last executing test programs: 19m40.4829987s ago: executing program 2 (id=657): r0 = socket$inet(0x2, 0x4, 0x3) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000000)={{0x33, @multicast2, 0x4e20, 0x1, 'dh\x00', 0x20, 0x8, 0x11}, {@empty, 0x4e22, 0x2000, 0x7, 0x0, 0xc2}}, 0x44) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x401}, &(0x7f00000000c0)=0xc) syz_emit_ethernet(0x2c, &(0x7f0000000100)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, @broadcast, @void, {@generic={0x60, "aced335614c28877908ae307cee09223893b14bcb36c85205649ba2ec165"}}}, &(0x7f0000000140)={0x1, 0x2, [0x856, 0x3e7, 0x3c7, 0xa63]}) syz_extract_tcp_res(&(0x7f0000000180), 0xc, 0x4) syz_extract_tcp_res$synack(&(0x7f00000001c0), 0x1, 0x0) recvmmsg(r0, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/195, 0xc3}, {&(0x7f0000000300)=""/201, 0xc9}, {&(0x7f0000000400)=""/149, 0x95}], 0x3, &(0x7f0000000500)=""/183, 0xb7}, 0xc7d}, {{&(0x7f00000005c0)=@caif, 0x80, &(0x7f0000000940)=[{&(0x7f0000000640)=""/233, 0xe9}, {&(0x7f0000000740)=""/86, 0x56}, {&(0x7f00000007c0)=""/99, 0x63}, {&(0x7f0000000840)=""/213, 0xd5}], 0x4, &(0x7f0000000980)=""/191, 0xbf}, 0x1}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000a40)=""/54, 0x36}, {&(0x7f0000000a80)=""/195, 0xc3}, {&(0x7f0000000b80)=""/141, 0x8d}, {&(0x7f0000000c40)=""/16, 0x10}, {&(0x7f0000000c80)=""/248, 0xf8}, {&(0x7f0000000d80)=""/18, 0x12}], 0x6}}, {{&(0x7f0000000e40)=@in, 0x80, &(0x7f00000021c0)=[{&(0x7f0000000ec0)=""/4096, 0x1000}, {&(0x7f0000001ec0)=""/40, 0x28}, {&(0x7f0000001f00)=""/231, 0xe7}, {&(0x7f0000002000)=""/160, 0xa0}, {&(0x7f00000020c0)=""/211, 0xd3}], 0x5, &(0x7f0000002240)=""/196, 0xc4}, 0x8}, {{&(0x7f0000002340)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000003700)=[{&(0x7f00000023c0)=""/3, 0x3}, {&(0x7f0000002400)=""/100, 0x64}, {&(0x7f0000002480)=""/187, 0xbb}, {&(0x7f0000002540)=""/176, 0xb0}, {&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f0000003600)=""/120, 0x78}, {&(0x7f0000003680)=""/109, 0x6d}], 0x7, &(0x7f0000003780)=""/11, 0xb}, 0xa}, {{&(0x7f00000037c0)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f00000048c0)=[{&(0x7f0000003840)=""/4096, 0x1000}, {&(0x7f0000004840)=""/57, 0x39}, {&(0x7f0000004880)=""/22, 0x16}], 0x3, &(0x7f0000004900)=""/208, 0xd0}, 0x4}, {{&(0x7f0000004a00)=@nfc, 0x80, &(0x7f0000004a80)}, 0x3}], 0x7, 0x0, &(0x7f0000004c80)) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000004cc0)={0xda1e, 0x0, 0x160, 0xcb, r1}, &(0x7f0000004d00)=0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004d40)={'team0\x00', 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000004d80)={r0, 0x10001, 0x112b, 0x2}) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000004dc0)={r1, 0x843}, 0x8) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$EXT4_IOC_SETFSUUID(r3, 0x4008662c, &(0x7f0000004e00)={0x10, 0x0, "c9670abaa7ca05c5716811fceab03238"}) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000004e80)={{r0}, 0x6, &(0x7f0000004e40)=[0x9, 0x5, 0x97, 0x6, 0x3, 0x7], 0x7f, 0x4}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000004f40), r3) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000005000)={'ip6_vti0\x00', &(0x7f0000004f80)={'ip6_vti0\x00', 0x0, 0x4, 0x8, 0x81, 0x8, 0x2, @remote, @mcast1, 0x0, 0x80, 0x6, 0x7fff}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000050c0)={'syztnl1\x00', &(0x7f0000005040)={'syztnl1\x00', 0x0, 0x29, 0xff, 0x3, 0x7, 0xc, @remote, @mcast2, 0x7800, 0x8, 0x4, 0xfffffffb}}) sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f0000006380)={&(0x7f0000004f00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000006340)={&(0x7f0000005100)={0x121c, r4, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_WOL_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_WOL_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_WOL_MODES={0xf0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x44, 0x5, "0ad0f2e20cffa967d4b9bde58e44e641624b417d01a286782e27311617800de6178c1b6cacf7690ac28c9b0105491d8f42ababac1bcfa07328a5af3a494005a9"}, @ETHTOOL_A_BITSET_BITS={0x98, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'team0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '{+\'}N\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'dh\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '@-\'\x00$!)(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}]}, @ETHTOOL_A_WOL_SOPASS={0x1004, 0x3, "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"}, @ETHTOOL_A_WOL_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x121c}, 0x1, 0x0, 0x0, 0xc0}, 0x44004) r7 = socket(0x29, 0xa, 0x8a) sched_setscheduler(0xffffffffffffffff, 0x6, &(0x7f00000063c0)=0x4dc89e98) syz_extract_tcp_res$synack(&(0x7f0000006400), 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000006440)) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000064c0), r7) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000006580)={&(0x7f0000006480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000006540)={&(0x7f0000006500)={0x30, r8, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x8, 0x1, 0xa81, 0x1ff}}}, [""]}, 0x30}}, 0x24044000) socket$inet6(0xa, 0x3, 0x0) r9 = io_uring_setup(0xbc2, &(0x7f00000065c0)={0x0, 0x9fc6, 0x1000, 0x2, 0xec, 0x0, r3}) io_uring_register$IORING_REGISTER_BUFFERS2(r9, 0xf, &(0x7f0000006780)={0x2, 0x1, 0x0, &(0x7f0000006700)=[{&(0x7f0000006640)=""/127, 0x7f}, {&(0x7f00000066c0)=""/33, 0x21}], &(0x7f0000006740)=[0x891]}, 0x20) write$binfmt_elf32(r3, &(0x7f00000067c0)={{0x7f, 0x45, 0x4c, 0x46, 0x32, 0x0, 0x81, 0x4, 0xffffffffffffffff, 0x2, 0x3e, 0x80000000, 0x387, 0x38, 0x230, 0x5, 0x8, 0x20, 0x2, 0x9, 0x7, 0x9}, [{0x6, 0x4, 0x6, 0x38, 0x2, 0xe, 0x22cb, 0x4000}, {0x6, 0x5, 0x1000, 0x13, 0x3, 0xfffffff9, 0x65dd, 0x7}], "35164e4c48cda6a32d761b7718b1e42e9aaad6c4b9a8dac2c8705f6724cf8a621f1b54a75b9c83f1ed43fb3e52df03ec1993697f8913c503328ce265cdb1e181af959c4a49e8172f255b4523c601630640520364e0527a72d1f9ebd7a2b80e0edd5340d16494c06269faa368843a6c388c3441fee8d0f2264de5be4edebf9bb8e9ed1faf4be64341073b7bd5663e0b704ea69a25fe0a7b4f62eb6179517ec9c99873ccebe15d873e085715c3cadb6d9cbc66daeba632f6b719e8f3448c5c41f15578dd074ae90bc863bd53da37931810927bfefe34a59bf57f", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x651) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x8010, r3, 0x0) syz_io_uring_submit(r10, 0x0, &(0x7f0000006f40)=@IORING_OP_READ=@pass_buffer={0x16, 0x4a, 0x0, @fd_index=0x8, 0x8, &(0x7f0000006e40)=""/247, 0xf7, 0x0, 0x1}) 19m40.334081726s ago: executing program 2 (id=658): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = dup2(r1, r1) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000000)={@rand_addr=0x64010100, 0x0, 0x0, 0x10, 0x0, [{@loopback}]}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19m40.035506178s ago: executing program 2 (id=660): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) tkill(r0, 0x5) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804df00000000000001090224000100000000090400000103000000092105000001220500090581030002"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0xd63, @loopback, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r3 = dup(r2) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000100)=ANY=[], 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) syz_usb_ep_write(r1, 0x81, 0x1, &(0x7f0000000080)='a') r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom1\x00', 0x802, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x894a, &(0x7f0000000040)={'vlan1\x00', 0x0}) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a040)=[{{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000400)="dfbfaa635974a7c8d1b607f48bf9732c73a6ab52564a78aa0fe760a7a91a1dae797440c3799e3057f70678767b2c7e870963df146d85702637a5424176d221e9aaf0e40c3e72112fe9996667cc90c7cfe9c099c126a1", 0x56}, {&(0x7f0000000480)="8f5217c90b745fcb7d0a6e93c74d64617068cbec9934e708419ccffa2b31f5b131c27dcd00880f61bce674b1f5733d5bc46ed80e499c259c50a5fbafd9a9c67a61dcf18e45dbd389dfc938f9ec287b601d64b717ad3e5f14fe5ca54e11c12784a2fbd727b0c0351ada8bad31e9444b27302df488f79be486c4d58db6aaed7980428587", 0x83}, {&(0x7f0000000540)="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", 0xfe}], 0x3, &(0x7f00000006c0)=[@cred={{0x1c, 0x1, 0x2, {r0, r9}}}, @rights={{0x24, 0x1, 0x1, [r7, r6, r6, r4, r2]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r6]}}, @cred={{0x1c}}], 0xa0, 0xc000}}, {{&(0x7f00000083c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000085c0)=[{&(0x7f0000008440)="4183aff9b6e0ddaa6444d417c07ef0ee05833607d6bd6d", 0x17}, {&(0x7f0000008480)="ccb9eefca6cbc678132dcf2efef5a153fd6c543f793bb3144e6d81df1438afef167122ffdf621d9d041907f7d2cd3b22466d0f22f4db3ad43bdf34cc75d41e2a7aa5a6de888a47f37636cac003596fd48ebc12d82b99e6919e4c9b05d462c7da2736e6a47817ae1974df82a6ca09a7f8d6e3477dacc72ed583e311f07ae1b0142064cd693fccc8350b9351fc6e5396ca46b6f7b06f3ff5bb27e04a019532c114b87c53e7ab69ba228beff26d764e54282bd1b2", 0xb3}, {&(0x7f0000008540)="a3e7afa71d385cc64a6e6ab7001fc29f141bb5e2b9be84f238d7b462487927b0a69d6aef45568f40b5ea44021d227a84ee300bce9997", 0x36}, {&(0x7f0000008580)}], 0x4, &(0x7f0000008600), 0x0, 0x4c050}}, {{&(0x7f0000008640)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000008840)=[{&(0x7f00000086c0)="a6226b6540b7a01061b90e5bb7cd35ce57735b2d204aa98059d4f62bacf1e1c38ffb1e98af2e0594f36af020824407a9da28bb2553af667f8bdbe16f2ec8b49df94106794d14840b4d3da4b62e797c61782b359b", 0x54}, {&(0x7f0000008740)="e4e1524e8cfd259a29e3d4a10151d3f25fefa8f11112d664e4040c920112090cd1499f3942790cdebfc57dc5e8cac37257fa958328fc26e57c56a5157653203e46e44c97b03f3aee300df7e4423f648fcf4a03728f957d71e23132807ffd69a3608cc20e88d5bcf4356bf0c8aaa7b592ceb799ae41c72339fef9ceeeffabe70ea4f13beb386ba89a9139a4f686ff81cf57c9bab3c7378f256d7ed7b0db77f4037ac4290077ce72e1f0eb71d7b7c4b2e6f9220cd89ff19746c18aadf929d2ed4353dd1ba70a018394aee185428a2b15ebfc7dc62935a4e7a5f512fc7cfdade8def5aa648cefffe562a5aef430b2f720eb88c6f8eb04640a0388d8d975d3ee", 0xfe}], 0x2, &(0x7f0000000800)=[@rights={{0x20, 0x1, 0x1, [r5, r4, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r9}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6]}}], 0x98, 0x20040080}}, {{&(0x7f0000008b00)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000008c00)=[{&(0x7f0000008b80)="a61409e2e9319b3ce0889c167fa2de34f54a22dccae7b6c2c51c159166e42a6746bd853cd1e38b985bdb27416cbaa8137df9ef93b8cbd1154c79d968309fe43ca0002236f7011d076ac5a0eebcc2cc2659aafbd8c47ac5fa95bc9795f4e9e4", 0x5f}, {&(0x7f0000008d00)="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", 0x1000}], 0x2, 0x0, 0x0, 0x20000854}}, {{&(0x7f0000009d00)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000009f40)=[{&(0x7f0000009d80)="5ab3e9dee9050264db76bc37bec0f9d8ace1352c0d5656b6003d7791257d", 0x1e}, {&(0x7f0000009dc0)="dd412a1031ef2bab6304f755dfedba5ef27a09d2faf5dcf755ff34fdf2d03d2cf2d817a6af50b19a2abfd41ee596932ad675ea7a900cc05050639f638065c98a181f12857f18a12563cee60dcf6cd8ffe5aaf87cd53d6dc2845f173b", 0x5c}, {&(0x7f0000009e40)="722d397a47858c300dde6c46d8ea494635179275a34aa1fcaa76bfa85078f78ef98d03e6e8b68c56d11154487e22a42b1186d3070dbdf16f93133c28c57f59d5945947a16155ec4b6022db766117b39f6f8867d7d108ea2e4554bd44edad8cb80d49f04abd2197bcfbf7cb72b6446bd1f60f53cd5dbe679157b99c0c83ba2f273b953be61e0340ef37811ca3ba8bebf88179477ebf49057d366c24f02c4e0e0338c35d73c81bd8b4b804c337ded9a146eab69f14a21510e345e8585cfb4b6371e4305bbc7b8cbe90eca416f3461be8937e4646903a49a296ff73d47c99295b50fea84e5a0fd370e0ee36040f4073a7", 0xef}, {&(0x7f000000bd00)="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", 0x1000}], 0x4, &(0x7f0000000780)=[@rights={{0x28, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r10}}}], 0x48, 0x8001}}], 0x5, 0x0) 19m35.140474875s ago: executing program 2 (id=676): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newqdisc={0x58, 0x24, 0x200, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x2c, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x5}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x2}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x6}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x400}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x8}]}}]}, 0x58}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="00000000000080002800128f0a00010076786c616e"], 0x50}}, 0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$TCFLSH(r4, 0x400455c8, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000340)=@gettaction={0x14, 0x32, 0x301, 0x0, 0x25dfdbff}, 0x14}}, 0x4000000) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0x4) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000140)=0x3) r6 = syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r6}, 0x4) preadv(r7, 0x0, 0x0, 0x80, 0xffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, 0x0) syz_io_uring_setup(0x7187, &(0x7f0000000000)={0x0, 0xd9c1, 0x1000, 0x2, 0x2a0, 0x0, r6}, &(0x7f0000000280)=0x0, &(0x7f0000000380)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, 0x0, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x24, 0x0, 0x0, 0x0, 0x3107c2822fc55a06, 0x0, 0x0, 0x1, {0x0, r9}}) 19m32.087883642s ago: executing program 2 (id=685): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) mknod(&(0x7f0000000000)='./file0\x00', 0x8, 0x184) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8018"], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) 19m32.078920296s ago: executing program 2 (id=686): socket$inet_tcp(0x2, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = syz_io_uring_setup(0x1458, &(0x7f00000003c0)={0x0, 0x4, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000240)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x37aea8e708e70634) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x6a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2040, 0x1}) io_uring_enter(r1, 0x2d3e, 0xfffffffd, 0x0, 0x0, 0x0) 19m16.999716863s ago: executing program 32 (id=686): socket$inet_tcp(0x2, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = syz_io_uring_setup(0x1458, &(0x7f00000003c0)={0x0, 0x4, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000240)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x37aea8e708e70634) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x6a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2040, 0x1}) io_uring_enter(r1, 0x2d3e, 0xfffffffd, 0x0, 0x0, 0x0) 13m24.957454271s ago: executing program 1 (id=2123): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r1 = getpid() sched_setscheduler(r1, 0x6, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (rerun: 32) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) unshare(0x2040400) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01ff8040000007f00000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) io_setup(0x4, &(0x7f00000003c0)=0x0) io_submit(r6, 0x1, &(0x7f00000005c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x9, r5, 0x0, 0x0, 0x3b0}]) (async, rerun: 32) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r4, &(0x7f0000000280)="53650993d7d347e60609", 0x0}, 0x20) (rerun: 32) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) pipe2(&(0x7f0000000180), 0x88880) (async, rerun: 32) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$BTRFS_IOC_ADD_DEV(r7, 0x5000940a, &(0x7f0000001300)={{r8}, "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"}) (async) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r10, {0xfff2, 0x7}, {0xe}, {0xffff, 0xfff3}}}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x800) 13m24.212841067s ago: executing program 1 (id=2130): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() ptrace$ARCH_SHSTK_DISABLE(0x1e, r2, 0x0, 0x5002) sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) socket(0x9, 0x3, 0x6) r6 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) dup3(r6, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 13m22.937308358s ago: executing program 1 (id=2134): prlimit64(0x0, 0x3, &(0x7f0000000140)={0x100, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) pipe(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r0 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000740)='=q', 0x2}], 0x1}, 0x1) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x7) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r5, r4, 0x4}, 0x10) setsockopt$inet_int(r3, 0x0, 0x18, &(0x7f0000000100)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r3], 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000100001000000f7ffffffffff0900000a38000010030a03000000000000000200000000090c00024000000000000000010900030073797a30000000000900010073797a3100000000140000001100010000000000000000000100000aa4f9a58102cb2956a8145226ca8832cf870414c15440a88714c8b107144c679778ec615bac204d8a1967102a7aaf6b45a6"], 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x490) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f0000005500)=[{{&(0x7f0000000180)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000300)=""/107, 0x6b}, {&(0x7f0000000580)=""/98, 0x62}], 0x2, &(0x7f0000000780)=""/221, 0xdd}, 0x7}, {{&(0x7f0000000600)=@qipcrtr, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000880)=""/100, 0x64}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000000900)=""/25, 0x19}, {&(0x7f0000000940)=""/75, 0x4b}, {&(0x7f00000009c0)=""/238, 0xee}, {&(0x7f0000000ac0)=""/68, 0x44}, {&(0x7f0000000b40)=""/14, 0xe}], 0x7, &(0x7f0000000c00)=""/244, 0xf4}, 0x7}, {{&(0x7f0000000d00)=@in, 0x80, &(0x7f0000001280)=[{&(0x7f0000000d80)=""/199, 0xc7}, {&(0x7f0000000e80)=""/69, 0x45}, {&(0x7f0000000f00)=""/117, 0x75}, {&(0x7f0000000f80)=""/53, 0x35}, {&(0x7f0000000fc0)=""/103, 0x67}, {&(0x7f0000001040)=""/244, 0xf4}, {&(0x7f0000001140)=""/152, 0x98}, {&(0x7f0000001200)=""/123, 0x7b}], 0x8, &(0x7f0000001300)=""/64, 0x40}}, {{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000001340)=""/90, 0x5a}, {&(0x7f00000013c0)=""/193, 0xc1}, {&(0x7f00000014c0)=""/243, 0xf3}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x4}, 0x4}, {{&(0x7f0000002600)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000003980)=[{&(0x7f0000002680)=""/90, 0x5a}, {&(0x7f0000002700)=""/213, 0xd5}, {&(0x7f0000002800)=""/248, 0xf8}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000003900)=""/22, 0x16}, {&(0x7f0000003940)=""/10, 0xa}], 0x6, &(0x7f0000003a00)=""/206, 0xce}, 0x3}, {{0x0, 0x0, &(0x7f0000004d80)=[{&(0x7f0000003b00)=""/4096, 0x1000}, {&(0x7f0000004b00)=""/113, 0x71}, {&(0x7f0000004b80)=""/196, 0xc4}, {&(0x7f0000004c80)=""/212, 0xd4}], 0x4, &(0x7f0000004dc0)=""/250, 0xfa}, 0x7}, {{0x0, 0x0, &(0x7f0000005400)=[{&(0x7f0000004ec0)=""/96, 0x60}, {&(0x7f0000004f40)=""/129, 0x81}, {&(0x7f0000005000)=""/231, 0xe7}, {&(0x7f0000005100)=""/192, 0xc0}, {&(0x7f00000056c0)=""/207, 0xcf}, {&(0x7f00000052c0)=""/20, 0x14}, {&(0x7f0000005300)=""/204, 0xcc}], 0x7, &(0x7f0000005480)=""/93, 0x5d}, 0x8}], 0x7, 0x2, 0x0) r10 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r10, &(0x7f00000000c0), 0x10) 13m19.039202252s ago: executing program 1 (id=2150): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}, 0x1, 0x4000000}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 13m18.274447156s ago: executing program 1 (id=2154): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002"], 0x51b402) gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) clock_nanosleep(0xa, 0x0, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000480)={&(0x7f0000000100), 0x6e, &(0x7f0000000340)=[{&(0x7f0000000180)=""/116, 0x74}, {&(0x7f0000000380)=""/12, 0xc}, {&(0x7f0000000240)=""/234, 0xea}], 0x3, &(0x7f0000000380)}, 0x100) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) socket$tipc(0x1e, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="24000000000000002900000032000000ff010000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="7f"], 0x28}, 0x4000045) mkdir(&(0x7f00000004c0)='./file0\x00', 0x86) ptrace(0x10, r3) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r3, 0x1, &(0x7f0000000180)={&(0x7f00000002c0)=""/48, 0x30}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000b00)={'batadv0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000fadbdf25110000000800144366f0eea69a3050e70f6ef0a67cc956786a90eb68f23b30ae03d7058d6a1919fa2e4cccf82a99f1286d2cfaf27cd248cc89246d3a1025717fd66df230889d002ab2d3981531d003", @ANYRES32=r5, @ANYBLOB], 0x24}}, 0x20048040) 13m17.370291714s ago: executing program 1 (id=2157): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000100)=0x18) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, 0x0) 13m2.168239233s ago: executing program 33 (id=2157): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000100)=0x18) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, 0x0) 12m18.543813622s ago: executing program 6 (id=2350): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) syz_io_uring_setup(0xb7f, &(0x7f0000000180)={0x0, 0x38ab, 0x80, 0x0, 0x1e6}, &(0x7f0000000340), &(0x7f0000000600)) r0 = dup(0xffffffffffffffff) flock(r0, 0x9) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = syz_io_uring_setup(0x356, &(0x7f0000000080)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r0}, &(0x7f00000002c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r1, 0x163b, 0xef92, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r4, 0x0) accept4$x25(r4, 0x0, 0x0, 0x80800) 12m17.679664043s ago: executing program 6 (id=2355): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r4, 0x0, 0x1, &(0x7f0000000000)=""/7, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x0, r2}, 0x18) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00', @ANYRES16=r9, @ANYBLOB="010000000000fedbdf251700000008000300", @ANYRES32=r10, @ANYBLOB="04210000"], 0x20}}, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x2, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)}, 0x40091) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000500)='writeback_bdi_register\x00', r7, 0x0, 0x7}, 0x2f) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bond0\x00'}) 12m16.319032352s ago: executing program 6 (id=2361): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) io_setup(0x401, &(0x7f00000002c0)) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0x7, 0x1, 0x1, "4a37f6c00019000000000000000000004f000000ffff00", 0x31435641}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x48, r10, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1}, {}, @broadcast, @device_a, @random="37e6fc966e04", {0x0, 0x7}}, 0x4c00, 0x5d, @default, @val, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x1]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 12m14.621166316s ago: executing program 6 (id=2365): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r3, &(0x7f0000000040)='./file1\x00', r3, &(0x7f0000000180)='./bus\x00', 0x0) link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) chown(&(0x7f0000000580)='./file0\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r5 = syz_clone(0x0, &(0x7f0000000200)="890838af898d6e2fea80c630b009adce70d58d9d3ea9b5113d469a082bbe4015e2f811e5bfd9613374dce0b9ae7dec0b2e7cb6021baab56b5ade8951e8c920720c3d39a67a18", 0x46, &(0x7f00000002c0), &(0x7f00000003c0), &(0x7f00000005c0)="afd196e20be1130174722bc0685e5de608af22df322a40edb9076bb5fae02bb22b3f43c989529d01a1c3dce8e944c00bbc6bc805997751a48e1f92d7e41cfa6ef7cd9090da4c2c58c8e8620bbc1b6e04") ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r5, &(0x7f0000000440), 0x4003) ioctl$KVM_RESET_DIRTY_RINGS(r4, 0xaec7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)) 12m12.386609813s ago: executing program 6 (id=2372): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$key(0xffffffffffffffff, 0x0, 0x4000040) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x176) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) clock_getres(0x3, &(0x7f0000000580)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/38, 0x26}], 0x1, 0xfffffff5, 0x100000a) 12m9.575896321s ago: executing program 6 (id=2380): chdir(&(0x7f0000000340)='./cgroup\x00') syz_io_uring_setup(0x110, &(0x7f0000000400)={0x0, 0x10, 0x0, 0x3, 0x7d}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8, 0x2}, {0x1f}, {}, 0x0, 0x33, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa}) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) 12m8.876574183s ago: executing program 34 (id=2380): chdir(&(0x7f0000000340)='./cgroup\x00') syz_io_uring_setup(0x110, &(0x7f0000000400)={0x0, 0x10, 0x0, 0x3, 0x7d}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8, 0x2}, {0x1f}, {}, 0x0, 0x33, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa}) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) 4m32.087200275s ago: executing program 3 (id=3960): syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2000a804) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_ep_write(r2, 0x81, 0x0, &(0x7f0000000040)) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x7, 0x4) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x7, 0x1, 0x3, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x6, 0x0, 0xe, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x6, 0x0, 0x7}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x3, 0x4, 0x8, 0x8, 0x1c}, 0x4f, &(0x7f0000000180)={0x5, 0xf, 0x4f, 0x2, [@ptm_cap={0x3}, @generic={0x47, 0x10, 0x4, "0a8b9b97a4b9bb8aa37f9ad58e3729699eb23faa40fe9f7c22c62d51dfb9b43026f24ce71bf10a14856227c9efafbf3b935f2e32e2039f36dc5659718ec0b5177419e128"}]}, 0x1, [{0x35, &(0x7f0000000200)=ANY=[@ANYBLOB="3503530900e22123e5fb59932399a1a18a20458764af13eab5f8afeec5f044a2b8087f6a3e7e68a101c188d02f32ba46952982b417"]}]}) recvmmsg(r1, &(0x7f0000009080)=[{{0x0, 0x0, &(0x7f0000000680)=[{0x0}], 0x1}, 0x5e}], 0x1, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='batadv_slave_0\x00', 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2000c044) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x10008095, 0x0, 0x0) clock_gettime(0x0, 0x0) capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000300)={0x1, 0x6, 0x5f22, 0x0, 0x200000}) r3 = syz_io_uring_setup(0x48ce, &(0x7f0000000140)={0x0, 0x5e99, 0x3000, 0x3, 0x19a}, &(0x7f0000000040), &(0x7f00000000c0)) r4 = epoll_create1(0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141000, 0x20) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000200)={0xa0000019}) finit_module(r5, 0x0, 0x3) ppoll(&(0x7f00000001c0)=[{r3, 0x20}], 0x1, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8b, 0xfffa}, 0x34, [0x7ffe, 0xc95a, 0xfffffff6, 0x9, 0x80, 0xffff, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3ff, 0x0, 0x4, 0x5, 0x8, 0x4, 0x3c5b, 0x10000001, 0x3, 0x9, 0xffffffff, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0x10, 0x800, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8e, 0x6, 0x10000006, 0x800, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x10, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x135, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0x5, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x401, 0x0, 0xea4, 0x200, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x8, 0x6, 0x7, 0xff, 0x5, 0x5, 0x70ffaf18, 0x4, 0x0, 0x2, 0x2, 0xa, 0x4, 0x8, 0x8, 0x801, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x1, 0x42, 0x2], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x986a, 0xb, 0x4, 0x5, 0x5, 0x2, 0x1ef, 0x5, 0x8, 0xd67, 0x80000003, 0x9, 0x7f, 0x9, 0x5, 0x2, 0xa408, 0xf3a, 0x8, 0x4, 0x6, 0x5, 0x38, 0x40800003, 0x200, 0x7e, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x9, 0x4, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x2, 0x1a, 0x1c, 0x81, 0x3, 0x4, 0xaaed, 0x4, 0x80002], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x9, 0xce7, 0x9ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x8, 0x200a620, 0x2, 0x5, 0x3e, 0x2, 0x3, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x8, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x20ca, 0x5, 0xb1f, 0x1, 0x200, 0xffbf2441, 0x67c]}, 0x45c) socket$kcm(0x29, 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') socket$kcm(0x29, 0x2, 0x0) preadv(r6, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/190, 0xbe}, {&(0x7f0000000a00)=""/207, 0xcf}], 0x2, 0x189, 0x100) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4m28.438911668s ago: executing program 3 (id=3968): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0d030000000000000000130000001c000980080002"], 0x30}}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) accept4$bt_l2cap(r6, 0x0, &(0x7f00000003c0), 0x180000) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400e2c9", @ANYRES16=r5, @ANYBLOB="10002bbd7000fedbdf2513000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004081}, 0x48010) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r2, 0x1, 0x0, 0x0, {0x54}, [{{@nsim={{0xe, 0x2}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x840, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000100)={0x3ff, "5660359c3245d1c42317afad7d48ed5100400000000000010000000000007362", 0xffffffffffffffff}) r9 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r9, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd002000", r10, 0xffffffffffffffff}) ppoll(&(0x7f0000000440)=[{r11, 0x311}, {r10}], 0x1, 0x0, 0x0, 0xfef5) socket$rds(0x15, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x16, 0xf, 0x4f, 0x40, 0x100d, 0xcb01, 0x84d1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x6d, 0x0, 0x1, 0x74, 0x9a, 0xdc, 0x0, [], [{{0x9, 0x5, 0x1c277d69f7841ba1, 0x3, 0x400, 0x5, 0x2, 0x8}}]}}]}}]}}, 0x0) 4m24.447009868s ago: executing program 3 (id=3982): r0 = socket(0x10, 0x3, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_journal_start_reserved\x00', r3, 0x0, 0x4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f00000001c0)=@usbdevfs_disconnect={0x1000}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000400000000000900020073797a30000000000500010007000000050005000a000000140007800800114000000000080012400000ffff16000300686173683a6e65742c706f72742c6e6574"], 0x64}, 0x1, 0x0, 0x0, 0x8850}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001e00050300000000fedbdf25000000000800fe00", @ANYRES32=0x0, @ANYBLOB='\b\x00\t\x00', @ANYRES32, @ANYBLOB="1b68a181e2a39e90952bb3563aeae0a7db445fdd0a9f0ad50c7c2ff46432079a8f98a41067766b402c685d791a16fdcceacddc8b8a4d1f84b58c68fb35f4c2c6253ba35feb6945d0e5b0ab67161ba253bd9d6534a3d15fab6bc4023319db6632fc3652e4eb1787c0a1dbeed47e787ec20f24af96238b45645473e597768e87b0e282e6b4d6efba0336297ff8b4ee713452e6f26d4550413d489975137a893e1d1e6d47cb07051c0149af6172cae3d4ad995f0bad70747b175614dee239d25dcdd92895b7b9887e43d321b6c254fc62"], 0x24}, 0x1, 0x8000000}, 0x0) 4m23.401207811s ago: executing program 3 (id=3985): r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000000580)={0x8, {"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", 0x1000}}, 0x1006) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f000500", 0x1b}], 0x1}, 0x4404c) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0x810c9365, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d6feffffffffffffff537c4c3060c6a405106c720a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x59}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m22.751615111s ago: executing program 3 (id=3988): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/rcu_normal', 0x10340, 0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x4, 0xffffffffffffc0d1, 0x4a4}}, 0x30) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000140)='./file0\x00', 0x6a2842, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) 4m22.391721678s ago: executing program 3 (id=3990): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, &(0x7f0000000280)="c5000000", 0x4) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x8, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xaf, &(0x7f00000004c0)={{0x12, 0x1, 0x151, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9d, 0x3, 0x1, 0x0, 0x70, 0xbd, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x100}, [@feature_unit={0xd, 0x24, 0x6, 0x0, 0xfc, 0x3, [0x8, 0x0, 0x7]}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x101, 0x3, 0x8, 0x0, 0x9e}, @input_terminal={0xc, 0x24, 0x2, 0x10, 0x1ff, 0x3, 0x0, 0xfffe}, @feature_unit={0x7, 0x24, 0x6, 0x0, 0x8, 0x0, [], 0x20}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x0, 0x0, 0x5, 0x20}, @feature_unit={0x9, 0x24, 0x6, 0x5, 0x0, 0x1, [0x0], 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x40, 0x7f, 0x20, {0x7, 0x25, 0x1, 0x0, 0x0, 0x80}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x2}}}}}}}]}}, 0x0) 4m7.161302349s ago: executing program 35 (id=3990): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, &(0x7f0000000280)="c5000000", 0x4) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x8, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xaf, &(0x7f00000004c0)={{0x12, 0x1, 0x151, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9d, 0x3, 0x1, 0x0, 0x70, 0xbd, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x100}, [@feature_unit={0xd, 0x24, 0x6, 0x0, 0xfc, 0x3, [0x8, 0x0, 0x7]}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x101, 0x3, 0x8, 0x0, 0x9e}, @input_terminal={0xc, 0x24, 0x2, 0x10, 0x1ff, 0x3, 0x0, 0xfffe}, @feature_unit={0x7, 0x24, 0x6, 0x0, 0x8, 0x0, [], 0x20}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x0, 0x0, 0x5, 0x20}, @feature_unit={0x9, 0x24, 0x6, 0x5, 0x0, 0x1, [0x0], 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x40, 0x7f, 0x20, {0x7, 0x25, 0x1, 0x0, 0x0, 0x80}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x2}}}}}}}]}}, 0x0) 7.696644113s ago: executing program 8 (id=5202): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000004c00)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x3f, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x5c, 0x24, 0x2, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}, {0xc, 0x2}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x9, 0x7, 0xa9, 0x1, 0x1, 0x0, 0x2}}, {0x8, 0x2, [0x9e8d, 0x2]}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4c840}, 0x840) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, &(0x7f00000000c0)={0x0, 0xee38, 0x8}) creat(&(0x7f0000000140)='./file0\x00', 0x0) syz_io_uring_setup(0x237, &(0x7f0000000380)={0x0, 0xf900, 0x10100, 0x0, 0x16c}, &(0x7f00000002c0), 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x40}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone3(&(0x7f00000016c0)={0xa4281200, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0}, 0x58) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, 0x0, 0x1, 0x4, 0x6, @local}, 0x14) 7.652329026s ago: executing program 7 (id=5203): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x8010}}], 0x1, 0x0) (async) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) write$binfmt_script(r3, &(0x7f0000000000)={'#! ', './file1', [{}]}, 0xc) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000440)={0x1, 0x1, 0x1000, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x3, 0x0, 0x0) (async, rerun: 64) close(r3) (async, rerun: 64) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) 6.63970126s ago: executing program 0 (id=5205): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) 6.630266302s ago: executing program 0 (id=5206): sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x28, 0x0, 0x1, 0x0, 0xfffffffd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x56}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x45}, 0x4000000) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) 6.075680447s ago: executing program 0 (id=5208): syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f010400000009058303"], 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000069c0)=[{{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000000840)="61c89b5f", 0x4}], 0x1, &(0x7f0000002e80)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, 0x0}}], 0x2, 0x24000040) ptrace(0x10, r0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0xc00, 0x0) ioctl$FBIOPUTCMAP(r3, 0x4605, &(0x7f00000003c0)={0x7, 0x1, &(0x7f0000000500)=[0xffff], &(0x7f0000000240), &(0x7f0000000400), &(0x7f00000003c0)}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) ptrace(0x420e, r0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x7) ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f0000000540)={[{0x5, 0x8000, 0x2, 0x5, 0xd9, 0x0, 0x40, 0xb, 0xd, 0xff, 0x5, 0x8, 0x100}, {0x0, 0xb46a, 0x9, 0x8, 0x4, 0x4a, 0x1, 0x80, 0x81, 0x5, 0x2, 0xc2, 0x1}, {0x9, 0x3, 0x7, 0x0, 0x8, 0x3, 0x6, 0x2c, 0xac, 0x8, 0xd, 0x3, 0xa}], 0x80}) sendto$inet6(r4, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000c80)="7cffa9", 0x3, 0xbcff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) writev(r4, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0xfdef}], 0x1) syz_usb_connect$cdc_ecm(0x0, 0x77, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x1, 0x1, 0x7, 0xe0, 0x1, [{{0x9, 0x4, 0x0, 0x9, 0x3, 0x2, 0x6, 0x0, 0xd, {{0x7, 0x24, 0x6, 0x0, 0x0, "fd9e"}, {0x5, 0x24, 0x0, 0x2856}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x126, 0x6, 0x7f}, [@mbim={0xc, 0x24, 0x1b, 0x0, 0xc, 0x80, 0x3, 0x7ff, 0x2c}, @dmm={0x7, 0x24, 0x14, 0x3, 0x7}, @mdlm={0x15, 0x24, 0x12, 0xd5b}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x9, 0xcc, 0xf0}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x2, 0xb, 0x3}}}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x9e, 0x0, 0xc, 0x8}, 0x62, &(0x7f00000000c0)={0x5, 0xf, 0x62, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x4, 0x3b, 0xe14}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "8d1e69e1ba5a619ca77a99b97de283d4"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "89b877eb8755f96bf43d764a15501384"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "8e827a6d9e3fb0224ef839b01379297f"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "14ca8bb8e5e999d7851652674bd35b9b"}]}, 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x861}}]}) syz_usb_connect$hid(0x4, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0xb05, 0x18c6, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x3, 0x2, {0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0x9a0}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xf2, 0x2, 0xd}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0xf, 0x81, 0x39, 0x8, 0x3}, 0x10d, &(0x7f0000000300)={0x5, 0xf, 0x10d, 0x6, [@ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x8001, 0xff0f, 0xf, [0xffc0c0]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x1, 0xff, 0x5, 0x6}, @generic={0xba, 0x10, 0x1, "3b992a08cd501fd0fbeed299cfbf521ad3bf7113993526ebfa0003d513aa32e1d0cc559fa3882aa4a314f48455a43f94d33ef282168c1b7b7155b783979d5382a717f5860c3e9c8b8c27738e731454638592a3ac3ebd6ca7cfb8c60d1e9fbcee34acd7dd03fe0596ad0f60e191646d2f3973adc0a61d48330086ff5fa546e172ae09933fcdc3c3f3344cbbe1d387e758bde0798c82c962dbbd97b6ee27a1c903c25d8872ad448813a687c6e26f0cb2b1293fd421028194"}, @ssp_cap={0x18, 0x10, 0xa, 0x7, 0x3, 0x5a1b, 0xf000, 0x0, [0x3f00, 0xf, 0xf608c33257a93508]}, @ss_container_id={0x14, 0x10, 0x4, 0xc, "ab91deb89c83094d025aab8bf9240dc6"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x2, 0x6}]}, 0x2, [{0x7a, &(0x7f0000000240)=@string={0x7a, 0x3, "d6ab71004a1487f7cbcdbb0c68353f2e26039742e2c416d24ddef0a84c6772573467601fd869b69861290b6791b1cd0c229103d760820e7d1fb5d05be1488bcfda5d833abe4d60c4a3f07be6aad094d7b5111dec941482fc1ab99535cc9433e109fac56090ad9a9751b50d8e40e6e24f5680c099624ee8d5"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xfcff}}]}) 6.041674893s ago: executing program 7 (id=5209): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYBLOB='\x00\x00'], 0xc0}, 0x1, 0x0, 0x0, 0x4000d}, 0x24008081) 5.758524972s ago: executing program 7 (id=5210): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) tkill(r0, 0x5) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804df00000000000001090224000100000000090400000103000000092105000001220500090581030002"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0xd63, @loopback, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r3 = dup(r2) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000100)=ANY=[], 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) syz_usb_ep_write(r1, 0x81, 0x1, &(0x7f0000000080)='a') r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom1\x00', 0x802, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x894a, &(0x7f0000000040)={'vlan1\x00', 0x0}) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a040)=[{{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000400)="dfbfaa635974a7c8d1b607f48bf9732c73a6ab52564a78aa0fe760a7a91a1dae797440c3799e3057f70678767b2c7e870963df146d85702637a5424176d221e9aaf0e40c3e72112fe9996667cc90c7cfe9c099c126a1", 0x56}, {&(0x7f0000000480)="8f5217c90b745fcb7d0a6e93c74d64617068cbec9934e708419ccffa2b31f5b131c27dcd00880f61bce674b1f5733d5bc46ed80e499c259c50a5fbafd9a9c67a61dcf18e45dbd389dfc938f9ec287b601d64b717ad3e5f14fe5ca54e11c12784a2fbd727b0c0351ada8bad31e9444b27302df488f79be486c4d58db6aaed7980428587", 0x83}, {&(0x7f0000000540)="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", 0xfe}], 0x3, &(0x7f00000006c0)=[@cred={{0x1c, 0x1, 0x2, {r0, r9}}}, @rights={{0x24, 0x1, 0x1, [r7, r6, r6, r4, r2]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r6]}}, @cred={{0x1c}}], 0xa0, 0xc000}}, {{&(0x7f0000008640)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000008840)=[{&(0x7f00000086c0)="a6226b6540b7a01061b90e5bb7cd35ce57735b2d204aa98059d4f62bacf1e1c38ffb1e98af2e0594f36af020824407a9da28bb2553af667f8bdbe16f2ec8b4", 0x3f}, {&(0x7f0000008740)="e4e1524e8cfd259a29e3d4a10151d3f25fefa8f11112d664e4040c920112090cd1499f3942790cdebfc57dc5e8cac37257fa958328fc26e57c56a5157653203e46e44c97b03f3aee300df7e4423f648fcf4a03728f957d71e23132807ffd69a3608cc20e88d5bcf4356bf0c8aaa7b592ceb799ae41c72339fef9ceeeffabe70ea4f13beb386ba89a9139a4f686ff81cf57c9bab3c7378f256d7ed7b0db77f4037ac4290077ce72e1f0eb71d7b7c4b2e6f9220cd89ff19746c18aadf929d2ed4353dd1ba70a018394aee185428a2b15ebfc7dc62935a4e7a5f512fc7cfdade8def5aa648cefffe562a5aef430b2f720eb88c6f8eb04640a0388d8d975d3ee", 0xfe}], 0x2, &(0x7f0000000800)=[@rights={{0x20, 0x1, 0x1, [r5, r4, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r9}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6]}}], 0x98, 0x20040080}}, {{&(0x7f0000008b00)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000008c00)=[{&(0x7f0000008b80)="a61409e2e9319b3ce0889c167fa2de34f54a22dccae7b6c2c51c159166e42a6746bd853cd1e38b985bdb27416cbaa8137df9ef93b8cbd1154c79d968309fe43ca0002236f7011d076ac5a0eebcc2cc2659aafbd8c47ac5fa95bc9795f4e9e4", 0x5f}, {&(0x7f0000008d00)="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", 0x1000}], 0x2, 0x0, 0x0, 0x20000854}}, {{&(0x7f0000009d00)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000009f40)=[{&(0x7f0000009d80)="5ab3e9dee9050264db76bc37bec0f9d8ace1352c0d5656b6003d7791257d", 0x1e}, {&(0x7f0000009dc0)="dd412a1031ef2bab6304f755dfedba5ef27a09d2faf5dcf755ff34fdf2d03d2cf2d817a6af50b19a2abfd41ee596932ad675ea7a900cc05050639f638065c98a181f12857f18a12563cee60dcf6cd8ffe5aaf87cd53d6dc2845f173b", 0x5c}, {&(0x7f0000009e40)="722d397a47858c300dde6c46d8ea494635179275a34aa1fcaa76bfa85078f78ef98d03e6e8b68c56d11154487e22a42b1186d3070dbdf16f93133c28c57f59d5945947a16155ec4b6022db766117b39f6f8867d7d108ea2e4554bd44edad8cb80d49f04abd2197bcfbf7cb72b6446bd1f60f53cd5dbe679157b99c0c83ba2f273b953be61e0340ef37811ca3ba8bebf88179477ebf49057d366c24f02c4e0e0338c35d73c81bd8b4b804c337ded9a146eab69f14a21510e345e8585cfb4b6371e4305bbc7b8cbe90eca416f3461be8937e4646903a49a296ff73d47c99295b50fea84e5a0fd370e0ee36040f4073a7", 0xef}, {&(0x7f000000bd00)="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", 0x1000}], 0x4, &(0x7f0000000780)=[@rights={{0x2c, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r10}}}], 0x50, 0x8001}}], 0x4, 0x0) 5.651772747s ago: executing program 8 (id=5211): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000040)={{r1}, 0x1, 0x1, 0x8}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x2, 0x10, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYRESOCT=r0], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x4, 0x11, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9af33139c2c4eaae}, 0x20004030) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x1, 0x0, 0x0) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, 0x0, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 5.246430299s ago: executing program 5 (id=5212): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x15) r1 = dup(0xffffffffffffffff) write$FUSE_DIRENTPLUS(r1, 0x0, 0xb0) write$FUSE_INIT(r1, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000380), 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f00000000c0)={0x2020}, 0x2020) 4.48186028s ago: executing program 8 (id=5214): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r1) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4042, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) utimensat(0xffffffffffffff9c, &(0x7f0000006380)='./file0\x00', 0x0, 0x0) 4.413604161s ago: executing program 8 (id=5215): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) syz_open_dev$vcsn(0x0, 0x1, 0x189c02) mkdir(0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0xd6741, 0x2fb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)=@tcp6}, 0x20) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'xfrm0\x00'}) execveat$binfmt(0xffffffffffffff9c, r3, &(0x7f00000004c0)={[0x0, &(0x7f00000003c0)=')!}\x00']}, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 4.304881706s ago: executing program 5 (id=5218): syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="3101000009005e08cb06030000e8160000010902240001000064000904"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f00000009c0)={0xf, {"a2e3ad214fc752f90b5e09094bf70e0dd038e7ff7fc6e5539b1b48078b089b3b0838721a0890e0878f0e1ac6e7049b3d6c959b4c9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31320d07420736cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e2c5070000179c6f30e065cd5b91cd0ae17d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3bb469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918070000003f0000000c558cdc0a3621c56cea8d20fa911afe40db6ebe8cac64289fd3da232f1b5dbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860421c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000e0a37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2f09000000000000007747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847354b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d483d4675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516ab68032f88c042ffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d95f2e8c77d95a3d3a6df40babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9d1a3d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f39a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdfa1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60559516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442748af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000001c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500", 0x1009}}, 0x1006) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000012c0), 0x0, 0x0) read$alg(r3, &(0x7f0000000240)=""/4096, 0xfffffdef) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x28, 0x1, 0x7, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x5}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40084) io_uring_enter(r2, 0x59ce, 0x18d1, 0x48, &(0x7f0000000040)={[0x3]}, 0x8) 3.115558179s ago: executing program 8 (id=5219): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x7, 0x3ff, 0x9, 0x1a, 0x602, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 3.06156065s ago: executing program 4 (id=5220): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003240)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0x7, @private1, 0x6}, 0x1c, 0x0}}], 0x1, 0x2004e000) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000b00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x30}}], 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) io_uring_enter(r0, 0x8af, 0xc0b8, 0x0, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x7) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.982215611s ago: executing program 4 (id=5221): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r4, 0x113, 0x3, &(0x7f0000000000)=0x8, 0x4) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r5 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r5, &(0x7f0000000600), 0xfec8) recvmmsg(r5, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 2.551827725s ago: executing program 7 (id=5222): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioperm(0xe6, 0x2, 0x3) syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) mount$bind(0x0, 0x0, 0x0, 0x8b100a, 0x0) mount$bind(0x0, 0x0, 0x0, 0x1a1011, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) accept4(r0, 0x0, 0x0, 0x800) r4 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000002c0)={0xf0f044, 0x800}) 2.186322787s ago: executing program 0 (id=5223): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x991b}, 0x28) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x2, 0x1000, &(0x7f00000000c0)="8647", &(0x7f0000000880)=""/4096, 0x1d5, 0x0, 0x2, 0x7, &(0x7f00000001c0)="3785", &(0x7f0000000200)="ef531969949d0d", 0x2, 0x0, 0x13f}, 0x50) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) shutdown(r2, 0x1) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCRTMSG(r3, 0x890d, &(0x7f0000000040)={0x0, {0x2, 0x4e21, @loopback}, {0x2, 0x4e21, @local}, {0x2, 0x4e21, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)='batadv_slave_0\x00', 0x30000000000, 0x3, 0x8}) recvmmsg(r2, &(0x7f0000000840), 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20049a5f4e9df9c3c1b878e3ddb800007e75026e000000000000000030072dd7d5b7000000010900010074f66db295be58a154413190597614f6350ba28f3edba3866a752ebcd4f197193f2c6d721b85c7fd7437f0bee1f58756c188cf887dd02423b21511bef1796af6575422566f5c75456d1677cbda41ee67738b3a64c16c1f0acf5cb102000000000000009e5f6a1837574bff42e07618bc322746b602800d19b39cad586abb2688dbc62dd17c66d372c4ecebdc544cbbf28b8492f214b9280d6cbf69ca00000000000000004e000000155199e2b67e026a00"/233], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x10) 2.178776755s ago: executing program 5 (id=5224): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2.168254054s ago: executing program 8 (id=5225): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0xc043000000200000, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(r4, 0x1, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setreuid(0x0, 0xee00) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xda, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x1}]}]}, 0xfc}}, 0x0) fremovexattr(r5, &(0x7f00000000c0)=@random={'security.', '/dev/cpu/#/msr\x00'}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x8000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @local}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'geneve1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000004}, 0x4048040) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) 2.048699187s ago: executing program 7 (id=5226): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x6, 0x4e, 0x1, 0x7, 0x21, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x740, 0x40, 0xfff, 0x4}}) sendmsg$nl_route_sched(r2, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000900)={0x0}, 0x1, 0x0, 0x0, 0x48004}, 0x40000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f0000000640)='./file0\x00', 0xed1517cb88f869dd) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r6 = dup(r5) write$P9_RLERRORu(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) r7 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) sendfile(r7, r7, 0x0, 0x800000009) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a", 0x8) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000740)={0x1, 0x0, 0xe6a, 0xa}) r8 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e99c563821a2c93c4ce158796cfd1647e299f4e376b5f7128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb0fa6935841e6098ed884e7cb51726b360fbb3", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xc9}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 2.025059878s ago: executing program 4 (id=5227): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) 1.975640949s ago: executing program 5 (id=5228): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x43}, 0x1, 0x0, 0x7000000}, 0x0) 1.23542906s ago: executing program 5 (id=5229): syz_emit_ethernet(0x260, &(0x7f0000000c00)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @tipc_packet={0x1, 0x6, "ab3c5f", 0x22a, 0x6, 0xff, @empty, @ipv4={'\x00', '\xff\xff', @broadcast}, {[@routing={0x88, 0xe, 0x0, 0x2, 0x0, [@rand_addr=' \x01\x00', @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @empty, @remote, @rand_addr=' \x01\x00']}, @fragment={0x89, 0x0, 0x7, 0x1, 0x0, 0x3, 0x64}, @fragment={0x2b, 0x0, 0x5, 0x1, 0x0, 0x7, 0x64}, @srh={0x8, 0xa, 0x4, 0x5, 0x9, 0x0, 0x0, [@dev={0xfe, 0x80, '\x00', 0x16}, @mcast2, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2]}, @routing={0x88, 0x6, 0x0, 0x6, 0x0, [@mcast2, @ipv4={'\x00', '\xff\xff', @empty}, @local]}, @hopopts={0x29, 0x2, '\x00', [@generic, @jumbo={0xc2, 0x4, 0x80000000}, @padn={0x1, 0x1, [0x0]}, @pad1, @pad1, @pad1]}, @routing={0x0, 0x2, 0x0, 0x7, 0x0, [@local]}, @srh={0x2e, 0x14, 0x4, 0xa, 0xf, 0x0, 0x4, [@private1, @ipv4={'\x00', '\xff\xff', @remote}, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @local, @remote, @loopback, @dev={0xfe, 0x80, '\x00', 0x25}, @empty, @empty]}], @payload_mcast={{{{{{0x32, 0x0, 0x0, 0x1, 0x1, 0xb, 0x1, 0x2, 0x0, 0x0, 0x2, 0x9, 0x1, 0x1, 0x5, 0xcd6c, 0x0, 0x4e20, 0x4e21}, 0x0, 0x3}, 0x0, 0x1}, 0x3}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 1.22644323s ago: executing program 0 (id=5230): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xdf88}, 0x18) prlimit64(0x0, 0x4, &(0x7f0000000140)={0xa, 0x5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000020c0)}], 0x4}, 0x0) ioctl$SG_GET_VERSION_NUM(r5, 0x2284, &(0x7f0000000080)) 1.12021462s ago: executing program 4 (id=5231): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003240)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0x7, @private1, 0x6}, 0x1c, 0x0}}], 0x1, 0x2004e000) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000b00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x30}}], 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) io_uring_enter(r0, 0x8af, 0xc0b8, 0x0, &(0x7f0000000100)={[0x6]}, 0x8) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.119036568s ago: executing program 5 (id=5232): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'comedi_test\x00', [0x4f27, 0x5, 0x280000, 0xfff, 0x66, 0x5, 0x0, 0x8000, 0xa, 0x104, 0xffffffff, 0x1, 0xd, 0xfffffffd, 0x2, 0x80000101, 0x5, 0x1a449, 0x7, 0x3ff, 0x2086, 0x24, 0xfffffffd, 0x20001e5c, 0x7fff, 0x8002, 0x3c, 0x1, 0x6, 0x0, 0x1000000]}) socket(0x10, 0x803, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000200000000"], 0x0}, 0x94) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 847.312641ms ago: executing program 7 (id=5233): mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000040)=0x80005) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000140)={0xffff0000, 0x6, 0x9, 0x2, 0x7, "d171a6100600000009e49200", 0x802046, 0x200068e}) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) listen(r2, 0xf) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="12000000070000000400", @ANYBLOB="5a9ce97ca6bb6fb4caaa087df785f5233879ffb86468fe6a7be85a9594369e3e1e0b090556290186a14590d6405481b7ce4844d81a03230212bf86bb6d2348ed0da06ada63bfed6c551d9ebe5cdca44afbff5473eca0f2ab5754dc75044b9faefe2ca9d7975c", @ANYBLOB="00ffffffe900000005000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=r2], 0x50) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) recvmmsg(r2, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/52, 0x34}], 0x1}, 0xe}], 0x2, 0x0, 0x0) unshare(0x20000400) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r5, 0xe) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0xad1, 0x0, 0xc}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x80}, {r5, 0x60}], 0x2, 0x0, 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000008080), 0x1c3581, 0x0) 802.051433ms ago: executing program 4 (id=5234): r0 = socket(0x6, 0x1, 0xfdfffffd) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) 707.108965ms ago: executing program 4 (id=5235): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x7, 0x3ff, 0x9, 0x1a, 0x602, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 0s ago: executing program 0 (id=5236): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}, 0xfffffdef}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) (async) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) dup(r0) kernel console output (not intermixed with test programs): 94967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21105 comm="syz.3.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0af8eec9 code=0x7ffc0000 [ 1144.900576][ T5906] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1145.091529][ T5906] usb 6-1: config 0 has an invalid interface number: 36 but max is 0 [ 1145.248855][ T5906] usb 6-1: config 0 has no interface number 0 [ 1145.279584][ T5906] usb 6-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=ce.72 [ 1145.325144][ T5906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.355643][ T5906] usb 6-1: Product: syz [ 1145.372554][ T5906] usb 6-1: Manufacturer: syz [ 1145.391098][ T5906] usb 6-1: SerialNumber: syz [ 1145.413521][ T5906] usb 6-1: config 0 descriptor?? [ 1145.441673][ T5906] gspca_main: spca505-2.14.0 probing 0733:0430 [ 1145.981176][ T5906] gspca_spca505: reg write: error -71 [ 1145.995742][ T5906] spca505 6-1:0.36: probe with driver spca505 failed with error -5 [ 1146.026564][ T5906] usb 6-1: USB disconnect, device number 103 [ 1146.930141][ T5928] usb 6-1: new full-speed USB device number 104 using dummy_hcd [ 1147.192520][ T5928] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1147.222773][ T5928] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1147.258339][ T5928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1147.304952][ T5928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1147.424590][ T5928] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1147.440838][ T5928] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1147.464424][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1147.486192][ T5928] usb 6-1: Product: syz [ 1147.506185][ T5928] usb 6-1: Manufacturer: syz [ 1147.511161][ T5928] usb 6-1: SerialNumber: syz [ 1147.518530][ T5928] usb 6-1: config 0 descriptor?? [ 1147.604203][T21137] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1147.941695][ T5928] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 1147.962012][ T5928] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -5 [ 1147.982800][ T5928] usb 6-1: USB disconnect, device number 104 [ 1148.709842][T21161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3817'. [ 1148.718808][T21161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3817'. [ 1149.172778][T21169] loop6: detected capacity change from 0 to 2560 [ 1149.183922][T21169] buffer_io_error: 310 callbacks suppressed [ 1149.189886][T21169] Buffer I/O error on dev loop6, logical block 0, async page read [ 1149.198904][T21169] Buffer I/O error on dev loop6, logical block 0, async page read [ 1149.207714][T21169] Buffer I/O error on dev loop6, logical block 0, async page read [ 1149.224539][T21169] Buffer I/O error on dev loop6, logical block 0, async page read [ 1149.233433][T21169] Buffer I/O error on dev loop6, logical block 0, async page read [ 1149.243773][T21169] Buffer I/O error on dev loop6, logical block 0, async page read [ 1149.253264][T21169] Buffer I/O error on dev loop6, logical block 0, async page read [ 1149.262030][T21169] Buffer I/O error on dev loop6, logical block 0, async page read [ 1149.270105][T21169] ldm_validate_partition_table(): Disk read failed. [ 1149.277136][T21169] Buffer I/O error on dev loop6, logical block 0, async page read [ 1149.285270][T21169] Buffer I/O error on dev loop6, logical block 0, async page read [ 1149.293354][T21169] Dev loop6: unable to read RDB block 0 [ 1149.299307][T21169] loop6: unable to read partition table [ 1149.305454][T21169] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 1149.389448][T21173] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3820'. [ 1149.407211][T21171] netlink: 'syz.5.3818': attribute type 7 has an invalid length. [ 1153.239750][T21214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3832'. [ 1153.274767][T21214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3832'. [ 1153.682057][ T49] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1153.682160][T21214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3832'. [ 1153.713191][ T49] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1153.936610][ T49] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1153.944570][T21214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3832'. [ 1154.229888][ T49] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1154.242361][T21227] bond_slave_1: mtu less than device minimum [ 1156.498481][T21277] sp0: Synchronizing with TNC [ 1158.007300][T21294] netlink: 'syz.4.3853': attribute type 1 has an invalid length. [ 1158.940418][T21310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3858'. [ 1158.949872][T21310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3858'. [ 1158.959123][T21310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3858'. [ 1158.968255][T21310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3858'. [ 1158.978911][T21310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3858'. [ 1158.987923][T21310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3858'. [ 1158.997051][T21310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3858'. [ 1159.006080][T21310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3858'. [ 1159.015076][T21310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3858'. [ 1159.024409][T21310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3858'. [ 1159.033390][T21310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3858'. [ 1159.042347][T21310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3858'. [ 1159.182977][T21311] netlink: 'syz.7.3856': attribute type 7 has an invalid length. [ 1159.846209][T21319] netlink: 'syz.3.3857': attribute type 7 has an invalid length. [ 1159.997262][T21321] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1160.044116][T21321] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1160.072416][T21321] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1160.089128][T21321] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1160.113313][T21321] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1160.141349][T21321] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1160.163481][T21321] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1160.179507][T21321] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1160.197977][T21321] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1160.224158][T21321] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1161.781166][ T5906] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1162.110376][ T5906] usb 5-1: Using ep0 maxpacket: 16 [ 1162.313159][ T5906] usb 5-1: config 0 has an invalid interface number: 147 but max is 0 [ 1162.366152][ T5906] usb 5-1: config 0 has no interface number 0 [ 1162.399403][ T5906] usb 5-1: config 0 interface 147 altsetting 0 bulk endpoint 0xA has invalid maxpacket 32 [ 1162.426950][ T5906] usb 5-1: config 0 interface 147 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 1162.498837][ T5906] usb 5-1: config 0 interface 147 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1162.653681][ T5906] usb 5-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=5b.44 [ 1162.673014][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.690409][ T5906] usb 5-1: Product: syz [ 1162.695873][ T5906] usb 5-1: Manufacturer: syz [ 1162.703256][ T5906] usb 5-1: SerialNumber: syz [ 1162.773716][ T5906] usb 5-1: config 0 descriptor?? [ 1162.781175][T21342] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1162.788406][T21342] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1162.997994][T21342] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1163.225506][ T5906] net1080 5-1:0.147: probe with driver net1080 failed with error -71 [ 1163.591282][ T5906] usb 5-1: USB disconnect, device number 89 [ 1164.150105][T14751] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1164.357732][ T5906] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 1164.382408][T14751] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1164.402575][T14751] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1164.413256][T14751] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1164.426192][T14751] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1164.436120][T14751] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.446863][T14751] usb 5-1: config 0 descriptor?? [ 1164.520173][ T5906] usb 6-1: Using ep0 maxpacket: 32 [ 1164.527851][ T5906] usb 6-1: config 7 has an invalid interface number: 66 but max is 1 [ 1164.546289][ T5906] usb 6-1: config 7 has an invalid interface number: 83 but max is 1 [ 1164.555555][ T5906] usb 6-1: config 7 has no interface number 0 [ 1164.562062][ T5906] usb 6-1: config 7 has no interface number 1 [ 1164.568174][ T5906] usb 6-1: config 7 interface 66 altsetting 11 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1164.582730][ T5906] usb 6-1: config 7 interface 66 altsetting 11 has an endpoint descriptor with address 0x9C, changing to 0x8C [ 1164.601704][ T5906] usb 6-1: config 7 interface 66 altsetting 11 endpoint 0x8C has an invalid bInterval 118, changing to 7 [ 1164.614611][ T5906] usb 6-1: config 7 interface 66 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 1164.626962][ T5906] usb 6-1: config 7 interface 66 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 1164.643425][ T9] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1164.644286][ T5906] usb 6-1: config 7 interface 66 altsetting 11 has 7 endpoint descriptors, different from the interface descriptor's value: 6 [ 1164.672499][ T5906] usb 6-1: config 7 interface 83 altsetting 152 has an invalid descriptor for endpoint zero, skipping [ 1164.688556][ T5906] usb 6-1: config 7 interface 66 has no altsetting 0 [ 1164.695515][ T5906] usb 6-1: config 7 interface 83 has no altsetting 0 [ 1164.711423][ T5906] usb 6-1: New USB device found, idVendor=1608, idProduct=0002, bcdDevice=f5.01 [ 1164.730104][ T5906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.738139][ T5906] usb 6-1: Product: 磻㙷噁ᵧ钛䛡￦쬦㪛뗨쯋칈莿쯌峫픨捳䜺⼵疳킊ꈲ蓼୔獵噰ᢻ캪홦꿥ব逥骹촫᰽熂瑎欽嶁Ẉ幃솧汜赐촀媒賻꿴ꠦꙗ㭨ꃄᑶ싀垡咊㇎槞륣跘㐀ἤ溂⩳ꖘⵚ⌻蠣끛뎪ꥁ뤠䟖趠⨑㹎鐨鰰힜쭀࿄옋㾝쏃햼ꂛᘆ낟떉隬劋탚 [ 1164.768371][ C1] vkms_vblank_simulate: vblank timer overrun [ 1164.777989][ T5906] usb 6-1: Manufacturer: ࠇ [ 1164.782843][ T5906] usb 6-1: SerialNumber: ⭡釆୳ꋼᵪꨝᶟ繢ᑸ灴ᇨ칔ᩪꩻ䓍㻀쑤礏鴓栶長⑍Ꜻ轏孽썼氆喰狹몀강෣ⵉ쇒迩繢甾䈍顈眽땀눬啟ᐔ⟵揺ꨃ绠鑯㇂䗶⯅鷽㢎驇ꬉɔṡ䢌墷ꯩᨏ涤ౕ렳쨾왋놀㋘巢㖦㥭낕ꔜ잛௠闛궷᧊遆䩣ꦅ侒忆Ɣ춏䩗⒨⠱⣊祀ຐ؉宓 [ 1164.803901][ T9] usb 4-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 1164.815863][ C1] vkms_vblank_simulate: vblank timer overrun [ 1164.856397][ T9] usb 4-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 1164.870154][ T9] usb 4-1: Product: syz [ 1164.874351][ T9] usb 4-1: Manufacturer: syz [ 1164.879301][ T9] usb 4-1: SerialNumber: syz [ 1164.951137][ T9] usb 4-1: config 0 descriptor?? [ 1164.972304][ T9] usb 4-1: selecting invalid altsetting 1 [ 1164.978043][ T9] comedi comedi5: could not switch to alternate setting 1 [ 1165.000120][ T9] usbduxfast 4-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 1165.052595][T14751] hid_parser_main: 73 callbacks suppressed [ 1165.052614][T14751] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x1 [ 1165.079941][T14751] plantronics 0003:047F:FFFF.002D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1165.398791][T21374] netlink: 'syz.4.3874': attribute type 4 has an invalid length. [ 1165.665621][T14751] usb 5-1: USB disconnect, device number 90 [ 1165.709353][T21426] fido_id[21426]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1165.758460][ T5906] io_edgeport 6-1:7.66: required endpoints missing [ 1165.758580][ T9] usb 4-1: USB disconnect, device number 61 [ 1165.792105][ T5906] io_edgeport 6-1:7.83: required endpoints missing [ 1165.815053][ T5906] usb 6-1: USB disconnect, device number 105 [ 1167.287175][T21438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1167.306145][T21438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1167.490267][ T9] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1167.520712][ T1091] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.546804][ T1091] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.570549][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.592439][ T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.639060][T21459] tipc: Started in network mode [ 1167.647760][T21459] tipc: Node identity f611a5a5c70c, cluster identity 4711 [ 1167.665257][T21459] tipc: Enabled bearer , priority 0 [ 1167.693356][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1167.743146][T21463] syzkaller0: entered promiscuous mode [ 1167.753751][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1167.786317][T21463] syzkaller0: entered allmulticast mode [ 1167.834271][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1167.903505][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1167.960929][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1168.001504][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.103310][ T9] usb 6-1: config 0 descriptor?? [ 1168.117585][T21464] syzkaller0: mtu greater than device maximum [ 1168.174484][T21458] tipc: Resetting bearer [ 1168.338226][T21458] tipc: Disabling bearer [ 1168.659128][T21452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1168.673044][T21452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1168.687639][ T9] HID 045e:07da: Invalid code 65791 type 1 [ 1168.718705][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.002E/input/input39 [ 1168.757487][T21473] netlink: 'syz.0.3893': attribute type 7 has an invalid length. [ 1168.787204][ T9] microsoft 0003:045E:07DA.002E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1168.919819][ T9] usb 6-1: USB disconnect, device number 106 [ 1170.180249][ T9] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 1170.414254][T21481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12336 sclass=netlink_route_socket pid=21481 comm=syz.4.3897 [ 1170.444491][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1170.464297][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1170.495714][ T9] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1170.509730][T21491] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 1170.520177][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.547329][ T9] usb 6-1: config 0 descriptor?? [ 1171.489200][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1171.489215][ T30] audit: type=1400 audit(2000000447.320:1491): avc: denied { override_creds } for pid=21503 comm="syz.4.3903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1171.622711][T21503] fanotify_encode_fh: 1052 callbacks suppressed [ 1171.622723][T21503] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1172.764311][ T30] audit: type=1400 audit(2000000448.590:1492): avc: denied { mounton } for pid=21521 comm="syz.4.3908" path="/180/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 1172.854986][ T9] uclogic 0003:256C:006D.002F: v1 frame probing failed: -71 [ 1172.866477][ T9] uclogic 0003:256C:006D.002F: failed probing parameters: -71 [ 1172.875373][ T9] uclogic 0003:256C:006D.002F: probe with driver uclogic failed with error -71 [ 1172.911946][ T30] audit: type=1800 audit(2000000448.640:1493): pid=21524 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.3908" name="/" dev="9p" ino=2 res=0 errno=0 [ 1172.914382][ T9] usb 6-1: USB disconnect, device number 107 [ 1173.146645][T21531] netlink: 'syz.5.3909': attribute type 7 has an invalid length. [ 1173.466274][T21534] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1175.158827][T21561] __nla_validate_parse: 56 callbacks suppressed [ 1175.158844][T21561] netlink: 212288 bytes leftover after parsing attributes in process `syz.0.3919'. [ 1175.449347][T21572] FAULT_INJECTION: forcing a failure. [ 1175.449347][T21572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1175.463007][T21572] CPU: 1 UID: 0 PID: 21572 Comm: syz.4.3921 Not tainted syzkaller #0 PREEMPT(full) [ 1175.463029][T21572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1175.463039][T21572] Call Trace: [ 1175.463046][T21572] [ 1175.463058][T21572] dump_stack_lvl+0x16c/0x1f0 [ 1175.463085][T21572] should_fail_ex+0x512/0x640 [ 1175.463111][T21572] _copy_from_user+0x2e/0xd0 [ 1175.463137][T21572] snd_seq_oss_write+0x397/0x7d0 [ 1175.463160][T21572] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 1175.463178][T21572] ? finish_task_switch.isra.0+0x21c/0xc10 [ 1175.463207][T21572] ? bpf_lsm_file_permission+0x9/0x10 [ 1175.463233][T21572] ? __pfx_odev_write+0x10/0x10 [ 1175.463257][T21572] odev_write+0x51/0xa0 [ 1175.463281][T21572] vfs_write+0x29d/0x11d0 [ 1175.463305][T21572] ? __pfx_vfs_write+0x10/0x10 [ 1175.463321][T21572] ? find_held_lock+0x2b/0x80 [ 1175.463343][T21572] ? __fget_files+0x204/0x3c0 [ 1175.463367][T21572] ? __fget_files+0x20e/0x3c0 [ 1175.463393][T21572] ksys_write+0x12a/0x250 [ 1175.463412][T21572] ? __pfx_ksys_write+0x10/0x10 [ 1175.463441][T21572] do_syscall_64+0xcd/0x4e0 [ 1175.463466][T21572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1175.463484][T21572] RIP: 0033:0x7ff05198eec9 [ 1175.463498][T21572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1175.463515][T21572] RSP: 002b:00007ff052784038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1175.463532][T21572] RAX: ffffffffffffffda RBX: 00007ff051be6180 RCX: 00007ff05198eec9 [ 1175.463543][T21572] RDX: 0000000000000458 RSI: 0000200000000580 RDI: 0000000000000006 [ 1175.463553][T21572] RBP: 00007ff052784090 R08: 0000000000000000 R09: 0000000000000000 [ 1175.463564][T21572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1175.463575][T21572] R13: 00007ff051be6218 R14: 00007ff051be6180 R15: 00007ffcdd77bc58 [ 1175.463598][T21572] [ 1175.767939][T21577] virtio-fs: tag not found [ 1176.542492][T21587] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1176.639880][ T5907] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1176.711106][T21594] netlink: 'syz.4.3925': attribute type 7 has an invalid length. [ 1176.802076][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.808931][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1176.817705][ T5907] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 52, changing to 7 [ 1176.831177][ T5907] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 9272, setting to 1024 [ 1176.843468][ T5907] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1176.853373][ T5907] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.898272][ T5907] usb 6-1: config 0 descriptor?? [ 1178.013070][ T5907] ath6kl: Failed to submit usb control message: -110 [ 1178.022664][ T5907] ath6kl: unable to send the bmi data to the device: -110 [ 1178.060622][ T5907] ath6kl: Unable to send get target info: -110 [ 1178.083156][ T5907] ath6kl: Failed to init ath6kl core: -110 [ 1178.105256][ T5907] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1178.123271][T21606] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3931'. [ 1178.787827][T21617] overlayfs: overlapping lowerdir path [ 1178.801823][T21622] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3936'. [ 1178.980381][ T5928] usb 6-1: USB disconnect, device number 108 [ 1179.098960][T21616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3936'. [ 1180.047592][T21645] fuse: Unknown parameter '0x0000000000000003' [ 1181.095670][T21662] virtio-fs: tag not found [ 1181.462964][ T5170] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1181.482223][ T5170] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1181.491289][ T5170] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1181.499572][ T5170] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1181.509788][ T5170] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1181.628018][T21664] lo speed is unknown, defaulting to 1000 [ 1181.643954][T21664] vxcan1 speed is unknown, defaulting to 1000 [ 1182.008631][T21664] chnl_net:caif_netlink_parms(): no params data found [ 1182.315606][T21664] bridge0: port 1(bridge_slave_0) entered blocking state [ 1182.335502][T21664] bridge0: port 1(bridge_slave_0) entered disabled state [ 1182.369873][T21664] bridge_slave_0: entered allmulticast mode [ 1182.395876][T21664] bridge_slave_0: entered promiscuous mode [ 1182.429566][T21664] bridge0: port 2(bridge_slave_1) entered blocking state [ 1182.462604][T21664] bridge0: port 2(bridge_slave_1) entered disabled state [ 1182.513497][T21664] bridge_slave_1: entered allmulticast mode [ 1182.528869][T21664] bridge_slave_1: entered promiscuous mode [ 1182.771891][T21664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1182.803876][T21664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1183.281041][T21664] team0: Port device team_slave_0 added [ 1183.305476][T21664] team0: Port device team_slave_1 added [ 1183.404533][T21664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1183.450144][T21664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1183.490388][T21664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1183.502947][T21664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1183.513189][T21664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1183.545177][T21664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1183.604783][T14464] Bluetooth: hci4: command tx timeout [ 1183.775936][T21689] sp0: Synchronizing with TNC [ 1183.793278][T21664] hsr_slave_0: entered promiscuous mode [ 1183.800787][T21664] hsr_slave_1: entered promiscuous mode [ 1183.816349][T21664] debugfs: 'hsr0' already exists in 'hsr' [ 1183.829528][T21664] Cannot create hsr debugfs directory [ 1184.116400][T21664] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.284885][T21664] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.351694][T21664] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.419526][T21664] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.759782][T21664] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1184.772232][T21664] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1184.788497][T21664] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1184.803025][T21664] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1184.936399][T21664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1184.966043][T21664] 8021q: adding VLAN 0 to HW filter on device team0 [ 1184.991035][T12056] bridge0: port 1(bridge_slave_0) entered blocking state [ 1184.998167][T12056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1185.042331][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state [ 1185.049478][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1185.597790][T21664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1185.680714][T14464] Bluetooth: hci4: command tx timeout [ 1187.764217][T14464] Bluetooth: hci4: command tx timeout [ 1189.048970][T21664] veth0_vlan: entered promiscuous mode [ 1189.096339][T21664] veth1_vlan: entered promiscuous mode [ 1189.141857][T21664] veth0_macvtap: entered promiscuous mode [ 1189.168786][T21664] veth1_macvtap: entered promiscuous mode [ 1189.289806][T21664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1189.321759][T21664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1189.356261][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.872450][T14464] Bluetooth: hci4: command tx timeout [ 1189.918967][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.053825][T21768] No source specified [ 1190.064734][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.076018][T21768] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3968'. [ 1190.158594][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.299725][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1190.319716][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1190.347313][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1190.355798][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1190.430376][T14751] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 1190.653652][T14751] usb 4-1: config 0 has an invalid interface number: 109 but max is 0 [ 1190.766900][T21791] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3974'. [ 1190.778458][T21791] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3974'. [ 1190.787630][T21791] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3974'. [ 1190.796952][T21791] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3974'. [ 1190.926853][T14751] usb 4-1: config 0 has no interface number 0 [ 1190.971319][T14751] usb 4-1: config 0 interface 109 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1191.028636][T14751] usb 4-1: config 0 interface 109 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1191.098123][T14751] usb 4-1: New USB device found, idVendor=100d, idProduct=cb01, bcdDevice=84.d1 [ 1191.146965][T14751] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.006847][T14751] usb 4-1: config 0 descriptor?? [ 1192.167717][T21768] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1193.123877][T14751] usb 4-1: can't set config #0, error -71 [ 1193.223997][T14751] usb 4-1: USB disconnect, device number 62 [ 1193.416606][ T1206] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1193.970166][ T1206] usb 5-1: Using ep0 maxpacket: 32 [ 1193.977976][ T1206] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1193.987905][ T1206] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1194.003722][ T1206] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.021578][ T1206] usb 5-1: Product: syz [ 1194.029086][ T1206] usb 5-1: Manufacturer: syz [ 1194.045967][ T1206] usb 5-1: SerialNumber: syz [ 1194.065111][ T1206] usb 5-1: config 0 descriptor?? [ 1194.377566][T21835] No control pipe specified [ 1194.642974][ T1206] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 1194.704720][T21841] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 1195.050460][T21846] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 0, id = 0 [ 1195.179039][ T1206] gs_usb 5-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 1195.442562][ T1206] usb 5-1: USB disconnect, device number 91 [ 1195.540396][ T30] audit: type=1326 audit(2000000471.370:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21855 comm="syz.5.3992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f315a98eec9 code=0x7ffc0000 [ 1195.565461][T21859] debugfs: '!' already exists in 'ieee80211' [ 1195.640539][ T30] audit: type=1326 audit(2000000471.370:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21855 comm="syz.5.3992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f315a98eec9 code=0x7ffc0000 [ 1195.907828][ T30] audit: type=1326 audit(2000000471.370:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21855 comm="syz.5.3992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f315a98eec9 code=0x7ffc0000 [ 1195.940163][ T30] audit: type=1326 audit(2000000471.370:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21855 comm="syz.5.3992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f315a98eec9 code=0x7ffc0000 [ 1195.993905][ T30] audit: type=1326 audit(2000000471.370:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21855 comm="syz.5.3992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f315a98eec9 code=0x7ffc0000 [ 1196.019948][T21864] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=21864 comm=syz.7.3993 [ 1196.045847][ T30] audit: type=1326 audit(2000000471.370:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21855 comm="syz.5.3992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f315a98eec9 code=0x7ffc0000 [ 1196.069269][ C0] vkms_vblank_simulate: vblank timer overrun [ 1196.084678][ T30] audit: type=1326 audit(2000000471.370:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21855 comm="syz.5.3992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f315a98eec9 code=0x7ffc0000 [ 1196.108124][ C0] vkms_vblank_simulate: vblank timer overrun [ 1196.181414][T21873] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3993'. [ 1196.421707][ T30] audit: type=1326 audit(2000000471.370:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21855 comm="syz.5.3992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f315a98eec9 code=0x7ffc0000 [ 1196.485016][ T30] audit: type=1326 audit(2000000471.370:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21855 comm="syz.5.3992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f315a98eec9 code=0x7ffc0000 [ 1196.535106][ T30] audit: type=1326 audit(2000000471.440:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21855 comm="syz.5.3992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f315a98eec9 code=0x7ffc0000 [ 1197.200639][ T1206] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1197.364392][ T1206] usb 5-1: Using ep0 maxpacket: 16 [ 1197.371622][ T1206] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1197.417447][ T1206] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1197.494860][ T1206] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1197.564947][ T1206] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.582930][ T1206] usb 5-1: config 0 descriptor?? [ 1198.078658][ T1206] corsair 0003:1B1C:1B02.0030: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.4-1/input0 [ 1198.606693][T21859] loop6: detected capacity change from 0 to 63 [ 1198.623091][ T1206] corsair 0003:1B1C:1B02.0030: Failed to get K90 initial state (error -71). [ 1198.644519][ T1206] usb 5-1: USB disconnect, device number 92 [ 1198.798206][T19994] buffer_io_error: 11 callbacks suppressed [ 1198.798221][T19994] Buffer I/O error on dev loop6, logical block 0, async page read [ 1198.846131][T19994] Buffer I/O error on dev loop6, logical block 0, async page read [ 1198.865723][T19994] Buffer I/O error on dev loop6, logical block 0, async page read [ 1198.882871][T19994] Buffer I/O error on dev loop6, logical block 0, async page read [ 1198.891858][T19994] Buffer I/O error on dev loop6, logical block 0, async page read [ 1199.607533][T21942] siw: device registration error -23 [ 1199.768759][T21944] netlink: 341 bytes leftover after parsing attributes in process `syz.0.4004'. [ 1199.879012][T21947] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4005'. [ 1200.285768][T21954] overlayfs: failed to clone upperpath [ 1201.523426][ T1206] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 1201.708805][ T1206] usb 6-1: Using ep0 maxpacket: 16 [ 1201.791393][ T1206] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1201.821412][ T1206] usb 6-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 1201.842775][ T1206] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.867168][ T1206] usb 6-1: config 0 descriptor?? [ 1202.513250][T21976] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1202.527116][T21976] Error validating options; rc = [-22] [ 1202.632308][ T1206] mcp2200 0003:04D8:00DF.0031: USB HID v0.05 Device [HID 04d8:00df] on usb-dummy_hcd.5-1/input0 [ 1204.341586][ T10] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1204.500155][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 1204.507859][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1204.519520][ T10] usb 5-1: config 4 interface 0 has no altsetting 0 [ 1204.532547][ T10] usb 5-1: string descriptor 0 read error: -22 [ 1204.539272][ T10] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1204.553427][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.926065][ T10] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1204.991348][ T10] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1205.038132][ T10] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1205.092592][T14762] usb 6-1: USB disconnect, device number 109 [ 1205.108120][ T10] usb 5-1: media controller created [ 1205.132850][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1205.185256][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 1205.284780][ T10] usb 5-1: USB disconnect, device number 93 [ 1205.774815][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 1205.774831][ T30] audit: type=1804 audit(2000000481.610:1521): pid=22004 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.4024" name="/newroot/207/file0" dev="tmpfs" ino=1129 res=1 errno=0 [ 1205.949682][T14762] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 1206.140181][T14762] usb 6-1: Using ep0 maxpacket: 8 [ 1206.148702][T14762] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1206.158530][T14762] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.168828][T14762] usb 6-1: Product: syz [ 1206.173279][T14762] usb 6-1: Manufacturer: syz [ 1206.178713][T14762] usb 6-1: SerialNumber: syz [ 1206.193074][T14762] usb 6-1: config 0 descriptor?? [ 1206.299884][T14762] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1206.726510][T22011] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1206.726510][T22011] program syz.0.4025 not setting count and/or reply_len properly [ 1206.970749][T14762] gspca_sonixj: reg_r err -32 [ 1206.976566][T14762] sonixj 6-1:0.0: probe with driver sonixj failed with error -32 [ 1207.174516][T14762] usb 6-1: USB disconnect, device number 110 [ 1207.603896][T22026] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1207.616232][T22026] bridge0: port 2(bridge_slave_1) entered disabled state [ 1207.623780][T22026] bridge0: port 1(bridge_slave_0) entered disabled state [ 1207.658878][T22018] orangefs_mount: mount request failed with -4 [ 1207.799631][T22035] netlink: 'syz.0.4031': attribute type 10 has an invalid length. [ 1207.887239][T22035] veth0_vlan: left promiscuous mode [ 1207.905821][T22035] veth0_vlan: entered promiscuous mode [ 1207.913367][T14464] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 1207.925224][T22035] team0: Device veth0_vlan failed to register rx_handler [ 1208.483672][T22052] usb usb7: usbfs: process 22052 (syz.0.4036) did not claim interface 0 before use [ 1209.053679][T22057] overlayfs: failed to clone upperpath [ 1209.944732][ T30] audit: type=1326 audit(2000000485.780:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22067 comm="syz.7.4041" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2dd1b8eec9 code=0x0 [ 1210.814678][ T5170] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1210.824311][ T5170] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1210.835813][ T5170] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1210.847946][ T5170] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1210.855507][ T5170] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1210.995432][T12056] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 47919 - 0 [ 1211.022382][T12056] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1211.088526][T22079] lo speed is unknown, defaulting to 1000 [ 1211.141293][T22079] vxcan1 speed is unknown, defaulting to 1000 [ 1211.177043][T12056] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 47919 - 0 [ 1211.204609][T22090] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4048'. [ 1211.222134][T12056] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1211.721507][T12056] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 47919 - 0 [ 1211.743404][T12056] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1211.883522][T12056] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 47919 - 0 [ 1211.914751][T12056] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1211.958491][T22098] netlink: 140 bytes leftover after parsing attributes in process `syz.0.4046'. [ 1212.826815][T22079] chnl_net:caif_netlink_parms(): no params data found [ 1212.960154][T14464] Bluetooth: hci0: command tx timeout [ 1213.242803][T12056] bridge_slave_1: left allmulticast mode [ 1213.248477][T12056] bridge_slave_1: left promiscuous mode [ 1213.255361][T12056] bridge0: port 2(bridge_slave_1) entered disabled state [ 1213.286458][T12056] bridge_slave_0: left allmulticast mode [ 1213.292256][T12056] bridge_slave_0: left promiscuous mode [ 1213.297923][T12056] bridge0: port 1(bridge_slave_0) entered disabled state [ 1213.680384][T14464] Bluetooth: hci1: unexpected event for opcode 0x200a [ 1215.181595][T14464] Bluetooth: hci0: command tx timeout [ 1215.195727][T22168] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4063'. [ 1215.206080][T22168] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4063'. [ 1215.783979][T22172] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1215.828982][T12056] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1215.843892][T12056] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1215.855623][T12056] bond0 (unregistering): Released all slaves [ 1215.879011][T22174] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4064'. [ 1215.992345][T12056] bond1 (unregistering): Released all slaves [ 1216.147377][T12056] tipc: Left network mode [ 1216.152696][T22079] bridge0: port 1(bridge_slave_0) entered blocking state [ 1216.164218][T22079] bridge0: port 1(bridge_slave_0) entered disabled state [ 1216.172575][T22079] bridge_slave_0: entered allmulticast mode [ 1216.179905][T22079] bridge_slave_0: entered promiscuous mode [ 1216.193633][T22079] bridge0: port 2(bridge_slave_1) entered blocking state [ 1216.202796][T22079] bridge0: port 2(bridge_slave_1) entered disabled state [ 1216.218246][T22079] bridge_slave_1: entered allmulticast mode [ 1216.233060][T22079] bridge_slave_1: entered promiscuous mode [ 1216.335051][T22079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1216.391621][T22079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1216.468907][T22079] team0: Port device team_slave_0 added [ 1216.542563][T22079] team0: Port device team_slave_1 added [ 1216.629814][T22079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1216.643298][T22079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1216.686712][T22079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1216.749500][T22079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1216.787069][T22079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1216.833214][T22079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1217.536631][T14464] Bluetooth: hci0: command tx timeout [ 1217.579317][T12056] hsr_slave_0: left promiscuous mode [ 1217.611454][T12056] hsr_slave_1: left promiscuous mode [ 1217.617144][ T30] audit: type=1400 audit(2000000493.450:1523): avc: denied { audit_read } for pid=22207 comm="syz.4.4069" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1217.626610][T12056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1217.658681][T12056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1217.811902][T12056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1217.819663][T12056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1218.073718][T22221] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4073'. [ 1218.085747][T12056] veth1_macvtap: left promiscuous mode [ 1218.091922][T12056] veth0_macvtap: left promiscuous mode [ 1218.098014][T12056] veth1_vlan: left promiscuous mode [ 1218.106557][T12056] veth0_vlan: left promiscuous mode [ 1218.418949][T22229] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 1218.709900][T22242] fuse: Unknown parameter '0x000000000000000a0x0000000000000000' [ 1219.534285][T22254] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 1219.574670][T12056] team0 (unregistering): Port device team_slave_1 removed [ 1219.600146][T14464] Bluetooth: hci0: command tx timeout [ 1219.720710][T12056] team0 (unregistering): Port device team_slave_0 removed [ 1220.344764][T22079] hsr_slave_0: entered promiscuous mode [ 1220.351233][T22079] hsr_slave_1: entered promiscuous mode [ 1220.357102][T22079] debugfs: 'hsr0' already exists in 'hsr' [ 1220.362921][T22079] Cannot create hsr debugfs directory [ 1222.526809][T22274] IPVS: stopping master sync thread 22278 ... [ 1222.563649][T22272] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4084'. [ 1222.573088][T22272] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4084'. [ 1223.146786][T22079] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1223.241059][T22290] ceph: No mds server is up or the cluster is laggy [ 1223.252056][ T10] libceph: connect (1)[c::]:6789 error -101 [ 1223.288547][T22293] ceph: No mds server is up or the cluster is laggy [ 1223.296439][ T5907] libceph: connect (1)[b::]:6789 error -101 [ 1223.302659][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1223.332637][ T5907] libceph: mon0 (1)[b::]:6789 connect error [ 1223.358429][T22079] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1223.460655][T22079] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1223.515957][T22079] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1223.858755][T22079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1224.192400][T22079] 8021q: adding VLAN 0 to HW filter on device team0 [ 1224.341748][ T6001] bridge0: port 1(bridge_slave_0) entered blocking state [ 1224.348894][ T6001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1224.404192][ T6001] bridge0: port 2(bridge_slave_1) entered blocking state [ 1224.411344][ T6001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1224.467874][T22321] IPVS: Error connecting to the multicast addr [ 1224.663897][T22079] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1224.951243][ T30] audit: type=1400 audit(2000000500.750:1524): avc: denied { lock } for pid=22327 comm="syz.5.4095" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1225.063725][ T30] audit: type=1400 audit(2000000500.770:1525): avc: denied { remount } for pid=22327 comm="syz.5.4095" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1226.235527][T22079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1226.261850][T22349] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4098'. [ 1226.466941][ T30] audit: type=1400 audit(2000000502.300:1526): avc: denied { write } for pid=5914 comm="kworker/1:6" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=87108 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1226.709975][T22349] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4098'. [ 1226.955451][T22366] No source specified [ 1227.082384][T22366] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4102'. [ 1227.186595][T22358] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1227.278806][T22079] veth0_vlan: entered promiscuous mode [ 1227.319804][T22079] veth1_vlan: entered promiscuous mode [ 1227.440759][T22079] veth0_macvtap: entered promiscuous mode [ 1227.456961][T22079] veth1_macvtap: entered promiscuous mode [ 1227.652987][T22079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1227.676858][T22079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1227.726710][T22385] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 1227.746279][ T49] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.769891][ T49] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.807582][ T49] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.875164][ T49] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.875861][T22389] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 0, id = 0 [ 1228.074559][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1228.116133][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1228.166422][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1228.193280][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1228.330348][ T5928] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 1228.786923][ T5928] usb 6-1: Using ep0 maxpacket: 8 [ 1228.827436][ T5928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1228.859243][ T5928] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1228.893046][ T5928] usb 6-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 1229.278422][ T5928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.400979][ T5928] usb 6-1: config 0 descriptor?? [ 1229.833067][ T5928] usbhid 6-1:0.0: can't add hid device: -71 [ 1229.839518][ T5928] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1229.881636][T22421] netlink: 'syz.7.4113': attribute type 2 has an invalid length. [ 1229.891616][ T5928] usb 6-1: USB disconnect, device number 111 [ 1229.899990][T22421] netlink: 'syz.7.4113': attribute type 1 has an invalid length. [ 1230.822730][T22433] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 1230.880730][ T9] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1231.051472][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1231.098206][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1231.212226][ T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 1231.230096][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.298213][ T9] usb 5-1: config 0 descriptor?? [ 1231.323047][T22445] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 1231.784204][ T9] mcp2200 0003:04D8:00DF.0032: USB HID v0.05 Device [HID 04d8:00df] on usb-dummy_hcd.4-1/input0 [ 1234.977421][T22461] sp0: Synchronizing with TNC [ 1235.104823][ T5928] usb 5-1: USB disconnect, device number 94 [ 1235.659219][T22503] IPVS: Error connecting to the multicast addr [ 1235.820734][ T5907] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 1236.040202][ T5907] usb 6-1: Using ep0 maxpacket: 16 [ 1236.065327][ T5907] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1236.106719][ T5907] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1236.131987][ T5907] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1236.149409][ T5907] usb 6-1: config 0 descriptor?? [ 1236.158453][T22514] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4140'. [ 1236.869035][ T5907] mcp2221 0003:04D8:00DD.0033: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 1237.290421][ T5928] usb 6-1: USB disconnect, device number 112 [ 1238.059900][T22545] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 1238.249639][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.267910][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.663183][T22561] lo speed is unknown, defaulting to 1000 [ 1238.669661][T22561] vxcan1 speed is unknown, defaulting to 1000 [ 1238.808127][T22570] overlayfs: failed to clone lowerpath [ 1239.218781][T22581] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 1242.210506][ T5907] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 1242.760398][ T5907] usb 6-1: Using ep0 maxpacket: 32 [ 1242.783113][ T5907] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1242.796972][ T5907] usb 6-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=d4.09 [ 1242.808469][ T5907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.820690][ T5907] usb 6-1: Product: syz [ 1242.824914][ T5907] usb 6-1: Manufacturer: syz [ 1242.890464][ T5907] usb 6-1: SerialNumber: syz [ 1242.900617][ T5907] usb 6-1: config 0 descriptor?? [ 1244.180724][ T30] audit: type=1400 audit(2000000520.020:1527): avc: denied { watch watch_reads } for pid=22637 comm="syz.8.4164" path="/proc/46/net/netfilter" dev="proc" ino=4026533899 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 1244.205934][ C1] vkms_vblank_simulate: vblank timer overrun [ 1245.016730][ T5907] peak_usb 6-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 1245.026743][ T5907] peak_usb 6-1:0.0: unable to read PCAN-USB serial number (err -22) [ 1245.181486][ T5907] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -22 [ 1245.256317][T22657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1245.551581][T22649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1245.811518][ T92] usb 6-1: USB disconnect, device number 113 [ 1247.031093][T22677] sp0: Synchronizing with TNC [ 1247.525859][T22694] netlink: 'syz.5.4174': attribute type 15 has an invalid length. [ 1247.533809][T22694] netlink: 666 bytes leftover after parsing attributes in process `syz.5.4174'. [ 1247.810196][ T92] usb 6-1: new full-speed USB device number 114 using dummy_hcd [ 1248.565480][ T92] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1248.669779][ T92] usb 6-1: not running at top speed; connect to a high speed hub [ 1248.744898][ T92] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1248.785068][ T92] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1248.826122][ T92] usb 6-1: string descriptor 0 read error: -22 [ 1248.847128][ T92] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1248.948816][ T92] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.554422][ T92] usb 6-1: 0:2 : does not exist [ 1250.904109][ T92] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1250.911399][ T30] audit: type=1400 audit(2000000526.210:1528): avc: denied { bind } for pid=22717 comm="syz.8.4179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1250.939467][ T92] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1250.959628][ T92] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1250.980488][ T92] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 1252.235192][ T92] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1252.591854][ T92] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1252.664939][ T92] usb 6-1: USB disconnect, device number 114 [ 1252.677901][ T30] audit: type=1400 audit(2000000528.510:1529): avc: denied { read open } for pid=22751 comm="syz.5.4187" path="/" dev="configfs" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1253.988848][T22762] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=22762 comm=syz.8.4188 [ 1257.283667][T22778] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4193'. [ 1257.971176][T22788] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1259.242897][T22812] siw: device registration error -23 [ 1260.976346][T22846] sp0: Synchronizing with TNC [ 1261.117557][T22851] [U] [ 1262.001509][ T30] audit: type=1400 audit(2000000537.840:1530): avc: denied { read } for pid=22857 comm="syz.4.4214" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1262.036000][ T30] audit: type=1400 audit(2000000537.870:1531): avc: denied { ioctl } for pid=22857 comm="syz.4.4214" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1262.313327][ T5928] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1262.668361][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1262.681750][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1262.695571][ T5928] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1262.704903][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.714743][ T5928] usb 5-1: Product: syz [ 1262.723549][ T5928] usb 5-1: Manufacturer: syz [ 1262.730552][ T5928] usb 5-1: SerialNumber: syz [ 1262.767500][T22874] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 1262.797612][ T5928] usb 5-1: config 0 descriptor?? [ 1262.934381][ T5928] usb 5-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 1263.177245][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 1263.371412][ T5928] usb 5-1: USB disconnect, device number 95 [ 1263.418655][T20034] udevd[20034]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1263.608008][T22883] netlink: 260 bytes leftover after parsing attributes in process `syz.8.4221'. [ 1264.903108][T22902] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1264.906768][T22905] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 1264.987432][T22909] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 0, id = 0 [ 1264.990115][ T5928] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 1265.242818][ T5928] usb 6-1: Using ep0 maxpacket: 8 [ 1265.256057][ T5928] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1265.273346][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.309924][ T5928] usb 6-1: Product: syz [ 1266.483998][ T5928] usb 6-1: Manufacturer: syz [ 1266.523982][ T5928] usb 6-1: SerialNumber: syz [ 1266.531146][ T5928] usb 6-1: config 0 descriptor?? [ 1266.621166][ T5928] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1267.210879][T22929] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 1267.795343][T22932] loop6: detected capacity change from 0 to 524288000 [ 1268.154885][ T30] audit: type=1326 audit(2000000543.990:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22936 comm="syz.0.4236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e17d8eec9 code=0x7fc00000 [ 1268.250073][ T5928] gspca_sonixj: i2c_w8 err -71 [ 1268.290332][ T5928] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 1268.294637][ T5928] usb 6-1: USB disconnect, device number 115 [ 1268.694468][ T30] audit: type=1326 audit(2000000544.530:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22936 comm="syz.0.4236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8e17d8eec9 code=0x7fc00000 [ 1268.810546][T14751] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1268.991349][T14751] usb 5-1: Using ep0 maxpacket: 16 [ 1269.048480][T14751] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1269.067453][T14751] usb 5-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 1269.095323][T14751] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.108874][T14751] usb 5-1: config 0 descriptor?? [ 1269.568953][T14751] mcp2200 0003:04D8:00DF.0034: USB HID v0.05 Device [HID 04d8:00df] on usb-dummy_hcd.4-1/input0 [ 1269.975976][T22982] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 1270.326491][ T30] audit: type=1326 audit(2000000546.160:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22989 comm="syz.5.4250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f315a98eec9 code=0x7ffc0000 [ 1270.445721][ T30] audit: type=1326 audit(2000000546.160:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22989 comm="syz.5.4250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f315a98eec9 code=0x7ffc0000 [ 1270.559420][ T30] audit: type=1326 audit(2000000546.160:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22989 comm="syz.5.4250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f315a98eec9 code=0x7ffc0000 [ 1270.620633][ T30] audit: type=1326 audit(2000000546.160:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22989 comm="syz.5.4250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f315a98eec9 code=0x7ffc0000 [ 1270.694062][ T30] audit: type=1326 audit(2000000546.160:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22989 comm="syz.5.4250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f315a98eec9 code=0x7ffc0000 [ 1270.748853][T22991] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 1270.757449][T22991] CPU: 0 UID: 0 PID: 22991 Comm: syz.5.4250 Not tainted syzkaller #0 PREEMPT(full) [ 1270.757474][T22991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1270.757486][T22991] Call Trace: [ 1270.757493][T22991] [ 1270.757501][T22991] dump_stack_lvl+0x16c/0x1f0 [ 1270.757529][T22991] sysfs_warn_dup+0x7f/0xa0 [ 1270.757554][T22991] sysfs_do_create_link_sd+0x124/0x140 [ 1270.757580][T22991] sysfs_create_link+0x61/0xc0 [ 1270.757604][T22991] device_add+0x62c/0x1aa0 [ 1270.757646][T22991] ? __pfx_device_add+0x10/0x10 [ 1270.757672][T22991] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1270.757695][T22991] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 1270.757721][T22991] wiphy_register+0x1df4/0x29f0 [ 1270.757744][T22991] ? netdev_run_todo+0x864/0x1320 [ 1270.757768][T22991] ? __dev_printk+0x1f0/0x270 [ 1270.757792][T22991] ? __pfx_wiphy_register+0x10/0x10 [ 1270.757824][T22991] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 1270.757852][T22991] ieee80211_register_hw+0x2546/0x4120 [ 1270.757885][T22991] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1270.757914][T22991] ? find_held_lock+0x2b/0x80 [ 1270.757938][T22991] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1270.757958][T22991] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1270.757979][T22991] ? __hrtimer_setup+0x176/0x280 [ 1270.758002][T22991] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 1270.758043][T22991] ? trace_kmalloc+0x2b/0xd0 [ 1270.758065][T22991] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 1270.758085][T22991] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1270.758109][T22991] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 1270.758137][T22991] ? __asan_memcpy+0x3c/0x60 [ 1270.758169][T22991] hwsim_new_radio_nl+0xb51/0x12c0 [ 1270.758199][T22991] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1270.758235][T22991] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1270.758263][T22991] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1270.758297][T22991] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1270.758326][T22991] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1270.758361][T22991] ? bpf_lsm_capable+0x9/0x10 [ 1270.758386][T22991] ? security_capable+0x7e/0x260 [ 1270.758408][T22991] ? ns_capable+0xd7/0x110 [ 1270.758432][T22991] genl_rcv_msg+0x55c/0x800 [ 1270.758462][T22991] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1270.758489][T22991] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1270.758522][T22991] netlink_rcv_skb+0x155/0x420 [ 1270.758544][T22991] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1270.758571][T22991] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1270.758606][T22991] ? netlink_deliver_tap+0x1ae/0xd30 [ 1270.758639][T22991] genl_rcv+0x28/0x40 [ 1270.758663][T22991] netlink_unicast+0x5aa/0x870 [ 1270.758691][T22991] ? __pfx_netlink_unicast+0x10/0x10 [ 1270.758717][T22991] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1270.758750][T22991] netlink_sendmsg+0x8d1/0xdd0 [ 1270.758780][T22991] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1270.758812][T22991] ____sys_sendmsg+0xa98/0xc70 [ 1270.758842][T22991] ? copy_msghdr_from_user+0x10a/0x160 [ 1270.758864][T22991] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1270.758901][T22991] ___sys_sendmsg+0x134/0x1d0 [ 1270.758924][T22991] ? __pfx____sys_sendmsg+0x10/0x10 [ 1270.758977][T22991] __sys_sendmsg+0x16d/0x220 [ 1270.758999][T22991] ? __pfx___sys_sendmsg+0x10/0x10 [ 1270.759031][T22991] ? __secure_computing+0x28e/0x3b0 [ 1270.759061][T22991] do_syscall_64+0xcd/0x4e0 [ 1270.759087][T22991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1270.759105][T22991] RIP: 0033:0x7f315a98eec9 [ 1270.759119][T22991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1270.759135][T22991] RSP: 002b:00007f315b853038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1270.759152][T22991] RAX: ffffffffffffffda RBX: 00007f315abe6090 RCX: 00007f315a98eec9 [ 1270.759163][T22991] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000008 [ 1270.759174][T22991] RBP: 00007f315aa11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1270.759184][T22991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1270.759194][T22991] R13: 00007f315abe6128 R14: 00007f315abe6090 R15: 00007fff94704938 [ 1270.759217][T22991] [ 1271.189090][ T30] audit: type=1326 audit(2000000546.160:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22989 comm="syz.5.4250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f315a98eec9 code=0x7ffc0000 [ 1271.212577][ T30] audit: type=1326 audit(2000000546.160:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22989 comm="syz.5.4250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f315a98eec9 code=0x7ffc0000 [ 1271.236093][ T30] audit: type=1326 audit(2000000546.160:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22989 comm="syz.5.4250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f315a98eec9 code=0x7ffc0000 [ 1271.818133][ T5914] usb 5-1: USB disconnect, device number 96 [ 1273.971701][T23044] netlink: 'syz.8.4265': attribute type 1 has an invalid length. [ 1274.023269][T23048] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4265'. [ 1274.090159][ T5928] usb 6-1: new full-speed USB device number 116 using dummy_hcd [ 1274.152066][T23044] netlink: 'syz.8.4265': attribute type 1 has an invalid length. [ 1274.987384][ T5928] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1274.997539][ T5928] usb 6-1: not running at top speed; connect to a high speed hub [ 1275.020131][ T5928] usb 6-1: config 1 has an invalid interface number: 138 but max is 0 [ 1275.028305][ T5928] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1275.038979][ T5928] usb 6-1: config 1 has no interface number 0 [ 1275.045137][ T5928] usb 6-1: config 1 interface 138 altsetting 252 endpoint 0xC has invalid wMaxPacketSize 0 [ 1275.095386][ T5928] usb 6-1: config 1 interface 138 has no altsetting 0 [ 1275.127237][ T5928] usb 6-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 1275.140320][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.158939][ T5928] usb 6-1: Product: syz [ 1275.188932][ T5928] usb 6-1: Manufacturer: syz [ 1275.220881][ T5928] usb 6-1: SerialNumber: syz [ 1275.296232][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1275.296244][ T30] audit: type=1400 audit(2000000551.130:1543): avc: denied { mounton } for pid=23070 comm="syz.4.4273" path="/proc/978/task" dev="proc" ino=89744 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1275.477805][ T5928] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1275.548709][ T5928] usb 6-1: USB disconnect, device number 116 [ 1275.644901][T21055] udevd[21055]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.138/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1277.118773][ T30] audit: type=1326 audit(2000000552.950:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23104 comm="syz.8.4284" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2832d8eec9 code=0x0 [ 1278.648634][T23139] SELinux: failed to load policy [ 1280.050884][ T5928] kernel write not supported for file /binder/stats (pid: 5928 comm: kworker/0:4) [ 1280.590178][ T5928] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1280.872275][ T5928] usb 5-1: Using ep0 maxpacket: 8 [ 1280.950730][ T5928] usb 5-1: config 1 interface 0 altsetting 64 bulk endpoint 0x82 has invalid maxpacket 32 [ 1281.069444][T23159] : renamed from wg2 (while UP) [ 1281.069452][T23160] netlink: 'syz.5.4298': attribute type 21 has an invalid length. [ 1281.082804][T23160] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4298'. [ 1281.109574][ T5928] usb 5-1: config 1 interface 0 altsetting 64 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1281.144611][T23160] netlink: 'syz.5.4298': attribute type 5 has an invalid length. [ 1281.152411][T23160] netlink: 'syz.5.4298': attribute type 6 has an invalid length. [ 1281.162130][T23160] netlink: 3 bytes leftover after parsing attributes in process `syz.5.4298'. [ 1281.201902][ T5928] usb 5-1: config 1 interface 0 altsetting 64 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1281.289511][ T5928] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1281.319706][ T5928] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1281.336748][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.353682][ T5928] usb 5-1: Product: syz [ 1281.362975][ T5928] usb 5-1: Manufacturer: syz [ 1281.373058][ T5928] usb 5-1: SerialNumber: syz [ 1281.393388][T23153] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1281.409253][T23153] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1281.658549][ T5928] usb 5-1: bad CDC descriptors [ 1281.686927][ T5928] usb 5-1: USB disconnect, device number 97 [ 1283.744328][T23195] sp0: Synchronizing with TNC [ 1284.117238][T23212] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1284.640562][T23217] siw: device registration error -23 [ 1285.296852][T23226] input: syz1 as /devices/virtual/input/input41 [ 1285.463486][ T30] audit: type=1400 audit(2000000561.300:1545): avc: denied { setopt } for pid=23228 comm="syz.7.4316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1285.700042][ T5907] IPVS: starting estimator thread 0... [ 1285.800934][T23236] IPVS: using max 43 ests per chain, 103200 per kthread [ 1286.193378][T23252] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4324'. [ 1286.216343][T23252] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4324'. [ 1286.241850][T23252] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4324'. [ 1287.477600][T23283] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4335'. [ 1288.098312][ T30] audit: type=1400 audit(2000000563.930:1546): avc: denied { map } for pid=23307 comm="syz.0.4345" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 1288.210732][ T30] audit: type=1400 audit(2000000563.930:1547): avc: denied { execute } for pid=23307 comm="syz.0.4345" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 1289.730173][T23365] tmpfs: Unexpected value for 'inode32' [ 1289.858097][T23375] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4372'. [ 1289.915521][T23378] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4372'. [ 1289.971976][T23375] bond1: entered promiscuous mode [ 1289.982933][T23381] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4372'. [ 1289.987467][T23375] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1290.017531][T23378] bridge1: entered promiscuous mode [ 1290.062361][T23378] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1291.037927][T23381] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 1291.085377][T23415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4384'. [ 1291.137366][T23381] bridge1: left promiscuous mode [ 1291.174056][T23381] bond1 (unregistering): Released all slaves [ 1291.637751][T23437] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4394'. [ 1291.705600][T23441] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4394'. [ 1291.733114][T23439] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 1291.740205][T23441] team0: No ports can be present during mode change [ 1293.464534][T23495] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4417'. [ 1294.356495][ T30] audit: type=1326 audit(2000000570.180:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23512 comm="syz.0.4424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e17d8eec9 code=0x7ffc0000 [ 1294.418511][ T30] audit: type=1326 audit(2000000570.180:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23512 comm="syz.0.4424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e17d8eec9 code=0x7ffc0000 [ 1294.446252][ T30] audit: type=1326 audit(2000000570.190:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23512 comm="syz.0.4424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e17d8eec9 code=0x7ffc0000 [ 1294.550413][ T30] audit: type=1326 audit(2000000570.190:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23512 comm="syz.0.4424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e17d8eec9 code=0x7ffc0000 [ 1294.645494][ T30] audit: type=1326 audit(2000000570.190:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23512 comm="syz.0.4424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f8e17d8eec9 code=0x7ffc0000 [ 1294.672780][ T30] audit: type=1326 audit(2000000570.190:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23512 comm="syz.0.4424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e17d8eec9 code=0x7ffc0000 [ 1294.699542][ T30] audit: type=1326 audit(2000000570.190:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23512 comm="syz.0.4424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8e17d8eec9 code=0x7ffc0000 [ 1294.726224][ T30] audit: type=1326 audit(2000000570.190:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23512 comm="syz.0.4424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8e17d8eec9 code=0x7ffc0000 [ 1294.853619][ T5907] Process accounting resumed [ 1295.171147][T23532] overlayfs: failed to clone upperpath [ 1296.333546][T23561] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4442'. [ 1296.478570][T23563] 8021q: VLANs not supported on gre0 [ 1297.565826][ T30] audit: type=1400 audit(2000000573.400:1556): avc: denied { write } for pid=23622 comm="syz.8.4470" lport=33589 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1297.669304][T23626] overlayfs: failed to clone upperpath [ 1297.894748][ T30] audit: type=1400 audit(2000000573.730:1557): avc: denied { watch watch_reads } for pid=23635 comm="syz.7.4475" path="/" dev="configfs" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1298.252398][T23656] overlayfs: failed to clone upperpath [ 1298.481133][T23674] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4490'. [ 1298.481922][T23662] fuse: root generation should be zero [ 1299.069480][T23706] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4504'. [ 1299.685478][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.693126][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.763055][T23728] 9pnet_fd: Insufficient options for proto=fd [ 1300.473917][ T30] audit: type=1800 audit(2000000576.310:1558): pid=23731 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.4513" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1300.843642][T23788] veth1_to_bond: entered promiscuous mode [ 1300.860566][T23782] veth1_to_bond: left promiscuous mode [ 1300.952685][T23795] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4541'. [ 1302.148325][T23824] netlink: 'syz.7.4549': attribute type 7 has an invalid length. [ 1302.249492][T23832] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 1302.558529][T23840] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4556'. [ 1305.233194][T23875] fuse: Bad value for 'fd' [ 1306.068381][T23881] program syz.5.4570 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1306.086844][ T5170] Bluetooth: hci4: unexpected event for opcode 0x040d [ 1306.788436][T23907] fuse: Bad value for 'fd' [ 1307.966527][T23911] overlayfs: failed to clone upperpath [ 1308.203036][T23912] overlayfs: overlapping lowerdir path [ 1308.981970][ T9] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 1309.210064][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1309.216701][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1309.236132][ T9] usb 6-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1309.256870][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1309.291557][ T9] usb 6-1: config 0 descriptor?? [ 1309.724690][ T9] steelseries 0003:1038:1410.0035: report_id 2273257344 is invalid [ 1309.735289][ T9] steelseries 0003:1038:1410.0035: item 0 4 1 8 parsing failed [ 1309.762620][ T9] steelseries 0003:1038:1410.0035: parse failed [ 1309.774816][ T9] steelseries 0003:1038:1410.0035: probe with driver steelseries failed with error -22 [ 1309.948286][ T5907] usb 6-1: USB disconnect, device number 117 [ 1311.870354][ T5907] usb 6-1: new full-speed USB device number 118 using dummy_hcd [ 1312.120408][ T5907] usb 6-1: config 0 has an invalid interface number: 113 but max is 0 [ 1312.128571][ T5907] usb 6-1: config 0 has no interface number 0 [ 1312.155684][ T5907] usb 6-1: config 0 interface 113 has no altsetting 0 [ 1312.167388][ T5907] usb 6-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1312.178922][ T5907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.199289][ T5907] usb 6-1: Product: syz [ 1312.216073][T23950] fuse: Bad value for 'fd' [ 1312.226518][ T5907] usb 6-1: Manufacturer: syz [ 1312.234940][ T5907] usb 6-1: SerialNumber: syz [ 1312.245979][ T5907] usb 6-1: config 0 descriptor?? [ 1312.575166][ C1] usb 6-1: NFC: Urb failure (status -71) [ 1312.582894][ C1] usb 6-1: NFC: Urb failure (status -71) [ 1312.591608][ T5907] usb 6-1: NFC: Unable to get FW version [ 1312.597599][ T5907] pn533_usb 6-1:0.113: probe with driver pn533_usb failed with error -71 [ 1312.609785][ T5907] usb 6-1: USB disconnect, device number 118 [ 1312.968383][T23962] afs: Unknown parameter 'dynv/kvm' [ 1315.126024][ T30] audit: type=1400 audit(2000000590.960:1559): avc: denied { mounton } for pid=23997 comm="syz.5.4610" path="/130/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1315.126116][T23998] 9pnet_fd: Insufficient options for proto=fd [ 1315.609973][T24007] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1317.100120][T22388] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 1317.254142][T22388] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1317.287542][T22388] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1317.307868][T22388] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1317.317766][T22388] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.331912][T24027] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1317.351999][T22388] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1317.638150][T24048] netlink: 'syz.4.4621': attribute type 2 has an invalid length. [ 1317.646330][T24048] netlink: 'syz.4.4621': attribute type 1 has an invalid length. [ 1317.789270][T24027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1317.874157][T24027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1317.941125][T24027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1318.051385][T24027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1318.092425][T14751] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1318.250144][T14751] usb 5-1: Using ep0 maxpacket: 16 [ 1318.263378][T14751] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1318.273696][T14751] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 1318.286114][T14751] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1318.435766][T14751] usb 5-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 1318.440254][T24062] ISOFS: Unable to identify CD-ROM format. [ 1318.504163][T14751] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.664824][T14751] usb 5-1: Product: syz [ 1318.669329][T14751] usb 5-1: Manufacturer: syz [ 1318.674270][T14751] usb 5-1: SerialNumber: syz [ 1318.682607][T24053] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1318.902265][T24053] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4625'. [ 1318.932261][T24053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1318.945354][T24053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1318.958729][T14751] usblp0: Disabling reads from problematic bidirectional printer [ 1318.974527][T14751] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 98 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 1319.168971][T14751] usb 5-1: USB disconnect, device number 98 [ 1319.414810][T14751] usblp0: removed [ 1319.582178][T22388] usb 6-1: USB disconnect, device number 119 [ 1320.319652][T24084] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1320.331316][T24080] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 1320.815901][T22388] Process accounting resumed [ 1320.916518][T24095] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4637'. [ 1321.860014][T24124] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1322.277177][T24135] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 1322.697714][T24140] veth1_to_bond: entered promiscuous mode [ 1323.252478][T24139] veth1_to_bond: left promiscuous mode [ 1324.099336][ T5914] Process accounting resumed [ 1324.514231][T24180] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 1325.910033][ T5914] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1326.140074][ T5914] usb 5-1: Using ep0 maxpacket: 8 [ 1326.153092][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1326.196344][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1326.240194][ T5914] usb 5-1: New USB device found, idVendor=0404, idProduct=c20e, bcdDevice= 0.00 [ 1326.274018][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.284146][ T5914] usb 5-1: config 0 descriptor?? [ 1326.505082][T22388] Process accounting resumed [ 1326.638197][ T5914] usbhid 5-1:0.0: can't add hid device: -71 [ 1326.660516][ T5914] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1326.730796][ T5914] usb 5-1: USB disconnect, device number 99 [ 1328.745897][T24255] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1328.789902][T24255] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1328.988431][ T3511] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.998802][ T3511] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1329.008579][ T3511] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1329.038104][ T3511] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1331.219444][ T9] Process accounting resumed [ 1332.118719][T24319] netlink: 'syz.5.4703': attribute type 7 has an invalid length. [ 1333.161879][T24336] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4710'. [ 1333.700431][ T5914] usb 5-1: new full-speed USB device number 100 using dummy_hcd [ 1333.873402][ T5914] usb 5-1: config 0 has an invalid interface number: 113 but max is 0 [ 1333.884986][ T5914] usb 5-1: config 0 has no interface number 0 [ 1333.905802][ T5914] usb 5-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 1333.951715][ T5914] usb 5-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1333.963234][ T5914] usb 5-1: config 0 interface 113 has no altsetting 0 [ 1333.993882][ T5914] usb 5-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1334.003548][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.024472][ T5914] usb 5-1: Product: syz [ 1334.029796][ T5914] usb 5-1: Manufacturer: syz [ 1334.036306][ T5914] usb 5-1: SerialNumber: syz [ 1334.056454][ T5914] usb 5-1: config 0 descriptor?? [ 1334.064726][ T5914] pn533_usb 5-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 1334.687310][T24339] No control pipe specified [ 1335.726538][ T9] usb 5-1: USB disconnect, device number 100 [ 1336.551892][T24417] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1336.561017][T24417] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 1336.570050][T24417] overlayfs: missing 'lowerdir' [ 1337.380413][T14751] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1337.443049][T24437] sp0: Synchronizing with TNC [ 1337.530323][T14751] usb 5-1: Using ep0 maxpacket: 16 [ 1337.604626][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 1337.621078][T24443] 9pnet_fd: Insufficient options for proto=fd [ 1337.702450][T14751] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1337.713380][T14751] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1337.726253][T14751] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1337.744721][T14751] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1337.754967][T14751] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.766522][T14751] usb 5-1: Product: syz [ 1337.771545][T14751] usb 5-1: Manufacturer: syz [ 1337.776318][T14751] usb 5-1: SerialNumber: syz [ 1340.161805][T14751] usb 5-1: USB disconnect, device number 101 [ 1340.375797][T14751] Process accounting resumed [ 1341.220762][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1341.239339][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1341.250168][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1341.259266][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1341.266761][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1341.706666][T24514] 9pnet_fd: Insufficient options for proto=fd [ 1343.362033][ T5170] Bluetooth: hci3: command tx timeout [ 1343.619082][T24506] lo speed is unknown, defaulting to 1000 [ 1343.655276][T24506] vxcan1 speed is unknown, defaulting to 1000 [ 1344.069016][T24556] overlayfs: failed to resolve './file1/file0': -2 [ 1344.272543][ T5914] Process accounting resumed [ 1344.409875][T24566] 9pnet_fd: Insufficient options for proto=fd [ 1344.937102][ T30] audit: type=1400 audit(2000000620.766:1560): avc: denied { nlmsg_read } for pid=24573 comm="syz.5.4761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1344.966585][T24506] chnl_net:caif_netlink_parms(): no params data found [ 1345.051995][T24590] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4761'. [ 1345.381435][T24506] bridge0: port 1(bridge_slave_0) entered blocking state [ 1345.440453][ T5170] Bluetooth: hci3: command tx timeout [ 1345.450079][T24506] bridge0: port 1(bridge_slave_0) entered disabled state [ 1345.472750][T24506] bridge_slave_0: entered allmulticast mode [ 1345.554550][T24506] bridge_slave_0: entered promiscuous mode [ 1347.550149][ T5170] Bluetooth: hci3: command tx timeout [ 1349.562685][ T5928] Process accounting resumed [ 1349.600574][ T5170] Bluetooth: hci3: command tx timeout [ 1351.917101][T24506] bridge0: port 2(bridge_slave_1) entered blocking state [ 1351.925807][T24506] bridge0: port 2(bridge_slave_1) entered disabled state [ 1351.933265][T24506] bridge_slave_1: entered allmulticast mode [ 1351.939897][T24506] bridge_slave_1: entered promiscuous mode [ 1352.008117][T24506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1352.034261][T24506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1352.085588][T24506] team0: Port device team_slave_0 added [ 1352.104375][T24506] team0: Port device team_slave_1 added [ 1352.676565][T24506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1352.684447][T24506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1352.712263][T24506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1352.724587][T24506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1352.731625][T24506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1352.757783][T24506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1352.907571][T24506] hsr_slave_0: entered promiscuous mode [ 1352.928125][T24506] hsr_slave_1: entered promiscuous mode [ 1352.943286][T24506] debugfs: 'hsr0' already exists in 'hsr' [ 1352.949327][T24506] Cannot create hsr debugfs directory [ 1353.261463][T24506] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1353.273656][T24506] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1353.321539][T24675] ISOFS: Unable to identify CD-ROM format. [ 1353.349751][T24506] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1353.361208][T24506] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1353.403387][T24506] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1353.413209][T24506] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1353.465737][T24506] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1353.476189][T24506] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1353.588883][T24506] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1353.597626][T24506] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1353.606222][T24506] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1353.614862][T24506] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1353.668218][T24506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1353.684333][T24506] 8021q: adding VLAN 0 to HW filter on device team0 [ 1353.712163][ T6685] bridge0: port 1(bridge_slave_0) entered blocking state [ 1353.719304][ T6685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1353.737776][T12056] bridge0: port 2(bridge_slave_1) entered blocking state [ 1353.744874][T12056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1353.879721][T24506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1353.970253][ T9] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1354.036490][T24506] veth0_vlan: entered promiscuous mode [ 1354.053233][T24506] veth1_vlan: entered promiscuous mode [ 1354.093273][T24506] veth0_macvtap: entered promiscuous mode [ 1354.104967][T24506] veth1_macvtap: entered promiscuous mode [ 1354.122230][T24506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1354.130548][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1354.142120][T24506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1354.142216][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1354.162195][ T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 1354.175360][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1354.179070][ T3511] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.196181][ T9] usb 5-1: config 0 descriptor?? [ 1354.197795][ T3511] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.235365][ T6001] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.267319][ T6001] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.370397][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1354.370454][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1354.571757][ T6685] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1354.571776][ T6685] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1354.719842][ T9] mcp2200 0003:04D8:00DF.0036: USB HID v0.05 Device [HID 04d8:00df] on usb-dummy_hcd.4-1/input0 [ 1355.364309][T24714] ISOFS: Unable to identify CD-ROM format. [ 1357.470872][T14751] usb 5-1: USB disconnect, device number 102 [ 1358.717585][T24765] veth1_to_bond: entered promiscuous mode [ 1358.864176][T24763] veth1_to_bond: left promiscuous mode [ 1360.262821][T24792] tmpfs: Unknown parameter 'uslqu' [ 1360.792275][T24795] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1360.806689][ T30] audit: type=1400 audit(2000000636.646:1561): avc: denied { read } for pid=24794 comm="syz.4.4811" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1360.830442][ T30] audit: type=1400 audit(2000000636.646:1562): avc: denied { open } for pid=24794 comm="syz.4.4811" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1361.136784][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.143167][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.560359][T24804] veth1_to_bond: entered promiscuous mode [ 1361.624966][T24803] veth1_to_bond: left promiscuous mode [ 1362.143697][T24822] sp0: Synchronizing with TNC [ 1362.820072][ T5914] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1362.980377][ T5914] usb 5-1: Using ep0 maxpacket: 16 [ 1362.999640][ T5914] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1363.009172][ T5914] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1363.021724][ T5914] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1363.036157][ T5914] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1363.465382][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.474181][ T5914] usb 5-1: Product: syz [ 1363.478345][ T5914] usb 5-1: Manufacturer: syz [ 1363.486268][ T5914] usb 5-1: SerialNumber: syz [ 1363.859944][T24842] Bluetooth: MGMT ver 1.23 [ 1363.868740][ T5914] usb 5-1: 0:2 : does not exist [ 1363.895553][ T5914] usb 5-1: USB disconnect, device number 103 [ 1364.480408][T24880] SELinux: failed to load policy [ 1365.940108][ T51] Bluetooth: hci3: command 0x0405 tx timeout [ 1367.340275][T24918] sp0: Synchronizing with TNC [ 1369.681947][T24942] 9pnet_fd: Insufficient options for proto=fd [ 1369.705900][T24942] 9pnet_fd: Insufficient options for proto=fd [ 1373.290513][T24993] 9pnet_fd: Insufficient options for proto=fd [ 1373.311409][T24993] 9pnet_fd: Insufficient options for proto=fd [ 1374.291485][ T9] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1374.562633][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1374.616037][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1374.624317][ T9] usb 5-1: config 0 has no interface number 0 [ 1374.652540][ T9] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1375.541474][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1375.570641][ T9] usb 5-1: Product: syz [ 1375.579995][ T9] usb 5-1: Manufacturer: syz [ 1375.584592][ T9] usb 5-1: SerialNumber: syz [ 1375.619910][ T9] usb 5-1: config 0 descriptor?? [ 1375.651453][ T9] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1375.660577][T25020] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1375.671164][T25023] overlayfs: failed to resolve './file0': -2 [ 1375.696124][ T9] usb 5-1: selecting invalid altsetting 1 [ 1375.713206][ T9] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1375.759040][ T9] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1375.819567][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1375.869228][ T9] usb 5-1: media controller created [ 1375.907344][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1376.964501][T25005] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1377.001808][ T9] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1377.016492][ T9] zl10353_read_register: readreg error (reg=127, ret==-32) [ 1377.844469][T25042] ISOFS: Unable to identify CD-ROM format. [ 1377.965690][T25039] ALSA: seq fatal error: cannot create timer (-19) [ 1378.040917][ T9] usb 5-1: USB disconnect, device number 104 [ 1380.086001][T25055] sp0: Synchronizing with TNC [ 1380.196968][T25069] overlayfs: failed to resolve './file0': -2 [ 1380.426519][T25065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4886'. [ 1380.480793][ T30] audit: type=1400 audit(2000000656.319:1563): avc: denied { map } for pid=25060 comm="syz.4.4886" path="socket:[100658]" dev="sockfs" ino=100658 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1380.589294][ T30] audit: type=1400 audit(2000000656.319:1564): avc: denied { accept } for pid=25060 comm="syz.4.4886" path="socket:[100658]" dev="sockfs" ino=100658 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1380.929010][T25080] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4891'. [ 1380.941833][T25080] netlink: 'syz.5.4891': attribute type 2 has an invalid length. [ 1381.095493][T25086] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 1381.156306][T25089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25089 comm=syz.5.4893 [ 1381.812622][T25096] overlayfs: overlapping lowerdir path [ 1381.899438][T25097] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1381.925968][T25097] CIFS mount error: No usable UNC path provided in device string! [ 1381.925968][T25097] [ 1381.936264][T25097] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1381.949772][T25097] FAULT_INJECTION: forcing a failure. [ 1381.949772][T25097] name failslab, interval 1, probability 0, space 0, times 0 [ 1381.962705][T25097] CPU: 1 UID: 0 PID: 25097 Comm: syz.4.4897 Not tainted syzkaller #0 PREEMPT(full) [ 1381.962728][T25097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1381.962738][T25097] Call Trace: [ 1381.962745][T25097] [ 1381.962752][T25097] dump_stack_lvl+0x16c/0x1f0 [ 1381.962780][T25097] should_fail_ex+0x512/0x640 [ 1381.962802][T25097] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1381.962824][T25097] should_failslab+0xc2/0x120 [ 1381.962845][T25097] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1381.962863][T25097] ? d_instantiate+0x77/0x90 [ 1381.962885][T25097] ? alloc_empty_file+0x55/0x1e0 [ 1381.962913][T25097] alloc_empty_file+0x55/0x1e0 [ 1381.962937][T25097] alloc_file_pseudo+0x13a/0x230 [ 1381.962964][T25097] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1381.962991][T25097] ? _raw_spin_unlock+0x28/0x50 [ 1381.963010][T25097] ? alloc_fd+0x471/0x7d0 [ 1381.963032][T25097] __anon_inode_getfile+0xe8/0x280 [ 1381.963058][T25097] anon_inode_getfd+0x52/0xb0 [ 1381.963089][T25097] __x64_sys_fsopen+0x18b/0x240 [ 1381.963115][T25097] do_syscall_64+0xcd/0x4e0 [ 1381.963140][T25097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1381.963158][T25097] RIP: 0033:0x7ff05198eec9 [ 1381.963174][T25097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1381.963192][T25097] RSP: 002b:00007ff052784038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1381.963210][T25097] RAX: ffffffffffffffda RBX: 00007ff051be6180 RCX: 00007ff05198eec9 [ 1381.963222][T25097] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000300 [ 1381.963233][T25097] RBP: 00007ff052784090 R08: 0000000000000000 R09: 0000000000000000 [ 1381.963243][T25097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1381.963253][T25097] R13: 00007ff051be6218 R14: 00007ff051be6180 R15: 00007ffcdd77bc58 [ 1381.963279][T25097] [ 1382.706551][T25109] overlayfs: failed to resolve './file0': -2 [ 1384.221949][T25134] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1384.243595][T25134] team0: Port device batadv1 added [ 1385.073598][T25134] hub 9-0:1.0: USB hub found [ 1385.093156][T25134] hub 9-0:1.0: 1 port detected [ 1385.603838][T25148] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 1387.549550][T25168] overlayfs: failed to resolve './file0': -2 [ 1388.877470][T25197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4919'. [ 1388.886650][T25197] netlink: 'syz.0.4919': attribute type 30 has an invalid length. [ 1389.030384][ T51] Bluetooth: hci1: connection err: -111 [ 1389.368345][T25204] overlayfs: overlapping lowerdir path [ 1389.457522][ T5906] usb 5-1: new full-speed USB device number 105 using dummy_hcd [ 1389.627455][ T5906] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1389.647653][ T5906] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1389.694866][ T5906] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1389.753731][ T5906] usb 5-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 1389.844007][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1389.910847][ T5906] usb 5-1: config 0 descriptor?? [ 1390.196857][T25221] sp0: Synchronizing with TNC [ 1390.432331][ T5906] lenovo 0003:17EF:60A4.0037: hidraw0: USB HID v0.00 Device [HID 17ef:60a4] on usb-dummy_hcd.4-1/input0 [ 1390.712268][T25233] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4933'. [ 1390.750566][T25231] ISOFS: Unable to identify CD-ROM format. [ 1390.897479][T25234] ALSA: seq fatal error: cannot create timer (-19) [ 1392.059663][ T5914] usb 5-1: USB disconnect, device number 105 [ 1392.103663][T25252] overlayfs: overlapping lowerdir path [ 1392.248254][T25258] netlink: 'syz.4.4939': attribute type 1 has an invalid length. [ 1392.667277][ T5906] Process accounting resumed [ 1392.989213][ T30] audit: type=1400 audit(2000000668.814:1565): avc: denied { map } for pid=25283 comm="syz.0.4946" path="socket:[100083]" dev="sockfs" ino=100083 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1393.592034][T25287] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 1393.598548][T25287] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1393.618886][T25287] vhci_hcd vhci_hcd.0: Device attached [ 1393.768123][T25300] vhci_hcd: connection closed [ 1393.768384][ T6685] vhci_hcd: stop threads [ 1393.850312][ T5906] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 1393.890543][ T6685] vhci_hcd: release socket [ 1393.895087][ T6685] vhci_hcd: disconnect device [ 1394.339856][T25303] overlayfs: overlapping lowerdir path [ 1395.335028][T25325] fuse: Bad value for 'fd' [ 1396.066808][T25342] 9pnet_fd: Insufficient options for proto=fd [ 1396.219497][T25349] 9pnet_fd: Insufficient options for proto=fd [ 1396.220251][T25347] sp0: Synchronizing with TNC [ 1397.074476][T25357] fuse: Bad value for 'fd' [ 1398.110662][T25370] sp0: Synchronizing with TNC [ 1398.286501][T25386] netlink: 'syz.8.4976': attribute type 7 has an invalid length. [ 1398.900642][T25396] fuse: Bad value for 'fd' [ 1398.980424][ T5906] vhci_hcd: vhci_device speed not set [ 1400.243356][T25416] sp0: Synchronizing with TNC [ 1403.272585][ T5928] Process accounting resumed [ 1403.850025][ T5928] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1404.003179][ T5928] usb 5-1: Using ep0 maxpacket: 16 [ 1404.014641][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1404.064352][ T5928] usb 5-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 1404.100207][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1404.109746][ T5928] usb 5-1: config 0 descriptor?? [ 1404.938348][ T5928] mcp2200 0003:04D8:00DF.0038: USB HID v0.05 Device [HID 04d8:00df] on usb-dummy_hcd.4-1/input0 [ 1405.252308][T25472] libceph: resolve '4.' (ret=-3): failed [ 1406.033295][ T5906] usb 5-1: USB disconnect, device number 106 [ 1406.636804][T25499] sp0: Synchronizing with TNC [ 1407.355865][T25509] ALSA: seq fatal error: cannot create timer (-19) [ 1407.457570][T25500] ISOFS: Unable to identify CD-ROM format. [ 1407.658293][T14751] Process accounting resumed [ 1407.842459][ T30] audit: type=1326 audit(2000000683.654:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25483 comm="syz.8.5001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2832d8eec9 code=0x7ffc0000 [ 1408.161985][ T30] audit: type=1326 audit(2000000683.654:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25483 comm="syz.8.5001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2832d8eec9 code=0x7ffc0000 [ 1408.952823][T25549] netlink: 'syz.4.5019': attribute type 9 has an invalid length. [ 1409.282541][T25561] sp0: Synchronizing with TNC [ 1409.675148][ T9] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1409.705979][T25574] sp1: Synchronizing with TNC [ 1409.880013][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1409.893477][ T9] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 1409.945619][ T9] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1409.970365][ T9] usb 5-1: config 0 has no interface number 0 [ 1409.998033][ T9] usb 5-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1410.017036][ T9] usb 5-1: config 0 interface 133 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1410.044231][ T9] usb 5-1: config 0 interface 133 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1410.055821][ T9] usb 5-1: config 0 interface 133 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1410.068465][ T9] usb 5-1: config 0 interface 133 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1410.178938][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 1410.196962][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.218262][ T9] usb 5-1: Product: syz [ 1410.236582][ T9] usb 5-1: Manufacturer: syz [ 1410.250304][ T9] usb 5-1: SerialNumber: syz [ 1410.262814][ T9] usb 5-1: config 0 descriptor?? [ 1410.268825][T25561] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1410.282056][T25561] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1410.513984][T25556] [U] [ 1410.533179][ T9] usb 5-1: probing VID:PID(0424:012C) [ 1410.557844][ T9] usb 5-1: vub300 testing BULK OUT EndPoint(0) 0B [ 1410.718447][ T9] usb 5-1: vub300 testing UNKNOWN EndPoint(1) 8F [ 1410.748252][ T9] usb 5-1: vub300 ignoring EndPoint(1) 8F [ 1410.754302][ T9] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 1410.797817][ T9] vub300 5-1:0.133: probe with driver vub300 failed with error -22 [ 1410.823023][ T9] usb 5-1: USB disconnect, device number 107 [ 1413.141902][T25630] overlayfs: missing 'lowerdir' [ 1415.237556][T25654] fuse: Bad value for 'group_id' [ 1415.247895][T25654] fuse: Bad value for 'group_id' [ 1415.600156][T14751] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1415.831603][T14751] usb 9-1: Using ep0 maxpacket: 16 [ 1415.890964][T14751] usb 9-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 1415.960255][T14751] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.968272][T14751] usb 9-1: Product: syz [ 1415.990085][T14751] usb 9-1: Manufacturer: syz [ 1415.995704][T14751] usb 9-1: SerialNumber: syz [ 1416.015683][T14751] usb 9-1: config 0 descriptor?? [ 1416.027176][T14751] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 1416.038641][T14751] usb 9-1: Detected FT-X [ 1416.666634][T14751] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1416.894173][T14751] ftdi_sio 9-1:0.0: GPIO initialisation failed: -5 [ 1416.906659][T14751] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1417.051105][T25689] fuse: Bad value for 'group_id' [ 1417.056073][T25689] fuse: Bad value for 'group_id' [ 1417.620195][T25697] sp0: Synchronizing with TNC [ 1418.990845][T25703] ISOFS: Unable to identify CD-ROM format. [ 1419.015847][T25700] ALSA: seq fatal error: cannot create timer (-19) [ 1419.186461][ T5906] usb 9-1: USB disconnect, device number 2 [ 1419.201452][ T5906] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1419.302239][T25719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5065'. [ 1419.302662][ T5906] ftdi_sio 9-1:0.0: device disconnected [ 1419.857935][ T30] audit: type=1800 audit(2000000695.674:1568): pid=25733 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.5069" name="file0" dev="overlay" ino=1289 res=0 errno=0 [ 1420.357390][T25738] ISOFS: Unable to identify CD-ROM format. [ 1420.375157][T25729] ALSA: seq fatal error: cannot create timer (-19) [ 1420.706076][T25748] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1422.484940][T25770] lo speed is unknown, defaulting to 1000 [ 1422.593130][T25770] vxcan1 speed is unknown, defaulting to 1000 [ 1422.620479][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.626818][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.740131][ T5906] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1423.161361][ T5906] usb 9-1: device descriptor read/64, error -71 [ 1423.396589][ T30] audit: type=1400 audit(2000000699.224:1569): avc: denied { mounton } for pid=25781 comm="syz.4.5084" path="/406/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1423.396715][T25782] overlayfs: missing 'lowerdir' [ 1423.440373][ T5906] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1423.477071][T25783] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1423.661981][ T5906] usb 9-1: device descriptor read/64, error -71 [ 1423.831853][ T5906] usb usb9-port1: attempt power cycle [ 1424.050737][T25788] netlink: 'syz.0.5085': attribute type 3 has an invalid length. [ 1424.058495][T25788] netlink: 'syz.0.5085': attribute type 3 has an invalid length. [ 1424.191585][ T5906] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1424.220476][ T5906] usb 9-1: device descriptor read/8, error -71 [ 1424.228514][T25795] binder: Unknown parameter 'uu;~O|oIV>菭2vuAh< ' [ 1424.550238][ T5906] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1424.604810][T25804] overlayfs: missing 'lowerdir' [ 1425.051239][ T5906] usb 9-1: device descriptor read/8, error -71 [ 1425.160431][ T5906] usb usb9-port1: unable to enumerate USB device [ 1425.307313][T25807] sp0: Synchronizing with TNC [ 1425.920401][ T5906] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1425.926832][T25824] overlayfs: missing 'lowerdir' [ 1425.936467][T25824] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1426.025599][T25826] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1426.090369][ T5906] usb 9-1: Using ep0 maxpacket: 16 [ 1426.097154][ T5906] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1426.109349][ T5906] usb 9-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 1426.118511][ T5906] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1426.141015][ T5906] usb 9-1: config 0 descriptor?? [ 1426.570756][ T5906] mcp2200 0003:04D8:00DF.0039: USB HID v0.05 Device [HID 04d8:00df] on usb-dummy_hcd.8-1/input0 [ 1427.451502][ T5906] usb 9-1: USB disconnect, device number 7 [ 1428.142424][ T30] audit: type=1400 audit(2000000703.974:1570): avc: denied { connect } for pid=25848 comm="syz.8.5104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1428.198281][T25851] 9p: Unknown Cache mode or invalid value l [ 1428.482498][ T9] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1428.702357][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 1428.783650][ T9] usb 9-1: config index 0 descriptor too short (expected 61476, got 36) [ 1428.783719][ T9] usb 9-1: config 224 has an invalid interface number: 61 but max is -1 [ 1428.783760][ T9] usb 9-1: config 224 has an invalid descriptor of length 0, skipping remainder of the config [ 1428.783786][ T9] usb 9-1: config 224 has 1 interface, different from the descriptor's value: 0 [ 1428.783827][ T9] usb 9-1: config 224 has no interface number 0 [ 1428.783934][ T9] usb 9-1: config 224 interface 61 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1428.919758][ T9] usb 9-1: New USB device found, idVendor=093b, idProduct=a005, bcdDevice=1e.fa [ 1428.919791][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.919817][ T9] usb 9-1: Product: syz [ 1428.919852][ T9] usb 9-1: Manufacturer: syz [ 1428.919886][ T9] usb 9-1: SerialNumber: syz [ 1429.481693][ T9] usb 9-1: USB disconnect, device number 8 [ 1429.800190][T25881] 9pnet_fd: Insufficient options for proto=fd [ 1432.466290][T25904] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1432.983971][T25914] sp0: Synchronizing with TNC [ 1433.050726][ T30] audit: type=1400 audit(2000000708.874:1571): avc: denied { write } for pid=25909 comm="syz.7.5124" path="socket:[103595]" dev="sockfs" ino=103595 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1433.391845][ T30] audit: type=1400 audit(2000000709.174:1572): avc: denied { read } for pid=25924 comm="syz.5.5127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1433.906459][T25933] program syz.4.5128 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1434.427986][ T5914] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1435.004957][ T5914] usb 9-1: Using ep0 maxpacket: 16 [ 1435.038521][ T5914] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1435.052371][ T5914] usb 9-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 1435.061737][ T5914] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1435.071627][ T5914] usb 9-1: config 0 descriptor?? [ 1435.717276][ T5914] mcp2200 0003:04D8:00DF.003A: USB HID v0.05 Device [HID 04d8:00df] on usb-dummy_hcd.8-1/input0 [ 1436.573269][ T5914] usb 9-1: USB disconnect, device number 9 [ 1436.635190][T25968] 9pnet_fd: Insufficient options for proto=fd [ 1437.120063][ T51] Bluetooth: hci3: command 0x0405 tx timeout [ 1437.125847][T25975] ISOFS: Unable to identify CD-ROM format. [ 1437.288897][T25970] ALSA: seq fatal error: cannot create timer (-19) [ 1438.601649][T25988] sp0: Synchronizing with TNC [ 1438.621498][ T5914] usb 5-1: new full-speed USB device number 108 using dummy_hcd [ 1438.951886][ T5914] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1438.982263][ T5914] usb 5-1: config 0 has no interface number 0 [ 1439.010991][ T5914] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1439.299649][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1439.333299][ T5914] usb 5-1: config 0 descriptor?? [ 1439.354121][ T5914] usb 5-1: selecting invalid altsetting 1 [ 1439.377763][ T5914] dvb_ttusb_budget: ttusb_init_controller: error [ 1439.397845][ T5914] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1439.583842][ T5914] DVB: Unable to find symbol cx22700_attach() [ 1439.978999][ T5914] DVB: Unable to find symbol tda10046_attach() [ 1439.987866][ T5914] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1440.150660][ T5914] usb 5-1: USB disconnect, device number 108 [ 1440.259369][T26023] 9pnet_fd: Insufficient options for proto=fd [ 1440.282074][T26023] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5151'. [ 1440.833480][T26027] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5155'. [ 1442.815442][T26063] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26063 comm=syz.0.5162 [ 1442.850154][ T92] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1443.109983][ T92] usb 9-1: Using ep0 maxpacket: 8 [ 1443.182868][ T92] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 1443.183434][ T92] usb 9-1: config 0 has no interface number 0 [ 1443.183692][ T92] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1443.183781][ T92] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1443.183816][ T92] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1443.183954][ T92] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1443.184452][ T92] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1443.184634][ T92] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1443.206436][ T92] usb 9-1: config 0 descriptor?? [ 1443.223208][ T92] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1443.423883][T26060] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 1443.467525][ T5914] usb 9-1: USB disconnect, device number 10 [ 1443.478541][ T5914] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 1445.405691][T26112] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5179'. [ 1445.422513][T26112] unsupported nlmsg_type 40 [ 1448.040735][T26149] sctp: [Deprecated]: syz.4.5188 (pid 26149) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1448.040735][T26149] Use struct sctp_sack_info instead [ 1449.225858][T26173] sp0: Synchronizing with TNC [ 1449.336722][T26175] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1452.196998][T26228] ISOFS: Unable to identify CD-ROM format. [ 1452.356408][T26225] ALSA: seq fatal error: cannot create timer (-19) [ 1452.799069][T14751] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 1452.812102][T14751] hid-generic 0000:0000:0000.003B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1453.171002][T26238] fuse: Unknown parameter 'grou00000000000000000000' [ 1453.570007][ T92] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 1453.730391][ T92] usb 6-1: Using ep0 maxpacket: 8 [ 1453.742591][ T92] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1453.764085][ T92] usb 6-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1453.776071][ T92] usb 6-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1453.784825][ T92] usb 6-1: Manufacturer: syz [ 1453.810412][ T92] usb 6-1: config 0 descriptor?? [ 1453.823652][ T92] hub 6-1:0.0: bad descriptor, ignoring hub [ 1453.833319][ T92] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1453.842862][ T92] usb 6-1: selecting invalid altsetting 1 [ 1453.848727][ T92] usb 6-1: Can not set alternate setting to 1, error: -22 [ 1453.862034][ T92] synaptics_usb 6-1:0.0: probe with driver synaptics_usb failed with error -22 [ 1454.326819][T26253] ISOFS: Unable to identify CD-ROM format. [ 1454.379697][T26252] ALSA: seq fatal error: cannot create timer (-19) [ 1454.440214][ T92] usb 6-1: USB disconnect, device number 120 [ 1456.420598][ T30] audit: type=1800 audit(2000000732.254:1573): pid=26281 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.5226" name="/" dev="9p" ino=2 res=0 errno=0 [ 1456.631610][T26290] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 1457.099968][T26297] sp0: Synchronizing with TNC [ 1457.301201][ T5170] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1457.311422][ T5170] CPU: 1 UID: 0 PID: 5170 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 1457.311450][ T5170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1457.311463][ T5170] Workqueue: hci3 hci_rx_work [ 1457.311490][ T5170] Call Trace: [ 1457.311497][ T5170] [ 1457.311506][ T5170] dump_stack_lvl+0x16c/0x1f0 [ 1457.311532][ T5170] sysfs_warn_dup+0x7f/0xa0 [ 1457.311558][ T5170] sysfs_create_dir_ns+0x24b/0x2b0 [ 1457.311582][ T5170] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1457.311604][ T5170] ? find_held_lock+0x2b/0x80 [ 1457.311633][ T5170] ? do_raw_spin_unlock+0x172/0x230 [ 1457.311657][ T5170] kobject_add_internal+0x2c4/0x9b0 [ 1457.311690][ T5170] kobject_add+0x16e/0x240 [ 1457.311717][ T5170] ? __pfx_kobject_add+0x10/0x10 [ 1457.311745][ T5170] ? do_raw_spin_unlock+0x172/0x230 [ 1457.311766][ T5170] ? kobject_put+0xab/0x5a0 [ 1457.311799][ T5170] device_add+0x288/0x1aa0 [ 1457.311826][ T5170] ? __pfx_dev_set_name+0x10/0x10 [ 1457.311844][ T5170] ? __pfx_device_add+0x10/0x10 [ 1457.311870][ T5170] ? mgmt_send_event_skb+0x2fb/0x460 [ 1457.311898][ T5170] hci_conn_add_sysfs+0x17e/0x230 [ 1457.311922][ T5170] le_conn_complete_evt+0x1260/0x2150 [ 1457.311949][ T5170] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1457.311967][ T5170] ? hci_event_packet+0x459/0x11c0 [ 1457.311995][ T5170] hci_le_conn_complete_evt+0x23c/0x370 [ 1457.312021][ T5170] hci_le_meta_evt+0x354/0x5e0 [ 1457.312041][ T5170] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1457.312065][ T5170] hci_event_packet+0x685/0x11c0 [ 1457.312085][ T5170] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1457.312105][ T5170] ? __pfx_hci_event_packet+0x10/0x10 [ 1457.312128][ T5170] ? kcov_remote_start+0x3c9/0x6d0 [ 1457.312148][ T5170] ? lockdep_hardirqs_on+0x7c/0x110 [ 1457.312177][ T5170] hci_rx_work+0x2c5/0x16b0 [ 1457.312200][ T5170] ? rcu_is_watching+0x12/0xc0 [ 1457.312226][ T5170] process_one_work+0x9cc/0x1b70 [ 1457.312257][ T5170] ? __pfx_process_one_work+0x10/0x10 [ 1457.312286][ T5170] ? assign_work+0x1a0/0x250 [ 1457.312307][ T5170] worker_thread+0x6c8/0xf10 [ 1457.312342][ T5170] ? __pfx_worker_thread+0x10/0x10 [ 1457.312362][ T5170] kthread+0x3c2/0x780 [ 1457.312382][ T5170] ? __pfx_kthread+0x10/0x10 [ 1457.312404][ T5170] ? rcu_is_watching+0x12/0xc0 [ 1457.312428][ T5170] ? __pfx_kthread+0x10/0x10 [ 1457.312449][ T5170] ret_from_fork+0x56a/0x730 [ 1457.312466][ T5170] ? __pfx_kthread+0x10/0x10 [ 1457.312486][ T5170] ret_from_fork_asm+0x1a/0x30 [ 1457.312523][ T5170] [ 1457.312546][ T5170] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1457.610211][ T5170] Bluetooth: hci3: failed to register connection device [ 1457.641089][ T5170] ================================================================== [ 1457.649167][ T5170] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0xdb9/0xf80 [ 1457.657077][ T5170] Read of size 8 at addr ffff888041d17480 by task kworker/u9:1/5170 [ 1457.665053][ T5170] [ 1457.667378][ T5170] CPU: 1 UID: 0 PID: 5170 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 1457.667404][ T5170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1457.667419][ T5170] Workqueue: hci3 hci_rx_work [ 1457.667445][ T5170] Call Trace: [ 1457.667452][ T5170] [ 1457.667460][ T5170] dump_stack_lvl+0x116/0x1f0 [ 1457.667485][ T5170] print_report+0xcd/0x630 [ 1457.667506][ T5170] ? __virt_addr_valid+0x81/0x610 [ 1457.667533][ T5170] ? __phys_addr+0xe8/0x180 [ 1457.667558][ T5170] ? l2cap_connect_cfm+0xdb9/0xf80 [ 1457.667576][ T5170] kasan_report+0xe0/0x110 [ 1457.667598][ T5170] ? l2cap_connect_cfm+0xdb9/0xf80 [ 1457.667625][ T5170] l2cap_connect_cfm+0xdb9/0xf80 [ 1457.667647][ T5170] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1457.667668][ T5170] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1457.667689][ T5170] le_conn_complete_evt+0x1ba3/0x2150 [ 1457.667712][ T5170] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1457.667732][ T5170] ? hci_event_packet+0x459/0x11c0 [ 1457.667754][ T5170] hci_le_conn_complete_evt+0x23c/0x370 [ 1457.667775][ T5170] hci_le_meta_evt+0x354/0x5e0 [ 1457.667796][ T5170] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1457.667817][ T5170] hci_event_packet+0x685/0x11c0 [ 1457.667836][ T5170] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1457.667858][ T5170] ? __pfx_hci_event_packet+0x10/0x10 [ 1457.667877][ T5170] ? kcov_remote_start+0x3c9/0x6d0 [ 1457.667898][ T5170] ? lockdep_hardirqs_on+0x7c/0x110 [ 1457.667924][ T5170] hci_rx_work+0x2c5/0x16b0 [ 1457.667945][ T5170] ? rcu_is_watching+0x12/0xc0 [ 1457.667968][ T5170] process_one_work+0x9cc/0x1b70 [ 1457.667993][ T5170] ? __pfx_process_one_work+0x10/0x10 [ 1457.668016][ T5170] ? assign_work+0x1a0/0x250 [ 1457.668032][ T5170] worker_thread+0x6c8/0xf10 [ 1457.668051][ T5170] ? __pfx_worker_thread+0x10/0x10 [ 1457.668065][ T5170] kthread+0x3c2/0x780 [ 1457.668084][ T5170] ? __pfx_kthread+0x10/0x10 [ 1457.668098][ T5170] ? rcu_is_watching+0x12/0xc0 [ 1457.668115][ T5170] ? __pfx_kthread+0x10/0x10 [ 1457.668128][ T5170] ret_from_fork+0x56a/0x730 [ 1457.668141][ T5170] ? __pfx_kthread+0x10/0x10 [ 1457.668155][ T5170] ret_from_fork_asm+0x1a/0x30 [ 1457.668176][ T5170] [ 1457.668181][ T5170] [ 1457.875917][ T5170] Allocated by task 5170: [ 1457.880220][ T5170] kasan_save_stack+0x33/0x60 [ 1457.884879][ T5170] kasan_save_track+0x14/0x30 [ 1457.889531][ T5170] __kasan_kmalloc+0xaa/0xb0 [ 1457.894096][ T5170] l2cap_chan_create+0x44/0x920 [ 1457.898929][ T5170] l2cap_sock_alloc.constprop.0+0xf5/0x1d0 [ 1457.904714][ T5170] l2cap_sock_new_connection_cb+0x101/0x240 [ 1457.910585][ T5170] l2cap_connect_cfm+0x4c7/0xf80 [ 1457.915498][ T5170] le_conn_complete_evt+0x1ba3/0x2150 [ 1457.920862][ T5170] hci_le_conn_complete_evt+0x23c/0x370 [ 1457.926383][ T5170] hci_le_meta_evt+0x354/0x5e0 [ 1457.931125][ T5170] hci_event_packet+0x685/0x11c0 [ 1457.936038][ T5170] hci_rx_work+0x2c5/0x16b0 [ 1457.940531][ T5170] process_one_work+0x9cc/0x1b70 [ 1457.945446][ T5170] worker_thread+0x6c8/0xf10 [ 1457.950013][ T5170] kthread+0x3c2/0x780 [ 1457.954059][ T5170] ret_from_fork+0x56a/0x730 [ 1457.958626][ T5170] ret_from_fork_asm+0x1a/0x30 [ 1457.963368][ T5170] [ 1457.965670][ T5170] Freed by task 26296: [ 1457.969708][ T5170] kasan_save_stack+0x33/0x60 [ 1457.974360][ T5170] kasan_save_track+0x14/0x30 [ 1457.979011][ T5170] kasan_save_free_info+0x3b/0x60 [ 1457.984016][ T5170] __kasan_slab_free+0x60/0x70 [ 1457.988754][ T5170] kfree+0x2b4/0x4d0 [ 1457.992631][ T5170] l2cap_chan_put+0x216/0x2c0 [ 1457.997288][ T5170] l2cap_sock_cleanup_listen+0x4d/0x2a0 [ 1458.002816][ T5170] l2cap_sock_release+0x69/0x250 [ 1458.007733][ T5170] __sock_release+0xb0/0x270 [ 1458.012307][ T5170] sock_close+0x1c/0x30 [ 1458.016448][ T5170] __fput+0x402/0xb70 [ 1458.020412][ T5170] task_work_run+0x150/0x240 [ 1458.024981][ T5170] do_exit+0x86f/0x2bf0 [ 1458.029119][ T5170] do_group_exit+0xd3/0x2a0 [ 1458.033625][ T5170] get_signal+0x2673/0x26d0 [ 1458.038110][ T5170] arch_do_signal_or_restart+0x8f/0x7d0 [ 1458.043636][ T5170] exit_to_user_mode_loop+0x84/0x110 [ 1458.048899][ T5170] do_syscall_64+0x41c/0x4e0 [ 1458.053469][ T5170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1458.059352][ T5170] [ 1458.061655][ T5170] The buggy address belongs to the object at ffff888041d17000 [ 1458.061655][ T5170] which belongs to the cache kmalloc-2k of size 2048 [ 1458.075682][ T5170] The buggy address is located 1152 bytes inside of [ 1458.075682][ T5170] freed 2048-byte region [ffff888041d17000, ffff888041d17800) [ 1458.089627][ T5170] [ 1458.091928][ T5170] The buggy address belongs to the physical page: [ 1458.098313][ T5170] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x41d10 [ 1458.107059][ T5170] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1458.115547][ T5170] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1458.123074][ T5170] page_type: f5(slab) [ 1458.127035][ T5170] raw: 00fff00000000040 ffff88801b842000 ffffea00012ebc00 dead000000000002 [ 1458.135599][ T5170] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 1458.144164][ T5170] head: 00fff00000000040 ffff88801b842000 ffffea00012ebc00 dead000000000002 [ 1458.152816][ T5170] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 1458.161466][ T5170] head: 00fff00000000003 ffffea0001074401 00000000ffffffff 00000000ffffffff [ 1458.170115][ T5170] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1458.178757][ T5170] page dumped because: kasan: bad access detected [ 1458.185141][ T5170] page_owner tracks the page as allocated [ 1458.190829][ T5170] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 21664, tgid 21664 (syz-executor), ts 1184033585366, free_ts 1184006584715 [ 1458.212686][ T5170] post_alloc_hook+0x1c0/0x230 [ 1458.217438][ T5170] get_page_from_freelist+0x132b/0x38e0 [ 1458.222958][ T5170] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1458.228846][ T5170] alloc_pages_mpol+0x1fb/0x550 [ 1458.233674][ T5170] new_slab+0x247/0x330 [ 1458.237812][ T5170] ___slab_alloc+0xcf2/0x1750 [ 1458.242470][ T5170] __slab_alloc.constprop.0+0x56/0xb0 [ 1458.247823][ T5170] __kmalloc_cache_noprof+0xfb/0x3e0 [ 1458.253090][ T5170] rtnl_newlink+0x11b/0x2000 [ 1458.257660][ T5170] rtnetlink_rcv_msg+0x95e/0xe90 [ 1458.262577][ T5170] netlink_rcv_skb+0x155/0x420 [ 1458.267322][ T5170] netlink_unicast+0x5aa/0x870 [ 1458.272067][ T5170] netlink_sendmsg+0x8d1/0xdd0 [ 1458.276809][ T5170] __sys_sendto+0x4a0/0x520 [ 1458.281290][ T5170] __x64_sys_sendto+0xe0/0x1c0 [ 1458.286033][ T5170] do_syscall_64+0xcd/0x4e0 [ 1458.290522][ T5170] page last free pid 21687 tgid 21687 stack trace: [ 1458.296994][ T5170] __free_frozen_pages+0x7d5/0x10f0 [ 1458.302176][ T5170] __put_partials+0x165/0x1c0 [ 1458.306836][ T5170] qlist_free_all+0x4d/0x120 [ 1458.311399][ T5170] kasan_quarantine_reduce+0x195/0x1e0 [ 1458.316833][ T5170] __kasan_slab_alloc+0x69/0x90 [ 1458.321660][ T5170] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 1458.327114][ T5170] vm_area_alloc+0x1f/0x160 [ 1458.331617][ T5170] __mmap_region+0xf90/0x27b0 [ 1458.336269][ T5170] mmap_region+0x1ab/0x3f0 [ 1458.340659][ T5170] do_mmap+0xa3e/0x1210 [ 1458.344796][ T5170] vm_mmap_pgoff+0x29e/0x470 [ 1458.349363][ T5170] ksys_mmap_pgoff+0x7d/0x5c0 [ 1458.354018][ T5170] __x64_sys_mmap+0x125/0x190 [ 1458.358673][ T5170] do_syscall_64+0xcd/0x4e0 [ 1458.363157][ T5170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1458.369025][ T5170] [ 1458.371326][ T5170] Memory state around the buggy address: [ 1458.376930][ T5170] ffff888041d17380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1458.384967][ T5170] ffff888041d17400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1458.393004][ T5170] >ffff888041d17480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1458.401039][ T5170] ^ [ 1458.405087][ T5170] ffff888041d17500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1458.413123][ T5170] ffff888041d17580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1458.421161][ T5170] ================================================================== [ 1458.431277][ T5170] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1458.438478][ T5170] CPU: 1 UID: 0 PID: 5170 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 1458.447914][ T5170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1458.457950][ T5170] Workqueue: hci3 hci_rx_work [ 1458.462614][ T5170] Call Trace: [ 1458.465869][ T5170] [ 1458.468779][ T5170] dump_stack_lvl+0x3d/0x1f0 [ 1458.473354][ T5170] vpanic+0x6e8/0x7a0 [ 1458.477318][ T5170] ? __pfx_vpanic+0x10/0x10 [ 1458.481797][ T5170] ? __pfx_vprintk_emit+0x10/0x10 [ 1458.486805][ T5170] ? l2cap_connect_cfm+0xdb9/0xf80 [ 1458.491896][ T5170] panic+0xca/0xd0 [ 1458.495593][ T5170] ? __pfx_panic+0x10/0x10 [ 1458.499984][ T5170] ? l2cap_connect_cfm+0xdb9/0xf80 [ 1458.505073][ T5170] ? preempt_schedule_common+0x44/0xc0 [ 1458.510511][ T5170] ? preempt_schedule_thunk+0x16/0x30 [ 1458.515867][ T5170] check_panic_on_warn+0xab/0xb0 [ 1458.520783][ T5170] end_report+0x107/0x170 [ 1458.525092][ T5170] kasan_report+0xee/0x110 [ 1458.529490][ T5170] ? l2cap_connect_cfm+0xdb9/0xf80 [ 1458.534584][ T5170] l2cap_connect_cfm+0xdb9/0xf80 [ 1458.539502][ T5170] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1458.544939][ T5170] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1458.550377][ T5170] le_conn_complete_evt+0x1ba3/0x2150 [ 1458.555732][ T5170] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1458.561429][ T5170] ? hci_event_packet+0x459/0x11c0 [ 1458.566521][ T5170] hci_le_conn_complete_evt+0x23c/0x370 [ 1458.572045][ T5170] hci_le_meta_evt+0x354/0x5e0 [ 1458.576790][ T5170] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1458.582856][ T5170] hci_event_packet+0x685/0x11c0 [ 1458.587772][ T5170] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1458.593036][ T5170] ? __pfx_hci_event_packet+0x10/0x10 [ 1458.598389][ T5170] ? kcov_remote_start+0x3c9/0x6d0 [ 1458.603480][ T5170] ? lockdep_hardirqs_on+0x7c/0x110 [ 1458.608662][ T5170] hci_rx_work+0x2c5/0x16b0 [ 1458.613154][ T5170] ? rcu_is_watching+0x12/0xc0 [ 1458.617910][ T5170] process_one_work+0x9cc/0x1b70 [ 1458.622835][ T5170] ? __pfx_process_one_work+0x10/0x10 [ 1458.628197][ T5170] ? assign_work+0x1a0/0x250 [ 1458.632774][ T5170] worker_thread+0x6c8/0xf10 [ 1458.637356][ T5170] ? __pfx_worker_thread+0x10/0x10 [ 1458.642458][ T5170] kthread+0x3c2/0x780 [ 1458.646511][ T5170] ? __pfx_kthread+0x10/0x10 [ 1458.651080][ T5170] ? rcu_is_watching+0x12/0xc0 [ 1458.655825][ T5170] ? __pfx_kthread+0x10/0x10 [ 1458.660395][ T5170] ret_from_fork+0x56a/0x730 [ 1458.664963][ T5170] ? __pfx_kthread+0x10/0x10 [ 1458.669531][ T5170] ret_from_fork_asm+0x1a/0x30 [ 1458.674280][ T5170] [ 1458.677459][ T5170] Kernel Offset: disabled [ 1458.681774][ T5170] Rebooting in 86400 seconds..