last executing test programs: 2m57.353441501s ago: executing program 3 (id=188): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, 0x0, 0x40) socket$nl_rdma(0x10, 0x3, 0x14) r3 = syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x54}}, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000020000000200000000000000000000000000000d03"], 0x0, 0x5a}, 0x20) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000300)={0x9, @pix_mp={0xfffffffa, 0x4, 0x32315659, 0x9, 0x4, [{0x0, 0x6}, {0x8001, 0xc4e3}, {0x7fff, 0x20003ff}, {0x4, 0x1}, {0x9, 0x457}, {0x5, 0x1002}, {0x3, 0x4}, {0xe, 0x7}], 0x6, 0xfe, 0x3, 0x2, 0x6}}) syz_emit_ethernet(0x46, &(0x7f00000017c0)=ANY=[@ANYBLOB="0180c20c000217f03973dbde08004901ac1414aa864300000003010a5fcf799fc64fa2c44b260b9e0d230d00907802008cf99dc1675122fe2812fffd0000000500000006fffffffb00"], 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x40, 0x20, 0x3, 0x6, {{0xd, 0x4, 0x0, 0x19, 0x34, 0x67, 0x0, 0x81, 0x2d, 0x0, @empty, @empty, {[@generic={0x7, 0x10, "3917cc97a82d19236aaf0ad2b53e"}, @ssrr={0x89, 0xf, 0x8a, [@private=0xa010101, @broadcast, @empty]}]}}}}}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x401, 0x2}}, './file0\x00'}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r5}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x1e, 0x17, &(0x7f0000001380)=ANY=[@ANYBLOB="09000000000000002cffff040011000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000018400000feffffff000000000000000018460000fdffffff00000000000000001241f0ff010000005169e0fff0ffffffbf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000001440)='syzkaller\x00', 0xe31, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000014c0)={0x1, 0xd, 0x705f, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000001500)=[0xffffffffffffffff, 0x1, r0, 0x1, 0xffffffffffffffff], &(0x7f0000001540)=[{0x3, 0x1, 0x4, 0xc}, {0x4, 0x4, 0x1, 0x3}, {0x3, 0x5, 0xa, 0xd}, {0x5, 0x4, 0x20000f, 0x9}, {0x4, 0x1, 0xb, 0xa}], 0x10, 0x3}, 0x94) 2m56.216617348s ago: executing program 3 (id=191): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000000000000000000000008500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) rename(0x0, &(0x7f0000000f00)='./file1\x00') recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x111, 0x1}}, 0x20) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r6, 0x80184132, &(0x7f0000000300)) 2m54.631166574s ago: executing program 3 (id=198): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) inotify_init() ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)=0x0) rt_sigqueueinfo(r3, 0x6, &(0x7f0000000180)={0x4, 0xffffffff, 0x6}) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$video4linux(&(0x7f0000000000), 0x6, 0x2000) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, 0x0, 0x800) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x6e9c84f3}], 0x1}, 0x0) 2m53.381472653s ago: executing program 3 (id=200): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0xd7, 0x0, 0xffffffffffffffff, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1}, 0x50) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) setxattr$security_evm(&(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000240)=@sha1={0x1, "076886f7ea42da64b49397ed03f512f72d917b4a"}, 0x15, 0x7) mount(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x12, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xd7fc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x7, 0x1, 0xc, 0x1, 0x5, 0xfffffffffffffffc, 0xffffffffffffffff}, @map_val={0x18, 0xb, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) socket$kcm(0x2d, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) shmat(r4, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f00007b1000/0x1000)=nil) r5 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7fff, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd=r5, 0x0, 0x0, 0x0, {0x20}}) io_uring_enter(r5, 0x627, 0x4c1, 0x43, 0x0, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r9 = dup(r8) mmap(&(0x7f0000092000/0x1000)=nil, 0x1000, 0x0, 0x30, r9, 0xdbc33000) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000380)={&(0x7f00000001c0)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x7, 0x1, 0x6}) ioctl$DRM_IOCTL_MODE_SETCRTC(r9, 0xc06864a2, &(0x7f00000003c0)={&(0x7f0000000180)=[r10], 0x1, 0x0, r11, 0x3, 0x800, 0xffffffff, 0x1, {0x8000, 0x154d, 0x8, 0x100, 0x7f, 0x2, 0x3, 0x5, 0x8, 0x100, 0xe, 0x8, 0x3ff, 0x3, "d3c69c948d3e0ad4555f81f26c2a1c5b99fea8ca2d7fd6aa943d71f5d9773de8"}}) 2m52.973272348s ago: executing program 3 (id=204): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[], 0x2dc}, 0x1, 0x0, 0x0, 0xc880}, 0x0) 2m52.543252067s ago: executing program 3 (id=206): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x38b2) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000640)={0x2, 0x6, 0xe4f9, 0x80080, 0xffffffffffffffff}) r4 = syz_pidfd_open(r0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000680), 0x80400, 0x0) r6 = syz_open_dev$vbi(&(0x7f00000006c0), 0x1, 0x2) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) r8 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000740)='cpu.pressure\x00', 0x2, 0x0) r9 = getpgrp(0xffffffffffffffff) lstat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = socket$alg(0x26, 0x5, 0x0) r12 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000880)=@o_path={&(0x7f0000000840)='./file0\x00'}, 0x18) r13 = syz_open_dev$ttys(0xc, 0x2, 0x0) r14 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/sys/fs/binfmt_misc/syz3\x00', 0x2, 0x0) lstat(&(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r16 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000dc0), 0x1, 0x0) r17 = syz_io_uring_complete(0x0) r18 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001240)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2}, 0x50) r19 = syz_open_dev$tty20(0xc, 0x4, 0x1) r20 = syz_open_dev$sndpcmc(&(0x7f00000012c0), 0x4, 0x82040) r21 = syz_open_dev$swradio(&(0x7f0000001300), 0x0, 0x2) r22 = epoll_create(0x5e3) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000001340)={0x8, 0xffffffffffffffff, 'id0\x00'}) r24 = openat$full(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0) r25 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r26 = syz_open_dev$evdev(&(0x7f0000001400), 0x2, 0x40000) r27 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$unix(r1, &(0x7f0000002ac0)=[{{&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000100)="0f8703661c1479c89667d6cc559adc2e1a2e245d9316eb36dbf5db5bac91ff518db33cb073ccf530221caeb9403c0c8721", 0x31}, {&(0x7f0000000140)="3bf6e69daf429096fb4d4035977137615b4a868e2aebaa371e2d054143d7f2dcd2a85f7c44222605344b888f5e7ee761153b5926a2ace9b23c79b281aa63cf113c27ae1cf9f05b01cb1d7ff7bf2cd7dc100c3b202ecf8aab511d37d1553b76bf150176dd7fbeb05c59", 0x69}, {&(0x7f00000001c0)="be1980e47edf59a6c4e59b9263721ed159e9e6781774ef1363695a95c136a7fe7c1bcbd23318bd5892003049916aedefe869f81d3374e2f85624fe8012c894de5365d2bfcf24eee9a16f99aa526548422e22fe4f7e508853693ab18ecbf4c698b837fd5276690a51e8dd02d8b7faf17067a0f63bdf24e2f58b7dd4fac5ee435287", 0x81}, {&(0x7f0000000280)="e5c47199bdc6a7dcb536cb16c859e859c79d904716870e4beab739ac5536040d03e009e7fa87759ad74d53e823fe9c4a50d5c332642db24e6e06839d1c7912187da6f541762cfbf403f3bebbafab16d08d4f3def34cd4b111c0b53181cc75030a3124a170860f81e424a848d53a4ad62c7ded11b700142969b9ca0d461e7aef54ccbe6662ac27eeab121874bd85bb9cda9d243c7c14c5e", 0x97}, {&(0x7f0000000340)="c9be42a2896ad873bb7ab26b38e7906593cf62bf1778903c0f092a9a02c8f43b77754c5d1b48a51ef0a13731cda595d7e1061fe39732ab48982940f480c9f5ff83e155fbf5f29b4efa600bfb1a716e4cc7fdcb72452032cda7aa2a4598cf6666723efc729c61c3bf08154eef34fbbe6ee2e17ed01bedc39e3b70cb3d7a097d7883504c2f628b8013c3e23724456ab1d3e80eca766819", 0x96}, {&(0x7f0000000400)="3ca927747ce76d7f636f2764b95fc99e59993bf908e94a359ecb40d7a62f68dcd1375287a78603454c6eec5c8a9d827f600be2868b4e29937472fe308b2789b0fa5999f6f46c83801cff8a0508ac4e6cfc071b3960c4a0dee3ab53c3819dac472a8951c8b2363ab1e5cac0", 0x6b}, {&(0x7f0000000480)="02f9e573abff9b6e07", 0x9}, {&(0x7f00000004c0)="11b4c692878fb56a0e6d0305105d53fb3a9c2785cb5d3dd9b54553e62b0dccb1c3", 0x21}, {&(0x7f0000000500)="1bfc7060e88e272f5458a01fa0c8151104ef5c0fdb86e43c13d0dccb3c740c668b625eca6690dba8154a441896457839ef2639ab5a8e2a3953555ba8f48fcfd5a6b85e3a4c7047c453", 0x49}], 0x9, &(0x7f0000000900)=[@rights={{0x34, 0x1, 0x1, [r2, r3, r4, r5, r6, 0xffffffffffffffff, 0xffffffffffffffff, r7, r8]}}, @cred={{0x1c, 0x1, 0x2, {r9, 0x0, r10}}}, @rights={{0x24, 0x1, 0x1, [r11, r12, 0xffffffffffffffff, r13, r14]}}], 0x80, 0x20008091}}, {{&(0x7f0000000980)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000a00)="ad032f0fd5b549f950d4ad238266b0c9a2b8c33d35eec648ef9007f2051ea5596c1ade833b34aadcc8d05f2fddccf2a810ae673e1a30d6697328375a215d257537148be9fbac2b149499b27b6692e916da58a0c72603e6560e190b69f42dd90e1b8c38059b5ba511ced712e8adb462a2663d08e3c638eb1002b92d83df442c96a05e14906a4cd66d1ad2f64c1a3bc123dbcb7e55341f7cc91a0d22c152f29ce6093b34659baa04642510de2ccbcfeb41644eee6b2ece9fa6fd10394b0b453a3693336cfc69e188d7f8310c589933cfa69d3bfdb14ab17253eee9797b0f81ce69acc277e055", 0xe5}, {&(0x7f0000000b00)="0b78fc91087afb9c6af1b9a97774e13a3f5ca80a3fe39379f224331b39d30fd77024370653319f8ee0e89f5795a11286d2061a0109ad747d7a65d6f48650ea37a9d71e2e215a7646790ce2f4943f2406eca356446bf09ccf734d22", 0x5b}, {&(0x7f0000000b80)="933434d9b8120237a86a8ece590422ead364bfef27ddb4bae845becee86f9ccdbc45915b8a522d47790f556c1d24174ee482f034c0df58736f1414b1bdeabecf9f182dea6c3ee257b0cddc6827f313d3b62a87c6d122c2f219a827412ec23375dfa6a08843e2b87f8f59022213f1cf3dad9ffc043f1b0a1de9f9e6bc9512925b98358e173eaa8e921a22e20a3e9f6799523358c764db9a599f73c039105390ba32447ca753", 0xa5}, {&(0x7f0000000c40)="bfc9c76a2eb808e90501b290bdc937fe705c2d4a8204c9be660eecfe19c4b10104c8b564668bf41672a7edd451e754ddcf4f858a85035dec88e1c6ed51fbf190aee330da1d40f0b7d3116a87aa5e77d8faa742537b54dc", 0x57}], 0x4, &(0x7f0000000e40)=[@cred={{0x1c, 0x1, 0x2, {r0, 0xee01, r15}}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [r16, r17]}}], 0x58, 0x51}}, {{&(0x7f0000000ec0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001140)=[{&(0x7f0000000f40)="1a9438124164458e9c08cde7e2685122a03ee74ac43a4138b5ac09f301c70855c61acceec0acf2370f918eaae63b27af4d754e7c770eedecd06dbf4f37ef9f5b4a7e6c9aefbb9b1deebb28ba81f69aa8ec3e076c054f147f175c7c7a3f3f8f44730d844c529f69a6137f3dc905fbd0ca620d4d2b1291bc8998223fd5ab1cb6b1d36865641f2649240aeb3897fb2161d06c7ded6ad8fa2cea1a23846d8b823ccfb5cf4076cb3f69617dc0f95aa5a7bb73573313df896718b3d972756499fcfcf2c8bd234a325864b31653eab4d481e52e43039e1bcd353d", 0xd7}, {&(0x7f0000001040)="ccfd3e0d1573cfcdf2b62a536d1c57b8e2feefd476926e489abf83f4c76feae7191af30c2883987cc81650aa94cf8e481a90cee5f0947daec96cecf97748c645725cb53b6d730d73a3a639eb18f5f29df1c7c2ea37a523825f5d4a4afe1f7f89a0e317035f3efd31f83fb037ee45604082d401f4d95e2aea9699855cf97d759f890523a9e9ad7ca2698f32d771d6713104a4bb6e01c3ba52b325d595812126a2d840eb18eda0080fad493052acc7a6821c2692402e480c6b9df37b5dd0d8b7240e1aa23ac1c96abeb146323cd5c644b99744a69bd6cc8ae814bd1e1e604bb83d89c0c5d460c45c5d35c56f473050b149cfa3af", 0xf3}], 0x2, 0x0, 0x0, 0x20006040}}, {{&(0x7f0000001180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001200), 0x0, &(0x7f00000014c0)=[@rights={{0x2c, 0x1, 0x1, [r18, r19, 0xffffffffffffffff, r20, r21, r22, r23]}}, @rights={{0x24, 0x1, 0x1, [r24, r25, 0xffffffffffffffff, r26, r27]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0x78, 0x800}}, {{&(0x7f0000001540)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000015c0)="d4c393c742a0ce79f80dddcc1fa66041bb94816c9a5d20e36d60e12bb1bd492858696029c190ee84d0d577f3a72a05ccea3ef198e7fa4423fce190debf52e0d9ed30063af4d1a7c1308168ec143d7517c3c06176dda3f8b229bd07c4560d3962d63f8af335c83f2ef524e364e2aa0d8f2b418649a2bcd0e9d17512b0daf79f3ca6dbe8d9fd900a2718e16902c47542e7f0a369e64a3de48bbfcfe74b1a549865c1db52c56d0e963c5c47629fbdb639d348ef90c7635d128ce8a893f05e1ce50239faea5f5071005e8e071d2d1e27", 0xce}, {&(0x7f00000016c0)="85fa9b9c8d330afbdea9ec17a336f2a7aa35a7d37ff4b89a04f4764b8f17b2bceeaed940cb0a0e48066a284b0f06545182437637087852bf5ce24df04c22ee69aa901daf57", 0x45}, {&(0x7f0000001740)="59599509a86726161b58decad023902a9db092758160f9445a2f12588da037d0edea2b0ec3ca1e08f718364d928634421972e9b802a4679dffa36692a38a4b3c7fe015f2b0504e25d827abb737a93fe07bfc50a9e669a6d13743f7978640b0f2d27923b4db1266538025e272f98474fda541989376d7b9d01103c7ca946c1e73ad3ec479ec648db6f83871207972da23993fdb6b8a1eaf6b", 0x98}, {&(0x7f0000001800)="ee4b5a265132e1f31c7efc8ac415e3842a60351056d33e1933e58753770584d7c33d9ecad19d2da0a8432dd1b4084ed821dd0204d1c86f5da06561b2056fe54bfe5fa44cd6d98129dc1de32de45867755247", 0x52}, {&(0x7f0000001880)="c4c5fe082b9f1791342f4be763bf0d987b49040e2523a6254af4692be3bebb735dcd248c10", 0x25}, {&(0x7f00000018c0)="b5df2a8852187abdfb66238395fd205e102e5d28ec79d6ca4014ec18c1da8c99147070686d140c504b5028c700d0792b31c6e507601c83581a4cffbb52f20be3a745c209d81a169fc1a7ad0ef20ec21032600587860b108569c5214eb9a8fda544180ddcb71c81558d8300eb7350c5ead64bf79971559d9fdc9a5302ef04284d176e1615182b9b972b5e95e8a5ecf5eff610c91a2d794f4b3496c49d2a0e27cb4b5f8641fb49078569831911d2212e2f5fde8167ce64b7ac3ba0f2", 0xbb}, {&(0x7f0000001980)="1e751def98160668c1d4b9148ab139ca238e5735525a959c019338793fe016f02c1c751fcbd364d34061", 0x2a}], 0x7, &(0x7f0000001e40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, 0xffffffffffffffff}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8, 0x24000000}}, {{&(0x7f0000001f00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002340)=[{&(0x7f0000001f80)="12abd53c66df4634be06660e62aaa626401b72d6b12c8e4a634a9d6ca50cfe881c125cad94bea571c5642ee3d3b46f3caaebf03e3cd30a061f8b73453db7a814ac687eacdef65f21d04637ccfe68d5f7ccbe4189f98a145df08c38752f5b6b63d5e7e6a70447ad36a6bffe09899c47c5d430c6ee8ae0ae76c88b2ac11a6a718bb3ff3e020ae2a2c6f884c4a5283d2478b7b9a97c2501c6d82c50ecc45118030722ca39c9c0cc036c01a1873a467510fa9497b9e3ba2ad07104bc16ba2622135f", 0xc0}, {&(0x7f0000002040)="6d3dd578bbe761130e0dd6ba387897942b24144b045f840697f1ad505d1a063fba65c0c3e4a0314156a189c14dd93bc64e5fb974", 0x34}, {&(0x7f0000002080)="bee65acc85020ff81a641c7b02bc336aa91cd946b5bbdd5c909cff68be14261cb9108b6e5d25d8b2cd2571f8e69c584db9c69fa0cedbbe857258ccaaeab44e4f0ca6c39288d96e442c66282a0e2fc26d00b0ab8a6c85c55cbe25cf57ff865c5656caf867ad894720da71f8e5dc309d3445cb9ded3669d36bbbcac0ddf8a1f421259e6c75fbe28d4c6cc97e65ce73040669c5e6d6fd8e0aa48b4255480ca33cbcaa126380493b0b32c124ce72bff20b1af93c1f2f8426cc7a15d979512eab5d2e730600b6bcbcc096ae49cc471c10a32b652c8e13f9784acea613e7b6b68e6a77702597ee62164b0d17a8fc0d4a8b2809a9a54cad", 0xf4}, {&(0x7f0000002180)="469cfd97067605e59a7c6d5f16b3d5edab23cff0a05e52dd764c7c410d5f7044664ac5be634573362b7216153d0638c55747dac575700dc86378ca5f554fe925b2019dbb3924f812db8a6f478ac0547ef2f6fef302524af377c118deb1ebd88ca6ec92ffb73e9347e7e859abcc4a7f309a982405158cbe8dc365b8749f8eeda4baf78c9d8730407b3aa0ead79b76527b30185089664ebd062205f952dcb1a6cd7e8aa99d896ceeff774ca67d8eeba9f789516a39b469ddea7488a97a397815f94cbcbbafe2cfaf7f438f28978b925a0db2211a", 0xd3}, {&(0x7f0000002280)="d46a5c38fca3487b91ed878539297bbee59cceed7f97009ead7788d1b0f58a7caf132e1c9962bb661ad0f4893daac2e577dc14cefabd50b4bd4e0c105dc99a7377a66cd5c3e27010476da68fdef9c111620ff330739e556d2efc79d3879a361f2cd4493a7fedd0757fcf59836bee117ad092cffb6978afb36af0656d675e7f1ec52954322cf908", 0x87}], 0x5, &(0x7f0000002a00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0x98, 0x40890}}], 0x6, 0x4000000) 2m52.052840553s ago: executing program 32 (id=206): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x38b2) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000640)={0x2, 0x6, 0xe4f9, 0x80080, 0xffffffffffffffff}) r4 = syz_pidfd_open(r0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000680), 0x80400, 0x0) r6 = syz_open_dev$vbi(&(0x7f00000006c0), 0x1, 0x2) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) r8 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000740)='cpu.pressure\x00', 0x2, 0x0) r9 = getpgrp(0xffffffffffffffff) lstat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = socket$alg(0x26, 0x5, 0x0) r12 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000880)=@o_path={&(0x7f0000000840)='./file0\x00'}, 0x18) r13 = syz_open_dev$ttys(0xc, 0x2, 0x0) r14 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/sys/fs/binfmt_misc/syz3\x00', 0x2, 0x0) lstat(&(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r16 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000dc0), 0x1, 0x0) r17 = syz_io_uring_complete(0x0) r18 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001240)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2}, 0x50) r19 = syz_open_dev$tty20(0xc, 0x4, 0x1) r20 = syz_open_dev$sndpcmc(&(0x7f00000012c0), 0x4, 0x82040) r21 = syz_open_dev$swradio(&(0x7f0000001300), 0x0, 0x2) r22 = epoll_create(0x5e3) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000001340)={0x8, 0xffffffffffffffff, 'id0\x00'}) r24 = openat$full(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0) r25 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r26 = syz_open_dev$evdev(&(0x7f0000001400), 0x2, 0x40000) r27 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$unix(r1, &(0x7f0000002ac0)=[{{&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000100)="0f8703661c1479c89667d6cc559adc2e1a2e245d9316eb36dbf5db5bac91ff518db33cb073ccf530221caeb9403c0c8721", 0x31}, {&(0x7f0000000140)="3bf6e69daf429096fb4d4035977137615b4a868e2aebaa371e2d054143d7f2dcd2a85f7c44222605344b888f5e7ee761153b5926a2ace9b23c79b281aa63cf113c27ae1cf9f05b01cb1d7ff7bf2cd7dc100c3b202ecf8aab511d37d1553b76bf150176dd7fbeb05c59", 0x69}, {&(0x7f00000001c0)="be1980e47edf59a6c4e59b9263721ed159e9e6781774ef1363695a95c136a7fe7c1bcbd23318bd5892003049916aedefe869f81d3374e2f85624fe8012c894de5365d2bfcf24eee9a16f99aa526548422e22fe4f7e508853693ab18ecbf4c698b837fd5276690a51e8dd02d8b7faf17067a0f63bdf24e2f58b7dd4fac5ee435287", 0x81}, {&(0x7f0000000280)="e5c47199bdc6a7dcb536cb16c859e859c79d904716870e4beab739ac5536040d03e009e7fa87759ad74d53e823fe9c4a50d5c332642db24e6e06839d1c7912187da6f541762cfbf403f3bebbafab16d08d4f3def34cd4b111c0b53181cc75030a3124a170860f81e424a848d53a4ad62c7ded11b700142969b9ca0d461e7aef54ccbe6662ac27eeab121874bd85bb9cda9d243c7c14c5e", 0x97}, {&(0x7f0000000340)="c9be42a2896ad873bb7ab26b38e7906593cf62bf1778903c0f092a9a02c8f43b77754c5d1b48a51ef0a13731cda595d7e1061fe39732ab48982940f480c9f5ff83e155fbf5f29b4efa600bfb1a716e4cc7fdcb72452032cda7aa2a4598cf6666723efc729c61c3bf08154eef34fbbe6ee2e17ed01bedc39e3b70cb3d7a097d7883504c2f628b8013c3e23724456ab1d3e80eca766819", 0x96}, {&(0x7f0000000400)="3ca927747ce76d7f636f2764b95fc99e59993bf908e94a359ecb40d7a62f68dcd1375287a78603454c6eec5c8a9d827f600be2868b4e29937472fe308b2789b0fa5999f6f46c83801cff8a0508ac4e6cfc071b3960c4a0dee3ab53c3819dac472a8951c8b2363ab1e5cac0", 0x6b}, {&(0x7f0000000480)="02f9e573abff9b6e07", 0x9}, {&(0x7f00000004c0)="11b4c692878fb56a0e6d0305105d53fb3a9c2785cb5d3dd9b54553e62b0dccb1c3", 0x21}, {&(0x7f0000000500)="1bfc7060e88e272f5458a01fa0c8151104ef5c0fdb86e43c13d0dccb3c740c668b625eca6690dba8154a441896457839ef2639ab5a8e2a3953555ba8f48fcfd5a6b85e3a4c7047c453", 0x49}], 0x9, &(0x7f0000000900)=[@rights={{0x34, 0x1, 0x1, [r2, r3, r4, r5, r6, 0xffffffffffffffff, 0xffffffffffffffff, r7, r8]}}, @cred={{0x1c, 0x1, 0x2, {r9, 0x0, r10}}}, @rights={{0x24, 0x1, 0x1, [r11, r12, 0xffffffffffffffff, r13, r14]}}], 0x80, 0x20008091}}, {{&(0x7f0000000980)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000a00)="ad032f0fd5b549f950d4ad238266b0c9a2b8c33d35eec648ef9007f2051ea5596c1ade833b34aadcc8d05f2fddccf2a810ae673e1a30d6697328375a215d257537148be9fbac2b149499b27b6692e916da58a0c72603e6560e190b69f42dd90e1b8c38059b5ba511ced712e8adb462a2663d08e3c638eb1002b92d83df442c96a05e14906a4cd66d1ad2f64c1a3bc123dbcb7e55341f7cc91a0d22c152f29ce6093b34659baa04642510de2ccbcfeb41644eee6b2ece9fa6fd10394b0b453a3693336cfc69e188d7f8310c589933cfa69d3bfdb14ab17253eee9797b0f81ce69acc277e055", 0xe5}, {&(0x7f0000000b00)="0b78fc91087afb9c6af1b9a97774e13a3f5ca80a3fe39379f224331b39d30fd77024370653319f8ee0e89f5795a11286d2061a0109ad747d7a65d6f48650ea37a9d71e2e215a7646790ce2f4943f2406eca356446bf09ccf734d22", 0x5b}, {&(0x7f0000000b80)="933434d9b8120237a86a8ece590422ead364bfef27ddb4bae845becee86f9ccdbc45915b8a522d47790f556c1d24174ee482f034c0df58736f1414b1bdeabecf9f182dea6c3ee257b0cddc6827f313d3b62a87c6d122c2f219a827412ec23375dfa6a08843e2b87f8f59022213f1cf3dad9ffc043f1b0a1de9f9e6bc9512925b98358e173eaa8e921a22e20a3e9f6799523358c764db9a599f73c039105390ba32447ca753", 0xa5}, {&(0x7f0000000c40)="bfc9c76a2eb808e90501b290bdc937fe705c2d4a8204c9be660eecfe19c4b10104c8b564668bf41672a7edd451e754ddcf4f858a85035dec88e1c6ed51fbf190aee330da1d40f0b7d3116a87aa5e77d8faa742537b54dc", 0x57}], 0x4, &(0x7f0000000e40)=[@cred={{0x1c, 0x1, 0x2, {r0, 0xee01, r15}}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [r16, r17]}}], 0x58, 0x51}}, {{&(0x7f0000000ec0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001140)=[{&(0x7f0000000f40)="1a9438124164458e9c08cde7e2685122a03ee74ac43a4138b5ac09f301c70855c61acceec0acf2370f918eaae63b27af4d754e7c770eedecd06dbf4f37ef9f5b4a7e6c9aefbb9b1deebb28ba81f69aa8ec3e076c054f147f175c7c7a3f3f8f44730d844c529f69a6137f3dc905fbd0ca620d4d2b1291bc8998223fd5ab1cb6b1d36865641f2649240aeb3897fb2161d06c7ded6ad8fa2cea1a23846d8b823ccfb5cf4076cb3f69617dc0f95aa5a7bb73573313df896718b3d972756499fcfcf2c8bd234a325864b31653eab4d481e52e43039e1bcd353d", 0xd7}, {&(0x7f0000001040)="ccfd3e0d1573cfcdf2b62a536d1c57b8e2feefd476926e489abf83f4c76feae7191af30c2883987cc81650aa94cf8e481a90cee5f0947daec96cecf97748c645725cb53b6d730d73a3a639eb18f5f29df1c7c2ea37a523825f5d4a4afe1f7f89a0e317035f3efd31f83fb037ee45604082d401f4d95e2aea9699855cf97d759f890523a9e9ad7ca2698f32d771d6713104a4bb6e01c3ba52b325d595812126a2d840eb18eda0080fad493052acc7a6821c2692402e480c6b9df37b5dd0d8b7240e1aa23ac1c96abeb146323cd5c644b99744a69bd6cc8ae814bd1e1e604bb83d89c0c5d460c45c5d35c56f473050b149cfa3af", 0xf3}], 0x2, 0x0, 0x0, 0x20006040}}, {{&(0x7f0000001180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001200), 0x0, &(0x7f00000014c0)=[@rights={{0x2c, 0x1, 0x1, [r18, r19, 0xffffffffffffffff, r20, r21, r22, r23]}}, @rights={{0x24, 0x1, 0x1, [r24, r25, 0xffffffffffffffff, r26, r27]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0x78, 0x800}}, {{&(0x7f0000001540)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000015c0)="d4c393c742a0ce79f80dddcc1fa66041bb94816c9a5d20e36d60e12bb1bd492858696029c190ee84d0d577f3a72a05ccea3ef198e7fa4423fce190debf52e0d9ed30063af4d1a7c1308168ec143d7517c3c06176dda3f8b229bd07c4560d3962d63f8af335c83f2ef524e364e2aa0d8f2b418649a2bcd0e9d17512b0daf79f3ca6dbe8d9fd900a2718e16902c47542e7f0a369e64a3de48bbfcfe74b1a549865c1db52c56d0e963c5c47629fbdb639d348ef90c7635d128ce8a893f05e1ce50239faea5f5071005e8e071d2d1e27", 0xce}, {&(0x7f00000016c0)="85fa9b9c8d330afbdea9ec17a336f2a7aa35a7d37ff4b89a04f4764b8f17b2bceeaed940cb0a0e48066a284b0f06545182437637087852bf5ce24df04c22ee69aa901daf57", 0x45}, {&(0x7f0000001740)="59599509a86726161b58decad023902a9db092758160f9445a2f12588da037d0edea2b0ec3ca1e08f718364d928634421972e9b802a4679dffa36692a38a4b3c7fe015f2b0504e25d827abb737a93fe07bfc50a9e669a6d13743f7978640b0f2d27923b4db1266538025e272f98474fda541989376d7b9d01103c7ca946c1e73ad3ec479ec648db6f83871207972da23993fdb6b8a1eaf6b", 0x98}, {&(0x7f0000001800)="ee4b5a265132e1f31c7efc8ac415e3842a60351056d33e1933e58753770584d7c33d9ecad19d2da0a8432dd1b4084ed821dd0204d1c86f5da06561b2056fe54bfe5fa44cd6d98129dc1de32de45867755247", 0x52}, {&(0x7f0000001880)="c4c5fe082b9f1791342f4be763bf0d987b49040e2523a6254af4692be3bebb735dcd248c10", 0x25}, {&(0x7f00000018c0)="b5df2a8852187abdfb66238395fd205e102e5d28ec79d6ca4014ec18c1da8c99147070686d140c504b5028c700d0792b31c6e507601c83581a4cffbb52f20be3a745c209d81a169fc1a7ad0ef20ec21032600587860b108569c5214eb9a8fda544180ddcb71c81558d8300eb7350c5ead64bf79971559d9fdc9a5302ef04284d176e1615182b9b972b5e95e8a5ecf5eff610c91a2d794f4b3496c49d2a0e27cb4b5f8641fb49078569831911d2212e2f5fde8167ce64b7ac3ba0f2", 0xbb}, {&(0x7f0000001980)="1e751def98160668c1d4b9148ab139ca238e5735525a959c019338793fe016f02c1c751fcbd364d34061", 0x2a}], 0x7, &(0x7f0000001e40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, 0xffffffffffffffff}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8, 0x24000000}}, {{&(0x7f0000001f00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002340)=[{&(0x7f0000001f80)="12abd53c66df4634be06660e62aaa626401b72d6b12c8e4a634a9d6ca50cfe881c125cad94bea571c5642ee3d3b46f3caaebf03e3cd30a061f8b73453db7a814ac687eacdef65f21d04637ccfe68d5f7ccbe4189f98a145df08c38752f5b6b63d5e7e6a70447ad36a6bffe09899c47c5d430c6ee8ae0ae76c88b2ac11a6a718bb3ff3e020ae2a2c6f884c4a5283d2478b7b9a97c2501c6d82c50ecc45118030722ca39c9c0cc036c01a1873a467510fa9497b9e3ba2ad07104bc16ba2622135f", 0xc0}, {&(0x7f0000002040)="6d3dd578bbe761130e0dd6ba387897942b24144b045f840697f1ad505d1a063fba65c0c3e4a0314156a189c14dd93bc64e5fb974", 0x34}, {&(0x7f0000002080)="bee65acc85020ff81a641c7b02bc336aa91cd946b5bbdd5c909cff68be14261cb9108b6e5d25d8b2cd2571f8e69c584db9c69fa0cedbbe857258ccaaeab44e4f0ca6c39288d96e442c66282a0e2fc26d00b0ab8a6c85c55cbe25cf57ff865c5656caf867ad894720da71f8e5dc309d3445cb9ded3669d36bbbcac0ddf8a1f421259e6c75fbe28d4c6cc97e65ce73040669c5e6d6fd8e0aa48b4255480ca33cbcaa126380493b0b32c124ce72bff20b1af93c1f2f8426cc7a15d979512eab5d2e730600b6bcbcc096ae49cc471c10a32b652c8e13f9784acea613e7b6b68e6a77702597ee62164b0d17a8fc0d4a8b2809a9a54cad", 0xf4}, {&(0x7f0000002180)="469cfd97067605e59a7c6d5f16b3d5edab23cff0a05e52dd764c7c410d5f7044664ac5be634573362b7216153d0638c55747dac575700dc86378ca5f554fe925b2019dbb3924f812db8a6f478ac0547ef2f6fef302524af377c118deb1ebd88ca6ec92ffb73e9347e7e859abcc4a7f309a982405158cbe8dc365b8749f8eeda4baf78c9d8730407b3aa0ead79b76527b30185089664ebd062205f952dcb1a6cd7e8aa99d896ceeff774ca67d8eeba9f789516a39b469ddea7488a97a397815f94cbcbbafe2cfaf7f438f28978b925a0db2211a", 0xd3}, {&(0x7f0000002280)="d46a5c38fca3487b91ed878539297bbee59cceed7f97009ead7788d1b0f58a7caf132e1c9962bb661ad0f4893daac2e577dc14cefabd50b4bd4e0c105dc99a7377a66cd5c3e27010476da68fdef9c111620ff330739e556d2efc79d3879a361f2cd4493a7fedd0757fcf59836bee117ad092cffb6978afb36af0656d675e7f1ec52954322cf908", 0x87}], 0x5, &(0x7f0000002a00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0x98, 0x40890}}], 0x6, 0x4000000) 10.083805399s ago: executing program 1 (id=732): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2daa00000000000079100800000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) (async, rerun: 32) unshare(0x4020400) (async, rerun: 32) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) (async) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x281) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000080)={0x0, 0x0, 0xa22e}) (async) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000000)=0x6}) 9.543394629s ago: executing program 1 (id=735): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4000}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r3, 0x4b4c, &(0x7f0000000140)) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffc, 0x0, 0x70, 0x0, 0xf2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x6aca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6d1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe02e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x789], 0x1, 0x400}) (async) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000002c0)={0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06464ce, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) (async) landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) (async) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x0, 0x1}, 0x8) (async) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000013c0)={0xffffffffffffffff, 0xa, {0x0, 0x0, 0x0, 0x5, 0x8000, 0x0, 0x4, 0x1f, 0x10, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "143939c787a16c1ca43f80026d1a8554fe581b59dee430e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d200", "24431a1e77a68e17000000040008000000000000000000e5e900", [0x83]}}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r7 = openat$smackfs_ipv6host(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_ipv6host(r7, &(0x7f0000000400)=ANY=[@ANYBLOB='0x0000000000000600:0x0000000000000007:0x0000000000000000:0x8000000000000002:0x0000000000000001:0x0000000000001400:0x00000000000000c2:0x000000000000000f/00000000000000000063 %.'], 0xb4) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x12, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@map_fd={0x18, 0x1, 0x1, 0x0, r6}, @call={0x85, 0x0, 0x0, 0x75}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10) 8.799623869s ago: executing program 0 (id=736): r0 = socket$inet(0x2, 0x3, 0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000001, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500005c0000000000019078ac1e0001ac1414aa050090780000000040000000000000000002000000000000ac1414aaa00400008625000000000010f79eb4cf48b5a5788fc15a45b5b1000f749018c9a54b61394327f115350000006e37d3f221967dc5ec24982aee3a3a8aaf75f21d7a6b9ea475e7092b93391bbd02ef2f08c56311a1a74ff922b6c3fa8fcf727af2b783f848fe8ce851ecac47201fc25c25957f541b66c8c71cea5659533b8d428d19a592feccc40b40d9f44bcad6c55d9be69d18c98e45b2d9b89796333e205f608806a7a9119fcce7cdcf717d"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x6, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240)=[{{&(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000740)="4b07fc23ca4e912809ad7e46bcd79b0db8b3c61b0bb090296c2cfb312b1903fdd1e3fa3bc052aa871d65b5ece1ccde42042a1bd0dc16eaa2a9b21954483b75448283d616b9d0a058d98bd81c0ae8fd24d449a8d93af9688916888a71cd0ca4d69fd861812074907f5c6aadf41d5d8658e340647724720120e56fdff5095d7848362e1c8c5b27a3985411894648444f62b9934674d24aaf9071d32b47cf300327a71be57de6fedbd98ee9c9a992f599ba7136f43121fdc89e1abf5c0e56be8f6e0bc0062e73e6d7c0983b354caac23f5dd6551b9f492ac1b065020430e0e164de59a5e165e4736c91a1da000fc119e7d419fc0f4699", 0xf5}], 0x1, &(0x7f0000002900)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {r1, 0xffffffffffffffff}}}], 0x40, 0x81}}, {{&(0x7f0000002940)=@file={0x1, './file0/../file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e, &(0x7f0000002c80)=[{&(0x7f00000029c0)="c0d38d940268eef00f122a1f6fc4746a1c3d6b203a35f016225c20c6e8d617f880fc17633a495467923386f52cd848a6cf2de60c848349f1c244481a1fd2da2b3b12c92021b4220582815674391981bf34cdfa2f47e07b78585d9f31fd228cfd6437354a337c3ff5d2ca4fd181351fb9e899614b4d27e1b0951f2222ece2d84be5", 0x81}, {&(0x7f0000002a80)="d582b4d37640b3efa474d845126392466a0349b97574690455558dbd470b61121096005a7c66b8ffc5a1fc94bfb95ecdfd8b6e417338e6ddfab7906a5d33751bd8ce2e2fab36779fa36e58715f03cf63fd52ebe05f4cd8", 0x57}, {&(0x7f0000002b00)="049b29729113c87b79dcc2f9c95fe9d7ceb93ddfdd046ba6", 0xe}, {&(0x7f0000002b40)="36d043d9d2bb423e77369b6258ce47097b2617f345d34ca9ca810bdabe3f89fec7c5f13b7b75059488696652654ef413f3401a02a828c27f9e61cc4f1b1633a9975da2c509ef324879dfff60cdbebf3645c71e30d9a37a84149ea13d2c9c202a56cafe4d7412e9484b55", 0x6a}, {&(0x7f0000002bc0)="ec1f4ef73501b21d961c7dc1a2e33f51d9c54db5", 0x14}, {&(0x7f0000002c00)="a5a720d9ce09414057845af8cc4d3eae48097be4399aa49e1dc7043530d3f96376bf87d68336bd8e39334ce11c8f4e823b546896d6f52abba38c9a14ed9cad31e69fc533d978bbdc", 0x48}], 0x6, 0x0, 0x0, 0x80}}, {{&(0x7f0000002d00)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000005180)=[{&(0x7f0000002d80)="334fbeb8f1b9e52b8c712ccb4d91238a9461b1dbf6d9a683e0e4dd839679a850c219d6faaab3b4919350ccdbc4c3046377c27f19fade73b033ed51c21cfc2cea92a0d2d497a589619f039e2b4a4acbb46311513f1d30af46444d81cd60d058da39345889467d4e51183395a7c7574b75e1efde511542a3eb5a644e11a9a00a2b1cac3255753ac3c2df2e26b36c8fba912a0e7c6ebd1dd8ca1516199424dd2d94b86cf8d4aa378c904c764dc0db8ec58a48479e40e66d118973448ead5abc58c12349858ca40c13e436f454d0b37d9d09b28baa814d8d710e39b8a0cc2029", 0xde}, {&(0x7f0000002e80)="5e6464be1ee2509f875e9524c6e3be04df1cd2a1e6cfe4ba83f0464d442d1b5607ae407131081732aa7db40b70d7dd97a8c428bd470f73e9d37d8edd5e2724e410c769dbbb7aa2189f9d3b51940416913652bcd8a56a44fcf18441f69c92339323f8f7b99e4ccc2293f12126194f17caf1ecaa55debe8dfcc8752f3e13c54591260b1b9e06087eff822c5fd2cb763cbca36b29cc1f500a94", 0x98}, {&(0x7f0000002f40)="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", 0x1000}, {&(0x7f0000003f40)="6a9d", 0x2}, {&(0x7f0000000480)="5c6dfac76d4719262caafb361e22296f93b42ddb1536459555538382df837c84c785b6e72c3036c3e396f4", 0x2b}, {&(0x7f0000003fc0)="9c949cc87203d4975e508c9281ffc6b7bb9888c6ac3c675417032033ac81d8885289454a1de4c01555598b8f3deac2", 0x2f}, {&(0x7f0000004000)="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", 0x1000}, {&(0x7f0000005000)="cea3578510090e6ed65927e1109ae62b5caf96006a4e30e734af404ec74a750043cdb445fa9295d2b20c62760b734d1e0dacb1295085fc1cf318a23d30ad7e7626a8dee7ddeab8e2f4954c3b992cc3473b4427362f7ad251637ffab1e3c17e2d11e9c42469b5985c3f67b46a7ccbce3741a4e884328e", 0x76}, {&(0x7f0000005080)="78c340592227b33b03f801ecdc0a554701ec0ba5889e0983085564d3eeaacfd8e93e0404f81b43734b376d8be819373b7e0c45c1e30de61ad29a239d1564ce38df00f5b304992b5fffa9f8a15e4f78bce78e327782fae0c0ab7117f5eba65d97dc0b847ec1666d679897475426037609280bf23ec7fa4613f2065068f20097ad74b3ebc8bb740297e8bdaff378347afab88f742ef01776eb87ba57e5c6527261b25bdfa4c637cd0fb01bacecbc6e720151aafff2546260b57fca3815a68c5ba1432624be38b80d97af8dc4fbd1372f8e6ed1", 0xd2}], 0x9, 0x0, 0x0, 0xc010}}], 0x3, 0x1) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000001c0)={0x0, 0x0, 0x8, 0x6}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) prlimit64(r2, 0xc, &(0x7f00000000c0)={0x8cd, 0xfff}, &(0x7f0000000100)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x4f, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRES64=r2], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='hybla\x00', 0x6) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000180)={@multicast1, @loopback}, 0xc) 8.103731886s ago: executing program 2 (id=738): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000009000000000000000000000118110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000000400000083000000bca900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000400)='GPL\x00', 0xb, 0xffd, &(0x7f0000001e40)=""/4093, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r3, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000108000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000002000/0x3000)=nil, 0x3000, &(0x7f00000003c0)='nl80211\x00') r10 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r11, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r8, 0x107, 0x14, &(0x7f0000000000)=0x80000f41, 0x4) sendto$packet(r8, &(0x7f0000000100)="3f0302000000000000001e00a000", 0xe, 0x4800, &(0x7f0000000540)={0xc9, 0x1749191bef107f84, r9, 0x1, 0x1, 0x6, @remote}, 0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x8018, 0x1, 0x9, 0x4, {{0x17, 0x4, 0x3, 0x3a, 0x5c, 0x64, 0x0, 0x9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @dev={0xac, 0x14, 0x14, 0x2b}, {[@timestamp={0x44, 0x10, 0xd2, 0x0, 0x0, [0x5, 0x5, 0x7]}, @timestamp_addr={0x44, 0x34, 0x26, 0x1, 0xc, [{@remote, 0x2}, {@loopback, 0x400}, {@local}, {@local}, {@remote, 0x3}, {@remote, 0x1}]}, @end, @noop]}}}}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xa0, r5, 0x5d7af213ec3f6948, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x81}, 0x10) 7.750254431s ago: executing program 0 (id=740): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x444, 0x3f4, 0x200, 0x70bd2d, 0x25dfdbfe, {0x3, 0x0, 0x28, [0x7f, 0x6, 0x7, 0x4, 0x3ff, 0x91, 0xfffffff7, 0x2, 0x2, 0x0, 0x3, 0x7, 0x80000001, 0x9, 0x6, 0xd, 0x7fffffff, 0xff, 0x800, 0x9, 0x5caddbe0, 0x4, 0x1, 0xcda3, 0x7, 0x244e, 0x100, 0x3, 0x7, 0x14, 0x6, 0x3, 0x2243, 0x2, 0xfffffffb, 0x6, 0xefaf, 0xffffffff, 0x7ff, 0xffffff3e, 0xfff, 0x100, 0x5, 0xe, 0x8, 0x200, 0x1, 0x9, 0x4a0, 0x10001, 0x1, 0x5, 0x3, 0x3, 0x7, 0x8, 0x5, 0x2, 0x2, 0xfffffffa, 0x3ff, 0x4, 0x4, 0x9], [0xd, 0x8f67, 0x8000, 0x5, 0x5, 0xffff, 0xa, 0x3, 0x3, 0x40, 0x1, 0x5, 0x1, 0x9, 0x80000000, 0x7, 0x6d, 0x7, 0x6, 0x5, 0x7, 0x2, 0x6580000, 0x800, 0xffff8000, 0xcda, 0x1, 0x0, 0x5, 0x401, 0x10, 0x5, 0x4d, 0x4, 0x6, 0x4, 0x1, 0xf519, 0x3, 0x5, 0x7, 0x6, 0x2, 0x80, 0xd, 0xc95e, 0x1, 0x3, 0x6, 0x8, 0xffffffff, 0xff7a, 0x7, 0x70, 0x100, 0xff, 0x819, 0x10001, 0x4ee, 0x4, 0x3ff, 0x0, 0x5, 0xfffffffb], [0x4, 0x2, 0x0, 0xfffffffa, 0x62b, 0xa, 0x2, 0xed2, 0xffff, 0x9, 0x5ef, 0x9af, 0x10001, 0x6, 0x9, 0x8, 0x0, 0x6, 0x7, 0x4, 0x0, 0x6, 0x24, 0x8, 0xd9f3, 0x55d, 0x81, 0x200, 0xff, 0xfffffffc, 0x0, 0x1000, 0xdaff, 0xb, 0x7, 0x8, 0x9, 0xffffff85, 0x2, 0x40, 0x0, 0x6, 0x4, 0x5944d9a8, 0x21d, 0x5, 0x1678, 0xa, 0x0, 0x6000, 0x4, 0x8, 0x9, 0xbaf6, 0x4, 0x8, 0x80000000, 0xfffffffe, 0x4, 0x2de233b, 0xf, 0x7fe00, 0x7f, 0x80], [0x6, 0x7, 0x7, 0x77, 0x9, 0x1, 0xea, 0x7, 0x6, 0x7, 0xffffffc7, 0x8000, 0x200, 0x516a, 0x7, 0x9, 0x6, 0x2, 0x40c9, 0x4, 0x3, 0x5, 0x1, 0x1, 0x10001, 0x1, 0x8, 0x4000, 0x100, 0x100000, 0x7, 0x3, 0x58, 0x5, 0xffffa8fb, 0x6d, 0x10000000, 0xa598, 0xd0, 0x9, 0x39a4, 0x3, 0xa, 0xf3, 0xd63, 0x0, 0x0, 0x1, 0x4, 0xc, 0x8000, 0xda, 0x1c, 0xfffffff9, 0x2, 0x65, 0x0, 0x9a, 0x3, 0x8, 0x5, 0x100, 0x81, 0x2], 0x23, [',+\'-+:}^\x00', '+[)&\x00', '{/\'[*\x8f+-(,)+-[-/}*V.&']}, ["", "", "", "", "", "", "", "", ""]}, 0x444}, 0x1, 0x0, 0x0, 0xc4}, 0x4008001) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x58, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001c00)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001bc0)={&(0x7f0000000700)={0x148c, 0x1d, 0x800, 0x70bd2b, 0x25dfdbff, {0x20}, [@nested={0x1008, 0x0, 0x0, 0x1, [@generic="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", @nested={0x4, 0xcd}]}, @nested={0x96, 0x11f, 0x0, 0x1, [@generic="cb5a127ecbe9a78dc48421a5c7fc2f2bb711a4858f259204ab2d0f09034a6161eb2dc9ebbaa0a1369b837a4bec6355b4730a3a5b975254b226c5b957f690c52dc8594b23c5391157a62bca768b2e67d24bb5f660035a74b9228eb491fa2ea2e9c346ceea205bc6338ba5c3cda594a9f65cc3b2cf0e7404834976aed90be1cb7048819900d027e503660e3a60c71f", @nested={0x4, 0x134}]}, @nested={0x373, 0xb7, 0x0, 0x1, [@generic="0a4f7913a90dd3d36074464605531bd503e1cbb798d0b0226e672a035542575908c38a838b4ed9f2f7b890c2e479a0b62e0592c0b054ddf8b69a67bf3d1294b1233cc117e038f0186e7ca713474c72e0884c6728a4358ef63292ea792d2923a1313fcb8b0f456d337203c06037ca0ad6bd77489eb19ff75dfc880d98298bec799fa3ebb832aea722e075edb36262eff4cd8e83edf3d313c67bd74782cac7e702deba55a6e87a98ae41e84b7c9d8e4f79bb4245dce44b590e10ff5e5a592e92420703e4", @generic="abbef7a885ff840bacdd506710ed416999364a5fc840d4a68c898d221b8a1cffdf797b661e939bb4d5f10676c2770de8a99febf23f73c4bcacea172e75667acf5c418f4154ac96", @generic="0897cf9f20723efa0062210844bf0ffa2815fa4f7c2a684d4764ea205e255da863831583be4cd6533c1f4cea98d8b0836784875a49cfd43bdd618aef67e30fb5a39de6f2b387124519ecdf8edec03a6f68f2f17e34c2495589d1ff760bac6ccd40f6471a1a66ad9a88df39170e14d7468e4a2f594500ec3816ab43746821ba0640c09e21ad8efb56343a9e3f8e5ec2a025a332513e68a7a4586f7dea88032229f0ae8f6f025408640953671665441c14fedde80cd813771020b585ed7fec323e70160de8c575a896ecc193409f25424760cbb2fc51961d0d4185ba60932859b34f467a111a", @nested={0x4, 0x17}, @generic="ed4da574bbf555e25242cd3875ce78ccc070951cb81f875d2c74085c59068bcb647434ca699abdb2322f7d48435970d6ef0531479ab1cfe065ba474429c4b79ee4dca372c696aa63431f0906ecbfa24921339e6ca01a814f9f03efd0a619051cb09000875a73ba5f33e5e1fa953d5034a9894fe5e4b7bdb3d455b962067590ca7ad268f459a55218a21e90aecb064b200bdfae22f9a3d27e6a8187fdd3de4302d87e5a9ea66ad3db4ee58c013f4bec8cccd786cc5ed93742e9ab13aba55369bc3a9eb56f877a67c9b49fe1701bd98b46", @generic="cf7173992d4daf796c65d2e15bcf3f966d97890cd975f6a28f1a10d6e3b8a6cf655d99e5880885277b2b386ea4ed628cb3906e911e4226731c26c7be62acd199fe83ccf4b33cac71607b7cd15d47d4b740dbb0c80c5cb080b43aa96e9bb9a6dece01b4fa86f307d609d2d07c8b600c0510c11617ed74006e1c362f3b7915f1c54c12b188e9d707dbb5f004ee18b09b02fbad2f5cd6fb35296bb6aeb0d4bcd1023e815bd5db6877a4f1f4bd53"]}, @typed={0x8, 0x1d, 0x0, 0x0, @ipv4=@loopback}, @generic="391e3f4895c49f033af64131328ad37a55ae825ed7045d6ed16496b2767b29f58c066ce3bf56b3692ca6c670a83ddd0b0199cf22e7aa36b9f4578079e54ab0d654056209105aa1e1c2b4b9b6a924", @typed={0xc, 0x74, 0x0, 0x0, @u64=0x6}]}, 0x148c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c80), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001cc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f0000001dc0)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)={0x70, r3, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x40}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x35}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x13}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x40}]}, 0x70}, 0x1, 0x0, 0x0, 0x8001}, 0x4) (async) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000001ec0)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}]}, 0x3c}}, 0x14) (async) r5 = signalfd(r0, &(0x7f0000001f00)={[0x9]}, 0x8) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000001f80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000002040)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x2c, r6, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20048850) (async) getpeername$inet6(0xffffffffffffffff, &(0x7f0000002080)={0xa, 0x0, 0x0, @private0}, &(0x7f00000020c0)=0x1c) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000024c0)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002480)={&(0x7f0000002140)={0x338, r3, 0x2, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2002}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x230, 0x84, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x7, 0x1, @random="b3a3b2"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xfffffff7}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x7}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7}]}]}, {0x6c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x54, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8}, @NL80211_BAND_LC={0x8, 0x5, 0x6}, @NL80211_BAND_LC={0x8, 0x5, 0x10}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x7ff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7}, @NL80211_BAND_LC={0x8, 0x5, 0x1}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x467}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x399}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x95c}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x5}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xd}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x429}]}, {0xac, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="ec479bb79e75"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x3ff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xa}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x270}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x3}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x1}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x7fff}, @NL80211_BAND_6GHZ={0x8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xa6f}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x5}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x3523}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x7240}, @NL80211_BAND_LC={0x8, 0x5, 0x40000000}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x11, 0x1, @random="04d7fd06bc6fea422fb9489232"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="9eac8942fdc3"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, {0x84, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x2}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x59}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x2}, @NL80211_BAND_LC={0x8, 0x5, 0x80}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x59b0}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xffff}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="bec3d8807c61"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xffffffff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x2c0}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x5}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x5}]}]}]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x88, 0x84, 0x0, 0x1, [{0x84, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x4}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xf76e}, @NL80211_BAND_LC={0x8, 0x5, 0x1}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xfffffffd}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xffff5eac}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xffffff00}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="d3254dc4c125"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xd, 0x1, @random="b8ae3bd12d31e4639a"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}]}]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x48, 0x84, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x24, 0x1, @random="dcb319d85aa9e566fe85e3e521b21bd26ef4ee5556f00c5374dccd5892a1d91e"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x800}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x10}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x4}]}]}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x28}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x338}, 0x1, 0x0, 0x0, 0x40020e0}, 0xc0) (async) r7 = getpid() capget(&(0x7f0000002500)={0x20071026, r7}, &(0x7f0000002540)={0xffffff28, 0x0, 0x8, 0x1000, 0x1, 0xfffffff9}) (async) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002580)='/sys/power/disk', 0x80e1c0, 0x20) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000002600), r8) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000026c0)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002680)={&(0x7f0000002640)={0x1c, r9, 0x1, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x800) sendmsg$NL80211_CMD_SET_WDS_PEER(r5, &(0x7f0000002800)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002740)={0x44, r3, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x66}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x40801}, 0x8000) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000002900)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000028c0)={&(0x7f0000002880)={0x2c, r3, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3b}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x84}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}]}, 0x2c}}, 0xc0) (async) syz_open_dev$dri(&(0x7f0000002940), 0x7, 0x101040) (async) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000029c0), r1) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000002a40)={'gretap0\x00', &(0x7f0000002a00)={'ip_vti0\x00', 0x0, 0x8000, 0x40, 0xfffffff8, 0x2, {{0x7, 0x4, 0x3, 0x6, 0x1c, 0x67, 0x0, 0xb, 0x29, 0x0, @broadcast, @empty, {[@ssrr={0x89, 0x7, 0xd8, [@remote]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000002a80)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r8, &(0x7f0000002bc0)={&(0x7f0000002980), 0xc, &(0x7f0000002b80)={&(0x7f0000002ac0)={0xc0, r10, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000044}, 0x4001) (async) r13 = syz_genetlink_get_family_id$smc(&(0x7f0000002c40), r5) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000002d40)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002d00)={&(0x7f0000002c80)={0x74, r13, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0xb}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x24008000) (async) sendmsg$NL80211_CMD_DEAUTHENTICATE(r8, &(0x7f0000002f00)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002e00)={0xbc, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0x83, 0x2a, [@fast_bss_trans={0x37, 0x59, {0x7, 0x1, "6426c95cc0b1d499da22b3a162d99bb5", "1a2accfc0060228d376989aae61805f078a919178d2459f2bd838240efc35497", "0e3c4e4573de916c57c2ac7eea97cf6b580840bfa18a38b0707fb055750594c7", [{0x2, 0x5, "5d0cadbb3e"}]}}, @cf={0x4, 0x6, {0xe, 0x4, 0xc, 0x3}}, @ht={0x2d, 0x1a, {0x2, 0x3, 0x1, 0x0, {0xe19b, 0x3, 0x0, 0xed, 0x0, 0x1, 0x1, 0x1}, 0x6, 0x8, 0x4}}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7ff}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x94) 7.445595745s ago: executing program 0 (id=742): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="140100002e000100000000000000000001"], 0x114}], 0x1}, 0x0) syz_usb_connect(0x2, 0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="12011003a12591405e043f0490fc010203010902380001010090050904000004441b5c0009050000000000000009050402000000000009058802"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) 6.007266871s ago: executing program 1 (id=744): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r1, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x231}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40004}, 0x40880) ioprio_get$uid(0x0, 0xee00) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000240)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x29, 0xe4, 0x2, 0x0, 0x10, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x10, 0x1, 0xfffeffff}}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, r2, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040848}, 0x0) r5 = getpid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {0xee01}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0, {0xee00, 0x0}}, './file0\x00'}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000004c0)={r5, r7, r9}, 0xc) eventfd(0x50bcb8d1) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r6) sendmsg$IPVS_CMD_NEW_DEST(r10, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x138, r11, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x49}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xf}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_DEST={0x6c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1ff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x39}}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010102}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x56509f8337f686ab}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x10001}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7c}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc}]}, 0x138}, 0x1, 0x0, 0x0, 0x20004801}, 0x64008000) getsockname$packet(r6, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000780)=0x14) sendmsg$sock(r10, &(0x7f0000000d40)={&(0x7f00000007c0)=@can={0x1d, r12}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000840)="51e95d313084e81067046478f4b15ebdcb4607dd02577f43c187", 0x1a}, {&(0x7f0000000880)="6127dc275c3bf30cab24c76d0e6c0bca769386881be8a6ab76e6ee7ba7ac44527e7acb903a980f24e92db547409bee32f612d65a0fe84e08ae8ec64cad941c25d7c3fb987a3b56b4cc214931b067fb7689885ae0e4f52170e62b27914fb8d4bcaa1614ce78efab032de198e77cd61388cd67984af55bb1810dc271b5aaf53116589ce5367d71b8e132243f91db3b675cadb4a0ed53ac3317bd01dc6993c8c7d3d01eb927a3aa8c2ad4e0dfb69c209528f2a7dcfc7dd650aef749ab2013dcb461a7ebad21a7", 0xc5}, {&(0x7f0000000980)="b61c76dfd8e307bc8cedfa11ce7dce8e25a892e2074efca65c785a03e963a2a097885ef25e604d3a75b002c1a6d0041ecdadd7725cf32a0af04812077df9a18003b63cdb0a6f86d3f87b3a976fba024c1b43f4f93ec8a0bcda46196ec0367cb1c6f9dd86d5259d47f17276ecfc1bdbcf08e05cc4f298c7ab63526846f8ef7f8f6fe63ee0f039f389e1f2a9bc18aa6b5162afc74c169102dbb924852174e33fdcbfe07ad8", 0xa4}, {&(0x7f0000000a40)="2be42d754dcf78821235255f98fc82b655a8874268827daa9184997fcda04f71858c1a7859a38e8cc0e441abaff3d6cdc3bee9b552fcec7f7ccb0c51d4bb5d62f3dae653d03a2136d27d597caf2a2c9222fad891b5d60d6b7ef8cbeffaed2986c52a03546770ba65fa4592949ad87b86dd1f4fd2df873e1dd2837eafda071c7f3d97ea2eb530781003adb8df048222bf0b370fa0281f5a72016d98707888245f487e1dc4472b5575c67eb56c6db7ae156160e02b0a9dfa", 0xb7}, {&(0x7f0000000b00)="1698647096521a40c422d7ef65b8f3f0c2bd3c9ee34286650bc45f492d4c60b8194761286a8c7909211dae4e", 0x2c}, {&(0x7f0000000b40)="0fb2a8c58e09ff55b0bd1905f80bb617752a1cd5b9215c796e40aca10a1a8fb5c2ae5b2285a87a35a5b0beb0e6df9c6c40eb6da034eab5ac687ee15150d186581f4ae62c61bc74494887b2f295f94259e12d735b16ef4c564b18c99a471e5c66a8f29ea18c90190c09efb4cbbfe62463b31641f8853db55f8992228711878e7840698199ef1f3fdf621039d2d8299b981e84246fd640d83391c03d258cbb56dbd45fe843a2cff04f5c5012d15fbda3e5e48c6e7b25174ab1b2140b1dff7009694a18b984553d8606332b3e6cae52f92be3f4954450bf6a", 0xd7}], 0x6, &(0x7f0000000cc0)=[@mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0xab}}], 0x60}, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r6, 0x3b88, &(0x7f0000000d80)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r8, 0x3ba0, &(0x7f0000000dc0)={0x48, 0x2, r13}) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r6, 0x3b65, 0xa) ioctl$VIDIOC_DBG_G_REGISTER(r8, 0xc0385650, &(0x7f0000000e40)={{0x1, @name="2bd6665446563bf144ca9d014aa508a87989ed19ca067bd03a3d7e86fa1c4623"}, 0x8, 0x7, 0x9}) request_key(&(0x7f0000000e80)='cifs.spnego\x00', &(0x7f0000000ec0)={'syz', 0x3}, &(0x7f0000000f00)='macvtap0\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000f80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r8, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x28, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x4, 0x8}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x4000040) r15 = syz_genetlink_get_family_id$tipc(&(0x7f00000010c0), r6) sendmsg$TIPC_CMD_GET_NODES(r10, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x1c, r15, 0x200, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) syz_usb_connect(0x1, 0x72d, &(0x7f00000011c0)={{0x12, 0x1, 0x201, 0x88, 0xf5, 0x81, 0xaf, 0x2020, 0x4000, 0x37de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71b, 0x2, 0x4, 0x2, 0x90, 0x6e, [{{0x9, 0x4, 0xf7, 0xe, 0xe, 0xff, 0xbb, 0x41, 0x3, [], [{{0x9, 0x5, 0x0, 0x0, 0x208, 0xf, 0x0, 0x64, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xd7, 0xa4b}]}}, {{0x9, 0x5, 0x9, 0x3, 0x400, 0x0, 0x9, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf, 0x2}, @generic={0xb4, 0x24, "369b58cfbc5e7be169deb8362c27732bf3801d8b898053c0f59449cb2464ea5cffd38e739ab1237d4bb3fde41384fcd6f555ebdfbe4ae8cca1a3601cd880549689cf53ed24b4e6de96756a012149c77326d71363d1997620e9245fe0538bb804df889204efb94b4bf86fbf222d718356e5bfd5fe6abafe91d352d09883ccf5efa3d7bd646bb7b43f2a21bcd0c1428636f6fa2f09b23027765e6859d16db1683a9f65bf3f9279b8b644f98645454870da7c0f"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0x0, 0x9, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x8}]}}, {{0x9, 0x5, 0x0, 0x8, 0x3ff, 0x80, 0x54, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x1}, @generic={0x50, 0x21, "0effa87b35209366d945e07c5738d2e8191cf02990f9319b16067c4192d5cd1fb1545e85054bb45493c348283cb943afba971bc83cd6d34bbf1ae219ecf259835df70ae09e922e7d6d1c10565b4a"}]}}, {{0x9, 0x5, 0xa, 0x1c, 0x10, 0x5, 0x1, 0xbe, [@generic={0x92, 0x23, "4001c30401e00e58b8c1c8434ec5ee025f997a505f35a331252d9d3f887ff1343de6db474ea644b80f20dadd7a3df6a9e9d99cf5b9c00ab21e61ddd361eceafbbd5c9aead1a20b2d977ac0a4b085eda314b2fe39b027e65cb9709b173ecb5f25d65451e15ff2dcabde8d6c591dc151af5fae51c39553b7b1335f918e53a513717e81ca8e0b91026e55ba6f005ef1f1fa"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x3ff, 0x81, 0x9, 0x1}}, {{0x9, 0x5, 0x0, 0x275e4ef8ab12a740, 0xddd8c38b22338a68, 0x4, 0x40, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x80, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x3}]}}, {{0x9, 0x5, 0xa, 0x10, 0x40, 0x2, 0x2, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0xf48a}]}}, {{0x9, 0x5, 0x1, 0xc, 0x8, 0xb, 0x44, 0x5, [@generic={0x14, 0x7, "6fef23205a98e2e42ac70fcb124801748669"}]}}, {{0x9, 0x5, 0x80, 0x1, 0x3ff, 0xd, 0x7, 0x3, [@generic={0xa4, 0x1, "f2a8645f99025189ed0640cc5a55ba9566fdc1725e24216cf262479f7857882be3cbd44b3533a3e8cf6bf897a087c9a28a4a4fa88447a365b2fda006f2e8bf2ee276e8ce30bf92d2483aa164b87138902b79dbd6b45866508ad48d7d3dbe28f6f50995e01de5b45980eb6899b53e824e5ea52817f2bfbeb332c7e6938f066365601379efa7fc04d6d57febc0a4ffea043e0cf76deac0f699310d75223645fbc443f2"}, @generic={0x9a, 0xf, "f8b025b525a9579cd4a96de2da9cdf2749e59019c2c63ce82e980f23b62b0e8f9960e35460d1c2471d85825c9d5f0a051522d07faf102ef523e5edcb10ac20a1b9354ead3636fbed83eddda3a4ad9498910d7f3e3d63784c85547e4e2dc6be0535b3a5b6537b909b913efb8fbb1193a025a1aa2eb6a68061bb1e0c49f6c4771ff9c15f1c080d1986e0864a6ee4cbce2b246932b7c69502b0"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x3ff, 0x0, 0x4, 0x80, [@generic={0x7d, 0x5, "4364f753f92a47ed3d1d1ae7f0881d81cbeb1697a5a62bd76f786e983f56ba324ebb6d229b6c4b63d83cd8f02c3c724e9b871ebf92f2a21c60f9ef63171e09da03d3f4cb4c9c7f9a1dd309d1b101563baae6a9134b8ff151f7bc92ff86757777f684a850d7a149cdb3e800720cded63e60f4ea627a9fd402bf56b3"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0x8100}]}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x6, 0x1, 0x0, [@generic={0xbf, 0x2, "89648c822dd85b3fc6eba662a9d029f3326ce934ccc25f4b36ae0e231e163fdedd715427821ae0f3bbd528b407b0e6f729e4f17098707d42eccac6c756b1dc2bdb650e5681c3af56599b98a29f766800e5bc3bbd5125b4bb81903d46b3a11203b8e7e8db01d6b46d6bc2a15e3322071e4fd8fa6d31e16ed05861f7aa1454f024683eeed26240545dc958cad93ec213c81366911f3bf00367957be44430d3451b38289e683735a9b66f376a305030194913ecfb85d34337ca694e3a43d4"}, @generic={0xa1, 0x1, "57ed83e17503b385373f19a29809316497885fe56f047f086f4b0125af1bf0c950ad1e77248d19f22a553d05f7c165e55c3fa39dd9b67232b71e4b057ae4843c20af44b811e1e09475dbb644ad4a7a4e3d847ce07f21f510e00725e1b559c7d77070f4e4c7bb8e615c7ab72b62c6d375b0e09ef9f188ce6b5b2b7792ba23ed00538210e2126b70f60d575c8d97831ba077882776535df7bfa7848287c64285"}]}}, {{0x9, 0x5, 0x1, 0x2, 0x40, 0x26, 0x9, 0x87}}, {{0x9, 0x5, 0xe, 0x1, 0x10, 0xb, 0x7, 0x2}}]}}, {{0x9, 0x4, 0xaf, 0x8, 0x6, 0x1, 0x2a, 0xc6, 0xc4, [], [{{0x9, 0x5, 0xf, 0x3, 0x8, 0xf6, 0x5, 0x1}}, {{0x9, 0x5, 0x9, 0x10, 0x400, 0x7, 0x3, 0x7f}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0x3, 0x8, 0x10}}, {{0x9, 0x5, 0x1, 0x1b, 0x8, 0xc, 0x8, 0xfa, [@generic={0x7d, 0x9, "7943e082236be70abe21f487cfdf1af41988d7949aa63d39077ecff227313b7e5de1c0191ab0f4fcb64e121cb607c8e99bb6ee71fa0e488b812731f4c918863d58138608000efd229b28cbf3fcf8c49231cc6ca197078adec9b3c2918eba9ecd040df9cfb71c52c51d9242ef963f2d7f5cc2b7f459d5389fe2872b"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x8, 0x4, 0x4, 0x0, [@generic={0xcb, 0x4, "36e0b1d6178fb89129bce13a7326035ec8900468346049be8be6243eb4446aa143fda4aff0598182a5f61e2a20badfc79cc611d5262ae8d7549b83c79c9adbd99a4df4556bd4b8dbdbe3bb8f93b25466208435376f2987934d729f7f3ba2e708c727ae5cfbaafa019639401e02bc19d6c7ec7ec08fb1d2bca61735a18e0b9468ee797896ce3412c6e7d00e7c6c4838d27fb88065efec822b7500f584764cdb75bedec0941a54c16753ef09c4878f8f975b0defacc52e0284c8f62992a57ceb5894daec93e59fe655e7"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x8, 0x9, 0x80, 0xfc}}]}}]}}]}}, &(0x7f0000001d00)={0xa, &(0x7f0000001900)={0xa, 0x6, 0x300, 0xab, 0x5, 0xb8, 0x20, 0xd9}, 0x42, &(0x7f0000001940)={0x5, 0xf, 0x42, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0xe, 0x0, 0x0, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "dbe99ec9cc2a2fa0dc2e432aba453ab4"}, @ssp_cap={0x10, 0x10, 0xa, 0xfe, 0x1, 0x7fffff7, 0x0, 0x2, [0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xe, 0x0, 0xf, 0xff, 0x5a0, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x5, 0x7, 0x4}]}, 0x5, [{0xca, &(0x7f00000019c0)=@string={0xca, 0x3, "25d7eaabbf2ddf544b29ffb09ca6af3e8368f0568309c1108d5053bdf63d3fbe2da86269d35f24ce273d2d1e5177ca78216204fe165915fce1a54a861076e0c4e2ec23825d1e7c8ccdd4a47d9df180eceb0097ce48d1a74d34c4a707951aa834e866618033399e25b17aeb487f6e2063f7eed30a4ca4ba1b26614d5511e65cbb42c68466b8908c00d8fb907ca94e299d53ea23a82eb61697d6b2012e825e54ec8117a2692d190dcbb881b78c989c0e3b92b6ee2dceabe5ac87bdba251b2c0822a92bfdc67b8a9db9"}}, {0xb3, &(0x7f0000001ac0)=@string={0xb3, 0x3, "b923c9aa92b86026dda9a7f1b3e01d897c7b8d3bdf4657347039951f7672455a235e112d6d7f78eea27feb2ed9fa5f17ebca159c8a7b9c72f9fdb84f221b6f70a9055537c766f53f281b58cce1f734c3628e7f4cffd4398f55887990f240404022b340b4b11eaf45491e028fbc5781dfb9caba81e5ea938daeb422eb8d6b7888943ed7ed74919f6eb5b3577961ba4464f3d932eecf899148cdddd06ffdf2ccc016ef3d114939b2a8e0c6b387dccf6a4e65"}}, {0xcf, &(0x7f0000001b80)=@string={0xcf, 0x3, "24956abdada41ce3099708c43be5f56c86907f40ce62670342cf16dd667d2dda1f17dc08521394c4c079f099bf87bee0f861e86a78280dc66fbbebe8a32b2c4502bd5aa78ba088c89cd6417c89407433a449c12b853859e4de9697eab975f8fd4440dd028591907dac47b81c58bc7f0a019d6f2452184bc650c8af92d64b16d1891a9c858db5fb73a4c24475cbf1a9263e9e655eb955f318fd3e9ed0d071fd126a0499257acd15b298d46de2df32f2e0dd529f3ec87dacc6d050dfb0a2848bb8b86709ca9b0244d940b5bb1536"}}, {0x4, &(0x7f0000001c80)=@lang_id={0x4, 0x3, 0x1004}}, {0x4, &(0x7f0000001cc0)=@lang_id={0x4, 0x3, 0x816}}]}) ptrace$PTRACE_GETSIGMASK(0x420a, r5, 0x8, &(0x7f0000001d80)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002100)=@IORING_OP_STATX={0x15, 0x0, 0x0, r8, &(0x7f0000001fc0), &(0x7f00000020c0)='./file0\x00', 0x4, 0x1000}) 5.960477601s ago: executing program 5 (id=745): ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, &(0x7f0000000000)) 5.859701952s ago: executing program 5 (id=747): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000000000000000000000008500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) rename(0x0, &(0x7f0000000f00)='./file1\x00') recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x111, 0x1}}, 0x20) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r6, 0x80184132, &(0x7f0000000300)) 5.719703291s ago: executing program 4 (id=748): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1073eeda8705da74bc83496ee251e51e6d155c558a4f6dbf7076341df55b7aec", 0x20}], 0x1}}], 0x1, 0x8810) mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000580)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r7 = dup2(0xffffffffffffffff, r6) close_range(r7, 0xffffffffffffffff, 0x0) r8 = io_uring_setup(0x868, &(0x7f00000000c0)={0x0, 0xfafb, 0x400, 0x2}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r9, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x28, 0xa, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040014}, 0x4000) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r8, 0x14, &(0x7f0000000000)=[0xffffffff], 0x2) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r8, 0x1e, &(0x7f0000000080)={r7}, 0x1) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x804) 3.582428206s ago: executing program 2 (id=749): syz_usb_connect$uac1(0x2, 0xb2, &(0x7f0000000a00)=ANY=[@ANYBLOB="12010003000000106b1d01014000010203010902a000030156c0020904000000010100000a24010101bb02010211240601040507000a00080003000200050524050e0f0f2406020504020002000a000900040a2404020104000000120924060502010600000924030303030505"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000)=0x100, 0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'veth1_to_batadv\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1c, 0x3e, 0x301, 0x270bd26, 0x25dfdc00, {0x3}, [@generic="8d82a15aee"]}, 0x1c}}, 0x8004) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$nl_route(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000003e00000129bd7000ffdbdf2535000000"], 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0xc) 3.581380434s ago: executing program 4 (id=750): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000000000000000000000008500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) rename(0x0, &(0x7f0000000f00)='./file1\x00') recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)) r5 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x111, 0x1}}, 0x20) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r6, 0x80184132, &(0x7f0000000300)) 3.573169387s ago: executing program 5 (id=751): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x6, 0x23, 0x9, 0xdedb, 0x5, "00000000c89cefe0"}) (async) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8001) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = syz_io_uring_setup(0x4bb5, &(0x7f0000000440)={0x0, 0x0, 0x80, 0x10000000}, &(0x7f0000000340)=0x0, &(0x7f00000001c0)=0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async, rerun: 32) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) (rerun: 32) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0x40082104, &(0x7f0000000200)) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) epoll_create1(0x80000) (async) r5 = io_uring_setup(0x194e, &(0x7f0000000a80)={0x0, 0xd3d5, 0x2, 0x1, 0x2b0}) (async) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r6, 0xc01864b0, &(0x7f0000000240)={r7, r8, 0x0, 0x0, 0x4}) (async) close_range(r5, 0xffffffffffffffff, 0x0) (async) socket(0x28, 0x5, 0x0) (async) socket(0x5, 0x1, 0x200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x1, 0x0, 0x0}, 0x94) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='freezer.self_freezing\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f00000000c0)=ANY=[@ANYRES16=r9], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_MSG_RING={0x28, 0x8070208e630aabc4, 0x0, 0xffffffffffffffff, 0x0, 0x0}) (async) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) 3.572800497s ago: executing program 0 (id=752): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000006680)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c0500"/4281], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x101800, 0x0, 0x4}, 0x18) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r0, r1, 0x2f, 0x8, 0x4}, 0x20) 3.566502257s ago: executing program 4 (id=753): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000840)={0x0, 0x0, @pic={0x67, 0xfe, 0x8, 0x4, 0x7, 0xd9, 0x0, 0x1, 0xfb, 0x8, 0xc, 0x0, 0x1, 0x9, 0xff, 0x5}}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000380)={0x8, 0x8}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000079db8540da0b77010b7d000000010902120001000000000904", @ANYRES32, @ANYRES8=r2], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x64, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xffffffff}}]}]}}}]}, 0x64}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x44, r4, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'caif0\x00'}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0x70}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x28}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 3.559883392s ago: executing program 0 (id=754): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000600)='environ\x00') r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, '\x00\x00M'}, 0x0}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1", 0x2f}], 0x1}, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'sed\x00', 0xd, 0x4000ffc, 0x4a}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) connect$can_bcm(r4, &(0x7f0000001ff0)={0x1d, r5}, 0x10) sendmsg$can_raw(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000140)=@canfd={{0x1}, 0xf8, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x40041}, 0x80841) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io(r3, 0x0, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000440)={&(0x7f00000001c0)=[{0x8000, 0xe210, 0x3e, &(0x7f00000002c0)="fd47bb9797d25995a1922e6471cefac293bfe86367296dddf4f89e4e76c3c51ab3b8e4e2cba30c5a72ec68d7d86dc52b756d17357234b48bf0570dcf7d84"}], 0x1}) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@local, @random="e19d74de7dc1", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0400", 0x38, 0x6, 0x0, @remote, @local, {[], {{0xfffc, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x0, 0xffff, 0x0, 0x6, {[@md5sig={0x1d, 0x12, "fb6ba0cd8f4e22c7624e2ada29619d18"}, @md5sig={0x13, 0x12, "3fb3be65a54fd336b0e78572bf7b439c"}]}}}}}}}}, 0x0) read$FUSE(r2, 0x0, 0x0) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000080)={0x9, 0x81, 0x7, 0x0, 0x5, 0x6}) 3.55661587s ago: executing program 5 (id=755): r0 = socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x4d, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x40000) 3.37018799s ago: executing program 5 (id=756): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1ae8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) sendmmsg$alg(r1, &(0x7f0000000800)=[{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000340)="7d7a68e25d38566c61856d6817441a9caa9b23557af3d00f974cd91d1b33a9d6e17fd477051346d814913f8a3ef2e1a781a2bbfc8d55dca693d39139f04047784190d93b5301b4abe27c9242396d40a5c2b7789629214281c8e09a6c1f1e0db5d1e74e1f27a89b2c25c2316fcddc9ff2a71eceb3094ba465389e", 0x7a}, {&(0x7f0000000080)="ce2ede98d4bde439a7931c4e260090a647151bacb721146be7ef4494578b05c18fc56c1571aa57d0f79d3ce5", 0x2c}, {&(0x7f0000000600)="5fec9dec1e9d48e2b3a02e29dcaadb6d242c08b8b6e2a34dd08e48e3d32aa2bf0bd42348d6bf39fd7dac80fedaaab8ff4258ecbc4e025305fab94303f773d083bb47da241fe082c8f8602308cd2f7dc846c93e62a8d53d22fcabce47b5531463290c970dccfaa7da3e4e457ea05fd85e6fcc1fcae56136f44b99", 0x7a}], 0x3, 0x0, 0x0, 0x2400c0a0}], 0x1, 0x48800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f00000009c0)={'syz1\x00', {0xd, 0x45, 0x2, 0x4776}, 0x2f, [0x84, 0x4ca1, 0x80, 0x1, 0x10600, 0xd, 0x1, 0x1, 0x6, 0xd, 0x3, 0x5, 0x7, 0x6, 0xffff0001, 0x2, 0x0, 0x9, 0x7, 0xfffffffc, 0x2, 0x5ed0, 0x8de, 0x0, 0x1, 0x6, 0x8, 0x6, 0xfff, 0x1, 0x601a, 0x9, 0x3, 0x0, 0x2, 0x1, 0x2, 0x7f, 0x0, 0x2, 0x3, 0x7, 0x1, 0x2c28, 0x7f, 0x4, 0x80000000, 0x2, 0x3, 0xe, 0x0, 0x7f, 0x80000001, 0x1, 0x0, 0x3, 0x8ef8, 0x3, 0x8, 0x95, 0x6b0, 0x7bdd2068, 0x20, 0x3], [0x29, 0x0, 0x10000, 0xe, 0x9, 0xc, 0xfffffff5, 0x7, 0x2, 0x6, 0x3, 0x200, 0x81, 0x0, 0x3ff, 0x3, 0x9, 0x0, 0x2, 0x4, 0x5, 0x6, 0x98b, 0x10000, 0x97, 0xfffffff7, 0x6, 0x800, 0x9, 0x2, 0x0, 0xde4, 0x100, 0x9, 0xfffffff7, 0x0, 0x3, 0x8, 0x7, 0x6, 0xcc47, 0x2, 0x0, 0xea5, 0x4, 0x8, 0x9, 0x6, 0x6, 0x1, 0x6, 0x1, 0x1ff, 0x9, 0x5, 0x4, 0x5, 0xeef, 0x4, 0x3, 0x6, 0x2, 0x7, 0xfffffff4], [0x3, 0x10000, 0x10, 0x8, 0xad, 0x4, 0x4, 0x3, 0x7f, 0x6, 0x3, 0x1316, 0xe, 0x7, 0x7fffffff, 0xffffffff, 0x9c6, 0xfffffff9, 0x4, 0xfff, 0x9, 0x0, 0xffffff74, 0x2, 0x401, 0x4, 0x5, 0x200, 0x3, 0x6, 0x8, 0x1, 0x0, 0x2, 0x2, 0x2, 0x1, 0x1000, 0x9, 0x6, 0x7, 0xea3f, 0xfffffff9, 0x8, 0x5, 0x5, 0x200, 0x4, 0x4, 0x1, 0x7, 0x7fffffff, 0x5ca, 0x9, 0x67, 0x65c, 0x1, 0x7, 0x7fffffff, 0x4, 0xfffffffe, 0x4, 0x5, 0x7], [0x7, 0x3, 0x1000000, 0x2, 0x2, 0x2, 0x6da, 0x7f, 0x3ff, 0x62, 0xbe2f, 0x8, 0x5, 0x98, 0xe, 0xe43a, 0x8, 0x9, 0x6, 0xffffffff, 0x4, 0x28d, 0x18be3184, 0x3, 0x694, 0xfffffffb, 0x5, 0xd7a5, 0x6, 0xfffffff8, 0xfd, 0xfffffff9, 0x2, 0x80000000, 0x1, 0x4000000, 0x6, 0x6, 0xf845, 0x5, 0x8000, 0x7, 0xaf, 0xe1c, 0x67e, 0x6, 0x7f, 0x0, 0x3, 0x8, 0x0, 0x4, 0x0, 0x5, 0x81, 0x7fff, 0xf, 0x9, 0x8, 0x401, 0x8000, 0xef1, 0x2, 0x6]}, 0x45c) rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknod(&(0x7f0000000100)='./file1/file3\x00', 0xc000, 0x7) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0xc, &(0x7f0000001480)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xcc, 0x73, 0x9f, 0x20, 0x4a4, 0x14, 0xc957, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x13, 0x0, 0x3, 0x4, 0xce, 0x10, 0x0, [], [{{0x9, 0x5, 0x0, 0xc, 0x40, 0xa4, 0x8, 0x8}}, {{0x9, 0x5, 0x5, 0x2, 0x10, 0x3, 0xfc, 0x1, [@generic={0x7, 0x5, "910e3a85ea"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x10, 0x7, 0x1}}]}}]}}]}}, 0x0) 2.933365027s ago: executing program 1 (id=757): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) sendto$inet(r0, &(0x7f0000000080)='v', 0x1, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0xffffffff, 0xffdffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f4, 0x0, 0x0, 0x0, 0x0) 2.6675754s ago: executing program 1 (id=758): syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fbdbdf250100000008000100030000002c000480050003000100000005000300010000000500030001000000050003000200000005000300050000000000020002000000"], 0x50}}, 0x0) (async, rerun: 64) r4 = getpid() (async, rerun: 64) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 32) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (rerun: 32) r8 = dup(r7) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000000e0ffffce"]) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async, rerun: 32) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r9, 0x80045503, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f00000001c0)={0x0, 0xffffffffffffffdd, &(0x7f0000000180)={&(0x7f0000002300)=ANY=[@ANYBLOB="1400000034000701b3fffffffeffffff017c0000"], 0x14}, 0x1, 0x0, 0x0, 0x200488c0}, 0x2004c010) (async) write(0xffffffffffffffff, &(0x7f0000000040)="1c00000018002551075c0165ff0ffc02802000", 0x13) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000380)={{0x0, 0x5, 0x8000000004, 0x8, 0x0, 0x3ff, 0x6, 0x6, 0x7, 0x4, 0x2, 0x3, 0x6, 0x400, 0x2}, 0x10, [0x0, 0x0]}) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f00000002c0)=0xe8) (rerun: 64) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYRESOCT=0x0, @ANYRES32=r13, @ANYRES32=r12], 0x320}, 0x1, 0x0, 0x0, 0x50}, 0x4000040) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) setxattr$smack_xattr_label(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="6f76617208000000ff"], 0x9, 0x3) 2.439980858s ago: executing program 2 (id=759): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1/file0/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_follow}]}) mkdir(&(0x7f0000000400)='./file1/file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000200)='./file1/file0\x00', &(0x7f0000000140), &(0x7f0000000240)='./file0\x00', 0x8, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) 2.340538826s ago: executing program 2 (id=760): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/186, 0xba) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) ioctl$MEDIA_IOC_DEVICE_INFO(0xffffffffffffffff, 0xc1007c00, 0x0) r7 = dup3(r1, r2, 0x0) ioctl$MON_IOCG_STATS(r7, 0x40189206, &(0x7f0000000180)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) r9 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) r10 = syz_open_dev$sg(&(0x7f0000000040), 0x2, 0x80) ioctl$SCSI_IOCTL_SEND_COMMAND(r10, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="e1000000010000000500000072f8e08bd802af28150c40cab44031a21981d503d622136d8959d19dc6fa77f3bd052717b9d9b572591726a7650f31f6f4cc75006e4c791428e81ae5f9e95d0fa8b8a0268ec815804e05b98c5b370dd6780d1ed81a66de334d75ffc2477ce8c94835f4ce58765022719e3c17865babe8e5f04435d1e9d6833d71c9201acab6c70959f0ad2f346dd2a2c17225b1b4f841b1e8a6e6a15039332629f6a2756e83d95fa213109b15f016534a25ab1d6ff85016cda6e48a37b11aacc4e42e347ac1e3fe22eca0864cbe7a16f280d21da883eed1fe8df53a2b1976a2e7c69c2b3be11ec5"]) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000180)="ca59b928b749d890ac5cd191cc1ca34f2adb5234f45dcf280dba15c95de65da9bcd73281c72d635cd214fdd914808b1e8dbc3d5412b4e4b249428435599982383dd11ad1a86c73f98c4387c26b9e255dee112e11206a8e41b69ce5f36460270a2a5a66a57bc22c476e778fc35929c670930bba8c4ab81440c0ed09eb97fce65a5c24fabd6e1d9217512b8ecb76dbfce362f0908f170de9a4b427aeca0c1632f220a789c7a8fb172eeab15110f93271063c75611683e6a4fb1038e1b8a047", 0xbe}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x13}, [@ldst={0x4, 0x0, 0x4, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 2.055080542s ago: executing program 4 (id=761): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000000000000000000000008500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) rename(0x0, &(0x7f0000000f00)='./file1\x00') recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x111, 0x1}}, 0x20) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r6, 0x80184132, &(0x7f0000000300)) 1.655680132s ago: executing program 5 (id=762): ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4432cbb18b9e6006b4428a86b2b7464720979a3c0930d77400e164d30c4f1a0b8c287bc2a2253ab69f88f72588e11561abd12555299d14a625fa335efa036b4d9b86b4c2e49e8537c2f107237dfdc21bb2dbb24f1c1b57b4d8329431934c2c61fa3225cbbd2b3f604934850afd82e3fa31ee18e1e2e089", @ANYRES16=r0, @ANYRESHEX, @ANYRESHEX=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x61000004}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00022dbd7000fedbdb251d00000008000300", @ANYRES32=r4, @ANYBLOB="0c009900ffff00004b0000000c009918070000000e000000"], 0x34}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) setrlimit(0x1, &(0x7f0000000000)) r5 = add_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfe95, 0xffffffffffffffff) syz_usb_connect(0x0, 0x974, &(0x7f0000000180)=ANY=[@ANYRES8=r5], 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_S_EDID(r6, 0xc0285629, &(0x7f0000000080)={0x0, 0x101, 0x39c5053c, '\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f00000003c0)={{0x3, @default, 0x6}, [@null, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x74) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r8 = open(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r7, 0xc018937d, &(0x7f0000000680)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_NOTIFY_RESEND(r10, &(0x7f00000000c0)={0x14}, 0x14) openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_async', 0x0, 0x8) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) 1.28963628s ago: executing program 1 (id=763): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x401, 0xc8000) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f00000005c0)=""/4096) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) removexattr(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x35a71, 0x51a23}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @loopback}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000380)=[@text16={0x10, &(0x7f0000000400)="f0ff0266b9320b00000f320f01c52e0f9ddf2e0f070f0fdca00fc7b3eb06dce826dadf0f2041", 0x26}], 0x1, 0x30, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES64=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000d300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='qgroup_num_dirty_extents\x00', r6, 0x0, 0x9}, 0x18) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000080)={&(0x7f0000000040)=[{0x9, 0x29, 0x0, 0x0}], 0x1}) r7 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x3f, 0x0) ioctl$VIDIOC_QUERYSTD(r7, 0x8008563f, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r8, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x7e, 0x20203843, 0x3, [0x2], [0x800], [], [0x0, 0x0, 0x0, 0x7]}) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) 1.237864192s ago: executing program 2 (id=764): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000000000000000000000008500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) rename(0x0, &(0x7f0000000f00)='./file1\x00') recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)) r5 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x111, 0x1}}, 0x20) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r6, 0x80184132, &(0x7f0000000300)) 524.519977ms ago: executing program 4 (id=765): syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) epoll_create1(0x80000) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000180)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x81, 0x81, 0x0, 0x0, 0xfffffff7, 0x5, 0x3, 0x37f2, 0x8, 0x0}) 180.204411ms ago: executing program 0 (id=766): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x18, 0x0, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4004054}, 0x4044890) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) syz_emit_ethernet(0x86, &(0x7f00000008c0)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x78, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x883e, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x4, "44c108fc5c47c72626fe2f7cfa25b602ed48a4e23aa1fa1930cef821fa9ef26d", "78b501b40402b3f74ca615813e0a1261", {"11b63b29d23963799cc0226ed355261e", "4842183ff3929a0d1927f2044ca14ce4"}}}}}}}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000cc0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x2}}}, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$ptys(0xc, 0x3, 0x1) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, &(0x7f0000000480)={{0x3, 0x0, 0x1, 0x1, 0x4}, 0x0, 0x6, 'id0\x00', 'timer0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) 172.859823ms ago: executing program 2 (id=767): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000002000)={0x0, @in6={{0xa, 0x4e20, 0xe, @private1, 0x6}}, 0xfc, 0x60}, &(0x7f0000000300)=0x90) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r5, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000080)=@x86={0x7f, 0x3, 0xfd, 0x0, 0x1, 0x7e, 0xcb, 0x10, 0x8, 0x5, 0xb, 0x8, 0x0, 0x10003, 0x9, 0xff, 0x4, 0x2, 0x12, '\x00', 0x8}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c00000011000500000000000003000007000000", @ANYRES32=r9, @ANYBLOB="01000000000000000c001a800800058004000380"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4c840) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x6c, 0x0, 0x0) (async) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x60e0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 0s ago: executing program 4 (id=768): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) kernel console output (not intermixed with test programs): [ 172.039899][ T9] kobil_sct 2-1:0.0: KOBIL USB smart card terminal converter detected [ 172.103707][ T9] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 172.238550][ T9] usb 2-1: USB disconnect, device number 9 [ 172.267771][ T5965] usb 5-1: GET_CAPABILITIES returned 0 [ 172.276672][ T9] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 172.299569][ T5965] usbtmc 5-1:16.0: can't read capabilities [ 172.307268][ T9] kobil_sct 2-1:0.0: device disconnected [ 172.508239][ T5965] usb 5-1: USB disconnect, device number 9 [ 172.598060][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.612999][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.626385][ T44] bond0 (unregistering): Released all slaves [ 173.329452][ T5844] Bluetooth: hci3: command tx timeout [ 174.149811][ T5965] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 174.292572][ T44] hsr_slave_0: left promiscuous mode [ 174.331513][ T5965] usb 3-1: Using ep0 maxpacket: 16 [ 174.338183][ T44] hsr_slave_1: left promiscuous mode [ 174.351574][ T5965] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.407509][ T5965] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 174.438459][ T5965] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 174.453629][ T44] veth1_macvtap: left promiscuous mode [ 174.468559][ T5965] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 174.482037][ T44] veth0_macvtap: left promiscuous mode [ 174.493388][ T44] veth1_vlan: left promiscuous mode [ 174.507452][ T44] veth0_vlan: left promiscuous mode [ 174.515746][ T5965] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 174.533120][ T5965] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 174.550057][ T5965] usb 3-1: SerialNumber: syz [ 174.605303][ T5965] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -12 [ 174.795279][ T977] usb 3-1: USB disconnect, device number 8 [ 175.409582][ T5844] Bluetooth: hci3: command tx timeout [ 176.156981][ T44] team0 (unregistering): Port device team_slave_1 removed [ 176.198857][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 176.213799][ T44] team0 (unregistering): Port device team_slave_0 removed [ 176.358418][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 176.383260][ T9] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 176.401954][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.429067][ T9] usb 3-1: config 0 descriptor?? [ 176.474110][ T9] gspca_main: sunplus-2.14.0 probing 041e:400b [ 176.800775][ T6837] netlink: 204 bytes leftover after parsing attributes in process `syz.1.229'. [ 176.892607][ T6844] netlink: 'syz.2.231': attribute type 12 has an invalid length. [ 176.900508][ T6844] netlink: 132 bytes leftover after parsing attributes in process `syz.2.231'. [ 177.330170][ T9] gspca_sunplus: reg_w_riv err -71 [ 177.385402][ T9] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 177.435081][ T9] usb 3-1: USB disconnect, device number 9 [ 177.443901][ T977] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 177.483845][ T6760] chnl_net:caif_netlink_parms(): no params data found [ 177.492333][ T5844] Bluetooth: hci3: command tx timeout [ 177.622423][ T977] usb 2-1: unable to get BOS descriptor or descriptor too short [ 177.641982][ T977] usb 2-1: config 6 has an invalid interface number: 47 but max is 0 [ 177.657399][ T977] usb 2-1: config 6 has no interface number 0 [ 177.664262][ T977] usb 2-1: config 6 interface 47 has no altsetting 0 [ 177.681673][ T977] usb 2-1: New USB device found, idVendor=0bb4, idProduct=0a7b, bcdDevice=e9.4c [ 177.711755][ T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.733943][ T977] usb 2-1: Product: syz [ 177.739765][ T977] usb 2-1: Manufacturer: syz [ 177.758612][ T977] usb 2-1: SerialNumber: syz [ 178.006625][ T6760] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.032881][ T6760] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.046475][ T6760] bridge_slave_0: entered allmulticast mode [ 178.080195][ T6760] bridge_slave_0: entered promiscuous mode [ 178.112658][ T6760] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.134098][ T6760] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.171398][ T6760] bridge_slave_1: entered allmulticast mode [ 178.201028][ T6850] netlink: 12 bytes leftover after parsing attributes in process `syz.1.232'. [ 178.224471][ T6760] bridge_slave_1: entered promiscuous mode [ 178.277388][ T6864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.318961][ T6864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.402765][ T977] usb 2-1: USB disconnect, device number 10 [ 178.572175][ T6760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.612259][ T6760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.678593][ T10] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 178.723387][ T6760] team0: Port device team_slave_0 added [ 178.741415][ T6760] team0: Port device team_slave_1 added [ 178.798600][ T5956] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 178.836765][ T6760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.854438][ T6760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.880571][ C0] vkms_vblank_simulate: vblank timer overrun [ 178.894378][ T6760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.894683][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 178.918262][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 178.940606][ T6760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.947624][ T6760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.973605][ C0] vkms_vblank_simulate: vblank timer overrun [ 178.988448][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 178.998649][ T5956] usb 5-1: Using ep0 maxpacket: 32 [ 179.005915][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.041957][ T5956] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 179.068759][ T5956] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 179.078584][ T6760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.096745][ T5956] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 179.139706][ T5956] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 179.180086][ T5956] usb 5-1: config 0 interface 0 has no altsetting 0 [ 179.194757][ T5956] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 179.208472][ T5956] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 179.246027][ T10] usb 3-1: GET_CAPABILITIES returned 0 [ 179.271239][ T10] usbtmc 3-1:16.0: can't read capabilities [ 179.430582][ T5956] usb 5-1: Product: syz [ 179.435666][ T5956] usb 5-1: Manufacturer: syz [ 179.440423][ T5956] usb 5-1: SerialNumber: syz [ 179.452314][ T5956] usb 5-1: config 0 descriptor?? [ 179.462546][ T5956] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 179.480989][ T5965] usb 3-1: USB disconnect, device number 10 [ 179.481145][ T6760] hsr_slave_0: entered promiscuous mode [ 179.504393][ T5956] ldusb 5-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 179.522339][ T6760] hsr_slave_1: entered promiscuous mode [ 179.537605][ T6760] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.546484][ T6760] Cannot create hsr debugfs directory [ 179.548867][ T977] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 179.568438][ T5844] Bluetooth: hci3: command tx timeout [ 179.666653][ T9] usb 5-1: USB disconnect, device number 10 [ 179.697719][ T9] ldusb 5-1:0.0: LD USB Device #1 now disconnected [ 179.718473][ T977] usb 2-1: Using ep0 maxpacket: 32 [ 179.736653][ T977] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 179.759866][ T977] usb 2-1: config 0 has no interface number 0 [ 179.774413][ T977] usb 2-1: config 0 interface 89 has no altsetting 0 [ 179.785586][ T977] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 179.801148][ T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.813102][ T977] usb 2-1: Product: syz [ 179.817424][ T977] usb 2-1: Manufacturer: syz [ 179.824891][ T977] usb 2-1: SerialNumber: syz [ 179.846080][ T977] usb 2-1: config 0 descriptor?? [ 179.868679][ T977] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 179.888854][ T977] em28xx 2-1:0.89: Video interface 89 found: bulk [ 180.091357][ T6760] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 180.125728][ T6760] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 180.184127][ T6760] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 180.198595][ T6899] loop5: detected capacity change from 0 to 3639 [ 180.213233][ T6760] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 180.253875][ T6903] loop5: detected capacity change from 3639 to 4727 [ 180.316179][ T6899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.240'. [ 180.465669][ T6107] Buffer I/O error on dev loop5, logical block 590, async page read [ 180.481593][ T977] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 180.589837][ T6903] block nbd0: server does not support multiple connections per device. [ 180.725111][ T6903] block nbd0: shutting down sockets [ 180.752422][ T6760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.822469][ T6760] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.876615][ T6530] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.884008][ T6530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.001863][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.009226][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.728588][ T5956] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 181.808070][ T6760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.884608][ T31] audit: type=1400 audit(1754955339.648:34): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=6937 comm="syz.4.248" dest=20000 [ 181.938425][ T5956] usb 3-1: Using ep0 maxpacket: 16 [ 181.959833][ T6887] netlink: 24 bytes leftover after parsing attributes in process `syz.1.239'. [ 181.962463][ T5956] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 182.011664][ T5956] usb 3-1: config 0 has no interface number 0 [ 182.027551][ T977] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 182.036443][ T5956] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 182.036482][ T5956] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 182.036511][ T5956] usb 3-1: config 0 interface 41 has no altsetting 0 [ 182.039571][ T5956] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 182.094555][ T977] em28xx 2-1:0.89: board has no eeprom [ 182.149730][ T5956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.165495][ T5956] usb 3-1: Product: syz [ 182.170870][ T5956] usb 3-1: Manufacturer: syz [ 182.171658][ T977] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 182.181193][ T5956] usb 3-1: SerialNumber: syz [ 182.205082][ T5956] usb 3-1: config 0 descriptor?? [ 182.228057][ T977] em28xx 2-1:0.89: analog set to bulk mode. [ 182.233483][ T6927] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 182.241349][ T10] em28xx 2-1:0.89: Registering V4L2 extension [ 182.247212][ T6927] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 182.274134][ T977] usb 2-1: USB disconnect, device number 11 [ 182.314672][ T977] em28xx 2-1:0.89: Disconnecting em28xx [ 182.539106][ T6927] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 182.597233][ T6927] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 182.618844][ T10] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 182.668878][ T10] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 182.676414][ T10] em28xx 2-1:0.89: No AC97 audio processor [ 182.742547][ T10] usb 2-1: Decoder not found [ 182.747264][ T10] em28xx 2-1:0.89: failed to create media graph [ 182.804489][ T10] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 182.874471][ T5956] Error reading MAC address [ 182.909936][ T6967] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 182.917437][ T6967] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 183.005109][ T6971] tipc: Enabling of bearer rejected, failed to enable media [ 183.095668][ T6971] tipc: Enabling of bearer rejected, failed to enable media [ 183.098995][ T10] em28xx 2-1:0.89: Registering snapshot button... [ 183.138637][ T10] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input9 [ 183.138855][ T6971] tipc: Enabling of bearer rejected, failed to enable media [ 183.171894][ T10] em28xx 2-1:0.89: Remote control support is not available for this card. [ 183.194313][ T977] em28xx 2-1:0.89: Closing input extension [ 183.201366][ T5956] sr9700 3-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 183.218029][ T977] em28xx 2-1:0.89: Deregistering snapshot button [ 183.267044][ T6971] tipc: Enabling of bearer rejected, failed to enable media [ 183.322987][ T977] em28xx 2-1:0.89: Freeing device [ 183.369637][ T6971] tipc: Enabling of bearer rejected, failed to enable media [ 183.425666][ T6971] tipc: Enabling of bearer rejected, failed to enable media [ 183.471274][ T6971] tipc: Enabling of bearer rejected, failed to enable media [ 183.521690][ T6971] tipc: Enabling of bearer rejected, failed to enable media [ 183.549303][ T6971] tipc: Enabling of bearer rejected, failed to enable media [ 183.594870][ T6971] tipc: Enabling of bearer rejected, failed to enable media [ 183.637342][ T6971] tipc: Enabling of bearer rejected, failed to enable media [ 183.675034][ T6971] tipc: Enabling of bearer rejected, failed to enable media [ 183.723878][ T6971] tipc: Enabling of bearer rejected, failed to enable media [ 183.759934][ T6971] tipc: Enabling of bearer rejected, failed to enable media [ 183.798281][ T6760] veth0_vlan: entered promiscuous mode [ 183.815155][ T6971] tipc: Enabling of bearer rejected, failed to enable media [ 183.867296][ T6760] veth1_vlan: entered promiscuous mode [ 183.963063][ T6760] veth0_macvtap: entered promiscuous mode [ 184.028620][ T6760] veth1_macvtap: entered promiscuous mode [ 184.065181][ T6760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.094484][ T6760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.112664][ T6760] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.123987][ T6760] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.151815][ T6760] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.178134][ T6760] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.509449][ T5956] usb 3-1: USB disconnect, device number 11 [ 184.597055][ T7004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.258'. [ 184.883378][ T7004] netlink: 28 bytes leftover after parsing attributes in process `syz.2.258'. [ 185.492520][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 185.610524][ T9] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 185.611321][ T3977] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.910557][ T3977] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.988796][ T977] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 186.111393][ T7022] fido_id[7022]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 186.178603][ T977] usb 5-1: Invalid ep0 maxpacket: 64 [ 186.181769][ T3977] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.349581][ T977] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 186.470627][ T3977] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.529166][ T977] usb 5-1: Invalid ep0 maxpacket: 64 [ 186.548883][ T977] usb usb5-port1: attempt power cycle [ 187.228614][ T977] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 187.289657][ T977] usb 5-1: Invalid ep0 maxpacket: 64 [ 187.578441][ T977] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 187.970260][ T3977] bridge_slave_1: left allmulticast mode [ 187.976214][ T3977] bridge_slave_1: left promiscuous mode [ 187.991425][ T3977] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.061952][ T3977] bridge_slave_0: left allmulticast mode [ 188.067718][ T3977] bridge_slave_0: left promiscuous mode [ 188.112774][ T3977] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.093185][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 189.508758][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 189.518252][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 189.528201][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 189.533893][ T10] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 189.548386][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.595898][ T10] usb 3-1: Product: syz [ 189.600992][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 189.611257][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 189.659732][ T10] usb 3-1: Manufacturer: syz [ 189.664428][ T10] usb 3-1: SerialNumber: syz [ 189.723274][ T977] usb 5-1: device descriptor read/8, error -71 [ 189.755130][ T10] usb 3-1: config 0 descriptor?? [ 189.894658][ T977] usb usb5-port1: unable to enumerate USB device [ 190.015776][ T10] usb 3-1: USB disconnect, device number 12 [ 190.259183][ T6107] udevd[6107]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.491310][ T3977] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.509186][ T3977] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.576990][ T3977] bond0 (unregistering): Released all slaves [ 191.658564][ T5844] Bluetooth: hci3: command tx timeout [ 192.251188][ T3977] hsr_slave_0: left promiscuous mode [ 192.272685][ T3977] hsr_slave_1: left promiscuous mode [ 192.286832][ T3977] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.398471][ T3977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.455525][ T3977] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.494817][ T3977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.520745][ T5956] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 193.043751][ T3977] veth1_macvtap: left promiscuous mode [ 193.057111][ T3977] veth0_macvtap: left promiscuous mode [ 193.074343][ T3977] veth1_vlan: left promiscuous mode [ 193.094923][ T3977] veth0_vlan: left promiscuous mode [ 193.109884][ T5956] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 193.148343][ T5956] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 193.176540][ T5956] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 193.207840][ T5956] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 193.227153][ T5956] usb 5-1: Manufacturer: syz [ 193.243552][ T5956] usb 5-1: config 0 descriptor?? [ 193.265809][ T5956] igorplugusb 5-1:0.0: incorrect number of endpoints [ 193.476080][ T5956] usb 5-1: USB disconnect, device number 15 [ 193.735624][ T5844] Bluetooth: hci3: command tx timeout [ 193.783477][ T7104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.863310][ T7104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.008835][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 194.177145][ T7114] Unsupported ieee802154 address type: 0 [ 194.456864][ T3977] team0 (unregistering): Port device team_slave_1 removed [ 194.511791][ T3977] team0 (unregistering): Port device team_slave_0 removed [ 195.808553][ T5844] Bluetooth: hci3: command tx timeout [ 196.383383][ T7051] chnl_net:caif_netlink_parms(): no params data found [ 197.475789][ T7158] Smack: duplicate mount options [ 197.867527][ T7051] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.898440][ T5844] Bluetooth: hci3: command tx timeout [ 197.907357][ T7051] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.926065][ T7051] bridge_slave_0: entered allmulticast mode [ 197.950921][ T7051] bridge_slave_0: entered promiscuous mode [ 197.979975][ T7051] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.003602][ T7170] input: syz1 as /devices/virtual/input/input10 [ 198.028485][ T7051] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.067250][ T7051] bridge_slave_1: entered allmulticast mode [ 198.113834][ T7051] bridge_slave_1: entered promiscuous mode [ 198.198445][ T5956] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 198.363052][ T5956] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 198.379195][ T5956] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 198.410304][ T5956] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.429575][ T5956] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 198.449314][ T5956] usb 2-1: config 1 has no interface number 0 [ 198.456070][ T5956] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 198.487571][ T5956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.519395][ T7051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.547675][ T5956] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 198.555290][ T7051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.565437][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 198.728516][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 198.736511][ T10] usb 3-1: config index 0 descriptor too short (expected 49410, got 36) [ 198.752782][ T10] usb 3-1: config 12 has too many interfaces: 127, using maximum allowed: 32 [ 198.772249][ T10] usb 3-1: config 12 contains an unexpected descriptor of type 0x2, skipping [ 198.807138][ T10] usb 3-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 198.807262][ T5956] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values [ 198.829768][ T5956] snd_usb_pod 2-1:1.1: invalid control EP [ 198.835580][ T5956] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 198.847503][ T5956] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 198.852508][ T10] usb 3-1: config 12 has 0 interfaces, different from the descriptor's value: 127 [ 198.855763][ T5956] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 198.889095][ T7051] team0: Port device team_slave_0 added [ 198.917334][ T10] usb 3-1: config index 1 descriptor too short (expected 49410, got 36) [ 198.939542][ T10] usb 3-1: config 12 has too many interfaces: 127, using maximum allowed: 32 [ 198.968466][ T10] usb 3-1: config 12 contains an unexpected descriptor of type 0x2, skipping [ 198.969600][ T7051] team0: Port device team_slave_1 added [ 198.987410][ T10] usb 3-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 199.029067][ T7185] netlink: 256 bytes leftover after parsing attributes in process `syz.4.291'. [ 199.053524][ T5956] usb 2-1: USB disconnect, device number 13 [ 199.120129][ T7051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.169902][ T7051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.250860][ T10] usb 3-1: config 12 has 0 interfaces, different from the descriptor's value: 127 [ 199.260821][ T7051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.274435][ T10] usb 3-1: config index 2 descriptor too short (expected 49410, got 36) [ 199.285480][ T7051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.292711][ T10] usb 3-1: config 12 has too many interfaces: 127, using maximum allowed: 32 [ 199.302238][ T7051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.328771][ T10] usb 3-1: config 12 contains an unexpected descriptor of type 0x2, skipping [ 199.337942][ T10] usb 3-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 199.348957][ T10] usb 3-1: config 12 has 0 interfaces, different from the descriptor's value: 127 [ 199.361641][ T7051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.382880][ T10] usb 3-1: config index 3 descriptor too short (expected 49410, got 36) [ 199.391573][ T10] usb 3-1: config 12 has too many interfaces: 127, using maximum allowed: 32 [ 199.405673][ T10] usb 3-1: config 12 contains an unexpected descriptor of type 0x2, skipping [ 199.415127][ T10] usb 3-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 199.431625][ T10] usb 3-1: config 12 has 0 interfaces, different from the descriptor's value: 127 [ 199.446414][ T10] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice= 0.40 [ 199.459379][ T10] usb 3-1: New USB device strings: Mfr=16, Product=0, SerialNumber=9 [ 199.467915][ T10] usb 3-1: Manufacturer: syz [ 199.479183][ T7187] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 199.513116][ T10] usb 3-1: SerialNumber: syz [ 199.529108][ T7186] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 199.985060][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.992305][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.354371][ T7177] netlink: 96 bytes leftover after parsing attributes in process `syz.2.290'. [ 200.375137][ T7177] tc_dump_action: action bad kind [ 200.383930][ T10] usb 3-1: USB disconnect, device number 13 [ 200.705336][ T7051] hsr_slave_0: entered promiscuous mode [ 200.712785][ T7051] hsr_slave_1: entered promiscuous mode [ 200.843437][ T7051] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.851839][ T7051] Cannot create hsr debugfs directory [ 201.009718][ T7208] overlayfs: missing 'lowerdir' [ 201.265069][ T7202] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 201.347660][ T7224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.397256][ T7224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.796868][ T7247] netlink: 'syz.2.301': attribute type 1 has an invalid length. [ 201.805126][ T7247] netlink: 208 bytes leftover after parsing attributes in process `syz.2.301'. [ 201.895856][ T5836] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 202.099755][ T5836] usb 2-1: Using ep0 maxpacket: 32 [ 202.117226][ T5836] usb 2-1: config 0 has no interfaces? [ 202.139804][ T5836] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=a4.1b [ 202.179253][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.228724][ T5836] usb 2-1: Product: syz [ 202.244850][ T5836] usb 2-1: Manufacturer: syz [ 202.261982][ T5836] usb 2-1: SerialNumber: syz [ 202.285948][ T5836] usb 2-1: config 0 descriptor?? [ 202.525072][ T7266] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 202.704664][ T7266] netdevsim netdevsim2: Falling back to sysfs fallback for: .. [ 202.739108][ T7232] binder: 7228:7232 ioctl 89e1 2000000002c0 returned -22 [ 202.863194][ T7051] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 202.905302][ T7051] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 202.939215][ T7051] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 202.960627][ T7051] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 203.032843][ T31] audit: type=1400 audit(1754955360.788:35): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=7270 comm="syz.0.304" daddr=::ffff:0.0.0.0 dest=20002 [ 203.341546][ T7051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.429392][ T7051] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.452883][ T7255] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.460451][ T7255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.663823][ T7255] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.671149][ T7255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.584019][ T10] usb 2-1: USB disconnect, device number 14 [ 204.744982][ T7297] overlayfs: missing 'lowerdir' [ 205.174853][ T7051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.194583][ T7308] Invalid ELF section header size [ 208.102348][ T7051] veth0_vlan: entered promiscuous mode [ 208.617662][ T7351] netlink: 20 bytes leftover after parsing attributes in process `syz.4.316'. [ 208.642369][ T7357] fuse: Unknown parameter '' [ 208.656883][ T7051] veth1_vlan: entered promiscuous mode [ 208.863615][ T7051] veth0_macvtap: entered promiscuous mode [ 208.981503][ T7051] veth1_macvtap: entered promiscuous mode [ 209.688198][ T7369] overlayfs: missing 'lowerdir' [ 209.723492][ T7051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.801566][ T7051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.865894][ T7051] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.898043][ T7365] netlink: 'syz.4.318': attribute type 2 has an invalid length. [ 209.928439][ T7051] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.944083][ T7051] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.973177][ T7051] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.029463][ T7373] FAULT_INJECTION: forcing a failure. [ 210.029463][ T7373] name failslab, interval 1, probability 0, space 0, times 1 [ 210.101261][ T7373] CPU: 0 UID: 0 PID: 7373 Comm: syz.2.320 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 210.101293][ T7373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 210.101315][ T7373] Call Trace: [ 210.101327][ T7373] [ 210.101338][ T7373] dump_stack_lvl+0x189/0x250 [ 210.101382][ T7373] ? __pfx____ratelimit+0x10/0x10 [ 210.101408][ T7373] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.101431][ T7373] ? __pfx__printk+0x10/0x10 [ 210.101467][ T7373] ? ref_tracker_alloc+0x318/0x460 [ 210.101496][ T7373] should_fail_ex+0x414/0x560 [ 210.101524][ T7373] should_failslab+0xa8/0x100 [ 210.101552][ T7373] kmem_cache_alloc_noprof+0x73/0x3c0 [ 210.101573][ T7373] ? skb_clone+0x212/0x3a0 [ 210.101603][ T7373] skb_clone+0x212/0x3a0 [ 210.101628][ T7373] __netlink_deliver_tap+0x404/0x850 [ 210.101674][ T7373] ? netlink_deliver_tap+0x2e/0x1b0 [ 210.101707][ T7373] netlink_deliver_tap+0x19c/0x1b0 [ 210.101739][ T7373] netlink_unicast+0x730/0x8e0 [ 210.101779][ T7373] netlink_sendmsg+0x805/0xb30 [ 210.101821][ T7373] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.101863][ T7373] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 210.101885][ T7373] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.101918][ T7373] __sock_sendmsg+0x21c/0x270 [ 210.101948][ T7373] ____sys_sendmsg+0x505/0x830 [ 210.101990][ T7373] ? __pfx_____sys_sendmsg+0x10/0x10 [ 210.102035][ T7373] ? import_iovec+0x74/0xa0 [ 210.102070][ T7373] ___sys_sendmsg+0x21f/0x2a0 [ 210.102107][ T7373] ? __pfx____sys_sendmsg+0x10/0x10 [ 210.102181][ T7373] ? __fget_files+0x2a/0x420 [ 210.102216][ T7373] ? __fget_files+0x3a0/0x420 [ 210.102256][ T7373] __x64_sys_sendmsg+0x19b/0x260 [ 210.102291][ T7373] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 210.102333][ T7373] ? __pfx_ksys_write+0x10/0x10 [ 210.102350][ T7373] ? rcu_is_watching+0x15/0xb0 [ 210.102380][ T7373] ? do_syscall_64+0xbe/0x3b0 [ 210.102408][ T7373] do_syscall_64+0xfa/0x3b0 [ 210.102428][ T7373] ? lockdep_hardirqs_on+0x9c/0x150 [ 210.102450][ T7373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.102472][ T7373] ? clear_bhb_loop+0x60/0xb0 [ 210.102498][ T7373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.102519][ T7373] RIP: 0033:0x7f5c8818ebe9 [ 210.102548][ T7373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.102567][ T7373] RSP: 002b:00007f5c88f48038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 210.102600][ T7373] RAX: ffffffffffffffda RBX: 00007f5c883b5fa0 RCX: 00007f5c8818ebe9 [ 210.102616][ T7373] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 0000000000000003 [ 210.102629][ T7373] RBP: 00007f5c88f48090 R08: 0000000000000000 R09: 0000000000000000 [ 210.102643][ T7373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.102655][ T7373] R13: 00007f5c883b6038 R14: 00007f5c883b5fa0 R15: 00007ffd7cb444c8 [ 210.102690][ T7373] [ 210.812259][ T7378] netlink: 40 bytes leftover after parsing attributes in process `syz.2.321'. [ 211.635615][ T7244] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.885790][ T7244] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.945101][ T31] audit: type=1400 audit(1754955369.708:36): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=7390 comm="syz.2.326" dest=2 [ 212.291901][ T7395] netlink: 60 bytes leftover after parsing attributes in process `syz.2.326'. [ 212.338792][ T7393] netlink: 60 bytes leftover after parsing attributes in process `syz.2.326'. [ 212.674814][ T7244] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.496713][ T7244] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.706450][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 213.716275][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 213.726458][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 213.746711][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 213.756576][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 213.818829][ T7417] netlink: 20 bytes leftover after parsing attributes in process `syz.4.329'. [ 214.088852][ T5908] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 214.109225][ T7244] bridge_slave_1: left allmulticast mode [ 214.132649][ T7244] bridge_slave_1: left promiscuous mode [ 214.144670][ T7244] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.202536][ T7244] bridge_slave_0: left allmulticast mode [ 214.213338][ T7244] bridge_slave_0: left promiscuous mode [ 214.223052][ T7244] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.272608][ T5908] usb 3-1: not running at top speed; connect to a high speed hub [ 214.282443][ T5908] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.295887][ T5908] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 214.346147][ T5908] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 214.393554][ T5908] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 214.408395][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=9, SerialNumber=3 [ 214.422875][ T5908] usb 3-1: Product: syz [ 214.437365][ T5908] usb 3-1: Manufacturer: ఁ [ 214.442723][ T5908] usb 3-1: SerialNumber: 鳰秗ꪪ稈㴑뛂ꂲอ௏ӝ㿆뵶⃻⛪㢞꿙얬烠寵荇⊘뭖贼⹅▯뎴霗屢⪔㛖窲↯ಮ촵颹渦듫ִ龶ṙ腆頑烹鮡瞢阆ꆩ穠삔룃떈奓진싲鯝嬓껫飾ꮱ켻࿖洭驀鿍ມ훳ᯣ㦦뎔⢥궢 [ 214.651252][ T7438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.686088][ T7438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.759656][ T5908] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 214.777106][ T5908] cdc_ncm 3-1:1.0: bind() failure [ 214.807176][ T5908] usb 3-1: USB disconnect, device number 14 [ 214.878431][ T5955] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 215.048433][ T7445] netlink: 'syz.1.333': attribute type 1 has an invalid length. [ 215.064011][ T5955] usb 5-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 215.093140][ T5955] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 215.118614][ T5955] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 215.123037][ T7447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.333'. [ 215.165647][ T5955] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 215.185312][ T5955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.199020][ T5955] usb 5-1: Product: syz [ 215.205576][ T5955] usb 5-1: Manufacturer: syz [ 215.228586][ T5955] usb 5-1: SerialNumber: syz [ 215.269801][ T5955] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 215.297470][ T5955] cdc_ncm 5-1:1.0: bind() failure [ 215.500835][ T5955] usb 5-1: USB disconnect, device number 16 [ 215.539425][ T7456] netlink: 'syz.2.334': attribute type 2 has an invalid length. [ 215.771694][ T7244] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.800517][ T7244] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.808691][ T5851] Bluetooth: hci3: command tx timeout [ 215.831340][ T7244] bond0 (unregistering): Released all slaves [ 215.919291][ T7445] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 215.948154][ T7456] : entered promiscuous mode [ 216.226929][ T31] audit: type=1400 audit(1754955373.988:37): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=7463 comm="syz.2.338" [ 216.299783][ T7467] overlayfs: missing 'lowerdir' [ 216.307575][ T7468] netlink: 16 bytes leftover after parsing attributes in process `syz.0.336'. [ 217.002944][ T7471] FAULT_INJECTION: forcing a failure. [ 217.002944][ T7471] name failslab, interval 1, probability 0, space 0, times 0 [ 217.038816][ T5836] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 217.054793][ T7471] CPU: 0 UID: 0 PID: 7471 Comm: syz.1.339 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 217.054826][ T7471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 217.054841][ T7471] Call Trace: [ 217.054850][ T7471] [ 217.054860][ T7471] dump_stack_lvl+0x189/0x250 [ 217.054904][ T7471] ? __pfx____ratelimit+0x10/0x10 [ 217.054928][ T7471] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.054954][ T7471] ? __pfx__printk+0x10/0x10 [ 217.055006][ T7471] ? __pfx___might_resched+0x10/0x10 [ 217.055034][ T7471] ? fs_reclaim_acquire+0x7d/0x100 [ 217.055068][ T7471] should_fail_ex+0x414/0x560 [ 217.055101][ T7471] should_failslab+0xa8/0x100 [ 217.055129][ T7471] __kmalloc_noprof+0xcb/0x4f0 [ 217.055151][ T7471] ? tomoyo_encode+0x28b/0x550 [ 217.055188][ T7471] tomoyo_encode+0x28b/0x550 [ 217.055227][ T7471] tomoyo_realpath_from_path+0x58d/0x5d0 [ 217.055272][ T7471] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 217.055298][ T7471] tomoyo_path_number_perm+0x1e8/0x5a0 [ 217.055326][ T7471] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 217.055348][ T7471] ? fuse_change_entry_timeout+0x2d2/0x430 [ 217.055374][ T7471] ? _raw_spin_unlock+0x28/0x50 [ 217.055408][ T7471] ? __d_add+0x531/0x850 [ 217.055442][ T7471] ? __pfx_fuse_change_entry_timeout+0x10/0x10 [ 217.055482][ T7471] ? fuse_lookup+0x553/0x640 [ 217.055541][ T7471] ? __pfx_current_check_access_path+0x10/0x10 [ 217.055574][ T7471] ? d_alloc+0x144/0x190 [ 217.055610][ T7471] tomoyo_path_mknod+0x142/0x190 [ 217.055648][ T7471] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 217.055686][ T7471] ? __pfx_filename_create+0x10/0x10 [ 217.055727][ T7471] security_path_mknod+0x17e/0x3a0 [ 217.055767][ T7471] do_mknodat+0x274/0x4d0 [ 217.055806][ T7471] ? __pfx_do_mknodat+0x10/0x10 [ 217.055841][ T7471] ? getname_flags+0x1e5/0x540 [ 217.055882][ T7471] __x64_sys_mknod+0x8c/0xa0 [ 217.055919][ T7471] do_syscall_64+0xfa/0x3b0 [ 217.055948][ T7471] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.055976][ T7471] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 217.055999][ T7471] ? clear_bhb_loop+0x60/0xb0 [ 217.056028][ T7471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.056051][ T7471] RIP: 0033:0x7f2b5098ebe9 [ 217.056072][ T7471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.056093][ T7471] RSP: 002b:00007f2b4ebf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 217.056118][ T7471] RAX: ffffffffffffffda RBX: 00007f2b50bb5fa0 RCX: 00007f2b5098ebe9 [ 217.056136][ T7471] RDX: 0000000000000702 RSI: 00000000ffff8000 RDI: 00002000000002c0 [ 217.056151][ T7471] RBP: 00007f2b4ebf6090 R08: 0000000000000000 R09: 0000000000000000 [ 217.056167][ T7471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.056181][ T7471] R13: 00007f2b50bb6038 R14: 00007f2b50bb5fa0 R15: 00007ffd0fc3bd68 [ 217.056218][ T7471] [ 217.059289][ T7466] syzkaller0: entered promiscuous mode [ 217.059319][ T7466] syzkaller0: entered allmulticast mode [ 217.069496][ T7471] ERROR: Out of memory at tomoyo_realpath_from_path. [ 217.202341][ T5836] usb 3-1: Using ep0 maxpacket: 16 [ 217.210911][ T5836] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.210950][ T5836] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.210977][ T5836] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 217.211024][ T5836] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 217.211049][ T5836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.218782][ T5836] usb 3-1: config 0 descriptor?? [ 217.373714][ T7244] hsr_slave_0: left promiscuous mode [ 217.374660][ T7244] hsr_slave_1: left promiscuous mode [ 217.375389][ T7244] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.375424][ T7244] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.376523][ T7244] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.376555][ T7244] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.408896][ T5851] Bluetooth: hci2: command 0x0406 tx timeout [ 217.409068][ T5851] Bluetooth: hci0: command 0x0406 tx timeout [ 217.409195][ T5851] Bluetooth: hci1: command 0x0406 tx timeout [ 217.522189][ T7244] veth1_macvtap: left promiscuous mode [ 217.522331][ T7244] veth0_macvtap: left promiscuous mode [ 217.522514][ T7244] veth1_vlan: left promiscuous mode [ 217.522630][ T7244] veth0_vlan: left promiscuous mode [ 217.890189][ T5842] Bluetooth: hci3: command tx timeout [ 218.005067][ T5836] usbhid 3-1:0.0: can't add hid device: -71 [ 218.005194][ T5836] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 218.008182][ T5836] usb 3-1: USB disconnect, device number 15 [ 219.359669][ T7505] mmap: syz.4.344 (7505) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 219.634375][ T7469] syz.2.338 (7469) used greatest stack depth: 17992 bytes left [ 219.823757][ T7244] team0 (unregistering): Port device team_slave_1 removed [ 219.976133][ T5842] Bluetooth: hci3: command tx timeout [ 220.006155][ T7244] team0 (unregistering): Port device team_slave_0 removed [ 222.428122][ T51] Bluetooth: hci3: command tx timeout [ 222.558490][ T5956] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 222.732294][ T5956] usb 3-1: Using ep0 maxpacket: 32 [ 222.751028][ T5956] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 222.787431][ T5956] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 222.799517][ T5956] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 222.811625][ T5956] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 222.822171][ T5956] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 222.837011][ T5956] usb 3-1: config 0 interface 0 has no altsetting 0 [ 222.855251][ T5956] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 222.904741][ T5956] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 222.914112][ T5956] usb 3-1: Product: syz [ 222.918906][ T5956] usb 3-1: Manufacturer: syz [ 222.923770][ T5956] usb 3-1: SerialNumber: syz [ 222.944615][ T5956] usb 3-1: config 0 descriptor?? [ 222.964532][ T5956] usb 3-1: can't set config #0, error -71 [ 222.994628][ T5956] usb 3-1: USB disconnect, device number 16 [ 223.133708][ T7528] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 223.473793][ T7530] Invalid source name [ 223.478028][ T7530] UBIFS error (pid: 7530): cannot open "./file0", error -22 [ 223.898124][ T7535] FAULT_INJECTION: forcing a failure. [ 223.898124][ T7535] name failslab, interval 1, probability 0, space 0, times 0 [ 223.923612][ T7535] CPU: 0 UID: 0 PID: 7535 Comm: syz.2.351 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 223.923645][ T7535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 223.923659][ T7535] Call Trace: [ 223.923669][ T7535] [ 223.923679][ T7535] dump_stack_lvl+0x189/0x250 [ 223.923711][ T7535] ? __pfx____ratelimit+0x10/0x10 [ 223.923737][ T7535] ? __pfx_dump_stack_lvl+0x10/0x10 [ 223.923762][ T7535] ? __pfx__printk+0x10/0x10 [ 223.923798][ T7535] ? __pfx___might_resched+0x10/0x10 [ 223.923823][ T7535] ? fs_reclaim_acquire+0x7d/0x100 [ 223.923856][ T7535] should_fail_ex+0x414/0x560 [ 223.923887][ T7535] should_failslab+0xa8/0x100 [ 223.923914][ T7535] __kmalloc_cache_noprof+0x70/0x3d0 [ 223.923937][ T7535] ? create_new_entry+0x131/0xa20 [ 223.923973][ T7535] create_new_entry+0x131/0xa20 [ 223.924006][ T7535] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 223.924033][ T7535] ? __pfx_create_new_entry+0x10/0x10 [ 223.924079][ T7535] ? __pfx_smack_log+0x10/0x10 [ 223.924108][ T7535] ? fuse_permission+0x9fa/0xdc0 [ 223.924144][ T7535] fuse_mknod+0x2c2/0x380 [ 223.924181][ T7535] ? __pfx_fuse_mknod+0x10/0x10 [ 223.924212][ T7535] ? smack_inode_permission+0x28f/0x320 [ 223.924262][ T7535] ? make_vfsgid+0x49/0xa0 [ 223.924293][ T7535] ? HAS_UNMAPPED_ID+0x11a/0x180 [ 223.924335][ T7535] ? bpf_lsm_inode_create+0x9/0x20 [ 223.924361][ T7535] vfs_create+0x24b/0x400 [ 223.924401][ T7535] do_mknodat+0x3c6/0x4d0 [ 223.924437][ T7535] ? __pfx_do_mknodat+0x10/0x10 [ 223.924472][ T7535] ? getname_flags+0x1e5/0x540 [ 223.924503][ T7535] __x64_sys_mknod+0x8c/0xa0 [ 223.924539][ T7535] do_syscall_64+0xfa/0x3b0 [ 223.924564][ T7535] ? lockdep_hardirqs_on+0x9c/0x150 [ 223.924588][ T7535] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.924610][ T7535] ? clear_bhb_loop+0x60/0xb0 [ 223.924638][ T7535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.924660][ T7535] RIP: 0033:0x7f5c8818ebe9 [ 223.924680][ T7535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.924700][ T7535] RSP: 002b:00007f5c88f48038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 223.924724][ T7535] RAX: ffffffffffffffda RBX: 00007f5c883b5fa0 RCX: 00007f5c8818ebe9 [ 223.924741][ T7535] RDX: 0000000000000704 RSI: 00000000ffff8000 RDI: 00002000000002c0 [ 223.924755][ T7535] RBP: 00007f5c88f48090 R08: 0000000000000000 R09: 0000000000000000 [ 223.924770][ T7535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.924784][ T7535] R13: 00007f5c883b6038 R14: 00007f5c883b5fa0 R15: 00007ffd7cb444c8 [ 223.924820][ T7535] [ 225.072105][ T5899] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 225.231977][ T5899] usb 3-1: Using ep0 maxpacket: 32 [ 225.246237][ T5899] usb 3-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 1024 [ 225.256582][ T5899] usb 3-1: config 1 interface 0 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 225.266959][ T5899] usb 3-1: config 1 interface 0 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 0 [ 225.277224][ T5899] usb 3-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 225.290926][ T5899] usb 3-1: config 1 interface 0 has no altsetting 0 [ 225.300349][ T5899] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 225.309910][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.318022][ T5899] usb 3-1: Product: syz [ 225.323100][ T5899] usb 3-1: Manufacturer: syz [ 225.327802][ T5899] usb 3-1: SerialNumber: syz [ 225.339673][ T7539] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 225.563777][ T7539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.592448][ T7539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.016956][ T7418] chnl_net:caif_netlink_parms(): no params data found [ 226.091878][ T31] audit: type=1326 audit(1754955383.858:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7545 comm="syz.1.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5098ebe9 code=0x7ffc0000 [ 226.188570][ T31] audit: type=1326 audit(1754955383.858:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7545 comm="syz.1.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5098ebe9 code=0x7ffc0000 [ 226.234971][ T31] audit: type=1326 audit(1754955383.878:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7545 comm="syz.1.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f2b5098ebe9 code=0x7ffc0000 [ 226.305237][ T31] audit: type=1326 audit(1754955383.878:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7545 comm="syz.1.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5098ebe9 code=0x7ffc0000 [ 226.540017][ T7558] netlink: 'syz.0.357': attribute type 4 has an invalid length. [ 226.719960][ T7418] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.748030][ T7418] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.772617][ T7418] bridge_slave_0: entered allmulticast mode [ 227.067964][ T7418] bridge_slave_0: entered promiscuous mode [ 227.143449][ T7571] mkiss: ax0: crc mode is auto. [ 227.143999][ T7418] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.159921][ T7418] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.178552][ T7418] bridge_slave_1: entered allmulticast mode [ 227.187969][ T7418] bridge_slave_1: entered promiscuous mode [ 227.384231][ T7418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.424664][ T7418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.767171][ T7418] team0: Port device team_slave_0 added [ 227.806014][ T5899] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 227.856663][ T5899] usb 3-1: USB disconnect, device number 17 [ 228.056797][ T7418] team0: Port device team_slave_1 added [ 228.242300][ T7590] FAULT_INJECTION: forcing a failure. [ 228.242300][ T7590] name failslab, interval 1, probability 0, space 0, times 0 [ 228.299521][ T7590] CPU: 1 UID: 0 PID: 7590 Comm: syz.1.362 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 228.299553][ T7590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 228.299567][ T7590] Call Trace: [ 228.299576][ T7590] [ 228.299585][ T7590] dump_stack_lvl+0x189/0x250 [ 228.299617][ T7590] ? __pfx____ratelimit+0x10/0x10 [ 228.299641][ T7590] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.299667][ T7590] ? __pfx__printk+0x10/0x10 [ 228.299702][ T7590] ? __pfx___might_resched+0x10/0x10 [ 228.299726][ T7590] ? fs_reclaim_acquire+0x7d/0x100 [ 228.299758][ T7590] should_fail_ex+0x414/0x560 [ 228.299787][ T7590] should_failslab+0xa8/0x100 [ 228.299814][ T7590] kmem_cache_alloc_noprof+0x73/0x3c0 [ 228.299834][ T7590] ? fuse_get_req+0x7b9/0x10b0 [ 228.299874][ T7590] fuse_get_req+0x7b9/0x10b0 [ 228.299905][ T7590] ? stack_depot_save_flags+0x40/0x900 [ 228.299949][ T7590] ? __pfx_fuse_get_req+0x10/0x10 [ 228.299980][ T7590] ? create_new_entry+0x131/0xa20 [ 228.300007][ T7590] ? fuse_mknod+0x2c2/0x380 [ 228.300032][ T7590] ? vfs_create+0x24b/0x400 [ 228.300060][ T7590] ? do_mknodat+0x3c6/0x4d0 [ 228.300085][ T7590] ? __x64_sys_mknod+0x8c/0xa0 [ 228.300116][ T7590] ? do_syscall_64+0xfa/0x3b0 [ 228.300139][ T7590] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.300176][ T7590] __fuse_simple_request+0x2aa/0x18d0 [ 228.300216][ T7590] ? rcu_is_watching+0x15/0xb0 [ 228.300241][ T7590] ? __pfx___fuse_simple_request+0x10/0x10 [ 228.300281][ T7590] ? get_create_ext+0x8db/0xc70 [ 228.300321][ T7590] ? __pfx_get_create_ext+0x10/0x10 [ 228.300351][ T7590] ? __kasan_kmalloc+0x93/0xb0 [ 228.300383][ T7590] create_new_entry+0x291/0xa20 [ 228.300420][ T7590] ? __pfx_create_new_entry+0x10/0x10 [ 228.300465][ T7590] ? __pfx_smack_log+0x10/0x10 [ 228.300493][ T7590] ? fuse_permission+0x9fa/0xdc0 [ 228.300529][ T7590] fuse_mknod+0x2c2/0x380 [ 228.300565][ T7590] ? __pfx_fuse_mknod+0x10/0x10 [ 228.300594][ T7590] ? smack_inode_permission+0x28f/0x320 [ 228.300644][ T7590] ? make_vfsgid+0x49/0xa0 [ 228.300675][ T7590] ? HAS_UNMAPPED_ID+0x11a/0x180 [ 228.300703][ T7590] ? bpf_lsm_inode_create+0x9/0x20 [ 228.300729][ T7590] vfs_create+0x24b/0x400 [ 228.300766][ T7590] do_mknodat+0x3c6/0x4d0 [ 228.300801][ T7590] ? __pfx_do_mknodat+0x10/0x10 [ 228.300832][ T7590] ? getname_flags+0x1e5/0x540 [ 228.300862][ T7590] __x64_sys_mknod+0x8c/0xa0 [ 228.300896][ T7590] do_syscall_64+0xfa/0x3b0 [ 228.300918][ T7590] ? lockdep_hardirqs_on+0x9c/0x150 [ 228.300947][ T7590] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.300969][ T7590] ? clear_bhb_loop+0x60/0xb0 [ 228.300996][ T7590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.301017][ T7590] RIP: 0033:0x7f2b5098ebe9 [ 228.301036][ T7590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.301056][ T7590] RSP: 002b:00007f2b4ebf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 228.301079][ T7590] RAX: ffffffffffffffda RBX: 00007f2b50bb5fa0 RCX: 00007f2b5098ebe9 [ 228.301095][ T7590] RDX: 0000000000000702 RSI: 00000000ffff8000 RDI: 00002000000002c0 [ 228.301110][ T7590] RBP: 00007f2b4ebf6090 R08: 0000000000000000 R09: 0000000000000000 [ 228.301124][ T7590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.301137][ T7590] R13: 00007f2b50bb6038 R14: 00007f2b50bb5fa0 R15: 00007ffd0fc3bd68 [ 228.301171][ T7590] [ 228.671932][ T7255] wlan1: Trigger new scan to find an IBSS to join [ 228.929541][ T7418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.951074][ T7418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.977387][ T7418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.991856][ T7418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.999103][ T7418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.025687][ T7418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.268578][ T7611] syz.1.367: attempt to access beyond end of device [ 229.268578][ T7611] nbd1: rw=0, sector=64, nr_sectors = 1 limit=0 [ 229.288563][ T5908] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 229.380977][ T7611] syz.1.367: attempt to access beyond end of device [ 229.380977][ T7611] nbd1: rw=0, sector=256, nr_sectors = 1 limit=0 [ 229.444946][ T7611] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 229.478935][ T5908] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 229.488423][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.524624][ T7418] hsr_slave_0: entered promiscuous mode [ 229.527551][ T7611] syz.1.367: attempt to access beyond end of device [ 229.527551][ T7611] nbd1: rw=0, sector=512, nr_sectors = 1 limit=0 [ 229.537336][ T5908] usb 3-1: config 0 descriptor?? [ 229.559727][ T7418] hsr_slave_1: entered promiscuous mode [ 229.584905][ T7611] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 229.614856][ T7418] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.682290][ T7418] Cannot create hsr debugfs directory [ 229.743092][ T7611] syz.1.367: attempt to access beyond end of device [ 229.743092][ T7611] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 229.776587][ T31] audit: type=1326 audit(1754955387.538:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7616 comm="syz.0.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa27638ebe9 code=0x7ffc0000 [ 229.793736][ T7611] syz.1.367: attempt to access beyond end of device [ 229.793736][ T7611] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 229.948568][ T31] audit: type=1326 audit(1754955387.538:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7616 comm="syz.0.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa27638ebe9 code=0x7ffc0000 [ 229.955936][ T7611] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 229.972963][ T31] audit: type=1326 audit(1754955387.578:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7616 comm="syz.0.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fa27638ebe9 code=0x7ffc0000 [ 230.004543][ T31] audit: type=1326 audit(1754955387.578:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7616 comm="syz.0.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa27638ebe9 code=0x7ffc0000 [ 230.028100][ T7611] syz.1.367: attempt to access beyond end of device [ 230.028100][ T7611] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 230.100088][ T31] audit: type=1326 audit(1754955387.618:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7616 comm="syz.0.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa27638ebe9 code=0x7ffc0000 [ 230.122245][ T7611] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 230.162679][ T31] audit: type=1326 audit(1754955387.618:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7616 comm="syz.0.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa27638ebe9 code=0x7ffc0000 [ 230.189835][ T7611] syz.1.367: attempt to access beyond end of device [ 230.189835][ T7611] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 230.271061][ T7611] syz.1.367: attempt to access beyond end of device [ 230.271061][ T7611] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 230.508959][ T7611] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 230.578410][ T7611] syz.1.367: attempt to access beyond end of device [ 230.578410][ T7611] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 230.702849][ T7611] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 230.979374][ T5908] pegasus 3-1:0.0: can't reset MAC [ 230.993674][ T5908] pegasus 3-1:0.0: probe with driver pegasus failed with error -5 [ 231.031480][ T7611] syz.1.367: attempt to access beyond end of device [ 231.031480][ T7611] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 231.125601][ T5908] usb 3-1: USB disconnect, device number 18 [ 231.139654][ T7611] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 231.179523][ T7611] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 231.230070][ T7611] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 232.078967][ T5908] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 232.258594][ T5908] usb 3-1: Using ep0 maxpacket: 16 [ 232.276967][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.318590][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.347925][ T7655] FAULT_INJECTION: forcing a failure. [ 232.347925][ T7655] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 232.375376][ T5908] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 232.405157][ T7655] CPU: 0 UID: 0 PID: 7655 Comm: syz.1.377 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 232.405189][ T7655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 232.405205][ T7655] Call Trace: [ 232.405215][ T7655] [ 232.405225][ T7655] dump_stack_lvl+0x189/0x250 [ 232.405258][ T7655] ? __pfx____ratelimit+0x10/0x10 [ 232.405283][ T7655] ? __pfx_dump_stack_lvl+0x10/0x10 [ 232.405307][ T7655] ? __pfx__printk+0x10/0x10 [ 232.405348][ T7655] should_fail_ex+0x414/0x560 [ 232.405379][ T7655] _copy_to_user+0x31/0xb0 [ 232.405431][ T7655] simple_read_from_buffer+0xe1/0x170 [ 232.405459][ T7655] proc_fail_nth_read+0x1df/0x250 [ 232.405489][ T7655] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 232.405520][ T7655] ? rw_verify_area+0x258/0x650 [ 232.405553][ T7655] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 232.405579][ T7655] vfs_read+0x200/0x980 [ 232.405628][ T7655] ? __pfx___mutex_lock+0x10/0x10 [ 232.405654][ T7655] ? __pfx_vfs_read+0x10/0x10 [ 232.405688][ T7655] ? __fget_files+0x2a/0x420 [ 232.405718][ T7655] ? __fget_files+0x3a0/0x420 [ 232.405741][ T7655] ? __fget_files+0x2a/0x420 [ 232.405775][ T7655] ksys_read+0x145/0x250 [ 232.405798][ T7655] ? __pfx_ksys_read+0x10/0x10 [ 232.405816][ T7655] ? rcu_is_watching+0x15/0xb0 [ 232.405845][ T7655] ? do_syscall_64+0xbe/0x3b0 [ 232.405873][ T7655] do_syscall_64+0xfa/0x3b0 [ 232.405895][ T7655] ? lockdep_hardirqs_on+0x9c/0x150 [ 232.405917][ T7655] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.405940][ T7655] ? clear_bhb_loop+0x60/0xb0 [ 232.405967][ T7655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.405988][ T7655] RIP: 0033:0x7f2b5098d5fc [ 232.406007][ T7655] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 232.406026][ T7655] RSP: 002b:00007f2b4ebf6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 232.406049][ T7655] RAX: ffffffffffffffda RBX: 00007f2b50bb5fa0 RCX: 00007f2b5098d5fc [ 232.406064][ T7655] RDX: 000000000000000f RSI: 00007f2b4ebf60a0 RDI: 0000000000000004 [ 232.406078][ T7655] RBP: 00007f2b4ebf6090 R08: 0000000000000000 R09: 0000000000000000 [ 232.406092][ T7655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 232.406104][ T7655] R13: 00007f2b50bb6038 R14: 00007f2b50bb5fa0 R15: 00007ffd0fc3bd68 [ 232.406137][ T7655] [ 232.438398][ T5908] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 232.440094][ C0] vkms_vblank_simulate: vblank timer overrun [ 232.463905][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.472451][ T7255] wlan1: Trigger new scan to find an IBSS to join [ 232.599714][ T5908] usb 3-1: config 0 descriptor?? [ 232.813514][ T7418] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 232.921811][ T7418] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 232.983138][ T7418] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 233.083228][ T7418] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 233.278635][ T5899] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 235.283731][ T5908] microsoft 0003:045E:07DA.0002: unbalanced collection at end of report description [ 235.310544][ T5908] microsoft 0003:045E:07DA.0002: parse failed [ 235.316814][ T5908] microsoft 0003:045E:07DA.0002: probe with driver microsoft failed with error -22 [ 235.474635][ T5899] usb 5-1: Using ep0 maxpacket: 32 [ 235.527125][ T5908] usb 3-1: USB disconnect, device number 19 [ 235.541108][ T5899] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 235.599949][ T5899] usb 5-1: config 1 has no interface number 1 [ 235.648644][ T5899] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 235.724127][ T5899] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 235.758338][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.769302][ T7244] wlan1: Creating new IBSS network, BSSID 72:98:86:95:f8:17 [ 235.791890][ T5899] usb 5-1: Product: syz [ 235.831775][ T5899] usb 5-1: Manufacturer: syz [ 235.855919][ T5899] usb 5-1: SerialNumber: syz [ 235.896316][ T5899] usb 5-1: can't set config #1, error -71 [ 235.975569][ T5899] usb 5-1: USB disconnect, device number 17 [ 236.087750][ T7418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.196179][ T7418] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.262914][ T6075] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.270262][ T6075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.463455][ T7699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.385'. [ 237.366709][ T7699] bridge_slave_1: left allmulticast mode [ 237.409302][ T7699] bridge_slave_1: left promiscuous mode [ 237.417708][ T7699] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.561450][ T7699] bridge_slave_0: left allmulticast mode [ 237.601961][ T7699] bridge_slave_0: left promiscuous mode [ 237.630231][ T7699] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.470705][ T7245] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.478135][ T7245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.750434][ T7418] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 238.886907][ T7726] overlayfs: missing 'workdir' [ 239.414298][ T7750] netlink: 24 bytes leftover after parsing attributes in process `syz.4.397'. [ 239.643551][ T7418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.688823][ T977] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 239.830780][ T7750] netlink: 'syz.4.397': attribute type 10 has an invalid length. [ 240.039750][ T977] usb 2-1: Using ep0 maxpacket: 16 [ 240.047587][ T7750] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 240.050320][ T977] usb 2-1: config 0 interface 0 has no altsetting 0 [ 240.753918][ T977] usb 2-1: New USB device found, idVendor=05ac, idProduct=0267, bcdDevice= 0.00 [ 240.763229][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.774718][ T977] usb 2-1: config 0 descriptor?? [ 241.207781][ T7418] veth0_vlan: entered promiscuous mode [ 241.247349][ T7418] veth1_vlan: entered promiscuous mode [ 241.293003][ T977] usbhid 2-1:0.0: can't add hid device: -71 [ 241.299176][ T977] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 241.356806][ T977] usb 2-1: USB disconnect, device number 15 [ 241.435699][ T7418] veth0_macvtap: entered promiscuous mode [ 241.459240][ T7418] veth1_macvtap: entered promiscuous mode [ 241.606170][ T7418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.646067][ T7418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.705438][ T7418] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.729096][ T7418] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.778565][ T7418] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.803948][ T7418] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.957940][ T7801] tipc: Started in network mode [ 241.977893][ T7801] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 242.016085][ T7801] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 242.040113][ T7801] tipc: Enabled bearer , priority 10 [ 242.253135][ T7236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.280757][ T7236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.310739][ T7811] overlayfs: missing 'workdir' [ 242.445276][ T7244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.455520][ T7244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.491927][ T7814] loop2: detected capacity change from 0 to 7 [ 242.508813][ T7814] Dev loop2: unable to read RDB block 7 [ 242.515284][ T7814] loop2: unable to read partition table [ 242.525029][ T7814] loop2: partition table beyond EOD, truncated [ 242.538720][ T7814] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 242.589918][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 242.589941][ T31] audit: type=1326 audit(1754955400.318:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7795 comm="syz.2.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8818ebe9 code=0x7fc00000 [ 243.153180][ T5908] tipc: Node number set to 1 [ 243.302235][ T31] audit: type=1326 audit(1754955400.318:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7795 comm="syz.2.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5c8818ebe9 code=0x7fc00000 [ 243.457866][ T31] audit: type=1326 audit(1754955400.318:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7795 comm="syz.2.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8818ebe9 code=0x7fc00000 [ 243.501649][ T31] audit: type=1326 audit(1754955400.318:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7795 comm="syz.2.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8818ebe9 code=0x7fc00000 [ 243.528547][ T31] audit: type=1326 audit(1754955400.318:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7795 comm="syz.2.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8818ebe9 code=0x7fc00000 [ 243.568839][ T7827] 9pnet_fd: Insufficient options for proto=fd [ 243.579142][ T31] audit: type=1326 audit(1754955400.318:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7795 comm="syz.2.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8818ebe9 code=0x7fc00000 [ 243.601178][ T31] audit: type=1326 audit(1754955400.318:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7795 comm="syz.2.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8818ebe9 code=0x7fc00000 [ 243.680525][ T31] audit: type=1326 audit(1754955400.318:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7795 comm="syz.2.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8818ebe9 code=0x7fc00000 [ 243.708450][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 243.801875][ T31] audit: type=1326 audit(1754955400.318:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7795 comm="syz.2.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8818ebe9 code=0x7fc00000 [ 243.893756][ T31] audit: type=1326 audit(1754955400.318:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7795 comm="syz.2.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8818ebe9 code=0x7fc00000 [ 243.922056][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.984552][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 244.013149][ T10] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 244.073424][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 244.122516][ T10] usb 6-1: SerialNumber: syz [ 244.451995][ T10] usb 6-1: 0:2 : does not exist [ 244.457073][ T10] usb 6-1: unit 255 not found! [ 244.537263][ T10] usb 6-1: USB disconnect, device number 2 [ 244.628587][ T7845] fuse: root generation should be zero [ 244.638998][ T5980] udevd[5980]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 244.748459][ T5906] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 245.144976][ T7856] comedi comedi2: dt2814: I/O port conflict (0xb000,2) [ 245.760061][ T7860] overlayfs: missing 'workdir' [ 245.833543][ T7869] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 246.153325][ T7877] vlan2: entered promiscuous mode [ 246.175509][ T7877] vlan2: entered allmulticast mode [ 246.182358][ T7882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.423'. [ 246.214389][ T7877] hsr_slave_1: entered allmulticast mode [ 246.298446][ T5906] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 246.319726][ T7889] netlink: 12 bytes leftover after parsing attributes in process `syz.0.424'. [ 246.468438][ T5906] usb 5-1: device descriptor read/64, error -71 [ 246.706997][ T7895] vlan2: entered allmulticast mode [ 246.712256][ T7895] bridge0: entered allmulticast mode [ 246.717893][ T7895] bridge1: port 1(vlan2) entered blocking state [ 246.724437][ T7895] bridge1: port 1(vlan2) entered disabled state [ 246.732451][ T7895] vlan2: entered promiscuous mode [ 246.737573][ T7895] bridge0: entered promiscuous mode [ 246.838488][ T5906] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 246.988505][ T5906] usb 5-1: device descriptor read/64, error -71 [ 247.098880][ T5906] usb usb5-port1: attempt power cycle [ 247.461856][ T5906] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 247.499124][ T5906] usb 5-1: device descriptor read/8, error -71 [ 247.501781][ T7912] ip6t_srh: unknown srh invflags 7863 [ 247.758587][ T5906] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 247.798883][ T5906] usb 5-1: device descriptor read/8, error -71 [ 247.916158][ T5906] usb usb5-port1: unable to enumerate USB device [ 248.068543][ T7931] netlink: 60 bytes leftover after parsing attributes in process `syz.5.431'. [ 248.131419][ T7931] 9pnet_fd: Insufficient options for proto=fd [ 249.018602][ T5899] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 249.158518][ T5899] usb 3-1: device descriptor read/64, error -71 [ 249.418382][ T5899] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 249.468452][ T5906] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 249.490071][ T5836] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 249.568714][ T5899] usb 3-1: device descriptor read/64, error -71 [ 249.628658][ T5906] usb 5-1: Using ep0 maxpacket: 16 [ 249.636364][ T5906] usb 5-1: config 1 has an invalid descriptor of length 171, skipping remainder of the config [ 249.647497][ T5906] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 249.659625][ T5906] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 249.674492][ T5836] usb 2-1: config index 0 descriptor too short (expected 62482, got 18) [ 249.683791][ T5899] usb usb3-port1: attempt power cycle [ 249.697174][ T5836] usb 2-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=d6.bb [ 249.708416][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.716482][ T5836] usb 2-1: Product: syz [ 249.789073][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.789100][ T5836] usb 2-1: Manufacturer: syz [ 249.798133][ T5906] usb 5-1: Product: syz [ 249.802973][ T5836] usb 2-1: SerialNumber: syz [ 249.825913][ T5906] usb 5-1: Manufacturer: syz [ 249.831959][ T5836] usb 2-1: config 0 descriptor?? [ 249.851829][ T5906] usb 5-1: SerialNumber: syz [ 249.951799][ T7990] sp0: Synchronizing with TNC [ 250.058980][ T5899] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 250.079962][ T5899] usb 3-1: device descriptor read/8, error -71 [ 250.130658][ T7968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.179815][ T7968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.205280][ T5842] Bluetooth: hci1: unexpected event for opcode 0x0c05 [ 250.218696][ T5906] usb 5-1: 0:2 : does not exist [ 250.225817][ T5906] usb 5-1: unit 9 not found! [ 250.231953][ T7993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.253097][ T7993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.307336][ T5906] usb 5-1: USB disconnect, device number 22 [ 250.338463][ T5899] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 250.361442][ T5899] usb 3-1: device descriptor read/8, error -71 [ 250.385975][ T6107] udevd[6107]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 250.497457][ T5899] usb usb3-port1: unable to enumerate USB device [ 250.902340][ T7995] QAT: failed to copy from user. [ 251.648599][ T5906] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 251.736568][ T8006] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 251.817603][ T5906] usb 6-1: not running at top speed; connect to a high speed hub [ 251.837504][ T5906] usb 6-1: config 95 has an invalid interface number: 1 but max is 0 [ 251.869421][ T5906] usb 6-1: config 95 has no interface number 0 [ 251.881764][ T5906] usb 6-1: config 95 interface 1 has no altsetting 0 [ 252.300250][ T5906] usb 6-1: string descriptor 0 read error: -22 [ 252.306657][ T5906] usb 6-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 252.339077][ T5906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.400602][ T5836] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 252.789626][ T5836] gspca_sn9c2028: read1 error -71 [ 252.797430][ T5836] gspca_sn9c2028: read1 error -71 [ 252.819954][ T5836] gspca_sn9c2028: read1 error -71 [ 252.825179][ T5836] sn9c2028 2-1:0.0: probe with driver sn9c2028 failed with error -71 [ 252.867251][ T5836] usb 2-1: USB disconnect, device number 16 [ 253.028409][ T5899] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 253.206669][ T5899] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 253.236909][ T5899] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 253.248918][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.286900][ T5899] usb 5-1: Product: syz [ 253.298417][ T5899] usb 5-1: Manufacturer: syz [ 253.313672][ T5899] usb 5-1: SerialNumber: syz [ 253.363631][ T5899] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 253.408858][ T31] kauditd_printk_skb: 23 callbacks suppressed [ 253.408880][ T31] audit: type=1400 audit(1754955411.168:84): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=8026 comm="syz.1.456" daddr=::ffff:172.20.20.45 [ 253.602300][ T8029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.455'. [ 255.529218][ T5899] usb 5-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 255.680990][ T5899] usb 5-1: USB disconnect, device number 23 [ 255.695146][ T5956] usb 6-1: USB disconnect, device number 3 [ 256.126912][ T8047] binder: BINDER_SET_CONTEXT_MGR already set [ 256.133854][ T8047] binder: 8039:8047 ioctl 4018620d 200000000040 returned -16 [ 256.144599][ T31] audit: type=1400 audit(1754955413.888:85): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=8039 comm="syz.1.460" dest=2 [ 256.199555][ T31] audit: type=1400 audit(1754955413.898:86): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=8048 comm="syz.4.462" [ 257.618373][ T31] audit: type=1400 audit(1754955415.378:87): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=8052 comm="syz.2.464" daddr=::ffff:0.0.0.0 dest=20002 [ 257.759012][ T5906] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 257.808746][ T51] Bluetooth: hci3: command 0x0405 tx timeout [ 257.999863][ T5906] usb 6-1: Using ep0 maxpacket: 8 [ 258.028548][ T5906] usb 6-1: config index 0 descriptor too short (expected 29970, got 18) [ 258.068985][ T5906] usb 6-1: config 0 has too many interfaces: 168, using maximum allowed: 32 [ 258.118626][ T5906] usb 6-1: config 0 has an invalid interface number: 187 but max is 167 [ 258.128689][ T5906] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 168 [ 258.139296][ T5906] usb 6-1: config 0 has no interface number 0 [ 258.158805][ T5906] usb 6-1: config 0 interface 187 altsetting 172 has 0 endpoint descriptors, different from the interface descriptor's value: 20 [ 258.231012][ T5906] usb 6-1: config 0 interface 187 has no altsetting 0 [ 258.299804][ T5906] usb 6-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a [ 258.324759][ T5906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.346852][ T5906] usb 6-1: Product: syz [ 258.351379][ T5906] usb 6-1: Manufacturer: syz [ 258.356209][ T5906] usb 6-1: SerialNumber: syz [ 258.368870][ T5906] usb 6-1: config 0 descriptor?? [ 259.646017][ T8080] IPv6: sit1: Disabled Multicast RS [ 259.766018][ T5965] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 260.379741][ T5965] usb 2-1: device descriptor read/64, error -71 [ 261.028574][ T5965] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 261.828944][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.835435][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.980545][ T5906] usb 6-1: USB disconnect, device number 4 [ 262.002431][ T5965] usb 2-1: device descriptor read/64, error -71 [ 262.072757][ T8102] overlayfs: failed to resolve './file1/file0': -2 [ 262.140176][ T5965] usb usb2-port1: attempt power cycle [ 262.298522][ T977] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 263.778684][ T977] usb 3-1: Using ep0 maxpacket: 8 [ 263.788232][ T977] usb 3-1: config 6 has an invalid interface number: 2 but max is 0 [ 263.796361][ T977] usb 3-1: config 6 has no interface number 0 [ 263.818650][ T977] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 263.859253][ T977] usb 3-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 263.927545][ T977] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 263.978467][ T977] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 264.011752][ T977] usb 3-1: string descriptor 0 read error: -71 [ 264.028731][ T977] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 264.037886][ T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.202898][ T977] usb 3-1: can't set config #6, error -71 [ 264.266858][ T977] usb 3-1: USB disconnect, device number 25 [ 265.518437][ T8144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.487'. [ 265.702287][ T8138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.486'. [ 265.711763][ T8138] netlink: 'syz.1.486': attribute type 30 has an invalid length. [ 266.972343][ T8138] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.981949][ T8138] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.991497][ T8138] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.000789][ T8138] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.512420][ T8171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.492'. [ 268.032098][ T8180] syz_tun: entered allmulticast mode [ 268.105649][ T8182] netlink: 36 bytes leftover after parsing attributes in process `syz.4.496'. [ 268.440076][ T5956] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 269.280260][ T5956] usb 6-1: Using ep0 maxpacket: 8 [ 269.339138][ T5956] usb 6-1: config 162 has an invalid interface number: 84 but max is 2 [ 269.348730][ T5956] usb 6-1: config 162 has an invalid interface number: 3 but max is 2 [ 269.357785][ T5956] usb 6-1: config 162 has no interface number 0 [ 269.394656][ T5956] usb 6-1: config 162 has no interface number 1 [ 269.425163][ T5956] usb 6-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 269.496703][ T5956] usb 6-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 269.523041][ T5956] usb 6-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 269.548964][ T5956] usb 6-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 269.574427][ T5956] usb 6-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 269.604630][ T5956] usb 6-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 269.670808][ T5956] usb 6-1: config 162 interface 84 has no altsetting 0 [ 269.686784][ T5956] usb 6-1: config 162 interface 2 has no altsetting 0 [ 269.707067][ T5956] usb 6-1: config 162 interface 3 has no altsetting 0 [ 269.722503][ T8209] netlink: 256 bytes leftover after parsing attributes in process `syz.4.503'. [ 269.724138][ T5956] usb 6-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 269.748443][ T5906] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 269.763249][ T5956] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.779859][ T5956] usb 6-1: Product: syz [ 269.810575][ T5956] usb 6-1: Manufacturer: syz [ 269.815377][ T5956] usb 6-1: SerialNumber: syz [ 269.895505][ T5906] usb 3-1: device descriptor read/64, error -71 [ 270.056000][ T8179] syz_tun: left allmulticast mode [ 270.117492][ T5842] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 270.150233][ T5956] usb 6-1: USB disconnect, device number 5 [ 270.168415][ T5906] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 270.308861][ T5906] usb 3-1: device descriptor read/64, error -71 [ 270.428875][ T5906] usb usb3-port1: attempt power cycle [ 270.608437][ T5965] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 270.779807][ T5965] usb 2-1: Using ep0 maxpacket: 32 [ 270.787954][ T5965] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.809197][ T5965] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.819299][ T5906] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 270.829620][ T5965] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 270.838970][ T5965] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 270.854649][ T5906] usb 3-1: device descriptor read/8, error -71 [ 270.861634][ T5965] usb 2-1: Product: syz [ 270.865987][ T5965] usb 2-1: Manufacturer: syz [ 270.917593][ T5965] hub 2-1:4.0: USB hub found [ 271.187741][ T5965] hub 2-1:4.0: 2 ports detected [ 271.478988][ T8245] vxfs: WRONG superblock magic 00000000 at 1 [ 271.488229][ T8245] vxfs: WRONG superblock magic 00000000 at 8 [ 271.494605][ T8245] vxfs: can't find superblock. [ 271.530329][ T5906] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 271.705942][ T5906] usb 3-1: device descriptor read/8, error -71 [ 271.851934][ T8234] team0: Port device team_slave_0 removed [ 271.887036][ T8240] vlan2: entered promiscuous mode [ 271.902249][ T8240] bond0: entered promiscuous mode [ 271.913766][ T8240] bond_slave_0: entered promiscuous mode [ 271.930558][ T8240] bond_slave_1: entered promiscuous mode [ 271.937193][ T8240] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 272.239475][ T5906] usb usb3-port1: unable to enumerate USB device [ 272.404318][ T8253] netlink: 'syz.4.515': attribute type 1 has an invalid length. [ 272.432979][ T8253] netlink: 'syz.4.515': attribute type 4 has an invalid length. [ 272.507917][ T8253] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.515'. [ 272.551245][ T5899] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 272.870664][ T5899] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 272.885895][ T5899] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 272.897794][ T5899] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 272.913969][ T5899] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 272.927805][ T5899] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 272.947868][ T5899] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.970888][ T5899] usb 6-1: config 0 descriptor?? [ 272.977523][ T8251] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 273.097190][ T8256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.516'. [ 273.152885][ T5965] hub 2-1:4.0: activate --> -90 [ 273.434263][ T5899] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 273.495849][ T5899] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 273.535143][ T5899] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 273.546393][ T5899] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 273.554494][ T5899] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 273.583221][ T5899] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 273.593315][ T8262] netlink: 60 bytes leftover after parsing attributes in process `syz.2.517'. [ 273.643628][ T8266] veth1_to_bridge: entered promiscuous mode [ 273.655860][ T31] audit: type=1400 audit(1754955431.418:88): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=8265 comm="syz.4.520" daddr=::ffff:127.0.0.1 dest=20003 [ 273.788285][ C0] hrtimer: interrupt took 37734 ns [ 273.798839][ T5899] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 273.834757][ T5836] usb 2-1: USB disconnect, device number 20 [ 274.384001][ T8265] veth1_to_bridge: left promiscuous mode [ 274.465288][ T5899] usb 6-1: USB disconnect, device number 6 [ 274.818117][ T8268] fido_id[8268]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 275.825485][ T5906] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 276.338416][ T5906] usb 2-1: Using ep0 maxpacket: 16 [ 276.383663][ T5906] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 276.426596][ T8297] support for cryptoloop has been removed. Use dm-crypt instead. [ 276.554743][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.569182][ T5906] usb 2-1: Product: syz [ 276.573435][ T5906] usb 2-1: Manufacturer: syz [ 276.578155][ T5906] usb 2-1: SerialNumber: syz [ 276.760884][ T5906] r8152-cfgselector 2-1: Unknown version 0x0000 [ 276.767330][ T5906] r8152-cfgselector 2-1: config 0 descriptor?? [ 278.329080][ T5836] r8152-cfgselector 2-1: USB disconnect, device number 21 [ 278.426342][ T8306] netlink: 16 bytes leftover after parsing attributes in process `syz.2.532'. [ 278.988576][ T977] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 279.362794][ T5836] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 279.562565][ T8326] netlink: 24 bytes leftover after parsing attributes in process `syz.0.536'. [ 279.730876][ T977] usb 5-1: config 0 has an invalid interface number: 154 but max is 0 [ 280.137448][ T977] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.215408][ T977] usb 5-1: config 0 has no interface number 0 [ 280.279697][ T977] usb 5-1: New USB device found, idVendor=413c, idProduct=8196, bcdDevice=1f.e0 [ 280.310661][ T5836] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 280.365908][ T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.378912][ T5836] usb 6-1: config 0 has an invalid descriptor of length 83, skipping remainder of the config [ 280.417440][ T5836] usb 6-1: config 0 has no interface number 0 [ 280.435752][ T977] usb 5-1: config 0 descriptor?? [ 280.468578][ T5836] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid maxpacket 47776, setting to 64 [ 280.483507][ T977] qmi_wwan 5-1:0.154: bogus CDC Union: master=0, slave=0 [ 280.693697][ T977] qmi_wwan 5-1:0.154: probe with driver qmi_wwan failed with error -22 [ 280.702532][ T5836] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 280.837543][ T8337] netlink: 28 bytes leftover after parsing attributes in process `syz.0.538'. [ 280.846886][ T8337] netlink: 28 bytes leftover after parsing attributes in process `syz.0.538'. [ 281.448753][ T977] usb 5-1: USB disconnect, device number 24 [ 281.457149][ T5836] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 281.496471][ T5836] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.547454][ T8328] option changes via remount are deprecated (pid=8324 comm=syz.1.537) [ 281.555521][ T5836] usb 6-1: Product: syz [ 281.570843][ T5836] usb 6-1: Manufacturer: syz [ 281.575538][ T5836] usb 6-1: SerialNumber: syz [ 281.617822][ T5836] usb 6-1: config 0 descriptor?? [ 281.710952][ T5842] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 282.282601][ T5836] usbtouchscreen 6-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 282.390212][ T5836] usb 6-1: USB disconnect, device number 7 [ 283.713440][ T8360] block nbd1: shutting down sockets [ 284.763714][ T8387] 9pnet: Could not find request transport: fqdno=0x0000000000000006 [ 285.143481][ T5836] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 285.460885][ T5836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 285.501894][ T5836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 285.543588][ T5836] usb 5-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 285.582981][ T5836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.628639][ T5836] usb 5-1: config 0 descriptor?? [ 285.659406][ T8392] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 285.999208][ T8404] netlink: 8 bytes leftover after parsing attributes in process `syz.5.557'. [ 286.045811][ T8408] netlink: 72 bytes leftover after parsing attributes in process `syz.4.553'. [ 286.066648][ T8408] netlink: 92 bytes leftover after parsing attributes in process `syz.4.553'. [ 286.456665][ T5836] saitek 0003:06A3:0CCD.0004: item fetching failed at offset 0/2 [ 286.479691][ T5836] saitek 0003:06A3:0CCD.0004: parse failed [ 286.485933][ T5836] saitek 0003:06A3:0CCD.0004: probe with driver saitek failed with error -22 [ 287.248512][ T8420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.559'. [ 287.360105][ T8424] overlayfs: invalid redirect ((null)) [ 287.491866][ T5906] usb 5-1: USB disconnect, device number 25 [ 287.663181][ T8426] overlayfs: invalid redirect ((null)) [ 289.263449][ T5842] Bluetooth: hci4: command 0x0406 tx timeout [ 290.192726][ T8468] netlink: 52 bytes leftover after parsing attributes in process `syz.0.576'. [ 290.221359][ T5899] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 290.518611][ T5836] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 290.952485][ T8486] befs: (nullb0): invalid magic header [ 290.980850][ T5899] usb 6-1: Using ep0 maxpacket: 16 [ 291.000893][ T5899] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 291.028434][ T5899] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.060717][ T5899] usb 6-1: config 0 has no interface number 0 [ 291.069973][ T5836] usb 5-1: Using ep0 maxpacket: 16 [ 291.083495][ T5836] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 291.102107][ T5899] usb 6-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 291.115615][ T5836] usb 5-1: config 0 has no interface number 0 [ 291.125409][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.263780][ T5836] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 291.275027][ T5899] usb 6-1: Product: syz [ 291.283989][ T5899] usb 6-1: Manufacturer: syz [ 291.289125][ T5899] usb 6-1: SerialNumber: syz [ 291.296298][ T5836] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 291.307819][ T5899] usb 6-1: config 0 descriptor?? [ 291.315749][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.331417][ T5899] usb 6-1: Found UVC 0.00 device syz (046c:14e8) [ 291.337923][ T5899] usb 6-1: No valid video chain found. [ 291.351026][ T5836] usb 5-1: Product: syz [ 291.355367][ T5836] usb 5-1: Manufacturer: syz [ 291.362708][ T5836] usb 5-1: SerialNumber: syz [ 291.392917][ T5836] usb 5-1: config 0 descriptor?? [ 291.538579][ T8472] syz.5.574 uses obsolete (PF_INET,SOCK_PACKET) [ 291.670358][ T5956] usb 6-1: USB disconnect, device number 8 [ 292.517511][ T8505] netlink: 12 bytes leftover after parsing attributes in process `syz.2.585'. [ 292.650304][ T5836] usbtouchscreen 5-1:0.214: Failed to read FW rev: -71 [ 292.682786][ T5836] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 292.765535][ T5836] usb 5-1: USB disconnect, device number 26 [ 292.798561][ T5899] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 292.998705][ T5899] usb 3-1: Using ep0 maxpacket: 32 [ 293.029888][ T5899] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 293.120799][ T5899] usb 3-1: config 0 has no interface number 0 [ 293.128840][ T5899] usb 3-1: config 0 interface 2 has no altsetting 0 [ 293.180543][ T5899] usb 3-1: New USB device found, idVendor=ef6a, idProduct=0002, bcdDevice=f0.3f [ 293.207463][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.238347][ T5899] usb 3-1: Product: syz [ 293.242697][ T5899] usb 3-1: Manufacturer: syz [ 293.252919][ T5899] usb 3-1: SerialNumber: syz [ 293.292440][ T5899] usb 3-1: config 0 descriptor?? [ 293.507177][ T8505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.546972][ T8505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.569064][ T977] usb 3-1: USB disconnect, device number 30 [ 297.089068][ T5899] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 297.433386][ T5899] usb 5-1: Using ep0 maxpacket: 16 [ 297.513300][ T5899] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 297.531193][ T5899] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 297.576416][ T5899] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 297.916091][ T5899] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 297.925516][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.933789][ T5899] usb 5-1: Product: syz [ 297.938062][ T5899] usb 5-1: Manufacturer: syz [ 297.944455][ T5899] usb 5-1: SerialNumber: syz [ 298.268836][ T5906] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 298.423924][ T5899] usb 5-1: 0:2 : does not exist [ 298.569827][ T5906] usb 6-1: Using ep0 maxpacket: 16 [ 298.679094][ T5906] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 298.748374][ T5906] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 298.790593][ T31] audit: type=1400 audit(1754955456.558:89): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=8562 comm="syz.2.604" dest=2 [ 298.888417][ T5906] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 299.224554][ T5899] usb 5-1: USB disconnect, device number 27 [ 299.647125][ T5906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.668319][ T5906] usb 6-1: Product: syz [ 299.672578][ T5906] usb 6-1: Manufacturer: syz [ 299.677297][ T5906] usb 6-1: SerialNumber: syz [ 299.910432][ T5980] udevd[5980]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 299.955261][ T5906] usb 6-1: 0:2 : does not exist [ 300.026654][ T8580] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.598623][ T5906] usb 6-1: USB disconnect, device number 9 [ 300.728975][ T5980] udevd[5980]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 300.766928][ T8588] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.471246][ T8610] netlink: 'syz.1.615': attribute type 5 has an invalid length. [ 301.613089][ T8610] netlink: 24 bytes leftover after parsing attributes in process `syz.1.615'. [ 302.544126][ T8637] binder: binder_mmap: 8636 200000000000-200000b36000 bad vm_flags failed -1 [ 303.039335][ T8629] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 303.070980][ T8629] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 303.272727][ T8629] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 303.301482][ T8629] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 303.357227][ T8629] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 303.369844][ T8629] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 303.991332][ T8629] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 303.997552][ T8629] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 304.089751][ T8629] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 304.190722][ T8629] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 304.262215][ T8670] netlink: 56 bytes leftover after parsing attributes in process `syz.4.632'. [ 304.276993][ T8670] netlink: 108 bytes leftover after parsing attributes in process `syz.4.632'. [ 304.448373][ T5842] Bluetooth: hci0: command 0x0406 tx timeout [ 305.038126][ T8695] gfs2: not a GFS2 filesystem [ 305.068448][ T5955] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 305.101650][ T8695] gfs2: not a GFS2 filesystem [ 305.147649][ T8695] gfs2: not a GFS2 filesystem [ 305.289139][ T8695] gfs2: not a GFS2 filesystem [ 305.746369][ T5955] usb 6-1: config 0 has no interfaces? [ 305.747252][ T5955] usb 6-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.04 [ 305.747390][ T5955] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.757114][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 305.757316][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 305.851228][ T8695] gfs2: not a GFS2 filesystem [ 306.034454][ T5955] usb 6-1: config 0 descriptor?? [ 306.559200][ T8694] netlink: 76 bytes leftover after parsing attributes in process `syz.0.638'. [ 307.549333][ T51] Bluetooth: hci3: command 0x0405 tx timeout [ 307.555588][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 307.562034][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 307.720705][ T5955] usb 6-1: USB disconnect, device number 10 [ 307.825946][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 307.825956][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 308.055382][ T8711] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 308.070853][ T8711] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 308.111477][ T8711] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 308.791257][ T8736] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 308.862966][ T8738] loop6: detected capacity change from 0 to 7 [ 308.877551][ T5980] Dev loop6: unable to read RDB block 7 [ 308.884423][ T5980] loop6: unable to read partition table [ 308.890632][ T5980] loop6: partition table beyond EOD, truncated [ 308.910256][ T8738] Dev loop6: unable to read RDB block 7 [ 308.916410][ T8738] loop6: unable to read partition table [ 308.928702][ T8738] loop6: partition table beyond EOD, truncated [ 308.935127][ T8738] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 309.651068][ T5842] Bluetooth: hci3: command 0x0405 tx timeout [ 309.874221][ T5842] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 310.845428][ T8756] netlink: 32 bytes leftover after parsing attributes in process `syz.1.656'. [ 311.241391][ T8771] netlink: 100 bytes leftover after parsing attributes in process `syz.2.660'. [ 311.729499][ T5842] Bluetooth: hci3: command 0x0405 tx timeout [ 311.750407][ T977] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 311.899973][ T977] usb 3-1: device descriptor read/64, error -71 [ 312.159715][ T977] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 312.408367][ T977] usb 3-1: device descriptor read/64, error -71 [ 312.528908][ T977] usb usb3-port1: attempt power cycle [ 313.753005][ T977] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 313.800258][ T977] usb 3-1: device descriptor read/8, error -71 [ 314.319240][ T8801] loop7: detected capacity change from 0 to 16384 [ 314.349219][ T977] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 314.400174][ T977] usb 3-1: device descriptor read/8, error -71 [ 314.422420][ T8796] can: request_module (can-proto-0) failed. [ 314.518883][ T8796] loop7: detected capacity change from 16384 to 0 [ 314.528306][ C1] I/O error, dev loop7, sector 3712 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 314.539871][ C1] I/O error, dev loop7, sector 512 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 314.561259][ T977] usb usb3-port1: unable to enumerate USB device [ 314.629609][ T8796] batadv0: entered promiscuous mode [ 314.640515][ T8796] bridge0: entered promiscuous mode [ 314.648004][ T8796] hsr1: entered allmulticast mode [ 314.671072][ T8796] batadv0: entered allmulticast mode [ 314.676642][ T8796] bridge0: entered allmulticast mode [ 315.364650][ T8826] netlink: 'syz.1.673': attribute type 10 has an invalid length. [ 315.380565][ T8826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.390778][ T8826] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 316.095047][ T8846] netlink: 'syz.2.679': attribute type 2 has an invalid length. [ 316.108729][ T8846] netlink: 32 bytes leftover after parsing attributes in process `syz.2.679'. [ 318.180417][ T31] audit: type=1326 audit(1754955475.868:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8871 comm="syz.4.686" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f65da18ebe9 code=0x0 [ 318.897752][ T5906] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 319.098432][ T5906] usb 2-1: Using ep0 maxpacket: 16 [ 319.167071][ T5906] usb 2-1: config index 0 descriptor too short (expected 146, got 18) [ 319.268667][ T5906] usb 2-1: config 222 has 1 interface, different from the descriptor's value: 13 [ 319.370573][ T5906] usb 2-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 319.461764][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.566844][ T5906] usb 2-1: Product: syz [ 319.638764][ T5906] usb 2-1: Manufacturer: syz [ 319.643477][ T5906] usb 2-1: SerialNumber: syz [ 320.537354][ T8887] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(15) [ 320.544132][ T8887] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 320.552050][ T8887] vhci_hcd vhci_hcd.0: Device attached [ 320.692412][ T8888] vhci_hcd: connection closed [ 320.728831][ T6075] vhci_hcd: stop threads [ 320.822442][ T6075] vhci_hcd: release socket [ 320.830636][ T5965] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 320.861039][ T6075] vhci_hcd: disconnect device [ 322.515752][ T5955] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 322.599287][ T5906] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 322.671725][ T5906] snd-usb-audio 2-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 322.693466][ T8910] overlayfs: invalid redirect (./file0) [ 322.704244][ T5906] usb 2-1: USB disconnect, device number 22 [ 322.710608][ T5955] usb 3-1: Using ep0 maxpacket: 16 [ 322.732497][ T5955] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.748501][ T5955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 322.763061][ T5980] udevd[5980]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 322.773272][ T5955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 322.803012][ T5955] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 322.852320][ T5955] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 322.867305][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.874268][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.893314][ T5955] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 323.127820][ T5955] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 323.136269][ T5955] usb 3-1: Manufacturer: syz [ 323.155312][ T5955] usb 3-1: config 0 descriptor?? [ 323.380719][ T8919] macsec1: entered allmulticast mode [ 323.386246][ T8919] bond0: entered allmulticast mode [ 323.391832][ T8919] bond_slave_0: entered allmulticast mode [ 323.397990][ T8919] bond_slave_1: entered allmulticast mode [ 323.404087][ T8919] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 323.762159][ T8919] bond0: left allmulticast mode [ 323.767149][ T8919] bond_slave_0: left allmulticast mode [ 323.779235][ T8919] bond_slave_1: left allmulticast mode [ 323.784818][ T8919] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 324.048473][ T5955] rc_core: IR keymap rc-hauppauge not found [ 324.096718][ T8927] netlink: 71 bytes leftover after parsing attributes in process `syz.2.695'. [ 324.135036][ T5955] Registered IR keymap rc-empty [ 324.151984][ T5955] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 324.240211][ T5955] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 324.293676][ T8935] netlink: 248 bytes leftover after parsing attributes in process `syz.1.706'. [ 324.304658][ T31] audit: type=1400 audit(1754955482.058:91): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=8934 comm="syz.1.706" [ 324.329679][ T5955] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 324.416703][ T5955] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input16 [ 324.489612][ T5955] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 324.525781][ T5955] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 324.585871][ T5955] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 324.642660][ T5955] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 324.698697][ T5955] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 324.720853][ T5955] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 324.745116][ T5899] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 324.769558][ T5955] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 324.803396][ T5955] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 324.859430][ T5955] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 324.898493][ T5955] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 324.934681][ T5955] mceusb 3-1:0.0: Registered Ѕ with mce emulator interface version 1 [ 324.949652][ T5899] usb 5-1: Using ep0 maxpacket: 32 [ 324.964923][ T5955] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 324.975887][ T5899] usb 5-1: config 1 has an invalid interface number: 96 but max is 0 [ 325.002059][ T5899] usb 5-1: config 1 has no interface number 0 [ 325.025102][ T5899] usb 5-1: config 1 interface 96 altsetting 0 bulk endpoint 0xB has invalid maxpacket 64 [ 325.077884][ T5899] usb 5-1: Dual-Role OTG device on HNP port [ 325.094030][ T5899] usb 5-1: New USB device found, idVendor=0bb4, idProduct=0a60, bcdDevice=53.13 [ 325.116132][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.144567][ T5899] usb 5-1: Product: syz [ 325.161168][ T5899] usb 5-1: Manufacturer: syz [ 325.188804][ T5899] usb 5-1: SerialNumber: syz [ 325.234083][ T8940] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 325.456540][ T8954] overlayfs: invalid redirect (./file0) [ 325.475761][ T8954] FAULT_INJECTION: forcing a failure. [ 325.475761][ T8954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 325.516103][ T8954] CPU: 1 UID: 0 PID: 8954 Comm: syz.0.709 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 325.516134][ T8954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 325.516148][ T8954] Call Trace: [ 325.516158][ T8954] [ 325.516167][ T8954] dump_stack_lvl+0x189/0x250 [ 325.516198][ T8954] ? __pfx____ratelimit+0x10/0x10 [ 325.516223][ T8954] ? __pfx_dump_stack_lvl+0x10/0x10 [ 325.516248][ T8954] ? __pfx__printk+0x10/0x10 [ 325.516289][ T8954] should_fail_ex+0x414/0x560 [ 325.516319][ T8954] _copy_to_user+0x31/0xb0 [ 325.516352][ T8954] simple_read_from_buffer+0xe1/0x170 [ 325.516381][ T8954] proc_fail_nth_read+0x1df/0x250 [ 325.516413][ T8954] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 325.516444][ T8954] ? rw_verify_area+0x258/0x650 [ 325.516477][ T8954] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 325.516507][ T8954] vfs_read+0x200/0x980 [ 325.516546][ T8954] ? __pfx___mutex_lock+0x10/0x10 [ 325.516572][ T8954] ? __pfx_vfs_read+0x10/0x10 [ 325.516607][ T8954] ? __fget_files+0x2a/0x420 [ 325.516638][ T8954] ? __fget_files+0x3a0/0x420 [ 325.516662][ T8954] ? __fget_files+0x2a/0x420 [ 325.516698][ T8954] ksys_read+0x145/0x250 [ 325.516721][ T8954] ? __pfx_ksys_read+0x10/0x10 [ 325.516739][ T8954] ? rcu_is_watching+0x15/0xb0 [ 325.516769][ T8954] ? do_syscall_64+0xbe/0x3b0 [ 325.516799][ T8954] do_syscall_64+0xfa/0x3b0 [ 325.516841][ T8954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.516862][ T8954] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 325.516885][ T8954] ? clear_bhb_loop+0x60/0xb0 [ 325.516912][ T8954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.516934][ T8954] RIP: 0033:0x7fa27638d5fc [ 325.516954][ T8954] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 325.516974][ T8954] RSP: 002b:00007fa2771ce030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 325.516997][ T8954] RAX: ffffffffffffffda RBX: 00007fa2765b5fa0 RCX: 00007fa27638d5fc [ 325.517014][ T8954] RDX: 000000000000000f RSI: 00007fa2771ce0a0 RDI: 0000000000000003 [ 325.517028][ T8954] RBP: 00007fa2771ce090 R08: 0000000000000000 R09: 0000000000000000 [ 325.517041][ T8954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.517054][ T8954] R13: 00007fa2765b6038 R14: 00007fa2765b5fa0 R15: 00007ffd0a6c85c8 [ 325.517090][ T8954] [ 325.817450][ T5955] usb 3-1: USB disconnect, device number 35 [ 325.930733][ T977] usb 5-1: USB disconnect, device number 28 [ 326.038444][ T5965] vhci_hcd: vhci_device speed not set [ 327.175089][ T9006] netlink: 4 bytes leftover after parsing attributes in process `syz.5.720'. [ 327.202304][ T9008] netlink: 64 bytes leftover after parsing attributes in process `syz.1.719'. [ 327.318895][ T9010] cgroup: noprefix used incorrectly [ 327.358765][ T5955] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 327.367674][ T9009] netlink: 'syz.5.720': attribute type 12 has an invalid length. [ 327.380969][ T9012] netlink: 24 bytes leftover after parsing attributes in process `syz.0.722'. [ 327.396984][ T9010] x_tables: duplicate underflow at hook 3 [ 327.415096][ T9009] netlink: 132 bytes leftover after parsing attributes in process `syz.5.720'. [ 327.433555][ T9012] netlink: 24 bytes leftover after parsing attributes in process `syz.0.722'. [ 327.528465][ T5955] usb 3-1: device descriptor read/64, error -71 [ 327.748792][ T9006] bond_slave_0: entered promiscuous mode [ 327.754853][ T9006] bond_slave_1: entered promiscuous mode [ 327.836676][ T9006] macvlan2: entered promiscuous mode [ 327.869873][ T9006] bond0: entered promiscuous mode [ 328.500965][ T5955] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 328.698348][ T5955] usb 3-1: device descriptor read/64, error -71 [ 328.868670][ T5955] usb usb3-port1: attempt power cycle [ 329.717411][ T5955] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 329.823955][ T5955] usb 3-1: device descriptor read/8, error -71 [ 330.169994][ T5965] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 330.185184][ T5955] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 330.356774][ T5955] usb 3-1: device descriptor read/8, error -71 [ 330.410155][ T5965] usb 5-1: config 1 interface 0 altsetting 253 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 330.478471][ T5965] usb 5-1: config 1 interface 0 has no altsetting 0 [ 330.493583][ T5965] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 330.522711][ T5955] usb usb3-port1: unable to enumerate USB device [ 330.544295][ T5965] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.572890][ T5965] usb 5-1: Product: syz [ 330.588439][ T5965] usb 5-1: Manufacturer: syz [ 330.593151][ T5965] usb 5-1: SerialNumber: syz [ 331.060425][ T5965] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 29 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 332.514067][ T977] usb 5-1: USB disconnect, device number 29 [ 332.539778][ T977] usblp0: removed [ 332.776731][ T9066] fuse: Bad value for 'group_id' [ 332.782809][ T9066] fuse: Bad value for 'group_id' [ 333.305285][ T5965] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 333.615904][ T5965] usb 3-1: Using ep0 maxpacket: 8 [ 334.060501][ T5965] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 334.181332][ T9112] netlink: 256 bytes leftover after parsing attributes in process `syz.0.742'. [ 334.188393][ T5965] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 334.204245][ T5965] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.225552][ T5965] usb 3-1: config 0 descriptor?? [ 334.452148][ T5965] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 334.677981][ T5908] usb 3-1: USB disconnect, device number 40 [ 334.788408][ T5965] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 335.323954][ T5965] usb 2-1: device descriptor read/64, error -71 [ 335.618876][ T5965] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 335.778370][ T5965] usb 2-1: device descriptor read/64, error -71 [ 335.893684][ T5965] usb usb2-port1: attempt power cycle [ 336.409300][ T5965] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 336.601759][ T5965] usb 2-1: device descriptor read/8, error -71 [ 336.828406][ T5899] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 336.919497][ T5965] usb 2-1: new low-speed USB device number 26 using dummy_hcd [ 336.960089][ T5965] usb 2-1: device descriptor read/8, error -71 [ 336.993196][ T5899] usb 3-1: unable to get BOS descriptor or descriptor too short [ 337.013839][ T5899] usb 3-1: not running at top speed; connect to a high speed hub [ 337.046570][ T5899] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 337.067278][ T5899] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 337.082547][ T5899] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 337.092251][ T5965] usb usb2-port1: unable to enumerate USB device [ 337.098724][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.098755][ T5899] usb 3-1: Product: syz [ 337.098771][ T5899] usb 3-1: Manufacturer: syz [ 337.098798][ T5899] usb 3-1: SerialNumber: syz [ 337.208491][ T977] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 337.209923][ T9153] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 337.336083][ T9131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.749'. [ 337.356619][ T5899] usb 3-1: 0:2 : does not exist [ 337.363345][ T5899] usb 3-1: unit 4 not found! [ 337.371202][ T977] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 337.380204][ T977] usb 5-1: config 0 has no interface number 0 [ 337.386606][ T977] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 337.399577][ T977] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 337.413440][ T5899] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 337.421214][ T977] usb 5-1: config 0 interface 255 has no altsetting 0 [ 337.428129][ T977] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 337.437896][ T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.450271][ T5899] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 337.460774][ T977] usb 5-1: config 0 descriptor?? [ 337.479557][ T977] ums-realtek 5-1:0.255: USB Mass Storage device detected [ 337.498753][ T5899] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 337.508350][ T5965] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 337.526521][ T5899] usb 3-1: USB disconnect, device number 41 [ 337.675036][ T9145] netlink: 48 bytes leftover after parsing attributes in process `syz.4.753'. [ 337.684916][ T5965] usb 6-1: Using ep0 maxpacket: 32 [ 337.698959][ T5965] usb 6-1: config 0 has an invalid interface number: 19 but max is 0 [ 337.717499][ T5965] usb 6-1: config 0 has no interface number 0 [ 337.724616][ T5956] usb 5-1: USB disconnect, device number 30 [ 337.746968][ T5965] usb 6-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 337.771521][ T5965] usb 6-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 337.786181][ T5965] usb 6-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 337.806157][ T5965] usb 6-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024 [ 337.818499][ T5965] usb 6-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 337.828895][ T5965] usb 6-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 337.844476][ T5965] usb 6-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57 [ 337.876155][ T5965] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.887785][ T5965] usb 6-1: Product: syz [ 337.896261][ T5965] usb 6-1: Manufacturer: syz [ 337.923190][ T5965] usb 6-1: SerialNumber: syz [ 337.942654][ T5965] usb 6-1: config 0 descriptor?? [ 337.959756][ T9153] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 337.967997][ T9153] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 337.983220][ T9159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.758'. [ 337.994499][ T5965] ipaq 6-1:0.19: PocketPC PDA converter detected [ 338.006445][ T5965] usb 6-1: active config #0 != 1 ?? [ 338.089903][ T9163] overlayfs: failed to resolve './file1/file0/file0': -2 [ 338.208200][ T5899] usb 6-1: USB disconnect, device number 11 [ 339.608359][ T5899] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 340.402241][ T9182] usb usb8: usbfs: process 9182 (syz.4.765) did not claim interface 0 before use [ 340.478402][ T5899] usb 6-1: device descriptor read/64, error -71 [ 340.544084][ T9188] ------------[ cut here ]------------ [ 340.550808][ T9188] WARNING: CPU: 0 PID: 9188 at ./include/linux/memcontrol.h:371 folio_memcg+0x1a8/0x310 [ 340.561540][ T9188] Modules linked in: [ 340.565893][ T9188] CPU: 0 UID: 0 PID: 9188 Comm: syz.2.767 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 340.576832][ T9188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 340.587618][ T9188] RIP: 0010:folio_memcg+0x1a8/0x310 [ 340.593534][ T9188] Code: 80 3c 28 00 74 08 4c 89 f7 e8 74 ca 1b 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7f 20 65 09 cc e8 19 e3 bb ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff [ 340.614003][ T9188] RSP: 0018:ffffc9000508f250 EFLAGS: 00010293 [ 340.620581][ T9188] RAX: ffffffff820442a7 RBX: 0000000000000000 RCX: ffff88801dbfda00 [ 340.628713][ T9188] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 340.636748][ T9188] RBP: 0000000000000000 R08: ffffea0001508187 R09: 1ffffd40002a1030 [ 340.645129][ T9188] R10: dffffc0000000000 R11: fffff940002a1031 R12: ffffea00015081b0 [ 340.653500][ T9188] R13: dffffc0000000000 R14: ffff888078ad9080 R15: 0000000000000002 [ 340.661708][ T9188] FS: 00007f5c88f486c0(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 [ 340.670875][ T9188] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 340.677531][ T9188] CR2: 0000000000000000 CR3: 00000000347dc000 CR4: 00000000003526f0 [ 340.685632][ T9188] Call Trace: [ 340.691986][ T9188] [ 340.695029][ T9188] workingset_activation+0x5f/0x4a0 [ 340.700467][ T9188] ? folio_mark_accessed+0x361/0x4a0 [ 340.706018][ T9188] folio_mark_accessed+0x3b5/0x4a0 [ 340.711471][ T9188] kvm_release_page_clean+0x9a/0xe0 [ 340.716900][ T9188] kvm_tdp_page_fault+0x2dd/0x370 [ 340.722112][ T9188] kvm_mmu_do_page_fault+0x2c5/0x640 [ 340.727688][ T9188] ? vmx_vcpu_run+0xd8b/0x25d0 [ 340.732842][ T9188] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 340.738846][ T9188] ? vmx_handle_exit_irqoff+0x29e/0xad0 [ 340.744518][ T9188] kvm_mmu_page_fault+0x22f/0xb70 [ 340.749742][ T9188] ? __pfx_handle_ept_violation+0x10/0x10 [ 340.755653][ T9188] vmx_handle_exit+0x1090/0x18a0 [ 340.760824][ T9188] ? vcpu_run+0x361c/0x6f70 [ 340.765505][ T9188] ? rcu_is_watching+0x15/0xb0 [ 340.771753][ T9188] vcpu_run+0x432e/0x6f70 [ 340.777248][ T9188] ? vcpu_run+0x361c/0x6f70 [ 340.783448][ T9188] ? __pfx_vcpu_run+0x10/0x10 [ 340.788366][ T9188] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 340.794401][ T9188] ? rcu_is_watching+0x15/0xb0 [ 340.799831][ T9188] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 340.806037][ T9188] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 340.811994][ T9188] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 340.818131][ T9188] ? rcu_is_watching+0x15/0xb0 [ 340.823180][ T9188] ? look_up_lock_class+0x74/0x170 [ 340.828552][ T9188] ? register_lock_class+0x51/0x320 [ 340.835854][ T9188] ? __lock_acquire+0xab9/0xd20 [ 340.840957][ T9188] kvm_vcpu_ioctl+0x95c/0xe90 [ 340.845816][ T9188] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 340.851638][ T9188] ? __lock_acquire+0xab9/0xd20 [ 340.857219][ T9188] ? __asan_memset+0x22/0x50 [ 340.862827][ T9188] ? smack_file_ioctl+0x302/0x340 [ 340.868015][ T9188] ? __pfx_smack_file_ioctl+0x10/0x10 [ 340.873712][ T9188] ? __fget_files+0x2a/0x420 [ 340.878529][ T9188] ? __fget_files+0x3a0/0x420 [ 340.883693][ T9188] ? __fget_files+0x2a/0x420 [ 340.888530][ T9188] ? bpf_lsm_file_ioctl+0x9/0x20 [ 340.894044][ T9188] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 340.899737][ T9188] __se_sys_ioctl+0xfc/0x170 [ 340.904610][ T9188] do_syscall_64+0xfa/0x3b0 [ 340.910011][ T9188] ? lockdep_hardirqs_on+0x9c/0x150 [ 340.915536][ T9188] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.922268][ T9188] ? clear_bhb_loop+0x60/0xb0 [ 340.927110][ T9188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.934030][ T9188] RIP: 0033:0x7f5c8818ebe9 [ 340.938990][ T9188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.959686][ T9188] RSP: 002b:00007f5c88f48038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 340.968442][ T9188] RAX: ffffffffffffffda RBX: 00007f5c883b5fa0 RCX: 00007f5c8818ebe9 [ 340.976580][ T9188] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 340.984952][ T9188] RBP: 00007f5c88211e19 R08: 0000000000000000 R09: 0000000000000000 [ 340.994142][ T9188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 341.002591][ T9188] R13: 00007f5c883b6038 R14: 00007f5c883b5fa0 R15: 00007ffd7cb444c8 [ 341.011739][ T9188] [ 341.014935][ T9188] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 341.022383][ T9188] CPU: 0 UID: 0 PID: 9188 Comm: syz.2.767 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 341.032254][ T9188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 341.042346][ T9188] Call Trace: [ 341.045646][ T9188] [ 341.048600][ T9188] dump_stack_lvl+0x99/0x250 [ 341.053218][ T9188] ? __asan_memcpy+0x40/0x70 [ 341.057882][ T9188] ? __pfx_dump_stack_lvl+0x10/0x10 [ 341.063120][ T9188] ? __pfx__printk+0x10/0x10 [ 341.067772][ T9188] panic+0x2db/0x790 [ 341.071696][ T9188] ? __pfx_panic+0x10/0x10 [ 341.076173][ T9188] __warn+0x31b/0x4b0 [ 341.080177][ T9188] ? folio_memcg+0x1a8/0x310 [ 341.084969][ T9188] ? folio_memcg+0x1a8/0x310 [ 341.089788][ T9188] report_bug+0x2be/0x4f0 [ 341.094136][ T9188] ? folio_memcg+0x1a8/0x310 [ 341.098750][ T9188] ? folio_memcg+0x1a8/0x310 [ 341.103376][ T9188] ? folio_memcg+0x1aa/0x310 [ 341.108012][ T9188] handle_bug+0x84/0x160 [ 341.112296][ T9188] exc_invalid_op+0x1a/0x50 [ 341.116833][ T9188] asm_exc_invalid_op+0x1a/0x20 [ 341.121727][ T9188] RIP: 0010:folio_memcg+0x1a8/0x310 [ 341.126964][ T9188] Code: 80 3c 28 00 74 08 4c 89 f7 e8 74 ca 1b 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7f 20 65 09 cc e8 19 e3 bb ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff [ 341.146706][ T9188] RSP: 0018:ffffc9000508f250 EFLAGS: 00010293 [ 341.152810][ T9188] RAX: ffffffff820442a7 RBX: 0000000000000000 RCX: ffff88801dbfda00 [ 341.160804][ T9188] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 341.168796][ T9188] RBP: 0000000000000000 R08: ffffea0001508187 R09: 1ffffd40002a1030 [ 341.176960][ T9188] R10: dffffc0000000000 R11: fffff940002a1031 R12: ffffea00015081b0 [ 341.184962][ T9188] R13: dffffc0000000000 R14: ffff888078ad9080 R15: 0000000000000002 [ 341.193010][ T9188] ? folio_memcg+0x1a7/0x310 [ 341.197660][ T9188] workingset_activation+0x5f/0x4a0 [ 341.202892][ T9188] ? folio_mark_accessed+0x361/0x4a0 [ 341.208217][ T9188] folio_mark_accessed+0x3b5/0x4a0 [ 341.213544][ T9188] kvm_release_page_clean+0x9a/0xe0 [ 341.218991][ T9188] kvm_tdp_page_fault+0x2dd/0x370 [ 341.224061][ T9188] kvm_mmu_do_page_fault+0x2c5/0x640 [ 341.229396][ T9188] ? vmx_vcpu_run+0xd8b/0x25d0 [ 341.234188][ T9188] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 341.240100][ T9188] ? vmx_handle_exit_irqoff+0x29e/0xad0 [ 341.245704][ T9188] kvm_mmu_page_fault+0x22f/0xb70 [ 341.250793][ T9188] ? __pfx_handle_ept_violation+0x10/0x10 [ 341.256565][ T9188] vmx_handle_exit+0x1090/0x18a0 [ 341.261621][ T9188] ? vcpu_run+0x361c/0x6f70 [ 341.266148][ T9188] ? rcu_is_watching+0x15/0xb0 [ 341.270958][ T9188] vcpu_run+0x432e/0x6f70 [ 341.275347][ T9188] ? vcpu_run+0x361c/0x6f70 [ 341.280033][ T9188] ? __pfx_vcpu_run+0x10/0x10 [ 341.284751][ T9188] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 341.290510][ T9188] ? rcu_is_watching+0x15/0xb0 [ 341.295300][ T9188] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 341.300906][ T9188] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 341.306781][ T9188] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 341.312831][ T9188] ? rcu_is_watching+0x15/0xb0 [ 341.317658][ T9188] ? look_up_lock_class+0x74/0x170 [ 341.322849][ T9188] ? register_lock_class+0x51/0x320 [ 341.328115][ T9188] ? __lock_acquire+0xab9/0xd20 [ 341.333038][ T9188] kvm_vcpu_ioctl+0x95c/0xe90 [ 341.337773][ T9188] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 341.343006][ T9188] ? __lock_acquire+0xab9/0xd20 [ 341.347911][ T9188] ? __asan_memset+0x22/0x50 [ 341.352556][ T9188] ? smack_file_ioctl+0x302/0x340 [ 341.357637][ T9188] ? __pfx_smack_file_ioctl+0x10/0x10 [ 341.363301][ T9188] ? __fget_files+0x2a/0x420 [ 341.367929][ T9188] ? __fget_files+0x3a0/0x420 [ 341.372626][ T9188] ? __fget_files+0x2a/0x420 [ 341.377328][ T9188] ? bpf_lsm_file_ioctl+0x9/0x20 [ 341.382332][ T9188] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 341.387717][ T9188] __se_sys_ioctl+0xfc/0x170 [ 341.392498][ T9188] do_syscall_64+0xfa/0x3b0 [ 341.397049][ T9188] ? lockdep_hardirqs_on+0x9c/0x150 [ 341.402366][ T9188] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.408466][ T9188] ? clear_bhb_loop+0x60/0xb0 [ 341.413163][ T9188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.419192][ T9188] RIP: 0033:0x7f5c8818ebe9 [ 341.423655][ T9188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.443394][ T9188] RSP: 002b:00007f5c88f48038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 341.451861][ T9188] RAX: ffffffffffffffda RBX: 00007f5c883b5fa0 RCX: 00007f5c8818ebe9 [ 341.459879][ T9188] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 341.467884][ T9188] RBP: 00007f5c88211e19 R08: 0000000000000000 R09: 0000000000000000 [ 341.475889][ T9188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 341.483878][ T9188] R13: 00007f5c883b6038 R14: 00007f5c883b5fa0 R15: 00007ffd7cb444c8 [ 341.491889][ T9188] [ 341.495268][ T9188] Kernel Offset: disabled [ 341.499873][ T9188] Rebooting in 86400 seconds..