last executing test programs: 41.460894446s ago: executing program 3 (id=902): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x70bd2c, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x5, 0x7, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}}, 0x0) 41.421547356s ago: executing program 3 (id=903): sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000226bd7000fcdbfc55eb2d91282469df2516000000080003", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffef5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r1 = socket$inet(0x2, 0x6, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10000, 0x0, 0x2, 0x8000, 0x542c3}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000000)={0x28, 0x4, 0x0, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_COPY(r4, 0x3b83, &(0x7f0000000040)={0x28, 0x5, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x3fff}) write$FUSE_ATTR(r2, &(0x7f0000000240)={0x78, 0x0, 0x0, {0x2000000007, 0x0, 0x0, {0x0, 0x0, 0x55, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x0, 0x1ff, 0xa000}}}, 0x78) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x15, 0x301, 0x0, 0x0, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) shutdown(r1, 0x0) 40.418496001s ago: executing program 3 (id=907): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffffff, 0x0, 0x10140, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20040080) r4 = openat$smackfs_ipv6host(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$smackfs_ipv6host(r4, &(0x7f0000000080)=@l2={{0x3, 0x3a, 0x75, 0x3a, 0x9, 0x3a, 0xf, 0x3a, 0x80, 0x3a, 0x4000000000f54, 0x3a, 0xa, 0x3a, 0x6}, 0x2f, 0x49, 0x20, '(%\''}, 0xb1) 39.33703392s ago: executing program 3 (id=910): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYRESDEC, @ANYRES32=0x0], &(0x7f0000000500)=""/16, 0x46, 0x10, 0x1, 0x0, 0xb43c301dbf10d723, @void, @value}, 0x28) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x0, 0x44) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) syz_io_uring_setup(0x5169, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_setup(0x1bee, &(0x7f0000001bc0)={0x0, 0x42000000, 0x1000, 0x1, 0x2}, &(0x7f0000000180)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x20, 0x4000, @fd_index=0x8, 0xfffffffffffffffd, 0x0, 0x0, 0x19, 0x0, {0x2}}) socket$nl_route(0x10, 0x3, 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) setpgid(0x0, r3) mount$9p_fd(0x0, &(0x7f0000000880)='./file1\x00', 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) link(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0)='./bus\x00') 36.853704811s ago: executing program 3 (id=916): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x800) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x0, 0x480d5) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040), 0xc) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r6, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)={0x0, 0x81, 0x0, 0x0, 0xe, "000000008000"}) r7 = syz_open_pts(r6, 0x40242) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80e85411, &(0x7f00000022c0)) 36.277904669s ago: executing program 3 (id=918): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4c, 0x0, 0x3, 0x2, 0x8, 0x0, 0x9, 0x0, 0x0, 0x3, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x4]}}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, &(0x7f0000000440)=r6, 0x1) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x8) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x200}, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x80002, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000a76cf820d0062206f870010203010902240001000010000904b70002e266f200090502021002020000090582020002"], 0x0) syz_usb_connect$cdc_ncm(0x3, 0x84, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x2, 0x1, 0x7, 0x80, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "8898"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xb74c, 0x3, 0xff, 0x5}, {0x6, 0x24, 0x1a, 0x8, 0xa}, [@mbim={0xc, 0x24, 0x1b, 0xb8f, 0x337, 0x0, 0x3, 0x3, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x8, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0x3, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x1, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x670, 0x4, 0x4, 0xd1}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0xf9, 0x2, 0x4, 0x18, 0x32}, 0x1d, &(0x7f0000000100)={0x5, 0xf, 0x1d, 0x1, [@ssp_cap={0x18, 0x10, 0xa, 0x5, 0x3, 0x2, 0xff00, 0x1000, [0x0, 0xc0, 0xffff00]}]}, 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1401}}, {0xf4, &(0x7f0000000200)=@string={0xf4, 0x3, "a52a5d66a2a1d0735a98aa7cfd97d8fb21356212fcbb422e78a5e9e607da52a1ec1717f255b2adfd75a8ea3f42b3e95a291f511888b5d2af40a9cf72e551719ed2e5da11ef921054ab4b14c4fa358fa1906d8bc516ce86b997e90d25de9472a42f73623ce626b059099a1f31815fa528efe55cd117b2b8eb25324c2f764f3ab2656f96a8b94a84c64b60629d0db21da8e5c2f5c5104c784812330c6ddefcd74e17762ea1cda0c7382d859d1ae27135ac30325a28762feb7ec9b821a74c014cfc8ccbb2e4daf83dfb729d94e127d0e7429f7fa7f4104614ae3849c9ab83621a4ae1d41e1c402db523073461d86e68caeffdcc"}}, {0x94, &(0x7f0000000300)=@string={0x94, 0x3, "c81e2066d41e8fafedc5738bec0f24392f45cbca77db826396452b5bca5df41139fa25c20436707cde2ed73e50dc2c2a26ce291eea6c8953db2984a84d202f6a0fd3962021fde2914662b6ee0f91c2dcf3785b98ff0f657e8514b936d3e327603fcfcebf317e0b153f49b4384f583023cc1210dd54ec350de8ad8f62770477c83282159779698cfe93012d102d6031877336"}}]}) 35.532118476s ago: executing program 32 (id=918): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4c, 0x0, 0x3, 0x2, 0x8, 0x0, 0x9, 0x0, 0x0, 0x3, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x4]}}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, &(0x7f0000000440)=r6, 0x1) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x8) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x200}, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x80002, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000a76cf820d0062206f870010203010902240001000010000904b70002e266f200090502021002020000090582020002"], 0x0) syz_usb_connect$cdc_ncm(0x3, 0x84, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x2, 0x1, 0x7, 0x80, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "8898"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xb74c, 0x3, 0xff, 0x5}, {0x6, 0x24, 0x1a, 0x8, 0xa}, [@mbim={0xc, 0x24, 0x1b, 0xb8f, 0x337, 0x0, 0x3, 0x3, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x8, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0x3, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x1, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x670, 0x4, 0x4, 0xd1}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0xf9, 0x2, 0x4, 0x18, 0x32}, 0x1d, &(0x7f0000000100)={0x5, 0xf, 0x1d, 0x1, [@ssp_cap={0x18, 0x10, 0xa, 0x5, 0x3, 0x2, 0xff00, 0x1000, [0x0, 0xc0, 0xffff00]}]}, 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1401}}, {0xf4, &(0x7f0000000200)=@string={0xf4, 0x3, "a52a5d66a2a1d0735a98aa7cfd97d8fb21356212fcbb422e78a5e9e607da52a1ec1717f255b2adfd75a8ea3f42b3e95a291f511888b5d2af40a9cf72e551719ed2e5da11ef921054ab4b14c4fa358fa1906d8bc516ce86b997e90d25de9472a42f73623ce626b059099a1f31815fa528efe55cd117b2b8eb25324c2f764f3ab2656f96a8b94a84c64b60629d0db21da8e5c2f5c5104c784812330c6ddefcd74e17762ea1cda0c7382d859d1ae27135ac30325a28762feb7ec9b821a74c014cfc8ccbb2e4daf83dfb729d94e127d0e7429f7fa7f4104614ae3849c9ab83621a4ae1d41e1c402db523073461d86e68caeffdcc"}}, {0x94, &(0x7f0000000300)=@string={0x94, 0x3, "c81e2066d41e8fafedc5738bec0f24392f45cbca77db826396452b5bca5df41139fa25c20436707cde2ed73e50dc2c2a26ce291eea6c8953db2984a84d202f6a0fd3962021fde2914662b6ee0f91c2dcf3785b98ff0f657e8514b936d3e327603fcfcebf317e0b153f49b4384f583023cc1210dd54ec350de8ad8f62770477c83282159779698cfe93012d102d6031877336"}}]}) 13.597122583s ago: executing program 0 (id=972): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x9, 0x8, 0x47524247, 0x3, 0x6, 0x2, 0x6, 0xa6e, 0x0, 0x4, 0x1, 0x5}}) unshare(0x6a040000) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@local}) r2 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="240000002e00074c8bfffd946fa2830022200afffffffffffff000e50c1be3a20400007e280000005e00ff03c81f8374b4a04181f2d0fdcad693d58d31d42c0b3ad0c1846e6db77c292ebf0a", 0x4c}], 0x1}, 0x0) 13.057644082s ago: executing program 0 (id=975): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async, rerun: 64) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009e173610ef171e7206de90f600700902120001000000000904000000020200"], 0x0) (rerun: 64) 10.741159231s ago: executing program 5 (id=987): socket$can_bcm(0x1d, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) wait4(0x0, 0x0, 0x20000000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) syz_io_uring_setup(0x24fa, &(0x7f0000001300)={0x0, 0xffffffff, 0x10100, 0x0, 0x4}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}, 0xfffffffd}, {{&(0x7f0000000a00)=@qipcrtr, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a80)=""/228}, {&(0x7f0000001900)=""/4088}, {&(0x7f0000000b80)=""/117}], 0x0, &(0x7f0000000c00)=""/194}, 0xfffffffb}, {{&(0x7f0000000d00)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x0, &(0x7f00000010c0)=[{&(0x7f0000003b00)=""/168}, {&(0x7f0000002900)=""/4096, 0xfffffffffffffddf}, {&(0x7f0000001040)=""/127}, {&(0x7f0000003900)=""/134}], 0x0, &(0x7f0000000f80)=""/133, 0x1f}, 0xaf9}], 0x244, 0x40000000, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in6={0xa, 0xfffc, 0xc, @loopback, 0x6}}) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000200)=0x6b3a, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000001000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/23, 0x17}, 0x87ffd}], 0x1, 0x2000, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005240000000d240f0100000000000000000009058103200000000009058202080000000009050302"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 9.421938558s ago: executing program 0 (id=990): r0 = syz_open_dev$video(&(0x7f00000001c0), 0x400, 0x202) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000680)=@userptr={0x7f, 0xa, 0x4, 0x0, 0x3bf6, {0x77359400}, {0x4, 0x2, 0x8, 0x7, 0xb6, 0x9, "3451ca05"}, 0xff, 0x2, {0x0}}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1, 0x1, 0x7ffffffc}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="540100001000130700000000000000007f000001000000000000000000000000ac1e000100000000000000000004000000000000000000000a0000003b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000ac1414aa000000000000000000000000000000000000000001000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000400000000000000000048000200656362286369706865725f6e756c6c2900"/235], 0x154}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x4008072, 0xffffffffffffffff, 0x1000) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000000)={0x4}, 0x2) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x4000000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000080)={{@hyper, 0x7}, @local, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f00000003c0)={"2c7b1b20", 0x401, 0x81, 0x6, 0xfffffffc, 0x2, "490fe9a7cc78eaf1bd35916d9ec929", "24b48c30", "c3ec17db", "2fb642ad", ["96c2b35c034f73966cfb5818", "29d15917f390c7d20d8db8ca", "e0391b777a1df31fa8646ef0", "3fbcdc656fb3b051fb404965"]}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x24002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3, {0xb}}, './file0\x00'}) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB="000229bd7000fbdbdf250e000000080006003b07000014000280080008008100000008000600020000000800050009000000180001800c0007002000000051000000070006006c63000014000380060004007f000000060004003d270000"], 0x64}, 0x1, 0x0, 0x0, 0x404480d}, 0x44800) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$describe(0x1d, r7, &(0x7f0000000300)=""/182, 0xb6) request_key(&(0x7f0000000240)='logon\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='\x00', r7) 7.086456953s ago: executing program 2 (id=995): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x7, 0x10001, @mcast2, 0x9}, 0x1c) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) inotify_init1(0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021200010000001809040000005c291d00"], 0x0) memfd_secret(0x80000) epoll_create1(0x0) r1 = syz_io_uring_setup(0x94c, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x11fffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, 0xb}) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0xfffd}}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 7.03372018s ago: executing program 5 (id=996): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000004000000000000000800038510000006", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 6.64093343s ago: executing program 5 (id=998): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x9d, 0xea, 0x78, 0x40, 0x18b4, 0xfffb, 0xdc7b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xa0, 0x1f, 0x71}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000000)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0}) syz_usb_control_io(r2, &(0x7f0000000200)={0x2c, &(0x7f0000000040)={0x40, 0xf, 0x9d, {0x9d, 0x30, "08120ad5914a77508b23ac9da136335f74da289b5f322e967daeb18c580492828ea25ed504adbd143d01ef43139e22c30abb8acebddc796076fcd0c3d636156657e34ccd35d44090416b9012a60b18909a4246875ecb104989d4c7fc66535e73d0272f8a4a9bab9ac8c37094bb2bf88c8be7ef89d89bf0fe56e250589e0541aa27ad2e150215f7b089f96ac1b309f4b5ea3a374a914cd601b023e1"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c51}}, &(0x7f0000000140)={0x0, 0xf, 0x23, {0x5, 0xf, 0x23, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x57, 0x7, 0x401}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "f5f6312e46c9a44586808af2a6fc1d92"}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x10, 0x80, 0x9, "63749c87", "83d5f402"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x47, 0x66, 0x9, 0x46, 0x3, 0x8, 0xea}}}, &(0x7f0000000680)={0x84, &(0x7f0000000240)={0x0, 0x15, 0x34, "f45561eb268610a268bf93e35fdf9d015642ae7ef470de8e7afea8ca95c0ffd83a472ee2b28ac20769dd6b6829c094b897e715ee"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000340)={0x20, 0x0, 0x8, {0x200, 0x0, [0xf077]}}, &(0x7f0000000380)={0x40, 0x7, 0x2, 0x7}, &(0x7f00000003c0)={0x40, 0x9, 0x1, 0xff}, &(0x7f0000000400)={0x40, 0xb, 0x2, "1a2f"}, &(0x7f0000000440)={0x40, 0xf, 0x2, 0x101}, &(0x7f0000000480)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000500)={0x40, 0x17, 0x6}, &(0x7f0000000540)={0x40, 0x19, 0x2, "07de"}, &(0x7f0000000580)={0x40, 0x1a, 0x2, 0x2}, &(0x7f00000005c0)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000600)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000640)={0x40, 0x21, 0x1, 0xf}}) 6.330730078s ago: executing program 4 (id=999): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="ca44843bd4152ede68de3e9c5bb4911eb6e54b0762ce68227b86745a01803da356356e900b9bc1552612878d284d68996fb6292149744baa7205ffee25c7498bb930020c5f2fb825464bd3f5d573173bffc4978c525f13006242d9aa3cd35ce086d00691d5e8255cff46a65edec5ee4fdd19992e652f7bde11054f0ac1bbef56748a484521283bd5573f1db33deae05cdcab31dd35fdf60828dd07fea4e62dc783ec33716954a902cf4c4d12d709e20e26c3920e0978208058", 0xb9, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)="abc713fb301afcf4e61901c393e922b432ad04478ec696222d1ceb32a075ed9aa714de367583c3f499eb66f45740515d8873046b099bad33ec4be1e01d3ac995cb14453c0ce6c031e1562dfc120298ef212b84a6d1ba4b25e2be2d8cf5e4fffaec915c410cefebb05d703f534769dc7d57401a403fd4d5bd7b8b099e8f1b92a9cd321fb91dc13e8c959206170c9abdd26095700bd9e0f3e7acd23bbc7f73731e65b8117948e2433dfa2e8a3a5f9d04cecfe70f6e91499bf6c55b5c3ac2ec1d2fdd", 0xc1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)="dac35c3e4f167f1bd2946bbdb31f8770a7aa11d9491faa9684f67487a6269b", 0x1f, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000380)={r0, r1, r2}, &(0x7f00000003c0)=""/4096, 0x1000, &(0x7f00000014c0)={&(0x7f00000013c0)={'vmac64(khazad-generic)\x00'}, &(0x7f0000001400)="be9f18e10e0b9cf217e9848d88103faef4f83e6b7537e2eba2f2d3e9b14a23a573f4687e84c4b0053eca22d05362a235a1ada36ad84c6a3fb5010f8445aab31d1a73c913f95c8cce1b9c00604380c1a53f3406b7b9145a757a4fd6ba0d7816d4c738f1feba8288d8293909a692d233749e34b9ea6c199eae65f951d90d08228b5982738182bbd38099e280a73f7bb1", 0x8f}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002100), 0x109000) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x40485404, &(0x7f0000002140)={{0x3, 0x2, 0x1, 0x1, 0xfffffff7}, 0x40, 0x3}) 6.118019947s ago: executing program 4 (id=1000): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setgroups(0x0, 0x0) mount(&(0x7f00000004c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file1\x00', &(0x7f00000001c0)='ufs\x00', 0x10001, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r4, @ANYBLOB="05005b0016"], 0x24}}, 0x20040004) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[], 0x24}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) close_range(r1, 0xffffffffffffffff, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000140)={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, {0x6, @random="77009b00"}, 0x7e, {0x2, 0x0, @remote}, 'dummy0\x00'}) setxattr$smack_xattr_label(&(0x7f0000000300)='./file1\x00', &(0x7f0000000440)='security.SMACK64EXEC\x00', &(0x7f0000000600)=ANY=[], 0x9, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) syz_usb_connect(0x4, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x4e, 0x0}) 5.40030525s ago: executing program 0 (id=1002): mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x7, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00'}, 0x2c) connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x100000000004, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000d400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4002}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x20000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.765728066s ago: executing program 4 (id=1003): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='ns\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0xfffe, @remote}, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x4e24, @rand_addr=0x64010102}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e23, @broadcast}, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x8}) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r4, 0xff06, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@host, 0x3}, @hyper, 0x0, 0x0, 0x100000000000009, 0x0, 0xfffffffffffffff9, 0xfffffffc, 0x5}) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000040)={0x2}) 3.717400626s ago: executing program 2 (id=1004): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x2, {0x2, 0xff}, 0x1}, 0x20) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, 0x0, 0x0) sendmsg$tipc(r6, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000003080)=0x0) sendmmsg(r7, &(0x7f0000006280)=[{{&(0x7f0000001380)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001400)="2194c62e41e1dc43d04caa366167bb4315d1f549f6c02897f56644976358cd4091972bee82b195e30e2adc90b317355079a958e8d38b0ed9e0f201cb5053f7e15c4b443cb303d09ef50ad4893af95eba0963118b816de17e505c7637b0a44f7128432867496c4360cb25df6551e27f8895dc62ad2b4bf78e16d8adbf6312343f7984cefbc8ec6816c793", 0x8a}], 0x1, &(0x7f0000001500)=[{0xb0, 0x16d, 0x4, "72c58db7eddb5e04503f25aaad921ad75ba3acd8645d745012510e75ace618cb87498c8c08575ca2070dd1700ab28bbb45bc6018586e2e6bf65d5d6b801cfb18032ffbb09b78ecb1fe905bd2bbd9ae07c231690c913e1c2dd89ad6963a283ef69f96f318806e411ee39a21d85063997bf5cc483e6e5a72a883b28fe41b5c59dcaa4664793f3081e62cfa99cf490ff2fd90b82b4516decaaef2e6677dda315d"}, {0xc0, 0x10d, 0xad, "053eb3b45e09bed8feae5514a111415adf7ca0fc3de1be546ef8ad0c42a9f81d98bf53529dfaab3711434b608b4e772477c54796236f5ad91f0cfd1cf5d668faea3d5065487c94ded5248a78066c7491ecd0eaee2f7be1bcd3f23eb00488cf0c200a678d331d9e60f1d36c2a44d941dd6e4d4c45d79e29c581d9c3525682ea4059695e5651d943b3cae57fec1592798d8efdf5b63c28c8ecb101865906c352359bf818d2a0ded2884c"}, {0x48, 0x112, 0x10001, "9d5e4e1a9df4435a26cf04463108b527efce0f7bc1a66816df56d1adaf4be46100693f64d698fb43dca0d4eb42abe8fff0634471ca9e81"}, {0x58, 0x119, 0xdbf, "8cf9657525308ad712fbcdba1389cb9905e1f63fe502a94a598c7509cd8570b172eaf2fe0a554ad43d44709a7639ae2fea42d54f908f453c1fdc13a283c79d211d2f6aaf"}, {0xa0, 0x107, 0x3fe00000, "184b4c32d3dff913b300cb2e9b4fe2756f9c5c600d2f697660a9d841356433cfd6a060fe2c17b3d27b2658c9734bb0fa712395b7db598682b568b629bade375a1e3e415a7b5e3ca2156a11d02b0351914229ce1f8089de19dcc40fbc0c2145b845666c8a7527f5617359effcec8677c1fe2788d2fb83b7b5fd4846130a3433687b8de6b2d75ca3d410c3f85fd9"}, {0xc0, 0x15, 0x1, "59de27c211b006fe828398fc693eb0f81931de68dcecd92e3380d7c388247103bd01102899b2a0cc0b4f94396383947b5623706b334582be22e8d28d7ad5a62406cdcefa0a01a1cf7e24302dc1394483bb55a36bf2d3880beae096d7244be029f49b25f45aabab3c4c1f572ef1cb59ba3cab1f59c6710089b7d0ca82d7724278773e20f34acf8ebae1d469ccfcb5c4d8757c581e63a1670b437fd7b21c177e05d6430f89fcfda016f1"}, {0xe8, 0x1, 0xca, "30c673af79d5e3c75e5ee251393ab4375e4a38cc4f6027ed09acbed50d37e7899f7c698a8442bf41b1985748b8668a51875cce7744a5b31028f8359ae2de94775a64032e00cd6eb38b22996ff1befbb74d2009c1a4ae5c498f3591935116c42060cba4f3c6ddbfcb6d84e201ce58cd37eb689bd49b96b6195ad1204fa1631092d8167665079370da376fd7273e2261ce78b74d5da4e8b828e61257722e08e8c6e1462ec9e49a565e4b11567e8910b7f5bd6c8dece1207cdace953ab56aa4f379ca5c1e263e1e61833b9f96feac46959275"}], 0x458}}, {{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000001980)="121dae62548be1a3bae8f1acea4b83e700b6c7d2a1e1c42668bbd7e9985ccb24e5f0f777198a43dab8984d828c611d6984f2d27b36998c7bed0795fa43861936e2f37612b5cd60927daaa9fb333d72f6dec86332408b76ee1143", 0x5a}, {&(0x7f0000001a00)="a9c38419bc0fd5f95e23785a7c8aae60ba6e73d391b1d74f76a6ed50847baabb736639f929b317fae24baef8a3d498cbbfcc372e4512ed4790995dd82a94fe0d6f54c372a3ca28b71292512c10ad7017c0c00dadc89aad3b91e3227c7c3476650132d2fc168447cbd0b77d24ee96d720bf5752ab538f6c369af01a99cddfc8b162e003940f442a885df1eca3cfeca00ec3a4a9a04bd2523bc6933da51a96676ebb7781e518b7f6ba6f1879da1534c3d29e1a9a30b841b5302386eca55cb86fd11b794421", 0xc4}, {&(0x7f0000001b00)="28454db7f9f0c6c2ca2f34ef6fc61aeb123e7e9d8564d499a2e38f0e34ddac0e2755f253ecee904dca0d08f1a9246cee50d5c0aa620c658bcf9d096eaba2a1d9af99a9da90784ec1329b5ce09b98c1e61808e82075fb927c2f6dde5316e551ebbaf222781e17f82a2391562d97570c04503497820c42dca0e72be7b941da03e8fb7f", 0x82}, {&(0x7f0000001bc0)="54941f834f2e95740bfa12e11d9ce3d889df25b4bd74d136a6fe348f19265a7ce17f6276326fe55e1fb0f43989cc6fcb45f7587bce1ba1e1e1e523bd4d5f107a6471d38f8e22ac7119f246f9e12b28d80b6ac13ba57abe03716c21f39fd62516bc90fc6e012c52b854efde35ddd1e6f192629167bb564280430fb4e3380c4ccdeb8a82536c72d88f329bb80c38fc4375667eb3a3ebab0fbd0400d055b732f867e183fbd8c045134ad474abbb6deb85c88dd85bdaea681a0f5786c17932797a9353b94fd752840a24727543bb73c011956762e71dfdbf41d09210db705be3a1b8c37d1ede4cd76346e8618784476e107fb3113bb03dc738200d69c1d2b0c7152cb63d10dd5a21c581a50d4373716e88667b0758c946d3485184e0f4700496f65f63383fdf22314762e77d4daa360776dff88b3ad5dc6c690f1136aad78437c5139fddc317480649e6f4ce2db357aa373b0f627e42e35294503b42a9588b325838857b8281fcb227869e1ea8b3d7c153a14b32f6fda0d429683d9cbbafec5af6d588698251be0d029610b0464fd353a519adb43be4347007e7d45c2416fd25a01261068d7748944c5a90573c96e8f5d712fe49f1b650412b2c01cb2e1bd3e7c69afd50abf9f48598d3510cb6e4ff1e1ed74cc38b6b5096a54f5ef59d88082bba025b2a2c1752ed2e08ea7e2319eef968058c5c20026e5b0b40f3f689dd779a5bfe0f00dc48b92e705d8dfbba97925b2a2191410cade6c8cd68237ebcdd1c4bff01b53c3af425266ee1136af9fd58240bf1f2df67adbe76472cb4d33740cdae258dd722afcb2c0904c01b1587df6e064408f03fc5eefe014824e9dcc9ad2b7aa78bd02ee6cd7079c79f4a4e23c7f46f0be217ab3040f6cde8cd85d2aec2d9323d3521ada9296c8632481931d6447c5c253bcce0e5516c5fefe47c336e94aee4cd098a8043ca06e0e221d91b56054125feab7d234232f10698bec7b14adb6d0e0c94a3fab7f3e2a2fa801ce0000bedb9d958fc8eb767503705dbe305f0eff14ceb0961ce17f7dd2826d7ea1601d6844ca020810ecd18c261ab3308bbd3db4ce7614a898735e04882a5e0b59eb1f6c9fc63e8d66bdac6b0d43dc8e44e75ec100def7ddbe1195f31f0ed3fdd6639309d2ee167639c5a38b367f701f1eeda55e0fadcce6f11beb38422bc2f8e3c587faedd2ed99f12d3ec93652a112adde838a78333fa46001c1f10c483ed312d503b1bb4e0229329f82ca1b9ca4b803fbf275debcf6e1a578b53713d30d04bd27de4c9501136c15c838695d695437fc4085a7c416fc4198ff82d58b645e3b2a9e6c53fe520dd6c08c2271c9b301d638373e1379a5e832700a53ee5188d36dd6f65229dc1b057c699f758c70b0b371cd790ed65e38e61c27fe0767453cd168b2955c443966699bd9db24b67e410fb340f2cfffc255f02270e8616ac0fbc3b8a4551bcd023f95f937b3e862273afa7ace3ba84de8f9760398264cf4b48a78ed59b33750b2ee43b41664c6af5d63f4c357bef415b57303c9190b4ac26e26fe27f1508c94e49ff692b90142c0e9063b026171acf1909db3eda7b5a8d1b04c2b80de5747a94d1a5c43c53ad03e8dd2da66bee0a6d861bb5955fce1d1d53109adeb5793c184c69ddc14e820449cab86ae4a383134b92efdee8597028af8f9996b15907a37761c0495f04de7ef62ea0da2fc07c57123fe671f00b52d633a0e43a7b6c864b6850437d762f58409b0bcde612098b323e54dbf6d10470c264defa542468f21c0c498b1f5b41a7d14cd563374949f9bd03a811a0f0190068b92b4906ea168a146e25fad0dd266940771d45cd83edd521becaddb79c5a4b6e21281df4cb87acefa73eb7e894eff1e9b50651248a94c58b24c1f6384609585e29931cae2a623652748efc78b14b5fa9770ed115789d53f054b0b09389f061705dafb470184fd70ee3cc7cf2b2a9b4410b6259cda70783d18488834f81a555b2dff4d61d0a0da41ea89b68821932b906d0844a118ccd90ce1d1229374dd30d36886b86e8f821fc02c128c1c97dfa2c5cbb14baabc18e413f4afa94bb8f5f21fe8fbbb28d0c5c10b772c620090519047f77ec6b2fbbbb2baea85420b297cdbaabb2d93b9e31e5876ffb8e6511b72d88f6583a743ed3e9714d994db95038eb39d52a021b47e9f330bffde9c8ee0cf9dc2884545c67696d896c4b09837ef8ddcba82590aa7caaf352f7be7f7a347e3552a3362d345411a3179a558acd18aa14cf675e08d367b0b4e98acebb2890f5e4bca4c60ea317e3398f364e99edff9fc0d2755586ca0da0bdee10c178a90f27042ee793d15e5b1cfb095cec7364dc2b350e838d5409e8a2423af8ddb36dbf90e8f2bfa8b634225286fce67affcca413aae7662db2f42c90a2d65a1d66129263dde8394518ce360e103bcb1bcb04ffa3f855ba78c0d773b8a602bcd41ca059f7e20d24e66de859f9fa677d3e8e7cb669d33621d287874ae535f744fa1131e1011ad204756a442042b4f8d202eb6d4d6a28553786f2d12597da8ce8af59971854176a3003cadc4a08654a42fee45ab9fa5fd010c8698fd8d4efb8f2bd8f86faad501e66b4f377bd863525914c99764c39eef8b781318159bd03c024e4e0aa295a52e51b3dc13f1db1a972ed33df5b19aaf64c75cf10158d2d6d4dfe5b486aca25090049929b534efa75deadda9e30456a72735010b0c529e3c9ebb19ba45cf8cc1d1ec38adf78947c68ce5fbad4ebb3c9e9461c52c4645e8589d8717477787ef072535e75fec86cc9e4922b0acdfa9b82c44e45e9f989e785e51e1f9898bdb6a8583a601cd18d7f7a3b788745586b21ff4d94ec19bd8af3669d190f19a61095e923da07a61d9913177603155623497eb50e505b70fc523c413eb7bafbc3b5ea489785114c409d93b4d91ad7e3431427787516faecb658e8a7181cbd091fed5fd2fedf47fc33984a93009e6146dd411ec867fcd040f092a9a30da52120b1aa2e7ac1e451f2f66f55422f5159729d30e21494270f1e58092911e1696fd6fcce6812861ed1c92c787efab7da9908dec762a8f1b226da3d17fe424d6d9c2c55d3ae7bbc15aa7d4405d6cdfb63403b68bd060c9b847ccb5d47284966f39c1ae264e097858d0d2af6db479814bf260a6277173ec2e8a9e43f0c6829b8f454a4b4dd22a0b1ace1164755a5e38f420b93fc75e9ebb6dcc8b426b930c2b434553ab217fb09f10c3ca34ddfdd796383930fe54b2340d08a07b99a4a29b5eed0217c69b5ad5c9d4895733f33614d7d0ad285ffc358e39d51fdd224b3563ab796eef3839d0c09869afd67d40f52e30e965b4b85d55733091fb2cf837d7e7f8a44987377bf42389a6b713b8410d45e9be0a70d8dff1556d0f96a43c31b072fcf1700b209b685fa7fc52bdafba3118e5c24675331b5c8c8e296e73a58044c6eb3aa97298ed974b3c757661951fa9e3368deb936a3a20c9d747397dcfe9dc2da8d1f4720e6921759f2b7c13e0b7bf8d2bb54267c76fb0ed7e4fa5d1e3f8309b5e6131a6f742d9d213f0c7a45378e07de0865cff3d4fa47941401bc92db71386fce40ddafeff541060a7a66a72dbb36999014ee292666e0e4500d5f0107ab646752d4f80b87643b96932eff068206140e4819daef77053872aae2318ffc26b9476b9ca36a42b66bb01dfe6ece60a32d92b23edb475ea59c599e73b3baf2c775effc1db0015b1bbe7a0d10c6cf689795f483a09bbcbdf6745089f5db6e8ec152131555dc6bc27747acdbe245abe057d0e04aa7fb44c7302efb1079b1e133e34a2aab192d87419088c6a72a931ad2a3974d0c14f0756aada1dcaf989856abfa9dabd88afe6be1d11cce82c5668e4b53e0f22be691e551c8a6ac8001d51a47348dda3b2b2a224bde0e94f6b5c48996be7ec18f801bf937d6d58ed365e6b75d36d0544ba59225c6837504aabf7f0097b13e34d20e7c466cf601dd8a8746c4ee56049d8c2d2ed18e07fe65725d3856dc4f44792778de5a829fa2fe7e3d123f12eb30cc029dbd8fcc99a6ea1e8cf878e4a2094889772fa0df2ba2228de6b295889065e2c608798e5e5aae8d66db160099d041d973902d964c7f5b8e0414ca6019924c83c4a41d04726a5212991e691aa1ef0ed01de7dadc2e1b5ae5fed9b4695f37918777399a7fe1d33ab5950de186f085c758c10665b35c98c391e659f9179851222291a5876834ade63b4820d31c678058398c80978b6af627ecc7ed0829a95383af092c999b9bd7c32672abdcd0be59c3e9fea37e5bd713a7f02bddef1d8ee32d326b27a9aad2ab899de6397e38b2fb69383204db35c7d320ea78429c7d9e5a8bcc531a2f62d8844ff3944cc5513fe729c0f1b2aaa5cc9cdee260cf7b78d9e6042a8d41e853881fc0e10bf8824acd1ac93832d1909289142ebbecda1fd4e91d12d78967261f952131ad9df38de050be2af5f6b5329ff53f3ffe9ac5dc1dacfe3793ad6c9bb4fa8815efbd031a4c662da0959d9f949409aaddfdf5caad66415a367a6dc1521d9299cc78e36da8140d8dc944c55380f9247d2cd82849c7d34e6574c3767108c1ce1b12d1a2ac2962ae2e45a6c32c62455fa9fd6f30248f61ddba936d8e68eb5a02b2a303cf0d99e9817a33ce56057060cbcad2d4a0238c0fb408836e032c2bc0ec60da4e1bbef8c2c0253039465b9c1458738838357e902a3250a742c2316fbd06e4a2a3afded0e7d17e4cb7b3e5ff812b7f30cff56a670d86ccc165eb1cd4f583da31d4972458123658a794aba83b1f295ead9346f1b0df809e6e14dec4f65715ff18d97a6bdab6852851e5e605ad921597febc34e3b77c36555cb6232586c0a6f3a5b15cd21cb96df0775e0c8cc71e539c87942cd0422d3797faa2325b2e602eaf95fb8aed4392094aa3bff19d61324835bc595e960230a57270904c3fe1df54d20a92b43e4a61a38f3ee853a307554029aa17e56c0d43f4fbb2094be030d4afb2bb968d9a3f3050eb8bb155694419755d97a1dc8377f8201201ab07f1845234057f68e181aa7c947c61447568df8758b0f1c1a815d69013e348c2dfcec4d1c13eafd159099af8aa8b8933c25abcdab32ed16a90b8087a3a542e56e44c809b58eea5a37bd13b256649b6c0086a78ac092bcb5db18641e6f6638a12bb54530ecbb3fb93cdc52962daead7a119bafabd2b36e9911b16e8791111f4a5ff15688517648a9308fa35f76460154d69cdca535c85d60580d74af5a0711b04a0f5df4f3d137e928dae1a104701d02c73c3eeb7755c6a81d5a9c22caf1b222c2617bcf6537ae2594cec7653efcf6866467eded61e94d0a558915cf65fdb22ec54ef5802de5618671a00b97470959150a9df743a7f8cafb0613b00808b8766f873a886d7b341d57b0f84988486ea56c7fe88eba8cf60dea7b1a954f8e2093fd8b57e29ada36b81946ed17784bf58890bee4113237abeade0f5e96a77b33ef9189cadb4bf8c5732a07729a189f46e22845b54ad4c652ac245c708e1f02ee9b8b9ec332a650ce379e71ca948020c279dd16e5868ab8254ec31125eef5cb2812c9ad2897700a1cdd9996fecfebaf75ec9a78bff969304483480fd7007bbc425c501693ec24e2e8e596d2ad9ea814e4706c6addc1409adeba7c4843d8e9baeb616aef1691a03b68e35e5edb060485500000832d4aad18d5136173d0368ada94b868b8ccc3f85cac4452c77744bc9e7d63a2f791b0dab9e65eb44375d2df10b6b37c3abd740a2e91488399ea4cd09cb2f465795d4dacf0d6f9a33", 0x1000}], 0x4, &(0x7f0000006480)=[{0x90, 0x10b, 0x0, "daf393e6fc0af88721f1937bbdd36ad74d8367007b146c807162d4eb1f16c3d536553b7a341abb633ef04f81e0c6291c24f90e23ef22c29cf6192a76e0a7e152e593a4c67184756c8f2d2d21cbbb8315fea422fcf23a5ce554e97ca0322929e93125463aac579ae83cb5eef48f632b2f73386a517867390e25b4"}, {0x68, 0x88, 0x9, "39956d057ae5ce6be2ebcb79f9eb0bf46cc0e0e4d85ac21b00eae0bda87f758aaea0688585582f68eb27453aa01f51fcd62a715949a6001d9a59c13618e43f1172fbcc0dbe99f05957209c0aa0c9c604c26a"}, {0xd0, 0x103, 0x0, "1cf878f3526d75f2db98ab869a8eb5ff54965ee361d17c24ed5c6d6f51cb2d49efc9e61f8866a40d5f5dc122e5b787d44b7f4c2442f26ad4aa0e4682d3bfb1c1efb59e67baef850111c20bb46059955085e7b6777ab5a542ca3663f707b8796bf1a00893bc73a8acf2bd18b361887742308d444e1b69677eac67e3ac4b795eef979213f47377fab46f5fd8beb356a4e897121a2fa5240ad9e254519ca94ef0826113af94f2015ba831aa1002a157011945f0b2b83329c457bd33d2029547f7"}, {0xd8, 0x10b, 0x10000, "1a84ac6d35a9d991d3790a53eab21f2bb8e0ecc91314398f3dfb9021cf23f13100b42e5e096b99e2af182ebff2d3bf032e1ca64e2a640ef4a0ee43b83241ca88b73962183667e17cb681ed1c2b08898915a19d45433439830e43a9267d25f58e411923597f7f0606ea88360ff094ebe98d616b814b1a78f7c06f0bda410ed987628f7f5e17ac34ecfb94abfaf139d56ee3f40243aad8bf865b448480d58921cb38d1d7c5e90525b21a48fa6b9e2896c3f81ba1035136c473415914f189703fe3a17fb650ab72fe93"}, {0xf0, 0x1, 0xffff0001, "3ed28c4f49608848ca31d53263d26b157b70379fb6b59e51c25c20f1a983aae6ace9b7233da8965485eb559ebd195df65415ddf9ef995421f0ff4afb44ae959f5af0143e2a14f38f9fa114ba1c0b1b3c4b7e8a07a5349e4784d0e53d9ba3b009f41beb1b45863339d8a12be51ae71f48156f026161cf28918c03e689a1191fc1b6dc6b2a56ea73a18338f2743de6d8e56386365938b4026f242513299bdb597264be1879e55544ce89854441aefd752215e07dba2a5a46dd1ce9fee0cdda3f7b0f25283f69099ed589e45b0872a901984136a2e72cc1a86e31f690"}, {0x18, 0x84, 0xe, "cafce9b8a9afa2"}, {0xb0, 0x10c, 0x3, "97b6c1b7603177406010664d7d8fe1092d23f7ab516ac7b1c2f5490705efa3527f2d28ddeadc3d5cb58303f3135e62910fda0f827a20c6db74f138d38ca52742bc6997a0171c08f489670a5170e94ec381c8befe51e9962db1751fb96234edd5e3f13dbd090c8e7d50fb127d0901ddd0f295d287959dbcf5faa6d41f4509def06daaa3c02c119713291d243fd02ed7aa3c551e6a350f4ec99b47af"}, {0x18, 0x118, 0xfffffffe, "faec1ef2c431"}, {0x88, 0x104, 0x7, "abc46e8fea12c38f1391542fb9e27b50cfd8f31ea5af42abb11c35baa43d802699c41970fe17f33ad947e9af5735219d471ecdb718182cf4206893179d20587ea98e143038aebc29fd7c353387a209f19fa0ed55616c2975843814bdbf6c50c5f6ec5301faa9a871f377077d22df068e0fbbcc118a95648f"}, {0x58, 0x112, 0x900, "a2afb6d8cc253134c8af1a8da80dd23281bb6d95520188c32054cfc29d4b34fdf53e1e853274f045c88db66d7f9745482b088d6a17f13e75cd737e67279f5b42f6d2"}], 0x550}}, {{&(0x7f00000030c0)=@nfc_llcp={0x27, r8, 0x0, 0x2, 0x8, 0x9, "a5a03742e611a65c8cdbaa2d8535a75f12fafda6b7ed36d1c545e590523fcd64c038aa405c7f9fbbb8d6ce7190dd9cb5e677191431ed90c8c94258c10e04f6", 0x3f}, 0x80, &(0x7f00000044c0)=[{&(0x7f0000003140)="78801ade9b06ecae9515a07048508e8b86c42c744a66fab4afc54382679e4ced7efd8a27d2d32a247d72fd9fe83291e77e2e97819f0a175668c87bf31cf5133068556507cdc093757dc4d5003ec56919eb7db706b823a08f742209ed879ac832a7529f2c12877c0b3f8469dfb1ca12c8dc5d63dbc24961da8908eb29061613d92450c8aa86506218cbaea9b9af85dafa283974c7d4690dde7c43456ba9f9696688a209f64692c16b0803dae1f762b3b7dbdf20b8b971ce4807443d49336ae23b26751a8b8e2e425062a7c782c8b63194a026b9df518637e47e9d50bd081f7e9a93c263f377e9d4869acfe35ed432bc24b55e", 0xf2}, {&(0x7f0000003240)="45836db207ec21e073ffe62b763a58499c8c7604974e09ff3aa47896b02d56d713307c4f34f4f623056869fad464782fc8a21f3af549f973df7c83cd9acd447f879d6655d01ac54e43576b49cea8298c5a6a73a212718388ff7812fd3d2e86ca4945ca58bc3dfce52f960d7dcdd0d78df1", 0x71}, {&(0x7f00000032c0)="9538627a3b95019cd21af85a178457b7ef1e19cd7363607de27e9152335787fd27e8d1916884a2", 0x27}, {0xfffffffffffffffc}, {&(0x7f0000003400)="c8455e72ae484688ef528cef9e51fbfa1f1085f89de44282d38c9f04d589a521e63c75e61bdb4659aabde385a72545d967e290ddaf4bc8de841af9a80f14bd5428e8cb437471804c5f60db7b37c00d112fff48e4f2950da81414de8ebcd1de02638224d6653deaa0917b27b06a4cdbaa49d24541d28c7fbcb5408d85a565a3a215657cacb777d5eda7c75a1b23f5c2fba374049f5f9b56db5b22f31efea2301bc8cdd4a3073b9b935491f2f5d09f303643955cd2f463c2bac90e", 0xba}, {&(0x7f00000034c0)="070f0f1a09bd9bda91309366617ba703e34dbf0564eb3bb9030f59fb3a2c2b89c30881d6d569b4b20097280545130db7afb5241f21bb401be24b775e751e933fb1d033534c534e417ef3fe3cefabd5e31042d388716feacc19bce89a61d615ee1764f9374e974f42e3ae9b3f118985346b9723efb71402d8968a6eefe31f5dc13c27e1ac81dbebf534a27fcea333c61b72753a36a67a1e77cbf97e7347326ce3bc6259c1285e67bd5b7d1c90133044934e43f86e5d1665538c4054e4ea0fc679387439d246d0c7f7e8343b53818d59e11f03838130d3d61a2ab2e5007878cac61c59139bceb713d20e873144220a5bf0228a6ff9338a1725424474b10db5ab0e10e0ffa2a270869ef93d242795fb72895215314e7e8dca8d8c1281d3f6f54227ae251afc22fbd06000bd0a943ae74824c10e3805bdd486d1abc067b7079dc96967577c9e9341ec46b2f5fb8ff074fe7d384185ee7de2611121dd6858037f8f3c779f6c667a8de582217da80bc7b1f5a5da3e0b0c15ed666a1bb4ffb829c4d0d05eb65466000a542e16ffb6930e4254aa28f5a6f17b3bbc789ea078655544ec9ea62d3e8094192966bd54e9d10037d1bedeb682694621fb4b00dd51a9301805ce39702a35e34431419ae6ea12c770b6ecbe12db1c63248012bfc7b9554c299c6d9f742b6c4d7447489a761246dbf3b08bd32e8912e4b3a9a8dfb69c4623b0c72dce24eef11e09f0540fe2d6f0d9bd1ff8e9bb29d2e8e342121db6f265b41ba1d72cf52b96ca2b45426379b9482e121937eaaac88e01c15b6bb6db182d8859e6eb55dcd606da61dcc16d3e14f8aafc6e699a9e9b12fa65354f096cbf0a0ea46d058d485c8eac19bcf241b444cad3ab82738a37a4d151b647e9927b79e237f23bb9ad5c14e076caa0660243b944cc367b7f8683d575224126367a8e5d2cb2a182057b5c49f244c97c3a6c9ddd68102b27fde17ab5afef7fe54222a6ef4aa71526e822d7eed0009664dffa9b1d6332b54c71655d60e149e61cc8cb08d5ce312432f313a0be5df84e19b4b53e965c8913450fe3d9aad2e66beb124119e95a7847d66cee2df0b2714b700426fc47af7767441570c7934b07835d7c9564c7c100a037586c238e70a2afdb2b46580974f20dfdc1dab0775b6aa14570f5487a31c1f8d83591fe459745149469f3e8203b38e3490975c4d60a91f2861e05e2f022ae550b7e4a99403d8280032f8d2d935405802dc01bbe96da1c77a74904c3883abf15d23198a533c6cc221748a79c0fb4c97f17fcc7e662d2b5fc9c4c2769fac1e2969fe3d7022168b70f87d82c761d4da0b01fba47014ac7d4a5db9e17d5f5e1e7a0689f9c4ee0303dd50206c0cab2b6fb9dbb00262de403be67007f93f95446270386ab27bac361ec9d1532c7829ce41086cf5ae9b9913a98b4c7b7552ea4eca076b2eb3c215a3feb0fd2a9672aeae9914a05b523709636d36d9771e278a577c77d367d869afd768f38c5f8637f778f31b78df56b4740f19423c19af3ffae569e8f7b9c35061cc4cfb1eadfe6078f56247184ac631a11294aefbd7420902f44ebff10182e63b6f41481479601dcd2cae0cd4ef53a746b2821c59320e580924870a7575ab54655610562b90ac3be0bb64dd94dbcdb61333488288ecd24c0ca970db06b6cd99eed3c3391bd098b3c62a4be50ff398172141bceed5f9145eb802bf10db6ad02a390f7e091971c535b9fc98c6a13f3d6411f32e784bf948239ade9a83657685d3b0e5acd5fce03c24d3e217ca3820c2efc30e6a212d48fc025ae4e86938c4ab632acd50414ee34543396b517c8739365f2d04abed152f44f567591ffb732288d114097cd374c920dffdbd82c14ee9cdae67c465dab019000394da8b363aaa0962aa5393faed877d9895c386ae39e5f76e0d8032fbbc42cf9d061089efbde72d953cc8275bbf4e470673fa6ac2f1481e0c1aebd7871fedcfac89dd26a1726ba19c8e50ed8fcf1da79eff484566d68320a2ca2bf034ad2af533defcdaf260edebb20f879491c9181b645fb027b57b9e031afa97e2fbaafc3eb7c5f10facacf49d3c2b0979cd11cecbed84086ac1fcdd16c997eac6e88db9cdfdb965fdf5f9bac980a07ec54fecc673192ed7769c0321e4fbf0dc35669abf56dbd0e20b71c875a0f4f65e7f52aea0006de734ffea64dd44b01fa817bdfb306094a147d557f6810e146220d1fc0d812bf010c702fbab759557114fffeceb6e08c614603dbb2bf16569e4768e472dec8129c1e5e2f82be935a28643ded07662ea57d75fdae1ccedb80d01fc41201642b56e3baf252a3b101e2708aa0f00d2cd65c16de0723e2ad9a1cdd383ef63d69615c7257cf89f70d91025ab979319997e5da28469213d20a9d3827f17270ee2ab9b7e293143e33d272f9cc4a43690791b211e589e7028c70e844e8a4bdff7650b19fbe463fde48bf09be3eebd25d30f2026c5021b02d03798318c1fb830f28929e5aeb92e3382c1c770dcc3f9014e3cbf027fb29fb27d42d0cbd3cfc415513733732d061cc71b65609cd246b34d455bb2fec870a645cb4534f77dbf9db1312fb0662a913a1e869723e5101790992de545a4c6debb5a78623159564cbe25eccd1792dca82c3a75ebfed128685e97ab8029feec1eba4f1bbcd74c607fe6852dc3bbb613b328dc621b034ce511ade9565f6b382cb75baaa85cb3f12230757d73c9f3ad638ee0b1b127e8881982495eaf7ce6a9ba91b0b333398a4bba793f9280911706e3660b075b231807d112a212e351a238918ea31101da5acc5c64ebffe5deb0119518c3517170e50aaf3a51c2ffe524b793d90b1570403d9d2a34dc3cf4f0a6cf161d5781e963684b0bb81fecee1d8e5dc4ab84109470bd797054589ada664823523fea553e1b55fbb66bb2cfb05d75fb392e05c96400029cb7ebc0806f04179082c0db6842a86bfe8f6886763eeafdae2f809f30084160b4958edce075f4685ec39e45575d9a572d5a228224c0ac23e363beb3adf2eb9cf3d786e7b1465b9087d6110ea4b3f8f1876c088794805e2450576b9880d2e32927af05e3a9f6d77b6b58e3ca47562de21b0272206258e1c2b9b1d3bcabeda28d526c8000807c8c0e107b9084a8ef1c7f3cc20e481018e37b6eee4340ecd448eb1519dd63d2292607006440b3cd5c21e881d50663ecd2b344817f858af17c4b22a2ee2319c5a9960aebdd10c1aa9659605348c1d7e5d6634e59438f3e94a29336eaba12ef2edf89a8fc86f5ff775dcb905a3e248ae903e587668bf0b0032c4c9f9476023bba24bb6771dfad1bfa4564abf68b6501a39f8f3aeca2add3bbafdae9e81e4799790f58d09c674dc41201cfb23d789e802b1d3506e8116350b29a2e562afd1e37d36c041f50e97085cf1353886f3a9ac42d0cf95a58f87c66d9e9e8e07f46f9b9c8c430b44ef1917a1f2806d8394f4faf119f4c8c423a144e32a987774867c0a81d3f7074af61ee0e3297ec73b5cacb27bc10968aea2f25efa065b658dfaca89365d3c4999f22172fa307e795c036c7c6ca21946e23c7bfeb6c2a10131ab24a83e7b6d650a80060473c2964c33c252771c942803fb58d8dd3f4e420951adc78545886ed7a31bf5e8699c7ca9b180d6c25c27071b24a7b2a170141b897fcbf1a2470b7c3f72c8f4f42218401473eced7d53b9f5962fb4adab29c3a8301c62b57a1f694364e40fa0a2fcd1f0825e5902e2477868db69547eb6e6882bf393291c1295a81656869180bc89edde01a1c96bfddf820d1ff487eff39f9cf25f0304b0b2b23311499ed29d3e4a98255e77fd7cd7ff8a3b1eed3df80c1725088bb6dc81c202505f7ab5fd07f6babdd00b4c16ae9e568b96363d86e159c012e24d05b3ca27c7e07b12e510b3dca9399674db4e8343d13b40824e0faba97f286310f44d62a71cd91ad0fc7178207418a1c3b158ce2bcecc98980128bcd1c24dea6c73fcc35a7fe4550a0bb561226b301535d572914986d3c025c6885004b6ae2a2efb4f5613e5ee87772268b3ef773232a3a6cf32306f733fc4576b20a40ce6ca6a42561e89d7ec19a45401c1c8558e59ad64a87f34d7869d28f91d0389ed25055f2d0087f5cf4013f7a3d9b3752bc24231967572cba3d4008cbe459c81ee4db7d84801ed27a02a38843cee59ae98f6e7b1c7ba55caebab26c014c8afd9f84846c3df5b771467f51844e56219392c33212b6240c48373d6a0cdfbcb3313205ca333bb1efa2cd416cc8b44d58e3d4af64a6941ae600df7967620a26dd6207b48c89d694aea1fcf1547857168264d9b0096e6a4e84753c010a2def39db65b4b0c8f15492e634ffec5d3e28f20089ffa411525c81fae3e1c894d04acfe145c29c796a32f9ffbc8a6c31c5917e7fa4a343427873168ccc2b6ff346ab49e6769b11833644fcb7770acdcd94a445d6f9366a233fd2d94cd3a1e00f015fc2cde00169798ab5a2c2ec4bc455e4144ee056d2669cfb7e004c2e31cd75c379f567a238a474cc1fc8817b9d720137354b239bf992e612bc5367f40e095c16839ea9a8372402703137d3475332e100bd0b46bacaae9caa51de23ebf8cd0d081986318ffc25827b4547f525a2c892c265f7c87bc00ff5e44fc271cd9aee235c11334c92eda3c554e6df160134109e014f33fab20b9a0a6409be521e9aa0a3435c269753e73a38b4dc226aa4aa3208a57dcfb9470191b18dc2cf8ccb9db95fb11687179c8b1dc8e1bd99346751f979b321460dbbe95bf3c72f1b3e2cd04e7456b69c3907a7397451cd4930fe89cd0cf31dc2dbedb8252dce5bd1ef6453d4475db72012e32e1500ea7f9f0ef4d1f730afcca5e4f4a312ccc6d1eec75b5987d6a24c995f2bc1b5098ca063618a8d2a44f7e9f5346f155bceaf2902fb9872d17e46ade755645a56398a481e4bf562cfa39156afab2ef11ccee8bac93b10cfcd1570928d33e59d1b049f8a5a4d70effa0c8745a4cd943c2058abd2ac64bf62e2c16ea6bfcfd7509b7d7a746e94ebd04e76772b06ce36125c1ed1d08c3bc4bbe67c9f4dda318a469ff64869c13fa89dec24f1997dca3a27294cfee8d87aa1d2044ee8623100fb4cdbc4ed4fa2624a1d0a82140e6f7aec3befc45cfc939a03d0c95b83da0ea8157065e5da5bddcd2b2e34b6cb7d48f102c7a0a7eea041ce6d0f83fafc3ce928909e811682513206ef50b112605fc7ba02973f776d7c6a82f0cd66c77b7fadfba7812c7d0fc0c1ab51c78b5d6820cc4e027f043d7c933d3f9cea7070e031d07bdf80a89213abe089f6564076129c84d09bce8d960c6394f1ede571d0f364249fbc986aa7849b8db586d515a139cf82e4064c3a06729fc6788f4e55cd767cbd56f638a0fc6874542802216429f6b9da5bb96a46be29dddc5292e52c650a05c4bf056a24cc5019a3d38f07ace7399a9494fc38e33a48169dbd2875aaf43e87dafdc66fa9949236ddfe2d6a74d6b4d03aacc0fb32c014afb1700d38306693475af258900144ab3c12a4de247edaaab7d4b0b3af7ad9ef98bdfc57dbc18812f2149ce83d006574011ae668af083968bbf6203a22400ee941ee0d9498b06228e767543520502124f6a0d1e4fa3719f8c17d59d50384e3ac2afefe7b903be213f459d3e53bf3660ac5d42bb969f7738eb30dbe23f4be66ede58b54ddca9d9e2d42af780eb0df7805ab7299c3e516219da9492942cf6531796352d90f0ebbc7fdc31ebea5cb55b6b6e6014105b9834db77bb11c6c520750156b6ffcaae39faad7ee0f3ea61f93c106381", 0x1000}], 0x6, &(0x7f0000004540)=[{0x88, 0x116, 0x52, "944b4934c2d2d89c6de7a22073d72b4a2640e9d22722239e3457f39f6b855674eab9d61103bd37d64a0020d6c78bd3483449d405baea781aa158114a4bed3152767d760b4910e1874e96f0743a5c343b0c8568a33f0c31180bc4eb40189ff4e4c8bbcc87cfdf0ab99bce17d05e73d5e8bb42"}, {0x18, 0x29, 0x2, 'NJ'}, {0x50, 0x10e, 0x9, "77992ca4ae95f4f79e82a1cb056f76f5cf55c9b95e3d2064c84413b4d54e3a077db9e4cb51b30c81fec6ab58eecfdede4fcb20f4e283ce4703e63572abc919"}, {0xc0, 0x111, 0x0, "eb4a08a5c13f8ba01112dba08d259e415ae2b762a738f87e7809d14e41b0c05f56642eb59b2476cbe9b0d33a5a034ab29f7c737339c31f0396d8c1ac9bda904decb99b8fd56fd1caae4c66c1db0027b2ae34cf2efe89ef73a4ba7eae320c9cb66bdbec53a228d47c0596c442a928b10e5d7827cc0a8bd46591afb39710efcc90ae6ef1dabdaa8bd09e597fa8dfdd9d16df0cc25283f4afc7e82be6d961c362c4aa9173d43a2c0d6468decafc60bed0ff"}, {0x28, 0x115, 0x1000, "98fe9307d6ed92188f072d8b83d324524d8e7fd663ff"}], 0x1d8}}, {{&(0x7f0000004740)=@ll={0x11, 0x11, 0x0, 0x1, 0x7, 0x6, @broadcast}, 0x80, &(0x7f0000004980)=[{&(0x7f00000047c0)="09cc3f472a62d810365f105e5554931d0000000039542235d8e44a5631e9579f42f52e89fe1498a44dc7c6018428df65d211003982e1fdf0822f9b9269d361b755b7bd1f0975ac330d0898704f6d4cd4bdcabbb4ba734edeced58c13", 0x5c}, {&(0x7f00000063c0)="c2cf14c33110bedddda4570eb1a1bcb50b01c12c4a613cc20acd040a7545013a6adbf3b089c29b811914e7012009c867668f01520da94f2ab3a1b3a8c425e3a093d1446f838318d9e230c3b359177273becd56d32903de00b234e57664222906ba87976b30d6ae1b9abb95310b11760d843fa555d0a8f219d3c1d0f029758215caf6f92748eb74117de237a3fa1656c37cf70d8187899b05", 0x98}, {&(0x7f0000004900)="6b159eaa5c29def139b49a46ede0b69ee3422576c88151bb7da127036de48201e2a619e3798d966c71c7d15d45a04d1a349389cdca16fc4ed8e9252880b563", 0x3f}, {&(0x7f0000004940)="bbd1daf298c310326501c6f4b1c6d169a21022b82c0808c43f1ecf200521dce776c01a8e40b7419902b8a0a8c18997efa0cda7bc3eb79664e8e2fb08e6", 0x3d}], 0x4, &(0x7f00000049c0)=[{0x80, 0x112, 0x5dea, "743c02f3bd0a0bb91da470e818ffafcfb00b77ecf3783aa1ea049dc049cb9e27da77c7c8bcbc62406c1e00d070d2747205338424c6bfd97fa957fbdbb213cfe1326e6595cdc13836c977cc8c19f7870f3859e08d7ca449814f7e82b64f92fa8eda7bfddb14c47d8d0a16147b"}, {0x30, 0x103, 0x1, "fba0ec5e249f7a120159c25fc466938710b853fd165ff17f548ad80f"}], 0xb0}}, {{&(0x7f0000004a80)=@qipcrtr={0x2a, 0x4, 0x4001}, 0x80, &(0x7f0000004b80)=[{&(0x7f0000004b00)="d28f28c7ac046f5bd933333265a93bc115509e3b4e9b6669fc8b801447315bd4fa6fb38c57798e64793095f8e832ab630c917fc1f84750efa1f6e05664313b3ccb5338b436ac14d357dad681a5d3ee218a2546ff33e52062fc7aa056ad49681bc33219", 0x63}], 0x1, &(0x7f0000004bc0)=[{0xb8, 0x11, 0x7, "d5557560c3763dade6944b0db767205be539c736055d9fbe100f279974b4eecf785f7e8c77039e2ebead4d77cc80b7d440d9d1c09bacf3b8389dbde0d3eba8b466d0389c2ce6523a680d330c6e105963a9f4e3344bd45c27d2e10333ae369fa1e17ba896c2fd8d9a2d5405b032704e65f85ab2eb52731662039f2c46e6d0e589ca201b1e7be829ac32f9ad148596e9865d0e1e4ca11fc42d8bfb8153d95cd245789c8521ef"}, {0xd0, 0x102, 0x80000005, "92859148acbcd524026f3b92bf805ccf0631244ea4c60b13d55159e733db2b58222b8de33a3e9a6f535c8578e2390b4b1fb659eaa426fe7e7119f727f1b5395dbbeca02195d71d0b48e3b2de4a13eb0539f5b5caddb1d412c930a03a727213aa18c88d817e6887b55b7d069a6cea9edee17674797f779f5f575fb9d0b0316354bc77349e3622dbeb802ac794d0dd631b0a880f6a7d4f82777f735718295510ed9c7171dbf1bad0573a5268bd02bc7a884656212e851e4f711d709e802b0e26fe"}, {0x78, 0x108, 0x10001, "78b566f4732bb7343294a96ff115166e0d7955357a578c5951e7f3b5b6c52981bc4cdf77770201589f9b1fa17b7d1df60f2e555aae593c1a132c060a6b06ecc5d35f23e5a786a38ce8981afac47c813cec82df21369ab83406f8c42272c7d0ad710cea7be2"}, {0x1010, 0x101, 0x7, "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"}, {0xd8, 0xff, 0x9, "8e0227abaa103b99b27a5502a96e016255dd1e73be09c0bcf3f4e95bb3ee4e6093d1eee4fd88ff200680a62d682747fc8d9e21c3aa5754f7b4e44b837b003f1693bfb1561ea687a828f20e798857c3cdc7966484bac9e85f776e66cf3c30c9d042d770a596f3266762bd3caf1c9480ab63f37ab113b0ec7fc4bac89d52065433df4ed32be1eb5c77869db4c83efd3449b84ee8f171ae1414c111eb312a9eb75a1c70702380ba0f58c7ac9601d554a5669b72903acfdf3c563156ea918b2455030ea78b01faa080ba"}, {0xb8, 0x10a, 0x7, "5839c0f8f04f25a87d0f37ef49f3a2d83e3c0346938ec65234ce7a44176c4942d9ccdd6a66717f37c9c8a881a566f083ce787d600b89849288b98828f00c17ed005bc21e264aba093316d9720729c3ab7c5a587c789c1f1554256065210c5069205004deacae2f8a8f69b63c6154d33336186d3712b72611dd15acf8ad28f88be8d2fcf521bfcd52379cb337a66892b6439fe411d31196bfe5080e0154bb4ac43f03585624ea3e"}, {0x100, 0x107, 0x1, "039de23553a7f25a5485ee30202ae2fbe927637196f9d57fd2b1208ced000df5430c5be1925432f5e4f03412cb55795e5bcfa9f8d6da985b27d8409d56b5759eae212a1b4097a4231b9d047969257c152f23e297d122afdf499302b7836d55d1e011d50e14177c46613739d45411dc6bddcdeb45a4c1b94f11e04e60d301760cfa0e37a950b0f17a4fa2ffb8d8d7a9c2f58d5c2d088185817d928f56a41abbed71a55dcc9f0ccb53ca758dd5eb9ed88bc49687737c5f007806c7ae756bcf616b12e2a2a9bde5ad4c005b094f69932f470f3314c2a312cc15758b41c13c2a203793e3388fd4392255e10a"}, {0xe0, 0x111, 0x2, "c6067f1a99f75c61e88c38a93d8b58762a6ae4e8e5278f0401dc9384945af1d9ea37f375d554c504c4dfdc391a90ae0c9a88084f072975ed54836591af0df4bb5801bb023115b90555a3c61ef54ff5105a93164778bc59ec004a3027b15e0da9dffb5f427622f13759b7f8a7f71b80591e6fd6781e47c74c6fd15647438e25ead02502ae7100ef93f1c482ffeb97dd430c5158ba246686b5fb4692b0dbda4b8ddaa69b820674f802c67f63aabd960d16e0f18c2eb42028b9eb4b72f4ad6a96adf24889db8ababe8077c4dc148f"}, {0xd0, 0x118, 0x9, "aea92e497d491428f5af75f482006f40ed61a7c5703f9d47359a859d9e7b4ed8292b7bfab1098249dd6d392f5312de5da7c20b817e2240ecdc5ba57aff1868b251ad89ad1c3806a6b5fa4e9e2189e3d73512abf1cb6ca9fffc140922ce02edfd50c8ae350fb26ed9edc0a4023ed0de800ac70575c0e1065217e7c4103369744f19e3c9774b73e04f1510168f8030975dc13433c494946051d255b4c8655311623cb3e2cf5a8c1653f3eea82a3ed3b44d7cc69a539f70b73f021be79ea612bb"}], 0x1650}}], 0x5, 0x800) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x1, 0x0, 0x6000, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1}, 0x0) 3.698186094s ago: executing program 1 (id=1005): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000058100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)={@ifindex, r3, 0x11, 0x4, 0x0, @void, @value=r2}, 0x20) r4 = socket$xdp(0x2c, 0x3, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000000080)={0x10002, 0x9, {0xffffffffffffffff}, {0xee00}, 0xd, 0x193}) capset(&(0x7f00000000c0)={0x19980330, r5}, &(0x7f0000000100)={0x1, 0x7, 0xfffffffa, 0x10000, 0x3, 0xe456}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x7}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@o_path={&(0x7f00000004c0)='./file0\x00', 0x0, 0x0, r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x11, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x34e}, [@map_idx={0x18, 0xa, 0x5, 0x0, 0xa}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000000300)='GPL\x00', 0x5, 0x77, &(0x7f0000000400)=""/119, 0x41000, 0x34, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x5, 0x7, 0x6, 0x471}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000540)=[r2, r2, r2, r6, r2], &(0x7f0000000580)=[{0x1, 0x1, 0x1, 0x9}, {0x2, 0x5, 0x4, 0xc}, {0x5, 0x3, 0x8, 0x8}, {0x4, 0x2, 0xf, 0x4}, {0x5, 0x3, 0xc, 0x5}, {0x0, 0x1, 0x0, 0x4}, {0x0, 0x4, 0xf, 0x3}], 0x10, 0x7, @void, @value}, 0x94) 2.977954817s ago: executing program 1 (id=1006): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000500)={r1}) bpf$LINK_DETACH(0x22, &(0x7f0000000000), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f00000000c0)=0x7) 2.850271273s ago: executing program 1 (id=1007): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 2.848166376s ago: executing program 5 (id=1008): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.784162692s ago: executing program 0 (id=1009): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'pimreg0\x00', @multicast}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_enable(r2, &(0x7f00000000c0)='1', 0x1) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='ext4_ext_convert_to_initialized_enter\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) r4 = signalfd4(r0, &(0x7f0000000180)={[0x6b9]}, 0x8, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa0, 0x1, 0x8, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x848a}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7ff}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x3453f9cf}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x7e0}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0xe4}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x9}]}]}, 0xa0}}, 0x14) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) close_range(r4, r3, 0x0) r5 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e24, @private=0xa010102}}, 0x0, 0x4}, 0x90) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000440)=0x3, 0x4) syz_genetlink_get_family_id$SEG6(&(0x7f0000000480), r4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r8, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) preadv(r8, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x10, 0x0, 0x0) r10 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$6lowpan_control(r10, &(0x7f0000000500)='connect aa:aa:aa:aa:aa:11 1', 0x1b) 2.780311961s ago: executing program 4 (id=1010): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) accept4$llc(r1, 0x0, 0x0, 0x80000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r2, &(0x7f00000002c0)=ANY=[], 0x200002e6) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x0, @local}, 0x2}}, 0x26) setsockopt$sock_int(r3, 0x1, 0x0, &(0x7f0000000000)=0x717, 0x4) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r8, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r7, &(0x7f0000000080)="0d32818e7e6ae0", 0x7}]) (fail_nth: 1) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x3c, r5, 0x1, 0x60bd27, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}]}, 0x3c}}, 0x20) fcntl$setpipe(r2, 0x407, 0x7000000) fcntl$setpipe(r2, 0x407, 0x100000) 2.696558771s ago: executing program 1 (id=1011): r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x210380) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() fchdir(r0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, 0x0, 0x20000001) r4 = socket$inet6(0xa, 0x6, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x388, 0x188, 0x4c, 0x1a, 0x0, 0x73, 0x2f0, 0x258, 0x258, 0x2f0, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz1\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}}}, {{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3893b573a807d00}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) r7 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) r8 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x800}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r9, r10, 0x0) io_uring_enter(r8, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f00000002c0)={0xf0f045, 0x800}) poll(&(0x7f0000000140)=[{r7, 0x19f23}], 0x1, 0x2000000) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELOBJ={0x1c, 0x14, 0xa, 0x307, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x44}}, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x12, 0xc, 0x9, 0x4, 0x48000, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @value, @void, @void, @value}, 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000008000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000021d0000850000008200000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r13}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) 2.696195356s ago: executing program 5 (id=1012): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @remote}}}, 0x90) (fail_nth: 3) 2.125862604s ago: executing program 2 (id=1013): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xc8041, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x2, 0x1}, 0xc) acct(0x0) r1 = getpgrp(0x0) stat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000a00), &(0x7f0000000a40)=0x0, &(0x7f0000000a80)) newfstatat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000c40), &(0x7f0000000c80), &(0x7f0000000cc0)=0x0) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000d00), 0x38000, 0x0) r8 = fspick(r0, &(0x7f0000000d40)='./file0\x00', 0x0) r9 = accept$nfc_llcp(r0, &(0x7f0000000d80), &(0x7f0000000e00)=0x60) lstat(&(0x7f0000000e40)='./file0\x00', &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getgid() r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000f00), 0x4000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000f40)={0x0, 0x0}) r14 = getgid() ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000fc0)={r0, 0xbe, 0x3, 0x507}) r16 = eventfd2(0x8, 0x80000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000003580)={0x0, 0x0}) lstat(&(0x7f0000003600)='./file0\x00', &(0x7f0000003640)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f00000036c0)=[0x0, 0x0]) r20 = fcntl$getown(r0, 0x9) lstat(&(0x7f0000003700)='./file0\x00', &(0x7f0000003740)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000037c0)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0\x00'}) sendmmsg$unix(r0, &(0x7f0000003840)=[{{&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000100)="f7599e5b0243020ceec74663d9dd6221692ddeb64a30cb887691128b3ed33b0e45126d9fb7232a918256f2540e16b492b1dedf3311c568a20c7d2302fd56ed5b4f0bf4c2c4845883517f4729d24b952c086de5849b7946430cbc2ce33a4bc7e185a227454748094f3ff976d1e42c3dc78fb51996ea1bf09a5fbbe7da82fe2a4f95a72eefdee43fb35441177e7e862de7265d189152023209d30577e636020b38ab", 0xa1}], 0x1, &(0x7f0000000200)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x4000004}}, {{&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000003c0)=[{&(0x7f00000002c0)="eb29705b54a9e8ff535494b23a87a6231069096bfb0586dd1d0a44edbe9fa3ae6f47e19d00da4cab6ac93db4ea8be1c179beaf268fbb64018e70e6453d6240937d9136887f16c1190069e4e7f62e624630026f32fc6fc3a35478d47b305fddd5bc8f2ab7285dc614c2c07c40bca5cb281716", 0x72}, {&(0x7f0000000340)="6fc1e65b1144ef4c2b757131dbf5865a9c492cf3dbcd704a311c135cb97f65cbfdce4be721db1e0084f29d3b10dea6f8301d54fd1c5b85e896bff3468708561c10ec388320a359726982bfcc44ab5826718aa7c4fd90bbe5", 0x58}], 0x2, &(0x7f0000000400)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x18, 0x1}}, {{&(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000004c0)="59410152876e3d2c4817f3fdbad08399868641f792075c870244e69dc4d830393ab53a19ad96745e86b9c426b875c67af86131edeb7e5ebc7e6e267ecc97a1b970e9a43c4f061fc7141f52f09cd74a755f93e0bab42d0534679a7c125572a5cd9079cf747f08323fe0f86941cb7985f6d507edc39f6024a5c41674b504dd32ebad5f38d31d0a24165b0344ebc087e950f9cc2cab0c975393d3ade9d8cac7c993d457bdf8f71e48837302b8cd6e6b2a8e24423bd2136dfa1581a9cd0abc132e84b4fc", 0xc2}], 0x1, &(0x7f00000006c0)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xffffffffffffffff, r2}}}], 0x20, 0x20000020}}, {{&(0x7f0000000700)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000780)="97f159d941079698c75b258bbafca508e2d7299582739020423cb347547db3c409864820f2721d3580fc7fc00bbc39e08aae54c4643d6af9777afa8d45f87e8e18134996ef0e80a0", 0x48}, {&(0x7f0000000800)="0e87f073f5dde7d44a0c80c49eaabcaefcd7276bc58d24e442b05e9d64c100094e58a9bef94160a8788e9389e069951f0d37305cad11d4086a90a1c99d51d20f221faa4d03e74364ecc116364ff05689c49d3a84aeed25cb4679228e12eb673aae0fd0369851758955d10289c4d2ced74f128453a5810215dc2d11f16d705e35e7a9b414da3862ebf6d1ef869cd87a546250643f244cbc1cbb8f7f2e3c2dfe80d365c1dde5982d0f9332d25966bb0772f2584abf2ee681c1bb8b2ad8518a7a3b2506738b7fe5d202377f3937b4ecc5788110", 0xd2}, {&(0x7f0000000900)}, {&(0x7f0000000940)="31ec9e847d58c55c57a0c7e63583d6caf37919e3a7dd45fa0f7bf085f111ba4a6bc4494d33c417c530cff86366790dd0b5b44192cf098d289468c8f1c57c4b2500922373c1597a3f47825d69625894806c45f5453b299a3142890ee4d7a7d8", 0x5f}], 0x4, &(0x7f0000001000)=[@cred={{0x1c, 0x1, 0x2, {0x0, r3, r4}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5, r6}}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}}, @rights={{0x38, 0x1, 0x1, [r7, r0, r0, r0, r0, r8, r9, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r10, r11}}}, @rights={{0x30, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, r0, r12, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r13, 0x0, r14}}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @rights={{0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r15, r16]}}], 0x158, 0x4054}}, {{&(0x7f0000001180)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000002280)=[{&(0x7f0000001200)="8bfe81c783eb4d4cb75c6ae2d8798170afcce20cd42b5c2f4818882524c7e62301dfe0cb7e10fc2988d21d4e546d41a3d7e4de55cf4b660d469590f95df5ad7644866a4007945730a9e92ea2684143855375eedc0f94c6a7bd", 0x59}, {&(0x7f0000001280)="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", 0x1000}], 0x2, &(0x7f00000022c0)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x18, 0x20000040}}, {{&(0x7f0000002300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003540)=[{&(0x7f0000002380)="2c5dbb77bdb17a728138a01d860c01f5927822f564d8aa", 0x17}, {&(0x7f00000023c0)="f142bcfca1342aead92757ed63dca393ac51273e40cbb4f85203725e6113a2479f08ca19bdbc90d0f7072d79030f01bbf818e073b91875a80b53653d6b13983005c588c31d4c4ca19f66655cc67f9d24db4ec63bb5e641e1fa1a93e04503f99188c05c3761756680f765c145a20f832e733ea6bfe8b1ff36fcca", 0x7a}, {&(0x7f0000002440)="80e8fe77f8618571bac8c2dca005150d608618d6e54e00c95bd3a3fc121fbf347da5aeba4db805f4c42b1ea259ce4baadd24b0af71c63ca894f731dc0070caff924dc36fa3a249e0623b4b98170a715b959dd2dcbc29f6bd25b9ed45bab1802f07f1dc758b21ff43db71bbf4ce0a9268ad559cc9a44530b32d9bc1ed9e6963cb5e527da3bac44c06215da3098bf9e36eb9b6a240454ea2fcaf6360bcfed54b12925a5070c84ce20746c0ff3a6a72e1b17f1e155b9665b5cda1eb98478b4874bce0d914293831cc3243cc5f2e9fac9b4b58720536a7555f49ecfba22d8b7a8d48e0bc7ffb80a5c9e5", 0xe8}, {&(0x7f0000002540)="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", 0x1000}], 0x4, &(0x7f0000003800)=[@cred={{0x1c, 0x1, 0x2, {r17, r18, r19}}}, @cred={{0x1c, 0x1, 0x2, {r20, r21, r22}}}], 0x40, 0x80800}}], 0x6, 0x4000000) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000039c0)) r23 = request_key(&(0x7f0000003a00)='asymmetric\x00', &(0x7f0000003a40)={'syz', 0x0}, &(0x7f0000003a80)='/dev/sequencer\x00', 0xfffffffffffffffd) r24 = add_key$keyring(&(0x7f0000003ac0), &(0x7f0000003b00)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r23, r24, 0x0, 0x1) 2.041746996s ago: executing program 5 (id=1014): socket$isdn_base(0x22, 0x3, 0x0) r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) dup3(r4, r1, 0x0) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sysfs(0xffffffffffffff9c, 0x0, 0x400, 0xc0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x14}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x2, &(0x7f0000000440)=@raw=[@btf_id={0x18, 0x0, 0x3, 0x0, 0x5}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xf, 0xf, &(0x7f00000002c0)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) socket$tipc(0x1e, 0x5, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="180000002c00010000000000000000000400"], 0x18}], 0x1}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000000300)=0x13, 0x4) 1.643288526s ago: executing program 2 (id=1015): openat$adsp1(0xffffffffffffff9c, 0x0, 0x290000, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0xfffffffffffff9c2, 0x5616c0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r1, &(0x7f0000000140)=[{0x0}], 0x1, 0x14a, 0x4) 1.4503325s ago: executing program 1 (id=1016): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x6c}}, 0x0) 1.337750635s ago: executing program 4 (id=1017): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x6c}}, 0x0) 1.33748236s ago: executing program 2 (id=1018): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000010a80)=@raw={'raw\x00', 0x8, 0x3, 0xa08, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x970, 0xffffffff, 0xffffffff, 0x970, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private, 0x0, 0x0, 'batadv0\x00', 'batadv_slave_0\x00', {}, {}, 0x21}, 0x6, 0xa0, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[], [], 0x3d8}}]}, @common=@SET={0x60}}, {{@ip={@loopback, @dev, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bond_slave_0\x00'}, 0x0, 0x850, 0x870, 0x0, {}, [@common=@unspec=@u32={{0x7e0}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa68) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000c7f000)='./file0\x00', &(0x7f0000df9000)='nfs4\x00', 0x0, &(0x7f0000590ffe)='v4') 1.331768265s ago: executing program 0 (id=1019): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000000)="a8", 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000001300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r6, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1d9f3204df03d208}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x5, 0xe, 0x0, 0x16, @private0, @local, 0x7800, 0x700, 0xffff, 0x3}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000240)={0x0, @empty}, &(0x7f0000000280)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x20, 0x20, 0x6, 0x0, {{0x1d, 0x4, 0x1, 0x33, 0x74, 0x65, 0x0, 0x9, 0x29, 0x0, @multicast2, @remote, {[@ssrr={0x89, 0x13, 0x59, [@local, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101]}, @end, @noop, @generic={0x86, 0x6, "29f55cdc"}, @timestamp={0x44, 0x28, 0x65, 0x0, 0x8, [0x9, 0x54, 0x480, 0x7, 0x8, 0x8, 0x800, 0x3, 0xfffff9d6]}, @timestamp_prespec={0x44, 0x1c, 0xd9, 0x3, 0x4, [{@rand_addr=0x64010100, 0x53}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xf}, {@rand_addr=0x64010101, 0x7f}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000400)={'wg1\x00', 0x0}) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000480)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r15, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x1d, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r16}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r15}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6_vti0\x00', &(0x7f0000000500)={'ip6gre0\x00', 0x0, 0x29, 0x1, 0x7, 0x2, 0x70, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7868, 0x20, 0x9, 0x6e}}) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000005c0)={@dev, @empty, 0x0}, &(0x7f0000000600)=0xc) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000880)={0x178, r3, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000100) ioctl$int_in(r1, 0x5452, &(0x7f0000001840)=0x5d4) read$nci(r1, &(0x7f0000000840)=""/53, 0x35) write$P9_RLOPEN(r1, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0x1, 0x4, 0x7}, 0x3}}, 0x18) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000002540)=""/4086, &(0x7f0000000180)=0xff6) 9.982545ms ago: executing program 2 (id=1020): mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x7, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00'}, 0x2c) connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x5) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x100000000004, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000d400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4002}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x20000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.065353ms ago: executing program 1 (id=1021): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)=ANY=[@ANYBLOB="20000000437d0900fffffffffddbdf25010000000c0002800800b5007f000000010000656c35977f03acf916e3314abc300cf65cd22b89879ba773f9e51db9cdc40f3b48f14d7a10d1fe455e5ded96f9000161aba501d63bd920f808000000000000000119268eed196af9486c253d47867610f9b811da21e4e2150734758b38d4d338f90919c4b5a4a3624b1069a872b9336767810960f25057457a39e55abddec5e6ad0839f70069c0a32c5251fb68e02af90e060e905204b77e249aa4202d"], 0x20}}, 0x44850) lsm_list_modules(&(0x7f0000002600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000000)=0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000f00), 0x1, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000340)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000340), 0x3, r3, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000300)={0x22, r5, r3}) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000680), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r7, 0xc01064bd, &(0x7f0000001a80)={&(0x7f0000000a80)="ee", 0x1}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r6, 0xc00464be, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000f40)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[{}, {}, {}, {}, {}], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x5, 0x4, 0x4}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f00000009c0)={&(0x7f0000000640), &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000c40)=[0x0, 0x0, 0x0], 0x0, 0xa, 0x3}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000ac0)={&(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0], 0x7, 0x0, 0xeeeeeeee}) dup2(r6, r7) 0s ago: executing program 4 (id=1022): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = memfd_secret(0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r3, r2, 0x2e, 0x4608, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r4, 0x4) close_range(r0, 0xffffffffffffffff, 0xd00) kernel console output (not intermixed with test programs): nput: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input34 [ 201.462077][ T7394] netlink: 'syz.0.462': attribute type 1 has an invalid length. [ 201.473457][ T7394] netlink: 236 bytes leftover after parsing attributes in process `syz.0.462'. [ 201.492979][ T7394] NCSI netlink: No device for ifindex 813332851 [ 201.819141][ T10] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 202.223002][ T5901] usb 1-1: USB disconnect, device number 19 [ 202.444541][ T10] usb 4-1: device descriptor read/64, error -71 [ 202.494311][ T5901] appletouch 1-1:1.0: input: appletouch disconnected [ 202.555196][ T7417] netlink: 36 bytes leftover after parsing attributes in process `syz.2.469'. [ 202.634964][ T7419] netlink: 3 bytes leftover after parsing attributes in process `syz.4.470'. [ 202.647292][ T7419] 0ªX¹¦À: renamed from caif0 [ 202.662263][ T7419] 0ªX¹¦À: entered allmulticast mode [ 202.677979][ T7419] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 202.697414][ T7422] (unnamed net_device) (uninitialized): (slave ip6gretap0): Device is not bonding slave [ 202.707808][ T7422] (unnamed net_device) (uninitialized): option active_slave: invalid value (ip6gretap0) [ 202.718983][ T10] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 202.849103][ T10] usb 4-1: device descriptor read/64, error -71 [ 203.913835][ T10] usb usb4-port1: attempt power cycle [ 204.442376][ T5901] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 204.616684][ T5901] usb 1-1: Using ep0 maxpacket: 32 [ 204.630749][ T5901] usb 1-1: config 0 has an invalid interface number: 183 but max is 0 [ 204.737334][ T5901] usb 1-1: config 0 has no interface number 0 [ 204.817943][ T5901] usb 1-1: config 0 interface 183 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 528 [ 204.854218][ T7444] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 204.895000][ T5901] usb 1-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 204.925941][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.948956][ T5901] usb 1-1: Product: syz [ 204.954424][ T5901] usb 1-1: Manufacturer: syz [ 204.965710][ T5901] usb 1-1: SerialNumber: syz [ 204.992068][ T5901] usb 1-1: config 0 descriptor?? [ 205.009714][ T7436] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 205.020343][ T5830] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 205.209339][ T5830] usb 5-1: Using ep0 maxpacket: 8 [ 205.216121][ T5830] usb 5-1: config 251 has an invalid interface number: 243 but max is 0 [ 205.229133][ T5830] usb 5-1: config 251 has no interface number 0 [ 205.236167][ T7434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.244994][ T7434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.252897][ T5830] usb 5-1: config 251 interface 243 has no altsetting 0 [ 205.264258][ T5830] usb 5-1: New USB device found, idVendor=0ab4, idProduct=0014, bcdDevice=28.9a [ 205.276573][ T5830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.284862][ T5830] usb 5-1: Product: syz [ 205.289709][ T5830] usb 5-1: Manufacturer: syz [ 205.294702][ T5830] usb 5-1: SerialNumber: syz [ 205.549245][ T10] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 205.572341][ T5830] esd_usb 5-1:251.243: sending version message failed [ 205.592755][ T5830] esd_usb 5-1:251.243: probe with driver esd_usb failed with error -22 [ 205.794628][ T5830] usb 5-1: USB disconnect, device number 21 [ 205.896047][ T30] audit: type=1326 audit(1741507656.333:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7464 comm="syz.2.484" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efef598d169 code=0x0 [ 206.559052][ T5901] net1080 1-1:0.183: probe with driver net1080 failed with error -71 [ 206.577338][ T10] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 206.592617][ T5901] usb 1-1: USB disconnect, device number 20 [ 206.598707][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.674913][ T10] usb 4-1: config 0 descriptor?? [ 207.104981][ T10] elan 0003:04F3:0755.000A: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 207.200144][ T7478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.489'. [ 207.300242][ T7455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.308952][ T7455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.459053][ T942] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 207.885836][ T5830] usb 4-1: USB disconnect, device number 27 [ 208.348344][ T942] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 208.425224][ T942] usb 1-1: config 0 has no interface number 0 [ 208.657240][ T942] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 208.848792][ T7493] CUSE: unknown device info "ÿ" [ 208.854048][ T7493] CUSE: zero length info key specified [ 209.277970][ T942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.286134][ T942] usb 1-1: Product: syz [ 209.290453][ T942] usb 1-1: Manufacturer: syz [ 209.295069][ T942] usb 1-1: SerialNumber: syz [ 209.360396][ T942] usb 1-1: config 0 descriptor?? [ 209.657955][ T942] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 210.009312][ T5931] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 210.169564][ T5931] usb 5-1: Using ep0 maxpacket: 32 [ 210.179964][ T7500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.494'. [ 210.194751][ T942] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 210.208622][ T7504] bridge_slave_0: left allmulticast mode [ 210.255131][ T5931] usb 5-1: config 0 has an invalid interface number: 183 but max is 0 [ 210.276346][ T7504] bridge_slave_0: left promiscuous mode [ 210.282867][ T7504] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.288339][ T942] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 210.308883][ T5931] usb 5-1: config 0 has no interface number 0 [ 210.316320][ T5931] usb 5-1: config 0 interface 183 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 528 [ 210.337673][ T7504] bridge_slave_1: left allmulticast mode [ 210.343705][ T942] usb 1-1: media controller created [ 210.349665][ T7504] bridge_slave_1: left promiscuous mode [ 210.363599][ T7504] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.375128][ T5931] usb 5-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 210.391272][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.400105][ T942] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 210.408571][ T5931] usb 5-1: Product: syz [ 210.423247][ T5931] usb 5-1: Manufacturer: syz [ 210.438307][ T5931] usb 5-1: SerialNumber: syz [ 210.460879][ T7504] bond0: (slave bond_slave_0): Releasing backup interface [ 210.473540][ T7504] bond0: (slave bond_slave_1): Releasing backup interface [ 210.474307][ T5931] usb 5-1: config 0 descriptor?? [ 210.498689][ T7505] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 210.524921][ T7504] team0: Port device team_slave_0 removed [ 210.542674][ T7504] team0: Port device team_slave_1 removed [ 210.550345][ T7504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.558707][ T7504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.568326][ T7504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.576649][ T7504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.666325][ T5901] usb 1-1: USB disconnect, device number 21 [ 210.693462][ T5830] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 210.715541][ T7501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.724366][ T7501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.954020][ T5830] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 210.981571][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.021000][ T5830] usb 4-1: config 0 descriptor?? [ 211.486379][ T30] audit: type=1326 audit(1741507661.923:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7513 comm="syz.2.499" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efef598d169 code=0x0 [ 211.530511][ T5830] elan 0003:04F3:0755.000B: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 211.725253][ T7508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.734000][ T7508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.281015][ T5830] usb 4-1: USB disconnect, device number 28 [ 212.778029][ T5931] net1080 5-1:0.183: probe with driver net1080 failed with error -71 [ 212.791144][ T5931] usb 5-1: USB disconnect, device number 22 [ 213.167691][ T7531] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 213.862688][ T7546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.509'. [ 213.871663][ T7546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.509'. [ 214.713395][ T30] audit: type=1326 audit(1741507664.843:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7554 comm="syz.1.512" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f162ed8d169 code=0x0 [ 215.759779][ T26] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 215.913087][ T7572] CUSE: unknown device info "ÿ" [ 216.000529][ T7572] CUSE: zero length info key specified [ 216.049103][ T26] usb 5-1: Using ep0 maxpacket: 32 [ 216.066275][ T26] usb 5-1: config 0 has an invalid interface number: 183 but max is 0 [ 216.105771][ T26] usb 5-1: config 0 has no interface number 0 [ 216.149040][ T26] usb 5-1: config 0 interface 183 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 528 [ 216.220078][ T26] usb 5-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 216.262711][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.282529][ T26] usb 5-1: Product: syz [ 216.308773][ T26] usb 5-1: Manufacturer: syz [ 216.321423][ T26] usb 5-1: SerialNumber: syz [ 216.331950][ T26] usb 5-1: config 0 descriptor?? [ 216.338252][ T7570] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 216.609305][ T7569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.618078][ T7569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.759882][ T5931] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 217.014863][ T5931] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 217.024409][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.036144][ T5931] usb 4-1: config 0 descriptor?? [ 217.166876][ T7585] FAULT_INJECTION: forcing a failure. [ 217.166876][ T7585] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.189102][ T7585] CPU: 1 UID: 0 PID: 7585 Comm: syz.2.522 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 217.189131][ T7585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 217.189141][ T7585] Call Trace: [ 217.189148][ T7585] [ 217.189156][ T7585] dump_stack_lvl+0x241/0x360 [ 217.189194][ T7585] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.189211][ T7585] ? __pfx__printk+0x10/0x10 [ 217.189236][ T7585] ? stack_depot_save_flags+0x37/0x940 [ 217.189267][ T7585] should_fail_ex+0x40a/0x550 [ 217.189293][ T7585] _copy_to_user+0x31/0xb0 [ 217.189316][ T7585] do_vfs_ioctl+0x15e5/0x2770 [ 217.189348][ T7585] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 217.189372][ T7585] ? mark_lock+0x9a/0x360 [ 217.189410][ T7585] ? tomoyo_path_number_perm+0x209/0x770 [ 217.189434][ T7585] ? __pfx_lock_release+0x10/0x10 [ 217.189460][ T7585] ? tomoyo_path_number_perm+0x5dd/0x770 [ 217.189485][ T7585] ? tomoyo_path_number_perm+0x5dd/0x770 [ 217.189511][ T7585] ? tomoyo_path_number_perm+0x65d/0x770 [ 217.189533][ T7585] ? __lock_acquire+0x1397/0x2100 [ 217.189557][ T7585] ? tomoyo_path_number_perm+0x209/0x770 [ 217.189579][ T7585] ? smack_log+0x10d/0x5c0 [ 217.189602][ T7585] ? __pfx_smack_log+0x10/0x10 [ 217.189632][ T7585] ? smk_tskacc+0x300/0x370 [ 217.189655][ T7585] ? smack_file_ioctl+0x304/0x3b0 [ 217.189678][ T7585] ? __pfx_smack_file_ioctl+0x10/0x10 [ 217.189704][ T7585] ? __fget_files+0x2a/0x410 [ 217.189724][ T7585] ? __fget_files+0x2a/0x410 [ 217.189748][ T7585] __se_sys_ioctl+0x80/0x170 [ 217.189770][ T7585] do_syscall_64+0xf3/0x230 [ 217.189793][ T7585] ? clear_bhb_loop+0x35/0x90 [ 217.189818][ T7585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.189839][ T7585] RIP: 0033:0x7efef598d169 [ 217.189860][ T7585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.189875][ T7585] RSP: 002b:00007efef6866038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 217.189899][ T7585] RAX: ffffffffffffffda RBX: 00007efef5ba5fa0 RCX: 00007efef598d169 [ 217.189911][ T7585] RDX: 0000000000000000 RSI: 00000000801c581f RDI: 0000000000000003 [ 217.189922][ T7585] RBP: 00007efef6866090 R08: 0000000000000000 R09: 0000000000000000 [ 217.189932][ T7585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.189942][ T7585] R13: 0000000000000000 R14: 00007efef5ba5fa0 R15: 00007ffc38a3f578 [ 217.189968][ T7585] [ 217.577989][ T7588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.523'. [ 217.607654][ T7588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.523'. [ 217.937322][ T5931] elan 0003:04F3:0755.000C: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 218.046132][ T7593] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 218.177581][ T26] net1080 5-1:0.183: probe with driver net1080 failed with error -71 [ 218.660924][ T26] usb 5-1: USB disconnect, device number 23 [ 219.387129][ T30] audit: type=1326 audit(1741507669.803:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7598 comm="syz.2.527" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efef598d169 code=0x0 [ 220.263746][ T7610] CUSE: unknown device info "ÿ" [ 220.269171][ T7610] CUSE: zero length info key specified [ 221.454922][ T7618] CUSE: unknown device info "ÿ" [ 221.460055][ T7618] CUSE: zero length info key specified [ 222.380379][ T7620] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 223.096566][ T7637] xt_ecn: cannot match TCP bits for non-tcp packets [ 223.204070][ T942] usb 4-1: USB disconnect, device number 29 [ 225.364375][ T30] audit: type=1326 audit(1741507675.803:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7641 comm="syz.1.541" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f162ed8d169 code=0x0 [ 225.547540][ T26] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 225.764928][ T26] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 225.812103][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.903785][ T26] usb 5-1: config 0 descriptor?? [ 226.859144][ T26] usbhid 5-1:0.0: can't add hid device: -71 [ 226.865204][ T26] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 226.914526][ T26] usb 5-1: USB disconnect, device number 24 [ 228.869961][ T7677] CUSE: unknown device info "ÿ" [ 228.875015][ T7677] CUSE: zero length info key specified [ 229.339295][ T26] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 229.520800][ T26] usb 4-1: Using ep0 maxpacket: 8 [ 229.551106][ T26] usb 4-1: config 251 has an invalid interface number: 243 but max is 0 [ 229.576960][ T26] usb 4-1: config 251 has no interface number 0 [ 229.654403][ T30] audit: type=1326 audit(1741507680.013:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7685 comm="syz.0.553" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb5d018d169 code=0x0 [ 229.696533][ T26] usb 4-1: config 251 interface 243 has no altsetting 0 [ 229.722467][ T26] usb 4-1: New USB device found, idVendor=0ab4, idProduct=0014, bcdDevice=28.9a [ 229.735347][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.118315][ T26] usb 4-1: Product: syz [ 230.160204][ T26] usb 4-1: Manufacturer: syz [ 230.200253][ T26] usb 4-1: SerialNumber: syz [ 230.446754][ T26] esd_usb 4-1:251.243: sending version message failed [ 230.464167][ T26] esd_usb 4-1:251.243: probe with driver esd_usb failed with error -22 [ 230.489349][ T26] usb 4-1: USB disconnect, device number 30 [ 231.661777][ T7715] CUSE: unknown device info "ÿ" [ 231.666930][ T7715] CUSE: zero length info key specified [ 232.053107][ T26] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 232.279084][ T26] usb 1-1: Using ep0 maxpacket: 8 [ 232.348571][ T26] usb 1-1: unable to get BOS descriptor or descriptor too short [ 232.497554][ T26] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 113, changing to 10 [ 232.577913][ T26] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 232.731330][ T26] usb 1-1: config 1 interface 0 has no altsetting 0 [ 232.854686][ T26] usb 1-1: string descriptor 0 read error: -22 [ 232.982533][ T26] usb 1-1: New USB device found, idVendor=05ac, idProduct=021a, bcdDevice= 0.40 [ 233.073025][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.172630][ T7716] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 233.434970][ T26] appletouch 1-1:1.0: Failed to read mode from device. [ 233.648664][ T26] appletouch 1-1:1.0: probe with driver appletouch failed with error -5 [ 233.694320][ T26] usb 1-1: USB disconnect, device number 22 [ 234.441405][ T7741] CUSE: unknown device info "ÿ" [ 234.446584][ T7741] CUSE: zero length info key specified [ 235.435269][ T5830] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 235.451229][ T5825] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 235.468559][ T7745] openvswitch: netlink: IP tunnel dst address not specified [ 235.527756][ T7746] CUSE: unknown device info "ÿ" [ 235.533030][ T7746] CUSE: zero length info key specified [ 235.620879][ T5830] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 236.264575][ T5830] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 236.276921][ T5830] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 236.288984][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 236.308981][ T5830] usb 5-1: SerialNumber: syz [ 236.321800][ T5830] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 236.335778][ T5830] usb-storage 5-1:1.0: USB Mass Storage device detected [ 236.364565][ T5830] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 236.423274][ T7753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.579'. [ 236.432935][ T5830] scsi host1: usb-storage 5-1:1.0 [ 236.433462][ T7753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.579'. [ 236.652997][ T942] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 236.678730][ T5830] usb 5-1: USB disconnect, device number 25 [ 236.810081][ T942] usb 4-1: Using ep0 maxpacket: 8 [ 237.301328][ T942] usb 4-1: unable to get BOS descriptor or descriptor too short [ 237.310404][ T942] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 113, changing to 10 [ 237.330648][ T942] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 237.341837][ T942] usb 4-1: config 1 interface 0 has no altsetting 0 [ 237.351612][ T942] usb 4-1: string descriptor 0 read error: -22 [ 237.357860][ T942] usb 4-1: New USB device found, idVendor=05ac, idProduct=021a, bcdDevice= 0.40 [ 237.366992][ T942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.387131][ T7754] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 237.439091][ T5902] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 237.589376][ T5902] usb 1-1: Using ep0 maxpacket: 32 [ 237.596498][ T5902] usb 1-1: config 0 has an invalid interface number: 183 but max is 0 [ 237.605291][ T5902] usb 1-1: config 0 has no interface number 0 [ 237.612090][ T5902] usb 1-1: config 0 interface 183 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 528 [ 237.625232][ T5902] usb 1-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 237.637979][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.646087][ T5902] usb 1-1: Product: syz [ 237.650523][ T5902] usb 1-1: Manufacturer: syz [ 237.655188][ T5902] usb 1-1: SerialNumber: syz [ 237.661452][ T5902] usb 1-1: config 0 descriptor?? [ 237.666900][ T7763] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 237.807704][ T942] appletouch 4-1:1.0: Geyser mode initialized. [ 237.815006][ T942] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input36 [ 237.881502][ T7762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.890779][ T7762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.050320][ T7754] netlink: 'syz.3.580': attribute type 1 has an invalid length. [ 238.058202][ T7754] netlink: 236 bytes leftover after parsing attributes in process `syz.3.580'. [ 238.081133][ T7754] NCSI netlink: No device for ifindex 813332851 [ 238.185926][ T5830] usb 4-1: USB disconnect, device number 31 [ 238.204330][ T5830] appletouch 4-1:1.0: input: appletouch disconnected [ 239.585024][ T5902] net1080 1-1:0.183: probe with driver net1080 failed with error -71 [ 240.021579][ T5902] usb 1-1: USB disconnect, device number 23 [ 240.357070][ T7792] CUSE: unknown device info "ÿ" [ 240.362321][ T7792] CUSE: zero length info key specified [ 241.814241][ T7809] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 243.675959][ T7828] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 243.747077][ T837] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 244.017535][ T837] usb 4-1: Using ep0 maxpacket: 32 [ 244.430026][ T837] usb 4-1: config 0 has an invalid interface number: 183 but max is 0 [ 244.469366][ T837] usb 4-1: config 0 has no interface number 0 [ 244.475570][ T837] usb 4-1: config 0 interface 183 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 528 [ 244.531888][ T837] usb 4-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 244.562827][ T7831] CUSE: unknown device info "ÿ" [ 244.568098][ T7831] CUSE: zero length info key specified [ 245.161302][ T837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.357486][ T837] usb 4-1: Product: syz [ 245.383193][ T837] usb 4-1: Manufacturer: syz [ 245.388298][ T837] usb 4-1: SerialNumber: syz [ 245.445702][ T837] usb 4-1: config 0 descriptor?? [ 245.452108][ T7823] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 245.663227][ T7823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.671829][ T7823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.748147][ T837] net1080 4-1:0.183: probe with driver net1080 failed with error -71 [ 246.998096][ T837] usb 4-1: USB disconnect, device number 32 [ 247.270438][ T7852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.610'. [ 247.342601][ T7852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.610'. [ 247.773717][ T7862] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 247.791053][ T5825] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 247.884265][ T7864] openvswitch: netlink: IP tunnel dst address not specified [ 248.494044][ T7855] netlink: 'syz.3.612': attribute type 1 has an invalid length. [ 248.501985][ T7855] netlink: 224 bytes leftover after parsing attributes in process `syz.3.612'. [ 248.949884][ T7885] netlink: 'syz.0.623': attribute type 1 has an invalid length. [ 248.977873][ T7885] netlink: 224 bytes leftover after parsing attributes in process `syz.0.623'. [ 249.814233][ T7899] openvswitch: netlink: IP tunnel dst address not specified [ 249.825650][ T5825] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 250.060914][ T5901] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 250.365082][ T7905] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 250.569549][ T5901] usb 4-1: Using ep0 maxpacket: 8 [ 250.582559][ T5901] usb 4-1: unable to get BOS descriptor or descriptor too short [ 250.600306][ T5901] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 113, changing to 10 [ 250.621830][ T5901] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 250.649478][ T5901] usb 4-1: config 1 interface 0 has no altsetting 0 [ 250.669198][ T5901] usb 4-1: string descriptor 0 read error: -22 [ 250.675547][ T5901] usb 4-1: New USB device found, idVendor=05ac, idProduct=021a, bcdDevice= 0.40 [ 250.688482][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.714180][ T7898] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 251.197985][ T5901] appletouch 4-1:1.0: Failed to read mode from device. [ 251.205300][ T5901] appletouch 4-1:1.0: probe with driver appletouch failed with error -5 [ 251.327607][ T942] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 251.424162][ T5901] usb 4-1: USB disconnect, device number 33 [ 251.621845][ T942] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 251.632288][ T942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.660281][ T942] usb 5-1: config 0 descriptor?? [ 252.342831][ T7933] CUSE: unknown device info "ÿ" [ 252.348048][ T7933] CUSE: zero length info key specified [ 253.302486][ T942] elan 0003:04F3:0755.000D: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 253.545032][ T942] usb 5-1: USB disconnect, device number 26 [ 254.101029][ T30] audit: type=1326 audit(1741507704.533:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7936 comm="syz.3.643" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe93658d169 code=0x0 [ 255.043966][ T7953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.650'. [ 255.069689][ T7953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.650'. [ 255.253931][ T7962] CUSE: unknown device info "ÿ" [ 255.259202][ T7962] CUSE: zero length info key specified [ 256.017950][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.026684][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.083250][ T9] usb 3-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 256.219531][ T71] usb 2-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 257.770505][ T71] dvb_usb_ec168 2-1:0.1: probe with driver dvb_usb_ec168 failed with error -2 [ 257.782648][ T71] usb 2-1: USB disconnect, device number 17 [ 257.819474][ T9] dvb_usb_ec168 3-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 257.852707][ T9] usb 3-1: USB disconnect, device number 17 [ 258.039251][ T5830] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 258.203790][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 258.229145][ T5830] usb 1-1: Using ep0 maxpacket: 8 [ 258.259251][ T5830] usb 1-1: unable to get BOS descriptor or descriptor too short [ 258.268399][ T5830] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 113, changing to 10 [ 258.295102][ T5830] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 258.411293][ T5830] usb 1-1: config 1 interface 0 has no altsetting 0 [ 258.439052][ T71] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 258.439164][ T5830] usb 1-1: string descriptor 0 read error: -22 [ 258.463898][ T5830] usb 1-1: New USB device found, idVendor=05ac, idProduct=021a, bcdDevice= 0.40 [ 258.506645][ T5830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.959375][ T71] usb 2-1: Using ep0 maxpacket: 8 [ 259.086243][ T7982] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 259.099658][ T71] usb 2-1: unable to get BOS descriptor or descriptor too short [ 259.113404][ T5830] usb 1-1: can't set config #1, error -71 [ 259.120274][ T71] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 113, changing to 10 [ 259.146418][ T71] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 259.168155][ T5830] usb 1-1: USB disconnect, device number 24 [ 259.207880][ T71] usb 2-1: config 1 interface 0 has no altsetting 0 [ 259.227950][ T71] usb 2-1: string descriptor 0 read error: -22 [ 259.235521][ T71] usb 2-1: New USB device found, idVendor=05ac, idProduct=021a, bcdDevice= 0.40 [ 259.255466][ T71] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.283762][ T7973] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 259.833165][ T7995] CUSE: unknown device info "ÿ" [ 259.838181][ T7995] CUSE: zero length info key specified [ 259.929290][ T71] appletouch 2-1:1.0: Geyser mode initialized. [ 260.010956][ T71] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input40 [ 260.148145][ T7973] netlink: 'syz.1.658': attribute type 1 has an invalid length. [ 260.191094][ C1] appletouch 2-1:1.0: atp_complete: usb_submit_urb failed with result -1 [ 260.273956][ T7973] netlink: 236 bytes leftover after parsing attributes in process `syz.1.658'. [ 260.343242][ T7973] NCSI netlink: No device for ifindex 813332851 [ 260.373587][ T26] usb 2-1: USB disconnect, device number 18 [ 260.382153][ T5825] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 260.394071][ T26] appletouch 2-1:1.0: input: appletouch disconnected [ 260.602477][ T71] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 260.614363][ T8004] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 260.909160][ T71] usb 3-1: Using ep0 maxpacket: 8 [ 260.934194][ T71] usb 3-1: config 251 has an invalid interface number: 243 but max is 0 [ 260.962837][ T5902] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 260.990889][ T71] usb 3-1: config 251 has no interface number 0 [ 261.096156][ T71] usb 3-1: config 251 interface 243 has no altsetting 0 [ 261.198533][ T5902] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 261.322939][ T71] usb 3-1: New USB device found, idVendor=0ab4, idProduct=0014, bcdDevice=28.9a [ 261.355699][ T5902] usb 5-1: config 0 has no interface number 0 [ 261.495685][ T71] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.511445][ T5902] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 261.539056][ T71] usb 3-1: Product: syz [ 261.543509][ T71] usb 3-1: Manufacturer: syz [ 261.548122][ T71] usb 3-1: SerialNumber: syz [ 261.559065][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.567208][ T5902] usb 5-1: Product: syz [ 261.608403][ T5902] usb 5-1: Manufacturer: syz [ 261.629739][ T5902] usb 5-1: SerialNumber: syz [ 261.659648][ T5902] usb 5-1: config 0 descriptor?? [ 262.326810][ T5902] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 262.348383][ T71] esd_usb 3-1:251.243: sending version message failed [ 262.395195][ T71] esd_usb 3-1:251.243: probe with driver esd_usb failed with error -22 [ 262.420051][ T5902] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 262.478817][ T5902] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 262.487477][ T8020] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 262.872093][ T71] usb 3-1: USB disconnect, device number 19 [ 262.889076][ T5902] usb 5-1: media controller created [ 262.929641][ T9] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 262.948444][ T5902] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 262.999143][ T5830] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 263.081399][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 263.110480][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 263.130297][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 263.139928][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 263.151935][ T9] usb 4-1: SerialNumber: syz [ 263.161701][ T9] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 263.170375][ T5830] usb 1-1: Using ep0 maxpacket: 8 [ 263.177706][ T5830] usb 1-1: unable to get BOS descriptor or descriptor too short [ 263.186779][ T5830] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 113, changing to 10 [ 263.199514][ T9] usb-storage 4-1:1.0: USB Mass Storage device detected [ 263.208873][ T5830] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 263.222035][ T5931] usb 5-1: USB disconnect, device number 27 [ 263.224087][ T9] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 263.293723][ T8030] CUSE: unknown device info "ÿ" [ 263.298876][ T8030] CUSE: zero length info key specified [ 263.772730][ T9] scsi host1: usb-storage 4-1:1.0 [ 264.019002][ T5830] usb 1-1: config 1 interface 0 has no altsetting 0 [ 264.037038][ T9] usb 4-1: USB disconnect, device number 34 [ 264.045601][ T5830] usb 1-1: string descriptor 0 read error: -22 [ 264.059107][ T5830] usb 1-1: New USB device found, idVendor=05ac, idProduct=021a, bcdDevice= 0.40 [ 264.068291][ T5830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.089964][ T8016] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 264.778742][ T5825] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 264.910645][ T8016] netlink: 256 bytes leftover after parsing attributes in process `syz.0.674'. [ 264.956836][ T5830] appletouch 1-1:1.0: Failed to request geyser raw mode [ 264.970484][ T5830] appletouch 1-1:1.0: probe with driver appletouch failed with error -5 [ 264.982376][ T5830] usb 1-1: USB disconnect, device number 25 [ 265.918395][ T30] audit: type=1326 audit(1741507716.213:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8048 comm="syz.4.687" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa1e7b8d169 code=0x0 [ 265.977068][ T8054] CUSE: unknown device info "ÿ" [ 265.982139][ T8054] CUSE: zero length info key specified [ 266.503549][ T8056] netlink: 16 bytes leftover after parsing attributes in process `syz.3.689'. [ 266.606678][ T8059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.690'. [ 266.707165][ T8066] CUSE: unknown device info "ÿ" [ 266.712400][ T8066] CUSE: zero length info key specified [ 267.632124][ T9] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 267.956106][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 268.151731][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 268.195171][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 268.204730][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.225100][ T9] usb 4-1: Product: syz [ 268.239580][ T9] usb 4-1: Manufacturer: syz [ 268.244263][ T9] usb 4-1: SerialNumber: syz [ 268.288064][ T8061] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 268.729144][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 269.067708][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 269.384310][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 269.507039][ T10] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 113, changing to 10 [ 269.609260][ T10] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 269.621255][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 269.669489][ T10] usb 3-1: string descriptor 0 read error: -22 [ 269.675908][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=021a, bcdDevice= 0.40 [ 269.691903][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.720484][ T8080] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 269.746211][ T9] cdc_ncm 4-1:1.0: failed to get mac address [ 269.754827][ T9] cdc_ncm 4-1:1.0: bind() failure [ 269.773592][ T9] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 269.789896][ T9] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 269.808025][ T9] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 269.846334][ T9] usb 4-1: USB disconnect, device number 35 [ 269.942707][ T10] appletouch 3-1:1.0: Failed to read mode from device. [ 269.951330][ T10] appletouch 3-1:1.0: probe with driver appletouch failed with error -5 [ 270.139085][ T5931] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 270.152828][ T8095] netlink: 16 bytes leftover after parsing attributes in process `syz.4.703'. [ 270.167773][ T9] usb 3-1: USB disconnect, device number 20 [ 270.299645][ T5931] usb 2-1: Using ep0 maxpacket: 8 [ 270.321632][ T5931] usb 2-1: unable to get BOS descriptor or descriptor too short [ 270.439685][ T5931] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 113, changing to 10 [ 270.615670][ T5931] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 270.982416][ T5931] usb 2-1: config 1 interface 0 has no altsetting 0 [ 271.001396][ T5931] usb 2-1: string descriptor 0 read error: -22 [ 271.045468][ T8104] CUSE: unknown device info "ÿ" [ 271.050856][ T8104] CUSE: zero length info key specified [ 271.068434][ T5931] usb 2-1: New USB device found, idVendor=05ac, idProduct=021a, bcdDevice= 0.40 [ 271.162273][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.855273][ T8091] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 272.401989][ T30] audit: type=1326 audit(1741507722.843:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8105 comm="syz.3.707" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe93658d169 code=0x0 [ 272.870314][ T8115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.708'. [ 272.881287][ T5931] appletouch 2-1:1.0: Failed to request geyser raw mode [ 272.888477][ T5931] appletouch 2-1:1.0: probe with driver appletouch failed with error -5 [ 272.942318][ T5931] usb 2-1: USB disconnect, device number 19 [ 273.489253][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 273.629381][ T9] usb 1-1: device descriptor read/64, error -71 [ 274.273854][ T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 274.559084][ T9] usb 1-1: device descriptor read/64, error -71 [ 274.609365][ T8134] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 274.749311][ T9] usb usb1-port1: attempt power cycle [ 275.201656][ T9] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 275.252388][ T9] usb 1-1: device descriptor read/8, error -71 [ 275.709177][ T8152] netlink: 16 bytes leftover after parsing attributes in process `syz.1.714'. [ 276.189127][ T5901] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 276.255187][ T8159] CUSE: unknown device info "ÿ" [ 276.260340][ T8159] CUSE: zero length info key specified [ 276.369267][ T5901] usb 4-1: Using ep0 maxpacket: 8 [ 276.659513][ T8157] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 277.116317][ T5901] usb 4-1: unable to get BOS descriptor or descriptor too short [ 277.138118][ T5901] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 113, changing to 10 [ 277.171101][ T5901] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 277.220119][ T8160] netlink: 'syz.0.716': attribute type 1 has an invalid length. [ 277.228020][ T8160] netlink: 224 bytes leftover after parsing attributes in process `syz.0.716'. [ 277.239983][ T5901] usb 4-1: config 1 interface 0 has no altsetting 0 [ 277.427474][ T5901] usb 4-1: string descriptor 0 read error: -22 [ 277.590699][ T5901] usb 4-1: New USB device found, idVendor=05ac, idProduct=021a, bcdDevice= 0.40 [ 277.824345][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.846914][ T8145] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 278.017896][ T5901] appletouch 4-1:1.0: Failed to read mode from device. [ 278.041520][ T5901] appletouch 4-1:1.0: probe with driver appletouch failed with error -5 [ 278.116688][ T5901] usb 4-1: USB disconnect, device number 36 [ 278.859215][ T30] audit: type=1326 audit(1741507729.293:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8169 comm="syz.1.721" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f162ed8d169 code=0x0 [ 279.113730][ T8177] CUSE: unknown device info "ÿ" [ 279.118709][ T8177] CUSE: zero length info key specified [ 279.609213][ T71] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 279.630213][ T8186] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 279.790231][ T71] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 279.845896][ T71] usb 1-1: config 0 has no interface number 0 [ 279.930402][ T71] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 279.987448][ T71] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.027746][ T71] usb 1-1: Product: syz [ 280.046261][ T71] usb 1-1: Manufacturer: syz [ 280.071495][ T71] usb 1-1: SerialNumber: syz [ 280.983906][ T71] usb 1-1: config 0 descriptor?? [ 281.203266][ T71] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 281.214909][ T71] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 281.225488][ T71] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 281.233695][ T71] usb 1-1: media controller created [ 282.242442][ T71] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 282.378351][ T8202] netlink: 68 bytes leftover after parsing attributes in process `syz.2.731'. [ 282.413597][ T8202] netlink: 68 bytes leftover after parsing attributes in process `syz.2.731'. [ 282.423753][ T71] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 282.515122][ T71] usb 1-1: USB disconnect, device number 30 [ 283.031795][ T8216] netlink: 'syz.2.736': attribute type 16 has an invalid length. [ 283.039706][ T8216] netlink: 'syz.2.736': attribute type 17 has an invalid length. [ 283.099567][ T8216] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 283.401536][ T9] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 283.656875][ T5901] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 284.439825][ T5901] usb 4-1: Using ep0 maxpacket: 8 [ 284.460654][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 284.478181][ T5901] usb 4-1: unable to get BOS descriptor or descriptor too short [ 284.486171][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 284.502282][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 284.512541][ T5901] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 113, changing to 10 [ 284.543211][ T5901] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 284.555116][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 284.568475][ T9] usb 2-1: SerialNumber: syz [ 284.574472][ T5901] usb 4-1: config 1 interface 0 has no altsetting 0 [ 284.610647][ T9] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 284.638725][ T9] usb-storage 2-1:1.0: USB Mass Storage device detected [ 284.649399][ T5901] usb 4-1: string descriptor 0 read error: -22 [ 284.655649][ T5901] usb 4-1: New USB device found, idVendor=05ac, idProduct=021a, bcdDevice= 0.40 [ 284.686266][ T9] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 284.697793][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.742045][ T8214] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 284.906151][ T9] scsi host1: usb-storage 2-1:1.0 [ 285.008536][ T5901] appletouch 4-1:1.0: Failed to read mode from device. [ 285.027790][ T5901] appletouch 4-1:1.0: probe with driver appletouch failed with error -5 [ 285.179595][ T8235] netlink: 'syz.0.734': attribute type 1 has an invalid length. [ 285.193850][ T8235] netlink: 224 bytes leftover after parsing attributes in process `syz.0.734'. [ 285.227138][ T5901] usb 4-1: USB disconnect, device number 37 [ 285.613079][ T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 285.871255][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 285.895913][ T9] usb 5-1: config 0 has no interface number 0 [ 285.920881][ T9] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 285.939040][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.962009][ T9] usb 5-1: Product: syz [ 285.973794][ T9] usb 5-1: Manufacturer: syz [ 285.989167][ T71] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 285.989909][ T9] usb 5-1: SerialNumber: syz [ 286.044013][ T8248] netlink: 32 bytes leftover after parsing attributes in process `syz.3.747'. [ 286.131998][ T9] usb 5-1: config 0 descriptor?? [ 286.139185][ T71] usb 1-1: Using ep0 maxpacket: 32 [ 286.176340][ T71] usb 1-1: config 0 has an invalid interface number: 183 but max is 0 [ 286.206107][ T71] usb 1-1: config 0 has no interface number 0 [ 286.223858][ T71] usb 1-1: config 0 interface 183 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 528 [ 286.261452][ T71] usb 1-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 286.277422][ T71] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.501735][ T71] usb 1-1: Product: syz [ 286.505966][ T71] usb 1-1: Manufacturer: syz [ 286.510706][ T71] usb 1-1: SerialNumber: syz [ 286.521835][ T9] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 286.540558][ T9] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 286.542426][ T71] usb 1-1: config 0 descriptor?? [ 286.573767][ T8244] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 287.511633][ T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 287.519816][ T9] usb 5-1: media controller created [ 287.547916][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 287.599607][ T8244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.611931][ T8244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.086976][ T5902] usb 2-1: USB disconnect, device number 20 [ 288.122442][ T26] usb 5-1: USB disconnect, device number 28 [ 288.998360][ T71] net1080 1-1:0.183: probe with driver net1080 failed with error -71 [ 289.192017][ T71] usb 1-1: USB disconnect, device number 31 [ 291.349154][ T8289] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 292.213747][ T5830] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 292.272940][ T8300] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 292.339026][ T5902] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 292.407663][ T5830] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 292.442855][ T5830] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 292.599067][ T5830] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 292.608792][ T5902] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 292.621442][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.628995][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 293.307841][ T5830] usb 2-1: SerialNumber: syz [ 293.323308][ T5902] usb 3-1: config 0 descriptor?? [ 293.439012][ T9] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 294.007780][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 294.026011][ T9] usb 1-1: config 0 has no interface number 0 [ 294.036719][ T9] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 294.057416][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.067243][ T9] usb 1-1: Product: syz [ 294.074864][ T9] usb 1-1: Manufacturer: syz [ 294.082175][ T9] usb 1-1: SerialNumber: syz [ 294.089764][ T9] usb 1-1: config 0 descriptor?? [ 294.168462][ T5902] elan 0003:04F3:0755.000E: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 294.304976][ T9] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 294.325558][ T9] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 294.343600][ T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 294.356950][ T9] usb 1-1: media controller created [ 294.444246][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 294.720749][ T5830] usb 2-1: can't set config #1, error -71 [ 294.741139][ T5830] usb 2-1: USB disconnect, device number 21 [ 294.759116][ T9] usb 1-1: USB disconnect, device number 32 [ 294.772728][ T5902] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 294.929201][ T5902] usb 5-1: Using ep0 maxpacket: 8 [ 294.961294][ T5902] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 294.980275][ T5902] usb 5-1: config 179 has no interface number 0 [ 295.003504][ T5902] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 295.018625][ T5902] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 295.074067][ T5902] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 295.098582][ T5902] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 295.259804][ T5902] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 295.273902][ T5902] usb 5-1: config 179 interface 65 has no altsetting 0 [ 295.281673][ T5902] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 295.291076][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.308740][ T8316] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 295.354899][ T5902] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input46 [ 295.410105][ T5181] input input46: unable to receive magic message: -110 [ 295.555281][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 295.579539][ T5181] input input46: unable to receive magic message: -32 [ 296.547534][ T5181] input input46: unable to receive magic message: -32 [ 296.715609][ T5181] input input46: unable to receive magic message: -32 [ 296.959426][ T9] usb 5-1: USB disconnect, device number 29 [ 296.961961][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 296.976306][ C1] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 296.987572][ T9] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 297.319374][ T942] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 298.130629][ T942] usb 4-1: Using ep0 maxpacket: 32 [ 298.151769][ T942] usb 4-1: config 0 has an invalid interface number: 183 but max is 0 [ 298.170165][ T942] usb 4-1: config 0 has no interface number 0 [ 298.176954][ T942] usb 4-1: config 0 interface 183 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 528 [ 298.184970][ T8342] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 298.224846][ T942] usb 4-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 298.277892][ T942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.317352][ T942] usb 4-1: Product: syz [ 298.342726][ T942] usb 4-1: Manufacturer: syz [ 298.368036][ T942] usb 4-1: SerialNumber: syz [ 298.704213][ T942] usb 4-1: config 0 descriptor?? [ 298.744931][ T8335] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 298.961641][ T8332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.970575][ T8332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.133719][ T5902] usb 3-1: USB disconnect, device number 21 [ 300.672793][ T942] net1080 4-1:0.183: probe with driver net1080 failed with error -71 [ 300.688414][ T942] usb 4-1: USB disconnect, device number 38 [ 300.917287][ T8362] CUSE: unknown device info "ÿ" [ 300.922480][ T8362] CUSE: zero length info key specified [ 301.071238][ T26] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 301.495390][ T26] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 301.601152][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.912215][ T26] usb 5-1: config 0 descriptor?? [ 302.213171][ T26] usbhid 5-1:0.0: can't add hid device: -71 [ 302.219274][ T26] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 302.228802][ T26] usb 5-1: USB disconnect, device number 30 [ 303.267445][ T8379] FAULT_INJECTION: forcing a failure. [ 303.267445][ T8379] name failslab, interval 1, probability 0, space 0, times 0 [ 303.291637][ T8379] CPU: 0 UID: 0 PID: 8379 Comm: syz.1.784 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 303.291665][ T8379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 303.291675][ T8379] Call Trace: [ 303.291682][ T8379] [ 303.291689][ T8379] dump_stack_lvl+0x241/0x360 [ 303.291716][ T8379] ? __pfx_dump_stack_lvl+0x10/0x10 [ 303.291732][ T8379] ? __pfx__printk+0x10/0x10 [ 303.291757][ T8379] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 303.291774][ T8379] ? __pfx___might_resched+0x10/0x10 [ 303.291821][ T8379] should_fail_ex+0x40a/0x550 [ 303.291848][ T8379] should_failslab+0xac/0x100 [ 303.291873][ T8379] __kmalloc_node_noprof+0xe1/0x4d0 [ 303.291889][ T8379] ? vmemdup_user+0x42/0x1c0 [ 303.291910][ T8379] vmemdup_user+0x42/0x1c0 [ 303.291928][ T8379] path_setxattrat+0x354/0x510 [ 303.291953][ T8379] ? __pfx_path_setxattrat+0x10/0x10 [ 303.291971][ T8379] ? vfs_write+0x7fa/0xd10 [ 303.292021][ T8379] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 303.292045][ T8379] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 303.292073][ T8379] __x64_sys_fsetxattr+0xbc/0xe0 [ 303.292093][ T8379] do_syscall_64+0xf3/0x230 [ 303.292114][ T8379] ? clear_bhb_loop+0x35/0x90 [ 303.292135][ T8379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.292155][ T8379] RIP: 0033:0x7f162ed8d169 [ 303.292170][ T8379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.292184][ T8379] RSP: 002b:00007f162fbcf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 303.292212][ T8379] RAX: ffffffffffffffda RBX: 00007f162efa5fa0 RCX: 00007f162ed8d169 [ 303.292224][ T8379] RDX: 0000400000000100 RSI: 00004000000000c0 RDI: 0000000000000003 [ 303.292235][ T8379] RBP: 00007f162fbcf090 R08: 0000000000000003 R09: 0000000000000000 [ 303.292251][ T8379] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 303.292261][ T8379] R13: 0000000000000000 R14: 00007f162efa5fa0 R15: 00007ffd32ffc3c8 [ 303.292285][ T8379] [ 304.217478][ T8392] FAULT_INJECTION: forcing a failure. [ 304.217478][ T8392] name failslab, interval 1, probability 0, space 0, times 0 [ 304.230692][ T8392] CPU: 0 UID: 0 PID: 8392 Comm: syz.4.787 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 304.230717][ T8392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 304.230727][ T8392] Call Trace: [ 304.230733][ T8392] [ 304.230740][ T8392] dump_stack_lvl+0x241/0x360 [ 304.230764][ T8392] ? __pfx_dump_stack_lvl+0x10/0x10 [ 304.230782][ T8392] ? __pfx__printk+0x10/0x10 [ 304.230807][ T8392] ? __kmalloc_cache_noprof+0x48/0x390 [ 304.230825][ T8392] ? __pfx___might_resched+0x10/0x10 [ 304.230848][ T8392] should_fail_ex+0x40a/0x550 [ 304.230874][ T8392] should_failslab+0xac/0x100 [ 304.230898][ T8392] __kmalloc_cache_noprof+0x70/0x390 [ 304.230911][ T8392] ? alloc_pipe_info+0xeb/0x4d0 [ 304.230936][ T8392] alloc_pipe_info+0xeb/0x4d0 [ 304.230960][ T8392] splice_direct_to_actor+0xa9e/0xc80 [ 304.230997][ T8392] ? __pfx_direct_splice_actor+0x10/0x10 [ 304.231022][ T8392] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 304.231045][ T8392] ? __fget_files+0x2a/0x410 [ 304.231061][ T8392] ? __pfx_lock_release+0x10/0x10 [ 304.231086][ T8392] do_splice_direct+0x289/0x3e0 [ 304.231112][ T8392] ? __pfx_do_splice_direct+0x10/0x10 [ 304.231131][ T8392] ? __fget_files+0x2a/0x410 [ 304.231146][ T8392] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 304.231170][ T8392] ? bpf_lsm_file_permission+0x9/0x10 [ 304.231192][ T8392] ? rw_verify_area+0x243/0x630 [ 304.231215][ T8392] do_sendfile+0x564/0x8a0 [ 304.231240][ T8392] ? __pfx_do_sendfile+0x10/0x10 [ 304.231258][ T8392] ? __fget_files+0x2a/0x410 [ 304.231283][ T8392] __se_sys_sendfile64+0x17c/0x1e0 [ 304.231310][ T8392] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 304.231334][ T8392] ? do_syscall_64+0x100/0x230 [ 304.231359][ T8392] ? do_syscall_64+0xb6/0x230 [ 304.231382][ T8392] do_syscall_64+0xf3/0x230 [ 304.231403][ T8392] ? clear_bhb_loop+0x35/0x90 [ 304.231437][ T8392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.231457][ T8392] RIP: 0033:0x7fa1e7b8d169 [ 304.231474][ T8392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.231488][ T8392] RSP: 002b:00007fa1e59f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 304.231506][ T8392] RAX: ffffffffffffffda RBX: 00007fa1e7da5fa0 RCX: 00007fa1e7b8d169 [ 304.231516][ T8392] RDX: 0000000000000000 RSI: 000000000000000f RDI: 0000000000000010 [ 304.231525][ T8392] RBP: 00007fa1e59f6090 R08: 0000000000000000 R09: 0000000000000000 [ 304.231535][ T8392] R10: 0000000100000002 R11: 0000000000000246 R12: 0000000000000001 [ 304.231545][ T8392] R13: 0000000000000000 R14: 00007fa1e7da5fa0 R15: 00007fff7b864ef8 [ 304.231570][ T8392] [ 305.618980][ T8402] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 306.645469][ T942] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 307.049218][ T30] audit: type=1326 audit(1741507757.343:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8413 comm="syz.2.795" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efef598d169 code=0x0 [ 307.104155][ T942] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 307.104674][ T942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.170177][ T942] usb 4-1: config 0 descriptor?? [ 308.476806][ T942] elan 0003:04F3:0755.000F: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 308.530204][ T10] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 308.699083][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 308.715237][ T8443] CUSE: unknown device info "ÿ" [ 308.720419][ T8443] CUSE: zero length info key specified [ 308.746757][ T71] usb 4-1: USB disconnect, device number 39 [ 308.809193][ T942] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 309.049136][ T942] usb 5-1: Using ep0 maxpacket: 8 [ 309.503167][ T942] usb 5-1: unable to get BOS descriptor or descriptor too short [ 309.515474][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 309.524509][ T10] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 113, changing to 10 [ 309.535918][ T10] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 309.547117][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 309.549181][ T942] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 113, changing to 10 [ 309.556550][ T10] usb 3-1: string descriptor 0 read error: -22 [ 309.571439][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=021a, bcdDevice= 0.40 [ 309.581243][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.596179][ T942] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 309.597685][ T8430] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 309.623435][ T942] usb 5-1: config 1 interface 0 has no altsetting 0 [ 309.633063][ T942] usb 5-1: string descriptor 0 read error: -22 [ 309.655682][ T942] usb 5-1: New USB device found, idVendor=05ac, idProduct=021a, bcdDevice= 0.40 [ 309.718372][ T942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.737680][ T8438] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 309.748690][ T8447] netlink: 16 bytes leftover after parsing attributes in process `syz.1.807'. [ 310.046602][ T8430] netlink: 256 bytes leftover after parsing attributes in process `syz.2.800'. [ 310.069050][ T9] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 310.078993][ T10] appletouch 3-1:1.0: Failed to request geyser raw mode [ 310.086062][ T10] appletouch 3-1:1.0: probe with driver appletouch failed with error -5 [ 310.122161][ T10] usb 3-1: USB disconnect, device number 22 [ 310.152903][ T8438] netlink: 256 bytes leftover after parsing attributes in process `syz.4.803'. [ 310.167910][ T942] appletouch 5-1:1.0: Failed to request geyser raw mode [ 310.183621][ T942] appletouch 5-1:1.0: probe with driver appletouch failed with error -5 [ 310.218634][ T942] usb 5-1: USB disconnect, device number 31 [ 310.261061][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 310.271277][ T9] usb 4-1: config 0 has no interface number 0 [ 310.295769][ T9] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 310.306143][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.320547][ T9] usb 4-1: Product: syz [ 310.324765][ T9] usb 4-1: Manufacturer: syz [ 310.335916][ T9] usb 4-1: SerialNumber: syz [ 310.346337][ T9] usb 4-1: config 0 descriptor?? [ 310.638410][ T9] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 310.649227][ T9] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 310.665398][ T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 310.678981][ T9] usb 4-1: media controller created [ 310.751198][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 310.889108][ T942] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 311.120798][ T26] usb 4-1: USB disconnect, device number 40 [ 311.908155][ T942] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 311.924458][ T942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.965276][ T942] usb 1-1: config 0 descriptor?? [ 312.207168][ T8475] CUSE: unknown device info "ÿ" [ 312.212581][ T8475] CUSE: zero length info key specified [ 312.372864][ T26] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 312.501274][ T942] elan 0003:04F3:0755.0010: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 312.637860][ T8456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.646478][ T8456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.667592][ T26] usb 4-1: device descriptor read/64, error -71 [ 313.172769][ T10] usb 1-1: USB disconnect, device number 33 [ 313.317389][ T26] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 314.219080][ T26] usb 4-1: device descriptor read/64, error -71 [ 314.354927][ T26] usb usb4-port1: attempt power cycle [ 314.407622][ T8490] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 314.836394][ T8489] netlink: 12 bytes leftover after parsing attributes in process `syz.0.822'. [ 314.911193][ T8492] autofs: Unknown parameter 'workdir' [ 315.096022][ T26] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 315.251774][ T8498] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 315.396856][ T26] usb 4-1: device descriptor read/8, error -71 [ 315.690836][ T71] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 316.499211][ T71] usb 5-1: Using ep0 maxpacket: 8 [ 316.534064][ T71] usb 5-1: unable to get BOS descriptor or descriptor too short [ 316.628332][ T71] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 113, changing to 10 [ 316.731098][ T71] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 316.817293][ T71] usb 5-1: config 1 interface 0 has no altsetting 0 [ 316.882899][ T71] usb 5-1: string descriptor 0 read error: -22 [ 316.905576][ T71] usb 5-1: New USB device found, idVendor=05ac, idProduct=021a, bcdDevice= 0.40 [ 316.914937][ T71] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.925684][ T8497] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 317.181880][ T8519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.829'. [ 317.333175][ T8522] netlink: 'syz.3.832': attribute type 8 has an invalid length. [ 317.456090][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.469057][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.572462][ T8497] netlink: 256 bytes leftover after parsing attributes in process `syz.4.824'. [ 317.658468][ T71] appletouch 5-1:1.0: Failed to request geyser raw mode [ 317.678869][ T71] appletouch 5-1:1.0: probe with driver appletouch failed with error -5 [ 317.739622][ T71] usb 5-1: USB disconnect, device number 32 [ 317.776224][ T8527] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 318.962103][ T8541] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 319.380064][ T10] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 319.645082][ T10] usb 1-1: device descriptor read/64, error -71 [ 320.032193][ T10] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 320.259042][ T10] usb 1-1: device descriptor read/64, error -71 [ 320.376818][ T10] usb usb1-port1: attempt power cycle [ 320.811532][ T10] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 320.859676][ T10] usb 1-1: device descriptor read/8, error -71 [ 321.129192][ T10] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 321.202185][ T10] usb 1-1: device descriptor read/8, error -71 [ 321.374021][ T10] usb usb1-port1: unable to enumerate USB device [ 323.953465][ T5830] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 325.143481][ T30] audit: type=1326 audit(1741507775.583:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8567 comm="syz.0.845" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb5d018d169 code=0x0 [ 325.178446][ T5830] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 325.248456][ T5830] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 325.293842][ T5830] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 325.323844][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 325.361355][ T5830] usb 5-1: SerialNumber: syz [ 325.953427][ T5830] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 325.988685][ T5830] usb-storage 5-1:1.0: USB Mass Storage device detected [ 326.041960][ T5830] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 326.073004][ T8591] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 326.092528][ T8591] VFS: Can't find a romfs filesystem on dev nullb0. [ 326.092528][ T8591] [ 326.274822][ T5830] scsi host1: usb-storage 5-1:1.0 [ 327.031398][ T5830] usb 5-1: USB disconnect, device number 33 [ 327.137098][ T30] audit: type=1326 audit(1741507777.573:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8587 comm="syz.1.852" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f162ed8d169 code=0x0 [ 327.429777][ T5830] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 328.013758][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 328.039053][ T5830] usb 5-1: Using ep0 maxpacket: 8 [ 328.046882][ T5830] usb 5-1: config 251 has an invalid interface number: 243 but max is 0 [ 328.061940][ T5830] usb 5-1: config 251 has no interface number 0 [ 328.068437][ T5830] usb 5-1: config 251 interface 243 has no altsetting 0 [ 328.080464][ T5830] usb 5-1: New USB device found, idVendor=0ab4, idProduct=0014, bcdDevice=28.9a [ 328.102345][ T5830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.120192][ T5830] usb 5-1: Product: syz [ 328.124747][ T5830] usb 5-1: Manufacturer: syz [ 328.135278][ T5830] usb 5-1: SerialNumber: syz [ 328.179276][ T9] usb 2-1: device descriptor read/64, error -71 [ 328.439518][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 328.729220][ T9] usb 2-1: device descriptor read/64, error -71 [ 328.920338][ T9] usb usb2-port1: attempt power cycle [ 329.110143][ T942] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 329.360970][ T942] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 329.388988][ T942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.417099][ T942] usb 1-1: config 0 descriptor?? [ 329.459400][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 329.495822][ T9] usb 2-1: device descriptor read/8, error -71 [ 329.956562][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 330.034422][ T942] elan 0003:04F3:0755.0011: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 330.064737][ T8617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.073532][ T8617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.090009][ T9] usb 2-1: device descriptor read/8, error -71 [ 330.199278][ T5830] esd_usb 5-1:251.243: sending version message failed [ 330.206172][ T5830] esd_usb 5-1:251.243: probe with driver esd_usb failed with error -22 [ 330.233076][ T5830] usb 5-1: USB disconnect, device number 34 [ 330.262342][ T9] usb usb2-port1: unable to enumerate USB device [ 330.280315][ T5901] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 330.611803][ T942] usb 1-1: USB disconnect, device number 38 [ 330.627861][ T5901] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 330.678163][ T5901] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 331.370171][ T5901] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 331.389573][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 331.397631][ T5901] usb 4-1: SerialNumber: syz [ 331.409050][ T5830] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 331.433314][ T5901] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 331.447970][ T5901] usb-storage 4-1:1.0: USB Mass Storage device detected [ 331.464441][ T5901] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 331.473653][ T5901] scsi host1: usb-storage 4-1:1.0 [ 331.559595][ T5830] usb 5-1: device descriptor read/64, error -71 [ 331.639701][ T942] usb 4-1: USB disconnect, device number 45 [ 331.689159][ T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 331.809224][ T5830] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 331.863531][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 331.870553][ T10] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 331.887499][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.911479][ T10] usb 2-1: config 0 descriptor?? [ 331.938195][ T8654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.872'. [ 331.949185][ T5830] usb 5-1: device descriptor read/64, error -71 [ 332.058731][ T8657] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 332.069415][ T5830] usb usb5-port1: attempt power cycle [ 332.147208][ T8643] warning: `syz.1.868' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 332.383565][ T10] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 332.395535][ T10] asix 2-1:0.0: probe with driver asix failed with error -71 [ 332.418614][ T10] usb 2-1: USB disconnect, device number 26 [ 332.439034][ T5830] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 332.480675][ T5830] usb 5-1: device descriptor read/8, error -71 [ 332.649419][ T26] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 332.709078][ T942] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 332.749195][ T5830] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 332.769732][ T5830] usb 5-1: device descriptor read/8, error -71 [ 332.799116][ T26] usb 4-1: Using ep0 maxpacket: 8 [ 332.806026][ T26] usb 4-1: config 251 has an invalid interface number: 243 but max is 0 [ 332.818537][ T26] usb 4-1: config 251 has no interface number 0 [ 332.830421][ T26] usb 4-1: config 251 interface 243 has no altsetting 0 [ 332.841110][ T942] usb 3-1: device descriptor read/64, error -71 [ 332.848660][ T26] usb 4-1: New USB device found, idVendor=0ab4, idProduct=0014, bcdDevice=28.9a [ 332.858223][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.866476][ T26] usb 4-1: Product: syz [ 332.870751][ T26] usb 4-1: Manufacturer: syz [ 332.875359][ T26] usb 4-1: SerialNumber: syz [ 332.892443][ T5830] usb usb5-port1: unable to enumerate USB device [ 333.079036][ T942] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 333.114662][ T26] esd_usb 4-1:251.243: sending version message failed [ 333.124463][ T26] esd_usb 4-1:251.243: probe with driver esd_usb failed with error -22 [ 333.198243][ T26] usb 4-1: USB disconnect, device number 46 [ 333.239076][ T942] usb 3-1: device descriptor read/64, error -71 [ 333.345623][ T8676] FAULT_INJECTION: forcing a failure. [ 333.345623][ T8676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.359491][ T942] usb usb3-port1: attempt power cycle [ 333.359575][ T8676] CPU: 0 UID: 0 PID: 8676 Comm: syz.1.880 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 333.359597][ T8676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 333.359607][ T8676] Call Trace: [ 333.359614][ T8676] [ 333.359620][ T8676] dump_stack_lvl+0x241/0x360 [ 333.359644][ T8676] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.359659][ T8676] ? __pfx__printk+0x10/0x10 [ 333.359684][ T8676] ? __pfx_lock_release+0x10/0x10 [ 333.359713][ T8676] should_fail_ex+0x40a/0x550 [ 333.359740][ T8676] _copy_from_user+0x2d/0xb0 [ 333.359760][ T8676] __sys_bpf+0x1be/0x820 [ 333.359781][ T8676] ? __pfx___sys_bpf+0x10/0x10 [ 333.359812][ T8676] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 333.359835][ T8676] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 333.359857][ T8676] ? do_syscall_64+0x100/0x230 [ 333.359883][ T8676] __x64_sys_bpf+0x7c/0x90 [ 333.359902][ T8676] do_syscall_64+0xf3/0x230 [ 333.359923][ T8676] ? clear_bhb_loop+0x35/0x90 [ 333.359946][ T8676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.359966][ T8676] RIP: 0033:0x7f162ed8d169 [ 333.359981][ T8676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.359995][ T8676] RSP: 002b:00007f162fbcf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 333.360012][ T8676] RAX: ffffffffffffffda RBX: 00007f162efa5fa0 RCX: 00007f162ed8d169 [ 333.360024][ T8676] RDX: 0000000000000020 RSI: 0000400000000700 RDI: 0000000000000002 [ 333.360035][ T8676] RBP: 00007f162fbcf090 R08: 0000000000000000 R09: 0000000000000000 [ 333.360044][ T8676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.360059][ T8676] R13: 0000000000000000 R14: 00007f162efa5fa0 R15: 00007ffd32ffc3c8 [ 333.360083][ T8676] [ 334.029332][ T942] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 334.365622][ T942] usb 3-1: device descriptor read/8, error -71 [ 335.492470][ T942] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 335.529516][ T942] usb 3-1: device descriptor read/8, error -71 [ 335.606766][ T8695] FAULT_INJECTION: forcing a failure. [ 335.606766][ T8695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 335.620090][ T8695] CPU: 0 UID: 0 PID: 8695 Comm: syz.0.886 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 335.620114][ T8695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 335.620125][ T8695] Call Trace: [ 335.620131][ T8695] [ 335.620139][ T8695] dump_stack_lvl+0x241/0x360 [ 335.620164][ T8695] ? __pfx_dump_stack_lvl+0x10/0x10 [ 335.620180][ T8695] ? __pfx__printk+0x10/0x10 [ 335.620207][ T8695] ? __pfx_lock_release+0x10/0x10 [ 335.620238][ T8695] should_fail_ex+0x40a/0x550 [ 335.620265][ T8695] _copy_from_user+0x2d/0xb0 [ 335.620292][ T8695] copy_msghdr_from_user+0xae/0x680 [ 335.620319][ T8695] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 335.620338][ T8695] ? __fget_files+0x2a/0x410 [ 335.620359][ T8695] ? __fget_files+0x2a/0x410 [ 335.620384][ T8695] __sys_sendmsg+0x209/0x350 [ 335.620406][ T8695] ? __pfx___sys_sendmsg+0x10/0x10 [ 335.620469][ T8695] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 335.620493][ T8695] ? do_syscall_64+0x100/0x230 [ 335.620519][ T8695] ? do_syscall_64+0xb6/0x230 [ 335.620543][ T8695] do_syscall_64+0xf3/0x230 [ 335.620564][ T8695] ? clear_bhb_loop+0x35/0x90 [ 335.620590][ T8695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.620611][ T8695] RIP: 0033:0x7fb5d018d169 [ 335.620626][ T8695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.620640][ T8695] RSP: 002b:00007fb5d0f80038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 335.620659][ T8695] RAX: ffffffffffffffda RBX: 00007fb5d03a6160 RCX: 00007fb5d018d169 [ 335.620672][ T8695] RDX: 0000000000000000 RSI: 00004000000000c0 RDI: 0000000000000007 [ 335.620682][ T8695] RBP: 00007fb5d0f80090 R08: 0000000000000000 R09: 0000000000000000 [ 335.620693][ T8695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.620703][ T8695] R13: 0000000000000000 R14: 00007fb5d03a6160 R15: 00007fffdd81fd58 [ 335.620730][ T8695] [ 336.030127][ T8694] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 336.112790][ T942] usb usb3-port1: unable to enumerate USB device [ 337.047975][ T8707] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 337.091636][ T8698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.888'. [ 337.329629][ T8715] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 338.819863][ T5931] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 338.879720][ T9] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 339.186199][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 339.451121][ T5931] usb 3-1: Using ep0 maxpacket: 8 [ 339.469014][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 339.481957][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 339.492817][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 339.503837][ T9] usb 5-1: SerialNumber: syz [ 339.512876][ T9] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 339.523749][ T5931] usb 3-1: config 251 has an invalid interface number: 243 but max is 0 [ 339.552870][ T5931] usb 3-1: config 251 has no interface number 0 [ 339.565439][ T5931] usb 3-1: config 251 interface 243 has no altsetting 0 [ 339.581871][ T5931] usb 3-1: New USB device found, idVendor=0ab4, idProduct=0014, bcdDevice=28.9a [ 339.594164][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.602672][ T5931] usb 3-1: Product: syz [ 339.606859][ T5931] usb 3-1: Manufacturer: syz [ 339.614556][ T5931] usb 3-1: SerialNumber: syz [ 339.617452][ T9] usb-storage 5-1:1.0: USB Mass Storage device detected [ 339.656327][ T9] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 339.688112][ T9] scsi host1: usb-storage 5-1:1.0 [ 340.604514][ T30] audit: type=1326 audit(1741507791.023:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8720 comm="syz.3.896" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe93658d169 code=0x0 [ 340.630770][ T9] usb 5-1: USB disconnect, device number 39 [ 340.653832][ T5931] esd_usb 3-1:251.243: sending version message failed [ 340.674366][ T5931] esd_usb 3-1:251.243: probe with driver esd_usb failed with error -22 [ 340.703332][ T5931] usb 3-1: USB disconnect, device number 27 [ 340.919949][ T942] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 341.699360][ T71] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 341.806881][ T942] usb 1-1: device descriptor read/64, error -71 [ 341.823139][ T8744] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 341.922989][ T71] usb 2-1: Using ep0 maxpacket: 32 [ 341.947097][ T71] usb 2-1: config 0 has an invalid interface number: 183 but max is 0 [ 341.968638][ T71] usb 2-1: config 0 has no interface number 0 [ 341.975436][ T71] usb 2-1: config 0 interface 183 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 528 [ 341.996699][ T71] usb 2-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 342.007193][ T71] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.080509][ T942] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 342.541008][ T71] usb 2-1: Product: syz [ 342.545201][ T71] usb 2-1: Manufacturer: syz [ 342.554912][ T71] usb 2-1: SerialNumber: syz [ 342.571262][ T71] usb 2-1: config 0 descriptor?? [ 342.576874][ T8739] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 342.669901][ T942] usb 1-1: device descriptor read/64, error -71 [ 342.786966][ T8739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.795549][ T8739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.940594][ T942] usb usb1-port1: attempt power cycle [ 343.500239][ T942] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 343.967106][ T71] net1080 2-1:0.183: probe with driver net1080 failed with error -71 [ 343.992741][ T71] usb 2-1: USB disconnect, device number 27 [ 343.999470][ T942] usb 1-1: device descriptor read/8, error -71 [ 344.157026][ T8771] 9pnet_fd: Insufficient options for proto=fd [ 345.617372][ T8785] CUSE: unknown device info "ÿ" [ 345.623531][ T8785] CUSE: zero length info key specified [ 346.669102][ T10] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 346.887263][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 346.896437][ T10] usb 1-1: config 0 has no interface number 0 [ 346.995026][ T10] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 347.009467][ T8752] syz.2.905 (8752) used greatest stack depth: 17296 bytes left [ 347.056971][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.281471][ T10] usb 1-1: Product: syz [ 347.311697][ T10] usb 1-1: Manufacturer: syz [ 347.347632][ T10] usb 1-1: SerialNumber: syz [ 347.415307][ T10] usb 1-1: config 0 descriptor?? [ 347.479073][ T942] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 347.583857][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.639144][ T942] usb 2-1: Using ep0 maxpacket: 8 [ 347.650030][ T942] usb 2-1: config 251 has an invalid interface number: 243 but max is 0 [ 347.658443][ T942] usb 2-1: config 251 has no interface number 0 [ 347.672489][ T10] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 347.696648][ T942] usb 2-1: config 251 interface 243 has no altsetting 0 [ 347.700358][ T10] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 347.716147][ T942] usb 2-1: New USB device found, idVendor=0ab4, idProduct=0014, bcdDevice=28.9a [ 347.739699][ T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 347.744037][ T942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.762179][ T10] usb 1-1: media controller created [ 347.770396][ T942] usb 2-1: Product: syz [ 347.775822][ T942] usb 2-1: Manufacturer: syz [ 347.783661][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.789028][ T942] usb 2-1: SerialNumber: syz [ 347.822970][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 347.884348][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.988597][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.030932][ T942] esd_usb 2-1:251.243: sending version message failed [ 348.037831][ T942] esd_usb 2-1:251.243: probe with driver esd_usb failed with error -22 [ 348.069884][ T942] usb 2-1: USB disconnect, device number 28 [ 348.174975][ T5931] usb 1-1: USB disconnect, device number 43 [ 348.217733][ T36] bridge_slave_1: left allmulticast mode [ 348.234754][ T36] bridge_slave_1: left promiscuous mode [ 348.257537][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.267432][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 348.280248][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 348.280896][ T36] bridge_slave_0: left allmulticast mode [ 348.295062][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 348.304451][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 348.306464][ T36] bridge_slave_0: left promiscuous mode [ 348.319700][ T5838] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 348.327739][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.335938][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 349.005904][ T5931] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 349.673274][ T5931] usb 2-1: config 0 has an invalid interface number: 228 but max is 0 [ 349.685541][ T5931] usb 2-1: config 0 has no interface number 0 [ 349.695704][ T5931] usb 2-1: config 0 interface 228 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 349.719492][ T5931] usb 2-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=34.b1 [ 349.759041][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.782669][ T5931] usb 2-1: Product: syz [ 349.786911][ T5931] usb 2-1: Manufacturer: syz [ 349.844849][ T5931] usb 2-1: SerialNumber: syz [ 349.864850][ T5931] usb 2-1: config 0 descriptor?? [ 349.877875][ T5931] bfusb 2-1:0.228: probe with driver bfusb failed with error -5 [ 350.410867][ T5838] Bluetooth: hci0: command tx timeout [ 351.225423][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.273271][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.295764][ T36] bond0 (unregistering): Released all slaves [ 351.524088][ T36] bond1 (unregistering): Released all slaves [ 351.539449][ T36] bond2 (unregistering): Released all slaves [ 351.799743][ T8817] FAULT_INJECTION: forcing a failure. [ 351.799743][ T8817] name failslab, interval 1, probability 0, space 0, times 0 [ 351.871676][ T8817] CPU: 0 UID: 0 PID: 8817 Comm: syz.4.926 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 351.871704][ T8817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 351.871714][ T8817] Call Trace: [ 351.871719][ T8817] [ 351.871727][ T8817] dump_stack_lvl+0x241/0x360 [ 351.871749][ T8817] ? __pfx_dump_stack_lvl+0x10/0x10 [ 351.871765][ T8817] ? __pfx__printk+0x10/0x10 [ 351.871800][ T8817] should_fail_ex+0x40a/0x550 [ 351.871827][ T8817] should_failslab+0xac/0x100 [ 351.871852][ T8817] kmem_cache_alloc_node_noprof+0x77/0x380 [ 351.871869][ T8817] ? __alloc_skb+0x1c3/0x440 [ 351.871895][ T8817] __alloc_skb+0x1c3/0x440 [ 351.871915][ T8817] ? lockdep_init_map_type+0xa1/0x910 [ 351.871938][ T8817] ? __pfx___alloc_skb+0x10/0x10 [ 351.871959][ T8817] ? bpf_trace_run2+0x1fc/0x540 [ 351.871977][ T8817] ? bpf_trace_run2+0x36e/0x540 [ 351.872002][ T8817] hci_cmd_sync_alloc+0x3d/0x370 [ 351.872025][ T8817] ? __raw_spin_lock_init+0x45/0x100 [ 351.872047][ T8817] __hci_cmd_sync_sk+0x227/0xf70 [ 351.872082][ T8817] ? __pfx___hci_cmd_sync_sk+0x10/0x10 [ 351.872113][ T8817] ? __pfx_hci_disable_advertising_sync+0x10/0x10 [ 351.872129][ T8817] ? rcu_is_watching+0x15/0xb0 [ 351.872146][ T8817] ? trace_contention_end+0x3c/0x120 [ 351.872162][ T8817] ? __mutex_lock+0x397/0x1010 [ 351.872187][ T8817] ? hci_pause_advertising_sync+0x1ee/0x3c0 [ 351.872211][ T8817] hci_suspend_sync+0x2cd/0xca0 [ 351.872232][ T8817] ? hci_suspend_dev+0x2b6/0x4c0 [ 351.872254][ T8817] ? __pfx_hci_suspend_sync+0x10/0x10 [ 351.872279][ T8817] ? __mutex_unlock_slowpath+0x227/0x800 [ 351.872300][ T8817] ? __pfx_wait_for_completion+0x10/0x10 [ 351.872321][ T8817] ? hci_cmd_sync_cancel_sync+0xcc/0x190 [ 351.872340][ T8817] hci_suspend_dev+0x2be/0x4c0 [ 351.872356][ T8817] ? __init_swait_queue_head+0xae/0x150 [ 351.872378][ T8817] ? __pfx_hci_suspend_dev+0x10/0x10 [ 351.872394][ T8817] ? rcu_barrier+0x42e/0x530 [ 351.872419][ T8817] hci_suspend_notifier+0xf2/0x2b0 [ 351.872440][ T8817] notifier_call_chain+0x1a5/0x3f0 [ 351.872466][ T8817] blocking_notifier_call_chain_robust+0xe8/0x1e0 [ 351.872490][ T8817] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 351.872533][ T8817] ? chrdev_open+0xfb/0x600 [ 351.872562][ T8817] pm_notifier_call_chain_robust+0x2c/0x60 [ 351.872583][ T8817] snapshot_open+0x19b/0x280 [ 351.872602][ T8817] ? __pfx_snapshot_open+0x10/0x10 [ 351.872624][ T8817] misc_open+0x2cc/0x340 [ 351.872646][ T8817] chrdev_open+0x521/0x600 [ 351.872672][ T8817] ? __pfx_chrdev_open+0x10/0x10 [ 351.872692][ T8817] ? file_set_fsnotify_mode_from_watchers+0x123/0x640 [ 351.872716][ T8817] ? __pfx_chrdev_open+0x10/0x10 [ 351.872736][ T8817] do_dentry_open+0xdec/0x1960 [ 351.872764][ T8817] ? vfs_open+0x31/0x370 [ 351.872788][ T8817] vfs_open+0x3b/0x370 [ 351.872811][ T8817] path_openat+0x2c81/0x3590 [ 351.872857][ T8817] ? __pfx_path_openat+0x10/0x10 [ 351.872894][ T8817] do_filp_open+0x27f/0x4e0 [ 351.872915][ T8817] ? __pfx_do_filp_open+0x10/0x10 [ 351.872932][ T8817] ? do_raw_spin_lock+0x14f/0x370 [ 351.872991][ T8817] do_sys_openat2+0x13e/0x1d0 [ 351.873007][ T8817] ? __pfx_do_sys_openat2+0x10/0x10 [ 351.873022][ T8817] ? __fget_files+0x2a/0x410 [ 351.873042][ T8817] ? __fget_files+0x2a/0x410 [ 351.873066][ T8817] __x64_sys_openat+0x247/0x2a0 [ 351.873086][ T8817] ? __pfx___x64_sys_openat+0x10/0x10 [ 351.873108][ T8817] ? do_syscall_64+0x100/0x230 [ 351.873133][ T8817] ? do_syscall_64+0xb6/0x230 [ 351.873156][ T8817] do_syscall_64+0xf3/0x230 [ 351.873177][ T8817] ? clear_bhb_loop+0x35/0x90 [ 351.873202][ T8817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.873220][ T8817] RIP: 0033:0x7fa1e7b8d169 [ 351.873235][ T8817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.873245][ T8817] RSP: 002b:00007fa1e59f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 351.873260][ T8817] RAX: ffffffffffffffda RBX: 00007fa1e7da5fa0 RCX: 00007fa1e7b8d169 [ 351.873270][ T8817] RDX: 0000000000040000 RSI: 00004000000002c0 RDI: ffffffffffffff9c [ 351.873279][ T8817] RBP: 00007fa1e59f6090 R08: 0000000000000000 R09: 0000000000000000 [ 351.873287][ T8817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.873294][ T8817] R13: 0000000000000000 R14: 00007fa1e7da5fa0 R15: 00007fff7b864ef8 [ 351.873315][ T8817] [ 352.328765][ T8817] Bluetooth: hci1: no memory for command (opcode 0x0c1a) [ 352.337516][ T8817] Bluetooth: hci1: Opcode 0x0c1a failed: -12 [ 352.357852][ T8817] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 352.440972][ T8817] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 352.447278][ T8817] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 352.477648][ T8817] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 352.490363][ T5838] Bluetooth: hci0: command 0x041b tx timeout [ 352.504477][ T8817] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 352.520541][ T8817] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 352.527693][ T8817] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 352.537991][ T8817] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 353.379308][ T8817] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 353.398600][ T8817] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 353.455832][ T8826] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 353.507685][ T5901] usb 2-1: USB disconnect, device number 29 [ 353.652173][ T8856] exFAT-fs (nbd4): mounting with "discard" option, but the device does not support discard [ 353.688408][ T8856] syz.4.931: attempt to access beyond end of device [ 353.688408][ T8856] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 353.735679][ T8856] exFAT-fs (nbd4): unable to read boot sector [ 353.747278][ T36] hsr_slave_0: left promiscuous mode [ 353.758356][ T8856] exFAT-fs (nbd4): failed to read boot sector [ 353.786256][ T36] hsr_slave_1: left promiscuous mode [ 353.794526][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.829263][ T5830] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 353.847243][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.942471][ T8856] exFAT-fs (nbd4): failed to recognize exfat type [ 354.422368][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 354.423528][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.448121][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.485358][ T36] veth1_macvtap: left promiscuous mode [ 354.493062][ T36] veth0_macvtap: left promiscuous mode [ 354.499029][ T36] veth1_vlan: left promiscuous mode [ 354.499219][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 354.504459][ T5825] Bluetooth: hci2: command 0x0406 tx timeout [ 354.517370][ T36] veth0_vlan: left promiscuous mode [ 354.570096][ T5825] Bluetooth: hci0: command 0x041b tx timeout [ 354.658752][ T5825] Bluetooth: hci4: command 0x0405 tx timeout [ 354.719519][ T5830] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 354.729016][ T5830] usb 3-1: config 0 has no interface number 0 [ 354.738709][ T5830] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 354.749513][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.757550][ T5830] usb 3-1: Product: syz [ 354.761965][ T5830] usb 3-1: Manufacturer: syz [ 354.766567][ T5830] usb 3-1: SerialNumber: syz [ 354.774673][ T5830] usb 3-1: config 0 descriptor?? [ 355.509120][ T5830] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 355.541089][ T5830] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 355.572528][ T5830] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 355.592986][ T5830] usb 3-1: media controller created [ 355.631713][ T5830] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 356.086226][ T942] usb 3-1: USB disconnect, device number 28 [ 356.427081][ T5901] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 356.569175][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 356.575360][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 356.582348][ T5901] usb 1-1: Using ep0 maxpacket: 16 [ 356.589424][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 356.600764][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 356.612865][ T5901] usb 1-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 356.630140][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.638454][ T5901] usb 1-1: Product: syz [ 356.655339][ T5901] usb 1-1: Manufacturer: syz [ 356.660513][ T5901] usb 1-1: SerialNumber: syz [ 356.675994][ T5901] usb 1-1: config 0 descriptor?? [ 356.684022][ T5901] keyspan 1-1:0.0: Keyspan 2 port adapter converter detected [ 356.703634][ T5901] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 87 [ 356.713639][ T5901] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7 [ 356.733308][ T5901] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 356.743198][ T5838] Bluetooth: hci4: command 0x0405 tx timeout [ 356.743216][ T5825] Bluetooth: hci0: command 0x041b tx timeout [ 356.755176][ T5901] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 356.780740][ T5901] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 356.793706][ T5901] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85 [ 356.803988][ T5901] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5 [ 356.824461][ T5901] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 356.833646][ T5901] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 356.842822][ T5901] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 356.854975][ T5901] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 86 [ 356.864241][ T5901] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6 [ 356.879422][ T5901] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 356.897802][ T5901] usb 1-1: USB disconnect, device number 44 [ 356.909950][ T5901] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 356.922106][ T5901] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 356.932885][ T5901] keyspan 1-1:0.0: device disconnected [ 356.940151][ T71] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 357.059710][ T36] team0 (unregistering): Port device team_slave_1 removed [ 357.095081][ T71] usb 2-1: Using ep0 maxpacket: 32 [ 357.105665][ T71] usb 2-1: unable to get BOS descriptor or descriptor too short [ 357.132929][ T71] usb 2-1: config 0 has an invalid interface number: 251 but max is 1 [ 357.141508][ T71] usb 2-1: config 0 has an invalid interface number: 2 but max is 1 [ 357.149766][ T71] usb 2-1: config 0 has no interface number 0 [ 357.158041][ T71] usb 2-1: config 0 has no interface number 1 [ 357.172479][ T71] usb 2-1: config 0 interface 251 has no altsetting 0 [ 357.179719][ T71] usb 2-1: config 0 interface 2 has no altsetting 0 [ 357.195509][ T71] usb 2-1: New USB device found, idVendor=413c, idProduct=81a4, bcdDevice=ae.9f [ 357.207601][ T71] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.216617][ T71] usb 2-1: Product: syz [ 357.221238][ T71] usb 2-1: Manufacturer: syz [ 357.225974][ T71] usb 2-1: SerialNumber: syz [ 357.240734][ T71] usb 2-1: config 0 descriptor?? [ 357.364088][ T36] team0 (unregistering): Port device team_slave_0 removed [ 357.864824][ T71] usb 2-1: selecting invalid altsetting 0 [ 357.900420][ T71] usb 2-1: Could not set interface, error -22 [ 357.963871][ T71] usb 2-1: USB disconnect, device number 30 [ 358.379403][ T5830] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 358.553914][ T5830] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 358.859129][ T5825] Bluetooth: hci0: command 0x041b tx timeout [ 359.299356][ T5830] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 359.305193][ T8796] chnl_net:caif_netlink_parms(): no params data found [ 359.324132][ T5830] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 359.337067][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 359.351151][ T5830] usb 1-1: SerialNumber: syz [ 359.581291][ T5830] usb 1-1: 0:2 : does not exist [ 359.694568][ T8796] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.713146][ T8796] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.718291][ T5830] usb 1-1: USB disconnect, device number 45 [ 359.896119][ T8796] bridge_slave_0: entered allmulticast mode [ 359.908644][ T8796] bridge_slave_0: entered promiscuous mode [ 360.702491][ T8796] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.709825][ T8796] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.717048][ T8796] bridge_slave_1: entered allmulticast mode [ 360.724643][ T8796] bridge_slave_1: entered promiscuous mode [ 360.890131][ T5825] Bluetooth: hci0: command 0x041b tx timeout [ 361.741848][ T8796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.784655][ T8796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.751979][ T8924] syz.1.948 (8924): /proc/8915/oom_adj is deprecated, please use /proc/8915/oom_score_adj instead. [ 362.969183][ T5825] Bluetooth: hci0: command 0x041b tx timeout [ 363.042578][ T8796] team0: Port device team_slave_0 added [ 363.455530][ T8796] team0: Port device team_slave_1 added [ 363.527669][ T8796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.537658][ T8796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.569185][ T8796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.662129][ T8796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.728276][ T8796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.765418][ T71] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 363.856716][ T8796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.940840][ T71] usb 1-1: config index 0 descriptor too short (expected 51821, got 18) [ 364.018722][ T71] usb 1-1: config 228 has an invalid descriptor of length 119, skipping remainder of the config [ 364.179677][ T5902] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 364.189273][ T71] usb 1-1: config 228 has 0 interfaces, different from the descriptor's value: 27 [ 364.250455][ T71] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.45 [ 364.335515][ T71] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.360890][ T71] usb 1-1: Product: syz [ 364.365238][ T71] usb 1-1: Manufacturer: syz [ 364.371753][ T71] usb 1-1: SerialNumber: syz [ 364.399041][ T5902] usb 2-1: Using ep0 maxpacket: 16 [ 364.410626][ T8796] hsr_slave_0: entered promiscuous mode [ 364.417050][ T5902] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 364.425894][ T8796] hsr_slave_1: entered promiscuous mode [ 364.431831][ T5902] usb 2-1: config 0 has no interface number 0 [ 364.439846][ T8796] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 364.447529][ T5902] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.459775][ T8796] Cannot create hsr debugfs directory [ 364.465985][ T5902] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.486001][ T5902] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 364.505261][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.518085][ T5902] usb 2-1: config 0 descriptor?? [ 364.593256][ T71] usb 1-1: USB disconnect, device number 46 [ 365.378553][ T30] audit: type=1326 audit(1741507815.813:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8935 comm="syz.4.954" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa1e7b8d169 code=0x0 [ 365.647048][ T30] audit: type=1326 audit(1741507816.073:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8938 comm="syz.2.955" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efef598d169 code=0x0 [ 365.922525][ T5902] hid (null): nested delimiters [ 365.979958][ T5902] usb 2-1: USB disconnect, device number 31 [ 366.024469][ T8944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.956'. [ 366.053568][ T8944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.956'. [ 366.099934][ T8796] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 366.131993][ T8796] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 366.161770][ T8796] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 366.477163][ T8796] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 369.173285][ T8967] 9pnet_fd: Insufficient options for proto=fd [ 369.182054][ T8796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.203341][ T8796] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.256324][ T7783] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.263592][ T7783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.316612][ T7783] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.323825][ T7783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.417479][ T8796] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 369.428313][ T8796] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 369.759279][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 369.770886][ T8796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.909391][ T8993] netlink: 12 bytes leftover after parsing attributes in process `syz.0.972'. [ 370.064884][ T9] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 370.076379][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.126579][ T9] usb 3-1: config 0 descriptor?? [ 370.384219][ T9003] netlink: 32 bytes leftover after parsing attributes in process `syz.4.974'. [ 370.475431][ T8796] veth0_vlan: entered promiscuous mode [ 370.531391][ T8796] veth1_vlan: entered promiscuous mode [ 370.588066][ T9] elan 0003:04F3:0755.0013: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 370.611598][ T8796] veth0_macvtap: entered promiscuous mode [ 370.620737][ T9010] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 370.637545][ T8796] veth1_macvtap: entered promiscuous mode [ 370.643806][ T71] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 370.670386][ T8796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.681492][ T8796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.693241][ T8796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.745972][ T8796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.767569][ T8796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.783224][ T8796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.795295][ T8975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.804074][ T8975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.829628][ T8796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.848154][ T8796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.862456][ T8796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.873300][ T71] usb 1-1: Using ep0 maxpacket: 16 [ 370.883225][ T8796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.898106][ T8796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.899266][ T71] usb 1-1: too many configurations: 112, using maximum allowed: 8 [ 370.911741][ T8796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.936072][ T71] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 370.947165][ T8796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.948583][ T71] usb 1-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 370.973128][ T71] usb 1-1: Product: syz [ 371.037786][ T8796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.065940][ T8796] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.078415][ T8796] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.082688][ T71] usb 1-1: Manufacturer: syz [ 371.087856][ T8796] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.110855][ T9014] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 371.145522][ T8796] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.156952][ T71] r8152-cfgselector 1-1: Unknown version 0x0000 [ 371.175802][ T71] r8152-cfgselector 1-1: config 0 descriptor?? [ 371.192454][ T71] cdc_acm 1-1:0.0: Zero length descriptor references [ 371.206987][ T71] cdc_acm 1-1:0.0: probe with driver cdc_acm failed with error -22 [ 371.347077][ T10] usb 3-1: USB disconnect, device number 29 [ 371.375858][ T9021] FAULT_INJECTION: forcing a failure. [ 371.375858][ T9021] name failslab, interval 1, probability 0, space 0, times 0 [ 371.389541][ T9021] CPU: 1 UID: 0 PID: 9021 Comm: syz.1.980 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 371.389567][ T9021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 371.389577][ T9021] Call Trace: [ 371.389584][ T9021] [ 371.389592][ T9021] dump_stack_lvl+0x241/0x360 [ 371.389617][ T9021] ? __pfx_dump_stack_lvl+0x10/0x10 [ 371.389631][ T9021] ? __pfx__printk+0x10/0x10 [ 371.389646][ T9021] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 371.389657][ T9021] ? __pfx___might_resched+0x10/0x10 [ 371.389671][ T9021] should_fail_ex+0x40a/0x550 [ 371.389687][ T9021] should_failslab+0xac/0x100 [ 371.389702][ T9021] kmem_cache_alloc_node_noprof+0x77/0x380 [ 371.389711][ T9021] ? __alloc_skb+0x1c3/0x440 [ 371.389727][ T9021] __alloc_skb+0x1c3/0x440 [ 371.389742][ T9021] ? __pfx___alloc_skb+0x10/0x10 [ 371.389754][ T9021] ? __rcu_read_unlock+0xa1/0x110 [ 371.389767][ T9021] ? netlink_autobind+0xd6/0x2f0 [ 371.389779][ T9021] ? netlink_autobind+0x2b0/0x2f0 [ 371.389798][ T9021] netlink_sendmsg+0x634/0xcb0 [ 371.389814][ T9021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.389830][ T9021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.389839][ T9021] __sock_sendmsg+0x221/0x270 [ 371.389853][ T9021] ____sys_sendmsg+0x53a/0x860 [ 371.389866][ T9021] ? __pfx_____sys_sendmsg+0x10/0x10 [ 371.389874][ T9021] ? __fget_files+0x2a/0x410 [ 371.389885][ T9021] ? __fget_files+0x2a/0x410 [ 371.389899][ T9021] __sys_sendmsg+0x269/0x350 [ 371.389910][ T9021] ? __pfx___sys_sendmsg+0x10/0x10 [ 371.389940][ T9021] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 371.389954][ T9021] ? do_syscall_64+0x100/0x230 [ 371.389968][ T9021] ? do_syscall_64+0xb6/0x230 [ 371.389982][ T9021] do_syscall_64+0xf3/0x230 [ 371.389994][ T9021] ? clear_bhb_loop+0x35/0x90 [ 371.390009][ T9021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.390021][ T9021] RIP: 0033:0x7f162ed8d169 [ 371.390031][ T9021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.390039][ T9021] RSP: 002b:00007f162fbae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 371.390051][ T9021] RAX: ffffffffffffffda RBX: 00007f162efa6080 RCX: 00007f162ed8d169 [ 371.390058][ T9021] RDX: 0000000000000000 RSI: 0000400000000280 RDI: 0000000000000004 [ 371.390063][ T9021] RBP: 00007f162fbae090 R08: 0000000000000000 R09: 0000000000000000 [ 371.390069][ T9021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.390075][ T9021] R13: 0000000000000000 R14: 00007f162efa6080 R15: 00007ffd32ffc3c8 [ 371.390090][ T9021] [ 371.756571][ T9007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.863118][ T9007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.000505][ T9007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.041778][ T9007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.090492][ T9007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.159427][ T9007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.167904][ T9007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.192615][ T3646] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.199795][ T9007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.212775][ T9007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.221776][ T3646] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.265912][ T7783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.284940][ T7783] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.291155][ T9007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.395062][ T9] r8152-cfgselector 1-1: USB disconnect, device number 47 [ 372.451962][ T9033] netlink: 184 bytes leftover after parsing attributes in process `syz.4.984'. [ 374.064825][ T30] audit: type=1326 audit(1741507824.503:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9041 comm="syz.4.988" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa1e7b8d169 code=0x0 [ 374.067105][ T9051] netlink: 28 bytes leftover after parsing attributes in process `syz.0.990'. [ 374.213871][ T9052] netlink: 124 bytes leftover after parsing attributes in process `syz.2.989'. [ 374.307693][ T942] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 375.172077][ T942] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 375.199089][ T942] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 375.277462][ T9062] FAULT_INJECTION: forcing a failure. [ 375.277462][ T9062] name failslab, interval 1, probability 0, space 0, times 0 [ 375.290470][ T9062] CPU: 1 UID: 0 PID: 9062 Comm: syz.2.991 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 375.290494][ T9062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 375.290505][ T9062] Call Trace: [ 375.290515][ T9062] [ 375.290523][ T9062] dump_stack_lvl+0x241/0x360 [ 375.290547][ T9062] ? __pfx_dump_stack_lvl+0x10/0x10 [ 375.290564][ T9062] ? __pfx__printk+0x10/0x10 [ 375.290589][ T9062] ? kmem_cache_alloc_noprof+0x48/0x380 [ 375.290614][ T9062] ? __pfx___might_resched+0x10/0x10 [ 375.290638][ T9062] should_fail_ex+0x40a/0x550 [ 375.290666][ T9062] should_failslab+0xac/0x100 [ 375.290691][ T9062] ? security_file_alloc+0x32/0x310 [ 375.290713][ T9062] kmem_cache_alloc_noprof+0x70/0x380 [ 375.290742][ T9062] security_file_alloc+0x32/0x310 [ 375.290766][ T9062] init_file+0x96/0x2e0 [ 375.290787][ T9062] alloc_empty_file+0xb8/0x1d0 [ 375.290806][ T9062] alloc_file_pseudo+0x204/0x320 [ 375.290830][ T9062] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 375.290848][ T9062] ? rcu_is_watching+0x15/0xb0 [ 375.290866][ T9062] ? hugetlbfs_get_inode+0x45f/0x690 [ 375.290888][ T9062] ? alloc_fd+0x61a/0x690 [ 375.290909][ T9062] hugetlb_file_setup+0x38a/0x5c0 [ 375.290937][ T9062] __se_sys_memfd_create+0x351/0x7d0 [ 375.290958][ T9062] do_syscall_64+0xf3/0x230 [ 375.290980][ T9062] ? clear_bhb_loop+0x35/0x90 [ 375.291005][ T9062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.291026][ T9062] RIP: 0033:0x7efef598d169 [ 375.291041][ T9062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.291054][ T9062] RSP: 002b:00007efef6824038 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 375.291072][ T9062] RAX: ffffffffffffffda RBX: 00007efef5ba6160 RCX: 00007efef598d169 [ 375.291084][ T9062] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000400000000540 [ 375.291095][ T9062] RBP: 00007efef6824090 R08: 0000000000000000 R09: 0000000000000000 [ 375.291105][ T9062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.291115][ T9062] R13: 0000000000000000 R14: 00007efef5ba6160 R15: 00007ffc38a3f578 [ 375.291141][ T9062] [ 376.224181][ T942] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 376.233598][ T942] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 376.247247][ T942] usb 6-1: can't set config #1, error -71 [ 376.261253][ T942] usb 6-1: USB disconnect, device number 2 [ 376.434850][ T9067] netlink: 'syz.1.994': attribute type 7 has an invalid length. [ 376.862844][ T5901] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 377.153377][ T5901] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 377.169425][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.198635][ T5901] usb 3-1: Product: syz [ 377.218339][ T5901] usb 3-1: Manufacturer: syz [ 377.231192][ T5901] usb 3-1: SerialNumber: syz [ 377.247818][ T5901] usb 3-1: config 0 descriptor?? [ 377.273276][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 377.776001][ T9] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 377.784202][ T9] usb 6-1: config 0 has no interface number 0 [ 377.793677][ T5901] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 377.814536][ T9] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 377.824137][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.835515][ T5901] usb 3-1: USB disconnect, device number 30 [ 377.852331][ T9] usb 6-1: Product: syz [ 377.856714][ T9] usb 6-1: Manufacturer: syz [ 377.868015][ T9] usb 6-1: SerialNumber: syz [ 377.874205][ T9] usb 6-1: config 0 descriptor?? [ 378.145562][ T9] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 378.162640][ T9] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 378.174309][ T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 378.186430][ T9] usb 6-1: media controller created [ 379.185319][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 379.197784][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.204229][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.642481][ T30] audit: type=1326 audit(1741507830.083:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9096 comm="syz.4.1003" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa1e7b8d169 code=0x0 [ 379.760839][ T9] usb 6-1: USB disconnect, device number 3 [ 380.264055][ T9101] capability: warning: `syz.1.1005' uses 32-bit capabilities (legacy support in use) [ 380.437622][ T9102] netlink: 'syz.2.1004': attribute type 1 has an invalid length. [ 380.460219][ T9102] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1004'. [ 380.654455][ T9115] FAULT_INJECTION: forcing a failure. [ 380.654455][ T9115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 380.692334][ T9115] CPU: 0 UID: 0 PID: 9115 Comm: syz.4.1010 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 380.692360][ T9115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 380.692370][ T9115] Call Trace: [ 380.692376][ T9115] [ 380.692384][ T9115] dump_stack_lvl+0x241/0x360 [ 380.692408][ T9115] ? __pfx_dump_stack_lvl+0x10/0x10 [ 380.692425][ T9115] ? __pfx__printk+0x10/0x10 [ 380.692450][ T9115] ? __pfx_lock_release+0x10/0x10 [ 380.692474][ T9115] ? __lock_acquire+0x1397/0x2100 [ 380.692499][ T9115] should_fail_ex+0x40a/0x550 [ 380.692525][ T9115] _copy_from_user+0x2d/0xb0 [ 380.692546][ T9115] io_submit_one+0xc1/0x18a0 [ 380.692584][ T9115] ? __pfx_io_submit_one+0x10/0x10 [ 380.692607][ T9115] ? __might_fault+0xaa/0x120 [ 380.692627][ T9115] ? __pfx_lock_release+0x10/0x10 [ 380.692652][ T9115] ? lookup_ioctx+0x94/0x6a0 [ 380.692676][ T9115] ? __might_fault+0xaa/0x120 [ 380.692693][ T9115] ? __might_fault+0xc6/0x120 [ 380.692714][ T9115] __se_sys_io_submit+0x171/0x2e0 [ 380.692738][ T9115] ? __pfx___se_sys_io_submit+0x10/0x10 [ 380.692757][ T9115] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 380.692785][ T9115] ? do_syscall_64+0x100/0x230 [ 380.692810][ T9115] ? do_syscall_64+0xb6/0x230 [ 380.692841][ T9115] do_syscall_64+0xf3/0x230 [ 380.692862][ T9115] ? clear_bhb_loop+0x35/0x90 [ 380.692886][ T9115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.692905][ T9115] RIP: 0033:0x7fa1e7b8d169 [ 380.692918][ T9115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.692931][ T9115] RSP: 002b:00007fa1e59d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 380.692947][ T9115] RAX: ffffffffffffffda RBX: 00007fa1e7da6080 RCX: 00007fa1e7b8d169 [ 380.692957][ T9115] RDX: 00004000000001c0 RSI: 0000000000000001 RDI: 00007fa1e88ec000 [ 380.692966][ T9115] RBP: 00007fa1e59d5090 R08: 0000000000000000 R09: 0000000000000000 [ 380.692974][ T9115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.692981][ T9115] R13: 0000000000000000 R14: 00007fa1e7da6080 R15: 00007fff7b864ef8 [ 380.693000][ T9115] [ 380.933937][ T9121] FAULT_INJECTION: forcing a failure. [ 380.933937][ T9121] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 380.954847][ T9121] CPU: 0 UID: 0 PID: 9121 Comm: syz.5.1012 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 380.954876][ T9121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 380.954886][ T9121] Call Trace: [ 380.954892][ T9121] [ 380.954900][ T9121] dump_stack_lvl+0x241/0x360 [ 380.954926][ T9121] ? __pfx_dump_stack_lvl+0x10/0x10 [ 380.954943][ T9121] ? __pfx__printk+0x10/0x10 [ 380.954972][ T9121] ? snprintf+0xda/0x120 [ 380.954994][ T9121] should_fail_ex+0x40a/0x550 [ 380.955022][ T9121] _copy_to_user+0x31/0xb0 [ 380.955046][ T9121] simple_read_from_buffer+0xca/0x150 [ 380.955072][ T9121] proc_fail_nth_read+0x1e9/0x250 [ 380.955100][ T9121] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 380.955128][ T9121] ? rw_verify_area+0x243/0x630 [ 380.955147][ T9121] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 380.955173][ T9121] vfs_read+0x1f8/0xb40 [ 380.955194][ T9121] ? fdget_pos+0x254/0x320 [ 380.955212][ T9121] ? __pfx___mutex_lock+0x10/0x10 [ 380.955235][ T9121] ? __pfx_vfs_read+0x10/0x10 [ 380.955258][ T9121] ? __fget_files+0x2a/0x410 [ 380.955277][ T9121] ? __fget_files+0x395/0x410 [ 380.955292][ T9121] ? __fget_files+0x2a/0x410 [ 380.955317][ T9121] ksys_read+0x18f/0x2b0 [ 380.955339][ T9121] ? __pfx_ksys_read+0x10/0x10 [ 380.955359][ T9121] ? do_syscall_64+0x100/0x230 [ 380.955384][ T9121] ? do_syscall_64+0xb6/0x230 [ 380.955408][ T9121] do_syscall_64+0xf3/0x230 [ 380.955429][ T9121] ? clear_bhb_loop+0x35/0x90 [ 380.955453][ T9121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.955474][ T9121] RIP: 0033:0x7fc1f138bb7c [ 380.955490][ T9121] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 380.955504][ T9121] RSP: 002b:00007fc1f2101030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 380.955523][ T9121] RAX: ffffffffffffffda RBX: 00007fc1f15a5fa0 RCX: 00007fc1f138bb7c [ 380.955535][ T9121] RDX: 000000000000000f RSI: 00007fc1f21010a0 RDI: 0000000000000004 [ 380.955544][ T9121] RBP: 00007fc1f2101090 R08: 0000000000000000 R09: 0000000000000000 [ 380.955554][ T9121] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.955564][ T9121] R13: 0000000000000000 R14: 00007fc1f15a5fa0 R15: 00007ffec1fa7a78 [ 380.955591][ T9121] [ 382.229207][ T9132] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1014'. [ 402.747624][ T9149] ================================================================== [ 402.755717][ T9149] BUG: KASAN: vmalloc-out-of-bounds in vrealloc_noprof+0x34a/0x3d0 [ 402.763609][ T9149] Write of size 2097120 at addr ffffc90016c00020 by task syz.2.1020/9149 [ 402.772003][ T9149] [ 402.774309][ T9149] CPU: 0 UID: 0 PID: 9149 Comm: syz.2.1020 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 402.774322][ T9149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 402.774329][ T9149] Call Trace: [ 402.774335][ T9149] [ 402.774345][ T9149] dump_stack_lvl+0x241/0x360 [ 402.774360][ T9149] ? __pfx_dump_stack_lvl+0x10/0x10 [ 402.774369][ T9149] ? __pfx__printk+0x10/0x10 [ 402.774383][ T9149] ? _printk+0xd5/0x120 [ 402.774397][ T9149] print_report+0x16e/0x5b0 [ 402.774412][ T9149] ? __virt_addr_valid+0xbd/0x530 [ 402.774427][ T9149] ? vrealloc_noprof+0x34a/0x3d0 [ 402.774439][ T9149] kasan_report+0x143/0x180 [ 402.774452][ T9149] ? vrealloc_noprof+0x34a/0x3d0 [ 402.774465][ T9149] kasan_check_range+0x282/0x290 [ 402.774479][ T9149] __asan_memset+0x23/0x50 [ 402.774490][ T9149] vrealloc_noprof+0x34a/0x3d0 [ 402.774503][ T9149] push_insn_history+0x16f/0x6b0 [ 402.774517][ T9149] check_mem_access+0xe84/0x2140 [ 402.774530][ T9149] ? __lruvec_stat_mod_folio+0x7d/0x300 [ 402.774542][ T9149] ? __pfx_check_mem_access+0x10/0x10 [ 402.774554][ T9149] ? tnum_subreg+0x12/0x20 [ 402.774563][ T9149] ? reg_bounds_sanity_check+0x7b2/0xa20 [ 402.774577][ T9149] ? is_reg64+0x306/0x3a0 [ 402.774590][ T9149] ? __check_reg_arg+0x180/0x4d0 [ 402.774605][ T9149] do_check+0x7ded/0xfb10 [ 402.774619][ T9149] ? kasan_save_track+0x3f/0x80 [ 402.774630][ T9149] ? __kasan_kmalloc+0x98/0xb0 [ 402.774643][ T9149] ? __x64_sys_bpf+0x7c/0x90 [ 402.774661][ T9149] ? __pfx_do_check+0x10/0x10 [ 402.774672][ T9149] ? mark_reg_not_init+0xd4/0x4b0 [ 402.774684][ T9149] ? __asan_memset+0x23/0x50 [ 402.774696][ T9149] do_check_common+0x1268/0x1bd0 [ 402.774711][ T9149] bpf_check+0x5a44/0x1bcd0 [ 402.774725][ T9149] ? __pfx_validate_chain+0x10/0x10 [ 402.774735][ T9149] ? __pfx_validate_chain+0x10/0x10 [ 402.774745][ T9149] ? __pfx_validate_chain+0x10/0x10 [ 402.774755][ T9149] ? __pfx_validate_chain+0x10/0x10 [ 402.774763][ T9149] ? validate_chain+0x11e/0x5920 [ 402.774773][ T9149] ? __pfx_validate_chain+0x10/0x10 [ 402.774784][ T9149] ? validate_chain+0x11e/0x5920 [ 402.774793][ T9149] ? validate_chain+0x11e/0x5920 [ 402.774802][ T9149] ? mark_lock+0x9a/0x360 [ 402.774818][ T9149] ? validate_chain+0x11e/0x5920 [ 402.774827][ T9149] ? validate_chain+0x11e/0x5920 [ 402.774837][ T9149] ? validate_chain+0x11e/0x5920 [ 402.774845][ T9149] ? __pfx_validate_chain+0x10/0x10 [ 402.774855][ T9149] ? validate_chain+0x11e/0x5920 [ 402.774865][ T9149] ? validate_chain+0x11e/0x5920 [ 402.774875][ T9149] ? validate_chain+0x11e/0x5920 [ 402.774886][ T9149] ? __pfx_validate_chain+0x10/0x10 [ 402.774898][ T9149] ? __pfx_validate_chain+0x10/0x10 [ 402.774908][ T9149] ? __pfx_bpf_check+0x10/0x10 [ 402.774917][ T9149] ? mark_lock+0x9a/0x360 [ 402.774931][ T9149] ? __lock_acquire+0x1397/0x2100 [ 402.774945][ T9149] ? mark_lock+0x9a/0x360 [ 402.774959][ T9149] ? __lock_acquire+0x1397/0x2100 [ 402.774977][ T9149] ? __pfx_lock_acquire+0x10/0x10 [ 402.774990][ T9149] ? ktime_get_with_offset+0x8d/0x2a0 [ 402.775001][ T9149] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 402.775014][ T9149] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 402.775028][ T9149] ? ktime_get_with_offset+0x8d/0x2a0 [ 402.775038][ T9149] ? seqcount_lockdep_reader_access+0x157/0x220 [ 402.775049][ T9149] ? lockdep_hardirqs_on+0x99/0x150 [ 402.775062][ T9149] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 402.775073][ T9149] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 402.775087][ T9149] ? __check_object_size+0x8e/0x730 [ 402.775101][ T9149] ? __asan_memset+0x23/0x50 [ 402.775112][ T9149] ? bpf_obj_name_cpy+0x18a/0x1d0 [ 402.775121][ T9149] bpf_prog_load+0x1664/0x20e0 [ 402.775137][ T9149] ? __pfx_bpf_prog_load+0x10/0x10 [ 402.775149][ T9149] ? __pfx___might_resched+0x10/0x10 [ 402.775163][ T9149] ? __might_fault+0xaa/0x120 [ 402.775176][ T9149] __sys_bpf+0x4ea/0x820 [ 402.775188][ T9149] ? __pfx___sys_bpf+0x10/0x10 [ 402.775203][ T9149] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 402.775216][ T9149] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 402.775229][ T9149] ? do_syscall_64+0x100/0x230 [ 402.775243][ T9149] __x64_sys_bpf+0x7c/0x90 [ 402.775254][ T9149] do_syscall_64+0xf3/0x230 [ 402.775267][ T9149] ? clear_bhb_loop+0x35/0x90 [ 402.775281][ T9149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.775295][ T9149] RIP: 0033:0x7efef598d169 [ 402.775305][ T9149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.775313][ T9149] RSP: 002b:00007efef6866038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 402.775324][ T9149] RAX: ffffffffffffffda RBX: 00007efef5ba5fa0 RCX: 00007efef598d169 [ 402.775332][ T9149] RDX: 0000000000000094 RSI: 0000400000000040 RDI: 0000000000000005 [ 402.775342][ T9149] RBP: 00007efef5a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 402.775349][ T9149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 402.775354][ T9149] R13: 0000000000000000 R14: 00007efef5ba5fa0 R15: 00007ffc38a3f578 [ 402.775365][ T9149] [ 402.775368][ T9149] [ 403.263172][ T9149] The buggy address belongs to the virtual mapping at [ 403.263172][ T9149] [ffffc90016800000, ffffc90016e01000) created by: [ 403.263172][ T9149] kvrealloc_noprof+0xc1/0x150 [ 403.281058][ T9149] [ 403.283375][ T9149] The buggy address belongs to the physical page: [ 403.289782][ T9149] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4e000 [ 403.298614][ T9149] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 403.305707][ T9149] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 403.314559][ T9149] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 403.323122][ T9149] page dumped because: kasan: bad access detected [ 403.329519][ T9149] page_owner tracks the page as allocated [ 403.335222][ T9149] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102cc2(GFP_HIGHUSER|__GFP_NOWARN), pid 9149, tgid 9148 (syz.2.1020), ts 402745579081, free_ts 15674662403 [ 403.352483][ T9149] post_alloc_hook+0x1f4/0x240 [ 403.357232][ T9149] get_page_from_freelist+0x3651/0x37a0 [ 403.362764][ T9149] __alloc_frozen_pages_noprof+0x292/0x710 [ 403.368548][ T9149] alloc_pages_mpol+0x311/0x660 [ 403.373380][ T9149] alloc_pages_noprof+0x121/0x190 [ 403.378390][ T9149] __vmalloc_node_range_noprof+0x9c6/0x1380 [ 403.384301][ T9149] __kvmalloc_node_noprof+0x142/0x190 [ 403.389653][ T9149] kvrealloc_noprof+0xc1/0x150 [ 403.394394][ T9149] push_insn_history+0x16f/0x6b0 [ 403.399312][ T9149] do_check+0x6a0e/0xfb10 [ 403.403622][ T9149] do_check_common+0x1268/0x1bd0 [ 403.408582][ T9149] bpf_check+0x5a44/0x1bcd0 [ 403.413091][ T9149] bpf_prog_load+0x1664/0x20e0 [ 403.417844][ T9149] __sys_bpf+0x4ea/0x820 [ 403.422074][ T9149] __x64_sys_bpf+0x7c/0x90 [ 403.426485][ T9149] do_syscall_64+0xf3/0x230 [ 403.430981][ T9149] page last free pid 1 tgid 1 stack trace: [ 403.436775][ T9149] free_frozen_pages+0xe04/0x10e0 [ 403.441802][ T9149] free_contig_range+0x14c/0x430 [ 403.446726][ T9149] destroy_args+0x94/0x4b0 [ 403.451124][ T9149] debug_vm_pgtable+0x551/0x590 [ 403.455961][ T9149] do_one_initcall+0x248/0x930 [ 403.460709][ T9149] do_initcall_level+0x157/0x210 [ 403.465628][ T9149] do_initcalls+0x71/0xd0 [ 403.469941][ T9149] kernel_init_freeable+0x435/0x5d0 [ 403.475121][ T9149] kernel_init+0x1d/0x2b0 [ 403.479447][ T9149] ret_from_fork+0x4b/0x80 [ 403.483844][ T9149] ret_from_fork_asm+0x1a/0x30 [ 403.488603][ T9149] [ 403.490933][ T9149] Memory state around the buggy address: [ 403.496544][ T9149] ffffc90016bfff00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.504602][ T9149] ffffc90016bfff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.512662][ T9149] >ffffc90016c00000: 00 00 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 403.520702][ T9149] ^ [ 403.525809][ T9149] ffffc90016c00080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 403.533867][ T9149] ffffc90016c00100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 403.541912][ T9149] ================================================================== [ 403.552114][ T9149] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 403.559306][ T9149] CPU: 0 UID: 0 PID: 9149 Comm: syz.2.1020 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 403.569955][ T9149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 403.579998][ T9149] Call Trace: [ 403.583265][ T9149] [ 403.586176][ T9149] dump_stack_lvl+0x241/0x360 [ 403.590837][ T9149] ? __pfx_dump_stack_lvl+0x10/0x10 [ 403.596013][ T9149] ? __pfx__printk+0x10/0x10 [ 403.600605][ T9149] ? preempt_schedule+0xe1/0xf0 [ 403.605439][ T9149] ? vscnprintf+0x5d/0x90 [ 403.609753][ T9149] panic+0x349/0x880 [ 403.613634][ T9149] ? check_panic_on_warn+0x21/0xb0 [ 403.618742][ T9149] ? __pfx_panic+0x10/0x10 [ 403.623142][ T9149] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 403.629104][ T9149] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 403.635410][ T9149] ? print_report+0x519/0x5b0 [ 403.640084][ T9149] check_panic_on_warn+0x86/0xb0 [ 403.645014][ T9149] ? vrealloc_noprof+0x34a/0x3d0 [ 403.649945][ T9149] end_report+0x77/0x160 [ 403.654191][ T9149] kasan_report+0x154/0x180 [ 403.658954][ T9149] ? vrealloc_noprof+0x34a/0x3d0 [ 403.663897][ T9149] kasan_check_range+0x282/0x290 [ 403.668831][ T9149] __asan_memset+0x23/0x50 [ 403.673230][ T9149] vrealloc_noprof+0x34a/0x3d0 [ 403.677976][ T9149] push_insn_history+0x16f/0x6b0 [ 403.683076][ T9149] check_mem_access+0xe84/0x2140 [ 403.687997][ T9149] ? __lruvec_stat_mod_folio+0x7d/0x300 [ 403.693528][ T9149] ? __pfx_check_mem_access+0x10/0x10 [ 403.698883][ T9149] ? tnum_subreg+0x12/0x20 [ 403.703286][ T9149] ? reg_bounds_sanity_check+0x7b2/0xa20 [ 403.708907][ T9149] ? is_reg64+0x306/0x3a0 [ 403.713281][ T9149] ? __check_reg_arg+0x180/0x4d0 [ 403.718231][ T9149] do_check+0x7ded/0xfb10 [ 403.722560][ T9149] ? kasan_save_track+0x3f/0x80 [ 403.727400][ T9149] ? __kasan_kmalloc+0x98/0xb0 [ 403.732154][ T9149] ? __x64_sys_bpf+0x7c/0x90 [ 403.736735][ T9149] ? __pfx_do_check+0x10/0x10 [ 403.741400][ T9149] ? mark_reg_not_init+0xd4/0x4b0 [ 403.746410][ T9149] ? __asan_memset+0x23/0x50 [ 403.751038][ T9149] do_check_common+0x1268/0x1bd0 [ 403.756016][ T9149] bpf_check+0x5a44/0x1bcd0 [ 403.760527][ T9149] ? __pfx_validate_chain+0x10/0x10 [ 403.765727][ T9149] ? __pfx_validate_chain+0x10/0x10 [ 403.770939][ T9149] ? __pfx_validate_chain+0x10/0x10 [ 403.776133][ T9149] ? __pfx_validate_chain+0x10/0x10 [ 403.781321][ T9149] ? validate_chain+0x11e/0x5920 [ 403.786259][ T9149] ? __pfx_validate_chain+0x10/0x10 [ 403.791474][ T9149] ? validate_chain+0x11e/0x5920 [ 403.796411][ T9149] ? validate_chain+0x11e/0x5920 [ 403.801343][ T9149] ? mark_lock+0x9a/0x360 [ 403.805701][ T9149] ? validate_chain+0x11e/0x5920 [ 403.810648][ T9149] ? validate_chain+0x11e/0x5920 [ 403.815570][ T9149] ? validate_chain+0x11e/0x5920 [ 403.820489][ T9149] ? __pfx_validate_chain+0x10/0x10 [ 403.825672][ T9149] ? validate_chain+0x11e/0x5920 [ 403.830594][ T9149] ? validate_chain+0x11e/0x5920 [ 403.835512][ T9149] ? validate_chain+0x11e/0x5920 [ 403.840430][ T9149] ? __pfx_validate_chain+0x10/0x10 [ 403.845612][ T9149] ? __pfx_validate_chain+0x10/0x10 [ 403.850795][ T9149] ? __pfx_bpf_check+0x10/0x10 [ 403.855543][ T9149] ? mark_lock+0x9a/0x360 [ 403.859862][ T9149] ? __lock_acquire+0x1397/0x2100 [ 403.864891][ T9149] ? mark_lock+0x9a/0x360 [ 403.869212][ T9149] ? __lock_acquire+0x1397/0x2100 [ 403.874223][ T9149] ? __pfx_lock_acquire+0x10/0x10 [ 403.879229][ T9149] ? ktime_get_with_offset+0x8d/0x2a0 [ 403.884585][ T9149] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 403.890558][ T9149] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 403.896876][ T9149] ? ktime_get_with_offset+0x8d/0x2a0 [ 403.902774][ T9149] ? seqcount_lockdep_reader_access+0x157/0x220 [ 403.909020][ T9149] ? lockdep_hardirqs_on+0x99/0x150 [ 403.914235][ T9149] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 403.920465][ T9149] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 403.927037][ T9149] ? __check_object_size+0x8e/0x730 [ 403.932229][ T9149] ? __asan_memset+0x23/0x50 [ 403.936817][ T9149] ? bpf_obj_name_cpy+0x18a/0x1d0 [ 403.941821][ T9149] bpf_prog_load+0x1664/0x20e0 [ 403.946568][ T9149] ? __pfx_bpf_prog_load+0x10/0x10 [ 403.951660][ T9149] ? __pfx___might_resched+0x10/0x10 [ 403.956925][ T9149] ? __might_fault+0xaa/0x120 [ 403.961579][ T9149] __sys_bpf+0x4ea/0x820 [ 403.965804][ T9149] ? __pfx___sys_bpf+0x10/0x10 [ 403.970550][ T9149] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 403.976515][ T9149] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 403.982824][ T9149] ? do_syscall_64+0x100/0x230 [ 403.987572][ T9149] __x64_sys_bpf+0x7c/0x90 [ 403.991976][ T9149] do_syscall_64+0xf3/0x230 [ 403.996468][ T9149] ? clear_bhb_loop+0x35/0x90 [ 404.001129][ T9149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.007008][ T9149] RIP: 0033:0x7efef598d169 [ 404.011420][ T9149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 404.031017][ T9149] RSP: 002b:00007efef6866038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 404.039425][ T9149] RAX: ffffffffffffffda RBX: 00007efef5ba5fa0 RCX: 00007efef598d169 [ 404.047388][ T9149] RDX: 0000000000000094 RSI: 0000400000000040 RDI: 0000000000000005 [ 404.055357][ T9149] RBP: 00007efef5a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 404.063320][ T9149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 404.071282][ T9149] R13: 0000000000000000 R14: 00007efef5ba5fa0 R15: 00007ffc38a3f578 [ 404.079244][ T9149] [ 404.082548][ T9149] Kernel Offset: disabled [ 404.086860][ T9149] Rebooting in 86400 seconds..