last executing test programs: 5m36.705036212s ago: executing program 1 (id=119): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xc, 0x86}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000001c0)=0xffffffffffffffff) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r8, 0x84, 0x17, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYBLOB="0300000014a5b960818818ff654e5836a29c432afd2c56b1350ba174fb1cbe352ae967a7f0cb7532f495d7cc0a90226876548abac42cfe245e42ce8c5bcceda1cc302dbefc175d7154e593853455d3ff43396e0b90e03ab41faf593501ca555643870559fb2fb9b4d2fcac43a40a1e7d80f6cf4021894a7e6427e2a34039252bd256d0dbc577937ff61ecdd1bb75"], 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000400)={0x0, 0x3, 0x20}, 0xc) ioctl$VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000380)=@multiplanar_mmap={0x4, 0x13, 0x4, 0x20, 0x80000001, {r5, r6/1000+60000}, {0x2, 0x0, 0x10, 0x4, 0x7, 0x6, "1d558e4a"}, 0x1b47, 0x1, {&(0x7f0000000140)=[{0x4, 0x8, {0x4b0}, 0xfffffff2}, {0x3, 0x8, {0x80}, 0x9}]}, 0x8001, 0x0, r7}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x8, 0xf91, 0x4, 0x1, 0xa4, 0xb8}}, {0x4}}]}]}, 0x48}}, 0x44080) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000000c0)=0xf) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r12 = socket(0x10, 0x803, 0x0) r13 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x40000002, {0x0, 0x0, 0x0, r14, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xffff, 0x8, 0x1000}, {0x1, 0x6, 0x5}}}]}]}]}}]}, 0x54}}, 0x0) 5m34.263204559s ago: executing program 1 (id=128): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) mknodat$loop(r1, 0x0, 0x1, 0x0) chdir(&(0x7f0000000140)='./bus\x00') socket$nl_xfrm(0x10, 0x3, 0x6) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') dup(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xf59}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) unlink(&(0x7f0000000040)='./bus\x00') ioctl$PPPIOCGIDLE32(r0, 0x8008743f, &(0x7f0000000000)) 5m33.302920538s ago: executing program 1 (id=129): syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000000000004a000000000000002e450f2658c800000066bad004"], 0x4a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0xe82e9ae7df5c9585, 0x0) openat$cgroup_ro(r3, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x4, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000480)={{r1}, "531ed5ab4307ac89333b7e7f3fec9c4e079a74cd3f9269626ba3ebcdf8c9af1becc3a16a47fd34717ea469ed9b8b088e934967be45439421921a2d6433583388bd54013c8fd0487fa24e397ea42703e10aacb829eb93e8040d96776dec42af9d4684613de6ec7f696953ab2e72afb8dfe94925fa6fed254106ee3061241fda57f2064fbae133abb42fc7126c345317856cd93123267cd834ef2d2cfb75703a949826d12e0efd18e17e1e273d89c052488c5737b0d032dea6c9f552c65f5af644a4de9b97afdae4650b738dea572d432efba8554306252c2a5116dba3fbfd8377198ebb82cbdd63baf7841ad6ce1aaf390c8a22e53a256736e989b60bc19249ceb091e1ba02ae5a175f6a0b9a15df97668e0ecfd2e4dca9d41e244f3fea4ce9a4549b6de1611303b5da9644166c81e28308ccf97493f3033ad8cc318c98d3ed1c2b98c17879fdf2ba4101014e0405953bec5cb7748c49758a55a7efa5cddb65d4c600e3ec42c8bd45242999ee38aae950a0458addc06fa171ce24b9fe5ff2a6bf6c35d3a40dfcf2e8c3a0234f42c7bf3d797f326f4674fc5faba32112909dd19c768bd38b92a8e422c4fa5e65cf5e197aeb186c5566b30e74c81ac851a48741e9c7c0001a4e011c577b05e3b759f1c8e0b653be84079c3b20588788f6d7a4f95e9dc9860d7632264fcb976fb44441f8d60095705f3b8eaa731634d879846b14bbdff6579a530ed51d3127abbc3631ac99c0238a131f94ba07f98ab09ad1a4320bf5e86efda92687db255b9306fe01eb340f7dd8aed14dfb3b44cdc0d57e8e3a0689be8892eace4959a261243cf1a4d127e31bd8f106050d50cb4a0fe0109f46e95ac108fb7c39d2a8c5d3272f926a296c6e3ace237fac2b28e80ff691b7e7c5d51341afd2daf5e120163812558967803a09d4f319e7a21d8403f00456a7754f7c917abcc23f8ef39eaee421c53a947fdb482fb4be1f7aadf2b93b674aa77ffb60fe4c565242e51c77c774483b015c662a32ecba700874422245ab6708d63349bae7060e9fb8b3516ae86bf3bc49ef2a6538ceecad8a4f67167df892e5247ed590fdd2c37f5d536f28923e71613ad6b3a11317a727cc32b59f1283ee0b172c7551785cbb3aee03f9c67a867507c814d32db44b2b7523d650d9f100ff8f03827905c3caffa48c3507f2c05ea38ef02ec84790aba4c2b8510533e2596ce5ce3b7382b9c5d6da9f611d6cbbd7e424c0a806d4f72993ecd7260df1cd1512117b7c0f7e08db1c3037826105be2c2562139a6bcea20cb643c5de2fbaec47c4aa297684abd2ca4c6d17da5d5e86043f095b3db13bd949ef490bb51948459e8aefa09f6845dc2c1cf787dcbfd11b522aa0f490cf9ca5882916c2e357eb9c8172a82da81cd35f0591c86cfa5c06c368faa9d09671c23a1a755413b413fc0d097e845a1a8ca0f10b5a7e566f722b10db5d62433ef8c0a9692729326bc837435b8f16e87bbf7b621431f528e88930a5f63b47fcdf0d2ba436e0c3d72924514e027d4cacc17371f63a59a1a74a261c7061b443d0fc58799a342a3b3236a91e2698d828fa04eaa73de846f7d18d6e365b8d16a3177bd434a644d8f66e5a6816f76c72b6c9f2b3fcbc66273d135f01334c611b111266b11efbe18aed7d32bda6d27e02a4f14ea0f48c2b9ea0120f37d21b1083b54ffb9d68c7aabb5273242b29a895e550a9a2260bfde1446b83de5dde1b6ccd1d59ca0cd680ab509ba4b204a7e011e4e188ba66e2dd555b040ba4036d23aed7fc0faee225a7521f796b897f5ff7c8bfa21f2012033df7dcb4e30752c2e12ecfb818d9f6d5d0a6ca79f903612b67782504e13f9ff60dffbc6a0f4fe38fab8b9691724fa5f2681c843a696b0bcedc0cff127b469af432b2d5987728930cbc42bfc63cd627ab40e3e8e4f10f60a3150247d9c1a58d564b5eb4888fa15f3b5c98fa12ffaea6febee40f132a872d81ba49992dd08dcc4c90617ec6f96820e29d6c743aca9c1f6747e7db4b146438f3334bf01e948b6c74e9fb85162385247d04760df2d3b99531a030ee56f21743192b88f652f0c27d572d9e855bb49091e7018dbaa5f8af761e3491ce1c9190cf2bf32e7e4999684815b29cdb871d05b7c2d30674f77bf48808ef949821e23a5ef0b4e7590073945ab5eff3c03654c8e8056437d11bdfd05ceb4c2c40e769fc4f98606c1d7058801ed302ec9d5155b8d47d7e91191a95b1db447f36157f4d663a80101e33c4398e2205f7fae5f135c672cf37d7b6cfa8ec09d50ea707e94c8b24a1163ac61ae1c87718b79a623e53633a717f72648a18ba6636c07388e7f457d9a297ecaee38dbf2a0812f0d938fbb3b8d278f590960dddb97182702555f01eba6ee51ab920fc3e0d16a2a08982953a81a954e88fc01aec0506a91436b74dcca44b15dd9e07f7be61d219e728c0e4604e9fa7412b0ecdc5f7239b0694f3b51ca6895373438398abab33845ccee17c92c41c8c0f4091b04a8743f63d8a59badbab8940d5ab65451ce915348e34aa31190c7901379da8fb11fc215fab46335b7ff2919b49877abd06db59cd9098c3c6c7db6b052e89773a64579f7e528742035a5fb58e6273a1d5fb94b999da3a212351d45d2fe71a43721cb4c9571773507bb4256997f679d5efbbef46cceb5cebf09f4d06cfe6f3def3d89e47be81145b42b58ea2eaa47746cab7b173367cdd9736d7e6852d2d7e213233b19325972a42a4078294df77080cdca8d2eb2458099c7d842b76b0a5e1f5f723ea4df98b847a91f5de96ab9bc25066a74351645d9cc558ac0801e410ef9db69dbc20b729fa524712e208e8406ffb9b9a12878519cd8d5cd5ff44f5c7ae0e20b813f31b60a7e246b585f7687d2dd41c1cbf703f7b53addfdf58b0004ec87e1fda4d894522e526c275333801f88a8e6b79682abfe506fac3ed66f31f55ef7f29332510ea9bad295495f2ce9a837722df837a093c59daa547ba1c33bc0359ef965d04834d32fc1c5b8242884588e88dd7ccd1a4bd174ec71963ba8aa0691259a64ba73c730dd2c5e74038ae72ed564b5e12aba0335cd26a1317330c3403bf0cf7a6fc30aa4cfc2bfe7158f7a361f2b7b05438a98d0b885f0816d6b96c9647b0f9e57ee0922b425628a22541b176bfc3be6e3ca2e85cc9d8decc675d091026da0bcdde03c4ec44901d314e9fee93f37d5ce1a6ce109062f606ffe55bfe79d67dd9540c95f8aa6fbdac1644e55fafe8ab4d2eceb693a4e23c1dc85edae0f73e48c1222268857532a07a832b6e8d9e55bf3c80ad67706ee2c9871014da792d065853629c033053d9bb176a76ba6762d9882bd567aa6cb97d29bc18b27fdddb14276d66c77146c6b39580f3445d0967689e0c7f72381182dd2d3668fb44c0e330e49fd3ee314f044ba9470bf555d327e3cf6081a574cd0bd0988dc2ac3ddcfb6591b0b6b129f3bb9fd6c473ccc16fa8a594088c5f950be46d1f7dd2cf87dfbea464d4641e90c0015b03142e806eb0e56c376ce92b4acbee1633f575a8f527a455b39b5cb5fb23fcb70c8e6d6f51028057f191bc411580a2847b6803b77ccd6cb425b10e74cc653bd306fd8894c5d30685b325ab3f30ed0147ec42d78df58a40a5e0cf377bc841181f7432fb5e0a76a248a4f0047387c5213b8b4d82840f7f7d3c0c5df9a064906bc129dc6a19fc1be928a1f265ea211dfde1359116ae6c821571fa403ec8820a149cc4de42101afc0baf31432cd706ec9a749274d9a444abd1e687795909b85af6a99fa269a0fd3c4b719c5d07feae1656ff0e96aeff14abc3a70d03859290107a34252e7f9146c1531e44142bbfed83ce61e691e1a688c4c8983bf20c0fadc80701c8a2bf5b140fc74c7b31a509dba80ec87567ceb920d7c33f128313259e579eb4fe742d231be37ef0b4c546fce958f666cb23c179a455c18d4f978deceb617ccd82ecc0fb5addbf24657ae9b701d7ee9bdc1dd442005b1ab77e98a38bd25c30576f8f67193e6c4a03634e0bd964250bf1fd419959671b9d7c5372cf0838730ab258bd9c2172a272fb99ed04c7b1f4f261c729c1c51776f16601f6fffbe2cb8cbb8e4bd5fb0e1b6ac0be280ff55c27ed50b98c3d1df1113b54715366945c7b1f3bef159f4832e30191230826c07a263dc030b0b6431a2a43a3c5fff90a2e02ef1216780c686677854bd2e36a30fe498ea4f13ee0ff6f21d57b8cabdc9c06b43763e2dad53eaff02d67a4bb65442030a53537319d041cf740abeb4f1fd759dff3b710805c248d48bb929f942888f2a9283741c1206bff17480fa16a7770f0a5f7cd2b3ef083e84cfa5695dbf723f8cfce9c4b55bb48da198224f8ca987a770233f1b00b9d42f3e6c7522368c4ee57c073644de4385d40e3c1fe9fc00407fd61dc17806bb1eb5be8728e0e10b3e488daf8851b5c7418eedf5797aca761d02dedc8f95e50bd86981efca48cac352fe9e41379fd65d8ca864ec04a8ff6a3d83675476283b5eb47939359e04576c7ed5a7eb7aa88719aafc7af200eef1ca88b51e5e7669c9bc9b35e0352e5962be91b282ce325a32c2779ea7be87f8c11aced3a12e55282334efafc7bd107beb883e288a129c9d8bc7e1aea81d6b5e0fdc41d9f17d944d8a0d19a406769dc09f24dcdedafdf014ebe7f70cf50f0c9962526b8996dde4d65c152662c53368d24cc2a65f4be07de5e0ce57948b1e43649a2eaa5eb00d1973e0ab1d057a266fd559ed3732285cba8587fc4be19b625dad5378d6346f67571d87b085340bfd475c3e6bdee60f4c8a73a41e455401d76c1269cfc9e4504a87a71dc57cff6ae03bc11965e63a71b88a4163392bee1b3d57b3d3038078b193c8208657e1736d05224999bcf08fd416645a41d0e52623110ad52147eff6164310f6724930d513aabb9fbf3e45a804446af905d60e12a506a54db9526cce6b4e7727079273594553ca7a79b06081428639fdec050400c37cf425a254de05ea8dc18df7705b0feeb13f9bd07be3e44dcd709f48ee4ebc4840a2edb02fd7ccfddc1f57a5b26e6e8549bc2ac005625022711cf8c46c1c28801cec239006831192b21e9b8344b9469751888f1aee70bd5903508c8dc0fcdc8974d514d75752c53153ddb29b5a35107d549c56efec0800d6e2db732f8e7076a88ce75e03b56ad9357c1f3e62bc5cda23b740c9d1ebff56e14a1f3d02d2431e878d2fb86a910d666db0d39b0b47586a4a905f9e3011e90c8fe7d8a6740c2bffaf8cff1e59da2cc69da59e7b055086a3bd5c01fbd05f906da5aea4d6bdb3d81eca8d157615dc31147483da5ff4ee4f90026f5f70110c40fb0f92de4d74944ae8455a0cc9d4b743c7e5c8ae754c907e4d4661715b92213a85f155265897927cd601efa021566920f232c4373a5be4243ef1769a159c51d25a8b3026521a2d41062d1d327d458ee9138e7799403db41bd3d5a098d7bbce2f1d243f4f9a5374f35163f2bf886b6cc8622aed50da99a764f35317457449b4363dc32178c99a92672a2f79edfeb94b759edecbc9379855f135ba016f2410aa04a6b9b361fffcba40d7f8772bdae88c3abf53facdffe81fd7cd34e76289a5a1d325b318466b874738f3dca83db30706464863d7055056f93027ecf6e92d7a28b03c13182942895ab4987b196e7bbbaa43f0b82d45c29c3aa3430ef65e3edc0c06b2dcfed54d8920cc6acd6a132273a185028ed7c364956607b7fd67a39676d53717ee5a12f04631c6a15e4136a2a3722750d9125ba8a1c877807"}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000080)={[0x1, 0x1000000000, 0x0, 0x40, 0x2000001, 0x1, 0x2004cb, 0x0, 0x0, 0x68ff, 0x5, 0x0, 0x3, 0x0, 0x2], 0x1, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m32.895781114s ago: executing program 1 (id=133): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r1, 0x400, 0x70bd29, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x20008000) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x5, 0x8, 0x9, 0xf, 0x9, 0xffffffffffffffff}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000280)={0x0, 0x0}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x3e, 0x7, 0x5, 0xf, 0x731d, 0xffffffffffffffff}) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f00000003c0)={0x40000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0), {0xf}, &(0x7f0000000100)=""/33, 0x21, &(0x7f0000000140)=""/189, &(0x7f0000000340)=[r2, r3, r4], 0x3, {r5}}, 0x58) syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007df09808e1050804da20010203010902"], 0x0) 5m31.144391473s ago: executing program 1 (id=144): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mount$afs(&(0x7f00000000c0), &(0x7f0000000100)='./file1/file0\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000200)={[{@flock_strict}, {@flock_write}, {@dyn}], [{@context={'context', 0x3d, 'sysadm_u'}}, {@smackfshat={'smackfshat', 0x3d, 'workdir'}}, {@audit}]}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000040)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) (async) mount$afs(&(0x7f00000000c0), &(0x7f0000000100)='./file1/file0\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000200)={[{@flock_strict}, {@flock_write}, {@dyn}], [{@context={'context', 0x3d, 'sysadm_u'}}, {@smackfshat={'smackfshat', 0x3d, 'workdir'}}, {@audit}]}) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f0000000140)='./bus\x00') (async) rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') (async) rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000040)='./bus\x00') (async) 5m30.904339654s ago: executing program 1 (id=146): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0xfffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xf59}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0f00000004000000040000"], 0x50) ioctl$PPPIOCGIDLE32(r0, 0x8008743f, &(0x7f0000000000)) 5m15.856019279s ago: executing program 32 (id=146): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0xfffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xf59}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0f00000004000000040000"], 0x50) ioctl$PPPIOCGIDLE32(r0, 0x8008743f, &(0x7f0000000000)) 4m56.902613804s ago: executing program 2 (id=240): socket$inet6(0xa, 0x3, 0x3a) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$kcm(0x29, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x1c}}, 0x10) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r8, &(0x7f0000000000)={0x2020}, 0x2020) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) 4m55.067156472s ago: executing program 2 (id=247): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0xffffffff, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6cc4], [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x401, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6, 0xfffffffd, 0x0, 0x55f8, 0x3, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xffffffff, 0x0, 0x7], [0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xe0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, 0x45c) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000dd53520f003393264c10102030109022400096e0009050202000202000109058202000200"/54], 0x0) 4m52.137889619s ago: executing program 2 (id=255): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000180)={0x1, 0x2, 0x4, 0x7, 0x5, "b6aa27859e177cccbe04e9845ff3ce58598e15", 0x1, 0x7}) r1 = dup(r0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="160000000000000004000000ffff000000000000", @ANYRES32=0x1, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000e5ffffff0000000000000000020000000000000000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2}, 0x38) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x4, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 4m50.964076272s ago: executing program 2 (id=257): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) (async) r0 = socket$rds(0x15, 0x5, 0x0) (async, rerun: 32) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x10800, 0x0) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_virt_wifi\x00'}}]}]}, 0x38}}, 0x0) (async, rerun: 64) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x164, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xf}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4000000000000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x400}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x300000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff2c00}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x47}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x62f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2de}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xcb}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x70a}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf19}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_CON={0x4}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg1\x00'}}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1ce9}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x10}, 0x4) (async, rerun: 64) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) 4m50.61977927s ago: executing program 2 (id=258): prctl$PR_MCE_KILL(0x35, 0x1, 0x8) prctl$PR_MCE_KILL(0x35, 0x0, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x301) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f00000009c0)=0x8, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @loopback, 0x2}, 0x1c) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21c0}}, 0x20}}, 0x8080) setsockopt$inet6_int(r2, 0x29, 0x3c, &(0x7f0000000000)=0x1, 0x4) 4m49.702895497s ago: executing program 2 (id=261): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x3ff, 0x764, 0x4000d, 0x1, 0x6, 0x7}, 0x1c) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$media(0x0, 0x80000000, 0x40) ioctl$MEDIA_IOC_ENUM_ENTITIES(r2, 0xc1007c01, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)="60366600f848fe8dd69ec79f1ce5e8c9ce7cf9c42852c556265e48d179cde0902de44468e764", 0x26}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) socketpair(0x23, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)=ANY=[], 0x20) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r7, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20004000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0xe241, 0x100000000, 0xf, 0x80000006}, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0x12) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0x19, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@map_idx={0x18, 0x4, 0x5, 0x0, 0x7}, @alu={0x1, 0x0, 0x6, 0x3, 0x4, 0xe89467b9a09cf3ec, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x19}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x89, &(0x7f0000000680)=""/137, 0x40f00, 0x4, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x7, 0x7, 0x8}, 0x10, 0x9f1, 0xffffffffffffffff, 0x0, &(0x7f0000000280)=[0xffffffffffffffff, r6, 0xffffffffffffffff, r7, r7, r7, r7], 0x0, 0x10, 0x7}, 0x94) listen(r0, 0x3) socket$inet_smc(0x2b, 0x1, 0x0) 4m34.64066828s ago: executing program 33 (id=261): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x3ff, 0x764, 0x4000d, 0x1, 0x6, 0x7}, 0x1c) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$media(0x0, 0x80000000, 0x40) ioctl$MEDIA_IOC_ENUM_ENTITIES(r2, 0xc1007c01, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)="60366600f848fe8dd69ec79f1ce5e8c9ce7cf9c42852c556265e48d179cde0902de44468e764", 0x26}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) socketpair(0x23, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)=ANY=[], 0x20) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r7, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20004000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0xe241, 0x100000000, 0xf, 0x80000006}, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0x12) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0x19, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@map_idx={0x18, 0x4, 0x5, 0x0, 0x7}, @alu={0x1, 0x0, 0x6, 0x3, 0x4, 0xe89467b9a09cf3ec, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x19}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x89, &(0x7f0000000680)=""/137, 0x40f00, 0x4, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x7, 0x7, 0x8}, 0x10, 0x9f1, 0xffffffffffffffff, 0x0, &(0x7f0000000280)=[0xffffffffffffffff, r6, 0xffffffffffffffff, r7, r7, r7, r7], 0x0, 0x10, 0x7}, 0x94) listen(r0, 0x3) socket$inet_smc(0x2b, 0x1, 0x0) 4m28.779273651s ago: executing program 3 (id=321): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x5, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) socket(0x10, 0x803, 0x8) (async) r5 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003002908000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r6], 0x5c}}, 0x40) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003002908000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r6], 0x5c}}, 0x40) 4m28.375928816s ago: executing program 3 (id=324): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0x6, 0x0, 0x0, 0x4, 0x8d, 0x40000000, 0x0, 0x0, 0x10, 0x2}}, 0x50) vmsplice(r0, &(0x7f0000000140)=[{0x0}], 0x1, 0x0) fcntl$setpipe(r0, 0x407, 0x2000000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, r3, 0x25, 0x4, @val=@netfilter={0x2, 0x0, 0x0, 0x1}}, 0x20) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r3, @ANYBLOB], 0x70}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r5) sendmsg$IEEE802154_LLSEC_GETPARAMS(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="21002abd7000fedbdf252400000008000200", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000850}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@deltfilter={0x2c, 0x2d, 0x400, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xd, 0xfff1}, {0x9, 0xd}, {0x8}}, [@TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x2c}}, 0x0) pipe2(&(0x7f00000000c0), 0x80000) (async) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0x6, 0x0, 0x0, 0x4, 0x8d, 0x40000000, 0x0, 0x0, 0x10, 0x2}}, 0x50) (async) vmsplice(r0, &(0x7f0000000140)=[{0x0}], 0x1, 0x0) (async) fcntl$setpipe(r0, 0x407, 0x2000000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, r3, 0x25, 0x4, @val=@netfilter={0x2, 0x0, 0x0, 0x1}}, 0x20) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r3, @ANYBLOB], 0x70}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r5) (async) sendmsg$IEEE802154_LLSEC_GETPARAMS(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="21002abd7000fedbdf252400000008000200", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000850}, 0x4000800) (async) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@deltfilter={0x2c, 0x2d, 0x400, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xd, 0xfff1}, {0x9, 0xd}, {0x8}}, [@TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x2c}}, 0x0) (async) 4m27.947920464s ago: executing program 3 (id=326): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000180)={0x1, 0x0, [{0xd, 0x19, 0x4, 0x100, 0x2}]}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r3, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f00000013c0)={0x14, 0x4, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}}, 0x14}}, 0x0) 4m27.381374774s ago: executing program 3 (id=328): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x204, 0xa, 0x4}) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0585609, &(0x7f0000000040)={0x0, 0xa}) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) lseek(r1, 0x9, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) 4m27.043398441s ago: executing program 3 (id=330): getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000440)={0x1, 0x4, 0x9, 0xfffffffc, @vifc_lcl_ifindex=r0, @remote}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x19, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) read$dsp(0xffffffffffffffff, &(0x7f0000000280)=""/128, 0x80) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001005000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) 4m25.616320624s ago: executing program 3 (id=334): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200000038000480340001800b00010074617267657400002400028010000100434f4e4e5345434d41524b0005000300ef00000008000240000000000900010073797a30000000000900020073797a320000000014000580080002400000000008"], 0xa0}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf251500000008000300", @ANYRES32=r2, @ANYBLOB="2c002b80200003800c0004000000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x2040094) 4m24.86019772s ago: executing program 34 (id=334): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200000038000480340001800b00010074617267657400002400028010000100434f4e4e5345434d41524b0005000300ef00000008000240000000000900010073797a30000000000900020073797a320000000014000580080002400000000008"], 0xa0}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf251500000008000300", @ANYRES32=r2, @ANYBLOB="2c002b80200003800c0004000000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x2040094) 2m59.730369694s ago: executing program 5 (id=550): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x94, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_USERDATA={0x76, 0xd, 0x1, 0x0, "71e96156eb176ae6fe39dec7b253549ce86b4bce89d6412a9bfef1b8ca8395c933e9834162585d6d634b792c2bf13288cea634f18bb77cda193143afd4adae19a75742787c6aee3747eeae8618f508380865c0eb557fa67612b25bafc17784aa9138aad98a6d0e10d107f6c01c3ed403ffbe"}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0xa0842, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x11) fcntl$lock(r2, 0x5, &(0x7f0000000200)={0x1}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x15, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x22d9, 0x0, 0x0, 0x0, 0xffff0000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @ldst={0x3, 0x3, 0x0, 0x8, 0x7, 0xfffffffffffffff0, 0x8}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @generic={0x4, 0x7, 0x1, 0x81, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x7fffffff}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x4b, &(0x7f0000000240)=""/75, 0x40f00, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x10, 0x400}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, 0x0, &(0x7f0000000040)=r3}, 0x20) r4 = memfd_create(&(0x7f0000000040)='rootmode', 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) pwritev(r4, &(0x7f0000000000)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x8) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) syz_clone3(&(0x7f0000000080)={0x180801400, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000c55d2208000000000000005ef6683866378ad0a6cf385b895951dd701d17c600000001090260ec010000000009043f00040803500017ceac3c46c4999ab0ef6ddbc5ff14ae9b507d5e057eeb0d3bd68391d3ff0d248abee9679757b34ae4e4ca26957c588971e2e083088499f69800fb2a85ac1120fcc9811ed419"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m53.66730545s ago: executing program 5 (id=556): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noxattr}]}}) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) dup(r1) (async) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noxattr}]}}) (async) 2m52.605646388s ago: executing program 5 (id=560): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000440)=0x0) waitid(0x2, r1, &(0x7f00000004c0), 0x8, &(0x7f0000000740)) (async) waitid(0x2, r1, &(0x7f00000004c0), 0x8, &(0x7f0000000740)) r2 = getpid() prlimit64(0x0, 0xf, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = socket(0x2b, 0x80801, 0x1) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000100), 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f0000000300)=""/125) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) prlimit64(r2, 0x3, &(0x7f00000003c0)={0x5, 0xff}, &(0x7f0000000400)) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="1491449444560000000000000000000017c83740e136dfaf2f2a878e6d881585a95aa485812edc4f6fb3c8da0efba9b6e9b76ae223d17b9e4a8e02cba94982183a06c01f72fd904863241a3b863c8cdff5de55c946a8671b547d501e8932df3eff66721d6dddd172ff9c49ce2a93bfbe3708da6d3e3f5d148645ab437d05219de949f47ecd408645da81dd38bb33f7ce69896312982b5bc50df4908a03cfc02abfda171931b264f728792500160c1ac1e9406cfbc78bff687f119f5e0f25857d669ca312a17f2dcb07fc4c818ce126c15e4777", @ANYRESDEC=r6, @ANYRESHEX=r2], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x40) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0xa00, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x38, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004050}, 0x4) 2m51.512341541s ago: executing program 5 (id=562): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) flock(r0, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001980)={0x6c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x30}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r3, 0x400448e6, &(0x7f0000000080)) ioctl$sock_bt_hci(r3, 0x400448e7, &(0x7f0000000080)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000000c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$xdp(0x2c, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r8 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') r9 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)={0xc0002009}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000580)={0x0, 0x5, 0x8000000000000000, 0x1}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000980)={{r2}, r4, 0x4, @inherit={0x50, &(0x7f0000000180)={0x1, 0x1, 0x5, 0xc18, {0x8, 0x6, 0xc, 0xfffffffffffffa4b, 0x7fff}, [0x3214]}}, @devid=r10}) 2m50.211515799s ago: executing program 5 (id=567): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x42000, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x4}, {0xfff1, 0xffff}, {0x10, 0xfff2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6, 0xf}, {0xd, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40004) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}, 0x1, 0xfdff}, 0x84) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x45ffffa, 0x281) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001100)={r0, 0x0, {0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f045158d97405000000000000040000000100", [0xfffffffffeff7ffc]}}) (async) ioctl$LOOP_SET_STATUS(r7, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x8011, 0x6, 0x9, 0x0, "ba90204c1f205b4bbb0676c0f24a856b29eda6d2be74dce1b9020f74795a23f4d891e22b115aaafecc084cca2f96b5c2321009dd75bf1ab80e665703bb668786", "41b66c54f348be2cc9b5f945716c9742ec4fc42cc4fd6b3498a90e1c63502b99", [0x511, 0x3ff]}) 2m48.95162024s ago: executing program 5 (id=571): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x90004) socket$pptp(0x18, 0x1, 0x2) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) openat$vimc1(0xffffffffffffff9c, &(0x7f0000001240), 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r2 = dup(r1) syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r2}, &(0x7f0000000180), 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_vhci(0x0, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x15}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x484ad}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0x9}, @IFLA_BOND_MIIMON={0x8, 0x3, 0x5}, @IFLA_BOND_USE_CARRIER={0x5}]}}}]}, 0x4c}}, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, 0x0, 0x0) accept4(r4, 0x0, 0x0, 0x0) socket(0x10, 0x80003, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0842b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f04c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b53c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 2m47.398920262s ago: executing program 35 (id=571): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x90004) socket$pptp(0x18, 0x1, 0x2) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) openat$vimc1(0xffffffffffffff9c, &(0x7f0000001240), 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r2 = dup(r1) syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r2}, &(0x7f0000000180), 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_vhci(0x0, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b70700000100e0ff5070000028000000770000000000000095000200000000007ae9413df8ff0af5aa35339f4b382c4cad9db6fa7a9b857b72abaca100af1ba23d699b89e890c10500000000000000000000000000ac0e064c27bdfbd301150500000000000000bfdc995279d64072aacbb0595b95060000009ad3bf16a461e48e955a772d4062093f4cb1c3d9532abad2085401f098eb039ae4f4103699b9e079227e98cc07c09c1a72cb6d47cef1595e84d21951010f0274b1445a2ad6a7ad73827cccc21842599e0ae7b91f0b878b9267aa0b28d69a74ffdea613e892f0f9ff94e690b6ad68e4cb6dd65fd7bf3124702c6b1c2aea53ee0cb83ff1807459c7cba77cedca0bff6d8370c33e2bd9cebd29c152ff9dc8c2772fe552fecfcd1778b0838100000031d521207e5223d86508416780983c2f380bc01cefe9773a9a5cd5b24aa24a561e72393c0ce2bf44825b05c138779fe74f884c2472ab45c2af60289cb199963312dd1929096c6f49d116f1612a7b97f77169fa5e8a66a372ef8e3ee7167f7d2a26fc6c3cfa4dc5860277223d6eb3460e3b10a0dc9495635a9fca19d7beb5e700498b43bdadc916c01264d22d7969530633f94b257fbc5da7a96820e31444c0b0f62619c9e351996185e4015510875b774666ba5c0ba9845ad25b578d"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x15}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x484ad}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0x9}, @IFLA_BOND_MIIMON={0x8, 0x3, 0x5}, @IFLA_BOND_USE_CARRIER={0x5}]}}}]}, 0x4c}}, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, 0x0, 0x0) accept4(r4, 0x0, 0x0, 0x0) socket(0x10, 0x80003, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 1m37.019884079s ago: executing program 7 (id=725): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000680), &(0x7f00000002c0), 0x9, r2, 0x0, 0x300}, 0x38) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x70}}}}}}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x20000040, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x11, 0x0, 0x0, {[@window={0x3, 0x3, 0x4}]}}}}}}}}, 0x0) 1m35.526652759s ago: executing program 7 (id=729): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x40000000c6302, 0x0) r1 = dup(r0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = epoll_create1(0x80000) read$FUSE(r2, &(0x7f0000002080)={0x2020}, 0x2020) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x96fe82a0aa817180}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020300021100000000000000000000000200080008000000a30000000000000005000600000000000a00000000000000fc02000000000000000000d10f5278481b324500000000000200010000000000000009faffffffff04000500000000000a"], 0x88}, 0x1, 0x7}, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='memory.swap.events\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x11, r1, 0x0) r5 = syz_io_uring_setup(0x1dd6, &(0x7f0000000640)={0x0, 0x237c, 0x800, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) r8 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r9 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r9, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) syz_usb_disconnect(r8) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000080)=[{&(0x7f0000000540)=""/215, 0xd7}], 0x1, 0x0, 0x1}) io_uring_enter(r5, 0x6504, 0x2, 0x62, 0x0, 0x0) syz_open_dev$evdev(&(0x7f000001fa80), 0x20000000, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004400)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r13, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x7, 0x9644, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x9, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x0, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x63c, 0xff, 0x24, 0x3, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x800, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x80000000, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6d, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0xfffffff9, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x0, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x1, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x3, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0xe, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x8000, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x6, 0x8, 0x4, 0x3, 0x9, 0xc, 0x0, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x6, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0xe, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e9, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0x3, 0xc0a1, 0x5, 0x8, 0x7, 0x59, 0x9, 0x2, 0xa3, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x70c, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x7, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x800, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0xb0) 1m28.471436715s ago: executing program 7 (id=743): ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = userfaultfd(0x80001) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) eventfd2(0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000081"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3, 0x20000}) ioctl$UFFDIO_MOVE(r1, 0xc028aa05, &(0x7f0000000240)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000072000/0x4000)=nil, 0x3000, 0x3}) 1m26.030803155s ago: executing program 7 (id=748): r0 = socket$kcm(0x10, 0x5, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) fcntl$getflags(r1, 0x401) r2 = socket(0xa, 0x3, 0x8) getsockopt$WPAN_WANTACK(r2, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$EXT4_IOC_GETFSUUID(r5, 0x8008662c, &(0x7f00000000c0)) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000080)={0x80000000}) 1m24.763251001s ago: executing program 7 (id=753): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48050}, 0x40004) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = socket(0x15, 0x5, 0x0) connect$can_j1939(r1, 0x0, 0x0) getsockname$packet(r1, 0x0, &(0x7f00000005c0)) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x2, 0x2, 0x505, 0x0, 0x0, {}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x1, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f909, 0x8000, '\x00', @string=&(0x7f0000000200)=0x7d}}) 1m23.604592101s ago: executing program 7 (id=756): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x800001, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x200000d4) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000080)={0x6, 'macvtap0\x00', {0x4}, 0xe}) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='pagemap\x00') r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="c26a"]) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000100)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x5fb969700b5b438b, '\x00', 0x0, 0x2}, 0x94) r4 = socket$alg(0x26, 0x5, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x8000) bind$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) accept4(r4, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000240)={0x2, 0x8000, 0x6, 0x2}, &(0x7f0000000280)=0x10) socket$unix(0x1, 0x1, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 1m8.442238978s ago: executing program 36 (id=756): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x800001, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x200000d4) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000080)={0x6, 'macvtap0\x00', {0x4}, 0xe}) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='pagemap\x00') r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="c26a"]) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000100)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x5fb969700b5b438b, '\x00', 0x0, 0x2}, 0x94) r4 = socket$alg(0x26, 0x5, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x8000) bind$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) accept4(r4, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000240)={0x2, 0x8000, 0x6, 0x2}, &(0x7f0000000280)=0x10) socket$unix(0x1, 0x1, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 19.640243562s ago: executing program 6 (id=925): socket$nl_generic(0x10, 0x3, 0x10) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000300)={0xb0000000, 0x6, 0x6, 0x8}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ct={0x2c, 0x1e, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r4, 0xd3) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, 0x0, 0x0) syz_io_uring_setup(0x2b2f, &(0x7f00000003c0)={0x0, 0xe63b, 0x20, 0x0, 0x27f}, &(0x7f0000000280), &(0x7f0000000440)) 17.683919935s ago: executing program 6 (id=928): r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) (async) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, 0x0}, 0x0) (async) close(0xffffffffffffffff) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async, rerun: 32) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c000000240001052abd7000fedbdf2509000000060003"], 0x5c}, 0x1, 0x0, 0x0, 0x8004}, 0x800) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000140)=@x86={0xa4, 0xd, 0x9, 0x0, 0xd1, 0xfe, 0x6, 0x6e, 0xfe, 0x2, 0x30, 0x4, 0x0, 0x9, 0x9, 0x5, 0x2, 0x1, 0x3, '\x00', 0x0, 0x7}) (async) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000100)=@x86={0x1, 0x7, 0x3, 0x0, 0x6, 0xf9, 0xf7, 0x7, 0xd, 0xf7, 0x80, 0x5, 0x0, 0xff, 0x6, 0x3, 0x8, 0xf5, 0x8, '\x00', 0x6, 0x8}) (async) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)={0x34, r4, 0x1, 0x0, 0x3, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc080}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x2f, 0x81, 0xad, 0x7608ffc3, 0x16, @dev={0xfe, 0x80, '\x00', 0x38}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x90b5403b17925c65, 0xa3318a673586c87, 0x9, 0xfffffffa}}) 16.888068411s ago: executing program 6 (id=930): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="287a2b1e4249b36056842350d0f3e74f216f9de7378d7480ace121512e6d632e7bed9d0352ebaa02ca73087560c3068873009fbd6a90344efee587d938", 0x3d}, {&(0x7f0000000440)="4a3df5474ef25db042e402d851c6b86fbdc086c1fa8d9bf9d52eab14948dcfbbd592abc2a705fc759b2b8b13658a366024c1229e10338118750aac002bca2bbdede96ccb3b19b49798328a70e42953bceedfde9fbb9c5a296dfdc57bf0c5e6db630410ba2238a280bba6c4dc92aa303849bf62f4b7ce0e3e96687daa37065b3543f5be61f0415b2722f3203d8a407a98779da259e9349d6b7500f1550d688954d195433c9a00ca3aebd370e89d6206bff3565d529b6f381858342c386e08c7764b810fd800494563837322d12a620279b685bb974552876219383db8", 0xdc}], 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xc7) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) read(r6, &(0x7f0000032440)=""/102364, 0x18fdc) 10.809458791s ago: executing program 4 (id=947): r0 = socket(0x11, 0x80a, 0x0) bind$rxrpc(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = fsopen(&(0x7f00000001c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='v1to_da_alloc', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() timer_create(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000d4bfbd0863b3d1f6db6e9144030400000000fedbdf25000074004f4caeaed733e8b366f5c9e23d37b8a316fcfc8613627f72b2cbfddbba42380cc9c4a304283f09dd48014ad3aebfd96dcaedec7eb6d9e64a804e073ce2de3ccf9523356fa701d6680a02eb10c642d125249b0d444a332bcd1a4a1264bbc1278cc485934c2f78ab05fa3de657f85bb7d4265ba2e738c1e85dea03e0f1a8e87303112e98b039abc13ba85797d26a26371a36eda0251a332f6e570d9e65853eb6f689fda6c6", @ANYRES32=0x0, @ANYBLOB="00080000075005001c0012800b00010062726964676500000c0002800500190002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000009c0)=@ipv4_newroute={0x4c, 0x18, 0x35f32a6dfa7488dd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x28, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x24, 0x1, {{0x1, {0x2b}}, [@mcast2]}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/pids.max\x00', 0x2, 0x0) read$msr(r8, &(0x7f0000000780)=""/4, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0xfffffffe, 0x0, 0x54}, 0x9c) 10.479906172s ago: executing program 8 (id=948): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0xcbb5, 0x0, 0x2, 0x80000000}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) (async) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x83, r5, 0x0, 0x7}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x83, r5, 0x0, 0x7}, 0x38) socket$inet6(0xa, 0x80000, 0x1ff) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r6 = socket$inet_sctp(0x2, 0x400000000001, 0x84) sendto$inet(r6, &(0x7f0000000800), 0x0, 0x801, &(0x7f0000000040)={0x2, 0x4e23, @private=0xa010100}, 0x10) listen(r6, 0xda8c) (async) listen(r6, 0xda8c) r7 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0xa00, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r9, 0x8188aea6, &(0x7f00000003c0)) (async) ioctl$KVM_GET_XCRS(r9, 0x8188aea6, &(0x7f00000003c0)) 9.613980114s ago: executing program 4 (id=949): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) syz_open_dev$video4linux(&(0x7f0000000000), 0x101, 0x0) close(0x3) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x5}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000440)={r2, @in={{0x2, 0x4e23, @broadcast}}, 0x3, 0x0, 0xc47, 0x101, 0x40, 0x80000000, 0x4}, &(0x7f00000001c0)=0x9c) socket$nl_route(0x10, 0x3, 0x0) r3 = getuid() r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x400, {0x1, 0x5, 0x0, '\x00', {0x200, 0xad4, 0x4, 0x4008000, r5, r6, 0x2000, '\x00', 0x1, 0x4, 0xb4e7, 0x6, {0x100, 0xc}, {0x6}, {0x3, 0x9}, {0x8, 0xa00}, 0x8, 0x2000000b, 0x4, 0x3}}}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {r3, r6}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r7, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x39011}}, 0x20}, 0x1, 0x0, 0x0, 0x2}, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x93, 0x7b, 0x48, 0x40, 0x458, 0x704a, 0x7570, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfc, 0x0, 0x0, 0xb9, 0x1f, 0xc6, 0x4}}]}}]}}, 0x0) 9.472967512s ago: executing program 9 (id=951): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1100000004000000040000000c"], 0x50) r0 = memfd_secret(0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r3) setresgid(0x0, r3, 0xee00) fcntl$setlease(r0, 0x400, 0x1) fremovexattr(r0, &(0x7f0000000280)=@known='system.posix_acl_default\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x54, 0x10, 0x401, 0x4000, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x49108}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x16, 0x17}}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x54}}, 0x80) socket$unix(0x1, 0x1, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000180)=0x5) 8.896017292s ago: executing program 8 (id=952): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="a6deb8df8f0029f299bac995589a845ee8eb8e0935ea6f290511a62c26e723dd7d2f98916922f16ffe0ac0f206d6f14406ee341f7fe8c91033a9e4eae3b483b829fdb51f20011f2be4ad65697c2ffc802baa573bb72c991b"], &(0x7f0000000140)='GPL\x00'}, 0x94) (async, rerun: 64) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) (async, rerun: 64) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c4, 0x0, 0x0, 0x180000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x234, 0x0, 0x0, 0x0) write$rfkill(r0, &(0x7f0000000000)={0x0, 0x8, 0x2, 0x1}, 0x8) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async, rerun: 64) r4 = getpid() (rerun: 64) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000040)='big_key\x00', 0x0, &(0x7f00000001c0)="d5f6840d324de4cc01681a4b131d0db7328fac0cfa", 0x15, 0xfffffffffffffffc) (async) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='uid_map\x00') (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, 0x0, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000200)=[{0x15, 0x0, 0x1}, {0x1}, {0x6, 0x0, 0x0, 0xa3e}]}) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='ext4_allocate_inode\x00', r7, 0x0, 0x8}, 0x18) (async, rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x7, &(0x7f0000000100)={0x0, 0x34, 0x2}, &(0x7f0000000180)) 8.101352086s ago: executing program 9 (id=953): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2}}, 0x2}, 0x1c) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1a0a, 0x4) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) (async) r1 = fcntl$dupfd(r0, 0x406, r0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000000)=ANY=[], 0x10) (async) shutdown(r0, 0x1) r2 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000400)={'#! ', './file1/../file0', [{0x20, '\x86\xd7\xb5r\x03z\xf5\xe42\xad\xed\x122\x9db}\xd1\xff\xea\xf2\x812\xd4\xef\xcd.\x8b\xf4\xa71iQA\xb05\x8d\xaf\xe1\xd8\xae-\n\x95\x98\x96\xe8\x0e^\x80S\x9a\xca\xbf\x0e4C\'~_\xd0X\xb9\x94[\xf5,\xe0\xcd\x89\x1c\t\xd0\xf2\xfb\xf8\xfbe\xb2\r\xeeI\x866\xedpm\xccr\xd1\x16\xd7\xbd\x1b\x18\xe9+.6\xdc\x91\xb9\xbft\xfb\x98\xe2\x02!\xfeq'}, {0x20, 'cgroup.stat\x00'}, {0x20, '-,%\']\'\xb7'}], 0xa, "0002783348b29e7bcaf3e29c2593b929f38db16e33ea96f57d49c226f35df5a073e47a165b0074fbf80de701b0728381f07c35183b8242af6ed8d42a819bf58c54c07408000c6cfa4ae3c32d5bf33639adc46109626b2ed71cd479ebddcbfda19e0e6ca9eb13d38b474591444d6d8cd2a19a6fac0ffe438fdc3ea98cb85e6c5efde436c765f41a756412d3e1313b12b8fe28392a16247bf698245c9a62a81049f9fb454ee5b079d185fb5fed191ccb57c7e6bc776ac44449b547d9638178ee672c8294fea94754c20d5f3a19cfd9b8c36883323e8b625e517fcb8b12db92727fd1580a5cf8d91d9709b1f2013689a9343cc0263cb8fe5ffaf5"}, 0x191) (async) write$UHID_INPUT(r3, &(0x7f00000007c0)={0x8, {"dc5d3b0169633d3eba3eabbc09167be55101d4af4b22a373236464d2dbfaa84399b77bd438a54364a7ebc5bdaab4f9decb7c044318cd59a0af8279bcab35dd7daf7a0ceb381df2c32eff45b13e2c8f40e1895355bf6f165200cb1ca41a155730ee2e9f83183f9fafe029d0401b0770618254a8b2dc87b630072b1e2de160d1afed51b74c14b71ec1b226a324482d14ad586b1a4ce80e458fe45244c01eddeddf3564af838d6d5324f8a77023d6eb7aa14397a0e1413ea1c3dfdf063a35b709e627f36fe403ee3117365be5017682f53595f28543062c740a94a794312f5cebc315044b8ea000a5d0f27812ab0ce149d11e6f6f7620c5f3e250bf67d13a1ca39dbb7b8b5a31e3d7ba7ebe5849a7a09b61fc9f2cfc54b89e9cd0105bca49483ce55e0187ce2ad692a18219d881057c838587b915337169ee054655f26a04df913a658fccbf4def6aad750ca4796b74d322c67e9d4ee6a530a22dcc35db850b424d6ec9f62495b9f9fd2b000feadd57d26dbd505798c208d91eb0aab0fd97537631b8bf81ce0e2241c4272be4ff69b390e4485d574146b76d1fdbf7fc5334906805534cdae1e47240af7761a18fc8bd0a694be47529da98bc0f98eb7db3fc4a74cbb6e486f4de90fbf2452e72c2e1dca44543ad9ad094b8bc861eef1e814662d0b350339e3a510d459c6f83aabd5fd3dcb38224056d761e7df9b482b9905f1e2135c1929be328ecdb69c007a3efd548502c83106f6df1ab1178fac499eda92ad4373155227ec2df150c919d322ecb3ea37e659285f18a3e2f79b59900ca438df3a1381380a12d3ad7678e0a8d3bdfb40651389b4ac8c66138d442d70eafdc2df8b080028006b124e4ebe0d9883ef100f1934e42794146382c1d628fd2ebe5859b6c243824903d056d800975675bb1913142adbc039a9c68c2f146a0e8903447313f5e5549905f397a9b1f21a93b80c4d04a8ea7a29a50fbc5407a9305bba420edf898ea678d6879489c39692c99bb6dacf61f5f97637b94c1031d635b5423b38b9196fafaaf87b2796eadc21466af5a10281e6a808748969d29efb444c99a4cb2111732a792dbca4376a125a68f7cdac065cc6173dc21caafba48c742d9a7df2f771ff2f5725b22c247d4e0c6106f9f5f6929b69929ab37e9a9b326ce618bb702b883b12026f1300f21f2c7440cac8c5f1210a78aa067211d2827f5dcc7578252c2ccc3f67bab9d1bb6939b21b550788ef550acfed4bf50c0b4fb3ca4d2872ee64f95d611a317d9daaf373a10d868680b2226396c95fa2b0ab4d6fce06c3b42cb97d17a7b5089061537fdeb1a53040869f7befca330358fdba86754fc2e46c2113e1484cb37534af8f0408a7ee313778dab49f08229964298f847ea66c4ec319f64b6a12da585bc59e82e0263c507b397d3efee3b4066f4d25566aa1549f6185f6375f84b65fa8945148b90430c86a5b6fdf58d5c812b98d9dc621fd9a3d9f1a577495356516d1cbcf5e8bb8923b54b247225b9c3892b18a9e137f3620c734052af9dc8f1ea36f0d4592d5ee32e35676a84dc891f97456f2ac3a4ab58a42bcdc221a4ac8bb28d428add2fcbe5b110a8afd5d23b31e827bd16167b2d88cae024afc04a722ac0b4d45c52512e6b6f102aac4be21bc89ce246539048370553665b0a4336a6db99d0d19399be6437bf21419304331b4342b2c1db580f0c9bf681fdb8e9fa3e025454197bbc82ef93ee2f385660818ec5127080675a8013766469afe3b1e36e81bf2f04c3a26eaf4517551e734d21ba3bc90e48aea0891792970c39f3f528397e9b7ae190f1760fe5960dc763ee0a17939c60bfcac0a8914be82c749e4fe85d1ac5fa733413468fb8941085e8c4d6e0b6d1e62e20da58440facd640ddbb6c1f694b3ca48757a34c5a11668368711a1d4f3a81d31ac30d71277d7ae77882b6841cfa6289e6cce84a3ad57eeb328f831888ac7d3cfcd3a472a48d903f20cec8c8ae8d0bea04ebf7413ef7693f8ed876e49bd5f89d7e1078208ff62712e330fc0341b9ccf26845578d44b1e0c66d1bebc14742baedfabb8e9a2c8f42730360c72997efe0ce786ff330c2eb6e0ff20896f813c2a515ce76f826c11a1c1588eb369231ddeb4a2f9f9591ecdecc74d20aeb50047beb3ab89a9e4e1b805a20b645c79d0bc5d0247fab8ba46a97a07630b1f1cb69b42b568af746733d2c581f057873d64fe6e659b00b4a26745f5fba1fe7406a86b007936c7cfdac53a4c5b0ea9f6604863c8e3f174eddbb09175f6e13cda9a860cf400ef9ed02b895502ac6e6de6a658249c3c6e8a653517eae2231e56e0f120547923c6549ebc1ed14c623637ce3d96af5c93a32e58e2d9659d8b5b145888b52d9a5b5cb3cdf594eb137bcef2ba068cfd2c6ccf7ab6e5b4ec55e9197bfb91c9b8729f7b50cf0b0326f7ea3e712c77674d48545ca2a86744c3c38f149d69cf811beacf7e5f49c7bfba20f1dcf3d7bc0b9c796016820a46495d244c9606a06fe2e14233eda78d69ae4523ad7b708b0c7ead44d7fd376fed60e3cc2ee25e9600adfbe87ac7c8fb8269aec9459602af0f420becda6120ce7d9626c65ae7f860639e8bf664eb4301ec18add0e436c0356c12ab6b4ca35da2b43c4a8c239fd0b59a2ce94843cdfa1667053165053633b062844dbb0d00070fde74fa3178eb5f1f5fd02e2088d8690379f39ab22c080cdcb29d700bac74fabd8a356fe99afe83a5d99aa5024e9158a299eda6c99b6701e64f1d68e7e2c0c6e88396bb535a02d0948f0a250a6e090041c96d9c9acd6134d44d516fd1010c39e572b86b05bb1326a2a4f23f11181186f9c2a01dc7b58c0129f4b851ca9b1e3dc35db7364e29ef646211796b1651511e041345abce427fa5d6e48b8fb078c8432061a4cc518a8f2a2caf709a5c1473a62112a6650afc64eec12f8f9c08cff1b6fbf7a1209fc8661f62303b7c5d49c1d0b32a9f37e81ed9ab6193816d40995ed49c10b9f5752e04d57535a3d16f06c65d32846c31ec9787ec4a965679eb804e86b45d007f38d8104550770dc6f313bc846e43a14a8c21d0628c744e3e83cb998d1b7acfe996541a8c03852dadf9326444c582b481cae844e4f3fe3d638903b38f24633b63adbad841ac6c4c1169d781a0e271e8a967b1c7e986fcb3a66168e86e3559a44fcfa92452260491da9397659af60453f4cd4be2d15439445ec2b4366a79d3283da912d9d499df1242bd174edc235848caa21d2c997aff0e95c7e5cc0803c90fab84e7be7b37909d0e2f3bc9974e3388acb6800baba183ecc8eea8c71c0d65d669e41f99ceae523b7a6b772f3b8ebba1d2127ccc3ddb7ddcb4ec73cbdc26fc87c3848e258a0b5484d3a13e40ec4e4a65dd92f09e9fe1e3e2f8b96c4e363aa3683860dee62dfcf8823ee4a3593a092e0bd9c4cedacf44a272faa164447b01f46a7795642a40c61b0034a37f0e9b792428a0ddcd144fe8263088eaac8016f8f1cd30b55ac90a8f10d785b7570dd9e639a4a068d3fe98a420b9f72e79de817f676c2a224300d749571ad43f49d1fbe838f4566bc7b5f104c384ad87189213152b644d9fcbdf98bafeee569d640ce9045779f1d90024c023a7480a358dee276fba139c14b4fdb12885240903d0e61dc161659a68f62c92b899007e0f2b65bf0a069e9e57c9b6ae50a3b30dd1003fb0eead73ae2f6010b3b356b4060579a4f29935e1f00c01d12e5f44e8e3163d81dfef7ca8560604240c7e96e4454c6971614df306c768121abb3f628e3f1d2d026f58d1087334c5bdb74d7c949b0ee66a4531ba4e9b922aee3d0f802ed034734507a5913c52966f1f8bd4577840de0253aabc23299dced2a299859c07af9fb0f9c29b6533b9d84d471390d59ab315f5ddb226f6b8dd7889295f0fb1f7bd1adafe4cc520a1e84bf2a59d5b9795aeafc8d6fd66a8228aba8653b98622617ddfeb5d6795c9bd2f35d4a0c386e862675a50e3314c3fbb17aca151c13c7fc8b1d1b72ed0a958537b5ddc9e74bddc2b9571ec3f2b7775b125338d4852a75a63941564c65bb36dfb6bea4aab1ae7a4f285c2177aa98406eb2cc10934aa92d5a9612d4455c84ad200841d289b5c2d5deab0d8e2459598ef183d3dc47f6bad0b9513710600cfa4d69fcd5763cdcc4f2c2b7cd7d4491fd52f4aec82ce846c0988f6f0123e21e900d39c61085e68c9badc350b44004f6c042d64b0d0cbf91ad0592b198f1eeea1e52200bc8e6d62848d6884b10bdde72466039da488be6b340c23148f666f2fe6e032c07dac43586df182aca9116f4600313fa8375c76337ba86bdc391dae6450218f58f047ced64befc6bb5c2a60024669630a6279fedf2fe45e7e19ce582ad96ae0d023eb9b39f5f1e666e73bb038ae38157275be5eb3e7cbc8b05adf53e817646bdc2cfce98e5d162bf7faaca787db8717ab8b27b9e35609c5fb9fe9def07f010df8b43cf5c96851eadfdeff0b7bc5826e7e15490ae9c3d14166ee81bef007070e7981235a673804ad89943ee6b51ac63364f7870e121e6ff23a0c7d179527cd58dd7a4ca37247c2bd9efc79b720bb1ee2d39862e98cb81e93cf5b48d5d02ee8ac737ab504c867a1c49e678300803c94fbe978dea918a1e71b9791ee1e4d30056e86c26a4675a8b090be2365c0b451a13ece52a89a7057fe2052e11c6666eb916d823ea66bf217c320acba3b714910734b2d27c2fa586bd7f7664b0d1422adabad2ce2afc10270057f11940fac1a51d023ce48bd04ea39b7f99381b239fd0ddeea0dce7863ec1f8f61775013b6414ecf86e686a340a3148f87a9d7d60a1f2da53436d16fc88d6a4e7c3d55e0dd004cbecc15a5558eb705d82aacb1862ddc251dd5d9cbf1d78f97900ce6e8dab0ea678cb823bd1e7bbd1e927841af08f5427878c19f4f322228f9b36287fc13e7c1293ea875ae73815e052d6c2ebc40df8f7b9d1f76e0b10e35aa160944983d8e6b790df0d9b13f3460657336d81f7d83c0350324b930ec9c7557ce12887f76372e126f504b0980fea27f31a780c05187b9b5353dafc6b101543b24332b96e15bc26b19062e52fa9f86d260ee3a3bc92a133e328407bb85357ee5c45cb87228f44888b14941b5911b050e9319fe88033f830a8490917a9c0572ebbc5492b4e1083a2e3d77215a34abef947b5b9a950e780662de18873e55899c92db3ad3d437e8407890afa6b0c04ef861b8bc85fbbe1bb67b3d9ef001409f84b8ec4f01d861cecc143a805b981ab5cf5b605057b63cb2c84ec358e510a69cd8c33a8a62fe4680d0c980145cc709157832bfaef261cb0466c237376ca2944ce9affffd4b1dc7cc9511da0b34bffb9ac216fb8cf7c6572d95627787720d1ba67c6512fcdb16f6329e9668681c404efebad559f81f05971b5efb6b4cca97ad0346753cc0a40a877242d8a808c602b03dc962cee38e646cb18abb079c70d357c30738a70f55cd3c5956a83a1bfcd6649dd765f16bfe968066345df7380bbc0c16b3b5af513d6458c791343952f33a051c5d711c1f35af1b47f3db9bbfb5c7c636b3a2b52805d606479879be0b404a28ade5649a3185e0f85a85fc15cd824671c2befdd0da509597c87d869f0bd7ad163ad93ca28fc0c4025eccaafe385ec3fc06c54ebcd7b07b6c7e0197c5b9ef886159a1585ae45248f865be760db6f5bc8f868fc6aefd04e34ecb51159e4cdcc2214b42b1ca9caec13ba3e1b2e7a3c736977b226213d265c2873195122a9b448088c8b50edd549be41c38ab176807b75e7267f86e4", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f0000000280)={0x5, 0x0, 0x120000000000, 0x2, 0x500, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x7, 0x0, 0x9, 0x86, 0x800, 0x80000002}, 0x0, 0x0) 7.894591754s ago: executing program 8 (id=955): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000000)={0x1cda0e09, 0xc0f9, 0x6, 0x8, 0xb, 0xc}) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009485d820b4041d93e81d000008010902120001000000000904000000000000000c7649d2187387dfff1b00"], 0x0) 7.796027293s ago: executing program 9 (id=956): sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x200) (async) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x3, [@ptr={0x8, 0x0, 0x0, 0x2, 0x2}, @typedef={0xe, 0x0, 0x0, 0x8, 0x1}, @func={0x1, 0x0, 0x0, 0xc, 0x5}, @typedef={0x4, 0x0, 0x0, 0x8, 0x5}, @fwd={0xe}, @ptr={0xe, 0x0, 0x0, 0x2, 0x5}]}, {0x0, [0x0]}}, &(0x7f0000000340)=""/140, 0x63, 0x8c, 0x1, 0x6, 0x10000}, 0x28) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_open_procfs(0x0, &(0x7f0000000740)='comm\x00') write$P9_RSTATu(r3, 0x0, 0x62) (async, rerun: 32) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f00000000c0)={0x5, {0xb, 0x5, 0x80000000, 0x1}}) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000240)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}], {0x95, 0x0, 0x0, 0xa000000}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0xffffffea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) read(r0, 0x0, 0x0) (async) syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="31010000dccd5e08cb06030000e81600000109022400010000640009043401"], 0x0) 7.514113862s ago: executing program 6 (id=957): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) futex_waitv(&(0x7f0000000b00)=[{0x9, &(0x7f0000000100)=0x188b, 0x2}, {0xecfa, &(0x7f0000000140)=0x1}, {0xc, &(0x7f0000000180)=0x7}, {0x3, &(0x7f00000001c0)=0x6, 0x82}, {0x4, &(0x7f0000000200)=0x80000000, 0x82}, {0xcd, &(0x7f0000000240)=0x3, 0x2}, {0x7, &(0x7f0000000280)=0x6, 0x2}, {0xfffffffffffffffd, &(0x7f00000002c0)=0x14400, 0x2}, {0xffffffffffffa5b1, &(0x7f0000000300)=0x3, 0x82}, {0xe83, &(0x7f0000000340), 0x82}, {0x7, &(0x7f0000000980)=0x1ff, 0x2}, {0x100000001, &(0x7f00000003c0)=0x1, 0x82}, {0x7, &(0x7f0000000440)=0xa9, 0x82}, {0x7fe000, &(0x7f0000000480)=0x7, 0x82}, {0x9, &(0x7f00000004c0)=0xdc6, 0x2}, {0x40, &(0x7f0000000500)=0x7ff, 0x82}, {0x400, &(0x7f0000000540)=0x2, 0x2}, {0x3ff, &(0x7f0000000580)=0x944e, 0x2}, {0x9, &(0x7f00000005c0)=0x9, 0x82}, {0x1, &(0x7f0000000600)=0x4, 0x2}, {0xc, &(0x7f0000000640)=0xfffffffffffffffb, 0x82}, {0x5, &(0x7f0000000680)=0x8, 0x82}, {0x8, &(0x7f00000006c0)=0x5, 0x2}, {0x4, &(0x7f0000000700)=0x9, 0x82}], 0x18, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES16=0xffffffffffffffff, @ANYBLOB="050000000000000000", @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffff070001000406f0027f0006a7000c006400000008000d000000000073f68ac399765b7ab289a21d254ebf1c30920188d7e0527bff31151da7c57628327841e9134f4b"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) syz_emit_ethernet(0x52, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0, @ANYRES32=0x41424344, @ANYRES32=r0], 0x0) r1 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ebffffffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x24, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x3}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20008815}, 0x44) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000000)={0x6, 0x80000000000002, 0x1, 0x3, 0xffffffffffffffff, 0x0, 0x100, 0x10001003}, 0x0, &(0x7f00000002c0)={0x40000400, 0x8, 0xf84, 0x689, 0x2, 0x3ffffffffd, 0x2, 0x8000000000000000}, 0x0, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002d009539b7f360604dc0df250510000008000a"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000086) 6.94767269s ago: executing program 4 (id=958): r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e010000084101", @ANYBLOB="32d33cd83c2d2c0583adf11f83223067407a18"], 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYRESHEX=r1, @ANYRESOCT=r0, @ANYRES64=r2, @ANYRES16=r0], 0x48) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000240)={0x53, 0xfffffffffffffffc, 0x6, 0xff, @scatter={0x0, 0x1200, 0x0}, &(0x7f0000000100)="48cc75cbcaea", 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xe, 0xfff2}, {0x6, 0xd}, {0x6, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x2000c8f0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={r2, 0x40, 0x1ff, 0x4}) 6.511820781s ago: executing program 0 (id=961): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000060a010400000000000000000a0000010900010073797a310000000028000480240001800b000100736f636b6574000014000280080002400000001508000140000000010900020073797a32"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20000050) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) lsetxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x2) syz_emit_ethernet(0x3a, &(0x7f0000000240)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x11, 0x5, @private=0xfffffffc, @rand_addr=0x4}}}}}}, 0x0) 6.020319707s ago: executing program 9 (id=962): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) unshare(0x2c020400) r0 = msgget$private(0x0, 0x240) read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace$ARCH_MAP_VDSO_32(0x1e, r1, 0x9bc, 0x2002) msgsnd(r0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) syz_emit_ethernet(0x82, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe78, 0x0, 0x0, 0x10, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) socket$kcm(0x29, 0x2, 0x0) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000100)={0x0, 0xf786, 0x800, 0x0, 0x36c}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) r7 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) write$binfmt_script(r7, &(0x7f00000001c0)={'#! ', './file0', [{0x20, 'RWAl'}]}, 0xfffffd81) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x18}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) 5.577525397s ago: executing program 0 (id=963): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x6000000, [{}]}]}}, &(0x7f0000000f40)=""/4096, 0x2e, 0x1000, 0x9}, 0x28) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000540)={'pcm3724\x00', [0x109, 0x80008000, 0x866, 0xc, 0x80000000, 0x40, 0x9, 0xf, 0x1000, 0x1, 0x1, 0x5, 0x6, 0x746, 0x6, 0x6, 0xffffffab, 0x2000001, 0x0, 0x65c, 0x3ff, 0x10004, 0x800, 0xe2e0, 0xc, 0x4b, 0x8, 0x7, 0x7, 0x5, 0x5, 0x1000000]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000240)={0x7, 'syzkaller1\x00', {0x101}, 0x1}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x29, 0x8, 0x3, 0x401, 0x10, @private0={0xfc, 0x0, '\x00', 0x10}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x8000, 0x5, 0x803}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x12, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x10, '\x00', r3, 0xf, r2, 0x8, 0x0, 0xf, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000200)={r2, 0x0, 0x0, 0x10000}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r7 = socket$kcm(0x11, 0x2, 0x0) close(r7) r8 = socket$kcm(0x11, 0x2, 0x0) r9 = socket$kcm(0x11, 0x200000000000002, 0x300) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) fcntl$lock(r10, 0x7, &(0x7f0000000040)={0x0, 0x2, 0x5, 0x6}) fcntl$lock(r10, 0x7, &(0x7f0000000280)={0x1, 0x1, 0x7, 0x10}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r11, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff) setsockopt$sock_attach_bpf(r9, 0x107, 0x12, &(0x7f00000000c0)=r8, 0x8) r12 = socket$kcm(0x11, 0x2, 0x0) r13 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r13, 0x107, 0x12, &(0x7f00000000c0)=r12, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r14, 0x107, 0x12, &(0x7f00000000c0)=r7, 0x8) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001900)=@newlink={0x58, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40220}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1d}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffe}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 4.87164567s ago: executing program 4 (id=964): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x41fec472531ebcab, 0xde) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x14, 0xc, "00f9737227af149989fc8dbe43ea6affffffffdc25f5ab60c9e6d680f985881a4c516bdd010f35000000b0000006000800000000000000005c9f000000002200", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 4.685467556s ago: executing program 9 (id=965): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x378, &(0x7f00000001c0)=ANY=[@ANYBLOB="b000004e461bf8513f642b7378947430d76d192e4c158412921bbbd958a738c424ea4db191374bafa88a638fe3d432a6fc39226d299134b3cb1f456ec4ce6836e5952c8bfd9425788af7656f4feeebf86446a6b9315d597cc2c16749d0d81dc722c442e9bd2e1c8bf68a0b50ef997cc71926bb4caf98a46dc709fa4be2813044aa4686d3921fe412da50987a87770f0b80ca528f834208e99c58884e97c191f2c94807e3f9b4b2a53d48a36944adf03ed04bd8c231ff004efe"]) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000030000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) open(&(0x7f0000001100)='./file0\x00', 0x0, 0x80) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001140)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r3, 0xc0485630, &(0x7f0000001180)={0x2, "4418b7a09f72c6f8f595b0ddfba89f74e40d68df4234fabaa28cf50a93ba52fc", 0x1, 0x3, 0x4, 0x10, 0x6}) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x68}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x1d8, 0x12, 0x60d, 0x1d8, 0x202, 0x2a8, 0x2e8, 0x2e8, 0x2a8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@local, @mcast1, [], [], 'veth0_to_team\x00', 'macsec0\x00'}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/mdstat\x00', 0x0, 0x0) read$hiddev(r9, &(0x7f00000000c0)=""/4092, 0xffc) preadv(r9, &(0x7f0000001300)=[{&(0x7f0000000040)=""/17, 0x11}], 0x1, 0x10000, 0x0) read$msr(r9, &(0x7f0000000180)=""/92, 0x5c) 4.632040592s ago: executing program 8 (id=966): socket$kcm(0x10, 0x2, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000b000000000fe019078ac1e0001ac1414aa0301907803240000450000000001000000290005ac1414aa640101028677fffeffff000ce256b28c59881681fb520009020007651442eb000e7434954373561de584b703c80009e706d30bd224f80207cfa11cab1a00108475be675de6a70a05a0dc91e5c6000a6580a5e97612fe86001273bc23f9ffffffa30900a301c84600000012c8"], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="380100001a0001000000000000000000fe80000000000000000000000000001eac1414bb00"/62, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe880000000000000000000000000001000000006c0000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x138}}, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000040)=""/84) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$binfmt_script(r2, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'axA\x9b^\xfb^$\r\'uij\r\xd9\xef\xd2Et^Q\v\x9fOFL\x95`Z\xae\xc3a\xfe%\x94\x1a\xebt\xc6\x06\x8fD,\xf7\xae#\x80\x80\xdf\xa3\xcaO\xc6\x8a\x91\x90\xadR\aW\xe1\xf3n\xca\xa3\x8f\xd6F\x03\x0e\x9b\xe5yb\xfc\xa19wUs\x83\xf1{&\n\x1d\x8e\x82y\x1a.B\x0e\xea\x17\xc7\xe7H\xa9\xd4\x8e\xe7 gD\x89*\xb5c\xc5\x8a\xe6R\xe5YGq\xf5\xb6\x95\xbc\x112\x9bno\xc8\x06\xb6\b\xcc\x03{Sn\x94G\x01\xb4\xffJQ8t\x99vY\xaaf\xc7,\x9f\xbb\x15G\x1cr\x19\xef\xab\n\xa8\xbc\xbd\xa2E\x16\x1cm\xbd=\x98\x7fU\xcbg\x15%\x95\xb11\x017\x83*\x14\xcbt\xc2\xcb\x04\x1e~?\xb9j\x18\x96\x84EA\xeaB\a\x83\xba\xdco<\x00'/256}]}, 0x10c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r4, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r4, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) 4.626807529s ago: executing program 4 (id=967): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x810, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) getsockname$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xffffffffffffdffd, &(0x7f0000006680)=0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) set_mempolicy_home_node(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x810, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x3, 0x0) (async) getsockname$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x10) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xffffffffffffdffd, &(0x7f0000006680)=0x20) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) set_mempolicy_home_node(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x0) (async) 4.30365626s ago: executing program 0 (id=968): socket(0x2, 0x80805, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x2c, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0x2c}}, 0x4000040) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000180)=0x8) (async) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) (async) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) migrate_pages(0x0, 0x4, 0x0, 0x0) (async) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) epoll_create(0x3) 3.506307196s ago: executing program 8 (id=969): bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189) syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, &(0x7f0000000040)=0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0, 0x0, 0x1}, 0x18) rename(0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x6, 0xb}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff80850000000400000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r11}, 0xc) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) 3.415924403s ago: executing program 4 (id=970): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000780)={'gre0\x00', 0x0, 0x8, 0x7, 0x3, 0xf94, {{0xd, 0x4, 0x0, 0x9, 0x34, 0x68, 0x0, 0x7, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @dev={0xac, 0x14, 0x14, 0x12}, {[@generic={0x44, 0xb, "017c9923bdd7a22219"}, @timestamp_prespec={0x44, 0x4, 0x4a, 0x3, 0x9}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xb, 0x3b, [@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={0xffffffffffffffff, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x22, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x0, 0x0, &(0x7f0000000940), 0x8, 0xed, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000b00)={@multicast2, @rand_addr, 0x0}, &(0x7f0000000b40)=0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000180)={'ip_vti0\x00', 0x0, 0x8, 0x7800, 0x8, 0x40, {{0xf, 0x4, 0x1, 0xb, 0x3c, 0x65, 0x0, 0xe, 0x2f, 0x0, @broadcast, @multicast1, {[@end, @cipso={0x86, 0x20, 0x0, [{0x2, 0x9, "7cc071bb8e0742"}, {0x2, 0x11, "bcb02ae952e8a4d4a5dffcc91695b8"}]}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f80)={&(0x7f0000001000)=ANY=[@ANYBLOB="64010000", @ANYRES16=0x0, @ANYBLOB="200029bd7000fbdbdf25040000006400018014000200677265746170300000000000000000001400020073797a6b616c6c657230000000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002006c6f00000000000000000000000000001400020076657468305f766c616e000000000000500001801400020069703665727370616e300000000000001400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYRES64=r3, @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f627269646765001400018008000100", @ANYRES32=0x0, @ANYBLOB="08000300020000002c000180140002006261746164763000000000000000000014000200626174616476300000000000000000000400013dae0000000000008008000100a9c1bba519752e3fb8952ffed360aa6eff2f6aef282920ce836bb58117af7c6b06e73723e42e94d1b1fb70cdbf36e62dd4262af4044f036846525bff168e92109dd8a078ef9ec6df3e82c7997080defec040ad5d4220285f98597104ed9262772712ee7c6032a46798f24f302e7868520d8685bcc19d6242b6089d8d61adca9a99a60b2c3af03418d8ea4f77c0ffb4e7cb3096bd438a2d976efcfefac71307655dbd1202e96ee700cacb2393541e0744e6b59c6d977ca672fbee0be1039bf35b1978ca5f166812dd2f", @ANYRES32=r3, @ANYBLOB="080003000200000008000100", @ANYRES32=r4, @ANYBLOB="0800030001000000140002006d6163767461703000000000000000001c00018008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB], 0x164}, 0x1, 0x0, 0x0, 0x480d4}, 0x4040000) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r6, 0x2) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 3.264184196s ago: executing program 6 (id=971): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x3, &(0x7f0000000140)) socket$inet_icmp(0x2, 0x2, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x3e, 0x0, 0xa}, 0x28) getpgid(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r5) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x8c5) chdir(&(0x7f00000001c0)='./file0\x00') r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IMADDTIMER(r7, 0x80044940, &(0x7f0000000000)) unlinkat(r6, &(0x7f0000000280)='./file0\x00', 0x200) 3.243915376s ago: executing program 0 (id=972): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = syz_open_dev$vim2m(&(0x7f0000002440), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000002740)={0x0, 0x1011, 0x3, @discrete={0x8, 0x11}}) getpid() sched_setscheduler(0x0, 0x3, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setresuid(0x0, 0xee00, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x200008f}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x9, 0x63) sendmsg$inet6(r5, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e26, 0x80000, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="1800000000000000290000003b000000850000000000000018"], 0x30}, 0x24000004) sendto$inet(r4, &(0x7f0000000580)="5ca7bb", 0x3, 0x40000d5, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000001380)=ANY=[@ANYBLOB="1800000000000000002000000000000071182e000000000095000000000000005458907f8f258496f7a0a3cbccb3121ecf36fe5b8e7d9bfab5211ebb9abcc7918b847a040000000000000026bb75e2d24ba7bda6da2772b86f6e11fa6f4646a74127cc36a3af830250999926a1e542d85d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newqdisc={0x30, 0x11, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0x2}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004090}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffff8, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r7 = io_uring_setup(0x7ad0, &(0x7f0000001300)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff020000007110df6b5011e819a4b79786f595025a"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r7, 0x1e, &(0x7f0000000000)=[r7], 0x1) 2.600133256s ago: executing program 8 (id=973): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000020904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)={0x0, 0x1, 0x6, "cc17fc47a9ae"}, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000440)={0x20, 0x15, 0x2, "12fb"}, 0x0, 0x0}) 1.154310662s ago: executing program 0 (id=974): bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1) openat$comedi(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') readv(r1, &(0x7f0000000780)=[{0x0, 0x29}, {&(0x7f0000000300)=""/41, 0x29}], 0x2) listen(r0, 0x83) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0xfffffffc) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000003c0)={0x0, 0x6}, 0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000400)={0x0, 0x5b, "a2bc22233f4234d7356a1ff5f3e871c89cbcd2b373b7ad1e4beea35a154b0457e90325249340d47f587506ff79c7a7767f9c76278c0a237ad6327efe5eff83e2c6499ff7c6ba1b66f64f6cf3cbf918465abe2954806b373a97d5a3"}, &(0x7f0000000100)=0x63) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0xc6d7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x800) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x238e01, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000200)=[{&(0x7f00000002c0)="94", 0x1}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 422.466319ms ago: executing program 0 (id=975): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0xdd3) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x32ce750b, 0x61}) syz_usb_connect(0x0, 0x480, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x8c, 0xc6, 0xe4, 0x40, 0x1b3d, 0x930d, 0x2fbd, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x412, 0x1, 0xc, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcb, 0x0, 0xd, 0xbd, 0x6, 0x4, 0x0, [@generic={0x74, 0x1, "81038f1df34f2cf3fa4e0058e343b8a28de9221903ac7a5b00cbd111dc90e3e77acc6993bdb4ef74738f52c9a3779250cab798dceff9d3cad7753dd7cf20c4e5b8c700c36842f5209e3ab44b6311ba3e3a2882731292f9722512d3b4ca1096dfc8c5ab179432821915014135e1fc8186aa17"}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0x9, 0x2, 0x1001}]}], [{{0x9, 0x5, 0x6, 0x4, 0x8, 0x3, 0x6, 0x7}}, {{0x9, 0x5, 0x2, 0x3, 0x40, 0x8, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xff, 0x100}]}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0xe, 0x4, 0x7f, [@generic={0xac, 0x21, "7a63bd1cf19570a187c04d6ca3d367624d23d28b36d8699be5bd00618889b5e7c91d2b9ffe7eee1c4ea90f8b2f52632e35f2cddb88a220d834ce2e426fa4f61a9e33d150111678d3a79b65771b4c4f7207ddab30a071a8bd2c9f1c562d4d8415b7b57e1fe16f0529e9fc576cfdd7814b9dd51f7d1695aab79ca71da4c34d9a12df26fd78d593bbe833147b042449bc8b7baa77535ac90f42bfb340ca05222ff2392f5fa7d4411f650d63"}]}}, {{0x9, 0x5, 0x3, 0x3, 0x10, 0x0, 0x40, 0x9, [@generic={0x90, 0xa, "09283ddd87094b6fe701eaa31cd80f29386d9ca83c7c0aa8911ed660dab71a8bfa935c7fe1c448db5b1645f0a5de9728c50988da77501f457d530b47aa32787e217a26f1d06521331001df3cc30743bab78c22793c5fcb4e421b860db9fa1a856d0eaa3ff2e8066662dfa83de29a14584d3ebf5ca41958894989ba87df90cd99df46ea1e25830419158ce2533cf9"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x8, 0xb, 0x50, 0xd, [@generic={0xf7, 0x10, "9732fcf473a0795e097e2f827e93178de9f9cbf0457ec8c4dec25d58bdbbeae4677919622343360915ea6a3d282b22140e8c3565166e87033114fe872919260908c69da96fc699447fe64b0f638c2fe46003473983bbbb69f126ab00111aae9f8c1ecbf353a5ad8c5389b4bbc37522919a89bb22aaf38805844f37d687cd720e2916c1813100d9294e4408696047d768fff05ac539361abab2090d84c60ae52869bcb09adf122619ec8604e87594ae18557039a69c4400dd0b94a497203e50e5aa556d33ef749c7171b8b237f3290768cec40531af64edc6e83c82134204070fbbf4a5a0d6d94ff6106183747f400ddd02cd49491e"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0xf, 0x800}]}}, {{0x9, 0x5, 0x2, 0x0, 0x0, 0x9, 0x40, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x40}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x4, 0x1, 0x0, [@generic={0xa5, 0x5, "b078ee4219aded2384edb01a623cad803489fc704fc7260abb54b5cabed4fabc8494211236c2a492ee74d8a4b184832ffe2915be72851dd02a23fe02577dfc1fb7f8968f37f4a020142e85b18478e0197b09997dbbc0cea058871442583df70e203e665dfc3933d46d31ef04a780129c563aca181096f97d6ca8510f65d02cac8285c0744d8b01b3192e2e853103191b51d107bf12d2e5e4a8b5270194eb4a8173b69c"}]}}, {{0x9, 0x5, 0xa, 0x1, 0x200, 0x8, 0xb5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x40, 0x6}]}}, {{0x9, 0x5, 0x2, 0x2, 0x20, 0x8, 0x0, 0xff}}, {{0x9, 0x5, 0xf, 0x2, 0x40, 0x7f, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0x2}]}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0x5, 0x40}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x2, 0x81, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x6fc}]}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x5, 0xd, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x2}]}}]}}]}}]}}, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x95, &(0x7f00000008c0)={{0x12, 0x1, 0x51e77f9d46f1bd3, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x1, 0x1, 0x2, 0x40, 0xea, [{{0x9, 0x4, 0x0, 0x1, 0x3, 0x2, 0x6, 0x0, 0x5, {{0xb, 0x24, 0x6, 0x0, 0x0, "35d1e03975a9"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x8, 0xff, 0x9, 0x96}, [@obex={0x5, 0x24, 0x15, 0x4}, @mbim={0xc, 0x24, 0x1b, 0x1000, 0x5, 0xf, 0x2, 0x6, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x1e5a, 0x5, 0x7}, @acm={0x4, 0x24, 0x2, 0x5}, @dmm={0x7, 0x24, 0x14, 0x689}, @mdlm={0x15, 0x24, 0x12, 0xa810}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x7f, 0x80, 0x80}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x1, 0xd5, 0xd}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x5, 0x20, 0x1}}}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x1, 0x0, 0x2, 0x10, 0x3}, 0xf, &(0x7f0000000040)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x3, 0x62, 0xa0}]}, 0x6, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x459}}, {0x84, &(0x7f00000005c0)=@string={0x84, 0x3, "870360d21e0cb81b10e2c5ea3f766c2e32701d98e059e02314f28d857bac6d8f32bbbc65b3e5f61b05ea02a52d5f28dba628654297b77c7ab8a22ba2ee5bc7229bbc313d09b2f656f6a94334868b57d94f75f73e8814343f44e0da90a4c6828dfe45fed4b6e86a6b0e489d658cc6c15e01c1cd4f7805a9f102649b0791c47fe0a43d"}}, {0x68, &(0x7f00000004c0)=@string={0x68, 0x3, "6678ae1555b24ebb5ec22a02424aefe43dda83e7002634e14833a633771eb856bd7d8d093d970000000000000000003a71d01b44ffc1dee6c909b6a3638f967fd0d31b2e956f579182cb56fe4c302c29e1f078ab06e7e889a37be04bedf464fbbc0e3adc5ed0"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x426}}, {0x15, &(0x7f0000000700)=@string={0x15, 0x3, "d307566406b61fc47c2bb8014de2a0e99ea1a3"}}, {0x9, &(0x7f0000000740)=@string={0x9, 0x3, "f4b7b603921f6c"}}]}) 124.695833ms ago: executing program 6 (id=976): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x3, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000001e00), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001e40)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fedbdf2501000000100007800c00018008000100", @ANYRES32=r5, @ANYBLOB="0c0005004fc31bfd000000000c0002"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$F2FS_IOC_RESIZE_FS(r5, 0x4008f510, &(0x7f00000001c0)=0x6) sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r6, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) epoll_create(0x3) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file0'}, 0xfdef) 0s ago: executing program 9 (id=977): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) (async) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000400)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f0000004280)='.\x00', 0x800, 0x0) getdents64(r2, &(0x7f0000000240)=""/48, 0x30) pselect6(0x40, &(0x7f0000000080)={0xffffffffffffffd7, 0x1, 0x4, 0xcc1e, 0xffffffffffffffff, 0x6, 0x298, 0x9}, &(0x7f00000000c0)={0x9, 0x3, 0x3, 0x3, 0x1c, 0xb, 0xd0, 0x6b3549c0}, &(0x7f0000000100)={0x101, 0x1180000, 0x8001, 0x5, 0x4, 0x1, 0xff, 0x6}, &(0x7f0000000180)={0x77359400}, &(0x7f0000000300)={&(0x7f0000000280), 0x8}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x841, 0x1c8) fanotify_init(0x2, 0x800) (async) r4 = fanotify_init(0x2, 0x800) fanotify_mark(r4, 0x80, 0x8000000, r3, &(0x7f0000000340)='./cgroup/cgroup.procs\x00') getdents(r2, &(0x7f0000000000)=""/73, 0x49) connect(r0, &(0x7f0000000580)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x80) (async) connect(r0, &(0x7f0000000580)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x80) kernel console output (not intermixed with test programs): 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 293.072929][ T5909] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 293.082714][ T5909] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.146649][ T5909] usb 8-1: config 0 descriptor?? [ 293.209437][ T8567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.551'. [ 293.218485][ T5909] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 294.758571][ T8567] netlink: 52 bytes leftover after parsing attributes in process `syz.4.551'. [ 295.056979][ T5909] usb 8-1: USB disconnect, device number 8 [ 297.245723][ T5909] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 297.311958][ T5834] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 297.880287][ T5834] usb 6-1: Using ep0 maxpacket: 8 [ 297.890694][ T5834] usb 6-1: too many configurations: 104, using maximum allowed: 8 [ 298.965356][ T5834] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 298.990855][ T5834] usb 6-1: can't read configurations, error -71 [ 299.050952][ T8586] FAULT_INJECTION: forcing a failure. [ 299.050952][ T8586] name failslab, interval 1, probability 0, space 0, times 0 [ 299.064021][ T8586] CPU: 0 UID: 0 PID: 8586 Comm: syz.6.554 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 299.064047][ T8586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 299.064059][ T8586] Call Trace: [ 299.064068][ T8586] [ 299.064076][ T8586] dump_stack_lvl+0x189/0x250 [ 299.064104][ T8586] ? __pfx____ratelimit+0x10/0x10 [ 299.064125][ T8586] ? __pfx_dump_stack_lvl+0x10/0x10 [ 299.064147][ T8586] ? __pfx__printk+0x10/0x10 [ 299.064181][ T8586] ? __pfx___might_resched+0x10/0x10 [ 299.064206][ T8586] should_fail_ex+0x414/0x560 [ 299.064233][ T8586] should_failslab+0xa8/0x100 [ 299.064257][ T8586] __kmalloc_noprof+0xcb/0x4f0 [ 299.064276][ T8586] ? ovl_get_fh+0x197/0x660 [ 299.064309][ T8586] ovl_get_fh+0x197/0x660 [ 299.064348][ T8586] ovl_lookup+0xfb6/0x1bc0 [ 299.064378][ T8586] ? percpu_ref_get_many+0x19/0x140 [ 299.064421][ T8586] ? __lock_acquire+0xab9/0xd20 [ 299.064452][ T8586] ? __pfx_ovl_lookup+0x10/0x10 [ 299.064492][ T8586] ? do_raw_spin_unlock+0x122/0x240 [ 299.064523][ T8586] ? _raw_spin_unlock+0x28/0x50 [ 299.064561][ T8586] ? d_alloc+0x144/0x190 [ 299.064591][ T8586] lookup_one_qstr_excl_raw+0x115/0x280 [ 299.064631][ T8586] do_unlinkat+0x1d6/0x560 [ 299.064659][ T8586] ? __pfx_do_unlinkat+0x10/0x10 [ 299.064687][ T8586] ? getname_flags+0x1e5/0x540 [ 299.064717][ T8586] __x64_sys_unlink+0x47/0x50 [ 299.064736][ T8586] do_syscall_64+0xfa/0x3b0 [ 299.064756][ T8586] ? lockdep_hardirqs_on+0x9c/0x150 [ 299.064777][ T8586] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.064797][ T8586] ? clear_bhb_loop+0x60/0xb0 [ 299.064823][ T8586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.064842][ T8586] RIP: 0033:0x7f035c38ebe9 [ 299.064861][ T8586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.064879][ T8586] RSP: 002b:00007f035d290038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 299.064901][ T8586] RAX: ffffffffffffffda RBX: 00007f035c5b6090 RCX: 00007f035c38ebe9 [ 299.064916][ T8586] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 299.064928][ T8586] RBP: 00007f035d290090 R08: 0000000000000000 R09: 0000000000000000 [ 299.064941][ T8586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.064952][ T8586] R13: 00007f035c5b6128 R14: 00007f035c5b6090 R15: 00007ffd2c7fce58 [ 299.064988][ T8586] [ 300.141966][ T5840] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 300.649857][ T5840] usb 8-1: Using ep0 maxpacket: 8 [ 300.789324][ T5840] usb 8-1: config 0 has an invalid interface number: 52 but max is 0 [ 300.797491][ T5840] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.812852][ T5840] usb 8-1: config 0 has no interface number 0 [ 300.852992][ T5840] usb 8-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 300.884599][ T5840] usb 8-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 300.968892][ T5840] usb 8-1: config 0 interface 52 has no altsetting 0 [ 301.068807][ T5840] usb 8-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 301.088161][ T5840] usb 8-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 301.104641][ T5840] usb 8-1: Manufacturer: syz [ 301.131967][ T5840] usb 8-1: config 0 descriptor?? [ 301.184658][ T5840] hub 8-1:0.52: bad descriptor, ignoring hub [ 301.191773][ T5840] hub 8-1:0.52: probe with driver hub failed with error -5 [ 301.235442][ T8620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.258458][ T978] IPVS: starting estimator thread 0... [ 301.381296][ T8622] IPVS: using max 44 ests per chain, 105600 per kthread [ 301.391559][ T8620] netlink: 8 bytes leftover after parsing attributes in process `syz.6.561'. [ 301.405516][ T5840] input: syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.52/input/input12 [ 301.592219][ T8620] netlink: 8 bytes leftover after parsing attributes in process `syz.6.561'. [ 302.448497][ T5908] usb 8-1: USB disconnect, device number 9 [ 302.704629][ T978] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 303.238235][ T8646] FAULT_INJECTION: forcing a failure. [ 303.238235][ T8646] name failslab, interval 1, probability 0, space 0, times 0 [ 303.254884][ T8646] CPU: 0 UID: 0 PID: 8646 Comm: syz.7.568 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 303.254913][ T8646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 303.254924][ T8646] Call Trace: [ 303.254933][ T8646] [ 303.254942][ T8646] dump_stack_lvl+0x189/0x250 [ 303.254970][ T8646] ? __pfx____ratelimit+0x10/0x10 [ 303.254994][ T8646] ? __pfx_dump_stack_lvl+0x10/0x10 [ 303.255017][ T8646] ? __pfx__printk+0x10/0x10 [ 303.255050][ T8646] ? __pfx___might_resched+0x10/0x10 [ 303.255073][ T8646] ? fs_reclaim_acquire+0x7d/0x100 [ 303.255103][ T8646] should_fail_ex+0x414/0x560 [ 303.255131][ T8646] should_failslab+0xa8/0x100 [ 303.255156][ T8646] __kmalloc_cache_noprof+0x70/0x3d0 [ 303.255175][ T8646] ? ovl_check_origin_fh+0x4f8/0x760 [ 303.255201][ T8646] ? ovl_path_check_xwhiteout_xattr+0x221/0x2d0 [ 303.255231][ T8646] ovl_check_origin_fh+0x4f8/0x760 [ 303.255258][ T8646] ? rcu_is_watching+0x15/0xb0 [ 303.255290][ T8646] ? __pfx_ovl_check_origin_fh+0x10/0x10 [ 303.255330][ T8646] ovl_lookup+0x10a1/0x1bc0 [ 303.255361][ T8646] ? percpu_ref_get_many+0x19/0x140 [ 303.255403][ T8646] ? __lock_acquire+0xab9/0xd20 [ 303.255433][ T8646] ? __pfx_ovl_lookup+0x10/0x10 [ 303.255474][ T8646] ? do_raw_spin_unlock+0x122/0x240 [ 303.255504][ T8646] ? _raw_spin_unlock+0x28/0x50 [ 303.255533][ T8646] ? d_alloc+0x144/0x190 [ 303.255563][ T8646] lookup_one_qstr_excl_raw+0x115/0x280 [ 303.255604][ T8646] do_unlinkat+0x1d6/0x560 [ 303.255632][ T8646] ? __pfx_do_unlinkat+0x10/0x10 [ 303.255660][ T8646] ? getname_flags+0x1e5/0x540 [ 303.255689][ T8646] __x64_sys_unlink+0x47/0x50 [ 303.255708][ T8646] do_syscall_64+0xfa/0x3b0 [ 303.255738][ T8646] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.255757][ T8646] ? asm_sysvec_call_function_single+0x1a/0x20 [ 303.255776][ T8646] ? clear_bhb_loop+0x60/0xb0 [ 303.255802][ T8646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.255821][ T8646] RIP: 0033:0x7faa5af8ebe9 [ 303.255839][ T8646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.255857][ T8646] RSP: 002b:00007faa5bd32038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 303.255878][ T8646] RAX: ffffffffffffffda RBX: 00007faa5b1b6090 RCX: 00007faa5af8ebe9 [ 303.255893][ T8646] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 303.255905][ T8646] RBP: 00007faa5bd32090 R08: 0000000000000000 R09: 0000000000000000 [ 303.255917][ T8646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.255929][ T8646] R13: 00007faa5b1b6128 R14: 00007faa5b1b6090 R15: 00007ffe782eef68 [ 303.255965][ T8646] [ 303.568729][ T978] usb 5-1: Using ep0 maxpacket: 16 [ 303.576198][ T978] usb 5-1: config index 0 descriptor too short (expected 42, got 18) [ 303.584518][ T978] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 219, using maximum allowed: 30 [ 303.595345][ T978] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 219 [ 303.610465][ T978] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 7.06 [ 303.619590][ T978] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 303.627598][ T978] usb 5-1: Product: syz [ 303.631821][ T978] usb 5-1: SerialNumber: syz [ 303.672582][ T978] r8152-cfgselector 5-1: Unknown version 0x0000 [ 303.678946][ T978] r8152-cfgselector 5-1: config 0 descriptor?? [ 303.689232][ T978] hub 5-1:0.0: bad descriptor, ignoring hub [ 303.695156][ T978] hub 5-1:0.0: probe with driver hub failed with error -5 [ 303.895430][ T8637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.904260][ T8637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.055199][ T8653] netlink: 'syz.4.566': attribute type 1 has an invalid length. [ 304.083376][ T8653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.094629][ T8653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.545667][ T60] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.556534][ T978] r8152-cfgselector 5-1: USB disconnect, device number 28 [ 304.647183][ T8659] netlink: 40 bytes leftover after parsing attributes in process `syz.7.570'. [ 304.754154][ T60] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.779014][ T5908] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 304.874381][ T60] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.941117][ T5908] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 304.973723][ T5908] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 305.022948][ T5908] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 305.052922][ T60] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.088215][ T5909] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 305.151034][ T5908] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 305.184202][ T5908] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.99 [ 305.201751][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.283657][ T5908] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 305.330947][ T5909] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 305.377040][ T5909] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 305.477669][ T5909] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 305.552962][ T5909] usb 8-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 305.610484][ T5909] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 305.633215][ T5909] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.753713][ T60] bridge_slave_1: left promiscuous mode [ 305.789240][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.797076][ T30] audit: type=1326 audit(1755475649.609:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8673 comm="syz.4.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9158ebe9 code=0x7ffc0000 [ 305.837671][ T30] audit: type=1326 audit(1755475649.609:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8673 comm="syz.4.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9158ebe9 code=0x7ffc0000 [ 305.866845][ T30] audit: type=1326 audit(1755475649.619:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8673 comm="syz.4.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f2b9158ebe9 code=0x7ffc0000 [ 305.874011][ T6622] udevd[6622]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 305.889852][ T30] audit: type=1326 audit(1755475649.619:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8673 comm="syz.4.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9158ebe9 code=0x7ffc0000 [ 305.919410][ T60] bridge_slave_0: left allmulticast mode [ 305.953673][ T60] bridge_slave_0: left promiscuous mode [ 305.970944][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.999996][ T5909] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 306.018883][ T5908] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 306.019061][ T30] audit: type=1326 audit(1755475649.619:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8673 comm="syz.4.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9158ebe9 code=0x7ffc0000 [ 306.050769][ T30] audit: type=1326 audit(1755475649.619:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8673 comm="syz.4.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f2b9158ebe9 code=0x7ffc0000 [ 306.095033][ T5909] usb 8-1: invalid MIDI out EP 0 [ 306.193790][ T5908] usb 1-1: USB disconnect, device number 28 [ 307.295360][ T5909] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 307.591971][ T10] usb 8-1: USB disconnect, device number 10 [ 307.635852][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 307.666695][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 307.675842][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 307.696501][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 307.705471][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 308.219675][ T8688] tty tty3: ldisc open failed (-12), clearing slot 2 [ 308.965159][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.986839][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.007006][ T60] bond0 (unregistering): Released all slaves [ 309.076659][ T8700] FAULT_INJECTION: forcing a failure. [ 309.076659][ T8700] name failslab, interval 1, probability 0, space 0, times 0 [ 309.094913][ T8700] CPU: 0 UID: 0 PID: 8700 Comm: syz.7.580 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 309.094942][ T8700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 309.094954][ T8700] Call Trace: [ 309.094962][ T8700] [ 309.094971][ T8700] dump_stack_lvl+0x189/0x250 [ 309.094999][ T8700] ? __pfx____ratelimit+0x10/0x10 [ 309.095021][ T8700] ? __pfx_dump_stack_lvl+0x10/0x10 [ 309.095045][ T8700] ? __pfx__printk+0x10/0x10 [ 309.095075][ T8700] ? __pfx___might_resched+0x10/0x10 [ 309.095098][ T8700] ? fs_reclaim_acquire+0x7d/0x100 [ 309.095130][ T8700] should_fail_ex+0x414/0x560 [ 309.095158][ T8700] should_failslab+0xa8/0x100 [ 309.095183][ T8700] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 309.095205][ T8700] ? ovl_lookup+0x52d/0x1bc0 [ 309.095240][ T8700] kstrdup+0x42/0x100 [ 309.095268][ T8700] ovl_lookup+0x52d/0x1bc0 [ 309.095320][ T8700] ? __lock_acquire+0xab9/0xd20 [ 309.095353][ T8700] ? __pfx_ovl_lookup+0x10/0x10 [ 309.095393][ T8700] ? do_raw_spin_unlock+0x122/0x240 [ 309.095424][ T8700] ? _raw_spin_unlock+0x28/0x50 [ 309.095453][ T8700] ? d_alloc+0x144/0x190 [ 309.095481][ T8700] lookup_one_qstr_excl_raw+0x115/0x280 [ 309.095511][ T8700] do_unlinkat+0x1d6/0x560 [ 309.095535][ T8700] ? __pfx_do_unlinkat+0x10/0x10 [ 309.095568][ T8700] ? getname_flags+0x1e5/0x540 [ 309.095594][ T8700] __x64_sys_unlink+0x47/0x50 [ 309.095611][ T8700] do_syscall_64+0xfa/0x3b0 [ 309.095634][ T8700] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.095653][ T8700] ? asm_sysvec_call_function_single+0x1a/0x20 [ 309.095673][ T8700] ? clear_bhb_loop+0x60/0xb0 [ 309.095695][ T8700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.095712][ T8700] RIP: 0033:0x7faa5af8ebe9 [ 309.095731][ T8700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.095749][ T8700] RSP: 002b:00007faa5bd32038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 309.095769][ T8700] RAX: ffffffffffffffda RBX: 00007faa5b1b6090 RCX: 00007faa5af8ebe9 [ 309.095783][ T8700] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 309.095794][ T8700] RBP: 00007faa5bd32090 R08: 0000000000000000 R09: 0000000000000000 [ 309.095806][ T8700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.095817][ T8700] R13: 00007faa5b1b6128 R14: 00007faa5b1b6090 R15: 00007ffe782eef68 [ 309.095851][ T8700] [ 309.811854][ T5836] Bluetooth: hci0: command tx timeout [ 311.675735][ T8682] wg1 speed is unknown, defaulting to 1000 [ 311.878489][ T51] Bluetooth: hci0: command tx timeout [ 311.909347][ T8721] syzkaller1: entered promiscuous mode [ 311.914918][ T8721] syzkaller1: entered allmulticast mode [ 311.924662][ T8721] cgroup: Unknown subsys name 'seclabel' [ 313.962421][ T51] Bluetooth: hci0: command tx timeout [ 314.388230][ T60] hsr_slave_0: left promiscuous mode [ 314.612692][ T60] hsr_slave_1: left promiscuous mode [ 315.392251][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.424201][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.599847][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.607336][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.723429][ T60] veth1_macvtap: left promiscuous mode [ 315.749167][ T60] veth0_macvtap: left promiscuous mode [ 315.785361][ T60] veth1_vlan: left promiscuous mode [ 315.803240][ T60] veth0_vlan: left promiscuous mode [ 316.038264][ T51] Bluetooth: hci0: command tx timeout [ 317.299190][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.305965][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.040273][ T60] team0 (unregistering): Port device team_slave_1 removed [ 318.096675][ T60] team0 (unregistering): Port device team_slave_0 removed [ 318.620517][ T8799] netlink: 28 bytes leftover after parsing attributes in process `syz.7.603'. [ 318.705144][ T8799] netlink: 28 bytes leftover after parsing attributes in process `syz.7.603'. [ 321.998185][ T8813] netlink: 16 bytes leftover after parsing attributes in process `syz.0.607'. [ 322.138097][ T10] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 322.243317][ T8822] netlink: 'syz.6.608': attribute type 11 has an invalid length. [ 322.252058][ T8682] chnl_net:caif_netlink_parms(): no params data found [ 328.063812][ T30] audit: type=1326 audit(1755475671.749:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8855 comm="syz.6.615" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f035c38ebe9 code=0x0 [ 329.119755][ T8682] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.066803][ T8682] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.130593][ T8682] bridge_slave_0: entered allmulticast mode [ 330.334265][ T8682] bridge_slave_0: entered promiscuous mode [ 330.552374][ T8682] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.627082][ T8682] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.673586][ T8682] bridge_slave_1: entered allmulticast mode [ 330.772706][ T8682] bridge_slave_1: entered promiscuous mode [ 331.080515][ T8876] FAULT_INJECTION: forcing a failure. [ 331.080515][ T8876] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 331.095457][ T8876] CPU: 1 UID: 0 PID: 8876 Comm: syz.6.618 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 331.095486][ T8876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 331.095498][ T8876] Call Trace: [ 331.095507][ T8876] [ 331.095516][ T8876] dump_stack_lvl+0x189/0x250 [ 331.095545][ T8876] ? __pfx____ratelimit+0x10/0x10 [ 331.095568][ T8876] ? __pfx_dump_stack_lvl+0x10/0x10 [ 331.095591][ T8876] ? __pfx__printk+0x10/0x10 [ 331.095617][ T8876] ? __might_fault+0xb0/0x130 [ 331.095652][ T8876] should_fail_ex+0x414/0x560 [ 331.095680][ T8876] _copy_from_user+0x2d/0xb0 [ 331.095710][ T8876] kstrtouint_from_user+0xc4/0x170 [ 331.095738][ T8876] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 331.095782][ T8876] proc_fail_nth_write+0x88/0x240 [ 331.095806][ T8876] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 331.095837][ T8876] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 331.095865][ T8876] vfs_write+0x27e/0xa90 [ 331.095896][ T8876] ? __pfx_vfs_write+0x10/0x10 [ 331.095918][ T8876] ? __fget_files+0x2a/0x420 [ 331.095947][ T8876] ? __fget_files+0x3a0/0x420 [ 331.095968][ T8876] ? __fget_files+0x2a/0x420 [ 331.096002][ T8876] ksys_write+0x145/0x250 [ 331.096025][ T8876] ? __pfx_ksys_write+0x10/0x10 [ 331.096059][ T8876] do_syscall_64+0xfa/0x3b0 [ 331.096087][ T8876] ? lockdep_hardirqs_on+0x9c/0x150 [ 331.096108][ T8876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.096126][ T8876] ? clear_bhb_loop+0x60/0xb0 [ 331.096149][ T8876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.096168][ T8876] RIP: 0033:0x7f035c38d69f [ 331.096187][ T8876] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 331.096204][ T8876] RSP: 002b:00007f035d26f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 331.096227][ T8876] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f035c38d69f [ 331.096241][ T8876] RDX: 0000000000000001 RSI: 00007f035d26f0a0 RDI: 0000000000000007 [ 331.096262][ T8876] RBP: 00007f035d26f090 R08: 0000000000000000 R09: 0000000000000000 [ 331.096275][ T8876] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 331.096316][ T8876] R13: 00007f035c5b6218 R14: 00007f035c5b6180 R15: 00007ffd2c7fce58 [ 331.096352][ T8876] [ 331.339396][ T8877] openvswitch: netlink: Tunnel attr 16 has unexpected len 12 expected 0 [ 331.348237][ T8877] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 333.131064][ T8682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.165524][ T8682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.286132][ T8893] netlink: 'syz.6.621': attribute type 11 has an invalid length. [ 333.318813][ T43] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 333.389733][ T8682] team0: Port device team_slave_0 added [ 333.475447][ T8682] team0: Port device team_slave_1 added [ 333.492788][ T43] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.523513][ T43] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 333.558169][ T43] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.598725][ T43] usb 8-1: config 0 descriptor?? [ 333.639003][ T5922] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 333.648429][ T43] pwc: Askey VC010 type 2 USB webcam detected. [ 333.694159][ T8902] netlink: 'syz.6.625': attribute type 2 has an invalid length. [ 333.703980][ T8902] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.625'. [ 333.723095][ T8902] nbd: must specify a device to reconfigure [ 333.819286][ T5922] usb 5-1: no configurations [ 333.824050][ T5922] usb 5-1: can't read configurations, error -22 [ 333.837096][ T8883] tmpfs: Unknown parameter 'oPol?ic' [ 334.315241][ T43] pwc: recv_control_msg error -32 req 02 val 2b00 [ 334.560849][ T8682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.569395][ T43] pwc: recv_control_msg error -32 req 02 val 2700 [ 334.583708][ T8682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.610689][ T43] pwc: recv_control_msg error -32 req 02 val 2c00 [ 334.628189][ T43] pwc: recv_control_msg error -32 req 04 val 1000 [ 334.672963][ T8682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.698136][ T5922] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 334.728842][ T8682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.735949][ T8682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.803831][ T43] pwc: recv_control_msg error -32 req 04 val 1300 [ 334.826837][ T8682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.919313][ T5922] usb 5-1: no configurations [ 334.924055][ T5922] usb 5-1: can't read configurations, error -22 [ 334.968546][ T5922] usb usb5-port1: attempt power cycle [ 335.045996][ T43] pwc: recv_control_msg error -32 req 02 val 2000 [ 335.056820][ T8883] 9p: Unknown Cache mode or invalid value fs [ 335.064327][ T43] pwc: recv_control_msg error -32 req 02 val 2100 [ 335.116342][ T43] pwc: recv_control_msg error -32 req 04 val 1500 [ 335.134925][ T43] pwc: recv_control_msg error -32 req 02 val 2500 [ 335.338860][ T5922] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 335.451538][ T5922] usb 5-1: no configurations [ 335.563672][ T5922] usb 5-1: can't read configurations, error -22 [ 335.762220][ T8682] hsr_slave_0: entered promiscuous mode [ 335.797372][ T8682] hsr_slave_1: entered promiscuous mode [ 335.858762][ T5922] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 335.912845][ T5922] usb 5-1: no configurations [ 335.923246][ T5922] usb 5-1: can't read configurations, error -22 [ 335.943357][ T5922] usb usb5-port1: unable to enumerate USB device [ 336.361439][ T43] pwc: recv_control_msg error -71 req 02 val 2600 [ 337.288570][ T43] pwc: recv_control_msg error -71 req 02 val 2900 [ 337.307630][ T43] pwc: recv_control_msg error -71 req 02 val 2800 [ 337.318730][ T43] pwc: recv_control_msg error -71 req 04 val 1100 [ 337.331198][ T43] pwc: recv_control_msg error -71 req 04 val 1200 [ 337.340638][ T43] pwc: Registered as video103. [ 337.351881][ T43] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input13 [ 337.383248][ T43] usb 8-1: USB disconnect, device number 11 [ 340.657656][ T8954] netlink: 'syz.4.634': attribute type 11 has an invalid length. [ 340.687399][ T8952] netlink: 132 bytes leftover after parsing attributes in process `syz.6.633'. [ 342.011846][ T8969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.640'. [ 342.438554][ T8975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.637'. [ 342.503426][ T8970] fuse: Unknown parameter '' [ 342.506348][ T8682] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 342.526336][ T8977] 9pnet: Could not find request transport: fd#rfdnO=tکA [ 342.526336][ T8977] aagh҉N=A൱or~"EԨX-~lΟ;[ [ 343.169048][ T8980] Cannot find set identified by id 0 to match [ 343.278950][ T8980] sctp: [Deprecated]: syz.6.639 (pid 8980) Use of int in max_burst socket option deprecated. [ 343.278950][ T8980] Use struct sctp_assoc_value instead [ 343.311138][ T8682] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 343.437370][ T8682] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 343.493766][ T8682] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 343.571240][ T8991] FAULT_INJECTION: forcing a failure. [ 343.571240][ T8991] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 343.584573][ T8991] CPU: 1 UID: 0 PID: 8991 Comm: syz.7.642 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 343.584590][ T8991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 343.584598][ T8991] Call Trace: [ 343.584603][ T8991] [ 343.584608][ T8991] dump_stack_lvl+0x189/0x250 [ 343.584628][ T8991] ? __pfx____ratelimit+0x10/0x10 [ 343.584642][ T8991] ? __pfx_dump_stack_lvl+0x10/0x10 [ 343.584655][ T8991] ? __pfx__printk+0x10/0x10 [ 343.584671][ T8991] ? __might_fault+0xb0/0x130 [ 343.584691][ T8991] should_fail_ex+0x414/0x560 [ 343.584708][ T8991] copy_fpstate_to_sigframe+0xa8d/0xce0 [ 343.584728][ T8991] ? copy_fpstate_to_sigframe+0x181/0xce0 [ 343.584750][ T8991] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 343.584802][ T8991] ? __lock_acquire+0xab9/0xd20 [ 343.584818][ T8991] ? fpu__alloc_mathframe+0xad/0x130 [ 343.584836][ T8991] get_sigframe+0x58d/0x7d0 [ 343.584857][ T8991] ? __pfx_get_sigframe+0x10/0x10 [ 343.584882][ T8991] x64_setup_rt_frame+0x15c/0xd40 [ 343.584903][ T8991] ? lockdep_hardirqs_on+0x9c/0x150 [ 343.584919][ T8991] ? _raw_spin_unlock_irq+0x2e/0x50 [ 343.584940][ T8991] ? get_signal+0x1122/0x1310 [ 343.584958][ T8991] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 343.584993][ T8991] arch_do_signal_or_restart+0x3dc/0x750 [ 343.585015][ T8991] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 343.585041][ T8991] ? exit_to_user_mode_loop+0x40/0x110 [ 343.585056][ T8991] exit_to_user_mode_loop+0x75/0x110 [ 343.585068][ T8991] do_syscall_64+0x2bd/0x3b0 [ 343.585080][ T8991] ? lockdep_hardirqs_on+0x9c/0x150 [ 343.585092][ T8991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.585104][ T8991] ? clear_bhb_loop+0x60/0xb0 [ 343.585123][ T8991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.585140][ T8991] RIP: 0033:0x7faa5af8ebe7 [ 343.585173][ T8991] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 343.585190][ T8991] RSP: 002b:00007faa5bd32038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 343.585212][ T8991] RAX: 0000000000000000 RBX: 00007faa5b1b6090 RCX: 00007faa5af8ebe9 [ 343.585225][ T8991] RDX: 0000000000018fdc RSI: 0000200000032440 RDI: 0000000000000005 [ 343.585232][ T8991] RBP: 00007faa5bd32090 R08: 0000000000000000 R09: 0000000000000000 [ 343.585240][ T8991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 343.585247][ T8991] R13: 00007faa5b1b6128 R14: 00007faa5b1b6090 R15: 00007ffe782eef68 [ 343.585266][ T8991] [ 343.867172][ T8987] can: request_module (can-proto-5) failed. [ 345.188526][ T43] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 345.531883][ T9025] pim6reg: entered allmulticast mode [ 345.622760][ T8682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.947619][ T8682] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.000444][ T3081] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.007749][ T3081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.090422][ T3081] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.097599][ T3081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.440189][ T9018] pim6reg: left allmulticast mode [ 346.843136][ T9041] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 347.491767][ T8682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.518169][ T5840] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 348.698570][ T5840] usb 7-1: Using ep0 maxpacket: 16 [ 348.735411][ T5840] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 348.768397][ T5840] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 348.800034][ T5840] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 348.900760][ T5840] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 348.954351][ T5840] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.991026][ T5840] usb 7-1: Product: syz [ 348.995271][ T5840] usb 7-1: Manufacturer: syz [ 349.049584][ T5840] usb 7-1: SerialNumber: syz [ 349.741685][ T8682] veth0_vlan: entered promiscuous mode [ 349.768813][ T10] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 349.807147][ T8682] veth1_vlan: entered promiscuous mode [ 349.937857][ T8682] veth0_macvtap: entered promiscuous mode [ 349.943943][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 349.954549][ T10] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 349.975535][ T10] usb 1-1: config 0 has no interface number 0 [ 349.990103][ T8682] veth1_macvtap: entered promiscuous mode [ 350.004101][ T10] usb 1-1: config 0 interface 184 has no altsetting 0 [ 350.021877][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 350.056319][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.081493][ T10] usb 1-1: Product: syz [ 350.084260][ T8682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.093674][ T10] usb 1-1: Manufacturer: syz [ 350.113729][ T10] usb 1-1: SerialNumber: syz [ 350.144397][ T9089] netlink: 'syz.7.656': attribute type 11 has an invalid length. [ 350.150777][ T8682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.155549][ T10] usb 1-1: config 0 descriptor?? [ 350.200384][ T10] smsc75xx v1.0.0 [ 350.211546][ T8682] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.221026][ T8682] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.231582][ T8682] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.240931][ T8682] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.561862][ T6087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.605404][ T6087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.747313][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.778975][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.797123][ T5840] usb 7-1: 0:2 : does not exist [ 350.835306][ T5840] usb 7-1: 1:0: cannot get min/max values for control 4 (id 1) [ 350.892694][ T9099] block nbd7: not configured, cannot reconfigure [ 350.986372][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 351.018209][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 351.058385][ T5840] usb 7-1: USB disconnect, device number 12 [ 351.185343][ T6589] udevd[6589]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 351.289436][ T9108] trusted_key: encrypted_key: insufficient parameters specified [ 352.102452][ T9108] trusted_key: encrypted_key: insufficient parameters specified [ 352.158474][ T9108] trusted_key: encrypted_key: insufficient parameters specified [ 352.211485][ T9108] trusted_key: encrypted_key: insufficient parameters specified [ 352.305553][ T9108] trusted_key: encrypted_key: insufficient parameters specified [ 352.349053][ T9108] trusted_key: encrypted_key: insufficient parameters specified [ 353.361636][ T9108] trusted_key: encrypted_key: insufficient parameters specified [ 353.414531][ T9108] trusted_key: encrypted_key: insufficient parameters specified [ 353.448541][ T9108] trusted_key: encrypted_key: insufficient parameters specified [ 353.491296][ T9108] trusted_key: encrypted_key: insufficient parameters specified [ 353.561953][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 353.653687][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 353.690153][ T9108] trusted_key: encrypted_key: insufficient parameters specified [ 353.702487][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 353.743886][ T10] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 353.768302][ T9108] trusted_key: encrypted_key: insufficient parameters specified [ 353.779090][ T10] usb 1-1: USB disconnect, device number 30 [ 353.976769][ T9108] trusted_key: encrypted_key: insufficient parameters specified [ 354.800261][ T9108] trusted_key: encrypted_key: insufficient parameters specified [ 354.879616][ T9108] trusted_key: encrypted_key: insufficient parameters specified [ 354.915978][ T9145] netlink: 'syz.6.666': attribute type 11 has an invalid length. [ 355.162279][ T9154] netlink: 176 bytes leftover after parsing attributes in process `syz.7.668'. [ 355.587044][ T9160] block nbd4: not configured, cannot reconfigure [ 357.082395][ T9179] input: syz1 as /devices/virtual/input/input14 [ 357.408171][ T5840] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 357.724132][ T9186] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 357.965431][ T5840] usb 7-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 357.987740][ T5840] usb 7-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 358.006412][ T5840] usb 7-1: Product: syz [ 358.016551][ T5840] usb 7-1: Manufacturer: syz [ 358.037610][ T5840] usb 7-1: SerialNumber: syz [ 358.083128][ T9193] netlink: 'syz.8.677': attribute type 29 has an invalid length. [ 358.083857][ T5840] usb 7-1: config 0 descriptor?? [ 358.102854][ T9193] netlink: 'syz.8.677': attribute type 29 has an invalid length. [ 358.122720][ T9193] netlink: 500 bytes leftover after parsing attributes in process `syz.8.677'. [ 358.997437][ T5840] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 359.048977][ T5840] asix 7-1:0.0: probe with driver asix failed with error -71 [ 359.119139][ T5840] usb 7-1: USB disconnect, device number 13 [ 359.348227][ T5908] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 359.441870][ T9213] block nbd4: not configured, cannot reconfigure [ 359.558923][ T5908] usb 9-1: New USB device found, idVendor=05ac, idProduct=b301, bcdDevice=e4.00 [ 359.594154][ T5908] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.755530][ T5908] usb 9-1: Product: syz [ 359.797393][ T5908] usb 9-1: Manufacturer: syz [ 359.821937][ T5908] usb 9-1: SerialNumber: syz [ 359.849069][ T5840] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 359.874076][ T5908] usb 9-1: config 0 descriptor?? [ 360.272438][ T978] usb 9-1: USB disconnect, device number 2 [ 360.703526][ T9227] tap0: tun_chr_ioctl cmd 1074025677 [ 360.711028][ T9227] tap0: linktype set to 769 [ 363.426515][ T9246] netlink: 596 bytes leftover after parsing attributes in process `syz.4.690'. [ 363.597525][ T9241] netlink: 'syz.4.690': attribute type 29 has an invalid length. [ 363.723402][ T9243] netlink: 'syz.4.690': attribute type 29 has an invalid length. [ 363.978288][ T5840] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 364.485367][ T5840] usb 8-1: config 0 has an invalid interface number: 93 but max is 0 [ 364.525074][ T5840] usb 8-1: config 0 has no interface number 0 [ 364.555365][ T5840] usb 8-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=7f.ac [ 364.596223][ T5840] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.641313][ T5840] usb 8-1: Product: syz [ 364.645518][ T5840] usb 8-1: Manufacturer: syz [ 364.669048][ T5840] usb 8-1: SerialNumber: syz [ 364.707803][ T5840] usb 8-1: config 0 descriptor?? [ 366.952349][ T5840] usb_ehset_test 8-1:0.93: probe with driver usb_ehset_test failed with error -32 [ 367.065952][ T5840] usb 8-1: USB disconnect, device number 13 [ 367.149959][ T9279] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 367.514735][ T9285] netlink: 248 bytes leftover after parsing attributes in process `syz.6.695'. [ 367.558213][ T9285] netlink: 156 bytes leftover after parsing attributes in process `syz.6.695'. [ 368.007509][ T9302] netlink: 'syz.8.703': attribute type 29 has an invalid length. [ 368.019501][ T9302] netlink: 'syz.8.703': attribute type 29 has an invalid length. [ 368.058768][ T9302] netlink: 500 bytes leftover after parsing attributes in process `syz.8.703'. [ 368.360470][ T9289] wg1 speed is unknown, defaulting to 1000 [ 369.028467][ T56] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 369.778450][ T5840] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 369.941440][ T56] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 369.952851][ T5840] usb 9-1: config 0 has an invalid interface number: 56 but max is 0 [ 369.968168][ T56] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.990048][ T5840] usb 9-1: config 0 has no interface number 0 [ 369.990189][ T56] usb 7-1: config 0 descriptor?? [ 370.032775][ T56] cp210x 7-1:0.0: cp210x converter detected [ 370.094546][ T9331] netlink: 12 bytes leftover after parsing attributes in process `syz.4.711'. [ 370.105920][ T5840] usb 9-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 370.138190][ T5840] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.206664][ T5840] usb 9-1: Product: syz [ 370.226805][ T5840] usb 9-1: Manufacturer: syz [ 370.438266][ T5840] usb 9-1: SerialNumber: syz [ 370.511651][ T5840] usb 9-1: config 0 descriptor?? [ 370.534385][ T5840] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 370.560599][ T5840] pctv452e: pctv452e_power_ctrl: 1 [ 370.560599][ T5840] [ 370.572327][ T5840] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 370.572327][ T5840] [ 370.586250][ T5840] dvb-usb: bulk message failed: -22 (5/0) [ 370.640692][ T56] usb 7-1: cp210x converter now attached to ttyUSB0 [ 370.675805][ T5840] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 370.749191][ T9315] afs: Unknown parameter 'dynkaller1' [ 370.755652][ T5840] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 370.803811][ T5834] usb 7-1: USB disconnect, device number 14 [ 370.822379][ T5834] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 370.837498][ T9341] overlayfs: failed to resolve './file0/file0': -2 [ 370.879804][ T5834] cp210x 7-1:0.0: device disconnected [ 370.947255][ T56] usb 9-1: USB disconnect, device number 3 [ 371.412661][ T9348] netlink: 12 bytes leftover after parsing attributes in process `syz.4.712'. [ 371.779771][ T9356] input: syz0 as /devices/virtual/input/input15 [ 372.217482][ T30] audit: type=1326 audit(1755475715.789:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9353 comm="syz.6.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035c38ebe9 code=0x7ffc0000 [ 372.278750][ T5834] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 372.326835][ T30] audit: type=1326 audit(1755475715.789:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9353 comm="syz.6.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035c38ebe9 code=0x7ffc0000 [ 372.482500][ T5834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 372.502470][ T5834] usb 5-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 372.535943][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.563399][ T5834] usb 5-1: Product: syz [ 372.589901][ T5834] usb 5-1: Manufacturer: syz [ 372.614432][ T5834] usb 5-1: SerialNumber: syz [ 372.710243][ T5834] usb 5-1: config 0 descriptor?? [ 372.770349][ T5834] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -32 [ 373.038183][ T5834] usb 5-1: USB disconnect, device number 33 [ 373.178341][ T43] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 373.184179][ T9370] netlink: 'syz.6.715': attribute type 21 has an invalid length. [ 373.798391][ T43] usb 9-1: device descriptor read/64, error -71 [ 374.068399][ T43] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 374.248294][ T43] usb 9-1: device descriptor read/64, error -71 [ 374.405369][ T9382] netlink: 1284 bytes leftover after parsing attributes in process `syz.6.719'. [ 374.458629][ T43] usb usb9-port1: attempt power cycle [ 374.918283][ T43] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 375.325473][ T43] usb 9-1: device descriptor read/8, error -71 [ 375.612417][ T43] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 375.646809][ T43] usb 9-1: device descriptor read/8, error -71 [ 375.788736][ T43] usb usb9-port1: unable to enumerate USB device [ 377.422543][ T978] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 377.432113][ T5840] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 377.619545][ T978] usb 5-1: Using ep0 maxpacket: 8 [ 377.628175][ T5840] usb 7-1: config 0 has an invalid interface number: 234 but max is 0 [ 377.647176][ T5840] usb 7-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 377.659994][ T978] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 377.669493][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.677532][ T978] usb 5-1: Product: syz [ 377.692439][ T5840] usb 7-1: config 0 has an invalid interface number: 102 but max is 0 [ 377.708034][ T978] usb 5-1: Manufacturer: syz [ 377.718064][ T5840] usb 7-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 377.727242][ T978] usb 5-1: SerialNumber: syz [ 377.737400][ T5840] usb 7-1: config 0 has no interface number 0 [ 377.743900][ T5840] usb 7-1: config 0 has no interface number 1 [ 377.770403][ T978] usb 5-1: config 0 descriptor?? [ 377.838565][ T5840] usb 7-1: config 0 interface 234 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 377.926447][ T5840] usb 7-1: config 0 interface 234 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 378.029802][ T5840] usb 7-1: config 0 interface 234 altsetting 0 endpoint 0x8 has an invalid bInterval 174, changing to 4 [ 378.364743][ T5840] usb 7-1: config 0 interface 234 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 378.522796][ T978] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 378.558711][ T5840] usb 7-1: config 0 interface 234 altsetting 0 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 378.653977][ T5840] usb 7-1: config 0 interface 234 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 378.685949][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.697593][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.725880][ T5840] usb 7-1: config 0 interface 234 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 378.967334][ T5840] usb 7-1: config 0 interface 234 altsetting 0 has 7 endpoint descriptors, different from the interface descriptor's value: 13 [ 378.982914][ T978] usb write operation failed. (-71) [ 378.990045][ T5840] usb 7-1: too many endpoints for config 0 interface 102 altsetting 53: 65, using maximum allowed: 30 [ 379.005406][ T978] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 379.016636][ T5840] usb 7-1: config 0 interface 102 altsetting 53 endpoint 0x3 has invalid maxpacket 12225, setting to 64 [ 379.029536][ T978] dvbdev: DVB: registering new adapter (Terratec H7) [ 379.036792][ T978] usb 5-1: media controller created [ 379.058984][ T5840] usb 7-1: config 0 interface 102 altsetting 53 has an invalid descriptor for endpoint zero, skipping [ 379.413201][ T978] usb read operation failed. (-71) [ 379.686776][ T5840] usb 7-1: config 0 interface 102 altsetting 53 has a duplicate endpoint with address 0xE, skipping [ 379.828600][ T978] usb write operation failed. (-71) [ 379.858524][ T978] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 379.867915][ T5840] usb 7-1: config 0 interface 102 altsetting 53 has an invalid descriptor for endpoint zero, skipping [ 379.907425][ T5840] usb 7-1: config 0 interface 102 altsetting 53 has 6 endpoint descriptors, different from the interface descriptor's value: 65 [ 379.935191][ T978] usb 5-1: USB disconnect, device number 34 [ 379.988656][ T5840] usb 7-1: config 0 interface 102 has no altsetting 0 [ 380.011117][ T5840] usb 7-1: Dual-Role OTG device on HNP port [ 380.017694][ T5840] usb 7-1: New USB device found, idVendor=13d3, idProduct=3357, bcdDevice=44.7a [ 380.031798][ T5840] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.056587][ T5840] usb 7-1: Product: syz [ 380.069664][ T5840] usb 7-1: Manufacturer: syz [ 380.079183][ T5840] usb 7-1: SerialNumber: syz [ 380.100703][ T5840] usb 7-1: config 0 descriptor?? [ 380.108769][ T9428] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 380.208078][ T5966] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 380.251666][ T5840] usb 7-1: can't set config #0, error -71 [ 380.288524][ T5840] usb 7-1: USB disconnect, device number 15 [ 380.393753][ T5966] usb 9-1: config 8 has an invalid interface number: 177 but max is 0 [ 380.403618][ T5966] usb 9-1: config 8 has no interface number 0 [ 380.418379][ T5966] usb 9-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 380.468242][ T5966] usb 9-1: config 8 interface 177 has no altsetting 0 [ 380.475127][ T5966] usb 9-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 380.510515][ T5966] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.543037][ T9453] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 380.781604][ T9453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.897555][ T9480] wg1 speed is unknown, defaulting to 1000 [ 380.904128][ T9453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.928088][ T56] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 381.032740][ T9485] 9pnet_fd: Insufficient options for proto=fd [ 381.045824][ T5966] usb 9-1: language id specifier not provided by device, defaulting to English [ 381.109969][ T56] usb 1-1: not running at top speed; connect to a high speed hub [ 381.122075][ T56] usb 1-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 381.188090][ T56] usb 1-1: config 1 interface 0 has no altsetting 0 [ 381.213518][ T56] usb 1-1: New USB device found, idVendor=046d, idProduct=c081, bcdDevice= 0.40 [ 381.228276][ T56] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.243717][ T5908] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 381.266147][ T56] usb 1-1: Product: syz [ 381.281741][ T56] usb 1-1: Manufacturer: syz [ 381.334498][ T56] usb 1-1: SerialNumber: syz [ 381.421189][ T5908] usb 7-1: config 2 has an invalid interface number: 211 but max is 0 [ 381.435430][ T5908] usb 7-1: config 2 has no interface number 0 [ 381.473282][ T5908] usb 7-1: config 2 interface 211 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 381.506296][ T5908] usb 7-1: config 2 interface 211 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 381.537157][ T5908] usb 7-1: New USB device found, idVendor=2040, idProduct=8268, bcdDevice=27.95 [ 381.552149][ T5908] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.588327][ T5908] usb 7-1: Product: syz [ 381.620015][ T5908] usb 7-1: Manufacturer: syz [ 381.647527][ T5908] usb 7-1: SerialNumber: syz [ 381.706398][ T9483] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 381.745606][ T5908] em28xx 7-1:2.211: New device syz syz @ 12 Mbps (2040:8268, interface 211, class 211) [ 381.790525][ T5908] em28xx 7-1:2.211: Device initialization failed. [ 381.826390][ T56] usbhid 1-1:1.0: can't add hid device: -71 [ 381.841908][ T5908] em28xx 7-1:2.211: Device must be connected to a high-speed USB 2.0 port. [ 381.861565][ T56] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 381.904138][ T56] usb 1-1: USB disconnect, device number 31 [ 383.002673][ T56] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 383.126309][ C0] ir_toy 9-1:8.177: out urb status: -71 [ 383.294115][ T56] usb 1-1: config 135 has an invalid interface number: 230 but max is 0 [ 383.316966][ T56] usb 1-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 383.371496][ T9481] binder: 9466:9481 unknown command 0 [ 383.377418][ T9481] binder: 9466:9481 ioctl c0306201 200000000080 returned -22 [ 383.402989][ T56] usb 1-1: config 135 has no interface number 0 [ 383.449361][ T56] usb 1-1: config 135 interface 230 has no altsetting 0 [ 383.513134][ T56] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 383.536612][ T56] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.557183][ T56] usb 1-1: Product: syz [ 383.702772][ T5966] ir_toy 9-1:8.177: could not write reset command: -110 [ 383.712514][ T56] usb 1-1: Manufacturer: syz [ 383.724434][ T5966] ir_toy 9-1:8.177: probe with driver ir_toy failed with error -110 [ 383.734816][ T56] usb 1-1: SerialNumber: syz [ 383.741345][ T5966] usb 9-1: USB disconnect, device number 8 [ 384.072536][ T5834] usb 7-1: USB disconnect, device number 16 [ 384.175036][ T9495] autofs4:pid:9495:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 384.298110][ T5966] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 384.360372][ T978] usb 1-1: USB disconnect, device number 32 [ 384.469176][ T30] audit: type=1326 audit(1755475728.299:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9512 comm="syz.6.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f035c32add9 code=0x7ffc0000 [ 384.510016][ T5966] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 384.533779][ T5966] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.614057][ T30] audit: type=1326 audit(1755475728.299:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9512 comm="syz.6.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035c38ebe9 code=0x7ffc0000 [ 384.615170][ T5966] usb 9-1: config 0 descriptor?? [ 384.748414][ T30] audit: type=1326 audit(1755475728.299:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9512 comm="syz.6.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035c38ebe9 code=0x7ffc0000 [ 384.774026][ T5966] cp210x 9-1:0.0: cp210x converter detected [ 384.857308][ T30] audit: type=1326 audit(1755475728.319:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9512 comm="syz.6.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035c38ebe9 code=0x7ffc0000 [ 385.000469][ T30] audit: type=1326 audit(1755475728.319:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9512 comm="syz.6.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035c38ebe9 code=0x7ffc0000 [ 385.034105][ T30] audit: type=1326 audit(1755475728.339:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9512 comm="syz.6.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f035c32add9 code=0x7ffc0000 [ 385.132979][ T30] audit: type=1326 audit(1755475728.349:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9512 comm="syz.6.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f035c32add9 code=0x7ffc0000 [ 385.238937][ T30] audit: type=1326 audit(1755475728.349:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9512 comm="syz.6.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035c38ebe9 code=0x7ffc0000 [ 385.249898][ T5966] usb 9-1: cp210x converter now attached to ttyUSB0 [ 385.308264][ T30] audit: type=1326 audit(1755475728.349:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9512 comm="syz.6.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f035c32add9 code=0x7ffc0000 [ 385.433329][ T30] audit: type=1326 audit(1755475728.349:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9512 comm="syz.6.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035c38ebe9 code=0x7ffc0000 [ 385.667903][ T5840] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 386.748465][ T5840] usb 1-1: Using ep0 maxpacket: 32 [ 386.758333][ T5840] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.769678][ T5840] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.780293][ T5840] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 386.795234][ T5840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.811827][ T5840] usb 1-1: config 0 descriptor?? [ 386.844076][ T978] usb 9-1: USB disconnect, device number 9 [ 386.882011][ T978] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 386.992337][ T978] cp210x 9-1:0.0: device disconnected [ 387.767294][ T5840] savu 0003:1E7D:2D5A.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 387.869629][ T9551] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 387.938562][ T5840] usb 1-1: USB disconnect, device number 33 [ 388.119550][ T5834] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 388.156453][ T9558] fido_id[9558]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 388.508478][ T5834] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.658257][ T5834] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 388.863178][ T5834] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 389.111911][ T5834] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 389.122787][ T5834] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 389.140457][ T5834] usb 9-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 389.163657][ T5834] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 389.178447][ T5834] usb 9-1: Product: syz [ 389.182674][ T5834] usb 9-1: Manufacturer: syz [ 389.187309][ T5834] usb 9-1: SerialNumber: syz [ 389.197100][ T5834] usb 9-1: config 0 descriptor?? [ 389.818716][ T5834] radio-si470x 9-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 389.825574][ T5834] radio-si470x 9-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 390.252777][ T9589] 9pnet_fd: Insufficient options for proto=fd [ 390.680294][ T5834] radio-si470x 9-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 392.285534][ T5834] radio-si470x 9-1:0.0: si470x_get_scratch: si470x_get_report returned -110 [ 393.882924][ T5834] radio-si470x 9-1:0.0: probe with driver radio-si470x failed with error -5 [ 394.146868][ T9595] netlink: 228 bytes leftover after parsing attributes in process `syz.6.758'. [ 394.695508][ T5966] usb 9-1: USB disconnect, device number 10 [ 396.028067][ T978] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 396.141456][ T9608] Bluetooth: MGMT ver 1.23 [ 396.268657][ T978] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 396.299188][ T978] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.380230][ T978] usb 7-1: config 0 descriptor?? [ 396.411674][ T978] cp210x 7-1:0.0: cp210x converter detected [ 396.487445][ T9622] Bluetooth: MGMT ver 1.23 [ 396.872769][ T978] usb 7-1: cp210x converter now attached to ttyUSB0 [ 398.198304][ T51] Bluetooth: hci0: command tx timeout [ 398.208250][ T5834] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 398.387339][ T5834] usb 5-1: Using ep0 maxpacket: 16 [ 398.408847][ T5834] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 398.443284][ T5834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 398.504767][ T5834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 398.551830][ T5834] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 398.586823][ T5834] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 398.654057][ T5834] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 398.680013][ T5834] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 398.732953][ T5834] usb 5-1: Manufacturer: syz [ 398.739020][ T9645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.769'. [ 398.761918][ T5834] usb 5-1: config 0 descriptor?? [ 398.801827][ T978] usb 7-1: USB disconnect, device number 17 [ 398.911296][ T978] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 398.957497][ T978] cp210x 7-1:0.0: device disconnected [ 403.298206][ T5834] rc_core: IR keymap rc-hauppauge not found [ 403.378060][ T5834] Registered IR keymap rc-empty [ 403.409428][ T5834] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 403.446332][ T5834] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 403.504071][ T5834] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 403.544931][ T5834] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input18 [ 403.570505][ T5834] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 403.612970][ T5834] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 403.658149][ T5834] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 403.698266][ T5834] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 403.726511][ T5834] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 403.798357][ T5834] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 403.851368][ T5834] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 403.895499][ T5834] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 403.968745][ T5834] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 404.005406][ T5834] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 404.079675][ T5834] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 404.127822][ T5834] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 404.174391][ T5834] usb 5-1: USB disconnect, device number 35 [ 404.628254][ T5834] usb 5-1: new low-speed USB device number 36 using dummy_hcd [ 404.819036][ T9703] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 404.829357][ T5834] usb 5-1: device descriptor read/64, error -71 [ 404.841285][ T9703] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 404.874880][ T9703] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 405.068107][ T5834] usb 5-1: new low-speed USB device number 37 using dummy_hcd [ 405.228475][ T5834] usb 5-1: device descriptor read/64, error -71 [ 406.128466][ T5834] usb usb5-port1: attempt power cycle [ 406.180402][ T9721] input: syz1 as /devices/virtual/input/input19 [ 406.204362][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 406.226140][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 406.238182][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 406.254357][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 406.263820][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 406.462432][ T9727] wg1 speed is unknown, defaulting to 1000 [ 406.471459][ T5834] usb 5-1: new low-speed USB device number 38 using dummy_hcd [ 406.531842][ T5834] usb 5-1: device descriptor read/8, error -71 [ 406.694656][ T9749] FAULT_INJECTION: forcing a failure. [ 406.694656][ T9749] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 406.723852][ T9749] CPU: 1 UID: 0 PID: 9749 Comm: syz.6.789 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 406.723882][ T9749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 406.723895][ T9749] Call Trace: [ 406.723903][ T9749] [ 406.723911][ T9749] dump_stack_lvl+0x189/0x250 [ 406.723940][ T9749] ? __pfx____ratelimit+0x10/0x10 [ 406.723961][ T9749] ? __pfx_dump_stack_lvl+0x10/0x10 [ 406.723983][ T9749] ? __pfx__printk+0x10/0x10 [ 406.724008][ T9749] ? __might_fault+0xb0/0x130 [ 406.724042][ T9749] should_fail_ex+0x414/0x560 [ 406.724068][ T9749] _copy_from_user+0x2d/0xb0 [ 406.724119][ T9749] restore_altstack+0x9d/0x4b0 [ 406.724145][ T9749] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 406.724180][ T9749] ? __pfx_restore_altstack+0x10/0x10 [ 406.724212][ T9749] ? _raw_spin_unlock_irq+0x23/0x50 [ 406.724229][ T9749] ? lockdep_hardirqs_on+0x9c/0x150 [ 406.724254][ T9749] __ia32_sys_rt_sigreturn+0x1ac/0x7b0 [ 406.724287][ T9749] ? lockdep_hardirqs_on+0x9c/0x150 [ 406.724308][ T9749] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 406.724334][ T9749] ? _raw_spin_unlock_irq+0x2e/0x50 [ 406.724352][ T9749] ? signal_setup_done+0x230/0x310 [ 406.724378][ T9749] ? __lock_acquire+0xab9/0xd20 [ 406.724422][ T9749] ? __task_pid_nr_ns+0x28/0x470 [ 406.724454][ T9749] ? do_syscall_64+0xbe/0x3b0 [ 406.724481][ T9749] do_syscall_64+0xfa/0x3b0 [ 406.724501][ T9749] ? lockdep_hardirqs_on+0x9c/0x150 [ 406.724522][ T9749] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.724542][ T9749] ? clear_bhb_loop+0x60/0xb0 [ 406.724575][ T9749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.724596][ T9749] RIP: 0033:0x7f035c32add9 [ 406.724615][ T9749] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 406.724634][ T9749] RSP: 002b:00007f035d28fa80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 406.724657][ T9749] RAX: ffffffffffffffda RBX: 00007f035c5b6090 RCX: 00007f035c32add9 [ 406.724672][ T9749] RDX: 00007f035d28fa80 RSI: 00007f035d28fbb0 RDI: 0000000000000021 [ 406.724686][ T9749] RBP: 00007f035d290090 R08: 0000000000000000 R09: 0000000000000000 [ 406.724698][ T9749] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 406.724710][ T9749] R13: 00007f035c5b6128 R14: 00007f035c5b6090 R15: 00007ffd2c7fce58 [ 406.724744][ T9749] [ 407.041078][ T36] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.065581][ T9756] fuse: Bad value for 'user_id' [ 407.096618][ T9756] fuse: Bad value for 'user_id' [ 407.331149][ T9757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.366174][ T36] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.608232][ T5922] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 407.616810][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 407.748300][ T5922] usb 1-1: device descriptor read/64, error -32 [ 408.014136][ T9757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.048689][ T5922] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 408.364818][ T51] Bluetooth: hci2: command tx timeout [ 408.409826][ T9769] fuse: Bad value for 'fd' [ 408.417231][ T9769] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 408.432715][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 408.432738][ T30] audit: type=1800 audit(1755475752.259:120): pid=9769 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.8.793" name="file1" dev="tmpfs" ino=176 res=0 errno=0 [ 408.556896][ T9773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.796'. [ 408.789157][ T36] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.797373][ T9775] block nbd4: not configured, cannot reconfigure [ 410.330148][ T36] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.443328][ T51] Bluetooth: hci2: command tx timeout [ 410.604256][ T9785] netlink: 'syz.4.799': attribute type 29 has an invalid length. [ 410.645730][ T9784] tipc: Started in network mode [ 410.668415][ T9784] tipc: Node identity 46b65df83469, cluster identity 4711 [ 410.686046][ T9784] tipc: Enabled bearer , priority 0 [ 410.701686][ T9790] netlink: 500 bytes leftover after parsing attributes in process `syz.4.799'. [ 410.721470][ T9787] syzkaller0: entered promiscuous mode [ 410.727013][ T9787] syzkaller0: entered allmulticast mode [ 410.765588][ T9785] netlink: 'syz.4.799': attribute type 29 has an invalid length. [ 410.917859][ T9764] netlink: 4 bytes leftover after parsing attributes in process `syz.6.794'. [ 410.946547][ T9787] tipc: Resetting bearer [ 411.037935][ T9787] tipc: Disabling bearer [ 411.131355][ T9796] tipc: Started in network mode [ 411.136557][ T9796] tipc: Node identity fad88d9c8523, cluster identity 4711 [ 411.145130][ T9796] tipc: Enabled bearer , priority 0 [ 411.223652][ T9804] netlink: 'syz.8.804': attribute type 11 has an invalid length. [ 411.380999][ T9793] tipc: Disabling bearer [ 411.568123][ T43] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 411.593990][ T9727] chnl_net:caif_netlink_parms(): no params data found [ 411.632755][ T36] bridge_slave_1: left promiscuous mode [ 411.639117][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.653302][ T36] bridge_slave_0: left allmulticast mode [ 411.660473][ T36] bridge_slave_0: left promiscuous mode [ 411.666450][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.703748][ T9816] block nbd8: not configured, cannot reconfigure [ 411.761249][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 411.861669][ T43] usb 5-1: config 0 has an invalid interface number: 239 but max is 0 [ 411.965989][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 412.083689][ T43] usb 5-1: config 0 has no interface number 0 [ 412.146597][ T43] usb 5-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 412.225697][ T43] usb 5-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 412.338753][ T43] usb 5-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 412.464415][ T43] usb 5-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 412.518181][ T51] Bluetooth: hci2: command tx timeout [ 412.578110][ T43] usb 5-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 412.628490][ T43] usb 5-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 412.664408][ T43] usb 5-1: config 0 interface 239 altsetting 4 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 412.677863][ T43] usb 5-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid wMaxPacketSize 0 [ 412.688051][ T43] usb 5-1: config 0 interface 239 has no altsetting 0 [ 412.750299][ T43] usb 5-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 412.760692][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.787870][ T43] usb 5-1: Product: syz [ 412.809176][ T43] usb 5-1: Manufacturer: syz [ 412.814755][ T43] usb 5-1: SerialNumber: syz [ 412.966059][ T43] usb 5-1: config 0 descriptor?? [ 412.987196][ T9806] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 413.026317][ T9806] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 413.302824][ T51] Bluetooth: hci4: urb ffff88814c544500 submission failed (90) [ 413.306083][ T5840] usb 5-1: USB disconnect, device number 40 [ 414.599198][ T51] Bluetooth: hci2: command tx timeout [ 414.840128][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 414.853435][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 414.866624][ T36] bond0 (unregistering): Released all slaves [ 415.006098][ T36] bond1 (unregistering): Released all slaves [ 415.296904][ T9840] No control pipe specified [ 415.393015][ T9842] netlink: 'syz.0.816': attribute type 11 has an invalid length. [ 415.649266][ T43] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 415.702334][ T9857] FAULT_INJECTION: forcing a failure. [ 415.702334][ T9857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.723705][ T9857] CPU: 1 UID: 0 PID: 9857 Comm: syz.4.819 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 415.723732][ T9857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 415.723743][ T9857] Call Trace: [ 415.723751][ T9857] [ 415.723759][ T9857] dump_stack_lvl+0x189/0x250 [ 415.723789][ T9857] ? __pfx____ratelimit+0x10/0x10 [ 415.723811][ T9857] ? __pfx_dump_stack_lvl+0x10/0x10 [ 415.723834][ T9857] ? __pfx__printk+0x10/0x10 [ 415.723860][ T9857] ? __might_fault+0xb0/0x130 [ 415.723895][ T9857] should_fail_ex+0x414/0x560 [ 415.723921][ T9857] fpu__restore_sig+0x1bb/0x1100 [ 415.723952][ T9857] ? __lock_acquire+0xab9/0xd20 [ 415.723975][ T9857] ? __pfx_fpu__restore_sig+0x10/0x10 [ 415.724068][ T9857] __ia32_sys_rt_sigreturn+0x661/0x7b0 [ 415.724107][ T9857] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 415.724134][ T9857] ? _raw_spin_unlock_irq+0x2e/0x50 [ 415.724187][ T9857] ? __task_pid_nr_ns+0x28/0x470 [ 415.724221][ T9857] ? do_syscall_64+0xbe/0x3b0 [ 415.724248][ T9857] do_syscall_64+0xfa/0x3b0 [ 415.724268][ T9857] ? lockdep_hardirqs_on+0x9c/0x150 [ 415.724289][ T9857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.724310][ T9857] ? clear_bhb_loop+0x60/0xb0 [ 415.724336][ T9857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.724356][ T9857] RIP: 0033:0x7f2b9158ebe7 [ 415.724375][ T9857] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 415.724393][ T9857] RSP: 002b:00007f2b923c5038 EFLAGS: 00000246 [ 415.724412][ T9857] RAX: 0000000000000000 RBX: 00007f2b917b6090 RCX: 00007f2b9158ebe9 [ 415.724426][ T9857] RDX: 0000000000018fdc RSI: 0000200000032440 RDI: 0000000000000005 [ 415.724454][ T9857] RBP: 00007f2b923c5090 R08: 0000000000000000 R09: 0000000000000000 [ 415.724467][ T9857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 415.724479][ T9857] R13: 00007f2b917b6128 R14: 00007f2b917b6090 R15: 00007ffefe651a78 [ 415.724514][ T9857] [ 415.942336][ T9727] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.953523][ T9727] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.961458][ T9727] bridge_slave_0: entered allmulticast mode [ 415.971807][ T9727] bridge_slave_0: entered promiscuous mode [ 416.000193][ T43] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 416.009075][ T43] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 416.019478][ T43] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 416.034842][ T43] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 416.044414][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.054891][ T43] usb 7-1: Product: syz [ 416.059401][ T43] usb 7-1: Manufacturer: syz [ 416.064462][ T43] usb 7-1: SerialNumber: syz [ 416.070797][ T9727] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.085029][ T9727] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.094117][ T9727] bridge_slave_1: entered allmulticast mode [ 416.108764][ T9727] bridge_slave_1: entered promiscuous mode [ 416.267586][ T9727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.284223][ T5840] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 416.345808][ T9727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.414366][ T36] hsr_slave_0: left promiscuous mode [ 416.421108][ T36] hsr_slave_1: left promiscuous mode [ 416.427235][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.437441][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.457518][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.475753][ T5840] usb 9-1: Using ep0 maxpacket: 8 [ 416.478104][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.516993][ T5840] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55 [ 416.530569][ T5840] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.548943][ T5840] usb 9-1: Product: syz [ 416.568801][ T5840] usb 9-1: Manufacturer: syz [ 416.572970][ T36] veth1_macvtap: left promiscuous mode [ 416.579826][ T36] veth0_macvtap: left promiscuous mode [ 416.585769][ T36] veth1_vlan: left promiscuous mode [ 416.591245][ T5840] usb 9-1: SerialNumber: syz [ 416.604712][ T5840] usb 9-1: config 0 descriptor?? [ 416.637055][ T36] veth0_vlan: left promiscuous mode [ 416.827861][ T5840] usb 9-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 416.846348][ T5840] dvb_usb_af9015 9-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 416.866402][ T5840] usb 9-1: USB disconnect, device number 11 [ 417.017492][ T9872] netlink: 596 bytes leftover after parsing attributes in process `syz.0.825'. [ 417.601600][ T9877] Cannot find add_set index 0 as target [ 417.612116][ T9877] netlink: 'syz.4.827': attribute type 9 has an invalid length. [ 417.636100][ T9877] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 418.481026][ T36] team0 (unregistering): Port device team_slave_1 removed [ 418.539981][ T36] team0 (unregistering): Port device team_slave_0 removed [ 419.925122][ T9870] netlink: 'syz.0.825': attribute type 29 has an invalid length. [ 419.994067][ T9727] team0: Port device team_slave_0 added [ 420.005451][ T43] usb 7-1: 0:2 : does not exist [ 420.032310][ T9727] team0: Port device team_slave_1 added [ 420.051856][ T5840] usb 5-1: new low-speed USB device number 41 using dummy_hcd [ 420.055870][ T43] usb 7-1: USB disconnect, device number 18 [ 420.173992][ T9273] udevd[9273]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 420.258329][ T5840] usb 5-1: device descriptor read/64, error -71 [ 420.265509][ T9727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.286461][ T9727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.327848][ T9727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.361889][ T9727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.369210][ T9727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.431607][ T9727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.447461][ T9901] IPv6: addrconf: prefix option has invalid lifetime [ 420.688134][ T5840] usb 5-1: new low-speed USB device number 42 using dummy_hcd [ 421.176921][ T9908] xt_hashlimit: overflow, rate too high: 0 [ 421.371883][ T5840] usb 5-1: device descriptor read/64, error -71 [ 421.761633][ T5840] usb usb5-port1: attempt power cycle [ 421.973050][ T9912] netlink: 8 bytes leftover after parsing attributes in process `syz.8.836'. [ 422.007304][ T9912] netlink: 16 bytes leftover after parsing attributes in process `syz.8.836'. [ 422.035061][ T9727] hsr_slave_0: entered promiscuous mode [ 422.044940][ T9727] hsr_slave_1: entered promiscuous mode [ 422.053025][ T9727] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 422.062187][ T9727] Cannot create hsr debugfs directory [ 422.238240][ T5840] usb 5-1: new low-speed USB device number 43 using dummy_hcd [ 422.269590][ T5840] usb 5-1: device descriptor read/8, error -71 [ 422.284307][ T9922] netlink: 'syz.0.840': attribute type 1 has an invalid length. [ 422.788223][ T43] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 422.872242][ T5840] usb 5-1: new low-speed USB device number 44 using dummy_hcd [ 423.470103][ T43] usb 7-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 423.509654][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.539953][ T43] usb 7-1: Product: syz [ 423.542908][ T5840] usb 5-1: device descriptor read/8, error -71 [ 423.544231][ T43] usb 7-1: Manufacturer: syz [ 423.592747][ T43] usb 7-1: SerialNumber: syz [ 423.630687][ T43] usb 7-1: config 0 descriptor?? [ 423.658824][ T5840] usb usb5-port1: unable to enumerate USB device [ 423.866429][ T43] usb 7-1: ignoring: probably an ADSL modem [ 424.013994][ T9727] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 424.030273][ T9727] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 424.043106][ T9727] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 424.055994][ T9727] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 424.068259][ T5840] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 424.218864][ T5840] usb 5-1: device descriptor read/64, error -71 [ 424.262662][ T9727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.270797][ T43] cxacru 7-1:0.0: usbatm_usb_probe: bind failed: -19! [ 424.295679][ T9727] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.310249][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.317497][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.348940][ T6588] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.356224][ T6588] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.468206][ T5840] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 424.610128][ T5840] usb 5-1: device descriptor read/64, error -71 [ 424.741385][ T5840] usb usb5-port1: attempt power cycle [ 424.874957][ T9727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.088642][ T5840] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 425.119123][ T5840] usb 5-1: device descriptor read/8, error -71 [ 425.169405][ T5834] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 425.328282][ T5834] usb 1-1: device descriptor read/64, error -71 [ 425.389262][ T5840] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 425.429335][ T5840] usb 5-1: device descriptor read/8, error -71 [ 425.432313][ T9727] veth0_vlan: entered promiscuous mode [ 425.465758][ T9727] veth1_vlan: entered promiscuous mode [ 425.543088][ T5908] usb 7-1: USB disconnect, device number 19 [ 425.567027][ T5840] usb usb5-port1: unable to enumerate USB device [ 425.578937][ T5834] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 425.716236][ T9727] veth0_macvtap: entered promiscuous mode [ 425.748326][ T5834] usb 1-1: device descriptor read/64, error -71 [ 425.756533][ T9727] veth1_macvtap: entered promiscuous mode [ 425.817018][ T9727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.856449][ T9727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.883643][ T5834] usb usb1-port1: attempt power cycle [ 425.903073][ T9990] netlink: 4 bytes leftover after parsing attributes in process `syz.6.850'. [ 425.930081][ T9991] netlink: 4 bytes leftover after parsing attributes in process `syz.6.850'. [ 425.944696][ T9727] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.954048][ T9727] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.963839][ T9727] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.975220][ T9727] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.158118][ T5908] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 426.190575][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.216841][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.238039][ T5834] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 426.266754][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.280873][ T5834] usb 1-1: device descriptor read/8, error -71 [ 426.287605][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.319213][ T5908] usb 9-1: Using ep0 maxpacket: 32 [ 426.349279][ T5908] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 426.374040][ T5908] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.419385][ T5908] usb 9-1: config 0 descriptor?? [ 426.521556][ T5834] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 426.580055][ T5834] usb 1-1: device descriptor read/8, error -71 [ 426.709314][ T5834] usb usb1-port1: unable to enumerate USB device [ 426.790981][ T5908] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 426.818613][ T5908] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 426.843694][ T5908] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 426.908592][T10009] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20003 [ 427.805916][ T5908] usb 9-1: media controller created [ 427.843689][ T5908] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 428.751116][T10024] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 428.770966][T10024] syz.9.854: attempt to access beyond end of device [ 428.770966][T10024] nbd9: rw=0, sector=0, nr_sectors = 1 limit=0 [ 428.925480][ T9] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 429.820485][ T9] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 429.855849][ T5908] az6027: usb out operation failed. (-71) [ 429.868619][ T5908] az6027: usb out operation failed. (-71) [ 429.874419][ T5908] stb0899_attach: Driver disabled by Kconfig [ 429.882595][ T9] usb 5-1: config 0 has no interface number 0 [ 429.895351][ T5908] az6027: no front-end attached [ 429.895351][ T5908] [ 429.903971][ T5908] az6027: usb out operation failed. (-71) [ 429.921785][ T5908] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 429.928024][ T9] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 429.934087][ T5908] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input20 [ 429.953958][ T5908] dvb-usb: schedule remote query interval to 400 msecs. [ 429.962823][ T5908] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 429.994318][ T5908] usb 9-1: USB disconnect, device number 12 [ 430.044602][ T9] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 430.073157][ T9] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice=55.58 [ 430.087046][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.110549][ T9] usb 5-1: Product: syz [ 430.114797][ T9] usb 5-1: Manufacturer: syz [ 430.308508][ T5909] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 430.409858][ T9] usb 5-1: SerialNumber: syz [ 430.581209][ T5909] usb 10-1: Using ep0 maxpacket: 8 [ 430.581801][ T9] usb 5-1: config 0 descriptor?? [ 430.685710][ T5909] usb 10-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 430.718881][ T9] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/input/input21 [ 430.732587][ T5909] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.752030][ T5908] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 430.770996][ T5909] usb 10-1: config 0 descriptor?? [ 430.942600][T10019] netlink: 'syz.4.853': attribute type 1 has an invalid length. [ 430.989000][T10019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.004383][ T5909] usb 10-1: string descriptor 0 read error: -71 [ 431.032034][T10019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.042652][ T5909] usb 10-1: Found UVC 0.00 device (2833:0201) [ 431.065915][ T5909] usb 10-1: No valid video chain found. [ 431.108559][ T5909] usb 10-1: USB disconnect, device number 2 [ 431.131064][T10056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.864'. [ 432.092773][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 432.428424][T10067] xt_TPROXY: Can be used only with -p tcp or -p udp [ 432.792878][ T24] usb 5-1: USB disconnect, device number 49 [ 432.865972][T10072] tipc: Enabled bearer , priority 0 [ 432.899037][T10072] syzkaller0: entered promiscuous mode [ 432.904592][T10072] syzkaller0: entered allmulticast mode [ 432.945346][T10073] FAULT_INJECTION: forcing a failure. [ 432.945346][T10073] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 432.959260][T10073] CPU: 0 UID: 0 PID: 10073 Comm: syz.8.867 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 432.959295][T10073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 432.959307][T10073] Call Trace: [ 432.959316][T10073] [ 432.959324][T10073] dump_stack_lvl+0x189/0x250 [ 432.959353][T10073] ? __pfx____ratelimit+0x10/0x10 [ 432.959382][T10073] ? __pfx_dump_stack_lvl+0x10/0x10 [ 432.959404][T10073] ? __pfx__printk+0x10/0x10 [ 432.959437][T10073] ? __might_fault+0xb0/0x130 [ 432.959480][T10073] should_fail_ex+0x414/0x560 [ 432.959514][T10073] _copy_from_user+0x2d/0xb0 [ 432.959542][T10073] __ia32_sys_rt_sigreturn+0x228/0x7b0 [ 432.959588][T10073] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 432.959615][T10073] ? _raw_spin_unlock_irq+0x2e/0x50 [ 432.959669][T10073] ? __task_pid_nr_ns+0x28/0x470 [ 432.959703][T10073] ? do_syscall_64+0xbe/0x3b0 [ 432.959730][T10073] do_syscall_64+0xfa/0x3b0 [ 432.959750][T10073] ? lockdep_hardirqs_on+0x9c/0x150 [ 432.959771][T10073] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.959791][T10073] ? clear_bhb_loop+0x60/0xb0 [ 432.959816][T10073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.959834][T10073] RIP: 0033:0x7fcda632add9 [ 432.959853][T10073] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 432.959869][T10073] RSP: 002b:00007fcda71bda80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 432.959891][T10073] RAX: ffffffffffffffda RBX: 00007fcda65b6090 RCX: 00007fcda632add9 [ 432.959906][T10073] RDX: 00007fcda71bda80 RSI: 00007fcda71bdbb0 RDI: 0000000000000021 [ 432.959919][T10073] RBP: 00007fcda71be090 R08: 0000000000000000 R09: 0000000000000000 [ 432.959932][T10073] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 432.959944][T10073] R13: 00007fcda65b6128 R14: 00007fcda65b6090 R15: 00007ffe1f0969e8 [ 432.959978][T10073] [ 433.191421][T10075] overlay: Unknown parameter 'obj_type' [ 434.119722][ T9] tipc: Node number set to 2147192220 [ 434.370508][T10069] tipc: Resetting bearer [ 434.420119][T10069] tipc: Disabling bearer [ 434.718091][ T24] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 434.741767][T10098] netlink: 'syz.9.875': attribute type 11 has an invalid length. [ 434.893522][ T24] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 434.911618][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.939394][ T24] usb 5-1: config 0 descriptor?? [ 434.955746][ T24] cp210x 5-1:0.0: cp210x converter detected [ 435.048357][ T43] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 435.109630][T10103] netlink: 24 bytes leftover after parsing attributes in process `syz.9.876'. [ 435.123215][T10103] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 435.328413][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 435.357697][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.378848][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.403571][ T43] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 435.434021][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.479964][ T43] usb 1-1: config 0 descriptor?? [ 435.525294][ T43] hub 1-1:0.0: USB hub found [ 435.937803][ T24] usb 5-1: cp210x converter now attached to ttyUSB0 [ 436.947302][T10121] 9pnet_fd: Insufficient options for proto=fd [ 438.078254][ T9] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 438.279712][ T43] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 438.314010][ T43] usbhid 1-1:0.0: can't add hid device: -71 [ 438.348141][ T43] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 438.382793][ T9] usb 10-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 438.398211][ T9] usb 10-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x51, changing to 0x1 [ 438.415879][ T9] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 438.447698][ T9] usb 10-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 438.450395][T10131] tipc: Enabling of bearer rejected, failed to enable media [ 438.482750][ T43] usb 1-1: USB disconnect, device number 40 [ 438.537713][ T9] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 438.578031][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.596907][T10131] siw: device registration error -23 [ 438.827447][ T9] ath6kl: Failed to submit usb control message: -71 [ 438.846901][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 438.865762][ T9] ath6kl: Unable to send get target info: -71 [ 438.885799][ T9] ath6kl: Failed to init ath6kl core: -71 [ 439.028627][ T9] ath6kl_usb 10-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 439.258858][ T9] usb 10-1: USB disconnect, device number 3 [ 439.676512][T10142] gre1: entered allmulticast mode [ 440.127294][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.134972][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.223646][T10160] FAULT_INJECTION: forcing a failure. [ 440.223646][T10160] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 440.225048][ T5840] usb 5-1: USB disconnect, device number 50 [ 440.237813][T10160] CPU: 1 UID: 0 PID: 10160 Comm: syz.0.883 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 440.237838][T10160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 440.237849][T10160] Call Trace: [ 440.237857][T10160] [ 440.237864][T10160] dump_stack_lvl+0x189/0x250 [ 440.237891][T10160] ? __pfx____ratelimit+0x10/0x10 [ 440.237911][T10160] ? __pfx_dump_stack_lvl+0x10/0x10 [ 440.237937][T10160] ? __pfx__printk+0x10/0x10 [ 440.237960][T10160] ? __might_fault+0xb0/0x130 [ 440.237991][T10160] should_fail_ex+0x414/0x560 [ 440.238015][T10160] fpu__restore_sig+0x1bb/0x1100 [ 440.238044][T10160] ? __lock_acquire+0xab9/0xd20 [ 440.238065][T10160] ? __pfx_fpu__restore_sig+0x10/0x10 [ 440.238121][T10160] __ia32_sys_rt_sigreturn+0x661/0x7b0 [ 440.238160][T10160] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 440.238185][T10160] ? _raw_spin_unlock_irq+0x2e/0x50 [ 440.238233][T10160] ? __task_pid_nr_ns+0x28/0x470 [ 440.238262][T10160] ? do_syscall_64+0xbe/0x3b0 [ 440.238286][T10160] do_syscall_64+0xfa/0x3b0 [ 440.238306][T10160] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.238323][T10160] ? asm_sysvec_call_function_single+0x1a/0x20 [ 440.238340][T10160] ? clear_bhb_loop+0x60/0xb0 [ 440.238361][T10160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.238378][T10160] RIP: 0033:0x7f37e738ebe7 [ 440.238396][T10160] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 440.238411][T10160] RSP: 002b:00007f37e816e038 EFLAGS: 00000246 [ 440.238429][T10160] RAX: 0000000000000000 RBX: 00007f37e75b6090 RCX: 00007f37e738ebe9 [ 440.238442][T10160] RDX: 0000000000018fdc RSI: 0000200000032440 RDI: 0000000000000005 [ 440.238453][T10160] RBP: 00007f37e816e090 R08: 0000000000000000 R09: 0000000000000000 [ 440.238464][T10160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 440.238475][T10160] R13: 00007f37e75b6128 R14: 00007f37e75b6090 R15: 00007fffbd842208 [ 440.238505][T10160] [ 440.490054][T10014] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 440.668129][T10014] usb 10-1: Using ep0 maxpacket: 16 [ 440.696046][T10014] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.723442][ T5840] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 440.725978][T10014] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 440.783748][T10014] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 440.797566][ T5840] cp210x 5-1:0.0: device disconnected [ 440.846787][T10014] usb 10-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 440.880611][T10014] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.930118][T10170] netlink: 'syz.8.886': attribute type 11 has an invalid length. [ 440.948066][T10014] usb 10-1: config 0 descriptor?? [ 441.430829][T10014] nintendo 0003:057E:2019.0008: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.9-1/input0 [ 441.936690][T10014] nintendo 0003:057E:2019.0008: Failed to get joycon info; ret=-71 [ 441.945114][T10014] nintendo 0003:057E:2019.0008: Failed to retrieve controller info; ret=-71 [ 441.954865][T10014] nintendo 0003:057E:2019.0008: Failed to initialize controller; ret=-71 [ 441.979774][T10014] nintendo 0003:057E:2019.0008: probe - fail = -71 [ 441.986676][T10014] nintendo 0003:057E:2019.0008: probe with driver nintendo failed with error -71 [ 442.063360][T10014] usb 10-1: USB disconnect, device number 4 [ 444.622514][T10243] netlink: 'syz.8.902': attribute type 29 has an invalid length. [ 444.655056][T10243] netlink: 8 bytes leftover after parsing attributes in process `syz.8.902'. [ 444.668391][T10242] FAULT_INJECTION: forcing a failure. [ 444.668391][T10242] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 444.681661][T10242] CPU: 0 UID: 0 PID: 10242 Comm: syz.9.899 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 444.681685][T10242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 444.681696][T10242] Call Trace: [ 444.681703][T10242] [ 444.681710][T10242] dump_stack_lvl+0x189/0x250 [ 444.681739][T10242] ? __pfx____ratelimit+0x10/0x10 [ 444.681762][T10242] ? __pfx_dump_stack_lvl+0x10/0x10 [ 444.681784][T10242] ? __pfx__printk+0x10/0x10 [ 444.681811][T10242] ? __might_fault+0xb0/0x130 [ 444.681846][T10242] should_fail_ex+0x414/0x560 [ 444.681874][T10242] copy_fpstate_to_sigframe+0xa8d/0xce0 [ 444.681909][T10242] ? copy_fpstate_to_sigframe+0x181/0xce0 [ 444.681944][T10242] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 444.681991][T10242] ? __lock_acquire+0xab9/0xd20 [ 444.682020][T10242] ? fpu__alloc_mathframe+0xad/0x130 [ 444.682053][T10242] get_sigframe+0x58d/0x7d0 [ 444.682089][T10242] ? __pfx_get_sigframe+0x10/0x10 [ 444.682133][T10242] x64_setup_rt_frame+0x15c/0xd40 [ 444.682177][T10242] ? lockdep_hardirqs_on+0x9c/0x150 [ 444.682200][T10242] ? _raw_spin_unlock_irq+0x2e/0x50 [ 444.682219][T10242] ? get_signal+0x1122/0x1310 [ 444.682249][T10242] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 444.682290][T10242] arch_do_signal_or_restart+0x3dc/0x750 [ 444.682328][T10242] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 444.682377][T10242] ? exit_to_user_mode_loop+0x40/0x110 [ 444.682403][T10242] exit_to_user_mode_loop+0x75/0x110 [ 444.682423][T10242] do_syscall_64+0x2bd/0x3b0 [ 444.682445][T10242] ? lockdep_hardirqs_on+0x9c/0x150 [ 444.682466][T10242] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.682486][T10242] ? clear_bhb_loop+0x60/0xb0 [ 444.682510][T10242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.682528][T10242] RIP: 0033:0x7f5942d8ebe7 [ 444.682546][T10242] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 444.682562][T10242] RSP: 002b:00007f5943b6c038 EFLAGS: 00000246 [ 444.682580][T10242] RAX: 0000000000000000 RBX: 00007f5942fb6090 RCX: 00007f5942d8ebe9 [ 444.682593][T10242] RDX: 0000000000018fdc RSI: 0000200000032440 RDI: 0000000000000005 [ 444.682605][T10242] RBP: 00007f5943b6c090 R08: 0000000000000000 R09: 0000000000000000 [ 444.682617][T10242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 444.682628][T10242] R13: 00007f5942fb6128 R14: 00007f5942fb6090 R15: 00007fff7f501f78 [ 444.682660][T10242] [ 444.983466][T10243] binder: Bad value for 'max' [ 445.070056][T10246] netlink: 'syz.0.901': attribute type 11 has an invalid length. [ 445.340399][T10253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.416494][T10253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.478388][ T43] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 445.819325][T10264] 9pnet_fd: Insufficient options for proto=fd [ 446.529080][ T43] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 446.555418][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.582433][ T43] usb 7-1: Product: syz [ 446.595882][ T43] usb 7-1: Manufacturer: syz [ 446.751708][ T43] usb 7-1: SerialNumber: syz [ 446.780843][ T43] usb 7-1: config 0 descriptor?? [ 448.190391][ T43] usb 7-1: USB disconnect, device number 20 [ 448.234141][T10281] usb usb8: usbfs: process 10281 (syz.9.910) did not claim interface 0 before use [ 448.638088][ T5840] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 449.457817][ T5840] usb 1-1: Using ep0 maxpacket: 16 [ 449.480798][ T5840] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 78, changing to 10 [ 449.481336][T10300] ptrace attach of "./syz-executor exec"[8682] was attempted by "\x09   0 /dev/snd/pcmC#D#c  [ 449.536894][ T5840] usb 1-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 449.967745][T10303] wg1 speed is unknown, defaulting to 1000 [ 450.168097][ T43] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 450.216782][ T5840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.306541][ T5840] usb 1-1: config 0 descriptor?? [ 450.318030][ T43] usb 7-1: Using ep0 maxpacket: 16 [ 450.332522][ T43] usb 7-1: config 0 has an invalid interface number: 32 but max is 0 [ 450.346568][ T43] usb 7-1: config 0 has no interface number 0 [ 450.383210][ T43] usb 7-1: config 0 interface 32 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 450.436548][ T43] usb 7-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=15.e8 [ 450.471824][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.506814][ T43] usb 7-1: Product: syz [ 450.526898][ T43] usb 7-1: Manufacturer: syz [ 450.540073][ T43] usb 7-1: SerialNumber: syz [ 450.555721][ T43] usb 7-1: config 0 descriptor?? [ 450.614587][T10309] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 450.652678][ T43] s2255 7-1:0.32: Could not find bulk-in endpoint [ 450.681439][ T43] Sensoray 2255 driver load failed: 0xfffffff4 [ 450.717599][ T43] s2255 7-1:0.32: probe with driver s2255 failed with error -12 [ 451.478038][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 451.500485][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 451.522426][ T5840] usbhid 1-1:0.0: can't add hid device: -71 [ 451.552736][ T5840] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 451.653737][ T5840] usb 1-1: USB disconnect, device number 41 [ 452.366579][T10310] wg1 speed is unknown, defaulting to 1000 [ 452.755513][ T43] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 452.958534][ T9] usb 7-1: USB disconnect, device number 21 [ 453.140433][T10350] Cannot find add_set index 0 as target [ 453.968310][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 453.979188][ T43] usb 5-1: unable to get BOS descriptor or descriptor too short [ 453.998502][ T43] usb 5-1: config 1 has an invalid interface number: 206 but max is 0 [ 454.006800][ T43] usb 5-1: config 1 has no interface number 0 [ 454.018244][ T43] usb 5-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a [ 454.038141][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.046195][ T43] usb 5-1: Product: syz [ 454.058401][ T43] usb 5-1: Manufacturer: syz [ 454.063062][ T43] usb 5-1: SerialNumber: syz [ 454.498533][ T43] usb 5-1: USB disconnect, device number 51 [ 456.950616][ T9] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 457.142371][ T9] usb 9-1: config 0 has an invalid interface number: 185 but max is 0 [ 457.177740][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 457.223908][ T9] usb 9-1: config 0 has no interface number 0 [ 457.230805][ T9] usb 9-1: config 0 interface 185 altsetting 0 has an endpoint descriptor with address 0x78, changing to 0x8 [ 457.258082][ T978] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 457.273222][ T9] usb 9-1: config 0 interface 185 altsetting 0 endpoint 0x8 has an invalid bInterval 162, changing to 4 [ 457.295654][ T9] usb 9-1: config 0 interface 185 altsetting 0 endpoint 0x8 has invalid maxpacket 20859, setting to 1023 [ 457.328678][ T9] usb 9-1: config 0 interface 185 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 457.377031][ T9] usb 9-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=d2.82 [ 457.396796][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.418443][ T978] usb 5-1: Using ep0 maxpacket: 16 [ 457.449346][ T9] usb 9-1: Product: syz [ 457.468266][ T978] usb 5-1: unable to get BOS descriptor or descriptor too short [ 457.477310][ T9] usb 9-1: Manufacturer: syz [ 457.488414][ T978] usb 5-1: config 7 has an invalid interface number: 79 but max is 0 [ 457.506852][ T9] usb 9-1: SerialNumber: syz [ 457.516372][ T978] usb 5-1: config 7 has no interface number 0 [ 457.547059][ T978] usb 5-1: config 7 interface 79 altsetting 6 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 457.587357][ T978] usb 5-1: config 7 interface 79 altsetting 6 endpoint 0x7 has an invalid bInterval 64, changing to 10 [ 457.604913][ T9] usb 9-1: config 0 descriptor?? [ 457.615689][ T9] cdc_ether 9-1:0.185: skipping garbage [ 457.639176][ T978] usb 5-1: config 7 interface 79 has no altsetting 0 [ 457.655336][ T9] usb 9-1: bad CDC descriptors [ 457.682650][ T978] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=f4.98 [ 457.697376][ T9] usb 9-1: unsupported MDLM descriptors [ 457.725912][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.747801][ T978] usb 5-1: Product: syz [ 457.765999][ T978] usb 5-1: Manufacturer: syz [ 457.791335][ T978] usb 5-1: SerialNumber: syz [ 457.816478][ T9] usb 9-1: USB disconnect, device number 13 [ 458.044825][T10435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.934'. [ 458.138391][ T978] usb 5-1: USB disconnect, device number 52 [ 458.456351][T10443] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 458.598425][ T5908] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 458.718150][ T978] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 458.761314][ T5908] usb 10-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 458.778153][ T5908] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.819271][ T5908] usb 10-1: config 0 descriptor?? [ 458.841159][ T5908] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 458.895475][ T978] usb 9-1: Using ep0 maxpacket: 8 [ 458.927102][ T978] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 458.959748][ T978] usb 9-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 458.978096][ T978] usb 9-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 459.017624][ T978] usb 9-1: Product: syz [ 459.045210][ T978] usb 9-1: Manufacturer: syz [ 459.066653][ T978] usb 9-1: SerialNumber: syz [ 459.071727][ T9733] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 459.248408][ T9733] usb 1-1: Using ep0 maxpacket: 32 [ 459.271726][ T9733] usb 1-1: unable to get BOS descriptor or descriptor too short [ 459.295587][ T5908] gspca_cpia1: usb_control_msg 03, error -32 [ 459.295905][ T9733] usb 1-1: config 7 has an invalid interface number: 111 but max is 0 [ 459.304098][T10440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.325219][ T978] usb 9-1: Handspring Visor / Palm OS: No valid connect info available [ 459.347825][ T9733] usb 1-1: config 7 has no interface number 0 [ 459.364192][ T978] usb 9-1: Handspring Visor / Palm OS: port 0, is for Debugger use [ 459.386504][ T978] usb 9-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 459.396788][ T978] usb 9-1: Handspring Visor / Palm OS: Number of ports: 2 [ 459.396992][ T9733] usb 1-1: New USB device found, idVendor=0481, idProduct=9f2e, bcdDevice=75.5b [ 459.408956][T10440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.423218][ T9733] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.432504][ T9733] usb 1-1: Product: syz [ 459.436737][ T9733] usb 1-1: Manufacturer: ᠁ [ 459.447421][ T9733] usb 1-1: SerialNumber: syz [ 459.530264][ T978] usb 9-1: palm_os_3_probe - error -71 getting bytes available request [ 459.558843][ T978] visor 9-1:1.0: Handspring Visor / Palm OS converter detected [ 459.612558][ T5908] gspca_cpia1: usb_control_msg 03, error -71 [ 459.618982][ T978] usb 9-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 459.658105][ T5908] gspca_cpia1: usb_control_msg 01, error -71 [ 459.664180][ T5908] cpia1 10-1:0.0: only firmware version 1 is supported (got: 0) [ 459.669069][ T978] usb 9-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 459.698804][T10454] sctp: [Deprecated]: syz.0.941 (pid 10454) Use of struct sctp_assoc_value in delayed_ack socket option. [ 459.698804][T10454] Use struct sctp_sack_info instead [ 459.725439][ T5908] usb 10-1: USB disconnect, device number 5 [ 459.758456][ T978] usb 9-1: USB disconnect, device number 14 [ 459.762579][T10454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.807645][ T978] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 459.831348][T10454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.865218][T10454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.900479][ T978] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 459.901979][T10454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.930097][ T978] visor 9-1:1.0: device disconnected [ 460.007405][ T9733] usb 1-1: bad CDC descriptors [ 460.077220][ T9733] usb 1-1: USB disconnect, device number 42 [ 460.158147][ T5908] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 460.258327][ T5922] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 460.382142][ T5908] usb 10-1: Using ep0 maxpacket: 8 [ 460.411092][ T5908] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 460.439276][ T5908] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 460.468331][ T5908] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 460.491197][ T5922] usb 5-1: not running at top speed; connect to a high speed hub [ 460.507845][ T5908] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 460.549143][ T5922] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 460.567999][ T5908] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 460.588532][ T5922] usb 5-1: config 1 interface 0 has no altsetting 0 [ 460.606418][ T5922] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 460.627490][ T5908] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 460.643190][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.658426][ T5908] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.668936][ T5922] usb 5-1: Product: ж [ 460.673064][ T5922] usb 5-1: Manufacturer: Ї [ 460.691803][ T5922] usb 5-1: SerialNumber: syz [ 460.717139][T10470] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 460.729506][ T9733] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 460.903341][ T5908] usb 10-1: usb_control_msg returned -32 [ 460.908075][ T9733] usb 9-1: Using ep0 maxpacket: 32 [ 460.919765][ T5908] usbtmc 10-1:16.0: can't read capabilities [ 460.926463][ T9733] usb 9-1: config 0 has an invalid interface number: 202 but max is 0 [ 460.936351][ T9733] usb 9-1: config 0 has no interface number 0 [ 460.968758][ T5909] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 460.977553][ T9733] usb 9-1: config 0 interface 202 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 461.024285][ T9733] usb 9-1: New USB device found, idVendor=08ca, idProduct=0103, bcdDevice=bf.1b [ 461.048394][ T9733] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.072519][ T9733] usb 9-1: Product: syz [ 461.093189][ T9733] usb 9-1: Manufacturer: syz [ 461.098411][ T9733] usb 9-1: SerialNumber: syz [ 461.118852][ T9733] usb 9-1: config 0 descriptor?? [ 461.162305][ T5909] usb 1-1: Using ep0 maxpacket: 16 [ 461.184417][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.218423][ T5908] kernel write not supported for file /uhid (pid: 5908 comm: kworker/1:4) [ 461.228762][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.253217][ T5909] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 461.272492][ T5909] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 461.288113][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.312444][ T5922] usb 5-1: bad CDC descriptors [ 461.336903][ T5909] usb 1-1: config 0 descriptor?? [ 461.352076][ T5922] usb 5-1: USB disconnect, device number 53 [ 461.445848][ T9733] gspca_main: spca500-2.14.0 probing 08ca:0103 [ 461.518329][ T9733] usb 9-1: USB disconnect, device number 15 [ 461.793966][ T5909] microsoft 0003:045E:07DA.0009: item fetching failed at offset 31/34 [ 461.833314][ T5909] microsoft 0003:045E:07DA.0009: parse failed [ 461.851917][ T5909] microsoft 0003:045E:07DA.0009: probe with driver microsoft failed with error -22 [ 462.134097][ T9733] usb 1-1: USB disconnect, device number 43 [ 463.141199][ T5909] usb 10-1: USB disconnect, device number 6 [ 463.775204][T10528] vlan0: entered promiscuous mode [ 464.191567][ T5909] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 464.632943][ T5909] usb 5-1: config 0 has an invalid interface number: 252 but max is 0 [ 464.661746][ T5909] usb 5-1: config 0 has no interface number 0 [ 464.715373][ T5909] usb 5-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=75.70 [ 464.750354][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.775390][ T5909] usb 5-1: Product: syz [ 464.791985][ T5909] usb 5-1: Manufacturer: syz [ 464.796738][ T5909] usb 5-1: SerialNumber: syz [ 464.855013][ T5909] usb 5-1: config 0 descriptor?? [ 464.973133][T10562] : renamed from bond_slave_0 [ 465.074720][ T5909] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:704a [ 465.093274][ T5909] gspca_sn9c20x: Write register 1000 failed -71 [ 465.108393][ T5909] gspca_sn9c20x: Device initialization failed [ 465.121478][ T5909] gspca_sn9c20x 5-1:0.252: probe with driver gspca_sn9c20x failed with error -71 [ 465.152708][ T5909] usb 5-1: USB disconnect, device number 54 [ 465.178492][T10120] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 465.238238][ T5840] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 465.261524][ T30] audit: type=1326 audit(1755475809.089:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10571 comm="syz.6.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035c38ebe9 code=0x7ffc0000 [ 465.305066][ T30] audit: type=1326 audit(1755475809.089:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10571 comm="syz.6.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035c38ebe9 code=0x7ffc0000 [ 465.327352][ T30] audit: type=1326 audit(1755475809.089:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10571 comm="syz.6.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f035c38ebe9 code=0x7ffc0000 [ 465.358308][T10120] usb 9-1: device descriptor read/64, error -71 [ 465.372725][ T30] audit: type=1326 audit(1755475809.089:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10571 comm="syz.6.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035c38ebe9 code=0x7ffc0000 [ 465.399814][ T30] audit: type=1326 audit(1755475809.089:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10571 comm="syz.6.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035c38ebe9 code=0x7ffc0000 [ 465.408175][ T5840] usb 10-1: Using ep0 maxpacket: 8 [ 465.429043][ T30] audit: type=1326 audit(1755475809.089:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10571 comm="syz.6.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f035c38ebe9 code=0x7ffc0000 [ 465.456386][ T30] audit: type=1326 audit(1755475809.089:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10571 comm="syz.6.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035c38ebe9 code=0x7ffc0000 [ 465.480669][ T30] audit: type=1326 audit(1755475809.089:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10571 comm="syz.6.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035c38ebe9 code=0x7ffc0000 [ 465.504502][ T30] audit: type=1326 audit(1755475809.089:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10571 comm="syz.6.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f035c38ebe9 code=0x7ffc0000 [ 465.518661][ T5840] usb 10-1: config 0 has an invalid interface number: 52 but max is 0 [ 465.556258][ T5840] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 465.567266][ T5840] usb 10-1: config 0 has no interface number 0 [ 465.573709][ T5840] usb 10-1: config 0 interface 52 has no altsetting 0 [ 465.587396][ T5840] usb 10-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 465.609918][T10120] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 465.626178][ T30] audit: type=1326 audit(1755475809.089:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10571 comm="syz.6.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035c38ebe9 code=0x7ffc0000 [ 465.637843][ T5840] usb 10-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 465.676335][ T5840] usb 10-1: Manufacturer: syz [ 465.707486][ T5840] usb 10-1: config 0 descriptor?? [ 465.748138][T10120] usb 9-1: device descriptor read/64, error -71 [ 465.867377][T10120] usb usb9-port1: attempt power cycle [ 465.934440][ T5840] usb 10-1: Can not set alternate setting to 1, error: -71 [ 465.946828][ T5840] synaptics_usb 10-1:0.52: probe with driver synaptics_usb failed with error -71 [ 465.998658][ T5840] usb 10-1: USB disconnect, device number 7 [ 466.088093][ T5922] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 466.233149][T10120] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 466.259457][ T5922] usb 5-1: Using ep0 maxpacket: 16 [ 466.271998][T10590] netlink: 'syz.0.961': attribute type 13 has an invalid length. [ 466.274466][T10120] usb 9-1: device descriptor read/8, error -71 [ 466.287141][ T5922] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 466.308118][ T5922] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 466.317291][ T5922] usb 5-1: config 0 has no interface number 0 [ 466.341525][ T5922] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 466.358241][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.383605][ T5922] usb 5-1: Product: syz [ 466.393795][ T5922] usb 5-1: Manufacturer: syz [ 466.403931][ T5922] usb 5-1: SerialNumber: syz [ 466.421450][ T5922] usb 5-1: config 0 descriptor?? [ 466.445336][ T5922] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 466.462798][ T5922] usb 5-1: No valid video chain found. [ 466.528258][T10120] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 466.587516][T10120] usb 9-1: device descriptor read/8, error -71 [ 466.626111][T10590] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.635320][T10590] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.644543][T10590] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.653791][T10590] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.676048][T10579] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 466.690790][ T5922] usb 5-1: USB disconnect, device number 55 [ 466.706884][T10120] usb usb9-port1: unable to enumerate USB device [ 468.037222][T10596] comedi comedi0: comedi_config --init_data is deprecated [ 468.499049][ T5922] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 468.810964][ T5922] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 468.935402][ T5922] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.032256][ T5922] usb 10-1: Product: syz [ 469.094913][ T5922] usb 10-1: Manufacturer: syz [ 469.200706][ T5922] usb 10-1: SerialNumber: syz [ 469.272229][ T5922] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 469.342524][T10120] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 469.423568][T10624] tipc: Enabled bearer , priority 0 [ 469.445820][T10624] syzkaller0: entered promiscuous mode [ 469.482986][T10624] syzkaller0: entered allmulticast mode [ 469.597878][T10626] tipc: Resetting bearer [ 469.685453][T10617] tipc: Resetting bearer [ 469.709943][ C1] usb 10-1: ath9k_htc: invalid pkt_len (ff31) [ 469.749266][T10617] tipc: Disabling bearer [ 470.316017][T10636] Cannot find add_set index 0 as target [ 470.418128][ T5840] usb 9-1: new full-speed USB device number 20 using dummy_hcd [ 470.628596][ T5840] usb 9-1: config 0 has an invalid interface number: 41 but max is 0 [ 470.723450][ T5840] usb 9-1: config 0 has no interface number 0 [ 470.812455][ T5840] usb 9-1: config 0 interface 41 has no altsetting 0 [ 470.928024][ T5840] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 471.048820][ T5840] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.161179][ T5840] usb 9-1: Product: syz [ 471.195329][T10120] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 471.203015][T10120] ath9k_htc: Failed to initialize the device [ 471.213935][ T5840] usb 9-1: Manufacturer: syz [ 471.253813][T10120] usb 10-1: ath9k_htc: USB layer deinitialized [ 471.263446][ T5840] usb 9-1: SerialNumber: syz [ 471.381645][ T5840] usb 9-1: config 0 descriptor?? [ 472.104974][ T5840] CoreChips 9-1:0.41: probe with driver CoreChips failed with error -22 [ 472.323961][ T5840] usb 9-1: USB disconnect, device number 20 [ 472.691792][ T9733] usb 10-1: USB disconnect, device number 8 [ 472.781899][T10653] [ 472.784317][T10653] ====================================================== [ 472.791373][T10653] WARNING: possible circular locking dependency detected [ 472.798415][T10653] 6.16.0-syzkaller #0 Not tainted [ 472.803444][T10653] ------------------------------------------------------ [ 472.810463][T10653] syz.6.976/10653 is trying to acquire lock: [ 472.816449][T10653] ffff888025668988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 472.827480][T10653] [ 472.827480][T10653] but task is already holding lock: [ 472.834860][T10653] ffff888025668a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x93e/0x18f0 [ 472.844501][T10653] [ 472.844501][T10653] which lock already depends on the new lock. [ 472.844501][T10653] [ 472.854915][T10653] [ 472.854915][T10653] the existing dependency chain (in reverse order) is: [ 472.864107][T10653] [ 472.864107][T10653] -> #2 (&nbd->config_lock){+.+.}-{4:4}: [ 472.871947][T10653] lock_acquire+0x120/0x360 [ 472.877000][T10653] __mutex_lock+0x182/0xe80 [ 472.882121][T10653] refcount_dec_and_mutex_lock+0x30/0xa0 [ 472.888287][T10653] nbd_config_put+0x2c/0x790 [ 472.893409][T10653] nbd_release+0xfe/0x140 [ 472.898288][T10653] bdev_release+0x533/0x650 [ 472.903322][T10653] blkdev_release+0x15/0x20 [ 472.908374][T10653] __fput+0x449/0xa70 [ 472.912886][T10653] fput_close_sync+0x119/0x200 [ 472.918183][T10653] __x64_sys_close+0x7f/0x110 [ 472.923412][T10653] do_syscall_64+0xfa/0x3b0 [ 472.928452][T10653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.934873][T10653] [ 472.934873][T10653] -> #1 (&disk->open_mutex){+.+.}-{4:4}: [ 472.942794][T10653] lock_acquire+0x120/0x360 [ 472.947827][T10653] __mutex_lock+0x182/0xe80 [ 472.952868][T10653] __del_gendisk+0x129/0x9e0 [ 472.957988][T10653] del_gendisk+0xe8/0x160 [ 472.962850][T10653] loop_remove+0x42/0xc0 [ 472.967713][T10653] loop_control_ioctl+0x4ac/0x5a0 [ 472.973263][T10653] __se_sys_ioctl+0xfc/0x170 [ 472.978394][T10653] do_syscall_64+0xfa/0x3b0 [ 472.983425][T10653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.989855][T10653] [ 472.989855][T10653] -> #0 (&set->update_nr_hwq_lock){++++}-{4:4}: [ 472.998291][T10653] validate_chain+0xb9b/0x2140 [ 473.003679][T10653] __lock_acquire+0xab9/0xd20 [ 473.009066][T10653] lock_acquire+0x120/0x360 [ 473.014179][T10653] down_write+0x96/0x1f0 [ 473.018953][T10653] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 473.025209][T10653] nbd_start_device+0x16c/0xac0 [ 473.030599][T10653] nbd_genl_connect+0x135b/0x18f0 [ 473.036164][T10653] genl_family_rcv_msg_doit+0x215/0x300 [ 473.042246][T10653] genl_rcv_msg+0x60e/0x790 [ 473.047275][T10653] netlink_rcv_skb+0x205/0x470 [ 473.052572][T10653] genl_rcv+0x28/0x40 [ 473.057091][T10653] netlink_unicast+0x75c/0x8e0 [ 473.062386][T10653] netlink_sendmsg+0x805/0xb30 [ 473.067685][T10653] __sock_sendmsg+0x21c/0x270 [ 473.072891][T10653] ____sys_sendmsg+0x505/0x830 [ 473.078188][T10653] ___sys_sendmsg+0x21f/0x2a0 [ 473.083404][T10653] __x64_sys_sendmsg+0x19b/0x260 [ 473.088878][T10653] do_syscall_64+0xfa/0x3b0 [ 473.093997][T10653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.100505][T10653] [ 473.100505][T10653] other info that might help us debug this: [ 473.100505][T10653] [ 473.110741][T10653] Chain exists of: [ 473.110741][T10653] &set->update_nr_hwq_lock --> &disk->open_mutex --> &nbd->config_lock [ 473.110741][T10653] [ 473.125113][T10653] Possible unsafe locking scenario: [ 473.125113][T10653] [ 473.132678][T10653] CPU0 CPU1 [ 473.138060][T10653] ---- ---- [ 473.143435][T10653] lock(&nbd->config_lock); [ 473.148040][T10653] lock(&disk->open_mutex); [ 473.155167][T10653] lock(&nbd->config_lock); [ 473.162512][T10653] lock(&set->update_nr_hwq_lock); [ 473.167720][T10653] [ 473.167720][T10653] *** DEADLOCK *** [ 473.167720][T10653] [ 473.175870][T10653] 3 locks held by syz.6.976/10653: [ 473.180989][T10653] #0: ffffffff8f5701f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 473.189195][T10653] #1: ffffffff8f570008 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 473.198190][T10653] #2: ffff888025668a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x93e/0x18f0 [ 473.208252][T10653] [ 473.208252][T10653] stack backtrace: [ 473.214167][T10653] CPU: 0 UID: 0 PID: 10653 Comm: syz.6.976 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 473.214190][T10653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 473.214199][T10653] Call Trace: [ 473.214209][T10653] [ 473.214217][T10653] dump_stack_lvl+0x189/0x250 [ 473.214241][T10653] ? __pfx_dump_stack_lvl+0x10/0x10 [ 473.214259][T10653] ? __pfx__printk+0x10/0x10 [ 473.214279][T10653] ? print_lock_name+0xde/0x100 [ 473.214299][T10653] print_circular_bug+0x2ee/0x310 [ 473.214319][T10653] check_noncircular+0x134/0x160 [ 473.214339][T10653] validate_chain+0xb9b/0x2140 [ 473.214365][T10653] __lock_acquire+0xab9/0xd20 [ 473.214382][T10653] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 473.214403][T10653] lock_acquire+0x120/0x360 [ 473.214416][T10653] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 473.214439][T10653] ? kernfs_add_one+0xf0/0x520 [ 473.214460][T10653] down_write+0x96/0x1f0 [ 473.214479][T10653] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 473.214499][T10653] ? __pfx_down_write+0x10/0x10 [ 473.214520][T10653] ? irqentry_exit+0x74/0x90 [ 473.214537][T10653] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 473.214560][T10653] ? nbd_start_device+0x157/0xac0 [ 473.214582][T10653] nbd_start_device+0x16c/0xac0 [ 473.214602][T10653] ? __nla_parse+0x40/0x60 [ 473.214620][T10653] ? device_create_file+0xf4/0x1c0 [ 473.214643][T10653] nbd_genl_connect+0x135b/0x18f0 [ 473.214665][T10653] ? __pfx_nbd_genl_connect+0x10/0x10 [ 473.214687][T10653] ? __nla_parse+0x40/0x60 [ 473.214705][T10653] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 473.214726][T10653] genl_family_rcv_msg_doit+0x215/0x300 [ 473.214745][T10653] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 473.214776][T10653] genl_rcv_msg+0x60e/0x790 [ 473.214794][T10653] ? __pfx_genl_rcv_msg+0x10/0x10 [ 473.214809][T10653] ? __pfx_nbd_genl_connect+0x10/0x10 [ 473.214831][T10653] netlink_rcv_skb+0x205/0x470 [ 473.214853][T10653] ? __pfx_genl_rcv_msg+0x10/0x10 [ 473.214869][T10653] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 473.214894][T10653] ? down_read+0x1ad/0x2e0 [ 473.214912][T10653] genl_rcv+0x28/0x40 [ 473.214926][T10653] netlink_unicast+0x75c/0x8e0 [ 473.214948][T10653] netlink_sendmsg+0x805/0xb30 [ 473.214973][T10653] ? __pfx_netlink_sendmsg+0x10/0x10 [ 473.214996][T10653] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 473.215012][T10653] ? __pfx_netlink_sendmsg+0x10/0x10 [ 473.215032][T10653] __sock_sendmsg+0x21c/0x270 [ 473.215051][T10653] ____sys_sendmsg+0x505/0x830 [ 473.215077][T10653] ? __pfx_____sys_sendmsg+0x10/0x10 [ 473.215103][T10653] ? import_iovec+0x74/0xa0 [ 473.215125][T10653] ___sys_sendmsg+0x21f/0x2a0 [ 473.215148][T10653] ? __pfx____sys_sendmsg+0x10/0x10 [ 473.215182][T10653] ? __fget_files+0x2a/0x420 [ 473.215199][T10653] ? __fget_files+0x3a0/0x420 [ 473.215219][T10653] __x64_sys_sendmsg+0x19b/0x260 [ 473.215242][T10653] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 473.215269][T10653] ? rcu_is_watching+0x15/0xb0 [ 473.215287][T10653] ? do_syscall_64+0xbe/0x3b0 [ 473.215306][T10653] do_syscall_64+0xfa/0x3b0 [ 473.215322][T10653] ? lockdep_hardirqs_on+0x9c/0x150 [ 473.215338][T10653] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.215353][T10653] ? clear_bhb_loop+0x60/0xb0 [ 473.215370][T10653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.215386][T10653] RIP: 0033:0x7f035c38ebe9 [ 473.215401][T10653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.215415][T10653] RSP: 002b:00007f035d2b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 473.215433][T10653] RAX: ffffffffffffffda RBX: 00007f035c5b5fa0 RCX: 00007f035c38ebe9 [ 473.215445][T10653] RDX: 0000000000000000 RSI: 0000200000001f40 RDI: 0000000000000007 [ 473.215454][T10653] RBP: 00007f035c411e19 R08: 0000000000000000 R09: 0000000000000000 [ 473.215464][T10653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 473.215473][T10653] R13: 00007f035c5b6038 R14: 00007f035c5b5fa0 R15: 00007ffd2c7fce58 [ 473.215490][T10653] [ 473.603238][T10120] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 473.777864][T10120] usb 1-1: config 12 has an invalid interface number: 203 but max is 0 [ 473.786621][T10120] usb 1-1: config 12 contains an unexpected descriptor of type 0x1, skipping [ 473.819370][T10120] usb 1-1: config 12 has no interface number 0 [ 473.867376][T10120] usb 1-1: config 12 interface 203 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 473.883973][T10120] usb 1-1: config 12 interface 203 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 473.903919][T10120] usb 1-1: config 12 interface 203 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 473.920202][T10120] usb 1-1: config 12 interface 203 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 473.931468][T10120] usb 1-1: config 12 interface 203 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 473.946004][T10120] usb 1-1: config 12 interface 203 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 473.968012][ T5836] block nbd0: Receive control failed (result -32) [ 473.975816][T10120] usb 1-1: config 12 interface 203 altsetting 0 bulk endpoint 0xF has invalid maxpacket 64 [ 473.988572][T10120] usb 1-1: config 12 interface 203 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 474.011013][T10120] usb 1-1: config 12 interface 203 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 474.033382][T10120] usb 1-1: config 12 interface 203 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 474.044751][T10120] usb 1-1: config 12 interface 203 altsetting 0 has 14 endpoint descriptors, different from the interface descriptor's value: 13 [ 474.065817][T10120] usb 1-1: New USB device found, idVendor=1b3d, idProduct=930d, bcdDevice=2f.bd [ 474.081353][T10120] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.093292][T10650] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 474.102337][T10650] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 474.119685][T10120] ftdi_sio 1-1:12.203: FTDI USB Serial Device converter detected [ 474.137800][T10120] ftdi_sio ttyUSB0: unknown device type: 0x2fbd [ 474.324691][T10650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.335207][T10650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.346557][ T5840] usb 1-1: USB disconnect, device number 44 [ 474.359734][ T5840] ftdi_sio 1-1:12.203: device disconnected