last executing test programs: 3m17.903403014s ago: executing program 4 (id=883): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xed}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) prctl$PR_SCHED_CORE(0x35, 0x2, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) socket$kcm(0x29, 0x0, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r4, 0x0, 0x14}, [@NDA_DST_MAC={0xa, 0x1, @link_local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x0) 3m17.668756141s ago: executing program 4 (id=886): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102384, 0x18ff0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = syz_io_uring_setup(0xef4, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@mmap}, {@afid={'afid', 0x3d, 0x10}}]}}) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x0) r6 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x95f5, 0x10100, 0x0, 0x89}, &(0x7f0000000280), &(0x7f0000000100)) io_uring_enter(r6, 0x207a98, 0x363, 0xc, 0x0, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200241, 0xa3) r8 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r9 = syz_open_dev$media(&(0x7f00000002c0), 0x1, 0x220c00) io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x6, &(0x7f0000000340)={0xd0, 0x0, &(0x7f0000000300)=[r0, r2, r7, r8, r9, r3, r1, r0, r0, r1]}, 0xa) close_range(r2, 0xffffffffffffffff, 0x0) 3m15.472193605s ago: executing program 4 (id=893): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000000bc0)={0x0, [{0x1, 0x0, 0x9, 0x0}, {0x1, 0x8, 0x7, &(0x7f0000000140)="10"}, {0x2, 0x8, 0x88b6, &(0x7f0000000400)="9d"}, {0x0, 0x0, 0x8, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x3, 0x0, 0x100, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x2, 0x0, 0x8, 0x0}, {0x1, 0x0, 0xffffffff, 0x0}, {0x3, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x1c37600e, 0x0}, {0x2, 0x0, 0x8001, 0x0}, {0x1, 0x0, 0x85, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x1, 0x0, 0x10, 0x0}, {0x0, 0x0, 0x7a, 0x0}]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000faffffff0000000001000000850000004120000085000000f60000009500000000000000a9e97144f82f86ae1fcf48e181ec86f153997f57ec8a2e991170c730fe8e358142fd5ea6c570c6629f429774d7c3a93bee6e7ef71603896711eb5027093f8262ec73eb3e"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x3100, 0x0, &(0x7f0000000140), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 3m13.294381315s ago: executing program 4 (id=895): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil) r2 = openat$kvm(0x0, &(0x7f00000002c0), 0x102, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000400000004"]) r4 = eventfd2(0x8, 0x1) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000080)={r4, 0x4}) write$eventfd(r4, &(0x7f0000000040)=0x6, 0x8) sendto$l2tp(0xffffffffffffffff, &(0x7f00000000c0)="40a2c193c185e00623c4f6264453c7797552039165e5c59a90baf3dcac5566ed989d696f7b84923a8c6bac03be58654e2f2383d47017268a0fff10420ffa01e5e920ce0f2f388f3c7cfc743828b1966e4bc525fcb53f2e5f110904994f4c4a", 0x5f, 0x20000005, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) syz_kvm_add_vcpu$x86(r1, &(0x7f0000000080)={0x0, &(0x7f0000000040)=ANY=[], 0x61}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r6 = syz_open_dev$video(&(0x7f00000000c0), 0x0, 0x42003) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r7, 0x40107447, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x48, 0x0, 0x38, 0x4}]}) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000200)={0x82, 0x205, 0x3, {0x9, @pix_mp={0x3, 0xbcd4, 0x31364d59, 0x1, 0xc, [{0x3, 0x9b7d}, {0x5, 0x4}, {0x80000000, 0x63f}, {0xd, 0x1}, {0x4, 0x1bd}, {0x1b75, 0x8001}, {0x8, 0xfff}, {0xd, 0xfa}], 0x2, 0x9, 0x2, 0x0, 0x6}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, 0xffffffffffffffff, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r8, 0x84, 0x9, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0x744) 3m12.885987642s ago: executing program 4 (id=899): r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x60c100, 0x0) setsockopt$MRT_PIM(r1, 0x0, 0xcf, &(0x7f0000000140)=0x4, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000480)=[{0x40, 0x0, 0x0, 0x9}, {0x50, 0x0, 0x0, 0xfffffffc}, {0x6, 0x0, 0x0, 0x8000}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, 'L\x00', 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2c00, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8}}}}}}}, 0x0) 3m12.761535312s ago: executing program 4 (id=901): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b40)={0x38, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}}, 0x0) shutdown(r0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c010203010902000091"], 0x0) (async) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x4}]}, 0x10) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x2, @none, 0x401}, 0xe) 2m57.361530239s ago: executing program 32 (id=901): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b40)={0x38, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}}, 0x0) shutdown(r0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c010203010902000091"], 0x0) (async) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x4}]}, 0x10) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x2, @none, 0x401}, 0xe) 1m16.765320608s ago: executing program 3 (id=1242): ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000000)={0x8, 0x9, 0x4, 0x100000, 0xffffffff, {}, {0x1, 0x8, 0x0, 0x35, 0x2, 0x2, "65e491ec"}, 0x307, 0x4, {}, 0x5, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000080)={"062aa37dbfd6ad83f4ae5c4d4f92d03e", 0x0, 0x0, {0x4, 0x8}, {0x1, 0x4}, 0x8, [0x7b00, 0x10b, 0xa, 0xfffffffffffffff5, 0x6, 0xb85f, 0xfffffffffffffffe, 0xfffffffffffff617, 0xa, 0x2, 0xa2a, 0xe7a, 0x1, 0x9, 0x9, 0x3ff]}) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000180)=r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r3, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3a3, 0x5}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xa}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x35}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x20}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x58}]}, 0x58}, 0x1, 0x0, 0x0, 0xc1}, 0x4000000) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/psched\x00') syz_genetlink_get_family_id$smc(&(0x7f0000000380), r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_INTERFACE(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r7, 0x200, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20008080}, 0x0) r8 = accept4$rose(r5, &(0x7f0000000540)=@full={0xb, @dev, @netrom, 0x0, [@remote, @default, @bcast, @rose, @default, @default]}, &(0x7f0000000580)=0x40, 0x80800) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r8, &(0x7f00000005c0)={0x80002004}) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000600)={0x7, 0x3, 0x4, 0x5dbf, 0x2, "f77a84d1c53d5a4f67daa0a7a5b1259b2ee319"}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000640), 0x30000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000680)={0x2}) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f00000006c0)={'bond0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000740)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r7, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x54}, 0x841) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000840)={'dvmrp0\x00', 0x0}) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r6) sendmsg$NLBL_UNLABEL_C_LIST(r6, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x70, r11, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:gpg_agent_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}]}, 0x70}}, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x2c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044015}, 0x41) sendmsg$AUDIT_GET(r5, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x10, 0x3e8, 0x1, 0x70bd2c, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x44841}, 0x4008004) r12 = getpgid(0x0) prlimit64(r12, 0xd, 0x0, &(0x7f0000000c00)) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c80), r6) sendmsg$IEEE802154_LIST_PHY(r6, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x14, r13, 0x1, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x4845) 1m16.613401729s ago: executing program 3 (id=1244): r0 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000030805000000000000000000000000000c00048008000140000000000500030011000000af6808c35e4c1085b4cb57342c62abf89d42465b8a56d74924ffd58b47e9802e0a88567b5bb051f1f82914cb3e57900f6ffba7833243cb9d6309779b6940e43738fd85e870cd43c8c2d63d503d94f0684eb72418e049"], 0x28}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x700, 0x0) process_madvise(0xffffffffffffffff, &(0x7f00000003c0)=[{0xffffffffffffffff}], 0x1, 0x0, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000100)={0xa000000d}) close(r5) 1m15.468736113s ago: executing program 3 (id=1246): modify_ldt$write(0x1, &(0x7f0000000340)={0x9, 0x20000000, 0x400}, 0x10) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) poll(&(0x7f0000000080)=[{r1, 0x1080}, {r0, 0x274}], 0x2, 0x7f) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) (async) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000000)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000001fc0)=""/4107, 0x100b}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) (async) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x9, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x2, 0x3, 0x3}) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r8 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000001c0)={0x15, 0x1, 0x3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r7, 0xc00464b4, &(0x7f0000000400)={r9}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x9, 0x7fff, 0x4}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000480)={0xff, 0x7, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) (async) close_range(r4, 0xffffffffffffffff, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m14.39047704s ago: executing program 3 (id=1251): r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'tunl0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x40, 0x8, 0x9, 0x1, {{0x14, 0x4, 0x1, 0x8, 0x50, 0x65, 0x0, 0x3, 0x2f, 0x0, @broadcast, @local, {[@timestamp={0x44, 0x28, 0xfb, 0x0, 0x1, [0x3110, 0x8, 0x1, 0xffffb4db, 0x4, 0x6, 0xfffffffd, 0x3fc, 0xff]}, @rr={0x7, 0xf, 0x28, [@multicast2, @private=0xa010102, @loopback]}, @ra={0x94, 0x4}]}}}}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback, 0x200000}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=' '], 0x40}}], 0x1, 0x40000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40086602, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", "122000", "1000"}, 0x28) sendto$inet6(r2, &(0x7f0000000440)="830b", 0x80002, 0x4000, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff01c}, {0x80000006}]}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x7, 0x0}, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x9, 0xd, 0x80, 0x50602, 0x1, 0xcdb, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x4}, 0x50) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000380), 0x10000, 0x0) r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='GPL\x00', 0x2, 0x86, &(0x7f0000000680)=""/134}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x13, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x44}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x401, 0x45, &(0x7f0000000140)=""/69, 0x0, 0x20, '\x00', r1, @fallback=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, r5, 0xffffffffffffffff, 0x5, &(0x7f0000000400)=[r6, r7, r8, r9], &(0x7f0000000440)=[{0x2, 0x5, 0xe, 0x7}, {0x1, 0x4, 0x8, 0x6}, {0x2, 0x4, 0x8, 0x8}, {0x0, 0x1, 0x0, 0xa}, {0x3, 0x2, 0x1, 0x4}], 0x10, 0x731}, 0x94) syz_usb_connect$cdc_ecm(0x2, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000202505a1a4400000000101090248ef0001000000090400001602020000052406000005240000000d240f01000000000000ddffff03240209"], 0x0) 1m13.624955446s ago: executing program 3 (id=1256): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008e8805208680009500000000000000091200016502bc03fdaf666bb48d4078f6"], 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pipe(&(0x7f0000000040)) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) read(r2, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000000c0)='fd', 0x0, r0) (async) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000000c0)='fd', 0x0, r0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000280)={&(0x7f0000000040)=[{0x4, 0x0, 0x0, 0x0}], 0x1}) 1m13.175352068s ago: executing program 3 (id=1261): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) getpeername$unix(r0, &(0x7f00000000c0)=@abs, &(0x7f0000000180)=0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_set$pid(0x2, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x3fffff) (async) sendfile(r1, r1, 0x0, 0x3fffff) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x40}, {0x20, 0x0, 0x0, 0x9}, {0x16}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x40}, {0x20, 0x0, 0x0, 0x9}, {0x16}]}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00006a000000000000000000000000000000000000000000000000000988afde17146d571acb66da2ae259dc19338d33f950cc89f97cdd7c40729646675aa8558a78fc681e6e2553c862a018e3b25f7d7532b433170d857750d1898d90aea08ff81a0042871b648e55fbc8971aef6b619b91e27ba1ffa6cab32c804edcc62bc7752cf211fc7ba1ecca39a35a271d01061d916916a1ea18"], 0x48) socket$can_bcm(0x1d, 0x2, 0x2) (async) socket$can_bcm(0x1d, 0x2, 0x2) r3 = memfd_create(&(0x7f00000005c0)=' \xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00r\xbb\xdd\xe8\x87\x05=\xfb\x8b}\xfc\x1d\x03\xe1\xfcm\x9b\xf7fo\"i\xa1hk\x1f\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94T\x81@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\x00\x00\x00\x00\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x9d\xb8?2\xc8\xe7kovd\xa4\x1bl+\x14\x17\x14\x17C2! U\x04:\xd93F\xb9\xfc\x1b\xfd}\x05\xf9\x11\xf3)>q\x10\xd3\xf0\xaf>\xf8t(bX\xe3g\x05\xfe\b\xbcy\x95*\xca\a\xaf\xbb\xf9\xc3Y\xa2\x91\x90.\xc8\xbe\xb0\xa6\xbd\xbd\xfd\xfaf*\xb2&\x82\xa0\x17\xe7)\xf5\xa2\xccv\n\x1b\xd4\xf4\x11*\xc9\xc6*\xa4.\x94[$\xb8\xb3Q\xde\xd8A\xa4~c,`\x02\xb8\x01r\x89\x82\x13\xd0}C7\xfb\xf2\tM\x1e\xe9\xa5\v\xc5\xba(\x89\xb0l\x92H\x1cR\x1f>\xc4ie\xe0B\xf0[\xe2\xe1\x12\x1d\x8fR&\xd1\xa6#\xda.\x0f\xd7\xd7\xa4\x90\x14\x92I\xf82&\x16<\xf2RR\xc2\x02.Q\xef\x85\xef\xf9\xe5\x00\xe9\xca\xb1\x8c\x11\x11l\x9f\xc8\b\xf7A\xa6\x81\xad\xdc\x95\xc8\xef\x102\xa8\x87\x01\x00\\\xfee \n0F\xbc\x85\xc5C\xd0\x99\xe4\t\xab`\'t\xc2\xe9\x13\xcag\xea\xb3\xb5\x92\x00J\xc6y\x05\xcc\xde\xa0\xf6\xb9 \xe5\xdd\f\x18\xfc\xe0\xc3(\xd8\xeb\x1a6\xe6\xfa\x93\xc07R\x0f-\x9e\xf3\x87E\xa3\xd5o\x1bA\x88L/\xe7>45Q?\be\x7f\xa9\x9a\xcae\xd8Y\xdf]\x1bS\x825\xcb\x00\xa4}\x97\x84T\xad\x9b\x1e!\x8a\xbc\x02+#Q\xa9 \xe9\x05r\xe1\xec\x0f\xa7\xe6Of\x95\x02{', 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd5e, 0x240000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x400000bde) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102388, 0x18ff4) (async) read$msr(r4, &(0x7f0000032680)=""/102388, 0x18ff4) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x20e) (async) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x20e) ftruncate(r3, 0x400000) finit_module(r3, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x3, 0x0, 0x0, 0xfffffffffffffffe, 0x2}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc010) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x20c0, 0x8) (async) open(&(0x7f00000001c0)='./file0\x00', 0x20c0, 0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r5, 0x27, 0xe, 0x0, &(0x7f0000001100)="52e111e89f1a3b7a479dd8bd86dd", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m12.814294293s ago: executing program 33 (id=1261): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) getpeername$unix(r0, &(0x7f00000000c0)=@abs, &(0x7f0000000180)=0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_set$pid(0x2, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x3fffff) (async) sendfile(r1, r1, 0x0, 0x3fffff) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x40}, {0x20, 0x0, 0x0, 0x9}, {0x16}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x40}, {0x20, 0x0, 0x0, 0x9}, {0x16}]}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00006a000000000000000000000000000000000000000000000000000988afde17146d571acb66da2ae259dc19338d33f950cc89f97cdd7c40729646675aa8558a78fc681e6e2553c862a018e3b25f7d7532b433170d857750d1898d90aea08ff81a0042871b648e55fbc8971aef6b619b91e27ba1ffa6cab32c804edcc62bc7752cf211fc7ba1ecca39a35a271d01061d916916a1ea18"], 0x48) socket$can_bcm(0x1d, 0x2, 0x2) (async) socket$can_bcm(0x1d, 0x2, 0x2) r3 = memfd_create(&(0x7f00000005c0)=' \xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00r\xbb\xdd\xe8\x87\x05=\xfb\x8b}\xfc\x1d\x03\xe1\xfcm\x9b\xf7fo\"i\xa1hk\x1f\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94T\x81@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\x00\x00\x00\x00\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x9d\xb8?2\xc8\xe7kovd\xa4\x1bl+\x14\x17\x14\x17C2! U\x04:\xd93F\xb9\xfc\x1b\xfd}\x05\xf9\x11\xf3)>q\x10\xd3\xf0\xaf>\xf8t(bX\xe3g\x05\xfe\b\xbcy\x95*\xca\a\xaf\xbb\xf9\xc3Y\xa2\x91\x90.\xc8\xbe\xb0\xa6\xbd\xbd\xfd\xfaf*\xb2&\x82\xa0\x17\xe7)\xf5\xa2\xccv\n\x1b\xd4\xf4\x11*\xc9\xc6*\xa4.\x94[$\xb8\xb3Q\xde\xd8A\xa4~c,`\x02\xb8\x01r\x89\x82\x13\xd0}C7\xfb\xf2\tM\x1e\xe9\xa5\v\xc5\xba(\x89\xb0l\x92H\x1cR\x1f>\xc4ie\xe0B\xf0[\xe2\xe1\x12\x1d\x8fR&\xd1\xa6#\xda.\x0f\xd7\xd7\xa4\x90\x14\x92I\xf82&\x16<\xf2RR\xc2\x02.Q\xef\x85\xef\xf9\xe5\x00\xe9\xca\xb1\x8c\x11\x11l\x9f\xc8\b\xf7A\xa6\x81\xad\xdc\x95\xc8\xef\x102\xa8\x87\x01\x00\\\xfee \n0F\xbc\x85\xc5C\xd0\x99\xe4\t\xab`\'t\xc2\xe9\x13\xcag\xea\xb3\xb5\x92\x00J\xc6y\x05\xcc\xde\xa0\xf6\xb9 \xe5\xdd\f\x18\xfc\xe0\xc3(\xd8\xeb\x1a6\xe6\xfa\x93\xc07R\x0f-\x9e\xf3\x87E\xa3\xd5o\x1bA\x88L/\xe7>45Q?\be\x7f\xa9\x9a\xcae\xd8Y\xdf]\x1bS\x825\xcb\x00\xa4}\x97\x84T\xad\x9b\x1e!\x8a\xbc\x02+#Q\xa9 \xe9\x05r\xe1\xec\x0f\xa7\xe6Of\x95\x02{', 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd5e, 0x240000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x400000bde) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102388, 0x18ff4) (async) read$msr(r4, &(0x7f0000032680)=""/102388, 0x18ff4) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x20e) (async) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x20e) ftruncate(r3, 0x400000) finit_module(r3, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x3, 0x0, 0x0, 0xfffffffffffffffe, 0x2}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc010) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x20c0, 0x8) (async) open(&(0x7f00000001c0)='./file0\x00', 0x20c0, 0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r5, 0x27, 0xe, 0x0, &(0x7f0000001100)="52e111e89f1a3b7a479dd8bd86dd", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 10.370017571s ago: executing program 1 (id=1449): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000680)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_usb_connect(0x0, 0x256, &(0x7f0000000440)=ANY=[@ANYBLOB="120100006734400881179808abc1010203010902440201000000000904b00006b66fa84909050b022000090801942332058d4da3d710277e726f2cfc111595fc32186cb685b7f21e014293ac2b27bcb7fdf78aa0262390d8a1e87708eb7183111fd599205261181e89d7fc9e639a9f1d8781697c11f9b06b874ab4997b4fa4e1db0727dc6f4974758bf76fb8bcf71624fc5944415f1491812195da2938e364d282ff75b76353de184f7f038817bbb144f99abd72ff90f6d953fdf48322954b00ce0905090310000706ddde0cfdff1e6d26406513465139e997e91b1e3d2c0d4289f74f1e95c6666d095907090383e66b9e19d978bb4572335c12197ef0af94f3a84c8aca49d3043d6c87237e507f8241db815a8865c49942439fa49fafedfdf020b0091a4f0d8e8eca2167b3fb5a8289feb985b475462599004c611e79e3cad50d30db4fb2c9625350df8f5ae54be46a0e3f3d39666e6479e99b38b05622c757e0315ecfba0acffccfec43a2e453ac57b71288f2d480064b0ee01db9e27596be7700763632b1634be1e1d4388e2758abe6466982725b0b343d4c5e0833d50999595f65e3ad8b9982072501c187090009050c01000602313009050b03000406f8001e0596"], 0x0) 10.368993113s ago: executing program 0 (id=1450): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x820}, 0x20004004) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x6, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001, 0x0, 0x0, 0x0, 0xa90d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc000000]}, 0x45c) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x11, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x50}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1316}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) setuid(r3) setpriority(0x2, 0xff, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0300000004020000040000000a00000000000000eb7952c0fa46f8b5e85c3956bdabc3bcb2a70b435870a8ee65fe6419e092fb", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@exit, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$printer(r9, 0x0, 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r9, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000180), 0x400, 0x0) writev(r8, &(0x7f0000000140)=[{&(0x7f00000000c0)='\b', 0x1}], 0x1) ioctl$int_in(r7, 0x0, &(0x7f0000000100)=0x9d) setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f0000000540), 0x4) 9.730143043s ago: executing program 0 (id=1455): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r5 = dup(r3) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) shutdown(r5, 0x1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e5d, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x0, 0x78}, 0x9c) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000940)=0x0) r7 = getpgrp(0xffffffffffffffff) r8 = getpgrp(0x0) syz_clone3(&(0x7f00000009c0)={0x10400000, &(0x7f0000000500), &(0x7f0000000540), &(0x7f00000007c0), {0x1a}, &(0x7f0000000840)=""/159, 0x9f, &(0x7f0000000900)=""/45, &(0x7f0000000980)=[r6, r7, r8], 0x3, {r5}}, 0x58) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000100)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[]) syz_usb_connect(0x2, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) 9.412841124s ago: executing program 6 (id=1456): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d00010000600009040080020300000009210604000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x18ec0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f00000001c0)={0x0, 0x8, 0x5, {0x5, 0x11, "2b7eaf"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 8.8408434s ago: executing program 1 (id=1457): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000010000000074d564b"]) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf00020106500009"], 0x0) syz_usb_connect(0x5, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002ffa9400819151300000102030109025200010000000009040000042513bf000a2401000000020102052404"], 0x0) 7.139896804s ago: executing program 6 (id=1465): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYRES8], 0x0) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xe) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="170928bd70000000000000050000000000080009000100000008000a0000000000060002000100000008009700000000", @ANYRES32, @ANYBLOB], 0x3c}, 0x1, 0x620b}, 0x0) (async) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r4 = syz_io_uring_setup(0x1e1e, &(0x7f0000000140)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) (async) io_uring_enter(r4, 0x48e9, 0x0, 0x2, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) getpid() (async) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80000) ioctl$SCSI_IOCTL_GET_PCI(r7, 0x5387, &(0x7f00000000c0)) 6.540965808s ago: executing program 0 (id=1466): socket$nl_rdma(0x10, 0x3, 0x14) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80080, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001300)=@security={'security\x00', 0xe, 0x2, 0x430, 0xffffffff, 0x190, 0x278, 0x190, 0xffffffff, 0xffffffff, 0x360, 0x360, 0x360, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x168, 0x190, 0x0, {}, [@common=@srh1={{0x90}, {0x1d, 0xa0, 0x2f, 0x8, 0x800, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [0x0, 0xffffffff, 0x0, 0xffffffff], [0xffffffff, 0x0, 0xff, 0xffffffff], [0x0, 0xff, 0xff000000, 0xffffff00], 0x38de, 0x19a0}}, @common=@ah={{0x30}, {[0x4d3, 0x4d6], 0x1, 0x3, 0x3}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x6, 0x0, "ac944f29d80885570298ab27aba75082ef72615aae280cb1875cd3d97ca9"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0x20, "6a1cd2e3b33d7a6dc25feb5fcf296fb7904b133ef35e6ea368308a2332c4"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) bind$alg(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) msgctl$MSG_STAT(0x0, 0xb, &(0x7f00000009c0)=""/213) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000000)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f00000001c0)='P', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x8, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000100)=0x6, 0x4) recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000280)=0x1, 0x4) syz_open_dev$evdev(0x0, 0x0, 0x60000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) 6.412815642s ago: executing program 1 (id=1467): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x4, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000072000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000d80)={0x3c, r2, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0xfffffffd}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44011}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0xe, 0x0, &(0x7f0000000000)="9b352e98d1dc0621a18bc4c5a6c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000530b00000000000000030000850000000e0000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0xffffffffffdfffff, 0x3, &(0x7f000082a000/0x400000)=nil) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x4, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000072000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000d80)={0x3c, r2, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0xfffffffd}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44011}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0xe, 0x0, &(0x7f0000000000)="9b352e98d1dc0621a18bc4c5a6c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000530b00000000000000030000850000000e0000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mremap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0xffffffffffdfffff, 0x3, &(0x7f000082a000/0x400000)=nil) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) 6.076938582s ago: executing program 1 (id=1468): socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000841000/0x3000)=nil, 0x3000, 0x0, 0x30, r0, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) personality(0x4100001) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) r4 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r4, 0x0, 0x3, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) recvmsg(r4, &(0x7f0000000400)={0x0, 0xfffffffffffffe4a, 0x0, 0x0, 0x0, 0x2e}, 0x102) recvfrom$inet(r4, 0x0, 0x0, 0x170, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x10) r6 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r6, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="0200000010"], 0xfe44, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r1, 0x847ba, 0x79c, 0xe, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) 5.991759275s ago: executing program 5 (id=1469): syz_kvm_add_vcpu$x86(0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) syz_open_dev$video(0x0, 0x0, 0x42003) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001f00)=""/4062, 0x0) 5.61542654s ago: executing program 2 (id=1470): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x190) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f0000000180)={0x9e58a84aedbcc5bc, 0x0, 0x1083, 0x0, 0x80000001}) 5.335792556s ago: executing program 0 (id=1471): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000240)="240000001e005f1814fffffffffffff807000000010000000000000008000500c4cb0b02", 0x24) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="9e0f0100f4f756"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="04230d04c8000002dc7cbd97bd1e560fa934ab9e001e6a56993948af7910bee47b6af849e00ce7a2e4c0e9e176001f6ecf62802503d8473771d98678f26bdc9783c642f1100550130920a04ee7207af1237b30ed5e6144f027d92fdcaf7b421b6ef3ed71e2d79055077f8d97917a1a8e03ef72163bbdfbdcf453592a0159b27741982193d3c463efc2217f02763e87d75dfae247b03936d1bb993c709c35fb59c14b59e67786e976bdae47ae"], 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x17, &(0x7f0000000040)=0x3e, 0x4) getsockopt$inet6_tcp_int(r2, 0x6, 0x4, 0x0, &(0x7f0000000100)) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x18, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x4f, 0xd5, 0xa6, 0x10, 0x694, 0x1, 0xb1fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xff, 0x7, 0x40, 0xa, [{{0x9, 0x4, 0x2f, 0x80, 0x0, 0x9b, 0x1, 0x55, 0x9}}]}}]}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0xffffff1c, 0x0, 0x0, 0x0, 0x3, 0x7}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x7, 0x1}}, @TCA_NETEM_RATE={0x14, 0x6, {0x40, 0x9}}]}}}]}, 0x6c}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x402, 0x0) setresgid(0xee00, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x2a8000, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0x5) prlimit64(r6, 0x6, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="580000000206010800000000000000000000000014000780080011400000000005001500fe0000000500010006000000050005000a00000005000400000000000900020073797a3000000000090077439aa7236dd4cb2cecaecb4e63020073797a30009040c4f9e6a53e504013cfe09d28b923000000c4c186c444b94ee0d6459f7de84483925c7097341423f722c5a4bdbdbdc68ccb713e63a1ca640fea323a8b74334ba6e6b69b920221b4c7d82a5034169c02ce0fde223d08b381765e954bc83e82ca8910f65bfd1bd9047608899c1629c34d0e84fe219081cecd166c5f307e8f47822884a4158b1800"/252], 0x58}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 5.275187155s ago: executing program 2 (id=1472): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/186, 0xba) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) ioctl$MEDIA_IOC_DEVICE_INFO(0xffffffffffffffff, 0xc1007c00, 0x0) r7 = dup3(r1, r2, 0x0) ioctl$MON_IOCG_STATS(r7, 0x40189206, &(0x7f0000000180)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) r9 = syz_open_procfs(0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000080)={0xe1, 0x1, 0x5, "72f8e08bd802af28150c40cab44031a21981d503d622136daa59d19dc6fa77f3bd052717b9d9b572591726a7650f31f6f4cc75006e4c791428e81ae5f9e95d0fa8b8a0268ec815804e05b98c5b370dd6780d1ed81a66de334d75ffc2477ce8c94835f4ce58765022719e3c17865babe8e5f04435d1e9d6833d71c9201acab6c70959f0ad2f346dd2a2c17225b1b4f841b1e8a6e6a15039332629f6a2756e83d95fa213109b15f016534a25ab1d6ff85016cda6e48a37b11aacc4e42e347ac1e3fe22eca0864cbe7a16f280d21da883eed1fe8df53a2b1976a2e7c69c2b3be11ec5"}) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000180)="ca59b928b749d890ac5cd191cc1ca34f2adb5234f45dcf280dba15c95de65da9bcd73281c72d635cd214fdd914808b1e8dbc3d5412b4e4b249428435599982383dd11ad1a86c73f98c4387c26b9e255dee112e11206a8e41b69ce5f36460270a2a5a66a57bc22c476e778fc35929c670930bba8c4ab81440c0ed09eb97fce65a5c24fabd6e1d9217512b8ecb76dbfce362f0908f170de9a4b427aeca0c1632f220a789c7a8fb172eeab15110f93271063c75611683e6a4fb1038e1b8a047", 0xbe}], 0x1) 5.188954116s ago: executing program 5 (id=1473): r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = gettid() setpgid(r1, r2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioprio_get$uid(0x3, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000000000000100000008000600e0000001050004000100000008000b0027"], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) ioctl$sock_netdev_private(r0, 0x894a, &(0x7f0000000140)="a6cc04e2d8f1c38afbf14b29b86e3a") 4.252893761s ago: executing program 2 (id=1474): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000100)=0x3, 0x4) unshare(0x8040600) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000080)='>xev/\x00\x01\x1f\x00o\x18D\xe8\v\xc7S\xd0\xaf:]\xdb\x85=\xa8H\xdf3\x9a\x00\xac\x95\xe6\x15\x15b\xeeDG\xe0\x10<\xa5\xdf\x8bn\xbc\x87j\xc3\xc9!EDZ\xaa\xfa\x87\a\x8c\x8f\x15Dh\x95\xe9\x1d\xf9\xd1\xb3\x82F\xcd\xe0\x19\xdb\x98S\x00B\xef\xfbi\xd5\x1f\xc2W\x1c\xc1\"\xa8\x0e\xba\xf8\xbdR\xd9\'\x0f\xa7\xde\xfa\xd6N\xcf\x10\xaf\xd0\xb0w\xca\'\xde/^chZd\xb26\f\xf2HJ\xd0\xcb:\xfc\x92\xd4\xfd\xcd\xb57\x97\xbbQVA\x10\xc7\x0e\xfc4\x1c\xb2\xc3\xbf\xf2y\x11$\x154\xc0,\xc0oR\xd5\x1aB\x8a(\xc8/\f\\nM\x00\xad{\xb4\xca{:\x82\xe7 \xd1\x9d\xb0\xa6m\'!\x97h\x94\x8f\xa4') openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @local, 0x2}, 0x1c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000000) socket$inet6(0xa, 0x2, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0xa0000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xffffffffffffff6e}], 0x2) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) 3.388222658s ago: executing program 5 (id=1475): socket$can_j1939(0x1d, 0x2, 0x7) syz_open_dev$dri(0x0, 0x8, 0x2c2080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) io_setup(0x9, &(0x7f00000002c0)=0x0) io_destroy(r1) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB=':syt 00N004'], 0x2a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffec9) keyctl$read(0xb, 0x0, 0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='btrfs\x00', 0x200000, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0xc1485544, &(0x7f0000000080)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@getqdisc={0x48, 0x26, 0x400, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x46b2b557bc78c06b, 0x7}, {0xfff3, 0xfff2}, {0xffff, 0x2}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x48}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[], 0x64}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(0xffffffffffffffff, 0x8b2a, &(0x7f0000000040)) fsopen(&(0x7f0000000200)='ufs\x00', 0x1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='afs_cm_no_server\x00', r4, 0x0, 0x3384ed24}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x88}, 0x0) 3.139774832s ago: executing program 6 (id=1476): write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file1/../file0', [{}], 0xa, "b524be350e7611b133a1"}, 0x1f) r0 = openat$mice(0xffffffffffffff9c, &(0x7f00000002c0), 0x181001) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f00000064c0)={0xa, 0x4}, 0xc) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="050000000000fcdbdf252e00000008"], 0x40}, 0x1, 0x0, 0x0, 0x8894}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x82) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xc, 0x2) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f0000000140)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r5, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) mkdirat$cgroup(r4, &(0x7f00000000c0)='syz1\x00', 0x1ff) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x1}}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'macvtap0\x00', 0x0}) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000000)={@remote, r9}, 0x14) close(r8) mknod$loop(&(0x7f00000001c0)='./file1/../file0\x00', 0x80, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) listen(r6, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 3.076401591s ago: executing program 1 (id=1477): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x51d602, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) unshare(0x22020400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x6, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff}, &(0x7f0000000580)={0x0, 0x3938700}, 0x0) 2.569559469s ago: executing program 2 (id=1478): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1b, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000000046"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0xf6) syz_emit_ethernet(0x1f, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffff81f793350000000011424203"], 0x0) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x534a, 0x3, 0x2}, 0x18, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095", @ANYRES16=r0], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) accept4(r3, &(0x7f0000000300)=@nfc_llcp, &(0x7f00000000c0)=0x80, 0x80000) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x22, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x800) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r6) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd70100400000005000000080009000207ffbd36727321fdc56532b71d00000008000c00a8dc000008000b"], 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x1}}, 0x26) landlock_restrict_self(r0, 0x5) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) 2.391356158s ago: executing program 1 (id=1479): syz_emit_ethernet(0x86, &(0x7f0000000a00)={@local, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "fd690b", 0x48, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x0, [0x9, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x100}}}}}}}, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x8, 0x7}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000240)={r0, &(0x7f0000000080), 0x0}, 0x20) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da00090589"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00') add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000080)="dfd9", 0x2, 0xfffffffffffffffb) rmdir(&(0x7f0000000000)='./file0\x00') 2.388337097s ago: executing program 5 (id=1480): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400, 0x8) write$binfmt_script(r1, &(0x7f0000000140)={'#! ', './file0', [{0x20, 'llr\xf0'}, {0x20, 'Tx\xe8\x9b^\xfb^$\r\'uij\r\xd9\xef\xd2Et^Q\v\x9fOFL\x95`Z\xae\xc3a\xfe%\x94\x1a\xebt\xc6\x06\x8fD,\xf7\xae#\x80\x80\xdf\xa3\xcaO\xc6\x8a\x91\x90\xadR\aW\xe1\xf3n\xca\xa3\x8f\xd6F\x03\x0e\x9b\xe5yb\xfc\xa19wUs\x83\xf1{&\n\x1d\x8e\x82y\x1a.B\x0e\xea\x17\xc7\xe7H\xa9\xd4\x8e\xe7 gD\x89*\xb5c\xc5\x8a\xe6R\xe5YGq\xf5\xb6\x95\xbc\x112\x9bno\xc8\x06\xb6\b\xcc\x03{Sn\x94G\x01\xb4\xffJQ8t\x99vY\xaaf\xc7,\x9f\xbb\x15G\x1cr\x19\xef\xab\n\xa8\xbc\xbd\xa2E\x16\x1cm\xbd=\x98\x7fU\xcbg\x15%\x95\xb11\x017\x83*\x14\xcbt\xc2\xcb\x04\x1e~?\xb9j\x18\x96\x84EA\xeaB\a\x83\xba\xdco<\x00'/256}], 0xa, "fe143b2a5b1697d86a06eb190b2b02f130db738717d3117f454dea1f21b918b4d70d1191ee9f4c1072190be8610f251a9406ca0df368c9358c9be48565616fda79655024f7e239d4492ec0893293fb3ed21ead78049977565129ec7eea947cf84c192af05cce6dc2a017d66ef175d3fd06a95daa6812940c1312496da0754b607004c5c50d554817694db2d6d3c495ba67ed"}, 0x1a3) 2.020224806s ago: executing program 0 (id=1481): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5}, 0x50) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x80000000, 0x0, r0, 0x81, '\x00', 0x0, r1, 0x5, 0x1, 0x2}, 0x50) (async) connect$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e24}, 0x6e) (async) r3 = fspick(r1, &(0x7f0000000180)='./file0\x00', 0x4ee5a8a086cfe3c4) (async) recvmmsg(r1, &(0x7f0000002100)=[{{&(0x7f00000001c0)=@nfc={0x27, 0x0}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000240)=""/179, 0xb3}, {&(0x7f0000000300)=""/58, 0x3a}, {&(0x7f0000000340)=""/225, 0xe1}], 0x3}, 0x84e}, {{&(0x7f0000000480)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000500)=""/98, 0x62}, {&(0x7f0000000580)=""/221, 0xdd}], 0x2, &(0x7f00000006c0)=""/125, 0x7d}, 0x4}, {{&(0x7f0000000740)=@caif=@dgm, 0x80, &(0x7f0000000940)=[{&(0x7f00000007c0)=""/47, 0x2f}, {&(0x7f0000000800)=""/39, 0x27}, {&(0x7f0000000840)=""/234, 0xea}], 0x3}, 0x7fff}, {{&(0x7f0000000980)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000000a00)=""/158, 0x9e}, {&(0x7f0000000ac0)=""/122, 0x7a}, {&(0x7f0000000b40)=""/96, 0x60}, {&(0x7f0000000bc0)=""/82, 0x52}, {&(0x7f0000000c40)=""/87, 0x57}, {&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001cc0)=""/230, 0xe6}, {&(0x7f0000001dc0)=""/139, 0x8b}], 0x8, &(0x7f0000001f00)=""/67, 0x43}, 0x7f}, {{&(0x7f0000001f80)=@phonet, 0x80, &(0x7f00000020c0)=[{&(0x7f0000002000)=""/136, 0x88}], 0x1}, 0x3}], 0x5, 0x40000121, &(0x7f0000002240)) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000002300)={'ip6_vti0\x00', &(0x7f0000002280)={'syztnl0\x00', 0x0, 0x2f, 0xfb, 0x0, 0x7, 0x13, @mcast2, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x80, 0x7800, 0x5, 0xdae}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002340)={0x1b, 0x0, 0x0, 0xa, 0x0, r2, 0x5, '\x00', r5, r1, 0x3, 0x1, 0x5}, 0x50) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000002440)=@nat={'nat\x00', 0x1b, 0x5, 0x570, 0x3b0, 0x3b0, 0xffffffff, 0x2c0, 0x0, 0x4a0, 0x4a0, 0xffffffff, 0x4a0, 0x4a0, 0x5, &(0x7f00000023c0), {[{{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0xf, @ipv4=@local, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @gre_key, @icmp_id=0x65}}}, {{@uncond, 0x0, 0x188, 0x1d0, 0x0, {}, [@common=@inet=@set4={{0x50}, {{0x2, 0x5, 0x5}, {{0x1}, 0x8}, {{0xfffffffffffffffe}, 0x8}, 0x1}}, @common=@srh1={{0x90}, {0x3c, 0x2, 0x3, 0x8, 0x0, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xffffff00, 0xffffff00, 0xffffffff], [0x0, 0xff, 0xffffff00, 0xff000000], [0xffffff00, 0xff, 0xffffff00, 0xffffffff], 0x200, 0x800}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv4=@dev={0xac, 0x14, 0x14, 0x25}, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @gre_key=0x8000}}}, {{@ipv6={@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xff, 0xffffff00, 0xffffff00, 0xffffff00], [0xffffffff, 0xff, 0x0, 0xffffffff], 'veth0_to_team\x00', 'lo\x00', {0xff}, {0xff}, 0x8, 0x0, 0x1}, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x11, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @ipv6=@mcast2, @port=0x4e24, @gre_key=0x2}}}, {{@ipv6={@local, @private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0xff, 0x0, 0x8401a151b8af54b7], [0xffffffff, 0xff000000, 0xff, 0xffffff00], 'wlan0\x00', 'veth1_to_team\x00', {0xff}, {}, 0x89, 0x6c, 0x4, 0x30}, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0xc, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4=@broadcast, @icmp_id=0x65, @icmp_id=0x68}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) (async) getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000002a40), &(0x7f0000002a80)=0x4) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000002ac0)={0xc0, 0x6}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000002b80)={'syztnl2\x00', &(0x7f0000002b00)={'syztnl0\x00', r5, 0x2f, 0x76, 0x40, 0x2, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x700, 0xa0b, 0x4}}) (async) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000002bc0)='./file0\x00', 0x40000, 0x1) mount_setattr(r9, &(0x7f0000002c00)='./file0\x00', 0x5400, &(0x7f0000002c40)={0xd, 0x100000, 0x80000, {r1}}, 0x20) (async) r10 = openat$incfs(r3, &(0x7f0000002c80)='.pending_reads\x00', 0x40000, 0x124) sendmsg$nl_route_sched(r10, &(0x7f0000002ec0)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002e80)={&(0x7f0000002d00)=@deltaction={0x150, 0x31, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x78, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x25}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0x14, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x14, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x14, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}]}]}, 0x150}, 0x1, 0x0, 0x0, 0xc4010}, 0x800) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000003040)={r1, &(0x7f0000002f00)="f8ed63048fa2bd4c052dd7d3aacf14bbb7bf6f6d8211929921a1a61d591dcbaa7c66620766d54b393c2382bdd4cb3c597c7dac36af645ae64d834d23391a8cb9b4b0f3be3907949202bfe8af3d039d8e58f2f7c848b620c427ca1e3126715daa8d5abded0d1250ebe597615bb765eeb1209b445deadae9a786a9d93bec3463a82aa83cc1dca525913d3b5afe01e60aa8146e86c1c8f042d8a16f83c0b57440fce675a7462b1e5b53443ff27698777dbdda2386f18eb1c06575e345f63c5b377adfc495ef97cf4417672ea46aa78262b142", &(0x7f0000003000)=""/50, 0x4}, 0x20) (async) sendmmsg(r6, &(0x7f0000007d40)=[{{&(0x7f0000003080)=@xdp={0x2c, 0x4, r7, 0x37}, 0x80, &(0x7f0000003500)=[{&(0x7f0000003100)="bec748db56d16e83933c78080c250b77", 0x10}, {&(0x7f0000003140)="6100c1869e57f40570b0377b6d8ed39e2ce44ce944bb90b99a60c6e820fbe6a1b2d0af655c2a7dc3c23b09a17944be0ceae73cb20107c017b6cd955c66e43638db6aacdfb24d939cd62992cf55e701cb9527f8317418d565dc92e0a9514f65c829804d25cdfe95c9b926ea743f", 0x6d}, {&(0x7f00000031c0)="bb29e402061af5e10a1fe50ac2068243b56b8da97e8bdceb300bdfc3b1b46f2d73e347345f902398feb21fc35069b2273ed554b4c56da702d9560e1c03ebce269b0d8f9be5b93703980cdd783d464250ea73c447d2d2e39e409b3a8f2d19cf260a7fa0971dec4b6eb0d41369df22b0ae6cd029043a639ee681e8f6b5d43a3a8fe9c02e22a7faf1b74b68118ef72cafef5751f29a39a4dfd211845429b9e81844a5e5a9465b2b5f9a4eb19aa5a1d5b1b29666cd4cc9a6297b8358cab818a27c6e34a1650503", 0xc5}, {&(0x7f00000032c0)="28db77f8c28a2cca7e13b12383faf5241b457053a86b120e0c8639c19a6a0c0209583a25697689a8e8ee44c4dcf17e376c42672ce38e73e886fd4b897f4a7b42ff698a445a8d27eee9f44471bbbacae89f44267a9dc4c66bf2f26e2a37d77dd4b379c1ff87d97e8d5e9a54a4deecebe1860cc46fae35001483f63b4266e609eb5fc431f8c38a95a7618741f243106273c475b102097a829d4feb59", 0x9b}, {&(0x7f0000003380)="40695f088c7c68cf8853e7bff3e1930362f2b5dbf36fbc2462a3240448a6c1158725d81099b71a491e7f85251b669d87be86a7e33756a65f5a535afed3544c7bedbf05d717cc632e1a488ea167f9cfdd1a935dad9efd9639947d304d43d07aed70115cafeba531352ae4c3fe30336ed72c87d9300587b68ad20721508135b7c073fe314150e85eb7d8740ecd0cd7188f6f7cb340d4a7b33d15b58c35d8887f6caa1897322a8828c92f26b83663a8b3fc0e3e7d090a0389199a11d625a646787cd281b635a08c5fd3fda2d59ed22178cb7353fd464816e689a414b457cbc9bdb451c77366b516bf", 0xe7}, {&(0x7f0000003480)="94d01b0841fcafc3114a39719d645050d1468a480d39f16d93aa7f74098cbd3708dc95d859ccd271753e", 0x2a}, {&(0x7f00000034c0)="d7fdfc362ef45372b79c60a5d49f43d86f4ca17879b90d146817617be62d9da2e970ba8c15c00120d48a5792845c749ce9", 0x31}], 0x7, &(0x7f0000003580)=[{0x78, 0x11, 0x5, "45e5325524c72e3885e61a4cca6870167e2047e7004d5a517e3319d4f2fa5265c0df6bc413a5f221d82e608f78f0ebbffdb36579295913ebbad997928483866b09d077fc7e59b7146803772abe2e4de6757c64efab1c5a82a22fa9e72e7162eb422aa53764c71e"}, {0x108, 0x10c, 0x1000, "72e10a280f5f6d8b85ce7cac376bb18d6f328d03f91ca7ba3bebbe09db9399a532fc8527e0599a53bd3eaf2c9b8f93fec453394415b74502d82191b1b9251c38cff8b0297707cdafd7a086ea363e5316b0645b968bd3d3405d99226c6a444d79d983cf97b3bc20f41d547725acdff1273890d241ce08041282474fcc448666ef1e86ff3121ec368e67997936e7bbcf146e863ce3bb0fcc88480d01a65bdfd3a382ea0c0596001393ba3eac0393098009fdea4a39c058be5fece7365c2841665c0eb9d3282d683735c756985c9a52ce38eabf8a1fc1b1e3451d0b876bcd4b7daf11e120f8602bfd909fba43dd5d071c785589fb62f751aa3e"}], 0x180}}, {{&(0x7f0000003700)=@can, 0x80, &(0x7f0000003ac0)=[{&(0x7f0000003780)="0569a6bd01eab36dd230160fe701d0e6f0d735e678fcfa0281bd80df1fefa225bfc3db829b13655483f13463bb62d558b4bb8a880d9761fbbbb9379f18ad98d62a5feb5b30c2d459d7c7524684ef3671cd4ffb988098232a9ecd324d25ddbac419b36155908792240c89228003617803179fb2bcfd1ca3e065c25e1d7c5577896118cb16163d04efdaf94cb890f2ac568fdcc6f9460360d80eb80225eca6116abd6ad80e818425a9b2d5459eb842ef236386bfa4157cab1cba933030ac69", 0xbe}, {&(0x7f0000003840)="60fac27892e94479bab89dde4f0c5381f16fd38e674ff5b2d7c3df38018d0f87b8574698fd92e873f8824b6bc496112f7a4adf5f176592b496431de7873c692eed84cf7f0acd22d95c261c2f1dd18a1719546196987d38f0589b20df5ffd4e40a8eb9deaf027b930cea4f65c84de4e421a457eb144fb93", 0x77}, {&(0x7f00000038c0)="778e609a3920d2f7f1056f2f9715b0ba052dce91b1fbb2a8159b9e63c31ffe509c3ff6d1409adcaf682305669fd7d638e4db951047c713cf0910cc72502ee71cbc25365efd2bf8f84d0fba5a530d0151f21c40a9b1cd77d01119ef5f96a0941e68f15fea5d7f07e493a91da4e7c345f6563b9d0b6d00493dab4fdf1d47161c1a931892c5beba1642df9832d0224167732158e4fa4bf94569fed4fbda3811be411f8cfdd60c84a2dea661f601c82b9a9293f4a687c9f342c824cfe00a938fcfd855efedafa317c57b5d721a551195489fc326e47287a2ef46422f6cf104", 0xdd}, {&(0x7f00000039c0)="8d793dd6a5b344818b975eef15948aab6a59ca1e886d015acfe307fbaf25fd1921a56d65ff47a345430e51ff3f7123ecf9efe3ea959c1724a22fae58a1fe342c725d8e8c971aa26fa9004f0b36f3360d389e0fdcc118cfc327651e07e75d58b558d37ebacf0aa3956b1d7621f542624bd81ffb8f12b9b68006e570b6160c45a16a9fb517d310b9d200d4ee48375df3dba35828d1b8ac7b9f652bcc4842b4", 0x9e}, {&(0x7f0000003a80)="33f6612521629ecd32e1032ad0399d1df59096dd5e6dd33ffb3c13", 0x1b}], 0x5, &(0x7f0000003b40)}}, {{&(0x7f0000003b80)=@nfc={0x27, r4, 0xffffffffffffffff, 0x2}, 0x80, &(0x7f0000004f00)=[{&(0x7f0000003c00)="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", 0x1000}, {&(0x7f0000004c00)="662a9495e47cbd294cfa998edc0ae791c92e3653c17c04d94f5287c0a2bbf8f61acbddb5859d18fb2d76bf4584c2f9d3f0b6de5247d530ad355233756387058f8a549bdd03d19c0b0e573a4c0914", 0x4e}, {&(0x7f0000004c80)="6ad12ad0ff4eb52dac5bdfa0cdbfda9d20bdb2270f3c8f6992fca7363c2d761847844dc0dad77830b91c59e6ce2b0fc2cc3456bee143f73c310b52be53929f950e9e12dd03df2a86ceb475c637a5d7cc377779d8402491f6feadb536ff81", 0x5e}, {&(0x7f0000004d00)="a65851bc7feac6", 0x7}, {&(0x7f0000004d40)="3240528742ef98db225e40f0188a777a2e80e2d26c7d133e536141abe70d8011a402f54104b508a3f0de2643864cfb29b17e81e719b61250db75c1d0468206671bd7daabbd61480a22987fe3fbf5ae70da9df55108da6d13b9da499ad10fcc7ff658210328067be5222618515b47956d2954f5e44f0cc6e28ec03ec833809e010a4fa3a0b267b22ece55d36e1e8f35c0cce508081e3bc71f5e24dc31b5d992d5a065d606287286295d45cfdcaab6cf77bbce7d3e8762bdd73dfbe9a76f33504e01ffe070dc372d6457435c0ecf3311f7f7e6418ba053e9", 0xd7}, {&(0x7f0000004e40)="bf0bacbadce5d5", 0x7}, {&(0x7f0000004e80)="1235bfed8035a87d9ca9ba7203d016c1a563915d24523655c3270b34a304d974e5f30f1434f27f624d1380407b9e5ecb45bbb4dcbdd10b491cad592604816ed411b736", 0x43}], 0x7, &(0x7f0000004f80)=[{0x20, 0x108, 0x8, "f4ae72c2e8612dcb6e2cda0f66f788"}], 0x20}}, {{&(0x7f0000004fc0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x42, 0x3}, 0x1}}, 0x80, &(0x7f0000005080)=[{&(0x7f0000005040)="dace88812ef0a6d55ecb9f2cc35ab573526edea8", 0x14}], 0x1}}, {{&(0x7f00000050c0)=@nfc={0x27, r4, 0xffffffffffffffff, 0x3}, 0x80, &(0x7f0000006240)=[{&(0x7f0000005140)="9b1c4d292b4f686fe088f6a0345ec547a6621e1f2f31767133b4c497096418427556f7171e2f78d510fad2d026bb8a743987f0916002a9747ffd76cbe03c30ed0fc313cd62e607e5fa3c6e3eaee35f8fecceead629f7895b40c3aab3e26216b96d60e19fe7bfce4170d07af2bc6941cfee0c6aaf1c6a6d670fa6ad20977a1273be01c8477b27ff1779972104e2b0ca130dd16f0fe1e3f4112d071b19f36d88ccee9754df5fda80a42c5bd1", 0xab}, {&(0x7f0000005200)="a0c7c9e106a4d1486a01d09092c7b6bf19e715f3d2da2e7e66dff818e7474b9bbf8252e88045d81f3e685cabb55724", 0x2f}, {&(0x7f0000005240)="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", 0x1000}], 0x3, &(0x7f0000006280)=[{0x58, 0x10f, 0x4c22b431, "4bbb2f93ed262eecee32d3f398dbe640626ba3aa2d742553ced628690c74f13fa23911afd4807e5d7d7bf0b56788dd56643ac22ef0792bde5558ac2ed1aaf8bb384c82d3deaba1"}, {0xd0, 0x110, 0x5, "3dd4788b7d388ee43db6bc929007e4e49729cd6078eb8a9a0553d759190140d953d89bd7cad93e0f5e3877820f8dc83fb349ba63bc319462f08c3736eae8fe57a72128d885ccb8ba8681fa551cf1ac8f722f448b03357a096fbe7033479c8b78b2ae8cdab0cb2f20ffb3852adecdab0265f5c20df5d7379b0ed1d7011660d0b8c37797b6c1a420833de7226be426a25c3b4380f41133114e706a2bca30161240983ff08c04b35d8f4f95060aa4528313b311e1d4ca22860497200221404402"}, {0xc0, 0x10b, 0x9, "a76662f54457d6aea381e6f2ee8b75ff31ead3dfcad125eea6a4b794d8721b812537ea461bccf9d54c7bbec81d320940bea260273db2aa73d65bb73a847d88137dd0a9cba42bb1572b5d32a9ae5040de960bfc65e25cb4aaba7753fd4f449eac1bc5a2437ef341005eff3b1af737847b5a2568ea72d932d0333f5b00a3152f3e33aaf951c2725f2852f526c79cc2b5d15003ba4fcad9fcb980b362cddcaf1390d20af3c0e51bbf9c5cbf"}, {0x18, 0x10a, 0x10, "c0efae110d"}], 0x200}}, {{&(0x7f0000006480)=@nfc={0x27, r4, 0x1, 0x5}, 0x80, &(0x7f0000006900)=[{&(0x7f0000006500)="7d9df4ca67fa358044e1d7d1afea347a8cf3cacf9481136d54db15bd48f63906b4ca75", 0x23}, {&(0x7f0000006540)}, {&(0x7f0000006580)="36680ca288b17abe076f60909244014d67a7d3c14899be0510c8be55c2df9e3e286af4b3181b0b666e26690800bcf69de3c7cbfec51cb18c7391c66f17bfbfd9dc49c5106e886eda07c481e62773af5b0615ac8f0c0697540258d257fc7d266948a27feda48595c55a8ff7d25bcdc08e62834d7f9ae32e032e4e7866f84c8f31a92cd060a6ab26b5a311ebfd8994062de37cc896f282af34a0de725f5581ff6c8ee393c233af702687e12b4e5876b566682c23f500be6e97383489e86797497a2aba23b32402b809aa12", 0xca}, {&(0x7f0000006680)="849872a1c4a54066784eda518640fc1f2a31956e6486e74b11ae52c228f8ffe204a53fb4151e6e3a62e72919cd7b9ac4a21321da06f38af4f89ffc76d86adc4ff25cfba2387f6c724075f256be3104b01682e86f", 0x54}, {&(0x7f0000006700)="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", 0xfa}, {&(0x7f0000006800)="fba09f142b6923ad8525a1b0c58a915365730d36872272f7506cd527e65532df3ba2853f40e5a615268fac31d3e3e7a160366256888c9a38725fb3361fe78e48e89f12bb8e94e7648f873ef20c7686fe962a528aa5e9c503933e0da081b0a5c248cf9a64ca30e162d419258c3b1432ac914b8e85fd202c0c455c2e5658dc69979a1bc196812c25c0934273e22a6dae99aa1c547259f7dc33642a849fd600a837f778edfbb4adb3bb94ad3a4853858453798b0a851746", 0xb6}, {&(0x7f00000068c0)="d947cdaf1ebccf6ff24c40b30c76fd", 0xf}], 0x7, &(0x7f0000006980)=[{0x78, 0x10b, 0x6, "fa417f43d7a35ebe428a652deae601316e521031734d4b635cfda56d9dd6c2f8913778720f5d99ce80800657b286b948bd935fdcc2ec0f1da7fcad5c3b06176306bba9ed8245cce15bf8f5da4dbf1ee5d9e59aef4f4ed9cd250947fea9dce82669fe"}], 0x78}}, {{0x0, 0x0, &(0x7f0000007cc0)=[{&(0x7f0000006a00)="f4beed95eb2a5bf5850372a24fafa5921b8ac6c75511533180eaa59594385474f5e6598a918ef85fa86fcade85a41ef18a1a985d5394f3181586dd8df280b498c8b81f18", 0x44}, {&(0x7f0000006a80)}, {&(0x7f0000006ac0)="74682d514bad38b86621a42e9775765b1d6c404d9b01803017a39a03372794cdc67e250ef61c2d54c4b94037b76ff117c5e064f1b197394bd11de2d79e3e92c5da32a5724a5bfdf3c7227d059e5fb01ed24aa47dadadddaf329051f3abc43d8c140664863abe54b914aea309cd5a5d0b2defac06446d348808150f861881c528aac8f32f4aac712013abed40dd", 0x8d}, {&(0x7f0000006b80)="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", 0x1000}, {&(0x7f0000007b80)="0422aa51a517921adcebd17cc1e100d63779b914579de5a7f13e3bbafbad3e719dc4609ba6da6638c7e9445e11b495679065c26592ad9843705cc15902c66d5422d75d7b2d3f7de8131258b4862a1c16ff0012811af7b67a3b3942b8cc4679099cce686c1d9116d55f93ee209f75bfb512ad16684171d32c491f522d73d3b5019802d4571642a90ebd7698069b4a4616149658cc6811a4add393fe79eb1bf801e1686bc3beab0fe2994f446c42b94d", 0xaf}, {&(0x7f0000007c40)="37e58abdb6716fcdcc14980a408f0389243bd5ca9179f21d99291209f8e366eea1c8f515b577f4e2d763077de1b72d7a446fcc82eec5d19e9db89a1a22021d5e8e173712a80bb546a3eac72c772db7e270fbb1b464380097216fbf123f39af43656674c11c02e09696f56989e043ecfb294fe8cb86dcc97224d33b615fbf7e", 0x7f}], 0x6}}], 0x7, 0x20000011) (async) setsockopt$packet_tx_ring(r10, 0x107, 0xd, &(0x7f0000007f00)=@req={0x1ff, 0x930, 0x100, 0x4}, 0x10) (async) r11 = openat$uhid(0xffffffffffffff9c, &(0x7f0000007f40), 0x802, 0x0) write$UHID_GET_REPORT_REPLY(r11, &(0x7f0000007f80)={0xa, {0x3, 0x6, 0x10}}, 0xa) (async) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000080c0)={0x14, &(0x7f0000007fc0)={0x20, 0x9, 0xa5, {0xa5, 0xd, "ae849492dff2e576782528c9c397040687a227b7e2b1a7496c3716cb8079debd46b6af8c12a02fd594a95990ce2d1044b82e726a0267b55b12ef0278137e66ab1295353407a8f7e99ad7c5c95a5560c5e329f154a9128aaa782d12df8de1422c797cb3da048e4f05a6b4430d82847868a046e7716ec5091f7c6f6e9cf6cba4291a7da10644b2836b1ffc6e09084a30c8f3863b9463874bd389d9fef7c145a240aa7146"}}, &(0x7f0000008080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000081c0)={0x1c, &(0x7f0000008100)={0x40, 0x7, 0xa, "3dd88b1f905d94f25933"}, &(0x7f0000008140)={0x0, 0xa, 0x1, 0x55}, &(0x7f0000008180)={0x0, 0x8, 0x1, 0x9}}) (async) write$smack_current(r1, &(0x7f0000008200), 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r11, 0xc08c5335, &(0x7f0000008240)={0xd338, 0x8, 0x0, 'queue0\x00', 0x3}) (async) r12 = openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) readv(r12, &(0x7f00000084c0)=[{&(0x7f0000008340)=""/201, 0xc9}, {&(0x7f0000008440)=""/12, 0xc}, {&(0x7f0000008480)=""/39, 0x27}], 0x3) (async) ioctl$sock_SIOCGIFCONF(r10, 0x8912, &(0x7f00000085c0)=@buf={0xac, &(0x7f0000008500)="d5819327f426882783b95bbf8202087d0f916630e59bce701b79bfde4e61ad3a488e2814be777aa6dae1da3cf56285f3bdca3cbdcb88a1d500374262ce17bbe75f63ff617a12033a694b745c1c1a3fbe839d850d9ca4761079eb61e2a2498e7967805db946f11093567e38945ace27794fc035c47537bf08295a3526e88c24f320fadea33058e183efe9fa15291005bf0d96cbe340bea5f13dc41f287f03b16b72f4f7683e1a1b27de2fc453"}) (async) getsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000008600), &(0x7f0000008640)=0x8) 1.965665733s ago: executing program 2 (id=1482): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @local}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=[{0xffffffa7, 0x118, 0xb, '1'}], 0x1}, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000180)={0x9e58a84aedbcc5bc, 0x0, 0x1083, 0x0, 0x80000001}) 1.936721993s ago: executing program 5 (id=1483): syz_kvm_add_vcpu$x86(0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) syz_open_dev$video(0x0, 0x0, 0x42003) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0x744) (fail_nth: 1) 1.712745831s ago: executing program 6 (id=1484): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/186, 0xba) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) ioctl$MEDIA_IOC_DEVICE_INFO(0xffffffffffffffff, 0xc1007c00, 0x0) r7 = dup3(r1, r2, 0x0) ioctl$MON_IOCG_STATS(r7, 0x40189206, &(0x7f0000000180)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) r9 = syz_open_procfs(0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000080)={0xe1, 0x1, 0x5, "72f8e08bd802af28150c40cab44031a21981d503d622136daa59d19dc6fa77f3bd052717b9d9b572591726a7650f31f6f4cc75006e4c791428e81ae5f9e95d0fa8b8a0268ec815804e05b98c5b370dd6780d1ed81a66de334d75ffc2477ce8c94835f4ce58765022719e3c17865babe8e5f04435d1e9d6833d71c9201acab6c70959f0ad2f346dd2a2c17225b1b4f841b1e8a6e6a15039332629f6a2756e83d95fa213109b15f016534a25ab1d6ff85016cda6e48a37b11aacc4e42e347ac1e3fe22eca0864cbe7a16f280d21da883eed1fe8df53a2b1976a2e7c69c2b3be11ec5"}) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000180)="ca59b928b749d890ac5cd191cc1ca34f2adb5234f45dcf280dba15c95de65da9bcd73281c72d635cd214fdd914808b1e8dbc3d5412b4e4b249428435599982383dd11ad1a86c73f98c4387c26b9e255dee112e11206a8e41b69ce5f36460270a2a5a66a57bc22c476e778fc35929c670930bba8c4ab81440c0ed09eb97fce65a5c24fabd6e1d9217512b8ecb76dbfce362f0908f170de9a4b427aeca0c1632f220a789c7a8fb172eeab15110f93271063c75611683e6a4fb1038e1b8a047", 0xbe}], 0x1) 935.221906ms ago: executing program 2 (id=1485): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/186, 0xba) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) ioctl$MEDIA_IOC_DEVICE_INFO(0xffffffffffffffff, 0xc1007c00, 0x0) r7 = dup3(r1, r2, 0x0) ioctl$MON_IOCG_STATS(r7, 0x40189206, &(0x7f0000000180)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) r9 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') ioctl$VHOST_SET_MEM_TABLE(r9, 0x4008af03, &(0x7f0000000380)={0x1, 0x0, [{0x2000, 0x4e, &(0x7f0000000300)=""/78}]}) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) r10 = syz_open_dev$sg(&(0x7f0000000040), 0x2, 0x80) ioctl$SCSI_IOCTL_SEND_COMMAND(r10, 0x1, &(0x7f0000000080)={0xe1, 0x1, 0x5, "72f8e08bd802af28150c40cab44031a21981d503d622136daa59d19dc6fa77f3bd052717b9d9b572591726a7650f31f6f4cc75006e4c791428e81ae5f9e95d0fa8b8a0268ec815804e05b98c5b370dd6780d1ed81a66de334d75ffc2477ce8c94835f4ce58765022719e3c17865babe8e5f04435d1e9d6833d71c9201acab6c70959f0ad2f346dd2a2c17225b1b4f841b1e8a6e6a15039332629f6a2756e83d95fa213109b15f016534a25ab1d6ff85016cda6e48a37b11aacc4e42e347ac1e3fe22eca0864cbe7a16f280d21da883eed1fe8df53a2b1976a2e7c69c2b3be11ec5"}) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000180)="ca59b928b749d890ac5cd191cc1ca34f2adb5234f45dcf280dba15c95de65da9bcd73281c72d635cd214fdd914808b1e8dbc3d5412b4e4b249428435599982383dd11ad1a86c73f98c4387c26b9e255dee112e11206a8e41b69ce5f36460270a2a5a66a57bc22c476e778fc35929c670930bba8c4ab81440c0ed09eb97fce65a5c24fabd6e1d9217512b8ecb76dbfce362f0908f170de9a4b427aeca0c1632f220a789c7a8fb172eeab15110f93271063c75611683e6a4fb1038e1b8a047", 0xbe}], 0x1) 385.776785ms ago: executing program 5 (id=1486): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x800, 0x0, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) write$bt_hci(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="5300030002"], 0x8) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc811"], 0xffe) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000000040)=0x1, 0x4) r6 = socket(0x23, 0x5, 0x0) getsockopt$bt_BT_VOICE(r6, 0x112, 0xb, &(0x7f00000002c0)=0xfff8, &(0x7f0000000300)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = syz_io_uring_setup(0x2502, &(0x7f0000000240)={0x0, 0x0, 0x2000, 0x0, 0x2fe, 0x0, r1}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r11 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r11) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r11, 0x40946400, &(0x7f0000000140)={'8255\x00', [0x85, 0x1, 0x10001, 0x6, 0x2, 0x7, 0xb3c1, 0x2, 0x1, 0x3, 0x5, 0xb372, 0x3, 0x9df, 0x5, 0x8, 0x4, 0x53, 0x2, 0xde, 0x69, 0x7f, 0x3, 0x6, 0x2, 0x63, 0x1000, 0x9, 0x86e, 0x3, 0x0, 0x2]}) write$UHID_CREATE2(r10, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x8}) r12 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e21, 0x8000000, @empty, 0x6}}}, &(0x7f0000000100)=0x84) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r12, 0x84, 0x78, &(0x7f00000004c0)=r13, 0x4) io_uring_enter(r7, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 305.76203ms ago: executing program 6 (id=1487): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 176.913587ms ago: executing program 0 (id=1488): syz_kvm_add_vcpu$x86(0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) syz_open_dev$video(0x0, 0x0, 0x42003) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r3, 0x84, 0x9, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0x744) 0s ago: executing program 6 (id=1489): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$packet(r1, &(0x7f00000008c0), 0x14) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a78000000060a010400000000000000000200000038000480340001800a0001006d617463680000002400028008000100756470000e0003007acc6338a90000b03bd9000008000240000000000900010073797a30000000000900020073797a3200000000140005800800010000"], 0xa0}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0xc, &(0x7f0000000040)=0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073110d00000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) kernel console output (not intermixed with test programs): y_from_user+0x2d/0xb0 [ 374.252056][ T9190] sk_setsockopt+0x276/0x2d30 [ 374.252097][ T9190] ? __pfx_sk_setsockopt+0x10/0x10 [ 374.252125][ T9190] ? __lock_acquire+0xab9/0xd20 [ 374.252170][ T9190] ? __fget_files+0x2a/0x420 [ 374.252196][ T9190] ? __fget_files+0x2a/0x420 [ 374.252217][ T9190] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 374.252261][ T9190] do_sock_setsockopt+0x11b/0x1b0 [ 374.252296][ T9190] __x64_sys_setsockopt+0x13f/0x1b0 [ 374.252334][ T9190] do_syscall_64+0xfa/0x3b0 [ 374.252358][ T9190] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.252378][ T9190] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 374.252397][ T9190] ? clear_bhb_loop+0x60/0xb0 [ 374.252422][ T9190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.252441][ T9190] RIP: 0033:0x7fe28d38ebe9 [ 374.252460][ T9190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.252478][ T9190] RSP: 002b:00007fe28e28f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 374.252501][ T9190] RAX: ffffffffffffffda RBX: 00007fe28d5b6180 RCX: 00007fe28d38ebe9 [ 374.252517][ T9190] RDX: 0000000000000049 RSI: 0000000000000001 RDI: 0000000000000006 [ 374.252529][ T9190] RBP: 00007fe28e28f090 R08: 0000000000000004 R09: 0000000000000000 [ 374.252542][ T9190] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 374.252555][ T9190] R13: 00007fe28d5b6218 R14: 00007fe28d5b6180 R15: 00007ffc864af8e8 [ 374.252589][ T9190] [ 375.287660][ T9209] geneve2: entered promiscuous mode [ 375.293071][ T9209] geneve2: entered allmulticast mode [ 375.344001][ T43] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 375.344105][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 375.384847][ T9214] netlink: 12 bytes leftover after parsing attributes in process `syz.3.864'. [ 375.416818][ T9214] vlan2: entered promiscuous mode [ 375.421934][ T9214] gretap0: entered promiscuous mode [ 375.497335][ T9] usb 3-1: device descriptor read/64, error -71 [ 375.514557][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 375.522491][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.533769][ T43] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 375.543044][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.597270][ T43] usb 5-1: config 0 descriptor?? [ 375.654243][ T9224] binder: 9219:9224 unknown command 0 [ 375.660004][ T9224] binder: 9219:9224 ioctl c0306201 200000000080 returned -22 [ 375.740187][ T9226] netlink: 52 bytes leftover after parsing attributes in process `syz.0.867'. [ 375.818212][ T9226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.867'. [ 375.844073][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 376.099919][ T9] usb 3-1: device descriptor read/64, error -71 [ 376.216151][ T9] usb usb3-port1: attempt power cycle [ 376.385591][ T9244] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.509880][ T9198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.518684][ T9198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.825375][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 377.878615][ T9252] x_tables: unsorted underflow at hook 2 [ 378.618041][ T9260] comedi comedi1: comedi_config --init_data is deprecated [ 378.968500][ T9] usb 3-1: device descriptor read/8, error -71 [ 379.246258][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.317918][ T43] usbhid 5-1:0.0: can't add hid device: -71 [ 381.325597][ T43] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 381.358451][ T43] usb 5-1: USB disconnect, device number 26 [ 381.382405][ T9271] program syz.0.876 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 381.824538][ T9276] netlink: 72 bytes leftover after parsing attributes in process `syz.2.877'. [ 381.849095][ T9276] /dev/sg0: Can't lookup blockdev [ 382.683839][ T9289] netlink: 'syz.3.880': attribute type 4 has an invalid length. [ 382.717610][ T9289] netlink: 152 bytes leftover after parsing attributes in process `syz.3.880'. [ 382.773836][ T9289] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 383.054177][ T5933] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 383.245915][ T5933] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 383.376678][ T5933] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.631102][ T5933] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 383.703978][ T5933] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 383.965163][ T5933] usb 3-1: Manufacturer: syz [ 384.302839][ T5933] usb 3-1: config 0 descriptor?? [ 384.582950][ T5933] rc_core: IR keymap rc-hauppauge not found [ 385.165105][ T5933] Registered IR keymap rc-empty [ 385.290152][ T5933] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 385.454219][ T2154] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 385.538483][ T5933] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input22 [ 385.721986][ T2154] usb 1-1: Using ep0 maxpacket: 16 [ 385.831762][ T2154] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.977288][ T2154] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.118919][ T2154] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 386.146373][ T9323] autofs: Bad value for 'fd' [ 386.286627][ T2154] usb 1-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 386.461237][ T2154] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.740903][ T2154] usb 1-1: config 0 descriptor?? [ 387.269699][ T5933] usb 3-1: USB disconnect, device number 26 [ 387.407294][ T2154] hid-multitouch 0003:0457:07DA.000C: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.0-1/input0 [ 387.588723][ T5933] usb 1-1: USB disconnect, device number 31 [ 387.918388][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 387.918407][ T30] audit: type=1326 audit(1754847403.697:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9355 comm="syz.2.900" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdce258ebe9 code=0x0 [ 388.227645][ T5933] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 389.694081][ T1209] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 389.714463][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 389.885029][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 389.890662][ T1209] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 389.943754][ T1209] usb 1-1: config 0 has no interface number 0 [ 389.952007][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 389.969213][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=0267, bcdDevice= 0.00 [ 389.990895][ T1209] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 390.010546][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.023936][ T1209] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.043572][ T9] usb 3-1: config 0 descriptor?? [ 390.048767][ T1209] usb 1-1: Product: syz [ 390.057145][ T1209] usb 1-1: Manufacturer: syz [ 390.061810][ T1209] usb 1-1: SerialNumber: syz [ 390.086008][ T1209] usb 1-1: config 0 descriptor?? [ 390.489544][ T9] apple 0003:05AC:0267.000D: hidraw0: USB HID v0.06 Device [HID 05ac:0267] on usb-dummy_hcd.2-1/input0 [ 390.523450][ T1209] usb 1-1: Firmware: major: 225, minor: 107, hardware type: RZUSB (3) [ 390.685459][ T9] usb 3-1: USB disconnect, device number 27 [ 390.746534][ T1209] usb 1-1: failed to fetch extended address, random address set [ 391.446661][ T1209] usb 1-1: USB disconnect, device number 32 [ 391.637587][ T9410] netlink: 600 bytes leftover after parsing attributes in process `syz.2.914'. [ 391.650528][ T9410] netlink: 20 bytes leftover after parsing attributes in process `syz.2.914'. [ 391.662832][ T9410] netlink: 20 bytes leftover after parsing attributes in process `syz.2.914'. [ 391.679364][ T9410] netlink: 32 bytes leftover after parsing attributes in process `syz.2.914'. [ 391.682959][ T9] libceph: connect (1)[c::]:6789 error -101 [ 391.893387][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 392.050435][ T9408] ceph: No mds server is up or the cluster is laggy [ 393.513981][ T5933] usb 5-1: device descriptor read/64, error -110 [ 393.602714][ T9433] batadv0: entered promiscuous mode [ 393.629961][ T9433] macsec1: entered promiscuous mode [ 393.682296][ T9433] macsec1: entered allmulticast mode [ 393.688645][ T9433] batadv0: entered allmulticast mode [ 393.703302][ T9433] batadv0: left allmulticast mode [ 393.721208][ T9433] batadv0: left promiscuous mode [ 393.755894][ T5933] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 393.914132][ T5933] usb 5-1: device descriptor read/64, error -32 [ 394.054080][ T5933] usb usb5-port1: attempt power cycle [ 394.624048][ T5933] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 395.406188][ T5933] usb 5-1: device descriptor read/8, error -32 [ 395.445740][ T9449] netlink: 'syz.1.923': attribute type 1 has an invalid length. [ 395.524218][ T5933] raw-gadget.0 gadget.4: failed to queue suspend event [ 395.574439][ T5933] raw-gadget.0 gadget.4: failed to queue reset event [ 395.645077][ T5933] raw-gadget.0 gadget.4: failed to queue resume event [ 395.714500][ T5933] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 395.786063][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 395.814630][ T5933] usb 5-1: device descriptor read/8, error -32 [ 396.022765][ T5933] raw-gadget.0 gadget.4: failed to queue suspend event [ 396.096787][ T5933] usb usb5-port1: unable to enumerate USB device [ 396.544422][ T9449] 8021q: adding VLAN 0 to HW filter on device bond1 [ 396.575651][ T9460] xt_CT: You must specify a L4 protocol and not use inversions on it [ 396.812169][ T9468] netlink: 60 bytes leftover after parsing attributes in process `syz.0.927'. [ 396.870482][ T9470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.929'. [ 397.834937][ T9478] netlink: 16 bytes leftover after parsing attributes in process `syz.2.931'. [ 397.857439][ T9478] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 397.865179][ T9478] IPv6: NLM_F_CREATE should be set when creating new route [ 399.214025][ T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 399.514745][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 399.746354][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 399.813942][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 399.864856][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 399.885039][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 399.910331][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.940832][ T9] usb 1-1: config 0 descriptor?? [ 399.975150][ T9494] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 399.987187][ T9] hub 1-1:0.0: USB hub found [ 400.053534][ T9509] netlink: 'syz.3.941': attribute type 10 has an invalid length. [ 400.098442][ T9512] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 400.870316][ T9] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 400.935727][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 400.964339][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 401.074674][ T9] usb 1-1: USB disconnect, device number 33 [ 403.375300][ T9546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.951'. [ 403.414051][ T9546] netlink: 60 bytes leftover after parsing attributes in process `syz.3.951'. [ 403.434578][ T9546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.951'. [ 403.464376][ T9546] netlink: 60 bytes leftover after parsing attributes in process `syz.3.951'. [ 403.506503][ T9546] netlink: 104 bytes leftover after parsing attributes in process `syz.3.951'. [ 404.804314][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 404.880910][ T9558] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:16x16 (0x30314142, 8, 0, 0, 0) [ 404.994804][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 405.025962][ T9] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 405.083378][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.186524][ T9] usb 2-1: Product: syz [ 405.197906][ T9] usb 2-1: Manufacturer: syz [ 405.236591][ T9] usb 2-1: SerialNumber: syz [ 405.287907][ T9] usb 2-1: config 0 descriptor?? [ 405.324617][ T9] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 405.504424][ T9] ssu100 2-1:0.0: probe with driver ssu100 failed with error -5 [ 405.716853][ T9] usb 2-1: USB disconnect, device number 22 [ 405.801445][ T9567] netlink: 40 bytes leftover after parsing attributes in process `syz.3.954'. [ 405.859059][ T5847] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 405.873113][ T5847] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 405.886930][ T5847] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 405.899957][ T5847] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 405.910159][ T5847] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 406.007740][ T9569] lo speed is unknown, defaulting to 1000 [ 407.954092][ T5847] Bluetooth: hci5: command tx timeout [ 409.077421][ T9595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 409.188582][ T9361] raw-gadget.0 gadget.4: failed to queue disconnect event [ 409.387864][ T9569] chnl_net:caif_netlink_parms(): no params data found [ 409.518202][ T6047] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.685558][ T6047] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.840925][ T6047] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.017960][ T9569] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.034157][ T5847] Bluetooth: hci5: command tx timeout [ 410.042015][ T9569] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.070947][ T9569] bridge_slave_0: entered allmulticast mode [ 410.101044][ T9569] bridge_slave_0: entered promiscuous mode [ 410.140599][ T6047] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.176150][ T9569] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.183712][ T9569] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.201945][ T9569] bridge_slave_1: entered allmulticast mode [ 410.210850][ T9569] bridge_slave_1: entered promiscuous mode [ 410.290333][ T9569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.316289][ T9569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.559886][ T9569] team0: Port device team_slave_0 added [ 410.571591][ T9569] team0: Port device team_slave_1 added [ 411.439586][ T9569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.459758][ T9569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.502680][ T9659] program syz.0.979 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 412.082143][ T9569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.110124][ T9662] tipc: New replicast peer: 255.255.255.255 [ 412.118274][ T9662] tipc: Enabled bearer , priority 10 [ 412.124083][ T5847] Bluetooth: hci5: command tx timeout [ 412.140993][ T9569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.153193][ T9569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.179359][ C1] vkms_vblank_simulate: vblank timer overrun [ 412.188827][ T9569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.214456][ T9663] netlink: 12 bytes leftover after parsing attributes in process `syz.1.981'. [ 412.224347][ T9663] tipc: Disabling bearer [ 412.442404][ T6047] bridge_slave_1: left allmulticast mode [ 412.477111][ T6047] bridge_slave_1: left promiscuous mode [ 412.557042][ T6047] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.579794][ T6047] bridge_slave_0: left allmulticast mode [ 412.588355][ T6047] bridge_slave_0: left promiscuous mode [ 412.594869][ T6047] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.834410][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 412.994279][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 413.006559][ T9] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 413.015947][ T9] usb 3-1: config 0 has no interface number 0 [ 413.022300][ T9] usb 3-1: config 0 interface 3 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 413.040095][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice=81.8a [ 413.049483][ T9] usb 3-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 413.062606][ T9] usb 3-1: Product: syz [ 413.070787][ T9] usb 3-1: config 0 descriptor?? [ 413.081217][ T9] gspca_main: STV06xx-2.14.0 probing 046d:08f6 [ 413.087848][ T9] gspca_stv06xx: st6422 sensor detected [ 413.343252][ T6047] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.352330][ T6047] bond_slave_0: left promiscuous mode [ 413.358291][ T6047] bond_slave_0: left allmulticast mode [ 413.366961][ T6047] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.377416][ T6047] bond_slave_1: left promiscuous mode [ 413.383054][ T6047] bond_slave_1: left allmulticast mode [ 413.390053][ T6047] bond0 (unregistering): Released all slaves [ 413.444115][ T9569] hsr_slave_0: entered promiscuous mode [ 413.465804][ T9569] hsr_slave_1: entered promiscuous mode [ 413.485018][ T9569] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 413.492684][ T9569] Cannot create hsr debugfs directory [ 413.521921][ T6047] : left promiscuous mode [ 413.557000][ T9] STV06xx 3-1:0.3: probe with driver STV06xx failed with error -71 [ 413.605299][ T9] usb 3-1: USB disconnect, device number 28 [ 413.832214][ T6047] tipc: Left network mode [ 414.195202][ T5847] Bluetooth: hci5: command tx timeout [ 414.864116][ T6004] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 414.969906][ T9701] sctp: [Deprecated]: syz.1.992 (pid 9701) Use of int in maxseg socket option. [ 414.969906][ T9701] Use struct sctp_assoc_value instead [ 415.039330][ T6004] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 415.069165][ T6004] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.254819][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 415.564680][ T6004] usb 1-1: config 0 descriptor?? [ 415.616206][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 415.716579][ T9] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 415.793930][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.832810][ T9] usb 3-1: Product: syz [ 415.854756][ T9] usb 3-1: Manufacturer: syz [ 415.859472][ T9] usb 3-1: SerialNumber: syz [ 415.942861][ T9] usb 3-1: config 0 descriptor?? [ 415.953670][ T6004] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 416.035985][ T9709] netlink: 'syz.3.994': attribute type 10 has an invalid length. [ 416.088757][ T9709] team0: Device ipvlan1 failed to register rx_handler [ 416.174597][ T6004] [drm:udl_init] *ERROR* Selecting channel failed [ 416.250423][ T6004] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 416.258106][ T6004] [drm] Initialized udl on minor 2 [ 416.269976][ T6004] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 416.283481][ T6004] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 416.295109][ T9706] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 416.307726][ T9706] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 416.316192][ T6004] usb 1-1: USB disconnect, device number 34 [ 416.523161][ T6047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.163526][ T9] speedtch 3-1:0.0: speedtch_bind: data interface not found! [ 417.171285][ T6047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.199848][ T6047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.283319][ T9] speedtch 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 417.350005][ T6047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.423718][ T6047] veth1_macvtap: left promiscuous mode [ 417.448801][ T6047] veth0_macvtap: left promiscuous mode [ 417.469525][ T6047] veth1_vlan: left promiscuous mode [ 417.479268][ T6047] veth0_vlan: left promiscuous mode [ 417.535285][ T5847] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 417.543845][ T5933] usb 3-1: USB disconnect, device number 29 [ 417.704020][ T5829] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 417.951595][ T5829] usb 1-1: Using ep0 maxpacket: 8 [ 417.964552][ T5829] usb 1-1: config 1 interface 0 has no altsetting 0 [ 417.983174][ T5829] usb 1-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.40 [ 417.992871][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.006796][ T5829] usb 1-1: Product: 䑋஁癷跊䅊圎誻롏難䐰놅 [ 418.017532][ T5829] usb 1-1: Manufacturer: 怇 [ 418.022263][ T5829] usb 1-1: SerialNumber: 《 [ 418.422153][ T6047] team0 (unregistering): Port device team_slave_1 removed [ 418.476804][ T9725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.998'. [ 418.495121][ T9725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.998'. [ 418.548806][ T5829] usbhid 1-1:1.0: can't add hid device: -71 [ 418.565545][ T5829] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 418.579677][ T6047] team0 (unregistering): Port device C removed [ 418.598060][ T5829] usb 1-1: USB disconnect, device number 35 [ 420.759952][ T9750] overlayfs: workdir and upperdir must reside under the same mount [ 421.494060][ T5957] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 421.722074][ T5957] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 421.823647][ T5957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.091692][ T5957] usb 3-1: config 0 descriptor?? [ 422.893376][ T5957] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 422.909194][ T5957] asix 3-1:0.0: probe with driver asix failed with error -61 [ 422.917338][ T9569] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 422.949231][ T9569] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 422.992919][ T9569] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 423.022451][ T9569] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 423.233126][ T9569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.294553][ T9569] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.302055][ T9783] netlink: 'syz.3.1013': attribute type 64 has an invalid length. [ 423.311309][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.319641][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.332974][ T9783] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1013'. [ 424.081038][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.088341][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.412684][ T9706] usb 3-1: USB disconnect, device number 30 [ 424.483283][ T9796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1017'. [ 426.772274][ T9706] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 427.013967][ T9706] usb 3-1: Using ep0 maxpacket: 32 [ 427.017359][ T9569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.055988][ T9706] usb 3-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice=81.8a [ 427.080052][ T9706] usb 3-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 427.110298][ T9706] usb 3-1: Product: syz [ 427.129693][ T9706] usb 3-1: config 0 descriptor?? [ 427.160803][ T9706] gspca_main: STV06xx-2.14.0 probing 046d:08f6 [ 427.191250][ T9706] gspca_stv06xx: st6422 sensor detected [ 428.564379][ T9839] binder: 9838:9839 ioctl 4090ae82 200000000440 returned -22 [ 428.588467][ T30] audit: type=1326 audit(1754847444.367:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9838 comm="syz.1.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcb938ebe9 code=0x7ffc0000 [ 428.649013][ T30] audit: type=1326 audit(1754847444.367:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9838 comm="syz.1.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcb938ebe9 code=0x7ffc0000 [ 428.690195][ T9843] binder: 9838:9843 ioctl aece 0 returned -22 [ 428.734038][ T30] audit: type=1326 audit(1754847444.397:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9838 comm="syz.1.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7fbcb938ebe9 code=0x7ffc0000 [ 428.769956][ T30] audit: type=1326 audit(1754847444.397:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9838 comm="syz.1.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcb938ebe9 code=0x7ffc0000 [ 428.851131][ T30] audit: type=1326 audit(1754847444.397:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9838 comm="syz.1.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcb938ebe9 code=0x7ffc0000 [ 428.951851][ T30] audit: type=1326 audit(1754847444.397:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9838 comm="syz.1.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbcb938ebe9 code=0x7ffc0000 [ 429.040281][ T30] audit: type=1326 audit(1754847444.397:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9838 comm="syz.1.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcb938ebe9 code=0x7ffc0000 [ 429.114780][ T30] audit: type=1326 audit(1754847444.397:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9838 comm="syz.1.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbcb938ebe9 code=0x7ffc0000 [ 429.200439][ T30] audit: type=1326 audit(1754847444.397:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9838 comm="syz.1.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcb938ebe9 code=0x7ffc0000 [ 429.288336][ T9569] veth0_vlan: entered promiscuous mode [ 429.301281][ T30] audit: type=1326 audit(1754847444.397:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9838 comm="syz.1.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7fbcb938ebe9 code=0x7ffc0000 [ 429.349904][ T9569] veth1_vlan: entered promiscuous mode [ 429.406924][ T9706] STV06xx 3-1:0.0: probe with driver STV06xx failed with error -71 [ 429.599946][ T9706] usb 3-1: USB disconnect, device number 31 [ 429.619535][ T9569] veth0_macvtap: entered promiscuous mode [ 429.631104][ T9569] veth1_macvtap: entered promiscuous mode [ 429.656403][ T9569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.794030][ T2154] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 430.644273][ T9859] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1031'. [ 430.666262][ T9569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.836550][ T2154] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.351183][ T9569] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.376699][ T2154] usb 1-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 431.390506][ T9569] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.399685][ T2154] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.412262][ T9569] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.423229][ T9569] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.432978][ T2154] usb 1-1: config 0 descriptor?? [ 432.820645][ T2154] logitech 0003:046D:C295.000E: unknown main item tag 0x5 [ 433.454695][ T2154] logitech 0003:046D:C295.000E: hidraw0: USB HID v0.00 Device [HID 046d:c295] on usb-dummy_hcd.0-1/input0 [ 433.507529][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.554030][ T2154] logitech 0003:046D:C295.000E: no inputs found [ 433.580485][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.741826][ T2154] usb 1-1: USB disconnect, device number 36 [ 435.031473][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.109547][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.724681][ T9902] netlink: 80 bytes leftover after parsing attributes in process `syz.5.952'. [ 437.155364][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 437.155387][ T30] audit: type=1326 audit(1754847452.917:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9899 comm="syz.3.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c2658ebe9 code=0x7fc00000 [ 437.219616][ T9892] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 437.268843][ T30] audit: type=1326 audit(1754847452.917:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9899 comm="syz.3.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5c2658ebe9 code=0x7fc00000 [ 437.365326][ T9892] usb 6-1: device descriptor read/64, error -71 [ 437.392137][ T30] audit: type=1326 audit(1754847452.917:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9899 comm="syz.3.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c2658ebe9 code=0x7fc00000 [ 437.429773][ T9706] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 437.462348][ T30] audit: type=1326 audit(1754847452.917:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9899 comm="syz.3.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c2658ebe9 code=0x7fc00000 [ 437.522951][ T30] audit: type=1326 audit(1754847452.917:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9899 comm="syz.3.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c2658ebe9 code=0x7fc00000 [ 437.575419][ T30] audit: type=1326 audit(1754847452.917:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9899 comm="syz.3.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c2658ebe9 code=0x7fc00000 [ 437.597442][ T30] audit: type=1326 audit(1754847452.917:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9899 comm="syz.3.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c2658ebe9 code=0x7fc00000 [ 437.629129][ T9926] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1045'. [ 437.651756][ T9706] usb 3-1: config 8 has an invalid interface number: 177 but max is 0 [ 437.663349][ T9706] usb 3-1: config 8 has no interface number 0 [ 437.663973][ T30] audit: type=1326 audit(1754847452.917:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9899 comm="syz.3.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c2658ebe9 code=0x7fc00000 [ 437.682332][ T9706] usb 3-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 437.694114][ T9892] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 437.747909][ T9706] usb 3-1: config 8 interface 177 has no altsetting 0 [ 437.768143][ T9706] usb 3-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 437.791669][ T9706] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.853572][ T9919] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 437.876352][ T30] audit: type=1326 audit(1754847452.917:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9899 comm="syz.3.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c2658ebe9 code=0x7fc00000 [ 437.899362][ T30] audit: type=1326 audit(1754847452.917:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9899 comm="syz.3.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c2658ebe9 code=0x7fc00000 [ 437.968905][ T9931] netlink: 'syz.3.1046': attribute type 21 has an invalid length. [ 437.977095][ T9931] IPv6: NLM_F_CREATE should be specified when creating new route [ 438.023999][ T9892] usb 6-1: device descriptor read/64, error -71 [ 438.144426][ T9892] usb usb6-port1: attempt power cycle [ 438.272329][ T9919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.290198][ T9919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.321861][ C0] ir_toy 3-1:8.177: out urb status: -71 [ 438.414002][ T5957] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 438.497689][ T9892] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 438.525292][ T9892] usb 6-1: device descriptor read/8, error -71 [ 438.586078][ T5957] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 438.595621][ T5957] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 438.607624][ T5957] usb 2-1: config 0 has no interface number 0 [ 438.616221][ T5957] usb 2-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0x13, changing to 0x3 [ 438.638214][ T5957] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 438.651147][ T5957] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 438.661287][ T5957] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 438.675272][ T5957] usb 2-1: config 0 interface 52 has no altsetting 0 [ 438.688277][ T5957] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 438.697573][ T5957] usb 2-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 438.706788][ T5957] usb 2-1: Product: syz [ 438.711055][ T5957] usb 2-1: SerialNumber: syz [ 438.723568][ T5957] usb 2-1: config 0 descriptor?? [ 438.774401][ T9892] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 438.794869][ T9892] usb 6-1: device descriptor read/8, error -71 [ 438.834191][ T9706] ir_toy 3-1:8.177: could not write reset command: -110 [ 438.841580][ T9706] ir_toy 3-1:8.177: probe with driver ir_toy failed with error -110 [ 438.859008][ T9706] usb 3-1: USB disconnect, device number 32 [ 438.913123][ T9892] usb usb6-port1: unable to enumerate USB device [ 438.985199][ T9946] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 439.044629][ T9] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 439.184026][ T9] usb 1-1: device descriptor read/64, error -71 [ 439.434234][ T9] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 439.483997][ T5957] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 439.703985][ T9] usb 1-1: device descriptor read/64, error -71 [ 440.210870][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.506606][ T5957] usb 3-1: config 0 has an invalid interface number: 45 but max is 0 [ 440.517560][ T5957] usb 3-1: config 0 has no interface number 0 [ 440.527859][ T5957] usb 3-1: config 0 interface 45 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 440.586258][ T9] usb usb1-port1: attempt power cycle [ 440.719299][ T9960] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-61) [ 442.223506][ T6004] usb 2-1: USB disconnect, device number 23 [ 442.340939][ T5957] usb 3-1: string descriptor 0 read error: -71 [ 442.354698][ T5957] usb 3-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=60.16 [ 442.363975][ T5957] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.379489][ T5957] usb 3-1: config 0 descriptor?? [ 442.390190][ T5957] usb 3-1: can't set config #0, error -71 [ 442.398080][ T5957] usb 3-1: USB disconnect, device number 33 [ 442.444109][ T9968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.724011][ T6004] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 443.502157][ T9968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.571932][ T9968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.649395][ T9968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.166777][ T6004] usb 2-1: config 0 has an invalid interface number: 220 but max is 0 [ 444.214152][ T6004] usb 2-1: config 0 has no interface number 0 [ 444.227549][ T6004] usb 2-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice=20.73 [ 444.250820][ T6004] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.291282][ T6004] usb 2-1: Product: syz [ 444.834018][ T6004] usb 2-1: Manufacturer: syz [ 446.107250][ T6004] usb 2-1: SerialNumber: syz [ 446.167464][ T6004] usb 2-1: config 0 descriptor?? [ 446.232973][ T6004] usb 2-1: can't set config #0, error -71 [ 446.241733][ T6004] usb 2-1: USB disconnect, device number 24 [ 448.104974][T10007] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 449.279036][ T9706] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 449.797831][T10010] delete_channel: no stack [ 449.854630][ T9706] usb 1-1: Using ep0 maxpacket: 8 [ 449.862136][ T9706] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 449.878573][ T9706] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 449.893824][ T9706] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 449.907592][ T9706] usb 1-1: Product: syz [ 449.913176][ T9706] usb 1-1: Manufacturer: syz [ 449.919908][ T9706] usb 1-1: SerialNumber: syz [ 449.964005][ T5957] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 449.984342][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 450.118003][ T5957] usb 3-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.128675][ T5957] usb 3-1: config 0 interface 0 has no altsetting 0 [ 450.135683][ T5957] usb 3-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 450.144810][ T5957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.155442][ T5957] usb 3-1: config 0 descriptor?? [ 450.162169][ T9706] usb 1-1: Handspring Visor / Palm OS: No valid connect info available [ 450.178471][ T9706] usb 1-1: Handspring Visor / Palm OS: port 163, is for unknown use [ 450.188036][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 450.204167][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 450.213352][ T9706] usb 1-1: Handspring Visor / Palm OS: port 51, is for unknown use [ 450.230306][ T9706] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 450.239757][ T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 450.252095][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 450.261815][ T9] usb 2-1: SerialNumber: syz [ 450.370310][ T9706] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 450.397438][ T9706] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 450.412321][ T9706] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 450.488967][ T9] usb 2-1: 0:2 : does not exist [ 450.496049][ T9] usb 2-1: unit 5 not found! [ 450.521865][ T9] usb 2-1: USB disconnect, device number 25 [ 450.580767][T10020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.594372][ T5957] logitech-djreceiver 0003:046D:C52F.000F: hidraw0: USB HID v8.00 Device [HID 046d:c52f] on usb-dummy_hcd.2-1/input0 [ 450.598857][T10020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.892341][ T6004] usb 1-1: USB disconnect, device number 40 [ 451.924853][ T6004] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 451.947352][T10049] fuse: Unknown parameter 'gr' [ 451.947352][T10051] fuse: Unknown parameter 'gr' [ 451.962712][ T6004] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 451.975520][ T6004] visor 1-1:1.0: device disconnected [ 452.037347][ T9] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 452.205328][ T9] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 452.213817][ T9] usb 2-1: config 0 has no interface number 0 [ 452.220171][ T9] usb 2-1: config 0 interface 29 has no altsetting 0 [ 452.230408][ T9] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 452.240098][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.265163][ T9] usb 2-1: Product: syz [ 452.289972][ T9] usb 2-1: Manufacturer: syz [ 453.023449][ T9706] usb 3-1: USB disconnect, device number 34 [ 453.035243][ T9] usb 2-1: SerialNumber: syz [ 453.055223][ T9] usb 2-1: config 0 descriptor?? [ 453.064355][ T6004] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 453.200097][T10065] overlayfs: missing 'workdir' [ 453.224154][ T6004] usb 1-1: device descriptor read/64, error -71 [ 453.315057][T10070] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1084'. [ 453.638736][ T6004] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 453.683811][ T9] peak_usb 2-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 454.194504][ T6004] usb 1-1: device descriptor read/64, error -71 [ 455.036703][ T6004] usb usb1-port1: attempt power cycle [ 455.206970][ T9] peak_usb 2-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 455.241776][ T9] peak_usb 2-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 455.656602][ T9] peak_usb 2-1:0.29: probe with driver peak_usb failed with error -71 [ 456.438059][ T9] usb 2-1: USB disconnect, device number 26 [ 458.471128][T10127] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 458.504202][T10127] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 458.554383][T10130] syz_tun: entered promiscuous mode [ 458.719317][T10130] syz_tun: left promiscuous mode [ 458.738741][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 459.164244][ T9] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 459.987323][T10144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1105'. [ 460.265790][T10146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1106'. [ 461.447860][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 461.447880][ T30] audit: type=1326 audit(1754847477.227:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10161 comm="syz.1.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcb938ebe9 code=0x7ffc0000 [ 461.513969][ T30] audit: type=1326 audit(1754847477.227:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10161 comm="syz.1.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fbcb938ebe9 code=0x7ffc0000 [ 461.540711][ T30] audit: type=1326 audit(1754847477.227:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10161 comm="syz.1.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcb938ebe9 code=0x7ffc0000 [ 461.547899][T10167] netlink: 268 bytes leftover after parsing attributes in process `syz.3.1112'. [ 461.681837][ T30] audit: type=1326 audit(1754847477.227:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10161 comm="syz.1.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbcb938d550 code=0x7ffc0000 [ 461.703746][ T30] audit: type=1326 audit(1754847477.227:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10161 comm="syz.1.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcb938ebe9 code=0x7ffc0000 [ 461.731583][ T30] audit: type=1326 audit(1754847477.227:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10161 comm="syz.1.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7fbcb938ebe9 code=0x7ffc0000 [ 461.753578][T10167] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1112'. [ 461.784427][T10169] random: crng reseeded on system resumption [ 461.816413][T10169] ptrace attach of "./syz-executor exec"[5835] was attempted by ""[10169] [ 461.842760][ T30] audit: type=1326 audit(1754847477.227:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10161 comm="syz.1.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcb938ebe9 code=0x7ffc0000 [ 461.864659][ T30] audit: type=1326 audit(1754847477.227:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10161 comm="syz.1.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7fbcb938ebe9 code=0x7ffc0000 [ 461.887495][ T30] audit: type=1326 audit(1754847477.227:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10161 comm="syz.1.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcb938ebe9 code=0x7ffc0000 [ 461.909489][ T30] audit: type=1326 audit(1754847477.227:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10161 comm="syz.1.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbcb938ebe9 code=0x7ffc0000 [ 462.020055][T10176] lo speed is unknown, defaulting to 1000 [ 463.259848][T10187] pim6reg: entered allmulticast mode [ 463.271192][T10187] pim6reg: left allmulticast mode [ 463.594310][ T43] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 463.774180][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 463.811496][ T43] usb 1-1: unable to get BOS descriptor or descriptor too short [ 463.841369][ T43] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 463.877233][ T43] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 463.929470][ T43] usb 1-1: config 4 has no interface number 0 [ 464.111348][ T43] usb 1-1: string descriptor 0 read error: -22 [ 464.144927][ T43] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 464.156570][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.239876][ T43] usb 1-1: Found UVC 0.02 device (04f2:b746) [ 464.261135][ T43] usb 1-1: No streaming interface found for terminal 6. [ 468.675221][ T43] usb 1-1: USB disconnect, device number 44 [ 470.284364][T10228] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1128'. [ 470.534109][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 470.814851][T10244] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.853979][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 470.865648][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 9 [ 470.892156][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 8241, setting to 1024 [ 471.459167][ T9] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 471.491156][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.535636][ T9] usb 2-1: Product: syz [ 471.540813][ T9] usb 2-1: Manufacturer: syz [ 471.553935][ T9] usb 2-1: SerialNumber: syz [ 471.581930][ T9] usb 2-1: config 0 descriptor?? [ 471.630682][ T9] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 471.650264][T10255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1133'. [ 471.675244][T10255] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1133'. [ 471.976138][ T2154] usb 2-1: USB disconnect, device number 27 [ 471.984533][ T1138] usb 2-1: Failed to submit usb control message: -71 [ 471.992406][ T1138] usb 2-1: unable to send the bmi data to the device: -71 [ 472.000539][ T6004] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 472.044113][ T1138] usb 2-1: unable to get target info from device [ 472.495170][ T1138] usb 2-1: could not get target info (-71) [ 472.503967][ T1138] usb 2-1: could not probe fw (-71) [ 472.745767][ T6004] usb 3-1: Using ep0 maxpacket: 32 [ 472.753172][ T6004] usb 3-1: config 0 has an invalid interface number: 151 but max is 0 [ 472.761840][ T6004] usb 3-1: config 0 has no interface number 0 [ 472.768119][ T6004] usb 3-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 472.807227][ T6004] usb 3-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 472.824018][ T6004] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.837023][ T6004] usb 3-1: Product: syz [ 472.841355][ T6004] usb 3-1: Manufacturer: syz [ 472.847088][T10274] binder: 10272:10274 ioctl 810c9365 200000000240 returned -22 [ 472.855569][ T6004] usb 3-1: SerialNumber: syz [ 472.936309][ T6004] usb 3-1: config 0 descriptor?? [ 473.128015][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 473.586657][ T9] usb 6-1: device descriptor read/64, error -71 [ 473.768002][ T6004] usb 3-1: USB disconnect, device number 35 [ 473.892039][T10286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 473.954232][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 474.094401][ T9] usb 6-1: device descriptor read/64, error -71 [ 474.207120][ T9] usb usb6-port1: attempt power cycle [ 474.844334][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 474.899476][ T9] usb 6-1: device descriptor read/8, error -71 [ 474.935873][T10305] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 475.891871][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 476.134007][ T9] usb 6-1: device not accepting address 9, error -71 [ 476.195320][ T9] usb usb6-port1: unable to enumerate USB device [ 477.179458][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 477.179481][ T30] audit: type=1326 audit(1754847492.937:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10318 comm="syz.0.1151" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5d7598ebe9 code=0x0 [ 477.364821][T10341] netlink: 'syz.5.1158': attribute type 83 has an invalid length. [ 477.403984][ T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 477.413776][T10342] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1157'. [ 477.436305][ T43] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 477.468645][T10342] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1157'. [ 477.499458][T10342] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1157'. [ 477.513265][T10342] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1157'. [ 477.527080][T10342] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1157'. [ 477.597022][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 477.604208][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.618662][ T43] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 477.621624][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.641496][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 477.648976][ T43] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 477.654428][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.664660][ T43] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 477.683936][ T43] usb 3-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 477.687879][ T9] usb 2-1: config 0 descriptor?? [ 477.693383][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.710316][ T9] hub 2-1:0.0: USB hub found [ 477.711170][ T43] usb 3-1: Product: syz [ 477.719969][ T43] usb 3-1: Manufacturer: syz [ 477.724698][ T43] usb 3-1: SerialNumber: syz [ 477.737412][ T43] usb 3-1: config 0 descriptor?? [ 477.834049][ T2154] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 477.984064][ T2154] usb 1-1: Using ep0 maxpacket: 32 [ 478.025787][ T43] usb 3-1: Found UVC 34.00 device syz (8086:0b5b) [ 478.032339][ T43] usb 3-1: No valid video chain found. [ 478.040121][ T2154] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.056098][ T2154] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.067476][ T43] usb 3-1: USB disconnect, device number 36 [ 478.090933][ T2154] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 478.101176][ T2154] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.977339][ T9] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 479.065445][ T2154] usb 1-1: config 0 descriptor?? [ 479.076260][ T2154] hub 1-1:0.0: USB hub found [ 479.414228][ T2154] hub 1-1:0.0: 1 port detected [ 480.163551][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 480.184044][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 480.215457][ T9] usb 2-1: USB disconnect, device number 28 [ 480.614023][ T6004] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 480.718567][ T2154] hub 1-1:0.0: activate --> -90 [ 480.765767][ T6004] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 480.775541][ T6004] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.799123][ T6004] usb 6-1: config 0 descriptor?? [ 480.807466][ T6004] cp210x 6-1:0.0: cp210x converter detected [ 480.819500][ T2154] hub 1-1:0.0: hub_ext_port_status failed (err = 0) [ 481.013543][ T6004] usb 6-1: cp210x converter now attached to ttyUSB0 [ 481.207993][ T2154] usb 6-1: USB disconnect, device number 10 [ 481.219349][ T2154] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 481.229922][ T2154] cp210x 6-1:0.0: device disconnected [ 482.037067][ T6004] usb 1-1: USB disconnect, device number 45 [ 482.135306][ T5918] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 482.324060][ T5918] usb 2-1: Using ep0 maxpacket: 32 [ 482.335662][ T5918] usb 2-1: config 0 has an invalid descriptor of length 114, skipping remainder of the config [ 482.363893][ T5918] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 482.367566][T10403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1176'. [ 482.384989][T10403] netlink: 'syz.0.1176': attribute type 5 has an invalid length. [ 482.386447][ T5918] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 482.392869][T10403] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1176'. [ 482.413133][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.425850][ T5918] usb 2-1: Product: syz [ 482.430066][ T5918] usb 2-1: Manufacturer: syz [ 482.436905][ T5918] usb 2-1: SerialNumber: syz [ 482.448034][ T5918] usb 2-1: config 0 descriptor?? [ 482.474661][ T6004] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 482.637895][ T6004] usb 3-1: config 131 has an invalid interface number: 242 but max is 0 [ 482.650020][ T6004] usb 3-1: config 131 has no interface number 0 [ 482.658017][ T6004] usb 3-1: config 131 interface 242 altsetting 13 endpoint 0x2 has invalid maxpacket 7573, setting to 64 [ 482.679496][ T6004] usb 3-1: config 131 interface 242 altsetting 13 endpoint 0xC has invalid wMaxPacketSize 0 [ 482.693582][ T6004] usb 3-1: config 131 interface 242 has no altsetting 0 [ 482.732659][ T6004] usb 3-1: New USB device found, idVendor=0bfd, idProduct=010b, bcdDevice=19.10 [ 482.752654][ T6004] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=5 [ 482.788544][ T6004] usb 3-1: Product: syz [ 482.792777][ T6004] usb 3-1: Manufacturer: syz [ 482.808079][ T6004] usb 3-1: SerialNumber: syz [ 482.831754][T10394] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 483.821483][T10432] trusted_key: syz.2.1173 sent an empty control message without MSG_MORE. [ 483.884465][ T5918] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 483.899953][ T2154] usb 2-1: USB disconnect, device number 29 [ 484.862259][ T5918] usb 6-1: config 224 has too many interfaces: 228, using maximum allowed: 32 [ 484.877804][ T5918] usb 6-1: config 224 descriptor has 1 excess byte, ignoring [ 484.894628][ T5918] usb 6-1: config 224 has 1 interface, different from the descriptor's value: 228 [ 484.913901][ T5918] usb 6-1: config 224 has no interface number 0 [ 484.923797][ T6004] kvaser_usb 3-1:131.242: error -ENODEV: Cannot get usb endpoint(s) [ 484.935565][ T5918] usb 6-1: New USB device found, idVendor=0403, idProduct=da71, bcdDevice=a2.95 [ 484.958181][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.967751][ T6004] usb 3-1: USB disconnect, device number 37 [ 484.983990][ T5918] usb 6-1: Product: syz [ 484.988307][ T5918] usb 6-1: Manufacturer: syz [ 485.008356][ T5918] usb 6-1: SerialNumber: syz [ 485.078747][T10444] 9pnet_fd: Insufficient options for proto=fd [ 485.149797][ T1138] Bluetooth: hci3: Frame reassembly failed (-84) [ 485.240101][ T5918] usb 6-1: NDI device with a latency value of 1 [ 485.248712][ T5918] ftdi_sio 6-1:224.8: FTDI USB Serial Device converter detected [ 485.265205][ T5918] ftdi_sio ttyUSB0: unknown device type: 0xa295 [ 485.280455][ T5918] usb 6-1: USB disconnect, device number 11 [ 485.290876][ T5918] ftdi_sio 6-1:224.8: device disconnected [ 485.364006][ T9706] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 485.540361][ T9706] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 485.563288][ T9706] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 485.581748][ T9706] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 485.594227][ T9706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.633551][T10446] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 485.656621][ T9706] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 485.812829][T10455] 9pnet_fd: p9_fd_create_tcp (10455): problem connecting socket to 127.0.0.1 [ 486.641479][ T6004] usb 1-1: USB disconnect, device number 46 [ 487.174118][ T5847] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 491.366819][ T2154] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 491.856983][ T2154] usb 6-1: Using ep0 maxpacket: 32 [ 492.994445][ T2154] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.007446][ T2154] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 493.020532][ T2154] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 493.030115][ T2154] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.041397][ T2154] usb 6-1: config 0 descriptor?? [ 493.249458][T10508] lo speed is unknown, defaulting to 1000 [ 493.324535][T10516] netlink: 'syz.1.1208': attribute type 39 has an invalid length. [ 493.491271][T10519] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1207'. [ 494.193796][ T2154] shield 0003:0955:7214.0011: item fetching failed at offset 0/1 [ 494.202686][ T2154] shield 0003:0955:7214.0011: Parse failed [ 494.208777][ T2154] shield 0003:0955:7214.0011: probe with driver shield failed with error -22 [ 494.221636][ T2154] usb 6-1: USB disconnect, device number 12 [ 494.703157][T10535] overlayfs: failed to clone lowerpath [ 495.084569][T10534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.254794][T10534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.283742][T10534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.324765][T10534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.474670][ T6004] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 495.744602][ T6004] usb 3-1: Using ep0 maxpacket: 32 [ 495.820444][ T6004] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.875715][T10539] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1212'. [ 495.963958][ T6004] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.114650][ T6004] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 496.259631][ T6004] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.444754][ T6004] usb 3-1: config 0 descriptor?? [ 496.676076][ T6004] usbhid 3-1:0.0: can't add hid device: -71 [ 496.700967][ T6004] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 496.724242][ T6004] usb 3-1: USB disconnect, device number 38 [ 498.896945][T10568] kvm: emulating exchange as write [ 499.176113][ T30] audit: type=1107 audit(1754847770.959:104): pid=10579 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='w=uy6=qlª. eճBE GzyeVUXڰ-2WP9&j [ 499.176113][ T30] [Ep "GѢӬ׼TiNqd=GOzl[ۀ5\Ciqf:[ +ષC &%\CG7t~Pe䌗W`;c$aϭuLT' [ 499.335571][ T30] audit: type=1326 audit(1754847771.119:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10584 comm="syz.0.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d7598ebe9 code=0x7ffc0000 [ 499.375688][T10585] syz.0.1225: attempt to access beyond end of device [ 499.375688][T10585] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 499.389025][T10585] syz.0.1225: attempt to access beyond end of device [ 499.389025][T10585] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 499.401987][T10585] Mount JFS Failure: -5 [ 499.447365][ T30] audit: type=1326 audit(1754847771.119:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10584 comm="syz.0.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d7598ebe9 code=0x7ffc0000 [ 499.476521][ T9] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 499.490793][ T30] audit: type=1326 audit(1754847771.149:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10584 comm="syz.0.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f5d7598ebe9 code=0x7ffc0000 [ 499.515948][ T30] audit: type=1326 audit(1754847771.149:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10584 comm="syz.0.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d7598ebe9 code=0x7ffc0000 [ 499.562994][ T30] audit: type=1326 audit(1754847771.149:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10584 comm="syz.0.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d7598ebe9 code=0x7ffc0000 [ 499.585853][ T30] audit: type=1326 audit(1754847771.149:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10584 comm="syz.0.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5d7598ebe9 code=0x7ffc0000 [ 499.608012][ T30] audit: type=1326 audit(1754847771.149:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10584 comm="syz.0.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d7598ebe9 code=0x7ffc0000 [ 499.630415][ T30] audit: type=1326 audit(1754847771.149:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10584 comm="syz.0.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d7598ebe9 code=0x7ffc0000 [ 499.643663][ T9] usb 2-1: config 0 has an invalid interface number: 3 but max is 0 [ 499.652567][ T30] audit: type=1326 audit(1754847771.149:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10584 comm="syz.0.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d7598ebe9 code=0x7ffc0000 [ 499.696181][ T9] usb 2-1: config 0 has no interface number 0 [ 499.703450][ T9] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 499.718714][ T9] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 499.744725][ T9] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 499.756648][ T9706] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 499.777357][ T9] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 499.801580][ T9] usb 2-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 499.813497][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.824295][ T5918] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 499.854995][ T9] usb 2-1: config 0 descriptor?? [ 499.895843][ T9] hub 2-1:0.3: bad descriptor, ignoring hub [ 499.901841][ T9] hub 2-1:0.3: probe with driver hub failed with error -5 [ 499.913962][ T9706] usb 6-1: device descriptor read/64, error -71 [ 499.933114][ T9] sierra 2-1:0.3: Sierra USB modem converter detected [ 499.967829][T10607] tmpfs: Unknown parameter 'quo' [ 500.001859][ T5918] usb 3-1: unable to get BOS descriptor or descriptor too short [ 500.026949][ T5918] usb 3-1: not running at top speed; connect to a high speed hub [ 500.046495][ T5918] usb 3-1: config 2 has an invalid interface number: 8 but max is 0 [ 500.054788][ T5918] usb 3-1: config 2 has no interface number 0 [ 500.074137][ T5918] usb 3-1: New USB device found, idVendor=056c, idProduct=8007, bcdDevice=5f.aa [ 500.083760][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.123894][ T5918] usb 3-1: Product: syz [ 500.128362][ T5918] usb 3-1: Manufacturer: syz [ 500.133003][ T5918] usb 3-1: SerialNumber: syz [ 500.154205][ T9706] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 500.294136][ T9706] usb 6-1: device descriptor read/64, error -71 [ 500.382225][ T6004] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 500.427946][ T9706] usb usb6-port1: attempt power cycle [ 501.407345][ T6004] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 501.444027][ T9706] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 501.461439][ T6004] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 501.473708][ T6004] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 501.494682][ T9706] usb 6-1: device descriptor read/8, error -71 [ 501.511072][ T6004] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 501.541409][ T6004] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 501.556340][ T6004] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 501.568691][ T6004] usb 1-1: SerialNumber: syz [ 501.581922][T10613] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 501.592595][T10613] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 501.618871][ T6004] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 501.639706][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.744445][ T9706] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 501.784918][ T9706] usb 6-1: device descriptor read/8, error -71 [ 501.822914][ T6004] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 501.870218][ T6004] usb 1-1: USB disconnect, device number 47 [ 501.904471][ T9706] usb usb6-port1: unable to enumerate USB device [ 502.061878][ T9] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 502.110427][ T9] usb 2-1: Sierra USB modem converter now attached to ttyUSB1 [ 502.149986][ T9] usb 2-1: USB disconnect, device number 30 [ 502.174929][ T9] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 502.189704][ T9] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 502.204521][ T9] sierra 2-1:0.3: device disconnected [ 502.741781][ T5918] belkin_sa 3-1:2.8: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 502.752140][ T5918] usb 3-1: bcdDevice: 5faa, bfc: 0 [ 502.763351][ T9] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 502.784374][ T5918] usb 3-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 502.868325][ T5918] usb 3-1: USB disconnect, device number 39 [ 502.887414][ T5918] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 502.899403][ T5918] belkin_sa 3-1:2.8: device disconnected [ 502.914729][ T9] usb 2-1: device descriptor read/64, error -71 [ 503.185507][ T9] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 503.384776][ T9] usb 2-1: device descriptor read/64, error -71 [ 503.531539][ T9] usb usb2-port1: attempt power cycle [ 503.944145][ T9] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 503.998117][ T9] usb 2-1: device descriptor read/8, error -71 [ 504.260383][T10651] netlink: 'syz.3.1244': attribute type 4 has an invalid length. [ 505.052675][ T9] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 505.107595][ T9] usb 2-1: device descriptor read/8, error -71 [ 505.173413][T10655] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 505.198992][T10655] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 505.277017][ T9] usb usb2-port1: unable to enumerate USB device [ 506.256173][T10670] netlink: 'syz.1.1248': attribute type 1 has an invalid length. [ 506.442515][T10670] bond2: entered promiscuous mode [ 506.448791][T10670] 8021q: adding VLAN 0 to HW filter on device bond2 [ 506.555802][T10678] 8021q: adding VLAN 0 to HW filter on device bond3 [ 506.567036][T10678] bond2: (slave bond3): making interface the new active one [ 506.575266][T10678] bond3: entered promiscuous mode [ 506.583501][T10678] bond2: (slave bond3): Enslaving as an active interface with an up link [ 506.669205][T10678] 8021q: adding VLAN 0 to HW filter on device bond4 [ 506.690417][T10678] bond2: (slave bond4): Enslaving as a backup interface with an up link [ 506.768605][T10678] 8021q: adding VLAN 0 to HW filter on device bond5 [ 506.778598][T10678] bond2: (slave bond5): Enslaving as a backup interface with an up link [ 506.831797][T10678] 8021q: adding VLAN 0 to HW filter on device bond6 [ 506.862590][T10678] bond2: (slave bond6): Enslaving as a backup interface with an up link [ 506.901184][T10678] 8021q: adding VLAN 0 to HW filter on device bond7 [ 506.910552][T10678] bond2: (slave bond7): Enslaving as a backup interface with an up link [ 506.956532][T10678] 8021q: adding VLAN 0 to HW filter on device bond8 [ 506.964398][ T5933] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 506.985425][T10678] bond2: (slave bond8): Enslaving as a backup interface with an up link [ 507.095500][T10678] 8021q: adding VLAN 0 to HW filter on device bond9 [ 507.105722][T10678] bond2: (slave bond9): Enslaving as a backup interface with an up link [ 507.126697][T10699] syzkaller1: entered promiscuous mode [ 507.134223][T10699] syzkaller1: entered allmulticast mode [ 507.145224][ T5933] usb 3-1: device descriptor read/64, error -71 [ 507.238830][T10705] ip6t_srh: unknown srh invflags 4000 [ 507.403931][ T5933] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 507.447939][T10711] xt_CT: No such helper "syz0" [ 507.554243][ T5933] usb 3-1: device descriptor read/64, error -71 [ 507.685115][ T5933] usb usb3-port1: attempt power cycle [ 508.059761][ T5933] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 508.110281][ T5933] usb 3-1: device descriptor read/8, error -71 [ 509.078187][ T5933] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 509.149730][ T5933] usb 3-1: device descriptor read/8, error -71 [ 509.316601][ T5933] usb usb3-port1: unable to enumerate USB device [ 509.740617][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 509.753493][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 509.761816][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 509.771295][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 509.781072][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 509.800398][T10740] netlink: 'syz.5.1266': attribute type 4 has an invalid length. [ 509.943046][T10747] lo speed is unknown, defaulting to 1000 [ 510.106530][T10752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1269'. [ 510.243105][T10755] syz.2.1270: attempt to access beyond end of device [ 510.243105][T10755] nbd2: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 510.287284][T10755] EXT4-fs (nbd2): unable to read superblock [ 512.757709][ T5847] Bluetooth: hci2: command tx timeout [ 513.541544][T10783] netlink: 1276 bytes leftover after parsing attributes in process `syz.2.1275'. [ 513.543469][T10747] chnl_net:caif_netlink_parms(): no params data found [ 513.779497][T10791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.846936][T10791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.994859][ T5933] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 514.067399][T10747] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.084750][T10747] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.103046][T10747] bridge_slave_0: entered allmulticast mode [ 514.118562][T10747] bridge_slave_0: entered promiscuous mode [ 514.135388][T10747] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.143023][T10747] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.158997][T10747] bridge_slave_1: entered allmulticast mode [ 514.182877][T10747] bridge_slave_1: entered promiscuous mode [ 514.296293][T10801] netlink: 755 bytes leftover after parsing attributes in process `syz.1.1279'. [ 514.333921][T10747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.391337][T10747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.828726][T10747] team0: Port device team_slave_0 added [ 514.835316][ T5847] Bluetooth: hci2: command tx timeout [ 514.868257][T10808] tipc: Started in network mode [ 514.876286][T10808] tipc: Node identity 12bbf2d4d636, cluster identity 4711 [ 514.984468][T10808] tipc: Enabled bearer , priority 0 [ 515.033479][T10747] team0: Port device team_slave_1 added [ 515.053297][T10816] syzkaller0: entered promiscuous mode [ 515.074302][T10816] syzkaller0: entered allmulticast mode [ 515.158570][T10747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.169041][T10747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.243929][T10747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.330999][T10818] tipc: Resetting bearer [ 515.378088][T10747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.389153][T10747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.420283][T10747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.515229][T10807] tipc: Resetting bearer [ 515.525843][T10827] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 515.661079][T10827] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 515.798283][T10807] tipc: Disabling bearer [ 515.844179][ T5933] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 515.871420][T10828] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1286'. [ 515.911318][T10747] hsr_slave_0: entered promiscuous mode [ 515.920256][T10747] hsr_slave_1: entered promiscuous mode [ 515.932034][T10747] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 515.948182][T10747] Cannot create hsr debugfs directory [ 516.009978][ T5933] usb 2-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 516.030429][ T5933] usb 2-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.058110][ T5933] usb 2-1: config 0 interface 0 has no altsetting 0 [ 516.078385][ T5933] usb 2-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 516.101893][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.125207][ T5933] usb 2-1: config 0 descriptor?? [ 516.539770][T10828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.590879][T10828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.944006][ T5847] Bluetooth: hci2: command tx timeout [ 517.347499][ T5933] uclogic 0003:5543:0064.0012: item fetching failed at offset 5/7 [ 517.384818][ T5933] uclogic 0003:5543:0064.0012: parse failed [ 517.413979][ T5933] uclogic 0003:5543:0064.0012: probe with driver uclogic failed with error -22 [ 517.590357][ T43] usb 2-1: USB disconnect, device number 35 [ 518.009798][T10747] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 518.081664][T10747] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 518.094274][T10747] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 518.106465][T10747] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 518.342491][T10857] vivid-007: ================= START STATUS ================= [ 518.387562][T10857] vivid-007: Generate PTS: true [ 518.446012][T10857] vivid-007: Generate SCR: true [ 518.481638][T10857] tpg source WxH: 320x240 (Y'CbCr) [ 518.504585][T10857] tpg field: 1 [ 518.508039][T10857] tpg crop: (0,0)/320x240 [ 518.561017][T10857] tpg compose: (0,0)/320x240 [ 518.651108][T10857] tpg colorspace: 8 [ 518.670764][T10747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.705142][T10857] tpg transfer function: 0/0 [ 518.732928][T10857] tpg Y'CbCr encoding: 0/0 [ 518.746646][T10747] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.774575][T10857] tpg quantization: 0/0 [ 518.810748][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.817929][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.829991][T10857] tpg RGB range: 0/2 [ 518.867861][T10857] vivid-007: ================== END STATUS ================== [ 518.883375][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.890641][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.994577][ T5847] Bluetooth: hci2: command tx timeout [ 519.154973][T10864] netlink: 'syz.1.1294': attribute type 3 has an invalid length. [ 520.249218][T10747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 520.729497][T10890] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1299'. [ 521.483967][ T9706] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 522.173951][ T9706] usb 3-1: Using ep0 maxpacket: 32 [ 522.234026][ T9706] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 522.256045][ T9706] usb 3-1: config 0 has no interface number 0 [ 522.295951][ T9706] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 522.305421][ T9706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.339355][ T9706] usb 3-1: Product: syz [ 522.354872][ T9706] usb 3-1: Manufacturer: syz [ 522.371854][ T9706] usb 3-1: SerialNumber: syz [ 522.400745][ T9706] usb 3-1: config 0 descriptor?? [ 522.422946][ T9706] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 522.552097][T10747] veth0_vlan: entered promiscuous mode [ 522.617567][T10747] veth1_vlan: entered promiscuous mode [ 522.622902][ T9706] usb 3-1: qt2_attach - failed to power on unit: -71 [ 522.633005][ T9706] quatech2 3-1:0.51: probe with driver quatech2 failed with error -71 [ 522.693042][ T9706] usb 3-1: USB disconnect, device number 44 [ 522.760769][T10747] veth0_macvtap: entered promiscuous mode [ 522.793331][T10747] veth1_macvtap: entered promiscuous mode [ 522.885220][T10747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 522.929556][T10747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 522.947905][T10747] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.981260][T10747] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.007396][T10747] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.022319][T10747] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.049353][T10926] 9pnet_fd: Insufficient options for proto=fd [ 523.060160][T10926] netlink: 'syz.1.1306': attribute type 2 has an invalid length. [ 523.080571][T10926] netlink: 1184 bytes leftover after parsing attributes in process `syz.1.1306'. [ 525.054867][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.062969][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.305286][ T6047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.317140][ T6047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.313991][ T6004] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 526.399635][T10945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1311'. [ 526.520181][ T6004] usb 2-1: unable to get BOS descriptor or descriptor too short [ 526.535625][ T6004] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 526.556918][ T6004] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 526.574362][ T6004] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.596419][ T6004] usb 2-1: Product: syz [ 526.602987][ T6004] usb 2-1: Manufacturer: syz [ 526.607935][ T6004] usb 2-1: SerialNumber: syz [ 526.677255][T10951] all (unregistering): Released all slaves [ 526.963694][T10961] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 526.982434][T10961] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.992521][T10961] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.962962][ T6004] usb 2-1: reset high-speed USB device number 36 using dummy_hcd [ 528.315077][ T9706] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 528.454603][ T9706] usb 1-1: device descriptor read/64, error -71 [ 529.016594][ T9706] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 529.184023][ T9706] usb 1-1: device descriptor read/64, error -71 [ 529.318528][ T5842] Bluetooth: hci5: command 0x0406 tx timeout [ 529.354355][ T6004] usb 2-1: USB disconnect, device number 36 [ 529.377841][ T9706] usb usb1-port1: attempt power cycle [ 529.481978][T10996] netlink: 'syz.2.1328': attribute type 10 has an invalid length. [ 529.510939][T10996] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 529.573350][T10998] netlink: 'syz.5.1329': attribute type 39 has an invalid length. [ 529.592725][ T2154] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 529.760494][ T2154] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 529.786646][ T2154] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.871529][ T2154] usb 7-1: config 0 descriptor?? [ 529.884169][ T9706] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 529.911338][T11007] bond0: (slave dummy0): Releasing backup interface [ 529.923631][ T9706] usb 1-1: device descriptor read/8, error -71 [ 530.658366][T11007] bridge_slave_0: left allmulticast mode [ 530.680875][T11007] bridge_slave_0: left promiscuous mode [ 530.690487][T11007] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.734146][ T9706] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 530.782858][T11007] bridge_slave_1: left allmulticast mode [ 530.818032][T11007] bridge_slave_1: left promiscuous mode [ 530.828100][T11007] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.909860][T11007] bond0: (slave bond_slave_0): Releasing backup interface [ 530.953761][T11007] bond0: (slave bond_slave_1): Releasing backup interface [ 530.987055][ T9706] usb 1-1: device not accepting address 52, error -71 [ 531.038167][ T9706] usb usb1-port1: unable to enumerate USB device [ 531.192068][T11007] team0: Port device team_slave_0 removed [ 531.255314][T11007] team0: Port device team_slave_1 removed [ 531.281100][T11007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 531.308954][T11007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 531.342888][T11007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 531.410816][T11007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 531.803023][ T10] syz!: Port: 1 Link DOWN [ 533.354755][ T9706] usb 3-1: new low-speed USB device number 45 using dummy_hcd [ 533.395099][T11044] mac80211_hwsim hwsim14 wlan1: entered allmulticast mode [ 533.707776][ T2154] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 533.792410][ T2154] asix 7-1:0.0: probe with driver asix failed with error -71 [ 533.910109][ T2154] usb 7-1: USB disconnect, device number 2 [ 534.056139][T11059] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1343'. [ 534.111541][T11063] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1344'. [ 534.181353][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 534.181373][ T30] audit: type=1326 audit(1754849342.954:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11062 comm="syz.2.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdce258ebe9 code=0x7ffc0000 [ 534.215871][T11063] netlink: 'syz.2.1344': attribute type 1 has an invalid length. [ 534.223680][T11063] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1344'. [ 534.283684][ T30] audit: type=1326 audit(1754849342.954:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11062 comm="syz.2.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdce258d69f code=0x7ffc0000 [ 534.323990][ T30] audit: type=1326 audit(1754849342.954:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11062 comm="syz.2.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdce258ebe9 code=0x7ffc0000 [ 534.415963][ T30] audit: type=1326 audit(1754849342.954:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11062 comm="syz.2.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdce258d550 code=0x7ffc0000 [ 534.462629][ T30] audit: type=1326 audit(1754849342.954:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11062 comm="syz.2.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdce258ebe9 code=0x7ffc0000 [ 534.487594][ T30] audit: type=1326 audit(1754849342.954:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11062 comm="syz.2.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdce258ebe9 code=0x7ffc0000 [ 534.552345][T11083] netlink: 'syz.0.1350': attribute type 10 has an invalid length. [ 534.563505][T11083] hsr0: entered promiscuous mode [ 534.572721][T11083] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 534.615027][ T30] audit: type=1326 audit(1754849342.984:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11062 comm="syz.2.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdce258ebe9 code=0x7ffc0000 [ 534.638581][T11083] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 534.662120][T11083] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 534.669180][ T30] audit: type=1326 audit(1754849342.984:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11062 comm="syz.2.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdce258ebe9 code=0x7ffc0000 [ 534.772151][ T30] audit: type=1326 audit(1754849342.984:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11062 comm="syz.2.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdce258ebe9 code=0x7ffc0000 [ 534.848307][ T30] audit: type=1326 audit(1754849342.984:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11062 comm="syz.2.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdce258d550 code=0x7ffc0000 [ 536.083948][T11101] x_tables: unsorted entry at hook 2 [ 536.662890][T11101] can0: slcan on ttyS3. [ 536.815676][ T2154] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 536.836678][T11095] can0 (unregistered): slcan off ttyS3. [ 536.986261][ T2154] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.006476][ T2154] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 537.024078][ T2154] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.062719][ T2154] usb 2-1: Product: syz [ 537.068390][ T2154] usb 2-1: Manufacturer: syz [ 537.079372][ T2154] usb 2-1: SerialNumber: syz [ 537.096426][ T2154] usb 2-1: config 0 descriptor?? [ 537.104156][ T2154] hub 2-1:0.0: bad descriptor, ignoring hub [ 537.110127][ T2154] hub 2-1:0.0: probe with driver hub failed with error -5 [ 537.117370][ T5933] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 537.130135][ T2154] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 537.165501][ T2154] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 537.273917][ T5933] usb 7-1: Using ep0 maxpacket: 32 [ 537.281952][ T5933] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 537.291757][ T5933] usb 7-1: config 0 has no interface number 0 [ 537.300916][ T5933] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 537.320708][ T5933] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.330054][ T5933] usb 7-1: Product: syz [ 537.341168][ T5933] usb 7-1: Manufacturer: syz [ 537.426217][ T5933] usb 7-1: SerialNumber: syz [ 537.446749][ T5933] usb 7-1: config 0 descriptor?? [ 537.457473][ T5933] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 537.674623][ T5933] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 537.804589][ T9706] IPVS: starting estimator thread 0... [ 537.824604][T11116] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 537.913302][ T5933] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 537.935038][T11119] IPVS: using max 27 ests per chain, 64800 per kthread [ 538.250597][T11124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.316402][T11124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.414322][ T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 538.436067][T11124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.499408][T11124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.524368][ T5933] usb 2-1: USB disconnect, device number 37 [ 538.584064][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 538.601330][ T10] usb 6-1: config 8 has an invalid interface number: 206 but max is 0 [ 538.705340][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 538.713366][ T2154] usb 7-1: USB disconnect, device number 3 [ 538.722177][ T2154] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 538.743740][ T2154] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 538.779793][ T2154] quatech2 7-1:0.51: device disconnected [ 538.814130][ T5933] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 538.907356][ T10] usb 6-1: config 8 has no interface number 0 [ 538.923789][ T10] usb 6-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 538.941561][ T10] usb 6-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 538.953356][ T10] usb 6-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 538.972019][ T10] usb 6-1: config 8 interface 206 has no altsetting 0 [ 539.003136][ T10] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 539.134354][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.146680][ T10] usb 6-1: Product: syz [ 539.150998][ T10] usb 6-1: Manufacturer: syz [ 539.293948][ T5933] usb 1-1: Using ep0 maxpacket: 32 [ 539.309449][ T5933] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 539.322870][ T10] usb 6-1: SerialNumber: syz [ 539.322898][ T5933] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 539.339044][ T5933] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 539.365053][ T5933] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 539.374764][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.383126][ T5933] usb 1-1: Product: syz [ 539.568068][T11136] : entered promiscuous mode [ 540.197959][ T5933] usb 1-1: Manufacturer: Ⰹ [ 540.202692][ T5933] usb 1-1: SerialNumber: syz [ 540.417323][ T10] garmin_gps 6-1:8.206: Garmin GPS usb/tty converter detected [ 540.464310][ T10] usb 6-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 540.493600][ T10] usb 6-1: USB disconnect, device number 17 [ 540.526313][ T10] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 540.531308][ T5933] cdc_ncm 1-1:1.0: bind() failure [ 540.559425][ T5933] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 540.566684][ T10] garmin_gps 6-1:8.206: device disconnected [ 540.570345][ T5933] cdc_ncm 1-1:1.1: bind() failure [ 540.587777][ T5933] usb 1-1: USB disconnect, device number 53 [ 540.694239][ T2154] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 540.896282][ T2154] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.924108][ T2154] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 540.953886][ T2154] usb 7-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 540.995290][ T2154] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.036486][ T2154] usb 7-1: config 0 descriptor?? [ 541.192679][T11139] 9pnet_fd: p9_fd_create_tcp (11139): problem connecting socket to 127.0.0.1 [ 541.364289][ T5933] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 541.657801][ T2154] aquacomputer_d5next 0003:0C70:F014.0013: hidraw0: USB HID v0.00 Device [HID 0c70:f014] on usb-dummy_hcd.6-1/input0 [ 541.734898][ T5933] usb 3-1: Using ep0 maxpacket: 32 [ 541.802347][T11173] xt_hashlimit: max too large, truncated to 1048576 [ 542.095196][ T5933] usb 3-1: config 1 has an invalid interface number: 233 but max is 0 [ 542.432588][ T5933] usb 3-1: config 1 has no interface number 0 [ 542.490691][ T5933] usb 3-1: config 1 interface 233 altsetting 250 bulk endpoint 0x9 has invalid maxpacket 8 [ 542.521346][ T5933] usb 3-1: config 1 interface 233 has no altsetting 0 [ 542.660992][T11179] syz.0.1375: attempt to access beyond end of device [ 542.660992][T11179] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 542.723471][ T5933] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=34.ac [ 542.733313][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.741946][ T5933] usb 3-1: Product: syz [ 542.746237][ T5933] usb 3-1: Manufacturer: syz [ 542.750988][ T5933] usb 3-1: SerialNumber: syz [ 542.760278][T11159] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 542.952297][ T5957] usb 7-1: reset high-speed USB device number 4 using dummy_hcd [ 543.274319][T11188] lo speed is unknown, defaulting to 1000 [ 543.498919][T11182] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nullb0": -EINTR [ 543.796756][ T5933] imon_raw 3-1:1.233: IR endpoint missing [ 543.820681][ T5933] usb 3-1: USB disconnect, device number 46 [ 544.001289][T11196] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1377'. [ 544.955971][ T5957] usb 7-1: device descriptor read/64, error -71 [ 545.075391][T11205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.088976][T11205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.415967][ T5957] usb 7-1: reset high-speed USB device number 4 using dummy_hcd [ 545.435940][ T5957] usb 7-1: device reset changed ep0 maxpacket size! [ 545.458001][ T2154] usb 7-1: USB disconnect, device number 4 [ 546.230342][ T10] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 546.238159][ T9706] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 546.287516][T11216] IPVS: set_ctl: invalid protocol: 255 172.20.20.187:20004 [ 546.334542][ T2154] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 546.494053][ T2154] usb 7-1: Using ep0 maxpacket: 16 [ 546.505703][ T2154] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 546.521277][ T2154] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 546.532662][ T2154] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 546.550444][ T2154] usb 7-1: config 0 interface 0 has no altsetting 0 [ 546.555268][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 546.561352][ T2154] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 546.580384][ T9706] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 546.581252][ T2154] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.590933][ T9706] usb 6-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 546.599155][ T2154] usb 7-1: Product: syz [ 546.609157][ T9706] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.618871][ T2154] usb 7-1: Manufacturer: syz [ 546.630594][ T2154] usb 7-1: SerialNumber: syz [ 546.631831][ T9706] usb 6-1: config 0 descriptor?? [ 546.642668][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 546.643173][T11221] ref_ctr increment failed for inode: 0x60b offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888026dc6400 [ 546.652311][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.680658][ T9706] usb 6-1: bad CDC descriptors [ 546.684195][ T2154] usb 7-1: config 0 descriptor?? [ 546.688131][ T10] usb 3-1: Product: syz [ 546.699670][ T10] usb 3-1: Manufacturer: syz [ 546.704535][ T10] usb 3-1: SerialNumber: syz [ 546.713364][ T10] usb 3-1: config 0 descriptor?? [ 546.742488][T11222] netlink: 5636 bytes leftover after parsing attributes in process `syz.0.1385'. [ 546.868842][ T2154] usb 7-1: Can not set alternate setting to 1, error: -71 [ 546.886243][ T9706] usb 6-1: USB disconnect, device number 18 [ 546.888945][ T2154] synaptics_usb 7-1:0.0: probe with driver synaptics_usb failed with error -71 [ 546.921529][ T10] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 546.927877][ T2154] usb 7-1: USB disconnect, device number 5 [ 547.520311][T11234] binder: 11233:11234 ioctl 80044801 200000000000 returned -22 [ 547.530965][T11209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.540661][T11209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.589677][T11234] bridge1: entered promiscuous mode [ 547.677756][ T10] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 547.698933][T11234] bridge1: entered allmulticast mode [ 547.702376][ T10] usb 3-1: USB disconnect, device number 47 [ 547.794415][ T6004] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 548.567981][ T9] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 548.632034][ T6004] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.775888][ T6004] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 548.786054][ T6004] usb 6-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 548.795510][ T6004] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.912119][ T6004] usb 6-1: config 0 descriptor?? [ 549.046282][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.149676][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 549.179126][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 549.313978][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 549.326885][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.366778][ T9] usb 2-1: config 0 descriptor?? [ 549.618340][T11236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.643001][T11236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.918396][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 549.918490][ T30] audit: type=1326 audit(1754849358.664:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11266 comm="syz.2.1399" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdce258ebe9 code=0x0 [ 552.870808][ T6004] usbhid 6-1:0.0: can't add hid device: -71 [ 552.877080][ T6004] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 552.892377][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 552.898543][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 552.910189][ T6004] usb 6-1: USB disconnect, device number 19 [ 553.071478][ T9] usb 2-1: USB disconnect, device number 38 [ 555.474291][T11310] FAULT_INJECTION: forcing a failure. [ 555.474291][T11310] name failslab, interval 1, probability 0, space 0, times 1 [ 555.534886][T11310] CPU: 0 UID: 0 PID: 11310 Comm: syz.0.1409 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 555.534918][T11310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 555.534931][T11310] Call Trace: [ 555.534939][T11310] [ 555.534948][T11310] dump_stack_lvl+0x189/0x250 [ 555.534978][T11310] ? __pfx____ratelimit+0x10/0x10 [ 555.535000][T11310] ? __pfx_dump_stack_lvl+0x10/0x10 [ 555.535023][T11310] ? __pfx__printk+0x10/0x10 [ 555.535054][T11310] ? __lock_acquire+0xab9/0xd20 [ 555.535086][T11310] should_fail_ex+0x414/0x560 [ 555.535115][T11310] should_failslab+0xa8/0x100 [ 555.535141][T11310] kmem_cache_alloc_noprof+0x73/0x3c0 [ 555.535161][T11310] ? skb_clone+0x212/0x3a0 [ 555.535186][T11310] skb_clone+0x212/0x3a0 [ 555.535203][T11310] ? ip6_finish_output2+0x3d3/0x16a0 [ 555.535236][T11310] ip6_finish_output2+0x3e4/0x16a0 [ 555.535276][T11310] ? skb_gso_transport_seglen+0x33d/0x520 [ 555.535312][T11310] ? __pfx_ip6_finish_output2+0x10/0x10 [ 555.535343][T11310] ? skb_gso_validate_network_len+0x12f/0x2a0 [ 555.535381][T11310] ? ip6_finish_output+0x1e5/0x4e0 [ 555.535407][T11310] ? ip6_send_skb+0x10f/0x390 [ 555.535437][T11310] ip6_send_skb+0x1d5/0x390 [ 555.535470][T11310] udp_v6_send_skb+0xc17/0x1830 [ 555.535522][T11310] udpv6_sendmsg+0x1bba/0x24c0 [ 555.535564][T11310] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 555.535593][T11310] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 555.535640][T11310] ? smack_socket_sendmsg+0x1a7/0x520 [ 555.535683][T11310] ? __might_fault+0xb0/0x130 [ 555.535706][T11310] ? _parse_integer_limit+0x1ae/0x1f0 [ 555.535749][T11310] ? inet_send_prepare+0x5c/0x270 [ 555.535778][T11310] ? inet6_sendmsg+0xe4/0x120 [ 555.535805][T11310] __sock_sendmsg+0xe5/0x270 [ 555.535833][T11310] sock_write_iter+0x258/0x330 [ 555.535859][T11310] ? __pfx_sock_write_iter+0x10/0x10 [ 555.535896][T11310] ? bpf_lsm_file_permission+0x9/0x20 [ 555.535917][T11310] ? security_file_permission+0x75/0x290 [ 555.535952][T11310] vfs_write+0x54b/0xa90 [ 555.535978][T11310] ? __pfx_sock_write_iter+0x10/0x10 [ 555.536000][T11310] ? __pfx_vfs_write+0x10/0x10 [ 555.536032][T11310] ? __fget_files+0x2a/0x420 [ 555.536064][T11310] ksys_write+0x145/0x250 [ 555.536087][T11310] ? __pfx_ksys_write+0x10/0x10 [ 555.536102][T11310] ? rcu_is_watching+0x15/0xb0 [ 555.536130][T11310] ? do_syscall_64+0xbe/0x3b0 [ 555.536155][T11310] do_syscall_64+0xfa/0x3b0 [ 555.536174][T11310] ? lockdep_hardirqs_on+0x9c/0x150 [ 555.536195][T11310] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.536214][T11310] ? clear_bhb_loop+0x60/0xb0 [ 555.536238][T11310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.536256][T11310] RIP: 0033:0x7f5d7598ebe9 [ 555.536275][T11310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 555.536292][T11310] RSP: 002b:00007f5d768a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 555.536315][T11310] RAX: ffffffffffffffda RBX: 00007f5d75bb5fa0 RCX: 00007f5d7598ebe9 [ 555.536330][T11310] RDX: 0000000000003f80 RSI: 0000200000000200 RDI: 0000000000000003 [ 555.536343][T11310] RBP: 00007f5d768a1090 R08: 0000000000000000 R09: 0000000000000000 [ 555.536356][T11310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 555.536367][T11310] R13: 00007f5d75bb6038 R14: 00007f5d75bb5fa0 R15: 00007ffe6fcae648 [ 555.536401][T11310] [ 555.878849][ T2154] kernel write not supported for file /64/attr/exec (pid: 2154 comm: kworker/1:2) [ 558.884379][T11341] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 558.904355][T11342] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 559.496557][T11348] netlink: 'syz.5.1420': attribute type 1 has an invalid length. [ 559.567266][T11348] 8021q: adding VLAN 0 to HW filter on device bond1 [ 559.604248][T11352] vlan2: entered allmulticast mode [ 559.609455][T11352] veth1: entered allmulticast mode [ 559.719583][T11352] bond1: (slave vlan2): making interface the new active one [ 559.733983][T11352] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 559.920083][T11362] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1424'. [ 559.943975][ T6004] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 560.823927][ T6004] usb 3-1: Using ep0 maxpacket: 16 [ 560.830261][ T6004] usb 3-1: too many configurations: 124, using maximum allowed: 8 [ 560.846108][ T6004] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 560.856960][ T6004] usb 3-1: can't read configurations, error -61 [ 561.170861][ T6004] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 561.553991][ T6004] usb 3-1: Using ep0 maxpacket: 16 [ 561.569538][ T6004] usb 3-1: too many configurations: 124, using maximum allowed: 8 [ 561.592094][ T6004] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 561.616385][ T6004] usb 3-1: can't read configurations, error -61 [ 561.628552][ T6004] usb usb3-port1: attempt power cycle [ 562.493959][ T6004] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 562.553372][ T6004] usb 3-1: device descriptor read/8, error -71 [ 563.057458][T11392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1429'. [ 563.080349][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.073523][T11404] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1431'. [ 564.918227][ T30] audit: type=1326 audit(1754849373.694:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11407 comm="syz.0.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d7598ebe9 code=0x7ffc0000 [ 564.965894][ T30] audit: type=1326 audit(1754849373.694:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11407 comm="syz.0.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d7598ebe9 code=0x7ffc0000 [ 564.988771][ T30] audit: type=1326 audit(1754849373.724:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11407 comm="syz.0.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5d7598d550 code=0x7ffc0000 [ 565.084420][ T30] audit: type=1326 audit(1754849373.724:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11407 comm="syz.0.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5d7598e7eb code=0x7ffc0000 [ 565.164316][ T30] audit: type=1326 audit(1754849373.724:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11407 comm="syz.0.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5d7598e7eb code=0x7ffc0000 [ 565.203930][ T10] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 565.214933][ T30] audit: type=1326 audit(1754849373.724:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11407 comm="syz.0.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5d7598e7eb code=0x7ffc0000 [ 565.480194][ T30] audit: type=1326 audit(1754849373.724:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11407 comm="syz.0.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5d7598e7eb code=0x7ffc0000 [ 565.509563][ T30] audit: type=1326 audit(1754849373.854:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11407 comm="syz.0.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5d7598e7eb code=0x7ffc0000 [ 565.511799][T11419] vxcan1: entered allmulticast mode [ 565.538363][ T30] audit: type=1326 audit(1754849373.924:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11407 comm="syz.0.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5d7598e7eb code=0x7ffc0000 [ 566.430207][ T30] audit: type=1326 audit(1754849373.994:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11407 comm="syz.0.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5d7598e7eb code=0x7ffc0000 [ 566.486839][ T10] usb 1-1: config 0 has an invalid interface number: 241 but max is 0 [ 566.499124][ T10] usb 1-1: config 0 has no interface number 0 [ 566.526093][ T10] usb 1-1: New USB device found, idVendor=ea6a, idProduct=daa1, bcdDevice=f1.60 [ 566.625471][T11425] binfmt_misc: register: failed to install interpreter file ./file0 [ 566.819194][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.365965][ T10] usb 1-1: Product: syz [ 567.370256][ T10] usb 1-1: Manufacturer: syz [ 567.374954][ T10] usb 1-1: SerialNumber: syz [ 567.410979][ T10] usb 1-1: config 0 descriptor?? [ 567.420223][ T10] usb 1-1: bad CDC descriptors [ 567.627447][ T10] usb 1-1: USB disconnect, device number 54 [ 568.806399][T11441] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1443'. [ 569.586590][ T10] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 569.745756][ T5842] Bluetooth: hci3: command 0x1003 tx timeout [ 569.754216][ T5847] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 570.124051][ T10] usb 3-1: device descriptor read/64, error -71 [ 570.513989][ T10] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 570.604906][ T5957] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 570.654199][ T10] usb 3-1: device descriptor read/64, error -71 [ 570.764123][ T5957] usb 2-1: Using ep0 maxpacket: 8 [ 570.774177][ T10] usb usb3-port1: attempt power cycle [ 570.776596][ T5957] usb 2-1: config 0 has an invalid interface number: 176 but max is 0 [ 570.792824][ T5957] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 570.808446][ T5957] usb 2-1: config 0 has no interface number 0 [ 570.821405][ T5957] usb 2-1: config 0 interface 176 altsetting 0 bulk endpoint 0xB has invalid maxpacket 32 [ 570.833547][ T5957] usb 2-1: config 0 interface 176 altsetting 0 endpoint 0xC has invalid maxpacket 1536, setting to 1024 [ 570.845355][ T5957] usb 2-1: config 0 interface 176 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 570.862073][ T5957] usb 2-1: config 0 interface 176 altsetting 0 has an endpoint descriptor with address 0x96, changing to 0x86 [ 570.874302][ T5957] usb 2-1: config 0 interface 176 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 570.894130][ T5957] usb 2-1: config 0 interface 176 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 570.925243][ T5957] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice=c1.ab [ 570.940180][ T5957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.958789][ T5957] usb 2-1: Product: syz [ 570.963023][ T5957] usb 2-1: Manufacturer: syz [ 570.974447][ T5957] usb 2-1: SerialNumber: syz [ 570.982929][ T5957] usb 2-1: config 0 descriptor?? [ 570.988988][T11461] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 571.134662][ T10] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 571.204261][ T10] usb 3-1: device descriptor read/8, error -71 [ 571.207398][ T5957] pxrc 2-1:0.176: Could not find endpoint [ 571.240991][ T5957] usb 2-1: USB disconnect, device number 39 [ 571.341163][T11479] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 571.475301][ T10] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 571.494826][ T10] usb 3-1: device descriptor read/8, error -71 [ 571.533928][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 571.614142][ T6004] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 571.622386][ T10] usb usb3-port1: unable to enumerate USB device [ 571.704089][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 571.714147][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 571.725604][ T9] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 571.737307][ T9] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 571.748520][ T9] usb 7-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 571.762029][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 571.769101][ T9] usb 7-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 571.778679][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.791571][ T9] usb 7-1: config 0 descriptor?? [ 571.814643][ T6004] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 571.822297][ T6004] usb 1-1: can't read configurations, error -61 [ 571.993992][ T6004] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 572.166551][ T6004] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 572.200985][ T6004] usb 1-1: can't read configurations, error -61 [ 572.230622][ T6004] usb usb1-port1: attempt power cycle [ 572.316592][ T5957] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 572.323741][ T9] corsair-cpro 0003:1B1C:0C10.0014: item fetching failed at offset 2/5 [ 572.343005][ T9] corsair-cpro 0003:1B1C:0C10.0014: probe with driver corsair-cpro failed with error -22 [ 572.604463][ T6004] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 572.960197][ T9] usb 7-1: USB disconnect, device number 6 [ 572.992659][ T6004] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 573.013504][ T6004] usb 1-1: can't read configurations, error -61 [ 573.154215][ T6004] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 573.198213][ T5957] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 573.200934][ T6004] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 573.219403][ T5957] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 573.230399][ T5957] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 573.247580][ T5957] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 573.248749][ T6004] usb 1-1: can't read configurations, error -61 [ 573.260316][ T5957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.272965][ T5957] usb 2-1: Product: syz [ 573.278486][ T5957] usb 2-1: Manufacturer: syz [ 573.285295][ T5957] usb 2-1: SerialNumber: syz [ 573.291577][ T6004] usb usb1-port1: unable to enumerate USB device [ 573.299777][ T5957] usb 2-1: config 0 descriptor?? [ 573.309662][ T5957] usb-storage 2-1:0.0: USB Mass Storage device detected [ 573.330693][ T5957] usb-storage 2-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 573.516279][ T10] usb 2-1: USB disconnect, device number 40 [ 573.523892][ T9] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 573.567306][ T5933] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 573.611169][T11513] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1465'. [ 573.710170][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 573.718669][ T9] usb 6-1: not running at top speed; connect to a high speed hub [ 573.730024][ T9] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 573.736041][ T5933] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 573.743620][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 573.758912][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.762933][ T5933] usb 3-1: config 0 has no interface number 0 [ 573.773093][ T9] usb 6-1: Product: syz [ 573.773328][ T5933] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 573.787765][ T6004] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 573.787934][ T9] usb 6-1: Manufacturer: 购趤Ϥㄜ袊ꈥ礓婀呮성遀ॡ跁瀳촇比罅믣ﾄ笽苃瘎肢풘픚ꑡ놜琨⻛ᅬ㒛噗븸⡿㒫頚ಬ૮Vᅾ졪ꂈ탹茊뷢ﰂ軳臆 [ 573.803359][ T5933] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 573.837669][ T9] usb 6-1: SerialNumber: syz [ 573.839995][ T5933] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 573.852213][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.860334][ T5933] usb 3-1: Product: syz [ 573.864865][ T5933] usb 3-1: Manufacturer: syz [ 573.869594][ T5933] usb 3-1: SerialNumber: syz [ 573.879427][ T5933] usb 3-1: config 0 descriptor?? [ 573.888974][T11506] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 573.900304][ T5933] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 573.917269][ T5933] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 573.971811][ T6004] usb 7-1: device descriptor read/64, error -71 [ 574.066849][ T9] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 574.126760][ T9] usb 6-1: USB disconnect, device number 20 [ 574.215260][ T6004] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 574.348236][ T9] usb 3-1: USB disconnect, device number 56 [ 574.369196][ T6004] usb 7-1: device descriptor read/64, error -71 [ 574.506119][ T9] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 574.520590][ T9] cyberjack 3-1:0.69: device disconnected [ 574.624363][ T6004] usb usb7-port1: attempt power cycle [ 574.963997][ T6004] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 575.028208][ T6004] usb 7-1: device descriptor read/8, error -71 [ 575.293998][ T6004] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 575.346184][ T6004] usb 7-1: device descriptor read/8, error -71 [ 575.604753][ T6004] usb usb7-port1: unable to enumerate USB device [ 576.513732][ T2154] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 576.823922][ T2154] usb 1-1: Using ep0 maxpacket: 16 [ 577.306213][ T2154] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 577.468567][ T2154] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 577.617499][ T2154] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 577.790353][ T2154] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.019487][ T2154] usb 1-1: Product: syz [ 578.023749][ T2154] usb 1-1: Manufacturer: syz [ 578.059072][ T2154] usb 1-1: SerialNumber: syz [ 578.111355][ T2154] usb 1-1: config 0 descriptor?? [ 578.171797][ T2154] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 578.222604][ T2154] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 578.534458][T11565] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1478'. [ 578.654839][ T2154] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 578.702832][ T2154] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 578.740671][ T2154] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 578.771023][ T2154] em28xx 1-1:0.0: No AC97 audio processor [ 578.819676][ T2154] usb 1-1: USB disconnect, device number 59 [ 578.845327][ T2154] em28xx 1-1:0.0: Disconnecting em28xx [ 578.882599][ T2154] em28xx 1-1:0.0: Freeing device [ 578.958012][ T5933] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 578.973100][T11581] FAULT_INJECTION: forcing a failure. [ 578.973100][T11581] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 579.030421][T11581] CPU: 0 UID: 0 PID: 11581 Comm: syz.5.1483 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 579.030453][T11581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 579.030466][T11581] Call Trace: [ 579.030474][T11581] [ 579.030484][T11581] dump_stack_lvl+0x189/0x250 [ 579.030514][T11581] ? __pfx____ratelimit+0x10/0x10 [ 579.030538][T11581] ? __pfx_dump_stack_lvl+0x10/0x10 [ 579.030570][T11581] ? __pfx__printk+0x10/0x10 [ 579.030595][T11581] ? __might_fault+0xb0/0x130 [ 579.030629][T11581] should_fail_ex+0x414/0x560 [ 579.030657][T11581] _copy_from_user+0x2d/0xb0 [ 579.030684][T11581] do_sock_getsockopt+0x17d/0x450 [ 579.030718][T11581] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 579.030747][T11581] ? do_syscall_64+0x20/0x3b0 [ 579.030768][T11581] ? __fget_files+0x3a0/0x420 [ 579.030790][T11581] ? __fget_files+0x2a/0x420 [ 579.030819][T11581] __x64_sys_getsockopt+0x1a5/0x250 [ 579.030848][T11581] ? do_syscall_64+0x20/0x3b0 [ 579.030872][T11581] ? do_syscall_64+0x20/0x3b0 [ 579.030898][T11581] do_syscall_64+0xfa/0x3b0 [ 579.030918][T11581] ? lockdep_hardirqs_on+0x9c/0x150 [ 579.030939][T11581] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.030960][T11581] ? clear_bhb_loop+0x60/0xb0 [ 579.030986][T11581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.031005][T11581] RIP: 0033:0x7fd77858ebe9 [ 579.031025][T11581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 579.031043][T11581] RSP: 002b:00007fd7767f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 579.031066][T11581] RAX: ffffffffffffffda RBX: 00007fd7787b6090 RCX: 00007fd77858ebe9 [ 579.031081][T11581] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000005 [ 579.031093][T11581] RBP: 00007fd7767f6090 R08: 00002000000004c0 R09: 0000000000000000 [ 579.031105][T11581] R10: 0000200000001f00 R11: 0000000000000246 R12: 0000000000000001 [ 579.031118][T11581] R13: 00007fd7787b6128 R14: 00007fd7787b6090 R15: 00007ffd20654e68 [ 579.031153][T11581] [ 579.451632][ T5933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 579.490363][ T5933] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 579.516899][ T5933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 255, changing to 11 [ 579.719110][ T5933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 580.031565][ T5933] usb 2-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 580.343890][ T5933] usb 2-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 580.353417][ T5933] usb 2-1: Manufacturer: syz [ 580.389355][ T5933] usb 2-1: config 0 descriptor?? [ 580.404959][T11569] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 580.416518][ T5933] smsusb:smsusb_probe: board id=9, interface number 0 [ 580.446081][ T5933] smsusb:siano_media_device_register: media controller created [ 580.704595][ T5933] ------------[ cut here ]------------ [ 580.710225][ T5933] usb 2-1: BOGUS urb xfer, pipe 3 != type 1 [ 580.724669][ T5933] WARNING: CPU: 1 PID: 5933 at drivers/usb/core/urb.c:504 usb_submit_urb+0xc82/0x1890 [ 580.734359][ T5933] Modules linked in: [ 580.738762][ T5933] CPU: 1 UID: 0 PID: 5933 Comm: kworker/1:5 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 580.749006][ T5933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 580.760913][ T5933] Workqueue: usb_hub_wq hub_event [ 580.766895][ T5933] RIP: 0010:usb_submit_urb+0xc82/0x1890 [ 580.772515][ T5933] Code: 89 e0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 6d 08 00 00 45 8b 04 24 48 c7 c7 e0 5d 33 8c 4c 89 f6 4c 89 fa e8 ef 4b 6b fa 90 <0f> 0b 90 90 44 0f b6 64 24 48 4c 89 e7 48 c7 c6 b0 f6 dc 8e e8 b5 [ 580.793930][ T5933] RSP: 0018:ffffc900046f6ad0 EFLAGS: 00010246 [ 580.800211][ T5933] RAX: ff8f62b0cd7d4400 RBX: ffff888074cbb200 RCX: 0000000000100000 [ 580.808380][ T5933] RDX: ffffc900184f3000 RSI: 000000000002b0cd RDI: 000000000002b0ce [ 580.816610][ T5933] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 580.824745][ T5933] R10: dffffc0000000000 R11: fffffbfff1bfaa6c R12: ffffffff8c335bcc [ 580.832846][ T5933] R13: dffffc0000000000 R14: ffffffff8c33c6c0 R15: ffff888032c2bb80 [ 580.841315][ T5933] FS: 0000000000000000(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000 [ 580.850526][ T5933] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 580.857273][ T5933] CR2: 000000110c2c8fb2 CR3: 000000005d300000 CR4: 00000000003526f0 [ 580.866606][ T5933] Call Trace: [ 580.870872][ T5933] [ 580.874061][ T5933] smsusb_start_streaming+0x22/0x340 [ 580.879483][ T5933] smsusb_probe+0x18f6/0x2060 [ 580.885486][ T5933] ? __pfx_smsusb_probe+0x10/0x10 [ 580.890651][ T5933] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 580.896367][ T5933] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 580.902594][ T5933] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 580.909176][ T5933] ? __pm_runtime_set_status+0x785/0xa50 [ 580.914989][ T5933] usb_probe_interface+0x641/0xbc0 [ 580.920230][ T5933] ? __pfx_usb_probe_interface+0x10/0x10 [ 580.926043][ T5933] really_probe+0x26a/0x9a0 [ 580.930659][ T5933] __driver_probe_device+0x18c/0x2f0 [ 580.936102][ T5933] driver_probe_device+0x4f/0x430 [ 580.941316][ T5933] __device_attach_driver+0x2ce/0x530 [ 580.946869][ T5933] bus_for_each_drv+0x251/0x2e0 [ 580.951818][ T5933] ? __pfx___device_attach_driver+0x10/0x10 [ 580.957876][ T5933] ? __pfx_bus_for_each_drv+0x10/0x10 [ 580.964587][ T5933] __device_attach+0x2b8/0x400 [ 580.970575][ T5933] ? __pfx___device_attach+0x10/0x10 [ 580.976165][ T5933] ? do_raw_spin_unlock+0x122/0x240 [ 580.981484][ T5933] bus_probe_device+0x185/0x260 [ 580.987247][ T5933] device_add+0x7b6/0xb50 [ 580.992296][ T5933] usb_set_configuration+0x1a87/0x20e0 [ 580.998685][ T5933] usb_generic_driver_probe+0x8d/0x150 [ 581.004576][ T5933] usb_probe_device+0x1c4/0x390 [ 581.009603][ T5933] ? __pfx_usb_probe_device+0x10/0x10 [ 581.015263][ T5933] really_probe+0x26a/0x9a0 [ 581.019890][ T5933] __driver_probe_device+0x18c/0x2f0 [ 581.025425][ T5933] driver_probe_device+0x4f/0x430 [ 581.030535][ T5933] __device_attach_driver+0x2ce/0x530 [ 581.035997][ T5933] bus_for_each_drv+0x251/0x2e0 [ 581.040885][ T5933] ? __pfx___device_attach_driver+0x10/0x10 [ 581.046914][ T5933] ? __pfx_bus_for_each_drv+0x10/0x10 [ 581.049043][T11603] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1489'. [ 581.052477][ T5933] __device_attach+0x2b8/0x400 [ 581.067650][ T5933] ? __pfx___device_attach+0x10/0x10 [ 581.073870][ T5933] ? do_raw_spin_unlock+0x122/0x240 [ 581.079171][ T5933] bus_probe_device+0x185/0x260 [ 581.084326][ T5933] device_add+0x7b6/0xb50 [ 581.089161][ T5933] usb_new_device+0xa39/0x16c0 [ 581.094580][ T5933] ? __pfx_usb_new_device+0x10/0x10 [ 581.099978][ T5933] ? _raw_spin_unlock_irq+0x23/0x50 [ 581.105320][ T5933] ? lockdep_hardirqs_on+0x9c/0x150 [ 581.110658][ T5933] hub_event+0x2958/0x4a20 [ 581.115306][ T5933] ? __pfx_hub_event+0x10/0x10 [ 581.120215][ T5933] ? process_scheduled_works+0x9ef/0x17b0 [ 581.126183][ T5933] ? _raw_spin_unlock_irq+0x23/0x50 [ 581.131490][ T5933] ? process_scheduled_works+0x9ef/0x17b0 [ 581.137568][ T5933] ? process_scheduled_works+0x9ef/0x17b0 [ 581.143386][ T5933] process_scheduled_works+0xade/0x17b0 [ 581.149139][ T5933] ? __pfx_process_scheduled_works+0x10/0x10 [ 581.155393][ T5933] worker_thread+0x8a0/0xda0 [ 581.160142][ T5933] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 581.167747][ T5933] ? __kthread_parkme+0x7b/0x200 [ 581.172789][ T5933] kthread+0x70e/0x8a0 [ 581.177549][ T5933] ? __pfx_worker_thread+0x10/0x10 [ 581.182780][ T5933] ? __pfx_kthread+0x10/0x10 [ 581.187607][ T5933] ? _raw_spin_unlock_irq+0x23/0x50 [ 581.193202][ T5933] ? lockdep_hardirqs_on+0x9c/0x150 [ 581.198905][ T5933] ? __pfx_kthread+0x10/0x10 [ 581.203561][ T5933] ret_from_fork+0x3fc/0x770 [ 581.208290][ T5933] ? __pfx_ret_from_fork+0x10/0x10 [ 581.213473][ T5933] ? __switch_to_asm+0x39/0x70 [ 581.218363][ T5933] ? __switch_to_asm+0x33/0x70 [ 581.223184][ T5933] ? __pfx_kthread+0x10/0x10 [ 581.228040][ T5933] ret_from_fork_asm+0x1a/0x30 [ 581.232974][ T5933] [ 581.236333][ T5933] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 581.243656][ T5933] CPU: 1 UID: 0 PID: 5933 Comm: kworker/1:5 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 581.253675][ T5933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 581.263903][ T5933] Workqueue: usb_hub_wq hub_event [ 581.268983][ T5933] Call Trace: [ 581.272291][ T5933] [ 581.275329][ T5933] dump_stack_lvl+0x99/0x250 [ 581.279962][ T5933] ? __asan_memcpy+0x40/0x70 [ 581.284650][ T5933] ? __pfx_dump_stack_lvl+0x10/0x10 [ 581.289865][ T5933] ? __pfx__printk+0x10/0x10 [ 581.294510][ T5933] panic+0x2db/0x790 [ 581.298629][ T5933] ? __pfx_panic+0x10/0x10 [ 581.303089][ T5933] ? ret_from_fork_asm+0x1a/0x30 [ 581.308060][ T5933] __warn+0x31b/0x4b0 [ 581.312154][ T5933] ? usb_submit_urb+0xc82/0x1890 [ 581.317139][ T5933] ? usb_submit_urb+0xc82/0x1890 [ 581.322115][ T5933] report_bug+0x2be/0x4f0 [ 581.326460][ T5933] ? usb_submit_urb+0xc82/0x1890 [ 581.331410][ T5933] ? usb_submit_urb+0xc82/0x1890 [ 581.336360][ T5933] ? usb_submit_urb+0xc84/0x1890 [ 581.341313][ T5933] handle_bug+0x84/0x160 [ 581.345607][ T5933] exc_invalid_op+0x1a/0x50 [ 581.350143][ T5933] asm_exc_invalid_op+0x1a/0x20 [ 581.355031][ T5933] RIP: 0010:usb_submit_urb+0xc82/0x1890 [ 581.360592][ T5933] Code: 89 e0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 6d 08 00 00 45 8b 04 24 48 c7 c7 e0 5d 33 8c 4c 89 f6 4c 89 fa e8 ef 4b 6b fa 90 <0f> 0b 90 90 44 0f b6 64 24 48 4c 89 e7 48 c7 c6 b0 f6 dc 8e e8 b5 [ 581.380222][ T5933] RSP: 0018:ffffc900046f6ad0 EFLAGS: 00010246 [ 581.386419][ T5933] RAX: ff8f62b0cd7d4400 RBX: ffff888074cbb200 RCX: 0000000000100000 [ 581.394414][ T5933] RDX: ffffc900184f3000 RSI: 000000000002b0cd RDI: 000000000002b0ce [ 581.402419][ T5933] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 581.410406][ T5933] R10: dffffc0000000000 R11: fffffbfff1bfaa6c R12: ffffffff8c335bcc [ 581.418418][ T5933] R13: dffffc0000000000 R14: ffffffff8c33c6c0 R15: ffff888032c2bb80 [ 581.426533][ T5933] smsusb_start_streaming+0x22/0x340 [ 581.431855][ T5933] smsusb_probe+0x18f6/0x2060 [ 581.436565][ T5933] ? __pfx_smsusb_probe+0x10/0x10 [ 581.441633][ T5933] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 581.447197][ T5933] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 581.453116][ T5933] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 581.459562][ T5933] ? __pm_runtime_set_status+0x785/0xa50 [ 581.465217][ T5933] usb_probe_interface+0x641/0xbc0 [ 581.470361][ T5933] ? __pfx_usb_probe_interface+0x10/0x10 [ 581.476014][ T5933] really_probe+0x26a/0x9a0 [ 581.480629][ T5933] __driver_probe_device+0x18c/0x2f0 [ 581.485937][ T5933] driver_probe_device+0x4f/0x430 [ 581.490979][ T5933] __device_attach_driver+0x2ce/0x530 [ 581.496554][ T5933] bus_for_each_drv+0x251/0x2e0 [ 581.501459][ T5933] ? __pfx___device_attach_driver+0x10/0x10 [ 581.507381][ T5933] ? __pfx_bus_for_each_drv+0x10/0x10 [ 581.512867][ T5933] __device_attach+0x2b8/0x400 [ 581.517739][ T5933] ? __pfx___device_attach+0x10/0x10 [ 581.523043][ T5933] ? do_raw_spin_unlock+0x122/0x240 [ 581.528361][ T5933] bus_probe_device+0x185/0x260 [ 581.533233][ T5933] device_add+0x7b6/0xb50 [ 581.537618][ T5933] usb_set_configuration+0x1a87/0x20e0 [ 581.543216][ T5933] usb_generic_driver_probe+0x8d/0x150 [ 581.548695][ T5933] usb_probe_device+0x1c4/0x390 [ 581.553571][ T5933] ? __pfx_usb_probe_device+0x10/0x10 [ 581.558966][ T5933] really_probe+0x26a/0x9a0 [ 581.563490][ T5933] __driver_probe_device+0x18c/0x2f0 [ 581.568797][ T5933] driver_probe_device+0x4f/0x430 [ 581.573844][ T5933] __device_attach_driver+0x2ce/0x530 [ 581.579273][ T5933] bus_for_each_drv+0x251/0x2e0 [ 581.584230][ T5933] ? __pfx___device_attach_driver+0x10/0x10 [ 581.590132][ T5933] ? __pfx_bus_for_each_drv+0x10/0x10 [ 581.595539][ T5933] __device_attach+0x2b8/0x400 [ 581.600326][ T5933] ? __pfx___device_attach+0x10/0x10 [ 581.605644][ T5933] ? do_raw_spin_unlock+0x122/0x240 [ 581.610863][ T5933] bus_probe_device+0x185/0x260 [ 581.616164][ T5933] device_add+0x7b6/0xb50 [ 581.620548][ T5933] usb_new_device+0xa39/0x16c0 [ 581.625338][ T5933] ? __pfx_usb_new_device+0x10/0x10 [ 581.630558][ T5933] ? _raw_spin_unlock_irq+0x23/0x50 [ 581.635781][ T5933] ? lockdep_hardirqs_on+0x9c/0x150 [ 581.640996][ T5933] hub_event+0x2958/0x4a20 [ 581.645655][ T5933] ? __pfx_hub_event+0x10/0x10 [ 581.650451][ T5933] ? process_scheduled_works+0x9ef/0x17b0 [ 581.656194][ T5933] ? _raw_spin_unlock_irq+0x23/0x50 [ 581.661402][ T5933] ? process_scheduled_works+0x9ef/0x17b0 [ 581.667210][ T5933] ? process_scheduled_works+0x9ef/0x17b0 [ 581.672948][ T5933] process_scheduled_works+0xade/0x17b0 [ 581.678554][ T5933] ? __pfx_process_scheduled_works+0x10/0x10 [ 581.684586][ T5933] worker_thread+0x8a0/0xda0 [ 581.689479][ T5933] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 581.695841][ T5933] ? __kthread_parkme+0x7b/0x200 [ 581.700920][ T5933] kthread+0x70e/0x8a0 [ 581.705011][ T5933] ? __pfx_worker_thread+0x10/0x10 [ 581.710486][ T5933] ? __pfx_kthread+0x10/0x10 [ 581.715098][ T5933] ? _raw_spin_unlock_irq+0x23/0x50 [ 581.720307][ T5933] ? lockdep_hardirqs_on+0x9c/0x150 [ 581.725515][ T5933] ? __pfx_kthread+0x10/0x10 [ 581.730121][ T5933] ret_from_fork+0x3fc/0x770 [ 581.734727][ T5933] ? __pfx_ret_from_fork+0x10/0x10 [ 581.739856][ T5933] ? __switch_to_asm+0x39/0x70 [ 581.744633][ T5933] ? __switch_to_asm+0x33/0x70 [ 581.749411][ T5933] ? __pfx_kthread+0x10/0x10 [ 581.754028][ T5933] ret_from_fork_asm+0x1a/0x30 [ 581.758824][ T5933] [ 581.762111][ T5933] Kernel Offset: disabled [ 581.766442][ T5933] Rebooting in 86400 seconds..