last executing test programs: 13m1.395898636s ago: executing program 32 (id=1197): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x2c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0x2c}}, 0x4000040) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000180)=0x8) (async) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000004040), 0x3, 0x2) ioctl$VIDIOC_G_OUTPUT(r6, 0x8004562e, &(0x7f0000004080)) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x45, 0x0, &(0x7f0000000240)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000005c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x38}, @flat=@handle={0x73682a85, 0x1000, 0x2}, @fda={0x66646185, 0x5, 0x1, 0xc8}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) (async) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) (async) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000c40), 0x12) (async) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) 10m40.334589757s ago: executing program 33 (id=1678): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001040000104e040b1200000000000109022400010000022009040000010b00ca000921066f0001220700090581034000f50875"], 0x0) shutdown(0xffffffffffffffff, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe) add_key$fscrypt_provisioning(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, 0x0) timerfd_create(0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = creat(0x0, 0x2) fstat(r1, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x190, 0xc8, 0x8, 0x0, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @private1, [], [], 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x128, 0x190, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@time={{0x38}, {0x0, 0x0, 0x0, 0x2000000}}, @common=@dst={{0x48}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x138, 0x158, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'dvmrp0\x00', 'batadv_slave_1\x00', 0x12, 0x3}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r7, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}, 0x1, 0x0, 0x0, 0xc5}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010004b04"], 0x8a}}, 0x40) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYRESHEX=r2, @ANYRESDEC], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) 8m33.775742355s ago: executing program 34 (id=2078): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0xff) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xb3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x7) ioctl$TIOCSTI(r0, 0x5412, 0x0) 5m56.303157544s ago: executing program 35 (id=2629): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) (async, rerun: 32) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 32) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mq_open(0x0, 0x6e93ebbbcc0884f2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) (async, rerun: 64) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000001724000180090001006d6173710000000014000280080002"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) (async, rerun: 64) r5 = dup(r3) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) (async) cachestat(r5, 0x0, 0x0, 0x406) (async) pidfd_send_signal(r5, 0x32, &(0x7f00000000c0)={0x39, 0x10001, 0xff}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYRESOCT=r1], 0xf) 5m46.437174454s ago: executing program 3 (id=2648): r0 = socket$inet_sctp(0x2, 0x5, 0x84) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) (async) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10) (async) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x8, 0x0, 0x82}, 0x10) (async) sendto$inet(r0, &(0x7f0000000100)="ab", 0x34000, 0x40048c4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) 5m46.33965631s ago: executing program 3 (id=2649): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b40), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000280)=ANY=[@ANYRESHEX, @ANYRES16=r1, @ANYBLOB="77192dbd7000fddbdf251d00000008000300", @ANYRES32=r2, @ANYBLOB="186d2e00b8013f718cdf00000c0002000203aaaaaaaaaaaa"], 0x34}, 0x1, 0x0, 0x0, 0x18001}, 0x40040) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020427bd7000fcdbdf2531000000050034000f0000000a0001007770616e310000000a0001007770616e300000000a0001007770616e330000000500340002000000fbfcc411122a0bef0d1f526066c81352b0cdd262f4f736a72e43ba56865f9327ecc3378556a8db91b05e631c04c97bb71d4da6c5c8bc8c84d064a572dda4f12775ae628de6e310c86c4033d27a2934dc919a052bc115095de95bc25f4c05ed578d94734e0cfc34b2847c0d17abe25248a45cdc96c13ec7e15526f66ca8915df2402dfa06c17315320b43f5c91358cc48366314106f5bcfc85fe5f27267e62018886916ef111362a9b2a9006bfe37"], 0x48}, 0x1, 0x0, 0x0, 0x8050}, 0x20004010) 5m46.061164674s ago: executing program 3 (id=2650): r0 = socket$rxrpc(0x21, 0x2, 0xa) listen(r0, 0x4) r1 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000000)={{}, [@rose, @remote, @netrom, @default, @remote, @default, @bcast, @default]}, &(0x7f0000000080)=0x48, 0x0) getsockopt$ax25_int(r1, 0x101, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 5m45.900444342s ago: executing program 3 (id=2652): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0x1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000005c0)={0x7ff, r0, 'id0\x00'}) r3 = syz_open_dev$mouse(&(0x7f0000000640), 0x2, 0x2080) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='GPL\x00', 0x7b6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[0xffffffffffffffff, 0xffffffffffffffff, r1, r2, r3], 0x0, 0x10, 0x2}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000200)='i2c_write\x00', r0}, 0x10) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0xc0844123, &(0x7f0000000180)=0x20000000000003) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x24) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = open(&(0x7f0000000000)='.\x00', 0x2000, 0x20) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x40049366, &(0x7f0000000180)) close(r0) close_range(r4, 0xffffffffffffffff, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket$kcm(0x2d, 0x2, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000100)={r8}) bind$xdp(r9, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x22}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000900000a20000000000a00000000000000000000070000000900010073797a300000000060000000090a010400000000000000000700000008000840000000010900010073797a30000000001c000980100002800c0001800800014000000002080001405fffffff080005400000000408000a40000000000900020073797a3100000000140000001000010000000000000000000084000a"], 0xa8}, 0x1, 0x0, 0x0, 0x40e0}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x480, @broadcast}}) 5m45.733338107s ago: executing program 3 (id=2653): socket$inet6(0xa, 0x3, 0x3c) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() getpid() getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xfffffdec, 0x1, 0x0}, &(0x7f00000005c0)=0x48) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0x80045530, &(0x7f00000000c0)=""/111) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4c21, 0x84, @mcast1, 0x5}, 0x1c) socket(0x10, 0x803, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 5m42.980044033s ago: executing program 3 (id=2657): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r2) (async) ioctl$KVM_CHECK_EXTENSION(r3, 0xae01, 0x1) (async) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000080)={0xf000, 0x280000, 0x8}) unshare(0x24020400) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r4) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRES16=r1, @ANYRESOCT=r5, @ANYBLOB="010000000000000004001b0000000c00228059fe00800400008006002100", @ANYRESDEC], 0x28}, 0x1, 0x0, 0x0, 0x20004010}, 0x24000000) (async) unshare(0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) (async) r6 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r6, 0xc0045543, 0x0) socket$kcm(0xa, 0x1, 0x0) r7 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8916, &(0x7f0000000000)={r7}) r8 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8916, &(0x7f0000000000)={r8}) 5m42.450588936s ago: executing program 36 (id=2657): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r2) (async) ioctl$KVM_CHECK_EXTENSION(r3, 0xae01, 0x1) (async) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000080)={0xf000, 0x280000, 0x8}) unshare(0x24020400) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r4) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRES16=r1, @ANYRESOCT=r5, @ANYBLOB="010000000000000004001b0000000c00228059fe00800400008006002100", @ANYRESDEC], 0x28}, 0x1, 0x0, 0x0, 0x20004010}, 0x24000000) (async) unshare(0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) (async) r6 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r6, 0xc0045543, 0x0) socket$kcm(0xa, 0x1, 0x0) r7 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8916, &(0x7f0000000000)={r7}) r8 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8916, &(0x7f0000000000)={r8}) 4m24.453216685s ago: executing program 8 (id=2887): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async, rerun: 64) r0 = socket$inet(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0xf, 0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffb]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}]}, &(0x7f0000000180)=0x10) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000002400010300000000800000001100000004002b80523de302fdf09502c1579f7e1938b34f1ed24c4477d16d0c4a965d7cbf7e45f9ab7a2c642ba22b50b6d5b7679eefbf4ddf8ca812c4682a796c91637fb098bf518fdcc4717bc2017480210c1d9312fd7ee697d146719752e0fcc31f285173e9cc3c4cf1183f08b48f194d4f980d1f258caaad7b63637cf8c134e88a7bcced9f5b2107f1049e7f26b1"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000005300)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={r6, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x0, 0x0, 0x19}, &(0x7f00000001c0)=0x9c) 4m22.774535701s ago: executing program 8 (id=2891): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) getrlimit(0x3, &(0x7f0000000040)) r1 = msgget$private(0x0, 0x0) setreuid(0x0, 0xee00) msgctl$MSG_STAT(r1, 0xb, 0x0) r2 = dup(r0) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[], 0x10) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="a8"], 0xa8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x126438, &(0x7f0000000580)=ANY=[]) 4m22.613046953s ago: executing program 8 (id=2893): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca0200000000000000adcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d070490893616810a121ff4feedd1d176b313b9fc7bf31ddff431a4a50760ce18a76c4b7aa73cec3eec984c76d16f798c436410f3f4a41715e736a132c3cb9421be0b3c2bd40b75896c007fa2d47e3d8392d905d582b8eff689b0f493770c91e8c2e8bd0b08ffa4fd0289b04b0ea024768d196ef721314d68d29988b01871c6ea39f95a0b77744caadd24867acab274e8e4bf3fb44df31e15ffdce52f9f60ffe"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r1, r1, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="2f00000018"], 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x700, 0x1, 0x6, 0x1, {{0x15, 0x4, 0x3, 0x9, 0x54, 0x66, 0x0, 0xf, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@timestamp={0x44, 0x24, 0x2e, 0x0, 0x6, [0x2e7, 0x6, 0x8, 0x101, 0x1, 0xfffffffc, 0x7, 0x2]}, @ssrr={0x89, 0x13, 0xb4, [@private=0xa010101, @multicast2, @dev={0xac, 0x14, 0x14, 0x38}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x86, 0x9, "743d604d968c74"}]}}}}}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="030427bd7000ffdb000000008008000700", @ANYRES32=r4, @ANYBLOB="060001000200000014000400ff02000000000000000000000000000108000200040000000500050080000000080003000500000008000200020000000800040096030000080003000600000008000400090000000800040004000000"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040040) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) r7 = openat$cgroup_subtree(r5, &(0x7f0000000400), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000440)=ANY=[@ANYRES32=r6, @ANYRES32=r6, @ANYRESHEX=r7], 0x27) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x5, 0x1, 0xaa}) ioctl$PTP_EXTTS_REQUEST2(r8, 0x40103d0b, &(0x7f00000003c0)={0x7, 0x2}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) syz_emit_ethernet(0x32, &(0x7f0000000040)={@broadcast, @random="0408fcc67af2", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {0x0, 0x88be, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18010000", @ANYRES16=r9, @ANYBLOB="010027bd7000fcdbdf250100000014000180080003000300000008000400", @ANYRES32, @ANYBLOB="04000300ac00028054000180080001000300000008000100060000000800010000000000080001000700000008000100080000000800010007000000080001000200000008000100020000000800010002000000080001000800000024000180080001000300000008000100020000000800010000000000080001000000000014000180080001000200000008000100030000001c000180080001000000000008000100140000000800010001000000040003003800028034000180080001000500000008000100050000000800010006000000080001000800000008000100080000000800010002000000040003"], 0x118}, 0x1, 0x0, 0x0, 0x804}, 0x4050) 4m22.564206378s ago: executing program 8 (id=2894): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0xec5, &(0x7f0000000000)={0x0, 0x0, 0x1000, 0x1000000, 0x4}, &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x40, 0x6, 0xffffffffffffffff, &(0x7f0000000300)=0x80, &(0x7f0000000440)=@pptp={0x18, 0x2, {0x0, @multicast2}}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x2, 0x10a5, 0x3, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4, 0xfcffffff, &(0x7f0000000700)='Vb?['}) mkdir(&(0x7f0000000280)='./file0\x00', 0x324) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001600010000000000000000000a0000000400000004000280d7012522b21934d457751ee438c4338e6edea0c897145eefaa0610b332d0cf06685af98fb93e5a005d4157"], 0x1c}}, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42032, 0xffffffffffffffff, 0x180000000) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000a0d000/0x3000)=nil], 0x0, &(0x7f0000000380), 0x2) r8 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={'ip6erspan0\x00', {0x2, 0x4e21, @private=0xa010100}}) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x5, &(0x7f0000000100)=[{0x4, 0x8, 0xff, 0x59}, {0x1c4, 0x77, 0x3, 0x1d}, {0x5, 0x3, 0x6, 0x9}, {0x6, 0x7, 0x6, 0x4000}, {0xfff, 0x3, 0xbe, 0xfffffff7}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f0000000380)) 4m20.581497584s ago: executing program 8 (id=2899): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x4000, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d507df08c410448200dc01020301090212000100000000090400000003"], 0x0) syz_usb_connect$cdc_ecm(0x2, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000202505a1a4400000000101090248ef0001000000090400001602020000052406000005240000000d240f01000000000000ddffff03240209"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x4d, 0x42, 0xd8, 0x20, 0x1ba6, 0x1, 0x4988, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x77, 0xe4, 0xf9}}]}}]}}, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}]}, 0x3c}}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="200e000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m19.949109728s ago: executing program 8 (id=2902): sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000b00000008000300", @ANYRES32=0x0, @ANYBLOB="10005080090001"], 0x2c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe000001000000000800", @ANYRES64=r0], 0x24}}, 0x4000000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r3, @ANYBLOB="6c005e80080009000000000008000200000000000800060000000000080009000000000020"], 0x25c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 4m19.555442878s ago: executing program 37 (id=2902): sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000b00000008000300", @ANYRES32=0x0, @ANYBLOB="10005080090001"], 0x2c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe000001000000000800", @ANYRES64=r0], 0x24}}, 0x4000000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r3, @ANYBLOB="6c005e80080009000000000008000200000000000800060000000000080009000000000020"], 0x25c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2m39.088987784s ago: executing program 7 (id=3232): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000100000000000000e9ff000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r1 = semget$private(0x0, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x9590f6cc3ea35512) semctl$IPC_RMID(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x10000100000, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) lsm_set_self_attr(0x69, 0x0, 0x106, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x100000b, 0x50, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x41dcc84e59c9d832}) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0x80000300, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, r6, 0x0, 0xffffffffffffffff, 0xa3}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000140)={0xd, 0x2, r6}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f00000001c0)={0x48, 0x1, r6, 0x0, 0x500000000000000, 0xf}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000300)={0x48, 0x1, r6, 0x0, 0x53, 0x1}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) 2m37.780743398s ago: executing program 7 (id=3237): prctl$PR_SET_KEEPCAPS(0x8, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffa000/0x3000)=nil) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xe, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x64}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000080)="09000000010001", 0x7) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x5, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000001300)=""/4096, 0x1000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4a89811f583ee856}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0xce6f0a88643d37ad}, 0x9c) 2m36.561335667s ago: executing program 7 (id=3242): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x42474752, 0x0, @stepwise}) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x80000, 0x113) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) (async) accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080), 0x0) (async) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x3c) (async) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4002, &(0x7f0000000000)=0x1, 0x7, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000080)=0x3, 0x8, 0x0) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x6ee, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47b07c7d], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000]}, 0x45c) r6 = dup(r5) ioctl$UI_DEV_CREATE(r6, 0x5501) (async) write$uinput_user_dev(r6, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0xcb}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x80000000, 0x6, 0x6, 0x45, 0x6, 0x6, 0x7, 0x6, 0xff, 0x2, 0xfffff5ee, 0x401, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x3, 0xfffffffc, 0xa, 0x2, 0x5, 0x0, 0xfffffff7, 0x6, 0x7, 0x4c, 0x1, 0x80, 0x8, 0xa, 0x9, 0x7, 0x8000101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x10, 0x3, 0xb52, 0x8, 0x0, 0x8, 0x4, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x4, 0xdaa, 0x5, 0x2, 0x76c4, 0xfffffffd, 0x5, 0x4, 0x10000, 0xd, 0x2, 0x9, 0x10, 0x8, 0x9, 0x7, 0xa, 0x9, 0x3, 0x8, 0x3, 0x6, 0xdfe7, 0x27f8, 0xc0d, 0xfffffffd, 0x9, 0xc, 0xfffffffb], [0xa3, 0x6, 0x6, 0x9, 0xfff, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xefa, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x3, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x801, 0xfffffff2, 0x63, 0x7, 0x2, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x8, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x4, 0x7fff, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0xc, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0x5, 0x2, 0x3, 0x0, 0x7, 0x4e6, 0x8, 0x6, 0x5ef, 0x8000, 0xc, 0x4, 0x401, 0x1, 0x5, 0x0, 0x9a8, 0xe32, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x1ff, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, 0x38, r6}, 0x94) (async) socket$inet(0x2, 0x4000000000000001, 0x0) 2m36.494801899s ago: executing program 7 (id=3243): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) cachestat(r0, &(0x7f0000000040), &(0x7f000009de80), 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100e1ff0000000000000000850000008a00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r2, 0x3ba0, &(0x7f0000000040)={0x48, 0x3, 0x0, 0x0, 0x1, 0x8c, &(0x7f0000000200)="f31cb03b1634c194950a9758cc433d33feea5dbb1dd4d449b361e1296d9e7f46685db8f44dce540e2bbbf37b72686512b5714e73bec010e5f05481a2dd97b0bb13520b9388e6956f14c805db759399313c114ae262645e98411f26e2f16d05f00174ba5e26e949bc7b3baf22ffb97ce4871196cbad8788cd09aee76734c4a1566f797a3427f0c0c402b9a16d"}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) execveat(r4, &(0x7f0000000040)='./file2\x00', 0x0, 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f00000002c0)={0xc}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@dev, @in=@loopback, 0x0, 0x0, 0x10, 0xfffc, 0x2}, {0x0, 0x7}, {}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x33}, 0x0, @in=@dev, 0x1fc, 0x0, 0x0, 0x7}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 2m36.421663629s ago: executing program 7 (id=3244): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x1) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) write$FUSE_NOTIFY_RESEND(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r3 = dup(r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='freezer.parent_freezing\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x12, r4, 0xe7bee000) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c0061994d88dd61246d53b867e2a336d117774e63332eee5740e1a3d9737c9948c90d438b8a0f5e16"]) 2m35.794834595s ago: executing program 7 (id=3245): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0x4]}, 0x0, &(0x7f0000000100)={0x0, 0x989680}, 0x8) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$ITER_CREATE(0x21, &(0x7f0000000280)={r3}, 0x8) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) ioctl$USBDEVFS_BULK(r5, 0x5523, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x5004, 0x7, 0x1}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000d00008500000001000000850000002a00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYRES32=r7, @ANYRESHEX=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7}, 0x94) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000340)={r8, 0xffffffffffffffff, 0x24, 0x7, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x443, 0x0, 0x1}}, 0x40) 2m20.521653068s ago: executing program 38 (id=3245): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0x4]}, 0x0, &(0x7f0000000100)={0x0, 0x989680}, 0x8) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$ITER_CREATE(0x21, &(0x7f0000000280)={r3}, 0x8) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) ioctl$USBDEVFS_BULK(r5, 0x5523, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x5004, 0x7, 0x1}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000d00008500000001000000850000002a00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYRES32=r7, @ANYRESHEX=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7}, 0x94) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000340)={r8, 0xffffffffffffffff, 0x24, 0x7, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x443, 0x0, 0x1}}, 0x40) 1m40.985769182s ago: executing program 6 (id=3427): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @local, 0x9}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) r5 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000240)={{0x32, @loopback, 0x4e22, 0x2, 'dh\x00', 0x20, 0xd049, 0x55}, {@broadcast, 0x4e23, 0x2004, 0x8, 0x8, 0x374}}, 0x44) sched_rr_get_interval(r5, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, 0x0) pipe(&(0x7f0000000d00)) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0, 0x0, 0xffffffc6}, 0x0) r9 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2, [], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) sendto$inet6(r3, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000540)={0x48, 0x12, r1, 0x0, 0x2, 0x100006dd}) 1m39.982558617s ago: executing program 6 (id=3433): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20100, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) sendfile(r0, r0, 0x0, 0x80009) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000200)=[{&(0x7f0000000540)="bbfb18", 0x3}], 0x1, 0x8, 0x7, 0x17) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000180)={0x3}) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='f2fs\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xe, 0x4, @tid=r2}, &(0x7f0000000240)) 1m39.804410139s ago: executing program 6 (id=3436): r0 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x1) (async) r1 = fanotify_init(0x16, 0x0) (async) r2 = memfd_create(&(0x7f00000007c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x96k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\xeb\xaf\xaa\xee\'t\xbe\x9b\rln\x7f\xab\x8d\xac\x06\x00\x00\x00\x00\x00\x00\x00\x9bY\xd9\xd4\xc6A\x84\x9d\\\xc4\x0e\xf4\bO\x80\xaa\r\b\xc0\xb9\x84\xd0,\'\xc5p\xb6 \x03\x12\xca\xef\x02f\xa2\x9d\x96\xa7{\x9d\xf0\xe2,T\x13\xc4W*\xd5\xeaX\x8c\xb3\x81\r=\"\xe1\xf2\xc9^\x90\xc1\xaa\xb6\xb8\xad\x04\x13\xe7\x04\x1b5qMnI-\xeaA\x1a\xd9-%!\x0f\ab\x1e\xab\a\xe4\xd4E\xf9\x8f\xd2\x05\xfd\xa7I\xf9#8\xf6bc\x1bl\xb2\xcb\xf9rc)&\x1d\xce\x970\x01\xbb\xcb@\xd8Y\xb9\x93=7\f9\xe5`\xb3\xf3=;\xe3E[\x12?\xe2n\xd0\x05\x98\x1c6F;fp\xce\xcfH\xaf\x93\x1e\x8e\x88\xfdx\xd9\x03,B\xd1L:\xaf!\x81\x03\x18\xa1\xf3\x87\x18\x83\xc0\x7fJ+\xe0N\xa8>7}a\x91y\x19\x13\xf6\xee.j\xdbh\x00&$\xf8e\x01\xa6\x0e\a\xcf\xaeq\xae\xbc\x94\x88eidE\xf9\xb9\xaa\x14U\t\xf4\xe27\xf9\xf5\xb2/\xa3\xafX\xd1\xf3v\x85z\x1b?)\f\xf8>\xa7C\xdfW\x80\xc5\xed\xbbPM\x9b\x1b*\'O\x7f@%Q\x8c\x98\x7f\xffd\xc2VY\xf4\x9b\xf3\x80\xed\x13m\x15\x86\x9d\xa1\xa8\xae\xa9fsLp\x1f.\x11\x83K\x18k\xf4\x8e\xc6>B!\xca\xe4\xd4\x1f\xe0F\x01\b\xb2\x0fK\x8e\xfbv\x00Yh<\xd0\x85\xcbn\x17\x9a\x8b\xa4\x04p\xe1\xfd\xf1\xb9\xf2\x94\x81\xe5v\xf6\x8dY\xd9\r_\xe4\x00\xfcb\xff=\x9fQC\xcf\x8c\x97\xd1@\xeem\x992U\x01\xb5\x15\x00\xfa\x11\xa1\xfc\xe4\xc8\v\x90\xbf\x1f\x11\xc4t\x91Z\xbb[\xe0?\xa6pV\xa3\xba\xbe\xde\xda\xb3~&~]', 0x2) r3 = dup(r2) fanotify_mark(r1, 0x1, 0x40000010, r3, 0x0) (async) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x61}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xbd}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008080}, 0x44004) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000080)={0x346, 0x8000000000000000}) (async) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001e00030903000000ffdb5f2507"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x50) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r8, 0x0, 0x7}, 0x18) (async) socket(0x28, 0x803, 0x0) (async) mkdir(0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r9 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r9, 0x0, 0x400000000000000, 0x2) (async) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="d9", 0x1}], 0x1) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1m39.613139779s ago: executing program 6 (id=3438): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000280)='g', 0x1, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) shutdown(r3, 0x1) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405668, &(0x7f0000000100)={0x0, 0x1, 0x2}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) 1m37.527183651s ago: executing program 6 (id=3442): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x1) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) write$FUSE_NOTIFY_RESEND(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) dup(r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='freezer.parent_freezing\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x12, r3, 0xe7bee000) 1m36.274507874s ago: executing program 6 (id=3444): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) unshare(0x24020400) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x80081, 0x79, 0x10000, @value=r0}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x401, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) utime(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x864b, 0x6}) 1m21.168909824s ago: executing program 39 (id=3444): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) unshare(0x24020400) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x80081, 0x79, 0x10000, @value=r0}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x401, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) utime(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x864b, 0x6}) 41.097068275s ago: executing program 5 (id=3640): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x3938700}, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) close(r2) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) close(r2) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x24020400) (async) write(r5, &(0x7f0000000240)="94", 0x1) (async) vmsplice(r6, &(0x7f0000000380), 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000580), &(0x7f0000000200)=""/159}, 0x20) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b0086cedc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) (async) signalfd(r0, &(0x7f0000000040)={[0x7]}, 0x8) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000002000010027bd70003d0000000a00808000000203587878730cc11728fc020020000000000000000000ff0000"], 0x30}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000390400000000001b2347ea000000", @ANYRES32=0x0, @ANYRES64=r1], 0x5c}}, 0x0) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r9, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xfffffffffffffde3, 0x0, 0x0, &(0x7f0000000b40)=[@mask_fadd={0x58, 0x114, 0x8, {{0x402, 0x4}, &(0x7f00000004c0)=0x7, 0x0, 0x8, 0x7ffffffd, 0x8, 0x200, 0x13, 0x100000001}}, @mask_cswp={0x58, 0x114, 0x9, {{0x8, 0x5}, 0x0, 0x0, 0x402, 0x5, 0x7, 0x5c1f, 0x10, 0x7}}], 0xb0}, 0x0) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r10, 0x0, 0x53, 0x0, &(0x7f0000000000)=0x4) 40.861033315s ago: executing program 5 (id=3645): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x4a0201, 0x0) (async) mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f000073d000/0x3000)=nil) 40.759043979s ago: executing program 5 (id=3648): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000000)=0x5cfa, 0x4) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r0, &(0x7f0000000480), 0x10) syz_io_uring_setup(0x38a9, 0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_emit_vhci(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x1, 0x0) fchdir(r8) ioprio_set$pid(0x3, 0x0, 0x0) r9 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r9, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x16}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x20, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1a, 0x1, "10c4e3257eaa66a5725a38cd58d26115453baa910be0"}]}]}]}]}], {0x14, 0x10}}, 0xdc}}, 0x0) syz_io_uring_submit(r2, r3, 0x0) 39.475828064s ago: executing program 5 (id=3653): socket(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x25dfdbfd, {0x60, 0x0, 0x0, r2, {0x0, 0xe}, {0xffe0, 0xa}, {0xfff3}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000400)) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) 38.797887065s ago: executing program 5 (id=3658): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000000000000000000080008001d000000", 0x24) (async) unshare(0x2c020400) (async) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x4}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) socket$inet(0x2, 0x80001, 0x84) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x29) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="001020ff00000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1}, 0x94) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000ff1f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000080000085000000c30000009529dae0b5"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r5}, 0x18) (async) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$vcsa(0x0, 0x40, 0x800) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) (async) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000002700)=""/102392, 0x18ff8) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="9ebea382da7383126d08460900a3377e6d01ed3f549e4f66d9eba36883a6451e376c67bba6495f1f26ca69eb2c66084ca0cc9ab95055973065223e3ed31fad29148a40b5aab458df0df6d702bce3709640eda5f4bab0a76a8a8e8e480e3f72c43c4539f472477b4de45fce03afc23b1869b6c33daed9baa098d433", @ANYRESDEC, @ANYRESDEC=r3, @ANYRES8=r5], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) (async) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x400, 0x10, "0062ba5d8200"}) 38.636988205s ago: executing program 5 (id=3661): r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x8001, 0x9, 0x6a, 0xf45}, 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) symlink(&(0x7f0000002100)='./file0\x00', &(0x7f0000002140)='./file0\x00') r3 = landlock_create_ruleset(&(0x7f0000000040)={0x1001, 0x0, 0x2}, 0xd, 0x0) landlock_restrict_self(r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYRES8, @ANYBLOB="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", @ANYRESOCT=r2, @ANYRESOCT=r2], 0x50}}, 0x4040) fcntl$setlease(r2, 0x400, 0x0) fcntl$setown(r2, 0x8, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_CLEAR_HALT(r6, 0x80045515, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000040), 0x4812, 0x24083) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@ipv4={""/10, ""/2, @empty}, @in6=@ipv4={""/10, ""/2, @private}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in6=@private1}}, &(0x7f00000000c0)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r7, 0xc0286405, &(0x7f0000000180)={0x8000, 0x4, {0xffffffffffffffff}, {r8}, 0x7, 0x400}) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r10 = fanotify_init(0x200, 0x80000) fanotify_mark(r10, 0x1, 0x40001043, r9, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r11, 0x0, r5, 0x0, 0x6, 0x0) write$binfmt_misc(r12, &(0x7f0000000140)="4e368544d8", 0x5) close_range(r1, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r13 = socket(0x2, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r13, 0x6a, 0x3, 0x0, 0x0) 23.604040606s ago: executing program 40 (id=3661): r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x8001, 0x9, 0x6a, 0xf45}, 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) symlink(&(0x7f0000002100)='./file0\x00', &(0x7f0000002140)='./file0\x00') r3 = landlock_create_ruleset(&(0x7f0000000040)={0x1001, 0x0, 0x2}, 0xd, 0x0) landlock_restrict_self(r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYRES8, @ANYBLOB="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", @ANYRESOCT=r2, @ANYRESOCT=r2], 0x50}}, 0x4040) fcntl$setlease(r2, 0x400, 0x0) fcntl$setown(r2, 0x8, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_CLEAR_HALT(r6, 0x80045515, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000040), 0x4812, 0x24083) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@ipv4={""/10, ""/2, @empty}, @in6=@ipv4={""/10, ""/2, @private}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in6=@private1}}, &(0x7f00000000c0)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r7, 0xc0286405, &(0x7f0000000180)={0x8000, 0x4, {0xffffffffffffffff}, {r8}, 0x7, 0x400}) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r10 = fanotify_init(0x200, 0x80000) fanotify_mark(r10, 0x1, 0x40001043, r9, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r11, 0x0, r5, 0x0, 0x6, 0x0) write$binfmt_misc(r12, &(0x7f0000000140)="4e368544d8", 0x5) close_range(r1, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r13 = socket(0x2, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r13, 0x6a, 0x3, 0x0, 0x0) 15.895925433s ago: executing program 1 (id=3768): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f2, 0x1236, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0xf, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$vim2m(&(0x7f0000000000), 0x79, 0x2) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_open_dev$swradio(0x0, 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r4, 0x402c5639, &(0x7f00000000c0)={0x0, 0x4, 0x2}) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) (async) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) sendfile(r5, r5, 0x0, 0xb) (async) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xb, 0x800) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x7d, 'syz1\x00'}, 0x5, 0x400, 0x1, 0x0, 0x0, 0x8, 'syz0\x00', 0x0}) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f00000000c0)={0x40, 0xe, 0x6, {0x6, 0x11, "028cec81"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 12.863650935s ago: executing program 1 (id=3781): r0 = socket$unix(0x1, 0x1, 0x0) creat(0x0, 0xd931d3864d39ddd8) open$dir(0x0, 0x0, 0x1) creat(&(0x7f0000000240)='./file0\x00', 0x38b) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) (async) socket$isdn(0x22, 0x3, 0x1) prlimit64(0x0, 0x3e67cd7dc9c6652b, &(0x7f0000000140)={0xd, 0x1}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x2, &(0x7f0000000180)=[{0x45}, {0x6}]}) (async, rerun: 32) connect$inet6(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) openat$ptp0(0xffffffffffffff9c, 0x0, 0x2001, 0x0) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0xff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0x0, 0x0, 0x47524247, 0x0, 0x0, 0x0, 0x5, 0x6}}) (async, rerun: 32) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 32) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) getsockopt$inet6_tcp_int(r3, 0x6, 0x24, &(0x7f0000000c00), &(0x7f0000002000)=0x4) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000008001) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, 0x0, 0x0) (async, rerun: 32) r5 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 32) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x1001, 0x0, 0x2}, 0xd, 0x0) landlock_restrict_self(r6, 0x0) (async, rerun: 64) bind$unix(r5, &(0x7f0000003000)=@file={0x0, './file0/file0\x00'}, 0x6e) (rerun: 64) listen(r5, 0x0) (async) connect$unix(r0, &(0x7f0000000640)=@file={0x1}, 0x6e) 8.662963696s ago: executing program 1 (id=3796): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x304, 0x10, &(0x7f0000000000), 0xfffffea2}, 0x48) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket(0x2, 0x80805, 0x0) (async) socket(0x2, 0x3, 0xff) (async) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) (async) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000001140)=""/243) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$netlink(0x10, 0x3, 0xf) sendmsg$OSF_MSG_REMOVE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="60100000010501"], 0x1060}}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000001240)={'wg1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x1b, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000d9bb000085000000b500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5) (async) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r7, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) (async) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @dev, {[@cipso={0x86, 0x71, 0x0, [{0x5, 0xc, "e256b28c59881681fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "c600"/14}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x0, [{0x0, 0x6, "7f36c525"}]}]}}}}}}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 8.324933733s ago: executing program 1 (id=3798): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup, 0xffffffffffffffff, 0x12, 0x12, 0x0, @void, @value=0x0}, 0x20) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000b00)=[@transaction_sg={0x400c6313, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000002c0)={0x18, &(0x7f0000000300)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = syz_io_uring_setup(0x234e, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x0, 0x115}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000005400)=ANY=[@ANYBLOB="18000000000010000000000000000000180100002020000000000000000000007b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r8 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r8, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r8, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r8, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) 7.985132407s ago: executing program 2 (id=3802): r0 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = syz_io_uring_setup(0xb, &(0x7f00000002c0)={0x0, 0x200002f, 0x800, 0x1, 0x100020b}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = dup(r5) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r5, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r7 = dup(r5) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e20, 0x5, @empty, 0x2d}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7f, 0x5}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x5, 0x0, 0x0, 0x1, 0x35, 0xf, 0xf0}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x0, 0x1b}, 0x9c) unshare(0x2c020400) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0)='virtiofs\x00', 0x0, 0x0) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS(r8, 0x5402, &(0x7f0000000000)={0x5, 0x3fb, 0x0, 0x7f, 0xc, "737b27e90e294c801cf3a246ada40abbf86400"}) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000100)=0xa) r9 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r9, &(0x7f0000000600)=""/192, 0xc0) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000003c0)={r9, 0x9, {0x0, 0x0, 0x0, 0x1, 0xff, 0x0, 0x4, 0x19, 0x8, "e149833f03bfc111d275dfa6265f3e896329efab05ddd04c8dc0e451289c9210b982775c82746c5747a7acb5699e86a933f0fbe36a347e9be315bf0d152dbef8", "677de55a06e61167a282cbb1093e0ddd9db5fb3ee0f5414754186f3da12dcb1f11c0d3660dbf247e08b44071126ba8d1228d1c9245eb973efd0e173c40906cbe", "4376642d3e8795691f7134bd5945de56ee19cac7a347d30de8749ba3b288b46d", [0x0, 0xffffffff00000001]}}) syz_usb_control_io$printer(r0, 0x0, 0x0) r10 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read(r10, 0x0, 0x0) 6.789101229s ago: executing program 0 (id=3809): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e04012800000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000500)={0x20, 0x28, 0x12, {0x12, 0xb, "47a468c1fb56fd4a2625992afe97504b"}}, 0x0}, 0x0) 6.194210577s ago: executing program 0 (id=3812): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x320, 0xffffff80, 0x178, 0x0, 0x178, 0x488, 0x22b, 0x258, 0x488, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0xa8, 0xc8, 0x340, {0x1e0002a8, 0x7203000000000000}}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014020000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_usb_connect(0x0, 0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000055bed40020000000000000003010902380002000000060904c700010e0101000300d009050a000000000000090400000101be2600090500000000000000080b878a", @ANYRES16=0x0], 0x0) futex_waitv(&(0x7f0000004040)=[{0x0, &(0x7f0000000080), 0x2}, {0x3, &(0x7f0000003fc0)=0x1000000003, 0x82}], 0x2, 0x0, 0x0, 0x1) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, &(0x7f0000000040)=ANY=[]) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xb4, 0x0, 0x2, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x7ff}, @CTA_EXPECT_MASTER={0x84, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3d}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x48000}, 0x800) syz_usb_control_io$printer(r0, &(0x7f0000000400)={0x14, &(0x7f0000000340)={0x20, 0x22, 0x45, {0x45, 0x23, "e7399e8ddc0372d80fd786f65869015ca78cfa980efb12d08e52fa9d2ae5ac6395b5c07825239950cc34beca8a1fbb466335735448a42a3244c82bb69c71d41c1df16c"}}, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x812}}}, &(0x7f0000000600)={0x34, &(0x7f0000000440)={0x0, 0x6, 0x5d, "f790b6b33bcdda4ae1922cd5f3071a14b794780cf1e5684cf26c3aa6b0958a7f230417630a777cd3cc92997234a15eea0f68dd89cbe5596810bbb5b1bede93d0de0ccf3a157922f40259cd812f00a323bd83f6bc1d40b2a469b06e9e67"}, &(0x7f00000004c0)={0x0, 0xa, 0x1}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000540)={0x20, 0x0, 0xe, {0xc, "3c03b71666b2cccf0b65eb0e"}}, &(0x7f0000000580)={0x20, 0x1, 0x1, 0x7}, &(0x7f00000005c0)={0x20, 0x0, 0x1, 0x17}}) 5.827234866s ago: executing program 9 (id=3814): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000011ff, 0x101301) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000000680)={&(0x7f0000000080)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001240)=[{&(0x7f0000000180)='W', 0x1}, {&(0x7f00000011c0)="449c883e99619cd8723fd010f46ec1d5d85b2c380870b245009d9ee377ea6a3c5baf355b700982", 0x27}, {&(0x7f0000001200)="1e83d0d170142cfc0b761ef99358ec41926497cc41431b9e259b08dab0147919aabbf82882e42d896bbc90ac1b7240fa2ffd776d8ade21b6377d", 0x3a}, {&(0x7f00000018c0)="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", 0xa2f}], 0x4}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000600000002000000000000050080000000305f6127000e9850eb99a1662e95bd4036053b9c0ad55290445cf7c7de216b5adc759595b472a6326b42bc9e9df98d9c33b1974c549edc2273f451bc2067bea62495b2e79fa70a5bf9cbe34e70f64796c53aa30d48099e97ad318270e395322c8afaabf8787a18577c4d0f8f098d69d228582250b4c4f0a927fd649b6cc3f45db9d826617483f0077b"], 0x0, 0x2a, 0x0, 0x1, 0x9}, 0x28) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x8, 0x5, 0x7, 0x80, 0x3}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000140)={r3, 0x1000, 0x0, 0x0, 0x8e2}, &(0x7f0000000240)=0x18) (async) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x1, 0x11, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0}) 5.778429053s ago: executing program 1 (id=3815): r0 = fsopen(&(0x7f00000036c0)='fuse\x00', 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) epoll_create(0x7) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=@framed={{0xbe, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000480)='syzkaller\x00'}, 0x90) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000000)='default_permi\x92sions', &(0x7f0000003740)="8c", 0x1) 5.416476987s ago: executing program 0 (id=3817): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000005500)=[{{&(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty, 0xf}, 0x1c, &(0x7f0000000880)=[{&(0x7f00000001c0)="73330be70edb3c902a2aa379c968d6a1c6d5037c2053d60d5ffd64619f2fdfb17e408e2380e7973078ecb08caf1d4d8972e3e07836fb158f7acb98e845817937ef3c82929e63e26571e7dc3a396c88030a85bc74782490b81087d5008b40974eb97a2f9607d61d00c512ec86e22428a8791afbf4a19c015ced106675b8bc98da97b6648d045edc01e46650ab4525837d6f844875bb8d18c4a7873de3f80e952923bb547e87e8c926f8053a7b07b5b5c9cd4cd96baac88e632c0d226951d42ff5bb0f61691c4cd0ee44a64ecf5f5524381c1eb208e13ca0d633890c1a28ec094bd24912a01ab5b4", 0xe7}, {&(0x7f0000000300)="fbe5c3793855f879006bc8cbf899482fc90d82d471bb911191b3f7b2a61812a45883e364568856b475fc60842aa3d054b35a1bee9ea884295279e37618b225460e2c9628a27240c31ab2801baa0f02a4a3b7532ad473c70e342a64a10954da58060393a523b597a1d1ea03ba205a94fe9d8403c1dfa4791ffed4f5d3bd4220992052416d39723fb2dddd02d3546dd2f4099add66dd5b1e07cd746148dcbfcadbff7f049ecbd8107bf2d6a30e68beff37a7f49684d20c31c161d8279a7ecf87", 0xbf}, {&(0x7f0000000680)="c11e4dd4eca507ffee6aa604c769455566b22a5f47cea499af0778ddcf4ce7de54cc967ce9fffef5b299e9349eac3a05cb534b4dd596b3f3dc0989bff2630699a837ae9dbcf51ef8fbc12b77304d42ad9d3dee989261524d8bcb729cdea91003c2d86166d014deb27630f7d666a8339cc4989cdd05803f1cf396b3680c3909ab713f0341c9f87fda1ba6fa5fef9bbdea3de59eea8aabd5ab4f635c9014eab68086067ce714f191ed9ff32cde1d80bd4a60b98c96e8a388dfc5404a4a84377767edd963a6", 0xc4}, {&(0x7f00000003c0)="1f28cbe11c4085fabf82201eb7b2ced65dc49a04cd5a8281b9b72bf04f3efe7f046f76d7578b63c345017dd5ba14920e90398673d9a5db72e1611f87dc91ed35dafcb7538e565dd4cc04596c074e1b3b0fd50c6b6b16b4ef28798e5aa47a42c24635b16365ee35c1a09beda62e334d8d03548e9ace9bee58802b4fd1bbd11d0c6f80f4cd30473046ffa83d60d2591173a5e0c4e7247d6bc9496252", 0x9b}, {&(0x7f0000000780)="6bcdfd15192f9ea9011261d7f1ce1c76327dfafe471f3b7db57893f1e8d0b8fcb7882059936ce7f2185431977b8bd68bdc989a8fd01fb21feb818063763a96648b169e7748fca5c0def83955f7c10ef8a5a589a0460b3e827503a0aeb741e34b5da0e864f0e31b9f389193558b82e7cfccf67f96407e06634fb191e825925f7bcc8156796faa0672fe3ad4e48b9eb75e7329e3a578cbb2af926656ea24336d5be57c114a59e007d7436076a341c301fb8fc12aaebaf9732877b015393dcbacba2cf83ee22a793e60204ecd8f56ea79ac47b6248e12702e40edb5c63f66c5b7a925243112", 0xe4}, {&(0x7f0000000540)="0543e3ee04fd5b027c33f63309fec3550588f4071df6124c776110621087c8af8dc3c02ffc8db24e8a89057c858df7feea90df672e6e6eb81c75272f93e87cbde7b7bb43e63c36a64eafaa6429e3525f4af9b2fc68461948cba9d4945cbb48500061981ebe510ecdf8b7d9a26ae9e4db4ed0e1ba11b65e9222d6581cb9971d72e7b611c7394b9447638a7a937f1859f055a8e303d258cd4cdf4f", 0x9a}], 0x6, &(0x7f0000000900)=[@rthdrdstopts={{0x90, 0x29, 0x37, {0x32, 0xf, '\x00', [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x38, {0x1, 0xc, 0x24, 0xfe00, [0x1, 0x9a4, 0x5, 0x8000000000000001, 0x100000000, 0x6e5185e6]}}, @pad1, @ra={0x5, 0x2, 0x2}, @calipso={0x7, 0x20, {0x1, 0x6, 0x4, 0x4, [0x4, 0xd, 0x7]}}, @padn={0x1, 0x1, [0x0]}]}}}, @hopopts={{0x80, 0x29, 0x36, {0x0, 0xc, '\x00', [@calipso={0x7, 0x50, {0x2, 0x12, 0x2, 0x0, [0x982, 0x101, 0xfffffffffffff001, 0x4, 0x106, 0x400, 0xff, 0x10001, 0x7]}}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}], 0x110}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000a80)="c50df339c6b5eebc99888ddc6132b9ace0d2d4c59fd15663d8d29a275f4902b0090390feecaad327ebff4b09a9da7b7f5e2e582878ea36e34542bf5922a29d65b11d75a820efef19b67bc09ee961d3b89c6e6b584f78010fe30fda5e360d8b7e515a0679b1cd293236b1439ed1e2ffd9d2", 0x71}, {&(0x7f0000000b00)="7516442974963989abb4", 0xa}], 0x2, &(0x7f0000000b80)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x3c, 0x4, 0x1, 0x37, 0x0, [@private0={0xfc, 0x0, '\x00', 0xff}, @mcast2]}}}], 0x38}}], 0x2, 0xc0) 5.255568543s ago: executing program 0 (id=3818): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32, @ANYBLOB="2d000e0080000000ffffffffffff0802110000000802110000000000000000000000000064000000250300000000000008"], 0x80}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0xfe, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xfffd}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}]}}}, @IFLA_MTU={0x8, 0x4, 0x200}]}, 0x44}}, 0x20000804) 4.83525278s ago: executing program 9 (id=3820): socket(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x25dfdbfd, {0x60, 0x0, 0x0, 0x0, {0x0, 0xe}, {0xffe0, 0xa}, {0xfff3}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000400)) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) 4.832079408s ago: executing program 2 (id=3821): getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000580)) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @remote}, 0xffffffffffffffff, 0xfffffffc}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, r4, 0xb}}, 0x48) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000000)=0x6, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000041000/0x4000)=nil, 0x2) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0, r4}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {r4, 0x3ff}}, 0x10) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x2d, 0x0, 0x90) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x158, r7, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x130, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00', 0x1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x84, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @local}}, @WGPEER_A_ALLOWEDIPS={0x48, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 4.716681115s ago: executing program 0 (id=3822): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) (async) getdents64(0xffffffffffffffff, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x200000) (async) sendfile(r2, r2, 0x0, 0x200000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@delqdisc={0x24, 0x25, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xd, 0x2}, {0x9, 0xfff1}, {0xa, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@delqdisc={0x24, 0x25, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xd, 0x2}, {0x9, 0xfff1}, {0xa, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'gretap0\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x7800, 0x10, 0xe5e2, 0xecb, {{0x6, 0x4, 0x2, 0x0, 0x18, 0x64, 0x0, 0x1, 0x2f, 0x0, @multicast1, @loopback, {[@noop]}}}}}) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'team_slave_1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001fe0ffe0000000000000c00010094040000000000000d00010000010000000000000c000100040000000000000008000500", @ANYRES32=r8], 0x80}}, 0x8000) r9 = socket(0x2a, 0x2, 0x0) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0xa, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r10, {0x7}, {}, {0x10, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x448, 0x2, [@TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0x8, 0x62, 0x2, 0x0, 0xc, 0x2, 0x7fff, 0x0, 0xffffff70, 0x19, 0xffffffa9, 0x2, 0x7, 0x80000001, 0x7, 0x3, 0x36, 0xc, 0x7f, 0x0, 0x5d0bef1f, 0x400, 0x1, 0x837, 0xffffffff, 0x9fec, 0x401, 0x68, 0x9, 0xdd64, 0x1, 0x4, 0x8001, 0xfffffffe, 0x2, 0x3, 0x200, 0xfff, 0xfffffff1, 0x7, 0x0, 0xf, 0x7, 0x7469, 0xb, 0x2, 0x1fe, 0xff32, 0x6, 0xca, 0x4ec1, 0x1, 0x9, 0x9, 0x0, 0x10000, 0x0, 0xb4, 0x7, 0x6, 0x2, 0x0, 0x8156b2a, 0x2, 0xd5c, 0x4, 0xa0, 0x4, 0x7, 0x4, 0x0, 0x81, 0xff, 0x2, 0xe6b, 0x9, 0xa, 0xc8c, 0x1, 0xd2a, 0x6, 0xf4e, 0x9, 0x3a0, 0x3, 0x10000, 0x7ff, 0x44, 0x1, 0x2, 0x800, 0x3, 0x8, 0x0, 0x8e5e00, 0x922e, 0x0, 0x8, 0xffffffff, 0xf, 0x4, 0x2, 0x2c000, 0x80, 0x1, 0x1, 0x2, 0x5, 0x0, 0x4, 0x6, 0x0, 0x3365, 0x1, 0x5, 0xffffffff, 0x1000, 0x0, 0x4, 0x0, 0x1, 0x2, 0x81, 0x111, 0x2, 0x5c20, 0x7f, 0x0, 0xe, 0xfffffffb, 0x7, 0x391, 0x0, 0x0, 0x401, 0x9, 0xc95d90e, 0xff, 0x2, 0x7, 0xd, 0xc7, 0x4, 0x7, 0x0, 0x9, 0xffffffff, 0x9, 0x1, 0x4, 0x3, 0x7, 0xfffffff9, 0x10, 0x2, 0xfff, 0x2002, 0x6, 0x8b4, 0x600000, 0x1, 0x6, 0x0, 0x10000, 0x3, 0x3, 0x5, 0x0, 0x1000, 0x6, 0x9, 0x0, 0x1, 0x81, 0x2, 0xffef6c4b, 0x1, 0x7, 0x5, 0x7fff, 0x8, 0xffffffff, 0x981, 0x9, 0x1, 0x3c, 0x67e1, 0x80000000, 0x2, 0x603c, 0x4, 0x4, 0x0, 0xfffffff8, 0x7, 0x3, 0x10, 0x400, 0xfffffe00, 0x1, 0x3, 0x0, 0xffff, 0x4, 0x6, 0x8, 0xffffffff, 0x400, 0x1, 0x8a, 0xec, 0x6, 0x0, 0xfffffffb, 0x3, 0x7, 0x616, 0x2, 0x2, 0xd1, 0x2, 0xfffffffc, 0x8, 0xe, 0x800, 0x1, 0xffffff64, 0xd87, 0x80000001, 0x48e0, 0x8, 0xa, 0x40, 0x400, 0x20000005, 0x2, 0x4e1b, 0x1, 0x1000, 0x9, 0x4, 0x2, 0x0, 0x2, 0x9, 0x5, 0x3, 0x10001, 0xffff, 0x0, 0x79, 0x8, 0x9, 0x2, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x20000000, 0xfffffffe, 0xd, 0x66, {0xb, 0x2, 0x200, 0x8001, 0xfffa, 0xbe}, {0xd9, 0x2, 0x5, 0xfff8, 0xfff}, 0x6, 0x9, 0x2}}]}]}}]}, 0x478}}, 0x4000) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@local, @remote, 0x0}, &(0x7f00000001c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x80, 0x719, 0x3, 0x4, {{0x7, 0x4, 0x2, 0xe, 0x1c, 0x68, 0x0, 0xfd, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x7, 0xc8, [@loopback]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x80, 0x719, 0x3, 0x4, {{0x7, 0x4, 0x2, 0xe, 0x1c, 0x68, 0x0, 0xfd, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x7, 0xc8, [@loopback]}]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000280)={@local, @empty, 0x0}, &(0x7f00000002c0)=0xc) socket(0x11, 0x3, 0x0) (async) r14 = socket(0x11, 0x3, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r14, &(0x7f0000000180)={0x11, 0x0, r16, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x164, 0x0, 0x0, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x810}, 0x1) (async) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x164, 0x0, 0x0, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x810}, 0x1) 4.037531432s ago: executing program 2 (id=3824): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x0, 0x7ffc, 0x40024e}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r0, 0x627, 0xc104effd, 0x43, 0x0, 0x0) (async) io_uring_enter(r0, 0x627, 0xc104effd, 0x43, 0x0, 0x0) 3.737226336s ago: executing program 9 (id=3825): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x20000600) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000280)=0x5d, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f00000001c0)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) (async) setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f0000009000)=r3, 0x4) (async) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x380000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) (async) r5 = syz_open_dev$audion(&(0x7f00000004c0), 0x7ff, 0x20000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000c40)=ANY=[@ANYRES8=r2, @ANYRES32=0x0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_emit_ethernet(0x7e, &(0x7f0000000580)=ANY=[@ANYBLOB="ffffffffffff0180c20000010800450000710000000010019000004500000000000000002900000000000064010102441c0003ac1e000100000000ac14140500000000ac1414aa0000000086210000000007065408beea01068d6bd32f0108f72f1c2b96410507988f05bed2000000"], 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0xcc}}, 0x4041) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) (async) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@initdev, @in6=@ipv4={""/10, ""/2, @private}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@empty}}, &(0x7f0000000040)=0xe8) sendmsg$nl_xfrm(r8, &(0x7f0000000280)={0xfffffffffffffffd, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="240200001900000125bd7000fddbdf2500000000000000000000ffff7f000001fe8000000000000000000000000000bb4e2101004e0700000200808032000000", @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="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"], 0x224}, 0x1, 0x0, 0x0, 0x48000}, 0x40000c0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20) (async) getitimer(0x1, &(0x7f0000001980)) 3.645086234s ago: executing program 4 (id=3826): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x129100, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x0, 'team_slave_1\x00', 0x3}, 0x18) close(r0) syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109024a00010100100025040000160202000005240600000524000a000d240f01fcffffff0000000000062407040100090581031000090904090582020002000000090503020800008000624cfb8a5d0899405cb8a9f29c4ee18c7ce5fed14d841ecdf924d83ae1be93eb5abbe2a3bcc56cb81d126c4a710b8b2546808783dbfe84b3f10a3bc6c4e83fa9cc4f7a90f29f0ced864aa0b47cd2310eee54e521c79b19e50122c59dab93d249c6d566f6eb57be7bdf19e65fbce8bf3afeb3f0ed4a90d439f405256d38d5723e9a0311c7d6274b411ff51df1f86a6d93b019d9ba711ae9e40fd5ceb6f9636da392fdef6194bb9283d44e62110be3271fd848c1e4850640"], 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) 3.58497551s ago: executing program 2 (id=3827): syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000e395292024042c011e710102030109022d000100001000090485000342e6440209050b02"], 0x0) r0 = inotify_init1(0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r1, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000000008010100000000000000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sched_getattr(0x0, &(0x7f0000000080)={0x38}, 0x38, 0x0) getresgid(&(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000240)) openat$comedi(0xffffffffffffff9c, 0x0, 0x521900, 0x0) timer_create(0x3, 0x0, &(0x7f0000000280)=0x0) timer_settime(r4, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x229) read$FUSE(r5, &(0x7f0000000600)={0x2020}, 0x2020) timer_create(0x3, 0x0, &(0x7f00000000c0)=0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [], {0x14}}, 0x28}}, 0x4048010) timer_settime(r6, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0xa4000065) read(r0, 0x0, 0x20) 3.463935254s ago: executing program 9 (id=3828): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000031401002abd7000fcdbdf250900020073797a300000000008004100736977001400330077673100000000000000000000000000be9297c76372b118783667ec1c60ad4458b9639cf123266fcb49d29fdb559bae395555969b08e3491e0c49493b0f37c931b3618b1063548056c038f54a7fe31ac5e3df8b5e6805dfea4c93ff8da75395a7e353e99780c8fb53270772ac7d0d65f1ce16899b9a76aaf1aadc9f3119905b639420416b3c19ada7a7afe3052aab01ac86381f0a8ed6e75162a00c06bb4fc66663226a5bd741ff45e77c2376e3fc19713ce82bee0f00f32d31c7a1fc9d987394bfc5a80bbabf23f15cc7e6bd9f7a58b066dcf16dae6f5f8f961fe45870daeb9d4439bc1b7a0447eca1cd"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) syz_usb_control_io(r2, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x20, 0xd, 0x3, "1202c8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xca762, 0x0) r5 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r5, {0xfffff07f}}, './file0\x00'}) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000180)) mount$9p_fd(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="089dd1a316fb71f8a100f6c38845dc61691ffe6dbec5e790e8892817f1cffc00ffab1483e6747df986ffba6d91de61b0e9c9f855f75fe79473905c0a87eb77859e25cab97199677c011a0542794c66a8e52d67ed8a841fe7ed53ac6453c2207d9d4e05e2da6a593ecd135a32fc941319ed07e276dd2773c9a4374a56e36bdb0b146e97bdef1bd47fb6dfcd1c1f14531c53edaebd36c3a24d33296bb7d8188246f53b55b445e113b69d3f4f139703", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',\x00']) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000001c0)={0xffffffffffffffff, 0x1, 0x9, 0xb, @vifc_lcl_addr=@remote, @empty}, 0x10) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r7 = io_uring_setup(0x1691, &(0x7f0000000400)={0x0, 0x631d, 0x2, 0x2, 0x2d9}) io_uring_register$IORING_REGISTER_BUFFERS2(r7, 0xf, &(0x7f0000002700)={0x1, 0x0, 0x2000000, &(0x7f0000000200)=[{0x0}], 0x0}, 0x20) ioctl$FS_IOC_ENABLE_VERITY(r7, 0x40806685, &(0x7f0000000600)={0x1, 0x2, 0x1000, 0xcf, &(0x7f0000000500)="457411ad5051e1301c0ddeb0a03e81fa6db7d5fc95c6e2304b749dfd631c572ef464fe1323c612bec76adfaf3b3e2b9b549f411f7211986fa05f3f437f6df0efba7a6f69e3dcc131e3d9d843354eec35a04eebaa20b83b26cfd86588ab3884af34b04551b31220bef386563a24538ee177f541dd6f7e848d6c0f652cea2eab6e898bdea52c93b6cc0c57d6d074216b1cd69c5732d4bb4fd7860a346713473baf6374cc2c1e3f99ccc81504040257dab6b860c4f0014b883616c88cd46b8e0c7226a6576128f18ba09b5934b03c88dd", 0x34, 0x0, &(0x7f0000000400)="1e241d4de6c778d8a042f2caf2c86d2a87f349fd83fe0bbb2714a7eefc8077ac73586c8061df21290286757986027b0f2672d0fe"}) syz_usb_connect(0x5, 0x4a, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x9a, 0xe8, 0xc9, 0x40, 0x979, 0x227, 0x6f50, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x38, 0x1, 0x6, 0x7, 0x50, 0xe, [{{0x9, 0x4, 0xe, 0xda, 0x1, 0x29, 0x1, 0x91, 0x5, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x4d}, {0xd, 0x24, 0xf, 0x1, 0xffffff96, 0x7, 0xffe6, 0x3}, {0x6, 0x24, 0x1a, 0x2, 0x1b}}], [{{0x9, 0x5, 0x3, 0x0, 0x400, 0x2, 0xc, 0x2}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) 2.848995065s ago: executing program 4 (id=3829): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04344304000000e2ce"], 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)) write$nci(r1, &(0x7f0000000340)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x6, @f={0x4, 0x4, 0x2, 0x80, {0x9, 0x1, '/'}, 0x1}}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x100010, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000040), 0x10, 0x408040) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f0000000100)={0x1f, 0xe2, &(0x7f0000000240)="edcedb0e8d291f2f6bcc2c40883343f0ea498558c7142ef6c03139351422393f1581dc844d672f72d32de68ca062f92fb54ce53a9ee156a74e14421a13778c14ee2f1332c78b3de8645e5dc872ab99bb6e91b954c36ef3663b1359d1edd23019f4ec8627dcc704b44e8f4f3afdcdbbf229856e8224a86fc0269a0db6dc357ac97a0250b2debea4c9119b0f8404fde72de046e443edbcaf27cb619baf66a2dbc527b3dc23488465d804660447808414a2b9dac52fc07a3488a1da3332f65b2f94bf8b84e03ecb97f36b8be8ab9836801326cf507a23d271a3ed8d317c2b9fc8741704"}) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0xf, r5, 0x2, 0x0) 2.628921015s ago: executing program 1 (id=3830): setresuid(0xee00, 0xee01, 0x0) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) (async) r0 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0xa930, 0x20}, 0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f00000005c0), 0x0, &(0x7f0000000140)) (async) syz_io_uring_submit(0x0, r1, 0x0) (async) io_uring_enter(r0, 0x48e9, 0x0, 0x0, 0x0, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001b00)=""/102392, 0x18ff8) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmallocinfo\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4044088) r3 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 32) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) (rerun: 32) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="d8000000180081084e81f782db44b904021d080006007c06e8fe55a10a0015400600142603600e120800060000000201a80016000800014003e01100036010fab94dcf5c0461c1d67f6f9400e08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef409001b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffec62070000cbee5de6ccd44a677575a62cef352a92954b43370e9701ee1b6ed95a526c5d5b5701cf8773", 0xd8}], 0x1}, 0x400c0) (async) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) (async) sendmmsg$inet(r4, 0x0, 0x0, 0x400c0) (async) mmap(&(0x7f00000ff000/0x3000)=nil, 0x3000, 0x27fffff, 0x1010, r3, 0x7aa0000) (async, rerun: 64) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) 1.744885482s ago: executing program 4 (id=3831): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000029c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r2}, 0x10) setrlimit(0x2, &(0x7f00000000c0)={0x2000000, 0xffffffffffffffff}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x20000) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x98, 0xf4, 0xbf, 0x20, 0x2c42, 0x16f8, 0x7d12, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x58, 0x0, 0x1, 0x6f, 0xe4, 0x14, 0x0, [], [{{0x9, 0x5, 0x1a, 0x0, 0x40, 0x0, 0x0, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) 1.021226231s ago: executing program 4 (id=3832): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x4101c1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000440000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000500)="670fb29a0c003664f30fd6e20f09b9800000c00f3235010000000f30b9800000c00f3235002000000f300f21fb0fc75b0036d8fb660f3880affbd70000660f73fde4", 0x42}], 0x1, 0x40, &(0x7f00000005c0), 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000100)={"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"}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000105082, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f00000005c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$BLKGETSIZE(r4, 0x1260, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[]) 848.01559ms ago: executing program 0 (id=3833): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 64) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a3000000100090003"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000440)={0x8, 0x101, "f5b6c71a2cc86722169ec4e378627bcce5dca27dc6108fc04ddac7b7e2455017", 0x1, 0x7, 0x1, 0x83, 0x2}) (async) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) (async) mkdirat(r6, 0x0, 0x0) (async) ioctl$VIDIOC_S_OUTPUT(r6, 0xc004562f, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000180)={0x1, 0x0, [{0x1, 0x6, 0x4, 0x80, 0x2, 0x1}]}) (async, rerun: 32) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (rerun: 32) dup(0xffffffffffffffff) (async) sendmsg$NFT_BATCH(r3, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0xfffa, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat6\x00') (async) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="7c72618a733d66642c7266646e6f3d", @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',\x00']) 724.829475ms ago: executing program 4 (id=3834): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0xa31, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x1c, 0x0, 0x7}}}}}]}}]}}, 0x0) 521.07998ms ago: executing program 9 (id=3835): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async, rerun: 64) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir_off}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}) (async) chdir(&(0x7f00000003c0)='./bus\x00') r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) (rerun: 64) gettid() (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1, 0x0, 0x1}, 0x3c) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000640), 0x800) (rerun: 64) read$qrtrtun(r5, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) (async) r6 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) (async, rerun: 64) read$FUSE(r6, 0x0, 0x0) (rerun: 64) syz_usb_connect(0x2, 0x0, 0x0, &(0x7f00000005c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x7, 0x9, 0xb2, 0x40, 0x4}, 0x0, 0x0}) (async) write$FUSE_INIT(r6, 0x0, 0x0) 315.355307ms ago: executing program 2 (id=3836): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x15, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0x98, &(0x7f00000001c0)=""/152, 0x40f00}, 0x94) 179.11919ms ago: executing program 9 (id=3837): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="120100006e383a10d00701415cec0102030109022400010000000009042300020070400009058a03080004030e09050e03"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) set_mempolicy(0x4003, &(0x7f0000000200)=0x7, 0x3) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000200)=@ethtool_ringparam={0x10, 0x80000001, 0x3, 0x1, 0xd, 0xefe, 0x0, 0x0, 0x8}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0xb56dc9c414bdb899, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r3, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000002180)="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", 0x23f}], 0x1}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0xde) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 4.837162ms ago: executing program 2 (id=3838): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000001010002198008040100040a00"/36], 0x24}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000001010002198008040100040a00"/36], 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80014000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x100, 0x70bd25, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8084}, 0x80005) (async) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80014000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x100, 0x70bd25, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8084}, 0x80005) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x800) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001800)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='rcu_utilization\x00', r5}, 0x18) r6 = gettid() r7 = dup(0xffffffffffffffff) syz_io_uring_setup(0xc0f, &(0x7f00000000c0)={0x0, 0x6efd, 0x8, 0x0, 0x1d}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r7, 0x0, 0x0, 0x0, 0x80000}) ioctl$MON_IOCH_MFLUSH(r7, 0x9208, 0x8001) (async) ioctl$MON_IOCH_MFLUSH(r7, 0x9208, 0x8001) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r10, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r10, 0x4040534e, &(0x7f0000000340)={0x31, @time={0x7fffffff, 0x1ff}, 0x0, {0xfd, 0x8}, 0xfe, 0x2, 0x4}) (async) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r10, 0x4040534e, &(0x7f0000000340)={0x31, @time={0x7fffffff, 0x1ff}, 0x0, {0xfd, 0x8}, 0xfe, 0x2, 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r10, 0xc0bc5310, &(0x7f0000000040)={0x87, @time={0xbc, 0x7}, 0x0, {0x71, 0x6}, 0x6, 0x0, 0x1}) tkill(r6, 0x7) r11 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000000010ac05418200000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r11, 0x0, 0x0) syz_usb_control_io(r11, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x4000) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000300)=0x6) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x394c}, 0x1, 0x0, 0x0, 0x4c088}, 0x8001) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2, r12}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2, r12}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 0s ago: executing program 4 (id=3839): r0 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x980001, 0x3}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x820000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setxattr$incfs_id(0x0, &(0x7f0000000100), &(0x7f0000000140)={'0000000000000000000000000000000', 0x33}, 0x20, 0x3) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000006, 0x28011, 0xffffffffffffffff, 0x2f12a000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x5) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000500)="b5ea1ae575799c2f5973dceee7cd1324ced48e85d91db3627085645ead0f8ad0668e92f38525d92d1da754ea0c2c57b5039f62348cf8fe126a6bcff023fa56de33de0bea2e7644f9d39c9320499715b144ad0a59a5d15be246e32268a8c254c5a0c8a2bcfb13919b3b76364e09be6d3ceaff5ac1686ef49fea2225c2ddf84c5d5799153f709a2293f5041fe5048e52ab56af087e6f168a2a138d8fed388c9df484a51b80cb3ff1085f17a8c456930645e8c349e0d2d2e019d29676a518e1917a2a0677cd966127969ad99dd9dccef1bbbf517c3895294ac38e"}, {&(0x7f0000000600)="b73743a1862304fc9dbc7d7ff4e2e6ab587e23caa82937a183e66c9ac8f07f6e2bf35c8e99a4c9fe62b0ca8d098055d0f80f6e1aa7567ffb0a7d14dbded96a4fd27932fdf893e5c474d906916e9c3a"}], 0x6) write(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x66, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x5) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x7e) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x338, 0xffffffff, 0x98, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'rose0\x00', 'wg2\x00'}, 0xa00, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'snmp\x00'}}]}, @REJECT={0x28}}, {{@ip={@remote, @dev, 0x0, 0x0, 'batadv_slave_0\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@socket1={{0x28}}, @common=@addrtype={{0x30}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f0000000400)={@none, 0xffffff27, 0xfa, 0x75, 0x7f, 0xfffd, "b3b0f7ff1415cb451d92aca715527c2f9de12ea430c7e380e515917496f7bd70cb3f79452086899243a691af53b05228e6a60daa3952ea279cdcb15c793c7a1990b818f0c6f60dbd12f157c543a1241bac2f247a488f24b2136a373fa1307915bc21b5d062517afda385ed2f57daf95ec2c2cde18de700000000000095605a6b"}) ioctl$KVM_HYPERV_EVENTFD(r2, 0xc048aec8, &(0x7f00000000c0)={0x4, 0xffffffffffffffff, 0xff7ffffe}) syslog(0x3, &(0x7f0000000300)=""/132, 0x84) socket$netlink(0x10, 0x3, 0x1) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000), 0xe) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) socket$netlink(0x10, 0x3, 0x4) kernel console output (not intermixed with test programs): e USB device [ 1425.184253][T11568] usb usb7-port1: unable to enumerate USB device [ 1425.210654][ T5973] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1425.231060][ T5973] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1425.246826][ T5973] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1425.257611][ T5973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1425.265891][ T5973] usb 5-1: SerialNumber: syz [ 1425.277710][ T5973] cdc_acm 5-1:1.0: skipping garbage [ 1425.296331][ T5973] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 1425.306170][ T5973] cdc_acm 5-1:1.0: This needs exactly 3 endpoints [ 1425.312820][ T5973] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 1425.361623][T18112] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3102'. [ 1425.406976][T18112] mkiss: ax0: crc mode is auto. [ 1425.551418][ T6009] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1425.581574][ T5973] usb 5-1: USB disconnect, device number 42 [ 1425.597874][T18117] 9pnet: Could not find request transport: f.]~gp䧊DTr7ُؗ˧$ ӯf00000000000000000000000 [ 1425.748275][ T6009] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1425.845183][T18117] 9pnet: Could not find request transport: f.]~gp䧊DTr7ُؗ˧$ ӯf00000000000000000000000 [ 1425.852198][ T6009] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1425.878048][ T6009] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1425.888217][ T6009] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1426.118256][T18110] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1426.156858][ T6009] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1426.325894][T18125] lo: entered promiscuous mode [ 1426.360572][T18125] lo: entered allmulticast mode [ 1426.651692][T18122] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1426.673097][T18122] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1426.684417][T18122] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1426.703635][T18122] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1426.847965][T18122] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1426.859886][T18122] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1426.915436][T18122] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1426.928481][T18122] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1427.015899][T18122] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1427.081928][T18130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1427.091573][T18130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1427.369441][T12653] usb 3-1: USB disconnect, device number 48 [ 1428.569793][ T6001] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1428.590106][T12722] Bluetooth: hci1: command 0x0406 tx timeout [ 1428.711963][T12722] Bluetooth: hci2: command 0x0405 tx timeout [ 1428.786449][ T6001] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1428.870893][T12722] Bluetooth: hci5: command 0x0406 tx timeout [ 1428.903705][ T6001] usb 7-1: can't read configurations, error -61 [ 1428.954339][T12722] Bluetooth: hci3: command 0x0c1a tx timeout [ 1429.292534][ T6001] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 1429.460864][T16536] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 1429.464089][ T6001] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1429.477576][ T6001] usb 7-1: can't read configurations, error -61 [ 1429.484039][ T44] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 1429.492447][ T6001] usb usb7-port1: attempt power cycle [ 1429.610697][ T5973] usb 10-1: new full-speed USB device number 23 using dummy_hcd [ 1429.630617][T16536] usb 8-1: Using ep0 maxpacket: 16 [ 1429.636676][T16536] usb 8-1: too many configurations: 29, using maximum allowed: 8 [ 1429.652908][ T44] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1429.663581][ T44] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1429.667901][T16536] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1429.678316][ T44] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1429.696338][T16536] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1429.697385][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1429.704834][T16536] usb 8-1: Product: syz [ 1429.717498][T16536] usb 8-1: Manufacturer: syz [ 1429.717962][ T44] usb 5-1: SerialNumber: syz [ 1429.722333][T16536] usb 8-1: SerialNumber: syz [ 1429.734426][ T44] cdc_acm 5-1:1.0: skipping garbage [ 1429.737477][T16536] r8152-cfgselector 8-1: Unknown version 0x0000 [ 1429.739997][ T44] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 1429.746191][T16536] r8152-cfgselector 8-1: config 0 descriptor?? [ 1429.763820][ T44] cdc_acm 5-1:1.0: This needs exactly 3 endpoints [ 1429.770334][ T44] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 1429.781032][ T5973] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1429.792382][ T5973] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1429.806460][ T5973] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1429.816045][ T5973] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1429.824386][ T5973] usb 10-1: Product: syz [ 1429.829033][ T5973] usb 10-1: Manufacturer: syz [ 1429.833926][ T5973] usb 10-1: SerialNumber: syz [ 1429.840714][ T6001] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 1429.876581][ T6001] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1429.884635][ T6001] usb 7-1: can't read configurations, error -61 [ 1429.948951][ T44] usb 5-1: USB disconnect, device number 43 [ 1430.030669][ T6001] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1430.052952][T18185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1430.062491][T18185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1430.078082][ T6001] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1430.087320][ T6001] usb 7-1: can't read configurations, error -61 [ 1430.097865][T18185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1430.106954][T18185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1430.121219][ T6001] usb usb7-port1: unable to enumerate USB device [ 1430.122162][ T5973] usb 10-1: skipping empty audio interface (v1) [ 1430.148208][ T5973] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1430.159399][ T5973] usb 10-1: USB disconnect, device number 23 [ 1430.630997][T16919] Bluetooth: hci1: command 0x0406 tx timeout [ 1430.791059][T16919] Bluetooth: hci2: command 0x0405 tx timeout [ 1430.951429][T16919] Bluetooth: hci5: command 0x0406 tx timeout [ 1430.962245][ T5973] usb 10-1: new full-speed USB device number 24 using dummy_hcd [ 1431.031024][T16919] Bluetooth: hci3: command 0x0c1a tx timeout [ 1431.795867][ T5973] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1431.906166][ T5973] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1431.915303][ T5973] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1431.924627][ T5973] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1431.935667][ T5973] usb 10-1: config 0 descriptor?? [ 1431.944871][ T5973] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1431.951654][ T5973] dvb-usb: bulk message failed: -22 (3/0) [ 1431.961191][ T5973] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1431.970566][ T5973] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1431.983660][ T5973] usb 10-1: media controller created [ 1431.993440][ T5973] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1432.007995][ T5973] dvb-usb: bulk message failed: -22 (6/0) [ 1432.014936][ T5973] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1432.026525][ T5973] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input46 [ 1432.039890][ T5973] dvb-usb: schedule remote query interval to 150 msecs. [ 1432.047143][ T5973] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1432.087904][T18201] binder: 18200:18201 unknown command 0 [ 1432.112717][T18201] binder: 18200:18201 ioctl c0306201 200000000080 returned -22 [ 1432.132881][T18201] binder: BINDER_SET_CONTEXT_MGR already set [ 1432.138961][T18201] binder: 18200:18201 ioctl 4018620d 200000000040 returned -16 [ 1432.204489][T11568] dvb-usb: bulk message failed: -22 (1/0) [ 1432.220632][T11568] dvb-usb: error while querying for an remote control event. [ 1432.261640][T11568] r8152-cfgselector 8-1: USB disconnect, device number 44 [ 1432.504952][T16536] dvb-usb: bulk message failed: -22 (1/0) [ 1432.511093][T16536] dvb-usb: error while querying for an remote control event. [ 1433.119557][ T6009] usb 10-1: USB disconnect, device number 24 [ 1433.203675][T16919] Bluetooth: hci3: command 0x0c1a tx timeout [ 1433.388368][ T6009] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1433.639302][T18236] input: syz1 as /devices/virtual/input/input47 [ 1434.138404][T18244] openvswitch: netlink: Message has 8 unknown bytes. [ 1436.397978][T18259] netlink: 'syz.6.3138': attribute type 1 has an invalid length. [ 1437.179494][T18269] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3139'. [ 1437.885095][T18237] syz.2.3132: vmalloc error: size 566231040, failed to allocated page array size 1105920, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1437.939131][T18237] CPU: 0 UID: 0 PID: 18237 Comm: syz.2.3132 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1437.939166][T18237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1437.939182][T18237] Call Trace: [ 1437.939193][T18237] [ 1437.939206][T18237] dump_stack_lvl+0x189/0x250 [ 1437.939242][T18237] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1437.939270][T18237] ? __pfx__printk+0x10/0x10 [ 1437.939302][T18237] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1437.939333][T18237] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1437.939371][T18237] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1437.939404][T18237] warn_alloc+0x214/0x310 [ 1437.939440][T18237] ? __pfx_warn_alloc+0x10/0x10 [ 1437.939478][T18237] ? __get_vm_area_node+0x28f/0x300 [ 1437.939505][T18237] ? vb2_vmalloc_alloc+0xef/0x340 [ 1437.939545][T18237] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 1437.939606][T18237] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1437.939640][T18237] ? __kasan_kmalloc+0x93/0xb0 [ 1437.939668][T18237] vmalloc_user_noprof+0xad/0xf0 [ 1437.939694][T18237] ? vb2_vmalloc_alloc+0xef/0x340 [ 1437.939731][T18237] vb2_vmalloc_alloc+0xef/0x340 [ 1437.939766][T18237] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 1437.939802][T18237] __vb2_queue_alloc+0x9c2/0x15a0 [ 1437.939865][T18237] vb2_core_reqbufs+0xc31/0x1420 [ 1437.939896][T18237] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1437.939946][T18237] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 1437.939990][T18237] ? vb2_verify_memory_type+0x1fc/0x570 [ 1437.940026][T18237] vb2_ioctl_reqbufs+0x4c0/0x830 [ 1437.940075][T18237] __video_do_ioctl+0xc9b/0xdb0 [ 1437.940123][T18237] ? __pfx___video_do_ioctl+0x10/0x10 [ 1437.940177][T18237] video_usercopy+0x871/0x14f0 [ 1437.940225][T18237] ? __pfx___video_do_ioctl+0x10/0x10 [ 1437.940261][T18237] ? __pfx_video_usercopy+0x10/0x10 [ 1437.940294][T18237] ? smack_file_ioctl+0x2a9/0x340 [ 1437.940336][T18237] ? __fget_files+0x2a/0x420 [ 1437.940367][T18237] ? __fget_files+0x3a0/0x420 [ 1437.940399][T18237] v4l2_ioctl+0x18a/0x1e0 [ 1437.940438][T18237] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1437.940468][T18237] __se_sys_ioctl+0xfc/0x170 [ 1437.940506][T18237] do_syscall_64+0xfa/0x3b0 [ 1437.940531][T18237] ? lockdep_hardirqs_on+0x9c/0x150 [ 1437.940555][T18237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1437.940578][T18237] ? clear_bhb_loop+0x60/0xb0 [ 1437.940606][T18237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1437.940630][T18237] RIP: 0033:0x7fc51798ebe9 [ 1437.940650][T18237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1437.940670][T18237] RSP: 002b:00007fc518737038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1437.940693][T18237] RAX: ffffffffffffffda RBX: 00007fc517bb6090 RCX: 00007fc51798ebe9 [ 1437.940711][T18237] RDX: 00002000000000c0 RSI: 00000000c0145608 RDI: 0000000000000003 [ 1437.940727][T18237] RBP: 00007fc517a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1437.940741][T18237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1437.940756][T18237] R13: 00007fc517bb6128 R14: 00007fc517bb6090 R15: 00007fffc4daaca8 [ 1437.940791][T18237] [ 1438.337621][T18237] Mem-Info: [ 1438.360017][T18237] active_anon:3147 inactive_anon:7729 isolated_anon:0 [ 1438.360017][T18237] active_file:22133 inactive_file:38438 isolated_file:0 [ 1438.360017][T18237] unevictable:798 dirty:141 writeback:0 [ 1438.360017][T18237] slab_reclaimable:11529 slab_unreclaimable:101509 [ 1438.360017][T18237] mapped:41068 shmem:8158 pagetables:1222 [ 1438.360017][T18237] sec_pagetables:0 bounce:0 [ 1438.360017][T18237] kernel_misc_reclaimable:0 [ 1438.360017][T18237] free:1255001 free_pcp:23301 free_cma:0 [ 1438.629444][T18237] Node 0 active_anon:12588kB inactive_anon:43516kB active_file:88328kB inactive_file:153752kB unevictable:1656kB isolated(anon):0kB isolated(file):0kB mapped:176772kB dirty:564kB writeback:0kB shmem:43596kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12032kB pagetables:4684kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1438.730903][T18237] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:204kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1438.846953][T18237] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1438.960733][T18237] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 1438.966617][T18237] Node 0 DMA32 free:1104496kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16684kB inactive_anon:36604kB active_file:86564kB inactive_file:153684kB unevictable:1656kB writepending:584kB present:3129332kB managed:2560996kB mlocked:120kB bounce:0kB free_pcp:58984kB local_pcp:34192kB free_cma:0kB [ 1439.123657][T18237] lowmem_reserve[]: 0 0 1 1 1 [ 1439.128480][T18237] Node 0 Normal free:8kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1764kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 1439.216657][T18237] lowmem_reserve[]: 0 0 0 0 0 [ 1439.236755][T18237] Node 1 Normal free:3900084kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:23584kB local_pcp:8992kB free_cma:0kB [ 1439.268277][ T6001] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 1439.358768][T18237] lowmem_reserve[]: 0 0 0 0 0 [ 1439.371086][T18237] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1439.428358][T18237] Node 0 DMA32: 8*4kB (ME) 38*8kB (UME) 359*16kB (ME) 94*32kB (UME) 472*64kB (UME) 113*128kB (UME) 78*256kB (UME) 166*512kB (UM) 111*1024kB (UM) 20*2048kB (UM) 194*4096kB (UM) = 1107968kB [ 1439.483444][T18237] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1439.514101][T18237] Node 1 Normal: 233*4kB (UE) 60*8kB (UME) 53*16kB (UME) 147*32kB (UME) 52*64kB (UME) 7*128kB (UME) 11*256kB (UME) 6*512kB (UM) 6*1024kB (UME) 3*2048kB (UE) 945*4096kB (UM) = 3900084kB [ 1439.570541][ T6001] usb 8-1: Using ep0 maxpacket: 8 [ 1439.578680][ T6001] usb 8-1: config 49 has an invalid interface number: 141 but max is 2 [ 1439.579915][T18237] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1439.587073][ T6001] usb 8-1: config 49 has an invalid interface number: 78 but max is 2 [ 1439.587116][ T6001] usb 8-1: config 49 has an invalid interface number: 57 but max is 2 [ 1439.587143][ T6001] usb 8-1: config 49 has no interface number 0 [ 1439.587164][ T6001] usb 8-1: config 49 has no interface number 1 [ 1439.587184][ T6001] usb 8-1: config 49 has no interface number 2 [ 1439.587250][ T6001] usb 8-1: config 49 interface 141 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1439.587275][ T6001] usb 8-1: config 49 interface 141 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1439.587311][ T6001] usb 8-1: config 49 interface 78 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 1439.638043][T18237] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1439.775767][T18298] Bluetooth: hci4: Frame reassembly failed (-84) [ 1439.875824][T18237] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1439.943550][T18080] Bluetooth: hci4: Frame reassembly failed (-84) [ 1440.010767][T18237] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1440.099510][ T6001] usb 8-1: config 49 interface 78 altsetting 5 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 1440.253429][T18299] netlink: 'syz.4.3148': attribute type 10 has an invalid length. [ 1440.262202][T18237] 71608 total pagecache pages [ 1440.267008][T18237] 1 pages in swap cache [ 1440.304853][T18237] Free swap = 124992kB [ 1440.309176][T18237] Total swap = 124996kB [ 1440.323986][T18299] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3148'. [ 1440.323983][ T6001] usb 8-1: config 49 interface 78 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 1440.344481][T18299] team0: entered promiscuous mode [ 1440.352507][T18299] team_slave_0: entered promiscuous mode [ 1440.358590][T18299] team_slave_1: entered promiscuous mode [ 1440.365145][T18299] team0: entered allmulticast mode [ 1440.370761][T18299] team_slave_0: entered allmulticast mode [ 1440.376947][T18299] team_slave_1: entered allmulticast mode [ 1440.377082][T18237] 2097051 pages RAM [ 1440.386857][T18237] 0 pages HighMem/MovableOnly [ 1440.392130][T18237] 424695 pages reserved [ 1440.396413][T18237] 0 pages cma reserved [ 1440.416392][ T6001] usb 8-1: config 49 interface 78 altsetting 5 bulk endpoint 0x7 has invalid maxpacket 1023 [ 1440.431593][T18299] bridge0: port 3(team0) entered blocking state [ 1440.449215][ T6001] usb 8-1: config 49 interface 78 altsetting 5 has a duplicate endpoint with address 0x3, skipping [ 1440.468201][T18299] bridge0: port 3(team0) entered disabled state [ 1440.481760][T18299] bridge0: port 3(team0) entered blocking state [ 1440.488251][T18299] bridge0: port 3(team0) entered forwarding state [ 1440.510586][ T6001] usb 8-1: config 49 interface 78 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 1440.560725][ T6001] usb 8-1: config 49 interface 57 altsetting 6 has a duplicate endpoint with address 0x7, skipping [ 1440.590665][ T6001] usb 8-1: config 49 interface 57 altsetting 6 endpoint 0x1 has invalid maxpacket 1007, setting to 64 [ 1440.610537][ T6001] usb 8-1: config 49 interface 57 altsetting 6 has a duplicate endpoint with address 0x7, skipping [ 1440.633132][ T6001] usb 8-1: config 49 interface 57 altsetting 6 has a duplicate endpoint with address 0x3, skipping [ 1440.644116][ T6001] usb 8-1: config 49 interface 57 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1440.655304][ T6001] usb 8-1: config 49 interface 57 altsetting 6 endpoint 0xE has an invalid bInterval 126, changing to 7 [ 1440.667792][ T6001] usb 8-1: config 49 interface 57 altsetting 6 endpoint 0xC has invalid wMaxPacketSize 0 [ 1440.679272][ T6001] usb 8-1: config 49 interface 57 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 1440.698271][ T6001] usb 8-1: config 49 interface 57 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 1440.736105][ T6001] usb 8-1: config 49 interface 141 has no altsetting 0 [ 1440.744081][ T6001] usb 8-1: config 49 interface 78 has no altsetting 0 [ 1440.751548][ T6001] usb 8-1: config 49 interface 57 has no altsetting 0 [ 1440.773201][ T6001] usb 8-1: New USB device found, idVendor=093b, idProduct=a102, bcdDevice= 0.01 [ 1440.786643][ T6001] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.811138][ T6001] usb 8-1: Product: syz [ 1440.815405][ T6001] usb 8-1: Manufacturer: 쿻侯Ἠ㜌ᅌㆧ툵툣叧㝀浉쫕홖梷㾋皐ᶒ⨨ꀏ鴋咲퓡␻⪵ǫ訷庈璘䧡䥪믬ᮡ䊥ᡔ쳺ꜧ㡵뉣䊲⦓뗖澬屑匣쒜⩖祤辋潓嘵戛ᛐ螻앫廋㵅톒ꎑ㒜컮圚硈卄傼宁떤烓襈⸜챚뒼떬ৡ鰹 [ 1440.914912][ T6001] usb 8-1: SerialNumber: syz [ 1441.006488][T18309] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3151'. [ 1441.379991][ T6001] go7007 8-1:49.141: Direct firmware load for go7007/go7007fw.bin failed with error -2 [ 1441.420542][ T6001] go7007 8-1:49.141: Falling back to sysfs fallback for: go7007/go7007fw.bin [ 1441.636205][T18317] netlink: 888 bytes leftover after parsing attributes in process `syz.2.3153'. [ 1441.664152][T18320] Smack: duplicate mount options [ 1441.910696][T16919] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 1441.960805][T16536] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1442.210725][T16536] usb 3-1: Using ep0 maxpacket: 16 [ 1442.625273][T16536] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1442.661431][T16536] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1442.673274][T16536] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1442.689604][T16536] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1443.064216][T16536] usb 3-1: Product: syz [ 1443.071105][T16536] usb 3-1: Manufacturer: syz [ 1443.076999][T16536] usb 3-1: SerialNumber: syz [ 1444.008694][T16536] usb 3-1: 0:2 : does not exist [ 1444.038405][T16536] usb 3-1: USB disconnect, device number 49 [ 1445.113308][T16536] usb 5-1: new low-speed USB device number 44 using dummy_hcd [ 1445.211939][ T6009] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1445.398212][ T6009] usb 7-1: config 0 has an invalid interface number: 30 but max is 0 [ 1445.408401][ T6009] usb 7-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1445.506289][T16536] usb 5-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 1445.517571][T16536] usb 5-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 1445.526758][T16536] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1445.546388][T16536] usb 5-1: probing VID:PID(2201:012C) [ 1445.815900][T18382] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3169'. [ 1445.865086][ T6009] usb 7-1: config 0 has no interface number 0 [ 1445.871601][ T6009] usb 7-1: config 0 interface 30 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1445.940265][ T6009] usb 7-1: config 0 interface 30 has no altsetting 0 [ 1445.982353][ T44] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1446.012241][ T6009] usb 7-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=74.47 [ 1446.022141][T16536] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 1446.036902][ T6009] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1446.056400][T16536] vub300 5-1:64.0: probe with driver vub300 failed with error -22 [ 1446.066782][ T6009] usb 7-1: config 0 descriptor?? [ 1446.071323][T16536] usb 5-1: USB disconnect, device number 44 [ 1446.086670][ T6009] usb 7-1: unknown interface protocol 0x41, assuming v1 [ 1446.094970][ T6009] usb 7-1: 30:2 : does not exist [ 1446.172713][ T44] usb 10-1: config index 0 descriptor too short (expected 39, got 27) [ 1446.207518][ T44] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1446.258477][ T44] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1446.291902][ T44] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1446.310578][ T6009] usb 7-1: USB disconnect, device number 59 [ 1446.327277][ T44] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1446.409973][ T44] usb 10-1: Product: syz [ 1446.431726][ T44] usb 10-1: Manufacturer: syz [ 1446.439862][ T44] usb 10-1: SerialNumber: syz [ 1446.460058][ T44] usb 10-1: config 0 descriptor?? [ 1446.468702][ T44] hub 10-1:0.0: bad descriptor, ignoring hub [ 1446.475266][ T44] hub 10-1:0.0: probe with driver hub failed with error -5 [ 1446.488092][ T44] usb 10-1: selecting invalid altsetting 0 [ 1446.687295][T18392] syzkaller1: entered promiscuous mode [ 1446.699341][T18392] syzkaller1: entered allmulticast mode [ 1447.001271][ T44] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1448.020652][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 1448.049036][ T44] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1448.114539][T18376] usb 10-1: reset high-speed USB device number 25 using dummy_hcd [ 1448.137744][ T44] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1448.253087][ T44] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1448.362119][ T44] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1448.383927][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1448.400083][ T44] usb 5-1: Product: syz [ 1448.423155][ T44] usb 5-1: Manufacturer: syz [ 1448.441427][ T44] usb 5-1: SerialNumber: syz [ 1448.812416][ T44] usb 5-1: USB disconnect, device number 45 [ 1448.930641][ T30] audit: type=1326 audit(1755942693.623:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18419 comm="syz.2.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc51798ebe9 code=0x7ffc0000 [ 1449.009651][ T30] audit: type=1326 audit(1755942693.633:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18419 comm="syz.2.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc51798ebe9 code=0x7ffc0000 [ 1449.070710][ T30] audit: type=1326 audit(1755942693.633:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18419 comm="syz.2.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc51798ebe9 code=0x7ffc0000 [ 1449.143928][ T30] audit: type=1326 audit(1755942693.633:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18419 comm="syz.2.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc51798ebe9 code=0x7ffc0000 [ 1449.200634][ T30] audit: type=1326 audit(1755942693.633:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18419 comm="syz.2.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc51798ebe9 code=0x7ffc0000 [ 1449.251239][ T30] audit: type=1326 audit(1755942693.633:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18419 comm="syz.2.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc51798ebe9 code=0x7ffc0000 [ 1449.348042][ T30] audit: type=1326 audit(1755942693.633:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18419 comm="syz.2.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc51798ebe9 code=0x7ffc0000 [ 1449.390878][ T44] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1449.395764][ T30] audit: type=1326 audit(1755942693.633:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18419 comm="syz.2.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc51798ebe9 code=0x7ffc0000 [ 1449.427538][ T30] audit: type=1326 audit(1755942693.633:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18419 comm="syz.2.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc51798ebe9 code=0x7ffc0000 [ 1449.479389][ T30] audit: type=1326 audit(1755942693.633:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18419 comm="syz.2.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc51798ebe9 code=0x7ffc0000 [ 1449.600735][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 1449.615386][ T44] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1449.637013][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1449.667492][ T44] usb 3-1: Product: syz [ 1449.682760][ T44] usb 3-1: Manufacturer: syz [ 1449.687473][ T44] usb 3-1: SerialNumber: syz [ 1449.707780][ T44] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1449.714208][ T44] r8152-cfgselector 3-1: config 0 descriptor?? [ 1449.790717][T12653] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1449.980750][T12653] usb 5-1: Using ep0 maxpacket: 8 [ 1450.004377][T12653] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 1450.024252][T12653] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.044560][T12653] usb 5-1: Product: syz [ 1450.048856][T12653] usb 5-1: Manufacturer: syz [ 1450.063965][T12653] usb 5-1: SerialNumber: syz [ 1450.092559][T12653] usb 5-1: config 0 descriptor?? [ 1450.128642][T12653] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244) [ 1450.146530][ T5959] r8152-cfgselector 3-1: USB disconnect, device number 50 [ 1450.314266][T18433] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3186'. [ 1451.024537][T12653] radio-usb-si4713 5-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 1451.052292][T12653] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1451.078261][T12653] usb 5-1: USB disconnect, device number 46 [ 1452.277601][T18470] afs: Unknown parameter 'fyn' [ 1452.286362][T18469] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3193'. [ 1452.440861][T12653] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 1452.641545][T12653] usb 5-1: device descriptor read/64, error -71 [ 1452.932642][T12653] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 1453.140764][T12653] usb 5-1: device descriptor read/64, error -71 [ 1453.521106][T18376] usb 10-1: device descriptor read/all, error -110 [ 1453.671775][T18376] usb 10-1: reset high-speed USB device number 25 using dummy_hcd [ 1453.810012][T18489] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1453.819771][T18489] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1453.820727][T18376] usb 10-1: device descriptor read/64, error -32 [ 1453.830413][T12653] usb usb5-port1: attempt power cycle [ 1454.193497][T18376] usb 10-1: reset high-speed USB device number 25 using dummy_hcd [ 1454.238728][T18376] usb 10-1: device descriptor read/8, error -32 [ 1454.366084][T12653] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 1454.441323][T12653] usb 5-1: device descriptor read/8, error -71 [ 1454.465390][ T44] kernel write not supported for file /cpu/0/msr (pid: 44 comm: kworker/1:1) [ 1454.500733][T18376] usb 10-1: reset high-speed USB device number 25 using dummy_hcd [ 1454.534405][T18376] usb 10-1: device descriptor read/8, error -32 [ 1454.657334][ T6009] usb 10-1: USB disconnect, device number 25 [ 1454.730992][T12653] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 1454.789163][T12653] usb 5-1: device descriptor read/8, error -71 [ 1454.914903][T12653] usb usb5-port1: unable to enumerate USB device [ 1455.390679][ T6009] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1455.614827][T18527] 9pnet_fd: Insufficient options for proto=fd [ 1455.630711][ T6009] usb 10-1: Using ep0 maxpacket: 32 [ 1455.647371][ T6009] usb 10-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=66.3d [ 1455.659997][ T6009] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1455.702308][ T6009] usb 10-1: config 0 descriptor?? [ 1455.716457][ T6009] cx82310_eth 10-1:0.0: probe with driver cx82310_eth failed with error -22 [ 1455.736082][ T6009] cxacru 10-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1455.820728][T11568] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1455.918078][T16536] usb 10-1: USB disconnect, device number 26 [ 1455.972171][T11568] usb 5-1: Using ep0 maxpacket: 16 [ 1455.980607][T11568] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1455.991921][T11568] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1456.005808][T11568] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1456.010849][ T5959] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1456.015605][T11568] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1456.034604][T11568] usb 5-1: Product: syz [ 1456.038878][T11568] usb 5-1: Manufacturer: syz [ 1456.044743][T11568] usb 5-1: SerialNumber: syz [ 1456.179349][T18531] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3210'. [ 1456.204618][ T5959] usb 3-1: Using ep0 maxpacket: 16 [ 1456.212124][ T5959] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1456.223020][ T5959] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1456.232316][ T5959] usb 3-1: config 1 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1456.246223][ T5959] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1456.253007][ T5959] usb 3-1: New USB device found, idVendor=04e6, idProduct=0006, bcdDevice= 1.77 [ 1456.262361][ T5959] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.274426][T11568] usb 5-1: 0:2 : does not exist [ 1456.288510][T11568] usb 5-1: USB disconnect, device number 51 [ 1457.290738][T11568] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1457.490583][ T5959] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 1457.662869][ T5959] usb 7-1: config 0 has an invalid interface number: 57 but max is 0 [ 1457.678564][ T5959] usb 7-1: config 0 has no interface number 0 [ 1457.691612][ T5959] usb 7-1: config 0 interface 57 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1457.711930][ T5959] usb 7-1: config 0 interface 57 altsetting 0 has an endpoint descriptor with address 0x54, changing to 0x4 [ 1457.723609][ T5959] usb 7-1: config 0 interface 57 altsetting 0 endpoint 0x4 has an invalid bInterval 44, changing to 7 [ 1457.734881][ T5959] usb 7-1: config 0 interface 57 altsetting 0 endpoint 0x4 has invalid maxpacket 50877, setting to 1024 [ 1457.746231][ T5959] usb 7-1: config 0 interface 57 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1457.759738][ T5959] usb 7-1: New USB device found, idVendor=093a, idProduct=010f, bcdDevice=c6.63 [ 1457.768989][ T5959] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1457.780387][ T5959] usb 7-1: config 0 descriptor?? [ 1457.790068][ T5959] gspca_main: mr97310a-2.14.0 probing 093a:010f [ 1457.796740][ T5959] gspca_mr97310a: reg write [21] error -22 [ 1457.803689][ T5959] mr97310a 7-1:0.57: probe with driver mr97310a failed with error -22 [ 1459.883648][ T5959] usb 3-1: USB disconnect, device number 51 [ 1460.954205][T18572] sctp: [Deprecated]: syz.2.3221 (pid 18572) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1460.954205][T18572] Use struct sctp_sack_info instead [ 1461.384161][T16569] usb 10-1: new full-speed USB device number 27 using dummy_hcd [ 1462.175737][ T6009] usb 7-1: USB disconnect, device number 60 [ 1462.946798][T18590] ptrace attach of "./syz-executor exec"[16418] was attempted by " [ 1463.194271][T18589] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3225'. [ 1463.285409][ C1] vkms_vblank_simulate: vblank timer overrun [ 1463.440650][T16536] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 1463.596645][T18595] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3227'. [ 1463.610888][T16536] usb 7-1: Using ep0 maxpacket: 32 [ 1463.623605][T16536] usb 7-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1463.646936][T16536] usb 7-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 1463.660291][T16536] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1463.667202][T16536] usb 7-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 1463.693502][T16536] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1463.725927][T16536] usb 7-1: config 0 descriptor?? [ 1464.303767][T18611] Invalid source name [ 1464.845573][T16536] usbhid 7-1:0.0: can't add hid device: -71 [ 1464.852433][T16536] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1464.876985][T16536] usb 7-1: USB disconnect, device number 61 [ 1465.048784][T18624] netlink: 'syz.4.3235': attribute type 1 has an invalid length. [ 1465.106319][T18080] Bluetooth: hci4: Frame reassembly failed (-84) [ 1465.129217][T18624] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 1465.137235][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1465.137255][ T30] audit: type=1400 audit(1755942709.823:260): lsm=SMACK fn=smack_file_ioctl action=denied subject="y" object="_" requested=w pid=18625 comm="syz.2.3236" path="/dev/dri/card1" dev="devtmpfs" ino=628 [ 1467.110633][T16919] Bluetooth: hci4: command 0x1003 tx timeout [ 1467.119219][T12722] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1468.959820][T18672] xt_connbytes: Forcing CT accounting to be enabled [ 1468.971116][T18672] set match dimension is over the limit! [ 1470.519076][T18689] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1470.758884][T18689] overlayfs: overlapping lowerdir path [ 1471.166060][T18695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3255'. [ 1471.239266][T18695] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1471.946972][T18700] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1471.964037][T18700] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1472.266004][T18700] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1472.276558][T18700] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1472.449948][T18700] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1472.476372][T18700] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1472.632326][T18700] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1472.643153][T18700] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1472.711057][ T6009] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1472.868755][T18700] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1472.890781][ T6009] usb 3-1: Using ep0 maxpacket: 32 [ 1472.904641][ T6009] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1472.920979][T18700] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1472.920994][ T6009] usb 3-1: config 0 has no interface number 0 [ 1472.929241][ T6009] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1472.945845][ T6009] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1472.970707][ T6009] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.978986][T18700] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1472.988393][T18700] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1472.997357][ T6009] usb 3-1: Product: syz [ 1472.997383][ T6009] usb 3-1: Manufacturer: syz [ 1472.997401][ T6009] usb 3-1: SerialNumber: syz [ 1473.001429][ T6009] usb 3-1: config 0 descriptor?? [ 1473.028815][T18700] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1473.042949][ T6009] smsc75xx v1.0.0 [ 1473.046670][ T6009] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1473.048933][T18700] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1473.079397][ T6009] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 1473.111394][T18700] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1473.177811][T18700] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1473.720089][ T6009] usb 3-1: USB disconnect, device number 52 [ 1474.361327][T18728] cramfs: Unknown parameter 'discard' [ 1474.416518][T18730] netlink: 'syz.4.3263': attribute type 1 has an invalid length. [ 1474.602496][T18731] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3263'. [ 1474.953119][T18729] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1474.953694][T18730] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1475.142812][T18739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3265'. [ 1475.226529][T18739] netlink: 'syz.2.3265': attribute type 2 has an invalid length. [ 1475.265115][T18739] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3265'. [ 1475.356322][T18744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3266'. [ 1477.550222][T16569] usb 10-1: new full-speed USB device number 28 using dummy_hcd [ 1477.726301][T18782] tipc: Enabling of bearer rejected, failed to enable media [ 1477.737745][T18782] 9pnet_fd: Insufficient options for proto=fd [ 1477.745991][T16569] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1477.762990][T16569] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1477.779898][T16569] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1477.793713][T16569] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1477.806660][T16569] usb 10-1: SerialNumber: syz [ 1477.825198][T16569] cdc_acm 10-1:1.0: skipping garbage [ 1477.833787][T16569] cdc_acm 10-1:1.0: Control and data interfaces are not separated! [ 1477.844600][T16569] cdc_acm 10-1:1.0: This needs exactly 3 endpoints [ 1477.854084][T16569] cdc_acm 10-1:1.0: probe with driver cdc_acm failed with error -22 [ 1477.950797][T11568] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1478.070542][ T6009] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1478.241134][ T6009] usb 7-1: Using ep0 maxpacket: 32 [ 1478.271605][ T6009] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 1478.287845][ T6009] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1478.300397][ T6009] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1478.307317][ T44] usb 10-1: USB disconnect, device number 28 [ 1478.335137][ T6009] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1478.362317][ T6009] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1478.431356][ T6009] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1478.443711][ T6009] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1478.454920][ T6009] usb 7-1: Product: syz [ 1478.459324][ T6009] usb 7-1: Manufacturer: syz [ 1478.465501][ T6009] usb 7-1: SerialNumber: syz [ 1478.499221][ T6009] usb 7-1: config 0 descriptor?? [ 1478.533347][ T6009] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1478.546956][ T6009] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1478.621776][T11568] usb 3-1: Using ep0 maxpacket: 8 [ 1478.633149][T11568] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1478.651358][T11568] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1478.667047][T11568] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1478.698004][T11568] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1478.711658][T11568] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1478.725461][T11568] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1478.745635][T11568] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1478.998916][T16536] usb 7-1: USB disconnect, device number 62 [ 1479.027827][T16536] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 1479.164102][T18800] x_tables: duplicate underflow at hook 2 [ 1479.172924][T11568] usb 3-1: usb_control_msg returned -32 [ 1479.181852][T11568] usbtmc 3-1:16.0: can't read capabilities [ 1479.950726][T18820] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3284'. [ 1480.038237][T18822] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 1480.720614][T18794] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1480.737417][T18794] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1480.762367][T18794] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1480.787461][T18794] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1481.395834][ T6009] usb 3-1: USB disconnect, device number 53 [ 1481.468270][T18841] Smack: duplicate mount options [ 1481.672598][T12722] Bluetooth: hci1: command 0x0406 tx timeout [ 1481.709148][T18845] bond1: entered promiscuous mode [ 1481.729308][T18845] bond1: entered allmulticast mode [ 1481.741137][T18845] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1482.306151][T18854] cramfs: Unknown parameter 'discard' [ 1482.755425][T18861] team0: Mode changed to "loadbalance" [ 1482.800829][T12722] Bluetooth: hci3: command 0x0c1a tx timeout [ 1482.807040][T16919] Bluetooth: hci5: command 0x0406 tx timeout [ 1482.813303][T16919] Bluetooth: hci2: command 0x0405 tx timeout [ 1483.191462][T18864] sctp: [Deprecated]: syz.6.3299 (pid 18864) Use of int in max_burst socket option deprecated. [ 1483.191462][T18864] Use struct sctp_assoc_value instead [ 1483.228545][T18865] netlink: 4856 bytes leftover after parsing attributes in process `syz.2.3298'. [ 1483.326000][T18867] netlink: 256 bytes leftover after parsing attributes in process `syz.9.3300'. [ 1483.442458][T18873] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3301'. [ 1483.496041][T16919] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1483.508587][T16919] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1483.518076][T16919] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1483.527976][T16919] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1483.543253][T16919] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1483.570959][ T5959] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1483.721214][ T5959] usb 3-1: device descriptor read/64, error -71 [ 1483.980542][ T5959] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1484.121041][ T5959] usb 3-1: device descriptor read/64, error -71 [ 1484.239842][ T5959] usb usb3-port1: attempt power cycle [ 1484.626173][T18874] chnl_net:caif_netlink_parms(): no params data found [ 1484.700530][ T5959] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1484.721322][ T5959] usb 3-1: device descriptor read/8, error -71 [ 1484.847056][T18900] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3308'. [ 1484.876029][T18874] bridge0: port 1(bridge_slave_0) entered blocking state [ 1484.904793][T18874] bridge0: port 1(bridge_slave_0) entered disabled state [ 1484.931437][T18874] bridge_slave_0: entered allmulticast mode [ 1484.939475][T18874] bridge_slave_0: entered promiscuous mode [ 1484.950121][T18874] bridge0: port 2(bridge_slave_1) entered blocking state [ 1484.950838][ T5973] usb 7-1: new full-speed USB device number 63 using dummy_hcd [ 1484.957584][T18874] bridge0: port 2(bridge_slave_1) entered disabled state [ 1484.989896][T18874] bridge_slave_1: entered allmulticast mode [ 1484.996831][ T5959] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1485.015433][T18874] bridge_slave_1: entered promiscuous mode [ 1485.029023][T18904] xt_TCPMSS: Only works on TCP SYN packets [ 1485.041380][ T5959] usb 3-1: device descriptor read/8, error -71 [ 1485.077687][T18874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1485.090795][T18874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1485.126047][ T5973] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1485.139326][ T5973] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1485.154174][ T5973] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1485.161705][ T5959] usb usb3-port1: unable to enumerate USB device [ 1485.164715][ T5973] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1485.177951][ T5973] usb 7-1: SerialNumber: syz [ 1485.180181][T18874] team0: Port device team_slave_0 added [ 1485.193214][T18874] team0: Port device team_slave_1 added [ 1485.195521][ T5973] cdc_acm 7-1:1.0: skipping garbage [ 1485.210138][ T5973] cdc_acm 7-1:1.0: Control and data interfaces are not separated! [ 1485.219344][ T5973] cdc_acm 7-1:1.0: This needs exactly 3 endpoints [ 1485.227121][ T5973] cdc_acm 7-1:1.0: probe with driver cdc_acm failed with error -22 [ 1485.252460][T18874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1485.259490][T18874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1485.285744][T18874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1485.298616][T18874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1485.306158][T18874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1485.333607][T18874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1485.389674][T18874] hsr_slave_0: entered promiscuous mode [ 1485.396611][T18874] hsr_slave_1: entered promiscuous mode [ 1485.403889][T18874] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1485.412084][T18874] Cannot create hsr debugfs directory [ 1485.422506][ T5973] usb 7-1: USB disconnect, device number 63 [ 1485.593498][T16919] Bluetooth: hci4: command tx timeout [ 1486.012881][T18911] netlink: 'syz.4.3313': attribute type 2 has an invalid length. [ 1486.030969][T18911] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3313'. [ 1486.034628][ T5973] usb 10-1: new low-speed USB device number 29 using dummy_hcd [ 1486.047008][T18911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3313'. [ 1486.195314][T18911] team_slave_0 (unregistering): left promiscuous mode [ 1486.203117][T18911] team_slave_0 (unregistering): left allmulticast mode [ 1486.223199][ T5973] usb 10-1: Invalid ep0 maxpacket: 64 [ 1486.236630][T18911] team0: Port device team_slave_0 removed [ 1486.385636][T18916] syz.6.3314 (18916): /proc/18912/oom_adj is deprecated, please use /proc/18912/oom_score_adj instead. [ 1486.420812][ T5973] usb 10-1: new low-speed USB device number 30 using dummy_hcd [ 1486.467451][T18918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3315'. [ 1486.500212][T18918] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1486.574557][ T5973] usb 10-1: Invalid ep0 maxpacket: 64 [ 1486.593384][ T5973] usb usb10-port1: attempt power cycle [ 1486.754605][T18874] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1486.923420][T18874] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1486.930653][ T5973] usb 10-1: new low-speed USB device number 31 using dummy_hcd [ 1486.971645][ T5973] usb 10-1: Invalid ep0 maxpacket: 64 [ 1486.971666][T18874] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1487.037392][T18874] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1487.100770][ T5973] usb 10-1: new low-speed USB device number 32 using dummy_hcd [ 1487.121775][ T5973] usb 10-1: Invalid ep0 maxpacket: 64 [ 1487.127743][ T5973] usb usb10-port1: unable to enumerate USB device [ 1487.681379][T16919] Bluetooth: hci4: command tx timeout [ 1487.869839][T18874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1488.094788][T18874] 8021q: adding VLAN 0 to HW filter on device team0 [ 1488.118487][T18071] bridge0: port 1(bridge_slave_0) entered blocking state [ 1488.125719][T18071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1488.214587][T18935] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3318'. [ 1488.825979][T18071] bridge0: port 2(bridge_slave_1) entered blocking state [ 1488.833212][T18071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1489.148203][T18937] loop4: detected capacity change from 0 to 7 [ 1489.198989][T18937] Dev loop4: unable to read RDB block 7 [ 1489.238670][T18937] loop4: unable to read partition table [ 1489.254616][T18937] loop4: partition table beyond EOD, truncated [ 1489.266901][T18937] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 1489.775169][T16919] Bluetooth: hci4: command tx timeout [ 1490.353006][T18874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1490.404735][ T30] audit: type=1326 audit(1755942735.103:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18954 comm="syz.6.3324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11c98ebe9 code=0x7ffc0000 [ 1490.488337][T18960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3325'. [ 1490.491471][ T30] audit: type=1326 audit(1755942735.103:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18954 comm="syz.6.3324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb11c98ebe9 code=0x7ffc0000 [ 1490.524226][T18960] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1490.526516][ T30] audit: type=1326 audit(1755942735.103:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18954 comm="syz.6.3324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11c98ebe9 code=0x7ffc0000 [ 1490.566177][ T30] audit: type=1326 audit(1755942735.103:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18954 comm="syz.6.3324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11c98ebe9 code=0x7ffc0000 [ 1490.584756][T18874] veth0_vlan: entered promiscuous mode [ 1490.640351][T18874] veth1_vlan: entered promiscuous mode [ 1490.652919][T16569] usb 10-1: new full-speed USB device number 33 using dummy_hcd [ 1490.722552][T18874] veth0_macvtap: entered promiscuous mode [ 1490.751665][T18874] veth1_macvtap: entered promiscuous mode [ 1490.804349][T18874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1490.833487][T16569] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1490.941517][T18874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1490.959791][T16569] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1490.997290][T18874] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1491.008327][T18874] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1491.018892][T18874] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1491.028364][T16569] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1491.048192][T16569] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1491.058333][T18874] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1491.082512][T16569] usb 10-1: SerialNumber: syz [ 1491.113367][T16569] cdc_acm 10-1:1.0: skipping garbage [ 1491.118828][T16569] cdc_acm 10-1:1.0: Control and data interfaces are not separated! [ 1491.177481][T16569] cdc_acm 10-1:1.0: This needs exactly 3 endpoints [ 1491.249526][T16569] cdc_acm 10-1:1.0: probe with driver cdc_acm failed with error -22 [ 1491.471659][ T44] usb 10-1: USB disconnect, device number 33 [ 1491.504821][T18080] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1491.543020][T18080] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1491.643896][T13236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1491.655122][T13236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1491.831360][T16919] Bluetooth: hci4: command tx timeout [ 1492.004942][T18976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1492.045629][T18976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1492.452354][T18984] netlink: 'syz.4.3331': attribute type 4 has an invalid length. [ 1492.460778][T18985] netlink: 'syz.4.3331': attribute type 4 has an invalid length. [ 1492.756390][ T30] audit: type=1326 audit(1755942737.453:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18992 comm="syz.2.3335" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc51798ebe9 code=0x0 [ 1492.782522][T16536] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1493.439681][T16536] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1493.460768][T16536] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1493.490527][T16536] usb 10-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1493.510240][T16536] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1493.552993][T16536] usb 10-1: config 0 descriptor?? [ 1494.172259][T16536] arvo 0003:1E7D:30D4.0023: unknown main item tag 0x0 [ 1494.376391][T16536] arvo 0003:1E7D:30D4.0023: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.9-1/input0 [ 1494.617697][ T5966] usb 10-1: USB disconnect, device number 34 [ 1495.768652][T19023] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 1498.220609][ T5973] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 1498.852475][ T5973] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 1498.966702][ T5973] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1498.990715][ T5973] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 1499.004387][ T5973] usb 7-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 1499.215303][T19057] netlink: 'syz.2.3353': attribute type 10 has an invalid length. [ 1499.228844][T19057] batman_adv: batadv0: Adding interface: wlan0 [ 1499.235635][T19057] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1499.262460][T19057] batman_adv: batadv0: Interface activated: wlan0 [ 1499.661617][ T5973] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1499.764732][ T5973] usb 7-1: config 0 descriptor?? [ 1499.973719][T19064] netlink: 5636 bytes leftover after parsing attributes in process `syz.0.3357'. [ 1501.134427][T19045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1501.191250][T19045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1501.789299][T19076] 9pnet_fd: Insufficient options for proto=fd [ 1502.457242][ T5973] usbhid 7-1:0.0: can't add hid device: -71 [ 1502.472270][ T5973] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1502.497997][ T5973] usb 7-1: USB disconnect, device number 64 [ 1502.865907][T19084] 9pnet_fd: Insufficient options for proto=fd [ 1503.467126][T19091] netlink: 'syz.0.3365': attribute type 21 has an invalid length. [ 1503.495811][T19091] netlink: 'syz.0.3365': attribute type 6 has an invalid length. [ 1503.524749][T19091] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3365'. [ 1504.518632][T19106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1504.533180][T19106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1504.545362][T19106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1504.582156][T19106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1504.818713][T19114] bond_slave_0: entered promiscuous mode [ 1504.825591][T19114] bond_slave_1: entered promiscuous mode [ 1504.846060][T19114] vlan2: entered promiscuous mode [ 1504.853410][T19114] bond0: entered promiscuous mode [ 1505.141846][ T6001] Plextor PX-M402U: unable to load firmware from file "go7007/go7007fw.bin" [ 1505.156214][ T6001] go7007 8-1:49.141: probe with driver go7007 failed with error -12 [ 1505.225081][ T6001] go7007 8-1:49.78: Direct firmware load for go7007/go7007fw.bin failed with error -2 [ 1505.257781][ T6001] go7007 8-1:49.78: Falling back to sysfs fallback for: go7007/go7007fw.bin [ 1505.353989][T19128] Smack: duplicate mount options [ 1505.620839][T19138] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 1506.401012][T16536] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1506.592718][T16536] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1506.607956][T16536] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1507.136155][T16536] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1507.146740][T16536] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1507.160211][T16536] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1507.172070][T16536] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1507.186776][T16536] usb 10-1: config 0 descriptor?? [ 1507.375155][T11568] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 1507.613811][T11568] usb 3-1: config 4 has an invalid interface number: 88 but max is 1 [ 1507.768135][T11568] usb 3-1: config 4 has an invalid interface number: 29 but max is 1 [ 1507.891517][T11568] usb 3-1: config 4 has no interface number 0 [ 1508.017320][T11568] usb 3-1: config 4 has no interface number 1 [ 1508.065201][T19132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1508.120958][T11568] usb 3-1: config 4 interface 88 altsetting 119 endpoint 0xB has invalid maxpacket 8208, setting to 64 [ 1508.163359][T16536] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1508.211085][T19132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1508.275991][T11568] usb 3-1: config 4 interface 88 altsetting 119 has a duplicate endpoint with address 0xB, skipping [ 1508.316082][T11568] usb 3-1: config 4 interface 88 altsetting 119 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 1508.322290][T19156] netlink: 268 bytes leftover after parsing attributes in process `syz.6.3382'. [ 1508.343095][T11568] usb 3-1: config 4 interface 88 altsetting 119 endpoint 0x85 has invalid maxpacket 11067, setting to 64 [ 1508.371534][T19156] unsupported nla_type 65024 [ 1508.378198][T16536] usb 10-1: USB disconnect, device number 35 [ 1508.438601][T11568] usb 3-1: config 4 interface 88 altsetting 119 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1508.476977][T11568] usb 3-1: config 4 interface 29 altsetting 9 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1508.490177][T11568] usb 3-1: config 4 interface 29 altsetting 9 endpoint 0x86 has invalid maxpacket 1023, setting to 64 [ 1508.523409][T11568] usb 3-1: config 4 interface 88 has no altsetting 0 [ 1508.541674][T11568] usb 3-1: config 4 interface 29 has no altsetting 0 [ 1508.572743][T11568] usb 3-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=af.e7 [ 1508.592973][T11568] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1508.613231][T11568] usb 3-1: Product: syz [ 1508.617480][T11568] usb 3-1: Manufacturer: syz [ 1508.631357][T19167] vlan0: entered promiscuous mode [ 1508.636661][T11568] usb 3-1: SerialNumber: syz [ 1508.651002][T19147] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1508.663693][T19166] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3386'. [ 1508.726936][T19164] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3384'. [ 1511.953115][T11568] chaoskey 3-1:4.29: Unable to register with hwrng [ 1511.964104][T11568] usb 3-1: USB disconnect, device number 58 [ 1514.378371][ T30] audit: type=1326 audit(1755942759.073:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19232 comm="syz.6.3403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11c98ebe9 code=0x7ffc0000 [ 1514.442001][ T30] audit: type=1326 audit(1755942759.073:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19232 comm="syz.6.3403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11c98ebe9 code=0x7ffc0000 [ 1514.535434][ T30] audit: type=1326 audit(1755942759.103:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19232 comm="syz.6.3403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb11c98ebe9 code=0x7ffc0000 [ 1514.696044][ T30] audit: type=1326 audit(1755942759.103:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19232 comm="syz.6.3403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11c98ebe9 code=0x7ffc0000 [ 1514.736381][ T30] audit: type=1326 audit(1755942759.103:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19232 comm="syz.6.3403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11c98ebe9 code=0x7ffc0000 [ 1514.955956][T19245] "syz.6.3406" (19245) uses obsolete ecb(arc4) skcipher [ 1515.071083][T19253] IPVS: length: 24 != 79896 [ 1515.619881][T19258] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3408'. [ 1515.838015][T19258] block device autoloading is deprecated and will be removed. [ 1515.853458][T19258] syz.9.3408: attempt to access beyond end of device [ 1515.853458][T19258] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1516.434041][T19251] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1516.676684][ T30] audit: type=1326 audit(1755942761.333:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19257 comm="syz.2.3409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc51798ebe9 code=0x7ffc0000 [ 1516.824144][ T30] audit: type=1326 audit(1755942761.333:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19257 comm="syz.2.3409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc51798ebe9 code=0x7ffc0000 [ 1516.918307][ T30] audit: type=1326 audit(1755942761.353:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19257 comm="syz.2.3409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc51798ebe9 code=0x7ffc0000 [ 1517.005754][ T30] audit: type=1326 audit(1755942761.353:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19257 comm="syz.2.3409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc51798ebe9 code=0x7ffc0000 [ 1517.068624][ T30] audit: type=1326 audit(1755942761.353:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19257 comm="syz.2.3409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc51798ebe9 code=0x7ffc0000 [ 1517.198868][T19279] atomic_op ffff8880280e7998 conn xmit_atomic 0000000000000000 [ 1517.260568][ T44] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1517.452294][ T44] usb 10-1: Using ep0 maxpacket: 16 [ 1517.463540][ T44] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1517.486871][ T44] usb 10-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=fc.5a [ 1517.510457][ T44] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1517.530991][ T44] usb 10-1: Product: syz [ 1517.535380][ T44] usb 10-1: Manufacturer: syz [ 1517.561891][ T44] usb 10-1: SerialNumber: syz [ 1517.617457][ T44] usb 10-1: config 0 descriptor?? [ 1519.123838][T19296] netlink: 'syz.6.3419': attribute type 15 has an invalid length. [ 1519.140662][T19296] binder: 19292:19296 ioctl c018620b 0 returned -14 [ 1519.166925][T19300] overlayfs: failed to get index nlink (file1/bus, err=0) [ 1519.331280][T16536] usb 10-1: USB disconnect, device number 36 [ 1519.993400][T19308] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1520.003712][T19308] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3421'. [ 1520.451984][T19308] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 1520.465640][T19308] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1521.412006][T19325] fuse: Bad value for 'group_id' [ 1521.451248][T19325] fuse: Bad value for 'group_id' [ 1522.261030][T19336] xt_CT: No such helper "snmp" [ 1522.344182][T19341] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=640 (1280 ns) > initial count (34 ns). Using initial count to start timer. [ 1522.474861][T19343] xt_CT: No such helper "pptp" [ 1522.505095][T19343] kvm: user requested TSC rate below hardware speed [ 1523.109276][T19366] afs: Unknown parameter ' [ 1523.109276][T19366] ' [ 1523.497642][T19369] macvlan2: entered promiscuous mode [ 1523.505126][T19369] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1526.043423][T11568] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1526.470573][T11568] usb 3-1: Using ep0 maxpacket: 16 [ 1526.491750][T11568] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1526.510620][T11568] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1526.530888][T11568] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1526.585196][T11568] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1526.607453][T11568] usb 3-1: config 0 descriptor?? [ 1528.066938][T19418] trusted_key: encrypted_key: insufficient parameters specified [ 1529.315114][T11568] usbhid 3-1:0.0: can't add hid device: -71 [ 1529.421192][T11568] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1529.517450][T11568] usb 3-1: USB disconnect, device number 59 [ 1529.699527][T19412] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1529.930538][T11568] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1529.973060][T19430] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1530.009708][T19430] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1530.036048][T19430] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 1530.058421][T19430] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3452'. [ 1530.094828][T11568] usb 3-1: New USB device found, idVendor=1235, idProduct=000e, bcdDevice=f0.ee [ 1530.106991][T11568] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1530.139865][T11568] usb 3-1: config 0 descriptor?? [ 1530.167084][T11568] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1530.222879][T11568] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1530.381593][T19427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1530.405382][T11568] usb 3-1: USB disconnect, device number 60 [ 1530.420766][T12653] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 1530.621163][T12653] usb 10-1: Using ep0 maxpacket: 32 [ 1530.631827][T12653] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1530.651767][T12653] usb 10-1: config 7 has an invalid interface number: 187 but max is 0 [ 1530.677128][T12653] usb 10-1: config 7 has no interface number 0 [ 1530.691280][T12653] usb 10-1: config 7 interface 187 has no altsetting 0 [ 1530.709560][T12653] usb 10-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1530.748153][T12653] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1530.770450][T12653] usb 10-1: Product: syz [ 1530.774792][T12653] usb 10-1: Manufacturer: syz [ 1530.789733][T12653] usb 10-1: SerialNumber: syz [ 1531.057993][T12653] usb 10-1: Cannot retrieve CPort count: -71 [ 1531.074743][T12653] usb 10-1: Cannot retrieve CPort count: -71 [ 1531.309629][T12653] es2_ap_driver 10-1:7.187: probe with driver es2_ap_driver failed with error -71 [ 1531.322474][T12653] usb 10-1: USB disconnect, device number 37 [ 1531.473478][T19441] cramfs: Unknown parameter 'discard' [ 1532.620596][T12653] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 1532.821573][T12653] usb 10-1: Using ep0 maxpacket: 32 [ 1533.028700][T12653] usb 10-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1533.062523][T12653] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1533.082162][T12653] usb 10-1: Product: syz [ 1533.089529][T12653] usb 10-1: Manufacturer: syz [ 1533.140010][T12653] usb 10-1: SerialNumber: syz [ 1533.147913][T12653] usb 10-1: config 0 descriptor?? [ 1533.167399][T12653] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1534.880883][T16536] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1534.961952][T12653] gspca_ov534_9: reg_w failed -110 [ 1535.050931][T16536] usb 3-1: Using ep0 maxpacket: 32 [ 1535.078080][T16536] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1535.097046][T16536] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1535.108975][T16536] usb 3-1: config 0 descriptor?? [ 1535.384737][T16536] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1535.398987][T16536] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1535.410006][T16536] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1535.417355][T16536] usb 3-1: media controller created [ 1535.470812][T12653] gspca_ov534_9: Unknown sensor 0000 [ 1535.471413][T12653] ov534_9 10-1:0.0: probe with driver ov534_9 failed with error -22 [ 1535.604368][T19494] input: syz0 as /devices/virtual/input/input49 [ 1536.131003][T16536] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1536.209214][T16569] usb 10-1: USB disconnect, device number 38 [ 1536.242304][T16536] az6027: usb out operation failed. (-71) [ 1536.262101][T16536] az6027: usb out operation failed. (-71) [ 1536.267913][T16536] stb0899_attach: Driver disabled by Kconfig [ 1536.290591][T16536] az6027: no front-end attached [ 1536.290591][T16536] [ 1536.312154][T16536] az6027: usb out operation failed. (-71) [ 1536.318094][T16536] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1536.345625][T16536] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input50 [ 1536.401314][T16536] dvb-usb: schedule remote query interval to 400 msecs. [ 1536.408365][T16536] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1536.481173][T16536] usb 3-1: USB disconnect, device number 61 [ 1536.854880][T16536] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1537.325288][T19522] netlink: 112 bytes leftover after parsing attributes in process `syz.9.3478'. [ 1537.356505][T19519] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3477'. [ 1537.365879][T19519] netlink: zone id is out of range [ 1537.371201][T19519] netlink: zone id is out of range [ 1537.376356][T19519] netlink: zone id is out of range [ 1537.381576][T19519] netlink: zone id is out of range [ 1537.386756][T19519] netlink: zone id is out of range [ 1537.391973][T19519] netlink: zone id is out of range [ 1537.397142][T19519] netlink: zone id is out of range [ 1537.402334][T19519] netlink: zone id is out of range [ 1537.407499][T19519] netlink: zone id is out of range [ 1537.412827][T19519] netlink: zone id is out of range [ 1538.797174][T19539] 9pnet_fd: Insufficient options for proto=fd [ 1539.584978][T19559] tmpfs: Bad value for 'mpol' [ 1539.985871][ T5959] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 1540.263158][ T5959] usb 10-1: Using ep0 maxpacket: 32 [ 1540.295231][ T5959] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 1540.319425][ T5959] usb 10-1: config 0 has no interface number 0 [ 1540.346426][ T5959] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1540.373965][ T5959] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1540.404283][ T5959] usb 10-1: Product: syz [ 1540.419926][ T5959] usb 10-1: Manufacturer: syz [ 1540.425116][ T5959] usb 10-1: SerialNumber: syz [ 1540.791377][ T5959] usb 10-1: config 0 descriptor?? [ 1540.808035][ T5959] smsc95xx v2.0.0 [ 1540.927714][T19572] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3490'. [ 1541.509836][T19583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1541.510799][T16569] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1541.541395][T19583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1541.731101][T16569] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1541.761234][ T5959] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 1541.813251][ T5959] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1541.830747][T16569] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1541.850558][T16569] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1541.867119][ T5959] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1541.878264][T16569] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1541.906894][T16569] usb 3-1: config 0 descriptor?? [ 1541.940013][ T5959] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -71 [ 1541.958368][T19592] Smack: duplicate mount options [ 1541.982636][ T5959] usb 10-1: USB disconnect, device number 39 [ 1541.994595][T19593] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1542.355482][T16569] cp2112 0003:10C4:EA90.0025: unknown main item tag 0x0 [ 1542.392798][T16569] cp2112 0003:10C4:EA90.0025: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 1542.641822][T16569] cp2112 0003:10C4:EA90.0025: Part Number: 0x82 Device Version: 0xFE [ 1543.541901][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1543.561719][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1543.573956][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1543.581597][T16569] cp2112 0003:10C4:EA90.0025: error requesting SMBus config [ 1543.593801][T16569] cp2112 0003:10C4:EA90.0025: probe with driver cp2112 failed with error -71 [ 1543.606512][T16569] usb 3-1: USB disconnect, device number 62 [ 1543.628829][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1543.643386][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1544.418050][T19607] chnl_net:caif_netlink_parms(): no params data found [ 1544.756313][T19607] bridge0: port 1(bridge_slave_0) entered blocking state [ 1544.774545][T19607] bridge0: port 1(bridge_slave_0) entered disabled state [ 1544.782795][T19607] bridge_slave_0: entered allmulticast mode [ 1544.799384][T19607] bridge_slave_0: entered promiscuous mode [ 1544.809994][T19607] bridge0: port 2(bridge_slave_1) entered blocking state [ 1544.817860][T19607] bridge0: port 2(bridge_slave_1) entered disabled state [ 1544.840956][T19607] bridge_slave_1: entered allmulticast mode [ 1544.861086][T19607] bridge_slave_1: entered promiscuous mode [ 1544.880770][T16569] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1545.009317][T19607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1545.089590][T19607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1545.218836][T16569] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1545.232406][T16569] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1545.245931][T16569] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1545.772693][T16919] Bluetooth: hci6: command tx timeout [ 1545.960517][T16569] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1545.968603][T16569] usb 3-1: Product: syz [ 1545.973036][T16569] usb 3-1: Manufacturer: syz [ 1545.977677][T16569] usb 3-1: SerialNumber: syz [ 1545.997182][T16569] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 1546.503231][T19623] bpf: Bad value for 'uid' [ 1546.577265][ T5959] usb 3-1: USB disconnect, device number 63 [ 1546.611377][T19607] team0: Port device team_slave_0 added [ 1546.728373][T19607] team0: Port device team_slave_1 added [ 1546.817451][T19607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1546.833176][T19607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1546.860716][T19607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1546.891915][T19607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1546.905872][T19607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1546.942167][T19607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1547.003391][T19654] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3509'. [ 1547.066285][T19607] hsr_slave_0: entered promiscuous mode [ 1547.073619][T19607] hsr_slave_1: entered promiscuous mode [ 1547.081635][T19607] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1547.096101][T19607] Cannot create hsr debugfs directory [ 1547.830899][T16919] Bluetooth: hci6: command tx timeout [ 1549.911540][T16919] Bluetooth: hci6: command tx timeout [ 1551.040680][T11568] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 1551.225128][T11568] usb 10-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1551.241946][T11568] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1551.680890][ T6009] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1551.741305][T11568] usb 10-1: config 0 descriptor?? [ 1551.803158][T11568] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1551.855642][T19607] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1551.896268][T19607] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1551.914901][T19607] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1551.921952][ T6009] usb 3-1: Using ep0 maxpacket: 8 [ 1551.937515][ T6009] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1551.952065][T19607] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1551.970190][ T6009] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1551.991289][T16919] Bluetooth: hci6: command tx timeout [ 1552.017124][T11568] gspca_cpia1: usb_control_msg 05, error -71 [ 1552.026809][T11568] gspca_cpia1: usb_control_msg 01, error -71 [ 1552.048593][T11568] cpia1 10-1:0.0: only firmware version 1 is supported (got: 0) [ 1552.059720][T11568] usb 10-1: USB disconnect, device number 40 [ 1552.062458][ T6009] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1552.143207][ T6009] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1552.187807][ T6009] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1552.237998][ T6009] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1552.268958][T19607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1552.344573][T19607] 8021q: adding VLAN 0 to HW filter on device team0 [ 1552.506237][ T6009] usb 3-1: GET_CAPABILITIES returned 0 [ 1552.540740][ T6009] usbtmc 3-1:16.0: can't read capabilities [ 1553.187604][T19687] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3517'. [ 1553.211074][T19687] netlink: 4588 bytes leftover after parsing attributes in process `syz.2.3517'. [ 1553.339156][T18080] bridge0: port 1(bridge_slave_0) entered blocking state [ 1553.346434][T18080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1553.474349][T11232] bridge0: port 2(bridge_slave_1) entered blocking state [ 1553.481614][T11232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1554.124231][T19734] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3528'. [ 1554.200114][T19735] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3528'. [ 1554.858172][ T6009] usb 3-1: USB disconnect, device number 64 [ 1555.040447][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 1555.040469][ T30] audit: type=1326 audit(1755942799.723:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19738 comm="syz.4.3529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a0278ebe9 code=0x7ffc0000 [ 1555.111047][ T30] audit: type=1326 audit(1755942799.723:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19738 comm="syz.4.3529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f3a0278ebe9 code=0x7ffc0000 [ 1555.142944][ T30] audit: type=1326 audit(1755942799.733:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19738 comm="syz.4.3529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a0278ebe9 code=0x7ffc0000 [ 1555.165508][ T30] audit: type=1326 audit(1755942799.733:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19738 comm="syz.4.3529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3a0278ebe9 code=0x7ffc0000 [ 1555.171978][T19607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1555.187093][ C0] vkms_vblank_simulate: vblank timer overrun [ 1555.190975][ T30] audit: type=1326 audit(1755942799.733:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19738 comm="syz.4.3529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a0278ebe9 code=0x7ffc0000 [ 1555.222276][ C0] vkms_vblank_simulate: vblank timer overrun [ 1555.241246][ T30] audit: type=1326 audit(1755942799.733:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19738 comm="syz.4.3529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3a0278ebe9 code=0x7ffc0000 [ 1555.308018][ T30] audit: type=1326 audit(1755942799.733:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19738 comm="syz.4.3529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a0278ebe9 code=0x7ffc0000 [ 1555.410543][ T30] audit: type=1326 audit(1755942799.733:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19738 comm="syz.4.3529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3a0278ebe9 code=0x7ffc0000 [ 1555.519727][ T30] audit: type=1326 audit(1755942799.773:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19738 comm="syz.4.3529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a0278ebe9 code=0x7ffc0000 [ 1555.641547][ T30] audit: type=1326 audit(1755942799.773:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19738 comm="syz.4.3529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3a0278ebe9 code=0x7ffc0000 [ 1556.960508][T11568] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1557.152764][T11568] usb 3-1: config 0 has an invalid interface number: 252 but max is 0 [ 1557.159084][T19607] veth0_vlan: entered promiscuous mode [ 1557.170457][T11568] usb 3-1: config 0 has no interface number 0 [ 1557.193017][T11568] usb 3-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=75.70 [ 1557.210481][T11568] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1557.243129][T19607] veth1_vlan: entered promiscuous mode [ 1557.250444][T11568] usb 3-1: Product: syz [ 1557.254699][T11568] usb 3-1: Manufacturer: syz [ 1557.259344][T11568] usb 3-1: SerialNumber: syz [ 1557.299766][T11568] usb 3-1: config 0 descriptor?? [ 1557.324255][T19607] veth0_macvtap: entered promiscuous mode [ 1557.348760][T19607] veth1_macvtap: entered promiscuous mode [ 1557.397198][T19607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1557.428871][T19607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1557.472781][T19607] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1557.489723][T19607] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1557.510481][T19607] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1557.531960][T19607] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1557.540676][T11568] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:704a [ 1557.541132][T11568] gspca_sn9c20x: Write register 1000 failed -71 [ 1557.560557][ T5959] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 1557.565828][T11568] gspca_sn9c20x: Device initialization failed [ 1557.586162][T11568] gspca_sn9c20x 3-1:0.252: probe with driver gspca_sn9c20x failed with error -71 [ 1557.629374][T11568] usb 3-1: USB disconnect, device number 65 [ 1557.728885][ T5959] usb 10-1: Using ep0 maxpacket: 16 [ 1557.751045][ T5959] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1557.777030][T13196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1557.785431][ T5959] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1557.790449][T13196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1557.813139][ T5959] usb 10-1: New USB device found, idVendor=0925, idProduct=0005, bcdDevice= 0.00 [ 1557.844855][ T5959] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1557.872163][ T5959] usb 10-1: config 0 descriptor?? [ 1557.888888][T18078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1557.908366][T18078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1558.101231][ T5959] smartjoyplus 0003:0925:0005.0026: item fetching failed at offset 3/5 [ 1558.131301][ T5959] smartjoyplus 0003:0925:0005.0026: parse failed [ 1558.148240][ T5959] smartjoyplus 0003:0925:0005.0026: probe with driver smartjoyplus failed with error -22 [ 1558.305711][ T5966] usb 10-1: USB disconnect, device number 41 [ 1560.765502][T19812] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3548'. [ 1560.897301][T19811] netlink: 'syz.9.3550': attribute type 4 has an invalid length. [ 1561.015055][ C0] vcan0: j1939_tp_rxtimer: 0xffff888031345c00: rx timeout, send abort [ 1561.515224][ C0] vcan0: j1939_tp_rxtimer: 0xffff888031345400: rx timeout, send abort [ 1561.523860][ C0] vcan0: j1939_tp_rxtimer: 0xffff888031345c00: abort rx timeout. Force session deactivation [ 1562.166495][T19823] sp0: Synchronizing with TNC [ 1562.551087][T19832] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3555'. [ 1563.063121][T19844] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3558'. [ 1563.231041][T19847] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3560'. [ 1564.470788][T11568] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 1564.610713][T11568] usb 10-1: device descriptor read/64, error -71 [ 1564.979775][T11568] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 1565.173050][T11568] usb 10-1: device descriptor read/64, error -71 [ 1565.177076][T19871] netlink: 596 bytes leftover after parsing attributes in process `syz.0.3564'. [ 1565.661006][T11568] usb usb10-port1: attempt power cycle [ 1566.592342][ T6001] Plextor PX-M402U: unable to load firmware from file "go7007/go7007fw.bin" [ 1566.616002][ T6001] go7007 8-1:49.78: probe with driver go7007 failed with error -12 [ 1566.638483][ T6001] go7007 8-1:49.57: Direct firmware load for go7007/go7007fw.bin failed with error -2 [ 1566.654736][ T6001] go7007 8-1:49.57: Falling back to sysfs fallback for: go7007/go7007fw.bin [ 1566.899015][T19885] ipvlan2: entered promiscuous mode [ 1566.913348][T19885] ipvlan2: entered allmulticast mode [ 1566.920048][T19885] macvlan1: entered allmulticast mode [ 1567.674241][T19885] veth1_vlan: entered allmulticast mode [ 1568.182501][ T44] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 1568.954272][T19899] overlayfs: upper fs does not support tmpfile. [ 1569.042579][T19903] Smack: duplicate mount options [ 1569.141366][ T44] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1569.166211][ T44] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1569.196902][ T44] usb 10-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1569.211967][ T44] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1569.224479][ T44] usb 10-1: config 0 descriptor?? [ 1569.455865][T19917] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.3582'. [ 1571.874575][T19938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1572.408222][T19938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1572.665089][ T44] hid-led 0003:27B8:01ED.0027: probe with driver hid-led failed with error -71 [ 1572.782358][T19949] syzkaller1: entered promiscuous mode [ 1572.798784][T19949] syzkaller1: entered allmulticast mode [ 1572.907337][ T44] usb 10-1: USB disconnect, device number 45 [ 1573.729324][T19954] tipc: Started in network mode [ 1573.737041][T19954] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 1573.751984][T19954] tipc: Enabled bearer , priority 10 [ 1573.855973][T19954] lo speed is unknown, defaulting to 1000 [ 1573.856086][T19954] lo speed is unknown, defaulting to 1000 [ 1573.857188][T19954] lo speed is unknown, defaulting to 1000 [ 1573.966840][T19954] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1574.186196][T19975] overlayfs: failed to resolve './file1': -2 [ 1574.263771][T19977] netlink: 'syz.2.3597': attribute type 2 has an invalid length. [ 1574.293128][T19977] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3597'. [ 1574.688427][ T9] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1574.698047][T19954] lo speed is unknown, defaulting to 1000 [ 1575.183558][T19954] lo speed is unknown, defaulting to 1000 [ 1575.278602][ T5966] tipc: Node number set to 10005162 [ 1575.288277][T19954] lo speed is unknown, defaulting to 1000 [ 1575.296008][T19954] lo speed is unknown, defaulting to 1000 [ 1575.303758][T19954] lo speed is unknown, defaulting to 1000 [ 1575.346784][T19954] lo speed is unknown, defaulting to 1000 [ 1575.374246][T19954] lo speed is unknown, defaulting to 1000 [ 1576.819439][T20021] netlink: 'syz.5.3608': attribute type 10 has an invalid length. [ 1576.978097][T20021] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1577.032335][ T9] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1577.190822][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1577.217292][ T9] usb 3-1: config 0 has an invalid descriptor of length 137, skipping remainder of the config [ 1577.255042][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1577.305131][ T9] usb 3-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=f9.12 [ 1577.320258][T20012] tipc: Failed to remove unknown binding: 66,3,3/0:3722680914/3722680915 [ 1577.326091][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1577.370322][ T9] usb 3-1: Product: syz [ 1577.381488][ T9] usb 3-1: Manufacturer: syz [ 1577.386456][ T9] usb 3-1: SerialNumber: syz [ 1577.407379][ T9] usb 3-1: config 0 descriptor?? [ 1577.820301][T11568] usb 3-1: USB disconnect, device number 67 [ 1577.950295][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1577.950317][ T30] audit: type=1800 audit(1755942822.643:315): pid=20042 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.3615" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1578.295818][T20053] cifs: Unknown parameter 'no'aN[Gzob,er;%j [ 1578.295818][T20053] z,@qJ#"h/.W1ȱnNC"C׈E)8+' [ 1579.265269][T20069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3623'. [ 1579.291870][ T30] audit: type=1804 audit(1755942823.973:316): pid=20070 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.3622" name="file0" dev="tmpfs" ino=321 res=1 errno=0 [ 1579.346708][T20061] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1579.379658][T20061] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1579.397026][T20061] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1579.438092][T20061] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1579.475407][T20061] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1579.498928][T20061] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1579.527538][T20061] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1579.581143][T20061] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1579.614790][T20061] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1579.647066][T20061] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1580.711232][T16919] Bluetooth: hci1: command 0x0406 tx timeout [ 1580.947720][T20094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3630'. [ 1580.957008][T20094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3630'. [ 1580.966658][T20094] netlink: 'syz.0.3630': attribute type 6 has an invalid length. [ 1581.056583][ T30] audit: type=1326 audit(1755942825.753:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20096 comm="syz.2.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc51798ebe9 code=0x7ffc0000 [ 1581.151016][ T30] audit: type=1326 audit(1755942825.753:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20096 comm="syz.2.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc51798ebe9 code=0x7ffc0000 [ 1581.220780][ T30] audit: type=1326 audit(1755942825.783:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20096 comm="syz.2.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7fc51798ebe9 code=0x7ffc0000 [ 1581.332622][T20110] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3636'. [ 1581.336893][ T30] audit: type=1326 audit(1755942825.783:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20096 comm="syz.2.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc51798ebe9 code=0x7ffc0000 [ 1581.351402][T20110] net_ratelimit: 74 callbacks suppressed [ 1581.351427][T20110] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1581.430809][T16919] Bluetooth: hci5: command 0x0406 tx timeout [ 1581.436918][T16919] Bluetooth: hci2: command 0x0405 tx timeout [ 1581.443315][ T30] audit: type=1326 audit(1755942825.783:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20096 comm="syz.2.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc51798ebe9 code=0x7ffc0000 [ 1581.510638][T16919] Bluetooth: hci4: command 0x0c1a tx timeout [ 1581.516870][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 1581.716967][T16919] Bluetooth: hci6: command 0x0c1a tx timeout [ 1581.935151][T20135] 9pnet_fd: Insufficient options for proto=fd [ 1582.058417][T20143] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3647'. [ 1583.601100][T16919] Bluetooth: hci4: command 0x0c1a tx timeout [ 1583.752946][T16919] Bluetooth: hci6: command 0x0c1a tx timeout [ 1584.234661][T20189] netlink: 'syz.2.3659': attribute type 4 has an invalid length. [ 1584.242774][ T5959] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 1584.303963][T20191] overlayfs: failed to resolve './file0': -2 [ 1584.319195][T20191] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3660'. [ 1584.411111][ T5959] usb 10-1: Using ep0 maxpacket: 32 [ 1584.426983][ T5959] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1584.442494][ T5959] usb 10-1: too many endpoints for config 0 interface 0 altsetting 11: 36, using maximum allowed: 30 [ 1584.456825][ T5959] usb 10-1: config 0 interface 0 altsetting 11 bulk endpoint 0x6 has invalid maxpacket 255 [ 1584.467353][ T5959] usb 10-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 36 [ 1584.501169][ T5959] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1584.518394][ T5959] usb 10-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 1584.528029][ T5959] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1584.545233][ T5959] usb 10-1: Product: syz [ 1584.555649][ T5959] usb 10-1: Manufacturer: syz [ 1584.566481][ T5959] usb 10-1: SerialNumber: syz [ 1584.581088][ T5959] usb 10-1: config 0 descriptor?? [ 1584.594187][T20178] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1584.851531][ T5959] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1584.896181][ T5959] usb 10-1: USB disconnect, device number 46 [ 1585.671665][T16919] Bluetooth: hci4: command 0x0c1a tx timeout [ 1585.960845][T16919] Bluetooth: hci6: command 0x0c1a tx timeout [ 1586.126718][T16919] Bluetooth: hci5: unexpected event for opcode 0x0c12 [ 1586.583520][T20248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3679'. [ 1586.847447][T20257] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3680'. [ 1587.334808][T20261] gtp0: entered promiscuous mode [ 1587.359775][T20261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3681'. [ 1587.947745][T20276] 9pnet_fd: Insufficient options for proto=fd [ 1588.055911][T20278] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3687'. [ 1589.392599][T20304] fuse: Unknown parameter '' [ 1589.499854][T20306] cramfs: Unknown parameter 'discard' [ 1590.212155][T16919] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1590.222212][T16919] Bluetooth: hci5: Injecting HCI hardware error event [ 1590.232641][ T51] Bluetooth: hci5: hardware error 0x00 [ 1591.308753][T20316] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1591.394114][T20316] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 1592.311447][ T51] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1593.866934][T20369] netlink: 'syz.2.3709': attribute type 4 has an invalid length. [ 1593.895880][T20369] netlink: 'syz.2.3709': attribute type 4 has an invalid length. [ 1593.961032][T20367] kvm: kvm [20366]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x85 [ 1593.998998][T20370] netlink: 'syz.2.3709': attribute type 3 has an invalid length. [ 1594.040176][T20367] ALSA: seq fatal error: cannot create timer (-22) [ 1594.580658][T11568] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 1594.837342][T20385] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3716'. [ 1595.511470][T11568] usb 10-1: Using ep0 maxpacket: 16 [ 1595.519106][T11568] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1595.530305][T11568] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1595.540570][T11568] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1595.557516][T11568] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1595.578659][T11568] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1595.608807][T11568] usb 10-1: config 0 descriptor?? [ 1595.982948][T20373] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3712'. [ 1596.241755][T20373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1596.258914][T20373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1596.361385][T11568] usbhid 10-1:0.0: can't add hid device: -71 [ 1596.373087][T11568] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1596.404025][T11568] usb 10-1: USB disconnect, device number 47 [ 1598.815288][T20429] 9pnet_fd: Insufficient options for proto=fd [ 1599.226194][T20432] overlayfs: failed to clone upperpath [ 1600.572196][T20444] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3733'. [ 1600.759514][T20457] Smack: duplicate mount options [ 1600.929842][T16919] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1600.944874][T16919] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1600.959835][T16919] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1600.971610][T16919] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1600.982399][T16919] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1601.042474][T20464] lo speed is unknown, defaulting to 1000 [ 1601.230831][ T44] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1601.284038][T20464] chnl_net:caif_netlink_parms(): no params data found [ 1601.401535][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 1601.411792][ T44] usb 3-1: config 6 has an invalid interface number: 153 but max is 0 [ 1601.432741][ T44] usb 3-1: config 6 has no interface number 0 [ 1601.562949][T20464] bridge0: port 1(bridge_slave_0) entered blocking state [ 1601.586477][T20464] bridge0: port 1(bridge_slave_0) entered disabled state [ 1601.615560][T20464] bridge_slave_0: entered allmulticast mode [ 1601.632702][T20464] bridge_slave_0: entered promiscuous mode [ 1601.722038][T20464] bridge0: port 2(bridge_slave_1) entered blocking state [ 1601.729494][T20464] bridge0: port 2(bridge_slave_1) entered disabled state [ 1601.737586][T20464] bridge_slave_1: entered allmulticast mode [ 1601.746019][T20464] bridge_slave_1: entered promiscuous mode [ 1601.812588][T20464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1601.935382][T20464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1601.937540][ T44] usb 3-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice=41.ba [ 1602.022050][T20484] 9pnet_fd: Insufficient options for proto=fd [ 1602.048667][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1602.058531][ T44] usb 3-1: Product: syz [ 1602.064310][ T44] usb 3-1: Manufacturer: syz [ 1602.069044][ T44] usb 3-1: SerialNumber: syz [ 1602.098326][ T44] usb 3-1: unknown interface protocol 0xad, assuming v1 [ 1602.116821][ T44] usb 3-1: cannot find UAC_HEADER [ 1602.195393][ T44] snd-usb-audio 3-1:6.153: probe with driver snd-usb-audio failed with error -22 [ 1602.235629][T20464] team0: Port device team_slave_0 added [ 1602.296753][ T44] usb 3-1: USB disconnect, device number 68 [ 1602.475389][T20464] team0: Port device team_slave_1 added [ 1602.587317][T20464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1602.623092][T20464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1602.667147][T20464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1602.686616][T20464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1602.712964][T20464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1602.739543][T20464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1602.859941][T20464] hsr_slave_0: entered promiscuous mode [ 1602.887871][T20464] hsr_slave_1: entered promiscuous mode [ 1602.927824][T20464] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1602.950253][T20464] Cannot create hsr debugfs directory [ 1603.030866][ T51] Bluetooth: hci6: command tx timeout [ 1603.176798][T20503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3747'. [ 1604.510876][ T9] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1604.686760][T20523] overlay: Bad value for 'workdir' [ 1604.709009][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1604.721441][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 1604.756403][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1604.801695][ T9] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 1604.820550][ T9] usb 3-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 1604.832707][ T9] usb 3-1: Product: syz [ 1604.836952][ T9] usb 3-1: Manufacturer: syz [ 1604.852194][ T9] usb 3-1: SerialNumber: syz [ 1604.869617][ T9] usb 3-1: config 0 descriptor?? [ 1604.879657][T20527] 9pnet_fd: Insufficient options for proto=fd [ 1604.939600][ T9] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1604.952543][T20464] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1604.966811][T20464] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1604.986376][T20464] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1605.003755][T20464] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1605.110902][ T51] Bluetooth: hci6: command tx timeout [ 1605.138067][T20513] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1605.144683][T20513] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1605.213141][T20513] vhci_hcd vhci_hcd.0: Device attached [ 1605.273323][T20539] vhci_hcd: connection closed [ 1605.275102][T18070] usb 3-1: Failed to submit usb control message: -71 [ 1605.286730][T20464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1605.291467][T16569] usb 3-1: USB disconnect, device number 69 [ 1605.300727][T18071] vhci_hcd: stop threads [ 1605.305026][T18071] vhci_hcd: release socket [ 1605.309573][T18071] vhci_hcd: disconnect device [ 1605.323668][T18070] usb 3-1: unable to send the bmi data to the device: -71 [ 1605.345586][T18070] usb 3-1: unable to get target info from device [ 1605.356977][T18070] usb 3-1: could not get target info (-71) [ 1605.359979][T20464] 8021q: adding VLAN 0 to HW filter on device team0 [ 1605.381929][T18070] usb 3-1: could not probe fw (-71) [ 1605.406457][T18071] bridge0: port 1(bridge_slave_0) entered blocking state [ 1605.413762][T18071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1605.493669][T18063] bridge0: port 2(bridge_slave_1) entered blocking state [ 1605.500935][T18063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1605.881091][T11568] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 1606.020761][T11568] usb 10-1: device descriptor read/64, error -71 [ 1606.040963][T20568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3764'. [ 1606.050224][T20568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3764'. [ 1606.076705][T20464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1606.187504][T20572] Smack: duplicate mount options [ 1606.208739][T20464] veth0_vlan: entered promiscuous mode [ 1606.235176][T20464] veth1_vlan: entered promiscuous mode [ 1606.271026][T11568] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 1606.314186][T20464] veth0_macvtap: entered promiscuous mode [ 1606.326671][T20464] veth1_macvtap: entered promiscuous mode [ 1606.350980][ T44] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 1606.367465][T20464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1606.380302][T20464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1606.403787][T20464] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1606.410944][T11568] usb 10-1: device descriptor read/64, error -71 [ 1606.413567][T20464] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1606.430020][T20464] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1606.438832][T20464] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1606.518991][ T44] usb 3-1: not running at top speed; connect to a high speed hub [ 1606.531093][T11568] usb usb10-port1: attempt power cycle [ 1606.538282][ T44] usb 3-1: config 0 has no interfaces? [ 1606.556065][ T44] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1606.570413][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1606.579544][ T5974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1606.594510][ T5974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1606.602172][ T44] usb 3-1: Product: syz [ 1606.602197][ T44] usb 3-1: Manufacturer: syz [ 1606.602215][ T44] usb 3-1: SerialNumber: syz [ 1606.605746][ T44] usb 3-1: config 0 descriptor?? [ 1606.657962][ T5974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1606.674001][ T5974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1606.829006][ T9] usb 3-1: USB disconnect, device number 70 [ 1606.890670][T11568] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 1606.923541][T11568] usb 10-1: device descriptor read/8, error -71 [ 1607.200975][ T51] Bluetooth: hci6: command tx timeout [ 1607.281322][T11568] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 1607.311176][T11568] usb 10-1: device descriptor read/8, error -71 [ 1607.350634][ T5973] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1608.145707][T11568] usb usb10-port1: unable to enumerate USB device [ 1608.155880][ T5973] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1608.186466][ T5973] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1608.211353][ T5973] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1608.225456][ T5973] usb 2-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 1608.246141][ T5973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1608.267391][ T5973] usb 2-1: config 0 descriptor?? [ 1608.474438][T20603] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1609.461888][ T51] Bluetooth: hci6: command tx timeout [ 1609.542793][ T5973] usbhid 2-1:0.0: can't add hid device: -71 [ 1609.556919][ T5973] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1609.637675][ T5973] usb 2-1: USB disconnect, device number 101 [ 1609.646664][T20615] Smack: duplicate mount options [ 1609.665662][T20616] overlayfs: failed to clone upperpath [ 1609.704430][T20617] No source specified [ 1609.980429][T20625] bridge: RTM_NEWNEIGH with invalid ether address [ 1610.310863][T20635] netlink: 'syz.4.3780': attribute type 4 has an invalid length. [ 1610.318755][T20635] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.3780'. [ 1611.159056][ T30] audit: type=1326 audit(1755945433.847:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20636 comm="syz.1.3781" exe="/root/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7fcad7b8ebe9 code=0x0 [ 1612.457476][T20666] Smack: duplicate mount options [ 1612.789931][ T5966] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 1612.857007][T20674] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1612.986166][ T5966] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1612.998802][ T5966] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1613.012569][ T5966] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1613.029751][ T5966] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1613.052454][ T5966] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1613.063213][ T5966] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1613.156168][ T5966] usb 10-1: config 0 descriptor?? [ 1614.268126][ T5966] usbhid 10-1:0.0: can't add hid device: -71 [ 1614.289286][ T5966] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1614.348661][ T5966] usb 10-1: USB disconnect, device number 52 [ 1614.433250][T20701] 9pnet_fd: Insufficient options for proto=fd [ 1614.819995][ T5973] usb 2-1: new full-speed USB device number 102 using dummy_hcd [ 1614.909490][T11568] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 1614.978151][T20725] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3803'. [ 1615.015992][ T5973] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1615.035317][ T5973] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1615.051583][ T5973] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1615.061178][ T5973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1615.069883][T11568] usb 10-1: Using ep0 maxpacket: 32 [ 1615.077414][T11568] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1615.081885][T20728] netlink: 'syz.0.3804': attribute type 1 has an invalid length. [ 1615.091107][T11568] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1615.107605][T11568] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1615.116506][T20729] netlink: 'syz.0.3804': attribute type 1 has an invalid length. [ 1615.121972][T11568] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1615.136462][T11568] usb 10-1: config 0 descriptor?? [ 1615.139914][ T5966] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1615.146366][T11568] hub 10-1:0.0: USB hub found [ 1615.319821][ T5966] usb 3-1: Using ep0 maxpacket: 16 [ 1615.331099][T20708] binder: 20707:20708 ioctl c0306201 200000000700 returned -22 [ 1615.335317][ T5966] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1615.360033][ T5973] usb 2-1: GET_CAPABILITIES returned 0 [ 1615.387356][ T5973] usbtmc 2-1:16.0: can't read capabilities [ 1615.392809][ T5966] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1615.413751][ T5966] usb 3-1: Product: syz [ 1615.419706][ T5966] usb 3-1: Manufacturer: syz [ 1615.424631][ T5966] usb 3-1: SerialNumber: syz [ 1615.448068][ T5966] usb 3-1: config 0 descriptor?? [ 1615.457048][T11568] hub 10-1:0.0: 1 port detected [ 1616.012918][ T5966] dvb_usb_dtv5100 3-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 1616.076405][T11568] usb 10-1: USB disconnect, device number 53 [ 1616.266679][T20749] No source specified [ 1616.512180][ T5966] usb 2-1: USB disconnect, device number 102 [ 1616.704456][T20754] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3812'. [ 1616.720404][T20754] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1616.828753][T20750] ALSA: mixer_oss: invalid OSS volume '' [ 1616.835305][T20750] ALSA: mixer_oss: invalid OSS volume '+]OؓOGec9bx'ĮC' [ 1616.843905][T20750] ALSA: mixer_oss: invalid OSS volume '_*[bYcq~lr=V' [ 1616.969454][T20750] ALSA: mixer_oss: invalid OSS volume '+ͿnU<$^EKʘr+' [ 1616.977821][T20750] ALSA: mixer_oss: invalid OSS volume '+8iYJz' [ 1617.073694][T20762] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1617.467842][T20767] 9pnet_fd: Insufficient options for proto=fd [ 1618.022143][T16536] usb 3-1: USB disconnect, device number 71 [ 1619.698900][T11568] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1619.832955][T12653] usb 10-1: new high-speed USB device number 54 using dummy_hcd [ 1619.862640][T11568] usb 3-1: Using ep0 maxpacket: 32 [ 1619.906905][T11568] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 1619.943025][T11568] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1619.973744][T11568] usb 3-1: config 0 has no interface number 0 [ 1619.983936][T11568] usb 3-1: config 0 interface 133 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1620.005046][T11568] usb 3-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1620.028802][T12653] usb 10-1: Using ep0 maxpacket: 16 [ 1620.045572][T12653] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1620.065327][T11568] usb 3-1: config 0 interface 133 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1620.071991][T12653] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1620.118799][T12653] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1620.128181][T11568] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 1620.148486][T12653] usb 10-1: Product: syz [ 1620.154073][T11568] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1620.167758][T12653] usb 10-1: Manufacturer: syz [ 1620.174087][T12653] usb 10-1: SerialNumber: syz [ 1620.189013][T11568] usb 3-1: Product: syz [ 1620.193258][T11568] usb 3-1: Manufacturer: syz [ 1620.215751][T11568] usb 3-1: SerialNumber: syz [ 1620.240529][T11568] usb 3-1: config 0 descriptor?? [ 1620.251109][T12653] usb 10-1: config 0 descriptor?? [ 1620.276541][T12653] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1620.286670][T12653] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 1620.545338][T20818] netlink: 'syz.2.3827': attribute type 1 has an invalid length. [ 1620.692932][T20808] siw: device registration error -23 [ 1621.356500][T12653] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 1621.365974][T20808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1621.380337][T20808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1621.682892][T12653] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1621.705408][T12653] em28xx 10-1:0.0: board has no eeprom [ 1621.798866][T12653] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1621.823745][T12653] em28xx 10-1:0.0: dvb set to bulk mode. [ 1621.842565][ T5966] em28xx 10-1:0.0: Binding DVB extension [ 1621.881787][T12653] usb 10-1: USB disconnect, device number 54 [ 1621.932332][T12653] em28xx 10-1:0.0: Disconnecting em28xx [ 1622.046448][ T5966] em28xx 10-1:0.0: Registering input extension [ 1622.067563][T12653] em28xx 10-1:0.0: Closing input extension [ 1622.151367][T12653] em28xx 10-1:0.0: Freeing device [ 1622.528663][T11568] usb 3-1: probing VID:PID(0424:012C) [ 1622.566921][T11568] usb 3-1: vub300 testing BULK OUT EndPoint(0) 0B [ 1622.601875][T11568] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs [ 1622.669251][T11568] vub300 3-1:0.133: probe with driver vub300 failed with error -22 [ 1622.748864][T11568] usb 3-1: USB disconnect, device number 72 [ 1622.880842][ T31] INFO: task syz.7.3245:18657 blocked for more than 143 seconds. [ 1622.893451][ T31] Not tainted 6.16.0-syzkaller #0 [ 1622.928677][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1622.982964][ T31] task:syz.7.3245 state:D stack:26728 pid:18657 tgid:18653 ppid:14262 task_flags:0x400140 flags:0x00004004 [ 1623.108553][ T31] Call Trace: [ 1623.118815][ T5973] usb 10-1: new high-speed USB device number 55 using dummy_hcd [ 1623.133984][ T31] [ 1623.137009][ T31] __schedule+0x16aa/0x4c90 [ 1623.174916][ T31] ? schedule+0x165/0x360 [ 1623.234368][ T31] ? __pfx___schedule+0x10/0x10 [ 1623.254120][ T31] ? schedule+0x91/0x360 [ 1623.274106][ T31] ? lock_acquire+0x175/0x360 [ 1623.293711][ T31] ? schedule+0x91/0x360 [ 1623.294608][ T5973] usb 10-1: Using ep0 maxpacket: 16 [ 1623.298038][ T31] schedule+0x165/0x360 [ 1623.298074][ T31] schedule_preempt_disabled+0x13/0x30 [ 1623.352077][ T31] __mutex_lock+0x724/0xe80 [ 1623.356723][ T31] ? __mutex_lock+0x51b/0xe80 [ 1623.369300][ T5973] usb 10-1: config 0 has an invalid interface number: 35 but max is 0 [ 1623.384388][ T31] ? usbdev_open+0x16e/0x760 [ 1623.391262][ T5973] usb 10-1: config 0 has no interface number 0 [ 1623.411049][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1623.416040][ T5973] usb 10-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 1623.416150][ T31] ? bus_find_device+0x273/0x2b0 [ 1623.437369][ T5973] usb 10-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1623.452722][ T5973] usb 10-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 1623.471015][ T5973] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1623.483113][ T5973] usb 10-1: Product: syz [ 1623.490453][ T5973] usb 10-1: Manufacturer: syz [ 1623.495298][ T5973] usb 10-1: SerialNumber: syz [ 1623.510628][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 1623.513875][ T5973] usb 10-1: config 0 descriptor?? [ 1623.515981][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 1623.538603][ T31] ? usbdev_open+0xa7/0x760 [ 1623.543345][ T31] usbdev_open+0x16e/0x760 [ 1623.544745][ T5973] cypress_m8 10-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 1623.588814][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 1623.593879][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1623.624738][ T31] chrdev_open+0x4c9/0x5e0 [ 1623.634938][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1623.651915][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1623.673313][ T31] do_dentry_open+0xdf0/0x1970 [ 1623.693504][ T31] vfs_open+0x3b/0x340 [ 1623.697682][ T31] ? path_openat+0x2ecd/0x3830 [ 1623.723607][ T31] path_openat+0x2ee5/0x3830 [ 1623.739139][ T31] ? rcu_is_watching+0x15/0xb0 [ 1623.744000][ T31] ? trace_sched_exit_tp+0x38/0x120 [ 1623.758460][ T31] ? __pfx_path_openat+0x10/0x10 [ 1623.763555][ T31] ? __pfx___schedule+0x10/0x10 [ 1623.778320][ T31] ? irqentry_exit+0x74/0x90 [ 1623.783063][ T31] do_filp_open+0x1fa/0x410 [ 1623.787640][ T31] ? __lock_acquire+0xab9/0xd20 [ 1623.810460][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1623.815603][ T31] ? preempt_schedule_common+0x83/0xd0 [ 1623.825346][ T5973] usb 10-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 1623.828308][ T31] ? _raw_spin_unlock+0x3f/0x50 [ 1623.848372][ T31] ? alloc_fd+0x64c/0x6c0 [ 1623.852797][ T31] do_sys_openat2+0x121/0x1c0 [ 1623.857533][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1623.880543][ T31] ? __x64_sys_openat+0x30/0x170 [ 1623.885654][ T31] __x64_sys_openat+0x138/0x170 [ 1623.898651][ T31] do_syscall_64+0xfa/0x3b0 [ 1623.903273][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1623.912110][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1623.925157][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1623.933577][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1623.943369][ T31] RIP: 0033:0x7f50d198d550 [ 1623.952169][ T31] RSP: 002b:00007f50d27d8b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1623.964199][ T31] RAX: ffffffffffffffda RBX: 0000000000020182 RCX: 00007f50d198d550 [ 1623.981819][ T31] RDX: 0000000000020182 RSI: 00007f50d27d8c10 RDI: 00000000ffffff9c [ 1623.993544][ T31] RBP: 00007f50d27d8c10 R08: 0000000000000000 R09: 0000000000000000 [ 1624.001949][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 1624.010295][ T31] R13: 00007f50d1bb6218 R14: 00007f50d1bb6180 R15: 00007ffdc0982b38 [ 1624.018684][ T31] [ 1624.021814][ T31] [ 1624.021814][ T31] Showing all locks held in the system: [ 1624.033117][ T31] 1 lock held by khungtaskd/31: [ 1624.038035][ T31] #0: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1624.048108][ T31] 2 locks held by getty/5595: [ 1624.053279][ T31] #0: ffff88814d6580a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1624.063309][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1624.075789][ T31] 7 locks held by kworker/1:5/6001: [ 1624.084445][ T31] #0: ffff888021a81d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1624.096086][ T31] #1: ffffc9000b2b7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1624.108595][ T31] #2: ffff888028ee4198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 1624.117579][ T31] #3: ffff888032516198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 1624.126997][ T31] #4: ffff8880351f8160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 1624.136546][ T31] #5: ffff88804ad489b0 (&go->hw_lock){+.+.}-{4:4}, at: go7007_boot_encoder+0x25/0xe0 [ 1624.146433][ T31] #6: ffffffff8dfe4850 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xf0/0x2b0 [ 1624.157943][ T31] 1 lock held by syz-executor/16418: [ 1624.163335][ T31] #0: ffff8880b8639e18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 1624.173532][ T31] 2 locks held by kworker/u8:11/18071: [ 1624.179165][ T31] #0: ffff88801e74d948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1624.191083][ T31] #1: ffffc900136f7bc0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1624.203344][ T31] 1 lock held by syz.7.3245/18657: [ 1624.208675][ T31] #0: ffff888028ee4198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 1624.217730][ T31] 1 lock held by syz.5.3661/20193: [ 1624.222931][ T31] #0: ffff888028ee4198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 1624.232100][ T31] 1 lock held by syz.9.3837/20840: [ 1624.237282][ T31] #0: ffffffff8e144ac0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1624.247502][ T31] [ 1624.264305][ T31] ============================================= [ 1624.264305][ T31] [ 1624.272901][ T31] NMI backtrace for cpu 0 [ 1624.272921][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1624.272946][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1624.272960][ T31] Call Trace: [ 1624.272971][ T31] [ 1624.272982][ T31] dump_stack_lvl+0x189/0x250 [ 1624.273010][ T31] ? __wake_up_klogd+0xd9/0x110 [ 1624.273044][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1624.273069][ T31] ? __pfx__printk+0x10/0x10 [ 1624.273112][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1624.273149][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1624.273179][ T31] ? _printk+0xcf/0x120 [ 1624.273212][ T31] ? __pfx__printk+0x10/0x10 [ 1624.273243][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1624.273280][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1624.273317][ T31] watchdog+0xfee/0x1030 [ 1624.273353][ T31] ? watchdog+0x1de/0x1030 [ 1624.273394][ T31] kthread+0x70e/0x8a0 [ 1624.273427][ T31] ? __pfx_watchdog+0x10/0x10 [ 1624.273458][ T31] ? __pfx_kthread+0x10/0x10 [ 1624.273489][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1624.273511][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1624.273538][ T31] ? __pfx_kthread+0x10/0x10 [ 1624.273568][ T31] ret_from_fork+0x3fc/0x770 [ 1624.273594][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1624.273622][ T31] ? __switch_to_asm+0x39/0x70 [ 1624.273648][ T31] ? __switch_to_asm+0x33/0x70 [ 1624.273673][ T31] ? __pfx_kthread+0x10/0x10 [ 1624.273704][ T31] ret_from_fork_asm+0x1a/0x30 [ 1624.273749][ T31] [ 1624.273758][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1624.432364][ C1] NMI backtrace for cpu 1 [ 1624.432382][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1624.432404][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1624.432417][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1624.432442][ C1] Code: 53 de 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 ad 21 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1624.432459][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 1624.432476][ C1] RAX: cc82be9cd0039500 RBX: ffffffff81976918 RCX: cc82be9cd0039500 [ 1624.432492][ C1] RDX: 0000000000000001 RSI: ffffffff8d982fba RDI: ffffffff8be1ba40 [ 1624.432506][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f5b R09: 1ffff110170e65eb [ 1624.432521][ C1] R10: dffffc0000000000 R11: ffffed10170e65ec R12: ffffffff8fa0b3f0 [ 1624.432536][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a57b40 [ 1624.432549][ C1] FS: 0000000000000000(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000 [ 1624.432564][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1624.432578][ C1] CR2: 000000110c435eab CR3: 0000000075bb6000 CR4: 00000000003526f0 [ 1624.432595][ C1] Call Trace: [ 1624.432604][ C1] [ 1624.432612][ C1] default_idle+0x13/0x20 [ 1624.432636][ C1] default_idle_call+0x74/0xb0 [ 1624.432660][ C1] do_idle+0x1e8/0x510 [ 1624.432685][ C1] ? __pfx_do_idle+0x10/0x10 [ 1624.432703][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1624.432732][ C1] cpu_startup_entry+0x44/0x60 [ 1624.432759][ C1] start_secondary+0x101/0x110 [ 1624.432786][ C1] common_startup_64+0x13e/0x147 [ 1624.432821][ C1] [ 1624.433753][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1624.606076][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1624.615816][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1624.625895][ T31] Call Trace: [ 1624.629195][ T31] [ 1624.632230][ T31] dump_stack_lvl+0x99/0x250 [ 1624.636846][ T31] ? __asan_memcpy+0x40/0x70 [ 1624.641468][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1624.646692][ T31] ? __pfx__printk+0x10/0x10 [ 1624.651317][ T31] panic+0x2db/0x790 [ 1624.655235][ T31] ? __pfx_panic+0x10/0x10 [ 1624.659671][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 1624.665506][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1624.670904][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1624.677090][ T31] watchdog+0x102d/0x1030 [ 1624.681465][ T31] ? watchdog+0x1de/0x1030 [ 1624.685934][ T31] kthread+0x70e/0x8a0 [ 1624.690039][ T31] ? __pfx_watchdog+0x10/0x10 [ 1624.694757][ T31] ? __pfx_kthread+0x10/0x10 [ 1624.699377][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1624.704615][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1624.709840][ T31] ? __pfx_kthread+0x10/0x10 [ 1624.714466][ T31] ret_from_fork+0x3fc/0x770 [ 1624.719098][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1624.724232][ T31] ? __switch_to_asm+0x39/0x70 [ 1624.729019][ T31] ? __switch_to_asm+0x33/0x70 [ 1624.733806][ T31] ? __pfx_kthread+0x10/0x10 [ 1624.738439][ T31] ret_from_fork_asm+0x1a/0x30 [ 1624.743265][ T31] [ 1624.746653][ T31] Kernel Offset: disabled [ 1624.750992][ T31] Rebooting in 86400 seconds..