last executing test programs: 3m31.735528595s ago: executing program 4 (id=1063): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {}, {0x3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0xffffffffffffffff, 0xea, 0x100004}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3m31.511067081s ago: executing program 4 (id=1067): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x1) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x437, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x54583, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 3m31.279538545s ago: executing program 4 (id=1070): connect$unix(0xffffffffffffffff, 0x0, 0xffffffffffffff57) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x3) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r5, 0x4b41, &(0x7f00000005c0)="698b795025046c56fdae1c35e2d2b943a92669976742fb747b7124e23cf31ca8a1b2") ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) recvmsg(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x20) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 3m28.714309795s ago: executing program 4 (id=1076): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0xa8) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) mmap$IORING_OFF_SQES(&(0x7f0000534000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x10000000) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000440)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r2, &(0x7f00000002c0)='./file1\x00', 0x100, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181081, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x201) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r2, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000240)='./file0\x00', 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x9) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file1\x00') 3m28.482158536s ago: executing program 4 (id=1078): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'gre0\x00', &(0x7f00000002c0)={'tunl0\x00', 0x0, 0x1, 0x8, 0x8, 0xd, {{0x12, 0x4, 0x0, 0x6, 0x48, 0x66, 0x0, 0x9, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x27}, {[@timestamp_addr={0x44, 0x2c, 0xbd, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@multicast2, 0x1}, {@empty, 0x8}, {@loopback, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}]}, @ra={0x94, 0x4}, @noop, @noop]}}}}}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000001c0)={0x9, @raw_data="aa9fc93b2df81d65fcfb42a66fead6d015c9fe8917575d131c1a182cd561746e2fb051ce4a53653d5a396bd514cae6183adcc6d417cdafe5bb6cff02a3b45a461d33c93f1677f0efbac2bbd2e149dce5caed05f6e18340e58102ef991d0894f4ee1bc9b9d0303e2fcb53176e571b1923c72639c0226f9d0d23786948f11c183f878cce0b67a9e6f1b56255fe6c531551cbc14b35cc28accb18ef196097b292f4033579cf9e88bd7bc7a92345b4ae0a9dd21f2f9852d44e43c97d682d866c4b111e56e0142ec0e7b1"}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) sendmmsg$inet(r1, &(0x7f00000022c0)=[{{&(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000100)="9ad610bd7d73ab86e82881238d1c4bd7916cad41fe2f90e02abe74bc923124b3a3e8a5391c856e3a123f7c06dd6a1aadcabdffdddbe802003d9e2d6106b69b12d2affeca048955188f75fb1c33f6c358dc1c54b29c5e6485966e9d3d4383b01b0d343a18880b30926e81a60bd63994fb30f2c7f254133c0ca36f54930799f8bb49c55e6ea18f748e199f092142d65b3e46a92bbc9bdbac687d3f305aa5ea7e8faeef49cd78b770260c33f9ea3659973fb1f67632eb2bd87cb8d8d08de291b8447d6a62c8fe987e21344961f3896f1e735c5885775c7f594940d8986bb09996dfa9ef3cccddba972b9238fa5b45c231c31448895bdce247c5aa", 0xf9}], 0x1, &(0x7f0000000380)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @rand_addr=0x64010101}}}], 0x38}}, {{&(0x7f0000000400)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)}, {&(0x7f0000001480)="c2cb814a218da3294bb15e69fddda4f9861764fed50eefbfa39ff6c930c5026aef885e0cfc80f06f5cf65c1430a9f91c86f2b6f2da28f0413dd7128ab41c07", 0x3f}], 0x3, &(0x7f0000001500)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8bf}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x101}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @rand_addr=0x64010101, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3b}}], 0xb0}}, {{&(0x7f0000001740)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000001c00)=[{0x0}, {&(0x7f00000017c0)="068e8bc653d14298ed41fe68fd292f2e3948829e208e15124deef919b4bce3db0b8b08019a52629cde51fa5478e52a09337474ea6ef43a730a9f54089ebca9b0b5d03a0d54", 0x45}, {&(0x7f0000001840)="468c5014b2544eeb0d560f1001086b6c47914c63da88e7294ff45664bb7cc5300946b3ec1b2f2f45e68beb4b2911451282b1188db855cf341ae526741a83a535bb60f49fdd924fb32060ffae5bae163b7ec539aa11a45eb6a1e264b006e8c0e46996a680040dd3c43ff71d8e6c7d5e90c61f1bbeeb7df192be0674b99f0e47aae3b8f4580c300c2ecfb4c29c7de31160e119e6df4d09ee8761808ff7357696774538836c78b9d085d1ca7fff54382dd2a9631034a073e4ee86a22a89a5a6af478d7b3c2855e928c3fa1ed6f0b747fee3e14904", 0xd3}, {&(0x7f0000001940)="d74de934557a2c1a341a0191cb53038f556db37b25b5ef6357c069540184c6d4c91d5fc85284c73fbb89246cf500e79619d3a8bebf1a31136952124c5aeef74ffcb2e1f8364a4594e67113ae1b2661ce3df697ded466f50ba397ef75613359f1f13ad61e3a801babd97b32e1497cd48a09565c669eba6bb6", 0x78}, {&(0x7f00000019c0)="b6460bb4fe592fa079fd77dda3381b8e570ccc1fa0d2be6434a80b167472f99d31bc0095b9d793015c89823af0a160ac619be4ce8cc5502f256e648f56d48f25a0800053d01afdc2372a11e9a000d748df5dd873ac7a7e8d84706f83f4f482d365fb9cbf15d5cc66522e3b8f496972868fd10c632a6294ba", 0x78}, {&(0x7f0000001a40)="4502a68f0a1dd9f6ddbc5fceaa2cc2", 0xf}, {&(0x7f0000001a80)="583443fdff5d160747ea5399e26dc4ecf1c11988a0739dba4a079e0c57bd1c4e228be8411a3283548459ae365bccaf832cdc1f62338413ec74ab579411b45817277e36fa649756d95aa633600dc7d0e244aa4881a0df6eb858a782e8e9cad91984fb24ae4a08a974561ee31a86e9e7397e3bbe269774f3bafd89e8c1ce833dac038649cec6570cbd6ac57732c56151668a626b83ae71889b6603c7aae7952746a3b7e0", 0xa3}, {&(0x7f0000001b40)}], 0x8}}, {{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {&(0x7f0000001d80)="9da34e6fdf3cacd5c702baa0e497d0ce3abebf4d5539b887c827b60eb03516df9a2895844fa4c7c8a60c327267c866e60b5c610f8a32f04dbc21513afe3645101ad9ae25689407bcb339cae3751f85235442de169e1cc00afd5b72b41701f99e1ab27ce5adea75d3a10bdfafccda5aeaf647d73ce6ed1ece06caed039a29c6ccbf3bc1e6db07e53473145c8dd7060d1279f36495a2e1e32a6901573cca57", 0x9e}, {&(0x7f0000001e40)="b503bd1510bdf680fd15b4e27c7b255787099e6a8e0786f5bf43c9e727373245389c9ee979e6dc7024496bcf314df51828c278b4ba160e1c352de53b1868b0f88b4108880802027a5d116ef24f6e917030", 0x51}, {&(0x7f0000001ec0)="5b5e188905280336d5ddcb63b910c43447a46f434340483632c31c552e969d8675ee26a9d7ad5ad85a97f1f4ff5c86a2f6005f5cf384cb8cee2cd9176e0a32b535439dfe1bf8378aaf42f5f297f0c44b555019f7af282029098a233e58b6ed31b1ec3a3d5389723e1d7ed0384dc217724affab9eccf86cef9b6848b87e06b828b0abf0f898dcd74c98d049999216146e498fa7d7f5425936b3a62ab1627dbae4d5227cfd2b21c9dc13450278e5c77bcbeaf116ea3db67454ce07819d715a85b75f68d1", 0xc3}, {&(0x7f0000001fc0)="13a61f8896146fbfe72c68f2a5aaca40bde5df23281d0bd1b2d1cbaa29572619afe34b4cbfb8f587e0b6ab4b6b3cd267b4b5b518b7", 0x35}], 0x5, &(0x7f0000002080)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_retopts={{0x48, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0xc5, 0x1, 0x7, [{@empty, 0x800}, {@broadcast, 0x6}, {@multicast2, 0x8}, {@private=0xa010102, 0x6}]}, @ssrr={0x89, 0x13, 0x72, [@broadcast, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0x78}}, {{&(0x7f0000002100)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000002200)=[{&(0x7f0000002140)="4243aa07806dfce1e6031ad87c1ff78dc14698de59f589da136591aa285a7b7acd5996749f58f326e7f00113718bfdb42dd7054ccbe1f7e46914ca2c37216fd5d06634afbdef6efbd71c1b18dd9dae8afdbad61af0a62b97c54c00e1858db13bbc2550a43c478952882e9e1d4efef982276dca87831c74046fffb823", 0x7c}, {&(0x7f00000021c0)="52860c28ee9c", 0x6}], 0x2, &(0x7f0000002240)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x401}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x48}}], 0x5, 0x20028045) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x70bd26, 0x25dfdbf7, {0x0, 0x0, 0x0, r8, {0xfff1, 0x1}, {}, {0xa, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040011}, 0x44030) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 3m28.381820566s ago: executing program 4 (id=1079): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x5, &(0x7f0000000600)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x418, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000080)={0x1, 0x1, 0x8, 0xfffffffc}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000280)=[{0x1, 0x2, 0x3, 0xa}, {0x0, 0x3, 0x3}, {0x5, 0x3, 0x6, 0x4}], 0x10, 0x3, @void, @value}, 0x94) (async, rerun: 64) futex(0x0, 0x88, 0x1, 0x0, &(0x7f0000000000)=0x1, 0x0) (rerun: 64) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async, rerun: 64) r2 = inotify_init1(0x0) (rerun: 64) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0x8000000000000007) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000019580)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$sysctl(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) syz_open_dev$MSR(&(0x7f00000002c0), 0x403, 0x0) (rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) (async) read$msr(r1, &(0x7f0000019680)=""/102379, 0x18feb) (async) syslog(0x4, &(0x7f0000000b00)=""/4096, 0x1000) (async) keyctl$set_reqkey_keyring(0xe, 0x5) (async, rerun: 64) request_key(&(0x7f00000000c0)='logon\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='![\'[\'^-.-]{$5#\x00', 0x0) (async, rerun: 64) getpid() r4 = socket(0x0, 0x3, 0x4000000) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, 0x0, 0x0) (async, rerun: 64) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, 0x0, 0x0) (async, rerun: 64) getsockopt(r0, 0x1ff, 0x1, 0x0, &(0x7f0000000040)) setresuid(0x0, 0x0, 0x0) (async, rerun: 32) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x5fef, 0x4) (async, rerun: 32) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x940, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r5, 0x4004510f, &(0x7f0000000300)) (async) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @empty}, 0x10) (async) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00'}) 3m27.466115062s ago: executing program 32 (id=1079): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x5, &(0x7f0000000600)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x418, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000080)={0x1, 0x1, 0x8, 0xfffffffc}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000280)=[{0x1, 0x2, 0x3, 0xa}, {0x0, 0x3, 0x3}, {0x5, 0x3, 0x6, 0x4}], 0x10, 0x3, @void, @value}, 0x94) (async, rerun: 64) futex(0x0, 0x88, 0x1, 0x0, &(0x7f0000000000)=0x1, 0x0) (rerun: 64) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async, rerun: 64) r2 = inotify_init1(0x0) (rerun: 64) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0x8000000000000007) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000019580)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$sysctl(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) syz_open_dev$MSR(&(0x7f00000002c0), 0x403, 0x0) (rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) (async) read$msr(r1, &(0x7f0000019680)=""/102379, 0x18feb) (async) syslog(0x4, &(0x7f0000000b00)=""/4096, 0x1000) (async) keyctl$set_reqkey_keyring(0xe, 0x5) (async, rerun: 64) request_key(&(0x7f00000000c0)='logon\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='![\'[\'^-.-]{$5#\x00', 0x0) (async, rerun: 64) getpid() r4 = socket(0x0, 0x3, 0x4000000) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, 0x0, 0x0) (async, rerun: 64) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, 0x0, 0x0) (async, rerun: 64) getsockopt(r0, 0x1ff, 0x1, 0x0, &(0x7f0000000040)) setresuid(0x0, 0x0, 0x0) (async, rerun: 32) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x5fef, 0x4) (async, rerun: 32) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x940, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r5, 0x4004510f, &(0x7f0000000300)) (async) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @empty}, 0x10) (async) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00'}) 3m20.750672146s ago: executing program 0 (id=1096): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580050019"], 0x4c}}, 0x0) 3m20.528415859s ago: executing program 0 (id=1099): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) listen(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000040), 0x2, 0x0) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000340)='./cgroup\x00', &(0x7f00000001c0), 0x3000443, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {}]}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$fb0(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r5, 0xc048aeca, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0xaa940) 3m19.119394367s ago: executing program 0 (id=1103): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$vim2m(&(0x7f0000000040), 0x5, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_pidfd_open(0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e8500000007"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r5}, 0x18) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) syz_open_procfs(0xffffffffffffffff, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x121003, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {}, {0x3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0xffffffffffffffff, 0xea, 0x100004}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) 3m16.274185087s ago: executing program 0 (id=1108): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) shutdown(r5, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x34, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x9}, {0x1}, {0x0, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x4000) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x4c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10, 0x3, 0x1, 0x8000, 0x400, 0x48}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) r8 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_control_io(r8, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) 3m13.487650893s ago: executing program 0 (id=1113): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e00100905"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x40, 0x7, 0x3, {0x3, 0xb, "1b"}}, 0x0}, &(0x7f0000000540)={0x44, &(0x7f0000000200)={0x20, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$UHID_CREATE2(r1, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0d, &(0x7f0000000040)) 3m9.833039343s ago: executing program 0 (id=1119): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xa, {"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", 0x1000}}, 0x1006) open$dir(&(0x7f0000001180)='./file0\x00', 0x494300, 0x20) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000001040), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000000)={0x0, 0xfffff001, 0x2, {0xb, @pix_mp={0x19, 0x1, 0x7079781c, 0x1, 0xb, [{0xd, 0x1}, {0x1b, 0xff}, {0x10001, 0x2}, {0x204, 0x7}, {0x101, 0x1}, {0x9, 0x5}, {0x5, 0x80000000}, {0x80000001, 0x8001}], 0xa, 0x1, 0x3, 0x0, 0x7}}}) syz_io_uring_setup(0x526a, &(0x7f0000001080)={0x0, 0xb33f, 0x4, 0x1, 0x252}, &(0x7f0000001100), &(0x7f0000001140)) syz_usb_connect(0x0, 0x64, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002ffa9400819151300000102030109025200010000000009040000042513bf000a2401000000020102052404"], 0x0) 2m53.567545895s ago: executing program 33 (id=1119): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xa, {"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", 0x1000}}, 0x1006) open$dir(&(0x7f0000001180)='./file0\x00', 0x494300, 0x20) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000001040), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000000)={0x0, 0xfffff001, 0x2, {0xb, @pix_mp={0x19, 0x1, 0x7079781c, 0x1, 0xb, [{0xd, 0x1}, {0x1b, 0xff}, {0x10001, 0x2}, {0x204, 0x7}, {0x101, 0x1}, {0x9, 0x5}, {0x5, 0x80000000}, {0x80000001, 0x8001}], 0xa, 0x1, 0x3, 0x0, 0x7}}}) syz_io_uring_setup(0x526a, &(0x7f0000001080)={0x0, 0xb33f, 0x4, 0x1, 0x252}, &(0x7f0000001100), &(0x7f0000001140)) syz_usb_connect(0x0, 0x64, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002ffa9400819151300000102030109025200010000000009040000042513bf000a2401000000020102052404"], 0x0) 2m50.022421583s ago: executing program 2 (id=1177): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)="98ad2e40204cc2ac6faf2571d9bfdc37724b27cb6754ea", 0x17}, 0x1, 0x0, 0x0, 0x24000054}, 0x4) r2 = socket(0x80000000000000a, 0x2, 0x0) r3 = open(0x0, 0x8080, 0x40) r4 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x16f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_RENAMEAT={0x23, 0x18, 0x0, r3, 0x0, &(0x7f0000000380)='./file1\x00'}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r9) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)={0x24, r10, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004800}, 0x4) sendmmsg$nfc_llcp(r3, &(0x7f0000000440)=[{&(0x7f0000000000)={0x27, r8, 0x1, 0x7, 0x28, 0xff, "ad3fbdec670d707d4a513d867f44ff6e5f9a6b9ba4630f84030fb0300a1a03b43a6eb20bfaefbd87432b356ee13b13758e314b25689487d536dfefcdd2786c", 0x1c}, 0x60, &(0x7f0000000800)=[{&(0x7f00000001c0)="87e2634a300d", 0x6}, {&(0x7f0000000500)="8c36060820ccc61dc14c8588d492cfbc81246c702f3d767e93c2a4819df8597ef49d40c7cb682973bcc4ee64de37ffab2e8c00c804cdbc35b4b0b692b721485033640f7649f37a08782bf98c329e04dbdc5d4e9faee0d20a9862fad8dda7585d764ccef7fb4f20666fca9d0b160d7475731f60d684892470c3d5cf1bb9bcd0fb9b5f5ea53b074bf979c0505ae0efae4e85738a2efe19b9763b9c37512e071875239f1b5fa19ec514e658e3f816a5d1649f018fbc04df", 0xb6}, {&(0x7f00000005c0)="00166552a96bcc269878e65d19c5bb76bca93ee95bc3aa307802f6f22d2ccbb062ff655d43486cddd7efade01bbeaac9e3b7de9083b9dcfec4c0e63fa43cfe0a67ffb24bcdf1fa67e2fb0ce385d583414bea67235e43b9a8d9d06f49cdfe5c9812d0d5e38aa37e16f421bb4cafeabe2cd6b7a706bbae1296169a1162da1f432a505099735ec7cb556134c3f1c9224e99e8cd551a0bf03e", 0x97}, {&(0x7f0000000340)="f011cbfd5d82ec", 0x7}, {&(0x7f0000000680)="180d3a3f44564f160c536be230791415ae7dd0deeda83966e468eb57bb09fe2860a51a690581ab03cb99b188fbe9d6ca990d54a3828a8453a54e51adccfcd78a4a87fb9e433744a429c670a9b4c8aaf27af24e561b13db49109d8b5caff5726036eff8eb1d470071a3e97e3627003681257e31b2b0ca7599bd0d0cd9e1a0fafe96461bf7557a1bf97a9bd073f6f25b6ece24cff32ea25c24bdf68e4f7b41b6f9e4373bf57ea13947", 0xa8}, {&(0x7f00000003c0)="828b288443e2dcb7850c866dc8bdb88a017a64d0b29707c5dbcfd3482bc2412a", 0x20}, {&(0x7f0000000740)="c35f4d5d22dc0f9b428349760567e3db47a4685b24bf469320d439302b2da4f75104b2e419da02b5c27d75044828bcd8e9bfa90775fb7183d58e5fabb4868c8d8ae72e86b1170c6f2c726e1fb574a1905824af451fe736270bd3a66ace8578bf004e623f8ea1f712e940b9b2f9d477cdadc77ca6592f758f266359ede3e62476345ed3a48da5524a", 0x88}], 0x7, &(0x7f0000000880)={0x110, 0x107, 0x5, "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"}, 0x110, 0x24000805}], 0x1, 0x4084) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000034000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r11, 0x702, 0xe, 0x700, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) 2m47.288727491s ago: executing program 2 (id=1187): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x3}, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = syz_io_uring_setup(0x4a9a, 0x0, &(0x7f00000002c0), 0x0) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) read$FUSE(0xffffffffffffffff, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x100000000000006, {0x5, 0x2802908c, 0x0, {0x0, 0x2, 0x3, 0x2, 0x8, 0x80000000, 0x0, 0x1b, 0x800006, 0x8000, 0x0, r7, r8, 0xe, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) sendmsg$netlink(r5, &(0x7f0000000b80)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)=[{0x0}, {&(0x7f0000000300)={0x10, 0x38, 0x2, 0x70bd25, 0x25dfdbfe, "", [@generic]}, 0x10}, {&(0x7f0000001880)={0x10, 0x15, 0x300, 0x70bd2a, 0x25dfdbff}, 0x10}, {&(0x7f0000000600)={0x130, 0x10, 0x224, 0x70bd2c, 0x25dfdbfc, "", [@nested={0x10, 0xde, 0x0, 0x1, [@typed={0x8, 0xb8, 0x0, 0x0, @fd=r5}, @nested={0x4, 0x17}]}, @nested={0x10b, 0x91, 0x0, 0x1, [@typed={0xc, 0x13d, 0x0, 0x0, @u64=0x8000000000000001}, @nested={0x4, 0x126}, @generic="516bd8acfb8f911834669e36614d54ca47c5a2e1969deda9accf03e7b64a3aac067852ce0d051ec3eb212ad7778277595dcb399aa04a260b6a101e733dd55702167c1d153bd9efd9c4899d9c640c4f6c8927d3a8a3a328fd4398d6e4a1ee81ae331e59d70e2748b66461ddeb75c755c347fc55", @typed={0x8, 0xab, 0x0, 0x0, @pid}, @typed={0x4, 0x1e}, @nested={0x4, 0x91}, @nested={0x4, 0x57}, @typed={0x70, 0x2, 0x0, 0x0, @binary="571b922dbe8015ac65f7e9670311c7c5b1385e49e20b54748c1f2cf1fc362d3b09be1aa7bac1c81e208801ffc219c5d4dc8d21202e05a8d4951f4d91e96fb11f5af3bfb8a986cc2f5469abbde25edf99a7588c1c06622f0d23fcb5dbc9cb97f13127e22a958d1f05457c22ba"}]}, @nested={0x4, 0x9b}]}, 0x130}, {&(0x7f0000000140)={0x20, 0x35, 0x800, 0x70bd28, 0x25dfdbfb, "", [@typed={0x8, 0x37, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0x149, 0x0, 0x0, @fd=r1}]}, 0x20}], 0x5, &(0x7f0000000ac0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9}}}, @rights={{0x30, 0x1, 0x1, [r5, r1, 0xffffffffffffffff, r2, r3, r0, r1, r0]}}], 0x90, 0x40}, 0x840) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e3, &(0x7f0000000180)={r4}) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x20000023896) syz_io_uring_submit(0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8) sendto$inet(r0, &(0x7f0000000100)="ab", 0x1, 0x40048c4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) 2m46.52656417s ago: executing program 2 (id=1188): creat(&(0x7f0000000b00)='./file0\x00', 0xecf86c37d5304970) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x288, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x338, 0x3a8, 0x3a8, 0x338, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [0xffffff00], [0xffffff00, 0xffffff00, 0xff000000], 'vlan1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0xfd, 0x0, 0x19}, 0x0, 0xa8, 0xc8, 0x700}, @unspec=@TRACE={0x20}}, {{@ipv6={@private1, @mcast2, [0x0, 0xffff00, 0x0, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 'dvmrp0\x00', 'sit0\x00', {}, {0xff}, 0x67, 0xb7, 0x1}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'rose0\x00', {0xb}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000056544820e105080411250102030109021b00010000000009040000012ec25d000905d891"], 0x0) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x400000, &(0x7f0000000300)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) truncate(&(0x7f0000000240)='./file0\x00', 0x6) 2m43.950582128s ago: executing program 2 (id=1196): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0xa2}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m43.811384795s ago: executing program 2 (id=1197): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @local, 0x9}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004000000020000000c00000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000000004750e0000000000000000", @ANYRES32=0x0, @ANYRES8=r0, @ANYBLOB="000000000100"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="b9e69a5800000a000000000300200000ac8000000000000000000000000000bbff01000000000000000000000004000100000000000000000000008000005d2785a19df40b965249d30b2c7109bb9000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000af0000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000000000000000000000000000000000000000000004c001400636d61632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000"], 0x1a0}}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000003000/0x2000)=nil) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x6e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000040), 0x0, 0x4000000) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f00000003c0)={0x3}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYRES8=r6], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) read$FUSE(0xffffffffffffffff, &(0x7f0000002280)={0x2020}, 0x2020) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r8, r2}, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) r10 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) close_range(r10, r10, 0x0) 2m42.730394092s ago: executing program 2 (id=1200): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = io_uring_setup(0x1783, &(0x7f0000000640)={0x0, 0xfffffffe, 0x800, 0x1, 0x2de}) r1 = creat(&(0x7f0000000300)='./file0\x00', 0xe5) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x48, r4, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x7}, @broadcast, @device_b, @initial, {0x2}, @value=@ver_80211n={0x0, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}}, @channel_switch={0x0, 0x4, {{0x25, 0x3, {0x0, 0xe}}, @val={0x3e, 0x1, 0x1}, @void}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x44050) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = openat$ppp(0xffffffffffffff9c, 0x0, 0x8901, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)={0x2c, r9, 0x1, 0x70bd27, 0x25dfdc00, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x976}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000001}]}, 0x2c}}, 0x40080) write$qrtrtun(r1, &(0x7f0000001880)="9d8d645e53b6183d874f9e93a18dd009a09560ff682bd07dc3d28385a8f3f9e18418950d4dfe49f13a19e24320444a7d6c121741ba3dc510dba4f980bbd9a315544fa0a1622d949faba79788908354e467989e84b928ecb96e0e4e781bfca4c928c956321dd51400000000000020011584a8bd051f13bad882bea021ffb5ce918a1f87f1d439ec93772d6ecaaf8891f7678f2037ccced78ea5c1aa805f1b9f5a2c3974c5124cac5e163d9b6f5b998c1c7263fa2331d1241523986dccbd4e1f32b2f521380a2ea4732132264de6d26cfbb2eb91e40177a780df98cbf94b96d900a2dfc5c877db675ebb1d7cbc398ca422ddbadc24ee6f3bf036f62cdb056502a63d070000930ea668649ad0003afe9a912179ce61631b3dab94642d2768f1f22299dea6c08073dd0c47b9eddb917fc0076b74406149024514d07417c6007e8cd4dc4e2295be71f412044b52b1ce32aac048cad9c413a8c19528dc1b432fe7f9fda7182a47243af427a76ede78aa5c6ef75ea1f48e2e9e9d203d4760a1ff6a0119b39a2458a050f9519d4bbd821684ef8303985e8f5b8d86346f428788fc374e7eaa0c2a2ef8478a13b4a56d0821201c37a0066fb9f5cc583005b9f71b67daa300311066bacbf43630a8388aff734a568a123a48ba1344a5500e5c6f8cef539617cd3970ffb873579a3b76bd529f1626d1f90543b2a0190df38bb1e8b6fc9bfc5c42693814665679e78ed8adce4d23b8725436101ae4113fee000cb92b32c6a74851a6c4af4625f28810ec16834a1589063af1bf0b29aa57e06dddc0fddf408fab63c536d5afd9ba5a71f9e534f99e5ea9c1eaaaad710ef30a37df0f87978894333850f4feac3740a3b010da7c250d060c8046cab40d0527234d4b4b28366bc7d5899948ddbfac66c848ef0f842eab95248e9d064c0ec4247483f0aa0cad7ca970365e474fe73cf79cf8c70fc7a015caa273ce41723453632cf5b809584d227f7e98e8ec41494518b0b8a8adbaf5ead6529451b116fab06529b653bffdd6d98f8322265305bdc0ff69f4a70dea414fcc63d149c564c834f24b8f7495cd9ccafa1e3f652cd3270935800ee0d5598afcaa41c150dac263408d77a61b5c77e2c3644dda1b8c333a36c30ce893140ce133827dde34d896d35cfe7d498bf6dda965a27cc77e2872fcedaf9dcb89614c758cf62ad769ac05a4fb9e27b421b82c17d15f7d2ffb6ed63c639cee97d9eea8f3934045e60b15eca5c13ebe002467c09815712165cee2af784f9e5db9f7227701ca9a3de588503c84c490f4986aa26e7b63d4c5a30157cdf82e433a1b64496392a1990b2a46b910d9a16429736308f71d8e78824a26f25f21829546b973c0905b20c2ef751eb0064eaf831874f0b58ef8779cafd02bcf075a212e79e07c73c49fc240d6845877fda649d1ab59ea06b907ec5031299a0e1fa2f8cbc241a8531ad241302b569d4581dcc944f27799f25593b97ea7681ba74d6cde9c8f58840ac4c4be3aa90e6273a64e549c47c7232f423406604c9c210eabe3d6a2343bd6c2ae72ab013ce2af32467bcfa8cbf0769f", 0x45b) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45b], 0x0, 0x0, 0x1, 0x1, r11}}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) sync() ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000012c0)={0xc, 0x2, {0x6, @struct={0x6, 0x4}, 0x0, 0x1, 0x1, 0xb7, 0x732a, 0x101, 0xa0, @usage=0x5, 0x6, 0xffffffff, [0xcbf5, 0x9ccc, 0x3, 0x81, 0x7fff, 0x3]}, {0x4, @usage=0x6, 0x0, 0xac0, 0x2, 0x6, 0x2000000000, 0x3, 0x804, @struct={0x5, 0x6d9c}, 0x7, 0x3398, [0x1, 0x7f29, 0x6, 0x7fffffff, 0xa6, 0xf1]}, {0x0, @struct={0x4, 0x8}, 0x0, 0x4, 0x9, 0x9059, 0x0, 0xfff, 0x6c, @usage=0x2, 0x100, 0x81, [0x8, 0x16, 0x8, 0x2, 0x8, 0x80000001]}, {0x6, 0x8000000000000000, 0x80}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000008c0)={0x4, 0x0, {0x5, @struct={0x2, 0x8}, 0x0, 0x40, 0xb0, 0x8000000000000000, 0xf, 0x9a30155, 0x2, @struct={0x5, 0xfffffff9}, 0x2, 0xa, [0x100000001, 0x0, 0x1, 0x425a, 0x8, 0x9]}, {0x6, @struct={0x0, 0x7}, 0x0, 0xc4, 0xffffffffffffffff, 0x23, 0x0, 0x5, 0x4, @struct={0x1, 0x8}, 0x4, 0x7, [0x4, 0x0, 0x3, 0x0, 0x3, 0x6]}, {0x8, @struct={0x9, 0x1}, 0x0, 0x0, 0x2, 0x4, 0xf0b, 0x0, 0x10, @usage=0x1, 0xf18, 0x5, [0x80000000, 0x6ab7, 0x8, 0xfffffffffffffffd, 0xfffffffffffffd92, 0x7fffffff]}, {0x1, 0x9, 0x32c}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r6, 0x5000943f, &(0x7f0000001d00)={{r3}, 0x0, 0x6, @inherit={0x68, &(0x7f0000000380)={0x1, 0x4, 0x2, 0x4, {0x27, 0x4c0, 0xf7, 0xb, 0x100}, [0x0, 0x0, 0x8, 0xfffffffffffffffd]}}, @devid}) sync() sync() 2m26.305260768s ago: executing program 34 (id=1200): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = io_uring_setup(0x1783, &(0x7f0000000640)={0x0, 0xfffffffe, 0x800, 0x1, 0x2de}) r1 = creat(&(0x7f0000000300)='./file0\x00', 0xe5) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x48, r4, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x7}, @broadcast, @device_b, @initial, {0x2}, @value=@ver_80211n={0x0, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}}, @channel_switch={0x0, 0x4, {{0x25, 0x3, {0x0, 0xe}}, @val={0x3e, 0x1, 0x1}, @void}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x44050) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = openat$ppp(0xffffffffffffff9c, 0x0, 0x8901, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)={0x2c, r9, 0x1, 0x70bd27, 0x25dfdc00, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x976}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000001}]}, 0x2c}}, 0x40080) write$qrtrtun(r1, &(0x7f0000001880)="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", 0x45b) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45b], 0x0, 0x0, 0x1, 0x1, r11}}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) sync() ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000012c0)={0xc, 0x2, {0x6, @struct={0x6, 0x4}, 0x0, 0x1, 0x1, 0xb7, 0x732a, 0x101, 0xa0, @usage=0x5, 0x6, 0xffffffff, [0xcbf5, 0x9ccc, 0x3, 0x81, 0x7fff, 0x3]}, {0x4, @usage=0x6, 0x0, 0xac0, 0x2, 0x6, 0x2000000000, 0x3, 0x804, @struct={0x5, 0x6d9c}, 0x7, 0x3398, [0x1, 0x7f29, 0x6, 0x7fffffff, 0xa6, 0xf1]}, {0x0, @struct={0x4, 0x8}, 0x0, 0x4, 0x9, 0x9059, 0x0, 0xfff, 0x6c, @usage=0x2, 0x100, 0x81, [0x8, 0x16, 0x8, 0x2, 0x8, 0x80000001]}, {0x6, 0x8000000000000000, 0x80}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000008c0)={0x4, 0x0, {0x5, @struct={0x2, 0x8}, 0x0, 0x40, 0xb0, 0x8000000000000000, 0xf, 0x9a30155, 0x2, @struct={0x5, 0xfffffff9}, 0x2, 0xa, [0x100000001, 0x0, 0x1, 0x425a, 0x8, 0x9]}, {0x6, @struct={0x0, 0x7}, 0x0, 0xc4, 0xffffffffffffffff, 0x23, 0x0, 0x5, 0x4, @struct={0x1, 0x8}, 0x4, 0x7, [0x4, 0x0, 0x3, 0x0, 0x3, 0x6]}, {0x8, @struct={0x9, 0x1}, 0x0, 0x0, 0x2, 0x4, 0xf0b, 0x0, 0x10, @usage=0x1, 0xf18, 0x5, [0x80000000, 0x6ab7, 0x8, 0xfffffffffffffffd, 0xfffffffffffffd92, 0x7fffffff]}, {0x1, 0x9, 0x32c}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r6, 0x5000943f, &(0x7f0000001d00)={{r3}, 0x0, 0x6, @inherit={0x68, &(0x7f0000000380)={0x1, 0x4, 0x2, 0x4, {0x27, 0x4c0, 0xf7, 0xb, 0x100}, [0x0, 0x0, 0x8, 0xfffffffffffffffd]}}, @devid}) sync() sync() 12.206746998s ago: executing program 5 (id=1661): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x38, 0x2c, 0xd2b, 0xf0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x1, 0xfff3}, {}, {0xfff5, 0x10}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x3}]}}]}, 0x38}}, 0x4000084) 12.052392652s ago: executing program 7 (id=1662): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x58, 0x0, &(0x7f0000005b80)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}, @register_looper, @exit_looper, @exit_looper], 0x0, 0x0, 0x0}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="180000002d00090026bd7000000000000400000004001d"], 0x18}, 0x1, 0x600000000000000, 0x0, 0x20000000}, 0x84) 11.758482464s ago: executing program 5 (id=1664): r0 = fspick(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = accept$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @rose}, [@default, @null, @netrom, @netrom, @bcast, @default, @netrom, @null]}, &(0x7f00000000c0)=0x48) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000100)=0x400, &(0x7f0000000140)=0x4) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x0, 0xc9}}}, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) set_mempolicy_home_node(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) 11.721543732s ago: executing program 7 (id=1665): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0x6, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x5, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8b00, 0x642, 0x7, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0x10, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x3, 0x7fff, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x400, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x8, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x80000002, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0xb, 0x0, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x8, 0x0, 0x60000000, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x800], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x5, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x7f, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xfffffffffffffd7e, &(0x7f0000000040)=@ready={0x0, 0x0, 0x8, "1ae65a95", {0x1, 0xbf9, 0x6, 0x9c, 0x8}}) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) clock_nanosleep(0x8, 0x0, &(0x7f0000000280), 0x0) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x94}, 0x1, 0xba01}, 0x810) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) io_setup(0xc, &(0x7f0000000180)=0x0) io_cancel(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0xfff2, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 64) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) (rerun: 64) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) syz_open_dev$dri(0x0, 0x0, 0x0) (async) socket(0x2a, 0x2, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000080)="02", 0x1}], 0x20) (async) r8 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r8, 0x84, 0x1b, &(0x7f0000000000)={r10}, &(0x7f00000000c0)=0x8) 11.070404576s ago: executing program 1 (id=1668): syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4c, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x900}}}}}}]}}, 0xffffffffff600000) 11.000659496s ago: executing program 6 (id=1669): ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, &(0x7f0000000340)) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004a40)=@newtaction={0x28f0, 0x30, 0x1, 0x0, 0x0, {}, [{0x26ac, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x15f0, 0x16, 0x0, 0x0, {{0xb}, {0x154c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x38f7f430, 0x8, 0x3, 0xaa7, 0x23ccf015, 0x0, 0x9, 0xffffff7f, 0x2, 0x5, 0x7, 0xb9, 0x11f, 0x905, 0xa2, 0x4, 0x2000, 0x8, 0x749, 0x5d, 0x3, 0x8e, 0x5, 0xfffffff0, 0x7, 0x5, 0x3, 0x5, 0x100, 0x8000000, 0xb, 0x191a, 0x9f, 0x1, 0x3, 0x6, 0x8000, 0xec, 0x9, 0x3, 0x80000001, 0x6, 0x3b4, 0x97, 0xfffffff8, 0x1, 0xf0000000, 0xffff07ec, 0x7, 0x7, 0x0, 0x8, 0x6, 0x7, 0x3, 0x8224, 0x6, 0xe6a0000, 0x2, 0x4, 0x6, 0x8000000, 0xc, 0x0, 0x5, 0x6, 0x0, 0x10, 0x1, 0x9, 0x2, 0x1, 0x40, 0x9, 0xeda8, 0x4, 0x7, 0xfd, 0x1, 0x9, 0x8, 0x0, 0xd, 0x9, 0xc, 0x5, 0x0, 0x3ff, 0xa7d, 0x0, 0xa, 0xea6, 0x8001, 0x4, 0x70, 0x2, 0x8, 0x9, 0x4000000, 0x7, 0xffffffff, 0xfffffff2, 0x4, 0x5, 0x4, 0x800, 0x5, 0xe83, 0x7fffffff, 0x80000000, 0x5, 0x3, 0x8, 0x1, 0x752a, 0x5, 0x3, 0x1, 0x9, 0x10, 0xfffffff8, 0x0, 0x6, 0x7f, 0x0, 0x101, 0x7f, 0x7, 0x0, 0x10001, 0xfffeffff, 0x7, 0xc8, 0x401, 0x4, 0x0, 0x9, 0xe1, 0x1, 0x5, 0xb769, 0x7, 0xf5, 0x4, 0x0, 0xd, 0xd, 0x20000, 0x8d4, 0xea8, 0x7, 0x7, 0x101, 0x6, 0x81, 0x7, 0x2, 0x3, 0xd, 0x3, 0x7fffffff, 0x8000, 0x4, 0x401, 0x4, 0x1000, 0xc6b, 0x4, 0x8c, 0x3, 0xf09, 0x68d, 0x3, 0x0, 0x1, 0x4, 0x4, 0x8753, 0x7, 0x1, 0x7, 0x9, 0x1, 0x7, 0xc, 0x7ff, 0x0, 0x8, 0x6, 0xd7, 0x1, 0x1, 0x0, 0x18f92137, 0x1, 0x6, 0x2, 0x4d90, 0x7, 0x7, 0x4, 0x4, 0x0, 0xfff, 0x7919, 0x4, 0x4, 0x1ff, 0x8, 0x4, 0x8000, 0x7, 0xf, 0x4, 0x0, 0x1, 0x8, 0x7, 0x7b, 0xff, 0x3, 0x2, 0xb000000, 0xf94, 0x5, 0xc, 0x5, 0x3ff, 0x5, 0xa, 0x9, 0xfffffffc, 0x3, 0x200, 0x7fec, 0x8a9, 0x4, 0x2, 0x3, 0x3, 0x7, 0x6, 0xa, 0x6, 0x0, 0x1, 0x3, 0x31c, 0x5abc47b6, 0x6, 0xe0, 0x9, 0x0, 0x2, 0x0, 0x6]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x4eba, 0xc, 0x4081c6b4, 0x4, 0x8000, 0xb74, 0xfffffffa, 0x0, 0x1, 0x200, 0x0, 0x4, 0x5, 0x400, 0xfffffff1, 0x7, 0x3, 0xa, 0x5, 0x8, 0x7, 0x2, 0x3, 0x7, 0x1d06, 0x3da, 0x81, 0x3ff, 0xbee5, 0x9, 0x40, 0x8, 0x515, 0x3, 0x0, 0x7, 0x81, 0x3ff, 0x8997, 0x1000, 0x6, 0xde, 0x7, 0x7, 0x6, 0xa, 0x0, 0x6, 0x4, 0xffffffff, 0x3d, 0x0, 0x8, 0x2, 0x2, 0x21b54ef0, 0x8, 0x86b, 0x4000000, 0x0, 0x962, 0x5, 0xffffffff, 0xfd, 0x1, 0xc75, 0x4856, 0x9, 0x5, 0x101, 0x9, 0xfffffff7, 0x7, 0x9, 0xfffffffe, 0x8, 0x2, 0x83c8, 0x1, 0x7, 0x10001, 0x8, 0xe, 0x9, 0x7, 0x0, 0x5, 0xffff5a92, 0x0, 0x1, 0xfffffff8, 0x78, 0x7, 0xdcca, 0x7, 0xa17, 0x8, 0x1, 0xc2, 0x6, 0x2, 0x3b, 0x4, 0xd0000000, 0x7, 0x4, 0x4083, 0xf796190, 0xfff, 0x9, 0x5, 0x3, 0x2, 0x9, 0x3, 0xffff, 0x5, 0x2, 0x80000000, 0xf, 0xabd8, 0xb, 0x8, 0x4, 0x7, 0x7ff, 0x9, 0x8, 0x3, 0x1, 0x5, 0x8, 0x0, 0x81, 0x5, 0xfffffffd, 0x101, 0x9, 0x8000, 0x1c, 0x9, 0x2, 0x5, 0x500000, 0xa7, 0x1, 0x1, 0x6285fc96, 0x2, 0x5, 0x1, 0x0, 0x1, 0x3, 0x40, 0xd73d, 0xb, 0x401, 0x8, 0x9, 0x9, 0x5, 0x4, 0x1ff, 0x9, 0x3, 0x3, 0xffff402d, 0x2, 0x8, 0x9, 0x1, 0x14ca, 0xa3f, 0xfffffffb, 0x0, 0x8, 0x80000000, 0x7f, 0x3ff, 0x7, 0x2, 0x0, 0x8001, 0xb07, 0x3, 0x3ff, 0x3, 0x9, 0x6, 0x3, 0x7, 0xf, 0x0, 0xfffffffc, 0xfffffe01, 0x6, 0x5, 0x80000001, 0x2, 0x8, 0x6, 0x7fffffff, 0x2, 0x0, 0x40000004, 0x7, 0x1, 0x9, 0x1, 0x4, 0x8, 0x1a, 0x2, 0x4, 0xfffffffc, 0x5, 0x1, 0x3, 0x7, 0x4, 0x5, 0x3, 0xffff, 0x3, 0x30, 0x45, 0x3, 0x7, 0x0, 0x2, 0xc28, 0x1, 0x1d, 0x1000, 0x9, 0x2, 0x10000, 0x0, 0x3, 0x490, 0x5, 0x1a, 0x8, 0x6d49, 0xd878, 0x3, 0x9, 0x6, 0x0, 0xfffffffe, 0x9, 0xf, 0x40, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x7ff, 0x3, 0x1, 0xc, 0x3, 0x6, 0x580, 0x7ff, 0x3, 0x9, 0x4, 0x8, 0xf, 0x7fffffff, 0x3, 0x1, 0x5, 0x8678, 0x4, 0x9, 0x8, 0x2, 0x5, 0x401, 0x1, 0x1, 0x8, 0x7, 0x0, 0x2, 0x0, 0x5, 0x8, 0x2, 0x3, 0x7ed2, 0xff, 0x0, 0x7fff, 0x4, 0x3, 0x0, 0xb2fe, 0x6, 0x3, 0xd5, 0x9, 0x708, 0x3, 0x6f2, 0x2, 0x2e2e, 0x200, 0xe80c, 0x0, 0x7f, 0x80, 0x2, 0xffffffff, 0xc, 0x6, 0x2, 0x2, 0x10, 0x2, 0x0, 0x3, 0xfff, 0x9, 0x6, 0x800, 0x9, 0x7, 0x8, 0x0, 0x5, 0x8000000, 0x2, 0x100, 0x0, 0x0, 0xffffffff, 0x5b1672c0, 0x8, 0xf, 0xf2e, 0x0, 0x9, 0x9b4, 0x5, 0x8, 0xfffffffc, 0xfffffffa, 0x8001, 0x8, 0x8, 0x5, 0x1, 0x7, 0x3, 0x319, 0x1ff, 0x8, 0x8, 0xffffff25, 0x7, 0xfffffffd, 0x1, 0x1b, 0x6, 0x1, 0x81, 0xb43, 0x5, 0xfffffff8, 0x55, 0x0, 0x9, 0x8000, 0x0, 0x100, 0x2, 0x7, 0x3, 0x9, 0x1, 0xffffffff, 0xbb71, 0x6, 0x8000, 0x7269, 0xc6, 0x0, 0x8, 0x10, 0x100, 0x0, 0x6, 0x5, 0xa60, 0x0, 0x5, 0xfffffffb, 0xe5, 0x9, 0x1, 0x4, 0x1, 0x8, 0x0, 0x3, 0x53, 0xccb, 0x5, 0x3, 0xa, 0x9, 0x1, 0x6, 0x6, 0x9, 0x3, 0x2, 0x2, 0x6, 0x1, 0x48000, 0x3, 0x3a5b, 0x70, 0x1, 0x5d0f, 0x4ea8, 0x9, 0x9, 0x6, 0x7fff, 0x8, 0x100, 0x0, 0xea, 0x2e4f, 0xd7f, 0x0, 0x7, 0x0, 0x7, 0x6, 0x9, 0x7f8, 0x9, 0x2, 0x536, 0x0, 0x8, 0x2e8b, 0xfffffff7, 0xc, 0x0, 0x72, 0xf, 0x0, 0x9, 0x10001, 0x2, 0x9, 0x3, 0x7, 0x42, 0x7, 0xd9e4, 0x6, 0xffff8001, 0x16, 0x3e, 0x0, 0xd, 0x1, 0x14000000, 0x7f, 0xfffffabe, 0x7, 0x9, 0x17, 0x810, 0xfffffc01, 0xd6, 0x1, 0x34b93f85, 0x0, 0x7ff, 0x5, 0x0, 0x71, 0x5, 0x2, 0x1, 0x4, 0x100, 0x861, 0x6, 0x9, 0x80000000, 0xd, 0x2, 0x11ad, 0x1, 0x7, 0x3ff, 0x1, 0x40, 0x8, 0x3, 0xb, 0xfffffff8]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xabf}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}], [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x2, 0xffffffff, 0x4, 0x9, 0x36, 0xd, 0x2, 0xf6, 0x81, 0x40, 0x2, 0x9e, 0x5, 0xe, 0x9, 0x9, 0x10, 0x1, 0x1ff, 0x0, 0xbada, 0x5, 0x0, 0x1, 0x5, 0x1, 0x4, 0x7f, 0x40000000, 0x0, 0xfffffff9, 0x23, 0x4, 0x3, 0x200, 0xfc, 0x7f, 0x4, 0x80000000, 0x7, 0x7, 0xfff, 0x5, 0xd, 0xff, 0x6, 0xeb5, 0xe3, 0x800, 0x9, 0x4, 0xffffffff, 0xe245, 0x7f, 0x4, 0x9, 0x6, 0x8, 0x3, 0x1ff, 0x8, 0x7ff, 0x7f, 0x8, 0x9, 0x1, 0x7, 0x401, 0x5d, 0x5, 0x0, 0xa, 0x0, 0xfffffffb, 0x7, 0x2, 0x6, 0x2, 0x7, 0x9, 0xfffffff9, 0x8, 0x4, 0x1, 0x7f, 0x5, 0x8, 0x3, 0xffff, 0xfffffffb, 0x9, 0x1000, 0x8001, 0xf7b, 0x0, 0x7, 0x5, 0x10000, 0x6c, 0x9, 0x9, 0x3, 0xffffffff, 0x81, 0x9, 0x1000, 0x0, 0x4a08a66e, 0x7fffffff, 0x4, 0x2, 0x8, 0x7f, 0x40, 0x2, 0x8, 0x4, 0x55a889c3, 0x0, 0x2, 0x0, 0x8dc8, 0x7f, 0xb0b, 0x4, 0x6, 0x8, 0x10000, 0x1, 0x6, 0x401, 0x20, 0x5, 0x7ff, 0x8, 0xf, 0x4, 0xffff, 0x9, 0x0, 0x2, 0x6, 0x9, 0x2, 0x7, 0x4, 0x3, 0xc1c000, 0x8, 0xffffffff, 0xa, 0x5, 0x2, 0xffffffff, 0x2, 0x2, 0x1b8, 0x9, 0x1, 0xaf6, 0x2, 0x4, 0x4, 0x8a, 0x9, 0x0, 0x72d6, 0x6, 0x1, 0xa, 0x9, 0x63, 0x9, 0x9, 0xb, 0x0, 0x1, 0x80000000, 0x1, 0x7, 0x3, 0xfffffff9, 0x4, 0x1000, 0x101, 0x80, 0xd, 0x8, 0x2, 0x2, 0x7a5, 0xffffffff, 0x1, 0x8c2, 0x2, 0x3, 0x5, 0x2, 0x10000, 0x4, 0x30e76042, 0x8, 0x2, 0x4, 0x4, 0x8, 0x7fffffff, 0x9, 0xcda8, 0xfac, 0x3, 0x9, 0xb, 0x1, 0x0, 0x62c60c41, 0x4, 0x2, 0x7, 0x2, 0x2, 0x7ff, 0x7, 0x0, 0x7, 0x8, 0x1, 0x7, 0x4, 0x6, 0x6dfe, 0x1, 0x2a4, 0xacb3, 0xffffff56, 0xf4f, 0x19, 0x8, 0x4, 0xe3, 0xe, 0x2643, 0x5, 0x1, 0x3, 0x2, 0x9, 0x2, 0x0, 0x7, 0x1000, 0xd7, 0x2, 0xe792, 0x7ff]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x1, 0x5, 0x1, 0xfff, {0x8, 0x2, 0x0, 0x7, 0x3386, 0x8}, {0x74, 0x2, 0x188, 0x3, 0xa589, 0x9}, 0x4, 0x1, 0x81}}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x9, 0x3, 0x800, 0x100, 0x80000001, 0xe, 0x9, 0x800, 0x7, 0x0, 0x7, 0xffff722a, 0x6, 0x7f, 0xf5, 0x7fff, 0x5, 0x6, 0x10000, 0x9, 0x8, 0x3, 0xfffff682, 0x100, 0xbca, 0x351b, 0x0, 0x5, 0x7, 0x7, 0x0, 0x38, 0x1, 0x0, 0x93c, 0x2df2ee7a, 0x2, 0xc019, 0x3, 0x5, 0x4, 0x0, 0x80000001, 0x9, 0xfffff424, 0xfffffeff, 0x10001, 0x5, 0x9, 0x0, 0x6bd, 0x7, 0xc, 0x7fffffff, 0x0, 0x5, 0xfffffff9, 0x9, 0x4, 0x1, 0x7, 0x20e, 0x5, 0x3, 0x62, 0x6280, 0x3, 0x0, 0xffff, 0x200, 0x5b14, 0x10000000, 0xb19, 0x9, 0x275, 0x320d, 0x8, 0x8, 0x2, 0x2, 0x67b9, 0x20000, 0x6, 0x1, 0x8001, 0xcc, 0xe, 0x7, 0xfffffff9, 0x6ab7, 0xa, 0x9, 0x0, 0x800, 0x6f, 0x100, 0x3, 0x40, 0x2, 0x8, 0x0, 0x3, 0x3, 0x81, 0xfdb, 0x3, 0x4, 0xfffffffa, 0x0, 0xca, 0x100, 0xb, 0x10, 0xf, 0xffff8001, 0x7, 0x4, 0x80000000, 0x8, 0x3, 0xd9b, 0x5, 0x8, 0x3, 0x4, 0x9, 0x7, 0xfffffff9, 0x5b8, 0x1, 0x7, 0x9, 0x7, 0x2, 0xa2, 0x527, 0x7, 0x1, 0x9, 0x4, 0x8000, 0x5, 0x401, 0x7, 0x0, 0x6, 0x80, 0xfff, 0x8, 0x17, 0x2, 0xffff, 0xe927, 0x2, 0xd, 0x3, 0x4, 0x9, 0xe73, 0x4, 0x2, 0x8d97, 0x3, 0x4, 0x9, 0x9e, 0xffff, 0x1, 0x1, 0x0, 0x5, 0x0, 0x0, 0x3, 0x2, 0x8, 0x7, 0x42411af5, 0x4, 0x2, 0x5, 0x6, 0x8, 0x3, 0x7, 0x9fe, 0x70, 0x0, 0x4000000, 0x4, 0x101, 0x0, 0x1, 0x4, 0x4, 0x7f, 0x9, 0xc, 0x9, 0x1, 0x1, 0x400, 0xfffffff8, 0x5, 0x0, 0x120, 0x2, 0x6, 0x7, 0x4, 0xc50, 0x401, 0x4, 0x769d, 0x8, 0x0, 0x9, 0x5, 0x5, 0x8001, 0x5, 0x3, 0x7, 0x0, 0x200, 0x3, 0x3, 0x4010, 0x7, 0x7, 0x1ff, 0x9, 0x8, 0x1630, 0x4, 0x7, 0xf9b, 0x2, 0x4, 0xc6b, 0x8c, 0x6, 0x3, 0x3, 0x5, 0x1, 0xffff, 0x3, 0xd4, 0x1, 0x5, 0x9, 0x7, 0x1, 0x16]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x4, 0x3, 0x9, 0x10001, {0xbd, 0x0, 0x7, 0x7a2b, 0x2, 0x6b2c}, {0xb, 0x1, 0x3, 0x5, 0x7, 0xa}, 0x7fffffff, 0x9, 0xfffff800}}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x18e2, 0x20000000, 0x5, 0x1, 0x13, {0x8, 0x2, 0x40, 0x3, 0x4, 0x1}, {0x60, 0x2, 0x0, 0xf1, 0x86bf, 0x2}, 0xd, 0x3}}], [@TCA_POLICE_RESULT={0x8, 0x5, 0xc203}, @TCA_POLICE_TBF={0x3c, 0x1, {0xb, 0x2, 0x1, 0x200, 0x7, {0x9, 0x1, 0xaf8, 0x5, 0x1db5, 0x5}, {0x3, 0x1, 0x9, 0x6, 0x3, 0x401}, 0xc, 0xffffffff, 0x68dd}}]]}, {0x79, 0x6, "bb10e2d8019e1780c47e997524058086688841947fa81348e1d14a04ca15510f78a696a96991cdccf607451b328daf6f69704130a6224dfed36fcc8a5d6d24ce2878a47ff7b29c72d5b7b31f680b1b5f6fb82f7fa4c3a04f0573f696a6186cce15a4296cd0e778a8af25bf992f5f4912040d35fb8b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_tunnel_key={0x1070, 0x1e, 0x0, 0x0, {{0xf}, {0x40, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @private=0xa010102}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private2}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}]}, {0x1004, 0x6, "ddf48a156424f93400e671eaad11cdbc2004203630f799c0cc69eed56bb79161e7167f6dd8c570b6184322134fc0fabd1009cdc4cfe5bedfd62c5c92947f0daf33c1bbd7c0a2c40c22835e29fcd4cc8799eb05b8d3889a81cbd0c9154020a07fa943eb1592ff8c3eade80510b0228d385b9c5617bf20629b1be15df660050bc920ddbad7f6a1210ad3b2da5fbbe0a3bc8bce1e053ec3a5a3b74168c45ef11b33a8b791eabd303e2f88dc74018c15273fe7b180cbac8058239366fa27af1d699cdfe5369f3b700fe5a46894b9a6d041782ffe3b80c1569c127305d5d85c0fd3bceade9b4fc98e53ee030a4eb3ec7fe27fcff1b0266e186e71aaf2cab2f6cd68cf7dc1c2f28d0562af8601f26a83766fad57cd5ab0ffde6821ed0f8c7179368ffd490ba693f55433f5a6b31f56da08cf19ceb12d746c56aa99a49e8f8af917aae2d4c88babbd5be87e57d7db7da4b6f1be481bd358f2eed475859ca8f0f8786ca872d615431e1f64945e802c63b44f955c908b1becb3aa7f51bc475e2a1530a9f6c19c30d5bfd268436d65e5280cb114836fb6872368c46e171219ce0ced6b500d2dcdfec4288bc1791283cbc63283c043ac4c36899c59a313e63cfbdd0da77596f71631258f4dcf5e9689fda03f1bec7e4009520687b319bf0b6401c319efe2458564f9c602b37fd5bf07de0100c638c2c2776aa8f4ce90a2a6acfa1ad74d906a37980e49144dd7cce74203727c4ebc5dd59c254ab1f06af9d8355c9fdd8333b276360abbead92a794959bd18e63c7ff689d86c50c1263ddca18c5e34acbb4a38ecabec9e6b34be2e197aadac3c8d8ef128ff4b664fbee8e33ebb7077c920dacfb2d330377dec22d45cf7875601c6358cac930d453ab8e030fe4c55981b45b17c730ff8f4b223609794df5badea10eeb9ff8e6000bb7eb23e70c9f879a8196148452b8d47c62cd1919b7142cae1baf3e9f83286d14dc30d8d49dc990ce6d30269879761c889289851fcec4cac009adfd0334d2ef045f1e8eb3ff3805da64be50c5cfbe049a8a8beed72e5c4bda4bcac6e14a46a378aa856361728cb3df31cfae079546127d833fe197f1bad862ffe8c781cb864bbc96d706b32e169b390e5eb9c430c3b60bbc1d60f616cef026f1efb63b0b1b7cb1187ec9e7f1f311928b9f96ad4242835de141440e7ef3f4ab38f3b1a2a9cd25ab7d9a66820e32da47aa45c0cb2eaf1d86bb16e6ee43025f3ed39ce319c0c833015e50d10e3e968018c91c47f975326029a6ead86e31ea330a1eb5f802ea084654b5dbd0436246954c495f3c2818b391d5ba4fc0a154b479c3099d7a963188380359aa2572d44623b424d6265c00e76a4f1b2576b0d76404d5c7b2f93f4a3831573097a55985a1662dcaa90a16c6423edc3ad355551241c8c0fbbce54c2e31f490d16c0d10640f2b128f4c9d93b136993c34c2169bae3effdc0b360a62db0defe817c47e5557bf8bb2ea494848e4dddf30899cb07f52f82a9cf7c632ca59612c314d481e173623008f2526481c8aa78b97e915caba55d2132e0607cbbe13fcc1d046fb7bbece109169744fa72b238e5e6a78ea58daa2456a9f2360232a8d735a3c9d6aa46a340d0027621eb4568a7c86e0a405f5769a0014f3e0c874e5804a3e828d84a4e1341524feceb244c2b1a3ef099098cd77fe3d0a6e252861bc2cdf189dc43873bc586c211bd0a698a7c9450016c586efe4eb59a630278da0ef9cd53b15dd2e255b8630e5b930df8a2a2ed973639d4a10e34f4070172cb63902fcd64de6b75eca51f499ec4a57003147f502ae575dea75c43490ad36b1bdec20cc1e4b756d0d96a4553efd5d1c31de73d8f79672719cd43d1a227f9550e75c7d2bd3e23e5f1840bfa758d28f4b488c02786dfbb6cd2c2f4c6371fd4c49fc1782533e20262d5c774d4709b144eda41f60f4266a551028936d69a68391524bc162b16f4af5317fad86e13d7e68fded2463ee438f0659fe50cb29343402172859cf61f72daf5f6dede769bb9290937765c72803a82fc3d19313e538c05df27054ee8fd74f5ca3f71adbaac874a4a3e5f3905b4a55d3b4ab16c6ceb7ab04a8c3b069700c566e67a6952e7b6b727f5c7f772621fd0ee1f0a59c6735b93b046f38d26432652e294f7d8d7339e48cc96658ee51b69ebbf83688002f166e6ce5e7d1a672d03d060801735d5a0a5854d21ce819ed08266d669ae3ce6e085a14b510056118bc0a5ec71a16e669ee80404a3e6afe22bf5ab01d11b46d52f17029de4c3094aa346d0ecd12da3c834b8e848c98e78fd8b8ec6a64e833e8157c36e5cc8ae806fa6ee41e72198e7deb1cf5597dea9a84b63080afc481f1ef008f1bda662f30a78dc51a74cc5e680586ee29b359285f34d476fd9f16b52a2843c97ce9a8a85f2589b3f9d3ef1b4f80613486a244ad99ab787cee41b8470cd1cd111557a804d7107113a576f33e59055ad3ceef1d236d1a4ad5f6ecfa646d1d3f3e906f5337c154f760608f9c669596d08c5ab809b6a3fb9418117ecec20ce58bb03442a1f1d8050b20df2c7030ba44689b377a3d9c70797fc7d053cb9ef16838b3b0888c5fbdd7a6b2433c3a94b04f449efe134584aa3f9ff22f7dec012b0a35aa6ea76cf0776deaf8fd41677bdc1661fcedba70ee8d7889bcd2c45ca7989e6123f8c5463a75085bf70451d7628ed84d446993f1fe596bdfe1f556801eedcb980d9c8aba553717b08a12cf0edcd2a1965951ab15bebb332ffbb0d131f87da478f8eb760d454fd188129723bc633c677f4d7ab1d74cc7c029a02e5ee407aeacea07c817f4806efc6ce7b7e38337e483c30a9f7e5595393b0ec492bbc0e18f143e8f07c0f6357d3c8c3203964c68525476ead120f2daad988d0b0880436df9b97c094cb8aa8a0b928b7b576e12c5dcd8904424e8f697e568604586a2d12b57710310364c13015cd9f97c1e4ecb62241fd3a4262fe4fbd6d3f9a3c1252ce03127750dd9f2827e671e72051058bd599e9e342a37281dc5dec91489a4f577ff7c0b2cc059d39252850048c6b2eac5d004f2a8c978dad23e44620082547aeccb20ecd0a7691ea4076f7217ea30cc70970547aa285dd6c9154359d70b3a3fd0b34a35a316832fe7464365679cfa8de40c3500fff78d780ee4d5188a747cfc1be05b41d3a633374cbf43b23f0dbea068727599c9ef6135f29f15252cfd977c757526f502ded505ad864cb70029496f0a38f71602684260f9456a51a389d11a5b6680961df3d479d951f0275c76eef7ab92fe5afdf2ab81563435840f69bd1fa51f97a9f9a5abdcfdddb8568c15cc79d13a30b254d20f436f801b97bfe06918a3287f634e64038967a640de345a235d8bc28701a3dfb5d3a92669fb268373ef1aca3f1a4e787ce919e5dae9f9f3a625363233e496543a976012dbf4d8291a7e79b7483da66951f53a8005fb2453be9f0fad0a758bcebaaea34e470f6447582ccd9b913af218cfcad730733e42d45ca1abbcc9ac2280c1040e74cedd124a5157358caa9624e8ccd3a283fd310f8ed6546e9ab898964d4a3535962b13a434644ebf564e1da7667a1b8b39a6c5af4fbc96594826cd4e6479fab458b96ca2b0fa7b5787dd600efdde5fb63916f2644aad8d8d87de0fe388a5abb6911229c77ac5d2ff5a4fd862b61a9001c530927bb75d405799935aa49913f1622708c72b2ec18d6b605e6f316c92f578ecbca7d9b386a571057cf65e1f94f654054ecdd94cea76bb758bf30af098606db4c8e5668de186a4f792df6e73517380ff5e4b2f709687408db34704cca05d98bcfcc570e667e5d0adc71be1dc8936f10163ffaee578eb7f30d48f7365c14d2d0a5cb90484a015766c39d5652930dd80b5f997b7f7c9d4a127b7e67c8c54635693751793c53517273a7f535fadb3af01f6e60db363f9b31f9f87994fff5bfe4ca51832fdd4f0e4d5b4adf835f54d3330de838dd0e98f8d59937dd9d3d194614107be20f9ad4eee878c88cd679c65ed449b51a166e136b97dd8c9b1b626cfe25afa534137862b3e4574e419c7c3fc1d3f26ea6d800333c2c57e8ea629899ec177beee08e0648ddbb6527660d783dd9c3ae33e5021aacdd21c019b9aea22997e58542c9b44b8348609b9c079f5a671fea49338c85f239d96964ca19c750a504f413955ea50ebfa77b18130081904001fddb444acb5da0f1b0e5001158ff555e0ed41efa859c232f4be0632785f39396a638705834c8873caefb576884dd2025ac36b9fe38b6e1d0006d51c5e4aa713c48622984d30be33aece7f7825bca1a2fe3f07f21a5171f309602a050367faae0f3c93a47c8a55f1ce7076ff9000f5b01463b41cd6522d8b2b4a234f906aa4d5a2d60fd4d07b5af4746b3222bdb62460187131cc51303d45a55436716ffef05c0588861df775abd4ea9483929b7031ef8746e5ec99ad3ca98d0aec3bdd1aa374532a311b90c9eaefe56393b2856eb5d383d551d5a29acf385b59ea018f239fce400f6a8df4161a8b33d059823330104683b3d525a47fbc73e53039974625990bc27659f07109227955d81ff07174abf988fc9a5c2e503c8f70108b465f3524fbb9e62c1fb8e53448fe7a39f93d78f799a71f3c7c7c012e1f18b27284d50b9f55834a21a6cf6421e56d8dba1c112afb04bc7172f81933a894145c958b59f245e8940f930790ffca5d723a44a988692937cb09995cb9012a7b782aba4c54b931d340da5d4bc4ce2bf22c530209bc2cbf082c465b177895a0622baeea95825b79c3720f673f8fc539f05534dbcfb16f5aeea8aa90c91bcc7680aa9f327bc880bd651055ca63bd732cc9f32078c61faebf04b55ad852153e08c96771ec611a11c493182f26f34c83d188b62423abb7a5e382294a62bbb57a4148d0b8c46359f72c2d85aaae32a5a7b37f3963beefc0cfb45a83715462e0d5970e3fa85e70c7f54248346c3afa8dc91e0e9b71bc162081ce93440e02c7547129ba52a84aa3fee3eae63e3a57f4dbafaec4b555641ef9ef6bee96cca01bf7ab5e99a6eecdc225153b0ae270c61fade332b3a2646dab1b4f5836c5d5ef3b515322cf1b787cccf8b1a293ab521f2c993174e55b2da1429a36bb9ca6ac6a40d732eb2c09017f50546330839e5edea85826d95f309b17104233fe67f27a017190f1b833607f49df37bc0d5a2b4c5f1d4361ce3501219ec28cce40d1c8d46290b5eb0e581416601920b48461eac52fb8cd70227d34a9a4aa274e81ed1459fb883389c976dceca5939aa801e90aaf585a31614f2bdd644b5fd38be6a3646b9737dfe251308a25af9c0a74441774b49ce53ccbb57c61c36ae3df7dd8d61d8641dd954d01796885833b39c0400ea2ae8c06ed6f0c6d9aac3a7de40f3a7eaa035ffc74881393f4eefcaa3492eb2e54f0bd21152a24b471b6ef4f36d10eb3f77cdce47fda72b2d43dbaccd0403b021ce1f5a82085ac21394571ba35f05b49a2d7de8b2dc7409da7ddb2864e298c4ee6d85329b5091858b9b32d808b4f67fcf50156e7ebf0caedabc6267102881c9277957192615b5f3a7da528d24850f3c853c499082e7ded465fcb7df38bce9181ac2620376ee1dd3abb16202c35efcca0a845dc984e7dd24e2c1f3f26f59111f3fc7b997b4d6d8a2ebba8bc56f2e596aa93ab686426a7e1f9cb1fd013e080e107092ecf54ab0cac446102ebbf4ab97909725d16b22335852cfe5e3484f5a410f0f544899e6176d5b79d9c213ad12d426949056a41812eb7dd166f0f8475002cb029484605a42"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0x230, 0x1, [@m_mirred={0x90, 0xa, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0xc, 0x20000000, 0xa0b, 0x5}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xffffffff, 0x5, 0x10, 0x2}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4025, 0x4, 0x0, 0x4, 0x3}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0xd8, 0x20, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x1, 0x1, 0x3, 0x7fffffff}}]}, {0x94, 0x6, "e0aea23d6eebeeab55912fc34eaa42db9e333843f06623eebc400332e1193f0aa2ca3bde15a5339fd5c84031b447623e46e977dc90ae5093fbcc0c980afee0982f29e31cd2a86384c5da3fe8e2d0c745e465d5c34d02cc44c9ca17414f1501a3c89b1eadfc2035c01d6134a3da1eb9bfb036f8450b6ecf93ea651e257d49666dc1035d3a661455eba1476b5308c35c11"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_skbmod={0xc4, 0x2, 0x0, 0x0, {{0xb}, {0x8c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x1, 0x20000000, 0x81, 0xfff}, 0xe}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xe}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7f, 0x2, 0x8, 0x1, 0x873}, 0xf}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, {0xf, 0x6, "1df7fae888e399ecc544ec"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x28f0}, 0x1, 0x0, 0x0, 0x804}, 0x0) ustat(0x6, &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x1, 0x84) munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) gettid() r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @pix_mp={0x7, 0x10, 0x34325241, 0x4, 0x3, [{0x4, 0x52b}, {0x0, 0x7}, {0x4, 0x1}, {0xc, 0xb}, {0x8000, 0xcdc}, {0x80000000}, {0xd7, 0x1}, {0x80, 0x8}], 0xa1, 0x80, 0x6, 0x0, 0x3}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x10001, 0x2, 0x2}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix={0x4, 0xfffffffd, 0x32525942, 0x4, 0xfffffffb, 0x4, 0x6, 0x4, 0x0, 0x4, 0x1, 0x7}}) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="796104000000000000107e000000"], 0x14}}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x141040, 0x42) mount(&(0x7f0000000000)=@sr0, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x100080f, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000000300)=0x9, 0x4) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 10.169688643s ago: executing program 5 (id=1670): syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) r0 = socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r1}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000080)={r1}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="ec002812", @ANYRES16=r5, @ANYBLOB="000225bd7000fddbdf256f0000000c009900ff0300001f0000000800a000ff070000080026007b0900000800a00008000000050018010b00000008002700010000000800a1000100008008002700010000000800a000060000000800a00000040000080027000200000008002201350000000a0006000802110000000000050019010b0000000800270001000000080026006c0900000a00060008021100000000000a000600ffffffffffff000008002600a309000008009f000500000008009f0002000000050019010b00000008009f00030000000800a000ff7f00000800a10008000000"], 0xec}, 0x1, 0x0, 0x0, 0x40}, 0x44000) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x500) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 9.970709958s ago: executing program 6 (id=1671): ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$ptmx(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgsnd(0x0, 0x0, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r3, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0xc4, 0x0, 0x0, 0x9) unshare(0x0) 9.574257248s ago: executing program 1 (id=1672): socket$pppoe(0x18, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x40810) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000580), 0xa, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$radio(0x0, 0x3, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='P\x00\x00\x00'], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004040) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xfe3b) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@delchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x6, 0xfff2}, {0xe, 0xd}}}, 0x24}}, 0x4040840) syz_emit_vhci(&(0x7f0000001e00)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0xf1, 0x0, 0x2016}}}, 0x7) syz_io_uring_setup(0x10d, 0x0, 0x0, &(0x7f0000000280)) 7.740808854s ago: executing program 1 (id=1673): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) mount$overlay(0xffffff8c, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) lsetxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100), &(0x7f0000000600)=@v3={0x3000000, [{0x4, 0x3}, {0xffff, 0xc4}]}, 0x18, 0x0) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f0000000140)='./file0\x00', 0x0) 6.663395227s ago: executing program 1 (id=1675): connect$unix(0xffffffffffffffff, 0x0, 0xffffffffffffff57) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d0000008500000008000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x3) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r5, 0x4b41, &(0x7f00000005c0)="698b795025046c56fdae1c35e2d2b943a92669976742fb747b7124e23cf31ca8a1b2f9b93ecc4487d1cffe823c43d669d45cd0ce87eef19fff81e324c082899cc3b724451fcadf572bbf496026db4cd8a44ade413d7b1b4c6f") ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) recvmsg(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x20) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 6.659716382s ago: executing program 5 (id=1676): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r1, @ANYRES16], 0x48) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) add_key(0x0, 0x0, &(0x7f0000000080)="2100d3540c1023152b0403d4438085dcc52e07dd01d5f8e6aab6af5232f62fceb479d5b1a5cc2fa0", 0x28, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket(0x2b, 0x1, 0x1) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x5) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) accept4$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0, 0x800) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e30, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) r7 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r7, 0x401870cb, &(0x7f00000000c0)={0x4, 0xaa, 0x400, 0x9}) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 6.418401499s ago: executing program 7 (id=1678): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x560a, &(0x7f0000001040)={0x0, 0x1, 0x4, 0x20, 0x0, "0000e5ff0100"}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e28, 0xffffffff, @mcast2, 0x9}, 0x1c) syz_usb_connect(0x0, 0x5d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000551b8920b822276080c2010203010902"], 0x0) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc8}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$tipc(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='l', 0x1}, {&(0x7f0000000100)="4ed297d1", 0x4}], 0x2, 0x0, 0x0, 0x20040081}, 0x5) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setresgid(r8, r8, r8) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/dev_mcast\x00') setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000180)='5', 0x1) pread64(r9, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) 5.397066556s ago: executing program 5 (id=1680): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8042, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket(0x400000000010, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r2, 0x0, 0x2, &(0x7f0000000100)=0xbe, 0x4) sendto$inet(r2, 0x0, 0x54, 0x24000001, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000001080)) r3 = getpgid(0xffffffffffffffff) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}}) waitid(0x1, r3, &(0x7f0000000240), 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x1e1c}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000000)={0x0, 0x2}, 0x8) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x300000000000000) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r5, &(0x7f0000002000)={0x2c, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="f3020071724a7cf644aae171153ae3dd77c16a0121553fc0f74f5624817715b11195aaeaa9f52add79b65ae06ed1107e9bcab5390cf2aaa443194d"], 0x0, 0x0, 0x0}, 0x0) socket(0x1e, 0x2, 0x0) r6 = syz_io_uring_setup(0x19d1, &(0x7f00000003c0)={0x0, 0x2, 0x800, 0x1, 0x8000000}, &(0x7f0000000080)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_MSG_RING={0x28, 0x20, 0x0, r6, 0x1, &(0x7f0000000680)="1a72185800a3715b5645bb0093ccc98578207fea000000008407df9bf58d205f473f00a4bc3174380afb8b1c53f6be6e7ca5d7d0f57ab2b19ca5791e1845d888969fac400740bcda09bee8128d1933388759d8c63e035bbc76ad60baa42450f15a345025db07349947fbec41e63942109e77156eeee61b4429ce3f9446e4ff636694dcfa8c7ba52a1d25bae63287716d1abd35c66805ba7d6d8a19aa050a57ed1772f035520a1f29243731ce1ade7633edcd6e022bba28f44d9d669d9e28c2ebdff215cdb600", 0xc6}) io_uring_enter(r6, 0xa3d, 0x0, 0x0, 0x0, 0xff39) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) 5.104804805s ago: executing program 3 (id=1682): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080090ff0010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) 4.108982868s ago: executing program 3 (id=1683): mknodat$null(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) fstat(r1, 0x0) read$FUSE(r0, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000000040000001000f4418ac37405c64eb0cedc9b9e046006964f2f702bafd76a8c32b6c0dac783adde2d833fab8dc966364747346ace612b2f968e9b4bc2cace15fef2db274e40caf5247680531b45c3721053c91ff4e06699bec259778e949f69735da9a810dde947d5262fcad0f59599310ec20fd1cbad1d7915761d16c1b874285f2dcd32b6f6bf7918ac11d0b2acac0f899bda696647d07e337644255fb99c35cf780c983b5ce8", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x0, 0x1c, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {{0x6, 0x0, 0xb}, {0x6d}}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}], {{0x6, 0x1, 0xc, 0x3}, {0x5, 0x0, 0xb, 0x3}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$FUSE_INIT(r0, &(0x7f00000001c0)={0x50, 0x0, r2}, 0x50) socket(0x11, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x8d2, 0x0, 0x0, 0x0) personality(0x400000) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2000009, 0x810, 0xffffffffffffffff, 0x60f4b000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) msgget(0x3, 0x710) msgget(0x2, 0x624) r4 = msgget(0x0, 0x200) msgctl$IPC_RMID(r4, 0x0) open(0x0, 0x143142, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bind$802154_dgram(r5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 3.645547166s ago: executing program 3 (id=1684): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x30, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x30}}, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x1f) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r5) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000600)={0x0, 0x0, 0x5, 0x4000000, 0x2, [0x0, 0x0, 0x0, 0x0], [0xbc2], [0x805, 0x1001000, 0x0, 0x3], [0x0, 0x1, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r5, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x2, [r7, 0x0, 0x0, r8], [0x2b8]}) ioctl$DRM_IOCTL_MODE_RMFB(r6, 0xc00464af, &(0x7f0000000080)) 3.125587495s ago: executing program 6 (id=1685): bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0), 0x8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x7, 0x79, 0x0, 0x0, @local, @loopback, 0x7, 0x20, 0x7, 0x6}}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', r0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0xa0200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, 0x0, 0x0) dup3(0xffffffffffffffff, r3, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6d", 0x9) r5 = socket$kcm(0x25, 0x1, 0x0) recvmsg$kcm(r5, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x12200) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0xd) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r7, 0x402, 0x18) open(&(0x7f00009e1000)='./file0\x00', 0x1e5041, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r9) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r10 = syz_open_procfs(r8, &(0x7f0000000040)='environ\x00') syz_usb_disconnect(0xffffffffffffffff) read$FUSE(r10, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='xprtrdma_fixup\x00'}, 0xffffffffffffffd7) 3.110973793s ago: executing program 1 (id=1686): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, &(0x7f0000000000), 0x0}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000d80), 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e00000000400002800600010000000000340003800c000100000000000000e2000c00010094040000000000000c0001fe0f010000000000000c000100040000000000000008000500", @ANYRES32=r2, @ANYBLOB="080003"], 0x80}}, 0x0) 3.078803241s ago: executing program 3 (id=1687): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x44, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x44}}, 0x0) r7 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r8], 0x5c}}, 0x40) 2.502135056s ago: executing program 1 (id=1688): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000680)=ANY=[@ANYRES32=r0, @ANYRESHEX=r0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c0002800500090001000000", @ANYRES64, @ANYBLOB="4bbe16a21029982ea41f91c545e7546a454facf118f5b36cfe2245b1647827fc6481d904091d6b21d880cdc3d4f07bd464dfffa5f46f16086494e8f4f2284c9776489e509817a6b07b2c95ca2ea988e8a979", @ANYRES16=r0], 0x3c}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xd, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0], 0x0, 0x800, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d80000001b05000000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000020000000000001000", @ANYRES64=r1, @ANYRESHEX=r2, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008", @ANYRES8=r0], 0xd8}, 0x1, 0x0, 0x0, 0x40810}, 0x20008004) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000180)) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x6, 0x0, 0x4, 0x0, 0x2, 0x0, 0x7fffffff], 0x80a0000}) openat$vcsu(0xffffffffffffff9c, 0x0, 0x183822, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000005c0)) creat(&(0x7f0000000000)='./file0\x00', 0x100) getgroups(0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="000000030003000000000000000000030000080c0004800800014000000007285f3e53089274d1734ef96c050003003a000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 2.348903336s ago: executing program 7 (id=1689): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(0x0, 0x77, 0x101301) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x72, &(0x7f0000000040)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x3c, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b29ab", 0x0, 0x11, 0x0, @private1, @empty, [], "fb36eeca6fad50b340972a58"}}}}}}}, 0x0) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = socket$unix(0x1, 0x5, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) r5 = dup2(r4, r3) close_range(r5, 0xffffffffffffffff, 0x0) 1.554971258s ago: executing program 6 (id=1690): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'team_slave_0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14, r2, 0x1, 0x70bd25, 0x0, {0x1, 0x6c00000000000000}}, 0x14}, 0x1, 0xf000, 0x0, 0x3000000}, 0x10) 1.25854094s ago: executing program 7 (id=1691): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB='d\x00', @ANYRES16=r1, @ANYBLOB="17090000000000000000010000000500070007000000080009000000000008000a0000000000060002000000000014001f000000"], 0x64}}, 0x0) 1.204719962s ago: executing program 6 (id=1692): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, &(0x7f0000000340)=""/142, 0x0, 0x8e, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x36, 0xcc800) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x4000, 0x61, 0x11, 0x64, 0xe000000}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 1.168776619s ago: executing program 3 (id=1693): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x30, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x30}}, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x1f) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r5) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000600)={0x0, 0x0, 0x5, 0x4000000, 0x2, [0x0, 0x0, 0x0, 0x0], [0xbc2], [0x805, 0x1001000, 0x0, 0x3], [0x0, 0x1, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r5, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x2, [r7, 0x0, 0x0, r8], [0x2b8]}) ioctl$DRM_IOCTL_MODE_RMFB(r6, 0xc00464af, &(0x7f0000000080)) 1.035184569s ago: executing program 5 (id=1694): syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x44, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@nested={0x8, 0x4e, 0x0, 0x1, [@nested={0x4, 0x12}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.034528874s ago: executing program 7 (id=1695): ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$ptmx(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgsnd(0x0, 0x0, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r3, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0xc4, 0x0, 0x0, 0x9) unshare(0x0) 4.057695ms ago: executing program 6 (id=1696): socket$pppoe(0x18, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x40810) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000580), 0xa, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$radio(0x0, 0x3, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='P\x00\x00\x00'], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004040) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xfe3b) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000000000e0ffff00000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@delchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x6, 0xfff2}, {0xe, 0xd}}}, 0x24}}, 0x4040840) syz_emit_vhci(&(0x7f0000001e00)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0xf1, 0x0, 0x2016}}}, 0x7) syz_io_uring_setup(0x10d, 0x0, 0x0, &(0x7f0000000280)) 0s ago: executing program 3 (id=1697): syz_usb_connect(0x2, 0x24, &(0x7f00000012c0)=ANY=[@ANYBLOB="12010000c6700610f71400058544010203010902120001000000000904"], 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x8000000003c) socket$inet6(0xa, 0x3, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000080000"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r2}, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="bb00000031000b63ddd2806c8c6f94f903f4b76ffa24fc60100003000a00020005358ac137800500026ced000300", 0x2e}, {&(0x7f0000000140)="c512603b5c247ac97270d2d9f9e3a774644b37ffa4c38bc5ac41e6569c22f21809625db64973a31646a005a85e988285af8f70ec763129dac5d3c4e5e28b003aec39da77a70fcc3aec02c9d2148fa6edc37169089bf94207176394", 0x5b}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$setownex(r5, 0xf, &(0x7f0000000080)={0x1, r4}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x8002, 0x0) unshare(0x8000000) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000280)=ANY=[@ANYRES16=r3, @ANYRES8=r0, @ANYRES32=0x41424344, @ANYBLOB="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"/336], 0x0) kernel console output (not intermixed with test programs): st mode [ 407.050350][T10224] SELinux: failed to load policy [ 407.062286][T10224] input input12: cannot allocate more than FF_MAX_EFFECTS effects [ 407.080266][T10208] veth0_to_bond: entered allmulticast mode [ 407.090808][ T30] audit: type=1400 audit(2000000220.413:623): avc: denied { create } for pid=10223 comm="syz.5.1214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 407.096162][T10208] veth1_to_bond: entered allmulticast mode [ 407.133661][ T30] audit: type=1400 audit(2000000220.441:624): avc: denied { write } for pid=10223 comm="syz.5.1214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 407.141414][T10208] veth0_to_team: entered allmulticast mode [ 407.190365][ T30] audit: type=1400 audit(2000000220.441:625): avc: denied { nlmsg_write } for pid=10223 comm="syz.5.1214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 407.208359][T10208] veth1_to_team: entered allmulticast mode [ 407.266461][T10208] veth0_to_batadv: entered allmulticast mode [ 407.293981][T10208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.306927][T10208] batadv_slave_0: entered allmulticast mode [ 407.320023][T10208] veth1_to_batadv: entered allmulticast mode [ 407.335741][T10208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.347670][T10208] batadv_slave_1: entered allmulticast mode [ 407.363206][T10208] xfrm0: entered allmulticast mode [ 407.376969][T10208] veth0_to_hsr: entered allmulticast mode [ 407.386962][T10208] hsr_slave_0: entered allmulticast mode [ 407.395505][T10208] veth1_to_hsr: entered allmulticast mode [ 407.411202][T10208] hsr_slave_1: entered allmulticast mode [ 407.424904][T10208] hsr0: entered allmulticast mode [ 407.434227][T10208] veth1_virt_wifi: entered allmulticast mode [ 407.448481][T10208] veth0_virt_wifi: entered allmulticast mode [ 407.469831][T10208] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 407.487518][T10208] veth1_vlan: entered allmulticast mode [ 407.496664][T10208] veth0_vlan: entered allmulticast mode [ 407.519439][T10208] vlan0: entered allmulticast mode [ 407.529465][T10208] vlan1: entered allmulticast mode [ 407.535630][T10208] macvlan0: entered allmulticast mode [ 407.545017][T10208] macvlan1: entered allmulticast mode [ 407.563528][T10208] ipvlan0: entered allmulticast mode [ 407.569492][T10208] ipvlan1: entered allmulticast mode [ 407.576376][T10208] veth1_macvtap: entered allmulticast mode [ 407.594786][T10208] veth0_macvtap: entered allmulticast mode [ 407.616461][T10208] macvtap0: entered allmulticast mode [ 407.629825][T10208] macsec0: entered allmulticast mode [ 407.639537][T10208] geneve0: entered allmulticast mode [ 407.656681][T10208] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.669741][T10208] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.679255][T10208] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.695479][T10208] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.715351][T10208] geneve1: entered allmulticast mode [ 407.732778][T10208] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 407.746254][T10208] netdevsim netdevsim6 netdevsim1: entered allmulticast mode [ 407.761826][T10208] netdevsim netdevsim6 netdevsim2: entered allmulticast mode [ 407.786910][T10208] netdevsim netdevsim6 netdevsim3: entered allmulticast mode [ 407.808685][T10208] mac80211_hwsim hwsim21 wlan0: entered allmulticast mode [ 407.833188][T10208] mac80211_hwsim hwsim22 wlan1: entered allmulticast mode [ 407.879248][T10235] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.888804][T10235] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.897582][T10235] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.906868][T10235] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.961312][T10235] vxlan0: entered promiscuous mode [ 407.966685][T10235] vxlan0: entered allmulticast mode [ 408.030706][ T30] audit: type=1400 audit(2000000221.292:626): avc: denied { mounton } for pid=10237 comm="syz.1.1217" path="/proc/815/task" dev="proc" ino=26802 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 408.208353][ T5860] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 408.261900][ T5861] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 408.368699][ T5860] usb 7-1: Using ep0 maxpacket: 8 [ 408.378624][ T5860] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 408.387089][ T10] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 408.398872][ T5860] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 408.408990][ T5860] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 408.424856][ T5860] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 408.437686][ T5860] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 408.452300][ T5861] usb 6-1: Using ep0 maxpacket: 8 [ 408.461198][ T5860] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 408.472316][ T5860] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.482813][ T5861] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 408.494486][ T5861] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 408.507216][ T5861] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 408.522242][ T5861] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 408.556046][ T5861] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 408.587510][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 408.605356][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 408.627117][ T5861] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 408.636608][ T10] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 408.645750][ T5861] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.654485][ T10] usb 2-1: config 1 has no interface number 1 [ 408.662837][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 408.678077][ T10] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 408.694842][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 408.704694][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.712798][ T10] usb 2-1: Product: syz [ 408.717509][ T10] usb 2-1: Manufacturer: syz [ 408.722358][ T10] usb 2-1: SerialNumber: syz [ 409.039602][ T5860] usb 7-1: usb_control_msg returned -32 [ 409.049253][ T5861] usb 6-1: usb_control_msg returned -32 [ 409.055153][ T5860] usbtmc 7-1:16.0: can't read capabilities [ 409.063367][ T5861] usbtmc 6-1:16.0: can't read capabilities [ 409.251932][ T5861] usb 7-1: USB disconnect, device number 2 [ 409.757820][ T10] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 409.766632][ T10] usb 2-1: found format II with max.bitrate = 26774, frame size=2 [ 409.790360][ T10] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 409.800994][ T10] usb 2-1: found format II with max.bitrate = 26774, frame size=2 [ 409.989034][ T5891] usb 6-1: USB disconnect, device number 3 [ 409.999685][ T10] usb 2-1: USB disconnect, device number 43 [ 410.317700][T10257] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10257 comm=syz.6.1222 [ 410.589309][T10257] syz.6.1222: attempt to access beyond end of device [ 410.589309][T10257] nbd6: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 410.607985][T10257] XFS (nbd6): SB validate failed with error -5. [ 411.009433][ T10] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 411.126904][ T5860] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 411.191647][ T10] usb 2-1: too many configurations: 154, using maximum allowed: 8 [ 411.200642][ T10] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 136 [ 411.211035][ T10] usb 2-1: can't read configurations, error -22 [ 411.296696][ T5860] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 411.307721][ T5860] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 411.334975][ T5860] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 411.359707][ T5860] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 411.369214][ T10] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 411.376951][ T5860] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.392697][ T5860] usb 6-1: Product: syz [ 411.401274][ T5860] usb 6-1: Manufacturer: syz [ 411.415549][ T5860] usb 6-1: SerialNumber: syz [ 411.547494][ T10] usb 2-1: too many configurations: 154, using maximum allowed: 8 [ 411.577595][ T10] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 136 [ 411.596201][ T10] usb 2-1: can't read configurations, error -22 [ 411.603762][ T10] usb usb2-port1: attempt power cycle [ 411.649008][ T5860] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 411.654643][ T5815] Bluetooth: hci5: SCO packet for unknown connection handle 3840 [ 411.868809][ T5860] usb 6-1: USB disconnect, device number 4 [ 411.900798][ T5860] usblp0: removed [ 411.970231][T10280] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1230'. [ 411.971604][ T10] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 412.015317][ T10] usb 2-1: too many configurations: 154, using maximum allowed: 8 [ 412.037078][ T10] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 136 [ 412.045965][ T10] usb 2-1: can't read configurations, error -22 [ 412.190503][ T10] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 412.204391][T10287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1232'. [ 412.231530][ T10] usb 2-1: too many configurations: 154, using maximum allowed: 8 [ 412.240986][ T10] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 136 [ 412.265553][ T10] usb 2-1: can't read configurations, error -22 [ 412.291612][ T10] usb usb2-port1: unable to enumerate USB device [ 412.640050][T10293] FAULT_INJECTION: forcing a failure. [ 412.640050][T10293] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 412.676343][T10293] CPU: 0 UID: 0 PID: 10293 Comm: syz.5.1234 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 412.676371][T10293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 412.676379][T10293] Call Trace: [ 412.676384][T10293] [ 412.676389][T10293] dump_stack_lvl+0x16c/0x1f0 [ 412.676419][T10293] should_fail_ex+0x512/0x640 [ 412.676440][T10293] _copy_from_iter+0x2a4/0x15b0 [ 412.676459][T10293] ? __alloc_skb+0x200/0x380 [ 412.676471][T10293] ? __pfx__copy_from_iter+0x10/0x10 [ 412.676487][T10293] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 412.676505][T10293] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 412.676526][T10293] netlink_sendmsg+0x829/0xdd0 [ 412.676545][T10293] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.676565][T10293] ____sys_sendmsg+0xa95/0xc70 [ 412.676582][T10293] ? copy_msghdr_from_user+0x10a/0x160 [ 412.676594][T10293] ? __pfx_____sys_sendmsg+0x10/0x10 [ 412.676617][T10293] ___sys_sendmsg+0x134/0x1d0 [ 412.676630][T10293] ? __pfx____sys_sendmsg+0x10/0x10 [ 412.676659][T10293] __sys_sendmsg+0x16d/0x220 [ 412.676674][T10293] ? __pfx___sys_sendmsg+0x10/0x10 [ 412.676690][T10293] ? rcu_is_watching+0x12/0xc0 [ 412.676710][T10293] do_syscall_64+0xcd/0x260 [ 412.676728][T10293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.676741][T10293] RIP: 0033:0x7fa63838e969 [ 412.676752][T10293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.676763][T10293] RSP: 002b:00007fa639207038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 412.676775][T10293] RAX: ffffffffffffffda RBX: 00007fa6385b5fa0 RCX: 00007fa63838e969 [ 412.676782][T10293] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 412.676788][T10293] RBP: 00007fa639207090 R08: 0000000000000000 R09: 0000000000000000 [ 412.676794][T10293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.676801][T10293] R13: 0000000000000000 R14: 00007fa6385b5fa0 R15: 00007ffdff990108 [ 412.676814][T10293] [ 414.142181][ T5862] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 414.440985][ T5862] usb 6-1: Using ep0 maxpacket: 16 [ 414.511630][ T5862] usb 6-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.02 [ 414.530522][ T5862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.547777][ T5862] usb 6-1: Product: syz [ 414.611707][ T5862] usb 6-1: Manufacturer: syz [ 414.621334][ T5862] usb 6-1: SerialNumber: syz [ 414.656919][ T5862] usb 6-1: config 0 descriptor?? [ 414.688157][ T5862] go7007 6-1:0.0: probe with driver go7007 failed with error -12 [ 414.965094][ T5891] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 415.341800][T10295] wg2: entered promiscuous mode [ 415.341998][ T5891] usb 7-1: config 0 has an invalid descriptor of length 137, skipping remainder of the config [ 415.380667][T10295] wg2: entered allmulticast mode [ 415.424897][ T30] audit: type=1400 audit(2000000228.205:627): avc: denied { bind } for pid=10315 comm="syz.1.1243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 415.477875][ T5891] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 415.512796][ T5891] usb 7-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 415.531517][ T5891] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.539584][ T5891] usb 7-1: Product: syz [ 415.595504][ T5891] usb 7-1: Manufacturer: syz [ 415.602633][ T5862] usb 6-1: USB disconnect, device number 5 [ 415.722964][ T5891] usb 7-1: SerialNumber: syz [ 415.760598][ T5891] usb 7-1: config 0 descriptor?? [ 415.826072][T10322] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1244'. [ 416.720027][T10326] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 416.942573][ T30] audit: type=1400 audit(2000000229.393:628): avc: denied { mount } for pid=10311 comm="syz.6.1241" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 417.152846][T10328] ieee802154 phy1 wpan1: encryption failed: -22 [ 417.766132][ T5862] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 418.067768][ T5862] usb 2-1: Using ep0 maxpacket: 8 [ 418.080414][ T5862] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 418.105740][ T5862] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 418.138083][ T5862] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 418.169176][ T5862] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 418.201043][T10346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1250'. [ 418.222799][ T5862] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 418.262514][ T5820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 418.273209][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 418.282193][ T5820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 418.285741][ T5862] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 418.306128][ T5820] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 418.314472][ T5820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 418.431818][ T6079] usb 7-1: USB disconnect, device number 3 [ 418.451463][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.475236][ T30] audit: type=1400 audit(2000000231.067:629): avc: denied { unmount } for pid=10027 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 418.730393][ T5862] usb 2-1: usb_control_msg returned -32 [ 418.781173][ T5862] usbtmc 2-1:16.0: can't read capabilities [ 419.206171][ T5820] Bluetooth: hci4: unexpected event 0x09 length: 6 > 3 [ 419.482012][T10347] chnl_net:caif_netlink_parms(): no params data found [ 419.563133][T10364] sctp: [Deprecated]: syz.6.1254 (pid 10364) Use of int in max_burst socket option deprecated. [ 419.563133][T10364] Use struct sctp_assoc_value instead [ 419.702621][ T5862] usb 2-1: USB disconnect, device number 48 [ 420.448145][T10347] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.465837][ T30] audit: type=1400 audit(2000000232.919:630): avc: denied { watch_sb } for pid=10371 comm="syz.3.1256" path="/342/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1809 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 420.513291][ T5820] Bluetooth: hci1: command tx timeout [ 420.531276][T10347] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.541921][T10347] bridge_slave_0: entered allmulticast mode [ 420.553583][T10347] bridge_slave_0: entered promiscuous mode [ 420.573466][T10347] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.589747][T10347] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.597038][T10347] bridge_slave_1: entered allmulticast mode [ 420.756890][T10347] bridge_slave_1: entered promiscuous mode [ 420.932430][T10380] kAFS: unable to lookup cell '' [ 421.506577][T10347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.641037][T10347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.888512][T10347] team0: Port device team_slave_0 added [ 421.924673][T10347] team0: Port device team_slave_1 added [ 422.031611][ T10] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 422.103182][T10347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.223795][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 422.233779][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 422.267412][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 422.301040][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 422.302675][T10347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.334689][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 422.336936][ C1] vkms_vblank_simulate: vblank timer overrun [ 422.412055][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 422.462736][T10347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.473894][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.499305][T10347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.515883][T10347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.602746][T10395] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1262'. [ 422.674375][T10347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.747765][ T5820] Bluetooth: hci1: command tx timeout [ 422.786392][ T10] usb 2-1: GET_CAPABILITIES returned 0 [ 422.820391][ T10] usbtmc 2-1:16.0: can't read capabilities [ 422.973523][T10347] hsr_slave_0: entered promiscuous mode [ 422.989393][T10347] hsr_slave_1: entered promiscuous mode [ 423.018923][T10347] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 423.046930][T10347] Cannot create hsr debugfs directory [ 423.062741][ T6079] usb 2-1: USB disconnect, device number 49 [ 423.122052][ T5862] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 423.232112][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 423.294760][ T5862] usb 7-1: Using ep0 maxpacket: 8 [ 423.304836][ T5862] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 423.313465][ T5862] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 423.345403][ T5862] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 423.366440][ T5862] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 423.399787][ T5862] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 423.423867][ T5862] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 423.424936][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 423.453196][ T5862] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.468175][ T10] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 423.481547][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 423.516812][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 423.539531][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 423.562269][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 423.578433][T10347] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 423.594968][T10347] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 423.602303][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 423.630261][T10347] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 423.642475][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.675569][T10347] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 423.711614][ T5862] usb 7-1: usb_control_msg returned -32 [ 423.717254][ T5862] usbtmc 7-1:16.0: can't read capabilities [ 424.010205][ T10] usb 6-1: usb_control_msg returned -32 [ 424.056954][ T10] usbtmc 6-1:16.0: can't read capabilities [ 424.667945][ T5860] usb 7-1: USB disconnect, device number 4 [ 424.755467][ T5861] usb 6-1: USB disconnect, device number 6 [ 424.784169][T10347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.819126][T10347] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.836960][ T5965] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.844189][ T5965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.866758][ T5965] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.874000][ T5965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.886111][ T10] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 424.964532][ T5820] Bluetooth: hci1: command tx timeout [ 425.032111][T10427] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.041670][T10427] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.050943][T10427] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.059941][T10427] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.061580][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 425.089790][T10427] vxlan0: left promiscuous mode [ 425.099795][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 425.108981][ T10] usb 2-1: config 9 has an invalid interface number: 76 but max is 0 [ 425.126819][ T10] usb 2-1: config 9 has no interface number 0 [ 425.142362][ T10] usb 2-1: config 9 interface 76 has no altsetting 0 [ 425.155049][ T10] usb 2-1: New USB device found, idVendor=16d8, idProduct=6804, bcdDevice=68.d5 [ 425.174282][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.182516][ T10] usb 2-1: Product: syz [ 425.206479][ T10] usb 2-1: Manufacturer: syz [ 425.211162][ T10] usb 2-1: SerialNumber: syz [ 425.319861][T10347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.723562][ T10] hub 2-1:9.76: bad descriptor, ignoring hub [ 426.083472][ T10] hub 2-1:9.76: probe with driver hub failed with error -5 [ 426.092862][ T10] option 2-1:9.76: GSM modem (1-port) converter detected [ 426.316681][ T10] usb 2-1: USB disconnect, device number 50 [ 426.324044][ T10] option 2-1:9.76: device disconnected [ 426.447279][T10449] autofs: Unknown parameter 'ÿ0x0000000000000000' [ 426.515456][T10449] kAFS: unparsable volume name [ 427.184390][ T5820] Bluetooth: hci1: command tx timeout [ 427.197235][T10347] veth0_vlan: entered promiscuous mode [ 427.218706][T10347] veth1_vlan: entered promiscuous mode [ 427.244578][T10347] veth0_macvtap: entered promiscuous mode [ 427.321699][T10347] veth1_macvtap: entered promiscuous mode [ 427.402546][T10457] ieee802154 phy1 wpan1: encryption failed: -22 [ 427.417181][T10347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 427.595155][ T30] audit: type=1400 audit(2000000239.486:631): avc: denied { audit_write } for pid=10458 comm="syz.3.1280" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 427.627634][T10347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.206779][T10347] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.218650][T10347] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.232375][T10347] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.255841][T10347] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.777620][ T5965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.785551][ T5965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.320823][ T6350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.355441][ T6350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.597137][ T30] audit: type=1400 audit(2000000241.459:632): avc: denied { mounton } for pid=10347 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 430.809491][T10484] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 431.846267][ T30] audit: type=1326 audit(2000000243.545:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10486 comm="syz.1.1285" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f89f478e969 code=0x0 [ 432.986232][ T30] audit: type=1400 audit(2000000244.630:634): avc: denied { getopt } for pid=10508 comm="syz.1.1289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 433.006055][ T5820] Bluetooth: hci0: command tx timeout [ 433.608552][ T30] audit: type=1400 audit(2000000245.210:635): avc: denied { listen } for pid=10508 comm="syz.1.1289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 433.644287][ T5862] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 433.994034][ T5862] usb 6-1: Using ep0 maxpacket: 8 [ 434.006344][ T5862] usb 6-1: unable to get BOS descriptor or descriptor too short [ 434.015299][ T5862] usb 6-1: config 4 has an invalid interface number: 255 but max is 0 [ 434.023635][ T5862] usb 6-1: config 4 has no interface number 0 [ 434.026136][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 434.206846][ T5862] usb 6-1: config 4 interface 255 has no altsetting 0 [ 434.227410][ T5862] usb 6-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= e.87 [ 434.243480][ T5862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.261483][ T5862] usb 6-1: Product: syz [ 434.279253][ T5862] usb 6-1: Manufacturer: syz [ 434.297753][ T5862] usb 6-1: SerialNumber: syz [ 434.454211][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 434.461215][ T10] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 434.484507][ T10] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 434.578098][ T10] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 434.678831][ T10] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 434.722936][ T5862] usb 6-1: USB disconnect, device number 7 [ 434.783409][ T10] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 435.704535][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.999393][ T10] usb 8-1: GET_CAPABILITIES returned 0 [ 436.028042][ T10] usbtmc 8-1:16.0: can't read capabilities [ 436.134023][T10545] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 436.382817][ T10] usb 8-1: USB disconnect, device number 2 [ 437.300701][ T30] audit: type=1400 audit(2000000248.662:636): avc: denied { unmount } for pid=10027 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 437.369256][T10560] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 437.468742][T10564] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 437.895360][T10572] FAULT_INJECTION: forcing a failure. [ 437.895360][T10572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 438.030221][T10572] CPU: 0 UID: 0 PID: 10572 Comm: syz.5.1305 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 438.030255][T10572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 438.030266][T10572] Call Trace: [ 438.030275][T10572] [ 438.030283][T10572] dump_stack_lvl+0x16c/0x1f0 [ 438.030316][T10572] should_fail_ex+0x512/0x640 [ 438.030349][T10572] _copy_from_iter+0x2a4/0x15b0 [ 438.030379][T10572] ? __alloc_skb+0x200/0x380 [ 438.030399][T10572] ? __pfx__copy_from_iter+0x10/0x10 [ 438.030426][T10572] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 438.030457][T10572] netlink_sendmsg+0x829/0xdd0 [ 438.030482][T10572] ? __pfx_netlink_sendmsg+0x10/0x10 [ 438.030516][T10572] ____sys_sendmsg+0xa95/0xc70 [ 438.030542][T10572] ? copy_msghdr_from_user+0x10a/0x160 [ 438.030562][T10572] ? __pfx_____sys_sendmsg+0x10/0x10 [ 438.030599][T10572] ___sys_sendmsg+0x134/0x1d0 [ 438.030621][T10572] ? __pfx____sys_sendmsg+0x10/0x10 [ 438.030673][T10572] __sys_sendmsg+0x16d/0x220 [ 438.030694][T10572] ? __pfx___sys_sendmsg+0x10/0x10 [ 438.030722][T10572] ? rcu_is_watching+0x12/0xc0 [ 438.030753][T10572] do_syscall_64+0xcd/0x260 [ 438.030782][T10572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.030800][T10572] RIP: 0033:0x7fa63838e969 [ 438.030815][T10572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 438.030833][T10572] RSP: 002b:00007fa6391e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 438.030853][T10572] RAX: ffffffffffffffda RBX: 00007fa6385b6080 RCX: 00007fa63838e969 [ 438.030864][T10572] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000007 [ 438.030875][T10572] RBP: 00007fa6391e6090 R08: 0000000000000000 R09: 0000000000000000 [ 438.030885][T10572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.030895][T10572] R13: 0000000000000000 R14: 00007fa6385b6080 R15: 00007ffdff990108 [ 438.030920][T10572] [ 438.232965][T10576] lo speed is unknown, defaulting to 1000 [ 438.233036][T10576] lo speed is unknown, defaulting to 1000 [ 438.233615][T10576] lo speed is unknown, defaulting to 1000 [ 438.239466][T10576] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 438.288295][T10578] IPVS: Error connecting to the multicast addr [ 438.464742][T10576] lo speed is unknown, defaulting to 1000 [ 438.465578][T10576] lo speed is unknown, defaulting to 1000 [ 438.466357][T10576] lo speed is unknown, defaulting to 1000 [ 438.467101][T10576] lo speed is unknown, defaulting to 1000 [ 438.467895][T10576] lo speed is unknown, defaulting to 1000 [ 438.468658][T10576] lo speed is unknown, defaulting to 1000 [ 438.474532][T10576] lo speed is unknown, defaulting to 1000 [ 439.042877][T10579] tty tty1: ldisc open failed (-12), clearing slot 0 [ 439.068834][T10583] tty tty1: ldisc open failed (-12), clearing slot 0 [ 439.306499][T10591] bridge4: entered promiscuous mode [ 439.373831][T10593] overlayfs: workdir and upperdir must be separate subtrees [ 439.799062][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 439.881674][T10597] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 439.981841][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 439.988872][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 440.000688][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 440.163392][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 440.190566][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 440.665264][ T5862] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 440.755448][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 440.775706][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.953824][ T5862] usb 7-1: Using ep0 maxpacket: 32 [ 440.991643][ T5862] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.016073][ T10] usb 6-1: GET_CAPABILITIES returned 0 [ 441.022120][ T5862] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.027599][ T10] usbtmc 6-1:16.0: can't read capabilities [ 441.061293][ T5862] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 441.070405][ T5862] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.101538][ T5862] hub 7-1:4.0: USB hub found [ 441.117311][ T5861] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 441.245364][ T6079] usb 6-1: USB disconnect, device number 8 [ 441.307018][ T5861] usb 2-1: Using ep0 maxpacket: 8 [ 441.321478][ T5861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.331835][ T5861] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 441.336879][T10605] mkiss: ax0: crc mode is auto. [ 441.396097][ T5861] usb 2-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.00 [ 441.457579][ T5861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.481637][ T5862] hub 7-1:4.0: config failed, can't read hub descriptor (err -22) [ 441.483077][ T5861] usb 2-1: config 0 descriptor?? [ 441.532381][ T5862] usb 7-1: USB disconnect, device number 5 [ 442.814824][ T5861] logitech 0003:046D:C211.000F: unknown main item tag 0x0 [ 443.008020][ T5861] logitech 0003:046D:C211.000F: hidraw0: USB HID v0.03 Device [HID 046d:c211] on usb-dummy_hcd.1-1/input0 [ 443.070495][ T5861] logitech 0003:046D:C211.000F: no inputs found [ 443.165931][ T5861] usb 2-1: USB disconnect, device number 51 [ 443.298599][T10637] syz.6.1332: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 443.507792][T10637] CPU: 1 UID: 0 PID: 10637 Comm: syz.6.1332 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 443.507835][T10637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 443.507849][T10637] Call Trace: [ 443.507857][T10637] [ 443.507866][T10637] dump_stack_lvl+0x16c/0x1f0 [ 443.507909][T10637] warn_alloc+0x248/0x3a0 [ 443.507934][T10637] ? __pfx_warn_alloc+0x10/0x10 [ 443.507951][T10637] ? __pfx_stack_trace_save+0x10/0x10 [ 443.507981][T10637] ? stack_depot_save_flags+0x28/0xa50 [ 443.508021][T10637] ? kasan_save_stack+0x42/0x60 [ 443.508039][T10637] ? kasan_save_stack+0x33/0x60 [ 443.508056][T10637] ? kasan_save_track+0x14/0x30 [ 443.508075][T10637] ? __kasan_kmalloc+0xaa/0xb0 [ 443.508108][T10637] ? xskq_create+0x52/0x1d0 [ 443.508133][T10637] ? do_sock_setsockopt+0x221/0x470 [ 443.508161][T10637] ? __sys_setsockopt+0x1a0/0x230 [ 443.508181][T10637] ? __x64_sys_setsockopt+0xbd/0x160 [ 443.508208][T10637] __vmalloc_node_range_noprof+0x10ea/0x1540 [ 443.508250][T10637] ? xskq_create+0xfb/0x1d0 [ 443.508284][T10637] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 443.508323][T10637] ? xskq_create+0xfb/0x1d0 [ 443.508348][T10637] vmalloc_user_noprof+0x6b/0x90 [ 443.508378][T10637] ? xskq_create+0xfb/0x1d0 [ 443.508402][T10637] xskq_create+0xfb/0x1d0 [ 443.508429][T10637] xsk_setsockopt+0x640/0x840 [ 443.508458][T10637] ? __pfx_xsk_setsockopt+0x10/0x10 [ 443.508489][T10637] ? selinux_socket_setsockopt+0x6a/0x80 [ 443.508539][T10637] ? __pfx_xsk_setsockopt+0x10/0x10 [ 443.508560][T10637] do_sock_setsockopt+0x221/0x470 [ 443.508589][T10637] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 443.508633][T10637] __sys_setsockopt+0x1a0/0x230 [ 443.508660][T10637] __x64_sys_setsockopt+0xbd/0x160 [ 443.508680][T10637] ? do_syscall_64+0x91/0x260 [ 443.508710][T10637] ? lockdep_hardirqs_on+0x7c/0x110 [ 443.508738][T10637] do_syscall_64+0xcd/0x260 [ 443.508770][T10637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.508789][T10637] RIP: 0033:0x7faad5b8e969 [ 443.508806][T10637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.508826][T10637] RSP: 002b:00007faad69b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 443.508848][T10637] RAX: ffffffffffffffda RBX: 00007faad5db5fa0 RCX: 00007faad5b8e969 [ 443.508862][T10637] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 443.508874][T10637] RBP: 00007faad5c10ab1 R08: 0000000000000004 R09: 0000000000000000 [ 443.508887][T10637] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 443.508901][T10637] R13: 0000000000000000 R14: 00007faad5db5fa0 R15: 00007fff443b51e8 [ 443.508931][T10637] [ 444.406578][T10637] Mem-Info: [ 444.409871][T10637] active_anon:14879 inactive_anon:0 isolated_anon:0 [ 444.409871][T10637] active_file:15102 inactive_file:41084 isolated_file:0 [ 444.409871][T10637] unevictable:768 dirty:161 writeback:0 [ 444.409871][T10637] slab_reclaimable:10611 slab_unreclaimable:107586 [ 444.409871][T10637] mapped:47382 shmem:11216 pagetables:891 [ 444.409871][T10637] sec_pagetables:0 bounce:0 [ 444.409871][T10637] kernel_misc_reclaimable:0 [ 444.409871][T10637] free:1284277 free_pcp:3567 free_cma:0 [ 444.588618][ T5862] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 444.994693][T10637] Node 0 active_anon:59516kB inactive_anon:0kB active_file:60408kB inactive_file:164068kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:189500kB dirty:640kB writeback:0kB shmem:43328kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11004kB pagetables:3564kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 445.070853][T10637] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:268kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 445.203792][T10637] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 445.274121][ T5862] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 445.282376][ T5862] usb 2-1: config 0 has no interface number 0 [ 445.287940][T10637] lowmem_reserve[]: 0 2484 2486 2486 2486 [ 445.315521][T10637] Node 0 DMA32 free:1235540kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB active_anon:48300kB inactive_anon:0kB active_file:60408kB inactive_file:162236kB unevictable:1536kB writepending:640kB present:3129332kB managed:2543888kB mlocked:0kB bounce:0kB free_pcp:2912kB local_pcp:2164kB free_cma:0kB [ 445.364574][T10637] lowmem_reserve[]: 0 0 1 1 1 [ 445.375367][T10637] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:28kB free_cma:0kB [ 445.437204][T10637] lowmem_reserve[]: 0 0 0 0 0 [ 445.442031][T10637] Node 1 Normal free:3918584kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:268kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 445.507101][ T5862] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 445.602403][T10655] syz.7.1337: attempt to access beyond end of device [ 445.602403][T10655] loop15: rw=0, sector=0, nr_sectors = 1 limit=0 [ 445.615983][T10655] FAT-fs (loop15): unable to read boot sector [ 445.834710][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.008975][ T5861] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 446.027448][T10637] lowmem_reserve[]: 0 0 0 0 0 [ 446.038308][ T5862] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 446.055303][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.085793][T10637] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 446.103509][ T5862] usb 2-1: Product: syz [ 446.108116][T10637] Node 0 DMA32: 0*4kB 35*8kB (ME) 141*16kB (UE) 113*32kB (UME) 456*64kB (UME) 223*128kB (UME) 51*256kB (UME) 36*512kB (UME) 10*1024kB (UM) 12*2048kB (UM) 266*4096kB (UM) = 1219720kB [ 446.131379][ T5862] usb 2-1: Manufacturer: syz [ 446.172533][ T5861] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 446.183518][T10637] Node 0 Normal: 0*4kB 2*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 446.202730][ T5861] usb 6-1: config 0 has no interfaces? [ 446.213824][ T5861] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 446.224555][T10637] Node 1 Normal: 216*4kB (UME) 57*8kB (UME) 39*16kB (UME) 203*32kB (UE) 84*64kB (UME) 28*128kB (UME) 15*256kB (UME) 6*512kB (UME) 3*1024kB (UM) 2*2048kB (UE) 949*4096kB (M) = 3918584kB [ 446.268304][ T5862] usb 2-1: SerialNumber: syz [ 446.276707][ T5862] usb 2-1: config 0 descriptor?? [ 446.282232][ T5861] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.315011][ T5861] usb 6-1: config 0 descriptor?? [ 446.320543][T10637] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 446.330670][T10637] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 446.348147][T10657] tmpfs: Unknown parameter 'eode000000000000ÿ' [ 446.354878][T10637] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 446.377320][T10637] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 446.394571][T10637] 61666 total pagecache pages [ 446.403285][T10637] 0 pages in swap cache [ 446.410395][T10637] Free swap = 124996kB [ 446.414716][T10637] Total swap = 124996kB [ 446.422872][T10637] 2097051 pages RAM [ 446.426794][T10637] 0 pages HighMem/MovableOnly [ 446.435745][T10637] 428973 pages reserved [ 446.444926][T10637] 0 pages cma reserved [ 446.449851][T10659] netlink: 'syz.3.1339': attribute type 24 has an invalid length. [ 446.551501][T10652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.565650][T10652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.588990][ T6095] usb 6-1: USB disconnect, device number 9 [ 446.780167][ T5863] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 446.951225][ T5863] usb 8-1: Using ep0 maxpacket: 8 [ 446.961490][ T5863] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 446.981512][T10647] befs: (nbd1): No write support. Marking filesystem read-only [ 446.992386][ T5863] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 447.016663][T10647] syz.1.1334: attempt to access beyond end of device [ 447.016663][T10647] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 447.034548][ T5863] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 447.047580][ T5863] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 447.063266][ T5862] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 447.075057][ T5863] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 447.084524][ T5891] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 447.093973][ T5862] usb 2-1: USB disconnect, device number 52 [ 447.104032][ T5863] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.261403][ T5891] usb 6-1: Using ep0 maxpacket: 16 [ 447.277617][ T5891] usb 6-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=62.ba [ 447.298624][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.319373][ T5891] usb 6-1: Product: syz [ 447.328605][ T5891] usb 6-1: Manufacturer: syz [ 447.343597][ T5863] usb 8-1: GET_CAPABILITIES returned 0 [ 447.351474][ T5891] usb 6-1: SerialNumber: syz [ 447.361124][ T5863] usbtmc 8-1:16.0: can't read capabilities [ 447.372358][ T5891] usb 6-1: config 0 descriptor?? [ 447.579579][ T5863] usb 8-1: USB disconnect, device number 3 [ 447.607083][ T5891] snd-usb-hiface 6-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 447.650018][T10670] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1344'. [ 447.678255][T10670] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 447.820186][ T5891] usb 6-1: USB disconnect, device number 10 [ 447.889710][T10668] xt_CT: No such helper "snmp" [ 448.127205][ T5863] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 448.145564][T10682] wg2: left allmulticast mode [ 448.303595][ T5863] usb 2-1: device descriptor read/64, error -71 [ 449.184757][ T5863] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 449.399339][ T5863] usb 2-1: device descriptor read/64, error -71 [ 449.529410][ T5863] usb usb2-port1: attempt power cycle [ 451.207823][T10699] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1352'. [ 451.323964][ T5863] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 452.014013][ T5863] usb 2-1: device descriptor read/8, error -71 [ 452.506803][T10712] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 452.910477][T10709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1353'. [ 452.925008][ T6079] IPVS: starting estimator thread 0... [ 453.576351][T10715] IPVS: using max 71 ests per chain, 170400 per kthread [ 453.752483][ T5862] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 454.787328][ T5820] Bluetooth: hci0: command tx timeout [ 454.896976][ T5862] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 454.926361][ T5862] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.938268][ T5862] usb 8-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 454.947397][ T5862] usb 8-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 454.955740][ T5862] usb 8-1: Manufacturer: syz [ 454.981611][ T5862] usb 8-1: config 0 descriptor?? [ 455.119375][ T5863] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 455.568954][ T5862] usbhid 8-1:0.0: can't add hid device: -71 [ 455.578583][ T5862] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 455.591610][ T5862] usb 8-1: USB disconnect, device number 4 [ 455.796643][ T5863] usb 2-1: Using ep0 maxpacket: 8 [ 455.804090][ T5863] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 455.815578][ T5863] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 456.346233][ T5863] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 456.356658][ T5863] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 456.369862][ T5863] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 456.378955][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.820258][ T5863] usb 2-1: GET_CAPABILITIES returned 0 [ 456.827223][ T30] audit: type=1400 audit(2000000266.930:637): avc: denied { getopt } for pid=10740 comm="syz.3.1363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 456.850655][ T5863] usbtmc 2-1:16.0: can't read capabilities [ 457.462578][ T5860] usb 2-1: USB disconnect, device number 57 [ 457.539940][T10756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1366'. [ 457.592787][T10755] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1365'. [ 458.581383][ T30] audit: type=1326 audit(2000000268.577:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10759 comm="syz.3.1368" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f72ad58e969 code=0x0 [ 459.337139][T10776] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 459.392909][T10776] qnx6: wrong signature (magic) in superblock #1. [ 459.399640][T10776] qnx6: unable to read the first superblock [ 459.623475][T10776] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1372'. [ 459.900093][T10776] : entered promiscuous mode [ 460.673716][T10787] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1376'. [ 460.746648][T10789] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 460.753232][T10789] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 460.760871][T10789] vhci_hcd vhci_hcd.0: Device attached [ 461.019981][ T5863] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 462.137025][T10790] vhci_hcd: connection reset by peer [ 462.159700][ T13] vhci_hcd: stop threads [ 462.200734][ T13] vhci_hcd: release socket [ 462.699619][T10804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1379'. [ 462.726507][ T13] vhci_hcd: disconnect device [ 463.102788][ T30] audit: type=1400 audit(2000000272.805:639): avc: denied { unmount } for pid=9711 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 463.200913][ T5862] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 463.556572][ T5862] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 464.526507][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.534583][ T5862] usb 2-1: Product: syz [ 464.558549][ T5862] usb 2-1: Manufacturer: syz [ 464.575205][ T5862] usb 2-1: SerialNumber: syz [ 464.624806][ T5862] usb 2-1: config 0 descriptor?? [ 465.548909][ T5862] airspy 2-1:0.0: Board ID: 05 [ 465.568453][ T5862] airspy 2-1:0.0: Firmware version:  [ 466.514924][ T5861] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 467.188699][ T5863] vhci_hcd: vhci_device speed not set [ 467.333416][ T5862] airspy 2-1:0.0: usb_control_msg() failed -110 request 11 [ 467.667402][ T5862] airspy 2-1:0.0: Registered as swradio24 [ 467.747042][ T5862] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 468.204288][ T951] usb 2-1: USB disconnect, device number 58 [ 468.230232][T10854] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1393'. [ 468.313975][ T5861] usb 6-1: Using ep0 maxpacket: 8 [ 468.331930][ T5861] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.345883][ T5861] usb 6-1: config 0 interface 0 has no altsetting 0 [ 468.363164][ T5861] usb 6-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 468.401256][ T5861] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.466502][ T5861] usb 6-1: config 0 descriptor?? [ 469.641303][T10848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.708461][T10848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.504736][T10876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 470.633616][T10876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 470.952285][T10876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 471.144140][ T5860] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 471.350371][ T5860] usb 7-1: Using ep0 maxpacket: 8 [ 471.357264][ T5861] usbhid 6-1:0.0: can't add hid device: -71 [ 471.365965][ T5861] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 471.383554][ T5860] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 471.406455][ T5861] usb 6-1: USB disconnect, device number 11 [ 471.416702][ T5860] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 471.467629][ T5860] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 471.509859][ T5860] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 471.550165][ T5860] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 471.573237][ T5860] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.331579][ T5860] usb 7-1: usb_control_msg returned -32 [ 472.337339][ T5860] usbtmc 7-1:16.0: can't read capabilities [ 473.864442][ T5860] usb 7-1: USB disconnect, device number 6 [ 474.994264][ T5861] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 475.028231][T10923] netlink: 292 bytes leftover after parsing attributes in process `syz.1.1411'. [ 475.101262][ T30] audit: type=1400 audit(2000000283.964:640): avc: denied { nlmsg_read } for pid=10916 comm="syz.1.1411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 475.746399][ T5861] usb 6-1: Using ep0 maxpacket: 32 [ 475.953848][ T5861] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 475.962448][ T5861] usb 6-1: config 0 has no interface number 0 [ 475.974752][ T5861] usb 6-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid maxpacket 46336, setting to 1024 [ 475.986294][ T5861] usb 6-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 476.158957][T10926] Cannot find set identified by id 0 to match [ 476.174883][ T5860] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 476.285675][ T5861] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 476.296045][ T5861] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.309724][ T5861] usb 6-1: Product: syz [ 476.314061][ T5861] usb 6-1: Manufacturer: syz [ 476.321598][ T5860] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz0] on syz0 [ 476.332834][ T5861] usb 6-1: SerialNumber: syz [ 476.340598][ T5861] usb 6-1: config 0 descriptor?? [ 476.350671][T10920] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 476.361792][ T5861] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 476.532521][ T10] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 476.596148][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 476.625125][ T5861] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 476.641605][ T5861] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 476.705174][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.722046][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.732391][ T10] usb 2-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 476.746905][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.761146][ T10] usb 2-1: config 0 descriptor?? [ 476.854990][T10920] overlay: Unknown parameter 'smackfsroot' [ 476.864891][ T5861] usb 6-1: USB disconnect, device number 12 [ 476.883039][ T5861] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 476.895948][ T951] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 476.912259][ T5861] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 476.926249][ T5861] quatech2 6-1:0.51: device disconnected [ 477.066717][ T951] usb 7-1: Using ep0 maxpacket: 8 [ 477.077959][ T951] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 477.089625][ T5863] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 477.103145][ T951] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 477.114256][ T951] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 477.136549][ T951] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 477.154317][ T951] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 477.169187][ T951] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.216609][ T10] hid-rmi 0003:0461:4E72.0011: unknown main item tag 0x0 [ 477.224218][ T10] hid-rmi 0003:0461:4E72.0011: unknown main item tag 0x0 [ 477.237401][ T10] hid-rmi 0003:0461:4E72.0011: unknown main item tag 0x0 [ 477.244611][ T10] hid-rmi 0003:0461:4E72.0011: unknown main item tag 0x0 [ 477.258444][ T10] hid-rmi 0003:0461:4E72.0011: unknown main item tag 0x0 [ 477.268228][ T10] hid-rmi 0003:0461:4E72.0011: unknown main item tag 0x0 [ 477.280382][ T5863] usb 8-1: Using ep0 maxpacket: 8 [ 477.286650][ T10] hid-rmi 0003:0461:4E72.0011: unknown main item tag 0x0 [ 477.297924][ T10] hid-rmi 0003:0461:4E72.0011: unknown main item tag 0x0 [ 477.300207][ T5863] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 477.306251][ T10] hid-rmi 0003:0461:4E72.0011: unknown main item tag 0x0 [ 477.323185][ T5863] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 477.326987][ T10] hid-rmi 0003:0461:4E72.0011: unknown main item tag 0x0 [ 477.340956][ T10] hid-rmi 0003:0461:4E72.0011: unknown main item tag 0x0 [ 477.343856][ T5863] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 477.358185][ T5863] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 477.358547][ T10] hid-rmi 0003:0461:4E72.0011: hidraw0: USB HID v0.00 Device [HID 0461:4e72] on usb-dummy_hcd.1-1/input0 [ 477.368212][ T5863] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 477.368288][ T5863] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 477.368310][ T5863] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.402544][ T951] usb 7-1: usb_control_msg returned -32 [ 477.430673][ T951] usbtmc 7-1:16.0: can't read capabilities [ 477.459929][ T951] usb 7-1: USB disconnect, device number 7 [ 477.657578][ T5863] usb 8-1: usb_control_msg returned -32 [ 477.663268][ T5863] usbtmc 8-1:16.0: can't read capabilities [ 477.691980][ T10] usb 2-1: USB disconnect, device number 59 [ 478.029009][ T5863] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 478.194127][ T951] usb 8-1: USB disconnect, device number 5 [ 478.210653][ T5863] usb 6-1: Using ep0 maxpacket: 16 [ 478.220817][ T5863] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.240332][ T5863] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.251886][ T5863] usb 6-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 478.267682][ T5863] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.284919][ T5863] usb 6-1: config 0 descriptor?? [ 478.488014][ T10] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 478.702226][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 478.733821][ T10] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 478.758151][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 478.777171][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 478.809098][ T10] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 478.837476][ T10] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 478.867133][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.874182][ T5863] playstation 0003:054C:05C4.0012: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.5-1/input0 [ 479.023806][ T5863] playstation 0003:054C:05C4.0012: Failed to retrieve feature with reportID 18: -32 [ 479.026544][T10951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.043000][ T5863] playstation 0003:054C:05C4.0012: Failed to retrieve DualShock4 pairing info: -32 [ 479.055392][T10951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.127247][ T5863] playstation 0003:054C:05C4.0012: Failed to get MAC address from DualShock4 [ 479.186758][ T10] usb 7-1: GET_CAPABILITIES returned 0 [ 479.192364][ T10] usbtmc 7-1:16.0: can't read capabilities [ 479.214319][ T5863] playstation 0003:054C:05C4.0012: Failed to create dualshock4. [ 479.305289][ T5863] playstation 0003:054C:05C4.0012: probe with driver playstation failed with error -32 [ 479.460871][ T30] audit: type=1400 audit(2000000288.089:641): avc: denied { getopt } for pid=10953 comm="syz.6.1424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 479.466143][ T951] usb 7-1: USB disconnect, device number 8 [ 480.338265][ T5863] usb 6-1: USB disconnect, device number 13 [ 480.553316][T10969] input: syz0 as /devices/virtual/input/input14 [ 480.631363][ T10] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 480.820536][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 480.831299][ T10] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 480.854826][ T10] usb 8-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 480.869729][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.887659][ T10] usb 8-1: Product: syz [ 480.892058][ T10] usb 8-1: Manufacturer: syz [ 480.897359][T10974] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1432'. [ 480.908386][ T10] usb 8-1: SerialNumber: syz [ 480.958034][ T951] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 481.075914][ T5863] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 481.209484][ T951] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 481.216644][ T10] usb 8-1: selecting invalid altsetting 1 [ 481.271109][ T951] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 481.325383][ T951] usb 6-1: config 220 has no interface number 2 [ 481.354982][ T5863] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 481.388561][ T951] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 481.417573][ T5863] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.433405][T10965] netlink: 'syz.7.1428': attribute type 1 has an invalid length. [ 481.439070][ T951] usb 6-1: config 220 interface 0 has no altsetting 0 [ 481.450490][ T951] usb 6-1: config 220 interface 76 has no altsetting 0 [ 481.460512][ T5863] usb 7-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 481.471329][T10965] netlink: 228 bytes leftover after parsing attributes in process `syz.7.1428'. [ 481.492780][ T10] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 481.492937][ T10] dvb_usb_lmedm04 8-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 481.513807][ T951] usb 6-1: config 220 interface 1 has no altsetting 0 [ 481.525439][ T5863] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 481.533508][ T5863] usb 7-1: Manufacturer: syz [ 481.581409][ T951] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 481.592252][ T5863] usb 7-1: config 0 descriptor?? [ 481.597561][ T951] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.622175][ T951] usb 6-1: Product: syz [ 481.626495][ T951] usb 6-1: Manufacturer: syz [ 481.648298][ T951] usb 6-1: SerialNumber: syz [ 482.325186][ T951] usb 6-1: selecting invalid altsetting 0 [ 482.336153][ T5863] cougar 0003:060B:700A.0013: unknown main item tag 0x0 [ 482.379220][ T5863] cougar 0003:060B:700A.0013: unknown main item tag 0x0 [ 482.394456][ T951] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 482.402184][ T5863] cougar 0003:060B:700A.0013: unknown main item tag 0x0 [ 482.415851][ T951] usb 6-1: No valid video chain found. [ 482.423942][ T5863] cougar 0003:060B:700A.0013: unknown main item tag 0x0 [ 482.448661][ T5863] cougar 0003:060B:700A.0013: unknown main item tag 0x0 [ 482.460734][ T951] usb 6-1: selecting invalid altsetting 0 [ 482.476530][ T951] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 482.501407][ T5863] cougar 0003:060B:700A.0013: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 482.530295][ T951] usb 6-1: USB disconnect, device number 14 [ 482.577221][T10985] bridge5: entered promiscuous mode [ 482.584683][T10985] bridge5: entered allmulticast mode [ 482.678258][T10987] 9pnet_fd: Insufficient options for proto=fd [ 482.840420][T10991] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1438'. [ 483.246023][ T5863] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 483.463643][ T5863] usb 2-1: config 12 has an invalid interface number: 154 but max is 1 [ 483.484985][ T5863] usb 2-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 483.514610][ T5863] usb 2-1: config 12 has 1 interface, different from the descriptor's value: 2 [ 483.528432][ T5863] usb 2-1: config 12 has no interface number 0 [ 483.535023][ T5863] usb 2-1: config 12 interface 154 has no altsetting 0 [ 483.551090][ T5863] usb 2-1: New USB device found, idVendor=05a9, idProduct=264a, bcdDevice=24.e8 [ 483.560813][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.570431][ T5863] usb 2-1: Product: syz [ 483.575890][ T5863] usb 2-1: Manufacturer: syz [ 483.580787][ T5863] usb 2-1: SerialNumber: syz [ 483.623009][ T951] usb 8-1: USB disconnect, device number 6 [ 483.850714][ T5863] usb 2-1: Found UVC 0.00 device syz (05a9:264a) [ 483.859279][ T5863] usb 2-1: No valid video chain found. [ 484.167978][ T5863] usb 2-1: USB disconnect, device number 60 [ 484.268187][ T5891] usb 7-1: USB disconnect, device number 9 [ 484.648170][ T951] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 484.817361][ T951] usb 6-1: Using ep0 maxpacket: 32 [ 485.320471][T11032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.329311][T11032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.361998][ T951] usb 6-1: unable to get BOS descriptor or descriptor too short [ 485.381277][ T951] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 485.391493][ T951] usb 6-1: can't read configurations, error -71 [ 485.470137][ T10] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 485.609645][T11047] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1452'. [ 485.642787][T11047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1452'. [ 485.661785][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 485.679502][ T10] usb 2-1: config 0 has an invalid descriptor of length 252, skipping remainder of the config [ 485.703635][ T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 485.725070][ T10] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 485.746369][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.768166][ T10] usb 2-1: config 0 descriptor?? [ 486.025440][ T5863] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 486.083347][ T6079] usb 2-1: USB disconnect, device number 61 [ 486.150594][T11061] : renamed from bond0 (while UP) [ 486.157807][ T30] audit: type=1400 audit(2000000294.366:642): avc: denied { ioctl } for pid=11060 comm="syz.5.1457" path="socket:[30838]" dev="sockfs" ino=30838 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 486.197461][ T5863] usb 7-1: Using ep0 maxpacket: 8 [ 486.208218][ T5863] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 486.217693][ T5863] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 486.227603][ T5863] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 486.238231][ T5863] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 486.248321][ T5863] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 486.262261][ T5863] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 486.271563][ T5863] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.324642][ T5891] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 486.455946][ T6079] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 486.471742][ T5891] usb 8-1: device descriptor read/64, error -71 [ 486.512971][ T5863] usb 7-1: usb_control_msg returned -32 [ 486.522588][ T951] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 486.531130][ T5863] usbtmc 7-1:16.0: can't read capabilities [ 486.640319][ T6079] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 486.687049][ T6079] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.710028][ T951] usb 6-1: Using ep0 maxpacket: 16 [ 486.721539][ T6079] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 486.739123][ T6079] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 486.749658][ T5891] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 486.762866][ T951] usb 6-1: New USB device found, idVendor=0482, idProduct=1234, bcdDevice=ff.76 [ 486.781692][ T951] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.790290][ T6079] usb 2-1: Manufacturer: syz [ 486.800267][ T951] usb 6-1: Product: syz [ 486.821484][ T6079] usb 2-1: config 0 descriptor?? [ 486.821529][ T951] usb 6-1: Manufacturer: syz [ 486.833187][ T951] usb 6-1: SerialNumber: syz [ 486.899810][ T951] usb 6-1: config 0 descriptor?? [ 486.917460][ T5891] usb 8-1: device descriptor read/64, error -71 [ 487.052061][ T5891] usb usb8-port1: attempt power cycle [ 487.347877][ T6079] cougar 0003:060B:700A.0014: unknown main item tag 0x0 [ 487.370010][ T6079] cougar 0003:060B:700A.0014: unknown main item tag 0x0 [ 487.377535][ T6079] cougar 0003:060B:700A.0014: unknown main item tag 0x0 [ 487.386246][ T6079] cougar 0003:060B:700A.0014: unknown main item tag 0x0 [ 487.393411][ T6079] cougar 0003:060B:700A.0014: unknown main item tag 0x0 [ 487.419778][ T6079] cougar 0003:060B:700A.0014: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 487.436815][ T5891] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 487.459429][ T5891] usb 8-1: device descriptor read/8, error -71 [ 487.652572][ T6079] usb 6-1: USB disconnect, device number 16 [ 487.714506][ T5891] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 487.758504][ T5891] usb 8-1: device descriptor read/8, error -71 [ 487.763415][ T30] audit: type=1400 audit(2000000295.872:643): avc: denied { getopt } for pid=11077 comm="syz.5.1463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 487.835983][ T30] audit: type=1400 audit(2000000295.900:644): avc: denied { ioctl } for pid=11077 comm="syz.5.1463" path="socket:[30855]" dev="sockfs" ino=30855 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 487.918883][ T5891] usb usb8-port1: unable to enumerate USB device [ 488.092064][ T5891] usb 7-1: USB disconnect, device number 10 [ 489.048297][T11092] syz.5.1467 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 489.526985][T11092] wg1: entered promiscuous mode [ 489.532202][T11092] wg1: entered allmulticast mode [ 489.721014][T11100] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 490.181141][ T6079] usb 2-1: USB disconnect, device number 62 [ 491.841018][ T5820] Bluetooth: hci4: command 0x0406 tx timeout [ 491.987471][T11119] lo speed is unknown, defaulting to 1000 [ 492.140282][ T951] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 492.195522][T11132] usb 1-1: USB disconnect, device number 48 [ 492.323127][ T951] usb 7-1: Using ep0 maxpacket: 16 [ 492.351081][ T951] usb 7-1: New USB device found, idVendor=110a, idProduct=1653, bcdDevice=5e.a7 [ 492.399906][ T951] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.412511][T11134] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 492.467555][ T951] usb 7-1: Product: syz [ 492.486437][ T951] usb 7-1: Manufacturer: syz [ 492.500860][ T951] usb 7-1: SerialNumber: syz [ 492.522170][ T951] usb 7-1: config 0 descriptor?? [ 492.911763][ T951] mxuport 7-1:0.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 492.921129][ T951] mxuport 7-1:0.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 492.929951][ T951] mxuport 7-1:0.0: probe with driver mxuport failed with error -71 [ 492.965534][ T951] usb 7-1: USB disconnect, device number 11 [ 492.985705][ T5891] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 493.193945][ T5891] usb 8-1: Using ep0 maxpacket: 16 [ 493.206657][ T5891] usb 8-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.02 [ 493.255956][ T5891] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.280233][ T5891] usb 8-1: Product: syz [ 493.294997][ T5891] usb 8-1: Manufacturer: syz [ 493.304783][ T5891] usb 8-1: SerialNumber: syz [ 493.322915][ T5891] usb 8-1: config 0 descriptor?? [ 493.342928][ T5891] go7007 8-1:0.0: probe with driver go7007 failed with error -12 [ 493.600554][T11136] wg2: entered promiscuous mode [ 493.605672][T11136] wg2: entered allmulticast mode [ 493.618710][ T5891] usb 8-1: USB disconnect, device number 11 [ 493.866170][T11153] IPVS: Error connecting to the multicast addr [ 494.011151][ T10] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 494.043211][ T951] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 494.182192][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 494.203905][ T951] usb 7-1: Using ep0 maxpacket: 8 [ 494.215620][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 494.223858][ T951] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 494.238586][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 494.257213][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 494.267182][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 494.315013][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 494.328103][ T951] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 494.347376][ T951] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 494.357458][ T951] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 494.366117][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.367681][ T951] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 494.407540][ T951] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 494.427652][ T951] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.732883][ T951] usb 7-1: usb_control_msg returned -32 [ 494.847187][ T951] usbtmc 7-1:16.0: can't read capabilities [ 495.204280][ T10] usb 2-1: GET_CAPABILITIES returned 0 [ 495.210091][ T10] usbtmc 2-1:16.0: can't read capabilities [ 495.398720][ T10] usb 2-1: USB disconnect, device number 63 [ 495.695178][T11178] FAULT_INJECTION: forcing a failure. [ 495.695178][T11178] name failslab, interval 1, probability 0, space 0, times 0 [ 495.708948][T11178] CPU: 1 UID: 0 PID: 11178 Comm: syz.7.1492 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 495.708980][T11178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 495.708991][T11178] Call Trace: [ 495.708999][T11178] [ 495.709006][T11178] dump_stack_lvl+0x16c/0x1f0 [ 495.709049][T11178] should_fail_ex+0x512/0x640 [ 495.709079][T11178] should_failslab+0xc2/0x120 [ 495.709101][T11178] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 495.709119][T11178] ? __pfx___mod_timer+0x10/0x10 [ 495.709146][T11178] ? __alloc_skb+0x2b2/0x380 [ 495.709170][T11178] __alloc_skb+0x2b2/0x380 [ 495.709189][T11178] ? __pfx___alloc_skb+0x10/0x10 [ 495.709210][T11178] ? __lock_acquire+0x5ca/0x1ba0 [ 495.709244][T11178] xfrm_send_state_notify+0x7d6/0x1fb0 [ 495.709277][T11178] ? __pfx_xfrm_send_state_notify+0x10/0x10 [ 495.709311][T11178] ? __pfx_xfrm_send_state_notify+0x10/0x10 [ 495.709338][T11178] km_state_notify+0xa8/0x230 [ 495.709365][T11178] xfrm_add_sa+0x34d7/0x58a0 [ 495.709398][T11178] ? __pfx_xfrm_add_sa+0x10/0x10 [ 495.709426][T11178] ? __nla_parse+0x40/0x60 [ 495.709445][T11178] ? __pfx_xfrm_add_sa+0x10/0x10 [ 495.709470][T11178] xfrm_user_rcv_msg+0x58b/0xc00 [ 495.709498][T11178] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 495.709527][T11178] ? __pfx___schedule+0x10/0x10 [ 495.709577][T11178] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 495.709598][T11178] ? netlink_rcv_skb+0x145/0x440 [ 495.709622][T11178] ? xfrm_user_rcv_msg+0x1e/0xc00 [ 495.709650][T11178] netlink_rcv_skb+0x16d/0x440 [ 495.709672][T11178] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 495.709695][T11178] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 495.709742][T11178] xfrm_netlink_rcv+0x71/0x90 [ 495.709763][T11178] netlink_unicast+0x53a/0x7f0 [ 495.709789][T11178] ? __pfx_netlink_unicast+0x10/0x10 [ 495.709820][T11178] netlink_sendmsg+0x8d1/0xdd0 [ 495.709847][T11178] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.709880][T11178] ____sys_sendmsg+0xa95/0xc70 [ 495.709907][T11178] ? copy_msghdr_from_user+0x10a/0x160 [ 495.709927][T11178] ? __pfx_____sys_sendmsg+0x10/0x10 [ 495.709966][T11178] ___sys_sendmsg+0x134/0x1d0 [ 495.709987][T11178] ? __pfx____sys_sendmsg+0x10/0x10 [ 495.710047][T11178] __sys_sendmsg+0x16d/0x220 [ 495.710068][T11178] ? __pfx___sys_sendmsg+0x10/0x10 [ 495.710106][T11178] do_syscall_64+0xcd/0x260 [ 495.710134][T11178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.710152][T11178] RIP: 0033:0x7f83de98e969 [ 495.710168][T11178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 495.710185][T11178] RSP: 002b:00007f83df88d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 495.710203][T11178] RAX: ffffffffffffffda RBX: 00007f83debb6160 RCX: 00007f83de98e969 [ 495.710215][T11178] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008 [ 495.710226][T11178] RBP: 00007f83df88d090 R08: 0000000000000000 R09: 0000000000000000 [ 495.710236][T11178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 495.710246][T11178] R13: 0000000000000000 R14: 00007f83debb6160 R15: 00007ffd1291ba18 [ 495.710270][T11178] [ 496.087874][ T951] usb 7-1: USB disconnect, device number 12 [ 496.402010][T11184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1494'. [ 497.325298][ T5891] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 497.603220][ T5891] usb 7-1: Using ep0 maxpacket: 8 [ 498.298775][ T5891] usb 7-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 498.308014][ T5891] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.341796][ T5891] usb 7-1: Product: syz [ 498.346098][ T5891] usb 7-1: Manufacturer: syz [ 498.350708][ T5891] usb 7-1: SerialNumber: syz [ 498.416498][ T5891] usb 7-1: config 0 descriptor?? [ 498.451806][ T5891] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 498.940003][T11201] netlink: 'syz.6.1498': attribute type 2 has an invalid length. [ 499.799763][ T5861] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 500.098341][ T5861] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 500.146409][ T5861] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 500.157998][T11199] syz.6.1498 (11199): drop_caches: 2 [ 500.187703][ T5861] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 500.210018][ T5861] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 500.242702][ T5861] usb 8-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 500.258585][ T5861] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.288672][ T5861] usb 8-1: config 0 descriptor?? [ 500.331121][ T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 500.362029][ T5891] gspca_m5602: Failed to find a sensor [ 500.370824][ T5891] ALi m5602 7-1:0.0: ALi m5602 webcam failed [ 500.386701][ T5891] usb 7-1: USB disconnect, device number 13 [ 500.500460][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 500.519275][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 500.537220][ T5861] hdpvr 8-1:0.0: firmware version 0xf4 dated êÐœ~¯ÏLµj¶uU$«[-Må¿/h&ÉçûXgÁÞ†<|’ [ 500.564015][ T5861] hdpvr 8-1:0.0: untested firmware, the driver might not work. [ 500.581279][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 500.617195][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 500.667029][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 500.695736][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 500.717505][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.865807][T11239] tmpfs: Unknown parameter 'usrquotax' [ 500.973818][ T10] usb 6-1: GET_CAPABILITIES returned 0 [ 501.357896][ T10] usbtmc 6-1:16.0: can't read capabilities [ 501.391783][ T10] usb 6-1: USB disconnect, device number 17 [ 501.474963][ T5861] hdpvr 8-1:0.0: Could not setup controls [ 501.488014][ T5861] hdpvr 8-1:0.0: registering videodev failed [ 501.507450][T11248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1512'. [ 501.523580][ T5861] hdpvr 8-1:0.0: probe with driver hdpvr failed with error -71 [ 501.552288][ T5861] usb 8-1: USB disconnect, device number 12 [ 503.940161][T11268] lo: entered allmulticast mode [ 503.952855][T11268] tunl0: entered allmulticast mode [ 503.970119][T11268] gre0: entered allmulticast mode [ 503.988043][T11268] gretap0: entered allmulticast mode [ 504.002247][T11268] erspan0: entered allmulticast mode [ 504.105072][T11268] ip_vti0: entered allmulticast mode [ 504.184637][T11268] ip6_vti0: entered allmulticast mode [ 504.213168][T11268] sit0: entered allmulticast mode [ 504.231626][ T5891] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 504.270584][T11268] ip6tnl0: entered allmulticast mode [ 504.299755][T11268] ip6gre0: entered allmulticast mode [ 504.402954][ T5891] usb 6-1: Using ep0 maxpacket: 8 [ 504.413952][T11268] ip6gretap0: entered allmulticast mode [ 504.432966][ T5891] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 504.454031][T11268] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.461741][T11268] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.478301][ T5891] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 504.537293][ T5891] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 504.566171][T11268] bridge0: entered allmulticast mode [ 504.579845][ T5891] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 504.695600][T11268] vcan0: entered allmulticast mode [ 504.708119][T11277] netlink: 'syz.3.1519': attribute type 10 has an invalid length. [ 504.729152][T11268] bond0: entered allmulticast mode [ 504.748493][T11268] bond_slave_0: entered allmulticast mode [ 504.768018][T11268] bond_slave_1: entered allmulticast mode [ 504.801728][ T5891] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 504.815109][T11268] team0: entered allmulticast mode [ 504.815141][T11268] team_slave_0: entered allmulticast mode [ 504.815185][T11268] team_slave_1: entered allmulticast mode [ 504.880723][ T5891] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 504.908790][T11268] dummy0: entered allmulticast mode [ 504.914228][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.958707][T11268] nlmon0: entered allmulticast mode [ 504.998044][T11268] caif0: entered allmulticast mode [ 505.030282][T11268] batadv0: entered allmulticast mode [ 505.072797][T11268] vxcan0: entered allmulticast mode [ 505.095529][T11268] vxcan1: entered allmulticast mode [ 505.126813][T11268] veth0: entered allmulticast mode [ 505.150157][T11268] veth1: entered allmulticast mode [ 505.203203][T11268] wg0: entered allmulticast mode [ 505.254144][T11268] wg1: entered allmulticast mode [ 505.255870][ T5891] usb 6-1: usb_control_msg returned -32 [ 505.265739][ T5891] usbtmc 6-1:16.0: can't read capabilities [ 505.290360][T11268] wg2: left promiscuous mode [ 505.461983][T11268] veth0_to_bridge: entered allmulticast mode [ 505.846386][T11268] veth1_to_bridge: entered allmulticast mode [ 505.862011][T11268] veth0_to_bond: entered allmulticast mode [ 505.875771][T11268] veth1_to_bond: entered allmulticast mode [ 505.878002][T11273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 505.888035][T11268] veth0_to_team: entered allmulticast mode [ 506.125000][T11268] veth1_to_team: entered allmulticast mode [ 506.144371][T11268] veth0_to_batadv: entered allmulticast mode [ 506.183641][T11268] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 506.211368][T11268] batadv_slave_0: entered allmulticast mode [ 506.289257][T11268] veth1_to_batadv: entered allmulticast mode [ 506.357195][T11268] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 506.381714][T11268] batadv_slave_1: entered allmulticast mode [ 506.404164][T11268] xfrm0: entered allmulticast mode [ 506.434917][T11268] veth0_to_hsr: entered allmulticast mode [ 506.467264][T11268] hsr_slave_0: entered allmulticast mode [ 506.486837][T11268] veth1_to_hsr: entered allmulticast mode [ 506.518940][T11268] hsr_slave_1: entered allmulticast mode [ 506.545726][T11268] hsr0: entered allmulticast mode [ 506.703087][T11268] veth1_virt_wifi: entered allmulticast mode [ 506.759429][T11268] veth0_virt_wifi: entered allmulticast mode [ 506.890274][T11292] loop6: detected capacity change from 0 to 524287999 [ 507.120883][T11268] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 507.256562][T11268] veth1_vlan: entered allmulticast mode [ 507.365688][T11268] veth0_vlan: entered allmulticast mode [ 507.429694][T11268] vlan0: entered allmulticast mode [ 507.435918][T11268] vlan1: entered allmulticast mode [ 507.481460][T11268] macvlan0: entered allmulticast mode [ 507.517768][T11268] macvlan1: entered allmulticast mode [ 507.577219][T11268] ipvlan0: entered allmulticast mode [ 507.607262][T11268] ipvlan1: entered allmulticast mode [ 507.624091][T11268] veth1_macvtap: entered allmulticast mode [ 507.654940][T11268] veth0_macvtap: entered allmulticast mode [ 507.700265][T11268] macvtap0: entered allmulticast mode [ 507.747224][T11268] macsec0: entered allmulticast mode [ 507.784427][T11268] geneve0: entered allmulticast mode [ 507.821987][T11268] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.846985][T11268] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.876875][T11268] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.887257][T11268] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.909314][T11268] geneve1: entered allmulticast mode [ 507.935294][T11268] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 507.973067][T11268] netdevsim netdevsim7 netdevsim1: entered allmulticast mode [ 507.991630][T11268] netdevsim netdevsim7 netdevsim2: entered allmulticast mode [ 508.008478][T11268] netdevsim netdevsim7 netdevsim3: entered allmulticast mode [ 508.087545][T11268] mac80211_hwsim hwsim23 wlan0: entered allmulticast mode [ 508.147380][T11268] mac80211_hwsim hwsim24 wlan1: entered allmulticast mode [ 508.170840][T11271] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 508.219123][T11277] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 508.235184][T11277] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 508.266027][T11277] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 508.540266][ T5863] usb 6-1: USB disconnect, device number 18 [ 508.804017][T11305] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1525'. [ 510.162499][ T30] audit: type=1400 audit(2000000316.797:645): avc: denied { watch } for pid=11319 comm="syz.7.1531" path="/45" dev="tmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 511.518142][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.897567][T11337] input: syz1 as /devices/virtual/input/input15 [ 513.396122][T11337] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 513.403155][T11337] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 513.412029][T11337] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 513.420843][T11337] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 513.427497][T11337] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 513.511824][T11337] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 513.521371][T11337] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 513.528864][T11337] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 513.587011][T11337] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 514.642285][T11341] Bluetooth: hci2: command 0x0c1a tx timeout [ 514.739711][T11358] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 515.189693][ T10] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 515.627737][T11341] Bluetooth: hci5: command 0x0c1a tx timeout [ 515.633888][T11341] Bluetooth: hci4: command 0x0406 tx timeout [ 515.713196][T11341] Bluetooth: hci1: command 0x0405 tx timeout [ 516.499505][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.527266][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.571414][ T10] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 516.598700][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.648337][ T10] usb 2-1: config 0 descriptor?? [ 516.954985][T11374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.027488][T11374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.449593][ T10] lenovo 0003:17EF:6047.0015: unknown main item tag 0x0 [ 517.484328][ T10] lenovo 0003:17EF:6047.0015: unknown main item tag 0x0 [ 517.545080][ T10] lenovo 0003:17EF:6047.0015: unknown main item tag 0x0 [ 517.643307][ T30] audit: type=1400 audit(2000000323.821:646): avc: denied { map } for pid=11382 comm="syz.3.1549" path="socket:[31418]" dev="sockfs" ino=31418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 518.093575][T11341] Bluetooth: hci4: command 0x0406 tx timeout [ 518.094062][ T5820] Bluetooth: hci5: command 0x0c1a tx timeout [ 518.117873][T11341] Bluetooth: hci1: command 0x0405 tx timeout [ 518.129446][ T951] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 518.193385][ T10] lenovo 0003:17EF:6047.0015: unknown main item tag 0x0 [ 518.200526][ T10] lenovo 0003:17EF:6047.0015: unknown main item tag 0x2 [ 518.290631][T11360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.299184][T11360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.308016][ T10] lenovo 0003:17EF:6047.0015: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.1-1/input0 [ 518.606335][ T951] usb 7-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 518.675736][ T951] usb 7-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 518.696153][ T6079] usb 2-1: USB disconnect, device number 64 [ 518.746859][ T951] usb 7-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 518.767606][ T951] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.739927][ T951] usb 7-1: string descriptor 0 read error: -71 [ 519.757122][ T951] hub 7-1:32.0: USB hub found [ 519.764971][ T951] hub 7-1:32.0: config failed, can't read hub descriptor (err -22) [ 519.842426][ T951] usb 7-1: USB disconnect, device number 14 [ 520.334427][ T5815] Bluetooth: hci1: command 0x0405 tx timeout [ 520.340941][ T5815] Bluetooth: hci5: command 0x0c1a tx timeout [ 520.664121][ T30] audit: type=1400 audit(2000000326.656:647): avc: denied { read } for pid=11410 comm="syz.6.1555" lport=59193 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 520.759495][ T6079] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 521.029243][T11416] block nbd1: shutting down sockets [ 521.079093][ T30] audit: type=1400 audit(2000000327.030:648): avc: denied { setopt } for pid=11410 comm="syz.6.1555" lport=59193 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 521.144034][ T6079] usb 8-1: Using ep0 maxpacket: 8 [ 521.194674][ T6079] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 521.299649][ T6079] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 521.389909][ T6079] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 521.399929][ T6079] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 521.604674][ T6079] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 521.646749][ T6079] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 521.700683][ T6079] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.980393][ T6079] usb 8-1: usb_control_msg returned -32 [ 522.003433][ T6079] usbtmc 8-1:16.0: can't read capabilities [ 522.170765][ T5891] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 522.495951][ T5891] usb 2-1: Using ep0 maxpacket: 8 [ 522.558034][ T5891] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 522.575234][ T5891] usb 2-1: config 2 has no interface number 0 [ 522.585893][ T5891] usb 2-1: config 2 interface 31 has no altsetting 0 [ 522.602028][ T5891] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 522.613205][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.662082][ T5891] usb 2-1: Product: syz [ 522.692775][ T5891] usb 2-1: Manufacturer: syz [ 522.709545][ T5891] usb 2-1: SerialNumber: syz [ 523.475226][ T951] usb 8-1: USB disconnect, device number 13 [ 525.312513][ T5891] ch9200 2-1:2.31: probe with driver ch9200 failed with error -22 [ 525.516549][ T5861] usb 2-1: USB disconnect, device number 65 [ 525.805045][ T5891] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 525.832164][ T10] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 526.010491][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 526.269832][ T10] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 526.294413][ T10] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 526.308059][ T10] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 526.326049][ T10] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 526.338861][ T10] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 526.350380][ T5891] usb 6-1: Using ep0 maxpacket: 16 [ 526.364342][ T5891] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 526.364571][ T10] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 526.403391][ T5891] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 526.410807][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.437090][ T5891] usb 6-1: can't read configurations, error -61 [ 526.599822][ T5891] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 526.687268][ T10] usb 8-1: usb_control_msg returned -32 [ 526.707466][ T10] usbtmc 8-1:16.0: can't read capabilities [ 526.769405][ T5891] usb 6-1: Using ep0 maxpacket: 16 [ 526.778717][ T5861] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 526.796749][ T5891] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 526.835703][ T5891] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 526.850663][ T5891] usb 6-1: can't read configurations, error -61 [ 526.923037][ T5891] usb usb6-port1: attempt power cycle [ 527.248481][ T5861] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 527.257806][ T5861] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 527.301705][ T5861] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 527.332278][ T5861] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 527.352488][ T5891] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 527.385881][T11469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1574'. [ 527.400702][ T5891] usb 6-1: Using ep0 maxpacket: 16 [ 527.412462][ T5891] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 527.433123][ T5861] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 527.435226][ T5891] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 527.470405][ T5891] usb 6-1: can't read configurations, error -61 [ 527.581780][ T5861] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 527.649091][ T5861] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 527.708327][ T5891] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 527.719319][ T5861] usb 2-1: Product: syz [ 527.760149][ T5861] usb 2-1: Manufacturer: syz [ 527.987081][T10856] usb 8-1: USB disconnect, device number 14 [ 528.008940][ T5861] cdc_wdm 2-1:1.0: skipping garbage [ 528.014809][ T5861] cdc_wdm 2-1:1.0: skipping garbage [ 528.028815][ T5861] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 528.035082][ T5861] cdc_wdm 2-1:1.0: Unknown control protocol [ 528.049763][ T5891] usb 6-1: Using ep0 maxpacket: 16 [ 528.082299][ T5891] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 528.110697][ T5891] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 528.124536][ T5891] usb 6-1: can't read configurations, error -61 [ 528.143682][ T5891] usb usb6-port1: unable to enumerate USB device [ 528.239257][T11479] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1576'. [ 528.256140][T11479] netlink: 59 bytes leftover after parsing attributes in process `syz.3.1576'. [ 528.270855][T11479] netlink: 59 bytes leftover after parsing attributes in process `syz.3.1576'. [ 528.375003][T11479] netlink: 'syz.3.1576': attribute type 25 has an invalid length. [ 528.514047][T11487] wg2: entered allmulticast mode [ 528.527869][T11487] bridge4: left promiscuous mode [ 528.541871][T11487] bridge4: entered allmulticast mode [ 528.563917][T11487] bridge5: left promiscuous mode [ 528.728425][T11487] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 528.779583][ T30] audit: type=1400 audit(2000000334.242:649): avc: denied { unmount } for pid=9711 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 528.844678][T11494] loop6: detected capacity change from 0 to 524287999 [ 528.872837][T11494] Buffer I/O error on dev loop6, logical block 0, async page read [ 528.884335][T11494] Buffer I/O error on dev loop6, logical block 0, async page read [ 528.927238][T11494] Buffer I/O error on dev loop6, logical block 0, async page read [ 528.992545][T11494] Buffer I/O error on dev loop6, logical block 0, async page read [ 529.045806][T11494] Buffer I/O error on dev loop6, logical block 0, async page read [ 529.080482][T11494] Buffer I/O error on dev loop6, logical block 0, async page read [ 529.091102][T11494] Buffer I/O error on dev loop6, logical block 0, async page read [ 529.101013][T11494] Buffer I/O error on dev loop6, logical block 0, async page read [ 529.109871][T11494] ldm_validate_partition_table(): Disk read failed. [ 529.116869][T11494] Buffer I/O error on dev loop6, logical block 0, async page read [ 529.126716][T11494] Buffer I/O error on dev loop6, logical block 0, async page read [ 529.139385][T11494] Dev loop6: unable to read RDB block 0 [ 529.346836][T11494] loop6: unable to read partition table [ 529.503345][T11494] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 529.701983][T11500] ldm_validate_partition_table(): Disk read failed. [ 529.710244][T11500] Dev loop6: unable to read RDB block 0 [ 529.734594][T11500] loop6: unable to read partition table [ 529.772157][T11500] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 529.964510][T11509] xt_TPROXY: Can be used only with -p tcp or -p udp [ 530.094934][T11511] fuse: Bad value for 'fd' [ 530.629881][ T5891] usb 2-1: USB disconnect, device number 66 [ 532.134966][T11522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1590'. [ 532.416155][T11534] netlink: 'syz.5.1592': attribute type 1 has an invalid length. [ 532.465442][T11534] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 532.473478][T11534] IPv6: NLM_F_CREATE should be set when creating new route [ 532.520906][T11537] ubi31: attaching mtd0 [ 532.545268][T11537] ubi31: scanning is finished [ 532.559511][T11532] xt_CT: No such helper "snmp" [ 532.570081][T11537] ubi31: empty MTD device detected [ 532.618932][T11540] syz.6.1594 (11540): drop_caches: 2 [ 532.625932][T11540] syz.6.1594 (11540): drop_caches: 2 [ 532.829078][ T5861] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 532.956265][T11537] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 532.988599][T11537] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 533.012538][T11537] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 533.042660][ T6095] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 533.051517][T11537] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 533.075532][ T5861] usb 7-1: config index 0 descriptor too short (expected 76, got 72) [ 533.096285][T11537] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 533.160294][T11537] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 533.216040][ T5861] usb 7-1: string descriptor 0 read error: -71 [ 533.226142][T11537] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3066252266 [ 533.246842][ T5861] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 533.268894][T11537] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 533.318023][T11552] netlink: 'syz.7.1597': attribute type 4 has an invalid length. [ 533.327626][T11552] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1597'. [ 533.492083][T11548] ubi31: background thread "ubi_bgt31d" started, PID 11548 [ 533.783999][ T6095] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 533.798709][ T5861] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.812820][ T6095] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 533.828945][T11554] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1598'. [ 533.873315][ T5861] usb 7-1: can't set config #1, error -71 [ 533.916037][ T5861] usb 7-1: USB disconnect, device number 15 [ 533.962529][ T6095] usb 6-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 533.994055][ T6095] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 534.058512][ T6095] usb 6-1: Manufacturer: syz [ 534.068314][ T6095] usb 6-1: config 0 descriptor?? [ 534.136109][T11561] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1602'. [ 534.581366][ T5861] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 534.596196][ T6095] cougar 0003:060B:700A.0016: unknown main item tag 0x0 [ 534.606068][ T6095] cougar 0003:060B:700A.0016: unknown main item tag 0x0 [ 534.613183][ T6095] cougar 0003:060B:700A.0016: unknown main item tag 0x0 [ 534.620917][ T6095] cougar 0003:060B:700A.0016: unknown main item tag 0x0 [ 534.628515][ T6095] cougar 0003:060B:700A.0016: unknown main item tag 0x0 [ 534.637611][ T6095] cougar 0003:060B:700A.0016: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 534.771560][ T5861] usb 7-1: config 0 has no interfaces? [ 534.782724][ T5861] usb 7-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 534.811070][ T5861] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.824765][ T5861] usb 7-1: config 0 descriptor?? [ 534.977585][ T5891] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 535.063614][ T5860] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 535.115489][T11562] vlan2: entered promiscuous mode [ 535.121598][T11562] team0: entered promiscuous mode [ 535.127480][T11562] team_slave_0: entered promiscuous mode [ 535.134614][T11562] team_slave_1: entered promiscuous mode [ 535.184636][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 535.218926][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 535.247764][ T5891] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 535.261450][ T5891] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 535.299347][T10856] usb 7-1: USB disconnect, device number 16 [ 535.356531][ T5891] usb 2-1: Manufacturer: syz [ 535.366614][ T5891] usb 2-1: config 0 descriptor?? [ 535.383979][ T5860] usb 8-1: device descriptor read/64, error -71 [ 535.607419][ T30] audit: type=1400 audit(2000000340.621:650): avc: denied { ioctl } for pid=11593 comm="syz.3.1614" path="socket:[32373]" dev="sockfs" ino=32373 ioctlcmd=0x661b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 535.642784][ T5860] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 535.790150][ T5860] usb 8-1: device descriptor read/64, error -71 [ 535.809878][ T5891] cougar 0003:060B:700A.0017: unknown main item tag 0x0 [ 535.819555][ T5891] cougar 0003:060B:700A.0017: unknown main item tag 0x0 [ 535.830623][ T5891] cougar 0003:060B:700A.0017: unknown main item tag 0x0 [ 535.838717][ T5891] cougar 0003:060B:700A.0017: unknown main item tag 0x0 [ 535.857802][ T5891] cougar 0003:060B:700A.0017: unknown main item tag 0x0 [ 535.881022][ T5891] cougar 0003:060B:700A.0017: hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 535.912198][ T5860] usb usb8-port1: attempt power cycle [ 536.117254][ T5861] usb 2-1: USB disconnect, device number 67 [ 536.735875][ T5860] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 536.828746][T11598] wg2: left allmulticast mode [ 536.832406][ T5860] usb 8-1: device descriptor read/8, error -71 [ 536.904300][ T5891] usb 6-1: USB disconnect, device number 23 [ 537.095188][ T951] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 537.163166][ T5860] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 537.319107][ T951] usb 7-1: Using ep0 maxpacket: 16 [ 537.376291][ T951] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 537.463695][ T951] usb 7-1: can't read configurations, error -61 [ 537.500688][ T5860] usb 8-1: device descriptor read/8, error -71 [ 537.631013][ T5860] usb usb8-port1: unable to enumerate USB device [ 538.262091][ T951] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 538.856364][T11604] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1618'. [ 538.912219][ T30] audit: type=1400 audit(2000000343.717:651): avc: denied { ioctl } for pid=11603 comm="syz.5.1618" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 538.988354][ T951] usb 7-1: Using ep0 maxpacket: 16 [ 539.022683][ T951] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 539.340841][ T951] usb 7-1: can't read configurations, error -61 [ 539.524293][ T951] usb usb7-port1: attempt power cycle [ 539.610991][T11621] 9pnet_virtio: no channels available for device [ 539.673638][ T30] audit: type=1400 audit(2000000344.438:652): avc: denied { setcheckreqprot } for pid=11620 comm="syz.6.1621" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 541.191568][ T30] audit: type=1400 audit(2000000345.850:653): avc: denied { bind } for pid=11642 comm="syz.7.1626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 541.218086][ T30] audit: type=1400 audit(2000000345.878:654): avc: denied { setopt } for pid=11642 comm="syz.7.1626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 541.331292][T11645] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1626'. [ 542.076390][T11659] bridge2: entered promiscuous mode [ 543.698597][T11660] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 544.375209][ T5861] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 544.599352][ T5861] usb 2-1: Using ep0 maxpacket: 32 [ 544.937919][ T5861] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 544.976008][ T5861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 544.989521][ T5861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 545.001762][ T5861] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 545.050299][ T5861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.064712][T11677] FAULT_INJECTION: forcing a failure. [ 545.064712][T11677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 545.085054][ T5861] usb 2-1: config 0 descriptor?? [ 545.091361][T11669] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 545.155251][T11677] CPU: 1 UID: 0 PID: 11677 Comm: syz.5.1639 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 545.155283][T11677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 545.155293][T11677] Call Trace: [ 545.155299][T11677] [ 545.155306][T11677] dump_stack_lvl+0x16c/0x1f0 [ 545.155338][T11677] should_fail_ex+0x512/0x640 [ 545.155365][T11677] _copy_to_user+0x32/0xd0 [ 545.155396][T11677] cp_new_stat+0x468/0x5a0 [ 545.155417][T11677] ? __pfx_cp_new_stat+0x10/0x10 [ 545.155448][T11677] ? putname+0x154/0x1a0 [ 545.155467][T11677] ? getname_flags.part.0+0x1c5/0x550 [ 545.155495][T11677] __do_sys_newlstat+0x12f/0x140 [ 545.155516][T11677] ? __pfx___do_sys_newlstat+0x10/0x10 [ 545.155550][T11677] ? __pfx_ksys_write+0x10/0x10 [ 545.155577][T11677] ? rcu_is_watching+0x12/0xc0 [ 545.155602][T11677] ? rcu_is_watching+0x12/0xc0 [ 545.155624][T11677] do_syscall_64+0xcd/0x260 [ 545.155652][T11677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.155669][T11677] RIP: 0033:0x7fa63838e969 [ 545.155685][T11677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 545.155703][T11677] RSP: 002b:00007fa639207038 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 545.155722][T11677] RAX: ffffffffffffffda RBX: 00007fa6385b5fa0 RCX: 00007fa63838e969 [ 545.155734][T11677] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000200000000200 [ 545.155745][T11677] RBP: 00007fa639207090 R08: 0000000000000000 R09: 0000000000000000 [ 545.155755][T11677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 545.155766][T11677] R13: 0000000000000000 R14: 00007fa6385b5fa0 R15: 00007ffdff990108 [ 545.155789][T11677] [ 545.160644][ T5861] hub 2-1:0.0: USB hub found [ 545.376654][ T5861] hub 2-1:0.0: 2 ports detected [ 545.513720][T11687] 9pnet_fd: Insufficient options for proto=fd [ 545.895630][T11392] Bluetooth: hci0: command tx timeout [ 546.430271][T11699] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 547.309996][ T5861] hub 2-1:0.0: hub_ext_port_status failed (err = 0) [ 547.357533][ T30] audit: type=1400 audit(2000000351.612:655): avc: denied { open } for pid=11706 comm="syz.6.1649" path="/dev/ptyr1" dev="devtmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 548.081738][ T6095] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 548.273385][ T6095] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 548.311897][ T6095] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 548.341886][ T6095] usb 6-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 548.394419][ T6095] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 548.402797][ T6095] usb 6-1: Manufacturer: syz [ 548.440454][ T6095] usb 6-1: config 0 descriptor?? [ 548.619062][ T951] usb 2-1: USB disconnect, device number 68 [ 548.903293][ T6095] cougar 0003:060B:700A.0018: unknown main item tag 0x0 [ 548.923544][ T6095] cougar 0003:060B:700A.0018: unknown main item tag 0x0 [ 548.934113][ T6095] cougar 0003:060B:700A.0018: unknown main item tag 0x0 [ 548.942437][ T6095] cougar 0003:060B:700A.0018: unknown main item tag 0x0 [ 548.950587][ T6095] cougar 0003:060B:700A.0018: unknown main item tag 0x0 [ 548.959713][ T6095] cougar 0003:060B:700A.0018: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 551.322341][ T951] usb 6-1: USB disconnect, device number 24 [ 551.462586][T11750] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 551.483800][ T30] audit: type=1400 audit(2000000355.447:656): avc: denied { map } for pid=11747 comm="syz.6.1659" path="socket:[32723]" dev="sockfs" ino=32723 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 551.574707][ T30] audit: type=1400 audit(2000000355.447:657): avc: denied { read accept } for pid=11747 comm="syz.6.1659" path="socket:[32723]" dev="sockfs" ino=32723 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 551.622603][ T30] audit: type=1400 audit(2000000355.522:658): avc: denied { write } for pid=11747 comm="syz.6.1659" path="socket:[32723]" dev="sockfs" ino=32723 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 552.243237][ T951] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 552.441984][ T951] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 552.483178][ T951] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.494226][T11770] netlink: 240 bytes leftover after parsing attributes in process `syz.6.1666'. [ 552.533838][ T951] usb 8-1: Product: syz [ 552.863006][ T6095] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 553.116350][ T30] audit: type=1400 audit(2000000356.972:659): avc: denied { firmware_load } for pid=11775 comm="syz.6.1669" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 553.143114][ T951] usb 8-1: Manufacturer: syz [ 553.155624][ T951] usb 8-1: SerialNumber: syz [ 553.176635][ T951] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 553.194795][T10856] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 553.294982][ T6095] usb 2-1: config index 0 descriptor too short (expected 76, got 72) [ 553.310169][ T6095] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 2304, setting to 1024 [ 553.346873][ T6095] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 553.382287][ T6095] usb 2-1: string descriptor 0 read error: -71 [ 553.389459][ T6095] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 553.432879][ T6095] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.484525][ T6095] usb 2-1: can't set config #1, error -71 [ 553.512021][ T6095] usb 2-1: USB disconnect, device number 69 [ 553.904506][ T951] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 554.073614][ T951] usb 6-1: Using ep0 maxpacket: 8 [ 554.117018][ T951] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 554.210719][T11789] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11789 comm=syz.1.1672 [ 554.228726][T11789] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1672'. [ 554.306513][ T951] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 554.348977][ T951] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 554.370430][ T951] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 554.413184][ T951] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 554.499032][ T951] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 554.534518][T10856] usb 8-1: Service connection timeout for: 256 [ 554.584332][ T951] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.624576][T10856] ath9k_htc 8-1:1.0: ath9k_htc: Unable to initialize HTC services [ 554.975106][T10856] ath9k_htc: Failed to initialize the device [ 555.001148][T10856] usb 8-1: ath9k_htc: USB layer deinitialized [ 555.966546][ T6095] usb 8-1: USB disconnect, device number 19 [ 555.988250][ T951] usb 6-1: usb_control_msg returned -71 [ 556.923919][ T951] usbtmc 6-1:16.0: can't read capabilities [ 556.951027][ T951] usb 6-1: USB disconnect, device number 25 [ 557.367530][ T30] audit: type=1400 audit(2000000360.985:660): avc: denied { bind } for pid=11799 comm="syz.5.1676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 557.401868][T11805] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 557.438761][ T30] audit: type=1400 audit(2000000361.032:661): avc: denied { listen } for pid=11799 comm="syz.5.1676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 557.998246][ T30] audit: type=1400 audit(2000000361.050:662): avc: denied { accept } for pid=11799 comm="syz.5.1676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 558.223809][T11818] No control pipe specified [ 558.252354][ T951] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 558.427211][ T951] usb 8-1: Using ep0 maxpacket: 32 [ 558.457309][ T951] usb 8-1: config 0 has no interfaces? [ 558.489749][ T951] usb 8-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 558.513327][ T951] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.550509][ T951] usb 8-1: Product: syz [ 558.580611][ T951] usb 8-1: Manufacturer: syz [ 558.596345][ T951] usb 8-1: SerialNumber: syz [ 558.628500][ T951] usb 8-1: config 0 descriptor?? [ 558.747291][T10856] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 559.619657][T10856] usb 6-1: Using ep0 maxpacket: 8 [ 559.637013][T10856] usb 6-1: config index 0 descriptor too short (expected 1298, got 18) [ 559.952457][T10856] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 560.297726][T10856] usb 6-1: config 0 has no interfaces? [ 560.338357][T10856] usb 6-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 560.362597][T10856] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.383718][ T5861] usb 8-1: USB disconnect, device number 20 [ 560.398193][T10856] usb 6-1: Product: syz [ 560.421460][T10856] usb 6-1: Manufacturer: syz [ 560.444467][T10856] usb 6-1: SerialNumber: syz [ 560.466097][T10856] usb 6-1: config 0 descriptor?? [ 560.658584][ T30] audit: type=1400 audit(2000000364.053:663): avc: denied { read } for pid=11831 comm="syz.6.1685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 560.677933][ C0] vkms_vblank_simulate: vblank timer overrun [ 560.764586][T11837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1687'. [ 562.047109][T11837] 8021q: adding VLAN 0 to HW filter on device bond3 [ 562.095510][T11841] vlan2: entered promiscuous mode [ 562.150927][T11841] bond3: entered promiscuous mode [ 562.166164][T11841] vlan2: entered allmulticast mode [ 562.190522][T11841] bond3: entered allmulticast mode [ 562.298184][T11842] gretap1: entered promiscuous mode [ 562.325033][T11842] gretap1: entered allmulticast mode [ 562.349429][T11842] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 562.545284][ T6095] usb 6-1: USB disconnect, device number 26 [ 564.194445][T11869] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11869 comm=syz.6.1696 [ 564.218405][ T31] INFO: task syz.2.1200:10182 blocked for more than 143 seconds. [ 564.228850][T11869] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1696'. [ 564.259421][ T31] Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 [ 564.377052][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 564.644681][ T31] task:syz.2.1200 state:D stack:26776 pid:10182 tgid:10171 ppid:9815 task_flags:0x400140 flags:0x00004004 [ 564.673685][ T31] Call Trace: [ 564.797398][ T31] [ 564.801536][ T31] __schedule+0x116f/0x5de0 [ 564.806702][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 564.813232][ T31] ? __pfx___schedule+0x10/0x10 [ 564.824578][ T31] ? find_held_lock+0x2b/0x80 [ 564.831901][ T31] ? schedule+0x2d7/0x3a0 [ 564.849363][ T31] schedule+0xe7/0x3a0 [ 565.398995][ T31] super_lock+0x2c0/0x3f0 [ 565.403625][ T31] ? __pfx_super_lock+0x10/0x10 [ 565.406666][T11392] Bluetooth: hci5: unexpected event for opcode 0x2016 [ 565.409922][ T31] ? __pfx_var_wake_function+0x10/0x10 [ 565.409976][ T31] ? iterate_supers+0xaf/0x240 [ 565.431614][ T31] ? __pfx_sync_inodes_one_sb+0x10/0x10 [ 565.440213][ T31] iterate_supers+0xb9/0x240 [ 565.481420][ T31] ksys_sync+0x89/0x150 [ 565.506044][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 565.533384][ T31] ? rcu_is_watching+0x12/0xc0 [ 565.538831][ T31] ? rcu_is_watching+0x12/0xc0 [ 565.550628][ T31] ? do_syscall_64+0x91/0x260 [ 565.558112][ T31] __do_sys_sync+0xe/0x20 [ 565.565738][ T31] do_syscall_64+0xcd/0x260 [ 565.571325][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.580156][ T31] RIP: 0033:0x7fbae0d8e969 [ 565.585714][ T31] RSP: 002b:00007fbae1b3c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 565.601015][ T31] RAX: ffffffffffffffda RBX: 00007fbae0fb6240 RCX: 00007fbae0d8e969 [ 565.610417][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 565.624855][ T31] RBP: 00007fbae0fb6240 R08: 0000000000000000 R09: 0000000000000000 [ 565.633780][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 565.650518][ T31] R13: 0000000000000000 R14: 00007fbae0fb6240 R15: 00007ffe702e5208 [ 565.684479][ T31] [ 565.695225][ T31] [ 565.695225][ T31] Showing all locks held in the system: [ 565.727309][ T31] 2 locks held by ksoftirqd/1/23: [ 565.831738][ T31] #0: ffff8880b8439dd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 565.856952][ T31] #1: ffff8880b8523c48 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2c1/0x8e0 [ 565.870913][ T31] 1 lock held by khungtaskd/31: [ 565.881096][ T31] #0: ffffffff8e3bfc00 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 565.894130][ T31] 2 locks held by getty/5570: [ 565.908985][ T31] #0: ffff88814c86a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 565.930632][ T31] #1: ffffc9000330b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 565.955302][ T31] 2 locks held by syz-executor/5808: [ 565.969364][ T31] #0: ffff8880b8439dd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 565.996376][ T31] #1: ffff8880b8523c48 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2c1/0x8e0 [ 566.026005][ T31] 1 lock held by syz.0.1119/9849: [ 566.037021][ T31] 1 lock held by syz.7.1695/11881: [ 566.050026][ T31] [ 566.061695][ T31] ============================================= [ 566.061695][ T31] [ 566.087286][ T31] NMI backtrace for cpu 1 [ 566.087313][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 566.087338][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 566.087350][ T31] Call Trace: [ 566.087358][ T31] [ 566.087367][ T31] dump_stack_lvl+0x116/0x1f0 [ 566.087403][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 566.087429][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 566.087451][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 566.087478][ T31] watchdog+0xf70/0x12c0 [ 566.087506][ T31] ? __pfx_watchdog+0x10/0x10 [ 566.087524][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 566.087553][ T31] ? __kthread_parkme+0x19e/0x250 [ 566.087583][ T31] ? __pfx_watchdog+0x10/0x10 [ 566.087602][ T31] kthread+0x3c2/0x780 [ 566.087622][ T31] ? __pfx_kthread+0x10/0x10 [ 566.087639][ T31] ? __pfx_kthread+0x10/0x10 [ 566.087656][ T31] ? __pfx_kthread+0x10/0x10 [ 566.087682][ T31] ? __pfx_kthread+0x10/0x10 [ 566.087703][ T31] ? rcu_is_watching+0x12/0xc0 [ 566.087734][ T31] ? __pfx_kthread+0x10/0x10 [ 566.087758][ T31] ret_from_fork+0x45/0x80 [ 566.087782][ T31] ? __pfx_kthread+0x10/0x10 [ 566.087806][ T31] ret_from_fork_asm+0x1a/0x30 [ 566.087857][ T31] [ 566.087894][ T31] Sending NMI from CPU 1 to CPUs 0: [ 566.237962][ C0] NMI backtrace for cpu 0 [ 566.237989][ C0] CPU: 0 UID: 0 PID: 5806 Comm: syz-executor Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 566.238019][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 566.238033][ C0] RIP: 0033:0x7f72ad5c1228 [ 566.238053][ C0] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 566.238075][ C0] RSP: 002b:00007ffdbe8b4b10 EFLAGS: 00000293 [ 566.238101][ C0] RAX: 0000000000000000 RBX: 000000000000057e RCX: 00007f72ad5c1225 [ 566.238116][ C0] RDX: 00007ffdbe8b4b50 RSI: 0000000000000000 RDI: 0000000000000000 [ 566.238130][ C0] RBP: 00007ffdbe8b4bbc R08: 0000000000000000 R09: 0000000000000000 [ 566.238144][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 566.238158][ C0] R13: 00000000000927c0 R14: 0000000000086a29 R15: 00007ffdbe8b4c10 [ 566.238172][ C0] FS: 000055555c8ea500 GS: 0000000000000000 [ 566.371316][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 566.379356][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 566.394786][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 566.408301][ T31] Call Trace: [ 566.412282][ T31] [ 566.415931][ T31] dump_stack_lvl+0x3d/0x1f0 [ 566.420808][ T31] panic+0x71c/0x800 [ 566.425345][ T31] ? __pfx_panic+0x10/0x10 [ 566.430770][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 566.436459][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 566.442550][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 566.447968][ T31] ? watchdog+0xdda/0x12c0 [ 566.452992][ T31] ? watchdog+0xdcd/0x12c0 [ 566.457640][ T31] watchdog+0xdeb/0x12c0 [ 566.465253][ T31] ? __pfx_watchdog+0x10/0x10 [ 566.472355][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 566.478057][ T31] ? __kthread_parkme+0x19e/0x250 [ 566.484505][ T31] ? __pfx_watchdog+0x10/0x10 [ 566.490181][ T31] kthread+0x3c2/0x780 [ 566.495614][ T31] ? __pfx_kthread+0x10/0x10 [ 566.500982][ T31] ? __pfx_kthread+0x10/0x10 [ 566.505710][ T31] ? __pfx_kthread+0x10/0x10 [ 566.514136][ T31] ? __pfx_kthread+0x10/0x10 [ 566.523197][ T31] ? rcu_is_watching+0x12/0xc0 [ 566.528377][ T31] ? __pfx_kthread+0x10/0x10 [ 566.534165][ T31] ret_from_fork+0x45/0x80 [ 566.540807][ T31] ? __pfx_kthread+0x10/0x10 [ 566.546166][ T31] ret_from_fork_asm+0x1a/0x30 [ 566.556576][ T31] [ 566.561589][ T31] Kernel Offset: disabled [ 566.571214][ T31] Rebooting in 86400 seconds..