last executing test programs: 11m26.58221661s ago: executing program 2 (id=2608): modify_ldt$write(0x1, &(0x7f0000000180)={0x1fff, 0x20000000, 0x3000}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f075, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), 0xffffffffffffffff) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x2a382) r4 = memfd_create(&(0x7f0000000180)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6*t\xc8\xf4>q%\xa4\x81\xe2\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\x1cf\xf0\xf2xW?\x8e\xd9\x06\xc7\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<+l\xfdG\x8e\t\x96rT|\xe3\x13\x19\xe3%g\xa7n\xa93\xf5>\x81R\xe7`\x83N\xf4\xa7\xc8:\x8eY\x0e@\x1b\x17Y>b\x85\xd3\x12I\xbf\xac\x9eM\x884Z\xaf\xf3\'\x8aj\"\xd1~k\x7f%\x96\xf95&\x84A%\x97\xb8\x18\xa7\x88\xe3w', 0x1) pwritev(r4, &(0x7f0000000600)=[{&(0x7f00000000c0)="10", 0x1}], 0x1, 0xc00, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x25, 0xd, "eeddb7c25540993ad642248c7b0157ce0dc9b4e500476312cd6cb416f686ce0058265f66cdddf2e9ce8bb87ae03e87a61fb648d5c6a3e9977956be87176a30a9", "a863a5170a11d26a730cb3d1e9fb18cb0e58986d58e881bbe5e4230de84eea7a", [0x3, 0x800]}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/vmstat\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000740)=[{&(0x7f0000000440)=""/113, 0x71}], 0x1, 0x401, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010100000000000000000400000014000180060005"], 0x28}}, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$IPVS_CMD_ZERO(r7, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000900)={0xac, r2, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x400}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x401}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xb}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7fffffff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0xac}, 0x1, 0x0, 0x0, 0x10}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b88f8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) 11m24.575016522s ago: executing program 2 (id=2613): r0 = syz_io_uring_setup(0x184, &(0x7f0000000080)={0x0, 0x0, 0x13100, 0x4}, &(0x7f0000000480)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x5, &(0x7f0000000200)={0x77359400}, 0x1, 0x4}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000140)={0x5, r0, 0x1c, {0x9, 0x1}, 0x6}, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000140)=ANY=[@ANYBLOB="1808000400000000070010000000000000100000060000001802001076a3a1f610da315d05a4e0413a8ea599afd40e199969acd6f3aa65412fe964e31dfebe6378770ea350d654e6a49f144d4957e8341699639069181d8ef00feed107ba16d86b6e5ebe793174b787bd6da0a24dc082e049ab72195fe7c3ef11ea6ad0e8b3", @ANYRES32, @ANYBLOB="0000000000000000668000007fffffff1800000000000000000000000000000095000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) 11m24.186925313s ago: executing program 2 (id=2616): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) writev(r0, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x5, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$inet6(0xa, 0x3, 0x2c) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r6}, 0x10) lsm_get_self_attr(0x69, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x3a0, 0x150, 0x150, 0x0, 0xf8010000, 0x468, 0x238, 0x238, 0x468, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x1f0, 0x258, 0x0, {}, [@common=@inet=@sctp={{0x148}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r7, &(0x7f0000000dc0)={0xa, 0x4e21, 0x0, @loopback, 0x200}, 0x1c) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x9584, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001840)=""/198, 0xc6}], 0x1, 0x33, 0xfffffffd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x7, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000099323f08a5040330b23a01020301090212000100020007000400000028f09000"], 0x0) write$tun(r8, &(0x7f00000003c0)=ANY=[], 0xfdef) 11m18.827829805s ago: executing program 2 (id=2628): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x27, &(0x7f0000000000)=0xff, 0x4) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, 0x0}, 0x108) r2 = syz_clone(0x0, &(0x7f0000000000)="b573090721804325aa481be6393a41303e791ae0668a5f", 0x17, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140)="4d0436d206ca8e5eea584c81ff5ef34b97b7481781f56e52d63acbc26be1748c49a1a7f0472a428a8b65440e93135218ef7061c4d44afe4d65f381ccee34cc10e55bd9ec62ba2b45afc09b6630eab4a15e88804310e4fc9096f17c2f986f40a4caeab440ad82ec38f081ec6c3b17a70475e07d82f2550867b215d08bbddb332ac260b1c21950a5572d08104fec0c9c9f93eecbc4b9c0b29572fb0e756fbc8386ca8dd1b7dc2c99de94a174e728e5cdfab6429ca6ebde6a691243f0ee61") sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x4) 11m17.325298298s ago: executing program 2 (id=2634): mkdir(0x0, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x54) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000012c0)=""/168, 0xa8) 11m15.575629167s ago: executing program 2 (id=2641): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000080)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) io_setup(0x3ff, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) io_destroy(r3) prlimit64(0x0, 0x5, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000040)=0x280cb48a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000180)={0xfbfb, 0x7}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000", @ANYRES32, @ANYBLOB="000900000000000000618b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffff6e) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000e2174c9a0000000000000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="024000000100"/28], 0x48) unshare(0x62040200) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) 11m0.515764394s ago: executing program 32 (id=2641): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000080)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) io_setup(0x3ff, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) io_destroy(r3) prlimit64(0x0, 0x5, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000040)=0x280cb48a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000180)={0xfbfb, 0x7}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000", @ANYRES32, @ANYBLOB="000900000000000000618b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffff6e) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000e2174c9a0000000000000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="024000000100"/28], 0x48) unshare(0x62040200) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) 9m22.549048045s ago: executing program 3 (id=2904): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b00)={'syz1\x00', {0x5, 0x7, 0x3, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea46, 0xe, 0x1, 0x0, 0x0, 0x8, 0xc, 0x3, 0x5, 0x1, 0xb, 0x1000, 0x7fffffff, 0x51, 0x8, 0x800, 0xfffffffa, 0x3ff, 0x4, 0x7, 0x10001, 0x7bf, 0x0, 0x5, 0x6, 0x401, 0x80c, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x5, 0x9, 0x804d80, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x0, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x2, 0x56f00ca5, 0x5, 0x2a, 0x1, 0x23], [0x1, 0x20009, 0x4980, 0x1, 0x5, 0xe, 0x800, 0xc, 0xfffffffa, 0x10000, 0xfd8, 0x3, 0x5, 0x5, 0x0, 0xe7, 0x2, 0x7955, 0x2, 0xc068, 0x5, 0x9, 0x80, 0xb, 0x1, 0x40, 0xa1, 0x4, 0xffffffff, 0x5, 0x10004, 0x1, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xe, 0xffff3f15, 0xc, 0x2, 0x9, 0x7, 0x8, 0x2, 0x8000, 0x800, 0x5, 0xc5, 0x3, 0x1, 0xd, 0x8, 0x3, 0xfffffff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x7], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x6, 0x5, 0x8001, 0x7, 0x5, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x4, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x9, 0x9, 0x5, 0x8, 0x10000, 0xc9b, 0xffffff3c, 0x8b0, 0x7, 0x0, 0xff, 0x140, 0x2, 0x4, 0xb, 0x4, 0x6, 0x7, 0x7c12, 0x5, 0x1, 0x17, 0x8000, 0xb, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x7, 0x2, 0x0, 0x9, 0xdd, 0x1, 0x8, 0xc3, 0x8, 0x7a3], [0x9, 0x3a89, 0xffff9a7f, 0x200, 0x6, 0x802, 0x1, 0xfffffff3, 0x5, 0x4, 0xffffffff, 0x1f, 0x2, 0xa, 0x6, 0x2, 0x9, 0x101, 0x2, 0x66608000, 0x5, 0x7ff, 0x6, 0x5, 0xa476, 0x5, 0x9, 0xffff, 0xd, 0x0, 0x1, 0x1, 0x10001, 0x61, 0x10, 0x1000, 0x8, 0x100, 0x8, 0x20000000, 0x401, 0x1d, 0xb32a, 0xec000000, 0x2, 0x1904, 0x4, 0x4009, 0x8, 0x6, 0x80, 0x5, 0xfffffffb, 0x1, 0x6e79, 0x9, 0x10000, 0x9371, 0x4f89, 0x7, 0x580, 0x8, 0x80, 0x8]}, 0x45c) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f00000001c0)='./file1\x00', 0x24) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') open(&(0x7f0000000380)='./file0\x00', 0x0, 0x126) 9m17.108332516s ago: executing program 3 (id=2915): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x4, 0xfe, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) shutdown(r0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r2, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) r5 = io_uring_setup(0x3454, &(0x7f0000000300)={0x0, 0x594c, 0x2, 0x0, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x318, 0xffffffff, 0x1e8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x17}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ah={{0x30}, {[0x8001, 0x1ff], 0x1}}, @common=@icmp={{0x28}, {0xb, "b22f"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@empty, @loopback, 0x0, 0x0, 'vlan1\x00', 'dvmrp0\x00', {}, {}, 0x24, 0x0, 0x4}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 9m14.844336564s ago: executing program 3 (id=2917): mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x209f0000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0xd425, 0x1, 0xc}, &(0x7f0000010080), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, 0x0, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04) mount$9p_fd(0x20100000, 0x0, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000000000/0x3000)=nil, r7, 0x1, 0x4000812, r8, 0x100000) syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) mmap$xdp(&(0x7f0000127000/0x4000)=nil, 0x4000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r9 = socket(0x15, 0x5, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0100000004000000060000000b00000000000000", @ANYRESDEC=r9, @ANYRES64=0x0, @ANYBLOB="5c8f09faa00b0e6cf75334e9c4da22f8dd0d9df05f62f97790db0a3d579672ec48eaf38851e3b75c65", @ANYRESOCT=r0, @ANYBLOB="000000000000000000000000c3edcb58f1ec35f1000000000000000022c89e356cd6142d5add1c25cbe81ed46a760df0c7f8eb920a8ab4f0b82e334596ffcd14b5c193748714f603fc313e321470d68e609574a6644e05d7dafd5ceb2948bb839bc57b033eafe76195ecde062b8cc902b6ce7c8061cb54653180cec5a6e45d338b96f8c21647ea11fcaf9b63ccc8ccefc7611085272ecbdf767e36d82c7fda05a04b29ed9d2074c7ee5c19e7cdc093bb6aac9c6ee9f248c568a99fa40d"], 0x50) 9m12.004726399s ago: executing program 3 (id=2920): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x200002, 0x0, 0x25}, 0x18) mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0x10) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x200002, 0x0, 0x25}, 0x18) (async) mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0x10) (async) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) (async) chdir(&(0x7f00000000c0)='./file0\x00') (async) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) (async) 9m11.86462848s ago: executing program 3 (id=2921): timer_create(0x5, &(0x7f0000000040)={0x0, 0x1021}, &(0x7f0000000100)) iopl(0xc) syz_open_dev$sg(0x0, 0x0, 0x8002) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfaea], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x5e, &(0x7f0000003900)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xfff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$smackfs_change_rule(0xffffff9c, &(0x7f0000001140), 0x2, 0x0) write$proc_mixer(r4, &(0x7f0000000080)=ANY=[@ANYBLOB='?ASS\nDIGITAL2\nLaNE1 \'Mic Capture Switch\' 00000000000000000000\nALTPCM\nLINE\nDIGITAL3 \'Master Capture\' 00000000000000000000\nDIGITAL2 \'CD Capture\' 00000000000000000000\nTREBLE\nPCM \'Master Playback Volume\' 00000000000000000000\nVOLUME\n'], 0xe4) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) 9m10.053030131s ago: executing program 3 (id=2926): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x4, 0xfe, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) shutdown(r0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r2, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) r5 = io_uring_setup(0x3454, &(0x7f0000000300)={0x0, 0x594c, 0x2, 0x0, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x318, 0xffffffff, 0x1e8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x17}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ah={{0x30}, {[0x8001, 0x1ff], 0x1}}, @common=@icmp={{0x28}, {0xb, "b22f"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@empty, @loopback, 0x0, 0x0, 'vlan1\x00', 'dvmrp0\x00', {}, {}, 0x24, 0x0, 0x4}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 9m9.602536773s ago: executing program 33 (id=2926): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x4, 0xfe, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) shutdown(r0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r2, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) r5 = io_uring_setup(0x3454, &(0x7f0000000300)={0x0, 0x594c, 0x2, 0x0, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x318, 0xffffffff, 0x1e8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x17}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ah={{0x30}, {[0x8001, 0x1ff], 0x1}}, @common=@icmp={{0x28}, {0xb, "b22f"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@empty, @loopback, 0x0, 0x0, 'vlan1\x00', 'dvmrp0\x00', {}, {}, 0x24, 0x0, 0x4}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 8m1.11894647s ago: executing program 5 (id=3049): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000007f00000000000000", @ANYRES32=0x1, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000050000000100"/28], 0x50) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) socket$inet6(0x10, 0x3, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r1, 0xc0045405, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'vxcan1\x00', &(0x7f0000000680)=@ethtool_stats={0x1d, 0x6, [0x4, 0x100000001, 0x4914, 0x4be74795, 0x9, 0xff]}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000280)=@get={0x1, 0x0, 0x1}) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000300)={[{0x0, 0x8003, 0xe0, 0x3, 0x0, 0x1, 0x4, 0x1, 0xc4, 0x7, 0x3, 0x5, 0x7c}, {0x0, 0x0, 0xff, 0xff, 0x4, 0xfe, 0x5, 0x0, 0x3, 0x2, 0x0, 0xb}, {0x1, 0x0, 0x0, 0x11, 0x5, 0x9, 0xf8, 0x2, 0xd7, 0x89, 0x0, 0x0, 0xe0f1}], 0x7}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r4, 0x9}}, 0x10) close(r3) 7m59.626093456s ago: executing program 5 (id=3050): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x200000000000000}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x40000) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x1, 0x4, 0x1, {0xa, 0x4e22, 0x2, @private0={0xfc, 0x0, '\x00', 0x21}, 0x4}}}, 0x32) 7m55.679511597s ago: executing program 5 (id=3060): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x3, r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000500)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$afs(&(0x7f0000000180), &(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240), 0x85, 0x0) preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f0000000140)=""/52, 0x34}, {&(0x7f0000000080)=""/17, 0x11}], 0x3, 0xa3, 0x8) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x23, &(0x7f0000000180)=""/32, &(0x7f00000000c0)=0x20) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 7m54.280575936s ago: executing program 5 (id=3064): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unshare(0x22020400) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x94, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x80, 0x1, [@m_bpf={0x7c, 0x1, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x94}}, 0x0) 7m53.12021661s ago: executing program 5 (id=3067): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000007f00000000000000", @ANYRES32=0x1, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000050000000100"/28], 0x50) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r2, 0xc0045405, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'vxcan1\x00', &(0x7f0000000680)=@ethtool_stats={0x1d, 0x6, [0x4, 0x100000001, 0x4914, 0x4be74795, 0x9, 0xff]}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r4 = socket$inet(0x2b, 0x801, 0x0) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000280)=@get={0x1, 0x0, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r5, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty}, @ib={0x1b, 0x0, 0x0, {"7d0300"}, 0x0, 0x0, 0x6}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r5, 0x9}}, 0x10) close(0xffffffffffffffff) read(r1, &(0x7f0000000340)=""/254, 0xfe) 7m51.669890078s ago: executing program 5 (id=3072): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x4, 0xfe, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) shutdown(r0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r2, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) r5 = io_uring_setup(0x3454, &(0x7f0000000300)={0x0, 0x594c, 0x2, 0x0, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x318, 0xffffffff, 0x1e8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x17}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ah={{0x30}, {[0x8001, 0x1ff], 0x1}}, @common=@icmp={{0x28}, {0xb, "b22f"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@empty, @loopback, 0x0, 0x0, 'vlan1\x00', 'dvmrp0\x00', {}, {}, 0x24, 0x0, 0x4}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 7m36.569269787s ago: executing program 34 (id=3072): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x4, 0xfe, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) shutdown(r0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r2, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) r5 = io_uring_setup(0x3454, &(0x7f0000000300)={0x0, 0x594c, 0x2, 0x0, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x318, 0xffffffff, 0x1e8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x17}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ah={{0x30}, {[0x8001, 0x1ff], 0x1}}, @common=@icmp={{0x28}, {0xb, "b22f"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@empty, @loopback, 0x0, 0x0, 'vlan1\x00', 'dvmrp0\x00', {}, {}, 0x24, 0x0, 0x4}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 13.940864245s ago: executing program 0 (id=4026): r0 = socket(0x2, 0x80805, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240020005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)}], 0x2) (fail_nth: 6) 12.334785352s ago: executing program 0 (id=4029): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000180)={0x4}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x68, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @broadcast, @device_a, @initial, {}, @value=@ver_80211n={0x0, 0x64, 0x2, 0x0, 0x0, 0x2}}, 0x0, @random, 0x144b, @void, @val, @void, @val={0x4, 0x6, {0x0, 0x0, 0x1, 0x2000}}, @void, @val={0x5, 0x3, {0x0, 0x1}}, @void, @void, @val={0x3c, 0x4, {0x0, 0x0, 0xae}}, @void, @val={0x72, 0x6}, @void, @void}}]}, 0x68}}, 0x0) 11.249972897s ago: executing program 0 (id=4031): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000140)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) 10.896581992s ago: executing program 0 (id=4035): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="020080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x0, 0xb, 0x2, "f440"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000440)={0x0, 0x6, 0x2, "63d2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000980)={0x14, &(0x7f0000000200)={0x20, 0x11, 0x38, {0x38, 0x21, "d36e4780b5de849184df1a2ef6516e6317727788dd664903d9003c696d528e88a18c84caae2b78978d8ff56855bb26e26931aaed72fc"}}, &(0x7f00000007c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc1a}}}, &(0x7f0000000c80)={0x44, &(0x7f00000009c0)={0x0, 0x7, 0xcf, "1d31177aaf759ff93c41fa5200a9f0537507e0eb89e17e5fe184674b7e6f79f0fd03820c12485d4167045c65cde12bf231cbb5d6bc55d7b68ce1dbcd9d0bcd42f4fafface185ffae9a6e71494e446676b659bb1b3c9ab0327d9d47fc733da5950523493163f3419add5dd7447c0115aa1bee9a710811a3ef56737e8c49195488c70cc5e46f82cf66af7a4f49ad8db36cd8e7f36ba663f85556d2b68bbecca377b6811d9e79135a4b82ea8b809b2fd71259698e10100df882f374f7778eeea14513059ba559e50fef7ac1839d2ac9b0"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0x3a}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000b40)={0x20, 0x81, 0x2, "308d"}, &(0x7f0000000b80)={0x20, 0x82, 0x3, "e9fd81"}, &(0x7f0000000bc0)={0x20, 0x83, 0x3, "44e7ad"}, &(0x7f0000000c00)={0x20, 0x84, 0x4, "18bd299b"}, &(0x7f0000000c40)={0x20, 0x85, 0x3, "8fbc3b"}}) 9.162676306s ago: executing program 6 (id=4042): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000180)={0x4}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x68, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @broadcast, @device_a, @initial, {}, @value=@ver_80211n={0x0, 0x64, 0x2, 0x0, 0x0, 0x2}}, 0x0, @random, 0x144b, @void, @val, @void, @val={0x4, 0x6, {0x0, 0x0, 0x1, 0x2000}}, @void, @val={0x5, 0x3, {0x0, 0x1}}, @void, @void, @val={0x3c, 0x4, {0x0, 0x0, 0xae}}, @void, @val={0x72, 0x6}, @void, @void}}]}, 0x68}}, 0x0) 8.787863371s ago: executing program 6 (id=4045): socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000140)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) 8.538096361s ago: executing program 6 (id=4047): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(r0, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x42000773) unlink(&(0x7f0000000000)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, r7}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000140)={@loopback, 0x80, r7}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r9}, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r10) 8.302232427s ago: executing program 4 (id=4048): syz_open_dev$mouse(0x0, 0x8, 0x2000) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x3, 0x403, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x2d298, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffc, 0xfffffff8, 0x0, 0x0, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffe], [0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x351e, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x25d], [0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) r3 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_DQEVENT(r3, 0x80885659, 0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 7.042999375s ago: executing program 7 (id=4049): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x8}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0) (fail_nth: 10) 7.009203157s ago: executing program 4 (id=4050): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x2, 0x0) write$FUSE_NOTIFY_STORE(r1, 0x0, 0x28) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x80, 0xfffffffc, 0xdc67}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r4) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r4) recvmmsg(r4, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000001c40)=""/4096, 0x1000}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000004c40)=""/4096, 0x1000}, {&(0x7f00000008c0)=""/229, 0xe5}, {&(0x7f0000000240)=""/105, 0x69}, {&(0x7f00000000c0)=""/17, 0x11}, {&(0x7f0000001600)=""/117, 0x75}, {&(0x7f0000003c40)=""/4084, 0xff4}, {&(0x7f00000018c0)=""/147, 0x93}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x5}], 0x5, 0x40008022, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r3, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x44}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', r3, 0x0, 0x0, 0x0, 0x0, 0xd, @dev={0xfe, 0x80, '\x00', 0x8}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x0, 0xfffffffc}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00e929fc87e4182fc05744151bcb76ea315f037e1babba3b9ed80449deccc42446755f2ac08ff8d8502e7275cb377025cbf14d0ed1585c49a5230ab6fd138e9d99b1ea38931165d482a7e0a092cc268d250f7f07a210e105efe47d36cf0f", @ANYRES16=r6, @ANYBLOB="200000000000000000000600000008000300", @ANYRES32=r8, @ANYBLOB="0c009900ffff000036000000"], 0x28}, 0x1, 0x0, 0x0, 0x2000001}, 0x0) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)={0x54, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x34, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @val={0x6, 0x2, 0x2}, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x54}}, 0x0) r9 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@local, 0x200000, 0x2, 0x1, 0x0, 0x0, 0x2}, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r10, 0x400452c8, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, r9) socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 6.626260265s ago: executing program 7 (id=4051): r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, &(0x7f00000000c0)={0x1, 0x0, 0x7e, r1, 0xd}, 0xc) 6.464643302s ago: executing program 6 (id=4052): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) socket$inet6_icmp(0xa, 0x2, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfb, 0x4000000}, 0xc) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000001100)=""/4096, &(0x7f0000000040)=0x1000) r1 = fanotify_init(0x200, 0x40000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r1, 0x101, 0x48001051, r2, 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlink(&(0x7f0000000100)='./file0/file1\x00') 6.288986768s ago: executing program 7 (id=4053): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000002940)={'bridge0\x00', &(0x7f0000002840)=@ethtool_drvinfo={0x3, "0fe2f29f98e2bbc9e36c2ea2c880daca29edcd136d896eb2019758829ae7428f", "f2f9c504c3899de26313d039d9feb1c95497cb52eb50a2cfce284707a06c3693", "4843c380eaa75c59044c7b40bbbae155f0474a30e891beacd7074438c0dce8a9", "2304b000b43dab220c81007163619759bd7af566ad0bdef0b23f62adf57b033b", "c85202d259faf2f9f636b290264ab4379977afbd18199351a0f81967f02eebb3", "70c728c6ffb30bc45a7a2606", 0x2, 0xffffffff, 0x2, 0xa6, 0x7}}) unshare(0x20000400) r1 = socket$kcm(0x10, 0x2, 0x0) getsockopt$sock_int(r1, 0x1, 0x28, 0x0, &(0x7f0000000140)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02ddff00040000004049c1a2a86c806e001e91c6d0000000", @ANYRES32, @ANYBLOB="0f0e575300000000000000000000000000000000027aa164de47de0754a4ab40de4a54fa3ca51f3d2ce9c71a4e9901e7c3390eec35db2d71a62c96467a4754c63d1a1e079547dbec2ffadff669ff48d87a562c664ebb8b76f86a50d899a93ddb166ead6b5f6d348b5fbca0bfbb63b172a91ee30f75fd57f800782c932fe7acd2b693e709673743bb1fe314a9f8f4100300000000000000dad9e593238d5f0b5a283e4dd66257fa455616d41c0baa421a6aa4c08b14ea2d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x0, 0x80, 0x2, 0x4, {{0x10, 0x4, 0x0, 0x2c, 0x40, 0x65, 0x0, 0x4, 0x2, 0x0, @private=0xa010102, @multicast2, {[@ra={0x94, 0x4}, @end, @cipso={0x86, 0x17, 0x3, [{0x2, 0xf, "6604536d4daa16edd4ee5908a7"}, {0x1, 0x2}]}, @ssrr={0x89, 0xf, 0xfb, [@multicast2, @multicast1, @rand_addr=0x64010101]}]}}}}}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000300)=0x14) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x0, 0x800014, 0x9, 0x42006, r2, 0x2, '\x00', r5, r4, 0x4, 0x5, 0xffffffff, 0xe, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0d0000000a000000040000000500000000000000", @ANYRES32=r6], 0x48) socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x12, &(0x7f0000000080)=0xcca, 0x4) 6.286949523s ago: executing program 0 (id=4054): syz_emit_ethernet(0x22, 0x0, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$sysctl(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x862b01) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write$sysctl(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet(0x2, 0x1, 0x100) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7820fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000dc0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x37}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000240)='percpu_alloc_percpu\x00'}, 0x66) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000995"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 6.285340628s ago: executing program 1 (id=4055): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'ip_vti0\x00'}}, 0x1e) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x2, @multicast, 'veth1_to_bond\x00'}}, 0x1e) connect$pppoe(r3, &(0x7f0000000340)={0x18, 0x0, {0x0, @multicast, 'macvlan0\x00'}}, 0x1e) mmap(&(0x7f0000000000/0xfbe000)=nil, 0x7fffdffff000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x2380, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r6, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r9, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x8, 0x19}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x8041) getsockname$packet(r8, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r7, &(0x7f00000000c0)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(r6, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@bridge_setlink={0x88, 0x13, 0x100, 0x70bd2a, 0x25dfdbfc, {0x7, 0x0, 0x0, r11, 0x809, 0x80}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x1}, @IFLA_ALT_IFNAME={0x14, 0x35, 'vlan0\x00'}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x67043}, @IFLA_EVENT={0x8, 0x2c, 0xfffffffe}, @IFLA_WEIGHT={0x8, 0xf, 0x4}, @IFLA_MAP={0x24, 0xe, {0x0, 0x9, 0xfffffffffffffffe, 0x6e68, 0xf, 0x7f}}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x20000800) ioctl$SNDRV_TIMER_IOCTL_CREATE(r6, 0xc02054a5, &(0x7f00000003c0)={0x4, r7, 'id0\x00'}) r13 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r13, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file1\x00', 0x8000, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r14 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x3) pread64(r14, &(0x7f0000001440)=""/126, 0x7e, 0x41) ioctl$VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000003300)=@mmap={0x0, 0x2, 0x4, 0x1, 0x5, {0x0, 0xea60}, {0x5, 0x8, 0xf, 0x81, 0x0, 0x9, "3a241b29"}, 0x19, 0x1, {}, 0x9, 0x0, r12}) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) 6.230862801s ago: executing program 4 (id=4056): socket$xdp(0x2c, 0x3, 0x0) socket$kcm(0x2c, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, 0x0, 0x0) 6.050183705s ago: executing program 4 (id=4057): r0 = socket$kcm(0xa, 0x3, 0x87) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{0x0}, {0x0}], 0x2}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001100)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xe}, 0x10000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4000c0, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = gettid() rt_sigqueueinfo(r5, 0x21, &(0x7f0000001500)={0xc, 0x0, 0x4}) socket(0x40000000015, 0x805, 0x0) bind$802154_dgram(r4, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r6) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, 0x0, 0x2000c094) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r6) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) connect$802154_dgram(r4, &(0x7f0000000240)={0x24, @short}, 0x14) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) io_uring_enter(r1, 0x4d10, 0x2, 0x2, 0x0, 0x0) socket$isdn_base(0x22, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000380)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000040)="ff012303000000000000009cf32c9200002c71a8c6549be9e8d2959b1cf3ccf77600"/45, 0x2d}, {0x0}], 0x2}, 0x44810) 5.962643099s ago: executing program 7 (id=4058): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x200000000000000}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYRES32, @ANYBLOB], 0x3c}}, 0x40000) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x1, 0x4, 0x1, {0xa, 0x4e22, 0x2, @private0={0xfc, 0x0, '\x00', 0x21}, 0x4}}}, 0x32) 5.398956079s ago: executing program 4 (id=4059): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) mknod$loop(0x0, 0x2000, 0x0) mknod$loop(0x0, 0x2000, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000acbc5840ba0d0030ea26000000010902120001000000000904"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x0, 0x17c1, 0x8}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000006, 0x1010, r0, 0x49e2b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) 4.991036408s ago: executing program 1 (id=4060): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$dri(0x0, 0xd21, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x17, 0xb, &(0x7f0000001980)=ANY=[@ANYBLOB="180000000000000000000000782e040018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f6ffffffb702000008000000b70300000104000085000000cb00000095"], &(0x7f0000000040)='syzkaller\x00', 0xd, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x11, 0x90, [0x200000000c40, 0x0, 0x0, 0x200000000c70, 0x200000000ca0], 0x0, 0x0, 0x0}, 0x78) 4.80472185s ago: executing program 1 (id=4061): syz_open_dev$vim2m(0x0, 0x800, 0x2) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = fanotify_init(0x8, 0x101000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_REV={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x0) fanotify_mark(r2, 0x1, 0x40000002, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f00000006c0)={0x1ff, 0x0, &(0x7f0000ffc000/0x1000)=nil}) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$sequencer(r5, 0x0, 0x0) 2.955611142s ago: executing program 6 (id=4062): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x202080, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0xfffffffffffffff5, r5, {0x7, 0x1f, 0x0, 0x490420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}, 0x50) syz_fuse_handle_req(r4, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r4, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000000000080002"], 0x7c}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010029bd7000fcdbdf252100000008000300", @ANYRES32=r10, @ANYBLOB="24002d800500"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)={0x88, r12, 0x5, 0x70bf26, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x43, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x128b, @void, @void, @void, @val={0x4, 0x6, {0x4, 0x8, 0xfffc, 0xe8b6}}, @void, @void, @void, @val={0x2a, 0x1, {0x1, 0x1}}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x8, 0x3, 0x2e, 0x8}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x88}}, 0x20000014) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000240)="66660f6f489e3ec49a8b0066b9800000c00f326635004000000f303667f30f70a914be0000d50f300f20e06635010000000f22e00f30f20f2d7c00f3ac66b968080000", 0x43}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2.719412567s ago: executing program 1 (id=4063): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x267a4e37}, 0xc) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, &(0x7f00000000c0)={0x1, 0x0, 0x7e, 0x0, 0xd}, 0xc) 2.412155652s ago: executing program 1 (id=4064): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f000000070000000c000000ffffffff00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000fbffeaff00"/28], 0x50) syz_io_uring_setup(0x88f, &(0x7f0000001100)={0x0, 0xaedf, 0x4000, 0x1, 0x1f0}, &(0x7f0000000040), &(0x7f0000000000)) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0x5, 0x8, 0x2, 0x1, r2}, &(0x7f0000000240)=0x10) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000080)={@empty, @loopback, 0x0}, &(0x7f00000000c0)=0xc) getpeername$packet(0xffffffffffffffff, &(0x7f0000001180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000011c0)=0x14) sendmmsg$inet(r1, &(0x7f0000005440)=[{{&(0x7f0000000100)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000280)="38e4621f45c965a3b04bc88294ced3b5b1be129ce63313a912ada4ff4be534c5d5abed4540e687e943bb6a161e6daf00d0712c7f428bff25b5f32ea63e4f10dd3e133861b8580a1f000f2bf76292f1792ce3a551e5aed5286cff771b8a410fb575fd398dcf40b2793d839d1d73", 0x6d}, {&(0x7f0000001200)="2819c12407a2ed2f5389f115d34ae0c3131e666bff198ce0186f476cc26f73f7949654416f474ac808b41c90f3732ad9173e86b3d3b5bae1161f6ffcb9662d0816b154ff2e0410f0d56181e349d7fe13d2631f96cd2c9185ad882b2cbccd04f3525f71c077f8fde879b831ebf1f04072b3ae8f6f9693ddc94ba99a5dda56abc0571b11afbbd088683ebeab32", 0x8c}, {&(0x7f0000000300)="9b2caa5c30147b273c3c44ef18d817314c8e7437fa1cbceed121d02bbfeae0e0e8d36b774463eb20b3687fbf3070f991866cd4d8028bec3d21d26e77474ca27b138c2711f1d3dba19bf3ac4bbc1ca4deb2cb3c61ed32cb76d9b0bf6317fe4b0be08893319341f55316e3cda3235772d3ef159496672c004fb2b6d08f47fb8cada40e665b973e344d35361bcf04122594d6f5610483f254a3261c062638ff60f86cd2be27e6660d2c57eb3325abde16f02774530ebe66fc", 0xb7}, {&(0x7f00000003c0)="364cdf73fe403eebc0d1077a99d8d79457d561077e2a6af7eda4c7e2815e2454e17c54d2dec9215bd8321d69fa74340c6c8e0dc53ac64a082e492f09fc8d0321cb30340403c8eebea43d026ef42c46e204e56a7fb221e43f9f1e1387c5e243471c7fcec591fdfbdc9b453d8dd68f68e94e2b4ac16a719bd98b9bb87ea7c3b3b38cd509686b8e126e520f69395446ff593b67bd1cec068d59", 0x98}, {&(0x7f00000001c0)="c86607d7099a59ed7be542e4df78fced6af126d2d8e960a77bcddc112b5da25688dd7d6962fa74c03d191a181746e703400056744e", 0x35}, {&(0x7f0000000480)="348a20639afbe8b8636b5042147d45d4905043e9c6128eae570b7dd3a722d8e0b8e074b2b0cfadf0aef0cd823afc", 0x2e}, {&(0x7f00000004c0)="ade181e85143ce3a6ad68e2b7d48905d1332581ddd8efa92f96899e1646b4e02c8fe443a54d9e7e8e6e3290e304e", 0x2e}, {&(0x7f0000000500)="fe0febc17ce268327d0803df223fccd7d6ac7e1cd75cdcadfcd9e8569105e0f24908d5468d81bdd80a4bb39204b5dbab31636f3ec4", 0x35}, {&(0x7f0000000540)="6c219258f9bee2fef2b553e6bb454db8cdf2fbdbc8572d67bb5649afb308b7f6c24df5c2414a06a2f95e5321cb4decd772baae1e990d08d4873338b6cd3fb1efa3431bf9b33104ac31d058177318a958c348a203a94b875cb6af7ca3a20541a991e5e8222ae5bacea087ecef4973f07d2228e3c53c3dd1af9eac8babedbb93050644ef5f3a62796e030e252800c17acee52d930a3ad72bc3c0fd46e162efe60106b050de202533029cf7167eb870ce8a1c8d5fbac543", 0xb6}], 0x9}}, {{&(0x7f00000006c0)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000700)="7d73979ef3a63fd8cc3b8b0dff3035694d1531a2d0cd13a8e2ef9489683b298b0156bcff4b008cda3e58b60c951035350503203034c9a64d071a96b09ea289f30b34051629501306a65566dbc0020eadcc9cac1f4e8e85042540c1ecd95e89e98d91f3b1c48593debd", 0x69}, {&(0x7f0000000780)="e31925f6464ecf91b80291233941191d54be948819c029b8c7d256ca55059432eb609ac879c201a70d6c9e5500ee38c1ad97ce4d6bb5f9f78f3b185c20ac045c4472bd2b935149e10fd9fc5982c8367d7c644a83592ad73df849b7e1b5229bdc10de484cb547bb53e28721156ab3a1a0bd17f4b1b6a408d4ec5ae838ebcc646b69aac49f5d3f4e1ab43dfe82f97025fe6b8250e8facd3c6f533ca630d8387e23431cfa85f9ceb780640635ed2fd8b95eb4220915222e8ae4529f7b0457d3bd17c36509eabaae373ee79c435a15a92f44371258c5931935784e1158a1e001833091030ed7f5d4324a517d2afbee8c3990eaf150c4e6029abb0b", 0xf9}, {&(0x7f0000000880)="6c57bec9efb981c9b56568a02fe05defba6b011fe239ab2bd63897d866fe8f12e1114b65d1e6c34a63c4f28d2805962ad10b72b5c5435a58aa77b5b7fbf428e3a2b8bb2bbc885f257ad27150403eef2014166f525106b40832364aa73530a44946593af12c9afe", 0x67}, {&(0x7f0000000900)="b10a75ae17f793a5c5dff70a92795161798cabf9fb3abfc377e943c0c13f38125ab85090fcee79945e4a548bd5", 0x2d}], 0x4, &(0x7f0000000980)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x69}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @rand_addr=0x64010101, @empty}}}], 0x68}}, {{&(0x7f0000000a00)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000a40)="026aea58d96d67a2862e1dbc4a2f556655b3299fc6bda3f2d89ce29fd27637c68724cfc03022e5416d8b4b8d7226f09055f63779", 0x34}], 0x1, &(0x7f0000000ac0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xa}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x800}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @rand_addr=0x64010101}}}, @ip_retopts={{0x58, 0x0, 0x7, {[@lsrr={0x83, 0x1b, 0xeb, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @broadcast, @private=0xa010102, @multicast2]}, @timestamp_prespec={0x44, 0x2c, 0xe4, 0x3, 0x8, [{@remote, 0x9b13}, {@empty, 0xff}, {@empty, 0x1ff}, {@broadcast, 0x1}, {@remote, 0x10001}]}]}}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@lsrr={0x83, 0x2b, 0xb1, [@rand_addr=0x64010101, @rand_addr=0x64010101, @private=0xa010101, @broadcast, @remote, @rand_addr=0x64010100, @remote, @dev={0xac, 0x14, 0x14, 0x15}, @local, @multicast2]}, @timestamp_prespec={0x44, 0x2c, 0xff, 0x3, 0x1, [{@empty, 0xc}, {@local, 0x5}, {@private=0xa010100, 0x6}, {@multicast1, 0x81}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x59257934}]}, @noop, @ra={0x94, 0x4}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast1, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x1b}}}}], 0x188}}, {{&(0x7f0000000c80)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000cc0)="faae2c98b0a752ed1631cfa3b1b32c990737f9c9b9c8d0240797d7299011a2134fe965a5e22c954f0b0e2652200fb41632c4d7182779f28c16a2d433eddb2d013ad935efd6c44875730a86dc0a420f7e73f64b786fdc9df49aeb7d83f10a057b212df1b4e42342ace13788ff66824a28e38a00340ad042a97019ea9f464a431f534d4363749a21a9b2844146699b5c124aa97384493fb25a34d3416d1d4667ad4902623621f3e23abf25a824e0010a6cdf00e682959918ceedd69b104e41dea2f4c55bc6b89e7f62ff82957dd6080923dc40bb3e9c11f616953dc4cf2b", 0xdd}, {&(0x7f0000000dc0)}, {&(0x7f0000000e00)="838bd7ca0cb8ab7662bbeb262c0d6e0d689a828047123d20bb7b8604b2a6983f6f0b3559a08225c0a29bdba77e641f7eecc8d38c945ba27d5c15d7a4bceffe6f7363f389f07fa571f0cdfb9ac1cc3d4067860931ae948d2e97b7d4b070d1ce0c488fbea80afbc7d1cb9db87d3a4dd106acb1c0cca24e4289efb726204b8ab177835fa19371e5c1e1d31af54f86746f51545a7aad871dceeff7849c571e4590b05a445d3cb9a76b6fec6649f40a7332d8a3da034ae1ccc99df62ce278288cb7a69b5cf97f452c40109477a53fb1fc452b59bb4574f448ec1ada2ecaf57458fc9b647238562a", 0xe5}, {&(0x7f0000000f00)="3e1e3df1e19ffdff05bbc851ac17173926643a3cbc04bbc41bf8ecb35006a1e17e8bde177d08a6c6ee2205d6b17bca30bf1c96cd3999fba55d2cdd9bac88f6ab8d927af2579bf5bd8e0d3c754e7b558fdfb1c08e8675c47cccd03c126c5bc2fc806bed05c93a75cc604bb14e5325fc71d5ecc5069ee4dcfd55802b963fb193be854704259486a11384fe3e6731e8fe91373b549677e8796ab65404aee3d41ee53aa3e4bf2883837a304b30c59a08bdea71e5bd099f6fda153481efcab89644210f0638b289e21ca8d8d437e9535c7b9f5d", 0xd1}, {&(0x7f0000001000)="2ee3a821ae682278beec52a5a7393c61ec1fd7301577faed1931a9c3029e7c2061deedfa107dfdf1552bd1eb815c78f3d8fe5931a635b5e2c74370f51789625c452ee26174a0dd710330", 0x4a}], 0x5, &(0x7f0000005680)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast2, @remote}}}, @ip_retopts={{0x50, 0x0, 0x7, {[@noop, @noop, @lsrr={0x83, 0x2b, 0x6a, [@multicast1, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @rand_addr=0x64010100, @multicast1, @broadcast, @empty, @remote, @dev={0xac, 0x14, 0x14, 0x31}]}, @generic={0x88, 0x2}, @timestamp={0x44, 0x10, 0x8b, 0x0, 0x6, [0x1, 0x1, 0x7]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @loopback, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0xc0}}, {{&(0x7f00000012c0)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000001480)=[{&(0x7f0000001300)="56a8a12c12e2d2fa9667663289e0990a85527bfb1247a0ae26f2f7de24d420453f7aadb86d807ed6ddb0419b3db29e5e46c4dbd9e4b6a88458ef6538967d41e51a2e473c1645ce9700ea55d36f35c5c70076415dce5a87eb9d965b8fb70b6bd3da127dddf7ee0295d13042548b2a850f241bc8701db4973969aeb47503716f8a32b35d5c607e6cd07707863b77ebbf3dcdcd4f8a863bead93e0c139d07daf0732734dc86a404a489a6abc4982d56f98981f1fe1ddbb79b5ba9d5e4f0744d6f32e054622436c051bce41cfc773d7e39b68b0a3736a02476e9268b4cfb0592175a4a8b9e1e06609d5ae0ac", 0xea}, {&(0x7f0000001400)="0ec739d12e5b7cc38e4c8a0fb24f717574aefb9f275fe1b4fea353c1ea541f5b2fa65a3fe68752eda16948bf1333376f9c4df4cc81d2e6e91710db23f353438f72284542b1509a7d731e63b2db05c2c7d4f24ff2054a22dd0a4b2f266b", 0x5d}], 0x2}}, {{&(0x7f00000014c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10, &(0x7f0000002900)=[{&(0x7f0000001500)="9ae6e5b0e5418d820a6f18c7a7bf7da67490c584639a018e", 0x18}, {&(0x7f0000001540)="64c34455e31c53462bcfa8d03d7956128789adecc4cb05d11125f0aaad507899b5ee5ef0a9ab90737589c6e82809b16f228a97f5f3221deb367b02c5658377a1bc41961fac255a6d725b96cf9099b5da7b19a55614b2a3d66cec879305809f45909c54af826a0fe9adfaf7eeabdd606699a7a74c7a3ba2598a631192c11dc4bd94f1219ea39e5dc03f1ca4c63b860a8ced46b621fd311fa5212e51d1e5c04a7e6081acfaa3766b114c700dd20c2f79c12b12fdc244f7145fa81b063b51f6fa1c4b8b594d7926e0a1dd10ae6e872b55f673dec33a7d6e21403f556e94d678f538892dbc54e905", 0xe6}, {&(0x7f0000001640)="786563a6541e779d2a8a72289dec61e1c32ce23ca9fd66f6eb7cdfc2e6ee3e7df1e319d76b22b182a276e2b329e02f1f0f8551549669bb4a1d06efd1dff94c0d276bbe42ae3ace6c252324b8a922d1d044e34dd4c59f0cfeda9602c8ce349bc82e6a055b37b4b9f5476b1b2fd14023dd900f2d08f9486a507f8a15e046660132cc6bf3647c882581088714ed4f385f733435e2c8eaea7403a18198bfa2707fdf2f68b51c68c98956c2471a27258f5cde1bd33f22e45cee7d61932554de8682ca58eea38ec9dc46f59d00e6b12f80a348ed9484bb33bbc5bd", 0xd8}, {&(0x7f0000001740)="1d8e83b37dae7ca39632a30938a89921864a553b1e", 0x15}, {&(0x7f0000001780)="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", 0x1000}, {&(0x7f0000002780)="e33de57c7554970d55584b", 0xb}, {&(0x7f00000027c0)="7850e18222f8cd03dbdb667a2826dc404377bd7f08610fb6f0789e5b04cb46a3fbc2c25246f1a2c3bf4797f35575d014358c4977b04b2f6cd8511775b752fe3c86b5d40e3e3396a35fea84a9e382f2f5f1ac6b05bcebad991c7ea5b55d9d39229e606b9e99", 0x65}, {&(0x7f0000002840)="b0f0289323bd7b121684f7fb64135d5aa77fcdb4ccc2cc2d9bf898955259", 0x1e}, {&(0x7f0000002880)="0c7470b6bfad62c1d06ffcb2ad126fb6df1414d1e189f06737d1fa8afaa585b43db310ef9f71bd7a7e53f537dd5259291a3ebd3802", 0x35}, {&(0x7f00000028c0)="85a3c98f293dd2b0bebad83fc3", 0xd}], 0xa}}, {{&(0x7f00000029c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000003bc0)=[{&(0x7f0000002a00)="eb79135c05e20bb92df2c977568ba28dfd7fddbfd67928ccb4bb46defbb2b8492b7f5eed175090b65a18df03858cbb3bd143d3acfc220e91edd47cb658b1e2df060bc5a128ea2612c71f8c8899481f73dec9ed7e4617d3793f48ef70", 0x5c}, {&(0x7f0000002a80)="388980a22eb248b4598c016e661249d93e4a9c0186e45c9b2618eaa5798cc8f0c74baddb706b889cd62c7cce64ba02047a8eb1e5c4599e6c9dde5e70c705ce80ba32ea8da6193127473dc3ee10973f9af3835fec61a70bf0140767a9b6bf780a15e49681f9a2b260694b434cc2eb5a7d4c4e67e698e43769380479434f3e5a5ec10f2d0fc76d67f721f13c1da09d410bcfba3bde4822e5ec373adf7518656fbf439489482a2f80a13565eb77cb516f88d896e743bb7d737da5c4f8d48e8e02d29761d12c79ca7dc3b97824a097d2df5b1c184787455b978b5e76f7c16a54190d5d1f8087", 0xe4}, {&(0x7f0000002b80)="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", 0x1000}, {&(0x7f0000003b80)="66f3585778f8", 0x6}], 0x4, &(0x7f0000003c00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7f}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x100}}], 0x48}}, {{&(0x7f0000003c80)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f0000004e00)=[{&(0x7f0000003cc0)="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", 0x1000}, {&(0x7f0000004cc0)="41c674a7e6ef22a28f9a544a582c745c3103a932810fb3a332b5529ea7", 0x1d}, {&(0x7f0000004d00)="0a6c7958ce0a1176b954bdb56e708782fe4b7a2c662c73efa54a666f79dd61f3491dafd2097017ac02b44de4f2016e8ac54d8d555232ad2898ee0fd450fcd7bfcd63c0818d3a69bedc21582ef0989d80feb1259c9bf149aa2e2dcbd167387f684a82c69d2c62eed2e06079f3f7f2b09d5862b724b726a501acfdfe66207010be8682e0be27d8825f8dc9b1c2431b501b25b059776510f963993301a1a789569da38680d86446cc2fe38f567bd15e6e42a441ba0763a0b4b628b8e551a74e33c1d123b9b0a3a7e2d071d024414c1e418942e9cf08cbbc45724a4f616e7c521dfede", 0xe1}], 0x3}}, {{&(0x7f0000004e40)={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f0000005340)=[{&(0x7f0000004e80)="0a5c15f7986fb73d01a81555a2edd13e6ec839648c45373a44f9e29e5088d88939c2d8620bba1095f1fd1c735df58514e7e79bbb96dbf8f640126d035377b0fba106d337b3a87c9b1a28674692650b4d1e8225c1f1ef", 0x56}, {&(0x7f0000004f00)="7899479441fa9722079842b03625d8ce25a1c0b2d8b0647ebc993964e32382b233276f6f1ea2453f43cf9f490b4c06", 0x2f}, {&(0x7f0000004f40)="68d36ae092fbdb084be33f9eb60f01bee4915c8fd532fd4c1d9e58e8e1", 0x1d}, {&(0x7f0000004f80)="5fe4cab88dc6d662dc53381bcba5", 0xe}, {&(0x7f0000004fc0)="b7b2d06e83a0c8b935968447fb0d83abbc648f661312facd45c0d7f7b1f444ebb8ede267025d0cb42f2f3a37d732146b42369b1e4e637c130c182a5e3ae466464e6b19e974438290755978f71492319c41b974ad97a6fedcdd5316adfd3e0b1da2395b811c76e54c814b05d93e69ab4c07dc7024297d2e05f1d807028ccd33ad304ec8449594342aacb31dbe6ae7f95d26f5064b50ec5f00ac0fda80444daa76f93698c09fbc2934", 0xa8}, {&(0x7f0000005080)="bd8a8746a4580afb4e54d77509ca32347153fb8cce33a27dfacaee36779a572c4131853d98871b2057922436d10ed4d19a94d6865016fb03cea2cf2b0522a30c0276918ef84e5038b12e60eee5ba1e569a062460ffa98ef8e658983e9b5bbb829e9142b4d997899231e77798ba6ad3eee7ff1fc5aa50bd108c647a336add044659d8701b1d6e187bac19c5a027044a54eb904f982464a6d0cf20f00a056aa9bbb1df1248ac127d4fa840ef15e1feb8feb9b11bf5d151f7e12c92e94d4d109e243a66ade2b30072ab2ba55ec3038d0b8eefa8473567917a26c08698fa8123f0b7e3dd7b95c5211f72a5ae4335c66424fc0982c04f908b7c4c11a8", 0xfa}, {&(0x7f0000005180)="6f634ddb285aa34c64ca750689d920b57a150d3eb66d26972c309334112d3a81c3dbc8256e6f6ee9c4b8b765e266a9cc53934e6d539e88910f3817c25e665be97a8a6febc2fb1c19b621492150c7911df572b43c7a10d8223a48e75ab8c7a39e1be0f725c0a8e413d85af277a3f2d1a37f7f3d35d2b9b223f73acfd275b716e1c6b6d96f1b1c88991530500c676dc517aa7cba565b9754ad7afeeeadaa65e23f7fed2cdbb09fae7cee1d3397a583cc5d3e8675603955bbff5ee3ebd34808a94b778300f9c735c7b136e05df43f8db6920de796d62eab999ba1e3daae89b112f332c8426621bcb2789e2d99752302ac07994e4ff1c843c2e3", 0xf8}, {&(0x7f0000005280)="e7e931d3aa20dc1b10", 0x9}, {&(0x7f00000052c0)="904aff29e3b7a642c04c86114a1a34784586bf4b917d6e26a20180ee4ca862b92e739d54bdb13f332b59cbdd54f3a21c9f388dfd4cfa1690567f7052b8554dfbaf86158467aebe6607f9540ab4396d72164f4ee2e9de7afb6ff0ef2f", 0x5c}], 0x9, &(0x7f0000005400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast2, @broadcast}}}], 0x40}}], 0x9, 0x1) 2.174772969s ago: executing program 0 (id=4065): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="020080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x0, 0xb, 0x2, "f440"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000440)={0x0, 0x6, 0x2, "63d2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000c80)={0x44, &(0x7f00000009c0)={0x0, 0x7, 0xcf, "1d31177aaf759ff93c41fa5200a9f0537507e0eb89e17e5fe184674b7e6f79f0fd03820c12485d4167045c65cde12bf231cbb5d6bc55d7b68ce1dbcd9d0bcd42f4fafface185ffae9a6e71494e446676b659bb1b3c9ab0327d9d47fc733da5950523493163f3419add5dd7447c0115aa1bee9a710811a3ef56737e8c49195488c70cc5e46f82cf66af7a4f49ad8db36cd8e7f36ba663f85556d2b68bbecca377b6811d9e79135a4b82ea8b809b2fd71259698e10100df882f374f7778eeea14513059ba559e50fef7ac1839d2ac9b0"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0x3a}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000b40)={0x20, 0x81, 0x2, "308d"}, &(0x7f0000000b80)={0x20, 0x82, 0x3, "e9fd81"}, &(0x7f0000000bc0)={0x20, 0x83, 0x3, "44e7ad"}, &(0x7f0000000c00)={0x20, 0x84, 0x4, "18bd299b"}, &(0x7f0000000c40)={0x20, 0x85, 0x3, "8fbc3b"}}) 2.172758254s ago: executing program 4 (id=4066): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(r0, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x42000773) unlink(&(0x7f0000000000)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, r7}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000140)={@loopback, 0x80, r7}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r9}, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r10) 1.747733398s ago: executing program 7 (id=4067): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) uname(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) openat$kvm(0xffffffffffffff9c, 0x0, 0x80, 0x0) r5 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, 0x0, &(0x7f00000001c0)='\x18\xbd@\xbd\xc9e2\x0e\xb2\xe2OAq\xa7\xa8\xadcz::\x00', 0x0) 894.930821ms ago: executing program 1 (id=4068): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c4}, 0x0) pidfd_send_signal(r4, 0xa, &(0x7f0000000040)={0x1b, 0x8, 0x21d}, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_GET_NAME(0x10, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x22, 0x2, 0x23) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="727f6fdf6277ef10a1c2e5307e3f0579674e721acde3ff1a225d0e3bd75c6ac6c92def280e89b09e303d524589bdf811b27f20dd22cf069efbe7811ea1a2052d7704d7a238045104aaba8ccf04c6a937e8881502821da72c0f499a5faa5457674fb6eac6834f"], 0x14}, 0x1, 0x0, 0x0, 0x4040800}, 0x4000000) 893.792019ms ago: executing program 6 (id=4069): mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) syz_emit_ethernet(0x56, &(0x7f00000006c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x20, 0x6, 0x0, @local, @empty, {[], {{0x800, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x0, 0x0, 0x0, {[@generic={0x8, 0x5, "27f7bf"}, @mss={0x2, 0x4, 0x7}]}}}}}}}}, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x200, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x802ca2, &(0x7f0000000080)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x7}}, {@posixacl}, {@dfltuid={'dfltuid', 0x3d, r1}}, {@access_uid={'access', 0x3d, r1}}, {@afid={'afid', 0x3d, 0x7}}, {@cache_readahead}]}}) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) r2 = socket(0x10, 0x3, 0x6) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x51, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x0, &(0x7f0000000840)=0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) waitid(0x1, 0x0, 0x0, 0xffffff, 0x0) 0s ago: executing program 7 (id=4070): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x9, 0xff, 0x7ffc0002}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000068000100fdfc000000000000020000000400000006000700040000000c000880050005000000000008000600e00a000008000500", @ANYRES32=r5, @ANYBLOB="d4942fb70db8369e04df0f671f2095d71c8931a66aeec201f67ee8c886c55207f8bf0ae03d63c64a675d996ca5bf83376d57246a71a941ef516c7bafaf014208977fd151247d9173b837b10b22507cf6305264c011df65889e774c87"], 0x3c}, 0x1, 0x0, 0x0, 0x4004841}, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x80}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = inotify_init() r8 = creat(&(0x7f00000000c0)='./file1\x00', 0x82) r9 = inotify_add_watch(r7, &(0x7f0000000200)='./file0\x00', 0x400008bf) write$binfmt_elf32(r8, &(0x7f0000000040)=ANY=[@ANYRES64=r9], 0x69) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000180)='ufs\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): an invalid descriptor for endpoint zero, skipping [ 1300.913882][T20102] netlink: 268 bytes leftover after parsing attributes in process `syz.1.3389'. [ 1300.938583][ T5903] usb 5-1: config 4 interface 182 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 1301.007234][ T5903] usb 5-1: config 4 interface 182 altsetting 4 endpoint 0xA has invalid wMaxPacketSize 0 [ 1301.050119][ T5903] usb 5-1: config 4 interface 182 altsetting 4 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 1301.079653][ T9] usb-storage 7-1:0.0: USB Mass Storage device detected [ 1301.099106][ T5903] usb 5-1: config 4 interface 149 altsetting 6 has a duplicate endpoint with address 0xF, skipping [ 1301.152269][ T5903] usb 5-1: config 4 interface 149 altsetting 6 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 1301.187180][ T5903] usb 5-1: config 4 interface 149 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 1301.215648][ T5903] usb 5-1: config 4 interface 149 altsetting 6 has a duplicate endpoint with address 0xB, skipping [ 1301.263655][ T5903] usb 5-1: config 4 interface 149 altsetting 6 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 1301.297245][ T5903] usb 5-1: config 4 interface 218 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1301.317346][ T9] usb 7-1: USB disconnect, device number 18 [ 1301.560810][ T5903] usb 5-1: config 4 interface 218 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1301.758248][T20124] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 1302.475601][ T5903] usb 5-1: config 4 interface 218 altsetting 2 has a duplicate endpoint with address 0xE, skipping [ 1302.544391][ T5903] usb 5-1: config 4 interface 218 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 1302.626760][ T5903] usb 5-1: config 4 interface 218 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 1302.655028][ T5903] usb 5-1: config 4 interface 218 altsetting 2 has a duplicate endpoint with address 0x1, skipping [ 1302.697330][ T5903] usb 5-1: config 4 interface 218 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 1302.757543][ T5903] usb 5-1: config 4 interface 218 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 1302.844798][ T5903] usb 5-1: config 4 interface 218 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 1302.912876][ T5903] usb 5-1: config 4 interface 218 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 1303.396122][ T5903] usb 5-1: config 4 interface 218 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 1303.535073][ T5903] usb 5-1: config 4 interface 218 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 1303.624530][ T5903] usb 5-1: config 4 interface 218 altsetting 2 has a duplicate endpoint with address 0xF, skipping [ 1303.702919][ T5903] usb 5-1: config 4 interface 218 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 1303.753974][ T5903] usb 5-1: config 4 interface 218 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 1303.837664][ T5903] usb 5-1: config 4 interface 218 altsetting 2 has a duplicate endpoint with address 0xF, skipping [ 1303.920843][ T5903] usb 5-1: config 4 interface 182 has no altsetting 0 [ 1303.943567][ T5903] usb 5-1: config 4 interface 149 has no altsetting 0 [ 1303.968978][ T5903] usb 5-1: config 4 interface 218 has no altsetting 0 [ 1303.986742][ T5903] usb 5-1: string descriptor 0 read error: -71 [ 1304.005587][ T5903] usb 5-1: New USB device found, idVendor=0499, idProduct=101f, bcdDevice=44.fc [ 1304.030724][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.056974][ T5903] usb 5-1: can't set config #4, error -71 [ 1304.109297][ T5903] usb 5-1: USB disconnect, device number 92 [ 1304.267588][ T5910] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1305.037678][T20160] netlink: 'syz.1.3399': attribute type 1 has an invalid length. [ 1305.064181][ T5910] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1305.107772][ T5910] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1305.138098][ T5910] usb 7-1: config 0 descriptor?? [ 1305.190817][T20162] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3402'. [ 1305.377362][ T5910] usb 7-1: Cannot read MAC address [ 1305.398495][ T5910] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 1306.951873][T20184] FAULT_INJECTION: forcing a failure. [ 1306.951873][T20184] name failslab, interval 1, probability 0, space 0, times 0 [ 1306.981659][T20184] CPU: 1 UID: 0 PID: 20184 Comm: syz.0.3406 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 1306.981692][T20184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1306.981707][T20184] Call Trace: [ 1306.981717][T20184] [ 1306.981727][T20184] dump_stack_lvl+0x189/0x250 [ 1306.981764][T20184] ? __pfx____ratelimit+0x10/0x10 [ 1306.981791][T20184] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1306.981822][T20184] ? __pfx__printk+0x10/0x10 [ 1306.981851][T20184] ? ref_tracker_alloc+0x318/0x460 [ 1306.981885][T20184] should_fail_ex+0x414/0x560 [ 1306.981918][T20184] should_failslab+0xa8/0x100 [ 1306.981948][T20184] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1306.981975][T20184] ? skb_clone+0x212/0x3a0 [ 1306.982005][T20184] skb_clone+0x212/0x3a0 [ 1306.982033][T20184] __netlink_deliver_tap+0x404/0x850 [ 1306.982094][T20184] ? netlink_deliver_tap+0x2e/0x1b0 [ 1306.982117][T20184] netlink_deliver_tap+0x19c/0x1b0 [ 1306.982139][T20184] netlink_unicast+0x72f/0x8d0 [ 1306.982183][T20184] netlink_sendmsg+0x805/0xb30 [ 1306.982215][T20184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1306.982254][T20184] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1306.982281][T20184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1306.982303][T20184] __sock_sendmsg+0x219/0x270 [ 1306.982335][T20184] ____sys_sendmsg+0x505/0x830 [ 1306.982365][T20184] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1306.982398][T20184] ? import_iovec+0x74/0xa0 [ 1306.982425][T20184] ___sys_sendmsg+0x21f/0x2a0 [ 1306.982450][T20184] ? __pfx____sys_sendmsg+0x10/0x10 [ 1306.982513][T20184] ? __fget_files+0x2a/0x420 [ 1306.982542][T20184] ? __fget_files+0x3a0/0x420 [ 1306.982582][T20184] __x64_sys_sendmsg+0x19b/0x260 [ 1306.982607][T20184] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1306.982640][T20184] ? __pfx_ksys_write+0x10/0x10 [ 1306.982663][T20184] ? rcu_is_watching+0x15/0xb0 [ 1306.982705][T20184] ? do_syscall_64+0xbe/0x3b0 [ 1306.982737][T20184] do_syscall_64+0xfa/0x3b0 [ 1306.982763][T20184] ? lockdep_hardirqs_on+0x9c/0x150 [ 1306.982789][T20184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1306.982811][T20184] ? clear_bhb_loop+0x60/0xb0 [ 1306.982837][T20184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1306.982858][T20184] RIP: 0033:0x7f652fd8e929 [ 1306.982878][T20184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1306.982898][T20184] RSP: 002b:00007f6530be8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1306.982921][T20184] RAX: ffffffffffffffda RBX: 00007f652ffb5fa0 RCX: 00007f652fd8e929 [ 1306.982937][T20184] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 1306.982950][T20184] RBP: 00007f6530be8090 R08: 0000000000000000 R09: 0000000000000000 [ 1306.982963][T20184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1306.982976][T20184] R13: 0000000000000000 R14: 00007f652ffb5fa0 R15: 00007ffe45262908 [ 1306.983009][T20184] [ 1306.984325][T20184] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1307.327763][ T24] usb 7-1: USB disconnect, device number 19 [ 1310.061732][ T43] usb 1-1: new full-speed USB device number 94 using dummy_hcd [ 1310.252948][ T43] usb 1-1: config 3 has an invalid interface number: 61 but max is 0 [ 1310.332019][ T43] usb 1-1: config 3 has no interface number 0 [ 1310.428595][ T43] usb 1-1: config 3 interface 61 has no altsetting 0 [ 1310.441294][T20217] program syz.1.3413 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1310.593765][ T43] usb 1-1: string descriptor 0 read error: -22 [ 1310.658812][ T43] usb 1-1: New USB device found, idVendor=0499, idProduct=101a, bcdDevice=44.26 [ 1310.766456][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.803574][ T43] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1311.137531][T20205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1311.166550][T20205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1311.200774][ T43] snd-usb-audio 1-1:3.61: probe with driver snd-usb-audio failed with error -2 [ 1311.311792][T20228] overlayfs: missing 'lowerdir' [ 1311.933420][T19486] udevd[19486]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:3.61/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1312.128383][ T43] usb 1-1: USB disconnect, device number 94 [ 1312.549957][ T24] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1312.829354][ T24] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1312.847305][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1312.877053][ T24] usb 7-1: config 0 descriptor?? [ 1313.119253][ T24] usb 7-1: Cannot read MAC address [ 1313.135142][ T24] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 1314.168040][T20261] No control pipe specified [ 1315.121628][T20269] FAULT_INJECTION: forcing a failure. [ 1315.121628][T20269] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1315.136985][T20269] CPU: 1 UID: 0 PID: 20269 Comm: syz.0.3424 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 1315.137015][T20269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1315.137028][T20269] Call Trace: [ 1315.137036][T20269] [ 1315.137046][T20269] dump_stack_lvl+0x189/0x250 [ 1315.137082][T20269] ? __pfx____ratelimit+0x10/0x10 [ 1315.137109][T20269] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1315.137142][T20269] ? __pfx__printk+0x10/0x10 [ 1315.137162][T20269] ? __might_fault+0xb0/0x130 [ 1315.137200][T20269] should_fail_ex+0x414/0x560 [ 1315.137234][T20269] _copy_from_user+0x2d/0xb0 [ 1315.137256][T20269] do_sys_poll+0x242/0x1070 [ 1315.137287][T20269] ? do_raw_spin_unlock+0x122/0x240 [ 1315.137320][T20269] ? __pfx_do_sys_poll+0x10/0x10 [ 1315.137422][T20269] ? __pfx_task_work_run+0x10/0x10 [ 1315.137455][T20269] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 1315.137506][T20269] ? arch_do_signal_or_restart+0x2d3/0x750 [ 1315.137532][T20269] ? __pfx_timespec64_add_safe+0x10/0x10 [ 1315.137571][T20269] do_restart_poll+0x16a/0x290 [ 1315.137602][T20269] ? __pfx_do_restart_poll+0x10/0x10 [ 1315.137628][T20269] ? rcu_is_watching+0x15/0xb0 [ 1315.137664][T20269] ? do_syscall_64+0xbe/0x3b0 [ 1315.137704][T20269] do_syscall_64+0xfa/0x3b0 [ 1315.137730][T20269] ? lockdep_hardirqs_on+0x9c/0x150 [ 1315.137755][T20269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1315.137777][T20269] ? clear_bhb_loop+0x60/0xb0 [ 1315.137802][T20269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1315.137822][T20269] RIP: 0033:0x7f652fd8e929 [ 1315.137842][T20269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1315.137860][T20269] RSP: 002b:00007f6530bc7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000db [ 1315.137884][T20269] RAX: ffffffffffffffda RBX: 00007f652ffb6080 RCX: 00007f652fd8e929 [ 1315.137899][T20269] RDX: 00000000000003ff RSI: 0000000000000001 RDI: 0000200000000140 [ 1315.137912][T20269] RBP: 00007f6530bc7090 R08: 0000000000000000 R09: 0000000000000000 [ 1315.137925][T20269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1315.137937][T20269] R13: 0000000000000000 R14: 00007f652ffb6080 R15: 00007ffe45262908 [ 1315.137969][T20269] [ 1315.359384][ C1] vkms_vblank_simulate: vblank timer overrun [ 1315.509149][ T43] usb 7-1: USB disconnect, device number 20 [ 1315.818202][ T5936] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1316.397202][ T5936] usb 5-1: Using ep0 maxpacket: 8 [ 1316.416315][ T5936] usb 5-1: no configurations [ 1316.421066][ T5936] usb 5-1: can't read configurations, error -22 [ 1316.611232][ T5936] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1316.827892][ T5936] usb 5-1: Using ep0 maxpacket: 8 [ 1316.864542][ T5936] usb 5-1: no configurations [ 1316.896000][ T5936] usb 5-1: can't read configurations, error -22 [ 1317.080958][ T5936] usb usb5-port1: attempt power cycle [ 1317.558012][ T5936] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1317.741997][ T5936] usb 5-1: Using ep0 maxpacket: 8 [ 1317.854253][ T5936] usb 5-1: no configurations [ 1318.028580][ T5936] usb 5-1: can't read configurations, error -22 [ 1318.167865][ T5936] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1318.370765][ T5936] usb 5-1: device descriptor read/8, error -71 [ 1318.477948][ T5936] usb usb5-port1: unable to enumerate USB device [ 1318.918156][T20316] No control pipe specified [ 1320.207425][T16513] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 1320.297299][ T30] audit: type=1800 audit(1749259549.024:822): pid=20325 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.3437" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1321.994753][T20353] netlink: 'syz.1.3440': attribute type 1 has an invalid length. [ 1322.193669][T16513] Bluetooth: hci4: unexpected event for opcode 0x2064 [ 1322.267738][ T5911] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1322.440315][ T5911] usb 7-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1322.472420][ T5911] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1322.530649][ T5911] usb 7-1: config 0 descriptor?? [ 1324.137204][T20378] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3448'. [ 1324.448752][T16513] Bluetooth: hci4: unexpected event for opcode 0x2016 [ 1324.459973][ T30] audit: type=1326 audit(1749259553.194:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20377 comm="syz.7.3449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ba18e929 code=0x7ffc0000 [ 1324.487478][ T30] audit: type=1326 audit(1749259553.224:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20377 comm="syz.7.3449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61ba18e929 code=0x7ffc0000 [ 1324.510561][ T30] audit: type=1326 audit(1749259553.224:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20377 comm="syz.7.3449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ba18e929 code=0x7ffc0000 [ 1324.537367][ T30] audit: type=1326 audit(1749259553.224:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20377 comm="syz.7.3449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61ba18e929 code=0x7ffc0000 [ 1324.590883][T20356] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3442'. [ 1324.652670][ T5911] pegasus 7-1:0.0: can't reset MAC [ 1324.669544][ T5911] pegasus 7-1:0.0: probe with driver pegasus failed with error -5 [ 1324.704190][ T30] audit: type=1326 audit(1749259553.314:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20377 comm="syz.7.3449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ba18e929 code=0x7ffc0000 [ 1324.756011][ T5911] usb 7-1: USB disconnect, device number 21 [ 1324.859895][ T30] audit: type=1326 audit(1749259553.314:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20377 comm="syz.7.3449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ba18e929 code=0x7ffc0000 [ 1324.953573][ T30] audit: type=1326 audit(1749259553.344:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20377 comm="syz.7.3449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f61ba18e929 code=0x7ffc0000 [ 1325.427830][ T30] audit: type=1326 audit(1749259553.344:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20377 comm="syz.7.3449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ba18e929 code=0x7ffc0000 [ 1325.611061][ T30] audit: type=1326 audit(1749259553.344:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20377 comm="syz.7.3449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f61ba18e929 code=0x7ffc0000 [ 1325.637246][ T30] audit: type=1326 audit(1749259553.344:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20377 comm="syz.7.3449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ba18e929 code=0x7ffc0000 [ 1325.668012][ T30] audit: type=1326 audit(1749259553.344:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20377 comm="syz.7.3449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ba18e929 code=0x7ffc0000 [ 1327.397868][ T5936] usb 5-1: new full-speed USB device number 97 using dummy_hcd [ 1327.493095][T16513] Bluetooth: hci1: unexpected event for opcode 0x2064 [ 1327.611667][ T5936] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1327.641408][ T5936] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 510, setting to 64 [ 1327.675337][ T5936] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1327.714376][ T5936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.723383][ T43] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1327.744912][ T5936] usb 5-1: Product: syz [ 1327.762177][ T5936] usb 5-1: Manufacturer: syz [ 1327.775818][ T5936] usb 5-1: SerialNumber: syz [ 1327.809297][T20433] random: crng reseeded on system resumption [ 1327.899630][ T43] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1328.045941][T20421] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1328.155180][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.178651][ T43] usb 1-1: config 0 descriptor?? [ 1328.196399][ T43] cp210x 1-1:0.0: cp210x converter detected [ 1328.436050][T20444] max out of range [ 1328.686274][T20421] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1328.796389][ T43] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1328.836895][ T43] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 1328.893857][ T43] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1328.917048][ T5936] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1328.941728][ T5936] cdc_ncm 5-1:1.0: setting rx_max = 16384 [ 1329.226166][ T5936] cdc_ncm 5-1:1.0: setting tx_max = 88 [ 1329.233994][ T43] usb 1-1: USB disconnect, device number 95 [ 1329.260734][ T43] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1329.269424][ T5936] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1329.281302][ T43] cp210x 1-1:0.0: device disconnected [ 1329.993948][ T5936] usb 5-1: USB disconnect, device number 97 [ 1330.019793][ T5936] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 1330.359805][T20461] sp0: Synchronizing with TNC [ 1330.399682][T20463] FAULT_INJECTION: forcing a failure. [ 1330.399682][T20463] name failslab, interval 1, probability 0, space 0, times 0 [ 1330.503661][T20463] CPU: 0 UID: 0 PID: 20463 Comm: syz.4.3464 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 1330.503702][T20463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1330.503715][T20463] Call Trace: [ 1330.503725][T20463] [ 1330.503736][T20463] dump_stack_lvl+0x189/0x250 [ 1330.503772][T20463] ? __pfx____ratelimit+0x10/0x10 [ 1330.503800][T20463] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1330.503831][T20463] ? __pfx__printk+0x10/0x10 [ 1330.503856][T20463] ? __pfx___might_resched+0x10/0x10 [ 1330.503904][T20463] ? fs_reclaim_acquire+0x7d/0x100 [ 1330.503941][T20463] should_fail_ex+0x414/0x560 [ 1330.503974][T20463] should_failslab+0xa8/0x100 [ 1330.504005][T20463] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1330.504030][T20463] ? security_file_alloc+0x34/0x330 [ 1330.504064][T20463] security_file_alloc+0x34/0x330 [ 1330.504094][T20463] init_file+0x93/0x2f0 [ 1330.504130][T20463] alloc_empty_file+0x6e/0x1d0 [ 1330.504163][T20463] path_openat+0x107/0x3830 [ 1330.504185][T20463] ? arch_stack_walk+0xfc/0x150 [ 1330.504278][T20463] ? kasan_save_track+0x4f/0x80 [ 1330.504302][T20463] ? kasan_save_track+0x3e/0x80 [ 1330.504323][T20463] ? __kasan_slab_alloc+0x6c/0x80 [ 1330.504347][T20463] ? getname_flags+0xb8/0x540 [ 1330.504377][T20463] ? __pfx_path_openat+0x10/0x10 [ 1330.504398][T20463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1330.504442][T20463] do_filp_open+0x1fa/0x410 [ 1330.504463][T20463] ? __lock_acquire+0xab9/0xd20 [ 1330.504494][T20463] ? __pfx_do_filp_open+0x10/0x10 [ 1330.504542][T20463] ? _raw_spin_unlock+0x28/0x50 [ 1330.504565][T20463] ? alloc_fd+0x64c/0x6c0 [ 1330.504605][T20463] do_sys_openat2+0x121/0x1c0 [ 1330.504630][T20463] ? __pfx_do_sys_openat2+0x10/0x10 [ 1330.504658][T20463] ? ksys_write+0x22a/0x250 [ 1330.504693][T20463] ? __pfx_ksys_write+0x10/0x10 [ 1330.504716][T20463] ? rcu_is_watching+0x15/0xb0 [ 1330.504752][T20463] __x64_sys_openat+0x138/0x170 [ 1330.504778][T20463] do_syscall_64+0xfa/0x3b0 [ 1330.504829][T20463] ? lockdep_hardirqs_on+0x9c/0x150 [ 1330.504856][T20463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1330.504876][T20463] ? clear_bhb_loop+0x60/0xb0 [ 1330.504903][T20463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1330.504924][T20463] RIP: 0033:0x7f391cd8e929 [ 1330.504944][T20463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1330.504962][T20463] RSP: 002b:00007f391abf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1330.504986][T20463] RAX: ffffffffffffffda RBX: 00007f391cfb6080 RCX: 00007f391cd8e929 [ 1330.505002][T20463] RDX: 0000000000000000 RSI: 0000200000004280 RDI: ffffffffffffff9c [ 1330.505017][T20463] RBP: 00007f391abf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1330.505031][T20463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1330.505044][T20463] R13: 0000000000000000 R14: 00007f391cfb6080 R15: 00007ffc24c39038 [ 1330.505077][T20463] [ 1330.963099][T20468] affs: No valid root block on device nullb0 [ 1332.771038][T20482] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3467'. [ 1332.931313][T16513] Bluetooth: hci3: ACL packet for unknown connection handle 227 [ 1333.050155][T16513] Bluetooth: hci3: unexpected event for opcode 0x2016 [ 1333.337225][ T5910] usb 1-1: new full-speed USB device number 96 using dummy_hcd [ 1334.397974][ T5910] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1334.426680][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.470363][ T5910] usb 1-1: Product: syz [ 1334.474624][ T5910] usb 1-1: Manufacturer: syz [ 1334.489612][ T5910] usb 1-1: SerialNumber: syz [ 1334.518198][ T5910] usb 1-1: config 0 descriptor?? [ 1335.152741][ T5910] airspy 1-1:0.0: usb_control_msg() failed -32 request 0a [ 1335.314646][ T5910] airspy 1-1:0.0: Could not detect board [ 1335.390425][ T5910] airspy 1-1:0.0: probe with driver airspy failed with error -32 [ 1336.316293][T20514] sctp: [Deprecated]: syz.4.3471 (pid 20514) Use of int in max_burst socket option deprecated. [ 1336.316293][T20514] Use struct sctp_assoc_value instead [ 1336.450155][ T5936] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1336.451135][ T9] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 1336.500489][ T43] usb 1-1: USB disconnect, device number 96 [ 1336.669850][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1336.669882][ T5936] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1336.698073][ T9] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 510, setting to 64 [ 1336.742554][ T9] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1336.762379][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.784139][ T9] usb 8-1: Product: syz [ 1336.797508][ T9] usb 8-1: Manufacturer: syz [ 1336.815913][ T9] usb 8-1: SerialNumber: syz [ 1336.866710][ T5936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.262156][T20524] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3476'. [ 1337.295607][T20513] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1337.296417][ T5936] usb 2-1: config 0 descriptor?? [ 1337.541044][ T5936] cp210x 2-1:0.0: cp210x converter detected [ 1337.730443][ T5936] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1337.851142][ T5832] Bluetooth: hci2: unexpected event for opcode 0x2016 [ 1337.858506][ T5832] Bluetooth: hci5: command 0x0406 tx timeout [ 1337.921992][ T5910] usb 2-1: USB disconnect, device number 109 [ 1337.941105][ T5910] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1337.952677][ T5910] cp210x 2-1:0.0: device disconnected [ 1338.005470][T20513] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1338.341695][ T9] cdc_ncm 8-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1338.348274][ T9] cdc_ncm 8-1:1.0: setting rx_max = 16384 [ 1338.427326][ T5936] usb 5-1: new low-speed USB device number 98 using dummy_hcd [ 1339.018996][ T5936] usb 5-1: Invalid ep0 maxpacket: 16 [ 1339.171032][ T9] cdc_ncm 8-1:1.0: setting tx_max = 88 [ 1339.425122][ T9] cdc_ncm 8-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.7-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1339.467251][ T5936] usb 5-1: new low-speed USB device number 99 using dummy_hcd [ 1339.566282][ T9] usb 8-1: USB disconnect, device number 9 [ 1339.609621][ T9] cdc_ncm 8-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.7-1, CDC NCM (NO ZLP) [ 1339.654360][ T5936] usb 5-1: Invalid ep0 maxpacket: 16 [ 1339.886366][ T5936] usb usb5-port1: attempt power cycle [ 1340.999076][ T5936] usb 5-1: new low-speed USB device number 100 using dummy_hcd [ 1341.027727][ T5911] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1341.170897][ T5936] usb 5-1: device descriptor read/8, error -71 [ 1341.253475][ T5911] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1341.297307][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.527901][T16513] Bluetooth: hci2: ACL packet for unknown connection handle 227 [ 1341.714349][ T5911] usb 2-1: config 0 descriptor?? [ 1341.888251][ T5911] cp210x 2-1:0.0: cp210x converter detected [ 1343.015295][T20568] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3485'. [ 1343.159679][T16513] Bluetooth: hci2: unexpected event for opcode 0x2016 [ 1343.337501][T20585] bio_check_eod: 2 callbacks suppressed [ 1343.337535][T20585] syz.7.3488: attempt to access beyond end of device [ 1343.337535][T20585] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1343.443723][ T5911] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1343.451838][ T5911] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 1343.504024][ T5911] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1343.673191][ T5911] usb 2-1: USB disconnect, device number 110 [ 1343.692581][ T5911] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1345.727470][ T5911] cp210x 2-1:0.0: device disconnected [ 1347.771827][T20620] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3493'. [ 1347.989558][T16513] Bluetooth: hci5: unexpected event for opcode 0x2016 [ 1348.576194][T16513] Bluetooth: hci1: ACL packet for unknown connection handle 227 [ 1348.577283][T20625] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3495'. [ 1348.627458][ T24] usb 5-1: new full-speed USB device number 102 using dummy_hcd [ 1348.859533][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1349.093906][T16513] Bluetooth: hci1: unexpected event for opcode 0x2016 [ 1349.102238][ T24] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 510, setting to 64 [ 1349.160026][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1349.187253][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1349.197568][ T24] usb 5-1: Product: syz [ 1349.201812][ T24] usb 5-1: Manufacturer: syz [ 1349.247324][ T24] usb 5-1: SerialNumber: syz [ 1349.470843][T20619] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1350.802321][T20619] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1350.984371][ T24] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1351.030670][ T24] cdc_ncm 5-1:1.0: setting rx_max = 16384 [ 1351.249252][ T24] cdc_ncm 5-1:1.0: setting tx_max = 88 [ 1351.497238][ T5903] usb 7-1: new low-speed USB device number 22 using dummy_hcd [ 1351.863813][ T24] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1351.989103][ T24] usb 5-1: USB disconnect, device number 102 [ 1352.031748][ T24] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 1352.045518][ T5903] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1352.118787][ T5903] usb 7-1: config 0 has no interfaces? [ 1352.124383][ T5903] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1352.194264][ T5903] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1352.242167][ T5903] usb 7-1: config 0 descriptor?? [ 1353.087418][ T24] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1353.844199][T20670] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 1353.996517][ T24] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1354.051409][ T5903] usb 7-1: USB disconnect, device number 22 [ 1354.057186][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1354.121021][ T24] usb 5-1: config 0 descriptor?? [ 1354.406063][ T24] cp210x 5-1:0.0: cp210x converter detected [ 1355.118018][T20683] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3507'. [ 1355.474544][ T5903] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 1356.040801][T16513] Bluetooth: hci2: unexpected event for opcode 0x2016 [ 1356.129645][ T24] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1356.147832][ T24] cp210x 5-1:0.0: querying part number failed [ 1356.238996][ T24] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1356.406938][ T24] usb 5-1: USB disconnect, device number 103 [ 1356.421342][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1356.429895][ T24] cp210x 5-1:0.0: device disconnected [ 1357.401235][T16513] Bluetooth: hci3: ACL packet for unknown connection handle 227 [ 1357.402525][T20698] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3510'. [ 1357.718986][ T5903] usb 7-1: device descriptor read/all, error -71 [ 1357.803977][T16513] Bluetooth: hci3: unexpected event for opcode 0x2016 [ 1358.347324][ T43] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1358.695126][ T43] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1358.934186][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1359.078302][ T43] usb 2-1: config 0 descriptor?? [ 1359.196300][T20715] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3516'. [ 1359.698505][T20725] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 1360.337305][ T5903] usb 7-1: new low-speed USB device number 25 using dummy_hcd [ 1360.503118][ T5903] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1360.537598][ T5903] usb 7-1: config 0 has no interfaces? [ 1360.573127][ T5903] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1360.641964][ T5903] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1361.179182][ T5903] usb 7-1: config 0 descriptor?? [ 1361.557802][T20705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3512'. [ 1361.880242][ T43] pegasus 2-1:0.0: can't reset MAC [ 1361.885758][ T43] pegasus 2-1:0.0: probe with driver pegasus failed with error -5 [ 1361.957502][ T43] usb 2-1: USB disconnect, device number 111 [ 1362.244673][T20767] program syz.4.3524 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1362.919864][ T5903] usb 2-1: new full-speed USB device number 112 using dummy_hcd [ 1363.125568][ T5903] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1363.164891][ T5903] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 510, setting to 64 [ 1363.191030][ T5903] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1363.206301][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.225097][ T5903] usb 2-1: Product: syz [ 1363.251579][ T5903] usb 2-1: Manufacturer: syz [ 1363.256274][ T5903] usb 2-1: SerialNumber: syz [ 1363.487970][T20774] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1363.663510][ T5911] usb 7-1: USB disconnect, device number 25 [ 1364.276439][T20790] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1364.404606][ T5911] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1364.654634][ T5903] cdc_ncm 2-1:1.0: failed to get mac address [ 1364.714021][ T5903] cdc_ncm 2-1:1.0: bind() failure [ 1364.788264][ T5911] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1364.839631][ T5903] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1365.129427][ T5911] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1365.138535][ T5903] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1365.156767][ T5911] usb 7-1: config 0 descriptor?? [ 1365.162953][ T5903] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 1365.186984][ T5903] usb 2-1: USB disconnect, device number 112 [ 1366.144765][ T5911] usb 7-1: Cannot read MAC address [ 1366.276067][ T5911] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 1366.855425][T20807] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3531'. [ 1367.047009][T20814] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 1367.662839][ T5815] usb 7-1: USB disconnect, device number 26 [ 1369.003593][ T24] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1369.220435][T20836] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3539'. [ 1369.334422][ T24] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1369.347332][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.449215][ T24] usb 1-1: config 0 descriptor?? [ 1369.490749][ T24] cp210x 1-1:0.0: cp210x converter detected [ 1370.137280][ T24] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1370.182688][ T24] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 1370.223318][T20856] program syz.4.3540 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1370.269748][ T24] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1370.373906][ T24] usb 1-1: USB disconnect, device number 97 [ 1370.559894][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1370.684550][ T24] cp210x 1-1:0.0: device disconnected [ 1371.397301][ T24] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 1372.110010][ T24] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1372.128700][ T24] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 510, setting to 64 [ 1372.143926][ T24] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1372.156255][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.349406][ T24] usb 8-1: Product: syz [ 1372.353658][ T24] usb 8-1: Manufacturer: syz [ 1372.397586][ T24] usb 8-1: SerialNumber: syz [ 1372.666857][T20865] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1372.828409][ T5910] usb 1-1: new full-speed USB device number 98 using dummy_hcd [ 1373.009943][ T5910] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1373.043807][ T5910] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 510, setting to 64 [ 1373.111409][ T5910] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1373.153473][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.191863][ T5910] usb 1-1: Product: syz [ 1373.218956][ T5910] usb 1-1: Manufacturer: syz [ 1373.778651][T20865] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1373.786134][ T5910] usb 1-1: SerialNumber: syz [ 1374.016731][T20870] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1374.038359][ T24] cdc_ncm 8-1:1.0: failed to get mac address [ 1374.065258][ T24] cdc_ncm 8-1:1.0: bind() failure [ 1374.146067][ T24] cdc_ncm 8-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1374.179011][ T24] cdc_mbim 8-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1374.276315][ T24] usbtest 8-1:1.1: probe with driver usbtest failed with error -71 [ 1374.328702][ T24] usb 8-1: USB disconnect, device number 10 [ 1374.457750][T20890] netlink: 268 bytes leftover after parsing attributes in process `syz.4.3546'. [ 1374.697655][T20870] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1374.933505][ T5910] cdc_ncm 1-1:1.0: failed to get mac address [ 1374.974641][T20898] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3548'. [ 1375.029173][ T5910] cdc_ncm 1-1:1.0: bind() failure [ 1375.064930][ T5910] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1375.102365][T16513] Bluetooth: hci4: unexpected event for opcode 0x2016 [ 1375.116038][ T5910] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1375.787345][ T5910] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 1375.814627][ T5910] usb 1-1: USB disconnect, device number 98 [ 1376.697502][T20911] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3550'. [ 1379.142321][T20943] program syz.4.3557 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1379.155662][T20938] netlink: 268 bytes leftover after parsing attributes in process `syz.0.3558'. [ 1381.527299][ T5910] usb 1-1: new full-speed USB device number 99 using dummy_hcd [ 1382.223015][T20960] sp0: Synchronizing with TNC [ 1382.527548][T20960] affs: No valid root block on device nullb0 [ 1383.130291][ T5910] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1383.305201][ T5910] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 510, setting to 64 [ 1383.450720][ T5910] usb 1-1: string descriptor 0 read error: -71 [ 1383.458040][ T5911] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1383.476985][T20973] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3567'. [ 1383.508507][ T5910] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1383.554121][T16513] Bluetooth: hci3: unexpected event for opcode 0x2016 [ 1383.570050][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.588705][ T5910] usb 1-1: can't set config #1, error -71 [ 1383.604623][ T5910] usb 1-1: USB disconnect, device number 99 [ 1383.613224][T20976] FAULT_INJECTION: forcing a failure. [ 1383.613224][T20976] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1384.477189][ T5911] usb 7-1: Using ep0 maxpacket: 8 [ 1384.489672][ T5911] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 7 [ 1384.523819][ T5911] usb 7-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1384.536095][ T5911] usb 7-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1384.567826][T20976] CPU: 0 UID: 0 PID: 20976 Comm: syz.1.3568 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 1384.567859][T20976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1384.567873][T20976] Call Trace: [ 1384.567882][T20976] [ 1384.567892][T20976] dump_stack_lvl+0x189/0x250 [ 1384.567929][T20976] ? __pfx____ratelimit+0x10/0x10 [ 1384.567955][T20976] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1384.567986][T20976] ? __pfx__printk+0x10/0x10 [ 1384.568015][T20976] ? __might_fault+0xb0/0x130 [ 1384.568059][T20976] should_fail_ex+0x414/0x560 [ 1384.568093][T20976] _copy_from_user+0x2d/0xb0 [ 1384.568116][T20976] generic_map_update_batch+0x51b/0x7f0 [ 1384.568154][T20976] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1384.568177][T20976] ? __fget_files+0x2a/0x420 [ 1384.568213][T20976] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1384.568235][T20976] bpf_map_do_batch+0x36c/0x5f0 [ 1384.568278][T20976] __sys_bpf+0x384/0x860 [ 1384.568312][T20976] ? __pfx___sys_bpf+0x10/0x10 [ 1384.568359][T20976] ? ksys_write+0x22a/0x250 [ 1384.568387][T20976] ? __pfx_ksys_write+0x10/0x10 [ 1384.568409][T20976] ? rcu_is_watching+0x15/0xb0 [ 1384.568453][T20976] __x64_sys_bpf+0x7c/0x90 [ 1384.568479][T20976] do_syscall_64+0xfa/0x3b0 [ 1384.568505][T20976] ? lockdep_hardirqs_on+0x9c/0x150 [ 1384.568530][T20976] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1384.568551][T20976] ? clear_bhb_loop+0x60/0xb0 [ 1384.568575][T20976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1384.568593][T20976] RIP: 0033:0x7f885c58e929 [ 1384.568612][T20976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1384.568631][T20976] RSP: 002b:00007f885d3ec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1384.568655][T20976] RAX: ffffffffffffffda RBX: 00007f885c7b5fa0 RCX: 00007f885c58e929 [ 1384.568671][T20976] RDX: 0000000000000038 RSI: 0000200000000140 RDI: 000000000000001a [ 1384.568685][T20976] RBP: 00007f885d3ec090 R08: 0000000000000000 R09: 0000000000000000 [ 1384.568698][T20976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1384.568711][T20976] R13: 0000000000000000 R14: 00007f885c7b5fa0 R15: 00007fffdffc52e8 [ 1384.568744][T20976] [ 1384.798493][ T5911] usb 7-1: Product: syz [ 1384.802723][ T5911] usb 7-1: Manufacturer: syz [ 1384.809492][ T5911] usb 7-1: SerialNumber: syz [ 1385.277209][ T5911] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1386.128742][ T5911] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1386.189258][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1386.198542][ T5910] usb 7-1: USB disconnect, device number 27 [ 1386.274851][ T5911] usb 2-1: config 0 descriptor?? [ 1386.448995][T20999] netlink: 268 bytes leftover after parsing attributes in process `syz.6.3573'. [ 1388.584871][T20989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3571'. [ 1388.711095][ T5911] pegasus 2-1:0.0: can't reset MAC [ 1388.716899][ T5911] pegasus 2-1:0.0: probe with driver pegasus failed with error -5 [ 1389.567958][ T5911] usb 2-1: USB disconnect, device number 113 [ 1390.363930][ T5903] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 1391.398426][ T5903] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1391.435785][ T5903] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 510, setting to 64 [ 1391.496645][ T5903] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1391.511158][ T5903] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1391.543320][ T5903] usb 7-1: Product: syz [ 1391.572798][ T5903] usb 7-1: Manufacturer: syz [ 1391.616709][T21046] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3585'. [ 1391.649409][T21038] sp0: Synchronizing with TNC [ 1391.669294][ T5903] usb 7-1: SerialNumber: syz [ 1391.807789][T21048] affs: No valid root block on device nullb0 [ 1391.897850][T21023] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1393.186825][T21023] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1393.400196][ T5903] cdc_ncm 7-1:1.0: failed to get mac address [ 1393.446583][ T5903] cdc_ncm 7-1:1.0: bind() failure [ 1393.499977][ T5903] cdc_ncm 7-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1393.621651][ T5903] cdc_mbim 7-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1393.646372][ T5903] usbtest 7-1:1.1: probe with driver usbtest failed with error -71 [ 1393.670535][ T5903] usb 7-1: USB disconnect, device number 28 [ 1393.912841][T21066] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3588'. [ 1394.713478][T16513] Bluetooth: hci3: unexpected event for opcode 0x2016 [ 1395.777438][ T5910] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1396.074612][ T5910] usb 7-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1396.104090][ T5910] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1396.145267][ T5910] usb 7-1: config 0 descriptor?? [ 1396.258658][ T24] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1396.548911][ T24] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1396.567289][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1396.625260][ T24] usb 1-1: config 0 descriptor?? [ 1396.680809][ T24] cp210x 1-1:0.0: cp210x converter detected [ 1397.819460][ T24] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1398.613870][ T24] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 1398.625126][T21105] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3591'. [ 1398.635081][ T24] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1398.649595][ T24] usb 1-1: USB disconnect, device number 100 [ 1398.737395][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1398.811346][ T24] cp210x 1-1:0.0: device disconnected [ 1398.821271][ T5910] pegasus 7-1:0.0: can't reset MAC [ 1398.829411][ T5910] pegasus 7-1:0.0: probe with driver pegasus failed with error -5 [ 1398.863606][ T5910] usb 7-1: USB disconnect, device number 29 [ 1400.118782][T21125] program syz.1.3600 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1400.557523][ T5910] usb 5-1: new full-speed USB device number 104 using dummy_hcd [ 1400.581034][T21130] sp0: Synchronizing with TNC [ 1401.104569][T21134] affs: No valid root block on device nullb0 [ 1401.130013][T21133] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3603'. [ 1401.181685][T16513] Bluetooth: hci3: unexpected event for opcode 0x2016 [ 1401.189079][ T5910] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1401.207298][ T5910] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 510, setting to 64 [ 1401.442170][ T5910] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1401.465869][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1401.482346][ T5910] usb 5-1: Product: syz [ 1401.487063][ T5910] usb 5-1: Manufacturer: syz [ 1401.494923][ T5910] usb 5-1: SerialNumber: syz [ 1401.751913][T21128] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1402.677652][ T5910] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 1402.688186][ T5910] cdc_ncm 5-1:1.0: bind() failure [ 1402.704628][ T5910] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1402.714489][ T5910] cdc_ncm 5-1:1.1: bind() failure [ 1403.780576][ T5903] usb 5-1: USB disconnect, device number 104 [ 1404.827454][T21181] FAULT_INJECTION: forcing a failure. [ 1404.827454][T21181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1404.841025][T21179] snd_dummy snd_dummy.0: control 3:2:0:syz0:211 is already present [ 1404.851477][T21181] CPU: 0 UID: 0 PID: 21181 Comm: syz.0.3615 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 1404.851507][T21181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1404.851521][T21181] Call Trace: [ 1404.851531][T21181] [ 1404.851541][T21181] dump_stack_lvl+0x189/0x250 [ 1404.851579][T21181] ? __pfx____ratelimit+0x10/0x10 [ 1404.851605][T21181] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1404.851636][T21181] ? __pfx__printk+0x10/0x10 [ 1404.851672][T21181] should_fail_ex+0x414/0x560 [ 1404.851707][T21181] _copy_to_user+0x31/0xb0 [ 1404.851731][T21181] bpf_test_finish+0x24e/0x700 [ 1404.851781][T21181] ? __pfx_bpf_test_finish+0x10/0x10 [ 1404.851818][T21181] ? __asan_memcpy+0x40/0x70 [ 1404.851846][T21181] bpf_prog_test_run_skb+0xed5/0x1560 [ 1404.851898][T21181] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1404.851931][T21181] bpf_prog_test_run+0x2c7/0x340 [ 1404.851967][T21181] __sys_bpf+0x4a4/0x860 [ 1404.851996][T21181] ? __pfx___sys_bpf+0x10/0x10 [ 1404.852038][T21181] ? ksys_write+0x22a/0x250 [ 1404.852066][T21181] ? __pfx_ksys_write+0x10/0x10 [ 1404.852088][T21181] ? rcu_is_watching+0x15/0xb0 [ 1404.852139][T21181] __x64_sys_bpf+0x7c/0x90 [ 1404.852165][T21181] do_syscall_64+0xfa/0x3b0 [ 1404.852191][T21181] ? lockdep_hardirqs_on+0x9c/0x150 [ 1404.852217][T21181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1404.852237][T21181] ? clear_bhb_loop+0x60/0xb0 [ 1404.852263][T21181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1404.852284][T21181] RIP: 0033:0x7f652fd8e929 [ 1404.852304][T21181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1404.852324][T21181] RSP: 002b:00007f6530be8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1404.852348][T21181] RAX: ffffffffffffffda RBX: 00007f652ffb5fa0 RCX: 00007f652fd8e929 [ 1404.852364][T21181] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 1404.852378][T21181] RBP: 00007f6530be8090 R08: 0000000000000000 R09: 0000000000000000 [ 1404.852391][T21181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1404.852404][T21181] R13: 0000000000000000 R14: 00007f652ffb5fa0 R15: 00007ffe45262908 [ 1404.852438][T21181] [ 1405.739135][T21186] program syz.1.3614 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1407.638784][ T24] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1407.909216][ T24] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1407.942953][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1408.013820][ T24] usb 7-1: config 0 descriptor?? [ 1408.464312][ T24] usb 7-1: Cannot read MAC address [ 1408.496991][ T24] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 1408.634676][T21222] FAULT_INJECTION: forcing a failure. [ 1408.634676][T21222] name failslab, interval 1, probability 0, space 0, times 0 [ 1408.735214][T21222] CPU: 1 UID: 0 PID: 21222 Comm: syz.4.3622 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 1408.735254][T21222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1408.735268][T21222] Call Trace: [ 1408.735277][T21222] [ 1408.735288][T21222] dump_stack_lvl+0x189/0x250 [ 1408.735317][T21222] ? __pfx____ratelimit+0x10/0x10 [ 1408.735337][T21222] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1408.735358][T21222] ? __pfx__printk+0x10/0x10 [ 1408.735378][T21222] ? __pfx___might_resched+0x10/0x10 [ 1408.735399][T21222] ? fs_reclaim_acquire+0x7d/0x100 [ 1408.735426][T21222] should_fail_ex+0x414/0x560 [ 1408.735454][T21222] should_failslab+0xa8/0x100 [ 1408.735476][T21222] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1408.735504][T21222] ? __alloc_skb+0x112/0x2d0 [ 1408.735539][T21222] __alloc_skb+0x112/0x2d0 [ 1408.735576][T21222] netlink_ack+0x146/0xa50 [ 1408.735606][T21222] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1408.735633][T21222] ? ref_tracker_free+0x63a/0x7d0 [ 1408.735659][T21222] ? __copy_skb_header+0xa7/0x550 [ 1408.735684][T21222] ? __pfx_ref_tracker_free+0x10/0x10 [ 1408.735704][T21222] ? __skb_clone+0x63/0x7a0 [ 1408.735726][T21222] netlink_rcv_skb+0x28c/0x470 [ 1408.735750][T21222] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1408.735773][T21222] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1408.735806][T21222] ? netlink_deliver_tap+0x2e/0x1b0 [ 1408.735821][T21222] ? netlink_deliver_tap+0x2e/0x1b0 [ 1408.735839][T21222] netlink_unicast+0x758/0x8d0 [ 1408.735869][T21222] netlink_sendmsg+0x805/0xb30 [ 1408.735891][T21222] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1408.735912][T21222] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1408.735931][T21222] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1408.735947][T21222] __sock_sendmsg+0x219/0x270 [ 1408.735969][T21222] ____sys_sendmsg+0x505/0x830 [ 1408.735989][T21222] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1408.736012][T21222] ? import_iovec+0x74/0xa0 [ 1408.736030][T21222] ___sys_sendmsg+0x21f/0x2a0 [ 1408.736047][T21222] ? __pfx____sys_sendmsg+0x10/0x10 [ 1408.736091][T21222] ? __fget_files+0x2a/0x420 [ 1408.736111][T21222] ? __fget_files+0x3a0/0x420 [ 1408.736139][T21222] __x64_sys_sendmsg+0x19b/0x260 [ 1408.736157][T21222] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1408.736180][T21222] ? __pfx_ksys_write+0x10/0x10 [ 1408.736197][T21222] ? rcu_is_watching+0x15/0xb0 [ 1408.736223][T21222] ? do_syscall_64+0xbe/0x3b0 [ 1408.736263][T21222] do_syscall_64+0xfa/0x3b0 [ 1408.736290][T21222] ? lockdep_hardirqs_on+0x9c/0x150 [ 1408.736319][T21222] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1408.736335][T21222] ? clear_bhb_loop+0x60/0xb0 [ 1408.736353][T21222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1408.736368][T21222] RIP: 0033:0x7f391cd8e929 [ 1408.736382][T21222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1408.736396][T21222] RSP: 002b:00007f391db12038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1408.736413][T21222] RAX: ffffffffffffffda RBX: 00007f391cfb5fa0 RCX: 00007f391cd8e929 [ 1408.736424][T21222] RDX: 0000000002000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1408.736435][T21222] RBP: 00007f391db12090 R08: 0000000000000000 R09: 0000000000000000 [ 1408.736444][T21222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1408.736453][T21222] R13: 0000000000000000 R14: 00007f391cfb5fa0 R15: 00007ffc24c39038 [ 1408.736477][T21222] [ 1409.717421][ T5910] usb 5-1: new full-speed USB device number 105 using dummy_hcd [ 1410.916386][ T43] usb 7-1: USB disconnect, device number 30 [ 1410.929782][ T5910] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1410.942816][ T5910] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 510, setting to 64 [ 1411.031458][ T5910] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1411.066670][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1411.114461][ T5910] usb 5-1: Product: syz [ 1411.137223][ T5910] usb 5-1: Manufacturer: syz [ 1411.197130][ T5910] usb 5-1: SerialNumber: syz [ 1411.227952][T21253] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3628'. [ 1411.347835][T16513] Bluetooth: hci1: unexpected event for opcode 0x2016 [ 1411.512177][T21229] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1412.000275][ T9] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1412.017466][ T5910] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 1412.044937][ T5910] cdc_ncm 5-1:1.0: bind() failure [ 1412.078013][ T5910] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1412.113056][ T5910] cdc_ncm 5-1:1.1: bind() failure [ 1412.200754][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 1412.231372][ T9] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1412.398474][ T9] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1413.197134][ T9] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1413.217383][ T9] usb 8-1: Product: syz [ 1413.221636][ T9] usb 8-1: Manufacturer: syz [ 1413.226308][ T9] usb 8-1: SerialNumber: syz [ 1413.246588][ T9] usb 8-1: config 0 descriptor?? [ 1413.252873][T21248] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1413.422952][ T9] usb 5-1: USB disconnect, device number 105 [ 1413.563831][ T5910] usb 8-1: USB disconnect, device number 11 [ 1414.657258][ T5815] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1414.831585][ T5815] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1414.997204][ T5815] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1415.338064][ T5815] usb 8-1: config 0 descriptor?? [ 1415.375601][ T5815] cp210x 8-1:0.0: cp210x converter detected [ 1416.019921][ T5815] cp210x 8-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1416.055436][ T5815] cp210x 8-1:0.0: GPIO initialisation failed: -71 [ 1416.246011][ T5815] usb 8-1: cp210x converter now attached to ttyUSB0 [ 1416.322637][ T5815] usb 8-1: USB disconnect, device number 12 [ 1416.390043][ T5815] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1416.464652][ T5815] cp210x 8-1:0.0: device disconnected [ 1420.971722][T21342] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3643'. [ 1421.754006][T21348] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3645'. [ 1421.763544][T16513] Bluetooth: hci1: ACL packet for unknown connection handle 227 [ 1421.976272][T16513] Bluetooth: hci5: unexpected event for opcode 0x2016 [ 1422.085568][T16513] Bluetooth: hci1: unexpected event for opcode 0x2016 [ 1422.857248][ T5903] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1423.546068][ T5903] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1423.587657][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1423.669818][ T5903] usb 1-1: config 0 descriptor?? [ 1423.723152][ T5903] cp210x 1-1:0.0: cp210x converter detected [ 1424.699688][ T5903] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1425.197306][ T5903] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 1425.278225][ T5903] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1425.307963][ T5903] usb 1-1: USB disconnect, device number 101 [ 1425.347834][ T5903] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1425.356030][ T5903] cp210x 1-1:0.0: device disconnected [ 1428.292234][T16513] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1428.337461][ T30] audit: type=1800 audit(1749259657.064:834): pid=21404 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.3659" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1429.426062][ T5903] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1429.677266][ T5903] usb 2-1: Using ep0 maxpacket: 32 [ 1429.678740][T21429] program syz.0.3663 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1429.979297][ T5903] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 1430.005663][ T5903] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1430.060759][ T5903] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1430.097134][ T5903] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1430.147260][ T5903] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1430.159311][ T5903] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1430.172303][ T5903] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1430.203981][ T5903] usb 2-1: Product: syz [ 1430.234335][ T5903] usb 2-1: Manufacturer: syz [ 1430.246883][T16513] Bluetooth: hci4: ACL packet for unknown connection handle 227 [ 1430.261524][T21435] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3664'. [ 1430.280015][ T5903] usb 2-1: SerialNumber: syz [ 1430.290285][ T5903] usb 2-1: config 0 descriptor?? [ 1430.300943][ T5903] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1430.327983][ T5903] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1430.730390][T16513] Bluetooth: hci4: unexpected event for opcode 0x2016 [ 1431.092530][ T24] hid-generic 0000:0000:0200.0029: item fetching failed at offset 0/1 [ 1431.138513][T21445] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3660'. [ 1431.175786][ T24] hid-generic 0000:0000:0200.0029: probe with driver hid-generic failed with error -22 [ 1431.758681][ T5815] usb 2-1: USB disconnect, device number 114 [ 1431.806326][ T5815] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 1432.518207][ T5815] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 1432.714267][ T5815] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1432.787213][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1432.795394][ T5815] usb 2-1: Product: syz [ 1432.841402][ T5815] usb 2-1: Manufacturer: syz [ 1432.846174][ T5815] usb 2-1: SerialNumber: syz [ 1432.939814][ T5815] usb 2-1: config 0 descriptor?? [ 1433.128853][T21467] netlink: 268 bytes leftover after parsing attributes in process `syz.7.3668'. [ 1433.418303][ T5815] airspy 2-1:0.0: Board ID: 00 [ 1433.457193][ T5815] airspy 2-1:0.0: Firmware version: [ 1433.830291][ T5815] airspy 2-1:0.0: usb_control_msg() failed -71 request 0e [ 1433.892259][ T5815] airspy 2-1:0.0: Registered as swradio24 [ 1433.933406][ T5815] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1434.015097][ T5815] usb 2-1: USB disconnect, device number 115 [ 1434.308753][ T5910] usb 7-1: new low-speed USB device number 31 using dummy_hcd [ 1434.952853][ T5910] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1434.985003][ T5910] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1435.075358][ T5910] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1435.284561][ T5910] usb 7-1: config 0 descriptor?? [ 1436.492418][T21492] program syz.7.3675 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1436.619297][T21512] netlink: 268 bytes leftover after parsing attributes in process `syz.4.3680'. [ 1437.614582][ T9] usb 7-1: USB disconnect, device number 31 [ 1438.790200][T16513] Bluetooth: hci3: ACL packet for unknown connection handle 227 [ 1438.962361][T21529] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3682'. [ 1439.347872][T16513] Bluetooth: hci3: unexpected event for opcode 0x2016 [ 1440.830298][ T5910] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 1441.099207][T21547] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3688'. [ 1441.568376][ T5910] usb 8-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1441.587209][ T5910] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.607995][ T5910] usb 8-1: Product: syz [ 1441.627211][ T5910] usb 8-1: Manufacturer: syz [ 1441.644164][ T5910] usb 8-1: SerialNumber: syz [ 1441.662598][ T5910] usb 8-1: config 0 descriptor?? [ 1441.723829][T16513] Bluetooth: hci1: unexpected event for opcode 0x2016 [ 1441.807354][ T24] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 1442.126149][ T24] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1442.127824][ T5910] airspy 8-1:0.0: Board ID: 00 [ 1442.142492][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1442.176275][ T24] usb 1-1: Product: syz [ 1442.198953][ T24] usb 1-1: Manufacturer: syz [ 1442.267356][ T24] usb 1-1: SerialNumber: syz [ 1442.670251][ T5910] airspy 8-1:0.0: Firmware version: [ 1442.677722][ T24] usb 1-1: config 0 descriptor?? [ 1442.935995][ T5910] airspy 8-1:0.0: usb_control_msg() failed -71 request 0e [ 1442.990890][ T5910] airspy 8-1:0.0: Registered as swradio24 [ 1442.996915][ T5910] airspy 8-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1443.019644][ T5910] usb 8-1: USB disconnect, device number 13 [ 1443.146789][ T24] airspy 1-1:0.0: Board ID: 00 [ 1443.780463][ T24] airspy 1-1:0.0: Firmware version: [ 1444.003166][ T24] airspy 1-1:0.0: usb_control_msg() failed -71 request 0e [ 1444.028246][T21573] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 1444.036174][T21573] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1444.065973][ T24] airspy 1-1:0.0: Registered as swradio24 [ 1444.104986][ T24] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1444.133714][T21573] vhci_hcd vhci_hcd.0: Device attached [ 1444.155300][ T24] usb 1-1: USB disconnect, device number 102 [ 1445.197026][T16706] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1445.387230][T21574] vhci_hcd: connection closed [ 1445.417524][ T9021] vhci_hcd: stop threads [ 1445.447163][ T5910] usb 45-1: new high-speed USB device number 2 using vhci_hcd [ 1445.450040][T16706] usb 5-1: Using ep0 maxpacket: 8 [ 1445.460946][ T9021] vhci_hcd: release socket [ 1445.488598][ T9021] vhci_hcd: disconnect device [ 1445.508209][ T5910] usb 45-1: enqueue for inactive port 0 [ 1445.526519][T16706] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1445.556027][T16706] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1445.597267][T16706] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1445.642703][ T5910] vhci_hcd: vhci_device speed not set [ 1445.662991][T16706] usb 5-1: Product: syz [ 1445.744786][T16513] Bluetooth: hci3: ACL packet for unknown connection handle 227 [ 1445.806462][T16706] usb 5-1: Manufacturer: syz [ 1445.833692][T16706] usb 5-1: SerialNumber: syz [ 1445.843937][T21587] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3696'. [ 1446.367406][T16513] Bluetooth: hci3: unexpected event for opcode 0x2016 [ 1446.598225][T16706] usb 5-1: palm_os_3_probe - error -110 getting connection information [ 1446.598866][T16706] visor 5-1:1.0: probe with driver visor failed with error -110 [ 1449.687297][T16706] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1449.748161][ T24] usb 5-1: USB disconnect, device number 106 [ 1449.856880][T16706] usb 2-1: Using ep0 maxpacket: 32 [ 1449.885248][T16706] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 1450.665639][T16706] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1450.679641][T16706] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1450.694722][T16706] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1450.708269][T16706] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1450.728254][T16706] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1450.753159][T16706] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1450.783646][T16706] usb 2-1: Product: syz [ 1450.806337][T16706] usb 2-1: Manufacturer: syz [ 1450.818407][T16706] usb 2-1: SerialNumber: syz [ 1451.008255][T16706] usb 2-1: config 0 descriptor?? [ 1451.047203][ T24] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1451.287699][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 1451.835457][T16706] usb 2-1: can't set config #0, error -71 [ 1451.857872][ T24] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1451.887484][T16706] usb 2-1: USB disconnect, device number 116 [ 1451.895360][ T24] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1451.986299][ T24] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1452.046807][ T24] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1452.268921][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1452.301212][ T24] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1452.314441][ T24] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1452.379761][ T24] usb 5-1: Product: syz [ 1452.400517][ T24] usb 5-1: Manufacturer: syz [ 1452.534334][T21641] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3708'. [ 1452.872773][ T24] usb 5-1: SerialNumber: syz [ 1452.907525][ T9] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1452.935709][ T24] usb 5-1: config 0 descriptor?? [ 1453.059104][ T24] usb 5-1: can't set config #0, error -71 [ 1453.094051][ T9] usb 8-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1453.097407][ T24] usb 5-1: USB disconnect, device number 107 [ 1453.158665][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1453.329350][ T9] usb 8-1: config 0 descriptor?? [ 1453.786948][T21651] sp0: Synchronizing with TNC [ 1454.327821][T21654] affs: No valid root block on device nullb0 [ 1455.434610][T21638] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3707'. [ 1455.741029][ T9] pegasus 8-1:0.0: can't reset MAC [ 1455.746706][ T9] pegasus 8-1:0.0: probe with driver pegasus failed with error -5 [ 1455.885583][ T9] usb 8-1: USB disconnect, device number 14 [ 1459.838452][ T5815] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1460.707126][ T5815] usb 5-1: Using ep0 maxpacket: 32 [ 1460.741662][ T5815] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1460.767178][ T5815] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1460.817602][ T5815] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1460.883089][ T5815] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1460.918830][ T5815] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1460.968822][ T5815] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1461.007533][ T5815] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1461.016132][ T5815] usb 5-1: Product: syz [ 1461.034884][ T5815] usb 5-1: Manufacturer: syz [ 1461.049945][ T5815] usb 5-1: SerialNumber: syz [ 1461.058784][ T5815] usb 5-1: config 0 descriptor?? [ 1461.074546][ T5815] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1461.130993][ T5910] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1461.410104][ T5910] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1461.430078][T21701] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3720'. [ 1461.568696][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1461.615887][ T9] hid-generic 0000:0000:0200.002A: item fetching failed at offset 0/1 [ 1461.865804][ T9] hid-generic 0000:0000:0200.002A: probe with driver hid-generic failed with error -22 [ 1461.981473][ T5910] usb 1-1: config 0 descriptor?? [ 1461.992588][ T5815] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1462.132284][T21731] FAULT_INJECTION: forcing a failure. [ 1462.132284][T21731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1462.146054][T21731] CPU: 1 UID: 0 PID: 21731 Comm: syz.1.3727 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 1462.146084][T21731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1462.146097][T21731] Call Trace: [ 1462.146107][T21731] [ 1462.146116][T21731] dump_stack_lvl+0x189/0x250 [ 1462.146154][T21731] ? __pfx____ratelimit+0x10/0x10 [ 1462.146182][T21731] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1462.146212][T21731] ? __pfx__printk+0x10/0x10 [ 1462.146234][T21731] ? __might_fault+0xb0/0x130 [ 1462.146274][T21731] should_fail_ex+0x414/0x560 [ 1462.146308][T21731] _copy_from_user+0x2d/0xb0 [ 1462.146331][T21731] __sys_bpf+0x1ed/0x860 [ 1462.146362][T21731] ? __pfx___sys_bpf+0x10/0x10 [ 1462.146404][T21731] ? ksys_write+0x22a/0x250 [ 1462.146433][T21731] ? __pfx_ksys_write+0x10/0x10 [ 1462.146468][T21731] __x64_sys_bpf+0x7c/0x90 [ 1462.146493][T21731] do_syscall_64+0xfa/0x3b0 [ 1462.146520][T21731] ? lockdep_hardirqs_on+0x9c/0x150 [ 1462.146547][T21731] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1462.146569][T21731] ? clear_bhb_loop+0x60/0xb0 [ 1462.146595][T21731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1462.146625][T21731] RIP: 0033:0x7f885c58e929 [ 1462.146645][T21731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1462.146664][T21731] RSP: 002b:00007f885d3ec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1462.146686][T21731] RAX: ffffffffffffffda RBX: 00007f885c7b5fa0 RCX: 00007f885c58e929 [ 1462.146703][T21731] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 1462.146718][T21731] RBP: 00007f885d3ec090 R08: 0000000000000000 R09: 0000000000000000 [ 1462.146731][T21731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1462.146744][T21731] R13: 0000000000000001 R14: 00007f885c7b5fa0 R15: 00007fffdffc52e8 [ 1462.146777][T21731] [ 1462.467258][ T9] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1463.617292][ T5911] usb 5-1: USB disconnect, device number 108 [ 1463.649059][ T5911] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1463.947361][ T9] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1463.976696][ T9] usb 7-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.40 [ 1463.988025][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1463.996129][ T9] usb 7-1: Product: syz [ 1464.833045][ T9] usb 7-1: Manufacturer: syz [ 1464.865821][ T9] usb 7-1: SerialNumber: syz [ 1464.874449][T21745] program syz.4.3729 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1465.136884][ T9] usb 7-1: can't set config #1, error -71 [ 1465.167584][ T9] usb 7-1: USB disconnect, device number 32 [ 1465.272566][T21717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3723'. [ 1465.290213][ T5910] pegasus 1-1:0.0: can't reset MAC [ 1465.295600][ T5910] pegasus 1-1:0.0: probe with driver pegasus failed with error -5 [ 1465.312015][ T5910] usb 1-1: USB disconnect, device number 103 [ 1465.536734][T16513] Bluetooth: hci1: ACL packet for unknown connection handle 227 [ 1465.580763][T21754] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3732'. [ 1466.123864][T16513] Bluetooth: hci1: unexpected event for opcode 0x2016 [ 1466.903511][ T5815] usb 5-1: new low-speed USB device number 109 using dummy_hcd [ 1467.037330][ T5910] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1467.080410][ T5815] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1467.570580][ T5910] usb 2-1: Using ep0 maxpacket: 32 [ 1467.682175][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1467.775694][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1467.857137][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1467.871639][ T5815] usb 5-1: config 0 descriptor?? [ 1467.895943][ T5910] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1468.053628][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1468.096142][ T5815] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1468.139285][ T5815] asix 5-1:0.0: probe with driver asix failed with error -32 [ 1468.143232][ T5910] usb 2-1: config 0 descriptor?? [ 1469.284342][ T5910] savu 0003:1E7D:2D5A.002B: unknown main item tag 0x0 [ 1469.347234][ T5910] savu 0003:1E7D:2D5A.002B: unknown main item tag 0x0 [ 1469.387494][ T5910] savu 0003:1E7D:2D5A.002B: unknown main item tag 0x0 [ 1469.394389][ T5910] savu 0003:1E7D:2D5A.002B: unknown main item tag 0x0 [ 1469.467210][ T5910] savu 0003:1E7D:2D5A.002B: unknown main item tag 0x0 [ 1469.496349][ T5910] savu 0003:1E7D:2D5A.002B: unbalanced collection at end of report description [ 1469.630174][ T5910] savu 0003:1E7D:2D5A.002B: parse failed [ 1469.654809][ T5910] savu 0003:1E7D:2D5A.002B: probe with driver savu failed with error -22 [ 1469.684997][ T5911] usb 5-1: USB disconnect, device number 109 [ 1469.768226][ T5910] usb 2-1: USB disconnect, device number 117 [ 1469.827228][T16706] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1469.906864][T21798] netlink: 136 bytes leftover after parsing attributes in process `syz.4.3741'. [ 1470.057168][T16706] usb 1-1: Using ep0 maxpacket: 32 [ 1470.097183][T16706] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 1470.130670][T16706] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1470.192422][T16706] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1470.299064][T16706] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1470.393458][T16706] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1470.454688][T21808] program syz.1.3742 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1470.826862][T16706] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1470.840943][T16706] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1470.908066][T16706] usb 1-1: Product: syz [ 1470.910218][T21811] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3744'. [ 1470.912433][T16513] Bluetooth: hci1: ACL packet for unknown connection handle 227 [ 1470.942820][T16706] usb 1-1: Manufacturer: syz [ 1470.970915][T16706] usb 1-1: SerialNumber: syz [ 1470.988310][T16706] usb 1-1: config 0 descriptor?? [ 1471.007785][T16706] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1471.029379][T16706] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1471.465784][T21795] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3740'. [ 1471.522703][T16663] hid-generic 0000:0000:0200.002C: item fetching failed at offset 0/1 [ 1471.564946][T16663] hid-generic 0000:0000:0200.002C: probe with driver hid-generic failed with error -22 [ 1471.701108][T16513] Bluetooth: hci1: unexpected event for opcode 0x2016 [ 1472.099355][T21822] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3746'. [ 1472.099806][T16513] Bluetooth: hci3: ACL packet for unknown connection handle 227 [ 1472.771491][T21816] program syz.4.3745 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1472.880383][T16513] Bluetooth: hci3: unexpected event for opcode 0x2016 [ 1472.895010][T21827] 9pnet_fd: Insufficient options for proto=fd [ 1472.900746][T16663] usb 1-1: USB disconnect, device number 104 [ 1472.957979][T16663] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 1473.511247][T16706] usb 2-1: new full-speed USB device number 118 using dummy_hcd [ 1474.055028][T16706] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1474.095803][T16706] usb 2-1: config 0 has no interface number 0 [ 1474.147624][T16706] usb 2-1: config 0 interface 1 altsetting 172 has 0 endpoint descriptors, different from the interface descriptor's value: 20 [ 1474.310023][T16706] usb 2-1: config 0 interface 1 has no altsetting 0 [ 1474.365584][T16706] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1474.537736][T16706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1474.556232][T16706] usb 2-1: config 0 descriptor?? [ 1474.569864][T16706] usb 2-1: selecting invalid altsetting 1 [ 1474.598485][T16706] dvb_ttusb_budget: ttusb_init_controller: error [ 1474.607476][T16663] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1474.617691][T16706] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1474.657582][ T5815] usb 5-1: new low-speed USB device number 110 using dummy_hcd [ 1474.787504][T16663] usb 7-1: Using ep0 maxpacket: 8 [ 1474.800216][T16663] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1474.983584][T16706] DVB: Unable to find symbol cx22700_attach() [ 1474.990855][ T5815] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1475.001205][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1475.012989][ T5815] usb 5-1: config 0 descriptor?? [ 1475.024202][T16663] usb 7-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1475.037379][ T24] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1475.078483][T16663] usb 7-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1475.086652][T16663] usb 7-1: Product: syz [ 1475.123377][T16706] DVB: Unable to find symbol tda10046_attach() [ 1475.124546][T16663] usb 7-1: Manufacturer: syz [ 1475.132183][T16706] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1475.155389][T16663] usb 7-1: SerialNumber: syz [ 1475.191606][T16706] usb 2-1: USB disconnect, device number 118 [ 1475.198159][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 1475.227523][ T24] usb 8-1: too many configurations: 65, using maximum allowed: 8 [ 1475.309455][ T5815] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1475.322673][ T24] usb 8-1: New USB device found, idVendor=1044, idProduct=800d, bcdDevice=57.5c [ 1475.334212][ T5815] asix 5-1:0.0: probe with driver asix failed with error -32 [ 1475.342659][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1475.357490][ T24] usb 8-1: Product: syz [ 1475.369431][ T24] usb 8-1: Manufacturer: syz [ 1475.376732][ T24] usb 8-1: SerialNumber: syz [ 1475.389759][ T24] usb 8-1: config 0 descriptor?? [ 1475.403660][T16663] usb 7-1: Invalid connection information received from device [ 1475.403710][ T24] usb 8-1: bad CDC descriptors [ 1475.614320][T21845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1475.623146][T21845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1476.306101][ T5815] usb 8-1: USB disconnect, device number 15 [ 1477.626463][ T5815] usb 7-1: USB disconnect, device number 33 [ 1477.682552][ T5936] usb 5-1: USB disconnect, device number 110 [ 1478.947937][T16513] Bluetooth: hci2: ACL packet for unknown connection handle 227 [ 1478.988483][T21906] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3763'. [ 1479.850588][T16513] Bluetooth: hci2: unexpected event for opcode 0x2016 [ 1481.330156][ T5936] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 1481.335803][T21933] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1481.649555][ T5936] usb 8-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1481.728783][ T5936] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1481.744893][ T5936] usb 8-1: Product: syz [ 1481.782151][ T5936] usb 8-1: Manufacturer: syz [ 1481.790644][ T5936] usb 8-1: SerialNumber: syz [ 1481.992315][ T5936] usb 8-1: config 0 descriptor?? [ 1482.637478][T21942] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3770'. [ 1484.148960][ T5936] airspy 8-1:0.0: usb_control_msg() failed -110 request 09 [ 1484.149094][ T5936] airspy 8-1:0.0: Could not detect board [ 1484.149799][ T5936] airspy 8-1:0.0: probe with driver airspy failed with error -110 [ 1484.734184][ T5936] usb 8-1: USB disconnect, device number 16 [ 1486.338273][T21967] xt_cgroup: invalid path, errno=-2 [ 1489.166821][T21991] bridge0: entered promiscuous mode [ 1489.173889][T21991] macvlan2: entered promiscuous mode [ 1489.237905][T21992] FAULT_INJECTION: forcing a failure. [ 1489.237905][T21992] name failslab, interval 1, probability 0, space 0, times 0 [ 1489.281722][T21992] CPU: 1 UID: 0 PID: 21992 Comm: syz.7.3783 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 1489.281754][T21992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1489.281768][T21992] Call Trace: [ 1489.281777][T21992] [ 1489.281787][T21992] dump_stack_lvl+0x189/0x250 [ 1489.281824][T21992] ? __pfx____ratelimit+0x10/0x10 [ 1489.281851][T21992] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1489.281882][T21992] ? __pfx__printk+0x10/0x10 [ 1489.281911][T21992] ? __pfx___might_resched+0x10/0x10 [ 1489.281941][T21992] ? fs_reclaim_acquire+0x7d/0x100 [ 1489.281977][T21992] should_fail_ex+0x414/0x560 [ 1489.282010][T21992] should_failslab+0xa8/0x100 [ 1489.282041][T21992] __kmalloc_cache_noprof+0x70/0x3d0 [ 1489.282067][T21992] ? fl_change+0x199/0x1ac0 [ 1489.282107][T21992] fl_change+0x199/0x1ac0 [ 1489.282137][T21992] ? fl_get+0x9a/0x380 [ 1489.282158][T21992] ? fl_get+0x9a/0x380 [ 1489.282180][T21992] ? fl_get+0x2f1/0x380 [ 1489.282201][T21992] ? __pfx_fl_change+0x10/0x10 [ 1489.282224][T21992] ? __pfx_fl_get+0x10/0x10 [ 1489.282254][T21992] tc_new_tfilter+0xdca/0x15b0 [ 1489.282312][T21992] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1489.282333][T21992] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 1489.282397][T21992] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1489.282420][T21992] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1489.282457][T21992] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1489.282486][T21992] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1489.282514][T21992] ? ref_tracker_free+0x63a/0x7d0 [ 1489.282540][T21992] ? __copy_skb_header+0xa7/0x550 [ 1489.282566][T21992] ? __pfx_ref_tracker_free+0x10/0x10 [ 1489.282594][T21992] ? __skb_clone+0x63/0x7a0 [ 1489.282626][T21992] netlink_rcv_skb+0x205/0x470 [ 1489.282660][T21992] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1489.282693][T21992] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1489.282741][T21992] ? netlink_deliver_tap+0x2e/0x1b0 [ 1489.282760][T21992] ? netlink_deliver_tap+0x2e/0x1b0 [ 1489.282788][T21992] netlink_unicast+0x758/0x8d0 [ 1489.282830][T21992] netlink_sendmsg+0x805/0xb30 [ 1489.282863][T21992] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1489.282893][T21992] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1489.282920][T21992] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1489.282942][T21992] __sock_sendmsg+0x219/0x270 [ 1489.282973][T21992] ____sys_sendmsg+0x505/0x830 [ 1489.283002][T21992] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1489.283035][T21992] ? import_iovec+0x74/0xa0 [ 1489.283061][T21992] ___sys_sendmsg+0x21f/0x2a0 [ 1489.283093][T21992] ? __pfx____sys_sendmsg+0x10/0x10 [ 1489.283157][T21992] ? __fget_files+0x2a/0x420 [ 1489.283185][T21992] ? __fget_files+0x3a0/0x420 [ 1489.283226][T21992] __x64_sys_sendmsg+0x19b/0x260 [ 1489.283252][T21992] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1489.283286][T21992] ? __pfx_ksys_write+0x10/0x10 [ 1489.283309][T21992] ? rcu_is_watching+0x15/0xb0 [ 1489.283346][T21992] ? do_syscall_64+0xbe/0x3b0 [ 1489.283379][T21992] do_syscall_64+0xfa/0x3b0 [ 1489.283405][T21992] ? lockdep_hardirqs_on+0x9c/0x150 [ 1489.283430][T21992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1489.283451][T21992] ? clear_bhb_loop+0x60/0xb0 [ 1489.283478][T21992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1489.283498][T21992] RIP: 0033:0x7f61ba18e929 [ 1489.283518][T21992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1489.283537][T21992] RSP: 002b:00007f61baff7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1489.283560][T21992] RAX: ffffffffffffffda RBX: 00007f61ba3b6080 RCX: 00007f61ba18e929 [ 1489.283576][T21992] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 1489.283589][T21992] RBP: 00007f61baff7090 R08: 0000000000000000 R09: 0000000000000000 [ 1489.283602][T21992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1489.283614][T21992] R13: 0000000000000000 R14: 00007f61ba3b6080 R15: 00007ffda354a2d8 [ 1489.283648][T21992] [ 1489.921647][T22000] program syz.0.3785 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1490.678683][T16513] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 1490.896465][T22013] FAULT_INJECTION: forcing a failure. [ 1490.896465][T22013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1490.959960][T22013] CPU: 1 UID: 0 PID: 22013 Comm: syz.6.3789 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 1490.959993][T22013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1490.960006][T22013] Call Trace: [ 1490.960016][T22013] [ 1490.960025][T22013] dump_stack_lvl+0x189/0x250 [ 1490.960062][T22013] ? __pfx____ratelimit+0x10/0x10 [ 1490.960089][T22013] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1490.960119][T22013] ? __pfx__printk+0x10/0x10 [ 1490.960140][T22013] ? __might_fault+0xb0/0x130 [ 1490.960180][T22013] should_fail_ex+0x414/0x560 [ 1490.960213][T22013] _copy_from_user+0x2d/0xb0 [ 1490.960237][T22013] ucma_query+0xe0/0x1280 [ 1490.960268][T22013] ? __lock_acquire+0xab9/0xd20 [ 1490.960296][T22013] ? __pfx_ucma_query+0x10/0x10 [ 1490.960335][T22013] ? is_bpf_text_address+0x26/0x2b0 [ 1490.960381][T22013] ? __lock_acquire+0xab9/0xd20 [ 1490.960431][T22013] ? __lock_acquire+0xab9/0xd20 [ 1490.960470][T22013] ? __might_fault+0xb0/0x130 [ 1490.960521][T22013] ucma_write+0x249/0x2e0 [ 1490.960555][T22013] ? __pfx_ucma_write+0x10/0x10 [ 1490.960583][T22013] ? security_file_permission+0x75/0x290 [ 1490.960614][T22013] ? rw_verify_area+0x258/0x650 [ 1490.960638][T22013] ? __pfx_ucma_write+0x10/0x10 [ 1490.960671][T22013] vfs_write+0x27b/0xa90 [ 1490.960705][T22013] ? __pfx_vfs_write+0x10/0x10 [ 1490.960732][T22013] ? __fget_files+0x2a/0x420 [ 1490.960764][T22013] ? __fget_files+0x2a/0x420 [ 1490.960799][T22013] ? __fget_files+0x3a0/0x420 [ 1490.960826][T22013] ? __fget_files+0x2a/0x420 [ 1490.960865][T22013] ksys_write+0x145/0x250 [ 1490.960894][T22013] ? __pfx_ksys_write+0x10/0x10 [ 1490.960916][T22013] ? rcu_is_watching+0x15/0xb0 [ 1490.960953][T22013] ? do_syscall_64+0xbe/0x3b0 [ 1490.960985][T22013] do_syscall_64+0xfa/0x3b0 [ 1490.961011][T22013] ? lockdep_hardirqs_on+0x9c/0x150 [ 1490.961038][T22013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1490.961058][T22013] ? clear_bhb_loop+0x60/0xb0 [ 1490.961084][T22013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1490.961105][T22013] RIP: 0033:0x7f2de438e929 [ 1490.961123][T22013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1490.961141][T22013] RSP: 002b:00007f2de5263038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1490.961164][T22013] RAX: ffffffffffffffda RBX: 00007f2de45b5fa0 RCX: 00007f2de438e929 [ 1490.961179][T22013] RDX: 0000000000000018 RSI: 0000200000000000 RDI: 0000000000000003 [ 1490.961191][T22013] RBP: 00007f2de5263090 R08: 0000000000000000 R09: 0000000000000000 [ 1490.961203][T22013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1490.961216][T22013] R13: 0000000000000000 R14: 00007f2de45b5fa0 R15: 00007fff03e2a448 [ 1490.961249][T22013] [ 1492.117919][ T5936] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1492.554339][ T5936] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1492.583384][ T5936] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1492.772777][ T5936] usb 1-1: config 0 descriptor?? [ 1495.645058][ T5936] pegasus 1-1:0.0: can't reset MAC [ 1495.650536][ T5936] pegasus 1-1:0.0: probe with driver pegasus failed with error -5 [ 1495.702485][ T5936] usb 1-1: USB disconnect, device number 105 [ 1497.031184][T22084] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3804'. [ 1497.073044][T22084] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3804'. [ 1497.958860][ T43] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1498.148558][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 1498.242261][ T43] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1498.368919][ T43] usb 1-1: config 4 has an invalid interface number: 255 but max is 0 [ 1498.531997][ T43] usb 1-1: config 4 has no interface number 0 [ 1498.706235][ T43] usb 1-1: config 4 interface 255 has no altsetting 0 [ 1498.955526][ T43] usb 1-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= e.87 [ 1499.049551][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1499.062873][ T43] usb 1-1: Product: syz [ 1499.072337][ T43] usb 1-1: Manufacturer: syz [ 1499.080242][ T43] usb 1-1: SerialNumber: syz [ 1499.297317][T22104] program syz.6.3807 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1499.723708][ T43] usb 1-1: USB disconnect, device number 106 [ 1504.048634][T22130] Lens B: ================= START STATUS ================= [ 1504.090150][T22130] Lens B: Focus, Absolute: 0 [ 1504.094933][T22130] Lens B: ================== END STATUS ================== [ 1504.150600][T16663] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1505.137164][T16663] usb 7-1: Using ep0 maxpacket: 32 [ 1505.146563][T22158] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 1505.289688][T16663] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1505.333274][T16663] usb 7-1: config 128 has an invalid interface number: 127 but max is 3 [ 1505.377398][T16663] usb 7-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1505.420133][T16663] usb 7-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1506.308894][T16663] usb 7-1: config 128 has no interface number 0 [ 1506.315678][T16663] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1506.329021][T16663] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1506.340020][T16663] usb 7-1: config 128 interface 127 has no altsetting 0 [ 1506.352541][T16663] usb 7-1: language id specifier not provided by device, defaulting to English [ 1506.378948][T16663] usb 7-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1507.495566][T16663] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1507.507913][T16663] usb 7-1: Product: syz [ 1507.514007][T16663] usb 7-1: Manufacturer: syz [ 1507.522975][T16663] usb 7-1: SerialNumber: syz [ 1507.569370][T16663] usb 7-1: can't set config #128, error -71 [ 1507.597508][T16663] usb 7-1: USB disconnect, device number 34 [ 1508.251157][T22183] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3824'. [ 1511.057616][ T43] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1511.307373][ T43] usb 8-1: Using ep0 maxpacket: 32 [ 1511.342142][T22218] program syz.0.3834 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1511.626343][ T43] usb 8-1: config 0 has an invalid interface number: 191 but max is 0 [ 1511.657230][ T43] usb 8-1: config 0 has no interface number 0 [ 1511.663432][ T43] usb 8-1: config 0 interface 191 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1511.704382][ T43] usb 8-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1512.687946][ T43] usb 8-1: New USB device found, idVendor=04fc, idProduct=0204, bcdDevice=67.67 [ 1512.731395][ T43] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1512.786314][ T43] usb 8-1: Product: syz [ 1512.792742][ T43] usb 8-1: Manufacturer: syz [ 1512.833983][ T43] usb 8-1: SerialNumber: syz [ 1512.880761][ T43] usb 8-1: config 0 descriptor?? [ 1512.914611][ T43] spcp8x5 8-1:0.191: SPCP8x5 converter detected [ 1512.946800][T22225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3836'. [ 1512.969644][ T43] usb 8-1: SPCP8x5 converter now attached to ttyUSB0 [ 1513.014339][T22225] bond0: option use_carrier: invalid value (116) [ 1513.587231][ T43] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1514.008055][ T43] usb 5-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 1514.034613][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1514.056717][ T43] usb 5-1: Product: syz [ 1514.062453][ T43] usb 5-1: Manufacturer: syz [ 1514.698487][ T5910] usb 8-1: USB disconnect, device number 17 [ 1514.759128][ T5910] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 1514.778227][ T43] usb 5-1: SerialNumber: syz [ 1514.818686][ T43] usb 5-1: config 0 descriptor?? [ 1514.832503][ T43] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 1514.840159][ T5910] spcp8x5 8-1:0.191: device disconnected [ 1515.403558][ T43] sonixb 5-1:0.0: Error writing register 01: -71 [ 1515.444211][ T43] sonixb 5-1:0.0: probe with driver sonixb failed with error -71 [ 1515.688813][ T43] usb 5-1: USB disconnect, device number 111 [ 1518.217340][T22289] program syz.0.3849 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1519.209275][ T9] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1519.467143][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 1519.520934][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1520.180253][ T9] usb 7-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1520.290178][T22299] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x1 [ 1520.300908][ T9] usb 7-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1520.349725][ T9] usb 7-1: Product: syz [ 1520.364607][ T9] usb 7-1: Manufacturer: syz [ 1520.375012][ T9] usb 7-1: SerialNumber: syz [ 1520.735872][ T43] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1521.183432][ T43] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1521.200597][ T9] usb 7-1: Invalid connection information received from device [ 1521.214801][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1521.250030][ T43] usb 5-1: Product: syz [ 1521.274676][ T43] usb 5-1: Manufacturer: syz [ 1521.279807][ T43] usb 5-1: SerialNumber: syz [ 1521.326539][ T43] usb 5-1: config 0 descriptor?? [ 1522.220368][ T43] usb 5-1: Firmware: major: 0, minor: 168, hardware type: UNKNOWN (136) [ 1522.425487][ T43] usb 5-1: failed to fetch extended address, random address set [ 1522.528982][ T43] usb 5-1: atusb_probe: initialization failed, error = -524 [ 1522.571247][ T43] atusb 5-1:0.0: probe with driver atusb failed with error -524 [ 1523.286488][ T5910] usb 7-1: USB disconnect, device number 35 [ 1523.319606][ T43] usb 5-1: USB disconnect, device number 112 [ 1524.373874][T22332] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3862'. [ 1524.485752][T16513] Bluetooth: hci1: unexpected event for opcode 0x2016 [ 1525.878418][T22341] fuse: Bad value for 'group_id' [ 1525.883517][T22341] fuse: Bad value for 'group_id' [ 1530.447123][ T9] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1530.825691][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 1532.237383][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1532.302298][ T9] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1532.319876][ T9] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1532.335291][ T9] usb 1-1: Product: syz [ 1532.341068][ T9] usb 1-1: Manufacturer: syz [ 1532.350618][ T9] usb 1-1: SerialNumber: syz [ 1532.400299][T22386] FAULT_INJECTION: forcing a failure. [ 1532.400299][T22386] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1532.415744][T22386] CPU: 0 UID: 0 PID: 22386 Comm: syz.7.3878 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 1532.415776][T22386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1532.415790][T22386] Call Trace: [ 1532.415800][T22386] [ 1532.415810][T22386] dump_stack_lvl+0x189/0x250 [ 1532.415849][T22386] ? __pfx____ratelimit+0x10/0x10 [ 1532.415878][T22386] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1532.415908][T22386] ? __pfx__printk+0x10/0x10 [ 1532.415930][T22386] ? fs_reclaim_acquire+0x7d/0x100 [ 1532.415971][T22386] should_fail_ex+0x414/0x560 [ 1532.416005][T22386] prepare_alloc_pages+0x213/0x610 [ 1532.416045][T22386] __alloc_frozen_pages_noprof+0x123/0x370 [ 1532.416082][T22386] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1532.416126][T22386] ? policy_nodemask+0x27c/0x720 [ 1532.416151][T22386] ? percpu_ref_get_many+0x19/0x140 [ 1532.416195][T22386] alloc_pages_mpol+0x232/0x4a0 [ 1532.416229][T22386] alloc_pages_noprof+0xa9/0x190 [ 1532.416259][T22386] pgd_alloc+0x44/0x570 [ 1532.416294][T22386] mm_init+0x620/0xf00 [ 1532.416327][T22386] ? __asan_memset+0x22/0x50 [ 1532.416354][T22386] alloc_bprm+0x378/0x5b0 [ 1532.416384][T22386] do_execveat_common+0x1b3/0x6a0 [ 1532.416423][T22386] __x64_sys_execveat+0xc4/0xe0 [ 1532.416453][T22386] do_syscall_64+0xfa/0x3b0 [ 1532.416480][T22386] ? lockdep_hardirqs_on+0x9c/0x150 [ 1532.416507][T22386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1532.416528][T22386] ? clear_bhb_loop+0x60/0xb0 [ 1532.416554][T22386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1532.416575][T22386] RIP: 0033:0x7f61ba18e929 [ 1532.416595][T22386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1532.416614][T22386] RSP: 002b:00007f61baff7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1532.416638][T22386] RAX: ffffffffffffffda RBX: 00007f61ba3b6080 RCX: 00007f61ba18e929 [ 1532.416653][T22386] RDX: 0000000000000000 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 1532.416668][T22386] RBP: 00007f61baff7090 R08: 0000000000000000 R09: 0000000000000000 [ 1532.416681][T22386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1532.416694][T22386] R13: 0000000000000000 R14: 00007f61ba3b6080 R15: 00007ffda354a2d8 [ 1532.416728][T22386] [ 1533.277400][ T9] usb 1-1: can't set config #1, error -71 [ 1533.732529][ T9] usb 1-1: USB disconnect, device number 107 [ 1535.570901][T22401] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3883'. [ 1535.726648][T22406] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3884'. [ 1535.780560][T16513] Bluetooth: hci1: unexpected event for opcode 0x2016 [ 1536.482353][T22379] syz.4.3876 (22379): drop_caches: 2 [ 1537.873144][T22422] fuse: Bad value for 'group_id' [ 1537.879252][T22422] fuse: Bad value for 'group_id' [ 1540.711959][ T5910] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1540.967288][ T5910] usb 1-1: Using ep0 maxpacket: 8 [ 1540.993756][ T5910] usb 1-1: config 0 interface 0 altsetting 236 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1541.020060][ T5910] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1541.026798][ T5910] usb 1-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 1541.054030][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1541.081953][ T5910] usb 1-1: config 0 descriptor?? [ 1541.125780][ T5910] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1543.573053][ T5815] usb 1-1: USB disconnect, device number 108 [ 1543.587959][T22468] FAULT_INJECTION: forcing a failure. [ 1543.587959][T22468] name failslab, interval 1, probability 0, space 0, times 0 [ 1543.607565][T22468] CPU: 0 UID: 0 PID: 22468 Comm: syz.7.3901 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 1543.607597][T22468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1543.607611][T22468] Call Trace: [ 1543.607620][T22468] [ 1543.607630][T22468] dump_stack_lvl+0x189/0x250 [ 1543.607666][T22468] ? __pfx____ratelimit+0x10/0x10 [ 1543.607693][T22468] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1543.607724][T22468] ? __pfx__printk+0x10/0x10 [ 1543.607749][T22468] ? __pfx___might_resched+0x10/0x10 [ 1543.607780][T22468] ? fs_reclaim_acquire+0x7d/0x100 [ 1543.607817][T22468] should_fail_ex+0x414/0x560 [ 1543.607850][T22468] should_failslab+0xa8/0x100 [ 1543.607881][T22468] __kmalloc_noprof+0xcb/0x4f0 [ 1543.607906][T22468] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1543.607941][T22468] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1543.607977][T22468] genl_family_rcv_msg_doit+0xb8/0x300 [ 1543.608012][T22468] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1543.608041][T22468] ? rcu_is_watching+0x15/0xb0 [ 1543.608074][T22468] ? cap_capable+0x11f/0x460 [ 1543.608100][T22468] ? safesetid_security_capable+0xa9/0x1a0 [ 1543.608130][T22468] ? bpf_lsm_capable+0x9/0x20 [ 1543.608148][T22468] ? security_capable+0x7e/0x2e0 [ 1543.608188][T22468] genl_rcv_msg+0x60e/0x790 [ 1543.608223][T22468] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1543.608248][T22468] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 1543.608300][T22468] netlink_rcv_skb+0x205/0x470 [ 1543.608334][T22468] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1543.608362][T22468] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1543.608415][T22468] ? down_read+0x1ad/0x2e0 [ 1543.608449][T22468] genl_rcv+0x28/0x40 [ 1543.608472][T22468] netlink_unicast+0x758/0x8d0 [ 1543.608515][T22468] netlink_sendmsg+0x805/0xb30 [ 1543.608562][T22468] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1543.608592][T22468] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1543.608618][T22468] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1543.608640][T22468] __sock_sendmsg+0x219/0x270 [ 1543.608672][T22468] ____sys_sendmsg+0x505/0x830 [ 1543.608702][T22468] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1543.608737][T22468] ? import_iovec+0x74/0xa0 [ 1543.608763][T22468] ___sys_sendmsg+0x21f/0x2a0 [ 1543.608789][T22468] ? __pfx____sys_sendmsg+0x10/0x10 [ 1543.608856][T22468] ? __fget_files+0x2a/0x420 [ 1543.608884][T22468] ? __fget_files+0x3a0/0x420 [ 1543.608926][T22468] __x64_sys_sendmsg+0x19b/0x260 [ 1543.608952][T22468] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1543.608994][T22468] ? __pfx_ksys_write+0x10/0x10 [ 1543.609014][T22468] ? rcu_is_watching+0x15/0xb0 [ 1543.609047][T22468] ? do_syscall_64+0xbe/0x3b0 [ 1543.609079][T22468] do_syscall_64+0xfa/0x3b0 [ 1543.609110][T22468] ? lockdep_hardirqs_on+0x9c/0x150 [ 1543.609137][T22468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1543.609156][T22468] ? clear_bhb_loop+0x60/0xb0 [ 1543.609181][T22468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1543.609201][T22468] RIP: 0033:0x7f61ba18e929 [ 1543.609221][T22468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1543.609239][T22468] RSP: 002b:00007f61bb018038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1543.609261][T22468] RAX: ffffffffffffffda RBX: 00007f61ba3b5fa0 RCX: 00007f61ba18e929 [ 1543.609276][T22468] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 1543.609290][T22468] RBP: 00007f61bb018090 R08: 0000000000000000 R09: 0000000000000000 [ 1543.609303][T22468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1543.609314][T22468] R13: 0000000000000000 R14: 00007f61ba3b5fa0 R15: 00007ffda354a2d8 [ 1543.609347][T22468] [ 1544.816631][T22481] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3902'. [ 1544.967182][T16513] Bluetooth: hci5: ACL packet for unknown connection handle 227 [ 1545.064524][T22482] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1546.369589][T16513] Bluetooth: hci5: unexpected event for opcode 0x2016 [ 1546.389885][T22498] fuse: Bad value for 'group_id' [ 1546.395060][T22498] fuse: Bad value for 'group_id' [ 1547.128049][ T5911] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1547.579599][ T5911] usb 7-1: Using ep0 maxpacket: 8 [ 1547.654298][ T5911] usb 7-1: config 0 has an invalid interface number: 228 but max is 0 [ 1547.701390][ T5911] usb 7-1: config 0 has no interface number 0 [ 1547.719065][ T5911] usb 7-1: config 0 interface 228 has no altsetting 0 [ 1547.919788][ T5911] usb 7-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.09 [ 1547.959798][ T5911] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1548.000986][ T5911] usb 7-1: Product: syz [ 1548.026011][ T5911] usb 7-1: Manufacturer: syz [ 1548.032201][ T5911] usb 7-1: SerialNumber: syz [ 1548.064741][ T5911] usb 7-1: config 0 descriptor?? [ 1548.136593][ T5911] go7007 7-1:0.228: probe with driver go7007 failed with error -12 [ 1548.447989][T22508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1548.467893][T22508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1549.712619][ T43] usb 7-1: USB disconnect, device number 36 [ 1549.983575][T22532] random: crng reseeded on system resumption [ 1551.488426][ T5815] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1551.619558][T22549] sp0: Synchronizing with TNC [ 1551.639628][T22550] vivid-007: ================= START STATUS ================= [ 1551.647627][T22550] vivid-007: Generate PTS: true [ 1551.653231][T22550] vivid-007: Generate SCR: true [ 1551.659517][T22550] tpg source WxH: 320x240 (Y'CbCr) [ 1551.664701][T22550] tpg field: 1 [ 1551.668203][T22550] tpg crop: (0,0)/320x240 [ 1551.672763][T22550] tpg compose: (0,0)/320x240 [ 1551.677542][T22550] tpg colorspace: 8 [ 1551.681372][T22550] tpg transfer function: 0/0 [ 1551.686003][T22550] tpg Y'CbCr encoding: 0/0 [ 1551.690687][T22550] tpg quantization: 0/0 [ 1551.695085][T22550] tpg RGB range: 0/2 [ 1551.699089][T22550] vivid-007: ================== END STATUS ================== [ 1551.717630][T22553] netlink: 76 bytes leftover after parsing attributes in process `syz.7.3924'. [ 1551.757061][ T5815] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1551.836680][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1551.954875][T22555] affs: No valid root block on device nullb0 [ 1552.447768][ T5815] usb 5-1: config 0 descriptor?? [ 1552.515157][ T5815] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1554.182268][T22587] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 1555.178881][ T5815] usb 5-1: USB disconnect, device number 113 [ 1559.627172][T22625] sp0: Synchronizing with TNC [ 1559.946264][T22627] affs: No valid root block on device nullb0 [ 1560.909083][ T30] audit: type=1326 audit(1749259789.614:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22636 comm="syz.7.3942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ba18e929 code=0x7ffc0000 [ 1561.023891][ T30] audit: type=1326 audit(1749259789.614:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22636 comm="syz.7.3942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61ba18e929 code=0x7ffc0000 [ 1561.046440][ T30] audit: type=1326 audit(1749259789.624:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22636 comm="syz.7.3942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ba18e929 code=0x7ffc0000 [ 1562.034144][ T30] audit: type=1326 audit(1749259789.624:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22636 comm="syz.7.3942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f61ba18e929 code=0x7ffc0000 [ 1562.056300][ T30] audit: type=1326 audit(1749259789.624:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22636 comm="syz.7.3942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ba18e929 code=0x7ffc0000 [ 1562.078475][ T30] audit: type=1326 audit(1749259789.624:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22636 comm="syz.7.3942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ba18e929 code=0x7ffc0000 [ 1565.107622][ T30] audit: type=1326 audit(1749259792.784:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22636 comm="syz.7.3942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f61ba18e929 code=0x7ffc0000 [ 1565.320317][ T30] audit: type=1326 audit(1749259792.784:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22636 comm="syz.7.3942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ba18e929 code=0x7ffc0000 [ 1565.356097][ T30] audit: type=1326 audit(1749259792.784:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22636 comm="syz.7.3942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f61ba18e929 code=0x7ffc0000 [ 1565.387262][ T30] audit: type=1326 audit(1749259792.784:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22636 comm="syz.7.3942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ba18e929 code=0x7ffc0000 [ 1571.509836][T16513] Bluetooth: hci1: ACL packet for unknown connection handle 227 [ 1571.510903][T22677] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3951'. [ 1573.642824][T22694] netlink: 'syz.7.3953': attribute type 12 has an invalid length. [ 1573.657125][T16513] Bluetooth: hci1: unexpected event for opcode 0x2016 [ 1574.327456][ T5910] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1574.542758][ T5910] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1574.684316][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1574.889464][ T5910] usb 5-1: config 0 descriptor?? [ 1577.218874][T22707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3958'. [ 1577.595502][ T5910] pegasus 5-1:0.0: can't reset MAC [ 1577.605815][ T5910] pegasus 5-1:0.0: probe with driver pegasus failed with error -5 [ 1577.660684][ T5910] usb 5-1: USB disconnect, device number 114 [ 1577.887207][T22691] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1578.066567][ T5936] usb 7-1: new low-speed USB device number 37 using dummy_hcd [ 1578.074635][T22691] usb 1-1: Using ep0 maxpacket: 32 [ 1578.085178][T22691] usb 1-1: config 1 has an invalid interface number: 242 but max is 0 [ 1578.130543][T22691] usb 1-1: config 1 has no interface number 0 [ 1578.144387][T22691] usb 1-1: config 1 interface 242 has no altsetting 0 [ 1578.196291][T22691] usb 1-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df [ 1578.236635][T22691] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1578.249537][ T5936] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1578.273232][T22691] usb 1-1: Product: syz [ 1578.281809][ T5936] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1578.303477][T22691] usb 1-1: Manufacturer: syz [ 1578.315303][T22691] usb 1-1: SerialNumber: syz [ 1578.321970][ T5936] usb 7-1: config 0 descriptor?? [ 1580.014448][ T5936] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1580.047913][ T5936] asix 7-1:0.0: probe with driver asix failed with error -32 [ 1580.326517][T22732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1580.356745][T22732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1580.863307][T22691] aqc111 1-1:1.242 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1580.882711][T22691] aqc111 1-1:1.242 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1580.901070][T22691] aqc111 1-1:1.242 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1580.973147][T22691] aqc111 1-1:1.242 eth13: register 'aqc111' at usb-dummy_hcd.0-1, Aquantia AQtion USB to 5GbE Controller, 72:6e:66:ce:58:65 [ 1581.037673][ T5911] usb 7-1: USB disconnect, device number 37 [ 1581.085736][T22691] usb 1-1: USB disconnect, device number 109 [ 1581.119430][T22691] aqc111 1-1:1.242 eth13: unregister 'aqc111' usb-dummy_hcd.0-1, Aquantia AQtion USB to 5GbE Controller [ 1581.482679][T22691] aqc111 1-1:1.242 eth13 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1581.720997][T22691] aqc111 1-1:1.242 eth13 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1581.946544][T22691] aqc111 1-1:1.242 eth13 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1582.629904][T22691] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1582.887342][T22691] usb 1-1: Using ep0 maxpacket: 8 [ 1582.993119][T22691] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1583.089169][T22691] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1583.119627][T22691] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1583.133085][T22691] usb 1-1: Product: syz [ 1583.165143][T22691] usb 1-1: Manufacturer: syz [ 1583.187518][T22691] usb 1-1: SerialNumber: syz [ 1583.745892][T22691] usb 1-1: Handspring Visor / Palm OS: No valid connect info available [ 1584.499125][T22691] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1584.507722][T22691] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1584.515686][T22691] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1584.524525][T22691] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 1584.585949][T22691] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1584.611160][T22691] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1584.762682][ T5910] usb 1-1: USB disconnect, device number 110 [ 1584.786375][ T5910] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1584.867878][ T5910] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1584.902326][T22816] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1584.921003][ T5910] visor 1-1:1.0: device disconnected [ 1585.124437][T22822] dummy0: entered allmulticast mode [ 1585.134351][T22822] dummy0: left allmulticast mode [ 1586.858390][T22842] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3986'. [ 1589.418674][T22867] netlink: 'syz.4.3992': attribute type 66 has an invalid length. [ 1589.535516][T22873] loop6: detected capacity change from 0 to 63 [ 1589.548165][T22866] sp0: Synchronizing with TNC [ 1589.556659][T22873] Buffer I/O error on dev loop6, logical block 0, async page read [ 1589.564956][T22873] Buffer I/O error on dev loop6, logical block 1, async page read [ 1589.573192][T22873] Buffer I/O error on dev loop6, logical block 2, async page read [ 1589.582284][T22873] Buffer I/O error on dev loop6, logical block 3, async page read [ 1589.592342][T22873] Buffer I/O error on dev loop6, logical block 0, async page read [ 1589.600630][T22873] Buffer I/O error on dev loop6, logical block 1, async page read [ 1589.609018][T22873] Buffer I/O error on dev loop6, logical block 2, async page read [ 1589.617275][T22873] Buffer I/O error on dev loop6, logical block 3, async page read [ 1589.625395][T22873] Buffer I/O error on dev loop6, logical block 0, async page read [ 1589.633602][T22873] Buffer I/O error on dev loop6, logical block 1, async page read [ 1589.860785][T22870] /dev/nullb0: Can't open blockdev [ 1590.437129][ T5936] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1591.477116][ T5936] usb 5-1: Using ep0 maxpacket: 8 [ 1591.554080][ T5936] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1591.591087][ T5936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1591.655302][ T5936] usb 5-1: config 0 descriptor?? [ 1593.941667][T22875] kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 1594.230021][ T5936] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1594.312719][ T5936] asix 5-1:0.0: probe with driver asix failed with error -71 [ 1594.377675][ T5936] usb 5-1: USB disconnect, device number 115 [ 1594.574275][T22876] buffer_io_error: 1146 callbacks suppressed [ 1594.574296][T22876] Buffer I/O error on dev loop6, logical block 0, async page read [ 1595.040829][T22907] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4002'. [ 1595.059880][T22876] Buffer I/O error on dev loop6, logical block 0, async page read [ 1595.071048][T22907] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4002'. [ 1595.100157][T22876] Buffer I/O error on dev loop6, logical block 0, async page read [ 1595.147732][T22876] Buffer I/O error on dev loop6, logical block 0, async page read [ 1595.434661][T22907] bond1: entered promiscuous mode [ 1595.575929][T22907] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1595.647080][ T5936] usb 5-1: new full-speed USB device number 116 using dummy_hcd [ 1595.699015][T22929] sp0: Synchronizing with TNC [ 1595.834266][ T5936] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1595.882551][T22931] affs: No valid root block on device nullb0 [ 1595.919680][ T5936] usb 5-1: config 0 has no interface number 0 [ 1595.988660][ T5936] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1596.114305][ T5936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1596.296797][ T5936] usb 5-1: config 0 descriptor?? [ 1596.351422][ T5936] usb 5-1: selecting invalid altsetting 1 [ 1596.369424][ T5936] dvb_ttusb_budget: ttusb_init_controller: error [ 1596.386941][ T5936] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1596.435424][T22935] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4004'. [ 1596.663384][ T5936] DVB: Unable to find symbol cx22700_attach() [ 1596.837277][ T5936] DVB: Unable to find symbol tda10046_attach() [ 1596.851950][ T5936] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1596.892631][ T5936] usb 5-1: USB disconnect, device number 116 [ 1596.927208][ T24] usb 1-1: new low-speed USB device number 111 using dummy_hcd [ 1597.100610][ T24] usb 1-1: device descriptor read/64, error -71 [ 1597.457510][ T24] usb 1-1: new low-speed USB device number 112 using dummy_hcd [ 1597.700733][T16513] Bluetooth: hci1: unexpected event for opcode 0x2012 [ 1597.901795][ T24] usb 1-1: device descriptor read/64, error -71 [ 1598.027852][ T24] usb usb1-port1: attempt power cycle [ 1598.408816][ T24] usb 1-1: new low-speed USB device number 113 using dummy_hcd [ 1598.535263][ T24] usb 1-1: device descriptor read/8, error -71 [ 1598.909813][ T24] usb 1-1: new low-speed USB device number 114 using dummy_hcd [ 1599.158255][ T24] usb 1-1: device descriptor read/8, error -71 [ 1599.290302][ T24] usb usb1-port1: unable to enumerate USB device [ 1600.530151][T22977] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1606.671251][T23021] sp0: Synchronizing with TNC [ 1607.671842][T23032] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4030'. [ 1608.212929][T23047] sp0: Synchronizing with TNC [ 1608.351587][T23048] affs: No valid root block on device nullb0 [ 1608.377286][ T24] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1608.907200][ T24] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1608.957095][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1609.034386][ T24] usb 1-1: config 0 descriptor?? [ 1609.647788][ T5911] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1610.870025][T23097] input: syz0 as /devices/virtual/input/input53 [ 1611.704276][ T24] usb 1-1: Cannot set autoneg [ 1611.709357][ T24] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1611.728694][ T24] usb 1-1: USB disconnect, device number 115 [ 1611.912163][T23105] FAULT_INJECTION: forcing a failure. [ 1611.912163][T23105] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1611.977034][T23105] CPU: 1 UID: 0 PID: 23105 Comm: syz.7.4049 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 1611.977067][T23105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1611.977081][T23105] Call Trace: [ 1611.977090][T23105] [ 1611.977101][T23105] dump_stack_lvl+0x189/0x250 [ 1611.977137][T23105] ? __pfx____ratelimit+0x10/0x10 [ 1611.977165][T23105] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1611.977196][T23105] ? __pfx__printk+0x10/0x10 [ 1611.977232][T23105] should_fail_ex+0x414/0x560 [ 1611.977264][T23105] _copy_to_user+0x31/0xb0 [ 1611.977288][T23105] simple_read_from_buffer+0xe1/0x170 [ 1611.977322][T23105] proc_fail_nth_read+0x1df/0x250 [ 1611.977356][T23105] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1611.977391][T23105] ? rw_verify_area+0x258/0x650 [ 1611.977414][T23105] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1611.977446][T23105] vfs_read+0x1fd/0x980 [ 1611.977476][T23105] ? __pfx___mutex_lock+0x10/0x10 [ 1611.977506][T23105] ? __pfx_vfs_read+0x10/0x10 [ 1611.977539][T23105] ? __fget_files+0x2a/0x420 [ 1611.977572][T23105] ? __fget_files+0x3a0/0x420 [ 1611.977598][T23105] ? __fget_files+0x2a/0x420 [ 1611.977637][T23105] ksys_read+0x145/0x250 [ 1611.977665][T23105] ? __pfx_ksys_read+0x10/0x10 [ 1611.977687][T23105] ? rcu_is_watching+0x15/0xb0 [ 1611.977731][T23105] ? do_syscall_64+0xbe/0x3b0 [ 1611.977764][T23105] do_syscall_64+0xfa/0x3b0 [ 1611.977789][T23105] ? lockdep_hardirqs_on+0x9c/0x150 [ 1611.977815][T23105] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1611.977836][T23105] ? clear_bhb_loop+0x60/0xb0 [ 1611.977861][T23105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1611.977883][T23105] RIP: 0033:0x7f61ba18d33c [ 1611.977902][T23105] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1611.977920][T23105] RSP: 002b:00007f61bb018030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1611.977942][T23105] RAX: ffffffffffffffda RBX: 00007f61ba3b5fa0 RCX: 00007f61ba18d33c [ 1611.977958][T23105] RDX: 000000000000000f RSI: 00007f61bb0180a0 RDI: 0000000000000004 [ 1611.977971][T23105] RBP: 00007f61bb018090 R08: 0000000000000000 R09: 0000000000000000 [ 1611.977984][T23105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1611.977997][T23105] R13: 0000000000000000 R14: 00007f61ba3b5fa0 R15: 00007ffda354a2d8 [ 1611.978031][T23105] [ 1613.867664][ T24] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1614.056043][ T24] usb 5-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 1614.077323][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1614.100686][ T24] usb 5-1: config 0 descriptor?? [ 1614.141259][ T24] usb 5-1: Invalid firmware size=18. [ 1616.060182][ T5911] usb 5-1: USB disconnect, device number 117 [ 1617.373250][T22691] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1617.834849][T22691] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1617.912074][T22691] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1617.934895][T22691] usb 1-1: config 0 descriptor?? [ 1619.390573][ T31] INFO: task kworker/1:5:16706 blocked for more than 143 seconds. [ 1619.416506][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 1619.416549][ T30] audit: type=1326 audit(1749259848.084:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23201 comm="syz.7.4070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ba18e929 code=0x7ffc0000 [ 1619.704942][ T31] Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 [ 1619.855405][T23198] delete_channel: no stack [ 1619.899370][T23211] overlayfs: failed to resolve '/ÿÿ': -2 [ 1619.946399][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1619.958454][T23210] cgroup2: Unknown parameter 'trans' [ 1620.009664][ T31] task:kworker/1:5 state:D stack:22232 pid:16706 tgid:16706 ppid:2 task_flags:0x4288060 flags:0x00004000 [ 1620.065684][ T30] audit: type=1326 audit(1749259848.084:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23201 comm="syz.7.4070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ba18e929 code=0x7ffc0000 [ 1620.087709][ T31] Workqueue: usb_hub_wq hub_event [ 1620.087761][ T31] Call Trace: [ 1620.096376][ T31] [ 1620.099526][ T31] __schedule+0x16a2/0x4cb0 [ 1620.104151][ T31] ? schedule+0x165/0x360 [ 1620.108708][ T31] ? __pfx___schedule+0x10/0x10 [ 1620.114991][ T31] ? schedule+0x91/0x360 [ 1620.119538][ T31] schedule+0x165/0x360 [ 1620.123909][ T31] schedule_timeout+0x9a/0x270 [ 1620.129004][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1620.134618][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1620.140225][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1620.145599][ T31] ? wait_for_completion+0x267/0x5d0 [ 1620.156903][ T31] wait_for_completion+0x2bf/0x5d0 [ 1620.185827][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 1620.192352][ T30] audit: type=1326 audit(1749259848.184:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23201 comm="syz.7.4070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f61ba18e929 code=0x7ffc0000 [ 1620.199194][ T31] i2c_del_adapter+0x581/0x6e0 [ 1620.257167][ T31] ? kasan_quarantine_put+0xdd/0x220 [ 1620.275231][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 1620.285411][ T30] audit: type=1326 audit(1749259848.184:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23201 comm="syz.7.4070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ba18e929 code=0x7ffc0000 [ 1620.293406][ T31] ? kfree+0x18e/0x440 [ 1620.342262][ T31] ttusb_disconnect+0x204/0x340 [ 1620.358550][ T31] usb_unbind_interface+0x26e/0x8f0 [ 1620.369615][ T30] audit: type=1326 audit(1749259848.184:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23201 comm="syz.7.4070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ba18e929 code=0x7ffc0000 [ 1620.372483][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1620.421505][ T30] audit: type=1326 audit(1749259848.194:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23201 comm="syz.7.4070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f61ba18e929 code=0x7ffc0000 [ 1620.440901][ T31] device_release_driver_internal+0x4d6/0x7c0 [ 1620.457212][ T31] bus_remove_device+0x34d/0x410 [ 1620.462942][ T31] device_del+0x511/0x8e0 [ 1620.468059][ T31] ? __pm_runtime_barrier+0x212/0x460 [ 1620.475238][ T31] ? __pfx_device_del+0x10/0x10 [ 1620.480801][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1620.493100][ T31] usb_disable_device+0x3e9/0x8a0 [ 1620.497079][ T30] audit: type=1326 audit(1749259848.194:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23201 comm="syz.7.4070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ba18e929 code=0x7ffc0000 [ 1620.506125][ T31] usb_disconnect+0x330/0x910 [ 1620.543486][ T31] hub_event+0x1cdb/0x4a00 [ 1620.555584][ T31] ? do_raw_spin_lock+0x121/0x290 [ 1620.562423][ T30] audit: type=1326 audit(1749259848.194:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23201 comm="syz.7.4070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ba18e929 code=0x7ffc0000 [ 1620.569340][ T31] ? register_lock_class+0x51/0x320 [ 1620.617899][ T30] audit: type=1326 audit(1749259848.194:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23201 comm="syz.7.4070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f61ba18e929 code=0x7ffc0000 [ 1620.618488][ T31] ? __pfx_hub_event+0x10/0x10 [ 1620.667283][ T30] audit: type=1326 audit(1749259848.194:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23201 comm="syz.7.4070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ba18e929 code=0x7ffc0000 [ 1620.689394][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1620.689449][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1620.689503][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1620.689535][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1620.689569][ T31] process_scheduled_works+0xade/0x17b0 [ 1620.689662][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1620.689716][ T31] worker_thread+0x8a0/0xda0 [ 1620.689754][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1620.689816][ T31] ? __kthread_parkme+0x7b/0x200 [ 1620.689863][ T31] kthread+0x70e/0x8a0 [ 1620.689892][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1620.689948][ T31] ? __pfx_kthread+0x10/0x10 [ 1620.689977][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1620.690003][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1620.690030][ T31] ? __pfx_kthread+0x10/0x10 [ 1620.690055][ T31] ret_from_fork+0x3f9/0x770 [ 1620.804427][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1620.810009][ T31] ? __switch_to_asm+0x39/0x70 [ 1620.817086][ T31] ? __switch_to_asm+0x33/0x70 [ 1620.827066][ T31] ? __pfx_kthread+0x10/0x10 [ 1620.831795][ T31] ret_from_fork_asm+0x1a/0x30 [ 1620.857047][ T31] [ 1620.860440][ T31] [ 1620.860440][ T31] Showing all locks held in the system: [ 1620.919706][T23203] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4069'. [ 1621.006335][ T31] 1 lock held by khungtaskd/31: [ 1621.011485][ T31] #0: ffffffff8e13f060 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1621.054673][ T31] 4 locks held by udevd/5193: [ 1621.067411][ T31] 2 locks held by getty/5585: [ 1621.072291][ T31] #0: ffff88803118c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1621.101230][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1621.124301][ T31] 5 locks held by kworker/1:5/16706: [ 1621.142409][ T31] #0: ffff8880216a7d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1621.165143][ T31] #1: ffffc90004d2fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1621.194948][ T31] #2: ffff888144b76198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 1621.217222][ T31] #3: ffff88807b2b9198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x910 [ 1621.226580][ T31] #4: ffff8880622db160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0 [ 1621.244327][ T31] 6 locks held by kworker/1:2/22691: [ 1621.249798][ T31] #0: ffff8880216a7d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1621.269487][ T31] #1: ffffc900042cfbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1621.286174][ T31] #2: ffff888142ffd198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 1621.303620][ T31] #3: ffff888079b3d198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 1621.313479][ T31] #4: ffff88806305c160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 1621.334292][ T31] #5: ffff88807b7b4e60 (&dev->phy_mutex){+.+.}-{4:4}, at: mcs7830_write_phy+0x9c/0x290 [ 1621.353639][ T31] 2 locks held by dhcpcd-run-hook/23224: [ 1621.360464][ T31] [ 1621.362873][ T31] ============================================= [ 1621.362873][ T31] [ 1621.378564][T22691] usb 1-1: Cannot set autoneg [ 1621.383562][T22691] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1621.409215][ T31] NMI backtrace for cpu 1 [ 1621.409238][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 1621.409263][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1621.409275][ T31] Call Trace: [ 1621.409285][ T31] [ 1621.409294][ T31] dump_stack_lvl+0x189/0x250 [ 1621.409329][ T31] ? __wake_up_klogd+0xd9/0x110 [ 1621.409363][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1621.409394][ T31] ? __pfx__printk+0x10/0x10 [ 1621.409428][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1621.409456][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1621.409476][ T31] ? _printk+0xcf/0x120 [ 1621.409502][ T31] ? __pfx__printk+0x10/0x10 [ 1621.409525][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1621.409555][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1621.409580][ T31] watchdog+0xfee/0x1030 [ 1621.409608][ T31] ? watchdog+0x1de/0x1030 [ 1621.409644][ T31] kthread+0x70e/0x8a0 [ 1621.409671][ T31] ? __pfx_watchdog+0x10/0x10 [ 1621.409696][ T31] ? __pfx_kthread+0x10/0x10 [ 1621.409726][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1621.409750][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1621.409773][ T31] ? __pfx_kthread+0x10/0x10 [ 1621.409797][ T31] ret_from_fork+0x3f9/0x770 [ 1621.409829][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1621.409864][ T31] ? __switch_to_asm+0x39/0x70 [ 1621.409882][ T31] ? __switch_to_asm+0x33/0x70 [ 1621.409900][ T31] ? __pfx_kthread+0x10/0x10 [ 1621.409922][ T31] ret_from_fork_asm+0x1a/0x30 [ 1621.409960][ T31] [ 1621.409969][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1621.571057][ C0] NMI backtrace for cpu 0 [ 1621.571081][ C0] CPU: 0 UID: 0 PID: 23225 Comm: rm Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 1621.571114][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1621.571126][ C0] RIP: 0010:kmem_cache_alloc_noprof+0xef/0x3c0 [ 1621.571154][ C0] Code: 00 00 41 83 fc ff 74 1a 48 8b 03 48 83 f8 ff 0f 84 d3 02 00 00 48 c1 e8 3a 41 39 c4 0f 85 5d 01 00 00 41 8b 46 28 4a 8b 1c 28 <49> 8d 4f 08 49 8b 36 4c 89 e8 4c 89 fa 65 48 0f c7 0e 74 5c eb 95 [ 1621.571170][ C0] RSP: 0018:ffffc90004bcf258 EFLAGS: 00000246 [ 1621.571187][ C0] RAX: 0000000000000080 RBX: ffff88804ad4f600 RCX: ffffffff929b7e30 [ 1621.571201][ C0] RDX: 0000000000000000 RSI: 0000000000000100 RDI: ffffffff8e25fe20 [ 1621.571214][ C0] RBP: 0000000000000cc0 R08: 0000000000000000 R09: ffffffff82144b6d [ 1621.571226][ C0] R10: 0000000000000009 R11: 0000000000000000 R12: 00000000ffffffff [ 1621.571237][ C0] R13: ffff88804ad4f400 R14: ffff88801a491000 R15: 0000000000130208 [ 1621.571250][ C0] FS: 0000000000000000(0000) GS:ffff888125c89000(0000) knlGS:0000000000000000 [ 1621.571265][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1621.571277][ C0] CR2: 00007fdbbd7ca440 CR3: 0000000069a5a000 CR4: 00000000003526f0 [ 1621.571293][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1621.571304][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1621.571315][ C0] Call Trace: [ 1621.571322][ C0] [ 1621.571330][ C0] ? mas_alloc_nodes+0x2e9/0x8e0 [ 1621.571357][ C0] mas_alloc_nodes+0x2e9/0x8e0 [ 1621.571384][ C0] mas_preallocate+0x39e/0x6b0 [ 1621.571407][ C0] ? __pfx_mas_preallocate+0x10/0x10 [ 1621.571435][ C0] ? __mas_set_range+0x12f/0x3c0 [ 1621.571458][ C0] __split_vma+0x315/0x9b0 [ 1621.571483][ C0] ? __pfx___split_vma+0x10/0x10 [ 1621.571513][ C0] vms_gather_munmap_vmas+0x4ab/0x12b0 [ 1621.571543][ C0] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1621.571574][ C0] mmap_region+0x678/0x1f30 [ 1621.571604][ C0] ? __pfx_mmap_region+0x10/0x10 [ 1621.571623][ C0] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1621.571651][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1621.571679][ C0] ? rcu_is_watching+0x15/0xb0 [ 1621.571705][ C0] ? process_measurement+0x15c3/0x1a40 [ 1621.571758][ C0] ? mm_get_unmapped_area_vmflags+0xb3/0xe0 [ 1621.571783][ C0] ? thp_get_unmapped_area_vmflags+0x161/0x310 [ 1621.571810][ C0] ? cap_mmap_addr+0xb0/0x100 [ 1621.571834][ C0] ? bpf_lsm_mmap_addr+0x9/0x20 [ 1621.571857][ C0] ? security_mmap_addr+0x71/0x270 [ 1621.571882][ C0] ? shmem_mapping+0xd/0x50 [ 1621.571896][ C0] ? memfd_check_seals_mmap+0xc5/0x200 [ 1621.571915][ C0] do_mmap+0xc45/0x10d0 [ 1621.571941][ C0] ? __pfx_do_mmap+0x10/0x10 [ 1621.571959][ C0] ? down_write_killable+0x178/0x230 [ 1621.571986][ C0] ? __pfx_down_write_killable+0x10/0x10 [ 1621.572016][ C0] vm_mmap_pgoff+0x31b/0x4c0 [ 1621.572038][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1621.572057][ C0] ? __fget_files+0x2a/0x420 [ 1621.572084][ C0] ? __fget_files+0x3a0/0x420 [ 1621.572114][ C0] ? __fget_files+0x2a/0x420 [ 1621.572140][ C0] ksys_mmap_pgoff+0x51f/0x760 [ 1621.572165][ C0] do_syscall_64+0xfa/0x3b0 [ 1621.572188][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1621.572210][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1621.572228][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1621.572249][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1621.572266][ C0] RIP: 0033:0x7fdbbdaac242 [ 1621.572281][ C0] Code: 08 00 04 00 00 eb e2 90 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 33 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5e 5b 5d c3 0f 1f 00 c7 05 46 40 01 00 16 00 [ 1621.572296][ C0] RSP: 002b:00007fff1d05dd38 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1621.572314][ C0] RAX: ffffffffffffffda RBX: 00007fdbbd7c0000 RCX: 00007fdbbdaac242 [ 1621.572327][ C0] RDX: 0000000000000001 RSI: 0000000000002000 RDI: 00007fdbbd7c0000 [ 1621.572339][ C0] RBP: 0000000000000812 R08: 0000000000000003 R09: 000000000000b000 [ 1621.572351][ C0] R10: 0000000000000812 R11: 0000000000000206 R12: 00007fff1d05ddc0 [ 1621.572362][ C0] R13: 00007fdbbda81580 R14: 00007fff1d05e1b0 R15: 00000fffe3a0bbaa [ 1621.572386][ C0] [ 1621.580440][T22691] usb 1-1: USB disconnect, device number 116 [ 1621.777308][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1621.777344][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 1621.777377][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1621.777394][ T31] Call Trace: [ 1621.777406][ T31] [ 1621.777418][ T31] dump_stack_lvl+0x99/0x250 [ 1621.777461][ T31] ? __asan_memcpy+0x40/0x70 [ 1621.777490][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1621.777525][ T31] ? __pfx__printk+0x10/0x10 [ 1621.777562][ T31] panic+0x2db/0x790 [ 1621.777599][ T31] ? __pfx_panic+0x10/0x10 [ 1622.059918][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 1622.065764][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1622.071267][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1622.077463][ T31] watchdog+0x102d/0x1030 [ 1622.081822][ T31] ? watchdog+0x1de/0x1030 [ 1622.086269][ T31] kthread+0x70e/0x8a0 [ 1622.090364][ T31] ? __pfx_watchdog+0x10/0x10 [ 1622.095099][ T31] ? __pfx_kthread+0x10/0x10 [ 1622.099715][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1622.105022][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1622.110251][ T31] ? __pfx_kthread+0x10/0x10 [ 1622.114860][ T31] ret_from_fork+0x3f9/0x770 [ 1622.119490][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1622.124633][ T31] ? __switch_to_asm+0x39/0x70 [ 1622.129411][ T31] ? __switch_to_asm+0x33/0x70 [ 1622.134444][ T31] ? __pfx_kthread+0x10/0x10 [ 1622.139099][ T31] ret_from_fork_asm+0x1a/0x30 [ 1622.144104][ T31] [ 1622.147384][ T31] Kernel Offset: disabled [ 1622.151782][ T31] Rebooting in 86400 seconds..