last executing test programs: 7m31.280713364s ago: executing program 0 (id=628): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710419000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc8, &(0x7f0000000080)=""/200, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710419000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc8, &(0x7f0000000080)=""/200, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) (async) 7m28.197431815s ago: executing program 0 (id=631): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0, 0x0, 0x8}, 0x18) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) (async) syz_clone3(&(0x7f0000000880)={0x4001100, &(0x7f00000004c0)=0xffffffffffffffff, &(0x7f0000000640), &(0x7f0000000680), {0x21}, &(0x7f00000007c0)=""/166, 0xa6, &(0x7f0000000c00)=""/238, &(0x7f0000000700)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x7, {r1}}, 0x58) (async) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ppoll(&(0x7f00000000c0)=[{r6, 0x1007}], 0x1, 0x0, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000b40)=ANY=[@ANYBLOB="e9ffffff5a00200027bd7000fbdbdf250000000300", @ANYRES32=r1, @ANYRES16=0x0, @ANYRESHEX=r5, @ANYBLOB="08000200", @ANYRESHEX=r4, @ANYRES32=r3, @ANYRES8, @ANYBLOB="1a00e79f9493bee75ee3440108742ce0a3331e"], 0x44}, 0x1, 0x0, 0x0, 0x24048040}, 0x40088c0) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1, 0x2}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r10 = dup3(r9, r8, 0x0) (async) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r11, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r11, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) (async) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000440)="f4e966"}) (async) pipe2(&(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) waitid$P_PIDFD(0x2, r12, 0x0, 0x4, 0x0) (async) write$cgroup_devices(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='b *:* rr'], 0x9) futex(&(0x7f00000006c0)=0x2, 0x0, 0x2, 0x0, 0x0, 0x80000002) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x77359400}}, 0x0) (async) gettid() (async) rt_sigaction(0x14, &(0x7f0000000080)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) 7m26.616867205s ago: executing program 0 (id=635): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x20000000000001eb, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0xa, '\x00', r0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) userfaultfd(0x80000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r5, &(0x7f00000007c0)={&(0x7f0000000680), 0xc, &(0x7f0000000780)={&(0x7f0000000700)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="030900000000000000b114ee0823a13069a4f700060000000e0001006e557464657673696d0000000f0002006e657464657673696d300000100003000000"], 0x44}}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b63707573657420c30bb300000000000000a3688c6b13eca2f6aa6f1036123779aa82855963f036ee23ebfcc33bdf0e1f12bf6d084d1b0130f9532cc0cb554a74c566cb3e76eb25471a024c1932a115959c9b2d801a26dc9b3add805c0c8ec834b14519b74f1d6c027a746ec39635315507"], 0x8) ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f0000000480)={0x3, 0x5ac, 0x0, &(0x7f0000000500)=""/160, &(0x7f0000000440)=""/52, 0x4}) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000000340)) dup(r7) 7m25.248613507s ago: executing program 0 (id=639): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000040)) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f00000000c0)={0x8, {0x6d, 0xf, 0x9, 0x1}}) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x200000) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x400, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000240)={0x100, 0x0, 0x2, "3263b2bf92dd0b4acae15299287b74b3b92540ec96e50e818fc7448f8318696a", 0x584e4f53}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x8) ioctl$sock_ifreq(r2, 0x89b1, &(0x7f0000000280)={'veth1_virt_wifi\x00', @ifru_mtu=0x6}) connect$rose(r2, &(0x7f00000002c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) ioctl$sock_netdev_private(r2, 0x89fb, &(0x7f0000000300)="dd84ad83896d03316a0b3a2bde9af3db81ebbed1b2d50873ba50da900b340967") r3 = getpgid(0x0) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r3, &(0x7f0000000340), 0x4001) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000380)={{@host, 0x42}, 0x0, 0x0, 0x6}) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000003c0)={0xfffe, 0xcd43}) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x26) ioctl$KVM_CAP_HYPERV_VP_INDEX(r4, 0x4068aea3, &(0x7f0000000400)) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x2900, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001640)={r2, 0x58, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001780)={0x11, 0x2, &(0x7f0000000540)=@raw=[@map_fd={0x18, 0x8, 0x1, 0x0, r5}], &(0x7f0000000580)='syzkaller\x00', 0x1193, 0x1000, &(0x7f00000005c0)=""/4096, 0x41100, 0x14, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001680)={0x1, 0x1, 0x8, 0x1}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f00000016c0)=[{0x5, 0x1, 0xe, 0x5}, {0x3, 0x2, 0x5, 0xb}, {0x4, 0x1, 0xe, 0x7}, {0x1, 0x4, 0xa, 0x1}, {0x0, 0x5, 0x3}, {0x2, 0x3, 0x8, 0x9}, {0x2, 0x3, 0x1, 0xc}, {0x2, 0x5, 0xf, 0x9}, {0x2, 0x3, 0x3, 0x2}, {0x3, 0x3, 0xf, 0x8}], 0x10, 0x1a}, 0x94) preadv(r4, &(0x7f0000001a80)=[{&(0x7f0000001840)=""/181, 0xb5}, {&(0x7f0000001900)=""/21, 0x15}, {&(0x7f0000001940)=""/79, 0x4f}, {&(0x7f00000019c0)=""/179, 0xb3}], 0x4, 0xd3c, 0xe1c) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b00), r5) sendmsg$NL80211_CMD_GET_KEY(r6, &(0x7f0000001bc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x30, r8, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x6f}}}}, [@NL80211_ATTR_KEY_IDX={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001c40)=@bloom_filter={0x1e, 0x1, 0x4, 0xfffffffa, 0x4, 0xffffffffffffffff, 0x6, '\x00', r7, r2, 0x2, 0x5, 0x0, 0x6}, 0x50) 7m23.998031099s ago: executing program 0 (id=641): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x20000000000002ff, &(0x7f0000000240)=ANY=[@ANYRES64=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_io_uring_setup(0x24f6, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x2000, 0x33a}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1a00fe00000000bfa100000000000007010000f0ffffffb702000008000000b70300000000000085000000a400000095"], &(0x7f0000000040)='syzkaller\x00', 0x1}, 0x94) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x8}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 7m23.131637735s ago: executing program 0 (id=644): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) r3 = syz_io_uring_setup(0xbde, &(0x7f0000000540)={0x0, 0xec25, 0x400, 0x41, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f0000000a40)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) r6 = signalfd(r0, &(0x7f0000000000)={[0x7]}, 0x8) (async) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_TEE={0x21, 0x1a, 0x0, @fd=r6, 0x0, 0x0, 0x7, 0x4, 0x0, {0x0, r7, r2}}) (async) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) (async, rerun: 64) open(&(0x7f0000000080)='./bus\x00', 0x143862, 0x0) (rerun: 64) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) (async) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000013c0)=0xc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) (async, rerun: 64) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) (rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2c, 0x0, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000970e5b4035121800eef0000000010902120001000000000904"], 0x0) 7m7.779467449s ago: executing program 32 (id=644): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) r3 = syz_io_uring_setup(0xbde, &(0x7f0000000540)={0x0, 0xec25, 0x400, 0x41, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f0000000a40)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) r6 = signalfd(r0, &(0x7f0000000000)={[0x7]}, 0x8) (async) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_TEE={0x21, 0x1a, 0x0, @fd=r6, 0x0, 0x0, 0x7, 0x4, 0x0, {0x0, r7, r2}}) (async) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) (async, rerun: 64) open(&(0x7f0000000080)='./bus\x00', 0x143862, 0x0) (rerun: 64) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) (async) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000013c0)=0xc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) (async, rerun: 64) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) (rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2c, 0x0, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000970e5b4035121800eef0000000010902120001000000000904"], 0x0) 5m21.3954546s ago: executing program 1 (id=1004): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x20000002, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f00000000c0)=r0) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) (async) r2 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0], 0x0) (async) syz_emit_ethernet(0x2e, &(0x7f00000001c0)=ANY=[@ANYBLOB="ff940f000000000000aaaa0008184500009b4878bd6ccb2013000000002f9078000000030000000000000000000c907801000000"], 0x0) r3 = openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/smackfs/cipso2\x00', 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030080ff00000500030080ff00000500030005000000050003000100000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x105000, 0x0) write$smackfs_cipso(r3, &(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRESOCT=r3], 0x20) (async) syz_usb_control_io(r2, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000180)={@local}) setpriority(0x2, r0, 0xfffffffffffffff3) syz_usb_control_io(r2, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2}, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$MSR(&(0x7f0000000000), 0x8001, 0x0) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000008c0)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="400601000000abd853731d534c68fca2db7e46b6296e91ef54f5c5cb7a838f2a5eedcf5fe12b95b6eb7f1dead1b79df143430394064d3672100acbee3421e1499df0c8b3d41a7171dc64de9f8d62358886a0bd60e527403d55d51b581eb723367e66a3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m17.801687275s ago: executing program 1 (id=1016): getpid() bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) (async) sendto$inet6(r0, &(0x7f00000000c0)="f60479a8bec860c59bf017f5bfbe6b8725bbecee04951c2550c5ef8e26fee5a1f8c104016607ab61f44a001ddbdfd7677b9c6fedbdbdfd443e4ac65aea7b559e1ee8b2d5d5a5099084d4b8297620c6c924f582e90d86712595670044243e41a560a93521e0d91adf1ed54cb657a1c34ad218b93c0027cbdc6752c2713f35ab70ed961dbeca697621aa910df158bacadaf15ea799a48a18c106d37b31411d2a645d48799ac1e70dc9c81f40e7370398b534a7e6461845d350470e68f0bb524a98cc11147dd4e916e148f7a9d71fe6ff5575ab7e02a8dc11afce327c6a53e3de26158991584a7ee418170ffc18c80510124bb0206d", 0xf4, 0xc000, &(0x7f0000000200)={0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000380)={@local, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "fd690b", 0x48, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x800, [0x4, 0x1ff]}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x4}}}}}}}}}, 0x0) (async) ptrace(0x10, r1) ptrace$poke(0x5, r1, &(0x7f0000000080), 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) semop(0x0, 0x0, 0x52) (async) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f00000003c0)={0x906, 0x6, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8000000000000001, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x3f}, 0x28) (async) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) 5m15.891109097s ago: executing program 1 (id=1022): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0xa, 0x4e22, 0x4000a, @local, 0x5}, 0x1c, 0x0}, 0x4048804) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r2 = syz_open_dev$video(&(0x7f0000000000), 0x62, 0x521000) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000000c0)=0x10000) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0x1cb) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file1\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xd}, {0x9}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) r9 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r9, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}) bind$can_j1939(r9, &(0x7f0000000380)={0x1d, r10, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@ptr={0x7, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x30, 0x61, 0x2e, 0x0, 0x2e]}}, &(0x7f0000000480)=""/124, 0x2b, 0x7c, 0x1, 0x80, 0x10000}, 0x28) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000070000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$vcsu(&(0x7f00000005c0), 0x81, 0x41) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000600), 0x44400, 0x0) 5m14.696175714s ago: executing program 1 (id=1027): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async, rerun: 32) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (rerun: 32) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000180)={0x5}) (async, rerun: 64) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) (rerun: 64) chroot(&(0x7f0000000480)='./file0/file0\x00') (async) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 5m14.076816856s ago: executing program 1 (id=1030): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000024c0)=@newtaction={0xd8, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0xc4, 0x1, [@m_ife={0xc0, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x79, 0x6, "caf27562646e3c334786bd13eeba8f37a732b757857edbe5d8bfc9dc6bf64f469cd3df82c94bcfc19acddf3bc6e8e9a6b81a45d12491f641dccf9d0ec6f9535c401b513f246b0fc314e880a919b433513047783840b82fb5337b5febbae99affc444e818b96ad7e9792b071abfbdaaa16466fb4f15"}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1a00000004000000000000000100000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000040000000000000000000000000000000000000093550682b0"], 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_io_uring_setup(0x239, &(0x7f0000002440)={0x0, 0x295d, 0x84, 0x2, 0x10066}, &(0x7f0000002340)=0x0, &(0x7f0000002380)=0x0) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) mount(0x0, &(0x7f0000000200)='.\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x108, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r6, &(0x7f0000000300)={0x2020}, 0x2020) fcntl$getownex(r5, 0x10, &(0x7f0000000180)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) r7 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x1f2f, 0x0, 0x0, &(0x7f00000007c0), 0x0, 0x241, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x4}, 0x50) 5m12.843880281s ago: executing program 1 (id=1034): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020800000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000038000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000004000480080007006e6174"], 0xc0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @remote}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}}, 0x1000000) 5m11.84063351s ago: executing program 33 (id=1034): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020800000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000038000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000004000480080007006e6174"], 0xc0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @remote}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}}, 0x1000000) 2m15.160802395s ago: executing program 6 (id=1564): bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x4f, 0x1}, @exit], &(0x7f00000000c0)='GPL\x00', 0x7}, 0x94) 2m14.745114061s ago: executing program 6 (id=1566): open(0x0, 0x101080, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000000)={0x4000000, 0x0, 0x5}) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000040)={0x4000000}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendto$inet(r4, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) syz_init_net_socket$ax25(0x3, 0x5, 0xcb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x3, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb402000008000000b703000034120000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000440)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) 2m12.869036166s ago: executing program 6 (id=1570): r0 = openat$drirender128(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc0106442, &(0x7f0000000080)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x40) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f00000002c0)={{0xf3, 0x3}, 0x0, 0x9, 0x200, {0x9, 0x4}, 0x8, 0xff}) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="7a0a00ff00000000711093000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x64}, 0x94) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f00000002c0)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r4) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000580)={&(0x7f0000000400), 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, r8, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000020500010006000000050004000000fe000900020073797a3100000000050005000200000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="02000000000000000a004e2200000001ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000a009d8400000002fe8000000000000000000000000000bbc90d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2100000002fe8000000000000000000000000000bb02000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e220000f2270000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2300000009ff01000000000000000000000000000109000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e24000080010000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e200000000500000000000000000000000000000001f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000aff010000000000000000000000000001"], 0x510) close_range(r3, 0xffffffffffffffff, 0x0) r9 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x108, 0x0, 0x400, 0x70bd2c, 0x5, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7fffffff}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_PEERS={0x70, 0x8, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00', 0x101}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2502ad3fd5d66973b890312ab63c502e656f297f3e2b2cba9f650392813848e7"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xbf9e}]}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x1}, 0x801) 2m12.772867576s ago: executing program 6 (id=1571): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_SET_IO_FLUSHER(0x34, 0x2) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) r5 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x4}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0x5, 0xb}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4050}, 0xc4) 2m11.141209015s ago: executing program 6 (id=1575): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000240)={0x0, 0x1, 0xfffffffffffffedb, @random="900854f6650e"}, 0x10) (async) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x10) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000340)='asymmetric\x00', 0x0, &(0x7f0000000680)="30b4", 0x2, r2) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x3, 0x2, 0x2}}) (async) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}], 0x1c) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r6, 0x6}, 0x8) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000240)={{0x0, 0x2, 0x4, 0x3, 0x405}}) (async) semtimedop(0x0, &(0x7f0000000180)=[{0x3, 0x1}], 0x1f4, &(0x7f0000000240)={0x0, 0x989680}) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00000000000000fe800000000000000000000000000010f8000000200002000a00000000000000ff160000000000000000000000000001000000000d0001007564703a73"], 0x6c}}, 0x0) (async) r9 = socket(0x40000000015, 0x5, 0x0) (async) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r11 = dup(r10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r11, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) getsockopt(r9, 0x200000000114, 0x8, &(0x7f0000019780)=""/102387, &(0x7f00000003c0)=0xfffffffffffffdc8) (async) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="28000000180001002dbd7000fddbdf250220300cff02c807007c00000c000900c1873b22", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x8840}, 0x80) getuid() 2m10.157665319s ago: executing program 6 (id=1577): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r0) (async) 1m54.540630948s ago: executing program 34 (id=1577): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r0) (async) 13.25261538s ago: executing program 5 (id=1903): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000018000000000030000000900020073797a3100000000050001000700000004000880000008f01d179d0ed9cc546637f61557560aa7f755bbc45b6ffa24950255a1a3265f8689ddbb0ca7235fa930dafc52bc918e9e644b5d62977ad055f29b37982f7513077e864d2686ecbebe1c721eae2a4ed77c0c16fe7d501457996369f52662335efbb95c70fac242e9e35ce7a4dbc341c9eb0488fbfb207efe61b5f52c498e8d0d39b2"], 0x2c}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) r1 = getpid() ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000900)={&(0x7f00000008c0)=[{0x3, 0x1218, 0xd0, &(0x7f0000000580)="e9b135856b67cd1dcc0b034b95f5f316da61d8a6165e87e4e1f993e68e700d97b8e2280f7991bb2689542658a766543d93435831d718442622fae22b9f6b39ddc78e29f80df56f0e2b9c49d851d75e2c4ca90111c1271ceea4853d9c4a429ae73f7f891704a19ac613aded8beb44d5a8b684beb75a06847a06b3a997f12cfe65100a1968384a2e9b99deff2571a9f4d4009141a2703afa2b95f80ea7c756d9c97df63acc98f98333e486f05e4f0479810902a1650babcc9c20d3870108b05c5c5149e25019ae458ee822732abbbe288a"}, {0x6, 0x2a01, 0x6a, &(0x7f00000006c0)="5685c188e4a238fcb9e1c4e4a8be4b5faec366ea7dc0d5f691fdf419a7657d9d1ae50c5fcb8a38b682da4cfa645db1c4a3ffce17e0812f7209fafad07ac0a56b2facf369b4b6b7b1c0de1bc199a36b5448ed84b8d0a0bcb189ce27cc3419820dba81fc47f10ac8822b9e"}, {0x3, 0x1, 0xe, &(0x7f0000000400)="bd3676e78ebe41cdc981e38d1e95"}], 0x3}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000040)={0xc000003, 0x0, 0x0, 0x1, 0x4000007}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20040001}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) prlimit64(r1, 0xe, &(0x7f0000000080)={0x8, 0xffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sg(&(0x7f0000000180), 0x80000000, 0x103001) 12.093023783s ago: executing program 5 (id=1909): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x80000000, 0x8000000, 0xb5}, 0x10) r5 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a001e00014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_generic(r4, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1048}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x2e4, 0x2b, 0x200, 0x70bd2b, 0x25dfdbff, {0x1f}, [@generic="f6156db227231b1ae2e4de8f5c338457db25466ba44052068c453f2874df62ec8dc43ba1c055944b2833cc8b6d70626b45c93857d4f4be501cf72e3478f449c34be0f7fa3b419fab218433678bf972cdc5d63d758d496639d1560c39f6d5ddf114ccb2daa636d1853383cc5341c535ee343332b4087a06708752959e8e74479538f1ef76a6eea7bd3d4fb2f923dbae0be981bd5fb2195bf036f6b522f1fff4ea8e1962787df0ebb758db2140f04fb0d81e478cb66949af93655d1de79d34d63d54ea1b346fd728dcca999e9867af3b514b5fe90753b145eac1607235713dcdbf87e11b00428a93ac4510ba994b33dd7d86734594d24e72b5789d", @typed={0x36, 0x101, 0x0, 0x0, @binary="93cd978c7d86171a2a15fa0ca5f5b490711abb4004b23839b6be724451f8a6439b5919256e9b1816fdcdeff5b30e35d2ebf6"}, @nested={0x18, 0xf1, 0x0, 0x1, [@typed={0x14, 0x101, 0x0, 0x0, @ipv6=@private0}]}, @typed={0x8, 0xd3, 0x0, 0x0, @fd=r6}, @nested={0x158, 0xa4, 0x0, 0x1, [@generic="9ca65dc02b5ef15b599c5df6f10518bd3c9d14784426429c21efb8267e23ad1e75fabc4f2a88c064f73b7088d1d783e7b8d87257081ae1487eae0185ef8867044c4c91cef392b70771917ed8c2d12d0e5ba5f8b8d201f331f84757c8bf7790e3990993a913f25dcb5adc1988814a03ad8df86ce7cac4f1c4c2cc3d79290a9a4b9ad225a3c2dc97764eb29f6b1eef1e0a9bcd5c256b01860c039aef63f39f6dbc774191545d1f91ea15ea72e0129738c2bb7054bc71e23f893b856b1e245cc7650536ab97579f618ede24a5752dab350aba76c47e000de0c96c0746807ce7", @nested={0x4}, @generic="a9fd3df80a9ad67247ac56a1682cfa8d1dde638ac38a0f31fd8dfefd17585e3529c42649e16f95180052b0ab75948b2b69f96180877e0b738067e2484274ec8d091c1feb3bd1fac5b8d2269ec8927cc1c7ac61d9cca42431ae51b3ceb232ced8314e9cf38180c483fb0cbe77f8e3", @nested={0x4, 0x76}]}, @typed={0x7, 0x28, 0x0, 0x0, @str='\'^\x00'}, @generic="11cf6047b4dc7c1ba85fba1a594b23b81ab15a2c26470ab410bd52bc"]}, 0x2e4}, 0x1, 0x0, 0x0, 0x20004000}, 0x4001) write(r4, &(0x7f0000000000)="240000001a005f0400f9f407000904018020200000000000000000000800010000000000", 0x24) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffffff, 0x0, r7, 0x0, 0x46) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r7, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x58, r8, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IE={0x39, 0x2a, [@random={0x6, 0x33, "bd6f41c1ebb87024d7282256293d985a6eca564a3155076fa8a99a05d0c8e5500da1c6c052f69943c6063d67350cb3512a8aaf"}]}]}, 0x58}}, 0x80) 11.285697858s ago: executing program 7 (id=1910): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000406c256dabea4fc2be72a7f959955de22ea0760000000007000109022400010000000009040080010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0x80, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000080), 0x619, r1}, 0x38) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000351000/0x2000)=nil) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0xe, 0x6f, {0x6f, 0x4, "79035393f25818b9c9a14c1fbb0c6b2e98294895f221ea1a0da23b236618fb372ad33c53777f8d533e1dd37018407ea767518523040f8393a79bf3d32c814f542de93a6ac9e254a76569e461748476bd860f93b4c309d226cbbb8f284d2b212e6610556955d5251451f783babb"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc07}}, &(0x7f0000000240)={0x0, 0xf, 0x123, {0x5, 0xf, 0x123, 0x5, [@ptm_cap={0x3}, @generic={0xbc, 0x10, 0x3, "dc853877e160c7b03047cf7806407b56500be5198db4c483c521e1de37a5b1e4a986aa9060b425ac434ad6f1858356f1cda547d322da9aad1d524cab1e856ae416d9da2612a245609f84bb22e7479fa72e557746bcc0db787b444d68a75621dd0374d204904a95a8b145f78fabf0f92ea830e5171bba310c0578efdb81c2b372f0681bd8fea594d0363685e9b521ea638c37b0ed46592f079c00b25b4a029caef88d281893e54978cd118778df7f4a806eb4a80c99263c05b6"}, @ext_cap={0x7, 0x10, 0x2, 0x7, 0x1, 0x1, 0xe49}, @wireless={0xb, 0x10, 0x1, 0x8, 0x10, 0x8, 0x0, 0x6, 0x9}, @generic={0x4d, 0x10, 0xb, "4c72fa9495a4ef6ddc6a0df689c0498c2ecdf375160250922111b880fc26b1e4ce20c9b4b5e8e9f896eddd9a626f8a5d7f2927907c6f1446db382d84adaedd170faf9ef6fb1002bcc915"}]}}, &(0x7f0000000980)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x80, 0x4, 0x81, "be556be9", "ce1e2328"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x18, 0x9, 0xf, 0x4, 0x7, 0x5}}}, &(0x7f00000008c0)={0x84, &(0x7f00000004c0)={0x0, 0x26, 0x7d, "958aeb783b6e9d7edad83e473e69733d0543071d9e63b68fd6f891f7e8723e3168b768ee55d189109b058b8e04256d7e4d59256841ef2e5780ac2094e1bf49de875d4612e342eb0d95de07a426eadb68c4428afd2e9863e114eccabf8c0c3b4f82c3cc3de33624caf26f770a18294b8a60af978e45deed32c79996d6c9"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f00000005c0)={0x20, 0x0, 0x8, {0x140, 0x20, [0xf00]}}, &(0x7f0000000600)={0x40, 0x7, 0x2, 0xd}, &(0x7f0000000640)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000680)={0x40, 0xb, 0x2, "f114"}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0x1000}, &(0x7f0000000700)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000740)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, &(0x7f0000000780)={0x40, 0x19, 0x2, "c4d5"}, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0x3ff}, &(0x7f0000000800)={0x40, 0x1c, 0x1, 0x44}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x8}}) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x5, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0003560000000003"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000312001b2e2f1630d7a4a3e8871965d5a70b5f"], 0x0, 0x0}, 0x0) 10.14548522s ago: executing program 5 (id=1912): syz_emit_ethernet(0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000001c0)={0x40000001fe0000}) fallocate(r4, 0x1, 0x100000000, 0x80000000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r5, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0xe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}, {0xfffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x80}, {}, {0x0, 0x81}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x9}, {}, {}, {0xfffe}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 9.398030566s ago: executing program 2 (id=1913): r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(0x0, r1) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDSETMODE(r2, 0x4b3a, 0x1) ioctl$TCXONC(r2, 0x4b3a, 0x3) sendmsg$GTP_CMD_DELPDP(r1, 0x0, 0x840) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x8001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) dup(0xffffffffffffffff) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) syz_io_uring_setup(0x178e, &(0x7f0000000180)={0x0, 0x3554, 0x13291, 0x0, 0x11d, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 8.59785694s ago: executing program 4 (id=1914): r0 = fsopen(&(0x7f0000000000)='fuseblk\x00', 0x1) (async, rerun: 32) r1 = open(&(0x7f0000000040)='./file0\x00', 0x101900, 0x40) (rerun: 32) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000080)={{0x0, 0x4, 0xd8, 0x17ad, 0xf09f, 0x5, 0x0, 0xfffffff4, 0x4, 0x1, 0x4, 0x5, 0x2, 0x5, 0x9}}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000001080)={r2, 0xffffffff}) (async, rerun: 32) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000002080)) (async, rerun: 32) ioctl$TIOCNXCL(r1, 0x540d) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000002100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000020c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000002180)={0x0, r3, 0x0, 0x0, 0x0, 0x2, &(0x7f0000002140)=[0x0, 0x0]}) (async) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f00000021c0)) (async) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000002200), 0x140, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000002240)={0x1, r3, 0x8, 0x1, 0x1, 0x7, 0xb}) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000002280)) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f00000022c0)={0x2, r3, 0x5, 0x100, 0x5, 0x9, 0x681c}) (rerun: 64) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000002340)={0x6, &(0x7f0000002300)=[0x3, 0x5, 0x47ef, 0x40, 0x3, 0x4e3c]}) fstat(r5, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000002400)={{0x1, 0x1, 0x18, r5, {0xffffffffffffffff, r7}}, './file0/file0\x00'}) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000002440)={0x2, 0x0, 0x3c7f, 0x4, 0x3, 0x4, 0xb8f, 0xffff}) (async) mount$tmpfs(0x0, &(0x7f0000002480)='./file0/file0\x00', &(0x7f00000024c0), 0x0, &(0x7f0000002500)={[{@quota}, {@noswap}], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/dri/renderD128\x00'}}, {@permit_directio}, {@flag='mand'}, {@hash}, {@permit_directio}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/dri/renderD128\x00'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@uid_eq={'uid', 0x3d, r6}}, {@dont_hash}]}) (async, rerun: 32) r9 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000002600), r9) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000026c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@loopback}}, &(0x7f00000027c0)=0xe8) (async) r12 = getegid() mount$fuse(0x0, &(0x7f0000002640)='./file0\x00', &(0x7f0000002680), 0x400, &(0x7f0000002800)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r11}, 0x2c, {'group_id', 0x3d, r12}, 0x2c, {[{@allow_other}], [{@flag='dirsync'}, {@measure}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@appraise_type}, {@smackfshat={'smackfshat', 0x3d, 'rootcontext'}}, {@pcr={'pcr', 0x3d, 0x17}}]}}) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) (async) creat(&(0x7f0000002900)='./file0\x00', 0x86) (async) r13 = syz_open_dev$evdev(&(0x7f0000002940), 0x2, 0x591000) ioctl$EVIOCGSW(r13, 0x8040451b, &(0x7f0000002980)=""/4096) (async) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)=@ipmr_newroute={0x38, 0x18, 0x4, 0x70bd2a, 0x25dfdbfe, {0x80, 0x4, 0x80, 0xf, 0xfe, 0x0, 0xff, 0xb, 0x2000}, [@RTA_IIF={0x8, 0x3, r10}, @RTA_MULTIPATH={0xc, 0x9, {0x6, 0x2, 0x4, r10}}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) (async) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000003ac0)={r4, 0x3, 0x5, 0x7, &(0x7f0000003a80)=[{0x6, 0x2, 0x7, 0x7}, {0xe7, 0x6, 0x200, 0x7}, {0xf4b7, 0xfb, 0xd1fb, 0x40}, {0x400, 0x1, 0x5, 0x7}, {0x800, 0xb, 0x3692, 0x10}, {0xf, 0x2b00, 0x2}, {0x9, 0x1, 0x3, 0x6}]}) 5.656895737s ago: executing program 7 (id=1915): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x20, &(0x7f0000000080)={&(0x7f0000000480)=""/164, 0xa4, 0x0, &(0x7f0000000640)=""/215, 0xd7}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="d22f5b0ee8897e3302ef4a1f8500f59dc91875f1524fcbe000"/40, @ANYRES32=r1, @ANYRESDEC=0x0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000340)={0xce, r0, 'id1\x00'}) ioctl$SNDCTL_TMR_CONTINUE(r5, 0x5404) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r7, 0xfffffffffffffffe, 0x63) getpid() sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x201, 0x0) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000100)=0xff) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYRESOCT=r7, @ANYRESHEX=r3, @ANYRESOCT=r4, @ANYRES64=r5], 0x7c}, 0x1, 0x0, 0x0, 0x40810}, 0xe805c1c63a6ecc2) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000001008000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}}, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r8, &(0x7f0000000140)="ab", 0xff04, 0x4000815, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = epoll_create1(0x80000) r13 = fanotify_init(0x200, 0x0) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r13, 0x101, 0x48001051, r14, 0x0) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r13, &(0x7f00000000c0)) readv(r14, 0x0, 0x0) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000006800e97803feffffff0000400a00000000000000"], 0x18}}, 0x44) 5.622924665s ago: executing program 2 (id=1916): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x10002) shutdown(r0, 0x1) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f42607", 0x29}], 0x1) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000005c0)="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", 0x2000, &(0x7f0000003300)={&(0x7f0000000000)={0x50, 0x0, 0x42a, {0x7, 0x2b, 0x7, 0x800000, 0x4, 0x4, 0x9, 0x7, 0x0, 0x0, 0x10, 0xc}}, &(0x7f0000000240)={0x18, 0xfffffffffffffff5, 0x5, {0x1}}, &(0x7f00000002c0)={0x18, 0x0, 0x8, {0xfff}}, &(0x7f0000000340)={0x18, 0xfffffffffffffffe, 0x5, {0x9}}, &(0x7f0000000380)={0x18, 0x0, 0xfffffffffffffff7}, &(0x7f00000003c0)={0x28, 0x0, 0x8, {{0xde, 0x3, 0x1}}}, &(0x7f0000000400)={0x60, 0xfffffffffffffffe, 0x7, {{0x7, 0x6, 0x3, 0x3, 0x7, 0x3, 0x2d, 0x8}}}, &(0x7f0000000480)={0x18, 0x0, 0x1800000000, {0x4}}, &(0x7f00000004c0)={0x1d, 0xfffffffffffffffe, 0x8, {'/dev/comedi3\x00'}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x0, 0x4}}, &(0x7f0000002700)={0x78, 0xfffffffffffffff5, 0x4, {0x0, 0x1ff, 0x0, {0x5, 0x1, 0xfffffffffffffeff, 0x8, 0x1ff, 0x2, 0xa3, 0x401, 0x1, 0x2000, 0x8, 0x0, 0x0, 0x8, 0x2}}}, &(0x7f0000002840)={0x90, 0x0, 0x5c3d, {0x6, 0x0, 0x8, 0x4d5a, 0x3ff, 0x5, {0x4, 0x1000000000000, 0x9, 0x4, 0x7f, 0x3, 0x327, 0x6, 0x80000001, 0xc000, 0x4d39, 0x0, 0x0, 0xe2bd0d6, 0x2}}}, &(0x7f0000002900)={0x100, 0x0, 0x8, [{0x3, 0x8, 0xf, 0x9, '/dev/cpu/#/msr\x00'}, {0x5, 0x100, 0x3, 0x1, '-+-'}, {0x3, 0x5, 0xd, 0xffff, '/dev/comedi3\x00'}, {0x1, 0x80000001, 0x8, 0x8000, 'dmm32at\x00'}, {0x3, 0x5, 0x0, 0x7}, {0x4, 0x8, 0x6, 0x7, '{,}\xbb:\\'}, {0x6, 0xd, 0xd, 0x8, '/dev/comedi3\x00'}]}, &(0x7f0000002cc0)={0x330, 0x0, 0x4, [{{0x2, 0x3, 0x3ff, 0xa, 0x5, 0xb, {0x6, 0x3, 0x4, 0x4, 0x1ff, 0x3, 0x8, 0x9, 0x4, 0x1000, 0xffffffff, 0x0, 0x0, 0x10000, 0x2}}, {0x1, 0x9, 0x8, 0x1, 'dmm32at\x00'}}, {{0x4, 0x1, 0x8000, 0x4, 0x7, 0x7f, {0x2, 0x4, 0xe79, 0x3, 0xfffffffffffffff8, 0x3, 0x6, 0x1, 0x8001, 0x8000, 0x3, 0x0, 0x0, 0xa2, 0x2}}, {0x6, 0x401, 0x7, 0x5, '![!(#^#'}}, {{0x4, 0x2, 0x8, 0x0, 0x9, 0x5, {0x2, 0xd, 0x4, 0x8, 0x0, 0x0, 0x7, 0x8, 0x7f, 0x1000, 0x6, 0x0, 0x0, 0x9, 0x81}}, {0x1, 0x100, 0x8, 0x7, 'dmm32at\x00'}}, {{0x6, 0x0, 0x40, 0x91, 0xffffffff, 0x3, {0x6, 0x10000, 0x15cc, 0x2, 0x3800, 0x1, 0x5, 0xd012, 0xa23, 0x1000, 0x7, 0x0, 0x0, 0xb2}}, {0x6, 0x5, 0x0, 0x5}}, {{0x6, 0x2, 0x1, 0x100, 0x5, 0xffffffff, {0x5, 0x5, 0x6, 0x8, 0x1ff, 0x35, 0xfffff525, 0xf, 0x9, 0x1000, 0x40, 0x0, 0x0, 0x7fff, 0x3ff}}, {0x1, 0xffffffffffff8000, 0xd, 0x80, '/dev/comedi3\x00'}}]}, &(0x7f00000030c0)={0xa0, 0x0, 0x1, {{0x3, 0x0, 0x4, 0x1c6800, 0x8, 0x10, {0x3, 0x6, 0x5, 0xfffffffffffff000, 0x8001, 0x4, 0x2, 0x8, 0x401, 0x6000, 0x1, 0x0, 0x0, 0x800, 0x1000}}}}, &(0x7f0000003180)={0x20, 0x0, 0x4, {0x2, 0x4, 0x2, 0x9}}, &(0x7f00000031c0)={0x130, 0x0, 0x4, {0x4, 0x100, 0x0, '\x00', {0x400, 0x10000, 0xffffffffffffd715, 0x101, 0x0, 0x0, 0x2000, '\x00', 0x6, 0x5, 0x6, 0x1, {0x8, 0x401}, {0x5, 0xfffff484}, {0x7, 0x7}, {0xffffffffffffffff}, 0x400, 0x5, 0xfffffffb, 0x1000}}}}) lstat(&(0x7f0000002740)='./file0\x00', &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r1, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)={0xe8, 0x2d, 0x300, 0x70bd28, 0x25dfdbfe, "", [@generic="853bc256e11fcc1caa3fed8f633fdec195e38a012eafb821548c9a5739043a97e144ebd1866174bca78d26c29b2ad74e2decf8582f2c9576bb203285c6351fa7d3728c4d9d39977d001f4d850271b504b94ebf5af23ed94074df8960893cb0ee079749cf7e7437fa80ab6a4c0d4a010fbdd16ad675a27865fcd65f8ed3aecbc47d6d6bedecfc4bdb8145dfcd755cd16f2d9bd6a0c04b785e777909ae8200582b9702fde300af09b616c98fa59119210efd7e6a79ba67ed504a7f7d45385116eb62dc30df1137a51988326be43d882ecd55e240964a"]}, 0xe8}, {&(0x7f0000000680)={0x13d4, 0x36, 0x100, 0x70bd2b, 0x25dfdbfd, "", [@typed={0x8, 0xf0, 0x0, 0x0, @u32=0x40dc}, @nested={0x18, 0x15, 0x0, 0x1, [@typed={0x4, 0xb6}, @nested={0x4, 0x10}, @typed={0xc, 0x34, 0x0, 0x0, @u64=0x3}]}, @typed={0xd, 0xb5, 0x0, 0x0, @str='fq_codel\x00'}, @nested={0x1018, 0x125, 0x0, 0x1, [@generic="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", @typed={0x6, 0x141, 0x0, 0x0, @str='(\x00'}, @typed={0xc, 0xe9, 0x0, 0x0, @u64=0x100000001}]}, @typed={0x8, 0x99, 0x0, 0x0, @ipv4=@multicast2}, @generic="109e5d8c50a4181f4ebffb0271e76cf909a4cde9f3fecd16b8c35f286180f936ad2a490f3ef638984071296684f0d050cac44247843a659c970cef1f3cae987d3ecc326d4f7e6a014770c9e2455488f507114195b475b2cef28143283bf244e07fe65dc08847d1cc02ccb3a186fd61ee9be19006a7f8f218159d08ef8fd78b7eb895c493842dc1c152", @nested={0x2df, 0x151, 0x0, 0x1, [@nested={0x4, 0x143}, @nested={0x4, 0xfb}, @typed={0xc, 0x13c, 0x0, 0x0, @u64=0xa7fd}, @generic="bd23df91b8cb78dd544ebea1404c037e879a56990c6ec21e6ff37c6c8b5fe2b183e86a534f2fb43592187a2d99360575552275bceba9ef09deccee2db283ae8fdd2430c5e7785d2259d8cb6cfe3320453a4325db49fb56581d14fc9d46cc59622de47e6bd4cbc1e3966b4da1b6c800fab5c5f892d0c5b522902ef85f66e2aa6a01fc344a9288573f95dc4b04bb3e08910faf6d386b730217e19810d8410e7f342922bbea78e2d7c625cfe905ad75f2068d623b97f04271d39af306ecf71f2403089045ec279f97a49bd3f2f175d932aed54a94a824a3e97a142d852842a8e54c7a0dadf7bb", @generic="49dedf07234d7eb7203fd8dc4057ac8916ebbf04f8fad318f97d4551fe711becc109fcc415d26c5e6bc6bb1152aeb670537095df7a520f7001e482d85fbd7260a4c8ec0ed226414eef14084d3cff6ecb3bd0c03ad29f00962ab77a433221b81bfd992537e618a88064aa5095f97ad34b6df17b2af61f780d92c857ba2d448bcc685b31b48c72cc73332ed750ab8e116c57a3430d14c92f6f0a2988f96a4e63d954902c512999c0e0bd856ae1e927e0268d6530a7820c91271298bf0c96f8c3a72f00e6d0d3437f66a0222c60b861d6d6943c88ac64d5d672ffc31066e1ff81670c333477165ea315d4595a0a2e6f24d20938", @generic="9416e146538960da92f367e51575f5f224ed3ad56f15bf3850138ea518d0604b4b8870fb00bebe3a00e0f45be2ed8cb79980d07ae81927e2041813dfd91e9acd046244eaea7e51d5e633e33115c30c1f844e55edfbd09cc39f99b51adbb82533db8d1fec9d3e5f3ca64b627f75d88d882ea91f55811ff7887195d55fdb415791e3fd65a4433c09607157279a2c93bb76f99effa7e9616329f063fac0e4c8bc136f234f5b9d8226805fc3a485d1d1dc43193e84917fe673a25a5742a643bdded5d8299d04ee4a515a464a3afe59d12edaa251cb6b38740908ec51e1bb2c9e2d9d", @nested={0x4, 0x119}, @typed={0x8, 0xcf, 0x0, 0x0, @pid}, @nested={0x4, 0xd7}]}, @typed={0x8, 0x24, 0x0, 0x0, @ipv4=@remote}, @generic="715916"]}, 0x13d4}, {&(0x7f0000001a80)={0x1ec, 0x36, 0x4, 0x70bd27, 0x25dfdbfb, "", [@typed={0x8, 0x58, 0x0, 0x0, @uid}, @typed={0xdf, 0x8b, 0x0, 0x0, @binary="72b292ad5ec4797eb7e830614d3f79d0875b47a39d9ad21d68a35e56de5ca0572afe42692c60548eb816e2ab982f0b0d0e866a9fe32ac2c1209b5007c3acf39ae355be136464eabf25ee2bff74460ba47b44b0693b0bc318955a7555dbcb7aa4f77d598d48558344cc2d92b72b7983c74e52b0e493c2f3a14e93b9b93cece02ba069a0d9dc226f398f3de69d1085eff208a4d3dab5c0f1c12f8f7076a1c257bc341ba0862a7cea8d1473ac3c1edefcbf32d01139bd51c022ed9784d9d6e6c6c1fb83d7fa3988f112f078e6ab74e63b8153adb051d9e39d79ae8213"}, @nested={0x18, 0x10, 0x0, 0x1, [@typed={0x14, 0xe2, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}}]}, @generic="a639795a2bdc0e6a37fb645a2e27fa228eae1c83b37e98dc8b443bcb306a072cc18bb6c1b52280b73e30fdf66d5c8c422c53aab22a75ecfa14c05b3b2b925c", @generic="b3c68561ba506be37bd227767074aab0a2c426657051aa754dd394d2256405ea5b034b8a2a30d5301d230c88f4e3fdd0845ee3b623552ce3bf35fac1ec5258cef5251c91b18e799d05a8f39bc4b8fc765e48ef9853e16b6ee161320c472865599c33931b87d117b95fa12c955db9a47475ce45d45eadab95ef0dd762849b7c71315ac80f3e783f05741464eea1312219c7891c8c36e5278d5225"]}, 0x1ec}, {&(0x7f0000001c80)={0x1d8, 0x17, 0x200, 0x70bd2d, 0x25dfdbff, "", [@nested={0xd1, 0x7e, 0x0, 0x1, [@generic="170cb34adfbe263d4a3eb0a183b89c379307fd3bf346c8c618e2306c780ff5c546cb855e5314c5ee131f770c07908c8160f7882fcc349e10fb90696d0fc3d1abe54da8e9d6330bcbfe61f03063263ff28d3fc161f39de465c65644d9081ed26f29207c0f96d29ee9ee1e5bf01ac801a0bd796befe8800e31d0744d0aca5e0f5e251317f999cfee5cefcc43812b8c358290b746b7e1b8512691a08c4859d71d60611e6edec45356b27a85dd77bc", @nested={0x4, 0x21}, @typed={0x8, 0x3b, 0x0, 0x0, @fd=r2}, @typed={0xd, 0xdc, 0x0, 0x0, @str='fq_codel\x00'}, @nested={0x4, 0xc3}]}, @nested={0xf4, 0x13c, 0x0, 0x1, [@typed={0xef, 0x121, 0x0, 0x0, @binary="4f46911f7f6514bbcf369ac2d904e7aae1a7886bc36e39f94aceb9940d030c3a33797df12528a6f775219fbbae029a36de1cc9e9d862c07a077133c3e1c7f862c7fd7973484b64a6737b7f1ff0e3a8b9f24e084fe98a538291101d9093782e8b9370095fb84db81cd0cb2b9949bff57d3efc96cceff3dc9f14ec2216d9b51e88631cdb54b861729beca626b10b283ed0d94cf7b1ba10508903f3ae8f49981a5ea05d8327e949151901084d9cccf8b816fdbd0387bf258883df2f6ec8a3860f5703dbc29bbf74683ff31e660dca06408b8d8decbb8658db70bec893fa985a1478487c6a37256481645aea42"}]}]}, 0x1d8}, {&(0x7f0000000500)={0x50, 0x13, 0x500, 0x70bd2a, 0x25dfdbfc, "", [@nested={0x40, 0xfe, 0x0, 0x1, [@generic="f99d1e374837c30dbf092168fadb659c96b9ae45322d5b492c0dd4b2805a170513189d2b", @nested={0x4, 0x14f}, @typed={0x13, 0xe7, 0x0, 0x0, @str='bridge_slave_0\x00'}]}]}, 0x50}, {&(0x7f0000001e80)={0x300, 0x3f, 0x20, 0x70bd2c, 0x25dfdbfe, "", [@generic="ba783bf228b1102af92c2b90f3a95db5afeaa1", @generic="37ac9c92abdf9d1ea29707b93a5f37ff798eaa884bc2c69c76b4290b770c9eedb262233c911f1b8f73b1e0a1971ab1ce58b6c2e1ff71ccdd625838df5827742d98de3f534b", @nested={0x113, 0x13d, 0x0, 0x1, [@typed={0xc, 0x82, 0x0, 0x0, @u64=0xd8b5}, @nested={0x4, 0x14}, @generic="260d25e18f7540a4bd9d57d77b3498a613833409e4fd4ee81e4f305606496942065c98ad625e70c693112f7939a5aad735895572e01fbac79fa50051f6a85201063a5805ad4e0990835190d1865605844be4fedb80590eab77259fda508d3014d5e5900d8424a0ef876b1ae5445ee70b5c4a8c3d326a98b7c016aed242f44c62ce7dc038cabed33480ac26eb92d8225cf3280967f1a819555d1de740361a545685f9e8ec072cea8a4a4b7dc792f2bc361cbbcb2554c36d45db423838377257a17b8db6e87e668e80b5833cc8a80dd54a441b4d2095c4cad4ccfe4e2539c01c0f2d984e9d575b322274c8b71d", @generic="c43df2", @typed={0x8, 0x118, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x9c, 0x0, 0x0, @ipv4=@empty}]}, @generic="7f98dc0465a281752433a170f08f3dd8bea7e7e32bee615ee28a82c7cfd2c7dfd5217e53c4340d7ee550bc1347df6e975333db8442280557a3768359b191891d150baeea916594c09acd53cf0470ce03f6c6f307d08c37697a4353098aaaa25be8274a79d9ef66c6e2e7c1e623f6e1afcbe51b5fdbdf16a7cdbce682d45067e9a47f1cc73ff12bd4c1c9b029fc61e150075b74946f899f0f925e26ba9e53fd6987ec9b82d7a3641b8d4467c90d18140d6155f2d62bea6363b997ca7f12fb39dfc973de354cf2a13a00db38c4aad544ae6c3cec4485d2d553c8efcbb6f034", @typed={0x8a, 0x9, 0x0, 0x0, @binary="048f9eb0c54154034b2f45112c9e70917a6f0b8a44b172288d54253df8f9ca26bcdf3118dae336a70c099c43e1d5c17b1f3ebbd129aeadc8359ed31453fef3875f34b496b073181b34babcea906fa17aa260ff996a6aedb1f26d15fe85f27eb09b64e927d12edbb3628665c6fe3bd31e015db301bfb72246f7490e1af6796fd6db006ce81b69"}, @nested={0x18, 0x1f, 0x0, 0x1, [@nested={0x4, 0xad}, @nested={0x4, 0x74}, @nested={0x4, 0xbd}, @typed={0x8, 0x71, 0x0, 0x0, @u32=0xf0}]}]}, 0x300}, {&(0x7f0000002180)={0x410, 0x25, 0x8, 0x70bd28, 0x25dfdbfd, "", [@nested={0x7d, 0x111, 0x0, 0x1, [@nested={0x4, 0xcb}, @nested={0x4, 0x50}, @typed={0x8, 0x4, 0x0, 0x0, @pid}, @generic="cd1afe4762ed7218c467f56555fc3313433de574dd74f6e3aeb035f531435d60f00359c9bc9617034c22767f529e5c17173ce6af5bd0ea74a6205aaee3c31dc902cd81127bc30f747846737e79a22cc93ae280805b05ed0551c6b8b7c728e63c226e748ef1edf1da7e"]}, @nested={0x1e0, 0xf5, 0x0, 0x1, [@nested={0x4, 0xd5}, @generic="7f841335d905dc2af529965bdbd58e3161c67dba4070041be0a153e356917c7274ccfc785a6653bb34cbdb1c6533f7388278dde01edc153c6ce16f2cfd6d5839bef49cdd277cb2e8d7dea42fc7048117ba2c53b2b973ed7c3dd9bbf3f8d6c7de52e10196a3f7f5801e92b61ab0ba8afe7c760bbb87a7d6fa39d716c03ef52695d35f42f96e805f0f6d676dc91b2365e47d595e2652e237452bb1489e6d141e76a91eb2b8a44fea9d7a7b0418b028e0ce10baf1f52c70cfcd", @generic="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", @generic="2b4488eab786cdd711e08b27ce409ad4652b9a71ef6a5aaf2ba049", @nested={0x4, 0x53}, @nested={0x4, 0x13c}]}, @generic="a8588e8171ee0505b16bfabf57674b4961c663c2fec5e546594ea2aa5210bff63db529c73cbaa1ea28cf8bfc210cacdc8d92f6e73a35483a37f1552fda06869c38f39fafd4db2eca2ca3748d9f3e6fbd1aa83a8e85d56d3db25dac9ac7a87e0b222ae9d47a2587f8df5e88f8b1581981bb105262a1e3c2ec8a3eacd6a76e5d81a4901eaf424a9ebc6fc644208bf05d677491d6772559bcab1ff4a3c5ceb4f10f9b57dbbdb407bfea2d0b0f88ef8becd7acfe707824d04278b54fa9106514ea3b7ae3a1812e96aacae6cf35647b90e417f6159948", @nested={0xca, 0xde, 0x0, 0x1, [@nested={0x4, 0xbc}, @nested={0x4, 0x5d}, @typed={0xc, 0x90, 0x0, 0x0, @u64=0x9}, @generic="6244dffcd923f32e8d4da8791eec6a091e6294da8d67223c3f8d36328f3d76e390c6b440eac85ecc8b697ed333c6af96d9e4091f44112bb2e34e7898bb02d800d55d86b6ce3ab9fa7c092f9882962f3ad3e8a1121b528732d4ba3081222dd3a4c820c90dfeedfbbf8eca0cf592a2308d810f", @generic="cad637ff5cd7093139edea08d79833003db94bcf8dac4216e48f060e8df1f49e5b182b24a40d83c2", @generic, @nested={0x4, 0x6f}, @nested={0x4, 0x139}, @nested={0x4, 0x13e}, @typed={0xc, 0x1d, 0x0, 0x0, @u64=0x9}]}]}, 0x410}], 0x7, &(0x7f0000002800)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r3}}}], 0x60}, 0xc0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xa000}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) 5.492874208s ago: executing program 4 (id=1918): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000050000000000000002000000181100003cc382b40ebddd59fa54f235b11aa9fee1733332e9d5c67ad907ae1f7a7ce4a6863f2902a4beffbb0b2a9564974e1623fd9d0dfc603f", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008500000011000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@response={0x2, 0x0, 0x0, "82d18160f7d8dda36479a6b179161b4bbff2d0508977b3928ebd2dee05607d17", "0194bd7b1b0303c5ba7f602606a285b3", {"30da2d58da817f8a5f77a23de36a2164", "3b33cfa231a427159c7b9f0eceb155f0"}}}}}}}, 0x0) recvmmsg(r8, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/32, 0x20}, {&(0x7f00000001c0)=""/206, 0xce}], 0x2}, 0x65}], 0x1, 0x10000, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r13, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r10, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r15, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) splice(r5, 0x0, r7, 0x0, 0x4ffe6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 5.486716631s ago: executing program 7 (id=1919): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 5.034841857s ago: executing program 2 (id=1920): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84242, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x4000, {0x0, 0x0, 0x0, 0x2ead, 0x7fff, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174ff10000000000000010e200"}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4001, &(0x7f0000000980)={0x77359400}) syz_usb_connect(0x0, 0x5b, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x7, 0xdb, 0xe2, 0x8, 0xb48, 0x2003, 0xd41b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x49, 0x2, 0x5, 0x9, 0x30, 0x2, [{{0x9, 0x4, 0x23, 0xa, 0x2, 0x2e, 0xb9, 0x69, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x6, 0x52}, [@mixer_unit={0x5, 0x24, 0x4, 0x4, 0x9}, @selector_unit={0x7, 0x24, 0x5, 0x1, 0xc3, "451d"}, @extension_unit={0x7, 0x24, 0x8, 0x3, 0xd9c, 0x8}]}], [{{0x9, 0x5, 0xa, 0x10, 0x8, 0x0, 0x8, 0xf8}}, {{0x9, 0x5, 0x5, 0x3, 0x200, 0x40, 0xbf, 0x8}}]}}, {{0x9, 0x4, 0x4, 0xc0, 0x0, 0xe6, 0x63, 0xe8, 0x80}}]}}]}}, 0x0) 4.638374934s ago: executing program 7 (id=1922): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x6, 0x7, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, [@map_val={0x18, 0x0, 0x2, 0x0, r0}, @map_val={0x18, 0x6, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) geteuid() socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mknod$loop(0x0, 0x1, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0xc8100) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f00000000c0)={{0x4, 0xa}, 0x1, 0x4, 0xf, {0x7, 0x8}, 0x2, 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{0x0}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b04, &(0x7f0000000040)={'virt_wifi0\x00', @broadcast}) 4.43302337s ago: executing program 4 (id=1923): capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x2000, 0x0, 0x0, 0x0, 0x3cd}) r0 = syz_open_dev$loop(&(0x7f0000000500), 0x7, 0x880) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000d, 0x32, r0, 0xe4574000) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000000)=0x2c4abc83) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000004500000002"], 0x48) pause() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.29508555s ago: executing program 7 (id=1924): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000300)=@ethtool_eee={0x45, 0x6, 0x0, 0x4, 0x5, 0x5, 0x2, 0x582, [0x0, 0x7]}}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES64=r1], &(0x7f0000000200)='GPL\x00', 0xfa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xa, &(0x7f0000000240)=0x6) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='gfs2meta\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000400)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x2000000000000236, &(0x7f0000000300)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet_SIOCADDRT(r5, 0x8918, &(0x7f0000000380)={0xe0ff, {0x2, 0x0, @empty}, {0x2, 0x0, @empty}, {0x2, 0x0, @empty}, 0x78, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}) openat$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x141500, 0x1) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0xe) listen(r6, 0x1) syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x0, 0x2e9}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) 4.10499408s ago: executing program 3 (id=1926): r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(0x0, r1) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDSETMODE(r2, 0x4b3a, 0x1) ioctl$TCXONC(r2, 0x4b3a, 0x3) sendmsg$GTP_CMD_DELPDP(r1, 0x0, 0x840) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x8001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) dup(0xffffffffffffffff) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) syz_io_uring_setup(0x178e, &(0x7f0000000180)={0x0, 0x3554, 0x13291, 0x0, 0x11d, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 3.125185165s ago: executing program 3 (id=1927): bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xe, 0x4, &(0x7f0000000b00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0xc4}]}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x19, &(0x7f00000003c0)=@framed={{0x18, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) r2 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x2, r2, 0x2, &(0x7f0000000000)) 3.124844788s ago: executing program 4 (id=1928): sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) r0 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r2, 0xcd}, 0x8) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8) (async) close(r4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x8, @remote, 0x0, 0x1}, 0x20) (async) socket$inet6(0xa, 0x80001, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0x0, 0x9e58, 0xe8, 0x28, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x0, 0x8}, 0x50) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="0b00000008000000020000000900000001000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r7, &(0x7f0000000180), &(0x7f0000000300)=""/161}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYRESHEX=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r8}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7ffcfffc}]}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) (async) bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) 3.075030632s ago: executing program 2 (id=1929): io_setup(0x5, &(0x7f0000000100)=0x0) socket$packet(0x11, 0x2, 0x300) (async, rerun: 64) r1 = socket(0xb, 0x1, 0x40400) (async, rerun: 64) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket(0x2, 0x80805, 0x0) (async) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000f80)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000080)={r5}, &(0x7f0000000180)=0x8) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, 0x0, 0x0) (async) getsockname$packet(r1, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000008c0)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x8, &(0x7f0000000240)=@raw=[@map_idx, @cb_func={0x18, 0x8, 0x4, 0x0, 0x6}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffe}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @alu={0x7, 0x2, 0x6, 0x7, 0x5, 0x50, 0x4}], &(0x7f0000000440)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x12, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000a00)={0x4, 0x1, 0x8, 0x8}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async, rerun: 64) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108) (rerun: 64) r7 = memfd_create(&(0x7f00000005c0)=' \xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00r\xbb\xdd\xe8\x87\x05=\xfb\x8b}\xfc\x1d\x03\xe1\xfcm\x9b\xf7fo\"i\xa1hk\x1f\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94T\x81@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\x00\x00\x00\x00\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x9d\xb8?2\xc8\xe7kovd\xa4\x1bl+\x14\x17\x14\x17C2! U\x04:\xd93F\xb9\xfc\x1b\xfd}\x05\xf9\x11\xf3)>q\x10\xd3\xf0\xaf>\xf8t(bX\xe3g\x05\xfe\b\xbcy\x95*\xca\a\xaf\xbb\xf9\xc3Y\xa2\x91\x90.\xc8\xbe\xb0\xa6\xbd\xbd\xfd\xfaf*\xb2&\x82\xa0\x17\xe7)\xf5\xa2\xccv\n\x1b\xd4\xf4\x11*\xc9\xc6*\xa4.\x94[$\xb8\xb3Q\xde\xd8A\xa4~c,`\x02\xb8\x01r\x89\x82\x13\xd0}C7\xfb\xf2\tM\x1e\xe9\xa5\v\xc5\xba(\x89\xb0l\x92H\x1cR\x1f>\xc4ie\xe0B\xf0[\xe2\xe1\x12\x1d\x8fR&\xd1\xa6#\xda.\x0f\xd7\xd7\xa4\x90\x14\x92I\xf82&\x16<\xf2RR\xc2\x02.Q\xef\x85\xef\xf9\xe5\x00\xe9\xca\xb1\x8c\x11\x11l\x9f\xc8\b\xf7A\xa6\x81\xad\xdc\x95\xc8\xef\x102\xa8\x87\x01\x00\\\xfee \n0F\xbc\x85\xc5C\xd0\x99\xe4\t\xab`\'t\xc2\xe9\x13\xcag\xea\xb3\xb5\x92\x00J\xc6y\x05\xcc\xde\xa0\xf6\xb9 \xe5\xdd\f\x18\xfc\xe0\xc3(\xd8\xeb\x1a6\xe6\xfa\x93\xc07R\x0f-\x9e\xf3\x87E\xa3\xd5o\x1bA\x88L/\xe7>45Q?\be\x7f\xa9\x9a\xcae\xd8Y\xdf]\x1bS\x825\xcb\x00\xa4}\x97\x84T\xad\x9b\x1e!\x8a\xbc\x02+#Q\xa9 \xe9\x05r\xe1\xec\x0f\xa7\xe6Of\x95\x02{', 0x4) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd5e, 0x240000000008b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRES16=0x0], 0x34}}, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) (async, rerun: 32) finit_module(r7, 0x0, 0x0) (async, rerun: 32) clock_gettime(0x0, &(0x7f0000000080)) (async) io_getevents(r0, 0x2, 0x2, &(0x7f0000000040)=[{}, {}], 0x0) (async, rerun: 64) r9 = socket$kcm(0x10, 0x2, 0x0) (rerun: 64) sendmsg$kcm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0xa0) 2.29342844s ago: executing program 3 (id=1930): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="a3cf37c8c939dd1c792b7fc63e924fc73f5c57f1a8866469beb7b72ca7c755049f55db", 0x23}, {&(0x7f0000000040)="6c8bed3b22978d52a8292d5b8ac9993b6d6e034bd5065403710e1b2b8456aadbde3ccc7216e8a55c94277824999649b705b0dd82b7ce932b8c0c30ed43e23d3fd6ebc3d82c1c6593da55f4b2d55b3e3dbf4213d040", 0x55}, {&(0x7f0000000680)="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", 0x388}], 0x3) (async) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="a3cf37c8c939dd1c792b7fc63e924fc73f5c57f1a8866469beb7b72ca7c755049f55db", 0x23}, {&(0x7f0000000040)="6c8bed3b22978d52a8292d5b8ac9993b6d6e034bd5065403710e1b2b8456aadbde3ccc7216e8a55c94277824999649b705b0dd82b7ce932b8c0c30ed43e23d3fd6ebc3d82c1c6593da55f4b2d55b3e3dbf4213d040", 0x55}, {&(0x7f0000000680)="e3ab3b0f9905a3517ae8a182fbca1847f0d4b297bfd8a3bf77b37f2b4af824557181cce99a2d758f58216b2da51c401f68354bacb9f0caa0a6d0818a14d347b209c6c174feaa3691a7b3b55dbb2afe57f80c1b19671428e1c628048713af5b99e44dfbcad746b849d6d8fd0e65046bb24c95898978c8d89e8ce451644baac44ec502c86edff8734077f0683b7de3533adb68b83124e2961290f4c3723ed418e8c5048eb6f4d089c7f6200f2fedfc3033e6493f8051d45dc2831cb2e7eed7dbbccfa4081a3d806ab1c7249791130c4d406733ed99159bc79d8be950219451a789b193b8b138a74a33b1c4607472e96a8785f374480057478c9bbb37124d1b52e852b9296fc9fb4aa3deb80845bfcebb24dffcf56090e94ef9393dc5d0be72055a4bbe682ba657f18eb021a47433b09a6e69117a5ef432236896f0aa0f098a7567d17300bec51d9216e9aa4dceeffad96c2aad8f72a637084a901fe518f4ab380ebca0029933b7f87fe5d4d3319ec2cc2ea3fa5709e9609da234e2dd7f333a50a2cd0e74b9a60c601891bd6cf89513c330c06eb406c6dfdd92f9e35399682f6cf460adc13affcba1a6052aabe357ae202099191c76182d8ab2bcaa92ef9c32314014148ba06174a728589130286bea1cce2fd4a7fa6cdcdb936c49ae68b0124080640b022562ded4a5ba0414cfe8d3e3f750f1ef0fa2e02dae9c6f7c17a119b0c08b24484f036dacb31888f75aa9da6dfa127f15b3396337b812e104dd4b14d12c32fa277ab73bc52d3506afdcb964ce9981c4e201c1ef0ff63f8ea35c42c6dc267a99febd413272f9545ac8d62c6f1e50bcc525d61a045a5258fc7a8df022eabc1765bd28774988833231a2e1e20df228e26e37c272d676703264ff1e2ac3173daf6fe4f2375eeff6c39f0f839c735ab8d818ba2daa71ac06e8134880ccdcc6ccf681e2b3b1fd718546ae400ec3668764017cc7294e28ad67cf0ab2be92b348046e95e3f3bdd176618abab9f8f407e57ed59e9d03683a12330caaf67cd23039e2d0f84386f2df1d5383d5852b4b034c1be81c3c2707f8f1649a7d7753a301bca9fbdea7e4df2ca824cfac9f6914d14d9709caa59a2461302fd0ca70e63284973d9f1a9a5333a314fedda97318ea9954395f20943d157ed951168628442e60ee802c39751aa80b23c0bb9f031545ad4d611aeee1ff1488bf0db48c6c16f27e57700ae535eed165a7390a60423a5bab47cab90dc64e12c642c2c1f8016153e8673ee74a99de19636527", 0x388}], 0x3) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES8=r0], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) socket$inet(0x2, 0x3, 0x0) r1 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r1, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$setperm(0x5, r3, 0x1c243811) (async) keyctl$setperm(0x5, r3, 0x1c243811) keyctl$chown(0x4, r3, 0xee00, 0x0) keyctl$KEYCTL_MOVE(0x1e, r3, 0x0, 0x0, 0x1) keyctl$KEYCTL_MOVE(0x1e, r1, r2, r3, 0x1) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000380), 0x200000, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="340000000207010200000000000000424000000000e1ffff02"], 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x400801c) (async) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="340000000207010200000000000000424000000000e1ffff02"], 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x400801c) r5 = syz_io_uring_setup(0x24fa, &(0x7f0000000300)={0x0, 0xeb5b, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000180)=ANY=[], 0x118) syz_usb_connect$hid(0x3, 0x36, &(0x7f00000003c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x230, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3e, 0xa0, 0x89, [{{0x9, 0x4, 0x0, 0x1b, 0x1, 0x3, 0x1, 0x0, 0x6, {0x9, 0x21, 0x8, 0x2, 0x1, {0x22, 0xb05}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc, 0x1, 0x10}}}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x300, 0xfb, 0x2, 0xb6, 0x0, 0xb}, 0x5, &(0x7f0000000440)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x83c}}, {0xee, &(0x7f00000004c0)=@string={0xee, 0x3, "c1bb274e7f5c756287b98447314c3df2849bacd7b191ec8fb7608a7f9be56fe82afe31e5d746e771598faebd93a273d151cb2fff5a9a6c97fb841cb595768811ec533abf3ffb6f7b2b7f8eb046142b73557ec8a18640e29e7de63de9d13239c637e8bff3c1f78fdfca64a0c43dd938ca08f602cec422e716a6f1a9da2612f9c4a3c82d21e7e033cc88e01acf8f83a0139b1736970d2ede52b3a4afb1bfc21664392382894447014f7b6f77d0c47e05296bb953d1cce3cbf5e3f5f03880960c63c86e909b23afe8a7dff8500cf9f39268288c7bf2c3d576e4ec98f7cd0e48d84a29e66ec61a7b2fe33f38df15"}}]}) (async) syz_usb_connect$hid(0x3, 0x36, &(0x7f00000003c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x230, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3e, 0xa0, 0x89, [{{0x9, 0x4, 0x0, 0x1b, 0x1, 0x3, 0x1, 0x0, 0x6, {0x9, 0x21, 0x8, 0x2, 0x1, {0x22, 0xb05}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc, 0x1, 0x10}}}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x300, 0xfb, 0x2, 0xb6, 0x0, 0xb}, 0x5, &(0x7f0000000440)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x83c}}, {0xee, &(0x7f00000004c0)=@string={0xee, 0x3, "c1bb274e7f5c756287b98447314c3df2849bacd7b191ec8fb7608a7f9be56fe82afe31e5d746e771598faebd93a273d151cb2fff5a9a6c97fb841cb595768811ec533abf3ffb6f7b2b7f8eb046142b73557ec8a18640e29e7de63de9d13239c637e8bff3c1f78fdfca64a0c43dd938ca08f602cec422e716a6f1a9da2612f9c4a3c82d21e7e033cc88e01acf8f83a0139b1736970d2ede52b3a4afb1bfc21664392382894447014f7b6f77d0c47e05296bb953d1cce3cbf5e3f5f03880960c63c86e909b23afe8a7dff8500cf9f39268288c7bf2c3d576e4ec98f7cd0e48d84a29e66ec61a7b2fe33f38df15"}}]}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}) io_uring_enter(r5, 0x2d3e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write(r9, &(0x7f0000000300)="c2", 0x1) (async) write(r9, &(0x7f0000000300)="c2", 0x1) 1.888673041s ago: executing program 4 (id=1931): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)=ANY=[], 0x20) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x3, 0x54}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20040811}, 0x2000c094) close(r2) getsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000002940), &(0x7f0000000000)=0x4) 1.562292873s ago: executing program 3 (id=1932): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.492866027s ago: executing program 2 (id=1933): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000001340)=@hci={0x1f, 0x300, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000100)="b8b2cc144e63fe2cd5f93b44892f", 0xe}], 0x1}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@mcast2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xb, 0x0, 0x4e23, 0xfffe, 0xa, 0x0, 0x0, 0x2b, 0x0, 0xee00}, {0x9, 0x3, 0x0, 0x200, 0x9, 0x7ca, 0x10000000000000}, {0x0, 0xfffffffffffffffc, 0x4, 0x9}, 0x0, 0x0, 0x1, 0x0, 0x4, 0x2}, {{@in=@multicast2, 0x4d5, 0x3c}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x3, 0x42, 0x1}}, 0xe8) connect$inet6(r5, &(0x7f0000000380)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee1, 0x80010, r4, 0x0) r7 = syz_io_uring_setup(0x24f5, &(0x7f0000000080)={0x0, 0x89aa, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000140)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x3938700}}) io_uring_enter(r7, 0x31fa, 0x9cd9, 0x0, 0x0, 0x0) io_uring_enter(r7, 0x0, 0x400000, 0x1, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) r10 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$VIDIOC_S_CROP(r10, 0x4014563c, &(0x7f0000000000)={0x9, {0xffffffff, 0x300, 0x300, 0x300}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r11, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xbabd, 0x81, 0x6, 0x1, 0xfff}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0) recvmmsg(r11, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1.254536627s ago: executing program 7 (id=1934): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async, rerun: 64) r1 = getpid() (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) (async) r3 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000840)={0x84, &(0x7f00000003c0)={0x0, 0xe}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000480)={0x0, 0x8, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r3, @ANYRES16=r2, @ANYBLOB="0100000010651fbe347b2c2b00000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) (async, rerun: 64) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) (rerun: 64) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async, rerun: 32) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820f", 0x6) (async, rerun: 32) accept4(r7, 0x0, 0x0, 0x800) (rerun: 32) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) (rerun: 64) sendto$packet(r9, &(0x7f0000000080)="18", 0x1, 0x2, &(0x7f0000000340)={0x11, 0xc, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socket$nl_route(0x10, 0x3, 0x0) 1.051641034s ago: executing program 5 (id=1935): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='io_uring_register\x00', r4}, 0x10) r5 = syz_io_uring_setup(0x274, &(0x7f0000000080)={0x0, 0xcfc8, 0x400, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x2000000, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010022bd7000fcdbdf0f81000000080038fbc0f5e920", @ANYRES32=r3, @ANYBLOB="2a0033004084010008021100000008021100000008021100000199ff08008b4101007206030303030303000006006600c78800000a0006000802110000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x8040) 1.020781118s ago: executing program 3 (id=1936): writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb01", 0x24}], 0x1) r0 = socket(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a000100696e6e657200000040000280080002"], 0xa8}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xa000}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a803f0003"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 884.645935ms ago: executing program 5 (id=1937): r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(0x0, r1) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDSETMODE(r2, 0x4b3a, 0x1) ioctl$TCXONC(r2, 0x4b3a, 0x3) sendmsg$GTP_CMD_DELPDP(r1, 0x0, 0x840) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x8001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) dup(0xffffffffffffffff) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) syz_io_uring_setup(0x178e, &(0x7f0000000180)={0x0, 0x3554, 0x13291, 0x0, 0x11d, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 241.513283ms ago: executing program 5 (id=1938): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) (async) lsm_get_self_attr(0x69, 0x0, 0x0, 0x0) (async, rerun: 64) r0 = msgget$private(0x0, 0x40) (rerun: 64) msgsnd(r0, &(0x7f0000000340)={0x3}, 0x8, 0x0) (async) msgrcv(r0, &(0x7f0000000d80)={0x0, ""/246}, 0xfe, 0x0, 0x2000) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000e80)=""/254) mincore(&(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000080)=""/127) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) (rerun: 64) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)={0x44, r2, 0x1, 0x70bd24, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0xb, 0x4, {}, {0xee00}, 0x2, 0x31bc0000000}) sendmsg$nl_generic(r3, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000001b00)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="201d398021ebddd2f34b3ff35e74e73114d1a79468df9c69a1ab64f4c606a8e9f000718004001280940056001d40310184830481b047b9fbbd3759e24c23461276ce10808761d6a5808fb573702d6e1ad9a69596fbb7721016bbba1778043814a5b00d2387b61d938d3e6f8fe018cc28fd35a8c7b8693172292c889eb6a6f712430da95c65814cefaf62970bd515d77fb53cf5e1d0b1a52593c7e455e4d1564e601eba09fba74e706edea4e100b6d7089fee4327ad76054986a34c58a3fcdbd3d7430dc19b369efb7b72cb577c5236954f2ac3ee94f8c910b5ea028773f7ef99786ef401f76feb444e2633352fc3b5ee0291f17b081d8b72640ae462fe36973d18d242d70dd3e70e04000e0004004480c761dc6bdae7fd3a0c340df1b9a9f1daf9ff60e621f4bf60e5cd075b1f62018fa4b040c9f1716f63505017d6b9cd5aa4d32c9c6ff42acac8aad30ac48d423537daa41599e8c8a84b19115c5d9fa69e50d1b848c13c8f4fb8e56fe0205e15ee326e77de4ff965bdee57da4efabb653fb26fff9e3fcff37f389f33d96e3a125067065987b1627d77f3c8a6caf498c5930feeb65bf55ba314210b5b170a61f0708963547004d725fff6944a2ab99d21f7b6f0cce3c499e26c7600000000040053800000541cb19a5fb24f796d5daf3c241c5b14d9408fb84e47fd7c4ae0a03c8824ffdd7369ff04c0f2fcc0dd2183287ca4220fd136bd46ef8bd0e68482265f158e9729d9368f86ba5e05a85deae4fcee065920fa32728c130e6d08f4903dd609d2dd7b9b7035c942c0c78e838d412fc01170c9c88feaa1ab6a2bb183bb25452892c5c7e6d86bf8f46b021dea63605ee3a0fb6b08001d00", @ANYRES32, @ANYBLOB="8c284d79234e4c38aa5a653baeef911a590631f0b7857665621f0e4abcf346db254bd4541c3fb79f6f2f70d6d0497511e365ceaafc51873bd1c9db5db25bb30d42497fb2460445dbee405ae1aa5520174315d43f7abb6e0ddbeb52f7988d9b0eed592f3b448f7065e964637f5fcefc3fa9be3b23efbdb201de1f4a354f05c3f760744bbdbf34d58cec7707c108c3ba2ba52eceaf2d3c2ffee175d95e3f58f9df38205e4e6c7d8a4110defa194d9657dd23fe1ade6949a88cd398b5f2834fddb85259fe04befa5890d7ec5306860d5da5802529c4cd7aecd2052e68e04712c814eea3941fafd505084b0accce24b7e87d3c78072f3f17b68fd37acee33599cd17ee689ce24f39e273bd4e624ee89e93e7e9af4f5a8877c5603246b0fba60a6417e12d94e73cb91d143f36b8ff676e0265415378519917ab63202e30b8b4e3252b8d1852dc803b8b26817facf62d46a725451777ee7768a888a0bb7015b7f03a52ff85003b9547dd46b3bf7385d4ca7ea3c7d0ea98d3d3bcb4fd8c5f0c76dd653c3ed094120ef5e27d12794e121251063d58e247613f9873391e2d789fce1d9ba18171e61195949707865b1d495242ee0300"], 0xb58}, 0x1, 0x0, 0x0, 0x80}, 0x4008040) 152.104552ms ago: executing program 2 (id=1939): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) (async) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl726\x00', [0x101, 0x40000002, 0x10000, 0x4, 0x1001, 0x7, 0x8, 0xffff, 0x3, 0x104, 0xffffffff, 0x1001, 0xffffffff, 0x800800, 0xa237, 0x2, 0xded9, 0xc7d5, 0x7, 0x40000003, 0x89, 0xcaa4, 0x0, 0x5ca3, 0xb, 0x3, 0x3c, 0xb, 0x6, 0xefcb, 0x8]}) (async) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl726\x00', [0x101, 0x40000002, 0x10000, 0x4, 0x1001, 0x7, 0x8, 0xffff, 0x3, 0x104, 0xffffffff, 0x1001, 0xffffffff, 0x800800, 0xa237, 0x2, 0xded9, 0xc7d5, 0x7, 0x40000003, 0x89, 0xcaa4, 0x0, 0x5ca3, 0xb, 0x3, 0x3c, 0xb, 0x6, 0xefcb, 0x8]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x8, 0x4, 0x21, 0xc1, 0x1}, 0x50) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x0) (async) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000002ff524adc60000000000000000000000950000"], &(0x7f00000003c0)='GPL\x00'}, 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r4, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty}, @ib={0x1b, 0x0, 0x0, {"7d0300"}, 0x0, 0x0, 0x6}}}, 0x118) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000404f045db600000000000109022400010000000009040000010300000009210000000000050009058103"], 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x20000}, 0x50) unshare(0x2040400) (async) unshare(0x2040400) r6 = socket$kcm(0x10, 0x2, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, 0x1, 0x1, 0x0, 0x0, 0x6, 0x80}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, 0x1, 0x1, 0x0, 0x0, 0x6, 0x80}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r7, 0x8b32, &(0x7f0000000040)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x20, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x2}}}}]}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x20, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x2}}}}]}]}, 0x48}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r5, &(0x7f0000000000), 0x0}, 0x20) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00ffc4ae6702b992a74c"]}, 0x0) (async) syz_usb_control_io$uac1(r2, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00ffc4ae6702b992a74c"]}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, &(0x7f00000002c0)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c0c}}}, 0x0) (async) syz_usb_control_io$printer(r2, &(0x7f00000002c0)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c0c}}}, 0x0) syz_usb_control_io$printer(r2, &(0x7f00000002c0)={0x14, &(0x7f00000006c0)=ANY=[@ANYBLOB="20033e0000003e231e8764afe25aa8c83c98b5715f4852d063ef28e1e27e0761d9b8bad098f0d8ae59a5939c67079d37fd98051d616e141a1e524df68d80508217490b0d56ba2fc90b4d13a96765091739a9664d213790331d81dea9f855389f2ae8910bda2899aa8c693794c76786ae24bfc805b1861d51122975ba7c077818700b849b6b51861a6a81bf023602921950b8f7e6534fbe3cefdf435202049f51015588bb97e84d2302ed2726f51e1438638865190201a8cf0ab963584b962f89db4b5649abe3"], &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x404}}}, &(0x7f0000000600)={0x34, &(0x7f0000000300)=ANY=[@ANYBLOB="4016e5000000453abe191bbeef392408c33534f39b715601c171cf5e43e8e21513cfcfb57bf6f9b4011d8a75e427d2db2e2338eb3d1f2431bcc9102de6acebda5bb0041c4e8dd7a6d884c99dd9db26f34b5ca0d45338eaa0911dafe62a9dc40824e1de5e5e78c91d279a1b384bd9bae3469ba65422774c5d3430407b48d91dd957f4d74494dcc6cffc67d7b35ac3235a047f68ce5bce129daf646f19f697926a74e951bd37f25d4c27adc9ca714e13a3576e543ff55e6b8847f3a88dedc828dc67e1bd4e953e98553bcfc68646997674e4c11bf40a006649444e44088700"/235], &(0x7f0000000400)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0xcd}, &(0x7f0000000480)={0x20, 0x0, 0xee, {0xec, "a41da56018b727cc4a4d56556e0c64e986b4d4b4a84e483cc5cd7f71d3e5e014302e9514dbc363dec616bb2872c914b505afec178323c4e4bbd1d73bb4226a1a397614966548165d38396cd1ca520ed8aafcc92c8d928ec064e9e484d18e0389a3da3af8defc72540578a0f9f9d936f93e0930dcf5b3bf2cf530ac624ef8a66d9e3a3cff59a60500117e646eeefa268608b43e3c5d8616ffd0ba119539f3716b5569ae60e6e330d47416804e7054775f886172cea560d37cd1cec2c72ee7495e3e864e25c905f5c5b10a6b4e7e9d6611c75891adf9d8d4c374e883874649a5ed297440f8c31fa2bf72f8fa30"}}, &(0x7f0000000580)={0x20, 0x1, 0x1, 0x5}, &(0x7f00000005c0)={0x20, 0x0, 0x1, 0x7f}}) (async) syz_usb_control_io$printer(r2, &(0x7f00000002c0)={0x14, &(0x7f00000006c0)=ANY=[@ANYBLOB="20033e0000003e231e8764afe25aa8c83c98b5715f4852d063ef28e1e27e0761d9b8bad098f0d8ae59a5939c67079d37fd98051d616e141a1e524df68d80508217490b0d56ba2fc90b4d13a96765091739a9664d213790331d81dea9f855389f2ae8910bda2899aa8c693794c76786ae24bfc805b1861d51122975ba7c077818700b849b6b51861a6a81bf023602921950b8f7e6534fbe3cefdf435202049f51015588bb97e84d2302ed2726f51e1438638865190201a8cf0ab963584b962f89db4b5649abe3"], &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x404}}}, &(0x7f0000000600)={0x34, &(0x7f0000000300)=ANY=[@ANYBLOB="4016e5000000453abe191bbeef392408c33534f39b715601c171cf5e43e8e21513cfcfb57bf6f9b4011d8a75e427d2db2e2338eb3d1f2431bcc9102de6acebda5bb0041c4e8dd7a6d884c99dd9db26f34b5ca0d45338eaa0911dafe62a9dc40824e1de5e5e78c91d279a1b384bd9bae3469ba65422774c5d3430407b48d91dd957f4d74494dcc6cffc67d7b35ac3235a047f68ce5bce129daf646f19f697926a74e951bd37f25d4c27adc9ca714e13a3576e543ff55e6b8847f3a88dedc828dc67e1bd4e953e98553bcfc68646997674e4c11bf40a006649444e44088700"/235], &(0x7f0000000400)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0xcd}, &(0x7f0000000480)={0x20, 0x0, 0xee, {0xec, "a41da56018b727cc4a4d56556e0c64e986b4d4b4a84e483cc5cd7f71d3e5e014302e9514dbc363dec616bb2872c914b505afec178323c4e4bbd1d73bb4226a1a397614966548165d38396cd1ca520ed8aafcc92c8d928ec064e9e484d18e0389a3da3af8defc72540578a0f9f9d936f93e0930dcf5b3bf2cf530ac624ef8a66d9e3a3cff59a60500117e646eeefa268608b43e3c5d8616ffd0ba119539f3716b5569ae60e6e330d47416804e7054775f886172cea560d37cd1cec2c72ee7495e3e864e25c905f5c5b10a6b4e7e9d6611c75891adf9d8d4c374e883874649a5ed297440f8c31fa2bf72f8fa30"}}, &(0x7f0000000580)={0x20, 0x1, 0x1, 0x5}, &(0x7f00000005c0)={0x20, 0x0, 0x1, 0x7f}}) 15.85055ms ago: executing program 3 (id=1940): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x6, 0x4, 0x8, 0xd, 0x100, 0xffffffffffffffff, 0x9}, 0x50) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x7, 0x9, 0x200000001, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x100000000, 0x5, 0x7, 0x2], 0xffff3000, 0x8340}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000300)={{@hyper, 0x800000}, @my=0x1, 0x0, 0x0, 0x2, 0xfffffffffffffffe}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f00000000c0)={{@hyper, 0xffffffff}, @host, 0x0, 0x0, 0x1, 0x4}) close(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=1941): ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000002f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x6d) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x40c000) (async) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x40c000) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x3a, 0x2}}) (async) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x3a, 0x2}}) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) (async) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="020000f2030000000404000009000000000000000f9c0430e3d3c96914323043789449e693764f87dc38cb4b7c43ceb1647eb6985f8cf8661b4adec23e79320cd809dc154ac9b598ec2561de01696a0ce8393e7c6f64c3d528180a62bcfd673cbd9f791eda70d81cde667218dc4328074a5c7df896c38b77523b0300000000000000bd51a43b3f30a2d1adccc0925940e34d21273054908ddd17b27db5de1785ff2209169e9acf5ae5806dcc5dacad540f566476dc4c420ebe1edf7f6837efbf59db89", @ANYRES16=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="020000f2030000000404000009000000000000000f9c0430e3d3c96914323043789449e693764f87dc38cb4b7c43ceb1647eb6985f8cf8661b4adec23e79320cd809dc154ac9b598ec2561de01696a0ce8393e7c6f64c3d528180a62bcfd673cbd9f791eda70d81cde667218dc4328074a5c7df896c38b77523b0300000000000000bd51a43b3f30a2d1adccc0925940e34d21273054908ddd17b27db5de1785ff2209169e9acf5ae5806dcc5dacad540f566476dc4c420ebe1edf7f6837efbf59db89", @ANYRES16=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) (async) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0xffffffffffffffee) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000280)={0x9}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) accept4(r6, 0x0, 0x0, 0x0) (async) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$alg(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4040001}, 0x0) recvmsg$unix(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r4, 0x942e, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000032680)=""/102392, 0x18ff8) (async) read$msr(r8, &(0x7f0000032680)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1000000000, 0x0, 0x40, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x68ff, 0x5, 0x7fff, 0x3, 0x400000000], 0x80ad003}) kernel console output (not intermixed with test programs): ters specified [ 557.824925][T12408] overlayfs: missing 'lowerdir' [ 557.844351][ T44] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 558.659804][ T44] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 558.748622][T12377] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1427'. [ 558.759174][T12377] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1427'. [ 558.827494][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 558.836535][ T24] usb 7-1: USB disconnect, device number 22 [ 558.896438][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 558.931786][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 559.158436][ T24] quatech2 7-1:0.51: device disconnected [ 560.063991][T12429] netlink: 'syz.3.1440': attribute type 1 has an invalid length. [ 560.115504][T12429] netlink: 'syz.3.1440': attribute type 1 has an invalid length. [ 560.156981][ T5899] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 560.335665][ T5899] usb 5-1: Using ep0 maxpacket: 16 [ 560.361588][ T5899] usb 5-1: config 1 has an invalid descriptor of length 191, skipping remainder of the config [ 560.588876][ T5899] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 560.602551][ T5899] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 560.612279][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.620863][ T5899] usb 5-1: Product: syz [ 560.625366][ T5899] usb 5-1: Manufacturer: syz [ 560.630582][ T5899] usb 5-1: SerialNumber: syz [ 560.879267][ T5899] usb 5-1: 0:2 : does not exist [ 560.927514][ T5899] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 560.983576][ T5899] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 561.006972][ T5899] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 561.012217][T12451] netlink: 'syz.6.1445': attribute type 12 has an invalid length. [ 561.022530][T12451] netlink: 'syz.6.1445': attribute type 29 has an invalid length. [ 561.038906][ T5899] usb 5-1: 5:0: cannot get min/max values for control 8 (id 5) [ 561.050244][T12451] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1445'. [ 561.098563][ T5899] usb 5-1: USB disconnect, device number 61 [ 561.152474][T12462] kvm: requested 9219 ns i8254 timer period limited to 200000 ns [ 561.155610][ T5851] udevd[5851]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 561.196138][ T9] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 561.380153][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 561.392091][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.416311][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.821247][ T24] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 561.856753][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 561.871013][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 561.880822][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.905298][ T9] usb 3-1: config 0 descriptor?? [ 562.050422][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 563.094601][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.211436][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.540793][ T24] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 564.736055][ T24] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 564.908395][ T24] usb 5-1: string descriptor 0 read error: -71 [ 564.969407][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 564.978543][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.026437][ T9] microsoft 0003:045E:07DA.001B: unbalanced collection at end of report description [ 565.076848][ T24] usb 5-1: can't set config #1, error -71 [ 565.097979][ T24] usb 5-1: USB disconnect, device number 62 [ 565.157027][ T9] microsoft 0003:045E:07DA.001B: parse failed [ 565.176173][ T9] microsoft 0003:045E:07DA.001B: probe with driver microsoft failed with error -22 [ 565.242494][ T9] usb 3-1: USB disconnect, device number 77 [ 565.929312][ T1208] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 566.139438][ T1208] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 566.158977][ T1208] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 566.195202][ T1208] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 566.207799][ T1208] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 566.262767][ T1208] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 566.335217][ T1208] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 566.359453][ T1208] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 566.367610][ T1208] usb 6-1: Product: syz [ 566.372391][ T1208] usb 6-1: Manufacturer: syz [ 566.378087][ T1208] usb 6-1: SerialNumber: syz [ 566.386873][ T1208] usb 6-1: config 0 descriptor?? [ 566.699082][ T5899] usb 3-1: new full-speed USB device number 78 using dummy_hcd [ 567.195991][ T1208] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 568.142584][ T1208] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -5 [ 570.076862][ T5899] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 570.115681][ T5899] usb 3-1: can't read configurations, error -71 [ 570.353017][T12541] FAULT_INJECTION: forcing a failure. [ 570.353017][T12541] name failslab, interval 1, probability 0, space 0, times 0 [ 570.468231][ T24] usb 6-1: USB disconnect, device number 34 [ 570.508600][T12541] CPU: 1 UID: 0 PID: 12541 Comm: syz.2.1469 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 570.508629][T12541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 570.508642][T12541] Call Trace: [ 570.508650][T12541] [ 570.508659][T12541] dump_stack_lvl+0x189/0x250 [ 570.508688][T12541] ? __pfx____ratelimit+0x10/0x10 [ 570.508712][T12541] ? __pfx_dump_stack_lvl+0x10/0x10 [ 570.508735][T12541] ? __pfx__printk+0x10/0x10 [ 570.508764][T12541] ? __pfx___might_resched+0x10/0x10 [ 570.508787][T12541] ? fs_reclaim_acquire+0x7d/0x100 [ 570.508817][T12541] should_fail_ex+0x414/0x560 [ 570.508846][T12541] should_failslab+0xa8/0x100 [ 570.508869][T12541] kmem_cache_alloc_noprof+0x73/0x3c0 [ 570.508889][T12541] ? prepare_creds+0x31/0x6c0 [ 570.508919][T12541] prepare_creds+0x31/0x6c0 [ 570.508969][T12541] copy_creds+0x106/0xa10 [ 570.509006][T12541] copy_process+0x95d/0x3b80 [ 570.509050][T12541] ? get_pid_task+0x20/0x1f0 [ 570.509085][T12541] ? __pfx_copy_process+0x10/0x10 [ 570.509112][T12541] ? rcu_read_lock_any_held+0xb3/0x120 [ 570.509145][T12541] kernel_clone+0x224/0x7f0 [ 570.509173][T12541] ? __pfx_kernel_clone+0x10/0x10 [ 570.509210][T12541] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 570.509251][T12541] __x64_sys_clone+0x18b/0x1e0 [ 570.509279][T12541] ? __pfx___x64_sys_clone+0x10/0x10 [ 570.509333][T12541] ? __pfx_ksys_write+0x10/0x10 [ 570.509363][T12541] ? do_syscall_64+0xbe/0x3b0 [ 570.509388][T12541] do_syscall_64+0xfa/0x3b0 [ 570.509407][T12541] ? lockdep_hardirqs_on+0x9c/0x150 [ 570.509427][T12541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.509445][T12541] ? clear_bhb_loop+0x60/0xb0 [ 570.509467][T12541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.509485][T12541] RIP: 0033:0x7f5ce598ebe9 [ 570.509500][T12541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 570.509517][T12541] RSP: 002b:00007f5ce6855fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 570.509539][T12541] RAX: ffffffffffffffda RBX: 00007f5ce5bb6090 RCX: 00007f5ce598ebe9 [ 570.509553][T12541] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042001000 [ 570.509566][T12541] RBP: 00007f5ce6856090 R08: 0000000000000000 R09: 0000000000000000 [ 570.509579][T12541] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 570.509592][T12541] R13: 00007f5ce5bb6128 R14: 00007f5ce5bb6090 R15: 00007ffeef180038 [ 570.509627][T12541] [ 570.868199][T12538] lo speed is unknown, defaulting to 1000 [ 572.200010][ T5921] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 572.249789][ T44] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 572.379950][ T5921] usb 7-1: Using ep0 maxpacket: 8 [ 572.401477][ T5921] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 572.410425][ T44] usb 4-1: too many configurations: 255, using maximum allowed: 8 [ 572.429096][ T5921] usb 7-1: config 179 has no interface number 0 [ 572.441465][ T44] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 572.447486][ T5921] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 572.449077][ T44] usb 4-1: can't read configurations, error -61 [ 572.493999][ T5921] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 572.516177][ T5921] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 572.559868][ T5921] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 572.580624][ T44] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 572.591142][ T5921] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 572.683685][ T5921] usb 7-1: config 179 interface 65 has no altsetting 0 [ 572.709764][ T5921] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 572.739471][ T5921] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.750628][ T44] usb 4-1: too many configurations: 255, using maximum allowed: 8 [ 572.792878][ T5921] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input34 [ 572.801295][ T44] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 572.837457][ T44] usb 4-1: can't read configurations, error -61 [ 572.899850][ T44] usb usb4-port1: attempt power cycle [ 573.006661][ T5920] usb 7-1: USB disconnect, device number 23 [ 573.006660][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 573.250164][ T44] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 573.292592][ T44] usb 4-1: too many configurations: 255, using maximum allowed: 8 [ 573.314365][ T44] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 573.326900][ T44] usb 4-1: can't read configurations, error -61 [ 573.359896][ T1208] usb 3-1: new full-speed USB device number 80 using dummy_hcd [ 573.419941][T12572] hub 1-0:1.0: USB hub found [ 573.435911][T12572] hub 1-0:1.0: 1 port detected [ 573.494434][T12576] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 573.499354][ T44] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 573.500996][T12576] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 573.509370][T12576] vhci_hcd vhci_hcd.0: Device attached [ 573.532944][ T1208] usb 3-1: config 0 has an invalid interface number: 139 but max is 0 [ 573.546634][ T1208] usb 3-1: config 0 has no interface number 0 [ 573.557466][ T1208] usb 3-1: config 0 interface 139 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 573.561129][ T44] usb 4-1: too many configurations: 255, using maximum allowed: 8 [ 573.594652][ T1208] usb 3-1: config 0 interface 139 altsetting 0 has an endpoint descriptor with address 0xBD, changing to 0x8D [ 573.609038][ T44] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 573.623839][T12578] vhci_hcd: connection closed [ 573.625631][ T6644] vhci_hcd: stop threads [ 573.638007][ T44] usb 4-1: can't read configurations, error -61 [ 573.646704][ T1208] usb 3-1: config 0 interface 139 altsetting 0 endpoint 0x8D has invalid maxpacket 14158, setting to 64 [ 573.663780][ T6644] vhci_hcd: release socket [ 573.668470][ T6644] vhci_hcd: disconnect device [ 573.673857][ T1208] usb 3-1: config 0 interface 139 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 573.680589][ T44] usb usb4-port1: unable to enumerate USB device [ 573.695915][ T1208] usb 3-1: config 0 interface 139 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 573.725970][ T1208] usb 3-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=fd.d6 [ 573.740103][ T5921] vhci_hcd: vhci_device speed not set [ 573.749349][ T1208] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.779677][ T1208] usb 3-1: Product: syz [ 573.795747][ T1208] usb 3-1: Manufacturer: syz [ 573.813338][ T1208] usb 3-1: SerialNumber: syz [ 573.828805][ T1208] usb 3-1: config 0 descriptor?? [ 573.846618][T12564] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 573.867232][T12564] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 574.039867][ T44] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 574.085331][T12564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.096930][T12564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.118078][ T1208] mct_u232 3-1:0.139: MCT U232 converter detected [ 574.141007][ T1208] usb 3-1: MCT U232 converter now attached to ttyUSB0 [ 574.162243][ T1208] usb 3-1: USB disconnect, device number 80 [ 574.183935][ T1208] mct_u232 ttyUSB0: MCT U232 converter now disconnected from ttyUSB0 [ 574.196289][ T1208] mct_u232 3-1:0.139: device disconnected [ 574.202222][ T44] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 574.202254][ T44] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 574.204564][ T44] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 574.249610][ T44] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 574.261283][ T44] usb 7-1: SerialNumber: syz [ 574.494487][ T44] usb 7-1: 0:2 : does not exist [ 574.516971][ T44] usb 7-1: unit 5: unexpected type 0x0b [ 574.611150][ T44] usb 7-1: USB disconnect, device number 24 [ 574.800715][ T5851] udevd[5851]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 574.852006][T12602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.876800][T12602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.980988][ T5921] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 575.060579][ T24] usb 3-1: new full-speed USB device number 81 using dummy_hcd [ 575.070026][ T1208] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 575.210124][ T1208] usb 4-1: device descriptor read/64, error -71 [ 575.247090][ T24] usb 3-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 575.267315][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.290904][ T24] usb 3-1: Product: syz [ 575.309293][ T24] usb 3-1: Manufacturer: syz [ 575.328499][ T24] usb 3-1: SerialNumber: syz [ 575.352164][ T24] usb 3-1: config 0 descriptor?? [ 575.581360][ T1208] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 576.040577][ T1208] usb 4-1: device descriptor read/64, error -71 [ 576.077217][ T24] usb 3-1: USB disconnect, device number 81 [ 576.150569][ T1208] usb usb4-port1: attempt power cycle [ 577.220252][ T1208] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 577.272268][ T1208] usb 4-1: device descriptor read/8, error -71 [ 577.598668][ T1208] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 577.631389][ T1208] usb 4-1: device descriptor read/8, error -71 [ 577.784146][ T1208] usb usb4-port1: unable to enumerate USB device [ 578.286306][T12650] xfrm0: entered promiscuous mode [ 578.306233][T12650] xfrm0: entered allmulticast mode [ 578.441556][T12657] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 578.460763][T12657] tipc: Enabled bearer , priority 10 [ 579.121378][T12659] IPVS: stopping backup sync thread 6968 ... [ 580.108463][T12664] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1499'. [ 580.377157][T12676] overlay: filesystem on ./bus not supported as upperdir [ 580.486633][T12686] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1506'. [ 580.507153][ T30] audit: type=1326 audit(1754875488.862:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12680 comm="syz.2.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ce598ebe9 code=0x7ffc0000 [ 580.551526][T12686] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1506'. [ 580.569097][T12686] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1506'. [ 580.571691][ T30] audit: type=1326 audit(1754875488.862:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12680 comm="syz.2.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ce598ebe9 code=0x7ffc0000 [ 580.600888][ T5899] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 580.617062][ T30] audit: type=1326 audit(1754875488.902:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12680 comm="syz.2.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f5ce598ebe9 code=0x7ffc0000 [ 580.648766][ T30] audit: type=1326 audit(1754875488.902:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12680 comm="syz.2.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ce598ebe9 code=0x7ffc0000 [ 580.697610][ T30] audit: type=1326 audit(1754875488.902:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12680 comm="syz.2.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ce598ebe9 code=0x7ffc0000 [ 580.843808][ T30] audit: type=1326 audit(1754875488.902:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12680 comm="syz.2.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f5ce598ebe9 code=0x7ffc0000 [ 580.892728][ T5899] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1455, setting to 64 [ 580.894470][ T30] audit: type=1326 audit(1754875488.902:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12680 comm="syz.2.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ce598ebe9 code=0x7ffc0000 [ 580.937972][ T30] audit: type=1326 audit(1754875488.902:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12680 comm="syz.2.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ce598ebe9 code=0x7ffc0000 [ 580.950636][ T5899] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 580.960033][ T24] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 581.060325][ T5899] usb 4-1: config 0 interface 0 has no altsetting 0 [ 581.077642][ T5899] usb 4-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 581.092494][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.171277][T12697] netlink: 'syz.5.1508': attribute type 12 has an invalid length. [ 581.250903][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 581.251166][T12697] netlink: 'syz.5.1508': attribute type 29 has an invalid length. [ 581.260346][ T24] usb 7-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 581.285287][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.294405][ T24] usb 7-1: Product: syz [ 581.298665][ T24] usb 7-1: Manufacturer: syz [ 581.303548][ T24] usb 7-1: SerialNumber: syz [ 581.321364][T12697] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1508'. [ 581.377731][ T24] usb 7-1: config 0 descriptor?? [ 581.528389][T12704] block device autoloading is deprecated and will be removed. [ 582.000524][ T5899] usb 4-1: config 0 descriptor?? [ 582.009058][T12675] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 582.146563][ T24] empeg 7-1:0.0: empeg converter detected [ 582.161021][ T24] usb 7-1: active config #0 != 1 ?? [ 582.230797][T12706] netlink: 34 bytes leftover after parsing attributes in process `syz.3.1502'. [ 582.536576][ T9] usb 7-1: USB disconnect, device number 25 [ 582.771567][ T5899] usbhid 4-1:0.0: can't add hid device: -71 [ 582.777739][ T5899] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 582.812724][ T5899] usb 4-1: USB disconnect, device number 63 [ 582.965464][ T30] audit: type=1326 audit(1754875491.312:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12716 comm="syz.3.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fababb8ebe9 code=0x7ffc0000 [ 583.138883][T12715] netlink: 'syz.5.1513': attribute type 1 has an invalid length. [ 583.148673][ T30] audit: type=1326 audit(1754875491.322:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12716 comm="syz.3.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fababb8ebe9 code=0x7ffc0000 [ 583.338558][T12715] 8021q: adding VLAN 0 to HW filter on device bond1 [ 583.422611][T12728] netlink: 'syz.4.1516': attribute type 1 has an invalid length. [ 583.491067][ T5920] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 583.540998][ T24] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 583.622484][T12741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.645431][T12741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.683546][ T5920] usb 3-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 583.697259][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.714938][ T5920] usb 3-1: config 0 descriptor?? [ 583.857856][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 583.867683][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 583.931216][ T44] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 584.024722][ T24] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 584.057019][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 584.108573][ T24] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 584.123083][ T24] usb 4-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 584.147019][ T24] usb 4-1: Product: syz [ 584.158775][ T24] usb 4-1: Manufacturer: syz [ 584.175639][ T24] usb 4-1: SerialNumber: syz [ 584.183430][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 584.205693][ T24] usb 4-1: config 0 descriptor?? [ 584.210737][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 584.256170][ T44] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 584.283221][ T5920] kaweth 3-1:0.0: Firmware present in device. [ 584.289404][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.299655][ T44] usb 5-1: Product: syz [ 584.304241][ T5920] kaweth 3-1:0.0: Error reading configuration (-32), no net device created [ 584.324374][ T44] usb 5-1: Manufacturer: syz [ 584.329873][ T5920] kaweth 3-1:0.0: probe with driver kaweth failed with error -5 [ 584.349581][ T44] usb 5-1: SerialNumber: syz [ 584.546742][ T44] usb 5-1: config 0 descriptor?? [ 584.682391][ T24] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 584.805619][ T9] usb 3-1: USB disconnect, device number 82 [ 584.894877][ T24] gs_usb 4-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 584.940744][ T24] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -22 [ 584.993591][ T44] usb 5-1: USB disconnect, device number 63 [ 585.011372][ T5949] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 585.068112][ T6085] udevd[6085]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 585.095534][T12726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.113203][T12726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.176241][ T5949] usb 7-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=d6.bb [ 585.211366][ T5949] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.251529][ T5949] usb 7-1: Product: syz [ 585.255775][ T5949] usb 7-1: Manufacturer: syz [ 585.261219][ T5949] usb 7-1: SerialNumber: syz [ 585.276329][ T9] usb 4-1: USB disconnect, device number 64 [ 585.279773][ T5949] usb 7-1: config 0 descriptor?? [ 585.291658][ T5949] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 585.591328][T12764] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1523'. [ 585.803982][ T5949] gspca_sn9c2028: read1 error -110 [ 585.818587][ T5949] gspca_sn9c2028: read1 error -32 [ 585.837926][ T5949] gspca_sn9c2028: read1 error -32 [ 585.844074][ T5949] sn9c2028 7-1:0.0: probe with driver sn9c2028 failed with error -32 [ 585.891303][ T5921] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 586.111875][ T5921] usb 5-1: Using ep0 maxpacket: 16 [ 586.124892][ T5921] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 586.153545][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.203653][ T5921] usb 5-1: Product: syz [ 586.239170][ T5921] usb 5-1: Manufacturer: syz [ 586.254809][ T5921] usb 5-1: SerialNumber: syz [ 586.282288][ T5921] usb 5-1: config 0 descriptor?? [ 586.299849][ T5921] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 586.505153][ T5921] gp8psk: usb in 128 operation failed. [ 586.522795][T12786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.559726][ T5921] gp8psk: usb in 137 operation failed. [ 586.568955][T12786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.573106][ T5921] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 586.813022][T12790] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1528'. [ 587.550020][T12786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.560087][T12786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.569708][ T5921] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 587.572872][T12786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.582703][ T5921] usb 5-1: media controller created [ 587.597080][T12786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.434408][T12793] netlink: 'syz.5.1528': attribute type 10 has an invalid length. [ 588.443437][T12793] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.453333][T12793] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.540241][ T5949] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 588.840151][T12793] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.847930][T12793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 588.856753][T12793] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.864623][T12793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 588.886039][T12793] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 588.901163][ T9] usb 7-1: USB disconnect, device number 26 [ 589.246316][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 589.361034][ T5921] gp8psk_fe: Frontend revision 1 attached [ 589.385934][ T5921] usb 5-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 589.477299][T12800] netlink: 'syz.4.1533': attribute type 1 has an invalid length. [ 589.487748][ T5921] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 589.540164][T12800] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1533'. [ 589.585504][T12800] NCSI netlink: No device for ifindex 0 [ 589.619128][T12808] CIFS mount error: No usable UNC path provided in device string! [ 589.619128][T12808] [ 589.661243][T12808] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 589.747817][ T5921] gp8psk: usb in 138 operation failed. [ 589.761128][ T5921] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 589.776063][ T5921] gp8psk: found Genpix USB device pID = 201 (hex) [ 589.811025][ T5921] usb 5-1: USB disconnect, device number 64 [ 590.307066][ T5921] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 591.549865][T12850] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1544'. [ 591.565597][T12850] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1544'. [ 591.739430][T12850] netlink: 'syz.6.1544': attribute type 18 has an invalid length. [ 592.028194][T12850] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 592.037987][T12850] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 592.046955][T12850] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 592.055854][T12850] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 592.075133][T12859] bridge0: port 3(team0) entered blocking state [ 592.082155][T12859] bridge0: port 3(team0) entered disabled state [ 592.088558][T12859] team0: entered allmulticast mode [ 592.093765][T12859] team_slave_0: entered allmulticast mode [ 592.099492][T12859] team_slave_1: entered allmulticast mode [ 592.106759][T12859] team0: entered promiscuous mode [ 592.111936][T12859] team_slave_0: entered promiscuous mode [ 592.117703][T12859] team_slave_1: entered promiscuous mode [ 592.124135][T12859] bridge0: port 3(team0) entered blocking state [ 592.130473][T12859] bridge0: port 3(team0) entered forwarding state [ 592.770293][T12850] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1544'. [ 592.810985][T12850] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1544'. [ 592.865592][T12850] netlink: 'syz.6.1544': attribute type 18 has an invalid length. [ 593.829420][ T9] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 594.058775][T11975] Bluetooth: hci5: command 0x0405 tx timeout [ 594.205204][ T9] usb 4-1: device descriptor read/64, error -71 [ 594.362652][T12885] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 594.372328][ T5949] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 594.380215][T12881] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 594.783027][ T5949] usb 7-1: device descriptor read/64, error -71 [ 594.845148][T12889] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1553'. [ 594.862332][ T9] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 594.893129][T12889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 594.910770][T12889] net_ratelimit: 10 callbacks suppressed [ 594.910789][T12889] batadv0: mtu less than device minimum [ 594.989697][T12889] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 595.002368][T12889] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 595.014822][T12889] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 595.026910][T12889] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 595.039167][T12889] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 595.042285][ T5949] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 595.051099][T12889] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 595.069685][T12889] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 595.081808][T12889] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 595.093906][T12889] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 595.133366][ T9] usb 4-1: device descriptor read/64, error -71 [ 595.220436][T12889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 595.228493][T12898] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1555'. [ 595.232480][ T5949] usb 7-1: device descriptor read/64, error -71 [ 595.274524][ T9] usb usb4-port1: attempt power cycle [ 595.352944][ T5949] usb usb7-port1: attempt power cycle [ 595.740424][ T1208] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 595.808297][T12903] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 595.933163][ T5949] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 595.962347][ T9] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 595.963181][ T5949] usb 7-1: device descriptor read/8, error -71 [ 596.092719][ T9] usb 4-1: device descriptor read/8, error -71 [ 596.152538][ T1208] usb 5-1: Using ep0 maxpacket: 8 [ 596.160825][ T1208] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 596.212685][ T5949] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 596.259932][ T1208] usb 5-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 596.279753][ T1208] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.314774][ T1208] usb 5-1: config 0 descriptor?? [ 596.342577][ T1208] usb 5-1: bad CDC descriptors [ 596.347945][ T1208] cdc_acm 5-1:0.0: Control and data interfaces are not separated! [ 596.363287][ T5949] usb 7-1: device descriptor read/8, error -71 [ 596.421475][ T1208] cdc_acm 5-1:0.0: This needs exactly 3 endpoints [ 596.438679][ T1208] cdc_acm 5-1:0.0: probe with driver cdc_acm failed with error -22 [ 596.464500][T12907] fuse: Unknown parameter 'fdྀ ' [ 596.493469][T12907] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1558'. [ 596.503058][ T5949] usb usb7-port1: unable to enumerate USB device [ 596.905010][T12918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1560'. [ 597.250332][ T5949] usb 5-1: USB disconnect, device number 65 [ 597.802603][ T5949] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 598.073079][ T5949] usb 4-1: device descriptor read/64, error -71 [ 599.084439][ T5949] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 599.242771][ T5949] usb 4-1: device descriptor read/64, error -71 [ 599.724485][ T5949] usb usb4-port1: attempt power cycle [ 599.934820][T12954] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1571'. [ 599.986319][ C0] vcan0: j1939_session_tx_dat: 0xffff888032581400: queue data error: -100 [ 600.354498][ T5949] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 600.384854][ T5949] usb 4-1: device descriptor read/8, error -71 [ 600.773768][ T9] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 601.043141][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 601.143335][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 601.277968][ T9] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 601.312730][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.332447][ T9] usb 6-1: Product: syz [ 601.372707][ T9] usb 6-1: Manufacturer: syz [ 601.422955][ T9] usb 6-1: SerialNumber: syz [ 601.451007][ T9] usb 6-1: config 0 descriptor?? [ 601.452079][T12968] sctp: [Deprecated]: syz.6.1575 (pid 12968) Use of struct sctp_assoc_value in delayed_ack socket option. [ 601.452079][T12968] Use struct sctp_sack_info instead [ 601.474418][T12964] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 601.488006][ T9] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input35 [ 601.643940][T12971] sp0: Synchronizing with TNC [ 601.943108][ T9] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 602.094301][ T9] usb 5-1: device descriptor read/64, error -71 [ 602.363372][ T9] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 602.533683][ T9] usb 5-1: device descriptor read/64, error -71 [ 602.665980][ T9] usb usb5-port1: attempt power cycle [ 603.046576][ T9] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 603.204373][ T1208] usb 6-1: USB disconnect, device number 36 [ 603.210472][ C0] usbtouchscreen 6-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 603.225102][ T9] usb 5-1: device descriptor read/8, error -71 [ 603.433759][T12990] can0: slcan on ptm0. [ 603.497390][ T9] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 603.543612][ T9] usb 5-1: device descriptor read/8, error -71 [ 603.653772][ T9] usb usb5-port1: unable to enumerate USB device [ 603.869735][T12989] can0 (unregistered): slcan off ptm0. [ 604.100321][T12994] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1581'. [ 604.114652][T12993] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1581'. [ 604.133960][T12993] tipc: Started in network mode [ 604.138885][T12993] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 604.147256][T12993] tipc: Enabled bearer , priority 10 [ 604.166849][T12993] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1581'. [ 604.213803][T12993] tipc: Resetting bearer [ 604.312369][T12993] tipc: Disabling bearer [ 606.324836][T13017] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.1584'. [ 606.334234][T13017] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.1584'. [ 609.364022][ T5949] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 609.554097][ T5949] usb 4-1: Using ep0 maxpacket: 8 [ 609.602185][ T5949] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 609.633921][ T5949] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 609.663955][ T5949] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 609.703903][ T5949] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 609.718330][ T5949] usb 4-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 609.753949][ T5949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.762180][ T5949] usb 4-1: Product: syz [ 609.767671][ T5949] usb 4-1: Manufacturer: syz [ 609.772481][ T5949] usb 4-1: SerialNumber: syz [ 609.811408][ T5949] usb 4-1: config 0 descriptor?? [ 609.840304][T13033] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 610.224230][ T5949] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 610.240406][ T5949] input: Griffin SoundKnob as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input36 [ 610.569270][ C1] powermate: config urb returned -71 [ 610.570693][ T5899] usb 4-1: USB disconnect, device number 74 [ 610.574724][ C1] powermate: usb_submit_urb(config) failed [ 610.574821][ C1] powermate 4-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 611.734781][T13058] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1598'. [ 612.184892][ T5957] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 612.334273][ T5957] usb 3-1: device descriptor read/64, error -71 [ 612.624277][ T5957] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 612.844463][ T5957] usb 3-1: device descriptor read/64, error -71 [ 612.990111][ T5957] usb usb3-port1: attempt power cycle [ 613.498989][T13082] net_ratelimit: 10 callbacks suppressed [ 613.499005][T13082] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 613.534961][ T5957] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 614.425349][ T5957] usb 3-1: device descriptor read/8, error -71 [ 615.429745][ T5839] Bluetooth: hci5: ISO packet too small [ 616.961144][T13102] sctp: [Deprecated]: syz.3.1610 (pid 13102) Use of struct sctp_assoc_value in delayed_ack socket option. [ 616.961144][T13102] Use struct sctp_sack_info instead [ 617.034804][ T5957] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 617.367374][T13105] netlink: 'syz.5.1611': attribute type 7 has an invalid length. [ 617.398336][ T5957] usb 3-1: Using ep0 maxpacket: 8 [ 617.414244][ T5957] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 617.542756][T13105] : entered promiscuous mode [ 617.638006][ T5957] usb 3-1: config 179 has no interface number 0 [ 617.644534][ T5957] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 617.684866][ T5899] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 617.694923][ T5957] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 617.721938][ T5957] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 617.804481][ T5957] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 617.844093][ T5957] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 617.855637][ T5957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.868918][ T5899] usb 5-1: device descriptor read/64, error -71 [ 617.895631][T13097] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 618.266496][ T5899] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 618.831282][ T1208] usb 3-1: USB disconnect, device number 87 [ 618.831323][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 618.845794][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 618.931467][ T5899] usb 5-1: device descriptor read/64, error -71 [ 619.108305][ T5899] usb usb5-port1: attempt power cycle [ 619.179964][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 619.179984][ T30] audit: type=1326 audit(1754875527.528:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13118 comm="syz.5.1616" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc68dd8ebe9 code=0x0 [ 619.485590][ T5899] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 619.518349][T11975] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 619.533651][ T5899] usb 5-1: device descriptor read/8, error -71 [ 619.544769][T11975] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 619.578794][T11975] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 619.801312][T11975] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 619.819733][T11975] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 619.945027][ T5899] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 620.006048][ T5899] usb 5-1: device descriptor read/8, error -71 [ 620.007627][T13132] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1619'. [ 620.131876][ T5899] usb usb5-port1: unable to enumerate USB device [ 620.233465][ T8105] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 620.293699][ T8105] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.018706][ T8105] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.055423][ T8105] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.164867][T13129] lo speed is unknown, defaulting to 1000 [ 621.341935][ T8105] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.353066][T13148] Bluetooth: MGMT ver 1.23 [ 621.375277][ T5920] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 621.375515][T13148] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 621.401221][ T8105] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.553144][ T5920] usb 5-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.10 [ 621.590460][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.605489][ T5920] usb 5-1: Product: syz [ 621.609744][ T5920] usb 5-1: Manufacturer: syz [ 621.625431][ T5920] usb 5-1: SerialNumber: syz [ 621.651770][ T5920] usb 5-1: config 0 descriptor?? [ 621.696061][ T5920] go7007 5-1:0.0: probe with driver go7007 failed with error -12 [ 621.721141][ T8105] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.757797][ T8105] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.815365][T13146] veth1_to_bridge: mtu less than device minimum [ 621.903952][T13145] syz.4.1622: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 621.923705][T13145] CPU: 0 UID: 0 PID: 13145 Comm: syz.4.1622 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 621.923729][T13145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 621.923740][T13145] Call Trace: [ 621.923747][T13145] [ 621.923754][T13145] dump_stack_lvl+0x189/0x250 [ 621.923781][T13145] ? __pfx_dump_stack_lvl+0x10/0x10 [ 621.923799][T13145] ? __pfx__printk+0x10/0x10 [ 621.923821][T13145] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 621.923841][T13145] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 621.923862][T13145] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 621.923885][T13145] warn_alloc+0x214/0x310 [ 621.923911][T13145] ? __pfx_warn_alloc+0x10/0x10 [ 621.923939][T13145] ? __get_vm_area_node+0x28f/0x300 [ 621.923958][T13145] ? hash_netport_create+0x358/0xfe0 [ 621.923987][T13145] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 621.924004][T13145] ? do_syscall_64+0xfa/0x3b0 [ 621.924054][T13145] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 621.924078][T13145] ? rcu_is_watching+0x15/0xb0 [ 621.924097][T13145] ? hash_netport_create+0x358/0xfe0 [ 621.924119][T13145] ? hash_netport_create+0x358/0xfe0 [ 621.924140][T13145] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 621.924157][T13145] ? hash_netport_create+0x358/0xfe0 [ 621.924181][T13145] ? hash_netport_create+0x2fe/0xfe0 [ 621.924208][T13145] hash_netport_create+0x358/0xfe0 [ 621.924238][T13145] ? __nla_parse+0x40/0x60 [ 621.924258][T13145] ? __pfx_hash_netport_create+0x10/0x10 [ 621.924284][T13145] ip_set_create+0xa94/0x1940 [ 621.924303][T13145] ? ip_set_create+0x4a2/0x1940 [ 621.924337][T13145] ? __pfx_ip_set_create+0x10/0x10 [ 621.924392][T13145] nfnetlink_rcv_msg+0xb4d/0x1130 [ 621.924425][T13145] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 621.924463][T13145] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 621.924479][T13145] ? kasan_save_free_info+0x46/0x50 [ 621.924554][T13145] netlink_rcv_skb+0x205/0x470 [ 621.924577][T13145] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 621.924597][T13145] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 621.924639][T13145] ? bpf_lsm_capable+0x9/0x20 [ 621.924662][T13145] ? security_capable+0x7e/0x2e0 [ 621.924694][T13145] nfnetlink_rcv+0x26a/0x2520 [ 621.924719][T13145] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 621.924745][T13145] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 621.924768][T13145] ? __dev_queue_xmit+0x27e/0x3a70 [ 621.924790][T13145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.924824][T13145] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 621.924846][T13145] ? __pfx___dev_queue_xmit+0x10/0x10 [ 621.924885][T13145] ? ref_tracker_free+0x63a/0x7d0 [ 621.924906][T13145] ? __copy_skb_header+0xa7/0x550 [ 621.924928][T13145] ? __pfx_ref_tracker_free+0x10/0x10 [ 621.924973][T13145] ? skb_clone+0x246/0x3a0 [ 621.924999][T13145] ? __netlink_deliver_tap+0x807/0x850 [ 621.925026][T13145] ? netlink_deliver_tap+0x2e/0x1b0 [ 621.925060][T13145] ? netlink_deliver_tap+0x2e/0x1b0 [ 621.925084][T13145] ? netlink_deliver_tap+0x2e/0x1b0 [ 621.925117][T13145] netlink_unicast+0x75c/0x8e0 [ 621.925159][T13145] netlink_sendmsg+0x805/0xb30 [ 621.925202][T13145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 621.925237][T13145] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 621.925256][T13145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 621.925283][T13145] __sock_sendmsg+0x21c/0x270 [ 621.925311][T13145] ____sys_sendmsg+0x505/0x830 [ 621.925349][T13145] ? __pfx_____sys_sendmsg+0x10/0x10 [ 621.925391][T13145] ? import_iovec+0x74/0xa0 [ 621.925432][T13145] ___sys_sendmsg+0x21f/0x2a0 [ 621.925468][T13145] ? __pfx____sys_sendmsg+0x10/0x10 [ 621.925545][T13145] ? __fget_files+0x2a/0x420 [ 621.925568][T13145] ? __fget_files+0x3a0/0x420 [ 621.925604][T13145] __x64_sys_sendmsg+0x19b/0x260 [ 621.925638][T13145] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 621.925691][T13145] ? do_syscall_64+0xbe/0x3b0 [ 621.925720][T13145] do_syscall_64+0xfa/0x3b0 [ 621.925742][T13145] ? lockdep_hardirqs_on+0x9c/0x150 [ 621.925764][T13145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.925786][T13145] ? clear_bhb_loop+0x60/0xb0 [ 621.925812][T13145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.925832][T13145] RIP: 0033:0x7f8e84d8ebe9 [ 621.925852][T13145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 621.925870][T13145] RSP: 002b:00007f8e85cd2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 621.925893][T13145] RAX: ffffffffffffffda RBX: 00007f8e84fb5fa0 RCX: 00007f8e84d8ebe9 [ 621.925909][T13145] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 621.925922][T13145] RBP: 00007f8e84e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 621.925935][T13145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 621.925946][T13145] R13: 00007f8e84fb6038 R14: 00007f8e84fb5fa0 R15: 00007fffbf179aa8 [ 621.925982][T13145] [ 622.393101][T13145] Mem-Info: [ 622.396067][ T5839] Bluetooth: hci0: command tx timeout [ 622.396879][T13145] active_anon:1033 inactive_anon:10319 isolated_anon:0 [ 622.396879][T13145] active_file:19778 inactive_file:37481 isolated_file:0 [ 622.396879][T13145] unevictable:768 dirty:110 writeback:0 [ 622.396879][T13145] slab_reclaimable:10955 slab_unreclaimable:105001 [ 622.396879][T13145] mapped:35110 shmem:7105 pagetables:1251 [ 622.396879][T13145] sec_pagetables:0 bounce:0 [ 622.396879][T13145] kernel_misc_reclaimable:0 [ 622.396879][T13145] free:1297114 free_pcp:12707 free_cma:0 [ 622.447861][T13145] Node 0 active_anon:4132kB inactive_anon:42176kB active_file:78764kB inactive_file:149924kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:141384kB dirty:424kB writeback:0kB shmem:27884kB shmem_thp:4096kB shmem_pmdmapped:2048kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11844kB pagetables:4880kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 622.482229][T13145] Node 1 active_anon:0kB inactive_anon:0kB active_file:348kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:56kB dirty:16kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 622.515293][T13145] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 622.535388][ T5920] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 622.544291][T13145] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 622.557755][T13145] Node 0 DMA32 free:1273080kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4128kB inactive_anon:48332kB active_file:76992kB inactive_file:149856kB unevictable:1536kB writepending:420kB present:3129332kB managed:2560996kB mlocked:0kB bounce:0kB free_pcp:26852kB local_pcp:12604kB free_cma:0kB [ 622.590466][T13145] lowmem_reserve[]: 0 0 1 1 1 [ 622.595308][T13145] Node 0 Normal free:8kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1772kB inactive_file:68kB unevictable:0kB writepending:4kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 622.625560][T13145] lowmem_reserve[]: 0 0 0 0 0 [ 622.630977][T13145] Node 1 Normal free:3900008kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:348kB inactive_file:0kB unevictable:1536kB writepending:16kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:16416kB local_pcp:9344kB free_cma:0kB [ 622.662579][T13145] lowmem_reserve[]: 0 0 0 0 0 [ 622.667399][T13145] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 622.680190][T13145] Node 0 DMA32: 70*4kB (UME) 60*8kB (UME) 497*16kB (UME) 431*32kB (UME) 119*64kB (UME) 110*128kB (UM) 84*256kB (UME) 38*512kB (UM) 44*1024kB (UME) 10*2048kB (UME) 274*4096kB (UM) = 1273000kB [ 622.700539][T13145] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 622.712647][T13145] Node 1 Normal: 200*4kB (UME) 49*8kB (UE) 42*16kB (UE) 281*32kB (UME) 104*64kB (UE) 24*128kB (UME) 4*256kB (UM) 3*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 945*4096kB (M) = 3900008kB [ 622.730865][T13145] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 622.740574][T13145] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 622.749949][T13145] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 622.759576][T13145] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 622.768946][T13145] 67665 total pagecache pages [ 622.773652][T13145] 4 pages in swap cache [ 622.777869][T13145] Free swap = 122948kB [ 622.782060][T13145] Total swap = 124996kB [ 622.786371][T13145] 2097051 pages RAM [ 622.790204][T13145] 0 pages HighMem/MovableOnly [ 622.794909][T13145] 424695 pages reserved [ 622.799140][T13145] 0 pages cma reserved [ 622.935221][ T1208] usb 5-1: USB disconnect, device number 74 [ 623.072143][ T5920] usb 4-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 623.105589][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.202222][ T5920] usb 4-1: config 0 descriptor?? [ 623.223428][T13129] chnl_net:caif_netlink_parms(): no params data found [ 623.255097][ T5920] pwc: Philips SPC 900NC USB webcam detected. [ 623.551804][T13156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.606332][T13156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.725780][ T8105] bridge_slave_1: left allmulticast mode [ 623.731572][ T8105] bridge_slave_1: left promiscuous mode [ 623.792871][ T8105] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.802055][ T5920] pwc: Failed to set LED on/off time (-71) [ 623.836919][ T8105] bridge_slave_0: left allmulticast mode [ 623.838595][ T5920] pwc: send_video_command error -71 [ 623.842625][ T8105] bridge_slave_0: left promiscuous mode [ 623.842924][ T8105] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.878990][ T5920] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 623.904134][ T5920] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 623.951453][ T5920] usb 4-1: USB disconnect, device number 75 [ 624.460598][ T5839] Bluetooth: hci0: command tx timeout [ 624.540670][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.555994][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.578051][T13193] Option ' ' to dns_resolver key: bad/missing value [ 626.580580][ T5839] Bluetooth: hci0: command tx timeout [ 626.830536][T13201] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 506 [ 627.461218][T13204] NILFS (nullb0): couldn't find nilfs on the device [ 628.746110][ T5839] Bluetooth: hci0: command tx timeout [ 628.766283][ T8105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 628.789237][ T8105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 628.803016][ T8105] bond0 (unregistering): Released all slaves [ 628.841176][ T8105] bond1 (unregistering): Released all slaves [ 629.018301][T13201] batadv0: entered allmulticast mode [ 629.199839][ T8105] tipc: Left network mode [ 629.643947][ T30] audit: type=1326 audit(1754875537.987:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13229 comm="syz.5.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc68dd8ebe9 code=0x7ffc0000 [ 629.820419][ T30] audit: type=1326 audit(1754875538.007:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13229 comm="syz.5.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc68dd8ebe9 code=0x7ffc0000 [ 630.406358][ T30] audit: type=1326 audit(1754875538.037:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13229 comm="syz.5.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc68dd8ebe9 code=0x7ffc0000 [ 630.440176][T13129] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.465785][T13129] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.483662][T13129] bridge_slave_0: entered allmulticast mode [ 630.517321][ T30] audit: type=1326 audit(1754875538.037:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13229 comm="syz.5.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc68dd8ebe9 code=0x7ffc0000 [ 630.561375][T13129] bridge_slave_0: entered promiscuous mode [ 630.684571][ T30] audit: type=1326 audit(1754875538.037:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13229 comm="syz.5.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc68dd8ebe9 code=0x7ffc0000 [ 630.719932][T13129] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.751755][T13129] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.761804][T13129] bridge_slave_1: entered allmulticast mode [ 630.796499][ T30] audit: type=1326 audit(1754875538.037:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13229 comm="syz.5.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc68dd8ebe9 code=0x7ffc0000 [ 630.805633][T13129] bridge_slave_1: entered promiscuous mode [ 630.840717][ T30] audit: type=1326 audit(1754875538.037:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13229 comm="syz.5.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc68dd8ebe9 code=0x7ffc0000 [ 630.940323][T13252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1643'. [ 630.996443][ T5957] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 631.036299][ T30] audit: type=1326 audit(1754875538.037:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13229 comm="syz.5.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc68dd8ebe9 code=0x7ffc0000 [ 631.231314][ T30] audit: type=1326 audit(1754875538.037:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13229 comm="syz.5.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7fc68dd8ebe9 code=0x7ffc0000 [ 631.259800][ T5957] usb 3-1: Using ep0 maxpacket: 32 [ 631.290917][ T5957] usb 3-1: config 0 has an invalid interface number: 151 but max is 0 [ 631.318878][ T5957] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 631.373008][ T5957] usb 3-1: config 0 has no interface number 0 [ 631.389630][T13129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 631.408108][ T30] audit: type=1326 audit(1754875538.037:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13229 comm="syz.5.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc68dd8ebe9 code=0x7ffc0000 [ 631.448449][T13129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 631.459550][ T5957] usb 3-1: config 0 interface 151 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 528 [ 631.532202][ T5957] usb 3-1: config 0 interface 151 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 631.555114][ T8105] hsr_slave_0: left promiscuous mode [ 631.571236][ T5957] usb 3-1: config 0 interface 151 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 631.628401][ T8105] hsr_slave_1: left promiscuous mode [ 631.691911][ T8105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 631.710005][ T5957] usb 3-1: New USB device found, idVendor=0403, idProduct=e548, bcdDevice=ad.d6 [ 631.713872][ T8105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 631.737053][ T5957] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.745387][ T5957] usb 3-1: Product: syz [ 631.768156][ T5957] usb 3-1: Manufacturer: syz [ 631.774966][ T5957] usb 3-1: SerialNumber: syz [ 631.803104][ T8105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 631.829106][ T8105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 631.844022][ T5957] usb 3-1: config 0 descriptor?? [ 631.887284][T13248] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 631.922456][ T5957] ftdi_sio 3-1:0.151: FTDI USB Serial Device converter detected [ 632.163082][ T8105] veth1_macvtap: left promiscuous mode [ 632.175327][ T8105] veth0_macvtap: left promiscuous mode [ 632.183665][ T5957] ftdi_sio ttyUSB0: unknown device type: 0xadd6 [ 632.184016][ T8105] veth1_vlan: left promiscuous mode [ 632.191491][T13248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.522188][T13248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.532687][ T8105] veth0_vlan: left promiscuous mode [ 632.620722][T13248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.719440][T13248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.828820][ T1208] usb 3-1: USB disconnect, device number 88 [ 632.840270][ T1208] ftdi_sio 3-1:0.151: device disconnected [ 633.511611][T13274] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1646'. [ 633.545945][T13274] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 633.558215][T13274] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 634.435484][T13285] overlayfs: failed to resolve 'smackfsdef=&:': -2 [ 635.833751][ T8105] team0 (unregistering): Port device team_slave_1 removed [ 635.919711][ T8105] team0 (unregistering): Port device team_slave_0 removed [ 636.010935][T13291] input: syz0 as /devices/virtual/input/input38 [ 636.027825][T13291] fuse: Unknown parameter 'dont_hash' [ 636.683835][T13129] team0: Port device team_slave_0 added [ 636.733791][T13129] team0: Port device team_slave_1 added [ 636.968389][T13300] usb usb1: check_ctrlrecip: process 13300 (syz.3.1654) requesting ep 01 but needs 81 [ 637.504818][T13129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 637.516180][T13305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1655'. [ 637.541585][T13129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 637.580237][T13129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 637.601110][T13305] lo speed is unknown, defaulting to 1000 [ 638.548883][T13317] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 638.561155][T13129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 638.681821][T13129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 638.847609][T13129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 639.161449][T13129] hsr_slave_0: entered promiscuous mode [ 639.179321][T13129] hsr_slave_1: entered promiscuous mode [ 639.307370][ T5921] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 639.362468][T13335] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1662'. [ 639.469406][ T5921] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 639.526267][ T5921] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 639.664480][ T5921] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 639.806626][T13342] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1663'. [ 640.111238][ T5921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.193438][T13330] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 640.233466][ T5921] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 640.616635][T13330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.656023][T13330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.750348][ T5920] usb 6-1: USB disconnect, device number 37 [ 641.569968][T13129] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 641.840220][T13381] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 642.305992][ T6641] Bluetooth: hci4: Frame reassembly failed (-84) [ 642.422035][T13129] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 642.491511][T13129] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 642.576392][T13129] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 642.607649][ T5957] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 643.005665][T13394] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 643.499803][T13382] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 643.658079][ T5957] usb 5-1: Using ep0 maxpacket: 16 [ 643.681346][ T5957] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 643.722979][ T5957] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 643.762513][ T5957] usb 5-1: New USB device found, idVendor=0582, idProduct=87d1, bcdDevice=f8.e7 [ 643.808890][ T5957] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.826037][T13129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 643.832984][ T5957] usb 5-1: Product: syz [ 643.837261][ T5957] usb 5-1: Manufacturer: syz [ 643.845816][ T5957] usb 5-1: SerialNumber: syz [ 643.872027][ T5957] usb 5-1: config 0 descriptor?? [ 643.889934][T13129] 8021q: adding VLAN 0 to HW filter on device team0 [ 643.899388][ T5839] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 643.923216][ T6391] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.930432][ T6391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 644.034724][ T6391] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.041977][ T6391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 645.559981][T13129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 645.642842][ T5957] usb 5-1: USB disconnect, device number 75 [ 645.711626][ T5851] udevd[5851]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 645.984606][T13417] No such timeout policy "syz1" [ 646.207459][T13415] tipc: Enabled bearer , priority 0 [ 646.381626][T13415] syzkaller0: entered promiscuous mode [ 646.387180][T13415] syzkaller0: entered allmulticast mode [ 646.393671][T13415] tipc: Resetting bearer [ 646.784508][T13424] bridge0: port 1(gretap0) entered blocking state [ 646.931877][T13424] bridge0: port 1(gretap0) entered disabled state [ 646.952455][T13427] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1681'. [ 646.962271][T13424] gretap0: entered allmulticast mode [ 646.978068][T13424] gretap0: entered promiscuous mode [ 647.005987][T13427] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 647.035610][T13403] tipc: Resetting bearer [ 647.088122][T12944] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 647.270299][T12944] usb 5-1: config index 0 descriptor too short (expected 1818, got 36) [ 647.272402][ T1208] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 647.298197][T12944] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 647.317310][T12944] usb 5-1: can't read configurations, error -22 [ 647.321473][ T5845] tipc: Node number set to 1755383913 [ 647.449429][ T1208] usb 6-1: Using ep0 maxpacket: 32 [ 647.466429][ T1208] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 647.468471][T12944] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 647.477313][ T1208] usb 6-1: too many endpoints for config 0 interface 0 altsetting 11: 36, using maximum allowed: 30 [ 647.496604][ T1208] usb 6-1: config 0 interface 0 altsetting 11 bulk endpoint 0x6 has invalid maxpacket 255 [ 647.531026][ T1208] usb 6-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 36 [ 647.562518][ T1208] usb 6-1: config 0 interface 0 has no altsetting 0 [ 647.574428][ T1208] usb 6-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 647.584177][ T1208] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.593020][ T1208] usb 6-1: Product: syz [ 647.607674][ T1208] usb 6-1: Manufacturer: syz [ 647.613552][ T1208] usb 6-1: SerialNumber: syz [ 647.631612][ T1208] usb 6-1: config 0 descriptor?? [ 647.638382][T13427] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 647.651059][T12944] usb 5-1: config index 0 descriptor too short (expected 1818, got 36) [ 647.662184][T12944] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 647.686486][T12944] usb 5-1: can't read configurations, error -22 [ 647.693428][T12944] usb usb5-port1: attempt power cycle [ 647.861414][ T1208] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 647.961384][ T1208] usb 6-1: USB disconnect, device number 38 [ 648.074863][T12944] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 648.141747][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 648.163580][T12944] usb 5-1: config index 0 descriptor too short (expected 1818, got 36) [ 648.172951][T12944] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 648.186813][T12944] usb 5-1: can't read configurations, error -22 [ 648.320056][T12944] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 648.342289][T12944] usb 5-1: config index 0 descriptor too short (expected 1818, got 36) [ 648.350859][T12944] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 648.359442][T12944] usb 5-1: can't read configurations, error -22 [ 648.400105][T12944] usb usb5-port1: unable to enumerate USB device [ 649.044345][T13431] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1682'. [ 650.406409][T13403] tipc: Disabling bearer [ 650.419498][T13428] gretap0: left allmulticast mode [ 650.424676][T13428] gretap0: left promiscuous mode [ 650.434093][T13428] bridge0: port 1(gretap0) entered disabled state [ 650.485420][T13430] lo speed is unknown, defaulting to 1000 [ 650.898752][ T1208] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 651.763291][T13449] tipc: Enabling of bearer rejected, failed to enable media [ 651.871157][ T1208] usb 5-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=43.6f [ 651.890108][ T1208] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.898186][ T1208] usb 5-1: Product: syz [ 651.929453][ T1208] usb 5-1: Manufacturer: syz [ 651.944617][ T1208] usb 5-1: SerialNumber: syz [ 651.961099][ T1208] usb 5-1: config 0 descriptor?? [ 651.975416][ T1208] gspca_main: touptek-2.14.0 probing 0547:6801 [ 652.475440][T13129] veth0_vlan: entered promiscuous mode [ 652.520403][T13129] veth1_vlan: entered promiscuous mode [ 652.658389][T13129] veth0_macvtap: entered promiscuous mode [ 652.703997][T13129] veth1_macvtap: entered promiscuous mode [ 652.772593][T13129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 652.940387][T13129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 653.010752][T13129] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.042653][T13129] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.198767][T13129] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.232824][T13129] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.475686][T13475] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 654.543561][ T1208] IPVS: starting estimator thread 0... [ 654.659497][T13477] IPVS: using max 24 ests per chain, 57600 per kthread [ 654.675870][ T6001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.739082][ T6001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.859936][ T6634] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.867832][ T6634] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.114802][ T5921] usb 5-1: USB disconnect, device number 80 [ 655.126909][T13479] lo speed is unknown, defaulting to 1000 [ 655.328900][T13482] lo speed is unknown, defaulting to 1000 [ 655.561314][ T1208] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 655.820906][ T1208] usb 4-1: Using ep0 maxpacket: 8 [ 655.925675][ T1208] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 655.974251][ T1208] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 655.994268][ T1208] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 656.015291][ T1208] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 656.031177][ T1208] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 656.042296][ T1208] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.112246][T13501] netlink: 80 bytes leftover after parsing attributes in process `syz.7.1613'. [ 656.278969][ T1208] usb 4-1: GET_CAPABILITIES returned 0 [ 656.284827][ T1208] usbtmc 4-1:16.0: can't read capabilities [ 658.850081][ T1208] usb 4-1: USB disconnect, device number 76 [ 659.184187][T13529] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 659.997246][T13546] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 660.006046][T13543] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 660.109394][T13546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.129702][T13546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.219571][T13549] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 660.391698][ T1208] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 660.919891][T12944] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 661.109995][ T1208] usb 3-1: device descriptor read/64, error -71 [ 661.202380][T12944] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 661.212438][T12944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.233210][T13556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1709'. [ 661.243559][T12944] usb 6-1: config 0 descriptor?? [ 661.293760][T13556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1709'. [ 661.371515][ T1208] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 661.399842][ T5957] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 661.514561][ T1208] usb 3-1: device descriptor read/64, error -71 [ 661.560179][ T5957] usb 5-1: Using ep0 maxpacket: 32 [ 661.571504][ T5957] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 661.584211][ T5957] usb 5-1: config 0 has no interface number 0 [ 661.604949][ T5957] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 661.636967][ T5957] usb 5-1: config 0 interface 85 has no altsetting 0 [ 661.650314][ T1208] usb usb3-port1: attempt power cycle [ 661.872261][T12944] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 661.883134][ T5957] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 661.892504][T12944] [drm:udl_init] *ERROR* Selecting channel failed [ 661.900191][ T5957] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.908507][ T5957] usb 5-1: Product: syz [ 661.919165][ T5957] usb 5-1: Manufacturer: syz [ 661.928521][T12944] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 661.935675][ T5957] usb 5-1: SerialNumber: syz [ 662.096871][ T5957] usb 5-1: config 0 descriptor?? [ 662.133740][T12944] [drm] Initialized udl on minor 2 [ 662.374461][T12944] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 662.574723][T12944] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 662.649126][ T5949] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 662.672467][T12944] usb 6-1: USB disconnect, device number 39 [ 662.691551][ T5949] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 662.844455][ T5921] hid-generic 0002:0D17:4D71.001C: unknown main item tag 0x0 [ 662.872775][ T5921] hid-generic 0002:0D17:4D71.001C: unknown main item tag 0x0 [ 662.895005][T13554] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.924116][ T5957] appletouch 5-1:0.85: Geyser mode initialized. [ 662.941605][ T5921] hid-generic 0002:0D17:4D71.001C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 662.963601][ T5957] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input39 [ 663.378761][T13586] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 663.752153][T13554] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.795904][T13585] fido_id[13585]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 664.114825][T13554] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.465935][T13554] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.536083][T13607] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 665.590184][ T5957] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 665.680047][T13554] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.705719][T13554] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.765539][T13554] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.766093][ T5957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 665.804289][T13554] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.813091][ T5957] usb 4-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 665.832464][ T5957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.861658][ T5957] usb 4-1: config 0 descriptor?? [ 665.885249][ T5957] smsusb:smsusb_probe: board id=8, interface number 0 [ 665.895273][ T5949] usb 5-1: USB disconnect, device number 81 [ 665.940650][ T5957] smsusb:smsusb_probe: Device initialized with return code -19 [ 665.972742][ T5949] appletouch 5-1:0.85: input: appletouch disconnected [ 666.085271][T13616] vcan0: entered promiscuous mode [ 666.108607][T13616] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 666.167011][ T5957] usb 4-1: USB disconnect, device number 77 [ 668.735773][T13645] loop2: detected capacity change from 0 to 7 [ 668.744044][T13645] Dev loop2: unable to read RDB block 7 [ 668.749647][T13645] loop2: unable to read partition table [ 668.755539][T13645] loop2: partition table beyond EOD, truncated [ 668.761757][T13645] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 669.507507][ T5851] udevd[5851]: symlink '../../loop2' '/dev/disk/by-diskseq/104.tmp-b7:2' failed: Read-only file system [ 669.660044][ T5851] udevd[5851]: symlink '../../loop2' '/dev/disk/by-diskseq/104.tmp-b7:2' failed: Read-only file system [ 669.827332][ T5851] udevd[5851]: symlink '../../loop2' '/dev/disk/by-diskseq/104.tmp-b7:2' failed: Read-only file system [ 670.067685][T13665] xt_hashlimit: max too large, truncated to 1048576 [ 670.075145][T13665] No such timeout policy "syz1" [ 670.150978][ T24] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 670.322382][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 670.341022][ T24] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 670.360915][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.395293][ T24] usb 3-1: config 0 descriptor?? [ 670.612243][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 670.664454][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 670.705417][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 670.720838][ T24] usb 3-1: media controller created [ 670.789985][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 670.949898][ T24] az6027: usb out operation failed. (-71) [ 670.961741][ T24] az6027: usb out operation failed. (-71) [ 670.975207][ T24] stb0899_attach: Driver disabled by Kconfig [ 670.987884][ T24] az6027: no front-end attached [ 670.987884][ T24] [ 671.011176][ T24] az6027: usb out operation failed. (-71) [ 671.022793][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 671.033265][T13673] netlink: 'syz.3.1738': attribute type 39 has an invalid length. [ 671.050576][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input40 [ 671.085701][ T24] dvb-usb: schedule remote query interval to 400 msecs. [ 671.104132][T13674] netlink: 'syz.3.1738': attribute type 39 has an invalid length. [ 671.112739][ T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 671.141744][ T24] usb 3-1: USB disconnect, device number 92 [ 671.286034][ T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 671.497899][ T5851] udevd[5851]: symlink '../../loop2' '/dev/disk/by-diskseq/105.tmp-b7:2' failed: Read-only file system [ 671.840047][ T24] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 671.861157][ T5957] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 672.002232][ T5957] usb 4-1: device descriptor read/64, error -71 [ 672.023272][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 672.051889][ T24] usb 3-1: config 0 interface 0 has no altsetting 1 [ 672.072884][ T24] usb 3-1: New USB device found, idVendor=0499, idProduct=5ae2, bcdDevice= 9.0f [ 672.082402][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 672.101149][ T24] usb 3-1: Product: syz [ 672.105581][ T24] usb 3-1: Manufacturer: syz [ 672.110198][ T24] usb 3-1: SerialNumber: syz [ 672.134287][ T24] usb 3-1: config 0 descriptor?? [ 672.240916][ T5957] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 672.391093][ T5957] usb 4-1: device descriptor read/64, error -71 [ 672.501612][ T5957] usb usb4-port1: attempt power cycle [ 672.841078][ T5957] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 672.891214][ T5957] usb 4-1: device descriptor read/8, error -71 [ 673.000060][ T24] usb 3-1: USB disconnect, device number 93 [ 673.080869][ T5851] udevd[5851]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 673.131250][ T5957] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 673.152865][ T5957] usb 4-1: device descriptor read/8, error -71 [ 673.261794][ T5957] usb usb4-port1: unable to enumerate USB device [ 673.587226][ T5851] udevd[5851]: symlink '../../loop2' '/dev/disk/by-diskseq/105.tmp-b7:2' failed: Read-only file system [ 674.590914][T13689] syzkaller0: entered promiscuous mode [ 674.596680][T13689] syzkaller0: entered allmulticast mode [ 674.838077][T13699] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 674.846582][T13699] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 674.858937][T13699] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 674.866530][T13695] tmpfs: Unknown parameter 'audit' [ 674.872773][T13699] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 675.687674][T13707] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1747'. [ 675.749848][T13708] 9pnet_fd: p9_fd_create_tcp (13708): problem connecting socket to 127.0.0.1 [ 675.939805][T13710] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 678.231082][ T5851] udevd[5851]: symlink '../../loop2' '/dev/disk/by-diskseq/105.tmp-b7:2' failed: Read-only file system [ 678.358401][T13724] netlink: 'syz.2.1752': attribute type 29 has an invalid length. [ 678.403446][T13724] netlink: 'syz.2.1752': attribute type 29 has an invalid length. [ 678.508252][T13734] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 678.689358][T13736] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1755'. [ 678.730126][ T5851] udevd[5851]: symlink '../../loop2' '/dev/disk/by-diskseq/105.tmp-b7:2' failed: Read-only file system [ 678.765546][T13739] CIFS: Unable to determine destination address [ 678.910189][ T5851] udevd[5851]: symlink '../../loop2' '/dev/disk/by-diskseq/105.tmp-b7:2' failed: Read-only file system [ 679.309808][T13750] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1757'. [ 680.158433][ T6713] udevd[6713]: symlink '../../loop2' '/dev/disk/by-diskseq/105.tmp-b7:2' failed: Read-only file system [ 680.231831][ T5899] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 680.337753][T13768] overlayfs: failed to get inode (-116) [ 680.344283][T13768] overlayfs: failed to get inode (-116) [ 680.360179][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 680.360198][ T30] audit: type=1326 audit(1754875588.691:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13762 comm="syz.7.1761" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f272138ebe9 code=0x0 [ 680.562815][ T5899] usb 6-1: Using ep0 maxpacket: 16 [ 680.614110][ T5899] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 680.628154][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.655430][ T5899] usb 6-1: Product: syz [ 680.674893][ T5899] usb 6-1: Manufacturer: syz [ 680.685961][ T5899] usb 6-1: SerialNumber: syz [ 680.704355][ T5899] usb 6-1: config 0 descriptor?? [ 680.750698][ T5899] visor 6-1:0.0: Sony Clie 3.5 converter detected [ 680.842036][ T5921] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 680.922795][ T5899] usb 6-1: clie_3_5_startup: get config number failed: -71 [ 680.945353][ T5899] visor 6-1:0.0: probe with driver visor failed with error -71 [ 680.946360][ T5835] udevd[5835]: symlink '../../loop2' '/dev/disk/by-diskseq/105.tmp-b7:2' failed: Read-only file system [ 680.960470][ T5899] usb 6-1: USB disconnect, device number 40 [ 681.015194][ T5921] usb 8-1: too many configurations: 160, using maximum allowed: 8 [ 681.034217][ T5921] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 681.046355][ T5921] usb 8-1: can't read configurations, error -61 [ 681.051438][T13775] netlink: 292 bytes leftover after parsing attributes in process `syz.3.1766'. [ 681.134269][T13777] netlink: 292 bytes leftover after parsing attributes in process `syz.3.1766'. [ 681.256354][ T5921] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 681.420026][ T5921] usb 8-1: too many configurations: 160, using maximum allowed: 8 [ 681.423476][T13782] fuse: Unknown parameter 'wd<0x0000000000000008' [ 681.457280][ T5921] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 681.483106][ T5921] usb 8-1: can't read configurations, error -61 [ 681.509829][ T5921] usb usb8-port1: attempt power cycle [ 681.593753][T13782] lo speed is unknown, defaulting to 1000 [ 681.625048][ T6711] udevd[6711]: symlink '../../loop2' '/dev/disk/by-diskseq/105.tmp-b7:2' failed: Read-only file system [ 681.703551][T13787] netlink: 'syz.3.1768': attribute type 10 has an invalid length. [ 681.766224][T13787] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1768'. [ 681.885910][ T5921] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 681.953694][ T5921] usb 8-1: too many configurations: 160, using maximum allowed: 8 [ 682.052150][ T5921] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 682.090368][ T5921] usb 8-1: can't read configurations, error -61 [ 682.139293][ T5851] udevd[5851]: symlink '../../loop2' '/dev/disk/by-diskseq/105.tmp-b7:2' failed: Read-only file system [ 682.282280][ T5921] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 682.320830][ T5921] usb 8-1: too many configurations: 160, using maximum allowed: 8 [ 682.355357][ T5921] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 682.372703][ T5921] usb 8-1: can't read configurations, error -61 [ 682.401240][ T5921] usb usb8-port1: unable to enumerate USB device [ 685.994456][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.012552][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.762042][T13842] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.769412][T13842] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.781839][T13842] bridge0: entered allmulticast mode [ 686.842672][ T5957] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 686.875311][T13842] bridge_slave_1: left allmulticast mode [ 686.898263][T13842] bridge_slave_1: left promiscuous mode [ 686.929694][T13842] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.973839][T13842] bridge_slave_0: left allmulticast mode [ 686.986433][T13842] bridge_slave_0: left promiscuous mode [ 686.998403][T13842] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.133766][T13842] bond0: (slave bridge0): Releasing backup interface [ 687.194574][ T5957] usb 4-1: config 0 has an invalid interface number: 139 but max is 0 [ 687.203033][ T5957] usb 4-1: config 0 has no interface number 0 [ 687.209261][ T5957] usb 4-1: config 0 interface 139 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 687.226373][ T5957] usb 4-1: config 0 interface 139 altsetting 0 has an endpoint descriptor with address 0xBD, changing to 0x8D [ 687.238802][ T5957] usb 4-1: config 0 interface 139 altsetting 0 endpoint 0x8D has invalid maxpacket 14158, setting to 64 [ 687.302583][ T5957] usb 4-1: config 0 interface 139 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 687.325384][ T5957] usb 4-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=fd.d6 [ 687.343745][ T5957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.384165][ T5957] usb 4-1: Product: syz [ 687.399628][ T5957] usb 4-1: Manufacturer: syz [ 687.428308][ T5957] usb 4-1: SerialNumber: syz [ 687.509476][ T5957] usb 4-1: config 0 descriptor?? [ 687.547666][T13840] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 687.576418][T13840] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 687.868305][ T5957] mct_u232 4-1:0.139: MCT U232 converter detected [ 687.895378][ T6711] udevd[6711]: symlink '../../loop2' '/dev/disk/by-diskseq/105.tmp-b7:2' failed: Read-only file system [ 687.931712][ T5957] usb 4-1: MCT U232 converter now attached to ttyUSB0 [ 687.996104][ T5957] usb 4-1: USB disconnect, device number 82 [ 688.023777][ T5957] mct_u232 ttyUSB0: MCT U232 converter now disconnected from ttyUSB0 [ 688.066104][ T5957] mct_u232 4-1:0.139: device disconnected [ 688.253257][ T1208] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 688.321183][T13870] netlink: 'syz.4.1790': attribute type 39 has an invalid length. [ 688.355735][ T6711] udevd[6711]: symlink '../../loop2' '/dev/disk/by-diskseq/105.tmp-b7:2' failed: Read-only file system [ 688.445578][ T1208] usb 8-1: device descriptor read/64, error -71 [ 688.470496][T13863] tipc: Enabled bearer , priority 0 [ 688.721530][ T1208] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 688.827984][ T5851] udevd[5851]: symlink '../../loop2' '/dev/disk/by-diskseq/105.tmp-b7:2' failed: Read-only file system [ 688.873191][ T1208] usb 8-1: device descriptor read/64, error -71 [ 688.983436][ T1208] usb usb8-port1: attempt power cycle [ 689.126124][T13863] tipc: Disabling bearer [ 689.219903][T13882] 9pnet_fd: Insufficient options for proto=fd [ 690.133023][ T1208] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 690.158235][ T5851] udevd[5851]: symlink '../../loop2' '/dev/disk/by-diskseq/105.tmp-b7:2' failed: Read-only file system [ 690.203408][ T1208] usb 8-1: device descriptor read/8, error -71 [ 690.319568][T13896] binder: BINDER_SET_CONTEXT_MGR already set [ 690.326017][T13896] binder: 13892:13896 ioctl 4018620d 200000000040 returned -16 [ 691.113037][ T1208] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 691.260613][ T6711] udevd[6711]: symlink '../../loop2' '/dev/disk/by-diskseq/105.tmp-b7:2' failed: Read-only file system [ 691.354908][ T1208] usb 8-1: device not accepting address 9, error -71 [ 691.412589][ T1208] usb usb8-port1: unable to enumerate USB device [ 691.631889][ T5851] udevd[5851]: symlink '../../loop2' '/dev/disk/by-diskseq/105.tmp-b7:2' failed: Read-only file system [ 691.723158][ T1208] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 691.883208][ T1208] usb 8-1: Using ep0 maxpacket: 16 [ 691.914253][ T1208] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 691.963080][ T1208] usb 8-1: config 0 has no interface number 0 [ 691.969267][ T1208] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 692.023115][ T1208] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 692.079408][ T1208] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 692.127783][ T1208] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 692.189029][ T1208] usb 8-1: Product: syz [ 692.210397][ T1208] usb 8-1: SerialNumber: syz [ 692.265551][ T1208] usb 8-1: config 0 descriptor?? [ 692.299149][ T1208] cm109 8-1:0.8: invalid payload size 0, expected 4 [ 692.332903][ T1208] input: CM109 USB driver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.8/input/input41 [ 692.505498][ C0] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 692.506200][ T5957] usb 8-1: USB disconnect, device number 10 [ 692.512614][ C0] cm109 8-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 692.603957][ T5957] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 694.933759][ T5921] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 695.122116][ T5921] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 695.152313][ T5921] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 695.183160][ T5921] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 695.203018][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.244865][ T5921] usb 4-1: Product: syz [ 695.260937][ T5921] usb 4-1: Manufacturer: syz [ 695.275299][ T5921] usb 4-1: SerialNumber: syz [ 695.304439][ T5921] cdc_mbim 4-1:1.0: skipping garbage [ 695.419781][ T6711] udevd[6711]: symlink '../../loop2' '/dev/disk/by-diskseq/105.tmp-b7:2' failed: Read-only file system [ 695.542408][T13931] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 695.604523][T13949] ʆ\\M 6u: attempt to access beyond end of device [ 695.604523][T13949] nbd2: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 695.818907][T13949] program ʆ\\M 6u is using a deprecated SCSI ioctl, please convert it to SG_IO [ 695.965595][ T6711] udevd[6711]: symlink '../../loop2' '/dev/disk/by-diskseq/105.tmp-b7:2' failed: Read-only file system [ 696.215425][T13931] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 696.223112][ T5921] cdc_mbim 4-1:1.0: setting rx_max = 16384 [ 696.428103][T13931] netlink: 'syz.3.1806': attribute type 1 has an invalid length. [ 696.739047][ T5921] cdc_mbim 4-1:1.0: setting tx_max = 16384 [ 696.820111][ T5921] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 696.896479][ T5921] wwan wwan0: port wwan0mbim0 attached [ 696.957794][ T6711] udevd[6711]: symlink '../../loop2' '/dev/disk/by-diskseq/105.tmp-b7:2' failed: Read-only file system [ 696.995380][ T5921] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 8a:46:66:90:39:2c [ 697.017942][T13970] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1817'. [ 697.040037][ T5921] usb 4-1: USB disconnect, device number 83 [ 697.071719][T13970] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1817'. [ 697.109067][ T5921] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 697.267729][ T5921] wwan wwan0: port wwan0mbim0 disconnected [ 697.771762][ T5851] udevd[5851]: symlink '../../loop2' '/dev/disk/by-diskseq/105.tmp-b7:2' failed: Read-only file system [ 697.932347][T13996] xt_socket: unknown flags 0xd0 [ 698.155240][ T5949] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 698.301284][ T5851] udevd[5851]: symlink '../../loop2' '/dev/disk/by-diskseq/105.tmp-b7:2' failed: Read-only file system [ 698.331892][T13998] loop9: detected capacity change from 0 to 7 [ 698.356223][ T5949] usb 8-1: Using ep0 maxpacket: 32 [ 698.413799][ T5949] usb 8-1: config 0 has an invalid interface number: 92 but max is 0 [ 698.460413][ T5851] Buffer I/O error on dev loop9, logical block 0, async page read [ 698.500849][ T5949] usb 8-1: config 0 has no interface number 0 [ 698.527269][ T5851] Buffer I/O error on dev loop9, logical block 0, async page read [ 698.564537][ T5949] usb 8-1: config 0 interface 92 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 698.602842][ T5851] Buffer I/O error on dev loop9, logical block 0, async page read [ 698.660306][ T5949] usb 8-1: config 0 interface 92 has no altsetting 0 [ 698.686807][ T5851] Buffer I/O error on dev loop9, logical block 0, async page read [ 698.774070][ T5851] Buffer I/O error on dev loop9, logical block 0, async page read [ 698.810065][ T5949] usb 8-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=a8.eb [ 698.839579][ T5851] Buffer I/O error on dev loop9, logical block 0, async page read [ 698.882973][ T5949] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.913710][ T5851] Buffer I/O error on dev loop9, logical block 0, async page read [ 698.939023][ T5949] usb 8-1: Product: syz [ 698.960867][ T5949] usb 8-1: Manufacturer: syz [ 698.972681][ T5851] ldm_validate_partition_table(): Disk read failed. [ 698.990530][ T5949] usb 8-1: SerialNumber: syz [ 698.999228][ T5851] Buffer I/O error on dev loop9, logical block 0, async page read [ 699.054798][ T5949] usb 8-1: config 0 descriptor?? [ 699.065964][ T5851] Buffer I/O error on dev loop9, logical block 0, async page read [ 699.088882][T13995] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 699.089169][ T5851] Buffer I/O error on dev loop9, logical block 0, async page read [ 699.114448][ T5851] Dev loop9: unable to read RDB block 0 [ 699.121266][ T5851] loop9: unable to read partition table [ 699.132649][ T5851] loop9: partition table beyond EOD, truncated [ 699.175187][ T5851] udevd[5851]: symlink '../../loop9' '/dev/disk/by-diskseq/106.tmp-b7:9' failed: Read-only file system [ 699.348329][ T5851] udevd[5851]: symlink '../../loop9' '/dev/disk/by-diskseq/106.tmp-b7:9' failed: Read-only file system [ 699.394944][ T5949] redrat3 8-1:0.92: Couldn't find all endpoints [ 699.420158][ T6713] udevd[6713]: symlink '../../loop2' '/dev/disk/by-diskseq/105.tmp-b7:2' failed: Read-only file system [ 699.423166][ T5949] usb 8-1: USB disconnect, device number 11 [ 700.629318][ T6713] udevd[6713]: symlink '../../loop2' '/dev/disk/by-diskseq/105.tmp-b7:2' failed: Read-only file system [ 700.646050][ T30] audit: type=1326 audit(1754875608.959:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14015 comm="syz.3.1832" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fababb8ebe9 code=0x0 [ 700.656085][ T5851] udevd[5851]: symlink '../../loop9' '/dev/disk/by-diskseq/106.tmp-b7:9' failed: Read-only file system [ 701.686638][T14045] No source specified [ 701.864368][T12944] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 701.894275][ T5899] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 702.044738][T14047] syzkaller1: entered promiscuous mode [ 702.051276][T12944] usb 5-1: Using ep0 maxpacket: 16 [ 702.057847][T14047] syzkaller1: entered allmulticast mode [ 702.069442][T12944] usb 5-1: config 0 has an invalid interface number: 48 but max is 0 [ 702.071257][ T5899] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 702.088608][T12944] usb 5-1: config 0 has no interface number 0 [ 702.104269][T12944] usb 5-1: config 0 interface 48 has no altsetting 0 [ 702.112064][ T5899] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 702.124530][T12944] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 702.137771][ T5899] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 702.147741][T12944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.147769][T12944] usb 5-1: Product: syz [ 702.147784][T12944] usb 5-1: Manufacturer: syz [ 702.147800][T12944] usb 5-1: SerialNumber: syz [ 702.158828][T12944] usb 5-1: config 0 descriptor?? [ 702.192486][ T5899] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 702.218159][ T5899] usb 6-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 702.246890][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.260735][ T5899] usb 6-1: Product: syz [ 702.271828][ T5899] usb 6-1: Manufacturer: syz [ 702.284301][ T5899] usb 6-1: SerialNumber: syz [ 702.306206][ T5899] usb 6-1: config 0 descriptor?? [ 702.427780][ T5899] usb 5-1: USB disconnect, device number 82 [ 702.658645][T12944] usb 6-1: USB disconnect, device number 41 [ 704.406600][T14066] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1845'. [ 704.550905][T14070] vimc link validate: Scaler:src:4096x16 (0x33424752, 5, 0, 4, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 704.601205][ T30] audit: type=1326 audit(1754875612.939:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14061 comm="syz.7.1844" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f272138ebe9 code=0x0 [ 705.404606][ T5921] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 705.544746][ T5921] usb 5-1: device descriptor read/64, error -71 [ 705.673245][ T5851] udevd[5851]: symlink '../../loop2' '/dev/disk/by-diskseq/105.tmp-b7:2' failed: Read-only file system [ 705.804867][ T5921] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 705.975179][ T5957] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 706.186576][ T5957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 706.266207][ T5957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 706.363519][ T5957] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 706.450297][ T5957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.646618][ T5957] usb 4-1: config 0 descriptor?? [ 706.814820][ T5921] usb 5-1: device descriptor read/64, error -71 [ 706.951829][ T5921] usb usb5-port1: attempt power cycle [ 707.303282][ T5957] isku 0003:1E7D:319C.001D: unknown global tag 0xc [ 707.444126][ T5957] isku 0003:1E7D:319C.001D: item 0 0 1 12 parsing failed [ 707.633150][ T5851] udevd[5851]: symlink '../../loop2' '/dev/disk/by-diskseq/105.tmp-b7:2' failed: Read-only file system [ 707.642815][ T5957] isku 0003:1E7D:319C.001D: parse failed [ 707.656048][ T5957] isku 0003:1E7D:319C.001D: probe with driver isku failed with error -22 [ 708.609624][ T6711] udevd[6711]: symlink '../../loop2' '/dev/disk/by-diskseq/105.tmp-b7:2' failed: Read-only file system [ 708.643564][ T5957] usb 4-1: USB disconnect, device number 84 [ 709.009180][ T5851] udevd[5851]: symlink '../../loop2' '/dev/disk/by-diskseq/105.tmp-b7:2' failed: Read-only file system [ 709.121385][ T5957] usb 4-1: new low-speed USB device number 85 using dummy_hcd [ 709.303151][T14124] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1858'. [ 709.338810][ T5957] usb 4-1: string descriptor 0 read error: -22 [ 709.351874][ T5957] usb 4-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 709.369667][ T5957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.383525][ T5957] usb 4-1: config 0 descriptor?? [ 709.424299][ T5957] usbtest 4-1:0.0: FX2 device [ 709.445478][ T5957] usbtest 4-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 709.454334][T14127] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 709.630362][ T5957] usb 4-1: USB disconnect, device number 85 [ 709.734180][T14134] netlink: 'syz.7.1861': attribute type 10 has an invalid length. [ 709.771066][T14134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 709.789568][T14134] team0: Port device bond0 added [ 709.878156][T14135] binder: 14133:14135 ioctl c0306201 200000000640 returned -22 [ 710.572202][ T5851] udevd[5851]: symlink '../../loop2' '/dev/disk/by-diskseq/105.tmp-b7:2' failed: Read-only file system [ 710.935323][T12944] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 710.962983][T14157] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 711.145334][T12944] usb 3-1: Invalid ep0 maxpacket: 9 [ 711.375604][T12944] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 711.726612][T12944] usb 3-1: Invalid ep0 maxpacket: 9 [ 711.813954][T12944] usb usb3-port1: attempt power cycle [ 712.375399][T12944] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 712.416038][T12944] usb 3-1: Invalid ep0 maxpacket: 9 [ 712.559649][T12944] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 712.605045][T12944] usb 3-1: Invalid ep0 maxpacket: 9 [ 712.616140][T12944] usb usb3-port1: unable to enumerate USB device [ 713.832451][ T5851] udevd[5851]: symlink '../../loop2' '/dev/disk/by-diskseq/105.tmp-b7:2' failed: Read-only file system [ 713.970714][T14201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 714.015086][ T1208] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 714.084807][T14201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 714.093497][ T6713] udevd[6713]: symlink '../../loop2' '/dev/disk/by-diskseq/105.tmp-b7:2' failed: Read-only file system [ 714.186019][ T5949] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 714.188681][ T1208] usb 8-1: config 0 has an invalid interface number: 50 but max is 0 [ 714.237217][ T5851] udevd[5851]: symlink '../../loop2' '/dev/disk/by-diskseq/105.tmp-b7:2' failed: Read-only file system [ 714.244101][T14210] netlink: 'syz.2.1885': attribute type 1 has an invalid length. [ 714.253684][ T1208] usb 8-1: config 0 has no interface number 0 [ 714.264167][ T1208] usb 8-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 714.266263][T14210] netlink: 'syz.2.1885': attribute type 1 has an invalid length. [ 714.301090][ T1208] usb 8-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 714.332264][ T1208] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 714.345375][ T1208] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.358801][ T5949] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 714.365190][ T1208] usb 8-1: Product: syz [ 714.383762][ T5949] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 714.386655][ T1208] usb 8-1: Manufacturer: syz [ 714.409335][ T1208] usb 8-1: SerialNumber: syz [ 714.425438][ T5949] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 714.456189][ T5949] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 714.463753][ T5851] udevd[5851]: symlink '../../loop2' '/dev/disk/by-diskseq/105.tmp-b7:2' failed: Read-only file system [ 714.469573][ T5949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.482285][ T1208] usb 8-1: config 0 descriptor?? [ 714.507835][ T5949] usb 5-1: Product: syz [ 714.511124][ T1208] yurex 8-1:0.50: Could not submitting URB [ 714.512048][ T5949] usb 5-1: Manufacturer: syz [ 714.526652][ T1208] yurex 8-1:0.50: probe with driver yurex failed with error -5 [ 714.557752][ T5949] usb 5-1: SerialNumber: syz [ 714.602706][ T5949] usb 5-1: config 0 descriptor?? [ 714.615983][ T5921] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 714.627783][T14195] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 714.639396][ T6713] udevd[6713]: symlink '../../loop2' '/dev/disk/by-diskseq/105.tmp-b7:2' failed: Read-only file system [ 714.661316][T14195] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 714.688867][ T5949] usb 5-1: ucan: probing device on interface #0 [ 714.827083][ T5921] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 714.881620][T14190] Bluetooth: hci0: invalid len left 7, exp >= 72 [ 714.917224][ T5949] usb 5-1: ucan: could not read protocol version, ret=-71 [ 714.950042][ T5921] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 715.058703][ T5949] usb 5-1: ucan: probe failed; try to update the device firmware [ 715.128344][ T5921] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 715.145774][ T9] usb 8-1: USB disconnect, device number 12 [ 715.525836][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.533810][ T5949] usb 5-1: USB disconnect, device number 86 [ 715.615803][ T5921] usb 6-1: Product: syz [ 715.625684][ T5921] usb 6-1: Manufacturer: syz [ 715.653673][ T5921] usb 6-1: SerialNumber: syz [ 715.810609][ T6711] udevd[6711]: symlink '../../loop2' '/dev/disk/by-diskseq/105.tmp-b7:2' failed: Read-only file system [ 715.928181][T14216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.953814][T14216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 716.018995][ T5921] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 716.058682][ T30] audit: type=1326 audit(1754875624.397:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14237 comm="syz.4.1893" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e84d8ebe9 code=0x0 [ 716.065748][ T5921] usb 6-1: USB disconnect, device number 42 [ 716.541507][T14245] loop9: detected capacity change from 0 to 7 [ 716.565352][T14245] buffer_io_error: 9 callbacks suppressed [ 716.572036][T14245] Buffer I/O error on dev loop9, logical block 0, async page read [ 716.583437][T14245] Buffer I/O error on dev loop9, logical block 0, async page read [ 716.593815][T14245] Buffer I/O error on dev loop9, logical block 0, async page read [ 716.604741][T14245] Buffer I/O error on dev loop9, logical block 0, async page read [ 716.626666][T14245] Buffer I/O error on dev loop9, logical block 0, async page read [ 716.637114][T14245] Buffer I/O error on dev loop9, logical block 0, async page read [ 716.648694][T14245] Buffer I/O error on dev loop9, logical block 0, async page read [ 716.658767][T14245] ldm_validate_partition_table(): Disk read failed. [ 716.666962][T14245] Buffer I/O error on dev loop9, logical block 0, async page read [ 716.678233][T14245] Buffer I/O error on dev loop9, logical block 0, async page read [ 716.690193][T14245] Buffer I/O error on dev loop9, logical block 0, async page read [ 716.701901][T14245] Dev loop9: unable to read RDB block 0 [ 716.718680][T14245] loop9: unable to read partition table [ 716.728711][T14245] loop9: partition table beyond EOD, truncated [ 716.736179][T14245] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 716.736179][T14245] ) failed (rc=-5) [ 717.281481][ T6711] udevd[6711]: symlink '../../loop9' '/dev/disk/by-diskseq/108.tmp-b7:9' failed: Read-only file system [ 717.538736][ T5851] udevd[5851]: symlink '../../loop9' '/dev/disk/by-diskseq/108.tmp-b7:9' failed: Read-only file system [ 717.575989][ T9] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 717.603760][ T6712] udevd[6712]: symlink '../../loop2' '/dev/disk/by-diskseq/105.tmp-b7:2' failed: Read-only file system [ 717.623359][ T5851] udevd[5851]: symlink '../../loop9' '/dev/disk/by-diskseq/108.tmp-b7:9' failed: Read-only file system [ 717.727876][ T9] usb 4-1: device descriptor read/64, error -71 [ 718.096457][ T9] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 718.907127][ T9] usb 4-1: device descriptor read/64, error -71 [ 719.016674][ T9] usb usb4-port1: attempt power cycle [ 719.105614][T14257] netlink: 'syz.7.1898': attribute type 12 has an invalid length. [ 719.116887][T14257] netlink: 'syz.7.1898': attribute type 29 has an invalid length. [ 719.118292][ T5851] udevd[5851]: symlink '../../loop2' '/dev/disk/by-diskseq/105.tmp-b7:2' failed: Read-only file system [ 719.124738][T14257] netlink: 148 bytes leftover after parsing attributes in process `syz.7.1898'. [ 719.124768][T14257] netlink: 51 bytes leftover after parsing attributes in process `syz.7.1898'. [ 719.193196][T14264] input: syz0 as /devices/virtual/input/input42 [ 719.678009][T14281] netlink: 'syz.7.1905': attribute type 12 has an invalid length. [ 719.830657][T14281] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1905'. [ 720.192031][ T5851] udevd[5851]: symlink '../../loop2' '/dev/disk/by-diskseq/105.tmp-b7:2' failed: Read-only file system [ 720.321632][T14281] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 720.331003][T14281] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 720.339830][T14281] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 720.348693][T14281] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 720.413852][T14281] netlink: 'syz.7.1905': attribute type 12 has an invalid length. [ 720.422482][T14281] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1905'. [ 720.459624][T14289] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1907'. [ 720.626716][ T5949] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 720.991397][T14293] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1909'. [ 721.015597][T14293] netlink: 'syz.5.1909': attribute type 30 has an invalid length. [ 721.094472][ T5949] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 721.146973][ T5949] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 721.178397][ T5949] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 721.203828][ T5949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.328724][ T5949] usb 4-1: config 0 descriptor?? [ 721.425004][ T6711] udevd[6711]: symlink '../../loop2' '/dev/disk/by-diskseq/105.tmp-b7:2' failed: Read-only file system [ 721.498554][T14297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 721.531448][T14297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 721.543137][T14286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 721.569237][T14286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 721.636427][ T5957] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 721.736583][ T5845] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 721.797402][ T5957] usb 8-1: too many configurations: 167, using maximum allowed: 8 [ 721.823341][T14299] can0: slcan on ttyS3. [ 721.839742][ T5949] hid-led 0003:0FC5:B080.001E: unbalanced collection at end of report description [ 721.859456][ T5957] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 721.879028][ T5957] usb 8-1: can't read configurations, error -61 [ 721.887769][ T5949] hid-led 0003:0FC5:B080.001E: probe with driver hid-led failed with error -22 [ 721.928369][T14299] can0 (unregistered): slcan off ttyS3. [ 721.929558][ T5845] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 722.025795][ T5845] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 722.036522][ T5957] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 722.060631][ T5845] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 722.079913][ T5845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.240576][ T5957] usb 8-1: too many configurations: 167, using maximum allowed: 8 [ 722.262962][ T5957] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 722.276500][ T5957] usb 8-1: can't read configurations, error -61 [ 722.291716][ T5957] usb usb8-port1: attempt power cycle [ 722.312977][ T5845] usb 3-1: usb_control_msg returned -32 [ 722.320024][ T5845] usbtmc 3-1:16.0: can't read capabilities [ 722.706861][ T5957] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 722.790404][ T5957] usb 8-1: too many configurations: 167, using maximum allowed: 8 [ 722.869329][ T5957] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 722.903432][ T5957] usb 8-1: can't read configurations, error -61 [ 723.026866][T12944] usb 3-1: USB disconnect, device number 98 [ 723.110936][ T5957] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 723.196261][ T5957] usb 8-1: too many configurations: 167, using maximum allowed: 8 [ 723.401466][ T5957] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 723.457425][ T5957] usb 8-1: can't read configurations, error -61 [ 723.651348][ T5957] usb usb8-port1: unable to enumerate USB device [ 726.332746][ T6085] udevd[6085]: symlink '../../loop2' '/dev/disk/by-diskseq/105.tmp-b7:2' failed: Read-only file system [ 726.841816][ T9] usb 4-1: USB disconnect, device number 89 [ 727.153452][ T6711] udevd[6711]: symlink '../../loop2' '/dev/disk/by-diskseq/105.tmp-b7:2' failed: Read-only file system [ 727.347894][T14326] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1918'. [ 727.444166][ T5851] udevd[5851]: symlink '../../loop2' '/dev/disk/by-diskseq/105.tmp-b7:2' failed: Read-only file system [ 727.514890][T14336] loop6: detected capacity change from 0 to 63 [ 727.554518][T14336] buffer_io_error: 4 callbacks suppressed [ 727.554539][T14336] Buffer I/O error on dev loop6, logical block 0, async page read [ 727.611093][T14336] Buffer I/O error on dev loop6, logical block 1, async page read [ 727.646881][T14336] Buffer I/O error on dev loop6, logical block 2, async page read [ 727.687200][T14336] Buffer I/O error on dev loop6, logical block 3, async page read [ 727.733961][T14338] Buffer I/O error on dev loop6, logical block 0, async page read [ 727.773999][T14338] Buffer I/O error on dev loop6, logical block 1, async page read [ 727.813434][T14338] Buffer I/O error on dev loop6, logical block 2, async page read [ 727.849955][T14338] Buffer I/O error on dev loop6, logical block 3, async page read [ 727.861254][ T5851] Buffer I/O error on dev loop6, logical block 0, async page read [ 727.872804][ T5851] Buffer I/O error on dev loop6, logical block 1, async page read [ 727.918336][T14340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1921'. [ 727.936366][ T5851] udevd[5851]: symlink '../../loop6' '/dev/disk/by-diskseq/111.tmp-b7:6' failed: Read-only file system [ 727.975106][T14340] netlink: 'syz.3.1921': attribute type 18 has an invalid length. [ 727.990207][T14340] netlink: 'syz.3.1921': attribute type 18 has an invalid length. [ 728.022407][T14340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1921'. [ 729.624531][ T30] audit: type=1326 audit(1754875637.836:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14358 comm="syz.4.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e84d8ebe9 code=0x7ffc0000 [ 729.849543][ T30] audit: type=1326 audit(1754875637.836:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14358 comm="syz.4.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e84d8ebe9 code=0x7ffc0000 [ 730.125896][ T30] audit: type=1326 audit(1754875637.836:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14358 comm="syz.4.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8e84d8d550 code=0x7ffc0000 [ 730.266034][ T30] audit: type=1326 audit(1754875637.836:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14358 comm="syz.4.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f8e84d90417 code=0x7ffc0000 [ 730.281867][ T5851] udevd[5851]: symlink '../../loop6' '/dev/disk/by-diskseq/111.tmp-b7:6' failed: Read-only file system [ 730.288181][ T30] audit: type=1326 audit(1754875637.836:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14358 comm="syz.4.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8e84d8ebe9 code=0x7ffc0000 [ 730.321593][ T30] audit: type=1326 audit(1754875637.836:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14358 comm="syz.4.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f8e84d90417 code=0x7ffc0000 [ 730.347404][ T30] audit: type=1326 audit(1754875637.836:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14358 comm="syz.4.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8e84d8d84a code=0x7ffc0000 [ 730.369477][ T30] audit: type=1326 audit(1754875637.836:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14358 comm="syz.4.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e84d8ebe9 code=0x7ffc0000 [ 730.391477][ T30] audit: type=1326 audit(1754875637.836:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14358 comm="syz.4.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e84d8ebe9 code=0x7ffc0000 [ 730.448100][ T6713] udevd[6713]: symlink '../../loop2' '/dev/disk/by-diskseq/105.tmp-b7:2' failed: Read-only file system [ 730.488615][ T30] audit: type=1326 audit(1754875637.836:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14358 comm="syz.4.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e84d8ebe9 code=0x7ffc0000 [ 730.642465][ T5851] udevd[5851]: symlink '../../loop6' '/dev/disk/by-diskseq/111.tmp-b7:6' failed: Read-only file system [ 730.659169][T14370] gfs2: path_lookup on c::: returned error -2 [ 730.814867][ T5851] udevd[5851]: symlink '../../loop6' '/dev/disk/by-diskseq/112.tmp-b7:6' failed: Read-only file system [ 730.956716][ T5851] udevd[5851]: symlink '../../loop2' '/dev/disk/by-diskseq/105.tmp-b7:2' failed: Read-only file system [ 731.477907][T14387] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1935'. [ 731.517516][ T5949] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 731.546174][T14389] netlink: 'syz.3.1936': attribute type 12 has an invalid length. [ 731.567715][T14389] netlink: 'syz.3.1936': attribute type 29 has an invalid length. [ 731.575724][T14389] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1936'. [ 731.617544][T14389] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1936'. [ 732.221232][ T5949] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 732.239438][ T5949] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 732.267971][ T5949] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 732.299974][ T5949] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 732.338472][ T5851] udevd[5851]: symlink '../../loop2' '/dev/disk/by-diskseq/105.tmp-b7:2' failed: Read-only file system [ 732.349970][ T5949] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 732.399321][ T5949] usb 8-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 732.417574][ T5949] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 732.436345][ T5949] usb 8-1: Product: syz [ 732.445588][T14396] ------------[ cut here ]------------ [ 732.471662][ T5949] usb 8-1: Manufacturer: syz [ 732.476327][ T5949] usb 8-1: SerialNumber: syz [ 732.477773][T14396] UBSAN: shift-out-of-bounds in drivers/comedi/drivers/pcl726.c:331:46 [ 732.519266][ T5949] usb 8-1: config 0 descriptor?? [ 732.536173][T14396] shift exponent 1073741826 is too large for 32-bit type 'int' [ 732.583317][T14396] CPU: 0 UID: 0 PID: 14396 Comm: syz.2.1939 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 732.583347][T14396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 732.583359][T14396] Call Trace: [ 732.583368][T14396] [ 732.583377][T14396] dump_stack_lvl+0x189/0x250 [ 732.583412][T14396] ? __pfx_dump_stack_lvl+0x10/0x10 [ 732.583437][T14396] ? __pfx__printk+0x10/0x10 [ 732.583480][T14396] ubsan_epilogue+0xa/0x40 [ 732.583505][T14396] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 732.583543][T14396] ? __kmalloc_noprof+0x29b/0x4f0 [ 732.583578][T14396] pcl726_attach+0xac4/0xd50 [ 732.583615][T14396] comedi_device_attach+0x520/0x670 [ 732.583649][T14396] comedi_unlocked_ioctl+0x686/0xfc0 [ 732.583681][T14396] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 732.583723][T14396] ? __pfx_smack_log+0x10/0x10 [ 732.583754][T14396] ? smk_access+0x14c/0x4e0 [ 732.583788][T14396] ? smk_tskacc+0x2fc/0x370 [ 732.583823][T14396] ? smack_file_ioctl+0x24a/0x340 [ 732.583846][T14396] ? __pfx_smack_file_ioctl+0x10/0x10 [ 732.583880][T14396] ? __fget_files+0x2a/0x420 [ 732.583901][T14396] ? __fget_files+0x3a0/0x420 [ 732.583920][T14396] ? __fget_files+0x2a/0x420 [ 732.583966][T14396] ? bpf_lsm_file_ioctl+0x9/0x20 [ 732.583989][T14396] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 732.584011][T14396] __se_sys_ioctl+0xfc/0x170 [ 732.584044][T14396] do_syscall_64+0xfa/0x3b0 [ 732.584065][T14396] ? lockdep_hardirqs_on+0x9c/0x150 [ 732.584087][T14396] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.584107][T14396] ? clear_bhb_loop+0x60/0xb0 [ 732.584133][T14396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.584154][T14396] RIP: 0033:0x7f5ce598ebe9 [ 732.584174][T14396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 732.584192][T14396] RSP: 002b:00007f5ce6877038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 732.584213][T14396] RAX: ffffffffffffffda RBX: 00007f5ce5bb5fa0 RCX: 00007f5ce598ebe9 [ 732.584228][T14396] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 732.584242][T14396] RBP: 00007f5ce5a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 732.584255][T14396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 732.584267][T14396] R13: 00007f5ce5bb6038 R14: 00007f5ce5bb5fa0 R15: 00007ffeef180038 [ 732.584304][T14396] [ 732.584312][T14396] ---[ end trace ]--- [ 732.732342][ T5949] radio-si470x 8-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 732.766964][T14396] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 732.766987][T14396] CPU: 0 UID: 0 PID: 14396 Comm: syz.2.1939 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 732.767011][T14396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 732.767023][T14396] Call Trace: [ 732.767033][T14396] [ 732.767042][T14396] dump_stack_lvl+0x99/0x250 [ 732.767071][T14396] ? __asan_memcpy+0x40/0x70 [ 732.767098][T14396] ? __pfx_dump_stack_lvl+0x10/0x10 [ 732.767119][T14396] ? __pfx__printk+0x10/0x10 [ 732.767159][T14396] panic+0x2db/0x790 [ 732.767186][T14396] ? __pfx_panic+0x10/0x10 [ 732.767212][T14396] ? _printk+0xcf/0x120 [ 732.767241][T14396] ? __pfx__printk+0x10/0x10 [ 732.767277][T14396] check_panic_on_warn+0x89/0xb0 [ 732.767306][T14396] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 732.767342][T14396] ? __kmalloc_noprof+0x29b/0x4f0 [ 732.767371][T14396] pcl726_attach+0xac4/0xd50 [ 732.767405][T14396] comedi_device_attach+0x520/0x670 [ 732.767437][T14396] comedi_unlocked_ioctl+0x686/0xfc0 [ 732.767473][T14396] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 732.767510][T14396] ? __pfx_smack_log+0x10/0x10 [ 732.767537][T14396] ? smk_access+0x14c/0x4e0 [ 732.767570][T14396] ? smk_tskacc+0x2fc/0x370 [ 732.767601][T14396] ? smack_file_ioctl+0x24a/0x340 [ 732.767623][T14396] ? __pfx_smack_file_ioctl+0x10/0x10 [ 732.767653][T14396] ? __fget_files+0x2a/0x420 [ 732.767674][T14396] ? __fget_files+0x3a0/0x420 [ 732.767694][T14396] ? __fget_files+0x2a/0x420 [ 732.767718][T14396] ? bpf_lsm_file_ioctl+0x9/0x20 [ 732.767742][T14396] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 732.767761][T14396] __se_sys_ioctl+0xfc/0x170 [ 732.767792][T14396] do_syscall_64+0xfa/0x3b0 [ 732.767812][T14396] ? lockdep_hardirqs_on+0x9c/0x150 [ 732.767834][T14396] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.767854][T14396] ? clear_bhb_loop+0x60/0xb0 [ 732.767878][T14396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.767896][T14396] RIP: 0033:0x7f5ce598ebe9 [ 732.767914][T14396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 732.767932][T14396] RSP: 002b:00007f5ce6877038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 732.767954][T14396] RAX: ffffffffffffffda RBX: 00007f5ce5bb5fa0 RCX: 00007f5ce598ebe9 [ 732.767969][T14396] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 732.767991][T14396] RBP: 00007f5ce5a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 732.768004][T14396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 732.768016][T14396] R13: 00007f5ce5bb6038 R14: 00007f5ce5bb5fa0 R15: 00007ffeef180038 [ 732.768049][T14396] [ 732.775717][T14396] Kernel Offset: disabled