB inactive_file:166268kB unevictable:1536kB writepending:668kB present:3129332kB managed:2560900kB mlocked:0kB bounce:0kB free_pcp:76332kB local_pcp:26900kB free_cma:0kB [ 676.965310][ C1] vkms_vblank_simulate: vblank timer overrun [ 676.970051][ T10] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 676.985267][T12524] lowmem_reserve[]: 0 0 1 1 1 [ 676.990052][T12524] Node 0 Normal free:20kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:40kB active_file:1764kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 677.019225][ C1] vkms_vblank_simulate: vblank timer overrun [ 677.039706][ T10] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 677.055269][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 677.067127][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 677.093294][ T10] usb 5-1: config 1 has no interface number 0 [ 677.101324][T12524] lowmem_reserve[]: 0 0 0 0 0 [ 677.108968][T12524] Node 1 Normal free:3908260kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:220kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:10496kB local_pcp:1888kB free_cma:0kB [ 677.116158][ T10] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 677.140208][ C1] vkms_vblank_simulate: vblank timer overrun [ 677.183596][T12535] --map-set only usable from mangle table [ 677.186076][ T10] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 677.200095][T12526] netlink: 'syz.0.1910': attribute type 1 has an invalid length. [ 677.203977][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.228606][T12526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1910'. [ 677.665652][T12524] lowmem_reserve[]: 0 0 0 0 0 [ 678.057677][T12524] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 678.071905][T12524] Node 0 DMA32: 1490*4kB (UM) 1375*8kB (UME) 413*16kB (UME) 159*32kB (UME) 222*64kB (UME) 78*128kB (UME) 26*256kB (UM) 14*512kB (UM) 3*1024kB (UME) 0*2048kB 278*4096kB (UM) = 1208432kB [ 678.079275][ T10] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 678.241220][T12524] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 678.300558][T12524] Node 1 Normal: 159*4kB (UME) 43*8kB (UME) 35*16kB (UME) 201*32kB (UE) 58*64kB (UME) 14*128kB (UME) 6*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 949*4096kB (M) = 3908260kB [ 678.308929][ T10] snd_usb_pod 5-1:1.1: endpoint not available, using fallback values [ 678.328478][ T10] snd_usb_pod 5-1:1.1: invalid control EP [ 678.335760][ T10] snd_usb_pod 5-1:1.1: cannot start listening: -22 [ 678.344075][ T10] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 678.352046][ T10] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 678.356016][T12524] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 678.420068][T12524] Node 0 hugepages_total=3 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 678.449362][T12524] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 678.512674][T12524] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 678.534570][ T10] usb 5-1: USB disconnect, device number 35 [ 678.543444][T12524] 64046 total pagecache pages [ 678.556952][T12524] 0 pages in swap cache [ 678.575137][T12524] Free swap = 124996kB [ 678.591757][T12524] Total swap = 124996kB [ 678.601668][T12545] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1915'. [ 678.602054][T12524] 2097051 pages RAM [ 678.615008][T12524] 0 pages HighMem/MovableOnly [ 678.619713][T12524] 424719 pages reserved [ 678.629495][T12524] 0 pages cma reserved [ 678.635953][T12544] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1915'. [ 678.877347][T12552] trusted_key: syz.1.1918 sent an empty control message without MSG_MORE. [ 679.272073][ T10] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 679.294588][ T5912] IPVS: starting estimator thread 0... [ 679.335432][T12570] FAULT_INJECTION: forcing a failure. [ 679.335432][T12570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 679.359276][T12570] CPU: 1 UID: 0 PID: 12570 Comm: syz.0.1925 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 679.359302][T12570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 679.359315][T12570] Call Trace: [ 679.359323][T12570] [ 679.359331][T12570] dump_stack_lvl+0x189/0x250 [ 679.359357][T12570] ? __pfx____ratelimit+0x10/0x10 [ 679.359387][T12570] ? __pfx_dump_stack_lvl+0x10/0x10 [ 679.359408][T12570] ? __pfx__printk+0x10/0x10 [ 679.359445][T12570] should_fail_ex+0x414/0x560 [ 679.359477][T12570] _copy_to_user+0x31/0xb0 [ 679.359502][T12570] simple_read_from_buffer+0xe1/0x170 [ 679.359537][T12570] proc_fail_nth_read+0x1df/0x250 [ 679.359572][T12570] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 679.359595][T12570] ? rw_verify_area+0x258/0x650 [ 679.359621][T12570] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 679.359643][T12570] vfs_read+0x1fd/0x980 [ 679.359675][T12570] ? __pfx___mutex_lock+0x10/0x10 [ 679.359694][T12570] ? __pfx_vfs_read+0x10/0x10 [ 679.359722][T12570] ? __fget_files+0x2a/0x420 [ 679.359745][T12570] ? __fget_files+0x3a0/0x420 [ 679.359763][T12570] ? __fget_files+0x2a/0x420 [ 679.359790][T12570] ksys_read+0x145/0x250 [ 679.359831][T12570] ? __pfx_ksys_read+0x10/0x10 [ 679.359855][T12570] ? rcu_is_watching+0x15/0xb0 [ 679.359882][T12570] ? do_syscall_64+0xbe/0x3b0 [ 679.359904][T12570] do_syscall_64+0xfa/0x3b0 [ 679.359922][T12570] ? lockdep_hardirqs_on+0x9c/0x150 [ 679.359950][T12570] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.359969][T12570] ? clear_bhb_loop+0x60/0xb0 [ 679.359992][T12570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.360011][T12570] RIP: 0033:0x7f603e98d33c [ 679.360026][T12570] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 679.360043][T12570] RSP: 002b:00007f603f8c2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 679.360063][T12570] RAX: ffffffffffffffda RBX: 00007f603ebb5fa0 RCX: 00007f603e98d33c [ 679.360077][T12570] RDX: 000000000000000f RSI: 00007f603f8c20a0 RDI: 0000000000000005 [ 679.360089][T12570] RBP: 00007f603f8c2090 R08: 0000000000000000 R09: 0000000000000000 [ 679.360101][T12570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 679.360112][T12570] R13: 0000000000000000 R14: 00007f603ebb5fa0 R15: 00007ffd16c8ab08 [ 679.360141][T12570] [ 679.591072][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 679.603877][ T10] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 679.620322][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.640561][T12567] IPVS: using max 30 ests per chain, 72000 per kthread [ 679.649219][ T10] usb 4-1: Product: syz [ 679.661333][ T10] usb 4-1: Manufacturer: syz [ 679.665989][ T10] usb 4-1: SerialNumber: syz [ 679.702560][T12575] 9pnet_fd: Insufficient options for proto=fd [ 679.721161][T12574] tun0: tun_chr_ioctl cmd 1074025676 [ 679.726479][T12574] tun0: owner set to 0 [ 679.735568][ T10] usb 4-1: config 0 descriptor?? [ 679.971783][ T10] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 679.978936][T12586] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1932'. [ 680.000774][T12583] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1932'. [ 680.370316][ T54] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 680.440345][ T5919] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 680.521523][ T54] usb 1-1: Using ep0 maxpacket: 16 [ 680.534079][ T54] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 680.542316][ T54] usb 1-1: config 0 has no interface number 0 [ 680.548435][ T54] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 680.570751][ T54] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 680.579869][ T54] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 680.588580][ T54] usb 1-1: Product: syz [ 680.593057][ T54] usb 1-1: SerialNumber: syz [ 680.602141][ T5919] usb 5-1: Using ep0 maxpacket: 8 [ 680.607637][ T54] usb 1-1: config 0 descriptor?? [ 680.618673][ T5919] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 680.628723][ T54] cm109 1-1:0.8: invalid payload size 208, expected 4 [ 680.635748][ T5919] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 680.650994][ T54] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input69 [ 680.661626][ T5919] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 680.677728][ T5919] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 680.687750][ T5919] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 680.705203][ T5919] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 680.716080][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.540416][ T10] gspca_sunplus: reg_w_riv err -110 [ 681.545745][ T10] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 681.825058][ T5919] usb 5-1: usb_control_msg returned -32 [ 681.839201][ T5919] usbtmc 5-1:16.0: can't read capabilities [ 681.992115][ C1] cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71 [ 681.999489][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 682.000333][ T9] usb 1-1: USB disconnect, device number 62 [ 682.006445][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 682.050875][ T9] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 683.024171][T12629] comedi comedi4: bad chanlist[2]=0x00000008 chan=8 range length=2 [ 684.850718][ T5919] usb 4-1: USB disconnect, device number 42 [ 684.860522][ T54] usb 5-1: USB disconnect, device number 36 [ 685.018569][T12635] IPVS: set_ctl: invalid protocol: 33 10.1.1.0:20003 [ 685.332936][T12646] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 685.430224][ T54] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 685.496171][T12655] IPVS: set_ctl: invalid protocol: 136 10.65.1.2:20004 [ 685.697630][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.706078][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.716980][ T54] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 685.728704][ T54] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 685.737884][ T54] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.751179][T12663] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1957'. [ 685.763844][ T54] usb 5-1: config 0 descriptor?? [ 686.175905][ T54] keytouch 0003:0926:3333.000E: fixing up Keytouch IEC report descriptor [ 686.192963][ T54] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.000E/input/input70 [ 686.299420][ T54] keytouch 0003:0926:3333.000E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 686.819244][T12677] sit0: entered promiscuous mode [ 686.854093][T12677] netlink: 'syz.3.1963': attribute type 1 has an invalid length. [ 686.854118][T12677] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1963'. [ 686.933594][T12680] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 687.025930][ T5919] [ 687.025938][ T5919] ====================================================== [ 687.025945][ T5919] WARNING: possible circular locking dependency detected [ 687.025957][ T5919] 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 Not tainted [ 687.025966][ T5919] ------------------------------------------------------ [ 687.025971][ T5919] kworker/1:4/5919 is trying to acquire lock: [ 687.025979][ T5919] ffff88801a4a10b8 (&buf->lock){+.+.}-{4:4}, at: tty_buffer_flush+0x74/0x2b0 [ 687.026019][ T5919] [ 687.026019][ T5919] but task is already holding lock: [ 687.026024][ T5919] ffffffff8e1330a0 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x28/0x220 [ 687.026053][ T5919] [ 687.026053][ T5919] which lock already depends on the new lock. [ 687.026053][ T5919] [ 687.026058][ T5919] [ 687.026058][ T5919] the existing dependency chain (in reverse order) is: [ 687.026064][ T5919] [ 687.026064][ T5919] -> #2 (console_lock){+.+.}-{0:0}: [ 687.026083][ T5919] lock_acquire+0x120/0x360 [ 687.026095][ T5919] console_lock+0x164/0x1b0 [ 687.026110][ T5919] con_flush_chars+0x70/0x280 [ 687.026125][ T5919] n_tty_write+0xede/0x11d0 [ 687.026143][ T5919] file_tty_write+0x500/0x990 [ 687.026163][ T5919] do_iter_readv_writev+0x56e/0x7f0 [ 687.026183][ T5919] vfs_writev+0x31a/0x960 [ 687.026196][ T5919] do_writev+0x14d/0x2d0 [ 687.026208][ T5919] do_syscall_64+0xfa/0x3b0 [ 687.026220][ T5919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.026233][ T5919] [ 687.026233][ T5919] -> #1 (&tty->termios_rwsem){++++}-{4:4}: [ 687.026253][ T5919] lock_acquire+0x120/0x360 [ 687.026264][ T5919] down_read+0x46/0x2e0 [ 687.026276][ T5919] n_tty_receive_buf_common+0x84/0x12f0 [ 687.026297][ T5919] tty_port_default_receive_buf+0x6e/0xa0 [ 687.026314][ T5919] flush_to_ldisc+0x24a/0x720 [ 687.026329][ T5919] process_scheduled_works+0xae1/0x17b0 [ 687.026342][ T5919] worker_thread+0x8a0/0xda0 [ 687.026355][ T5919] kthread+0x711/0x8a0 [ 687.026371][ T5919] ret_from_fork+0x3fc/0x770 [ 687.026382][ T5919] ret_from_fork_asm+0x1a/0x30 [ 687.026399][ T5919] [ 687.026399][ T5919] -> #0 (&buf->lock){+.+.}-{4:4}: [ 687.026431][ T5919] validate_chain+0xb9b/0x2140 [ 687.026446][ T5919] __lock_acquire+0xab9/0xd20 [ 687.026456][ T5919] lock_acquire+0x120/0x360 [ 687.026466][ T5919] __mutex_lock+0x182/0xe80 [ 687.026478][ T5919] tty_buffer_flush+0x74/0x2b0 [ 687.026492][ T5919] tty_ldisc_flush+0x6b/0xc0 [ 687.026506][ T5919] __do_SAK+0x138/0x6d0 [ 687.026520][ T5919] vc_SAK+0x78/0x220 [ 687.026531][ T5919] process_scheduled_works+0xae1/0x17b0 [ 687.026544][ T5919] worker_thread+0x8a0/0xda0 [ 687.026565][ T5919] kthread+0x711/0x8a0 [ 687.026581][ T5919] ret_from_fork+0x3fc/0x770 [ 687.026592][ T5919] ret_from_fork_asm+0x1a/0x30 [ 687.026608][ T5919] [ 687.026608][ T5919] other info that might help us debug this: [ 687.026608][ T5919] [ 687.026613][ T5919] Chain exists of: [ 687.026613][ T5919] &buf->lock --> &tty->termios_rwsem --> console_lock [ 687.026613][ T5919] [ 687.026637][ T5919] Possible unsafe locking scenario: [ 687.026637][ T5919] [ 687.026642][ T5919] CPU0 CPU1 [ 687.026647][ T5919] ---- ---- [ 687.026651][ T5919] lock(console_lock); [ 687.026661][ T5919] lock(&tty->termios_rwsem); [ 687.026672][ T5919] lock(console_lock); [ 687.026683][ T5919] lock(&buf->lock); [ 687.026693][ T5919] [ 687.026693][ T5919] *** DEADLOCK *** [ 687.026693][ T5919] [ 687.026697][ T5919] 4 locks held by kworker/1:4/5919: [ 687.026705][ T5919] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 687.026739][ T5919] #1: ffffc9000442fbc0 ((work_completion)(&vc_cons[currcons].SAK_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 687.026774][ T5919] #2: ffffffff8e1330a0 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x28/0x220 [ 687.026805][ T5919] #3: ffff88807edf30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_flush+0x20/0xc0 [ 687.026840][ T5919] [ 687.026840][ T5919] stack backtrace: [ 687.026847][ T5919] CPU: 1 UID: 0 PID: 5919 Comm: kworker/1:4 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 687.026862][ T5919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 687.026871][ T5919] Workqueue: events vc_SAK [ 687.026883][ T5919] Call Trace: [ 687.026888][ T5919] [ 687.026894][ T5919] dump_stack_lvl+0x189/0x250 [ 687.026911][ T5919] ? __pfx_dump_stack_lvl+0x10/0x10 [ 687.026926][ T5919] ? __pfx__printk+0x10/0x10 [ 687.026944][ T5919] ? print_lock_name+0xde/0x100 [ 687.026961][ T5919] print_circular_bug+0x2ee/0x310 [ 687.026978][ T5919] check_noncircular+0x134/0x160 [ 687.026996][ T5919] validate_chain+0xb9b/0x2140 [ 687.027020][ T5919] __lock_acquire+0xab9/0xd20 [ 687.027033][ T5919] ? tty_buffer_flush+0x74/0x2b0 [ 687.027049][ T5919] lock_acquire+0x120/0x360 [ 687.027060][ T5919] ? tty_buffer_flush+0x74/0x2b0 [ 687.027081][ T5919] __mutex_lock+0x182/0xe80 [ 687.027092][ T5919] ? tty_buffer_flush+0x74/0x2b0 [ 687.027108][ T5919] ? __lock_acquire+0xab9/0xd20 [ 687.027122][ T5919] ? tty_buffer_flush+0x74/0x2b0 [ 687.027138][ T5919] ? __pfx___mutex_lock+0x10/0x10 [ 687.027159][ T5919] ? ldsem_down_read_trylock+0x137/0x1a0 [ 687.027178][ T5919] ? tty_ldisc_flush+0x20/0xc0 [ 687.027192][ T5919] ? __pfx_ldsem_down_read_trylock+0x10/0x10 [ 687.027214][ T5919] tty_buffer_flush+0x74/0x2b0 [ 687.027231][ T5919] tty_ldisc_flush+0x6b/0xc0 [ 687.027246][ T5919] __do_SAK+0x138/0x6d0 [ 687.027265][ T5919] vc_SAK+0x78/0x220 [ 687.027276][ T5919] ? process_scheduled_works+0x9ef/0x17b0 [ 687.027290][ T5919] process_scheduled_works+0xae1/0x17b0 [ 687.027314][ T5919] ? __pfx_process_scheduled_works+0x10/0x10 [ 687.027333][ T5919] worker_thread+0x8a0/0xda0 [ 687.027348][ T5919] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 687.027370][ T5919] ? __kthread_parkme+0x7b/0x200 [ 687.027388][ T5919] kthread+0x711/0x8a0 [ 687.027406][ T5919] ? __pfx_worker_thread+0x10/0x10 [ 687.027420][ T5919] ? __pfx_kthread+0x10/0x10 [ 687.027438][ T5919] ? _raw_spin_unlock_irq+0x23/0x50 [ 687.027456][ T5919] ? lockdep_hardirqs_on+0x9c/0x150 [ 687.027475][ T5919] ? __pfx_kthread+0x10/0x10 [ 687.027492][ T5919] ret_from_fork+0x3fc/0x770 [ 687.027505][ T5919] ? __pfx_ret_from_fork+0x10/0x10 [ 687.027520][ T5919] ? __switch_to_asm+0x39/0x70 [ 687.027535][ T5919] ? __switch_to_asm+0x33/0x70 [ 687.027551][ T5919] ? __pfx_kthread+0x10/0x10 [ 687.027568][ T5919] ret_from_fork_asm+0x1a/0x30 [ 687.027590][ T5919] [ 687.050682][T12682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1965'. [ 687.050730][T12682] bridge_slave_1: left allmulticast mode [ 687.050748][T12682] bridge_slave_1: left promiscuous mode [ 687.050990][T12682] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.057774][T12682] bridge_slave_0: left allmulticast mode [ 687.057793][T12682] bridge_slave_0: left promiscuous mode [ 687.057968][T12682] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.208914][T12689] rdma_op ffff8880289249f0 conn xmit_rdma 0000000000000000 [ 687.494423][T12700] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1972'. [ 687.501306][T12701] Smack: duplicate mount options [ 687.637495][T12708] sp0: Synchronizing with TNC [ 688.415372][T12704] base_sock_release(ffff88804827bc00) sk=ffff88807ddd9000 [ 688.425793][T12705] [U] è [ 688.569665][ T10] usb 5-1: USB disconnect, device number 37 [ 689.383234][T12744] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1987'. [ 689.493280][T12746] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1988'. [ 690.708233][T12758] 9pnet_fd: Insufficient options for proto=fd [ 692.013500][T12783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1999'. [ 692.017596][T12783] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 692.506482][T12783] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 692.957498][T12807] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 692.968442][T12807] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 695.295864][T12852] sp0: Synchronizing with TNC [ 696.158715][T12831] syz.0.2014 (12831): drop_caches: 2 [ 696.228144][T12862] fuse: Unknown parameter 'f9¢´âd' [ 696.228282][T12863] fuse: Unknown parameter 'f9¢´âd' [ 696.559415][ T121] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 696.709374][ T121] usb 1-1: Using ep0 maxpacket: 16 [ 696.710528][ T121] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 696.710549][ T121] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 696.712236][ T121] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 696.712262][ T121] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.712288][ T121] usb 1-1: Product: syz [ 696.712300][ T121] usb 1-1: Manufacturer: syz [ 696.712313][ T121] usb 1-1: SerialNumber: syz [ 697.005675][T12879] openvswitch: netlink: IP tunnel TTL not specified. [ 697.194028][ T121] usb 1-1: cannot find UAC_HEADER [ 697.210184][ T121] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 697.455292][T12891] overlayfs: failed to clone upperpath [ 697.754763][T12898] delete_channel: no stack [ 698.142118][ T10] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 698.681327][ T10] usb 4-1: config 0 has an invalid interface number: 104 but max is 0 [ 698.681358][ T10] usb 4-1: config 0 has no interface number 0 [ 698.681382][ T10] usb 4-1: config 0 interface 104 has no altsetting 0 [ 698.682948][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=cf.b6 [ 698.682967][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.682981][ T10] usb 4-1: Product: syz [ 698.682992][ T10] usb 4-1: Manufacturer: syz [ 698.683002][ T10] usb 4-1: SerialNumber: syz [ 698.684152][ T10] usb 4-1: config 0 descriptor?? [ 698.938711][ T10] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.104/input/input72 [ 699.140130][ T5193] bcm5974 4-1:0.104: could not read from device [ 699.140161][ T5193] bcm5974: mode switch failed [ 699.140477][ T10] usb 4-1: USB disconnect, device number 43 [ 699.287023][ T5912] usb 1-1: USB disconnect, device number 63 [ 699.692067][T12931] netlink: 'syz.5.2050': attribute type 4 has an invalid length. [ 700.356665][ T5859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 700.360022][ T5859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 700.360480][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 700.361049][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 700.361448][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 700.373874][T10620] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 700.374139][T10620] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 700.374386][T10620] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 700.375116][T10620] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 700.375550][T10620] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 700.558186][T12958] chnl_net:caif_netlink_parms(): no params data found [ 700.716442][T12958] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.716805][T12958] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.716988][T12958] bridge_slave_0: entered allmulticast mode [ 700.717831][T12958] bridge_slave_0: entered promiscuous mode [ 700.719415][T12958] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.719543][T12958] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.719646][T12958] bridge_slave_1: entered allmulticast mode [ 700.720573][T12958] bridge_slave_1: entered promiscuous mode [ 700.984786][T12958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 700.991604][T12958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 701.075623][T12958] team0: Port device team_slave_0 added [ 701.078132][T12958] team0: Port device team_slave_1 added [ 701.153092][T12958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 701.153110][T12958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 701.153156][T12958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 701.156074][T12958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 701.156090][T12958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 701.156135][T12958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 701.216031][T12958] hsr_slave_0: entered promiscuous mode [ 701.217853][T12958] hsr_slave_1: entered promiscuous mode [ 701.218798][T12958] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 701.218817][T12958] Cannot create hsr debugfs directory [ 701.283495][T12993] IPVS: set_ctl: invalid protocol: 58 10.1.1.1:21 [ 701.310374][T12988] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2068'. [ 701.367346][T12958] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 701.370556][T12958] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 701.372420][T12958] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 701.374394][T12958] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 701.423946][T12958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 701.464422][T12958] 8021q: adding VLAN 0 to HW filter on device team0 [ 701.474613][ T6219] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.474686][ T6219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 701.478777][ T6690] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.478854][ T6690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 701.518568][T12958] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 701.553782][T13007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 701.557828][T13007] bond0: (slave rose0): Enslaving as an active interface with an up link [ 701.569243][ T121] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 701.690922][T13012] sp0: Synchronizing with TNC [ 701.729073][ T121] usb 4-1: Using ep0 maxpacket: 8 [ 702.459124][T10620] Bluetooth: hci2: command tx timeout [ 702.474399][T13010] [U] è [ 702.756783][ T121] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c06, bcdDevice= 0.40 [ 702.756813][ T121] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.756834][ T121] usb 4-1: Product: syz [ 702.756849][ T121] usb 4-1: Manufacturer: syz [ 702.756874][ T121] usb 4-1: SerialNumber: syz [ 702.876401][T12958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 702.954933][T13024] FAULT_INJECTION: forcing a failure. [ 702.954933][T13024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 702.954971][T13024] CPU: 1 UID: 0 PID: 13024 Comm: syz.0.2078 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 702.954998][T13024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 702.955012][T13024] Call Trace: [ 702.955020][T13024] [ 702.955029][T13024] dump_stack_lvl+0x189/0x250 [ 702.955063][T13024] ? __pfx____ratelimit+0x10/0x10 [ 702.955098][T13024] ? __pfx_dump_stack_lvl+0x10/0x10 [ 702.955123][T13024] ? __pfx__printk+0x10/0x10 [ 702.955148][T13024] ? __might_fault+0xb0/0x130 [ 702.955186][T13024] ? rcu_is_watching+0x15/0xb0 [ 702.955212][T13024] should_fail_ex+0x414/0x560 [ 702.955247][T13024] _copy_from_user+0x2d/0xb0 [ 702.955273][T13024] __sys_bpf+0x1ed/0x860 [ 702.955307][T13024] ? __pfx___sys_bpf+0x10/0x10 [ 702.955347][T13024] ? ksys_write+0x22a/0x250 [ 702.955379][T13024] ? __pfx_ksys_write+0x10/0x10 [ 702.955414][T13024] __x64_sys_bpf+0x7c/0x90 [ 702.955444][T13024] do_syscall_64+0xfa/0x3b0 [ 702.955510][T13024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.955541][T13024] ? clear_bhb_loop+0x60/0xb0 [ 702.955570][T13024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.955598][T13024] RIP: 0033:0x7f603e98e929 [ 702.955618][T13024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 702.955637][T13024] RSP: 002b:00007f603f8c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 702.955669][T13024] RAX: ffffffffffffffda RBX: 00007f603ebb5fa0 RCX: 00007f603e98e929 [ 702.955689][T13024] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 702.955703][T13024] RBP: 00007f603f8c2090 R08: 0000000000000000 R09: 0000000000000000 [ 702.955717][T13024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 702.955730][T13024] R13: 0000000000000000 R14: 00007f603ebb5fa0 R15: 00007ffd16c8ab08 [ 702.955756][T13024] [ 702.969580][ T121] usbhid 4-1:1.0: can't add hid device: -71 [ 702.969667][ T121] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 702.974184][ T121] usb 4-1: USB disconnect, device number 44 [ 703.179848][T12958] veth0_vlan: entered promiscuous mode [ 703.184940][T12958] veth1_vlan: entered promiscuous mode [ 703.209821][T12958] veth0_macvtap: entered promiscuous mode [ 703.212757][T12958] veth1_macvtap: entered promiscuous mode [ 703.227834][T12958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 703.258837][T12958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 703.262671][T12958] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.262701][T12958] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.262724][T12958] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.262747][T12958] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.954930][T12958] ieee80211 phy61: Selected rate control algorithm 'minstrel_ht' [ 704.073085][ T6213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.073107][ T6213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.074861][T12958] ieee80211 phy62: Selected rate control algorithm 'minstrel_ht' [ 704.116909][ T6209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.116927][ T6209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.127656][T13043] loop2: detected capacity change from 0 to 7 [ 704.128353][T13043] loop2: p1 p4 [ 704.128374][T13043] loop2: partition table partially beyond EOD, truncated [ 704.128436][T13043] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 704.278226][T13051] sp0: Synchronizing with TNC [ 704.368938][ T121] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 704.538935][T10620] Bluetooth: hci2: command tx timeout [ 704.587416][ T121] usb 1-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 704.587448][ T121] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 704.587488][ T121] usb 1-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 704.587512][ T121] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.244464][T13048] [U] è [ 705.292651][ T121] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 705.323935][ T121] gspca_sn9c2028: read1 error -71 [ 705.324247][ T121] gspca_sn9c2028: read1 error -71 [ 705.324725][ T121] gspca_sn9c2028: read1 error -71 [ 705.324783][ T121] sn9c2028 1-1:220.0: probe with driver sn9c2028 failed with error -71 [ 705.325950][ T121] usb 1-1: USB disconnect, device number 64 [ 706.619407][T10620] Bluetooth: hci2: command tx timeout [ 706.631813][T13080] dvmrp0: entered allmulticast mode [ 706.718231][T13078] dvmrp0: left allmulticast mode [ 706.729936][T13087] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2098'. [ 706.729951][T13087] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 707.271462][T13119] netlink: 'syz.0.2111': attribute type 2 has an invalid length. [ 707.322328][T13129] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2113'. [ 707.322940][T13125] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2113'. [ 707.383368][T13133] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2115'. [ 709.048753][T10620] Bluetooth: hci2: command tx timeout [ 709.240361][T13164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2124'. [ 709.245495][T13164] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 709.245540][T13164] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 711.414830][T13209] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2141'. [ 711.498014][T13210] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2139'. [ 711.577622][T13212] tipc: Started in network mode [ 711.577749][T13212] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 711.578970][T13212] tipc: Enabling of bearer rejected, failed to enable media [ 711.997488][T13219] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2143'. [ 711.997753][T13216] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2143'. [ 712.059369][T13202] caif:caif_disconnect_client(): nothing to disconnect [ 713.770250][T13250] FAULT_INJECTION: forcing a failure. [ 713.770250][T13250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 713.770282][T13250] CPU: 0 UID: 0 PID: 13250 Comm: syz.3.2155 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 713.770305][T13250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 713.770316][T13250] Call Trace: [ 713.770322][T13250] [ 713.770330][T13250] dump_stack_lvl+0x189/0x250 [ 713.770355][T13250] ? __pfx____ratelimit+0x10/0x10 [ 713.770384][T13250] ? __pfx_dump_stack_lvl+0x10/0x10 [ 713.770405][T13250] ? __pfx__printk+0x10/0x10 [ 713.770426][T13250] ? __might_fault+0xb0/0x130 [ 713.770458][T13250] ? rcu_is_watching+0x15/0xb0 [ 713.770480][T13250] should_fail_ex+0x414/0x560 [ 713.770509][T13250] _copy_from_user+0x2d/0xb0 [ 713.770532][T13250] ___sys_sendmsg+0x158/0x2a0 [ 713.770557][T13250] ? __pfx____sys_sendmsg+0x10/0x10 [ 713.770580][T13250] ? __mutex_trylock_common+0x153/0x260 [ 713.770620][T13250] ? __fget_files+0x2a/0x420 [ 713.770637][T13250] ? __fget_files+0x3a0/0x420 [ 713.770660][T13250] __x64_sys_sendmsg+0x19b/0x260 [ 713.770685][T13250] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 713.770714][T13250] ? __pfx_ksys_write+0x10/0x10 [ 713.770739][T13250] ? rcu_is_watching+0x15/0xb0 [ 713.770760][T13250] ? rcu_is_watching+0x15/0xb0 [ 713.770781][T13250] do_syscall_64+0xfa/0x3b0 [ 713.770799][T13250] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.770817][T13250] ? clear_bhb_loop+0x60/0xb0 [ 713.770837][T13250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.770854][T13250] RIP: 0033:0x7f730f18e929 [ 713.770877][T13250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 713.770893][T13250] RSP: 002b:00007f730ff51038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 713.770913][T13250] RAX: ffffffffffffffda RBX: 00007f730f3b5fa0 RCX: 00007f730f18e929 [ 713.770926][T13250] RDX: 0000000008044010 RSI: 0000200000000b40 RDI: 0000000000000005 [ 713.770938][T13250] RBP: 00007f730ff51090 R08: 0000000000000000 R09: 0000000000000000 [ 713.770949][T13250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 713.770960][T13250] R13: 0000000000000000 R14: 00007f730f3b5fa0 R15: 00007ffc45435718 [ 713.770981][T13250] [ 713.816965][T13252] overlayfs: failed to clone upperpath [ 714.016726][T13260] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2159'. [ 716.194869][T13287] FAULT_INJECTION: forcing a failure. [ 716.194869][T13287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 716.194906][T13287] CPU: 1 UID: 0 PID: 13287 Comm: syz.6.2168 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 716.194933][T13287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 716.194947][T13287] Call Trace: [ 716.194968][T13287] [ 716.194976][T13287] dump_stack_lvl+0x189/0x250 [ 716.195003][T13287] ? __pfx____ratelimit+0x10/0x10 [ 716.195049][T13287] ? __pfx_dump_stack_lvl+0x10/0x10 [ 716.195069][T13287] ? __pfx__printk+0x10/0x10 [ 716.195091][T13287] ? __might_fault+0xb0/0x130 [ 716.195122][T13287] ? rcu_is_watching+0x15/0xb0 [ 716.195143][T13287] should_fail_ex+0x414/0x560 [ 716.195170][T13287] _copy_from_user+0x2d/0xb0 [ 716.195200][T13287] __sys_bpf+0x1ed/0x860 [ 716.195229][T13287] ? __pfx___sys_bpf+0x10/0x10 [ 716.195263][T13287] ? ksys_write+0x22a/0x250 [ 716.195290][T13287] ? __pfx_ksys_write+0x10/0x10 [ 716.195321][T13287] ? rcu_is_watching+0x15/0xb0 [ 716.195344][T13287] __x64_sys_bpf+0x7c/0x90 [ 716.195369][T13287] do_syscall_64+0xfa/0x3b0 [ 716.195388][T13287] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.195406][T13287] ? clear_bhb_loop+0x60/0xb0 [ 716.195426][T13287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.195444][T13287] RIP: 0033:0x7f23e5d8e929 [ 716.195459][T13287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 716.195476][T13287] RSP: 002b:00007f23e6c1b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 716.195495][T13287] RAX: ffffffffffffffda RBX: 00007f23e5fb5fa0 RCX: 00007f23e5d8e929 [ 716.195509][T13287] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000011 [ 716.195522][T13287] RBP: 00007f23e6c1b090 R08: 0000000000000000 R09: 0000000000000000 [ 716.195534][T13287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 716.195544][T13287] R13: 0000000000000000 R14: 00007f23e5fb5fa0 R15: 00007ffcdc4eaa38 [ 716.195566][T13287] [ 717.601439][T13308] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2176'. [ 718.580977][T13316] FAULT_INJECTION: forcing a failure. [ 718.580977][T13316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 718.581009][T13316] CPU: 0 UID: 0 PID: 13316 Comm: syz.0.2180 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 718.581032][T13316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 718.581043][T13316] Call Trace: [ 718.581050][T13316] [ 718.581058][T13316] dump_stack_lvl+0x189/0x250 [ 718.581084][T13316] ? __pfx____ratelimit+0x10/0x10 [ 718.581123][T13316] ? __pfx_dump_stack_lvl+0x10/0x10 [ 718.581143][T13316] ? __pfx__printk+0x10/0x10 [ 718.581165][T13316] ? __might_fault+0xb0/0x130 [ 718.581193][T13316] ? vfs_write+0x8d8/0xa90 [ 718.581219][T13316] ? rcu_is_watching+0x15/0xb0 [ 718.581241][T13316] should_fail_ex+0x414/0x560 [ 718.581271][T13316] _copy_from_user+0x2d/0xb0 [ 718.581293][T13316] __sys_connect+0x123/0x440 [ 718.581315][T13316] ? __pfx___sys_connect+0x10/0x10 [ 718.581341][T13316] ? __pfx_ksys_write+0x10/0x10 [ 718.581365][T13316] ? rcu_is_watching+0x15/0xb0 [ 718.581389][T13316] __x64_sys_connect+0x7a/0x90 [ 718.581410][T13316] do_syscall_64+0xfa/0x3b0 [ 718.581429][T13316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.581447][T13316] ? clear_bhb_loop+0x60/0xb0 [ 718.581468][T13316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.581486][T13316] RIP: 0033:0x7f603e98e929 [ 718.581502][T13316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 718.581518][T13316] RSP: 002b:00007f603f8c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 718.581538][T13316] RAX: ffffffffffffffda RBX: 00007f603ebb5fa0 RCX: 00007f603e98e929 [ 718.581552][T13316] RDX: 000000000000006e RSI: 00002000000000c0 RDI: 0000000000000004 [ 718.581564][T13316] RBP: 00007f603f8c2090 R08: 0000000000000000 R09: 0000000000000000 [ 718.581575][T13316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 718.581586][T13316] R13: 0000000000000000 R14: 00007f603ebb5fa0 R15: 00007ffd16c8ab08 [ 718.581607][T13316] [ 718.734222][T13320] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2182'. [ 719.495091][T13336] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2187'. [ 719.508453][ T5912] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 719.661085][ T5912] usb 1-1: Using ep0 maxpacket: 32 [ 719.662375][ T5912] usb 1-1: config 2 has an invalid interface number: 190 but max is 0 [ 719.662398][ T5912] usb 1-1: config 2 has no interface number 0 [ 719.662421][ T5912] usb 1-1: config 2 interface 190 has no altsetting 0 [ 719.664785][ T5912] usb 1-1: language id specifier not provided by device, defaulting to English [ 719.666040][ T5912] usb 1-1: New USB device found, idVendor=3275, idProduct=0085, bcdDevice=f7.69 [ 719.666064][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.666084][ T5912] usb 1-1: Product: syz [ 719.666098][ T5912] usb 1-1: Manufacturer: ñ·Ÿ—è [ 719.666112][ T5912] usb 1-1: SerialNumber: syz [ 719.828179][ T10] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 719.874405][ T5912] usb 1-1: USB disconnect, device number 65 [ 719.978253][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 719.981908][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 719.981941][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 719.981966][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 719.982007][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 719.982024][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.983331][ T10] usb 4-1: config 0 descriptor?? [ 720.650939][ T10] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 720.650972][ T10] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 720.650995][ T10] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 720.651019][ T10] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 720.651042][ T10] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 720.651065][ T10] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 720.651087][ T10] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 720.651110][ T10] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 720.651132][ T10] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 720.651162][ T10] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 720.651184][ T10] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 720.651207][ T10] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 720.651229][ T10] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 720.651252][ T10] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 720.651275][ T10] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 720.651297][ T10] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 720.651320][ T10] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 720.651343][ T10] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 720.651365][ T10] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 720.651388][ T10] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 720.651410][ T10] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 720.651433][ T10] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 720.651455][ T10] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 720.656328][ T10] microsoft 0003:045E:07DA.000F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 720.656351][ T10] microsoft 0003:045E:07DA.000F: no inputs found [ 720.656360][ T10] microsoft 0003:045E:07DA.000F: could not initialize ff, continuing anyway [ 720.924348][T13341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 720.924555][T13341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 720.926735][ T6505] usb 4-1: USB disconnect, device number 45 [ 721.418246][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 721.528840][T13383] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2203'. [ 722.200727][T13403] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 722.200754][T13403] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 722.200878][T13403] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 722.200897][T13403] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 722.203845][T13403] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2211'. [ 722.268001][ T5926] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 722.278023][ T6505] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 722.423984][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 722.424004][ T30] audit: type=1326 audit(2000000133.537:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13406 comm="syz.1.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9ff8e929 code=0x7ffc0000 [ 722.424319][ T30] audit: type=1326 audit(2000000133.537:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13406 comm="syz.1.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f2e9ff8e929 code=0x7ffc0000 [ 722.427731][ T30] audit: type=1326 audit(2000000133.537:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13406 comm="syz.1.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9ff8e929 code=0x7ffc0000 [ 722.433507][ T30] audit: type=1326 audit(2000000133.537:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13406 comm="syz.1.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9ff8e929 code=0x7ffc0000 [ 722.433726][ T30] audit: type=1326 audit(2000000133.547:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13406 comm="syz.1.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f2e9ff8e929 code=0x7ffc0000 [ 722.434145][ T30] audit: type=1326 audit(2000000133.547:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13406 comm="syz.1.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9ff8e929 code=0x7ffc0000 [ 722.434294][ T30] audit: type=1326 audit(2000000133.547:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13406 comm="syz.1.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9ff8e929 code=0x7ffc0000 [ 722.434640][ T30] audit: type=1326 audit(2000000133.547:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13406 comm="syz.1.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2e9ff8e52b code=0x7ffc0000 [ 722.434791][ T30] audit: type=1326 audit(2000000133.547:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13406 comm="syz.1.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9ff8e929 code=0x7ffc0000 [ 722.434973][ T30] audit: type=1326 audit(2000000133.547:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13406 comm="syz.1.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9ff8e929 code=0x7ffc0000 [ 722.482751][ T5926] usb 1-1: device descriptor read/64, error -71 [ 722.498688][ T6505] usb 4-1: Using ep0 maxpacket: 16 [ 722.500111][ T6505] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 722.500143][ T6505] usb 4-1: config 0 interface 0 has no altsetting 0 [ 722.503015][ T6505] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 722.503041][ T6505] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.503060][ T6505] usb 4-1: Product: syz [ 722.503074][ T6505] usb 4-1: Manufacturer: syz [ 722.503088][ T6505] usb 4-1: SerialNumber: syz [ 722.508733][ T6505] usb 4-1: config 0 descriptor?? [ 722.510138][ T6505] hub 4-1:0.0: bad descriptor, ignoring hub [ 722.510160][ T6505] hub 4-1:0.0: probe with driver hub failed with error -5 [ 722.512452][ T6505] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 722.513095][ T13] usb 4-1: Failed to submit usb control message: -71 [ 722.513121][ T13] usb 4-1: unable to send the bmi data to the device: -71 [ 722.513138][ T13] usb 4-1: unable to get target info from device [ 722.513152][ T13] usb 4-1: could not get target info (-71) [ 722.513168][ T13] usb 4-1: could not probe fw (-71) [ 722.937996][ T5926] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 722.952132][T13392] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2207'. [ 723.067890][ T5926] usb 1-1: device descriptor read/64, error -71 [ 723.088095][ T6505] usb 4-1: USB disconnect, device number 46 [ 723.178084][ T5926] usb usb1-port1: attempt power cycle [ 723.517879][ T5926] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 723.538416][ T5926] usb 1-1: device descriptor read/8, error -71 [ 723.823389][T13445] loop2: detected capacity change from 0 to 524287999 [ 723.930169][T13447] 9pnet_fd: Insufficient options for proto=fd [ 724.428991][ T5926] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 724.451127][ T5926] usb 1-1: device descriptor read/8, error -71 [ 724.657450][ T5926] usb usb1-port1: unable to enumerate USB device [ 725.211803][T13458] overlayfs: failed to clone upperpath [ 725.217802][ T10] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 725.245953][T13461] overlayfs: failed to clone upperpath [ 725.342223][T13470] overlayfs: failed to clone upperpath [ 725.367899][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 725.369407][ T10] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 725.369453][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 725.369645][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 725.369670][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 725.369696][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 725.369718][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 725.369754][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 725.369776][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.573714][ T10] usb 4-1: GET_CAPABILITIES returned 0 [ 725.573752][ T10] usbtmc 4-1:16.0: can't read capabilities [ 725.577939][ T9] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 725.761797][T13480] xt_limit: Overflow, try lower: 2147483649/32768 [ 726.332333][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 726.678247][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 726.679868][ T9] usb 1-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 726.679894][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.679912][ T9] usb 1-1: Product: syz [ 726.679925][ T9] usb 1-1: Manufacturer: syz [ 726.679938][ T9] usb 1-1: SerialNumber: syz [ 726.680965][ T9] usb 1-1: config 0 descriptor?? [ 726.682699][ T9] usbtouchscreen 1-1:0.0: probe with driver usbtouchscreen failed with error -12 [ 726.712675][ T9] usb 4-1: USB disconnect, device number 47 [ 726.960115][T13508] netlink: 'syz.5.2247': attribute type 1 has an invalid length. [ 726.961036][T13508] veth1_to_batadv: mtu less than device minimum [ 726.966253][ T9] usb 1-1: USB disconnect, device number 70 [ 727.138957][T13510] JFS: charset not found [ 727.606832][T13518] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2250'. [ 727.606936][T13518] syz_tun: left allmulticast mode [ 727.606954][T13518] syz_tun: left promiscuous mode [ 727.607115][T13518] bridge0: port 3(syz_tun) entered disabled state [ 727.612987][T13518] bridge_slave_1: left allmulticast mode [ 727.613006][T13518] bridge_slave_1: left promiscuous mode [ 727.613140][T13518] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.615378][T13518] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.607217][ T8709] bond0: (slave syz_tun): Releasing backup interface [ 728.655577][ T6213] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.696292][ T6213] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.753971][ T6213] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.813960][ T6213] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.870072][ T5859] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 728.870358][ T5859] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 728.870611][ T5859] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 728.871280][ T5859] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 728.871734][ T5859] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 728.915037][ T6213] bridge_slave_1: left allmulticast mode [ 728.915058][ T6213] bridge_slave_1: left promiscuous mode [ 728.915170][ T6213] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.916144][ T6213] bridge_slave_0: left allmulticast mode [ 728.916156][ T6213] bridge_slave_0: left promiscuous mode [ 728.916260][ T6213] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.114139][ T6213] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 729.115701][ T6213] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 729.116534][ T6213] bond0 (unregistering): Released all slaves [ 729.219072][ T6213] bond1 (unregistering): Released all slaves [ 729.223745][ T6213] bond2 (unregistering): Released all slaves [ 729.305615][ T6213] tipc: Left network mode [ 729.387603][T13544] chnl_net:caif_netlink_parms(): no params data found [ 729.455499][T13567] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2268'. [ 729.487770][T13563] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2268'. [ 729.488151][T13544] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.488215][T13544] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.488326][T13544] bridge_slave_0: entered allmulticast mode [ 729.489196][T13544] bridge_slave_0: entered promiscuous mode [ 729.490603][T13544] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.490665][T13544] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.490765][T13544] bridge_slave_1: entered allmulticast mode [ 729.491686][T13544] bridge_slave_1: entered promiscuous mode [ 729.543380][T13544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 729.546020][T13544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 729.598559][T13544] team0: Port device team_slave_0 added [ 729.600456][T13544] team0: Port device team_slave_1 added [ 729.728448][T13544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 729.728467][T13544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 729.728591][T13544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 729.729858][T13544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 729.729872][T13544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 729.729909][T13544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 730.265587][T13544] hsr_slave_0: entered promiscuous mode [ 730.267385][T13544] hsr_slave_1: entered promiscuous mode [ 730.270882][T13544] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 730.270902][T13544] Cannot create hsr debugfs directory [ 730.382076][T13575] netlink: 'syz.5.2271': attribute type 9 has an invalid length. [ 730.382144][T13575] netlink: 'syz.5.2271': attribute type 6 has an invalid length. [ 730.413058][T13544] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 730.479299][T13544] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 730.497386][T13544] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 730.502364][T13544] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 730.582502][ T6213] hsr_slave_0: left promiscuous mode [ 730.582900][ T6213] hsr_slave_1: left promiscuous mode [ 730.585590][ T6213] veth1_macvtap: left promiscuous mode [ 730.585691][ T6213] veth1_vlan: left promiscuous mode [ 730.585752][ T6213] veth0_vlan: left promiscuous mode [ 730.721924][ T6213] team0 (unregistering): Port device team_slave_1 removed [ 730.737130][ T6213] team0 (unregistering): Port device team_slave_0 removed [ 730.833977][T13544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 730.842982][T13544] 8021q: adding VLAN 0 to HW filter on device team0 [ 730.846290][ T6219] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.846364][ T6219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 730.850121][ T6199] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.850166][ T6199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 730.940205][ T5859] Bluetooth: hci3: command tx timeout [ 730.995428][T13544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 731.034910][ T6213] IPVS: stop unused estimator thread 0... [ 731.103063][T13601] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2276'. [ 731.186723][T13544] veth0_vlan: entered promiscuous mode [ 731.191582][T13544] veth1_vlan: entered promiscuous mode [ 731.206780][T13544] veth0_macvtap: entered promiscuous mode [ 731.209476][T13544] veth1_macvtap: entered promiscuous mode [ 731.217051][T13544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 731.223648][T13544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 731.226345][T13544] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.226372][T13544] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.226394][T13544] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.226414][T13544] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.243900][T13544] ieee80211 phy64: Selected rate control algorithm 'minstrel_ht' [ 731.262821][ T6690] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.262859][ T6690] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.264437][T13544] ieee80211 phy65: Selected rate control algorithm 'minstrel_ht' [ 731.284422][ T6690] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.284442][ T6690] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.425516][T13605] netlink: 'syz.7.2262': attribute type 12 has an invalid length. [ 731.425533][T13605] netlink: 'syz.7.2262': attribute type 29 has an invalid length. [ 731.425541][T13605] netlink: 148 bytes leftover after parsing attributes in process `syz.7.2262'. [ 731.425561][T13605] netlink: 51 bytes leftover after parsing attributes in process `syz.7.2262'. [ 732.577241][T13629] tipc: Enabling of bearer rejected, failed to enable media [ 733.047734][ T5859] Bluetooth: hci3: command tx timeout [ 733.633306][T13643] tipc: Enabling of bearer rejected, failed to enable media [ 734.142494][T13658] devtmpfs: Unknown parameter 'hash' [ 735.097489][ T5859] Bluetooth: hci3: command tx timeout [ 736.841037][T13692] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2302'. [ 737.177357][ T5859] Bluetooth: hci3: command tx timeout [ 738.119228][T10620] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 738.119524][T10620] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 738.119768][T10620] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 738.120622][T10620] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 738.121374][T10620] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 738.210569][T13703] chnl_net:caif_netlink_parms(): no params data found [ 738.251558][T13703] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.251636][T13703] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.251723][T13703] bridge_slave_0: entered allmulticast mode [ 738.252434][T13703] bridge_slave_0: entered promiscuous mode [ 738.253758][T13703] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.253846][T13703] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.253941][T13703] bridge_slave_1: entered allmulticast mode [ 738.254849][T13703] bridge_slave_1: entered promiscuous mode [ 738.271195][T13703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 738.273156][T13703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 738.310631][T13703] team0: Port device team_slave_0 added [ 738.312522][T13703] team0: Port device team_slave_1 added [ 738.333801][T13703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 738.333815][T13703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 738.333885][T13703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 738.335315][T13703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 738.335330][T13703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 738.335376][T13703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 738.368306][T13703] hsr_slave_0: entered promiscuous mode [ 738.368960][T13703] hsr_slave_1: entered promiscuous mode [ 738.369402][T13703] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 738.369418][T13703] Cannot create hsr debugfs directory [ 738.473439][T13703] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 738.476026][T13703] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 738.478596][T13703] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 738.481102][T13703] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 738.500522][T13703] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.500599][T13703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 738.500759][T13703] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.500830][T13703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 738.540580][T13703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 738.553344][ T6220] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.553865][ T6220] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.565930][T13703] 8021q: adding VLAN 0 to HW filter on device team0 [ 738.570893][ T6219] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.570956][ T6219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 738.575673][ T6219] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.575735][ T6219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 738.771114][T13703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 738.922863][T13703] veth0_vlan: entered promiscuous mode [ 738.926283][T13703] veth1_vlan: entered promiscuous mode [ 738.941790][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805648e400: rx timeout, send abort [ 738.942836][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805648ec00: rx timeout, send abort [ 738.944048][T13703] veth0_macvtap: entered promiscuous mode [ 738.946369][T13703] veth1_macvtap: entered promiscuous mode [ 738.955084][T13703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 738.959576][T13703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 738.962188][T13703] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.962212][T13703] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.962231][T13703] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.962249][T13703] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.982982][T13703] ieee80211 phy66: Selected rate control algorithm 'minstrel_ht' [ 739.002123][ T6690] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 739.002140][ T6690] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.004787][T13703] ieee80211 phy67: Selected rate control algorithm 'minstrel_ht' [ 739.024200][ T6690] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 739.024219][ T6690] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.441802][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805648e400: abort rx timeout. Force session deactivation [ 739.442843][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805648ec00: abort rx timeout. Force session deactivation [ 739.775632][T13741] caif:caif_disconnect_client(): nothing to disconnect [ 740.012799][T13751] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2314'. [ 740.137044][T10620] Bluetooth: hci5: command tx timeout [ 741.220862][T13756] caif:caif_disconnect_client(): nothing to disconnect [ 741.480585][T13767] caif:caif_disconnect_client(): nothing to disconnect [ 741.824341][T13782] caif:caif_disconnect_client(): nothing to disconnect [ 742.278741][ T5859] Bluetooth: hci5: command tx timeout [ 742.746771][T13803] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2330'. [ 742.829604][T10620] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 742.829948][T10620] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 742.830202][T10620] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 742.830969][T10620] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 742.831445][T10620] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 742.923106][T13804] chnl_net:caif_netlink_parms(): no params data found [ 742.972460][T13804] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.972540][T13804] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.972771][T13804] bridge_slave_0: entered allmulticast mode [ 742.973673][T13804] bridge_slave_0: entered promiscuous mode [ 742.975285][T13804] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.975395][T13804] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.975483][T13804] bridge_slave_1: entered allmulticast mode [ 742.976212][T13804] bridge_slave_1: entered promiscuous mode [ 742.994870][T13804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 742.996624][T13804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 743.013419][T13804] team0: Port device team_slave_0 added [ 743.015192][T13804] team0: Port device team_slave_1 added [ 743.032098][T13804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 743.032114][T13804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 743.032149][T13804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 743.033149][T13804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 743.033161][T13804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 743.033194][T13804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 743.057838][T13804] hsr_slave_0: entered promiscuous mode [ 743.058419][T13804] hsr_slave_1: entered promiscuous mode [ 743.058865][T13804] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 743.058884][T13804] Cannot create hsr debugfs directory [ 743.143985][T13804] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 743.146317][T13804] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 743.148762][T13804] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 743.151020][T13804] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 743.170023][T13804] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.170128][T13804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 743.170294][T13804] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.170350][T13804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 743.203955][T13804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 743.210186][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.210516][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.214917][T13804] 8021q: adding VLAN 0 to HW filter on device team0 [ 743.221299][ T6220] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.221363][ T6220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 743.224317][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.224377][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 743.319801][T13820] chnl_net:chnl_net_open(): err: Unable to register and open device, Err:-19 [ 743.319830][T13820] caif:caif_disconnect_client(): nothing to disconnect [ 743.322191][T13820] chnl_net:chnl_flowctrl_cb(): NET flowctrl func called flow: CLOSE/DEINIT [ 743.322211][T13820] chnl_net:chnl_net_open(): state disconnected [ 743.322225][T13820] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 743.393175][T13804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 743.533707][T13832] overlayfs: failed to clone upperpath [ 743.640161][T13804] veth0_vlan: entered promiscuous mode [ 743.644615][T13804] veth1_vlan: entered promiscuous mode [ 743.665369][T13804] veth0_macvtap: entered promiscuous mode [ 743.674494][T13804] veth1_macvtap: entered promiscuous mode [ 743.688278][T13804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 743.691019][T13804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 743.695014][T13804] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.695052][T13804] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.695071][T13804] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.695090][T13804] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.713269][T13804] ieee80211 phy68: Selected rate control algorithm 'minstrel_ht' [ 743.738339][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 743.738360][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.741157][T13804] ieee80211 phy69: Selected rate control algorithm 'minstrel_ht' [ 743.762991][ T6191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 743.763009][ T6191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 744.275147][T13847] xt_bpf: check failed: parse error [ 744.300238][T10620] Bluetooth: hci5: command tx timeout [ 744.367592][T13848] fuse: Unknown parameter '0x0000000000000007' [ 744.776175][T13850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2338'. [ 744.776198][T13850] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2338'. [ 744.856689][T10620] Bluetooth: hci6: command tx timeout [ 745.525085][T13854] netlink: 'syz.9.2339': attribute type 1 has an invalid length. [ 745.770736][T13863] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2342'. [ 746.377363][T10620] Bluetooth: hci5: command tx timeout [ 746.749424][T13877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2347'. [ 746.753674][T13877] vlan0: entered promiscuous mode [ 746.753691][T13877] bond0: entered promiscuous mode [ 746.753702][T13877] bond_slave_0: entered promiscuous mode [ 746.753808][T13877] bond_slave_1: entered promiscuous mode [ 746.807010][T13880] Invalid source name [ 746.807031][T13880] UBIFS error (pid: 13880): cannot open "/dev/sg0", error -22 [ 746.965050][T13883] FAULT_INJECTION: forcing a failure. [ 746.965050][T13883] name failslab, interval 1, probability 0, space 0, times 0 [ 746.965096][T13883] CPU: 0 UID: 0 PID: 13883 Comm: syz.9.2348 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 746.965119][T13883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 746.965131][T13883] Call Trace: [ 746.965138][T13883] [ 746.965146][T13883] dump_stack_lvl+0x189/0x250 [ 746.965171][T13883] ? __pfx____ratelimit+0x10/0x10 [ 746.965219][T13883] ? __pfx_dump_stack_lvl+0x10/0x10 [ 746.965241][T13883] ? __pfx__printk+0x10/0x10 [ 746.965266][T13883] ? fs_reclaim_acquire+0x7d/0x100 [ 746.965285][T13883] ? rcu_is_watching+0x15/0xb0 [ 746.965306][T13883] ? __pfx___might_resched+0x10/0x10 [ 746.965327][T13883] ? lock_acquire+0x5f/0x360 [ 746.965346][T13883] should_fail_ex+0x414/0x560 [ 746.965378][T13883] should_failslab+0xa8/0x100 [ 746.965396][T13883] kmem_cache_alloc_noprof+0x73/0x3c0 [ 746.965425][T13883] ? getname_flags+0xb8/0x540 [ 746.965447][T13883] getname_flags+0xb8/0x540 [ 746.965469][T13883] __x64_sys_execveat+0xad/0xe0 [ 746.965498][T13883] do_syscall_64+0xfa/0x3b0 [ 746.965518][T13883] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.965538][T13883] ? clear_bhb_loop+0x60/0xb0 [ 746.965560][T13883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.965579][T13883] RIP: 0033:0x7faf38b8e929 [ 746.965604][T13883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 746.965621][T13883] RSP: 002b:00007faf3991d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 746.965643][T13883] RAX: ffffffffffffffda RBX: 00007faf38db6080 RCX: 00007faf38b8e929 [ 746.965658][T13883] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 746.965670][T13883] RBP: 00007faf3991d090 R08: 0000000000001000 R09: 0000000000000000 [ 746.965683][T13883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 746.965695][T13883] R13: 0000000000000000 R14: 00007faf38db6080 R15: 00007fff068879b8 [ 746.965717][T13883] [ 747.019479][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.019529][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.064417][T10620] Bluetooth: hci6: command tx timeout [ 747.199149][T13885] fuse: Unknown parameter '0x0000000000000007' [ 747.555434][ T5859] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 747.558354][ T5859] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 747.560669][ T5859] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 747.576423][ T5859] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 747.595963][ T5859] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 747.926543][T13900] overlayfs: failed to resolve './file1': -2 [ 748.333221][T13906] overlayfs: failed to clone upperpath [ 748.431547][T13886] chnl_net:caif_netlink_parms(): no params data found [ 748.888542][T13942] overlayfs: failed to clone upperpath [ 748.930593][T13941] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2354'. [ 748.999972][T13886] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.000075][T13886] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.000177][T13886] bridge_slave_0: entered allmulticast mode [ 749.001107][T13886] bridge_slave_0: entered promiscuous mode [ 749.002815][T13886] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.002912][T13886] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.003016][T13886] bridge_slave_1: entered allmulticast mode [ 749.004040][T13886] bridge_slave_1: entered promiscuous mode [ 749.026136][T13886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 749.029226][T13886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 749.046887][T13948] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2357'. [ 749.047119][T13947] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2357'. [ 749.048936][T13886] team0: Port device team_slave_0 added [ 749.051845][T13886] team0: Port device team_slave_1 added [ 749.078199][T13886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 749.078214][T13886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 749.078270][T13886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 749.080493][T13886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 749.080507][T13886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 749.080558][T13886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 749.096798][T10620] Bluetooth: hci6: command tx timeout [ 749.121294][T13886] hsr_slave_0: entered promiscuous mode [ 749.123069][T13886] hsr_slave_1: entered promiscuous mode [ 749.123518][T13886] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 749.123534][T13886] Cannot create hsr debugfs directory [ 749.258886][T13886] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.357614][T13886] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.391375][T13886] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.452196][T13886] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.652002][T13886] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 749.655681][T13886] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 749.656686][T10620] Bluetooth: hci7: command tx timeout [ 749.665744][T13886] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 749.672374][T13886] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 749.805573][T13886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 749.815990][T13886] 8021q: adding VLAN 0 to HW filter on device team0 [ 749.825055][ T6213] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.825120][ T6213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 749.830647][ T6219] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.830708][ T6219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 749.947539][ T5912] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 750.138706][ T5912] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 750.138741][ T5912] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 750.138777][ T5912] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 750.138800][ T5912] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.165206][T13886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 750.189195][T13981] cgroup: none used incorrectly [ 750.201666][T13886] veth0_vlan: entered promiscuous mode [ 750.206710][T13886] veth1_vlan: entered promiscuous mode [ 750.233830][T13886] veth0_macvtap: entered promiscuous mode [ 750.239434][T13886] veth1_macvtap: entered promiscuous mode [ 750.354690][T13886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 750.359174][T13886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 750.363598][T13886] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.363631][T13886] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.363659][T13886] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.363685][T13886] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.365009][ T5912] usb 10-1: usb_control_msg returned -32 [ 750.365053][ T5912] usbtmc 10-1:16.0: can't read capabilities [ 750.387953][T13886] ieee80211 phy70: Selected rate control algorithm 'minstrel_ht' [ 750.814773][ T6213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 750.814796][ T6213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 750.819218][T13886] ieee80211 phy71: Selected rate control algorithm 'minstrel_ht' [ 750.833965][ T5912] usb 10-1: USB disconnect, device number 2 [ 750.852647][ T6223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 750.852665][ T6223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 751.004786][T13992] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 751.004828][T13992] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 751.147680][T13996] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2367'. [ 751.176862][T10620] Bluetooth: hci6: command tx timeout [ 751.355931][T14009] netlink: 'syz.2.2371': attribute type 2 has an invalid length. [ 751.355953][T14009] netlink: 119 bytes leftover after parsing attributes in process `syz.2.2371'. [ 751.596454][ T6505] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 751.748335][T10620] Bluetooth: hci7: command tx timeout [ 751.766977][ T6505] usb 3-1: Using ep0 maxpacket: 32 [ 751.768231][ T6505] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 751.768254][ T6505] usb 3-1: config 0 has no interface number 0 [ 751.772369][ T6505] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 751.772397][ T6505] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.772426][ T6505] usb 3-1: Product: syz [ 751.772441][ T6505] usb 3-1: Manufacturer: syz [ 751.772456][ T6505] usb 3-1: SerialNumber: syz [ 751.774422][ T6505] usb 3-1: config 0 descriptor?? [ 751.778535][ T6505] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 752.473387][ T6505] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 752.474978][ T6505] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 752.731064][T14027] FAULT_INJECTION: forcing a failure. [ 752.731064][T14027] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 752.731102][T14027] CPU: 0 UID: 0 PID: 14027 Comm: syz.9.2377 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 752.731126][T14027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 752.731137][T14027] Call Trace: [ 752.731144][T14027] [ 752.731152][T14027] dump_stack_lvl+0x189/0x250 [ 752.731178][T14027] ? __pfx____ratelimit+0x10/0x10 [ 752.731207][T14027] ? __pfx_dump_stack_lvl+0x10/0x10 [ 752.731227][T14027] ? __pfx__printk+0x10/0x10 [ 752.731254][T14027] ? rcu_is_watching+0x15/0xb0 [ 752.731277][T14027] should_fail_ex+0x414/0x560 [ 752.731306][T14027] _copy_to_user+0x31/0xb0 [ 752.731329][T14027] simple_read_from_buffer+0xe1/0x170 [ 752.731360][T14027] proc_fail_nth_read+0x1df/0x250 [ 752.731381][T14027] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 752.731399][T14027] ? trace_contention_end+0x39/0x120 [ 752.731423][T14027] ? rw_verify_area+0x258/0x650 [ 752.731448][T14027] ? map_update_elem+0x4ea/0x750 [ 752.731475][T14027] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 752.731496][T14027] vfs_read+0x1fd/0x980 [ 752.731521][T14027] ? __fget_files+0x2a/0x420 [ 752.731539][T14027] ? __pfx___mutex_lock+0x10/0x10 [ 752.731558][T14027] ? __pfx_vfs_read+0x10/0x10 [ 752.731587][T14027] ? __fget_files+0x3a0/0x420 [ 752.731604][T14027] ? __fget_files+0x2a/0x420 [ 752.731626][T14027] ksys_read+0x145/0x250 [ 752.731652][T14027] ? __pfx_ksys_read+0x10/0x10 [ 752.731677][T14027] ? rcu_is_watching+0x15/0xb0 [ 752.731699][T14027] ? rcu_is_watching+0x15/0xb0 [ 752.731720][T14027] do_syscall_64+0xfa/0x3b0 [ 752.731739][T14027] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.731757][T14027] ? clear_bhb_loop+0x60/0xb0 [ 752.731778][T14027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.731795][T14027] RIP: 0033:0x7faf38b8d33c [ 752.731811][T14027] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 752.731827][T14027] RSP: 002b:00007faf3993e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 752.731845][T14027] RAX: ffffffffffffffda RBX: 00007faf38db5fa0 RCX: 00007faf38b8d33c [ 752.731859][T14027] RDX: 000000000000000f RSI: 00007faf3993e0a0 RDI: 0000000000000009 [ 752.731871][T14027] RBP: 00007faf3993e090 R08: 0000000000000000 R09: 0000000000000000 [ 752.731883][T14027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 752.731895][T14027] R13: 0000000000000000 R14: 00007faf38db5fa0 R15: 00007fff068879b8 [ 752.731916][T14027] [ 753.064580][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 753.064811][ T5850] usb 3-1: USB disconnect, device number 13 [ 753.072694][ T5850] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 753.074413][ T5850] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 753.075085][ T5850] quatech2 3-1:0.51: device disconnected [ 753.209999][T14048] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2379'. [ 753.230959][T14048] chnl_net:chnl_net_open(): err: Unable to register and open device, Err:-19 [ 753.230984][T14048] caif:caif_disconnect_client(): nothing to disconnect [ 753.231667][T14048] chnl_net:chnl_flowctrl_cb(): NET flowctrl func called flow: CLOSE/DEINIT [ 753.231686][T14048] chnl_net:chnl_net_open(): state disconnected [ 753.231701][T14048] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 753.587435][T14064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2383'. [ 753.587926][T14064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2383'. [ 753.826524][T10620] Bluetooth: hci7: command tx timeout [ 753.895508][T14082] tipc: Started in network mode [ 753.895528][T14082] tipc: Node identity 40000000000000000000000000000001, cluster identity 4711 [ 753.895552][T14082] tipc: Enabling of bearer rejected, failed to enable media [ 753.942841][T14081] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2384'. [ 754.071139][T14093] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2390'. [ 754.071158][T14093] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2390'. [ 754.071168][T14093] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2390'. [ 754.071178][T14093] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2390'. [ 754.071187][T14093] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2390'. [ 754.071197][T14093] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2390'. [ 754.071209][T14093] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2390'. [ 754.071219][T14093] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2390'. [ 754.071229][T14093] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2390'. [ 754.196208][T14104] fuse: Unknown parameter '0x0000000000000007' [ 754.942606][T14121] loop2: detected capacity change from 0 to 524287999 [ 755.122443][ T121] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 755.477264][ T121] usb 3-1: device descriptor read/64, error -71 [ 755.719547][ T121] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 755.846336][ T121] usb 3-1: device descriptor read/64, error -71 [ 755.906421][T10620] Bluetooth: hci7: command tx timeout [ 755.956203][ T121] usb usb3-port1: attempt power cycle [ 756.354448][T14147] binder: 14145:14147 ioctl 541b 0 returned -22 [ 756.542794][ T121] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 756.556734][ T121] usb 3-1: device descriptor read/8, error -71 [ 756.669271][T14153] fuse: Unknown parameter '0x0000000000000007' [ 757.032813][ T121] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 757.048379][ T121] usb 3-1: device descriptor read/8, error -71 [ 757.156275][ T121] usb usb3-port1: unable to enumerate USB device [ 757.398147][T12453] syz_tun (unregistering): left allmulticast mode [ 757.398174][T12453] syz_tun (unregistering): left promiscuous mode [ 757.398234][T12453] bridge0: port 1(syz_tun) entered disabled state [ 757.440834][ T5859] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 757.443058][ T5859] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 757.443279][ T5859] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 757.443903][ T5859] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 757.444367][ T5859] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 757.520508][ T5859] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 757.520734][ T5859] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 757.520930][ T5859] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 757.521482][ T5859] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 757.521869][ T5859] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 758.027878][T14158] chnl_net:caif_netlink_parms(): no params data found [ 758.069398][T14162] chnl_net:caif_netlink_parms(): no params data found [ 758.093531][T14158] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.093754][T14158] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.093923][T14158] bridge_slave_0: entered allmulticast mode [ 758.094755][T14158] bridge_slave_0: entered promiscuous mode [ 758.102145][T14158] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.102264][T14158] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.102352][T14158] bridge_slave_1: entered allmulticast mode [ 758.103010][T14158] bridge_slave_1: entered promiscuous mode [ 758.133194][T14158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 758.142611][T14158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 758.157102][T14162] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.157189][T14162] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.157277][T14162] bridge_slave_0: entered allmulticast mode [ 758.157963][T14162] bridge_slave_0: entered promiscuous mode [ 758.165729][T14162] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.166741][T14162] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.166860][T14162] bridge_slave_1: entered allmulticast mode [ 758.167629][T14162] bridge_slave_1: entered promiscuous mode [ 758.177014][T14158] team0: Port device team_slave_0 added [ 758.185375][T14158] team0: Port device team_slave_1 added [ 758.189418][T14162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 758.197147][T14162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 758.210909][T14158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 758.210923][T14158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 758.210975][T14158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 758.222163][T14158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 758.222175][T14158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 758.222243][T14158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 758.223438][T14162] team0: Port device team_slave_0 added [ 758.228047][T14162] team0: Port device team_slave_1 added [ 758.245652][T14162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 758.245663][T14162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 758.245714][T14162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 758.253076][T14162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 758.253108][T14162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 758.253147][T14162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 758.266566][T14158] hsr_slave_0: entered promiscuous mode [ 758.267254][T14158] hsr_slave_1: entered promiscuous mode [ 758.267776][T14158] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 758.267792][T14158] Cannot create hsr debugfs directory [ 758.308797][T14162] hsr_slave_0: entered promiscuous mode [ 758.309444][T14162] hsr_slave_1: entered promiscuous mode [ 758.309814][T14162] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 758.309830][T14162] Cannot create hsr debugfs directory [ 758.453036][T14158] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.488283][T14158] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.528810][T14158] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.579108][T14158] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.624910][T14162] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.677501][T14162] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.730054][T14162] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.771154][T14162] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.831593][T14158] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 758.833988][T14158] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 758.837135][T14158] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 758.844357][T14158] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 758.865255][T14162] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 758.867985][T14162] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 758.869959][T14162] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 758.873542][T14162] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 758.960231][T14158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 758.962650][T14162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 758.974653][T14158] 8021q: adding VLAN 0 to HW filter on device team0 [ 758.981927][T14162] 8021q: adding VLAN 0 to HW filter on device team0 [ 758.985204][ T6213] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.985250][ T6213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 758.993661][ T6193] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.993726][ T6193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 758.995206][ T6193] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.995249][ T6193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 759.002334][ T6193] bridge0: port 2(bridge_slave_1) entered blocking state [ 759.002378][ T6193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 759.114154][T14197] tipc: Started in network mode [ 759.114192][T14197] tipc: Node identity 3e0fd0ce30e5, cluster identity 4711 [ 759.114410][T14197] tipc: Enabled bearer , priority 0 [ 759.115008][T14197] syzkaller0: entered promiscuous mode [ 759.115041][T14197] syzkaller0: entered allmulticast mode [ 759.175309][T14200] tipc: Resetting bearer [ 759.181589][T14194] tipc: Resetting bearer [ 759.182729][T14194] tipc: Disabling bearer [ 759.294719][T14206] bridge_slave_0: left allmulticast mode [ 759.294757][T14206] bridge_slave_0: left promiscuous mode [ 759.294919][T14206] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.303591][T14206] bridge_slave_1: left allmulticast mode [ 759.303615][T14206] bridge_slave_1: left promiscuous mode [ 759.303757][T14206] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.308765][T14206] bond0: (slave bond_slave_0): Releasing backup interface [ 759.311599][T14206] bond0: (slave bond_slave_1): Releasing backup interface [ 759.325666][T14206] team0: Port device team_slave_0 removed [ 759.334175][T14206] team0: Port device team_slave_1 removed [ 759.335073][T14206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 759.335118][T14206] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 759.342121][T14206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 759.342159][T14206] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 759.369571][T14211] netlink: 'syz.2.2416': attribute type 10 has an invalid length. [ 759.391077][T14211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 759.391813][T14211] team0: Port device bond0 added [ 759.411443][T14162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 759.414934][T14158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 759.463180][T14158] veth0_vlan: entered promiscuous mode [ 759.473469][T14158] veth1_vlan: entered promiscuous mode [ 759.496160][ T5859] Bluetooth: hci4: command tx timeout [ 759.500433][T14158] veth0_macvtap: entered promiscuous mode [ 759.503201][T14158] veth1_macvtap: entered promiscuous mode [ 759.522840][T14158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 759.530808][T14158] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 759.542053][T14158] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.542100][T14158] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.542545][T14158] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.542574][T14158] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.577668][ T5859] Bluetooth: hci8: command tx timeout [ 759.582325][T14158] ieee80211 phy72: Selected rate control algorithm 'minstrel_ht' [ 759.634704][T14158] ieee80211 phy73: Selected rate control algorithm 'minstrel_ht' [ 759.636457][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.636484][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.691245][ T6199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.691266][ T6199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.778965][T14162] veth0_vlan: entered promiscuous mode [ 759.788137][T14162] veth1_vlan: entered promiscuous mode [ 759.804545][T14162] veth0_macvtap: entered promiscuous mode [ 759.807932][T14162] veth1_macvtap: entered promiscuous mode [ 759.831586][T14162] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 759.839954][T14162] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 759.842284][T14162] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.842308][T14162] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.842327][T14162] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.842345][T14162] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.882191][T14162] ieee80211 phy74: Selected rate control algorithm 'minstrel_ht' [ 759.961666][ T6193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.961688][ T6193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.964660][T14162] ieee80211 phy75: Selected rate control algorithm 'minstrel_ht' [ 759.992413][ T6199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.992433][ T6199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 760.176270][T11864] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 760.286334][ T10] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 760.329977][T11864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 760.330017][T11864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 760.330054][T11864] usb 2-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 760.330080][T11864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.333016][T11864] usb 2-1: config 0 descriptor?? [ 760.445966][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 760.451931][ T10] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 760.451956][ T10] usb 5-1: config 0 has an invalid descriptor of length 158, skipping remainder of the config [ 760.451976][ T10] usb 5-1: config 0 has no interface number 0 [ 760.452003][ T10] usb 5-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 760.452028][ T10] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 760.452053][ T10] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 760.452073][ T10] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid maxpacket 53651, setting to 1024 [ 760.452090][ T10] usb 5-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 760.452109][ T10] usb 5-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 760.452144][ T10] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 760.452164][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.453389][ T10] usb 5-1: config 0 descriptor?? [ 760.453973][T14237] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 760.454170][T14237] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 760.465088][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 760.500418][T14247] overlayfs: failed to clone upperpath [ 760.739013][T11864] kye 0003:0458:5005.0010: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 760.740528][T11864] kye 0003:0458:5005.0010: hidraw0: USB HID v0.00 Device [HID 0458:5005] on usb-dummy_hcd.1-1/input0 [ 760.740549][T11864] kye 0003:0458:5005.0010: tablet-enabling feature report not found [ 760.740560][T11864] kye 0003:0458:5005.0010: tablet enabling failed [ 760.940447][T14233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 760.940618][T14233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 760.942584][ T10] usb 2-1: USB disconnect, device number 23 [ 761.255042][T14268] 9pnet_fd: Insufficient options for proto=fd [ 761.576069][ T5859] Bluetooth: hci4: command tx timeout [ 761.727336][T14285] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 761.727722][T14285] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 761.937597][ T5859] Bluetooth: hci8: command tx timeout [ 763.695586][ T5859] Bluetooth: hci4: command tx timeout [ 763.733576][T11864] usb 5-1: USB disconnect, device number 38 [ 763.809631][T14312] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 763.810367][T14311] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 764.016174][ T5859] Bluetooth: hci8: command tx timeout [ 764.915713][ T10] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 765.068180][ T10] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 765.068212][ T10] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 765.068239][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 765.068276][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 765.068302][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 765.069713][ T10] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 765.069744][ T10] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 765.069766][ T10] usb 5-1: Product: syz [ 765.069782][ T10] usb 5-1: Manufacturer: syz [ 765.077660][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 765.077678][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 765.078523][ T10] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 765.078543][ T10] cdc_wdm 5-1:1.0: Unknown control protocol [ 765.281812][ T10] usb 5-1: USB disconnect, device number 39 [ 765.736011][ T5859] Bluetooth: hci4: command tx timeout [ 765.885609][ T10] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 766.045778][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 766.047208][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 766.047241][ T10] usb 5-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 766.047265][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.048625][ T10] usb 5-1: config 0 descriptor?? [ 766.055811][ T5859] Bluetooth: hci8: command tx timeout [ 766.452508][ T10] sony 0003:054C:0268.0011: item fetching failed at offset 0/3 [ 766.452880][ T10] sony 0003:054C:0268.0011: parse failed [ 766.452948][ T10] sony 0003:054C:0268.0011: probe with driver sony failed with error -22 [ 766.708275][ T10] usb 5-1: USB disconnect, device number 40 [ 767.647575][T14239] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 767.795523][T14239] usb 3-1: Using ep0 maxpacket: 32 [ 767.796818][T14239] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 767.796844][T14239] usb 3-1: config 0 has no interface number 0 [ 767.796874][T14239] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 767.796901][T14239] usb 3-1: config 0 interface 85 has no altsetting 0 [ 767.798480][T14239] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 767.798498][T14239] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.798511][T14239] usb 3-1: Product: syz [ 767.798521][T14239] usb 3-1: Manufacturer: syz [ 767.798531][T14239] usb 3-1: SerialNumber: syz [ 767.799646][T14239] usb 3-1: config 0 descriptor?? [ 768.003519][T14371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.003654][T14371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.854184][T14239] appletouch 3-1:0.85: Geyser mode initialized. [ 768.855385][T14239] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input74 [ 768.918801][T14239] usb 3-1: USB disconnect, device number 18 [ 768.921166][T14239] appletouch 3-1:0.85: input: appletouch disconnected [ 771.600816][T14421] __nla_validate_parse: 41 callbacks suppressed [ 771.600839][T14421] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2485'. [ 771.607853][T10620] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 771.608357][T10620] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 771.608631][T10620] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 771.609335][T10620] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 771.609863][T10620] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 771.703459][T14423] chnl_net:caif_netlink_parms(): no params data found [ 771.741559][T14423] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.741631][T14423] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.741718][T14423] bridge_slave_0: entered allmulticast mode [ 771.742434][T14423] bridge_slave_0: entered promiscuous mode [ 771.743658][T14423] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.743727][T14423] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.743821][T14423] bridge_slave_1: entered allmulticast mode [ 771.744634][T14423] bridge_slave_1: entered promiscuous mode [ 771.764005][T14423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 771.766189][T14423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 771.781128][T14423] team0: Port device team_slave_0 added [ 771.782609][T14423] team0: Port device team_slave_1 added [ 771.797117][T14423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 771.797132][T14423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 771.797189][T14423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 771.798006][T14423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 771.798018][T14423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 771.798058][T14423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 771.820208][T14423] hsr_slave_0: entered promiscuous mode [ 771.820955][T14423] hsr_slave_1: entered promiscuous mode [ 771.821401][T14423] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 771.821417][T14423] Cannot create hsr debugfs directory [ 772.122844][T14423] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 772.141884][T14423] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 772.144602][T14423] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 772.147788][T14423] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 772.190382][T14442] netem: change failed [ 772.191106][T14423] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.191190][T14423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 772.191345][T14423] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.191418][T14423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 772.192192][T14442] 9pnet_fd: Insufficient options for proto=fd [ 772.214302][ T6505] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 772.251274][T14423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 772.260340][T14423] 8021q: adding VLAN 0 to HW filter on device team0 [ 772.375621][ T6505] usb 3-1: Using ep0 maxpacket: 8 [ 772.376971][ T6505] usb 3-1: config 0 has no interfaces? [ 772.377001][ T6505] usb 3-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 772.377026][ T6505] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.378457][ T6505] usb 3-1: config 0 descriptor?? [ 772.520675][T14423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 772.550553][T14423] veth0_vlan: entered promiscuous mode [ 772.553960][T14423] veth1_vlan: entered promiscuous mode [ 772.571485][T14423] veth0_macvtap: entered promiscuous mode [ 772.573646][T14423] veth1_macvtap: entered promiscuous mode [ 772.582236][ T9] usb 3-1: USB disconnect, device number 19 [ 772.586420][T14423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 772.590955][T14423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 772.593257][T14423] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.593281][T14423] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.593300][T14423] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.593319][T14423] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.612408][T14423] ieee80211 phy76: Selected rate control algorithm 'minstrel_ht' [ 772.648049][ T6193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 772.648069][ T6193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 772.649522][T14423] ieee80211 phy77: Selected rate control algorithm 'minstrel_ht' [ 772.671614][ T6193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 772.671632][ T6193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 773.665531][T10620] Bluetooth: hci9: command tx timeout [ 773.960374][T14475] IPVS: length: 219 != 8 [ 774.305395][T12789] IPVS: starting estimator thread 0... [ 774.337670][T14481] FAULT_INJECTION: forcing a failure. [ 774.337670][T14481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 774.337694][T14481] CPU: 0 UID: 0 PID: 14481 Comm: syz.0.2500 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 774.337710][T14481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 774.337718][T14481] Call Trace: [ 774.337724][T14481] [ 774.337730][T14481] dump_stack_lvl+0x189/0x250 [ 774.337749][T14481] ? __pfx____ratelimit+0x10/0x10 [ 774.337770][T14481] ? __pfx_dump_stack_lvl+0x10/0x10 [ 774.337785][T14481] ? __pfx__printk+0x10/0x10 [ 774.337805][T14481] ? rcu_is_watching+0x15/0xb0 [ 774.337820][T14481] should_fail_ex+0x414/0x560 [ 774.337842][T14481] _copy_to_user+0x31/0xb0 [ 774.337859][T14481] simple_read_from_buffer+0xe1/0x170 [ 774.337882][T14481] proc_fail_nth_read+0x1df/0x250 [ 774.337898][T14481] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 774.337913][T14481] ? rw_verify_area+0x258/0x650 [ 774.337931][T14481] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 774.337945][T14481] vfs_read+0x1fd/0x980 [ 774.337964][T14481] ? tomoyo_socket_bind_permission+0x150/0x290 [ 774.337980][T14481] ? j1939_sk_bind+0x174/0xbf0 [ 774.337999][T14481] ? __pfx_vfs_read+0x10/0x10 [ 774.338017][T14481] ? bpf_lsm_socket_bind+0x9/0x20 [ 774.338038][T14481] ? __sys_bind+0x2e9/0x3e0 [ 774.338053][T14481] ? __pfx___sys_bind+0x10/0x10 [ 774.338068][T14481] ksys_read+0x145/0x250 [ 774.338088][T14481] ? __pfx_ksys_read+0x10/0x10 [ 774.338105][T14481] ? rcu_is_watching+0x15/0xb0 [ 774.338121][T14481] ? rcu_is_watching+0x15/0xb0 [ 774.338136][T14481] do_syscall_64+0xfa/0x3b0 [ 774.338150][T14481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.338163][T14481] ? clear_bhb_loop+0x60/0xb0 [ 774.338186][T14481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.338199][T14481] RIP: 0033:0x7fabed58d33c [ 774.338210][T14481] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 774.338222][T14481] RSP: 002b:00007fabee32a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 774.338237][T14481] RAX: ffffffffffffffda RBX: 00007fabed7b5fa0 RCX: 00007fabed58d33c [ 774.338247][T14481] RDX: 000000000000000f RSI: 00007fabee32a0a0 RDI: 0000000000000005 [ 774.338255][T14481] RBP: 00007fabee32a090 R08: 0000000000000000 R09: 0000000000000000 [ 774.338264][T14481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 774.338273][T14481] R13: 0000000000000000 R14: 00007fabed7b5fa0 R15: 00007ffd8c7ca958 [ 774.338288][T14481] [ 774.397287][T14479] IPVS: using max 49 ests per chain, 117600 per kthread [ 774.961086][ T6505] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 774.966298][ T6505] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 775.764928][T10620] Bluetooth: hci9: command tx timeout [ 775.919262][T14511] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 775.938987][T14511] 8021q: adding VLAN 0 to HW filter on device bond3 [ 776.458347][T14239] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 776.625485][T14239] usb 1-1: Using ep0 maxpacket: 16 [ 776.627335][T14239] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 776.627360][T14239] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 776.627380][T14239] usb 1-1: config 0 has no interface number 0 [ 776.629031][T14239] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 776.629050][T14239] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.629065][T14239] usb 1-1: Product: syz [ 776.629075][T14239] usb 1-1: Manufacturer: syz [ 776.629086][T14239] usb 1-1: SerialNumber: syz [ 776.630266][T14239] usb 1-1: config 0 descriptor?? [ 776.631915][T14239] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 776.631937][T14239] usb 1-1: No valid video chain found. [ 776.868705][T14514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 776.868826][T14514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 777.422339][T14519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 777.422514][T14519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 777.734992][T14527] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 777.816183][T10620] Bluetooth: hci9: command tx timeout [ 779.229782][ T10] usb 1-1: USB disconnect, device number 71 [ 779.770397][ T10] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 779.894862][T10620] Bluetooth: hci9: command tx timeout [ 779.915095][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 779.918613][ T10] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 779.918802][ T10] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 779.918890][ T10] usb 1-1: Product: syz [ 779.918972][ T10] usb 1-1: Manufacturer: syz [ 779.919047][ T10] usb 1-1: SerialNumber: syz [ 779.938334][ T10] usb 1-1: config 0 descriptor?? [ 780.451623][T14550] netlink: 'syz.5.2524': attribute type 10 has an invalid length.