last executing test programs: 10m36.901060557s ago: executing program 4 (id=1261): openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x4) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x10, 0x140c, 0x335, 0x70bd28, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x4004081}, 0xc810) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x3, @broadcast, 'macvlan1\x00'}}, 0x1e) sendmmsg(r4, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_RM_DEV(r7, 0x5000940b, &(0x7f0000000a80)={{r5}, "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"}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 10m35.922581689s ago: executing program 3 (id=1267): syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x86dd, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), 0xffffffffffffffff) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r2) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x308, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x100}}, [""]}, 0x24}}, 0x4000840) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006a00010625bd7000fbdbdf09000000000000000008000a0001"], 0x20}, 0x1, 0x0, 0x0, 0x44050}, 0xc044) 10m35.508601601s ago: executing program 3 (id=1268): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1810141000007000100fffa0000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x0) 10m35.340210617s ago: executing program 4 (id=1271): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000a00)={0x2974, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x0, 0x1, 0x50}, @val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x2934, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0xfffffe85}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xc, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @rand_addr=0x64010101}]}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x1048, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_INTERVAL={0x2, 0x9, 0x5}, @NL80211_WOWLAN_TCP_WAKE_MASK={0x1004, 0xb, "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"}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0xfffffff7, 0x8001, 0x10000}}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0x25, 0x6, "b035972347977759e31032340cb2a771c1811a23529966e43248258e579c2069bb"}]}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x24, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}]}]}, 0xfffffffffffffe9c}, 0x1, 0x0, 0x0, 0x4008800}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x38, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r2}, 0x18) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001300000008000a0005"], 0x24}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r4, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x20}}, 0x4000054) r5 = socket$unix(0x1, 0x5, 0x0) accept4$unix(r5, &(0x7f0000000400)=@abs, &(0x7f00000004c0)=0x6e, 0x80800) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x74, &(0x7f0000000080)={r7, 0xa00, 0x10, 0xaf7}, &(0x7f00000010c0)=0x18) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r4, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x40) 10m35.091798534s ago: executing program 3 (id=1272): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x107e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) stat(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffdfb) socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x3f7ff, 0x4) r1 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x40045702, &(0x7f0000000000)) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000040)={0x1, 0x46ec, 0xf, 0x1, 0x1}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 10m34.694051615s ago: executing program 4 (id=1273): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000, 0x0, 0x400000000000000}) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0x200000, 0x0) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f0000000100)=0x3ff) sched_setattr(0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[], 0x74}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) accept(r4, 0x0, 0x0) r6 = socket(0x2b, 0x1, 0x1) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000002c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000180)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3a}}, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000140)={@mcast1, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0x20) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x0) 10m34.010409271s ago: executing program 3 (id=1276): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58840}, 0x0) mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) r3 = openat$vicodec0(0xffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0185648, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x2000006d, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r4, 0x400454c9, 0x1) r5 = socket$unix(0x1, 0x2, 0x0) connect$unix(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x900, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xdc}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) 10m33.848715163s ago: executing program 3 (id=1278): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x5c, r1, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xe4}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00'}]}, 0x5c}, 0x1, 0x0, 0x3f00, 0x44}, 0x0) 10m33.717051792s ago: executing program 3 (id=1279): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r7, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x30, 0x1, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) socket(0x80000000000000a, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="0100feff00000000000001000000100007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c00050037193c99a8772efb0c0002"], 0x3c}}, 0x20000000) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000) 10m32.387366756s ago: executing program 4 (id=1282): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47b07c7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x134, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000], [0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000]}, 0x45c) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x0) r1 = dup(r0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xf, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0xa, 0x6, 0x5, 0x6, 0x6, 0x7, 0x7, 0xff, 0x2, 0xfffff5ee, 0x401, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x3, 0xfffffff9, 0xa, 0x2, 0x5, 0x0, 0x4, 0x6, 0x7, 0x4c, 0xfffffffd, 0x80, 0x8, 0x7, 0x9, 0x7, 0x8000101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0x0, 0x9, 0x4, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff251f, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdaa, 0x5, 0x2, 0x76c4, 0xfffffffd, 0x5, 0x10, 0x10000, 0xd, 0x2, 0x9, 0x10, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x8000008, 0x3, 0x2, 0x3a6, 0x27f8, 0xc0d, 0xfffffffd, 0x4, 0xc, 0xfffffffb], [0xa3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0xc0000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adeb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x10000, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x4, 0x7fff, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0x4, 0x4, 0x4, 0x0, 0x7, 0x9, 0x8, 0x6, 0x5ef, 0x8000, 0xc, 0x2, 0x401, 0x1, 0x5, 0x8, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x3eac, 0x5396, 0x6161, 0x9, 0x101, 0x1ff, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) 10m32.314742084s ago: executing program 4 (id=1283): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x7e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$media(&(0x7f0000000000), 0x3, 0x8140) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) shutdown(0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)=0x4) ioctl$TIOCSTI(r2, 0x5412, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0x0, 0x0, 0x0}) r5 = dup3(r4, r0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x6c, 0x0, &(0x7f00000006c0)=[@acquire_done={0x40106309, 0x3}, @release={0x40046306, 0x3}, @request_death={0x400c630e, 0x3}, @increfs={0x40046304, 0x3}, @free_buffer, @increfs={0x40046304, 0x3}, @register_looper, @enter_looper, @free_buffer, @clear_death={0x400c630f, 0x2}], 0x0, 0x0, 0x0}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x8408, &(0x7f0000000680)=[{&(0x7f0000000180)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14143705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b78000000000000f8", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, 0x0) 10m31.745981642s ago: executing program 4 (id=1284): openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x4) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x10, 0x140c, 0x335, 0x70bd28, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x4004081}, 0xc810) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x3, @broadcast, 'macvlan1\x00'}}, 0x1e) sendmmsg(r4, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_RM_DEV(r7, 0x5000940b, &(0x7f0000000a80)={{r5}, "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"}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 9m49.815181639s ago: executing program 32 (id=1290): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) chdir(0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x2c0002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) syz_genetlink_get_family_id$ethtool(&(0x7f00000190c0), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x7) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x28, 0x5, 0x2) r4 = socket(0x28, 0x5, 0x0) memfd_create(&(0x7f0000000240)='\xa9\x00', 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x8) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r3, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0xffffffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0xff33) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x11) r6 = fcntl$dupfd(r5, 0x0, r1) ioctl$TCFLSH(r6, 0x400455c8, 0x1) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000140)=""/248, 0x1ffd4, 0x0, 0x0, 0x0) 9m49.702507598s ago: executing program 33 (id=1288): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) chdir(0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) syz_genetlink_get_family_id$ethtool(&(0x7f00000190c0), 0xffffffffffffffff) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019100)=""/102382, 0xffffff7b) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x7) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x28, 0x5, 0x0) r4 = socket(0x28, 0x5, 0x0) memfd_create(&(0x7f0000000240)='\xa9\x00', 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x4) connect$vsock_stream(r4, &(0x7f00000002c0)={0x28, 0x0, 0xffffffff, @host}, 0x10) sendmmsg(r3, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0xffffffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0xff33) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xb}, 0x50) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000300)=0xf) r6 = fcntl$dupfd(r5, 0x0, r1) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb"], 0x0) ioctl$TCFLSH(r6, 0x400455c8, 0x1) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000140)=""/232, 0xe8, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmsg$unix(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x21) 9m49.637094992s ago: executing program 34 (id=1266): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f3082881001b030109024800010000000009046900000e0100002b4101"], 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010023484af53b607cc707000000080001"], 0x2c}}, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r5, &(0x7f0000001fc0)={0x42, 0x3, 0x0, {0x0, 0x21, 0x0, '/proc/sys/net/ipv4/vs/secure_tcp\x00'}}, 0x42) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYRES32=r3, @ANYRES8=r0, @ANYBLOB="010027bd70f3fcdb1701bf4ce9fb7afdfeb44f5881c44e250300000008000100", @ANYRES32=r6, @ANYRESOCT=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x7f4a6159e350f1b) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r7 = open(&(0x7f0000000240)='./file0\x00', 0x606701, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000280)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f00000004c0)={0x7ff, 0x7c4eca9c}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000023000/0x3000)=nil, 0x3000, 0x3000, 0x6, &(0x7f000022c000/0x3000)=nil) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x101000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1c, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18400000060000000000000000000000c211f8fffeffffff18310000020000000000000100000000"], &(0x7f0000000300)='syzkaller\x00', 0x8, 0xd, &(0x7f0000000340)=""/13, 0x41000, 0x10, '\x00', 0x0, @fallback=0x11, r7, 0x8, &(0x7f0000000500)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r8, 0x0, &(0x7f0000000580)=[r9, r7, 0x1, r7, r7, r7], 0x0, 0x10, 0x9}, 0x94) memfd_create(0x0, 0x3) 9m49.530394939s ago: executing program 35 (id=1279): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r7, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x30, 0x1, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) socket(0x80000000000000a, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="0100feff00000000000001000000100007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c00050037193c99a8772efb0c0002"], 0x3c}}, 0x20000000) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000) 9m49.48064817s ago: executing program 36 (id=1284): openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x4) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x10, 0x140c, 0x335, 0x70bd28, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x4004081}, 0xc810) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x3, @broadcast, 'macvlan1\x00'}}, 0x1e) sendmmsg(r4, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_RM_DEV(r7, 0x5000940b, &(0x7f0000000a80)={{r5}, "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"}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 6m30.048107859s ago: executing program 6 (id=2231): socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'adq12b\x00', [0x4f27, 0x2, 0x10000, 0x4, 0x4, 0x0, 0x3, 0x7, 0xa, 0x4, 0x5, 0x4, 0xff6b, 0x801, 0xfffffffe, 0xb4c, 0x0, 0x2, 0x3, 0x40000003, 0x89, 0xcaa7, 0x201ff, 0x20001e58, 0xb, 0xe6b, 0x3c, 0x8, 0x65c, 0x0, 0xfffffff8]}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000080002800"], 0x50}}, 0x4008840) syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r2) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="13ef02008c131f03c4e3e0a75af4511c07d7fd9c64be0a92b947f1df1e8ea8c7f9ba3eb32f8967b7815704f2905f465c3ce7281cb3667cf8ff6eb9b1900f6f71b11b7c8d5af959680de6500c02ba0cb5c2bc88683d"], 0xa) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4ea3, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f00000001c0)=ANY=[], 0xc) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)=0x0) ptrace$ARCH_GET_CPUID(0x1e, r6, 0x0, 0x1011) sendto$inet6(r5, 0x0, 0x0, 0x8800, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x521281, 0x0) epoll_create(0x1ff) 6m29.673530728s ago: executing program 6 (id=2234): openat$autofs(0xffffffffffffff9c, 0x0, 0x2c0002, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) syz_genetlink_get_family_id$ethtool(&(0x7f00000190c0), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x28, 0x5, 0x2) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0xffffffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0xff33) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x11) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$TCFLSH(r3, 0x400455c8, 0x1) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000140)=""/248, 0x1ffd4, 0x0, 0x0, 0x0) 6m28.365060107s ago: executing program 6 (id=2235): sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xfffe}, 0x0) 6m27.294184359s ago: executing program 6 (id=2238): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) unshare(0x22020600) syz_open_dev$video4linux(0x0, 0x4, 0x1e3002) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000100), 0xed24, 0x301080) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r1, @ANYBLOB="101000000000000008000d0005000000e4031680e00301800c00070000000000adffffff0c00", @ANYRES16=r1, @ANYBLOB="4b7656da"], 0x40c}}, 0x0) 6m27.139622224s ago: executing program 6 (id=2241): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c01000013000100"/20, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="050027000000000008008500", @ANYRES32=0x0, @ANYBLOB="140003006d6163766c616e31"], 0x15c}}, 0x0) 6m26.948672345s ago: executing program 6 (id=2242): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f00000c4000/0x3000)=nil, 0x3000, 0x100000a, 0x110, r0, 0x4b453000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000000)={0x28, 0x4, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7fffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000100)) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x200000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0xffffffffffffffff, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000004b680)=""/102362, 0xfffffc80) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x2a100, 0x0) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xfffffffffffffffe, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x2, &(0x7f0000000040)=0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x64, &(0x7f0000000040), 0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2001, 0x0) socket$inet6(0xa, 0x80002, 0x0) 6m12.489198346s ago: executing program 37 (id=2242): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f00000c4000/0x3000)=nil, 0x3000, 0x100000a, 0x110, r0, 0x4b453000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000000)={0x28, 0x4, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7fffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000100)) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x200000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0xffffffffffffffff, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000004b680)=""/102362, 0xfffffc80) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x2a100, 0x0) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xfffffffffffffffe, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x2, &(0x7f0000000040)=0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x64, &(0x7f0000000040), 0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2001, 0x0) socket$inet6(0xa, 0x80002, 0x0) 2m32.078878689s ago: executing program 9 (id=3173): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = io_uring_setup(0x59a3, &(0x7f0000000640)={0x0, 0xfffffff1, 0x40, 0x103fc, 0x14e}) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0xf0ffffffffffff) close_range(r1, 0xffffffffffffffff, 0x0) 2m31.966065501s ago: executing program 9 (id=3175): ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100}}, './bus\x00'}) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000240)=0x9, 0x4) fcntl$notify(0xffffffffffffffff, 0x402, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x48}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000000903000000000000000200070000000900010073797a30000000002400020014"], 0x44}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf2501"], 0x114}], 0x1}, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x12000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f00000002c0)=r3}, 0x20) close_range(r2, 0xffffffffffffffff, 0x0) 2m31.639005614s ago: executing program 9 (id=3177): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 2m31.289350781s ago: executing program 9 (id=3179): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x100000, 0x2}}, "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", "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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m29.170813489s ago: executing program 9 (id=3188): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000240)=@setlink={0x40, 0x13, 0x5, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, 0x408}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8}, @IFLA_PORT_SELF={0x4}]}, 0x40}}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe020002000000000800040001000000", 0x24) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000100)) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c8", 0xb) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r5, &(0x7f0000000340)=""/70, 0x46) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x140) 2m27.850303897s ago: executing program 9 (id=3193): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) pread64(r1, 0x0, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, 0x0, 0x0) syz_clone(0xe8cb353ca59e7b64, 0x0, 0xf0, 0x0, 0x0, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) bind$rds(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0xd4, 0x30, 0x1, 0x70bd29, 0x0, {}, [{0xc0, 0x1, [@m_ct={0x74, 0x2, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @local}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @mcast1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x4, 0x1, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24000815}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000180), &(0x7f00000001c0)=0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) 2m12.863232925s ago: executing program 38 (id=3193): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) pread64(r1, 0x0, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, 0x0, 0x0) syz_clone(0xe8cb353ca59e7b64, 0x0, 0xf0, 0x0, 0x0, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) bind$rds(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0xd4, 0x30, 0x1, 0x70bd29, 0x0, {}, [{0xc0, 0x1, [@m_ct={0x74, 0x2, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @local}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @mcast1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x4, 0x1, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24000815}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000180), &(0x7f00000001c0)=0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) 1m1.576895702s ago: executing program 1 (id=3533): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000009c0)=ANY=[@ANYBLOB="58010000100013070000000000000000fc020000002000000000000000000001fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000004d533000000e000000100000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000200000000000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000003509fe8fd57fd44aa5074c50bc700e530c001c00", @ANYBLOB="68b0f69e8f"], 0x158}}, 0x0) 1m0.246219107s ago: executing program 1 (id=3540): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0xf, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf21, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4000}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000}, 0x94) 59.90113728s ago: executing program 1 (id=3541): r0 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usbip_server_init(0x1) bind$inet(r0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}]}, 0x40}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfdf8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0xc7) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4000000010001fff000000fffe00000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r6, @ANYBLOB="a1c50602dd3d7c6622503d2b887e60756f81a58d3acba4be25bfcb4ef0bbb90bf6063a00a4"], 0x40}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 58.029805991s ago: executing program 1 (id=3552): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @broadcast, 'macvlan1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084) 57.078861179s ago: executing program 1 (id=3554): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x41) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r2, @ANYBLOB="1f120401566290a8adaedc3d0833481dd33531e3695ace5e37ad9dcfad5fa2784ea3633d68075ac258e8f6201d6019c9231b95b2"], 0x1c}}, 0x0) read$nci(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYRESOCT=r2], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYRESOCT=r0], 0x7c}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000100)={0x2}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)=0x10) socket$xdp(0x2c, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000800)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mm_khugepaged_scan_pmd\x00', r8, 0x0, 0x800}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mm_khugepaged_scan_pmd\x00', r7, 0x0, 0x800}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x103802, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 55.37133966s ago: executing program 1 (id=3558): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x5f]}}, 0x0, 0x2a, 0x0, 0x1, 0xf9ffffff}, 0x28) 40.953068397s ago: executing program 39 (id=3558): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x5f]}}, 0x0, 0x2a, 0x0, 0x1, 0xf9ffffff}, 0x28) 13.313022925s ago: executing program 5 (id=3705): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x1) migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x9, &(0x7f0000000380)=0x102) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x9, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r2, 0x0, 0x7f}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 12.917600676s ago: executing program 5 (id=3706): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0x2) write$dsp(r0, &(0x7f00000004c0)="9cac5bdbb9615b897317d514ac607bdb006a96e0e748696b19b729d38948829d217c0b8817196ce836395d0e8cc805b9436aa6f5dbab39b8a43de30608bd93b094", 0x41) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xc3, 0xaa, 0x37, 0x40, 0x10d6, 0x2200, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xab, 0x4, 0x0, 0xac, 0x4, 0x14}}]}}]}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r3 = semget$private(0x0, 0x1, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) semtimedop(r3, &(0x7f0000000000)=[{0x1, 0x81b, 0xc00}, {0x4, 0x2, 0x1800}, {0x1, 0xa3, 0x1000}, {0x4, 0x7, 0x1000}, {0x1, 0x2457}, {0x3, 0x5, 0x1000}, {0x1, 0x101, 0x1000}, {0x0, 0x2, 0x1000}, {0x4, 0xe800, 0x1000}], 0x9, &(0x7f0000000200)={r4, r5+60000000}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r6, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r7, 0x822, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfffb}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2e}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fff}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x80}, 0x1, 0x0, 0x0, 0x804}, 0x40) ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)=@null) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a118000200ff02000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) close(r0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) 10.111104841s ago: executing program 8 (id=3713): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) io_setup(0xc8d, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0xfff8, r0, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f020000ecff3e420f000000000001580f02000000023f420f00000000000029ffffff000000", 0x38}]) 10.028476194s ago: executing program 0 (id=3714): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4020054) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000000c0)=0x2, 0x4) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="85000000a0000000c3ff00000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x58, r5, 0x405, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40043d14, &(0x7f0000000080)={{0xffffffffffffffff, 0x4}, {0x6, 0x571}}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x20000004) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000000701030000000000000000000000000900010073797a300000000016dd219122e21b5d67cfa5122c9b83e46378c204ca56b26a094bcf8b718fc8e317bc79cce5352f07"], 0x20}}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r9, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x40, r10, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x71}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x7}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xf}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 9.8621658s ago: executing program 8 (id=3716): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000010000f0ffffff00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180084b6b1572365abe300000000000018940000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = gettid() tkill(r2, 0x12) tkill(r2, 0x1) tkill(0x0, 0x14) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8c17}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x2ff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) semget$private(0x0, 0x1, 0x1e) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_set$uid(0x3, 0xee00, 0x4007) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfc, 0x1000000}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) dup(0xffffffffffffffff) r6 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000400)=ANY=[@ANYRESOCT=r5], 0x0, 0x0}) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0xd, 0x482241) ioctl$I2C_RDWR(r7, 0x707, &(0x7f0000000200)={&(0x7f0000000040)=[{0x2, 0x8400, 0x9f, &(0x7f0000000300)="ad481155bd8c2c432de84f1ec2e5005b5bea0d06c15d9f627a29351ff3161cbb4fc6065b16abf1536ee3fa7b4549efa150652675c3b12ba1e905461933422fc4cc8bcf5ee73ff5f9293c0eaa817aed2649e276357d2f464517fbeccde627ce0ea4c6e7a7c5c139c37b2866de271ab0e7fe7405fb672c5bfec2a25e2c4a91732aa74712e6a3d1b7fd246ac316112cfa63fc0c8aa3b6e79c6d3b7f08c7bf96a7"}], 0x1}) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) 8.974082871s ago: executing program 7 (id=3717): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = getpid() prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) prctl$PR_GET_IO_FLUSHER(0x3a) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_GET_IO_FLUSHER(0x3a) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000040)={0x2, 0x0, {0x0}, {0xffffffffffffffff}, 0x0, 0x1}) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000000)={@default, @default, 0x2, 0x20}) socket$kcm(0x29, 0x5, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x5, 0x7f, 0x7d, 0x9, @tick=0x101, {0xfe, 0x8}, {0x4, 0x7f}, @raw8={"27038fc8ce9c3ef82c02501e"}}, {0x5, 0x61, 0xa, 0x1, @tick=0x3, {0x0, 0x39}, {0x3, 0x2}, @addr={0x8, 0x69}}, {0x9, 0x5, 0x5, 0x3, @tick=0xfffffffc, {0x9, 0x2}, {0x61, 0x86}, @addr={0x2, 0x7}}, {0x81, 0x0, 0x7, 0xca, @tick=0x800, {0x1, 0x4}, {0x7, 0x4}, @connect={{0x3, 0x1d}, {0x40, 0x7e}}}, {0x0, 0x4, 0x6, 0x96, @tick=0x8, {0xff, 0xf}, {0x9, 0x7}, @control={0x4, 0x2, 0x5}}], 0x8c) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000001480), 0x1, 0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r5, 0x0, 0x486, 0x0, 0x0) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x7, &(0x7f0000000080)=[{0x6b0, 0x8, 0x2a, 0xeca}, {0x69ce, 0x3, 0x6, 0x9}, {0x1, 0x92, 0x94, 0x2}, {0xc8, 0xad, 0xf8, 0xd}, {0x6, 0x5, 0x9, 0x8}, {0x240, 0x2, 0x1, 0x433}, {0x2, 0x56, 0x8, 0x4}]}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400020}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, r6, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x48}, 0x1, 0x0, 0x0, 0x24008010}, 0x20000093) lseek(r4, 0x8, 0x0) syz_usb_connect$sierra_net(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x0, 0x2, 0xaf9ec5a2a6dd78c5, 0x7, 0x2, 0x22}, {0x9, 0x5, 0x9, 0x2, 0x400, 0xfa, 0x6, 0xa7}, {0x9, 0x5, 0xb, 0x3, 0x7bf, 0x5, 0x3, 0x81}}}}}}]}}, 0x0) 8.668617701s ago: executing program 5 (id=3719): r0 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_setup(0x58c8, &(0x7f0000000500)={0x0, 0x3261, 0x2, 0x2, 0x2b4}, &(0x7f0000000440), &(0x7f0000000580)) mmap$IORING_OFF_SQ_RING(&(0x7f0000465000/0x1000)=nil, 0x1000, 0x3, 0xe2b83ed22bcd0993, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) r1 = openat$userio(0xffffffffffffff9c, 0x0, 0x329902, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc71f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6}}}}}]}}]}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(r2, &(0x7f0000000d40)=[{{&(0x7f0000000cc0)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000d00)=[{&(0x7f0000000f80)="a0", 0x1}], 0x1, 0x0, 0x10}}], 0x1, 0xe814) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) preadv(r1, 0x0, 0x0, 0x1, 0xfffffff0) bind$inet6(0xffffffffffffffff, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x2, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="e1bc70f7f4f379e829751d569f0374e9d85b27c2ec279264ca0e14d1df462996da6218d274b16707c490c53cf373ebd78d539ecea553f6d82cfe0568ba0d1e48dba72adafbe5ad51465e3e795f2271735222fd09fc35ac1702e52408dcf9d4f22faa042db5b00d0975f3f88a1892675dc9b26a01ad602893a8e4f604535e199245d10fb229026ea2df1b97badab6d33a8754de0c22808247306bf55e5664cdb52a79a7ad146040937411eacd40d2c551c1572267e6693bf85f228dedea71cd5fa965cc5c8158ee4963eca0b686d6732ecb4d247f7f2d543865ca76b3faf2836886dbe162b370ed030842ea5a52b4d07730", 0xf1, 0x40000, &(0x7f0000000040)={0xa, 0x4e24, 0x6a, @private1, 0x7}, 0x1c) r4 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f0000000000)='/dev/kvm\x00', 0x9) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) socket$alg(0x26, 0x5, 0x0) r5 = socket$kcm(0x25, 0x1, 0x0) recvmsg(r5, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x10160) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x10, 0x464, 0x800, 0x70bd2d, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x2004a840}, 0x8800) 8.38261074s ago: executing program 0 (id=3721): unshare(0x44000300) semget(0x1, 0x4, 0x39c) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x101, 0x8, 0x0, 0xb}, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9beb01031800000000000000000000008000000002"], 0x0, 0x1a}, 0x28) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x10000}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, 0x0, 0x0, 0x1c3, 0x4a, 0x1b, 0x62, 0x2e}) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002d00010026bd7000fcdbdf2504"], 0x2c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008010) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x80, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x4d, 0x0, @wg=@initiation={0x1, 0x1, "65a252e7cb7a5918c004a9971a46afced2c32642b1ec9fe34818d8ccd82041b7", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e833bd36300b088233545a"}}}}}}}, 0x0) recvmmsg(r5, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0x6e1}], 0x1, 0x20, 0x0) 7.470670184s ago: executing program 0 (id=3722): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket(0x200000000000011, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002dc0)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x200000000000000) 7.138034956s ago: executing program 2 (id=3723): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) cachestat(r1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003c000701000000fe00000000017c00000400fc800c00018006000600800a0000080002800400728008000500", @ANYRES32=r2], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) 6.778018917s ago: executing program 0 (id=3724): syz_io_uring_setup(0x4aec, &(0x7f0000000180)={0x0, 0x834b, 0x100, 0x3, 0xfffffffe}, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r1, 0x111, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000002380)=ANY=[@ANYRESHEX], 0x0, 0x37, 0x0, 0x0, 0x8400000}, 0x28) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x495, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) removexattr(0x0, 0x0) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) pidfd_send_signal(r4, 0x0, 0x0, 0x2) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r5, &(0x7f0000000300), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1f00002497c2a203540b75ece33b7f598eba", @ANYRES32=r5, @ANYBLOB='\b\x00'/18, @ANYRES16=r2, @ANYRES32, @ANYBLOB="0500000002000400"/28], 0x50) sendmsg$kcm(r0, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x43}, 0xa, 0x2}, 0x80, &(0x7f0000000100)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007ffffffff5000000b8"], 0xd0}, 0x480c4) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r7, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) socket$igmp(0x2, 0x3, 0x2) 6.603152388s ago: executing program 7 (id=3725): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58840}, 0x0) mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) r3 = openat$vicodec0(0xffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0185648, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x2000006d, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r4, 0x400454c9, 0x1) r5 = socket$unix(0x1, 0x2, 0x0) connect$unix(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0xfeff0000, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xdc}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) 6.436554644s ago: executing program 2 (id=3726): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}, 0x1, 0xffffff7f00000000}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 6.354266824s ago: executing program 0 (id=3727): syz_usb_connect(0x2, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c010203010902240001010000000904690202ff5aa30009050402100000fa000905820250"], 0x0) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f0000000380)={0x7, 0x0, 0x100}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000002c0)=0x5) r1 = syz_io_uring_setup(0xec5, &(0x7f00000008c0), &(0x7f0000000080)=0x0, &(0x7f0000000340)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x114, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x95d, 0x5c0b, 0xc1, 0x0, 0x0) io_uring_enter(r1, 0xedd, 0x8acb, 0x41, 0x0, 0x0) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r3, 0x0, 0x4080018) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4138ae84, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB]) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, 0x0, 0x8040) syz_emit_ethernet(0xbe, &(0x7f00000005c0)=ANY=[@ANYRES8=0x0], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) syz_open_procfs(r0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0xbf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) 5.879798421s ago: executing program 7 (id=3728): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) fcntl$setstatus(r1, 0x4, 0x40800) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000013c0)={{r5}, &(0x7f00000001c0), &(0x7f0000001380)=r4}, 0x20) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0xe) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r6, 0x2000009) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast1, @broadcast}, &(0x7f00000001c0)=0xc) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x20082, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x2c, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x00\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c000}, 0xc03f) socket$kcm(0x10, 0x2, 0x10) 5.614594466s ago: executing program 8 (id=3729): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000800) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003500)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x2711, @host}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x0, 0x700}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x8000000}, {0x1, 0x0, 0x0, 0x0, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x7, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x9, 0x0, 0x0, 0x7ff, 0x2}, {}, {}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0xfffffff3}, {0x0, 0x0, 0x0, 0x0, 0x80000001}, {0x0, 0x0, 0x0, 0x8510}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {0x5}, {}, {}, {}, {0x0, 0x103, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x93a, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {}, {0x0, 0x1002, 0x0, 0x0, 0xa, 0xfffffffe}, {}, {}, {0x2, 0x0, 0x20000000}, {0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffe, 0x0, 0x3, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}], [{}, {}, {}, {}, {}, {0x3, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x4}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 4.959193871s ago: executing program 5 (id=3730): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r0, 0x4068aea3, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd0000, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x7}, {0x5000, 0x2, 0xe, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0xa, 0x7, 0x4, 0x1, 0xc, 0x0, 0x6, 0x5}, {0x7f778000, 0x2000, 0x8, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0xff, 0x1}, {0x100000, 0x10000, 0x9, 0x1, 0x3, 0x9, 0x9, 0x6, 0x5, 0x4, 0x9, 0x4b}, {0x2, 0xd000, 0x4, 0xf9, 0x3, 0x1, 0x1, 0xff, 0x5, 0x80, 0x1, 0x1}, {0x1, 0x4000, 0xf, 0x9d, 0x8, 0x6, 0x0, 0x0, 0x5, 0x7, 0x2, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x80, 0x3, 0x2, 0x9, 0x54, 0xc, 0x2, 0x7}, {0x80a0000, 0x5}, {0x2, 0x9}, 0x40010000, 0x0, 0xf000, 0x300, 0x5, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_GET_LAPIC(r3, 0x8400ae8e, &(0x7f0000000300)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace(0x10, 0x1) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x1, 0x2) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r8 = fcntl$dupfd(r7, 0x0, r7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) renameat2(r8, &(0x7f0000000040)='./file0\x00', r8, &(0x7f00000000c0)='./file0\x00', 0x1) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) fsync(r9) ioctl$FS_IOC_GETFLAGS(r8, 0x80086601, &(0x7f0000000000)) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000080)) 4.935931729s ago: executing program 2 (id=3731): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x6c}, 0x94) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) add_key$fscrypt_provisioning(0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="030000000000004f0d020304050e13141516171a191a1b1c1d1e1f2004b1212210242551a63ad6262728292a2b2c2d2e2f303132203435363738393a3b3c6315f6bb27b1dce71cb90d47d9647374abf372d3109b77d71fb8c66044bbe9f3b8bc3c859e49a5cfc9f78bb6d7caca4447f986b47a4c616cf646125f6cfd92509665036450efe06b812e87407df57c074d8ba7458c9c59937ae738acd5c4e58f3ffaf85070c816febec7cc5fcc9b00"/182], 0x48, 0xfffffffffffffffe) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f00000006c0)=@v={0x93, 0x7, 0x90, 0x2, @MIDI_NOTEON=@special, 0x0, 0x800}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r6, 0x0, {0x3, 0x0, 0x3}, 0x2}, 0x18) connect$can_j1939(r4, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0xf0, 0x2}, 0x1}, 0x18) sendmsg$can_j1939(r4, 0x0, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8}, 0x18) r9 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r9, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) sendmmsg$inet6(r9, &(0x7f0000002380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002180)=[@dstopts={{0x18, 0x29, 0x32, {0x33}}}], 0x18}}], 0x1, 0x4001c00) connect$can_j1939(r7, &(0x7f0000000080)={0x1d, r8, 0x0, {0x0, 0xf0, 0x2}, 0x1}, 0x18) sendmsg$can_j1939(r7, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r0}, 0x18) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000003c0), 0x2, 0x1}}, 0x20) 4.7059958s ago: executing program 8 (id=3732): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000040ef0ef773000000000001090224000100002001090400020903000300092100000f0122050009058103080004fe00"], 0x0) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x800) syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x0) (async) preadv(r1, &(0x7f0000000280)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}, {&(0x7f0000000340)=""/136, 0x88}, {&(0x7f0000000400)=""/131, 0x83}], 0x3, 0x0, 0x0) (async) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="64000000020601080000000000000000000000090900020073797a310000000005000400fe00000011000300686173683a6e65742c6e6574000000000c00078008001240000000020500f5ff0700000012000300686173683a6e65742c706f7274000000"], 0x64}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="20eaa53da23b0010009eb3ac77fdd30c56d197c198030004001cf6ff00000900e1836eb70008000000000000f6db31c54b60ba032b368136ec131520e666f3dabe882fa5890b8ccb4b", @ANYBLOB="7d25de8be3d4aaeab2ad789b8a480c511205b9994718406afcf8f9301fab7d8d2145222910e191657adb2f2460631d82075aad2f540c4d2d9c3a19ead6ef040ce55cd57c9e638657997305e75073a3e961bb74ffc3518c9514e5a19ec329f32445d8674fa05910fe455a56b9eb59b1e3ce10e90d97d87d446f91d57203252d09a3c49212be2ec25f2283f08c61da8fb0b7fe04fe28c5f45623e9180e5d3795497691c4d4c691a0", @ANYBLOB="0100ee8b0d66e69d24142538ddee958f0ee9a4ac36cd98a0e5a4ccf92d70fbb3fff7e1ab3f9fcc0feea2e7f78de04c619b6585948bba2a4b4cc77070a7b487f6f09b107e45980b180daa225ff217592c180ac62d84b929109c9c2b46e451a002cc358495cf6ae3261d3197bcb26118092c45522fd8ca9b4d64613df58ed01f7ad144b254ad76f71ac0b0388c0ad744173a69cbae13c7a20e2bfd6e97091ef35e7e62b1a052f2e86eb8fa48e004f86d22342807be319998eb1461f54a530ff790a23b080bbbb4cf8597479f"], 0xd0}}, 0xc000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000030000000000000000000010000000900030073797a3200000000040004800900010073797a300000000014000000060a0104000000000000000001000002140000001100010000000000000000000000000a000000000000"], 0x8c}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000180)={0x0, 0xffffffffffffffcb, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000001914"], 0x18}, 0x1, 0x0, 0x0, 0x40880}, 0x24040800) (async, rerun: 64) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x4, &(0x7f0000006680)) (rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7aba, 0x7, &(0x7f0000000540)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) getpgid(0x0) (async) ioctl$VIDIOC_QBUF(r2, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0xc, 0x4, 0xe000, 0x0, {}, {0x1, 0x8, 0x0, 0x4, 0x0, 0x8, "001500"}, 0x0, 0x2, {}, 0x18603}) (async, rerun: 32) unshare(0x2a020400) (async, rerun: 32) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000030000000000000000000095", @ANYRES64=r1], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r5}, 0x18) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c000000190a01"], 0x2c}}, 0x8004) (async, rerun: 64) syz_usb_connect(0x0, 0x19d, &(0x7f0000000840)={{0x12, 0x1, 0x250, 0x6e, 0x92, 0x88, 0x40, 0x3f0, 0xf7f, 0xdfcd, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x18b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x48, 0x0, 0x2, 0xb9, 0x39, 0x80, 0x0, [], [{{0x9, 0x5, 0x0, 0x10, 0x40, 0x7, 0xff, 0x89, [@generic={0x3f, 0xf, "91fc9890f218328dc0223ca23332019241cec1fd59cd3ac5bdc2a06bd8be3bf7b48f17cc299b1fae1c253dbe086c46a9480a6b5731dbea91b55c83e114"}, @generic={0x3f, 0x21, "a2b1cd7425d79e02989f387d19d251249870aa5bdbb5a33dc90130d369393751fc8597e546ccfe277c3204f291e490543957c8a9df200555dccab14ce9"}]}}, {{0x9, 0x5, 0x84, 0x0, 0x8, 0xf9, 0x3, 0xb, [@generic={0xe9, 0x30, "9d236343280a975fa57e30f7cd86c1565c83f4061e6128b1687656b38316890c22280c9cd6b0dce6f7b2cf19e414c7d2ac7cd164b623b38077708ef312cca63d2388fe812bbea13d9707af3d1e8b883df675e5daee61a136fcc86d8095f967052700095d69f0a4c580d6614fa5aeed74500761200fb95595841e87132f8d1e8ad0f15771648fa5c7f0021876974c67f869d30291c9298b0447eeb66c90b12bc3a4ce4ada7cb12852d10d5d83e3744993589588f7de168e62b7362508014e61b0ac369c3326a9cee6ebc03b9c78df86cfddf71fc4e5d17167a2b8b3efb6177b1b69d44b1cc38a0e"}]}}]}}]}}]}}, 0x0) (async, rerun: 64) unshare(0x2000400) (async) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="401106"], 0x0, 0x0, 0x0}, 0x0) 4.557064176s ago: executing program 7 (id=3733): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0xa, 0x0) read$msr(r0, &(0x7f0000002240)=""/102400, 0x19000) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x700, 0x0, 0x61, 0x10, 0x14}, [@ldst={0x2, 0x0, 0x3, 0x1c10a1, 0x0, 0xc}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) 4.093598694s ago: executing program 7 (id=3734): r0 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_setup(0x58c8, &(0x7f0000000500)={0x0, 0x3261, 0x2, 0x2, 0x2b4}, &(0x7f0000000440), &(0x7f0000000580)) mmap$IORING_OFF_SQ_RING(&(0x7f0000465000/0x1000)=nil, 0x1000, 0x3, 0xe2b83ed22bcd0993, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) r1 = openat$userio(0xffffffffffffff9c, 0x0, 0x329902, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc71f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6}}}}}]}}]}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(r2, &(0x7f0000000d40)=[{{&(0x7f0000000cc0)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000d00)=[{&(0x7f0000000f80)="a0", 0x1}], 0x1, 0x0, 0x10}}], 0x1, 0xe814) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) preadv(r1, 0x0, 0x0, 0x1, 0xfffffff0) bind$inet6(0xffffffffffffffff, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x2, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="e1bc70f7f4f379e829751d569f0374e9d85b27c2ec279264ca0e14d1df462996da6218d274b16707c490c53cf373ebd78d539ecea553f6d82cfe0568ba0d1e48dba72adafbe5ad51465e3e795f2271735222fd09fc35ac1702e52408dcf9d4f22faa042db5b00d0975f3f88a1892675dc9b26a01ad602893a8e4f604535e199245d10fb229026ea2df1b97badab6d33a8754de0c22808247306bf55e5664cdb52a79a7ad146040937411eacd40d2c551c1572267e6693bf85f228dedea71cd5fa965cc5c8158ee4963eca0b686d6732ecb4d247f7f2d543865ca76b3faf2836886dbe162b370ed030842ea5a52b4d07730", 0xf1, 0x40000, &(0x7f0000000040)={0xa, 0x4e24, 0x6a, @private1, 0x7}, 0x1c) r4 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f0000000000)='/dev/kvm\x00', 0x9) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) socket$alg(0x26, 0x5, 0x0) r5 = socket$kcm(0x25, 0x1, 0x0) recvmsg(r5, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x10160) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x10, 0x464, 0x800, 0x70bd2d, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x2004a840}, 0x8800) 4.006012831s ago: executing program 2 (id=3735): socket$alg(0x26, 0x5, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002480)={&(0x7f0000001140)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x6014) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0xfeffff, 0x1c0, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, 0x0, 0x4000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001040)='net/udp\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r5, &(0x7f0000003440)={0x2020}, 0x2020) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x3) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_mptcp(0xa, 0x1, 0x106) dup(0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, 0x0, 0x100, 0x70bd2c}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40801) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) io_uring_setup(0x3eae, 0x0) 3.148367942s ago: executing program 2 (id=3736): syz_usb_connect(0x0, 0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000bee9cf11c0070515c5b80102020109023400013096ac090904a300038e4ee2008905000000041a0601"], 0x0) 2.839272932s ago: executing program 0 (id=3737): syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x73, 0x0, @dev, @local}}}}, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x8000000) semget$private(0x0, 0x4000, 0x555) semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000", @ANYRES32=r2, @ANYRESDEC=r2, @ANYRES32=r7, @ANYBLOB="cec39c434c1e6cbc30b324665f36e84a72a74b28a1cb87e3673e69374f8143531c5283693a47c697e225c2ea63518ff3e80a63c9a562e483ef353be5cfe39a7e13bce0db4b91444e3fc913c6af299aa734ae81926fabe4d2d0437266fa6481c8ca65f4fe71f13927002dba83f1668f69a4d2343f484b277c3a6b6703cbed22ee9f54ec37d4dbf5938e9e69d2bff73b509dfdea18aa73465647a974"], 0x1c}, 0x1, 0x0, 0x0, 0x4044081}, 0x24044014) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c00)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002dbd7000fcdbdf251500000008000100", @ANYRES32, @ANYBLOB="080011", @ANYRES32, @ANYBLOB="090014"], 0x30}, 0x1, 0x0, 0x0, 0x20040080}, 0x4090) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYRES32=r10, @ANYRES16=r10, @ANYBLOB="010326bd6000000000002d"], 0x20}, 0x1, 0x0, 0x0, 0x40904}, 0x20040814) syz_usb_connect(0x0, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x82, 0x3a, 0x59, 0x40, 0x763, 0x1011, 0x72a7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xf, 0x0, 0x0, 0xf, [{{0x9, 0x4, 0xc0, 0x3, 0x2, 0xff, 0xea, 0xb0, 0x9, [], [{{0x9, 0x5, 0x7, 0x2, 0x400, 0x40, 0x6, 0x8}}, {{0x9, 0x5, 0x8, 0x3, 0x200, 0x1, 0x7, 0x6}}]}}]}}]}}, 0x0) 2.690056372s ago: executing program 8 (id=3738): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0xc3ffffffffffffff) 2.237377049s ago: executing program 8 (id=3739): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netfilter\x00') r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1a000}}, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r6, 0x5201) ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x5201) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) ftruncate(r1, 0x9) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, 0xee01, &(0x7f0000000200)) lseek(0xffffffffffffffff, 0x1000000000931f, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00"}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {}, {}, {}, {0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x80, 0x0, 0x7}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff}], [{}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 598.751015ms ago: executing program 5 (id=3740): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) io_uring_setup(0x0, 0x0) io_uring_setup(0x2c4c, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0x1000000, 0x4}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x541200, 0x0) syz_open_dev$sg(0x0, 0x0, 0xc0a04) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) r2 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000340)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7868b77f, 0x3a, '[\x1e', 0x3a, 'z[&\x11k\xfc\xb24\\\xda\x16M\xb7\xf2\xc0\x8e\x1b\xcf\x9b\f\x88\b(\xfc\xee\nb\x958\x1b\xcfuT\x8d`\xbb\xbcJ\xe4\x8a\xc4\x13v\xa90P\x8a\xf2h\x8dI\x93\xcbu8^\x9e\xe7OT\xb6\xcc\xc7\x13\x7f\xe3\xa4\x062\'w\a\xf0\x8d\xe5Z\xfdl\xe7x\xf0\xe9\xbe', 0x3a, './file0'}, 0x7c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x100, 0xc) write$binfmt_misc(r2, &(0x7f0000000240)="8d3684af94a7f3d83d2ce7877a7f03", 0xf) close_range(r3, 0xffffffffffffffff, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x21, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) 58.056409ms ago: executing program 2 (id=3741): r0 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_setup(0x58c8, &(0x7f0000000500)={0x0, 0x3261, 0x2, 0x2, 0x2b4}, &(0x7f0000000440), &(0x7f0000000580)) mmap$IORING_OFF_SQ_RING(&(0x7f0000465000/0x1000)=nil, 0x1000, 0x3, 0xe2b83ed22bcd0993, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) r1 = openat$userio(0xffffffffffffff9c, 0x0, 0x329902, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc71f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6}}}}}]}}]}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(r2, &(0x7f0000000d40)=[{{&(0x7f0000000cc0)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000d00)=[{&(0x7f0000000f80)="a0", 0x1}], 0x1, 0x0, 0x10}}], 0x1, 0xe814) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) preadv(r1, 0x0, 0x0, 0x1, 0xfffffff0) bind$inet6(0xffffffffffffffff, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x2, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="e1bc70f7f4f379e829751d569f0374e9d85b27c2ec279264ca0e14d1df462996da6218d274b16707c490c53cf373ebd78d539ecea553f6d82cfe0568ba0d1e48dba72adafbe5ad51465e3e795f2271735222fd09fc35ac1702e52408dcf9d4f22faa042db5b00d0975f3f88a1892675dc9b26a01ad602893a8e4f604535e199245d10fb229026ea2df1b97badab6d33a8754de0c22808247306bf55e5664cdb52a79a7ad146040937411eacd40d2c551c1572267e6693bf85f228dedea71cd5fa965cc5c8158ee4963eca0b686d6732ecb4d247f7f2d543865ca76b3faf2836886dbe162b370ed030842ea5a52b4d07730", 0xf1, 0x40000, &(0x7f0000000040)={0xa, 0x4e24, 0x6a, @private1, 0x7}, 0x1c) r4 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f0000000000)='/dev/kvm\x00', 0x9) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) socket$alg(0x26, 0x5, 0x0) r5 = socket$kcm(0x25, 0x1, 0x0) recvmsg(r5, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x10160) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x10, 0x464, 0x800, 0x70bd2d, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x2004a840}, 0x8800) 25.651745ms ago: executing program 7 (id=3742): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) (async) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x1) (async) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000400)=0xffffffc1) faccessat(r2, &(0x7f0000000080)='./file0\x00', 0x10) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 0s ago: executing program 5 (id=3743): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000104000000000000000000000006", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800b00010069703667726500"], 0x48}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x790, 0x80000000002, 0x180, 0x400000004, 0xffffffffffffffff, 0xf1, 0x3, 0xfffffffffffffd7e, 0x45, 0x0, 0x3b9, 0xfffffffffffffffe, 0x0, 0x0, 0x8], 0x8000000, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): in process `syz.0.3004'. [ 801.435034][ T7946] usb 6-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 801.704996][ T7946] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.748182][ T7946] usb 6-1: Product: syz [ 801.752425][ T7946] usb 6-1: Manufacturer: syz [ 801.757063][ T7946] usb 6-1: SerialNumber: syz [ 801.763065][T11977] usbhid 10-1:0.0: can't add hid device: -71 [ 801.790117][ T7946] usb 6-1: config 0 descriptor?? [ 801.797657][T11977] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 801.811134][ T7946] redrat3 6-1:0.83: Couldn't find all endpoints [ 801.818948][T11977] usb 10-1: USB disconnect, device number 22 [ 801.968007][T16887] netlink: 'syz.7.3007': attribute type 1 has an invalid length. [ 802.073680][T16887] bond2: entered promiscuous mode [ 802.083170][T16887] 8021q: adding VLAN 0 to HW filter on device bond2 [ 802.129952][T16889] 8021q: adding VLAN 0 to HW filter on device bond2 [ 802.159113][ T30] audit: type=1400 audit(1757832276.259:767): avc: denied { write } for pid=16862 comm="syz.5.3002" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 802.181913][T16889] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 802.212641][T16889] bond2: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 802.257957][T16889] bond2: (slave vcan1): making interface the new active one [ 802.272174][ T30] audit: type=1326 audit(1757832276.364:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16862 comm="syz.5.3002" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff7cd38eba9 code=0x0 [ 802.360647][T16889] vcan1: entered promiscuous mode [ 802.383122][T16889] bond2: (slave vcan1): Enslaving as an active interface with an up link [ 803.220731][T16908] netlink: 308 bytes leftover after parsing attributes in process `syz.0.3009'. [ 803.392688][T11977] usb 6-1: USB disconnect, device number 29 [ 805.062867][T11977] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 805.072887][T16940] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3017'. [ 805.104120][T16939] wg0 speed is unknown, defaulting to 1000 [ 805.146934][T16941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 805.155170][T16941] 8021q: adding VLAN 0 to HW filter on device team0 [ 805.168903][T16941] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 805.234372][T11977] usb 1-1: Using ep0 maxpacket: 16 [ 805.289621][T11977] usb 1-1: config 2 has an invalid interface number: 185 but max is 0 [ 805.298141][T11977] usb 1-1: config 2 has no interface number 0 [ 805.318371][T11977] usb 1-1: New USB device found, idVendor=05ac, idProduct=120a, bcdDevice=60.45 [ 805.346978][T11977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.368914][T11977] usb 1-1: Product: syz [ 805.373081][T11977] usb 1-1: Manufacturer: syz [ 805.386742][T11977] usb 1-1: SerialNumber: syz [ 805.402148][T11977] usb-storage 1-1:2.185: USB Mass Storage device detected [ 805.446175][T11977] usb-storage 1-1:2.185: Quirks match for vid 05ac pid 120a: 10 [ 805.653371][ T30] audit: type=1400 audit(1757832279.881:769): avc: denied { setopt } for pid=16943 comm="syz.8.3020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 805.686513][ T30] audit: type=1400 audit(1757832279.881:770): avc: denied { getopt } for pid=16943 comm="syz.8.3020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 805.710147][T11977] apple-mfi-fastcharge 1-1: USB disconnect, device number 33 [ 805.835765][T16951] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3021'. [ 806.442527][T16958] FAULT_INJECTION: forcing a failure. [ 806.442527][T16958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 806.958985][T16958] CPU: 1 UID: 0 PID: 16958 Comm: syz.7.3023 Not tainted syzkaller #0 PREEMPT(full) [ 806.959003][T16958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 806.959009][T16958] Call Trace: [ 806.959014][T16958] [ 806.959018][T16958] dump_stack_lvl+0x16c/0x1f0 [ 806.959035][T16958] should_fail_ex+0x512/0x640 [ 806.959052][T16958] _copy_from_user+0x2e/0xd0 [ 806.959068][T16958] kstrtouint_from_user+0xd6/0x1d0 [ 806.959080][T16958] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 806.959091][T16958] ? __lock_acquire+0xb97/0x1ce0 [ 806.959114][T16958] proc_fail_nth_write+0x83/0x220 [ 806.959128][T16958] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 806.959144][T16958] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 806.959155][T16958] vfs_write+0x2a0/0x11d0 [ 806.959168][T16958] ? __pfx___mutex_lock+0x10/0x10 [ 806.959183][T16958] ? __pfx_vfs_write+0x10/0x10 [ 806.959198][T16958] ? __fget_files+0x20e/0x3c0 [ 806.959215][T16958] ksys_write+0x12a/0x250 [ 806.959226][T16958] ? __pfx_ksys_write+0x10/0x10 [ 806.959241][T16958] do_syscall_64+0xcd/0x4e0 [ 806.959256][T16958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.959267][T16958] RIP: 0033:0x7f6b80d8d65f [ 806.959276][T16958] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 806.959286][T16958] RSP: 002b:00007f6b81b4b030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 806.959297][T16958] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6b80d8d65f [ 806.959303][T16958] RDX: 0000000000000001 RSI: 00007f6b81b4b0a0 RDI: 0000000000000003 [ 806.959310][T16958] RBP: 00007f6b81b4b090 R08: 0000000000000000 R09: 0000000000000000 [ 806.959316][T16958] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 806.959322][T16958] R13: 00007f6b80fd6128 R14: 00007f6b80fd6090 R15: 00007ffedea44218 [ 806.959336][T16958] [ 807.930411][T16964] can0: slcan on ptm1. [ 808.278578][T16973] netlink: 308 bytes leftover after parsing attributes in process `syz.7.3027'. [ 808.435791][T16963] can0 (unregistered): slcan off ptm1. [ 808.872450][T16986] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3030'. [ 810.304478][T16993] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3031'. [ 810.510171][T17013] comedi comedi3: ni_at_a2150: I/O port conflict (0x1,28) [ 810.644803][ T7946] libceph: connect (1)[c::]:6789 error -101 [ 810.650821][ T7946] libceph: mon0 (1)[c::]:6789 connect error [ 810.900973][T11977] usb 1-1: new low-speed USB device number 34 using dummy_hcd [ 810.917782][T17019] ceph: No mds server is up or the cluster is laggy [ 810.924723][ T7946] libceph: connect (1)[c::]:6789 error -101 [ 810.938481][ T7946] libceph: mon0 (1)[c::]:6789 connect error [ 811.078624][T11977] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 811.365337][T11977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.381858][T11977] usb 1-1: config 0 descriptor?? [ 811.409078][ T30] audit: type=1400 audit(1757832285.959:771): avc: denied { ioctl } for pid=17010 comm="syz.9.3036" path="/dev/usbmon3" dev="devtmpfs" ino=725 ioctlcmd=0x9201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 812.060704][T11977] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 812.093303][T11977] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 812.170524][T17046] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3045'. [ 812.214194][T11977] asix 1-1:0.0: probe with driver asix failed with error -71 [ 812.254836][T17046] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 812.263875][T11977] usb 1-1: USB disconnect, device number 34 [ 812.307192][T17048] netlink: 51 bytes leftover after parsing attributes in process `syz.7.3044'. [ 812.563147][T17053] netlink: 316 bytes leftover after parsing attributes in process `syz.5.3043'. [ 812.706266][T17055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3047'. [ 813.796961][ T30] audit: type=1400 audit(1757832288.447:772): avc: denied { audit_read } for pid=17061 comm="syz.0.3049" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 814.892411][T17079] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3054'. [ 814.953331][T17079] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3054'. [ 815.454034][T17086] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3056'. [ 816.162261][T17098] Mount JFS Failure: -22 [ 816.167190][T17098] jfs_mount failed w/return code = -22 [ 816.853229][T17110] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 816.895631][T17110] nbd_handle_cmd: 2 callbacks suppressed [ 816.901334][T17110] block nbd9: Attempted send on invalid socket [ 816.907681][T17110] blk_print_req_error: 54 callbacks suppressed [ 816.913890][T17110] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 816.924637][T17110] MINIX-fs: unable to read superblock [ 817.154621][T17112] netlink: 'syz.5.3065': attribute type 21 has an invalid length. [ 817.163137][T17112] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3065'. [ 820.530170][T17130] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3071'. [ 821.234536][T17143] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3073'. [ 822.164447][T17164] bridge1: entered promiscuous mode [ 822.169743][T17164] bridge1: entered allmulticast mode [ 824.496331][T11977] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 824.650185][T11977] usb 8-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 824.737057][T17211] pimreg: entered allmulticast mode [ 824.785763][T11977] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.806784][T11977] usb 8-1: Product: syz [ 824.821420][T11977] usb 8-1: Manufacturer: syz [ 824.827998][T11977] usb 8-1: SerialNumber: syz [ 824.835108][T11977] usb 8-1: config 0 descriptor?? [ 824.846389][T11977] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 825.462466][T11977] gspca_sunplus: reg_r err -110 [ 825.471383][T11977] sunplus 8-1:0.0: probe with driver sunplus failed with error -110 [ 825.647303][ T30] audit: type=1400 audit(1757832300.908:773): avc: denied { append } for pid=17223 comm="syz.5.3097" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 825.897847][T17202] netlink: 316 bytes leftover after parsing attributes in process `syz.7.3092'. [ 825.927459][ T30] audit: type=1400 audit(1757832301.202:774): avc: denied { write } for pid=17223 comm="syz.5.3097" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 826.956929][T17202] [U] [ 826.961006][T11977] usb 8-1: USB disconnect, device number 31 [ 827.811739][T11977] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 827.905852][T17241] tc_dump_action: action bad kind [ 827.916867][ T30] audit: type=1400 audit(1757832303.291:775): avc: denied { ioctl } for pid=17242 comm="syz.5.3104" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 827.941356][ C0] vkms_vblank_simulate: vblank timer overrun [ 828.003533][T11977] usb 8-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 828.012724][T11977] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.023851][T11977] usb 8-1: Product: syz [ 828.028293][T11977] usb 8-1: Manufacturer: syz [ 828.033075][T11977] usb 8-1: SerialNumber: syz [ 828.041442][T11977] usb 8-1: config 0 descriptor?? [ 828.064315][T17241] netlink: 'syz.9.3103': attribute type 1 has an invalid length. [ 828.072710][T11977] ch341 8-1:0.0: ch341-uart converter detected [ 828.103742][T17241] netlink: 144 bytes leftover after parsing attributes in process `syz.9.3103'. [ 828.113071][T17241] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3103'. [ 828.353764][T17248] can0: slcan on ptm1. [ 828.440176][T17236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 828.522105][T17236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 828.629202][T17261] nfs: Unknown parameter 'KK?{|fk5&~H|24t\ސᥳG'#GcAރ@զ ' [ 829.025041][T17247] can0 (unregistered): slcan off ptm1. [ 829.397364][T17274] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3112'. [ 829.505103][T17277] FAULT_INJECTION: forcing a failure. [ 829.505103][T17277] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 829.617770][T11977] usb 8-1: failed to send control message: -71 [ 829.626316][T11977] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 829.635886][T17277] CPU: 0 UID: 0 PID: 17277 Comm: syz.8.3117 Not tainted syzkaller #0 PREEMPT(full) [ 829.635910][T17277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 829.635920][T17277] Call Trace: [ 829.635927][T17277] [ 829.635934][T17277] dump_stack_lvl+0x16c/0x1f0 [ 829.635961][T17277] should_fail_ex+0x512/0x640 [ 829.635980][T17277] _copy_to_user+0x32/0xd0 [ 829.635997][T17277] l2cap_sock_getsockopt+0x41d/0x13f0 [ 829.636012][T17277] ? __pfx_l2cap_sock_getsockopt+0x10/0x10 [ 829.636024][T17277] ? __might_fault+0xe3/0x190 [ 829.636035][T17277] ? __might_fault+0xe3/0x190 [ 829.636045][T17277] ? virt_to_kpte.constprop.0+0x180/0x310 [ 829.636062][T17277] ? __pfx_l2cap_sock_getsockopt+0x10/0x10 [ 829.636075][T17277] do_sock_getsockopt+0x34d/0x440 [ 829.636094][T17277] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 829.636109][T17277] ? __fget_files+0x204/0x3c0 [ 829.636127][T17277] __sys_getsockopt+0x12f/0x260 [ 829.636143][T17277] __x64_sys_getsockopt+0xbd/0x160 [ 829.636155][T17277] ? do_syscall_64+0x91/0x4e0 [ 829.636168][T17277] ? lockdep_hardirqs_on+0x7c/0x110 [ 829.636181][T17277] do_syscall_64+0xcd/0x4e0 [ 829.636195][T17277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.636206][T17277] RIP: 0033:0x7fde4898eba9 [ 829.636216][T17277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 829.636226][T17277] RSP: 002b:00007fde46bee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 829.636237][T17277] RAX: ffffffffffffffda RBX: 00007fde48bd5fa0 RCX: 00007fde4898eba9 [ 829.636244][T17277] RDX: 0000000000000009 RSI: 0000000000000112 RDI: 0000000000000004 [ 829.636250][T17277] RBP: 00007fde46bee090 R08: 00002000000001c0 R09: 0000000000000000 [ 829.636256][T17277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 829.636262][T17277] R13: 00007fde48bd6038 R14: 00007fde48bd5fa0 R15: 00007ffdaa471c48 [ 829.636276][T17277] [ 829.830172][ C0] vkms_vblank_simulate: vblank timer overrun [ 830.050265][T11977] usb 8-1: USB disconnect, device number 32 [ 830.073459][T11977] ch341 8-1:0.0: device disconnected [ 830.343865][ T7946] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 830.499113][ T7946] usb 10-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 830.533975][ T7946] usb 10-1: config 0 interface 0 has no altsetting 0 [ 830.674484][T17287] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3120'. [ 830.766382][ T7946] usb 10-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 830.777452][ T7946] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.887892][ T7946] usb 10-1: config 0 descriptor?? [ 831.406589][T17281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 831.424940][T17281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 831.697172][ T7946] ryos 0003:1E7D:3138.0019: hidraw0: USB HID v8.80 Device [HID 1e7d:3138] on usb-dummy_hcd.9-1/input0 [ 831.712531][T17297] netlink: 'syz.8.3125': attribute type 1 has an invalid length. [ 831.723862][T17297] netlink: 208 bytes leftover after parsing attributes in process `syz.8.3125'. [ 831.794192][T17299] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3123'. [ 832.142921][T17297] netlink: 'syz.8.3125': attribute type 1 has an invalid length. [ 832.150718][T17297] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3125'. [ 832.480916][ T7946] usb 10-1: USB disconnect, device number 23 [ 832.906239][T11977] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 833.464729][T17321] can0: slcan on ptm1. [ 833.497805][T11977] usb 6-1: Using ep0 maxpacket: 16 [ 833.507899][T11977] usb 6-1: config 0 has an invalid descriptor of length 198, skipping remainder of the config [ 833.519474][T17320] can0 (unregistered): slcan off ptm1. [ 833.526503][T11977] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 40, using maximum allowed: 30 [ 833.570209][T11977] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 40 [ 833.609902][T11977] usb 6-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 833.629354][T11977] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.654491][T11977] usb 6-1: config 0 descriptor?? [ 833.718287][T17330] FAULT_INJECTION: forcing a failure. [ 833.718287][T17330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 833.747244][T17330] CPU: 1 UID: 0 PID: 17330 Comm: syz.0.3137 Not tainted syzkaller #0 PREEMPT(full) [ 833.747269][T17330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 833.747279][T17330] Call Trace: [ 833.747285][T17330] [ 833.747292][T17330] dump_stack_lvl+0x16c/0x1f0 [ 833.747317][T17330] should_fail_ex+0x512/0x640 [ 833.747342][T17330] _copy_from_user+0x2e/0xd0 [ 833.747368][T17330] drm_ioctl+0x4fb/0xc30 [ 833.747395][T17330] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 833.747417][T17330] ? __pfx_drm_ioctl+0x10/0x10 [ 833.747449][T17330] ? selinux_file_ioctl+0x180/0x270 [ 833.747473][T17330] ? selinux_file_ioctl+0xb4/0x270 [ 833.747497][T17330] ? __pfx_drm_ioctl+0x10/0x10 [ 833.747520][T17330] __x64_sys_ioctl+0x18e/0x210 [ 833.747547][T17330] do_syscall_64+0xcd/0x4e0 [ 833.747569][T17330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.747587][T17330] RIP: 0033:0x7fb95118eba9 [ 833.747601][T17330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 833.747617][T17330] RSP: 002b:00007fb95200b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 833.747634][T17330] RAX: ffffffffffffffda RBX: 00007fb9513d5fa0 RCX: 00007fb95118eba9 [ 833.747645][T17330] RDX: 0000200000002600 RSI: 00000000c06864a2 RDI: 0000000000000003 [ 833.747654][T17330] RBP: 00007fb95200b090 R08: 0000000000000000 R09: 0000000000000000 [ 833.747664][T17330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 833.747673][T17330] R13: 00007fb9513d6038 R14: 00007fb9513d5fa0 R15: 00007ffdc02e1008 [ 833.747695][T17330] [ 833.912932][ C1] vkms_vblank_simulate: vblank timer overrun [ 835.426221][T17352] netlink: 277 bytes leftover after parsing attributes in process `syz.9.3142'. [ 836.542962][T17367] 9pnet_fd: Insufficient options for proto=fd [ 836.602217][T11977] usb 6-1: string descriptor 0 read error: -71 [ 836.610500][T11977] usb 6-1: USB disconnect, device number 30 [ 836.836427][T17375] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 838.456472][T17388] overlayfs: invalid origin (0000) [ 838.516850][T11977] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 838.689681][T11977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 838.728803][T11977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 838.756349][T11977] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 838.776848][T17401] input: syz1 as /devices/virtual/input/input57 [ 838.790863][T11977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.811401][T11977] usb 1-1: config 0 descriptor?? [ 839.606171][T11977] hid-led 0003:27B8:01ED.001A: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.0-1/input0 [ 839.627312][T17416] input: syz1 as /devices/virtual/input/input58 [ 839.645341][T11977] hid-led 0003:27B8:01ED.001A: ThingM blink(1) initialized [ 839.656937][T17417] PKCS7: Unknown OID: [5] (bad) [ 839.665165][T17417] PKCS7: Only support pkcs7_signedData type [ 839.689749][ T7946] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 839.721067][T17417] netlink: 'syz.7.3160': attribute type 2 has an invalid length. [ 839.729054][T17417] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3160'. [ 839.899618][ T7946] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 840.694328][ T7946] usb 10-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 840.710260][ T7946] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.800991][ T7946] usb 10-1: config 0 descriptor?? [ 841.017178][T17426] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3162'. [ 841.408439][T11977] usb 1-1: USB disconnect, device number 35 [ 841.650170][T17432] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3165'. [ 841.870010][T11977] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 842.089118][T11977] usb 1-1: Using ep0 maxpacket: 16 [ 842.588758][T11977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 842.606005][ T7946] usbhid 10-1:0.0: can't add hid device: -71 [ 842.642160][ T7946] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 842.652513][T11977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 842.671949][ T7946] usb 10-1: USB disconnect, device number 24 [ 842.679895][T11977] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 842.716579][T17444] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3168'. [ 842.730980][T11977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.811071][T11977] usb 1-1: config 0 descriptor?? [ 843.312145][T11977] corsair 0003:1B1C:1B02.001B: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0 [ 843.421551][ T30] audit: type=1400 audit(1757832319.563:776): avc: denied { map } for pid=17451 comm="syz.9.3171" path="socket:[61800]" dev="sockfs" ino=61800 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 843.536249][T11977] corsair 0003:1B1C:1B02.001B: Failed to get K90 initial state (error -71). [ 843.582786][T11977] usb 1-1: USB disconnect, device number 36 [ 843.805408][T17466] netlink: 'syz.9.3175': attribute type 1 has an invalid length. [ 843.867953][T17466] netlink: 208 bytes leftover after parsing attributes in process `syz.9.3175'. [ 843.891736][T17466] netlink: 'syz.9.3175': attribute type 1 has an invalid length. [ 843.924108][T17466] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3175'. [ 844.666450][T17482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3178'. [ 847.583793][T17518] syzkaller1: entered promiscuous mode [ 847.589545][T17518] syzkaller1: entered allmulticast mode [ 847.968848][T12202] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 848.158856][T12202] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 848.171134][T12202] usb 1-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 848.180492][T12202] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.786628][T12202] usb 1-1: config 0 descriptor?? [ 848.994032][T17533] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4624 sclass=netlink_route_socket pid=17533 comm=syz.5.3196 [ 850.648600][T12202] usbhid 1-1:0.0: can't add hid device: -71 [ 850.750013][T12202] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 850.773689][T12202] usb 1-1: USB disconnect, device number 37 [ 851.387595][T17567] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3204'. [ 851.950515][T17562] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3201'. [ 852.184691][T17580] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3207'. [ 853.126322][T17592] hub 9-0:1.0: USB hub found [ 853.132781][T17592] hub 9-0:1.0: 1 port detected [ 853.685090][T17601] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3213'. [ 853.772749][T17603] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3213'. [ 853.875413][T17603] nbd: device at index 64 is going down [ 853.918821][T11977] IPVS: starting estimator thread 0... [ 853.959448][T17608] netdevsim netdevsim8 netdevsim0: left allmulticast mode [ 853.984571][T17606] netlink: 'syz.7.3215': attribute type 4 has an invalid length. [ 853.995995][T17609] IPVS: using max 74 ests per chain, 177600 per kthread [ 854.043952][T17613] netlink: 'syz.7.3216': attribute type 1 has an invalid length. [ 854.043965][T17613] netlink: 208 bytes leftover after parsing attributes in process `syz.7.3216'. [ 854.043973][T17613] netlink: 'syz.7.3216': attribute type 1 has an invalid length. [ 854.043980][T17613] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3216'. [ 854.265598][T17623] hfsplus: unable to find HFS+ superblock [ 855.350079][T17637] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3222'. [ 855.578035][T17640] trusted_key: encrypted_key: insufficient parameters specified [ 855.819953][T17645] trusted_key: encrypted_key: keylen parameter is missing [ 855.834905][T17640] netlink: 'syz.7.3224': attribute type 2 has an invalid length. [ 856.412253][T17654] netlink: 'syz.5.3227': attribute type 1 has an invalid length. [ 856.436560][T17654] netlink: 208 bytes leftover after parsing attributes in process `syz.5.3227'. [ 856.467500][T17654] netlink: 'syz.5.3227': attribute type 1 has an invalid length. [ 856.489199][T17654] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3227'. [ 856.532197][T17657] netlink: 'syz.0.3228': attribute type 1 has an invalid length. [ 856.540479][T17657] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3228'. [ 856.677810][T17664] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3229'. [ 856.701671][ T30] audit: type=1400 audit(1757832333.420:777): avc: denied { ioctl } for pid=17660 comm="syz.5.3230" path="socket:[63467]" dev="sockfs" ino=63467 ioctlcmd=0xf517 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 857.707255][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 858.946646][T17700] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3238'. [ 860.316896][T17707] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3232'. [ 860.555731][T17717] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3242'. [ 861.039773][T17718] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3239'. [ 861.149462][T17720] hfsplus: unable to find HFS+ superblock [ 863.916094][T17733] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 863.933140][T17733] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 863.940838][T17733] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 863.949078][T17733] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 863.957275][T17733] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 864.208261][T17737] FAULT_INJECTION: forcing a failure. [ 864.208261][T17737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 864.221538][T17737] CPU: 0 UID: 0 PID: 17737 Comm: syz.8.3247 Not tainted syzkaller #0 PREEMPT(full) [ 864.221561][T17737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 864.221572][T17737] Call Trace: [ 864.221578][T17737] [ 864.221585][T17737] dump_stack_lvl+0x16c/0x1f0 [ 864.221612][T17737] should_fail_ex+0x512/0x640 [ 864.221638][T17737] _copy_from_user+0x2e/0xd0 [ 864.221662][T17737] __sys_bpf+0x21d/0x4de0 [ 864.221692][T17737] ? __pfx___sys_bpf+0x10/0x10 [ 864.221715][T17737] ? ksys_write+0x190/0x250 [ 864.221738][T17737] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 864.221779][T17737] ? fput+0x9b/0xd0 [ 864.221801][T17737] ? ksys_write+0x1ac/0x250 [ 864.221818][T17737] ? __pfx_ksys_write+0x10/0x10 [ 864.221839][T17737] __x64_sys_bpf+0x78/0xc0 [ 864.221860][T17737] ? lockdep_hardirqs_on+0x7c/0x110 [ 864.221880][T17737] do_syscall_64+0xcd/0x4e0 [ 864.221905][T17737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.221923][T17737] RIP: 0033:0x7fde4898eba9 [ 864.221937][T17737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 864.221952][T17737] RSP: 002b:00007fde46bcd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 864.221969][T17737] RAX: ffffffffffffffda RBX: 00007fde48bd6090 RCX: 00007fde4898eba9 [ 864.221981][T17737] RDX: 0000000000000052 RSI: 000020000000e000 RDI: 0000000000000005 [ 864.221991][T17737] RBP: 00007fde46bcd090 R08: 0000000000000000 R09: 0000000000000000 [ 864.222001][T17737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 864.222011][T17737] R13: 00007fde48bd6128 R14: 00007fde48bd6090 R15: 00007ffdaa471c48 [ 864.222033][T17737] [ 864.791870][T17732] wg0 speed is unknown, defaulting to 1000 [ 864.818737][T17741] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3249'. [ 864.837824][T17741] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3249'. [ 864.922008][T11977] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 865.166788][T11977] usb 9-1: Using ep0 maxpacket: 16 [ 865.314642][T11977] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 865.336843][T11977] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 865.365513][T11977] usb 9-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 865.379059][T11977] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.402433][T17732] chnl_net:caif_netlink_parms(): no params data found [ 865.409420][T11977] usb 9-1: Product: syz [ 865.413571][T11977] usb 9-1: Manufacturer: syz [ 865.420616][T11977] usb 9-1: SerialNumber: syz [ 865.436708][T11977] usb 9-1: config 0 descriptor?? [ 865.493733][T17755] netlink: 'syz.0.3252': attribute type 1 has an invalid length. [ 865.501615][T17755] netlink: 208 bytes leftover after parsing attributes in process `syz.0.3252'. [ 865.510851][T17755] netlink: 'syz.0.3252': attribute type 1 has an invalid length. [ 865.518775][T17755] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3252'. [ 865.661771][T11977] appledisplay 9-1:0.0: Error while getting initial brightness: -90 [ 865.730714][T11977] appledisplay 9-1:0.0: probe with driver appledisplay failed with error -90 [ 866.032758][T17770] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3255'. [ 866.395196][T17733] Bluetooth: hci6: command tx timeout [ 866.409749][T11977] usb 9-1: USB disconnect, device number 13 [ 866.415419][T17768] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3253'. [ 867.002760][T17732] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.010101][T17732] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.668340][T17732] bridge_slave_0: entered allmulticast mode [ 867.675666][T17732] bridge_slave_0: entered promiscuous mode [ 867.913242][T17732] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.926344][T17732] bridge0: port 2(bridge_slave_1) entered disabled state [ 867.941741][T17732] bridge_slave_1: entered allmulticast mode [ 867.974596][T17732] bridge_slave_1: entered promiscuous mode [ 868.071095][T17732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 868.209641][T17732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 868.370168][T17733] Bluetooth: hci6: command tx timeout [ 868.929901][T17732] team0: Port device team_slave_0 added [ 868.946978][T17800] tc_dump_action: action bad kind [ 868.958172][T17800] netlink: 'syz.7.3263': attribute type 1 has an invalid length. [ 869.052701][T17800] netlink: 144 bytes leftover after parsing attributes in process `syz.7.3263'. [ 869.098651][T17800] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3263'. [ 869.100605][T17732] team0: Port device team_slave_1 added [ 869.258118][T17732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 869.265096][T17732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 869.352544][T17732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 869.396131][T17732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 869.416745][T17732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 869.513168][T17732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 869.538784][T14135] syz_tun (unregistering): left promiscuous mode [ 869.567049][T17732] hsr_slave_0: entered promiscuous mode [ 869.580534][T17732] hsr_slave_1: entered promiscuous mode [ 869.586482][T17732] debugfs: 'hsr0' already exists in 'hsr' [ 869.589440][T11977] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 869.596688][T17732] Cannot create hsr debugfs directory [ 869.838883][T11977] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 869.979669][T11977] usb 9-1: config 0 interface 0 has no altsetting 0 [ 870.402513][T17733] Bluetooth: hci6: command tx timeout [ 870.421042][T11977] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 870.459677][T11977] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 870.584384][T17822] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3266'. [ 870.607023][T11977] usb 9-1: Product: syz [ 870.637833][T11977] usb 9-1: Manufacturer: syz [ 870.669525][T11977] usb 9-1: SerialNumber: syz [ 870.688403][T11977] usb 9-1: config 0 descriptor?? [ 870.762114][T11977] usb 9-1: selecting invalid altsetting 0 [ 871.013315][T11977] usb 9-1: USB disconnect, device number 14 [ 871.260380][T17838] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 871.383232][ T30] audit: type=1400 audit(1757832348.811:778): avc: denied { link } for pid=17832 comm="syz.0.3271" name="#19" dev="tmpfs" ino=1103 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 871.405396][ C0] vkms_vblank_simulate: vblank timer overrun [ 871.473529][T17784] bond1 (unregistering): (slave bridge2): Releasing active interface [ 871.533171][T11977] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 871.688731][ T30] audit: type=1400 audit(1757832348.811:779): avc: denied { rename } for pid=17832 comm="syz.0.3271" name="#1a" dev="tmpfs" ino=1103 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 872.085722][T17784] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 872.106070][T17784] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 872.131281][T17784] bond0 (unregistering): Released all slaves [ 872.157763][T17784] bond1 (unregistering): Released all slaves [ 872.222316][T17732] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 872.281858][T17732] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 872.315813][T17732] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 872.328569][T17732] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 872.335724][T17733] Bluetooth: hci6: command tx timeout [ 872.385987][T17732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 872.398336][T17732] 8021q: adding VLAN 0 to HW filter on device team0 [ 872.440367][ T6277] bridge0: port 1(bridge_slave_0) entered blocking state [ 872.447536][ T6277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 872.538567][ T7476] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.545769][ T7476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 872.751958][ T5844] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 872.935240][ T5844] usb 6-1: Using ep0 maxpacket: 8 [ 872.995252][ T5844] usb 6-1: config 2 has an invalid interface number: 18 but max is 1 [ 873.013940][T17877] netlink: 'syz.8.3283': attribute type 1 has an invalid length. [ 873.015801][ T5844] usb 6-1: config 2 has an invalid interface number: 241 but max is 1 [ 873.037346][ T5844] usb 6-1: config 2 has an invalid interface number: 211 but max is 1 [ 873.046037][T17877] netlink: 144 bytes leftover after parsing attributes in process `syz.8.3283'. [ 873.046057][T17877] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3283'. [ 873.070423][ T5844] usb 6-1: config 2 has 3 interfaces, different from the descriptor's value: 2 [ 873.085382][ T5844] usb 6-1: config 2 has no interface number 0 [ 873.094951][ T5844] usb 6-1: config 2 has no interface number 1 [ 873.101252][ T5844] usb 6-1: config 2 has no interface number 2 [ 873.110960][ T5844] usb 6-1: config 2 interface 18 altsetting 96 endpoint 0x1 has an invalid bInterval 92, changing to 7 [ 873.123470][ T5844] usb 6-1: config 2 interface 18 altsetting 96 endpoint 0xA has an invalid bInterval 255, changing to 11 [ 873.137074][ T5844] usb 6-1: config 2 interface 18 altsetting 96 has an invalid descriptor for endpoint zero, skipping [ 873.148539][ T5844] usb 6-1: config 2 interface 18 altsetting 96 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 873.163912][ T5844] usb 6-1: config 2 interface 241 altsetting 6 endpoint 0x7 has invalid maxpacket 1624, setting to 64 [ 873.189533][T17784] batadv_slave_0: left promiscuous mode [ 873.198270][T17784] hsr_slave_0: left promiscuous mode [ 873.209256][ T5844] usb 6-1: config 2 interface 241 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 873.359925][T17784] hsr_slave_1: left promiscuous mode [ 873.389489][ T5844] usb 6-1: too many endpoints for config 2 interface 211 altsetting 138: 88, using maximum allowed: 30 [ 873.430469][T17784] team0 (unregistering): Port device batadv0 removed [ 873.477982][ T5844] usb 6-1: config 2 interface 211 altsetting 138 has a duplicate endpoint with address 0x6, skipping [ 873.496777][ T5844] usb 6-1: config 2 interface 211 altsetting 138 has a duplicate endpoint with address 0x6, skipping [ 873.518629][ T5844] usb 6-1: config 2 interface 211 altsetting 138 has 7 endpoint descriptors, different from the interface descriptor's value: 88 [ 873.532123][ T5844] usb 6-1: config 2 interface 18 has no altsetting 0 [ 873.541264][ T5844] usb 6-1: config 2 interface 241 has no altsetting 0 [ 873.583782][ T5844] usb 6-1: config 2 interface 211 has no altsetting 0 [ 873.605465][ T5844] usb 6-1: New USB device found, idVendor=0471, idProduct=030b, bcdDevice=50.5a [ 873.625641][ T5844] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.637752][ T5844] usb 6-1: Product: 뽽䭊댇ᑊ༜ඐ傷⮁䮮뒪㜙ꔝ꼕糓椁ᄀ忶½ៈ☺阓䈧匷珲퍶퓸˨ʇ㈅䆈뗵翬쬖蓨㧃ꄊ쎧̳푢⿥푎踢࿃ﾞ栦쯒㱥ಶ꽆⍃慂乮맅 [ 873.824251][ T5844] usb 6-1: Manufacturer: 孞⚙妓ꣻ஧썮曠뼍攒쿬ᯅ곯滕男냛᪸璉鬧벊㋼茚軛う啤◗徸檾済̴䕳휯쮓칕⯲࿽Ḇ嗞藈兄⸵凲䈦慿૜렒釩㛼྘ꐣ㋹嘎艶ꏡǩ퉘玖뵷鉗杭䨮֏㫳괟㖜쌼㌥戜ᯓ疎誒픋괬ⷴᶚ耷︺愴渧ᩱ [ 873.851366][ C0] vkms_vblank_simulate: vblank timer overrun [ 874.470330][ T5844] usb 6-1: USB disconnect, device number 31 [ 874.640970][T17890] netlink: 'syz.7.3286': attribute type 4 has an invalid length. [ 874.649205][T17890] netlink: 17 bytes leftover after parsing attributes in process `syz.7.3286'. [ 874.885735][T17784] team0 (unregistering): Port device team_slave_1 removed [ 874.929470][T17784] team0 (unregistering): Port device team_slave_0 removed [ 876.060140][T17875] tc_dump_action: action bad kind [ 876.109939][T17527] syz_tun (unregistering): left promiscuous mode [ 876.334498][T17732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 877.450656][T17732] veth0_vlan: entered promiscuous mode [ 877.494077][T17732] veth1_vlan: entered promiscuous mode [ 877.546670][T17732] veth0_macvtap: entered promiscuous mode [ 877.558680][T17732] veth1_macvtap: entered promiscuous mode [ 877.587153][T17732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 877.607746][T17931] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3297'. [ 877.683539][T17732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 877.695693][ T5844] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 877.746825][T12636] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.759028][T12636] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.768490][T17940] netlink: 'syz.5.3301': attribute type 1 has an invalid length. [ 877.769223][T12636] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.800899][T17940] netlink: 208 bytes leftover after parsing attributes in process `syz.5.3301'. [ 877.835958][T12636] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.878660][ T5844] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 877.896225][T17940] netlink: 'syz.5.3301': attribute type 1 has an invalid length. [ 877.928573][T17940] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3301'. [ 877.943491][ T5844] usb 1-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 877.962119][ T5844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.975522][ T5844] usb 1-1: config 0 descriptor?? [ 878.097331][T17784] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 878.116610][T17784] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 878.532123][T17784] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 878.571494][T17784] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 878.596384][ T5844] usbhid 1-1:0.0: can't add hid device: -71 [ 878.602394][ T5844] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 878.620505][ T5844] usb 1-1: USB disconnect, device number 38 [ 878.708198][T17955] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3304'. [ 878.953274][T17964] comedi: valid board names for 8255 driver are: [ 878.959725][T17964] 8255 [ 878.962651][T17964] comedi: valid board names for vmk80xx driver are: [ 878.969312][T17964] vmk80xx [ 878.972492][T17964] comedi: valid board names for usbduxsigma driver are: [ 878.979506][T17964] usbduxsigma [ 878.982940][T17964] comedi: valid board names for usbduxfast driver are: [ 878.989876][T17964] usbduxfast [ 878.993567][T17964] comedi: valid board names for usbdux driver are: [ 879.000280][T17964] usbdux [ 879.003451][T17964] comedi: valid board names for ni6501 driver are: [ 879.010535][T17964] ni6501 [ 879.013550][T17964] comedi: valid board names for dt9812 driver are: [ 879.020320][T17964] dt9812 [ 879.023455][T17964] comedi: valid board names for ni_labpc_cs driver are: [ 879.030574][T17964] ni_labpc_cs [ 879.034022][T17964] comedi: valid board names for ni_daq_700 driver are: [ 879.041778][T17964] ni_daq_700 [ 879.045270][T17964] comedi: valid board names for labpc_pci driver are: [ 879.052822][T17964] labpc_pci [ 879.056150][T17964] comedi: valid board names for adl_pci9118 driver are: [ 879.063265][T17964] pci9118dg [ 879.066577][T17964] pci9118hg [ 879.069864][T17964] pci9118hr [ 879.073146][T17964] comedi: valid board names for 8255_pci driver are: [ 879.080010][T17964] 8255_pci [ 879.083198][T17964] comedi: valid board names for s526 driver are: [ 879.089667][T17964] s526 [ 879.092470][T17964] comedi: valid board names for multiq3 driver are: [ 879.099203][T17964] multiq3 [ 879.102311][T17964] comedi: valid board names for pcmuio driver are: [ 879.108940][T17964] pcmuio48 [ 879.112140][T17964] pcmuio96 [ 879.115343][T17964] comedi: valid board names for pcmmio driver are: [ 879.121961][T17964] pcmmio [ 879.127787][T17964] comedi: valid board names for pcmda12 driver are: [ 879.135167][T17964] pcmda12 [ 879.138295][T17964] comedi: valid board names for pcmad driver are: [ 879.144809][T17964] pcmad12 [ 879.147970][T17964] pcmad16 [ 879.151040][T17964] comedi: valid board names for ni_labpc driver are: [ 879.157927][T17964] lab-pc-1200 [ 879.161375][T17964] lab-pc-1200ai [ 879.165085][T17964] lab-pc+ [ 879.168183][T17964] comedi: valid board names for atmio16 driver are: [ 879.174886][T17964] atmio16 [ 879.177987][T17964] atmio16d [ 879.181168][T17964] comedi: valid board names for ni_at_ao driver are: [ 879.187932][T17964] at-ao-6 [ 879.191020][T17964] at-ao-10 [ 879.194244][T17964] comedi: valid board names for ni_at_a2150 driver are: [ 879.201345][T17964] ni_at_a2150 [ 879.204795][T17964] comedi: valid board names for adq12b driver are: [ 879.211419][T17964] adq12b [ 879.214435][T17964] comedi: valid board names for mpc624 driver are: [ 879.221046][T17964] mpc624 [ 879.224067][T17964] comedi: valid board names for c6xdigio driver are: [ 879.231554][T17964] c6xdigio [ 879.234728][T17964] comedi: valid board names for aio_iiro_16 driver are: [ 879.241790][T17964] aio_iiro_16 [ 879.245233][T17964] comedi: valid board names for aio_aio12_8 driver are: [ 879.252308][T17964] aio_aio12_8 [ 879.255778][T17964] aio_ai12_8 [ 879.259190][T17964] aio_ao12_4 [ 879.262548][T17964] comedi: valid board names for fl512 driver are: [ 879.269090][T17964] fl512 [ 879.271997][T17964] comedi: valid board names for dmm32at driver are: [ 879.278708][T17964] dmm32at [ 879.281817][T17964] comedi: valid board names for dt282x driver are: [ 879.288500][T17964] dt2821 [ 879.291554][T17964] dt2821-f [ 879.294744][T17964] dt2821-g [ 879.297938][T17964] dt2823 [ 879.301007][T17964] dt2824-pgh [ 879.304371][T17964] dt2824-pgl [ 879.307768][T17964] dt2825 [ 879.310764][T17964] dt2827 [ 879.313733][T17964] dt2828 [ 879.316780][T17964] dt2829 [ 879.319796][T17964] dt21-ez [ 879.322893][T17964] dt23-ez [ 879.325995][T17964] dt24-ez [ 879.329680][T17964] dt24-ez-pgl [ 879.333123][T17964] comedi: valid board names for dt2817 driver are: [ 879.339820][T17964] dt2817 [ 879.342855][T17964] comedi: valid board names for dt2815 driver are: [ 879.349883][T17964] dt2815 [ 879.352909][T17964] comedi: valid board names for dt2814 driver are: [ 879.359515][T17964] dt2814 [ 879.362524][T17964] comedi: valid board names for dt2811 driver are: [ 879.369131][T17964] dt2811-pgh [ 879.372529][T17964] dt2811-pgl [ 879.375847][T17964] comedi: valid board names for dt2801 driver are: [ 879.382459][T17964] dt2801 [ 879.385484][T17964] comedi: valid board names for das6402 driver are: [ 879.392236][T17964] das6402-12 [ 879.395580][T17964] das6402-16 [ 879.398933][T17964] comedi: valid board names for das1800 driver are: [ 879.405601][T17964] das-1701st [ 879.408979][T17964] das-1701st-da [ 879.412638][T17964] das-1702st [ 879.416002][T17964] das-1702st-da [ 879.419618][T17964] das-1702hr [ 879.423137][T17964] das-1702hr-da [ 879.427329][T17964] das-1701ao [ 879.458765][T17964] das-1702ao [ 879.471007][T17964] das-1801st [ 879.478413][T17964] das-1801st-da [ 879.494416][T17964] das-1802st [ 879.499975][T17964] das-1802st-da [ 879.505867][T17964] das-1802hr [ 879.510301][T17964] das-1802hr-da [ 879.517676][T17964] das-1801hc [ 879.522375][T17964] das-1802hc [ 879.527709][T17964] das-1801ao [ 879.534638][T17964] das-1802ao [ 879.538041][T17964] comedi: valid board names for das800 driver are: [ 879.545863][T17964] das-800 [ 879.548996][T17964] cio-das800 [ 879.552418][T17964] das-801 [ 879.555611][T17964] cio-das801 [ 879.559044][T17964] das-802 [ 879.562146][T17964] cio-das802 [ 879.565673][T17964] cio-das802/16 [ 879.569369][T17964] comedi: valid board names for isa-das08 driver are: [ 879.577111][T17964] isa-das08 [ 879.580422][T17964] das08-pgm [ 879.583825][T17964] das08-pgh [ 879.587106][T17964] das08-pgl [ 879.593266][T17964] das08-aoh [ 879.596937][T17964] das08-aol [ 879.600426][T17964] das08-aom [ 879.603828][T17964] das08/jr-ao [ 879.607344][T17964] das08jr-16-ao [ 879.611445][T17964] pc104-das08 [ 879.614924][T17964] das08jr/16 [ 879.618324][T17964] comedi: valid board names for das16m1 driver are: [ 879.625674][T17964] das16m1 [ 879.628783][T17964] comedi: valid board names for dac02 driver are: [ 879.635314][T17964] dac02 [ 879.638194][T17964] comedi: valid board names for rti802 driver are: [ 879.644843][T17964] rti802 [ 879.647840][T17964] comedi: valid board names for rti800 driver are: [ 879.654567][T17964] rti800 [ 879.657566][T17964] rti815 [ 879.661034][T17964] comedi: valid board names for pcm3724 driver are: [ 879.669031][T17964] pcm3724 [ 879.672369][T17964] comedi: valid board names for pcl818 driver are: [ 879.681090][T17964] pcl818l [ 879.684289][T17964] pcl818h [ 879.687534][T17964] pcl818hd [ 879.690967][T17964] pcl818hg [ 879.694209][T17964] pcl818 [ 879.772416][T17964] pcl718 [ 879.775420][T17964] pcm3718 [ 879.778538][T17964] comedi: valid board names for pcl816 driver are: [ 879.788450][T17964] pcl816 [ 879.796645][T17964] pcl814b [ 879.820728][T17964] comedi: valid board names for pcl812 driver are: [ 879.827371][T17964] pcl812 [ 879.956572][ T30] audit: type=1400 audit(1757832357.923:780): avc: denied { write } for pid=17973 comm="syz.0.3310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 880.182530][T17984] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3312'. [ 880.210277][T17964] pcl812pg [ 880.215954][T17964] acl8112pg [ 880.220079][T17964] acl8112dg [ 880.227254][T17964] acl8112hg [ 880.230662][T17964] a821pgl [ 880.243442][T17964] a821pglnda [ 880.254186][T17964] a821pgh [ 880.266588][T17964] a822pgl [ 880.381940][T17964] a822pgh [ 880.767266][T17964] a823pgl [ 880.806581][T17964] a823pgh [ 880.815123][T17964] pcl813 [ 880.818064][T17964] pcl813b [ 880.836164][T17964] acl8113 [ 880.859617][T17964] iso813 [ 880.878875][T17964] acl8216 [ 880.893781][T17964] a826pg [ 880.910094][T17964] comedi: valid board names for pcl730 driver are: [ 881.020254][T17964] pcl730 [ 881.039290][T17964] iso730 [ 881.042279][T17964] acl7130 [ 881.048032][T17964] pcm3730 [ 881.062009][T17964] pcl725 [ 881.512793][T17964] p8r8dio [ 881.516904][T17964] acl7225b [ 881.520715][T17964] p16r16dio [ 881.530651][T17964] pcl733 [ 881.533668][T17964] pcl734 [ 881.537388][T17964] opmm-1616-xt [ 881.540928][T17964] pearl-mm-p [ 881.544473][T17964] ir104-pbf [ 881.549599][T17964] comedi: valid board names for pcl726 driver are: [ 881.559874][T17964] pcl726 [ 881.564581][T17964] pcl727 [ 881.569124][T17964] pcl728 [ 881.576311][T17964] acl6126 [ 881.582194][T17964] acl6128 [ 881.587672][T17964] comedi: valid board names for pcl724 driver are: [ 881.602035][T17964] pcl724 [ 881.623081][T17964] pcl722 [ 881.631697][T17964] pcl731 [ 881.634729][T17964] acl7122 [ 881.657301][T17964] acl7124 [ 881.665636][T17964] pet48dio [ 881.680229][T17964] pcmio48 [ 881.754705][T17964] onyx-mm-dio [ 881.767801][T17964] comedi: valid board names for pcl711 driver are: [ 881.778782][ T30] audit: type=1400 audit(1757832359.833:781): avc: denied { search } for pid=18001 comm="syz.0.3319" name="/" dev="configfs" ino=1230 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 881.781673][T17964] pcl711 [ 881.899638][T17964] pcl711b [ 881.902782][T17964] acl8112hg [ 881.932534][T17964] acl8112dg [ 882.371255][T17964] comedi: valid board names for amplc_pc263 driver are: [ 882.443213][T18011] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3317'. [ 882.513863][T17964] pc263 [ 882.658860][T17964] comedi: valid board names for amplc_pc236 driver are: [ 882.665862][T17964] pc36at [ 882.671493][T17964] comedi: valid board names for amplc_dio200 driver are: [ 882.678608][T17964] pc212e [ 882.681547][T17964] pc214e [ 882.684452][T17964] pc215e [ 882.709555][T17964] pc218e [ 882.712510][T17964] pc272e [ 882.715435][T17964] comedi: valid board names for comedi_parport driver are: [ 883.019149][T17964] comedi_parport [ 883.024498][T17964] comedi: valid board names for comedi_test driver are: [ 883.032322][T17964] comedi_test [ 883.037669][T17964] comedi: valid board names for comedi_bond driver are: [ 883.051020][T17964] comedi_bond [ 884.474877][T18036] comedi comedi3: comedi_config --init_data is deprecated [ 884.643163][T18044] : entered promiscuous mode [ 885.449453][T18058] hfsplus: unable to find HFS+ superblock [ 886.531215][T18075] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3339'. [ 886.967557][T18084] netlink: 276 bytes leftover after parsing attributes in process `syz.1.3337'. [ 887.099097][ T7954] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 887.279944][ T7954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 887.305069][ T7954] usb 6-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 887.338333][ T7954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.371898][ T7954] usb 6-1: config 0 descriptor?? [ 887.512853][T18097] tc_dump_action: action bad kind [ 887.548084][T18097] netlink: 'syz.8.3345': attribute type 1 has an invalid length. [ 887.579260][T18097] netlink: 144 bytes leftover after parsing attributes in process `syz.8.3345'. [ 887.600545][T18097] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3345'. [ 887.692793][ T7954] usbhid 6-1:0.0: can't add hid device: -71 [ 887.711932][ T7954] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 887.745238][ T7954] usb 6-1: USB disconnect, device number 32 [ 887.966051][T18100] netlink: 'syz.8.3346': attribute type 39 has an invalid length. [ 888.240635][T11977] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 888.373451][T18112] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3349'. [ 888.412090][T11977] usb 9-1: Using ep0 maxpacket: 8 [ 888.432586][T11977] usb 9-1: unable to get BOS descriptor or descriptor too short [ 888.455948][T11977] usb 9-1: config 0 has an invalid interface number: 88 but max is 0 [ 888.483487][T11977] usb 9-1: config 0 has no interface number 0 [ 888.507293][T11977] usb 9-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 888.537804][T11977] usb 9-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 888.566859][T11977] usb 9-1: config 0 interface 88 has no altsetting 0 [ 888.615217][T11977] usb 9-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 888.640762][T11977] usb 9-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 888.668257][T11977] usb 9-1: Product: syz [ 888.672521][T11977] usb 9-1: SerialNumber: syz [ 888.695523][T11977] usb 9-1: config 0 descriptor?? [ 889.195554][T11977] input: syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.88/input/input59 [ 889.379668][T11977] usb 9-1: USB disconnect, device number 16 [ 890.650838][ T30] audit: type=1400 audit(1757832369.145:782): avc: denied { read } for pid=18125 comm="syz.0.3354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 892.696244][T18157] netlink: 'syz.0.3360': attribute type 4 has an invalid length. [ 892.709108][T18157] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3360'. [ 892.722231][T18157] lo: left promiscuous mode [ 892.728841][T18157] lo: left allmulticast mode [ 894.308939][T18184] ptrace attach of "./syz-executor exec"[14341] was attempted by "  \x07   8    \x09       \x0c  "[1 [ 894.444738][ T7954] usb 8-1: new full-speed USB device number 33 using dummy_hcd [ 894.855739][ T7954] usb 8-1: config 0 has an invalid interface number: 128 but max is 0 [ 894.873512][ T7954] usb 8-1: config 0 has no interface number 0 [ 894.895571][ T7954] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 894.907907][ T7954] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.924758][ T7954] usb 8-1: Product: syz [ 894.934133][ T7954] usb 8-1: Manufacturer: syz [ 894.941662][ T7954] usb 8-1: SerialNumber: syz [ 894.956960][ T7954] usb 8-1: config 0 descriptor?? [ 895.108886][T11977] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 895.381994][T11977] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 895.418363][T11977] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 895.448636][T11977] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 895.458038][T11977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.466157][T11977] usb 1-1: Product: syz [ 895.477761][ T7954] usb 8-1: Firmware version (0.0) predates our first public release. [ 895.484533][T11977] usb 1-1: Manufacturer: syz [ 895.514013][ T7954] usb 8-1: Please update to version 0.2 or newer [ 895.531234][T11977] usb 1-1: SerialNumber: syz [ 895.563390][T18205] hfsplus: unable to find HFS+ superblock [ 895.579597][ T7954] usb 8-1: Firmware: build [ 895.719334][T11977] usb 1-1: config 0 descriptor?? [ 895.837222][T18196] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 895.854616][T18196] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 895.891336][ T7954] usb 8-1: USB disconnect, device number 33 [ 896.019949][T18211] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3376'. [ 896.164318][T18196] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 896.185233][T18196] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 896.680591][T11977] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 896.759294][T18226] No control pipe specified [ 896.891375][T11977] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 896.956806][T11977] usb 1-1: USB disconnect, device number 39 [ 900.306899][T18279] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3395'. [ 901.140930][T18297] binder: 18296:18297 ioctl 82307202 2000000005c0 returned -22 [ 901.577604][T18291] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3397'. [ 901.716778][T18312] hfsplus: unable to find HFS+ superblock [ 901.772771][T11977] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 902.083823][T11977] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 902.095110][T11977] usb 8-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 902.104536][T11977] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.287811][T11977] usb 8-1: config 0 descriptor?? [ 903.809302][T18315] netlink: 'syz.1.3404': attribute type 1 has an invalid length. [ 903.817933][T18315] netlink: 208 bytes leftover after parsing attributes in process `syz.1.3404'. [ 903.828605][T18315] netlink: 'syz.1.3404': attribute type 1 has an invalid length. [ 903.836695][T18315] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3404'. [ 903.853018][ T30] audit: type=1400 audit(1757832381.921:783): avc: denied { read } for pid=18299 comm="syz.7.3403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 904.253100][ T7946] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 904.515441][T11977] usbhid 8-1:0.0: can't add hid device: -71 [ 904.521494][T11977] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 905.004944][T11977] usb 8-1: USB disconnect, device number 34 [ 905.011485][ T7946] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 905.021165][ T7946] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 905.048611][ T7946] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 905.062373][ T7946] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 905.074383][ T7946] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.084946][ T7946] usb 1-1: config 0 descriptor?? [ 905.455387][ T7946] ath6kl: Failed to submit usb control message: -71 [ 905.512789][ T7946] ath6kl: unable to send the bmi data to the device: -71 [ 905.587119][ T7946] ath6kl: Unable to send get target info: -71 [ 905.701060][ T7946] ath6kl: Failed to init ath6kl core: -71 [ 905.723958][ T7946] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 905.801358][ T7946] usb 1-1: USB disconnect, device number 40 [ 907.553518][T18371] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3421'. [ 907.565562][ T30] audit: type=1400 audit(1757832386.908:784): avc: denied { ioctl } for pid=18358 comm="syz.5.3419" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 907.593088][T18365] random: crng reseeded on system resumption [ 907.605052][ T30] audit: type=1400 audit(1757832386.939:785): avc: denied { write } for pid=18358 comm="syz.5.3419" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 907.652587][T17733] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 907.748277][T18374] netlink: 'syz.1.3422': attribute type 10 has an invalid length. [ 907.772644][T18374] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 909.327606][T18389] hub 9-0:1.0: USB hub found [ 909.334737][T18389] hub 9-0:1.0: 1 port detected [ 909.428937][ T7946] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 909.597000][ T7946] usb 2-1: Using ep0 maxpacket: 16 [ 909.604542][ T7946] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 909.614379][ T7946] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 909.721144][ T7946] usb 2-1: Product: syz [ 909.728485][ T7946] usb 2-1: SerialNumber: syz [ 909.734333][ T7946] usb 2-1: config 0 descriptor?? [ 909.745738][ T7946] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 909.752979][ T7946] dvb_usb_af9015 2-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 909.767851][ T7946] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 909.821078][ T7946] dvb_usb_af9035 2-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 910.045837][ T7946] usb 2-1: USB disconnect, device number 28 [ 910.272244][ T30] audit: type=1326 audit(1757832389.700:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18390 comm="syz.8.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4898eba9 code=0x7ffc0000 [ 910.318785][ T30] audit: type=1326 audit(1757832389.774:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18390 comm="syz.8.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4898eba9 code=0x7ffc0000 [ 910.398547][ T30] audit: type=1326 audit(1757832389.879:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18390 comm="syz.8.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fde4898eba9 code=0x7ffc0000 [ 910.443097][ T30] audit: type=1326 audit(1757832389.910:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18390 comm="syz.8.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4898eba9 code=0x7ffc0000 [ 910.504559][ T30] audit: type=1326 audit(1757832389.910:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18390 comm="syz.8.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4898eba9 code=0x7ffc0000 [ 911.313546][ T30] audit: type=1400 audit(1757832390.656:791): avc: denied { ioctl } for pid=18407 comm="syz.0.3432" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 911.706515][T18417] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3435'. [ 911.807085][ T30] audit: type=1326 audit(1757832391.338:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18390 comm="syz.8.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fde4898eba9 code=0x7ffc0000 [ 911.854169][ T30] audit: type=1326 audit(1757832391.401:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18390 comm="syz.8.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4898eba9 code=0x7ffc0000 [ 911.922548][ T30] audit: type=1326 audit(1757832391.443:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18390 comm="syz.8.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4898eba9 code=0x7ffc0000 [ 912.556808][ T30] audit: type=1326 audit(1757832391.632:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18390 comm="syz.8.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fde4898eba9 code=0x7ffc0000 [ 912.766823][T18431] syzkaller0: entered promiscuous mode [ 912.785191][T18431] syzkaller0: entered allmulticast mode [ 912.820261][T18431] tipc: Started in network mode [ 912.845402][T18431] tipc: Node identity d2a9c719d498, cluster identity 4711 [ 912.862559][T18431] tipc: Enabled bearer , priority 0 [ 912.878811][T18430] tipc: Resetting bearer [ 912.944785][T18430] tipc: Disabling bearer [ 915.900533][T18478] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3450'. [ 916.089156][T18474] bridge0: port 2(bridge_slave_1) entered disabled state [ 916.098055][T18474] bridge0: port 1(bridge_slave_0) entered disabled state [ 916.206485][T18485] FAULT_INJECTION: forcing a failure. [ 916.206485][T18485] name failslab, interval 1, probability 0, space 0, times 0 [ 916.221247][T18485] CPU: 0 UID: 0 PID: 18485 Comm: syz.7.3452 Not tainted syzkaller #0 PREEMPT(full) [ 916.221270][T18485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 916.221280][T18485] Call Trace: [ 916.221287][T18485] [ 916.221294][T18485] dump_stack_lvl+0x16c/0x1f0 [ 916.221320][T18485] should_fail_ex+0x512/0x640 [ 916.221341][T18485] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 916.221370][T18485] should_failslab+0xc2/0x120 [ 916.221389][T18485] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 916.221407][T18485] ? __alloc_skb+0x2b2/0x380 [ 916.221431][T18485] __alloc_skb+0x2b2/0x380 [ 916.221449][T18485] ? __pfx___alloc_skb+0x10/0x10 [ 916.221472][T18485] ? __pfx_nf_tables_abort+0x10/0x10 [ 916.221500][T18485] netlink_ack+0x15d/0xb80 [ 916.221522][T18485] ? kasan_save_track+0x14/0x30 [ 916.221546][T18485] nfnetlink_rcv_batch+0x1423/0x2330 [ 916.221575][T18485] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 916.221587][T18485] ? stack_depot_save_flags+0x29/0x9c0 [ 916.221610][T18485] ? avc_has_perm_noaudit+0x149/0x3b0 [ 916.221636][T18485] ? __nla_parse+0x40/0x60 [ 916.221653][T18485] nfnetlink_rcv+0x3c1/0x430 [ 916.221663][T18485] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 916.221673][T18485] ? selinux_netlink_send+0x578/0x830 [ 916.221687][T18485] ? is_vmalloc_addr+0x86/0xa0 [ 916.221699][T18485] netlink_unicast+0x5a7/0x870 [ 916.221715][T18485] ? __pfx_netlink_unicast+0x10/0x10 [ 916.221734][T18485] netlink_sendmsg+0x8d1/0xdd0 [ 916.221758][T18485] ? __pfx_netlink_sendmsg+0x10/0x10 [ 916.221789][T18485] ____sys_sendmsg+0xa95/0xc70 [ 916.221813][T18485] ? copy_msghdr_from_user+0x10a/0x160 [ 916.221832][T18485] ? __pfx_____sys_sendmsg+0x10/0x10 [ 916.221854][T18485] ___sys_sendmsg+0x134/0x1d0 [ 916.221871][T18485] ? __pfx____sys_sendmsg+0x10/0x10 [ 916.221900][T18485] __sys_sendmsg+0x16d/0x220 [ 916.221914][T18485] ? __pfx___sys_sendmsg+0x10/0x10 [ 916.221926][T18485] ? __pfx_bpf_trace_run2+0x10/0x10 [ 916.221941][T18485] ? syscall_trace_enter+0x1cb/0x240 [ 916.221962][T18485] ? rcu_is_watching+0x12/0xc0 [ 916.221977][T18485] do_syscall_64+0xcd/0x4e0 [ 916.221992][T18485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.222003][T18485] RIP: 0033:0x7f6b80d8eba9 [ 916.222012][T18485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 916.222023][T18485] RSP: 002b:00007f6b81b6c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 916.222033][T18485] RAX: ffffffffffffffda RBX: 00007f6b80fd5fa0 RCX: 00007f6b80d8eba9 [ 916.222040][T18485] RDX: 0000000000040880 RSI: 0000200000000180 RDI: 0000000000000003 [ 916.222046][T18485] RBP: 00007f6b81b6c090 R08: 0000000000000000 R09: 0000000000000000 [ 916.222052][T18485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 916.222058][T18485] R13: 00007f6b80fd6038 R14: 00007f6b80fd5fa0 R15: 00007ffedea44218 [ 916.222072][T18485] [ 916.265246][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 916.267620][ C0] vkms_vblank_simulate: vblank timer overrun [ 916.519332][ C0] vkms_vblank_simulate: vblank timer overrun [ 916.526103][ C0] hrtimer: interrupt took 314290131 ns [ 916.626653][ C0] vkms_vblank_simulate: vblank timer overrun [ 916.655256][T18474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 916.667844][T18474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 916.737600][T18490] hfsplus: unable to find HFS+ superblock [ 917.573321][ T7468] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.583128][ T7468] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.592630][ T7468] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.603123][ T7468] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.313827][T18512] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3461'. [ 921.697854][T18548] bridge1: entered promiscuous mode [ 921.703083][T18548] bridge1: entered allmulticast mode [ 921.732102][T18550] bond2: left promiscuous mode [ 921.759858][T18550] vcan1: left promiscuous mode [ 922.846081][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 922.846124][ T30] audit: type=1326 audit(1757832402.949:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18572 comm="syz.5.3476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7cd38eba9 code=0x7ffc0000 [ 923.033614][T18579] overlayfs: failed to resolve './file1': -2 [ 923.033687][ T30] audit: type=1326 audit(1757832403.001:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18572 comm="syz.5.3476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7cd38eba9 code=0x7ffc0000 [ 923.066227][ T30] audit: type=1326 audit(1757832403.064:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18572 comm="syz.5.3476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7ff7cd38eba9 code=0x7ffc0000 [ 923.368603][ T30] audit: type=1326 audit(1757832403.064:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18572 comm="syz.5.3476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7cd38eba9 code=0x7ffc0000 [ 923.397762][ T30] audit: type=1326 audit(1757832403.064:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18572 comm="syz.5.3476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7cd38eba9 code=0x7ffc0000 [ 923.703008][ T30] audit: type=1326 audit(1757832403.096:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18572 comm="syz.5.3476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7ff7cd38eba9 code=0x7ffc0000 [ 923.726371][ C0] vkms_vblank_simulate: vblank timer overrun [ 923.756472][T18579] __vm_enough_memory: pid: 18579, comm: syz.8.3467, bytes: 21199878361088 not enough memory for the allocation [ 923.756496][ T30] audit: type=1326 audit(1757832403.096:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18572 comm="syz.5.3476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7cd38eba9 code=0x7ffc0000 [ 923.787669][ T30] audit: type=1326 audit(1757832403.096:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18572 comm="syz.5.3476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7ff7cd38eba9 code=0x7ffc0000 [ 923.815712][ C0] vkms_vblank_simulate: vblank timer overrun [ 923.865149][ T30] audit: type=1326 audit(1757832403.096:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18572 comm="syz.5.3476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7cd38eba9 code=0x7ffc0000 [ 923.941752][T18592] netlink: 272 bytes leftover after parsing attributes in process `syz.1.3481'. [ 923.973553][ T30] audit: type=1326 audit(1757832403.096:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18572 comm="syz.5.3476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7cd38eba9 code=0x7ffc0000 [ 924.647190][T18596] hfsplus: unable to find HFS+ superblock [ 925.358503][T18611] netlink: 'syz.7.3486': attribute type 10 has an invalid length. [ 925.370446][T18611] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3486'. [ 925.390827][T18611] team0: entered promiscuous mode [ 925.396168][T18611] team0: entered allmulticast mode [ 925.510980][T18611] 8021q: adding VLAN 0 to HW filter on device team0 [ 925.543307][ T7954] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 925.751902][T18611] bridge0: port 1(team0) entered blocking state [ 925.778825][T18611] bridge0: port 1(team0) entered disabled state [ 925.895722][ T7954] usb 6-1: Using ep0 maxpacket: 32 [ 925.904957][ T7954] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 925.916762][ T7954] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 925.943373][ T7954] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 925.952865][ T7954] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.965540][ T7954] usb 6-1: Product: э [ 925.974455][ T7954] usb 6-1: Manufacturer: 龡ᓋ蔀 [ 925.981150][ T7954] usb 6-1: SerialNumber: syz [ 926.305311][ T7954] cdc_ncm 6-1:1.0: bind() failure [ 926.332120][ T7954] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 926.810523][T18625] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3491'. [ 926.826971][T18627] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3491'. [ 926.844532][ T7954] cdc_ncm 6-1:1.1: bind() failure [ 926.860602][ T7954] usb 6-1: USB disconnect, device number 33 [ 927.121097][T18639] netlink: 'syz.7.3496': attribute type 10 has an invalid length. [ 927.150527][T18639] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 927.165306][T18639] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3496'. [ 927.177192][T18639] bridge0: port 1(team0) entered disabled state [ 927.684344][T18639] bond0: (slave bridge0): Releasing backup interface [ 927.824257][T18642] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 927.834584][T18642] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 927.845417][T18642] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 927.857723][T18643] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 927.867120][T18643] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 928.342865][T18643] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 928.743932][T18659] netlink: 'syz.5.3501': attribute type 10 has an invalid length. [ 928.876450][T18661] hfsplus: unable to find HFS+ superblock [ 929.476754][T18680] wg0 speed is unknown, defaulting to 1000 [ 929.698184][T10681] Bluetooth: hci0: command 0x1003 tx timeout [ 929.753294][T17733] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 930.410663][ T7946] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 930.611536][ T7946] usb 8-1: Using ep0 maxpacket: 32 [ 930.644037][T18702] hfsplus: unable to find HFS+ superblock [ 930.848716][ T7946] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 930.882425][ T7946] usb 8-1: config 0 has no interface number 0 [ 930.913018][ T7946] usb 8-1: config 0 interface 184 has no altsetting 0 [ 930.968068][ T7946] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 930.986732][ T7946] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.011034][ T7946] usb 8-1: Product: syz [ 931.021151][ T7946] usb 8-1: Manufacturer: syz [ 931.028972][ T7946] usb 8-1: SerialNumber: syz [ 931.126688][ T7946] usb 8-1: config 0 descriptor?? [ 931.156411][ T7946] smsc75xx v1.0.0 [ 931.354587][T18710] netlink: 'syz.1.3517': attribute type 39 has an invalid length. [ 931.415896][T18712] loop2: detected capacity change from 0 to 7 [ 931.426273][T18712] Dev loop2: unable to read RDB block 7 [ 931.436142][T18712] loop2: unable to read partition table [ 931.443293][T18712] loop2: partition table beyond EOD, truncated [ 931.456384][T18712] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 931.622598][T18707] [U] [ 931.645225][T18717] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3516'. [ 931.661881][T18717] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62992 sclass=netlink_route_socket pid=18717 comm=syz.8.3516 [ 931.715567][T11981] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 931.870248][T17733] Bluetooth: hci4: unexpected event for opcode 0x200c [ 931.877567][T11981] usb 2-1: Using ep0 maxpacket: 8 [ 932.071661][ T7946] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 932.085936][ T7946] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 932.097961][T11981] usb 2-1: unable to get BOS descriptor or descriptor too short [ 932.114397][T11981] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 932.122716][T11981] usb 2-1: config 0 has no interface number 0 [ 932.131556][T11981] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 932.149820][T11981] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 932.176615][T11981] usb 2-1: config 0 interface 88 has no altsetting 0 [ 932.188525][T11981] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 932.200269][T11981] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 932.215401][T11981] usb 2-1: Product: syz [ 932.220735][T11981] usb 2-1: SerialNumber: syz [ 932.345240][T11981] usb 2-1: config 0 descriptor?? [ 932.559287][T11981] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input62 [ 932.623089][T11981] usb 2-1: USB disconnect, device number 29 [ 932.652143][T11977] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 932.811082][T11977] usb 1-1: device descriptor read/64, error -71 [ 933.051064][ T7946] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 933.065363][T11977] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 933.079814][ T7946] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 933.103170][ T7946] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 933.117103][ T7946] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 933.127235][ T7946] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -71 [ 933.138694][ T7946] usb 8-1: USB disconnect, device number 35 [ 933.211102][T11977] usb 1-1: device descriptor read/64, error -71 [ 933.338498][T11977] usb usb1-port1: attempt power cycle [ 934.106834][T11977] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 934.980756][T11977] usb 1-1: device descriptor read/8, error -71 [ 935.330444][T11977] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 935.374104][T18767] ceph: No mds server is up or the cluster is laggy [ 935.383071][T18771] ceph: No mds server is up or the cluster is laggy [ 935.402102][ T5844] libceph: connect (1)[c::]:6789 error -101 [ 935.408173][ T5844] libceph: mon0 (1)[c::]:6789 connect error [ 935.416108][T17942] libceph: connect (1)[b::]:6789 error -101 [ 935.473572][T17942] libceph: mon0 (1)[b::]:6789 connect error [ 935.668168][T11977] usb 1-1: device not accepting address 44, error -71 [ 935.683305][T11977] usb usb1-port1: unable to enumerate USB device [ 935.961180][T18791] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 936.321092][T18788] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 936.327631][T18788] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 936.339439][T18788] vhci_hcd vhci_hcd.0: Device attached [ 936.574380][T11981] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 936.782158][T18797] wireguard0: entered promiscuous mode [ 936.878384][T18797] wireguard0: entered allmulticast mode [ 937.211817][T18789] vhci_hcd: connection closed [ 937.213274][ T7474] vhci_hcd: stop threads [ 937.278675][ T7474] vhci_hcd: release socket [ 937.284416][ T7474] vhci_hcd: disconnect device [ 937.400632][T18812] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3544'. [ 937.479351][T18812] @: renamed from vlan0 [ 937.608350][T18821] hfsplus: unable to find HFS+ superblock [ 937.716758][ T7954] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 938.794727][ T7954] usb 9-1: unable to get BOS descriptor or descriptor too short [ 938.805075][ T7954] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 938.821509][ T7954] usb 9-1: can't read configurations, error -71 [ 940.342253][T18848] netlink: 'syz.8.3557': attribute type 1 has an invalid length. [ 940.352713][T18848] netlink: 276 bytes leftover after parsing attributes in process `syz.8.3557'. [ 940.357180][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 940.357192][ T30] audit: type=1400 audit(1757832421.320:828): avc: denied { setattr } for pid=17732 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 940.815175][T17733] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 941.060319][ T7954] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 941.224563][ T7954] usb 6-1: config 0 has an invalid interface number: 63 but max is 0 [ 941.234674][ T7954] usb 6-1: config 0 has no interface number 0 [ 941.251600][ T7954] usb 6-1: config 0 interface 63 has no altsetting 0 [ 941.259265][ T7954] usb 6-1: New USB device found, idVendor=04dd, idProduct=8001, bcdDevice=c0.12 [ 941.270049][ T7954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.290661][ T7954] usb 6-1: config 0 descriptor?? [ 941.395336][ T7954] safe_serial 6-1:0.63: safe_serial converter detected [ 941.832311][ T7954] safe_serial 6-1:0.63: probe with driver safe_serial failed with error -22 [ 942.128182][T11981] vhci_hcd: vhci_device speed not set [ 942.385017][T18880] futex_wake_op: syz.8.3564 tries to shift op by 36; fix this program [ 944.766752][T11981] usb 6-1: USB disconnect, device number 34 [ 944.928079][T18889] hfsplus: unable to find HFS+ superblock [ 945.273670][T18893] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 945.294265][T18894] netlink: 'syz.8.3568': attribute type 10 has an invalid length. [ 946.488836][T11981] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 946.723020][T11981] usb 8-1: device descriptor read/64, error -71 [ 946.985476][T11981] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 947.325464][T18920] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3579'. [ 947.928594][T11981] usb 8-1: device descriptor read/64, error -71 [ 948.036584][T11981] usb usb8-port1: attempt power cycle [ 948.233568][ T7954] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 948.309925][T11981] usb usb8-port1: Cannot enable. Maybe the USB cable is bad? [ 948.394993][ T7954] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 948.425557][ T7954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.439544][ T7954] usb 1-1: config 0 descriptor?? [ 948.453964][ T7954] cp210x 1-1:0.0: cp210x converter detected [ 948.471516][T11981] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 948.501168][T11981] usb 8-1: Using ep0 maxpacket: 32 [ 948.534191][T11981] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 948.606307][T11981] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.756938][T18841] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 948.786414][T11981] usb 8-1: config 0 descriptor?? [ 948.854464][ T7954] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 948.869423][ T92] kernel write not supported for file /921/oom_adj (pid: 92 comm: kworker/1:2) [ 948.907228][ T7954] usb 1-1: cp210x converter now attached to ttyUSB0 [ 948.969182][T18841] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 948.983488][T18841] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 948.993480][T18841] usb 9-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 949.006254][T18841] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.017850][T18841] usb 9-1: config 0 descriptor?? [ 949.037302][T11981] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 949.046464][T11981] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 949.152221][T18927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 949.167372][T11981] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 949.174559][T11981] usb 8-1: media controller created [ 949.175567][T18927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 949.206804][T11981] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 949.218813][ T7954] usb 1-1: USB disconnect, device number 45 [ 949.231216][ T7954] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 949.355367][T11981] az6027: usb out operation failed. (-71) [ 949.371880][T11981] az6027: usb out operation failed. (-71) [ 949.381773][ T7954] cp210x 1-1:0.0: device disconnected [ 949.387424][T11981] stb0899_attach: Driver disabled by Kconfig [ 949.403521][T11981] az6027: no front-end attached [ 949.403521][T11981] [ 949.412800][T11981] az6027: usb out operation failed. (-71) [ 949.949172][T11981] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 949.959408][T11981] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input63 [ 949.972223][T11981] dvb-usb: schedule remote query interval to 400 msecs. [ 949.980862][T11981] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 949.992983][T11981] usb 8-1: USB disconnect, device number 39 [ 950.162906][T18949] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3588'. [ 950.199497][T11981] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 950.453771][T18959] netlink: 'syz.5.3591': attribute type 2 has an invalid length. [ 950.461632][T18959] netlink: 'syz.5.3591': attribute type 11 has an invalid length. [ 950.469630][T18959] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3591'. [ 952.605159][T11977] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 952.863603][T11977] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 952.873579][T11977] usb 6-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 952.889170][T18841] usbhid 9-1:0.0: can't add hid device: -71 [ 952.895086][T11977] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.925139][T11977] usb 6-1: config 0 descriptor?? [ 952.974122][T18994] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 954.482133][T18841] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 954.508501][ T30] audit: type=1400 audit(1757832435.115:829): avc: denied { setopt } for pid=18981 comm="syz.5.3596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 954.547941][T18841] usb 9-1: USB disconnect, device number 19 [ 956.396852][T11977] usbhid 6-1:0.0: can't add hid device: -71 [ 956.482527][T11977] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 956.520566][T18841] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 956.542727][T11977] usb 6-1: USB disconnect, device number 35 [ 956.642063][T10679] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 956.652832][T10679] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 956.662006][T10679] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 956.671348][T10679] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 956.681342][T10679] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 956.699673][T18841] usb 9-1: Using ep0 maxpacket: 8 [ 956.723173][T18841] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 956.767224][T18841] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.851982][T19017] netlink: 'syz.0.3604': attribute type 2 has an invalid length. [ 956.859912][T19017] netlink: 'syz.0.3604': attribute type 11 has an invalid length. [ 956.867990][T19017] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3604'. [ 957.057867][T19013] wg0 speed is unknown, defaulting to 1000 [ 957.058583][T18841] pvrusb2: Hardware description: Terratec Grabster AV400 [ 957.067146][T19019] netlink: 51 bytes leftover after parsing attributes in process `syz.7.3606'. [ 957.095644][T18841] pvrusb2: ********** [ 957.099670][T18841] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 957.137928][T18841] pvrusb2: Important functionality might not be entirely working. [ 957.218190][T18841] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 957.805628][T18841] pvrusb2: ********** [ 957.820377][T18841] usb 9-1: USB disconnect, device number 20 [ 957.828269][ T2327] pvrusb2: Invalid write control endpoint [ 957.871039][T19029] netlink: 'syz.5.3608': attribute type 39 has an invalid length. [ 957.944274][ T2327] pvrusb2: Invalid write control endpoint [ 957.965312][ T2327] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 957.983503][T19013] chnl_net:caif_netlink_parms(): no params data found [ 958.043548][ T2327] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 958.074507][ T2327] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 958.120833][ T2327] pvrusb2: Device being rendered inoperable [ 958.135054][ T2327] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 958.145355][ T2327] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 958.158696][T11977] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 958.195498][ T2327] pvrusb2: Attached sub-driver cx25840 [ 958.201997][ T2327] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 958.215393][ T2327] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 958.255904][T19013] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.266552][T19013] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.292428][T19013] bridge_slave_0: entered allmulticast mode [ 958.311231][T19013] bridge_slave_0: entered promiscuous mode [ 958.325980][T11977] usb 6-1: Using ep0 maxpacket: 8 [ 958.344444][T19013] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.353181][T11977] usb 6-1: unable to get BOS descriptor or descriptor too short [ 958.363995][T11977] usb 6-1: config 0 has an invalid interface number: 88 but max is 0 [ 958.384153][T11977] usb 6-1: config 0 has no interface number 0 [ 958.385276][T19013] bridge0: port 2(bridge_slave_1) entered disabled state [ 958.399565][T11977] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 958.410641][T11977] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 958.422364][T11977] usb 6-1: config 0 interface 88 has no altsetting 0 [ 958.430638][T19013] bridge_slave_1: entered allmulticast mode [ 958.440828][T11977] usb 6-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 958.458512][T19013] bridge_slave_1: entered promiscuous mode [ 958.465017][T11977] usb 6-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 958.473374][T11977] usb 6-1: Product: syz [ 958.477697][T11977] usb 6-1: SerialNumber: syz [ 958.488028][T11977] usb 6-1: config 0 descriptor?? [ 958.496692][T19041] netlink: 748 bytes leftover after parsing attributes in process `syz.0.3610'. [ 958.506598][T19041] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 958.533248][T19013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 958.548538][T19043] syz_tun: entered allmulticast mode [ 958.557033][T19013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 958.575141][T19043] dvmrp8: entered allmulticast mode [ 958.606964][T19013] team0: Port device team_slave_0 added [ 958.613085][T19042] syz_tun: left allmulticast mode [ 958.619870][T19013] team0: Port device team_slave_1 added [ 958.651315][T19013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 958.658931][T19013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 958.688743][T19013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 958.692521][T17733] Bluetooth: hci0: command tx timeout [ 958.703913][T11977] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.88/input/input64 [ 958.717726][T19013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 958.724677][ T30] audit: type=1400 audit(1757832440.605:830): avc: denied { mounton } for pid=19047 comm="syz.7.3613" path="mnt:[4026532794]" dev="nsfs" ino=4026532794 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 958.748301][ C1] vkms_vblank_simulate: vblank timer overrun [ 958.755495][T19013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 958.758539][T11977] usb 6-1: USB disconnect, device number 36 [ 958.781397][ C1] vkms_vblank_simulate: vblank timer overrun [ 958.781625][T19013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 958.826859][T19013] hsr_slave_0: entered promiscuous mode [ 958.833236][T19013] hsr_slave_1: entered promiscuous mode [ 958.839326][T19013] debugfs: 'hsr0' already exists in 'hsr' [ 958.845962][T19013] Cannot create hsr debugfs directory [ 958.853977][ T5844] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 959.000915][ T5844] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 959.011705][ T5844] usb 1-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 959.033100][ T5844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.044362][ T5844] usb 1-1: config 0 descriptor?? [ 960.654510][T17733] Bluetooth: hci0: command tx timeout [ 960.686014][ T5844] usbhid 1-1:0.0: can't add hid device: -71 [ 960.701104][ T5844] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 960.711474][ T5844] usb 1-1: USB disconnect, device number 46 [ 960.753592][T19061] loop6: detected capacity change from 0 to 2560 [ 960.794423][T19013] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 960.829401][T19013] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 960.869615][T19013] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 960.889534][T19013] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 961.058395][T19013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 961.130225][T19013] 8021q: adding VLAN 0 to HW filter on device team0 [ 961.142743][ T7474] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.149837][ T7474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 961.176406][T19013] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 961.196480][T19013] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 961.231611][ T7474] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.238730][ T7474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 961.527077][T19013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 961.642510][T19013] veth0_vlan: entered promiscuous mode [ 961.731561][T19013] veth1_vlan: entered promiscuous mode [ 961.957099][T19013] veth0_macvtap: entered promiscuous mode [ 962.066458][T19093] hfsplus: unable to find HFS+ superblock [ 962.285473][T19013] veth1_macvtap: entered promiscuous mode [ 962.381694][T19013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 962.569228][ T30] audit: type=1400 audit(1757832444.573:831): avc: denied { getopt } for pid=19096 comm="syz.0.3624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 962.659601][T17733] Bluetooth: hci0: command tx timeout [ 962.740811][T19013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 962.807694][T19095] netlink: 'syz.8.3623': attribute type 4 has an invalid length. [ 962.845415][ T7474] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.913467][ T7474] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.941734][ T7474] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.969205][T19099] netlink: 'syz.8.3623': attribute type 4 has an invalid length. [ 963.001805][ T7474] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.191669][T19107] netlink: 'syz.7.3627': attribute type 21 has an invalid length. [ 963.360022][T19107] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3627'. [ 964.197287][ T30] audit: type=1400 audit(1757832446.358:832): avc: denied { write } for pid=19111 comm="syz.0.3628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 964.325554][ T7474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 964.353974][ T7474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 964.412034][ T30] audit: type=1400 audit(1757832446.400:833): avc: denied { read } for pid=19111 comm="syz.0.3628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 964.694030][T17733] Bluetooth: hci0: command tx timeout [ 965.068755][ T7482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 965.118161][ T7482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 965.324497][T19130] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3634'. [ 965.450747][T19137] netlink: 'syz.2.3602': attribute type 2 has an invalid length. [ 965.458918][T19137] netlink: 'syz.2.3602': attribute type 11 has an invalid length. [ 965.466896][T19137] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3602'. [ 966.110026][ T30] audit: type=1400 audit(1757832448.353:834): avc: denied { map } for pid=19139 comm="syz.8.3636" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 966.159153][T19147] fuse: Unknown parameter '' [ 966.414600][ T30] audit: type=1800 audit(1757832448.689:835): pid=19143 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.3635" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 967.392228][T19164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3644'. [ 967.401741][T19164] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3644'. [ 968.015048][T19186] netlink: 'syz.5.3650': attribute type 12 has an invalid length. [ 968.217753][ T5844] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 968.284359][ T7946] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 968.292234][T17942] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 968.420009][ T5844] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 968.434600][ T5844] usb 8-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 968.443795][ T5844] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.456150][ T5844] usb 8-1: config 0 descriptor?? [ 968.484362][T17942] usb 9-1: device descriptor read/64, error -71 [ 968.503026][ T7946] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 968.515622][ T7946] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 968.525548][ T7946] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 968.558311][ T7946] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 968.568102][ T7946] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.577505][ T7946] usb 6-1: Product: syz [ 968.582474][ T7946] usb 6-1: Manufacturer: syz [ 968.587475][ T7946] usb 6-1: SerialNumber: syz [ 968.589344][ T7954] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 968.594818][ T7946] usb 6-1: config 0 descriptor?? [ 968.770065][T17942] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 968.887419][ T7954] usb 1-1: Using ep0 maxpacket: 8 [ 968.923610][ T7954] usb 1-1: unable to get BOS descriptor or descriptor too short [ 968.947801][ T7954] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 968.960905][ T7946] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 968.968130][ T7954] usb 1-1: config 1 interface 0 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 969.008289][T17942] usb 9-1: device descriptor read/64, error -71 [ 969.735290][T17942] usb usb9-port1: attempt power cycle [ 970.087019][ T7954] usb 1-1: config 1 interface 0 has no altsetting 0 [ 970.139577][ T7954] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.40 [ 970.150883][ T7954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.183204][ T7954] usb 1-1: Product: syz [ 970.189341][ T7954] usb 1-1: Manufacturer: syz [ 970.204042][ T7954] usb 1-1: SerialNumber: syz [ 970.289915][ T5844] usbhid 8-1:0.0: can't add hid device: -71 [ 970.299287][ T5844] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 970.320360][ T5844] usb 8-1: USB disconnect, device number 40 [ 970.341860][T17942] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 970.361550][T17942] usb 9-1: device descriptor read/8, error -71 [ 970.621325][T19198] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=19198 comm=syz.0.3652 [ 970.640559][T19198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3652'. [ 970.672803][T17733] block nbd0: Receive control failed (result -32) [ 970.675245][T17942] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 971.124444][T17942] usb 9-1: device not accepting address 24, error -71 [ 971.171487][T17942] usb usb9-port1: unable to enumerate USB device [ 971.408356][T18841] usb 6-1: USB disconnect, device number 37 [ 971.571754][T19205] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3656'. [ 971.821350][T19211] random: crng reseeded on system resumption [ 972.470076][ T7954] usb 1-1: USB disconnect, device number 47 [ 973.197538][T19229] can0: slcan on ptm1. [ 973.225305][T19232] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3663'. [ 973.676194][T19240] veth0: entered promiscuous mode [ 973.682018][T19240] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3666'. [ 973.696695][T19221] can0 (unregistered): slcan off ptm1. [ 973.721887][T19240] veth0 (unregistering): left promiscuous mode [ 973.749392][T19244] netlink: 84 bytes leftover after parsing attributes in process `syz.7.3665'. [ 973.879113][T19245] wg0 speed is unknown, defaulting to 1000 [ 973.978003][T19253] netlink: 316 bytes leftover after parsing attributes in process `syz.8.3669'. [ 974.019094][ T7954] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 974.172949][ T7954] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 974.185994][ T7954] usb 6-1: config 1 has no interface number 0 [ 974.349170][ T7954] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 974.361722][ T7954] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 974.486251][ T7954] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 974.651119][ T30] audit: type=1400 audit(1757832457.328:836): avc: denied { write } for pid=19260 comm="syz.8.3672" path="socket:[72949]" dev="sockfs" ino=72949 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 974.758421][ T7954] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 974.771356][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 974.783634][ T7954] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.792571][ T7954] usb 6-1: Product: syz [ 974.796807][ T7954] usb 6-1: Manufacturer: syz [ 974.804724][ T7954] usb 6-1: SerialNumber: syz [ 974.812920][T19246] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 975.349891][ T30] audit: type=1400 audit(1757832458.053:837): avc: denied { ioctl } for pid=19270 comm="syz.2.3674" path="socket:[72954]" dev="sockfs" ino=72954 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 975.780152][ T7954] usb 6-1: Error in usbnet_get_endpoints (-71) [ 975.816986][ T7954] usb 6-1: USB disconnect, device number 38 [ 975.940320][T19276] netlink: 'syz.7.3676': attribute type 21 has an invalid length. [ 975.948440][T19276] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3676'. [ 976.971180][T19278] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 977.128186][T19292] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3680'. [ 978.073530][T19304] syzkaller0: entered promiscuous mode [ 978.086849][T19304] syzkaller0: entered allmulticast mode [ 978.136980][T19304] tipc: Enabled bearer , priority 0 [ 978.267132][T19297] netlink: 1053 bytes leftover after parsing attributes in process `syz.2.3681'. [ 978.308113][T19306] netlink: 'syz.0.3683': attribute type 2 has an invalid length. [ 978.316184][T19306] netlink: 'syz.0.3683': attribute type 11 has an invalid length. [ 978.324097][T19306] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3683'. [ 978.324770][T19302] tipc: Resetting bearer [ 978.596142][T19302] tipc: Disabling bearer [ 979.399948][T19320] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19320 comm=syz.5.3688 [ 979.414032][T19320] netlink: 'syz.5.3688': attribute type 1 has an invalid length. [ 979.443887][T19320] bond2: (slave bridge4): making interface the new active one [ 979.452444][T19320] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 979.925036][ T92] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 980.077430][ T92] usb 9-1: Using ep0 maxpacket: 32 [ 980.097849][ T92] usb 9-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 980.203354][ T92] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.220835][ T92] usb 9-1: config 0 descriptor?? [ 980.231926][ T92] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 980.270885][T19334] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3693'. [ 980.307899][T19334] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3693'. [ 980.439356][ T7954] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 980.609701][ T7954] usb 8-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 980.804744][ T92] gspca_nw80x: reg_r err -71 [ 980.809425][ T92] nw80x 9-1:0.0: probe with driver nw80x failed with error -71 [ 980.818470][ T7954] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 980.854111][ T7954] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 980.874526][ T92] usb 9-1: USB disconnect, device number 25 [ 980.906109][ T7954] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 980.915163][ T7954] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.955367][T19332] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 982.035285][ T30] audit: type=1400 audit(1757832465.086:838): avc: denied { read } for pid=19347 comm="syz.0.3697" dev="sockfs" ino=73145 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 982.267415][T19332] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3692'. [ 982.516952][T19375] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3702'. [ 983.106453][ T7954] aiptek 8-1:17.0: Aiptek using 400 ms programming speed [ 983.121155][ T7954] input: Aiptek as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:17.0/input/input67 [ 983.153914][ T92] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 983.175158][ T7954] usb 8-1: USB disconnect, device number 41 [ 983.175202][ C1] aiptek 8-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 983.298396][ T92] usb 6-1: config 0 has an invalid interface number: 171 but max is 0 [ 983.308727][ T92] usb 6-1: config 0 has no interface number 0 [ 983.314803][ T92] usb 6-1: config 0 interface 171 has no altsetting 0 [ 983.330443][ T92] usb 6-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 983.339966][ T92] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.354308][ T92] usb 6-1: Product: syz [ 983.368974][ T92] usb 6-1: Manufacturer: syz [ 983.386248][ T92] usb 6-1: SerialNumber: syz [ 983.392851][ T92] usb 6-1: config 0 descriptor?? [ 983.407777][ T92] usb-storage 6-1:0.171: USB Mass Storage device detected [ 983.642255][T19390] FAULT_INJECTION: forcing a failure. [ 983.642255][T19390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 983.697488][ T7954] usb 8-1: new full-speed USB device number 42 using dummy_hcd [ 983.775385][T19390] CPU: 1 UID: 0 PID: 19390 Comm: syz.0.3709 Not tainted syzkaller #0 PREEMPT(full) [ 983.775412][T19390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 983.775424][T19390] Call Trace: [ 983.775430][T19390] [ 983.775438][T19390] dump_stack_lvl+0x16c/0x1f0 [ 983.775466][T19390] should_fail_ex+0x512/0x640 [ 983.775493][T19390] _copy_from_user+0x2e/0xd0 [ 983.775520][T19390] copy_msghdr_from_user+0x98/0x160 [ 983.775545][T19390] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 983.775578][T19390] ___sys_sendmsg+0xfe/0x1d0 [ 983.775601][T19390] ? __pfx____sys_sendmsg+0x10/0x10 [ 983.775655][T19390] __sys_sendmsg+0x16d/0x220 [ 983.775677][T19390] ? __pfx___sys_sendmsg+0x10/0x10 [ 983.775710][T19390] ? rcu_is_watching+0x12/0xc0 [ 983.775735][T19390] do_syscall_64+0xcd/0x4e0 [ 983.775760][T19390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.775777][T19390] RIP: 0033:0x7fb95118eba9 [ 983.775792][T19390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 983.775814][T19390] RSP: 002b:00007fb95200b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 983.775832][T19390] RAX: ffffffffffffffda RBX: 00007fb9513d5fa0 RCX: 00007fb95118eba9 [ 983.775843][T19390] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 983.775854][T19390] RBP: 00007fb95200b090 R08: 0000000000000000 R09: 0000000000000000 [ 983.775864][T19390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 983.775874][T19390] R13: 00007fb9513d6038 R14: 00007fb9513d5fa0 R15: 00007ffdc02e1008 [ 983.775898][T19390] [ 983.942281][ C1] vkms_vblank_simulate: vblank timer overrun [ 984.147098][ T7954] usb 8-1: config 1 has an invalid interface number: 105 but max is 0 [ 984.155722][ T7954] usb 8-1: config 1 has no interface number 0 [ 984.161877][ T7954] usb 8-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid maxpacket 80, setting to 64 [ 984.173422][ T7954] usb 8-1: config 1 interface 105 has no altsetting 0 [ 984.295772][ T7954] usb 8-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 984.678937][T19392] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3706'. [ 984.683813][T19397] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 984.688289][ T7954] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.626642][ T7954] usb 8-1: Product: syz [ 985.642517][ T7954] usb 8-1: Manufacturer: syz [ 985.656218][ T7954] usb 8-1: SerialNumber: syz [ 985.708351][T19383] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 986.561523][ T30] audit: type=1400 audit(1757832469.832:839): avc: denied { ioctl } for pid=19406 comm="syz.0.3714" path="socket:[74265]" dev="sockfs" ino=74265 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 986.715149][ T7954] aqc111 8-1:1.105: probe with driver aqc111 failed with error -71 [ 986.734689][ T7954] usb 8-1: USB disconnect, device number 42 [ 986.827020][ T7946] usb 6-1: USB disconnect, device number 39 [ 987.383526][ T7954] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 987.459450][ T7946] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 987.459512][T18841] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 987.522731][T19427] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3721'. [ 987.547605][ T7954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 987.562646][ T7954] usb 6-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 987.577261][ T7954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.599917][ T7954] usb 6-1: config 0 descriptor?? [ 987.642693][T18841] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 987.652719][T18841] usb 9-1: config 0 has no interface number 0 [ 987.673133][ T7946] usb 8-1: config 1 has an invalid interface number: 7 but max is 0 [ 987.692769][T18841] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 987.693487][ T7946] usb 8-1: config 1 has no interface number 0 [ 987.717752][ T7946] usb 8-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 987.719761][T18841] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.728758][ T7946] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1024 [ 987.748748][ T7946] usb 8-1: config 1 interface 7 altsetting 0 endpoint 0xB has invalid maxpacket 1983, setting to 1024 [ 987.772181][T18841] usb 9-1: Product: syz [ 987.776645][T18841] usb 9-1: Manufacturer: syz [ 987.781484][T18841] usb 9-1: SerialNumber: syz [ 987.800947][ T7946] usb 8-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 987.811906][ T7946] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.835715][ T7946] usb 8-1: Product: syz [ 987.848562][ T7946] usb 8-1: Manufacturer: syz [ 987.857714][ T7946] usb 8-1: SerialNumber: syz [ 988.086124][T19416] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 988.111489][T19416] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 988.133311][T19416] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 988.155352][ T7946] usb 8-1: Expected 3 endpoints, found: 2 [ 988.465491][T18841] usb 9-1: config 0 descriptor?? [ 988.505276][ T7946] usb 8-1: USB disconnect, device number 43 [ 988.923361][T19434] : entered promiscuous mode [ 989.788770][ T7954] usbhid 6-1:0.0: can't add hid device: -71 [ 989.801015][ T7954] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 989.821509][ T7954] usb 6-1: USB disconnect, device number 40 [ 990.030029][ T7946] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 990.070916][T18841] usb 9-1: can't set config #0, error -71 [ 990.105120][T18841] usb 9-1: USB disconnect, device number 26 [ 990.713342][ T7946] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 990.761833][ T7946] usb 1-1: config 1 has no interface number 0 [ 990.770514][ T7946] usb 1-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid maxpacket 80, setting to 64 [ 990.964343][ T7946] usb 1-1: config 1 interface 105 has no altsetting 0 [ 990.975816][ T7946] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 990.989833][ T7946] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.998798][T19454] ptrace attach of "./syz-executor exec"[10674] was attempted by "./syz-executor exec"[19454] [ 991.009288][ T7946] usb 1-1: Product: syz [ 991.022148][ T7946] usb 1-1: Manufacturer: syz [ 991.027477][ T7946] usb 1-1: SerialNumber: syz [ 991.049253][T19442] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 991.289234][T17942] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 991.589907][ T7946] aqc111 1-1:1.105: probe with driver aqc111 failed with error -71 [ 991.779889][T17942] usb 9-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 991.824348][ T7946] usb 1-1: USB disconnect, device number 48 [ 992.448448][T17942] usb 9-1: config 0 interface 0 has no altsetting 0 [ 992.553721][T17942] usb 9-1: New USB device found, idVendor=0eef, idProduct=73f7, bcdDevice= 0.00 [ 992.577486][T17942] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.590638][T17942] usb 9-1: config 0 descriptor?? [ 992.765445][T18841] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 992.788517][T19457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 992.790575][T19475] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3732'. [ 992.799455][T19457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 992.814433][T19475] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3732'. [ 992.815980][ T7954] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 992.823814][T19475] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3732'. [ 992.849764][T19475] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3732'. [ 992.971849][T17942] usbhid 9-1:0.0: can't add hid device: -71 [ 992.977979][T17942] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 992.989127][T18841] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 992.990593][T17942] usb 9-1: USB disconnect, device number 27 [ 993.010702][T18841] usb 8-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 993.413241][ T7946] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 993.424989][ T7954] usb 3-1: device descriptor read/64, error -71 [ 993.431308][T18841] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.441540][T18841] usb 8-1: config 0 descriptor?? [ 993.477553][ T30] audit: type=1326 audit(1757832477.096:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19485 comm="syz.8.3739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4898eba9 code=0x7ffc0000 [ 993.501532][ T30] audit: type=1326 audit(1757832477.096:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19485 comm="syz.8.3739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4898eba9 code=0x7ffc0000 [ 993.525045][ T30] audit: type=1326 audit(1757832477.096:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19485 comm="syz.8.3739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fde4898eba9 code=0x7ffc0000 [ 993.548996][ T30] audit: type=1326 audit(1757832477.096:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19485 comm="syz.8.3739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4898eba9 code=0x7ffc0000 [ 993.573568][ T30] audit: type=1326 audit(1757832477.096:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19485 comm="syz.8.3739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7fde4898eba9 code=0x7ffc0000 [ 993.578797][ T7946] usb 1-1: config 15 has an invalid interface number: 192 but max is 0 [ 993.597457][ T30] audit: type=1326 audit(1757832477.096:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19485 comm="syz.8.3739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4898eba9 code=0x7ffc0000 [ 993.622578][ T7946] usb 1-1: config 15 has no interface number 0 [ 993.650239][ T7946] usb 1-1: config 15 interface 192 altsetting 3 bulk endpoint 0x7 has invalid maxpacket 1024 [ 993.669586][ T30] audit: type=1326 audit(1757832477.096:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19485 comm="syz.8.3739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fde4898eba9 code=0x7ffc0000 [ 993.708334][ T7954] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 993.731540][ T7946] usb 1-1: config 15 interface 192 has no altsetting 0 [ 993.744976][ T7946] usb 1-1: New USB device found, idVendor=0763, idProduct=1011, bcdDevice=72.a7 [ 993.851104][ T7954] usb 3-1: device descriptor read/64, error -71 [ 994.549745][ T7954] usb usb3-port1: attempt power cycle [ 995.118148][ T7946] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.153800][ T30] audit: type=1326 audit(1757832477.096:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19485 comm="syz.8.3739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4898eba9 code=0x7ffc0000 [ 995.384318][ T7946] usb 1-1: Product: syz [ 995.493405][ T7946] usb 1-1: Manufacturer: syz [ 995.502940][ T7946] usb 1-1: SerialNumber: syz [ 995.519750][T19483] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 995.530550][ T30] audit: type=1326 audit(1757832477.107:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19485 comm="syz.8.3739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4898eba9 code=0x7ffc0000 [ 995.546660][ T7954] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 995.557559][ T30] audit: type=1326 audit(1757832477.107:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19485 comm="syz.8.3739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fde4898eba9 code=0x7ffc0000 [ 995.683828][T18841] usbhid 8-1:0.0: can't add hid device: -71 [ 995.716384][T19502] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000021: 0000 [#1] SMP KASAN NOPTI [ 995.716450][T18841] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 995.728455][T19502] KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f] [ 995.728474][T19502] CPU: 0 UID: 0 PID: 19502 Comm: syz.7.3742 Not tainted syzkaller #0 PREEMPT(full) [ 995.728494][T19502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 995.728504][T19502] RIP: 0010:bcsp_recv+0x10a/0x17f0 [ 995.728531][T19502] Code: 18 48 c1 e8 03 48 01 e8 48 89 04 24 48 8d 83 78 01 00 00 48 89 44 24 28 48 c1 e8 03 48 89 44 24 08 e8 6a b7 40 f9 48 8b 04 24 <80> 38 00 0f 85 d1 12 00 00 4c 8b ab 08 01 00 00 31 ff 4c 89 ee e8 [ 995.728548][T19502] RSP: 0018:ffffc9000463fbf0 EFLAGS: 00010293 [ 995.728564][T19502] RAX: dffffc0000000021 RBX: 0000000000000000 RCX: ffffffff887ae71a [ 995.728576][T19502] RDX: ffff888065388000 RSI: ffffffff887ae766 RDI: 0000000000000005 [ 995.728588][T19502] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 995.728599][T19502] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc9000463fd88 [ 995.728609][T19502] R13: ffffc9000463fd88 R14: 0000000000000001 R15: ffff88805ef3cc00 [ 995.728620][T19502] FS: 00007f6b7eff66c0(0000) GS:ffff8881246b4000(0000) knlGS:0000000000000000 [ 995.728637][T19502] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 995.728647][T19502] CR2: 0000000000000000 CR3: 0000000053a9a000 CR4: 00000000003526f0 [ 995.728656][T19502] Call Trace: [ 995.728662][T19502] [ 995.728672][T19502] ? __pfx_bcsp_recv+0x10/0x10 [ 995.728707][T19502] hci_uart_tty_receive+0x254/0x7e0 [ 995.728731][T19502] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 995.728754][T19502] tty_ioctl+0x580/0x1680 [ 995.728776][T19502] ? __pfx_tty_ioctl+0x10/0x10 [ 995.728795][T19502] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 995.728825][T19502] ? hook_file_ioctl_common+0x145/0x410 [ 995.728846][T19502] ? selinux_file_ioctl+0x180/0x270 [ 995.728869][T19502] ? selinux_file_ioctl+0xb4/0x270 [ 995.728893][T19502] ? __pfx_tty_ioctl+0x10/0x10 [ 995.728913][T19502] __x64_sys_ioctl+0x18e/0x210 [ 995.728940][T19502] do_syscall_64+0xcd/0x4e0 [ 995.728963][T19502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 995.728980][T19502] RIP: 0033:0x7f6b80d8eba9 [ 995.728993][T19502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 995.729009][T19502] RSP: 002b:00007f6b7eff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 995.729024][T19502] RAX: ffffffffffffffda RBX: 00007f6b80fd6180 RCX: 00007f6b80d8eba9 [ 995.729036][T19502] RDX: 0000200000000400 RSI: 0000000000005412 RDI: 0000000000000005 [ 995.729047][T19502] RBP: 00007f6b80e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 995.729058][T19502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 995.729068][T19502] R13: 00007f6b80fd6218 R14: 00007f6b80fd6180 R15: 00007ffedea44218 [ 995.729085][T19502] [ 995.729092][T19502] Modules linked in: [ 995.729406][T19502] ---[ end trace 0000000000000000 ]--- [ 995.903669][T18841] usb 8-1: USB disconnect, device number 44 [ 996.056180][ T7954] usb 3-1: device not accepting address 46, error -71 [ 996.110077][ T7946] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 996.118903][T19502] RIP: 0010:bcsp_recv+0x10a/0x17f0 [ 996.124064][T19502] Code: 18 48 c1 e8 03 48 01 e8 48 89 04 24 48 8d 83 78 01 00 00 48 89 44 24 28 48 c1 e8 03 48 89 44 24 08 e8 6a b7 40 f9 48 8b 04 24 <80> 38 00 0f 85 d1 12 00 00 4c 8b ab 08 01 00 00 31 ff 4c 89 ee e8 [ 996.152269][ T7946] snd-usb-audio 1-1:15.192: probe with driver snd-usb-audio failed with error -2 [ 996.164154][ T7946] usb 1-1: USB disconnect, device number 49 [ 996.170771][T19502] RSP: 0018:ffffc9000463fbf0 EFLAGS: 00010293 [ 996.180497][T19502] RAX: dffffc0000000021 RBX: 0000000000000000 RCX: ffffffff887ae71a [ 996.199409][T19502] RDX: ffff888065388000 RSI: ffffffff887ae766 RDI: 0000000000000005 [ 996.200065][T19504] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3743'. [ 996.207503][T19502] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 996.225176][T19502] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc9000463fd88 [ 996.234304][T19502] R13: ffffc9000463fd88 R14: 0000000000000001 R15: ffff88805ef3cc00 [ 996.242501][T19502] FS: 00007f6b7eff66c0(0000) GS:ffff8881246b4000(0000) knlGS:0000000000000000 [ 996.243886][T19504] kvm: pic: non byte read [ 996.251546][T19502] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 996.251562][T19502] CR2: 0000000000000000 CR3: 0000000053a9a000 CR4: 00000000003526f0 [ 996.270576][T19502] Kernel panic - not syncing: Fatal exception [ 996.276823][T19502] Kernel Offset: disabled [ 996.281124][T19502] Rebooting in 86400 seconds..