last executing test programs: 17m38.551320665s ago: executing program 32 (id=106): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_procfs(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_open_dev$radio(0x0, 0x1, 0x2) r1 = syz_open_dev$sg(0x0, 0x0, 0x8002) fcntl$dupfd(r1, 0x0, r1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 15m18.804073037s ago: executing program 33 (id=354): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r3, 0x40026f33, &(0x7f0000000500)=0x7) 15m3.419574394s ago: executing program 0 (id=395): socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xaa000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd97}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0x4c, 0x1a, 0x180, 0x73, 0x328, 0x258, 0x258, 0x328, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x3}}, @common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x23, 0x3, 0x2, 0x3, 'syz1\x00', 'syz0\x00', {0x2}}}}, {{@uncond, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x2e, 0x8, 0xfb, 0x87, 0x3, @remote, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xff, 0x0, 0xffffff00], [0x8982e4c132e3b466, 0xffffffff, 0xffffff00, 0xff000000], [0xffffff00, 0x0, 0xff000000, 0xffffff00], 0x3420, 0x108}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x458) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000380)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0xfefffffc, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x2}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000340), &(0x7f00000002c0)=0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000005480), 0x0, 0x28008004) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000e001400400000004000000041"], 0x50) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000140)={r5, &(0x7f00000000c0), &(0x7f0000000080)=""/17}, 0x20) ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x41}}) 15m0.21757485s ago: executing program 0 (id=397): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0x0, 0x5, 0x134, 0x48, 0x2}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) 14m59.996873908s ago: executing program 0 (id=399): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x48000}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102392, 0x18ff8) sendmsg$xdp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000340)={0xaa, 0xe0}) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$TIOCSETD(r1, 0x5423, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x400, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x108) timer_create(0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) 14m58.827520183s ago: executing program 0 (id=402): syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) timer_create(0x3, 0x0, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r4], 0x40}}, 0x8080) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r6, 0x0, 0x0}, 0x10) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) 14m57.650881942s ago: executing program 0 (id=403): syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x94, r1, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x51}}}}, [@NL80211_ATTR_TX_RATES={0x6c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0xc}]}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x1, 0x36, 0x6, 0x3, 0x12, 0x3, 0x3, 0x1, 0xb, 0x30, 0x24, 0x12, 0x9, 0x36, 0x2ba74bfd3a33fd53, 0x36, 0x68, 0x4, 0x6c]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x4004040) r2 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r3, 0xa, 0x12) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) readv(r4, &(0x7f0000000400)=[{&(0x7f00000004c0)=""/157, 0x9d}], 0x1) dup2(r3, r4) fcntl$setown(r3, 0x8, r2) tkill(r2, 0x13) 14m48.557164539s ago: executing program 0 (id=416): syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x94, r1, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x51}}}}, [@NL80211_ATTR_TX_RATES={0x6c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0xc}]}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x1, 0x6, 0x3, 0x12, 0x3, 0x3, 0x1, 0xb, 0x30, 0x24, 0x12, 0x9, 0x36, 0x2ba74bfd3a33fd53, 0x36, 0x68, 0x4, 0x6c]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x4004040) r2 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r3, 0xa, 0x12) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) readv(r4, &(0x7f0000000400)=[{&(0x7f00000004c0)=""/157, 0x9d}], 0x1) dup2(r3, r4) fcntl$setown(r3, 0x8, r2) tkill(r2, 0x13) 14m33.418566669s ago: executing program 34 (id=416): syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x94, r1, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x51}}}}, [@NL80211_ATTR_TX_RATES={0x6c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0xc}]}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x1, 0x6, 0x3, 0x12, 0x3, 0x3, 0x1, 0xb, 0x30, 0x24, 0x12, 0x9, 0x36, 0x2ba74bfd3a33fd53, 0x36, 0x68, 0x4, 0x6c]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x4004040) r2 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r3, 0xa, 0x12) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) readv(r4, &(0x7f0000000400)=[{&(0x7f00000004c0)=""/157, 0x9d}], 0x1) dup2(r3, r4) fcntl$setown(r3, 0x8, r2) tkill(r2, 0x13) 12m38.957178008s ago: executing program 1 (id=613): r0 = syz_io_uring_setup(0x57c4, 0x0, 0x0, 0x0, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x800) syz_emit_vhci(0x0, 0x1a) signalfd(r0, &(0x7f0000000000)={[0x8]}, 0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x6d682db9, 0x800) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 12m38.021231165s ago: executing program 1 (id=615): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) recvmsg$can_bcm(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x10150) 12m36.787112393s ago: executing program 1 (id=619): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x35) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x6000) r3 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) write$uinput_user_dev(r3, 0x0, 0x0) 12m31.014655491s ago: executing program 1 (id=623): r0 = syz_io_uring_setup(0x57c4, 0x0, 0x0, 0x0, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x800) syz_emit_vhci(0x0, 0x1a) signalfd(r0, &(0x7f0000000000)={[0x8]}, 0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x6d682db9, 0x800) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 12m28.834282771s ago: executing program 1 (id=627): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)={@map, 0xffffffffffffffff, 0x1c, 0x200c}, 0x20) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) writev(r0, &(0x7f0000000980)=[{&(0x7f0000000680)="c2ffffffff00000000ea36dee4f346f4bfbe11ead98fc8e8e4eb802aecff82545382023e986679fabbc0fb87c23c08170aa59d7b7a8446b40e4a2d3a7ac6c4111c80fffd123c358fb2ac5b9221969dc036e9aa80544fa10b2cf75a3be97b123430064a11cd3dc2c673064196e4f41bb7f4e0d521e3f184881c4f34ccb4ccf273bfc2c462373334e92599f70fca6b2f613748d0c639489951a33587ca0321fca396e05f2083a88730daf0f4396c7ec16d3fad29d41a41b227ff26f3ed34586def775f35fbb43fb3eb4882c794165b7adc255650abcde29b1db3838ce7dd5c6b0e3077430806da764be0", 0xe9}], 0x1) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)}, {&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4701cad04be68907e50e997fc26e4c91ea4feb93f793c265bf4892a900000000000000", 0x40}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86", 0x6c}], 0x3}}], 0x1, 0x2890) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20ba0100380a04002c00128009000100626f6e64000000001c000280060019000400000008000880ff0021ff08000700"], 0x4c}}, 0x8000002) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f00000011c0)=0x1, 0x4) syz_emit_ethernet(0x1ed, &(0x7f00000009c0)={@random="01ab540b7465", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@mpls_uc={0x8847, {[{0x40, 0x0, 0x1}, {0x8}, {0x9, 0x0, 0x1}, {0x8b77, 0x0, 0x1}], @ipv6=@gre_packet={0x2, 0x6, "4188e7", 0x1a7, 0x2f, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, {[@srh={0x16, 0x6, 0x4, 0x3, 0x5, 0x40, 0x81, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x6a, 0x1, [0x8, 0x7], "7ccb380722c4cd25e4763bb84f58852d98a9f867b10a1311a040125af72cf166bb0e20ce80f2ea5299fc0ec6d96d4009daf1db9a1583a4582136eeaa11de0e9bfab191fb4c99708a4a820552aa3a5a90f76a2fa3a805fc2d1a1bce33b27822caa0ff9b02eea585aef3fb"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x100, 0x9, 0xf], "6e8d8261f0880832ebf19a8b3e948fb5c83a6c"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x3, 0x7, 0x6], "0e8899078d608e88cff40aef637a2caf7da723bfcfbe8fba62daae6a7b55293c6b43f87fd8b7644bde17e80f37e148b6839f27486a400f1cb2455fc0a69120bd35eb39d446906fae73cdfbd76275cdb90db051095195f451c7d196f771d7a458416dbca70175bd6860b2b9a4fa36d033496dd673714e4d3ca01be34866f045e79bee801704499164a5ae7915154064538a19cef64f8488fb5e0ca60ffefd"}, {0x8, 0x88be, 0x3, {{0x4, 0x1, 0xd7, 0x0, 0x1, 0x3, 0x1, 0x1}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x3, {{0x2, 0x2, 0x0, 0x0, 0x0, 0x1, 0x5, 0x47}, 0x2, {0x1, 0x9, 0x3, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}}}, &(0x7f0000000bc0)={0x1, 0x4, [0x19b, 0xa6a, 0x34b, 0xb02]}) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 12m28.072810305s ago: executing program 1 (id=629): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_usbip_server_init(0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0xa, 0x8000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mq_open(0x0, 0x42, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x62, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = dup(0xffffffffffffffff) readahead(r3, 0xfff, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) sendto$inet6(r0, 0x0, 0x0, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x9, @loopback, 0xfffffffd}, 0x1c) 12m12.586745105s ago: executing program 35 (id=629): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_usbip_server_init(0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0xa, 0x8000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mq_open(0x0, 0x42, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x62, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = dup(0xffffffffffffffff) readahead(r3, 0xfff, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="b700000050000008bca30000000000002403000040feffff7b1af0ff0000000079a4f0ff000000001f030000000000002e030200000000002604fdffffff000e61142000000000001d430000000000007a0a00fe0000001f6114140000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f2440000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c9494963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c88629a6c921c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fbf05b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71ca3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b60f132a2bf8a858392f34072d99aee0ec70aa6d75096e608d97ac4b7bfa2e0ae3e59718e7a7691a98b1334e34553300000000000000000000000000000000062c7cf52e9624806a4833e1c0059e5a703ab9c2e9b38779270dc5e80af75d509b1a31fe6ed3f8c0172659256dc88de4e377c8a07e95ec5549ae47dc43b93a159a201be254048b9e0857ea3c736c761e686f9b3d0690f035617a12055b2cb3a03794d67b95e7f4fc6af323120c09d0503c8ce92e869e22bb2590299ad76d541f844d32f96184f74d433793bbd75ec15fb1497ce835445212421cb4e3ce08395c9055a2"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) sendto$inet6(r0, 0x0, 0x0, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x9, @loopback, 0xfffffffd}, 0x1c) 10m23.07434472s ago: executing program 8 (id=786): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) syz_open_dev$loop(0x0, 0xffff, 0x14f600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f00000009c0)='./file0\x00', 0x2) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x28, 0x0, 0x1, 0x0, 0x25dfdbff, {0x7}, [@L2TP_ATTR_IFNAME={0x14}]}, 0x28}}, 0x2) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000300)={0x0, @bt={0x8001, 0x8, 0x0, 0x3, 0x4, 0x2, 0x0, 0xffff8001, 0xd, 0x0, 0xb, 0x9e, 0x20000, 0x88, 0x1, 0x14, {0x80000000, 0x5}, 0x0, 0x1}}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) 10m21.072456253s ago: executing program 4 (id=789): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b03, 0x0) 10m20.953525894s ago: executing program 8 (id=790): syz_usb_connect(0x4, 0x24, &(0x7f0000000540)=ANY=[], 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) dup(r0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4094}, 0x20044000) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000300)={0x48, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10080c80}, 0x800) io_submit(0x0, 0x1, &(0x7f00000013c0)=[&(0x7f0000001400)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x840}, 0x2004c090) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r9 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r5, &(0x7f0000000240), 0xfffffecc) 10m19.262397904s ago: executing program 8 (id=793): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x922, 0x12) 10m18.745599s ago: executing program 8 (id=794): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f0000003240), 0x4000000000000e4, 0x0) 10m16.798330322s ago: executing program 8 (id=796): syz_usb_connect(0x4, 0x24, &(0x7f0000000540)=ANY=[], 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) dup(r0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4094}, 0x20044000) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000300)={0x48, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10080c80}, 0x800) io_submit(0x0, 0x1, &(0x7f00000013c0)=[&(0x7f0000001400)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x840}, 0x2004c090) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r9 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r5, &(0x7f0000000240), 0xfffffecc) 10m13.75653787s ago: executing program 4 (id=800): prlimit64(0x0, 0xe, &(0x7f0000000b40)={0xa, 0x8b}, 0x0) getpgrp(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r3, 0x40026f34, &(0x7f0000000040)=0x1) 10m11.552903986s ago: executing program 4 (id=802): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x1d0) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0xffffffffffffffc1, 0x1}) r3 = accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x2711, @my=0x1}, 0x10, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff7000/0x8000)=nil, &(0x7f00007f0000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000002c0), 0x0, r3}, 0x68) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0xfffffffffffffff2, r2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) 10m9.810767856s ago: executing program 8 (id=804): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)={@map, 0xffffffffffffffff, 0x1c, 0x200c}, 0x20) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) writev(r0, &(0x7f0000000980)=[{&(0x7f0000000680)="c2ffffffff00000000ea36dee4f346f4bfbe11ead98fc8e8e4eb802aecff82545382023e986679fabbc0fb87c23c08170aa59d7b7a8446b40e4a2d3a7ac6c4111c80fffd123c358fb2ac5b9221969dc036e9aa80544fa10b2cf75a3be97b123430064a11cd3dc2c673064196e4f41bb7f4e0d521e3f184881c4f34ccb4ccf273bfc2c462373334e92599f70fca6b2f613748d0c639489951a33587ca0321fca396e05f2083a88730daf0f4396c7ec16d3fad29d41a41b227ff26f3ed34586def775f35fbb43fb3eb4882c794165b7adc255650abcde29b1db3838ce7dd5c6b0e3077430806da764be0", 0xe9}], 0x1) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e3", 0x22}, {&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4701cad04be68907e50e997fc26e4c91ea4feb93f793c265bf4892a90000000000000000", 0x41}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b1", 0x6d}], 0x3}}], 0x1, 0x2890) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20ba0100380a04002c00128009000100626f6e64000000001c000280060019000400000008000880ff0021ff08000700"], 0x4c}}, 0x8000002) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f00000011c0)=0x1, 0x4) syz_emit_ethernet(0x1f1, &(0x7f00000009c0)={@random="01ab540b7465", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@mpls_uc={0x8847, {[{0x40, 0x0, 0x1}, {0x8}, {0x9, 0x0, 0x1}, {0x8b77, 0x0, 0x1}, {0x5, 0x0, 0x1}], @ipv6=@gre_packet={0x2, 0x6, "4188e7", 0x1a7, 0x2f, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, {[@srh={0x16, 0x6, 0x4, 0x3, 0x5, 0x40, 0x81, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x6a, 0x1, [0x8, 0x7], "7ccb380722c4cd25e4763bb84f58852d98a9f867b10a1311a040125af72cf166bb0e20ce80f2ea5299fc0ec6d96d4009daf1db9a1583a4582136eeaa11de0e9bfab191fb4c99708a4a820552aa3a5a90f76a2fa3a805fc2d1a1bce33b27822caa0ff9b02eea585aef3fb"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x100, 0x9, 0xf], "6e8d8261f0880832ebf19a8b3e948fb5c83a6c"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x3, 0x7, 0x6], "0e8899078d608e88cff40aef637a2caf7da723bfcfbe8fba62daae6a7b55293c6b43f87fd8b7644bde17e80f37e148b6839f27486a400f1cb2455fc0a69120bd35eb39d446906fae73cdfbd76275cdb90db051095195f451c7d196f771d7a458416dbca70175bd6860b2b9a4fa36d033496dd673714e4d3ca01be34866f045e79bee801704499164a5ae7915154064538a19cef64f8488fb5e0ca60ffefd"}, {0x8, 0x88be, 0x3, {{0x4, 0x1, 0xd7, 0x0, 0x1, 0x3, 0x1, 0x1}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x3, {{0x2, 0x2, 0x0, 0x0, 0x0, 0x1, 0x5, 0x47}, 0x2, {0x1, 0x9, 0x3, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}}}, &(0x7f0000000bc0)={0x1, 0x4, [0x19b, 0xa6a, 0x34b, 0xb02]}) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 10m5.58905104s ago: executing program 4 (id=808): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) recvmmsg(r3, &(0x7f0000000480), 0x0, 0x10022, 0x0) 10m4.263959392s ago: executing program 4 (id=809): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c40)) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$rds(0x15, 0x5, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000180)=ANY=[], 0x0) 10m1.042779208s ago: executing program 4 (id=812): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001140), 0x8000, 0x0) ioctl$PTP_PIN_SETFUNC(r4, 0x40043d0d, 0x0) bind(r2, &(0x7f0000000300)=@qipcrtr={0x2a, 0x2, 0x1}, 0x80) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setitimer(0x1, 0x0, 0x0) getitimer(0x1, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x1f) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) openat$cgroup_ro(r5, 0x0, 0x275a, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=r8, @ANYBLOB="010026bd0100000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="6b00330050100f00ffffffffffff08021100000050505050505035000800000000000000010000080006020202020202010004060b07eb201000060209002d1a"], 0x88}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) 9m46.880158701s ago: executing program 36 (id=804): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)={@map, 0xffffffffffffffff, 0x1c, 0x200c}, 0x20) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) writev(r0, &(0x7f0000000980)=[{&(0x7f0000000680)="c2ffffffff00000000ea36dee4f346f4bfbe11ead98fc8e8e4eb802aecff82545382023e986679fabbc0fb87c23c08170aa59d7b7a8446b40e4a2d3a7ac6c4111c80fffd123c358fb2ac5b9221969dc036e9aa80544fa10b2cf75a3be97b123430064a11cd3dc2c673064196e4f41bb7f4e0d521e3f184881c4f34ccb4ccf273bfc2c462373334e92599f70fca6b2f613748d0c639489951a33587ca0321fca396e05f2083a88730daf0f4396c7ec16d3fad29d41a41b227ff26f3ed34586def775f35fbb43fb3eb4882c794165b7adc255650abcde29b1db3838ce7dd5c6b0e3077430806da764be0", 0xe9}], 0x1) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e3", 0x22}, {&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4701cad04be68907e50e997fc26e4c91ea4feb93f793c265bf4892a90000000000000000", 0x41}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b1", 0x6d}], 0x3}}], 0x1, 0x2890) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20ba0100380a04002c00128009000100626f6e64000000001c000280060019000400000008000880ff0021ff08000700"], 0x4c}}, 0x8000002) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f00000011c0)=0x1, 0x4) syz_emit_ethernet(0x1f1, &(0x7f00000009c0)={@random="01ab540b7465", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@mpls_uc={0x8847, {[{0x40, 0x0, 0x1}, {0x8}, {0x9, 0x0, 0x1}, {0x8b77, 0x0, 0x1}, {0x5, 0x0, 0x1}], @ipv6=@gre_packet={0x2, 0x6, "4188e7", 0x1a7, 0x2f, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, {[@srh={0x16, 0x6, 0x4, 0x3, 0x5, 0x40, 0x81, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x6a, 0x1, [0x8, 0x7], "7ccb380722c4cd25e4763bb84f58852d98a9f867b10a1311a040125af72cf166bb0e20ce80f2ea5299fc0ec6d96d4009daf1db9a1583a4582136eeaa11de0e9bfab191fb4c99708a4a820552aa3a5a90f76a2fa3a805fc2d1a1bce33b27822caa0ff9b02eea585aef3fb"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x100, 0x9, 0xf], "6e8d8261f0880832ebf19a8b3e948fb5c83a6c"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x3, 0x7, 0x6], "0e8899078d608e88cff40aef637a2caf7da723bfcfbe8fba62daae6a7b55293c6b43f87fd8b7644bde17e80f37e148b6839f27486a400f1cb2455fc0a69120bd35eb39d446906fae73cdfbd76275cdb90db051095195f451c7d196f771d7a458416dbca70175bd6860b2b9a4fa36d033496dd673714e4d3ca01be34866f045e79bee801704499164a5ae7915154064538a19cef64f8488fb5e0ca60ffefd"}, {0x8, 0x88be, 0x3, {{0x4, 0x1, 0xd7, 0x0, 0x1, 0x3, 0x1, 0x1}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x3, {{0x2, 0x2, 0x0, 0x0, 0x0, 0x1, 0x5, 0x47}, 0x2, {0x1, 0x9, 0x3, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}}}, &(0x7f0000000bc0)={0x1, 0x4, [0x19b, 0xa6a, 0x34b, 0xb02]}) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 9m45.673763268s ago: executing program 37 (id=812): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001140), 0x8000, 0x0) ioctl$PTP_PIN_SETFUNC(r4, 0x40043d0d, 0x0) bind(r2, &(0x7f0000000300)=@qipcrtr={0x2a, 0x2, 0x1}, 0x80) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setitimer(0x1, 0x0, 0x0) getitimer(0x1, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x1f) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) openat$cgroup_ro(r5, 0x0, 0x275a, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=r8, @ANYBLOB="010026bd0100000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="6b00330050100f00ffffffffffff08021100000050505050505035000800000000000000010000080006020202020202010004060b07eb201000060209002d1a"], 0x88}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) 4m4.148782944s ago: executing program 2 (id=1225): syz_open_dev$video(&(0x7f00000000c0), 0x10001, 0x109100) r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x1a, &(0x7f0000000080)={&(0x7f0000000140)={{0x14, 0x3eb}, [], {0x14, 0x3ea, 0x1, 0x0, 0x0, {0x3}}}, 0x28}}, 0x20008040) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) syz_emit_ethernet(0x7e, &(0x7f0000000080)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f00ef", 0x48, 0x2f, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @empty}, {[], {0x2000, 0x88be, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "797218f17bd0b710882186eb1ec8bdfe55a90bd59f965f11", "701c571107db335c507b61a68fca3618dbb5af72bd61b626151484e63de1a1b9"}}}}}}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x1, 0xc9, 0x4}}}, 0x8) r3 = syz_open_dev$video(&(0x7f0000000040), 0xfffffffffffff416, 0x40082) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x9, 0x4, 0x1, 0x0, 0x39}) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CAP_HALT_POLL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000340)={0xb6, 0x0, 0x6}) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0xf5, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x3000000, {0x7}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000001000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x80, &(0x7f0000000400)={[{@nr_inodes={'nr_inodes', 0x3d, [0x47]}}]}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(0xffffffffffffffff, 0x0, 0x5) fchdir(r6) r7 = open(&(0x7f00000001c0)='.\x00', 0x40480, 0x20) getdents(r7, 0x0, 0x0) write$P9_RSYMLINK(r4, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 4m1.352274336s ago: executing program 2 (id=1234): syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x94, r1, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x51}}}}, [@NL80211_ATTR_TX_RATES={0x6c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0xc}]}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x1, 0x36, 0x6, 0x3, 0x12, 0x3, 0x3, 0x1, 0xb, 0x30, 0x24, 0x12, 0x9, 0x36, 0x2ba74bfd3a33fd53, 0x36, 0x68, 0x4, 0x6c]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x4004040) r2 = gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000004c0)=""/157, 0x9d}], 0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, r2) tkill(r2, 0x13) 3m58.056873811s ago: executing program 2 (id=1238): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b03, 0x0) 3m54.040406797s ago: executing program 2 (id=1243): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7ffe}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x8c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x5c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x5, 0xb2, 0xa8}, 0x39}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x884}, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 3m52.652142484s ago: executing program 2 (id=1244): syz_open_dev$video(&(0x7f00000000c0), 0x10001, 0x109100) r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x1a, &(0x7f0000000080)={&(0x7f0000000140)={{0x14, 0x3eb}, [], {0x14, 0x3ea, 0x1, 0x0, 0x0, {0x3}}}, 0x28}}, 0x20008040) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) syz_emit_ethernet(0x7e, &(0x7f0000000080)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f00ef", 0x48, 0x2f, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @empty}, {[], {0x2000, 0x88be, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "797218f17bd0b710882186eb1ec8bdfe55a90bd59f965f11", "701c571107db335c507b61a68fca3618dbb5af72bd61b626151484e63de1a1b9"}}}}}}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x1, 0xc9, 0x4}}}, 0x8) r3 = syz_open_dev$video(&(0x7f0000000040), 0xfffffffffffff416, 0x40082) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x9, 0x4, 0x1, 0x0, 0x39}) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CAP_HALT_POLL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000340)={0xb6, 0x0, 0x6}) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0xf5, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x3000000, {0x7}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000001000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x80, &(0x7f0000000400)={[{@nr_inodes={'nr_inodes', 0x3d, [0x47]}}]}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(0xffffffffffffffff, 0x0, 0x5) fchdir(r6) r7 = open(&(0x7f00000001c0)='.\x00', 0x40480, 0x20) getdents(r7, 0x0, 0x0) write$P9_RSYMLINK(r4, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3m49.38862548s ago: executing program 2 (id=1249): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0xa, 0x8000) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x62, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x9, @loopback, 0xfffffffd}, 0x1c) 3m33.837553945s ago: executing program 38 (id=1249): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0xa, 0x8000) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x62, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x9, @loopback, 0xfffffffd}, 0x1c) 40.923702898s ago: executing program 9 (id=1608): syz_open_dev$vim2m(&(0x7f0000000140), 0x8003, 0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10113, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xbea0, 0xc000, 0x1, 0x800000c1}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, 0x0) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 39.997886622s ago: executing program 9 (id=1612): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2602, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000000)="01bb", 0x2}, {0x0, 0x16}], 0x2) 39.841321793s ago: executing program 9 (id=1613): r0 = syz_usb_connect$hid(0x6, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006333bfbb9c000280080002400000000008000140000000110900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x78}}, 0x40) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000014007f"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x36, [0xfffffff8, 0x1, 0x5, 0x9, 0x10008, 0x155f, 0x5, 0x3bb4, 0x25cd, 0x4, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbd, 0x4a732f64, 0x1, 0x1000, 0x2, 0x6, 0x12a3, 0x6, 0xfffffffd, 0x2, 0x6, 0x7, 0x8, 0x9, 0x79, 0x25713dc3, 0x10000, 0x0, 0x7, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0x1cec, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x1000, 0xef1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x3ff, 0x9, 0x8, 0xc66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x9, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x2000, 0x400, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x0, 0x7, 0xf1, 0x4, 0x1, 0xffff, 0x7, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000002, 0x3, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0xfffffffe, 0xfffffffe, 0xffff, 0xc, 0xfff, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0xb834, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x7, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x408, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x7, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0x4, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0x3, 0x6, 0x5, 0x1afc, 0x40bfc, 0x8, 0x5, 0x7f, 0x2a29, 0x43, 0xff, 0x1005, 0x5, 0x7, 0x1e, 0x9, 0x81, 0x1, 0x19d86, 0xd, 0xfffffff7, 0x8, 0x5, 0x5396, 0x3, 0x200006, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x8, 0x7fffffff, 0x9, 0xe, 0x32d, 0x3, 0x201, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8008, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffffa, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}, 0x10) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x2) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(r9, &(0x7f0000019880)=[{0x0}, {&(0x7f00000197c0)="19", 0x1}], 0x2) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r10, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r10, 0x8010550e, &(0x7f0000000180)={0xa49, &(0x7f0000000100)="124be732d6c9000bccd8dcd692ace0dcbe709e9d498bc99354ca5143a82e9b935f84ed95e8fe816770cbc0edd3085310d3f27d99cfbd0301c6ccc83f19b60509d745aff602ac8d3ca80f635c642b891e8432f0e634f4e7b507bf10c739f82db2aaa83f49dc79498ceb7086303e"}) 36.101927292s ago: executing program 9 (id=1622): r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff00000000030000000000000000000000020000000000000000000000000000090300000000000000000000100c"], 0x0, 0x56}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000080)) socket$nl_sock_diag(0x10, 0x3, 0x4) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x100010, r0, 0x3eaa0000) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff00000000030000000000000000000000020000000000000000000000000000090300000000000000000000100c"], 0x0, 0x56}, 0x20) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) getsockopt$inet6_tcp_int(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) (async) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000080)) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x100010, r0, 0x3eaa0000) (async) 35.852377787s ago: executing program 9 (id=1623): syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) modify_ldt$write(0x1, &(0x7f0000000080)={0x1fff, 0x0, 0x400, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x10) alarm(0x7) alarm(0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @ldst={0x0, 0x1, 0x2, 0x1, 0x5, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r4 = dup(r3) write$binfmt_script(r4, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '%'}, {0x20, ')/'}]}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000280), 0x84}, 0x38) fcntl$setown(r1, 0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 34.37580867s ago: executing program 9 (id=1625): socket(0x1f, 0x6, 0x100) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 19.261949996s ago: executing program 39 (id=1625): socket(0x1f, 0x6, 0x100) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 19.007003454s ago: executing program 7 (id=1656): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000040)=ANY=[], 0x0, 0x34, 0xdd01355eb9104a40, 0x0, 0x5}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x81, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x200000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='cubic', 0x3) bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4080891, 0x0, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000004440)) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000002c0)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x3ffff, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000100], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000001ee76c0ac92e0000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffff050000000000000000000000000000000000000000000000000000000000ffffffff00"/144]}, 0x108) ioctl$SCSI_IOCTL_STOP_UNIT(r4, 0x5319) 17.15571747s ago: executing program 7 (id=1659): syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) modify_ldt$write(0x1, &(0x7f0000000080)={0x1fff, 0x0, 0x400, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x10) alarm(0x7) alarm(0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @map_fd={0x18, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r4 = dup(r3) write$binfmt_script(r4, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '%'}, {0x20, ')/'}]}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000280), 0x84}, 0x38) fcntl$setown(r1, 0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11.944466468s ago: executing program 7 (id=1660): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@getstats={0x1c, 0x5e, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, 0x3}}, 0x1c}, 0x1, 0x0, 0x0, 0x1880}, 0x4000050) futex(&(0x7f0000004000)=0x2, 0x5, 0x0, 0x0, &(0x7f0000004000), 0xb2020000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f00000000c0)={0x3}) (async, rerun: 32) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000240)={0x2}) (async, rerun: 32) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRES16=0x0], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) 11.775239073s ago: executing program 6 (id=1661): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002580), 0x2, 0x0) read$FUSE(r0, &(0x7f00000025c0)={0x2020}, 0x2020) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)="ad", 0x1}], 0x1}, 0x800) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = syz_open_dev$evdev(&(0x7f0000000240), 0x2, 0x8400) ioctl$EVIOCSREP(r3, 0x40084503, 0x0) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4801, @remote}, 0x10, 0x0}, 0x20008810) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r4, r2}) sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x44000) r5 = socket(0x23, 0x2, 0x0) bind$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$kcm(r1, &(0x7f0000002080)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000020000000000000000000000850000002f000000180100002020752500000000002020207b1af8ff00000000bfa101000000000007010000f8ff1cffb702000008000000b70300000400000085000000b400000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x880) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c80)='fdinfo/3\x00') read$FUSE(r7, &(0x7f00000040c0)={0x2020}, 0x2020) 11.362341531s ago: executing program 7 (id=1665): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(r3, 0x3, &(0x7f0000002080)={0x10, 0x5}, &(0x7f00000020c0)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000002100), r4) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000002180), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000021c0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000002280)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002240)={&(0x7f0000002200)={0x2c, r6, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004c880}, 0x4000) r8 = syz_usb_connect$uac1(0x0, 0xc5, &(0x7f00000022c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb3, 0x3, 0x1, 0x8b, 0x50, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8000, 0x27}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x101, 0x6, 0x6, 0x6}, @feature_unit={0xb, 0x24, 0x6, 0x1, 0x2, 0x2, [0xa, 0x4], 0x4}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x0, 0x5, 0x6, 0xa}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1, 0x4, 0x72, 0x9, '^', "c317"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x0, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x1, 0x68, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x80, 0x0, 0x1d, {0x7, 0x25, 0x1, 0x0, 0x3, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x101, 0x4, 0x3, "fc9757"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4c5, 0x4, 0x6, 0x2}, @as_header={0x7, 0x24, 0x1, 0xff, 0x0, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xaf, 0x3, 0x8, {0x7, 0x25, 0x1, 0x0, 0x7, 0x1}}}}}}}}]}}, &(0x7f0000002580)={0xa, &(0x7f00000023c0)={0xa, 0x6, 0x201, 0xe, 0x4, 0x40, 0x10, 0x9}, 0x10, &(0x7f0000002400)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x1e, 0x81, 0x4, 0xd, 0xe9, 0x2}]}, 0x3, [{0x4, &(0x7f0000002440)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x4, &(0x7f0000002480)=@lang_id={0x4, 0x3, 0xc01}}, {0xb5, &(0x7f00000024c0)=@string={0xb5, 0x3, "46757797d5b60cbb7389c04270be443777ddde7bda65bd8d261f9bc9a359c72c7764fd60817f0e42a7fdc30e5db0131fcda67cfe9f3667591d5f03df7fe39f651f245f952a59734754bc76e9b39704a449ec37a554608e07fbead885614a5281416e03537ba6aa0f11c5227c290684c44c49bf3cc0d58e44952d19ee79855536733b8fdf746552091c8741e24c1bae38fc27886c4f80ef1bec316188b4a5a20b654345db3cf5ed914e8d6f85fede7b2b35747e"}}]}) syz_usb_control_io(r8, &(0x7f00000027c0)={0x2c, &(0x7f00000025c0)={0x40, 0x1, 0xdf, {0xdf, 0x8, "2834bb9d9cc1796fcf24784d1f3ac1bb9e7ca11b595f2d80ebab2368dc34c01298dd5896e50aae0ac0e9dc1fe5e7722cf975157e17a800f71bb7bebe9a60c87bd1a83bbc1e0c0ac482039d49d6b65e599103adc4769656782a056323b688e37c292ae1652f4a715b88dd49c77354810e0ff1b2be15764b60b7545f45f807495513abc6655969c7f7954ecc4a21c2bc8a6924a0b52e44664a723cfd3fae2230cd49e7cfc29cec413e40812a19874bb422322f8d947c725c3782c5d2b240e28ce2db5b0a47d9139ec62de1665e8744ffe2c1b29c356e5f1cee171bfa6706"}}, &(0x7f00000026c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x861}}, &(0x7f0000002700)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000002740)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x8, 0x2, 0x2, "b9cf57fb", "141b0c49"}}, &(0x7f0000002780)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x2, 0xfe, 0x7, 0x5, 0x57, 0x209d}}}, &(0x7f0000002c40)={0x84, &(0x7f0000002800)={0x20, 0xe, 0x54, "850bf63555dacfcabdd66f9a0cdded192a82caeab5d0d6179babee5d386c31deeca1d448c92d135b90869729028b29b801b3e161d5c877396c974e1331a0e045c9f997c539a6ed28d32aca08becde9d03517bde3"}, &(0x7f0000002880)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000028c0)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000002900)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000002940)={0x20, 0x0, 0x8, {0x60, 0x20, [0xf000]}}, &(0x7f0000002980)={0x40, 0x7, 0x2, 0x3}, &(0x7f00000029c0)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000002a00)={0x40, 0xb, 0x2, "f3bb"}, &(0x7f0000002a40)={0x40, 0xf, 0x2, 0x70f8}, &(0x7f0000002a80)={0x40, 0x13, 0x6, @local}, &(0x7f0000002ac0)={0x40, 0x17, 0x6, @local}, &(0x7f0000002b00)={0x40, 0x19, 0x2, "903d"}, &(0x7f0000002b40)={0x40, 0x1a, 0x2}, &(0x7f0000002b80)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000002bc0)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000002c00)={0x40, 0x21, 0x1, 0x4}}) syz_genetlink_get_family_id$SEG6(&(0x7f0000002d00), r5) pipe(&(0x7f0000002d40)={0xffffffffffffffff}) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000802, r2, &(0x7f0000002d80)={0x3, 0x1, 0x7fff, 0x4, 0x4576, 0xffff, 0x8, 0x3, 0x1ff}) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002e40), r4) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r4, &(0x7f0000002f00)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002e80)={0x30, r10, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x10000}, 0x4001) mkdirat(0xffffffffffffff9c, &(0x7f0000002f40)='./file0\x00', 0x50) ioctl$INCFS_IOC_CREATE_FILE(r9, 0xc058671e, &(0x7f0000003200)={{'\x00', 0x2}, {0x2}, 0x0, 0x0, 0x0, &(0x7f0000002f80)='./file0\x00', &(0x7f0000002fc0)='./file0\x00', &(0x7f0000003000)="11d9d41821263fb746fdf7347da36a6b202232125fc9b7af45a341b88518d89d35336586798847f1881217f5f71f8d700607d3d2317841af08a1083e5c137330e7e6d1492c6ac1a63d7a2af676eb617aa2357e793a0bf5ea080f5a712349ab0a99301e0c5710149c16e845783abccd2a41d46ac0104c636b4ce45835cc", 0x7d, 0x0, &(0x7f0000003080)={0x2, 0x100, {0x1, 0xc, 0x6e, "a21074ad4ab4f26907d6fa51b957614c8107336686501f3e5d3f0d63fe9bf3cc03211860cfebe76c5bf44acee80bb0c527126b3a334e65759edbe6ed3efe161f34a55238302fa4ca1a3e0565057e4960232f37163d46232bbfd01c5be3e5611a9991cce90a37998567847d66639a", 0x85, "eb42df82e34aea52d02e546384e18f0f2f16aacc1f8eebe7ebdfa04c651406905219bfe82ad45efaa60de1c46dcdabbc92e7dbf7eacaa95acfbda338ae8de59fe82f134f523c9cb7ff4437648a53560ccd7034abb6eece40440d281b339e94c12ac4a49f0903ba0bad8a6e0ce857895df7338fdf5c6a9aa8bf3c6ac362d6e295d13c1b0f4f"}, 0x72, "c195e37ea24d5aaa72b368a8d4630dfba582e948a3ca064be7f78792133acff3981500542a7d251fe73775daede727a9ab13f83f31a41dd8d85ed54e4bd4700e088e98d8e6cc783d1087be15856556bed06dbfed106482e824df008d316223fc0d2d1ce52c2571b9879af2f04e8e8e7a8f0e"}, 0x17e}) socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f00000032c0), r9) sendmsg$IPVS_CMD_SET_SERVICE(r9, &(0x7f00000033c0)={&(0x7f0000003280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003380)={&(0x7f0000003300)={0x4c, r11, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) 11.36131531s ago: executing program 6 (id=1666): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x149800, 0x1c0, 0x3f}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) r2 = syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) write$sequencer(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="810100000000000081", @ANYRES32=r4], 0x10) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x1e80, 0xffffffffffffff4f, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xeb) ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, &(0x7f0000000880)={{0xb, 0x4}, 0x100, './file0\x00'}) execveat$binfmt(r1, r2, &(0x7f00000001c0)={[&(0x7f0000000140)='workdir', &(0x7f0000000180)='nfs_export=on']}, &(0x7f0000000840)={[&(0x7f0000000780)='upperdir', &(0x7f0000000800)='/dev/video#\x00']}, 0x1000) execveat$binfmt(r0, r2, &(0x7f0000000380)={[&(0x7f0000000140)='\x00', &(0x7f0000000180)='GPL\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='GPL\x00', &(0x7f0000000340)='GPL\x00']}, &(0x7f0000000400)={[&(0x7f00000003c0)='GPL\x00']}, 0x1000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xc6f}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="d4000000000101040000000000000000020000002400018014000180080001007f00000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000030000080008400000000a040016400800154000000003040017"], 0xd4}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xf, 0x0, &(0x7f0000000280)="e0b9d5a2a00a3c6ffda2e386112192", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 9.646975694s ago: executing program 6 (id=1671): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001030000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)={0x14, 0x0, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbf8, {0x3, 0x0, 0x14}}, 0x14}, 0x1, 0x0, 0x0, 0x4005c}, 0x400c084) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x44}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x50}}, 0x24040054) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r7, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r8, &(0x7f0000000000)=0x922, 0x12) 7.776485897s ago: executing program 5 (id=1674): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000040)=ANY=[], 0x0, 0x34, 0xdd01355eb9104a40, 0x0, 0x5}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x81, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x200000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='cubic', 0x3) bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4080891, 0x0, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000004440)) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000002c0)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x3ffff, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000100], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000001ee76c0ac92e0000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffff050000000000000000000000000000000000000000000000000000000000ffffffff00"/144]}, 0x108) ioctl$SCSI_IOCTL_STOP_UNIT(r4, 0x5319) 6.638832673s ago: executing program 7 (id=1675): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="0015000000007124c45f5b9e88534093662401a6012e9c983bc9bd34c0e56dd06a89d94e35330473bdc5d8c6b8d821531ba526ba844e82e1a4b48f6d1092f24296e8c972aee165b90bf8af651e7d7d1beddeab8a67c0af532546b79e1fc7d4ddb9a3ca3219c23ce16fac1222837479f8bd8797ba40364cdcc1ce4a0cfe580f71871d7566241e1fb60feebf86464bcb48feff3aa84ea1eeb4dfb617002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x332f, &(0x7f0000000400)={0x0, 0x6853, 0x800, 0x5, 0x39}, &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000900)={&(0x7f0000003000), 0x1, 0x3}, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r1, 0x17, &(0x7f0000000f40)={0x0, 0x0, 0x3}, 0x1) renameat2(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f00000004c0)={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.54913372s ago: executing program 3 (id=1676): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000040)={0x87a0, 0xffffab93}) (fail_nth: 3) 4.940778087s ago: executing program 6 (id=1677): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xeb\a\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xc9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\x95\x9cA\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t\xa6A0\xa7\xef\x9cL\x8e1K', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000700)='source', &(0x7f00000002c0)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfc\a\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d\xf5\x02;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K$\xa5/2Y\x10\x18=U\xbb\xd86\x02BpT\x98p\x89\x93v\xae\x95\a+\vB\x8c\x8b\xba\x1f\xcf\xf6\x94\xa10\xd9a-\x9b\xe8\x05\xc2\x98\xf3Wz2:\vx0M\xde\x80\xf1\xc1Dr\x92\xf2\xb5j[JN&[\x11\xc6\xb3\xfc\xec\x18', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x2, 0x400) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x20, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105518, &(0x7f0000000040)={{0x404, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x800, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7, 0x1, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0xb, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000002, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x2000100, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd, 0x8, 0x7, 0x4, 0x800000, 0x0, 0x103, 0x1, 0x10001, 0x0, 0x4, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x58, 0x4, 0x0, 0x3, 0x4000000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000006fd]}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x20004040) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x0) 4.940035361s ago: executing program 5 (id=1678): unshare(0x2c020400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x89}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001940)={@map, 0xffffffffffffffff, 0x6, 0x83e72918d32f35e4}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x4}, 0x38) 4.896879553s ago: executing program 3 (id=1679): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0xa, 0x8000) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x62, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) write$RDMA_USER_CM_CMD_SET_OPTION(r0, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xe0, 0x0, 0x0) 4.292249615s ago: executing program 5 (id=1680): syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) modify_ldt$write(0x1, &(0x7f0000000080)={0x1fff, 0x0, 0x400, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x10) alarm(0x7) alarm(0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ldst={0x0, 0x1, 0x2, 0x1, 0x5, 0x2}, @map_fd={0x18, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r4 = dup(r3) write$binfmt_script(r4, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '%'}, {0x20, ')/'}]}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000280), 0x84}, 0x38) fcntl$setown(r1, 0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.693040388s ago: executing program 6 (id=1681): rt_sigprocmask(0x2, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x40, 0x0) close(r3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0xfff2}, {}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg(r0, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@ll={0x11, 0x17, r7, 0x1, 0x4}, 0x80, 0x0}}], 0x1, 0x40000) 2.647542825s ago: executing program 5 (id=1682): socket$pppl2tp(0x18, 0x1, 0x1) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x4e20, @broadcast}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 2.646255912s ago: executing program 3 (id=1683): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@security={'security\x00', 0x64, 0x4, 0x278, 0x100000c, 0x148, 0xb0, 0xb0, 0xffffffff, 0xffffffff, 0x258, 0x258, 0x258, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x0, 0x1000000000000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4, 0x0, "3a2a8fa7d4b22c81086c268084a9c7223d88d322ef00"}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0xfe}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff000000, 0xffffff00, 'veth1_to_bond\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21, 0x0, 0x28}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xd, 0xa1, 0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x305}, "ff00", "000000000000000e000000008000", "00000200", "b08068ebce17ab00"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000005000000010000000100001304000000d8a78b67b40200000088060000ff0f"], 0x0, 0x35, 0x0, 0x1}, 0x28) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) 2.523665055s ago: executing program 7 (id=1684): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(r3, 0x3, &(0x7f0000002080)={0x10, 0x5}, &(0x7f00000020c0)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000002100), r4) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000002180), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000021c0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000002280)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002240)={&(0x7f0000002200)={0x2c, r6, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004c880}, 0x4000) r8 = syz_usb_connect$uac1(0x0, 0xc5, &(0x7f00000022c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb3, 0x3, 0x1, 0x8b, 0x50, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8000, 0x27}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x101, 0x6, 0x6, 0x6}, @feature_unit={0xb, 0x24, 0x6, 0x1, 0x2, 0x2, [0xa, 0x4], 0x4}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x0, 0x5, 0x6, 0xa}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1, 0x4, 0x72, 0x9, '^', "c317"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x0, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x1, 0x68, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x80, 0x0, 0x1d, {0x7, 0x25, 0x1, 0x0, 0x3, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x101, 0x4, 0x3, "fc9757"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4c5, 0x4, 0x6, 0x2}, @as_header={0x7, 0x24, 0x1, 0xff, 0x0, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xaf, 0x3, 0x8, {0x7, 0x25, 0x1, 0x0, 0x7, 0x1}}}}}}}}]}}, &(0x7f0000002580)={0xa, &(0x7f00000023c0)={0xa, 0x6, 0x201, 0xe, 0x4, 0x40, 0x10, 0x9}, 0x10, &(0x7f0000002400)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x1e, 0x81, 0x4, 0xd, 0xe9, 0x2}]}, 0x3, [{0x4, &(0x7f0000002440)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x4, &(0x7f0000002480)=@lang_id={0x4, 0x3, 0xc01}}, {0xb5, &(0x7f00000024c0)=@string={0xb5, 0x3, "46757797d5b60cbb7389c04270be443777ddde7bda65bd8d261f9bc9a359c72c7764fd60817f0e42a7fdc30e5db0131fcda67cfe9f3667591d5f03df7fe39f651f245f952a59734754bc76e9b39704a449ec37a554608e07fbead885614a5281416e03537ba6aa0f11c5227c290684c44c49bf3cc0d58e44952d19ee79855536733b8fdf746552091c8741e24c1bae38fc27886c4f80ef1bec316188b4a5a20b654345db3cf5ed914e8d6f85fede7b2b35747e"}}]}) syz_usb_control_io(r8, &(0x7f00000027c0)={0x2c, &(0x7f00000025c0)={0x40, 0x1, 0xdf, {0xdf, 0x8, "2834bb9d9cc1796fcf24784d1f3ac1bb9e7ca11b595f2d80ebab2368dc34c01298dd5896e50aae0ac0e9dc1fe5e7722cf975157e17a800f71bb7bebe9a60c87bd1a83bbc1e0c0ac482039d49d6b65e599103adc4769656782a056323b688e37c292ae1652f4a715b88dd49c77354810e0ff1b2be15764b60b7545f45f807495513abc6655969c7f7954ecc4a21c2bc8a6924a0b52e44664a723cfd3fae2230cd49e7cfc29cec413e40812a19874bb422322f8d947c725c3782c5d2b240e28ce2db5b0a47d9139ec62de1665e8744ffe2c1b29c356e5f1cee171bfa6706"}}, &(0x7f00000026c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x861}}, &(0x7f0000002700)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000002740)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x8, 0x2, 0x2, "b9cf57fb", "141b0c49"}}, &(0x7f0000002780)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x2, 0xfe, 0x7, 0x5, 0x57, 0x209d}}}, &(0x7f0000002c40)={0x84, &(0x7f0000002800)={0x20, 0xe, 0x54, "850bf63555dacfcabdd66f9a0cdded192a82caeab5d0d6179babee5d386c31deeca1d448c92d135b90869729028b29b801b3e161d5c877396c974e1331a0e045c9f997c539a6ed28d32aca08becde9d03517bde3"}, &(0x7f0000002880)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000028c0)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000002900)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000002940)={0x20, 0x0, 0x8, {0x60, 0x20, [0xf000]}}, &(0x7f0000002980)={0x40, 0x7, 0x2, 0x3}, &(0x7f00000029c0)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000002a00)={0x40, 0xb, 0x2, "f3bb"}, &(0x7f0000002a40)={0x40, 0xf, 0x2, 0x70f8}, &(0x7f0000002a80)={0x40, 0x13, 0x6, @local}, &(0x7f0000002ac0)={0x40, 0x17, 0x6, @local}, &(0x7f0000002b00)={0x40, 0x19, 0x2, "903d"}, &(0x7f0000002b40)={0x40, 0x1a, 0x2}, &(0x7f0000002b80)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000002bc0)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000002c00)={0x40, 0x21, 0x1, 0x4}}) syz_genetlink_get_family_id$SEG6(&(0x7f0000002d00), r5) pipe(&(0x7f0000002d40)={0xffffffffffffffff}) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000802, r2, &(0x7f0000002d80)={0x3, 0x1, 0x7fff, 0x4, 0x4576, 0xffff, 0x8, 0x3, 0x1ff}) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002e40), r4) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r4, &(0x7f0000002f00)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002e80)={0x30, r10, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x10000}, 0x4001) mkdirat(0xffffffffffffff9c, &(0x7f0000002f40)='./file0\x00', 0x50) ioctl$INCFS_IOC_CREATE_FILE(r9, 0xc058671e, &(0x7f0000003200)={{'\x00', 0x2}, {0x2}, 0x0, 0x0, 0x0, &(0x7f0000002f80)='./file0\x00', &(0x7f0000002fc0)='./file0\x00', &(0x7f0000003000)="11d9d41821263fb746fdf7347da36a6b202232125fc9b7af45a341b88518d89d35336586798847f1881217f5f71f8d700607d3d2317841af08a1083e5c137330e7e6d1492c6ac1a63d7a2af676eb617aa2357e793a0bf5ea080f5a712349ab0a99301e0c5710149c16e845783abccd2a41d46ac0104c636b4ce45835cc", 0x7d, 0x0, &(0x7f0000003080)={0x2, 0x100, {0x1, 0xc, 0x6e, "a21074ad4ab4f26907d6fa51b957614c8107336686501f3e5d3f0d63fe9bf3cc03211860cfebe76c5bf44acee80bb0c527126b3a334e65759edbe6ed3efe161f34a55238302fa4ca1a3e0565057e4960232f37163d46232bbfd01c5be3e5611a9991cce90a37998567847d66639a", 0x85, "eb42df82e34aea52d02e546384e18f0f2f16aacc1f8eebe7ebdfa04c651406905219bfe82ad45efaa60de1c46dcdabbc92e7dbf7eacaa95acfbda338ae8de59fe82f134f523c9cb7ff4437648a53560ccd7034abb6eece40440d281b339e94c12ac4a49f0903ba0bad8a6e0ce857895df7338fdf5c6a9aa8bf3c6ac362d6e295d13c1b0f4f"}, 0x72, "c195e37ea24d5aaa72b368a8d4630dfba582e948a3ca064be7f78792133acff3981500542a7d251fe73775daede727a9ab13f83f31a41dd8d85ed54e4bd4700e088e98d8e6cc783d1087be15856556bed06dbfed106482e824df008d316223fc0d2d1ce52c2571b9879af2f04e8e8e7a8f0e"}, 0x17e}) socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f00000032c0), r9) sendmsg$IPVS_CMD_SET_SERVICE(r9, &(0x7f00000033c0)={&(0x7f0000003280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003380)={&(0x7f0000003300)={0x4c, r11, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) 2.257441794s ago: executing program 3 (id=1685): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)={@map, 0xffffffffffffffff, 0x1c, 0x200c}, 0x20) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) writev(r0, &(0x7f0000000980)=[{&(0x7f0000000680)="c2ffffffff00000000ea36dee4f346f4bfbe11ead98fc8e8e4eb802aecff82545382023e986679fabbc0fb87c23c08170aa59d7b7a8446b40e4a2d3a7ac6c4111c80fffd123c358fb2ac5b9221969dc036e9aa80544fa10b2cf75a3be97b123430064a11cd3dc2c673064196e4f41bb7f4e0d521e3f184881c4f34ccb4ccf273bfc2c462373334e92599f70fca6b2f613748d0c639489951a33587ca0321fca396e05f2083a88730daf0f4396c7ec16d3fad29d41a41b227ff26f3ed34586def775f35fbb43fb3eb4882c794165b7adc255650abcde29b1db3838ce7dd5c6b0e3077430806da764be0", 0xe9}], 0x1) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)}, {&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4701cad04be68907e50e997fc26e4c91ea4feb93f793c265bf4892a900000000000000", 0x40}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86", 0x6c}], 0x3}}], 0x1, 0x2890) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20ba0100380a04002c00128009000100626f6e64000000001c000280060019000400000008000880ff0021ff08000700"], 0x4c}}, 0x8000002) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f00000011c0)=0x1, 0x4) syz_emit_ethernet(0x151, &(0x7f00000009c0)={@random="01ab540b7465", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@mpls_uc={0x8847, {[{0x40, 0x0, 0x1}, {0x8}, {0x9, 0x0, 0x1}, {0x8b77, 0x0, 0x1}, {0x5, 0x0, 0x1}], @ipv6=@gre_packet={0x2, 0x6, "4188e7", 0x107, 0x2f, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, {[@srh={0x16, 0x6, 0x4, 0x3, 0x5, 0x40, 0x81, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x6a, 0x1, [0x8, 0x7], "7ccb380722c4cd25e4763bb84f58852d98a9f867b10a1311a040125af72cf166bb0e20ce80f2ea5299fc0ec6d96d4009daf1db9a1583a4582136eeaa11de0e9bfab191fb4c99708a4a820552aa3a5a90f76a2fa3a805fc2d1a1bce33b27822caa0ff9b02eea585aef3fb"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x100, 0xf], "6e8d8261f0880832ebf19a8b3e948fb5c83a6c"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x3, 0x7, 0x6]}, {0x8, 0x88be, 0x3, {{0x4, 0x1, 0xd7, 0x0, 0x1, 0x3, 0x1, 0x1}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x3, {{0x2, 0x2, 0x0, 0x0, 0x0, 0x1, 0x5, 0x47}, 0x2, {0x1, 0x9, 0x3, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}}}, &(0x7f0000000bc0)={0x1, 0x4, [0x19b, 0xa6a, 0x34b, 0xb02]}) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.289907252s ago: executing program 5 (id=1686): r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x8900ef7c7f836589) fsopen(&(0x7f0000000000)='zonefs\x00', 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000280)={0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="05"], 0x10) close(r1) socket(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000140), &(0x7f00000001c0)=r1}, 0x20) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x8400, 0x0) setresuid(0x0, 0xee00, 0xee00) ioctl$BLKRASET(r5, 0x1262, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100001e, 0x810, r0, 0xc974a000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x14, 0xe, 0x0, 0xe}, {0x6c, 0x6, 0x0, 0xfffffffc}, {0x6, 0x0, 0x0, 0x7fff7ffc}]}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001e00050300000000fedbdf25000000000800ff00", @ANYRES32=0x0, @ANYBLOB='\b\x00\t\x00', @ANYRES32, @ANYBLOB], 0x24}, 0x1, 0x8000000, 0x0, 0x400c880}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x7ff, 0x0) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r7) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000030000000000000400000008000200"], 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r9 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000001040)={0xaa, 0x110}) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 1.109491716s ago: executing program 3 (id=1687): r0 = socket$netlink(0x10, 0x3, 0x9) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="68000000020601000000000600000000000000000e0003006269746d61703a697000000005000500020000000900020073797a30000000002000078005000300000000000c00018008000140ac141aaa050014000000000005000400000000000500010006"], 0x68}}, 0x4000000) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0x15) ioctl$TCSETS(r3, 0xc0384707, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000080)=@x86={0x1, 0xf, 0x89, 0x0, 0x1000, 0x8, 0x7, 0x80, 0x40, 0x7, 0x9, 0x4, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xff, '\x00', 0x4, 0x800000000000b}) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r7, 0x1, &(0x7f0000000440)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r0, &(0x7f0000000040)={0xa}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) fstat(0xffffffffffffffff, &(0x7f00000002c0)) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r9) sendmsg$ETHTOOL_MSG_RINGS_SET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000010000000080007000000020018000180140002006e657464657673696d300000000000000800060000020000080008"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x34, r10, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x8}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xfffffffa}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x44894}, 0x20040880) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r0) 904.592731ms ago: executing program 5 (id=1688): socket$packet(0x11, 0x2, 0x300) syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000080)={0x1, "072b20d017bbf2bd1632992e8c5c357cb8507e8dfa0a347a2852e54a4b71ab3a", 0x1, 0x1, 0x100, 0xff06ff, 0x8}) r1 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1a}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x37}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1a}]}, 0x2c}}, 0x8010) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000200)={0x7, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12ff000000bc0000001d00", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7}) 559.932681ms ago: executing program 6 (id=1689): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_connect$cdc_ecm(0x2, 0x53, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x41, 0x1, 0x1, 0x3, 0xe8, 0x80, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x2, 0x6, 0x0, 0xd, {{0xb, 0x24, 0x6, 0x0, 0x0, "c311bb2f90e5"}, {0x5, 0x24, 0x0, 0x1400}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x9, 0x6, 0x81}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x5, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x7, 0xb2, 0x7b}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x0, 0x50, 0x3, 0x8, 0xee}, 0x23, &(0x7f0000000100)={0x5, 0xf, 0x23, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xf500320b9eff7554, 0x7f, 0x0, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x15, 0xb, 0xe, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x9, 0x7f, 0x8}, @ptm_cap={0x3}]}, 0xa, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x44b}}, {0xd1, &(0x7f0000000180)=@string={0xd1, 0x3, "b629daca7c4da501535f16f2f6e4fce154548819da7cbea2abd7bcfdf7898decc6aeb65391fecc2e8a78635a799ebd942c9b09595b483bf5e3d86e06e4c1817b5e7f957ad58143c67c7cae1e7b3e62dd797c25de74535fe5e9fc71fc7df75a5245414421215bc39fda18f0250cdbe2716c8c25a70f380f3a368faee8cbaa5405b14861b5bfc39b6d39074382b03d1b377c4489eeed5b8f541a120ee3af20aa4eac9e14ff9fa7ca1b5d82636c0da57551d5c8cd07ff66c57407669d4133d49bbc26f01c097afeec3876dc2169ec986b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1404}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x807}}, {0x15, &(0x7f0000000300)=@string={0x15, 0x3, "dbed25b9ba795f03fa7c2f8861e894cded0594"}}, {0x41, &(0x7f0000000380)=@string={0x41, 0x3, "f32e47426dc2f987d1741bc141b34a091935b8e17a6f21d9bcc608ac4a802f0eedd8020fdb79afad4613451f8e2c9bc941d03657ea0f0b24a3012ed4d0aea3"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x812}}, {0xa1, &(0x7f0000000480)=@string={0xa1, 0x3, "2f6d653e781ec3dbc795913f190c0d2065406ede97ab951f11265a55089d43ee21a96e77d94b3536e74c0be43e6b4aef4b854460e6d146e413aaf1b9b381b7607ba09d80a5d34bf2be3fce84c8c72d54f74840465bded0e7698f4df898504fe951a7c5754c11718b72e4103bca7ea50779f14a7208135507f76af0b7201d2396e93acad2c0ce6ae1f04df94acc58e1b21a07cb8bbdfdd274f3c3a7693d3b7c"}}, {0x6f, &(0x7f0000000540)=@string={0x6f, 0x3, "ab898ee005d215c0d648400deb2de0d88d8fa26ecdf394202bf25f387f20554abd7e11f507d48085710fec7a3eb4e1cc2b770f37311ee8ab839246204caf4d3ba1c732ea740f91fadf9831b456e674fb712192b97b716827bbe605556b653c207088772f42175fa63846f9d05f"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x448}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f00000006c0)={0x0, 0xb, 0x10, {0x10, 0x22, "43dc84108e714aa93f8d48af4edf"}}, &(0x7f0000000700)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40e}}, &(0x7f0000000740)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0xff, "c9830dd75b7e06e5ceb0d511cc75c8c6"}, @ssp_cap={0x1c, 0x10, 0xa, 0x2, 0x4, 0x8, 0xf0f, 0x8, [0xffc0c0, 0xc00f, 0xdf80, 0x0]}, @ptm_cap={0x3}]}}, &(0x7f0000000780)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x2, 0xa7, 0xc0, "d3fe6c9e", "5afdf5a8"}}, &(0x7f00000007c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x2, 0x6, 0x8, 0xe, 0x800}}}, &(0x7f0000000cc0)={0x84, &(0x7f0000000840)={0x0, 0x8, 0xae, "037d7037eb9728c1f75b5559481eeee2bd730649d5138b28188027e8423d5c924baac64c2e1f1661f83963734f8ae21a5b0d47ad033daa602ea2f76ca5603ad64d1900ee1e373dd470906df52f93d41ad7d7000a6f6dfb33df58c73ff01ebdf953e0ed26e9db7818ad58ea1c589840c0157ed2988ba9202645c9df6ea4449c9913f0a4d1ad357a416d1e510e80d4f0bd3eb48a604757fdddbe48f10970cb93b8279598a4680a5147e829a6d5fc2f"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000940)={0x0, 0x8, 0x1}, &(0x7f0000000980)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000009c0)={0x20, 0x0, 0x4, {0x80, 0x1}}, &(0x7f0000000a00)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000d80)={0x40, 0x9, 0x1, 0xc0}, &(0x7f0000000a80)={0x40, 0xb, 0x2, "ef55"}, &(0x7f0000000ac0)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000b00)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000b40)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000b80)={0x40, 0x19, 0x2, "c974"}, &(0x7f0000000bc0)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000c00)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000c40)={0x40, 0x1e, 0x1, 0x7f}, &(0x7f0000000c80)={0x40, 0x21, 0x1, 0xfb}}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 3 (id=1690): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r0, 0x1000) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) kernel console output (not intermixed with test programs): netdevsim3 netdevsim3: renamed from eth3 [ 1078.367684][T11879] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1078.452740][T12937] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1079.417620][T11879] usb 8-1: Using ep0 maxpacket: 16 [ 1079.419976][T11879] usb 8-1: config index 0 descriptor too short (expected 26642, got 249) [ 1079.420002][T11879] usb 8-1: config 28 has too many interfaces: 148, using maximum allowed: 32 [ 1079.420021][T11879] usb 8-1: config 28 has an invalid descriptor of length 0, skipping remainder of the config [ 1079.420038][T11879] usb 8-1: config 28 has 1 interface, different from the descriptor's value: 148 [ 1079.420082][T11879] usb 8-1: config 28 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1079.420102][T11879] usb 8-1: config 28 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1079.420124][T11879] usb 8-1: config 28 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1079.420144][T11879] usb 8-1: config 28 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1079.420166][T11879] usb 8-1: config 28 interface 0 has no altsetting 0 [ 1079.420197][T11879] usb 8-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1079.420217][T11879] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.549425][T11879] ums-sddr09 8-1:28.0: USB Mass Storage device detected [ 1080.166611][T11879] ums-sddr09 8-1:28.0: probe with driver ums-sddr09 failed with error -22 [ 1080.309467][T12931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1080.310023][T12931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1080.377955][T11879] usb 8-1: USB disconnect, device number 11 [ 1082.227693][T11879] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1082.378630][T11879] usb 10-1: Using ep0 maxpacket: 16 [ 1082.398807][T11879] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1082.398865][T11879] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1082.398895][T11879] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1082.399000][T11879] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1082.399025][T11879] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1082.400612][T11879] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1082.400640][T11879] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1082.400661][T11879] usb 10-1: Manufacturer: syz [ 1082.511156][T11879] usb 10-1: config 0 descriptor?? [ 1082.602074][ T5113] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1082.618518][ T5113] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1082.637003][ T5113] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1082.650124][ T5113] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1082.651011][ T5113] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1083.049097][T11879] rc_core: IR keymap rc-hauppauge not found [ 1083.049121][T11879] Registered IR keymap rc-empty [ 1083.050075][T11879] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1083.076285][T11879] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1083.089627][T11879] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1083.117886][T11879] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input14 [ 1083.140528][T11879] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1083.159569][T11879] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1083.177731][T11879] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1083.198065][T11879] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1083.217737][T11879] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1083.237730][T11879] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1083.257697][T11879] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1083.277823][T11879] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1083.297737][T11879] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1083.317710][T11879] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1083.353114][T11879] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1083.353144][T11879] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1083.422343][T11879] usb 10-1: USB disconnect, device number 8 [ 1083.573161][T12979] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1084.020157][T12985] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1084.728355][ T8859] Bluetooth: hci4: command tx timeout [ 1085.208575][ T2176] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1085.387666][ T2176] usb 7-1: Using ep0 maxpacket: 32 [ 1085.394545][ T2176] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1085.394576][ T2176] usb 7-1: config 0 has no interface number 0 [ 1085.394625][ T2176] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1085.403381][ T2176] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1085.403414][ T2176] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.403435][ T2176] usb 7-1: Product: syz [ 1085.403451][ T2176] usb 7-1: Manufacturer: syz [ 1085.403467][ T2176] usb 7-1: SerialNumber: syz [ 1085.480020][ T2176] usb 7-1: config 0 descriptor?? [ 1085.867740][T11879] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1086.017697][T11879] usb 8-1: Using ep0 maxpacket: 32 [ 1086.020913][T11879] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1086.021014][T11879] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1086.021058][T11879] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1086.021083][T11879] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.118424][T11879] usb 8-1: config 0 descriptor?? [ 1086.131506][ T2176] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1086.131729][ T2176] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1086.886276][ T8859] Bluetooth: hci4: command tx timeout [ 1087.258616][ T2176] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 1087.258664][ T2176] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 1087.258686][ T2176] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 1087.259284][ T2176] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -61 [ 1087.351605][T11879] hub 8-1:0.0: USB hub found [ 1087.472115][T11879] hub 8-1:0.0: 1 port detected [ 1088.066543][T11879] hub 8-1:0.0: activate --> -90 [ 1088.978400][ T8859] Bluetooth: hci4: command tx timeout [ 1089.248105][T10184] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1089.412659][ C0] raw-gadget.1 gadget.7: ignoring, device is not running [ 1089.442314][T11879] usb 8-1-port1: cannot reset (err = -32) [ 1089.444545][ C0] raw-gadget.1 gadget.7: ignoring, device is not running [ 1089.445387][T11879] usb 8-1-port1: cannot reset (err = -32) [ 1089.445436][T11879] usb 8-1-port1: Cannot enable. Maybe the USB cable is bad? [ 1089.447064][ C0] raw-gadget.1 gadget.7: ignoring, device is not running [ 1089.448179][T11879] usb 8-1-port1: cannot disable (err = -32) [ 1089.453356][ C0] raw-gadget.1 gadget.7: ignoring, device is not running [ 1089.455163][T11879] usb 8-1-port1: cannot reset (err = -32) [ 1089.457323][ C0] raw-gadget.1 gadget.7: ignoring, device is not running [ 1089.459044][T11879] usb 8-1-port1: cannot reset (err = -32) [ 1089.459092][T11879] usb 8-1-port1: Cannot enable. Maybe the USB cable is bad? [ 1089.468490][T11879] usb 8-1-port1: cannot disable (err = -71) [ 1089.468554][T11879] usb 8-1-port1: attempt power cycle [ 1089.503624][ T5848] usb 8-1: USB disconnect, device number 12 [ 1089.565601][T10184] usb 10-1: Using ep0 maxpacket: 16 [ 1089.590557][T10184] usb 10-1: config index 0 descriptor too short (expected 65, got 36) [ 1089.590587][T10184] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1089.590636][T10184] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1089.590681][T10184] usb 10-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1089.590705][T10184] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.659228][T10184] usb 10-1: config 0 descriptor?? [ 1089.664064][T13030] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1089.699562][T11941] usb 7-1: USB disconnect, device number 38 [ 1089.707023][T10184] pxrc 10-1:0.0: Could not find endpoint [ 1089.722285][T10184] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1090.198841][T11941] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1090.347740][ T5848] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1090.377635][T11941] usb 7-1: Using ep0 maxpacket: 16 [ 1090.385583][T11941] usb 7-1: config 0 has an invalid descriptor of length 39, skipping remainder of the config [ 1090.385664][T11941] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1090.385695][T11941] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1090.385717][T11941] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1090.385741][T11941] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1090.397728][T11941] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1090.397760][T11941] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1090.397780][T11941] usb 7-1: Manufacturer: syz [ 1090.505567][T11941] usb 7-1: config 0 descriptor?? [ 1090.527065][T12973] chnl_net:caif_netlink_parms(): no params data found [ 1090.535196][ T5848] usb 8-1: device descriptor read/64, error -71 [ 1090.793509][ T5848] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1090.879997][T11941] rc_core: IR keymap rc-hauppauge not found [ 1090.880019][T11941] Registered IR keymap rc-empty [ 1090.881044][T11941] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1090.908844][T11941] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1090.927684][ T5848] usb 8-1: device descriptor read/64, error -71 [ 1090.929679][T11941] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1090.935501][T11941] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input15 [ 1090.975496][T11941] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1090.987757][T11941] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1091.007975][T11941] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1091.037671][T11941] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1091.056089][ T5848] usb usb8-port1: attempt power cycle [ 1091.057768][ T8859] Bluetooth: hci4: command tx timeout [ 1091.069038][T11941] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1091.087748][T11941] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1091.107800][T11941] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1091.127793][T11941] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1091.148430][T11941] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1091.167772][T11941] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1091.202045][T11941] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1091.202926][T11941] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1091.262593][T11941] usb 7-1: USB disconnect, device number 39 [ 1091.359930][ T9] usb 10-1: USB disconnect, device number 9 [ 1091.477614][ T5848] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1091.498383][ T5848] usb 8-1: device descriptor read/8, error -71 [ 1091.611410][T12973] bridge0: port 1(bridge_slave_0) entered blocking state [ 1091.611556][T12973] bridge0: port 1(bridge_slave_0) entered disabled state [ 1091.611775][T12973] bridge_slave_0: entered allmulticast mode [ 1091.643505][T12973] bridge_slave_0: entered promiscuous mode [ 1091.699671][T13058] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1367'. [ 1091.699713][T13058] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1091.706264][T12973] bridge0: port 2(bridge_slave_1) entered blocking state [ 1091.706393][T12973] bridge0: port 2(bridge_slave_1) entered disabled state [ 1091.706652][T12973] bridge_slave_1: entered allmulticast mode [ 1091.737643][ T5848] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1091.758355][ T5848] usb 8-1: device descriptor read/8, error -71 [ 1091.799495][T12973] bridge_slave_1: entered promiscuous mode [ 1091.868206][ T5848] usb usb8-port1: unable to enumerate USB device [ 1091.997767][ T9] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1092.537873][T12973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1092.538127][ T7675] bridge_slave_1: left allmulticast mode [ 1092.538152][ T7675] bridge_slave_1: left promiscuous mode [ 1092.538430][ T7675] bridge0: port 2(bridge_slave_1) entered disabled state [ 1092.569822][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 1092.581591][ T9] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1092.581636][ T9] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1092.627710][T11879] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1092.631040][ T9] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1092.631060][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.631073][ T9] usb 10-1: Product: syz [ 1092.631083][ T9] usb 10-1: Manufacturer: syz [ 1092.631092][ T9] usb 10-1: SerialNumber: syz [ 1092.678858][ T7675] bridge_slave_0: left allmulticast mode [ 1092.678882][ T7675] bridge_slave_0: left promiscuous mode [ 1092.679084][ T7675] bridge0: port 1(bridge_slave_0) entered disabled state [ 1092.790199][T11879] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1092.790290][T11879] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1092.790334][T11879] usb 6-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1092.790359][T11879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.847011][T11879] usb 6-1: config 0 descriptor?? [ 1092.914321][ T9] usb 10-1: 0:2 : does not exist [ 1093.165842][ T9] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 1093.307772][T13072] ubi: mtd0 is already attached to ubi31 [ 1094.315577][T11879] hid-led 0003:1D34:000A.0003: unknown main item tag 0x0 [ 1094.338726][ T9] usb 10-1: USB disconnect, device number 10 [ 1094.520302][T11974] udevd[11974]: setting owner of /dev/bus/usb/010/010 to uid=0, gid=0 failed: No such file or directory [ 1094.579358][T13078] delete_channel: no stack [ 1094.594595][T11974] udevd[11974]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1094.812404][T13081] binder: 13080:13081 ioctl c0306201 200000000380 returned -14 [ 1094.877862][ T7675] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1094.947727][T11879] hid-led 0003:1D34:000A.0003: probe with driver hid-led failed with error -71 [ 1094.953672][T11879] usb 6-1: USB disconnect, device number 55 [ 1095.019188][ T7675] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1095.100195][ T7675] bond0 (unregistering): Released all slaves [ 1095.142325][T12973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1095.189045][T13086] kvm: kvm [13085]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffff [ 1096.198145][ T2176] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1096.358210][ T2176] usb 10-1: Using ep0 maxpacket: 16 [ 1096.366636][ T2176] usb 10-1: config index 0 descriptor too short (expected 65, got 36) [ 1096.366725][ T2176] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1096.367050][ T2176] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1096.379907][ T2176] usb 10-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1096.379986][ T2176] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.645119][ T2176] usb 10-1: config 0 descriptor?? [ 1096.748335][ T2176] pxrc 10-1:0.0: Could not find endpoint [ 1096.770177][ T2176] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1096.797707][ T7675] hsr_slave_0: left promiscuous mode [ 1096.837893][ T7675] hsr_slave_1: left promiscuous mode [ 1096.838943][ T7675] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1096.880145][ T7675] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1097.148429][T13113] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1098.038795][ T7675] team0 (unregistering): Port device team_slave_1 removed [ 1098.086653][ T7675] team0 (unregistering): Port device team_slave_0 removed [ 1098.323261][T12973] team0: Port device team_slave_0 added [ 1098.369931][T11879] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1098.417127][T12973] team0: Port device team_slave_1 added [ 1098.529215][T11879] usb 6-1: Using ep0 maxpacket: 16 [ 1098.531707][T11879] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1098.531738][T11879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.582691][T11879] usb 6-1: config 0 descriptor?? [ 1098.626520][T11879] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1098.652758][T12973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1098.652776][T12973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1098.652803][T12973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1098.655700][T12973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1098.655717][T12973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1098.655745][T12973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1098.816137][T12973] hsr_slave_0: entered promiscuous mode [ 1098.840282][T12973] hsr_slave_1: entered promiscuous mode [ 1098.841541][T12973] debugfs: 'hsr0' already exists in 'hsr' [ 1098.841569][T12973] Cannot create hsr debugfs directory [ 1099.416335][ T2176] usb 10-1: USB disconnect, device number 11 [ 1099.574838][T13141] netlink: 'syz.6.1385': attribute type 5 has an invalid length. [ 1100.418410][T10184] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1101.090380][T10184] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1101.090422][T10184] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.390947][T10184] usb 8-1: config 0 descriptor?? [ 1101.549479][T13169] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1102.393554][T10184] cp210x 8-1:0.0: cp210x converter detected [ 1102.427640][T10184] cp210x 8-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 1102.427680][T10184] cp210x 8-1:0.0: querying part number failed [ 1102.628366][T10184] usb 8-1: cp210x converter now attached to ttyUSB0 [ 1102.877887][T11879] gspca_sonixj: reg_w1 err -110 [ 1102.878086][T11879] sonixj 6-1:0.0: probe with driver sonixj failed with error -110 [ 1103.437436][T13176] ubi: mtd0 is already attached to ubi31 [ 1104.159576][ T9848] usb 6-1: USB disconnect, device number 56 [ 1104.366371][T11941] usb 8-1: USB disconnect, device number 21 [ 1104.449649][T11941] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1104.450427][T11941] cp210x 8-1:0.0: device disconnected [ 1104.774100][T12973] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1105.169598][T12973] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1105.769369][ T9848] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1105.849938][T12973] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1105.903961][T12973] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1105.918135][ T9848] usb 8-1: Using ep0 maxpacket: 16 [ 1105.920590][ T9848] usb 8-1: config index 0 descriptor too short (expected 65, got 36) [ 1105.920617][ T9848] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1105.920676][ T9848] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1105.920719][ T9848] usb 8-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1105.920743][ T9848] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.999340][ T9848] usb 8-1: config 0 descriptor?? [ 1106.038414][ T9848] pxrc 8-1:0.0: Could not find endpoint [ 1106.039960][ T9848] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1106.092384][T11941] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1106.257937][T11941] usb 7-1: Using ep0 maxpacket: 16 [ 1106.260341][T11941] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1106.260373][T11941] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1106.263579][T11941] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1106.263609][T11941] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.263631][T11941] usb 7-1: Product: syz [ 1106.263647][T11941] usb 7-1: Manufacturer: syz [ 1106.263663][T11941] usb 7-1: SerialNumber: syz [ 1106.273194][T11941] usb 7-1: config 0 descriptor?? [ 1106.357647][T11941] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1106.357711][T11941] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 1106.848620][T13209] ubi: mtd0 is already attached to ubi31 [ 1107.702341][T11941] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1107.713478][T11941] em28xx 7-1:0.0: Config register raw data: 0x72 [ 1107.713504][T11941] em28xx 7-1:0.0: I2S Audio (3 sample rate(s)) [ 1107.713520][T11941] em28xx 7-1:0.0: No AC97 audio processor [ 1107.803650][T12973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1107.967301][T12973] 8021q: adding VLAN 0 to HW filter on device team0 [ 1108.044342][T11879] usb 8-1: USB disconnect, device number 22 [ 1108.103456][ T7676] bridge0: port 1(bridge_slave_0) entered blocking state [ 1108.103699][ T7676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1108.514870][T11941] usb 7-1: USB disconnect, device number 40 [ 1108.605344][T13222] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1109.369662][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1109.369819][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1109.506816][T12973] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1109.506842][T12973] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1112.367668][T11880] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1112.894817][T11880] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1112.894850][T11880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.981757][T11880] usb 6-1: config 0 descriptor?? [ 1113.011596][T11880] cp210x 6-1:0.0: cp210x converter detected [ 1113.422938][T11880] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 1113.422972][T11880] cp210x 6-1:0.0: querying part number failed [ 1113.482438][T11880] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1113.687859][T13256] netlink: 27 bytes leftover after parsing attributes in process `syz.9.1408'. [ 1114.263633][T12973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1114.467700][T11880] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1114.974442][T12973] veth0_vlan: entered promiscuous mode [ 1114.995803][T12973] veth1_vlan: entered promiscuous mode [ 1115.053448][T12973] veth0_macvtap: entered promiscuous mode [ 1115.070911][T12973] veth1_macvtap: entered promiscuous mode [ 1115.113196][T12973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1115.133834][T12973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1115.193039][T10184] usb 6-1: USB disconnect, device number 57 [ 1115.379088][T10184] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1115.379935][T10184] cp210x 6-1:0.0: device disconnected [ 1115.489829][T11880] usb 10-1: Using ep0 maxpacket: 32 [ 1115.494993][T11880] usb 10-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1115.495026][T11880] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.584532][T12649] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.615986][T11880] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1115.624095][T12649] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.640326][T12649] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.967708][ T41] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.004359][T13284] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1116.512243][T13285] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1117.327731][T11880] gspca_nw80x: reg_r err -110 [ 1117.327834][T11880] nw80x 10-1:3.0: probe with driver nw80x failed with error -110 [ 1117.805864][ T2176] usb 10-1: USB disconnect, device number 12 [ 1118.200755][ T7674] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1118.200780][ T7674] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1119.648270][T13303] syz_tun: entered promiscuous mode [ 1119.648612][T13303] macvtap1: entered promiscuous mode [ 1119.792602][T13303] syz_tun: left promiscuous mode [ 1119.877636][T11941] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1119.905959][T13309] netlink: 27 bytes leftover after parsing attributes in process `syz.5.1418'. [ 1120.120553][T11941] usb 7-1: Using ep0 maxpacket: 16 [ 1120.127283][T11941] usb 7-1: config index 0 descriptor too short (expected 65, got 36) [ 1120.127313][T11941] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1120.127362][T11941] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1120.127404][T11941] usb 7-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1120.127428][T11941] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.260398][T11941] usb 7-1: config 0 descriptor?? [ 1120.274838][T11941] pxrc 7-1:0.0: Could not find endpoint [ 1120.287066][T11941] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1120.446401][ T1077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1120.446423][ T1077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1120.657950][T11941] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1120.784242][T13324] warning: `syz.5.1420' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1120.834917][T11941] usb 8-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1120.834951][T11941] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.834973][T11941] usb 8-1: Product: syz [ 1120.834988][T11941] usb 8-1: Manufacturer: syz [ 1120.835003][T11941] usb 8-1: SerialNumber: syz [ 1120.888918][T11941] usb 8-1: config 0 descriptor?? [ 1120.919961][T11941] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1120.996384][T11941] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1121.009127][T11941] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1121.009218][T11941] usb 8-1: media controller created [ 1121.059363][T11941] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1121.081502][T13328] FAULT_INJECTION: forcing a failure. [ 1121.081502][T13328] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1121.081537][T13328] CPU: 0 UID: 0 PID: 13328 Comm: syz.9.1421 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1121.081567][T13328] Tainted: [L]=SOFTLOCKUP [ 1121.081575][T13328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1121.081587][T13328] Call Trace: [ 1121.081596][T13328] [ 1121.081606][T13328] dump_stack_lvl+0xe8/0x150 [ 1121.081646][T13328] should_fail_ex+0x46b/0x600 [ 1121.081683][T13328] _copy_to_user+0x31/0xb0 [ 1121.081709][T13328] simple_read_from_buffer+0xe1/0x170 [ 1121.081740][T13328] proc_fail_nth_read+0x1be/0x230 [ 1121.081771][T13328] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1121.081802][T13328] ? rw_verify_area+0x2ac/0x4e0 [ 1121.081835][T13328] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1121.081862][T13328] vfs_read+0x212/0xa80 [ 1121.081896][T13328] ? __pfx_vfs_read+0x10/0x10 [ 1121.081931][T13328] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1121.081955][T13328] ? lockdep_hardirqs_on+0x7a/0x110 [ 1121.081979][T13328] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1121.082005][T13328] ? mutex_lock_nested+0x152/0x1d0 [ 1121.082046][T13328] ? fdget_pos+0x252/0x320 [ 1121.082081][T13328] ksys_read+0x156/0x270 [ 1121.082115][T13328] ? __pfx_ksys_read+0x10/0x10 [ 1121.082160][T13328] do_syscall_64+0x14d/0xf80 [ 1121.082183][T13328] ? trace_irq_disable+0x3b/0x150 [ 1121.082209][T13328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1121.082231][T13328] ? clear_bhb_loop+0x40/0x90 [ 1121.082258][T13328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1121.082279][T13328] RIP: 0033:0x7faa14d9d04e [ 1121.082300][T13328] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1121.082318][T13328] RSP: 002b:00007faa13014fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1121.082340][T13328] RAX: ffffffffffffffda RBX: 00007faa130156c0 RCX: 00007faa14d9d04e [ 1121.082355][T13328] RDX: 000000000000000f RSI: 00007faa130150a0 RDI: 0000000000000005 [ 1121.082367][T13328] RBP: 00007faa13015090 R08: 0000000000000000 R09: 0000000000000000 [ 1121.082379][T13328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1121.082392][T13328] R13: 00007faa15056128 R14: 00007faa15056090 R15: 00007ffce83441f8 [ 1121.082426][T13328] [ 1121.142462][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1121.152842][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.153067][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.396323][T13320] netlink: 'syz.7.1419': attribute type 1 has an invalid length. [ 1121.396349][T13320] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1419'. [ 1121.885601][T11941] DVB: Unable to find symbol mt352_attach() [ 1121.975550][T11941] DVB: Unable to find symbol nxt6000_attach() [ 1121.975569][T11941] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1122.037823][T11941] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input16 [ 1122.043506][T11941] dvb-usb: schedule remote query interval to 1000 msecs. [ 1122.043531][T11941] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1122.043949][T11941] dvb-usb: bulk message failed: -22 (7/0) [ 1122.043972][T11941] dvb-usb: bulk message failed: -22 (7/0) [ 1122.057680][ T5848] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1122.380858][ T5848] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1122.380893][ T5848] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.438017][ T5848] usb 6-1: config 0 descriptor?? [ 1122.442824][ T5848] cp210x 6-1:0.0: cp210x converter detected [ 1122.891338][T11879] IPVS: starting estimator thread 0... [ 1123.013824][T13361] ubi: mtd0 is already attached to ubi31 [ 1123.252373][T13359] IPVS: using max 1 ests per chain, 2400 per kthread [ 1123.475076][T10184] dvb-usb: bulk message failed: -22 (7/0) [ 1123.475122][T10184] dvb-usb: error while querying for an remote control event. [ 1123.487655][ T5848] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 1123.487687][ T5848] cp210x 6-1:0.0: querying part number failed [ 1123.499682][ T5848] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1123.965403][T12100] usb 8-1: USB disconnect, device number 23 [ 1124.266109][T13375] process 'syz.9.1426' launched '/dev/fd/3' with NULL argv: empty string added [ 1124.307106][T13375] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1124.314185][T13375] FAULT_INJECTION: forcing a failure. [ 1124.314185][T13375] name failslab, interval 1, probability 0, space 0, times 0 [ 1124.314221][T13375] CPU: 0 UID: 0 PID: 13375 Comm: syz.9.1426 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1124.314249][T13375] Tainted: [L]=SOFTLOCKUP [ 1124.314256][T13375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1124.314269][T13375] Call Trace: [ 1124.314278][T13375] [ 1124.314287][T13375] dump_stack_lvl+0xe8/0x150 [ 1124.314323][T13375] should_fail_ex+0x46b/0x600 [ 1124.314360][T13375] should_failslab+0xa8/0x100 [ 1124.314390][T13375] __kmalloc_cache_noprof+0x84/0x690 [ 1124.314412][T13375] ? tomoyo_init_log+0x195/0x1fb0 [ 1124.314443][T13375] ? widen_string+0x3b/0x2a0 [ 1124.314604][T13375] tomoyo_init_log+0x195/0x1fb0 [ 1124.314638][T13375] ? __pfx_ip6_addr_string+0x10/0x10 [ 1124.314667][T13375] ? format_decode+0xd9/0xe10 [ 1124.314700][T13375] ? string+0x279/0x2b0 [ 1124.314741][T13375] ? __pfx_tomoyo_init_log+0x10/0x10 [ 1124.314771][T13375] ? tomoyo_profile+0x11/0x50 [ 1124.314799][T13375] ? tomoyo_domain_quota_is_ok+0x42b/0x570 [ 1124.314827][T13375] tomoyo_supervisor+0x353/0x1570 [ 1124.314859][T13375] ? format_decode+0x5a3/0xe10 [ 1124.314900][T13375] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 1124.314942][T13375] ? snprintf+0xe8/0x140 [ 1124.314981][T13375] ? __pfx_snprintf+0x10/0x10 [ 1124.315017][T13375] ? tomoyo_check_acl+0x386/0x400 [ 1124.315060][T13375] tomoyo_check_inet_address+0x603/0x950 [ 1124.315088][T13375] ? __lock_acquire+0x6b5/0x2cf0 [ 1124.315110][T13375] ? tomoyo_check_inet_address+0x289/0x950 [ 1124.315144][T13375] ? __pfx_tomoyo_check_inet_address+0x10/0x10 [ 1124.315185][T13375] ? __lock_acquire+0x6b5/0x2cf0 [ 1124.315215][T13375] ? __lock_acquire+0x6b5/0x2cf0 [ 1124.315248][T13375] tomoyo_socket_sendmsg_permission+0x215/0x300 [ 1124.315291][T13375] security_socket_sendmsg+0x97/0x280 [ 1124.315329][T13375] ____sys_sendmsg+0x504/0x9c0 [ 1124.315363][T13375] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1124.315399][T13375] ? import_iovec+0x73/0xa0 [ 1124.315425][T13375] ___sys_sendmsg+0x2a5/0x360 [ 1124.315459][T13375] ? __pfx____sys_sendmsg+0x10/0x10 [ 1124.315491][T13375] ? kstrtouint+0x6e/0xe0 [ 1124.315565][T13375] __sys_sendmmsg+0x282/0x4e0 [ 1124.315599][T13375] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1124.315665][T13375] ? ksys_write+0x202/0x270 [ 1124.315699][T13375] ? __pfx_ksys_write+0x10/0x10 [ 1124.315747][T13375] __x64_sys_sendmmsg+0xa0/0xc0 [ 1124.315774][T13375] do_syscall_64+0x14d/0xf80 [ 1124.315800][T13375] ? trace_irq_disable+0x3b/0x150 [ 1124.315825][T13375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1124.315848][T13375] ? clear_bhb_loop+0x40/0x90 [ 1124.315885][T13375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1124.315906][T13375] RIP: 0033:0x7faa14ddc819 [ 1124.315924][T13375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1124.315943][T13375] RSP: 002b:00007faa13015028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1124.315964][T13375] RAX: ffffffffffffffda RBX: 00007faa15056090 RCX: 00007faa14ddc819 [ 1124.315978][T13375] RDX: 0000000000000002 RSI: 0000200000003a00 RDI: 0000000000000004 [ 1124.315991][T13375] RBP: 00007faa13015090 R08: 0000000000000000 R09: 0000000000000000 [ 1124.316003][T13375] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000001 [ 1124.316015][T13375] R13: 00007faa15056128 R14: 00007faa15056090 R15: 00007ffce83441f8 [ 1124.316047][T13375] [ 1125.577675][T10184] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1125.602179][T12100] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1125.651648][T11941] usb 7-1: USB disconnect, device number 41 [ 1125.672733][T11879] usb 6-1: USB disconnect, device number 58 [ 1125.730923][T11879] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1125.743213][T11879] cp210x 6-1:0.0: device disconnected [ 1125.753486][T10184] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1125.753535][T10184] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1125.753583][T10184] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1125.753607][T10184] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.886487][T13370] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1125.900968][T10184] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1126.066158][T13386] netlink: 27 bytes leftover after parsing attributes in process `syz.9.1429'. [ 1126.098514][T12100] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1126.287045][T12100] usb 8-1: Using ep0 maxpacket: 16 [ 1126.303115][T12100] usb 8-1: config index 0 descriptor too short (expected 65, got 36) [ 1126.303148][T12100] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1126.303214][T12100] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1126.303259][T12100] usb 8-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1126.303284][T12100] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.388415][T11879] usb 4-1: USB disconnect, device number 11 [ 1126.423932][T12100] usb 8-1: config 0 descriptor?? [ 1126.497070][T12100] pxrc 8-1:0.0: Could not find endpoint [ 1126.531918][T12100] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1128.194590][ T5884] usb 8-1: USB disconnect, device number 24 [ 1128.609622][T13412] Illegal XDP return value 4294967274 on prog (id 138) dev N/A, expect packet loss! [ 1128.915105][T13412] exfat: Deprecated parameter 'debug' [ 1128.929942][T13412] exFAT-fs (nullb0): invalid boot record signature [ 1128.929954][T13412] exFAT-fs (nullb0): failed to read boot sector [ 1128.929962][T13412] exFAT-fs (nullb0): failed to recognize exfat type [ 1130.190097][T13431] netlink: 'syz.3.1440': attribute type 2 has an invalid length. [ 1130.673678][T13435] netlink: 27 bytes leftover after parsing attributes in process `syz.6.1442'. [ 1130.779423][T13448] FAULT_INJECTION: forcing a failure. [ 1130.779423][T13448] name failslab, interval 1, probability 0, space 0, times 0 [ 1130.779487][T13448] CPU: 0 UID: 0 PID: 13448 Comm: syz.9.1439 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1130.779518][T13448] Tainted: [L]=SOFTLOCKUP [ 1130.779525][T13448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1130.779540][T13448] Call Trace: [ 1130.779548][T13448] [ 1130.779557][T13448] dump_stack_lvl+0xe8/0x150 [ 1130.779595][T13448] should_fail_ex+0x46b/0x600 [ 1130.779631][T13448] should_failslab+0xa8/0x100 [ 1130.779657][T13448] __kmalloc_noprof+0xdf/0x7b0 [ 1130.779677][T13448] ? __kmalloc_cache_noprof+0x3a6/0x690 [ 1130.779697][T13448] ? alloc_pipe_info+0x1fc/0x4d0 [ 1130.779717][T13448] ? alloc_pipe_info+0xe8/0x4d0 [ 1130.779742][T13448] alloc_pipe_info+0x1fc/0x4d0 [ 1130.779766][T13448] splice_direct_to_actor+0xa19/0xc80 [ 1130.779823][T13448] ? __pfx___schedule+0x10/0x10 [ 1130.779846][T13448] ? __pfx_direct_splice_actor+0x10/0x10 [ 1130.779885][T13448] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1130.779927][T13448] do_splice_direct+0x19b/0x2a0 [ 1130.779960][T13448] ? __pfx_do_splice_direct+0x10/0x10 [ 1130.779992][T13448] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1130.780028][T13448] ? do_sendfile+0x524/0x7e0 [ 1130.780063][T13448] do_sendfile+0x547/0x7e0 [ 1130.780099][T13448] ? __pfx_do_sendfile+0x10/0x10 [ 1130.780130][T13448] ? irqentry_exit+0x59e/0x620 [ 1130.780156][T13448] ? lockdep_hardirqs_on+0x7a/0x110 [ 1130.780180][T13448] ? irqentry_exit+0x59e/0x620 [ 1130.780210][T13448] __se_sys_sendfile64+0x144/0x1a0 [ 1130.780246][T13448] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1130.780284][T13448] do_syscall_64+0x14d/0xf80 [ 1130.780310][T13448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.780334][T13448] ? clear_bhb_loop+0x40/0x90 [ 1130.780363][T13448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.780385][T13448] RIP: 0033:0x7faa14ddc819 [ 1130.780406][T13448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1130.780425][T13448] RSP: 002b:00007faa12ff4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1130.780450][T13448] RAX: ffffffffffffffda RBX: 00007faa15056180 RCX: 00007faa14ddc819 [ 1130.780466][T13448] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000007 [ 1130.780479][T13448] RBP: 00007faa12ff4090 R08: 0000000000000000 R09: 0000000000000000 [ 1130.780492][T13448] R10: 000000000000003a R11: 0000000000000246 R12: 0000000000000001 [ 1130.780506][T13448] R13: 00007faa15056218 R14: 00007faa15056180 R15: 00007ffce83441f8 [ 1130.780540][T13448] [ 1131.698075][T11879] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1131.971967][T11879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1131.971999][T11879] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1131.972025][T11879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1131.972048][T11879] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1131.974648][T11879] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1131.974678][T11879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.974698][T11879] usb 4-1: Product: syz [ 1131.974712][T11879] usb 4-1: Manufacturer: syz [ 1131.974726][T11879] usb 4-1: SerialNumber: syz [ 1132.092900][T13451] ALSA: mixer_oss: invalid OSS volume 'o' [ 1132.093635][T13451] ALSA: mixer_oss: invalid OSS volume '' [ 1132.153710][T11879] usb 4-1: config 0 descriptor?? [ 1132.165535][T11879] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 1132.407671][T11879] scsi host1: usb-storage 4-1:0.0 [ 1132.443735][T11879] usb 4-1: USB disconnect, device number 12 [ 1134.257717][ T5886] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1134.407646][ T5886] usb 10-1: Using ep0 maxpacket: 32 [ 1134.411161][ T5886] usb 10-1: config 0 has an invalid interface number: 188 but max is 0 [ 1134.411191][ T5886] usb 10-1: config 0 has no interface number 0 [ 1134.411241][ T5886] usb 10-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1134.414445][ T5886] usb 10-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1134.414477][ T5886] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.414499][ T5886] usb 10-1: Product: syz [ 1134.414514][ T5886] usb 10-1: Manufacturer: syz [ 1134.414529][ T5886] usb 10-1: SerialNumber: syz [ 1134.500238][ T5886] usb 10-1: config 0 descriptor?? [ 1134.501582][T13479] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1135.447446][T13479] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1135.497211][T13493] FAULT_INJECTION: forcing a failure. [ 1135.497211][T13493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1135.497252][T13493] CPU: 0 UID: 0 PID: 13493 Comm: syz.3.1452 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1135.497283][T13493] Tainted: [L]=SOFTLOCKUP [ 1135.497291][T13493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1135.497305][T13493] Call Trace: [ 1135.497317][T13493] [ 1135.497327][T13493] dump_stack_lvl+0xe8/0x150 [ 1135.497365][T13493] should_fail_ex+0x46b/0x600 [ 1135.497403][T13493] _copy_to_user+0x31/0xb0 [ 1135.497428][T13493] simple_read_from_buffer+0xe1/0x170 [ 1135.497463][T13493] proc_fail_nth_read+0x1be/0x230 [ 1135.497492][T13493] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1135.497524][T13493] ? rw_verify_area+0x2ac/0x4e0 [ 1135.497559][T13493] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1135.497589][T13493] vfs_read+0x212/0xa80 [ 1135.497630][T13493] ? __pfx_vfs_read+0x10/0x10 [ 1135.497668][T13493] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1135.497695][T13493] ? lockdep_hardirqs_on+0x7a/0x110 [ 1135.497722][T13493] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1135.497757][T13493] ? mutex_lock_nested+0x152/0x1d0 [ 1135.497788][T13493] ? fdget_pos+0x252/0x320 [ 1135.497828][T13493] ksys_read+0x156/0x270 [ 1135.497864][T13493] ? __pfx_ksys_read+0x10/0x10 [ 1135.497896][T13493] ? fput+0xa0/0xd0 [ 1135.497935][T13493] do_syscall_64+0x14d/0xf80 [ 1135.497960][T13493] ? trace_irq_disable+0x3b/0x150 [ 1135.497987][T13493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1135.498010][T13493] ? clear_bhb_loop+0x40/0x90 [ 1135.498038][T13493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1135.498060][T13493] RIP: 0033:0x7ff03565d04e [ 1135.498079][T13493] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1135.498099][T13493] RSP: 002b:00007ff0338f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1135.498122][T13493] RAX: ffffffffffffffda RBX: 00007ff0338f66c0 RCX: 00007ff03565d04e [ 1135.498138][T13493] RDX: 000000000000000f RSI: 00007ff0338f60a0 RDI: 0000000000000004 [ 1135.498151][T13493] RBP: 00007ff0338f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1135.498164][T13493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1135.498176][T13493] R13: 00007ff035916038 R14: 00007ff035915fa0 R15: 00007fff9f066a28 [ 1135.498212][T13493] [ 1135.998545][T13497] FAULT_INJECTION: forcing a failure. [ 1135.998545][T13497] name failslab, interval 1, probability 0, space 0, times 0 [ 1135.998588][T13497] CPU: 1 UID: 0 PID: 13497 Comm: syz.6.1453 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1135.998618][T13497] Tainted: [L]=SOFTLOCKUP [ 1135.998626][T13497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1135.998639][T13497] Call Trace: [ 1135.998648][T13497] [ 1135.998657][T13497] dump_stack_lvl+0xe8/0x150 [ 1135.998696][T13497] should_fail_ex+0x46b/0x600 [ 1135.998734][T13497] should_failslab+0xa8/0x100 [ 1135.998760][T13497] __kmalloc_noprof+0xdf/0x7b0 [ 1135.998779][T13497] ? kfree+0x4d/0x6c0 [ 1135.998816][T13497] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1135.998852][T13497] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1135.998892][T13497] ? tomoyo_path_number_perm+0x219/0x630 [ 1135.998916][T13497] tomoyo_path_number_perm+0x246/0x630 [ 1135.998943][T13497] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1135.998971][T13497] ? __lock_acquire+0x6b5/0x2cf0 [ 1135.999030][T13497] ? __fget_files+0x2a/0x420 [ 1135.999064][T13497] ? __fget_files+0x2a/0x420 [ 1135.999092][T13497] ? __fget_files+0x3a6/0x420 [ 1135.999120][T13497] ? __fget_files+0x2a/0x420 [ 1135.999152][T13497] security_file_ioctl+0xc3/0x2a0 [ 1135.999180][T13497] __se_sys_ioctl+0x47/0x170 [ 1135.999206][T13497] do_syscall_64+0x14d/0xf80 [ 1135.999234][T13497] ? trace_irq_disable+0x3b/0x150 [ 1135.999260][T13497] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1135.999284][T13497] ? clear_bhb_loop+0x40/0x90 [ 1135.999313][T13497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1135.999336][T13497] RIP: 0033:0x7f448251c819 [ 1135.999357][T13497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1135.999376][T13497] RSP: 002b:00007f4480776028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1135.999400][T13497] RAX: ffffffffffffffda RBX: 00007f4482795fa0 RCX: 00007f448251c819 [ 1135.999417][T13497] RDX: 0000200000000500 RSI: 00000000c01064ab RDI: 0000000000000003 [ 1135.999431][T13497] RBP: 00007f4480776090 R08: 0000000000000000 R09: 0000000000000000 [ 1135.999446][T13497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1135.999459][T13497] R13: 00007f4482796038 R14: 00007f4482795fa0 R15: 00007ffeb8580968 [ 1135.999494][T13497] [ 1135.999504][T13497] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1136.305301][T13507] netlink: 27 bytes leftover after parsing attributes in process `syz.5.1454'. [ 1136.965896][ T5886] asix 10-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1136.966168][ T5886] asix 10-1:0.188: probe with driver asix failed with error -71 [ 1137.111119][T13517] ======================================================= [ 1137.111119][T13517] WARNING: The mand mount option has been deprecated and [ 1137.111119][T13517] and is ignored by this kernel. Remove the mand [ 1137.111119][T13517] option from the mount to silence this warning. [ 1137.111119][T13517] ======================================================= [ 1137.134863][T13517] overlayfs: missing 'lowerdir' [ 1137.966427][ T5886] usb 10-1: USB disconnect, device number 13 [ 1138.808673][T13523] FAULT_INJECTION: forcing a failure. [ 1138.808673][T13523] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1138.808718][T13523] CPU: 1 UID: 0 PID: 13523 Comm: syz.3.1459 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1138.808749][T13523] Tainted: [L]=SOFTLOCKUP [ 1138.808757][T13523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1138.808771][T13523] Call Trace: [ 1138.808781][T13523] [ 1138.808792][T13523] dump_stack_lvl+0xe8/0x150 [ 1138.808831][T13523] should_fail_ex+0x46b/0x600 [ 1138.808870][T13523] prepare_alloc_pages+0x22a/0x6b0 [ 1138.808906][T13523] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1138.808937][T13523] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1138.808969][T13523] ? __pfx_policy_nodemask+0x10/0x10 [ 1138.808998][T13523] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1138.809030][T13523] alloc_pages_mpol+0xd1/0x380 [ 1138.809059][T13523] vma_alloc_folio_noprof+0xea/0x290 [ 1138.809105][T13523] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1138.809143][T13523] do_wp_page+0x127a/0x49d0 [ 1138.809192][T13523] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1138.809222][T13523] ? preempt_count_add+0x91/0x190 [ 1138.809252][T13523] ? __pfx_do_wp_page+0x10/0x10 [ 1138.809283][T13523] ? rt_spin_lock+0x2ce/0x400 [ 1138.809321][T13523] ? __pfx_rt_spin_lock+0x10/0x10 [ 1138.809365][T13523] ? pte_offset_map_rw_nolock+0xea/0x160 [ 1138.809403][T13523] handle_mm_fault+0x9f5/0x13c0 [ 1138.809453][T13523] ? handle_mm_fault+0xe7/0x13c0 [ 1138.809494][T13523] ? __pfx_handle_mm_fault+0x10/0x10 [ 1138.809553][T13523] ? lock_mm_and_find_vma+0xa7/0x340 [ 1138.809583][T13523] do_user_addr_fault+0x75b/0x1340 [ 1138.809635][T13523] exc_page_fault+0x6a/0xc0 [ 1138.809664][T13523] asm_exc_page_fault+0x26/0x30 [ 1138.809685][T13523] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1138.809717][T13523] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1138.809737][T13523] RSP: 0018:ffffc900048178d8 EFLAGS: 00050206 [ 1138.809758][T13523] RAX: ffffffff849c2901 RBX: ffff8880a15f5000 RCX: 0000000000000600 [ 1138.809775][T13523] RDX: 0000000000000000 RSI: ffff8880a15f5a00 RDI: 0000200000003000 [ 1138.809791][T13523] RBP: ffffc90004817a48 R08: ffff8880a15f5fff R09: 1ffff110142bebff [ 1138.809808][T13523] R10: dffffc0000000000 R11: ffffed10142bec00 R12: 1ffff92000902faf [ 1138.809825][T13523] R13: 0000200000002600 R14: ffffc90004817d88 R15: 0000000000001000 [ 1138.809850][T13523] ? _copy_to_iter+0x191/0x17d0 [ 1138.809891][T13523] _copy_to_iter+0x255/0x17d0 [ 1138.809940][T13523] ? __pfx__copy_to_iter+0x10/0x10 [ 1138.809984][T13523] ? page_copy_sane+0x4e/0x270 [ 1138.810019][T13523] copy_page_to_iter+0x10c/0x1c0 [ 1138.810057][T13523] anon_pipe_read+0x4ee/0x10a0 [ 1138.810112][T13523] ? __pfx_anon_pipe_read+0x10/0x10 [ 1138.810139][T13523] ? __lock_acquire+0x6b5/0x2cf0 [ 1138.810162][T13523] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1138.810212][T13523] vfs_read+0x58b/0xa80 [ 1138.810257][T13523] ? __pfx_vfs_read+0x10/0x10 [ 1138.810303][T13523] ? __fget_files+0x2a/0x420 [ 1138.810344][T13523] ksys_read+0x156/0x270 [ 1138.810381][T13523] ? __pfx_ksys_read+0x10/0x10 [ 1138.810430][T13523] do_syscall_64+0x14d/0xf80 [ 1138.810462][T13523] ? trace_irq_disable+0x3b/0x150 [ 1138.810489][T13523] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1138.810513][T13523] ? clear_bhb_loop+0x40/0x90 [ 1138.810542][T13523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1138.810565][T13523] RIP: 0033:0x7ff03569c819 [ 1138.810586][T13523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1138.810605][T13523] RSP: 002b:00007ff0338f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1138.810627][T13523] RAX: ffffffffffffffda RBX: 00007ff035915fa0 RCX: 00007ff03569c819 [ 1138.810643][T13523] RDX: 0000000000002020 RSI: 0000200000002600 RDI: 0000000000000003 [ 1138.810658][T13523] RBP: 00007ff0338f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1138.810672][T13523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1138.810685][T13523] R13: 00007ff035916038 R14: 00007ff035915fa0 R15: 00007fff9f066a28 [ 1138.810722][T13523] [ 1139.904476][T11879] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1140.717694][T11879] usb 8-1: Using ep0 maxpacket: 16 [ 1140.720037][T11879] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1140.720097][T11879] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1140.720123][T11879] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1140.724020][T11879] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1140.724052][T11879] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1140.724074][T11879] usb 8-1: Manufacturer: syz [ 1140.817656][ T2176] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1140.963930][T11879] usb 8-1: config 0 descriptor?? [ 1140.968828][ T2176] usb 10-1: Using ep0 maxpacket: 16 [ 1140.971315][ T2176] usb 10-1: config index 0 descriptor too short (expected 65, got 36) [ 1140.971343][ T2176] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1140.971393][ T2176] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1140.971438][ T2176] usb 10-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1140.971464][ T2176] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.035915][ T2176] usb 10-1: config 0 descriptor?? [ 1141.138793][ T2176] pxrc 10-1:0.0: Could not find endpoint [ 1141.233372][T13546] ubi: mtd0 is already attached to ubi31 [ 1141.558070][ T2176] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1142.288555][T11879] usb 8-1: USB disconnect, device number 25 [ 1143.318650][T13557] ubi: mtd0 is already attached to ubi31 [ 1144.667229][T11879] usb 10-1: USB disconnect, device number 14 [ 1145.484601][T13577] capability: warning: `syz.3.1467' uses deprecated v2 capabilities in a way that may be insecure [ 1145.486019][T13569] netlink: 27 bytes leftover after parsing attributes in process `syz.7.1468'. [ 1146.056737][T13593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1474'. [ 1146.057455][T13593] netlink: 'syz.3.1474': attribute type 14 has an invalid length. [ 1146.077666][T13593] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1474'. [ 1146.537668][T12100] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1146.547692][T11879] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1147.425575][T11879] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1147.425611][T11879] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.460861][T12100] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 1147.460897][T12100] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.460920][T12100] usb 6-1: Product: syz [ 1147.460937][T12100] usb 6-1: Manufacturer: syz [ 1147.460954][T12100] usb 6-1: SerialNumber: syz [ 1147.501024][T11879] usb 8-1: config 0 descriptor?? [ 1147.863912][T13603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1147.924021][T13603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1149.019299][T13623] netlink: 'syz.7.1478': attribute type 14 has an invalid length. [ 1149.019323][T13623] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1478'. [ 1149.275158][T11879] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1149.377681][T11880] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1149.480146][T11879] [drm:udl_init] *ERROR* Selecting channel failed [ 1149.538206][T11880] usb 7-1: Using ep0 maxpacket: 16 [ 1149.542138][T11880] usb 7-1: config index 0 descriptor too short (expected 65, got 36) [ 1149.542169][T11880] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1149.542218][T11880] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1149.542265][T11880] usb 7-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1149.542290][T11880] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1149.610881][T11880] usb 7-1: config 0 descriptor?? [ 1149.644939][T11880] pxrc 7-1:0.0: Could not find endpoint [ 1149.646481][T11880] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1149.690506][T12100] rtl8150 6-1:1.0: couldn't reset the device [ 1149.690828][T12100] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 1149.771318][T12100] usb 6-1: USB disconnect, device number 59 [ 1149.860705][T11879] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 2 [ 1149.860736][T11879] [drm] Initialized udl on minor 2 [ 1149.920045][T11879] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1149.951472][T11879] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 1149.969218][T11879] usb 8-1: USB disconnect, device number 26 [ 1149.974180][T11880] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1149.976744][T11880] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 1150.307612][T12100] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1150.457598][T12100] usb 6-1: Using ep0 maxpacket: 32 [ 1150.465259][T12100] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1150.466803][T12100] usb 6-1: config 4 has an invalid interface number: 44 but max is 0 [ 1150.466834][T12100] usb 6-1: config 4 has no interface number 0 [ 1150.466882][T12100] usb 6-1: config 4 interface 44 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 1150.466907][T12100] usb 6-1: config 4 interface 44 has no altsetting 0 [ 1150.515125][T12100] usb 6-1: Dual-Role OTG device on HNP port [ 1150.515457][T12100] usb 6-1: New USB device found, idVendor=07ca, idProduct=1835, bcdDevice=35.fe [ 1150.515486][T12100] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.515507][T12100] usb 6-1: Product: syz [ 1150.515523][T12100] usb 6-1: Manufacturer: syz [ 1150.515538][T12100] usb 6-1: SerialNumber: syz [ 1150.809386][T12100] usb 6-1: USB disconnect, device number 60 [ 1150.964667][T11941] usb 7-1: USB disconnect, device number 42 [ 1151.059528][T13634] syz.3.1483 (13634): drop_caches: 2 [ 1151.214936][T13669] FAULT_INJECTION: forcing a failure. [ 1151.214936][T13669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1151.214978][T13669] CPU: 1 UID: 0 PID: 13669 Comm: syz.7.1491 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1151.215008][T13669] Tainted: [L]=SOFTLOCKUP [ 1151.215017][T13669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1151.215031][T13669] Call Trace: [ 1151.215041][T13669] [ 1151.215051][T13669] dump_stack_lvl+0xe8/0x150 [ 1151.215091][T13669] should_fail_ex+0x46b/0x600 [ 1151.215128][T13669] _copy_from_user+0x2d/0xb0 [ 1151.215153][T13669] ___sys_sendmsg+0x1c6/0x360 [ 1151.215187][T13669] ? __pfx____sys_sendmsg+0x10/0x10 [ 1151.215252][T13669] ? __fget_files+0x2a/0x420 [ 1151.215281][T13669] ? __fget_files+0x3a6/0x420 [ 1151.215321][T13669] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1151.215352][T13669] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1151.215390][T13669] ? __pfx_ksys_write+0x10/0x10 [ 1151.215444][T13669] do_syscall_64+0x14d/0xf80 [ 1151.215470][T13669] ? trace_irq_disable+0x3b/0x150 [ 1151.215504][T13669] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1151.215528][T13669] ? clear_bhb_loop+0x40/0x90 [ 1151.215555][T13669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1151.215579][T13669] RIP: 0033:0x7f7362dec819 [ 1151.215600][T13669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1151.215619][T13669] RSP: 002b:00007f736103e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1151.215643][T13669] RAX: ffffffffffffffda RBX: 00007f7363065fa0 RCX: 00007f7362dec819 [ 1151.215660][T13669] RDX: 0000000000000040 RSI: 0000200000000000 RDI: 0000000000000006 [ 1151.215675][T13669] RBP: 00007f736103e090 R08: 0000000000000000 R09: 0000000000000000 [ 1151.215689][T13669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1151.215702][T13669] R13: 00007f7363066038 R14: 00007f7363065fa0 R15: 00007ffe2e818008 [ 1151.215737][T13669] [ 1151.537774][ T5884] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1152.717941][ T5884] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1152.717975][ T5884] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.723383][ T5884] usb 10-1: config 0 descriptor?? [ 1152.922117][ T5884] cp210x 10-1:0.0: cp210x converter detected [ 1153.169156][T13692] bridge_slave_1: left allmulticast mode [ 1153.169186][T13692] bridge_slave_1: left promiscuous mode [ 1153.169929][T13692] bridge0: port 2(bridge_slave_1) entered disabled state [ 1153.241988][ T5884] cp210x 10-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1153.278690][ T5884] cp210x 10-1:0.0: GPIO initialisation failed: -524 [ 1153.300748][ T5884] usb 10-1: cp210x converter now attached to ttyUSB0 [ 1153.524400][T13692] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1153.563506][T11879] usb 10-1: USB disconnect, device number 15 [ 1153.666671][T11879] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1153.667353][T11879] cp210x 10-1:0.0: device disconnected [ 1154.266049][T13713] bond1: option arp_interval: invalid value (18446744072715211142) [ 1154.266079][T13713] bond1: option arp_interval: allowed values 0 - 2147483647 [ 1154.807799][T12100] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1154.960046][T12100] usb 7-1: config 4 has an invalid interface number: 197 but max is 0 [ 1154.960079][T12100] usb 7-1: config 4 has no interface number 0 [ 1154.963140][T12100] usb 7-1: New USB device found, idVendor=0424, idProduct=b832, bcdDevice=2d.ff [ 1154.963171][T12100] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.963192][T12100] usb 7-1: Product: syz [ 1154.963209][T12100] usb 7-1: Manufacturer: syz [ 1154.963319][T12100] usb 7-1: SerialNumber: syz [ 1155.090894][T13713] bond1 (unregistering): Released all slaves [ 1155.416859][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805eef6000: rx timeout, send abort [ 1155.420813][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805eef6000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1157.409823][T13759] netlink: 'syz.5.1510': attribute type 6 has an invalid length. [ 1157.734202][T12100] usb 7-1: USB disconnect, device number 43 [ 1157.895400][T11974] udevd[11974]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:4.197/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1157.965767][T13773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1512'. [ 1157.965819][T13773] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1512'. [ 1158.072547][T13778] FAULT_INJECTION: forcing a failure. [ 1158.072547][T13778] name failslab, interval 1, probability 0, space 0, times 0 [ 1158.072586][T13778] CPU: 1 UID: 0 PID: 13778 Comm: syz.7.1516 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1158.072617][T13778] Tainted: [L]=SOFTLOCKUP [ 1158.072625][T13778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1158.072640][T13778] Call Trace: [ 1158.072649][T13778] [ 1158.072659][T13778] dump_stack_lvl+0xe8/0x150 [ 1158.072712][T13778] should_fail_ex+0x46b/0x600 [ 1158.072750][T13778] should_failslab+0xa8/0x100 [ 1158.072777][T13778] __kmalloc_noprof+0xdf/0x7b0 [ 1158.072800][T13778] ? video_usercopy+0x1b1/0x14b0 [ 1158.072935][T13778] video_usercopy+0x1b1/0x14b0 [ 1158.072974][T13778] ? smk_tskacc+0x311/0x3a0 [ 1158.073005][T13778] ? __pfx___video_do_ioctl+0x10/0x10 [ 1158.073040][T13778] ? __pfx_video_usercopy+0x10/0x10 [ 1158.073072][T13778] ? smack_file_ioctl+0x2c2/0x360 [ 1158.073124][T13778] ? __fget_files+0x2a/0x420 [ 1158.073154][T13778] ? __fget_files+0x3a6/0x420 [ 1158.073187][T13778] v4l2_ioctl+0x190/0x1e0 [ 1158.073220][T13778] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1158.073252][T13778] __se_sys_ioctl+0xff/0x170 [ 1158.073278][T13778] do_syscall_64+0x14d/0xf80 [ 1158.073303][T13778] ? trace_irq_disable+0x3b/0x150 [ 1158.073331][T13778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.073356][T13778] ? clear_bhb_loop+0x40/0x90 [ 1158.073384][T13778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.073408][T13778] RIP: 0033:0x7f7362dec819 [ 1158.073430][T13778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1158.073451][T13778] RSP: 002b:00007f736103e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1158.073475][T13778] RAX: ffffffffffffffda RBX: 00007f7363065fa0 RCX: 00007f7362dec819 [ 1158.073492][T13778] RDX: 0000200000000440 RSI: 00000000c0d05640 RDI: 0000000000000003 [ 1158.073507][T13778] RBP: 00007f736103e090 R08: 0000000000000000 R09: 0000000000000000 [ 1158.073521][T13778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1158.073535][T13778] R13: 00007f7363066038 R14: 00007f7363065fa0 R15: 00007ffe2e818008 [ 1158.073569][T13778] [ 1160.987846][ T809] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1161.089432][T13801] tipc: Enabling of bearer rejected, failed to enable media [ 1161.150315][ T809] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1161.150350][ T809] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.156558][ T809] usb 10-1: config 0 descriptor?? [ 1161.197799][ T809] cp210x 10-1:0.0: cp210x converter detected [ 1161.438546][ T809] cp210x 10-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1161.438581][ T809] cp210x 10-1:0.0: querying part number failed [ 1161.592896][ T809] usb 10-1: cp210x converter now attached to ttyUSB0 [ 1161.633189][ T809] usb 10-1: USB disconnect, device number 16 [ 1161.679621][ T809] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1161.680318][ T809] cp210x 10-1:0.0: device disconnected [ 1162.056254][T13820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1162.056802][T13820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1162.732589][T13829] FAULT_INJECTION: forcing a failure. [ 1162.732589][T13829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1162.732730][T13829] CPU: 1 UID: 0 PID: 13829 Comm: syz.3.1527 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1162.732763][T13829] Tainted: [L]=SOFTLOCKUP [ 1162.732773][T13829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1162.732787][T13829] Call Trace: [ 1162.732797][T13829] [ 1162.732807][T13829] dump_stack_lvl+0xe8/0x150 [ 1162.732847][T13829] should_fail_ex+0x46b/0x600 [ 1162.732884][T13829] _copy_from_iter+0x1d3/0x1670 [ 1162.732916][T13829] ? rcu_is_watching+0x15/0xb0 [ 1162.732943][T13829] ? __alloc_skb+0x27d/0x7d0 [ 1162.732968][T13829] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 1162.733003][T13829] ? __alloc_skb+0x27d/0x7d0 [ 1162.733025][T13829] ? __pfx__copy_from_iter+0x10/0x10 [ 1162.733063][T13829] ? skb_set_owner_w+0x26c/0x3e0 [ 1162.733093][T13829] ? skb_put+0x11b/0x210 [ 1162.733120][T13829] pppol2tp_sendmsg+0x3cd/0x5f0 [ 1162.733231][T13829] ? __pfx_pppol2tp_sendmsg+0x10/0x10 [ 1162.733255][T13829] sock_write_iter+0x4a1/0x4f0 [ 1162.733298][T13829] ? __pfx_sock_write_iter+0x10/0x10 [ 1162.733352][T13829] do_iter_readv_writev+0x62b/0x8d0 [ 1162.733378][T13829] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1162.733412][T13829] ? rw_verify_area+0x25b/0x4e0 [ 1162.733449][T13829] vfs_writev+0x345/0x9a0 [ 1162.733487][T13829] ? __pfx_vfs_writev+0x10/0x10 [ 1162.733530][T13829] ? __fget_files+0x2a/0x420 [ 1162.733564][T13829] ? __fget_files+0x3a6/0x420 [ 1162.733597][T13829] ? __fget_files+0x2a/0x420 [ 1162.733636][T13829] do_writev+0x15a/0x2e0 [ 1162.733666][T13829] ? __pfx_do_writev+0x10/0x10 [ 1162.733704][T13829] do_syscall_64+0x14d/0xf80 [ 1162.733729][T13829] ? trace_irq_disable+0x3b/0x150 [ 1162.733756][T13829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1162.733780][T13829] ? clear_bhb_loop+0x40/0x90 [ 1162.733809][T13829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1162.733832][T13829] RIP: 0033:0x7ff03569c819 [ 1162.733853][T13829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1162.733873][T13829] RSP: 002b:00007ff0338f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1162.733897][T13829] RAX: ffffffffffffffda RBX: 00007ff035915fa0 RCX: 00007ff03569c819 [ 1162.733915][T13829] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 [ 1162.733929][T13829] RBP: 00007ff0338f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1162.733944][T13829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1162.733957][T13829] R13: 00007ff035916038 R14: 00007ff035915fa0 R15: 00007fff9f066a28 [ 1162.733992][T13829] [ 1163.137589][T11880] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1163.386780][T13837] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1163.510380][T13837] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1163.580998][T13837] syz.7.1529 uses obsolete (PF_INET,SOCK_PACKET) [ 1164.437600][T11879] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1164.587661][T12100] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1164.600352][T11879] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 1164.600381][T11879] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1164.600404][T11879] usb 6-1: config 0 has no interface number 0 [ 1164.600454][T11879] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1164.600479][T11879] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1164.653591][T11879] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1164.653624][T11879] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.653647][T11879] usb 6-1: Product: syz [ 1164.653664][T11879] usb 6-1: Manufacturer: syz [ 1164.653680][T11879] usb 6-1: SerialNumber: syz [ 1164.729874][T11879] usb 6-1: config 0 descriptor?? [ 1164.740056][T12100] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1164.740087][T12100] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.812406][T12100] usb 7-1: config 0 descriptor?? [ 1164.847346][T12100] cp210x 7-1:0.0: cp210x converter detected [ 1165.065413][T13857] FAULT_INJECTION: forcing a failure. [ 1165.065413][T13857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1165.065453][T13857] CPU: 1 UID: 0 PID: 13857 Comm: syz.3.1535 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1165.065484][T13857] Tainted: [L]=SOFTLOCKUP [ 1165.065493][T13857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1165.065507][T13857] Call Trace: [ 1165.065517][T13857] [ 1165.065526][T13857] dump_stack_lvl+0xe8/0x150 [ 1165.065565][T13857] should_fail_ex+0x46b/0x600 [ 1165.065604][T13857] _copy_to_user+0x31/0xb0 [ 1165.065630][T13857] simple_read_from_buffer+0xe1/0x170 [ 1165.065665][T13857] proc_fail_nth_read+0x1be/0x230 [ 1165.065697][T13857] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1165.065729][T13857] ? rw_verify_area+0x2ac/0x4e0 [ 1165.065764][T13857] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1165.065793][T13857] vfs_read+0x212/0xa80 [ 1165.065837][T13857] ? __pfx_vfs_read+0x10/0x10 [ 1165.065874][T13857] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1165.065902][T13857] ? lockdep_hardirqs_on+0x7a/0x110 [ 1165.065929][T13857] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1165.065956][T13857] ? mutex_lock_nested+0x152/0x1d0 [ 1165.065989][T13857] ? fdget_pos+0x252/0x320 [ 1165.066028][T13857] ksys_read+0x156/0x270 [ 1165.066065][T13857] ? __pfx_ksys_read+0x10/0x10 [ 1165.066106][T13857] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1165.066153][T13857] do_syscall_64+0x14d/0xf80 [ 1165.066180][T13857] ? trace_irq_disable+0x3b/0x150 [ 1165.066209][T13857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1165.066232][T13857] ? clear_bhb_loop+0x40/0x90 [ 1165.066259][T13857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1165.066282][T13857] RIP: 0033:0x7ff03565d04e [ 1165.066303][T13857] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1165.066324][T13857] RSP: 002b:00007ff0338f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1165.066348][T13857] RAX: ffffffffffffffda RBX: 00007ff0338f66c0 RCX: 00007ff03565d04e [ 1165.066365][T13857] RDX: 000000000000000f RSI: 00007ff0338f60a0 RDI: 0000000000000004 [ 1165.066380][T13857] RBP: 00007ff0338f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1165.066394][T13857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1165.066407][T13857] R13: 00007ff035916038 R14: 00007ff035915fa0 R15: 00007fff9f066a28 [ 1165.066442][T13857] [ 1165.284755][T12100] cp210x 7-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1165.307691][T12100] cp210x 7-1:0.0: GPIO initialisation failed: -524 [ 1165.362772][T12100] usb 7-1: cp210x converter now attached to ttyUSB0 [ 1165.455035][ T5848] usb 6-1: USB disconnect, device number 61 [ 1165.497279][T11879] usb 7-1: USB disconnect, device number 44 [ 1165.570761][T11879] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1165.571545][T11879] cp210x 7-1:0.0: device disconnected [ 1165.757649][T12100] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1165.907705][T12100] usb 4-1: Using ep0 maxpacket: 32 [ 1165.909773][T12100] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1165.909806][T12100] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.944380][T12100] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1166.037610][ T5848] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1166.059123][T11941] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1166.090185][T13874] FAULT_INJECTION: forcing a failure. [ 1166.090185][T13874] name failslab, interval 1, probability 0, space 0, times 0 [ 1166.090215][T13874] CPU: 1 UID: 0 PID: 13874 Comm: syz.5.1541 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1166.090263][T13874] Tainted: [L]=SOFTLOCKUP [ 1166.090272][T13874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1166.090288][T13874] Call Trace: [ 1166.090298][T13874] [ 1166.090307][T13874] dump_stack_lvl+0xe8/0x150 [ 1166.090346][T13874] should_fail_ex+0x46b/0x600 [ 1166.090379][T13874] should_failslab+0xa8/0x100 [ 1166.090398][T13874] __kmalloc_noprof+0xdf/0x7b0 [ 1166.090430][T13874] ? kfree+0x4d/0x6c0 [ 1166.090460][T13874] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1166.090488][T13874] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1166.090520][T13874] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1166.090556][T13874] ? tomoyo_path_number_perm+0x219/0x630 [ 1166.090585][T13874] tomoyo_path_number_perm+0x246/0x630 [ 1166.090614][T13874] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1166.090640][T13874] ? __lock_acquire+0x6b5/0x2cf0 [ 1166.090666][T13874] ? __asan_memcpy+0x40/0x70 [ 1166.090702][T13874] ? __lock_acquire+0x6b5/0x2cf0 [ 1166.090741][T13874] ? __pfx_from_kuid+0x10/0x10 [ 1166.090787][T13874] ? in_group_p+0x82/0x1c0 [ 1166.090816][T13874] tomoyo_path_chown+0x46/0xc0 [ 1166.090849][T13874] security_path_chown+0x139/0x340 [ 1166.090887][T13874] chown_common+0x40c/0x6c0 [ 1166.090928][T13874] ? __pfx_chown_common+0x10/0x10 [ 1166.090969][T13874] ? mnt_get_write_access+0x262/0x2d0 [ 1166.091025][T13874] do_fchownat+0x14c/0x250 [ 1166.091053][T13874] ? __pfx_do_fchownat+0x10/0x10 [ 1166.091072][T13874] ? __pfx_ksys_write+0x10/0x10 [ 1166.091128][T13874] __x64_sys_chown+0x82/0xa0 [ 1166.091157][T13874] do_syscall_64+0x14d/0xf80 [ 1166.091182][T13874] ? trace_irq_disable+0x3b/0x150 [ 1166.091210][T13874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.091228][T13874] ? clear_bhb_loop+0x40/0x90 [ 1166.091266][T13874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.091291][T13874] RIP: 0033:0x7fa79ae5c819 [ 1166.091313][T13874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1166.091333][T13874] RSP: 002b:00007fa7990b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000005c [ 1166.091356][T13874] RAX: ffffffffffffffda RBX: 00007fa79b0d5fa0 RCX: 00007fa79ae5c819 [ 1166.091372][T13874] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 1166.091393][T13874] RBP: 00007fa7990b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1166.091404][T13874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1166.091414][T13874] R13: 00007fa79b0d6038 R14: 00007fa79b0d5fa0 R15: 00007ffebd245ee8 [ 1166.091459][T13874] [ 1166.091469][T13874] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1166.192663][ T5848] usb 8-1: Using ep0 maxpacket: 32 [ 1166.295956][T11941] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1166.313133][ T5848] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 1166.313255][ T5848] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 175, changing to 7 [ 1166.411973][T11941] usb 10-1: New USB device found, idVendor=0738, idProduct=1713, bcdDevice= 0.40 [ 1166.412120][T11941] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.412184][T11941] usb 10-1: Product: syz [ 1166.412289][T11941] usb 10-1: Manufacturer: syz [ 1166.412336][T11941] usb 10-1: SerialNumber: syz [ 1166.485559][ T5848] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1166.485594][ T5848] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.485616][ T5848] usb 8-1: Product: 畆靷뛕묌襳䋀빰㝄篞旚趽ἦ즛妣ⳇ摷惽羁䈎ﶧໃ끝ἓꛍﹼ㚟奧弝斟␟镟太䝳뱔鞳ꐄꔷ恔ގ藘䩡腒湁匃ꙻྪ씑簢ة쒄䥌㲿헀䒎ⶕ蕹㙕㭳整॒蜜ᭌ㢮⟼沈聏ᯯ㇬衡ꖴ஢䍥釭赎蕯⭻琵 [ 1166.485646][ T5848] usb 8-1: Manufacturer: ఁ [ 1166.485665][ T5848] usb 8-1: SerialNumber: syz [ 1166.887878][T12100] gspca_nw80x: reg_w err -110 [ 1166.887978][T12100] nw80x 4-1:3.0: probe with driver nw80x failed with error -110 [ 1166.956084][T13880] ubi: mtd0 is already attached to ubi31 [ 1167.972299][T11941] usbhid 10-1:1.0: can't add hid device: -71 [ 1167.972686][T11941] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 1168.009843][T11941] usb 10-1: USB disconnect, device number 17 [ 1168.044579][ T5848] usb 8-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 1168.044611][ T5848] usb 8-1: 1:1 : sample bitwidth 114 in over sample bytes 4 [ 1168.044640][ T5848] usb 8-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 1168.119435][ T5848] usb 8-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 1168.119466][ T5848] usb 8-1: found format II with max.bitrate = 257, frame size=4 [ 1168.119487][ T5848] usb 8-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1168.121711][ T5848] usb 8-1: unit 6 not found! [ 1168.238923][ T5848] usb 8-1: USB disconnect, device number 28 [ 1168.589596][T11981] udevd[11981]: setting mode of /dev/bus/usb/008/028 to 020664 failed: No such file or directory [ 1168.589745][T11981] udevd[11981]: setting owner of /dev/bus/usb/008/028 to uid=0, gid=0 failed: No such file or directory [ 1169.734971][T11974] udevd[11974]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1169.857025][T12100] usb 4-1: USB disconnect, device number 13 [ 1170.654934][T13921] ubi: mtd0 is already attached to ubi31 [ 1172.881832][T13940] ubi: mtd0 is already attached to ubi31 [ 1176.053170][T13964] FAULT_INJECTION: forcing a failure. [ 1176.053170][T13964] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1176.053211][T13964] CPU: 0 UID: 0 PID: 13964 Comm: syz.9.1564 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1176.053240][T13964] Tainted: [L]=SOFTLOCKUP [ 1176.053248][T13964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1176.053261][T13964] Call Trace: [ 1176.053270][T13964] [ 1176.053280][T13964] dump_stack_lvl+0xe8/0x150 [ 1176.053317][T13964] should_fail_ex+0x46b/0x600 [ 1176.053352][T13964] _copy_from_user+0x2d/0xb0 [ 1176.053374][T13964] video_usercopy+0x36f/0x14b0 [ 1176.053419][T13964] ? smk_tskacc+0x311/0x3a0 [ 1176.053450][T13964] ? __pfx___video_do_ioctl+0x10/0x10 [ 1176.053485][T13964] ? __pfx_video_usercopy+0x10/0x10 [ 1176.053516][T13964] ? smack_file_ioctl+0x2c2/0x360 [ 1176.053564][T13964] ? __fget_files+0x2a/0x420 [ 1176.053593][T13964] ? __fget_files+0x3a6/0x420 [ 1176.053626][T13964] v4l2_ioctl+0x190/0x1e0 [ 1176.053660][T13964] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1176.053691][T13964] __se_sys_ioctl+0xff/0x170 [ 1176.053715][T13964] do_syscall_64+0x14d/0xf80 [ 1176.053742][T13964] ? trace_irq_disable+0x3b/0x150 [ 1176.053770][T13964] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1176.053793][T13964] ? clear_bhb_loop+0x40/0x90 [ 1176.053822][T13964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1176.053845][T13964] RIP: 0033:0x7faa14ddc819 [ 1176.053866][T13964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1176.053885][T13964] RSP: 002b:00007faa13036028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1176.053910][T13964] RAX: ffffffffffffffda RBX: 00007faa15055fa0 RCX: 00007faa14ddc819 [ 1176.053927][T13964] RDX: 00002000000000c0 RSI: 00000000c02c564a RDI: 0000000000000003 [ 1176.053942][T13964] RBP: 00007faa13036090 R08: 0000000000000000 R09: 0000000000000000 [ 1176.053956][T13964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1176.053969][T13964] R13: 00007faa15056038 R14: 00007faa15055fa0 R15: 00007ffce83441f8 [ 1176.054003][T13964] [ 1176.155465][ T5886] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1178.310209][ T5886] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1178.310245][ T5886] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.341003][ T5886] usb 8-1: config 0 descriptor?? [ 1178.572304][T13962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1178.572898][T13962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1178.709490][T13986] netlink: 'syz.7.1563': attribute type 14 has an invalid length. [ 1178.709516][T13986] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1563'. [ 1178.950641][ T5886] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1179.012535][T13988] bond1: option arp_interval: invalid value (18446744072715211142) [ 1179.012565][T13988] bond1: option arp_interval: allowed values 0 - 2147483647 [ 1179.039515][T13988] bond1 (unregistering): Released all slaves [ 1179.067624][ T5848] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1179.177146][ T5886] [drm:udl_init] *ERROR* Selecting channel failed [ 1179.220090][ T5848] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1179.220123][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.258221][ T5848] usb 4-1: config 0 descriptor?? [ 1179.375147][ T5886] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 2 [ 1179.375177][ T5886] [drm] Initialized udl on minor 2 [ 1179.397793][ T5886] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1179.398338][ T5886] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 1179.486639][T11879] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1179.519458][ T5886] usb 8-1: USB disconnect, device number 29 [ 1179.528885][T13992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1179.536096][T11879] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1179.536432][T11879] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 1179.536720][T13992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1179.635002][T13992] netlink: 'syz.3.1569': attribute type 14 has an invalid length. [ 1179.635028][T13992] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1569'. [ 1179.896284][ T5848] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1180.100374][ T5848] [drm:udl_init] *ERROR* Selecting channel failed [ 1180.365078][ T5848] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 3 [ 1180.365097][ T5848] [drm] Initialized udl on minor 3 [ 1180.397153][ T5848] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1180.397772][ T5848] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1180.430249][ T809] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1180.435878][ T809] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1180.436122][ T809] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1180.436894][ T5848] usb 4-1: USB disconnect, device number 14 [ 1180.837188][T14017] ubi: mtd0 is already attached to ubi31 [ 1181.711940][T14019] sd 0:0:1:0: device reset [ 1181.941255][T14023] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1182.344760][T14032] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 1182.367728][T11879] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1182.530371][T11879] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1182.530406][T11879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.599089][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.599312][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.673093][T11879] usb 6-1: config 0 descriptor?? [ 1182.697330][T11879] cp210x 6-1:0.0: cp210x converter detected [ 1184.260926][T11879] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1184.263951][T11879] cp210x 6-1:0.0: GPIO initialisation failed: -524 [ 1184.283946][T11879] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1184.488469][T11879] usb 6-1: USB disconnect, device number 62 [ 1184.529166][T11879] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1184.529962][T11879] cp210x 6-1:0.0: device disconnected [ 1186.666872][T14071] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 1187.037211][T14076] tap0: tun_chr_ioctl cmd 35111 [ 1187.204114][T14085] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1188.578382][ T5886] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1188.808483][T14112] ubi: mtd0 is already attached to ubi31 [ 1189.690059][ T5886] usb 8-1: Using ep0 maxpacket: 16 [ 1189.692614][ T5886] usb 8-1: config 0 has an invalid descriptor of length 27, skipping remainder of the config [ 1189.692672][ T5886] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1189.692702][ T5886] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1189.692725][ T5886] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1189.692809][ T5886] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1189.694375][ T5886] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1189.694404][ T5886] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1189.694425][ T5886] usb 8-1: Manufacturer: syz [ 1189.702006][ T5886] usb 8-1: config 0 descriptor?? [ 1190.127605][ T5886] rc_core: IR keymap rc-hauppauge not found [ 1190.127629][ T5886] Registered IR keymap rc-empty [ 1190.127829][ T5886] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1190.152692][ T5886] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1190.170064][ T5886] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1190.204541][ T5886] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input18 [ 1190.229568][ T5886] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1190.248461][ T5886] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1190.270466][ T5886] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1190.287798][ T5886] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1190.308077][ T5886] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1190.369406][ T809] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1191.158230][T14130] ubi: mtd0 is already attached to ubi31 [ 1191.227886][ T809] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1191.227976][ T809] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.763406][ T809] usb 7-1: config 0 descriptor?? [ 1192.131518][T14115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1192.147275][T14115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1192.157654][T11941] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1192.207056][T14115] netlink: 'syz.6.1597': attribute type 14 has an invalid length. [ 1192.207082][T14115] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1597'. [ 1193.230415][ T5886] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1193.238419][T11941] usb 10-1: Using ep0 maxpacket: 16 [ 1193.312040][ T809] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1193.340603][T11941] usb 10-1: device descriptor read/all, error -71 [ 1193.440833][ T5886] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1193.457622][ T5886] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1193.478519][ T5886] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1193.501045][ T5886] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1193.557213][ T809] [drm:udl_init] *ERROR* Selecting channel failed [ 1193.621661][ T5886] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1193.621690][ T5886] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1193.649825][ T809] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 1193.649852][ T809] [drm] Initialized udl on minor 2 [ 1193.651444][ T809] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1193.651930][ T809] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1193.653286][ T5848] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1193.700535][ T809] usb 7-1: USB disconnect, device number 45 [ 1193.701933][ T5848] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1193.702186][ T5848] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1193.820401][ T5886] usb 8-1: USB disconnect, device number 30 [ 1194.132879][T14151] FAULT_INJECTION: forcing a failure. [ 1194.132879][T14151] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1194.132920][T14151] CPU: 1 UID: 0 PID: 14151 Comm: syz.7.1605 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1194.132950][T14151] Tainted: [L]=SOFTLOCKUP [ 1194.132959][T14151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1194.132973][T14151] Call Trace: [ 1194.132983][T14151] [ 1194.132992][T14151] dump_stack_lvl+0xe8/0x150 [ 1194.133032][T14151] should_fail_ex+0x46b/0x600 [ 1194.133069][T14151] _copy_from_user+0x2d/0xb0 [ 1194.133094][T14151] kstrtouint_from_user+0xd6/0x180 [ 1194.133129][T14151] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1194.133167][T14151] ? __lock_acquire+0x6b5/0x2cf0 [ 1194.133201][T14151] proc_fail_nth_write+0x8e/0x210 [ 1194.133231][T14151] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1194.133267][T14151] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1194.133297][T14151] vfs_write+0x2a3/0xba0 [ 1194.133343][T14151] ? __pfx_vfs_write+0x10/0x10 [ 1194.133380][T14151] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1194.133407][T14151] ? lockdep_hardirqs_on+0x7a/0x110 [ 1194.133433][T14151] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1194.133459][T14151] ? mutex_lock_nested+0x152/0x1d0 [ 1194.133490][T14151] ? fdget_pos+0x252/0x320 [ 1194.133530][T14151] ksys_write+0x156/0x270 [ 1194.133567][T14151] ? __pfx_ksys_write+0x10/0x10 [ 1194.133614][T14151] do_syscall_64+0x14d/0xf80 [ 1194.133640][T14151] ? trace_irq_disable+0x3b/0x150 [ 1194.133667][T14151] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1194.133691][T14151] ? clear_bhb_loop+0x40/0x90 [ 1194.133720][T14151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1194.133743][T14151] RIP: 0033:0x7f7362dad04e [ 1194.133765][T14151] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1194.133785][T14151] RSP: 002b:00007f7360ffbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1194.133810][T14151] RAX: ffffffffffffffda RBX: 00007f7360ffc6c0 RCX: 00007f7362dad04e [ 1194.133827][T14151] RDX: 0000000000000001 RSI: 00007f7360ffc0a0 RDI: 0000000000000006 [ 1194.133842][T14151] RBP: 00007f7360ffc090 R08: 0000000000000000 R09: 0000000000000000 [ 1194.133856][T14151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1194.133878][T14151] R13: 00007f7363066218 R14: 00007f7363066180 R15: 00007ffe2e818008 [ 1194.133914][T14151] [ 1194.493777][T14148] syzkaller1: entered promiscuous mode [ 1194.493804][T14148] syzkaller1: entered allmulticast mode [ 1194.860058][T14158] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1195.273896][T14169] misc userio: Invalid payload size [ 1195.349068][T14164] input: syz0 as /devices/virtual/input/input19 [ 1195.579828][T14175] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1613'. [ 1195.579898][T14175] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1613'. [ 1195.909889][T14175] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1613'. [ 1195.909966][T14175] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1613'. [ 1196.107598][T11941] usb 7-1: new full-speed USB device number 46 using dummy_hcd [ 1196.261053][T11941] usb 7-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1196.261117][T11941] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1196.261150][T11941] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1196.261173][T11941] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1196.262680][T11941] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1196.262710][T11941] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1196.262732][T11941] usb 7-1: SerialNumber: syz [ 1196.353695][T11941] cdc_acm 7-1:1.0: probe with driver cdc_acm failed with error -12 [ 1196.396089][T14175] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1613'. [ 1196.396160][T14175] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1613'. [ 1196.543876][ T809] usb 7-1: USB disconnect, device number 46 [ 1199.037623][ T809] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1200.408049][T14209] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1200.580152][ T809] usb 6-1: config 171 has an invalid interface number: 109 but max is 0 [ 1200.580186][ T809] usb 6-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 1200.580207][ T809] usb 6-1: config 171 has no interface number 0 [ 1200.580255][ T809] usb 6-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 1200.580283][ T809] usb 6-1: config 171 interface 109 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 1200.583767][ T809] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 1200.583800][ T809] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.583821][ T809] usb 6-1: Product: syz [ 1200.583854][ T809] usb 6-1: Manufacturer: syz [ 1200.583872][ T809] usb 6-1: SerialNumber: syz [ 1200.693533][T14204] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1200.853302][T14223] erofs (device nullb0): cannot find valid erofs superblock [ 1201.131455][ T809] ath6kl: Failed to read usb control message: -71 [ 1201.131502][ T809] ath6kl: Unable to read the bmi data from the device: -71 [ 1201.131517][ T809] ath6kl: Unable to recv target info: -71 [ 1201.159241][T11941] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1201.164450][ T809] ath6kl: Failed to init ath6kl core: -71 [ 1201.211414][ T809] ath6kl_usb 6-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 1201.241602][ T809] usb 6-1: USB disconnect, device number 63 [ 1201.258256][ T9] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1201.338451][T11941] usb 7-1: Using ep0 maxpacket: 32 [ 1201.341495][T11941] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1201.342994][T11941] usb 7-1: config 0 has an invalid interface number: 251 but max is 1 [ 1201.343024][T11941] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1201.343045][T11941] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1201.343067][T11941] usb 7-1: config 0 has no interface number 0 [ 1201.343117][T11941] usb 7-1: config 0 interface 251 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1201.343147][T11941] usb 7-1: config 0 interface 251 has no altsetting 0 [ 1201.346135][T11941] usb 7-1: New USB device found, idVendor=2304, idProduct=023f, bcdDevice=9e.f2 [ 1201.346166][T11941] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.346188][T11941] usb 7-1: Product: syz [ 1201.346205][T11941] usb 7-1: Manufacturer: syz [ 1201.346221][T11941] usb 7-1: SerialNumber: syz [ 1201.437667][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 1201.465953][ T9] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 1201.465999][ T9] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 175, changing to 7 [ 1201.493883][ T9] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1201.493923][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.493938][ T9] usb 8-1: Product: 畆靷뛕묌襳䋀빰㝄篞旚趽ἦ즛妣ⳇ摷惽羁䈎ﶧໃ끝ἓꛍﹼ㚟奧弝斟␟镟太䝳뱔鞳ꐄꔷ恔ގ藘䩡腒湁匃ꙻྪ씑簢ة쒄䥌㲿헀䒎ⶕ蕹㙕㭳整॒蜜ᭌ㢮⟼沈聏ᯯ㇬衡ꖴ஢䍥釭赎蕯⭻琵 [ 1201.493962][ T9] usb 8-1: Manufacturer: ఁ [ 1201.493974][ T9] usb 8-1: SerialNumber: syz [ 1201.559149][T11941] usb 7-1: config 0 descriptor?? [ 1201.822651][T11941] usb 7-1: USB disconnect, device number 47 [ 1202.019878][ T9] usb 8-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 1202.019911][ T9] usb 8-1: 1:1 : sample bitwidth 114 in over sample bytes 4 [ 1202.019944][ T9] usb 8-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 1202.020438][ T9] usb 8-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 1202.020463][ T9] usb 8-1: found format II with max.bitrate = 257, frame size=4 [ 1202.020483][ T9] usb 8-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1202.021012][ T9] usb 8-1: unit 6 not found! [ 1202.084769][T14237] FAULT_INJECTION: forcing a failure. [ 1202.084769][T14237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1202.084810][T14237] CPU: 0 UID: 0 PID: 14237 Comm: syz.5.1629 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1202.084840][T14237] Tainted: [L]=SOFTLOCKUP [ 1202.084848][T14237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1202.084862][T14237] Call Trace: [ 1202.084871][T14237] [ 1202.084881][T14237] dump_stack_lvl+0xe8/0x150 [ 1202.084930][T14237] should_fail_ex+0x46b/0x600 [ 1202.084966][T14237] _copy_from_user+0x2d/0xb0 [ 1202.084991][T14237] ___sys_sendmsg+0x1c6/0x360 [ 1202.085026][T14237] ? __pfx____sys_sendmsg+0x10/0x10 [ 1202.085092][T14237] ? __fget_files+0x2a/0x420 [ 1202.085122][T14237] ? __fget_files+0x3a6/0x420 [ 1202.085163][T14237] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1202.085192][T14237] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1202.085230][T14237] ? __pfx_ksys_write+0x10/0x10 [ 1202.085279][T14237] do_syscall_64+0x14d/0xf80 [ 1202.085306][T14237] ? trace_irq_disable+0x3b/0x150 [ 1202.085333][T14237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1202.085357][T14237] ? clear_bhb_loop+0x40/0x90 [ 1202.085386][T14237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1202.085410][T14237] RIP: 0033:0x7fa79ae5c819 [ 1202.085431][T14237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1202.085452][T14237] RSP: 002b:00007fa7990b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1202.085477][T14237] RAX: ffffffffffffffda RBX: 00007fa79b0d5fa0 RCX: 00007fa79ae5c819 [ 1202.085493][T14237] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003 [ 1202.085508][T14237] RBP: 00007fa7990b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1202.085522][T14237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1202.085535][T14237] R13: 00007fa79b0d6038 R14: 00007fa79b0d5fa0 R15: 00007ffebd245ee8 [ 1202.085570][T14237] [ 1202.417903][T14239] ubi: mtd0 is already attached to ubi31 [ 1203.598659][ T9] usb 8-1: USB disconnect, device number 31 [ 1203.869796][T14245] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input20 [ 1204.047603][T11941] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1204.254611][T14226] infiniband syz1: set active [ 1204.254635][T14226] infiniband syz1: added bond0 [ 1204.305583][T14226] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1204.316314][T14226] infiniband syz1: Couldn't open port 1 [ 1204.478915][T14226] RDS/IB: syz1: added [ 1204.479882][T14226] smc: adding ib device syz1 with port count 1 [ 1204.480136][T14226] smc: ib device syz1 port 1 has no pnetid [ 1204.920236][T14253] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1204.934382][T11941] usb 7-1: config 0 has an invalid interface number: 153 but max is 0 [ 1204.934414][T11941] usb 7-1: config 0 has no interface number 0 [ 1204.934448][T11941] usb 7-1: too many endpoints for config 0 interface 153 altsetting 255: 255, using maximum allowed: 30 [ 1204.934489][T11941] usb 7-1: config 0 interface 153 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1204.934519][T11941] usb 7-1: config 0 interface 153 has no altsetting 0 [ 1204.942191][T11941] usb 7-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 1204.942226][T11941] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.942249][T11941] usb 7-1: Product: syz [ 1204.942265][T11941] usb 7-1: Manufacturer: syz [ 1204.942282][T11941] usb 7-1: SerialNumber: syz [ 1205.273618][T11941] usb 7-1: config 0 descriptor?? [ 1205.294523][T11941] hub 7-1:0.153: bad descriptor, ignoring hub [ 1205.294568][T11941] hub 7-1:0.153: probe with driver hub failed with error -5 [ 1205.296443][T11941] sierra 7-1:0.153: Sierra USB modem converter detected [ 1205.368424][ T5113] Bluetooth: hci4: command 0x0406 tx timeout [ 1207.340298][T14274] ubi: mtd0 is already attached to ubi31 [ 1208.869545][T11941] usb 7-1: USB disconnect, device number 48 [ 1208.871885][T11941] sierra 7-1:0.153: device disconnected [ 1209.067781][T14281] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1210.427648][ T809] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1210.579999][ T809] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1210.580035][ T809] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1210.620834][ T809] usb 7-1: config 0 descriptor?? [ 1211.010457][T14288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1211.026757][T14288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1211.027697][ T8932] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1211.098643][T14288] netlink: 'syz.6.1641': attribute type 14 has an invalid length. [ 1211.098668][T14288] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1641'. [ 1211.202609][ T8932] usb 6-1: config 171 has an invalid interface number: 109 but max is 0 [ 1211.202643][ T8932] usb 6-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 1211.202666][ T8932] usb 6-1: config 171 has no interface number 0 [ 1211.202715][ T8932] usb 6-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 1211.202743][ T8932] usb 6-1: config 171 interface 109 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 1211.270776][ T8932] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 1211.270811][ T8932] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.270835][ T8932] usb 6-1: Product: syz [ 1211.270851][ T8932] usb 6-1: Manufacturer: syz [ 1211.270868][ T8932] usb 6-1: SerialNumber: syz [ 1211.409209][T14298] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1211.540107][T14296] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1211.704323][ T809] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1211.884758][ T8932] ath6kl: Failed to read usb control message: -71 [ 1211.884814][ T8932] ath6kl: Unable to read the bmi data from the device: -71 [ 1211.884832][ T8932] ath6kl: Unable to recv target info: -71 [ 1211.913674][ T8932] ath6kl: Failed to init ath6kl core: -71 [ 1211.914823][ T8932] ath6kl_usb 6-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 1211.962627][ T8932] usb 6-1: USB disconnect, device number 64 [ 1212.021659][ T809] [drm:udl_init] *ERROR* Selecting channel failed [ 1213.082382][ T809] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 1213.082409][ T809] [drm] Initialized udl on minor 2 [ 1213.137688][ T809] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1213.140080][ T809] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1213.170828][T14311] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1648'. [ 1213.220646][T11941] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1213.255152][T11941] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1213.255397][T11941] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1213.386835][ T809] usb 7-1: USB disconnect, device number 49 [ 1213.684709][T14320] input: syz0 as /devices/virtual/input/input21 [ 1214.087590][T14331] ubi: mtd0 is already attached to ubi31 [ 1215.827622][ T809] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 1215.867247][T14342] FAULT_INJECTION: forcing a failure. [ 1215.867247][T14342] name failslab, interval 1, probability 0, space 0, times 0 [ 1215.867287][T14342] CPU: 1 UID: 0 PID: 14342 Comm: syz.3.1653 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1215.867318][T14342] Tainted: [L]=SOFTLOCKUP [ 1215.867327][T14342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1215.867341][T14342] Call Trace: [ 1215.867350][T14342] [ 1215.867361][T14342] dump_stack_lvl+0xe8/0x150 [ 1215.867401][T14342] should_fail_ex+0x46b/0x600 [ 1215.867443][T14342] should_failslab+0xa8/0x100 [ 1215.867468][T14342] __kmalloc_cache_noprof+0x84/0x690 [ 1215.867493][T14342] ? slhc_init+0x76/0x700 [ 1215.867521][T14342] slhc_init+0x76/0x700 [ 1215.867544][T14342] ? __might_fault+0xaf/0x130 [ 1215.867573][T14342] ppp_ioctl+0x14e1/0x1b80 [ 1215.867595][T14342] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1215.867635][T14342] ? __pfx_ppp_ioctl+0x10/0x10 [ 1215.867663][T14342] ? __fget_files+0x2a/0x420 [ 1215.867691][T14342] ? __fget_files+0x3a6/0x420 [ 1215.867718][T14342] ? __fget_files+0x2a/0x420 [ 1215.867752][T14342] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1215.867777][T14342] ? __pfx_ppp_ioctl+0x10/0x10 [ 1215.867800][T14342] __se_sys_ioctl+0xff/0x170 [ 1215.867826][T14342] do_syscall_64+0x14d/0xf80 [ 1215.867851][T14342] ? trace_irq_disable+0x3b/0x150 [ 1215.867878][T14342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1215.867902][T14342] ? clear_bhb_loop+0x40/0x90 [ 1215.867930][T14342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1215.867953][T14342] RIP: 0033:0x7ff03569c819 [ 1215.867974][T14342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1215.867993][T14342] RSP: 002b:00007ff0338d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1215.868027][T14342] RAX: ffffffffffffffda RBX: 00007ff035916090 RCX: 00007ff03569c819 [ 1215.868044][T14342] RDX: 0000200000000500 RSI: 0000000040047451 RDI: 0000000000000003 [ 1215.868059][T14342] RBP: 00007ff0338d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1215.868073][T14342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1215.868087][T14342] R13: 00007ff035916128 R14: 00007ff035916090 R15: 00007fff9f066a28 [ 1215.868122][T14342] [ 1216.154183][ T809] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1216.154216][ T809] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.204342][ T809] usb 7-1: config 0 descriptor?? [ 1216.215288][ T809] cp210x 7-1:0.0: cp210x converter detected [ 1216.815953][ T5113] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1216.962474][T14355] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1217.700941][ T5113] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1217.706258][ T5113] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1217.724106][ T809] cp210x 7-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1217.738185][ T5113] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1217.738430][ T809] cp210x 7-1:0.0: GPIO initialisation failed: -524 [ 1217.768354][ T5113] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1217.771589][ T809] usb 7-1: cp210x converter now attached to ttyUSB0 [ 1217.857684][T12100] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1218.069755][ T9] usb 7-1: USB disconnect, device number 50 [ 1218.077604][T12100] usb 4-1: Using ep0 maxpacket: 32 [ 1218.084958][T12100] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1218.085048][T12100] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.460427][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1219.467318][ T9] cp210x 7-1:0.0: device disconnected [ 1219.597762][T14363] ubi: mtd0 is already attached to ubi31 [ 1223.135214][ T8859] Bluetooth: hci3: command tx timeout [ 1223.324646][T12100] usb 4-1: can't set config #3, error -71 [ 1223.360129][T12100] usb 4-1: USB disconnect, device number 15 [ 1223.513465][T14368] futex_wake_op: syz.7.1660 tries to shift op by 32; fix this program [ 1224.044487][T14388] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1666'. [ 1224.091727][T14387] syzkaller0: entered promiscuous mode [ 1224.091748][T14387] syzkaller0: entered allmulticast mode [ 1224.247636][T11941] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1224.659379][T11941] usb 8-1: Using ep0 maxpacket: 32 [ 1225.207836][ T8859] Bluetooth: hci3: command tx timeout [ 1225.558182][T11941] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 1225.558235][T11941] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 175, changing to 7 [ 1225.587737][T11941] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1225.587770][T11941] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1225.587792][T11941] usb 8-1: Product: 畆靷뛕묌襳䋀빰㝄篞旚趽ἦ즛妣ⳇ摷惽羁䈎ﶧໃ끝ἓꛍﹼ㚟奧弝斟␟镟太䝳뱔鞳ꐄꔷ恔ގ藘䩡腒湁匃ꙻྪ씑簢ة쒄䥌㲿헀䒎ⶕ蕹㙕㭳整॒蜜ᭌ㢮⟼沈聏ᯯ㇬衡ꖴ஢䍥釭赎蕯⭻琵 [ 1225.587824][T11941] usb 8-1: Manufacturer: ఁ [ 1225.587841][T11941] usb 8-1: SerialNumber: syz [ 1226.007871][ T809] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1226.157660][ T809] usb 7-1: Using ep0 maxpacket: 32 [ 1226.163585][ T809] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1226.163672][ T809] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.269820][T11941] usb 8-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 1226.269842][T11941] usb 8-1: 1:1 : sample bitwidth 114 in over sample bytes 4 [ 1226.269859][T11941] usb 8-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 1226.270275][T11941] usb 8-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 1226.270293][T11941] usb 8-1: found format II with max.bitrate = 257, frame size=4 [ 1226.270307][T11941] usb 8-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1226.273506][T11941] usb 8-1: unit 6 not found! [ 1226.421095][ T809] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1226.500043][T14400] bond1: option arp_interval: invalid value (18446744072715211142) [ 1226.500075][T14400] bond1: option arp_interval: allowed values 0 - 2147483647 [ 1227.004933][T14400] bond1 (unregistering): Released all slaves [ 1227.300523][ T8859] Bluetooth: hci3: command tx timeout [ 1227.341163][ T809] gspca_nw80x: reg_w err -110 [ 1227.341258][ T809] nw80x 7-1:3.0: probe with driver nw80x failed with error -110 [ 1228.382606][T11941] usb 8-1: USB disconnect, device number 32 [ 1228.838925][T14416] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1229.741151][T14420] FAULT_INJECTION: forcing a failure. [ 1229.741151][T14420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1229.741191][T14420] CPU: 0 UID: 0 PID: 14420 Comm: syz.3.1676 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1229.741222][T14420] Tainted: [L]=SOFTLOCKUP [ 1229.741230][T14420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1229.741244][T14420] Call Trace: [ 1229.741254][T14420] [ 1229.741264][T14420] dump_stack_lvl+0xe8/0x150 [ 1229.741303][T14420] should_fail_ex+0x46b/0x600 [ 1229.741342][T14420] _copy_from_user+0x2d/0xb0 [ 1229.741384][T14420] video_usercopy+0x36f/0x14b0 [ 1229.741425][T14420] ? smk_tskacc+0x311/0x3a0 [ 1229.741456][T14420] ? __pfx_subdev_do_ioctl_lock+0x10/0x10 [ 1229.741584][T14420] ? __pfx_video_usercopy+0x10/0x10 [ 1229.741615][T14420] ? smack_file_ioctl+0x2c2/0x360 [ 1229.741668][T14420] ? __fget_files+0x2a/0x420 [ 1229.741698][T14420] ? __fget_files+0x3a6/0x420 [ 1229.741732][T14420] v4l2_ioctl+0x190/0x1e0 [ 1229.741773][T14420] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1229.741807][T14420] __se_sys_ioctl+0xff/0x170 [ 1229.741833][T14420] do_syscall_64+0x14d/0xf80 [ 1229.741860][T14420] ? trace_irq_disable+0x3b/0x150 [ 1229.741886][T14420] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1229.741911][T14420] ? clear_bhb_loop+0x40/0x90 [ 1229.741940][T14420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1229.741963][T14420] RIP: 0033:0x7ff03569c819 [ 1229.741984][T14420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1229.742004][T14420] RSP: 002b:00007ff0338f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1229.742028][T14420] RAX: ffffffffffffffda RBX: 00007ff035915fa0 RCX: 00007ff03569c819 [ 1229.742044][T14420] RDX: 0000200000000040 RSI: 00000000c008561b RDI: 0000000000000003 [ 1229.742059][T14420] RBP: 00007ff0338f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1229.742074][T14420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1229.742087][T14420] R13: 00007ff035916038 R14: 00007ff035915fa0 R15: 00007fff9f066a28 [ 1229.742123][T14420] [ 1229.751122][T11974] udevd[11974]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1229.757911][ T8859] Bluetooth: hci3: command tx timeout [ 1229.971033][T10184] usb 7-1: USB disconnect, device number 51 [ 1230.438785][T11941] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1231.147562][T11941] usb 8-1: Using ep0 maxpacket: 16 [ 1231.150167][T11941] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1231.150200][T11941] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1231.153219][T11941] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1231.153252][T11941] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.153267][T11941] usb 8-1: Product: syz [ 1231.153278][T11941] usb 8-1: Manufacturer: syz [ 1231.153289][T11941] usb 8-1: SerialNumber: syz [ 1232.436906][T11941] usb 8-1: config 0 descriptor?? [ 1232.460740][T11941] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1232.460778][T11941] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 1232.648638][T11941] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 1232.652758][T11941] em28xx 8-1:0.0: Config register raw data: 0xfffffffb [ 1232.653738][T11941] em28xx 8-1:0.0: AC97 chip type couldn't be determined [ 1232.653760][T11941] em28xx 8-1:0.0: No AC97 audio processor [ 1232.737664][T11941] usb 8-1: USB disconnect, device number 33 [ 1232.740063][T11941] em28xx 8-1:0.0: Disconnecting em28xx [ 1232.913927][T11941] em28xx 8-1:0.0: Freeing device [ 1233.042028][ T1018] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1233.227073][T14452] bond1: option arp_interval: invalid value (18446744072715211142) [ 1233.227103][T14452] bond1: option arp_interval: allowed values 0 - 2147483647 [ 1233.273529][T14452] bond1 (unregistering): Released all slaves [ 1233.287632][T11941] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 1233.871986][T11941] usb 8-1: Using ep0 maxpacket: 32 [ 1233.875890][T11941] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 1233.875942][T11941] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 175, changing to 7 [ 1233.885363][T11941] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1233.885451][T11941] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.885509][T11941] usb 8-1: Product: 畆靷뛕묌襳䋀빰㝄篞旚趽ἦ즛妣ⳇ摷惽羁䈎ﶧໃ끝ἓꛍﹼ㚟奧弝斟␟镟太䝳뱔鞳ꐄꔷ恔ގ藘䩡腒湁匃ꙻྪ씑簢ة쒄䥌㲿헀䒎ⶕ蕹㙕㭳整॒蜜ᭌ㢮⟼沈聏ᯯ㇬衡ꖴ஢䍥釭赎蕯⭻琵 [ 1233.885593][T11941] usb 8-1: Manufacturer: ఁ [ 1233.885637][T11941] usb 8-1: SerialNumber: syz [ 1234.247339][ T37] kauditd_printk_skb: 13 callbacks suppressed [ 1234.247360][ T37] audit: type=1326 audit(1775840196.132:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14462 comm="syz.3.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03569c819 code=0x7ffc0000 [ 1234.252224][ T37] audit: type=1326 audit(1775840196.132:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14462 comm="syz.3.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03569c819 code=0x7ffc0000 [ 1234.256088][ T37] audit: type=1326 audit(1775840196.142:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14462 comm="syz.3.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03569c819 code=0x7ffc0000 [ 1234.270894][ T37] audit: type=1326 audit(1775840196.152:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14462 comm="syz.3.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03569c819 code=0x7ffc0000 [ 1234.271545][ T37] audit: type=1326 audit(1775840196.152:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14462 comm="syz.3.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7ff03569c819 code=0x7ffc0000 [ 1234.274167][ T37] audit: type=1326 audit(1775840196.162:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14462 comm="syz.3.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03569c819 code=0x7ffc0000 [ 1234.280958][ T37] audit: type=1326 audit(1775840196.162:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14462 comm="syz.3.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03569c819 code=0x7ffc0000 [ 1234.307919][ T37] audit: type=1326 audit(1775840196.172:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14462 comm="syz.3.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff03569c819 code=0x7ffc0000 [ 1234.351658][ T37] audit: type=1326 audit(1775840196.202:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14462 comm="syz.3.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03569c819 code=0x7ffc0000 [ 1234.408537][ T37] audit: type=1326 audit(1775840196.272:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14462 comm="syz.3.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03569c819 code=0x7ffc0000 [ 1234.544527][T11941] usb 8-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 1234.544559][T11941] usb 8-1: 1:1 : sample bitwidth 114 in over sample bytes 4 [ 1234.544584][T11941] usb 8-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 1234.579020][T11941] usb 8-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 1234.579062][T11941] usb 8-1: found format II with max.bitrate = 257, frame size=4 [ 1234.579133][T11941] usb 8-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1234.602710][T11941] usb 8-1: unit 6 not found! [ 1234.704871][ T1018] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.764875][T11941] usb 8-1: USB disconnect, device number 34 [ 1234.787608][T12100] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1234.821891][T11974] udevd[11974]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1234.927713][ T9] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1234.944350][T12100] usb 6-1: Using ep0 maxpacket: 32 [ 1234.954691][T12100] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1234.954716][T12100] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.982250][T12100] usb 6-1: config 0 descriptor?? [ 1235.003455][T12100] as10x_usb: device has been detected [ 1235.005468][T12100] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1235.071761][T12100] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1235.098351][ T9] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1235.098383][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.172405][ T9] usb 7-1: config 0 descriptor?? [ 1235.188830][T14468] INFO: trying to register non-static key. [ 1235.188845][T14468] The code is fine but needs lockdep annotation, or maybe [ 1235.188855][T14468] you didn't initialize this object before use? [ 1235.188863][T14468] turning off the locking correctness validator. [ 1235.188883][T14468] CPU: 0 UID: 0 PID: 14468 Comm: syz.5.1688 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1235.188913][T14468] Tainted: [L]=SOFTLOCKUP SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1235.188921][T14468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1235.188934][T14468] Call Trace: [ 1235.188943][T14468] [ 1235.188953][T14468] dump_stack_lvl+0xe8/0x150 [ 1235.188988][T14468] assign_lock_key+0x133/0x150 [ 1235.189013][T14468] register_lock_class+0xcc/0x2e0 [ 1235.189034][T14468] __lock_acquire+0xad/0x2cf0 [ 1235.189054][T14468] ? __lock_acquire+0x6b5/0x2cf0 [ 1235.189078][T14468] ? do_raw_spin_lock+0x12b/0x2f0 [ 1235.189119][T14468] lock_acquire+0xf0/0x2e0 [ 1235.189138][T14468] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 1235.189236][T14468] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 1235.189264][T14468] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 1235.189288][T14468] mutex_lock_interruptible_nested+0x5a/0x1d0 [ 1235.189320][T14468] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 1235.189345][T14468] ? lockdep_hardirqs_on+0x7a/0x110 [ 1235.189370][T14468] as102_dvb_dmx_start_feed+0x70/0x290 [ 1235.189397][T14468] dmx_section_feed_start_filtering+0x518/0x6c0 [ 1235.189455][T14468] dvb_dmxdev_filter_start+0xcf4/0x10e0 [ 1235.189487][T14468] ? dvb_dmxdev_filter_set+0x2d1/0x580 [ 1235.189517][T14468] dvb_demux_do_ioctl+0x473/0x540 [ 1235.189546][T14468] dvb_usercopy+0x199/0x2e0 [ 1235.189570][T14468] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1235.189599][T14468] ? __pfx_dvb_usercopy+0x10/0x10 [ 1235.189630][T14468] ? __fget_files+0x3a6/0x420 [ 1235.189657][T14468] ? __fget_files+0x2a/0x420 [ 1235.189684][T14468] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1235.189711][T14468] dvb_demux_ioctl+0x29/0x40 [ 1235.189739][T14468] __se_sys_ioctl+0xff/0x170 [ 1235.189760][T14468] do_syscall_64+0x14d/0xf80 [ 1235.189783][T14468] ? trace_irq_disable+0x3b/0x150 [ 1235.189808][T14468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1235.189829][T14468] ? clear_bhb_loop+0x40/0x90 [ 1235.189852][T14468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1235.189873][T14468] RIP: 0033:0x7fa79ae5c819 [ 1235.189892][T14468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1235.189910][T14468] RSP: 002b:00007fa7990b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1235.189933][T14468] RAX: ffffffffffffffda RBX: 00007fa79b0d5fa0 RCX: 00007fa79ae5c819 [ 1235.189949][T14468] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000006 [ 1235.189964][T14468] RBP: 00007fa79aef2c91 R08: 0000000000000000 R09: 0000000000000000 [ 1235.189978][T14468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1235.189992][T14468] R13: 00007fa79b0d6038 R14: 00007fa79b0d5fa0 R15: 00007ffebd245ee8 [ 1235.190016][T14468] [ 1235.538467][T12100] as10x_usb: error during firmware upload part1 [ 1235.540457][T12100] Registered device nBox DVB-T Dongle [ 1235.540948][T14470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1235.541265][T14470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1235.565669][ T1018] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1235.567596][T12100] usb 6-1: USB disconnect, device number 65 [ 1235.681340][T12100] Unregistered device nBox DVB-T Dongle [ 1235.701657][T12100] as10x_usb: device has been disconnected [ 1235.808668][ T9] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1235.923108][ T1018] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1237.139181][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 1237.146415][ T9] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 1237.146442][ T9] [drm] Initialized udl on minor 2 [ 1237.157717][ T9] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1237.158474][ T9] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1237.194884][T11879] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1237.195432][T11879] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1237.195575][T11879] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1237.242387][ T9] usb 7-1: USB disconnect, device number 52 [ 1237.437906][ T1018] bridge_slave_1: left allmulticast mode [ 1237.437933][ T1018] bridge_slave_1: left promiscuous mode [ 1237.438114][ T1018] bridge0: port 2(bridge_slave_1) entered disabled state [ 1237.538478][ T1018] bridge_slave_0: left allmulticast mode [ 1237.538505][ T1018] bridge_slave_0: left promiscuous mode [ 1237.538679][ T1018] bridge0: port 1(bridge_slave_0) entered disabled state [ 1238.229747][ T57] smc: removing ib device syz1 [ 1238.248311][ T1018] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1238.329868][ T1018] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1238.349356][ T1018] bond0 (unregistering): Released all slaves [ 1240.107714][ T1018] hsr_slave_0: left promiscuous mode [ 1240.129726][ T1018] hsr_slave_1: left promiscuous mode [ 1240.130491][ T1018] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1240.130509][ T1018] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1240.178288][ T1018] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1240.178316][ T1018] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1240.247953][ T1018] veth1_macvtap: left promiscuous mode [ 1240.248002][ T1018] veth0_macvtap: left promiscuous mode [ 1240.248095][ T1018] veth1_vlan: left promiscuous mode [ 1240.248158][ T1018] veth0_vlan: left promiscuous mode [ 1240.769240][ T1018] team0 (unregistering): Port device team_slave_1 removed [ 1240.808580][ T1018] team0 (unregistering): Port device team_slave_0 removed [ 1242.199881][ T1018] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1242.389057][ T1018] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1242.580825][ T1018] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1242.788853][ T1018] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1242.998982][ T1018] bridge_slave_1: left allmulticast mode [ 1242.999008][ T1018] bridge_slave_1: left promiscuous mode [ 1242.999172][ T1018] bridge0: port 2(bridge_slave_1) entered disabled state [ 1243.079914][ T1018] bridge_slave_0: left allmulticast mode [ 1243.079944][ T1018] bridge_slave_0: left promiscuous mode [ 1243.080133][ T1018] bridge0: port 1(bridge_slave_0) entered disabled state [ 1243.868158][ T1018] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1243.949525][ T1018] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1243.969642][ T1018] bond0 (unregistering): Released all slaves [ 1244.013701][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.013754][ T1321] ieee802154 phy1 wpan1: encryption failed: -22