last executing test programs: 8m33.074548113s ago: executing program 0 (id=462): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f1"], 0x0}, 0x94) dup(r0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xf59}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @local}, 0x10) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000000040)=""/34, &(0x7f0000000100)=0x22) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000b0000040"]) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) io_uring_setup(0x1ac1, &(0x7f0000000200)={0x0, 0xa4ec, 0x8000, 0x1, 0x102a6}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) timerfd_create(0x7, 0x81000) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001ec0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2d, 0xfffffffc, {0x60, 0x0, 0x0, r7, {0x0, 0x7}, {0xffff, 0xffff}, {0x8, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x3000c88c) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0f0000000400000004000000ff07000000000000c63bc11eeba14a4e6e93df6907a174e50eee5511f1e98c20f579197afb6171ba55997f6e54e3f4dd5c13800b0700000000000000ddc1fdddf98419192304dec6844130ae87280cf9161678a41acdaaa8d5f33881f62b35b1e824d740b9af78f5eb16", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/28], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000d80)={0xffffffffffffffff, 0x0, 0x0}, 0x20) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) 8m31.210668193s ago: executing program 0 (id=465): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmsg(r0, &(0x7f0000000440)={&(0x7f00000000c0)=@generic, 0x80, &(0x7f0000000400)=[{&(0x7f0000000140)=""/31, 0x1f}, {&(0x7f0000000200)=""/91, 0x5b}, {&(0x7f00000002c0)=""/165, 0xa5}, {&(0x7f0000000380)=""/109, 0x6d}], 0x4, &(0x7f00000004c0)=""/130, 0x82}, 0x2) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x8c0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4) recvmmsg(r0, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002cc0)=""/61, 0x3d}, 0x9}], 0x1, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x237, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x9, 0x1}}}}}]}}]}}, 0x0) 8m27.6336349s ago: executing program 0 (id=474): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000340)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000780)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e447511703d", 0x31}], 0x2) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) move_pages(r1, 0x6, &(0x7f0000000240)=[&(0x7f00008e3000/0x1000)=nil, &(0x7f00009e5000/0x1000)=nil, &(0x7f0000225000/0x4000)=nil, &(0x7f0000ff9000/0x6000)=nil, &(0x7f000004c000/0x2000)=nil, &(0x7f00002e7000/0x4000)=nil], &(0x7f0000000180)=[0x1ff, 0x8ce7, 0x2, 0x0, 0xa, 0xd4fa], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x0, 0x0, 'fo\x00', 0x0, 0x7f}, 0x2c) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$USBDEVFS_GETDRIVER(r7, 0x41045508, &(0x7f00000003c0)={0x10000200, "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"}) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r8, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r9 = openat$vimc2(0xffffffffffffff9c, &(0x7f000000f140), 0x2, 0x0) ioctl$VIDIOC_QBUF(r9, 0xc058560f, &(0x7f000000f280)=@multiplanar_userptr={0x1, 0xa, 0x4, 0x10000, 0x1, {}, {0x2, 0x0, 0x5, 0x7, 0x8, 0x9, "525067fc"}, 0x79, 0x2, {0x0}}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a000000050001000600000005000400000000000900020073797a300000000014000300686173683a69702c706f72742c697000140007800800084000002f5408000640"], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 8m26.404216344s ago: executing program 0 (id=478): openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0}, 0x20) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x30}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) bind$alg(r4, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="44bc7a4294f5e97377fd18f09c7868f55e8afec9da3cdb781f3304f86094926ad21cdf2412a40635184949679de98db5930d05ef0135db5e31a2cc4bd6f04aa483517d963c5c57c0197e2afcc5c58cc802e2cee88d61085e585b410d7749ae2be3ac682d081bc77bf247ec923cac33b891207710", 0x74) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 8m25.384461025s ago: executing program 0 (id=481): openat$kvm(0xffffffffffffff9c, 0x0, 0xc0042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000040)=0x93f) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f47"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="e4", 0x1}, {&(0x7f0000000000)="68affbf98f6a57a5730dc18530ddf10cf7f12afa333a7a7bdcc5e7bd4e561b9eee883caf67dcc2e8044428ad05ade5e340225524050223a1cbdca118d729262a581fdb5b920d04121b57e68b41b0483ba1004b1d6b98879b8911a9ceaac428318a7eae6f9c590ad74b984d0ab4545efddbbb99b6d080f53ab6befb2319bfef6f900411850f2bf90ddfb41170c589b28fe4da2e8e30afa160bae17444b44b96c4d3e52d7670179a536a5ea126144dbd8d340e461d6732ae6702d0cee6e1f74827e52aff1ae6ddbacae332b953560ebb19ea9ef3f4044ed33bf246c406242b593c973054aa", 0xfffffc4f}, {&(0x7f0000000100)="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", 0xfa}, {&(0x7f0000000200)="1ef5ddb6cf5e4f84290eac35b9531726d22b549a83721755a180637b6f8d069c7b74cae86f61eeab1b0328a25bf4b3c500b5506666f4491b79d3855a259d8a01939242481f48de9aaf8ee0993cd6c8115ff36fc6b061556d19e375a286c361c2585e6c0da5b4b0435499f28940c41d9a6a1b8479e99234f038405334e7a99ffe0324f3e217115fb7891dd0b58bf63215917b7c17ced0d337c20fb06eadf3699298ce2375ac76d1eb54d2a465b9430dd7dbdb1747b16d6dcf3301a654f7ec785a19c87df9d4bd0ce4d21964a9185b19ae583a7c9d2ff3dfebe9dd851a880719ae006fc887ca3ac8", 0xe7}, {&(0x7f00000017c0)="d2cea23a7bc76f15f93c658365d00cfba8c873a343558d1caf6f746cbcbefecab7597bc116c896c055989744a204d0c0d3801be7ca873d6d7fbef825992ba25e0d9789b5aa6dce29dcccb93d47d0a2642b0dcd5b0f99a3bb7f34992048a02a35ec70f919918f4f66cd348ee34f03c608cb77c99180215659fd679de90ee054b7364d8c4ba971c2226a13a2a4bfc88929111fdef444c23087b729c542c27095a1f34a40e2f03dcb418239a3928bde307a40c79e432296466486b01f6fdc4180e200e60b967dd931b1cdf353a27c6a7c006f4654", 0xd3}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000000440)="f88417eb0aff000000ae783750275564000144933f1b8b396b1b19c76a9cb9036b101738204bc2d75f04883cafa3ff67cc0f4224c9e1c6a8704a30483683263f64a0a5899c46cd3020390e57f35fc7f7a4b52a6cc1782f22446e6b2524df9c43f97d7c8c65b57d69e163de46cc460572a286de175597678e53ff0ef2cdfe216a3118", 0x82}, {&(0x7f0000000300)="0ca3e00772bcc56a5948091b31d5884a297b122ecc90a3f7f77869b7dae60571394c1f4430e6"}], 0x7}, 0x45b6703c254b99d8) ioctl$SIOCSIFHWADDR(r4, 0x541b, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000440)={'vxcan1\x00', 0x0}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r10, 0x4188aea7, &(0x7f0000000040)={0x0, 0x5}) sendto$packet(r3, &(0x7f0000000080)="18", 0x48, 0x0, &(0x7f00000000c0)={0x11, 0xd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r12 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r12, 0x40086602, &(0x7f0000000040)=0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) setsockopt$bt_BT_SNDMTU(r11, 0x112, 0xc, 0x0, 0x0) close_range(r0, r11, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m24.781683101s ago: executing program 0 (id=484): r0 = msgget$private(0x0, 0x624) msgrcv(r0, 0x0, 0x0, 0xd9481726d31966ee, 0x0) msgsnd(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x8, 0x800) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000003e000701feffffff00000000047c0000040042800c0009000200e8ffffffffff03000280bbbfe8d6d99a3b82decd182479b541030ac2e5b8739484d415feb7fac116c2b55e47a942bd419590a2832240192b6212771dd3fa93e243a03d6e5ee81d367be3157d5279fdf8a4f9b965ba1adafc39ad7cff62c606ed47f9226c35cb31c03c3e00ed57927f4af43b3a7acb720e3d54a3fef2193c322046874c7f49a12dd4f9668023bfabd27bda301a8f72e2960a2a63ffdeafb61ef7375e6c3cc781"], 0x28}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = eventfd(0xd) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000200)={0x3, r1}) openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x1000, &(0x7f0000000080)={0x0, 0x80000}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000400)=ANY=[], 0x118) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, 0x0, 0x0) listen(r4, 0x1) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x803, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) syz_emit_ethernet(0x5a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004e00004c000000000005308fd264c4d7aa6049659078ac1414006401010244140903ac1414bb00000000e00000027f8ac65aca951395ead2eac9102fde00000009890b770a01822f02bfe045ab7cda4e7322ffc0a1e286428e662b3db15b2c3a2a30b44fb84374079e77457a0f5561262c4d2fad0a6f7d1cb66f8a529eaadaadfa46697801fd34d08b321cedf8976ffe0afe071fea3eb0c3ac14bbb8294837d42d", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file2\x00') symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) shutdown(r4, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 8m9.62270924s ago: executing program 32 (id=484): r0 = msgget$private(0x0, 0x624) msgrcv(r0, 0x0, 0x0, 0xd9481726d31966ee, 0x0) msgsnd(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x8, 0x800) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000003e000701feffffff00000000047c0000040042800c0009000200e8ffffffffff03000280bbbfe8d6d99a3b82decd182479b541030ac2e5b8739484d415feb7fac116c2b55e47a942bd419590a2832240192b6212771dd3fa93e243a03d6e5ee81d367be3157d5279fdf8a4f9b965ba1adafc39ad7cff62c606ed47f9226c35cb31c03c3e00ed57927f4af43b3a7acb720e3d54a3fef2193c322046874c7f49a12dd4f9668023bfabd27bda301a8f72e2960a2a63ffdeafb61ef7375e6c3cc781"], 0x28}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = eventfd(0xd) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000200)={0x3, r1}) openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x1000, &(0x7f0000000080)={0x0, 0x80000}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000400)=ANY=[], 0x118) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, 0x0, 0x0) listen(r4, 0x1) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x803, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) syz_emit_ethernet(0x5a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004e00004c000000000005308fd264c4d7aa6049659078ac1414006401010244140903ac1414bb00000000e00000027f8ac65aca951395ead2eac9102fde00000009890b770a01822f02bfe045ab7cda4e7322ffc0a1e286428e662b3db15b2c3a2a30b44fb84374079e77457a0f5561262c4d2fad0a6f7d1cb66f8a529eaadaadfa46697801fd34d08b321cedf8976ffe0afe071fea3eb0c3ac14bbb8294837d42d", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file2\x00') symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) shutdown(r4, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 1m15.269543732s ago: executing program 3 (id=2456): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e20, @empty}}}, &(0x7f0000000040)=0x90) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x10, 0x803, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x90ab1c1d5b059cb1, 0x0) wait4(0x0, &(0x7f0000000000), 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x20, 0x1, 0x80, 0x3d, 0x0, 0x6, 0x0}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setitimer(0x0, &(0x7f0000000040)={{0xf, 0x1}, {0x9}}, 0x0) setitimer(0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x400040, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r7, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) ioctl$KVM_RUN(r6, 0xae80, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f00000003c0)=0xfffffffc) 1m13.422207284s ago: executing program 3 (id=2464): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000028c0)={0xffffffffffffffff, 0xe0, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000002900)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x9, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xef, &(0x7f00000026c0)=[{}], 0x8, 0x10, &(0x7f0000002700), &(0x7f0000002740), 0x8, 0xd9, 0x8, 0x8, &(0x7f0000002780)}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'dummy0\x00', 0x4000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r3, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000540)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x0, 0xc9, 0xa2, &(0x7f0000000580)="ae162f781e531359e9d4f51666b99bb4cdb6a694d781eda977e135c122a099a7ad8b546e2399476f0e95652fde9e0ca6fb78a5335bb5b6a825a7337033ac4730a46f03ac77861c2ee9c0fa602341ea2d7f9b688000d30e5715344cf7e10332c0c7aec4681d9ee873aa26846313c6a39cf8e73e5546e7f412ad0950bef721ce3393f51fbf5ee0dcbe87f64efbc586cf382befd6b5fa44e342df0f316a3443177361448a5495bcfac55df0d4dca2da6b33c15d687b24a86d4231c699d208c6ae8b7d4b36a43b464e629e", &(0x7f0000000480)=""/162, 0x1000, 0x0, 0x1000, 0x1000, &(0x7f0000000680)="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", &(0x7f0000001680)="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", 0x4, 0x0, 0x40}, 0x50) 1m12.722376303s ago: executing program 3 (id=2466): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='xdp_cpumap_kthread\x00', r0}, 0x18) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) gettid() getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0xc, 0x0, 0x0) fchdir(0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, 0x0, 0x501a82, 0x8) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x54, 0xa, 0x0, "3258c546dacccfae1e008faa00000000f4ff4000"}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x5, 0x84) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x448201, 0x0) getdents64(r3, 0x0, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x200081, 0x0) read$msr(r2, &(0x7f0000000240)=""/73, 0x49) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xef6) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x2040, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x48, 0x0, 0x38, 0x4}, {0x6, 0xfc, 0x0, 0x20000000}]}) write(r5, &(0x7f0000000180)="1124805b", 0x4) 1m10.259964062s ago: executing program 3 (id=2475): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000028c0)={0xffffffffffffffff, 0xe0, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000002900)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x9, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xef, &(0x7f00000026c0)=[{}], 0x8, 0x10, &(0x7f0000002700), &(0x7f0000002740), 0x8, 0xd9, 0x8, 0x8, &(0x7f0000002780)}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'dummy0\x00', 0x4000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r3, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000540)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x0, 0xc9, 0xa2, &(0x7f0000000580)="ae162f781e531359e9d4f51666b99bb4cdb6a694d781eda977e135c122a099a7ad8b546e2399476f0e95652fde9e0ca6fb78a5335bb5b6a825a7337033ac4730a46f03ac77861c2ee9c0fa602341ea2d7f9b688000d30e5715344cf7e10332c0c7aec4681d9ee873aa26846313c6a39cf8e73e5546e7f412ad0950bef721ce3393f51fbf5ee0dcbe87f64efbc586cf382befd6b5fa44e342df0f316a3443177361448a5495bcfac55df0d4dca2da6b33c15d687b24a86d4231c699d208c6ae8b7d4b36a43b464e629e", &(0x7f0000000480)=""/162, 0x1000, 0x0, 0x1000, 0x1000, &(0x7f0000000680)="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", &(0x7f0000001680)="b90f4f5d0cbd1a23c0fa46ab4775a08b93e6d077318ed500c797a806feedbe9c4be2bb4797d85aa363c58a8c8255ae0ea064f2737f2779d234ef7ee7f1f11e27e247a97f03c6d20d1178b952d207ba6b0813d0679431fd3d29b19bba2c2b4f26da3b5963ef517313f3288af5bf9c929af6801ff989bf3a830b880dbf48bca4a9599e847385558eb744f1c7032964e487a49f0a994609a4229f3425dc5535cc54a941cd4c9d9d9102d8b2e0655b0af9d4383c4bf8e0cf7b5f962f55e4e158cb90041e8903d1882cfdacf2382e99a9d01ef62607f5e08748c4c466130d0baedc61a74056fbe83aae84a317a72f649256c5ac3d62e947756b240104ccf0f82a92c058e0df0d6022ad82dba3516c83396de00e4e4b13af69acc76c82babd11762431fd0a66f8c7fb7fdee16c768cd9ab098665d83a4a92748ffd922928436b819721330d745d918b0d63127bfc64aa4324d050349dcc2484dc61e087acb02ac180fb2fdc526ea7ead01e088bfa6d8ee5b221a76f5014dcbf8ba357f317cd468e7d52441cd93aa999f67f65fec228cf37216f182071fe949675f296a76c6af146fe2225f54d0bc22df63152a5ed39b28e617fb339dca8a8a0aa1804d667e95ded1f5518cd22e3ff55d960c64bf129e6a8e0829daf9fac758d483f04e0700c52f2b9df59d5bf1140f02a2a83e2392a987ed1736c63f906726417432ff321ba02b5659f69ad1ca2bd7eb83f965f19d925f9184ccc9e888f0e17da576b7a4450aaea28396c9f675b58765cea130876ed1b15d1f227d43b7c971f919a928baa600b09bd7098336d86d284426a8b53bf6686d004ded6ab341b42278e6fd89b5e25ea816cdee0a091aa8a3ea79c5c2732f326ca4c14e1005484fd7ceb98b6b191f85b4d81fd0362b6e7ec3662ee68e1809a22f49d1eb637905862236c2a6ee3e5b419ed5e03b6c29f74c567a4866b50fa3f71acb10736f65de23dbf6a20e3ee5f196402b53cbb0c9cccfa1cb49d408fcb2685ef8715d537c7aca239d9e4e9d30b3ae58a5139202122240104458d31cbe39a70367a5e7f646f061be413ca5ea9be8e5f64d37bb53aaf96a40367eff60f597dc5fc899ddcb4a5fc7139dd4e6eeb44fb32f1891c6b55a159183a15874aa3a9ddfa7a091e60749447e3a13b21512615819cf87678327ecf24b646a334b23abb0ef361cf6aaefa1cb4fb3ea9436f5844b89119915cbfb6b9943eefa969122a07e25e58617a2c2bb441143605131f16e444694afc491f48f81c7f7c5acd042c3d6ba364d3e6d63ead485b7b34f5179025eb1bb915d02b2b9422e470867ea56b4890f83dbdaf37548fc4f8a1c9840e17002400f2a7e1e4896504cc0dde73abdd5beefe17235dab0b20798b85bf0b91575d12b50342cc32af72714698b93fe3acfcda7107f96a59911fb7bb77f7dc359d35d5e06f599f53cd6f32331216666f4be2711dc1e486b491e257374e1b6cc65ef9b76ae451a16bff97a5524a9aa49a60142aa3127326cc0b0217e7617a1967bbb0fbd0b45963f41f86d5370ecbbe038a50adff6d6be3db2c844188ce8ad328d3f4bec358013817ca9cda33b37d3fa3893169b1a9665dfb4746c8ac184715e4567ab1cc8792cd1a93870db87121191c9503ff593a3c231e5ac4903b1017ec58af8d497561d56c1944c480cc9de6c048d7f7acbc2098ec7c6046d74972df5f1904903312641c9e4fc9fe1903a03e25ac400b27ee4d0789e1380d6281b8a594243dd6b73b801426c062f30dafed7428ec11f180065221f904c208d494b3c32822c96015c8cf0ab02df905e41f5ffe622c2fdca78291779096b1afacf29d32f954cf654673d2fe9f92515edc74ebec5bfb91847ea7f2fa27d932ac3adf2b2f8378a69afab5f54c9448ef2f041b2deeace54b5520324a12d9c76426a1ba4bd82a67c218b012d2e8211d8bc22845efbe80e38150baba4df6ddecbdc70d131102ec2ae784645b3bc6d1b29ca15e03c19f91b88e34752cd6a6f241afda6aaef392723f31179ff8d0b36fa1ed7e7ad6df45ca2614bd80ab44cb836636f8c0be76e156188c8f89c54d7c57a236f584c6f3dcf18921e6ef8c73df48c9040b135009b35d3c90847471ea9726d1d9548ddfdb85aac062a9791b0f67eb656daa4e88e3e38cb912fd0d3a1c234d2498e4ec441b3169936b595853867e4204bcbefe86e8e40c7a2d54dd9a2a735b19fcb67cbad010ded7b0bd645e972faaaab3cbe96233f67db259a33981e9be2cd64ba4f2d3986a122f74810b01ae5fa62567a6ea7c120923491b2036908cea66a637975ab3d0b148754a343671f6589db3ffe3fa77605b84dedc38bb9e0cee61dc84631958adb59d4c3f112777ce6292dcb5b489bf7eda074d698a042985399b12c78412787ab296fd90df160d63b38f9b262f064960b36d9d1bd281d8ac7ce34e02102c743cb584df4af641322baa789fe8fea19d0d08c14804d3b3771e41f9db5011c3847122cff33f90deafad0eb5809569909df7c8de594eab1edbf07b812f2aed77ec6fa42b64b0beb92dd2099fae6b6f2e5f237a4b6e249f6cbd7024ce0c03d5c29ec40e904d8554422ba1b35493275f37345f64351bad67f8e473beef0c9dc07bd7d75be38ea4d9aa8ba3e2c3efdf2038a596c08ddb908a49da0c5e8da02b4cc5497a75365226c2a2c8071c801756e389f8e6ca0617db91a7087095ebef11dc57e563bb5716635adfad9933c89488be424587312d43e73ac61cc363aa810cb9cfb6ad2abf52a389bd4e3b5f00ff38693e5d51a41a591640f1e9f684d01a5e4f74f507e196efeed68dcece8a68a11510233d7729e06c63ae517df8fd5c15404701633c9fc14f7c79ff8a1d1083a9b6bbc0b617e462010adf88ae621cb0a3fe104070e3c1eff217ce5662a674e1b728eaacedcec6bcb8f43a8306aa2aabd5a4ef36213b15046d54142bdf9db8eed2171625cc52224a20d2f9c52dc3c8852ee8b43e13b90a2597c42783074b5e235db7ec495fba6314f58cb113c7aef1075bd4cb6453d7ff54f935e8ded0594f63495f2ad2ae2d87ef64a6045dcd3b63357ccdd29d5909c4a1b6d43fef3f381a409ebafa3f8adbe16eb0ba9cdcc96cc50a13387b91dbb09a60a1c5f23c757c6a881228f635e2c0d074da72d91a4939a1053896921d0f0f991a648d4cb2e7429437d0fd58c6d5518bc07227a97499bd3067ec042f68d0f31475207e8b2620df8bda12c9c9077f3e43ec2ada81a385c3b8234a2dc9343a69aee2f2e021edec62f1b8d6d3055aa023505f0ac598a703de8ac2e3c7545fe9a353a506ae366caeb022ca94d4468d4429fd5d0940088b492196943fe4da9b97ee21158ab1b0a9733c79481b98795136db97637342e3027482cd8e4d4a2ed9b803e6c8c5b345dfe6d14e9f72cb022a88ce226d7998a1a64ef5275b661f21c897bcbed574b8e92fff808ff65cdb0507fdbe3ee04e1ecc2362fd2826de5f35d216e5bf701389652880ac2fb5e9337121289b3d75f02b0fcd48d40a0ab45fee40b058f6239a9d15a22165b9b95c1b1f8a03d915b0f5f53555227d2d8349ad553e2a91a9a123cd07570dcd85c5f0ab4774f00220585c5a44a8e9838a0de6cb9980b5aafe968fb497d0dee4c4b85bb46c2686de8307f832d20ae371320c162548fb6182b93f4ee05267768d472bd8f4ea92d61283bf09b500b365ac0d370adcd5a9cae3ea4dda833f93a95aa4404afba491b37c5123206a395f0b90ec1c472cd8e934f8ca8a7b429945a9e86384b638f71ca87ebf9ebcff374c89107d2444620123669dd28fc28dc4814306e4f9737d45ed1aba07dea86e7e17f2c706bddf101a18c108e4d5a575a1d46fc12085ddcba8948c7af9b4fcc49d2cd771b38b89b598c4f828f037abd909df269737536adf329c6e38475aca9efbe3dd849b36872fb97994c87acc8434e4748d3cbecc3e43ecdf190cff595bc0aad0c3d3d799fe6b3d22258a62c21d4f96ba25540c9d35dd017c40861ed90969cee00980eafc4eeed17b361ff8e79444e5ba4c77a9030a6fec1d4ded422c67f755ec25a6f5342f075dbb85eb88a33d94db2093f1861f01d3e355e70ed015275b26c557617dee6d1330defa615e4304415725c1fd48c2f04d86790c8557d54f14e99d2433ab474c0b97e0c0fb24c64df26ce6fdacda11f88aef454d64fbdcd0cb190da2da9a23de4d19dddc3ccf918f5817f2536b102156586251f3596b5818887816563c4f6ecf0ca461987242bf6842a383fe261125568be021921b9669d04c7f58d54df39e728ba7c9592c0dbc13b3cefb636d7bf7128c36b738d2a9c9ea51584771b5639c2c741502c5d97c12e3c1e92a7cf388c1cd6f8c66be620053ee2c1cdf8e2f5fc1fc231db1d436a9b8761e0bef46c33946186e79d4544cd0eedcca9a07377afbf2b05fad16aef68f65fa6e4e63b9aa6ce5e0777c4dbea644e5fd823dc5a31dfe6ceb9a5399ffe6a460c9be2b05a91b19d9a2da3ab6bd7d695776d64b3b96f4095fe73848e8fbc6c5a6b6a27b5f2b6c5f843b379e6ef343bb2d7b4da6d1920be4e5eece34b92938b1d55f105fc268471ae51f82dfcc592e60f0fcc9b823823f88584e2e419749bee3e79ab2ce22ffbac106a6c7294de05711ffbe9f8e2d947b4a568858af47bf65ab59f694cec25eb947661bb879c283600bb52b92cbc0c26a2b5b082da4f8bf1ca84e3f8c25c708923a4167d409a27cbf8d79d780eec09c307e12766633858eaf9aab2df80c4377c682c9a02ec08cea1b9174577202e974e1f9c176d1e80d9dce185422c13e2744f5473a359c3fc723ae4feb25a43f123790446a501d9aa1d820696234943d621ab0ba344aec16941f1ebfadc9979f3485941868c8745571d6b665fe9c5b9198b340f714ced35595d63df32d9d0c8ea00620a08f8b98f3245a7be7f8c2576e39c3182be5b9d2231cc7f94dd83186d5b624e53588f84f60d92eb871643153ef7a21ca0279a6d4a74e1da19333fb834ff256ab020d123da8e948051d5ef22a868bd96f8c42e0779efdabba427b2510a1719cf9dd26b4349556ff53f29b0e42841e2cd38c81b46a7e98512b75c0d7b7a27b0458000a4e0c36a115bf7ef6bc7b03ece7ae55d59d5687c6a025186af8ac50e1916a65f55547f719b8f8d8a527256d6657f0d80c4dac8820e0469803a57b08b0dda89273af4b9f05a0a0c033ac0fcfbc06c05111d9dd835904d874588f5173cb917971b658689eeacbc9d636ccd587e5f7bfdb30d74148aabda6a441c83662c813ae32a8737bea048c65a2ed9cec6f474b7205800608e6b1cb9e60e57bff1d1256c285167f0d6b23026c5a17975c8b7ed13dbed86233061e579710e73a7d8f866e2a29eab1efbda215e2474ad576e37a5fb52f3e45b0ac9b2d033399ac98fc1897bd547b101431c7365c90a18c84d209b8b7defca89301ef845f43ee64c766075eb52cdab0f502c85735120f73a5daa236c65ea7d2785917f926bf3c964ba898673104dd2d4d9d462c4c7e0ffec66faf9ad9d180aecf0a7b79c4ae0337f3e630d0834be03af2a4483d8895d78fcb43114318e9f948b8ed1bc42e1998b39acf6cec84d2c8780d6212089e84a1509b95ea92144311e518f488065c3d2ea8cebefbc6f1805102c04fe679d6fac702075ea7be5ae96844b3430db2db51c892dbffa7d88fdc569ea1aabed234019579b86137c211f6cf0396a18a41c11923ae36911113eaa6864cb7a4dcd4bc96ac43cb1542c6663ff8be078593e00810e5566417e99b0044bb", 0x4, 0x0, 0x40}, 0x50) 1m9.683979842s ago: executing program 3 (id=2477): r0 = socket$kcm(0x2, 0x3, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async, rerun: 32) r2 = socket$pptp(0x18, 0x1, 0x2) (rerun: 32) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e) (async) connect$pptp(r2, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) (async) connect$pptp(r2, &(0x7f00000000c0)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 64) r3 = socket$kcm(0x2, 0xa, 0x2) (rerun: 64) r4 = socket$can_j1939(0x1d, 0x2, 0x7) (async) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r6, 0x1, {}, 0xff}, 0x18) (async, rerun: 64) r7 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 64) bind$can_j1939(r7, &(0x7f0000000180)={0x1d, r6, 0x1, {0x0, 0x0, 0x2}, 0x1}, 0x18) r8 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x1, 0x143000) (async) r9 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r9, 0x65, 0x4, &(0x7f0000000140), &(0x7f0000001240)=0x4) (async) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r8, 0x80184153, 0x0) (async) close(0x3) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (rerun: 64) write$tun(r1, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0xf98, 0x2c, 0x0, @local, @mcast2, {[@dstopts={0x67}], @param_prob={0x4, 0x1, 0x0, 0x66, {0xe, 0x6, "8e27de", 0x1, 0x87, 0x0, @remote, @dev={0xfe, 0x80, '\x00', 0x28}, [], "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"}}}}}}, 0xfce) (async, rerun: 64) sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f0000000240)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000640)="7003e339c1c2aec7c2b2d04b8dc26356", 0x10}], 0x1, &(0x7f0000000080)=[@ip_retopts={{0x38, 0x0, 0x7, {[@end, @timestamp_prespec={0x44, 0x24, 0x90, 0x3, 0x0, [{@loopback}, {@broadcast}, {@loopback}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x27}, @multicast1}}}], 0x58}, 0x0) (rerun: 64) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56543, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0x6}, {0xffff, 0xffff}, {0x1, 0x1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0x5, 0xffffffff}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x1}]}}]}, 0x40}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) 1m9.318839048s ago: executing program 3 (id=2482): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async, rerun: 32) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x400, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xe, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x3}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x401, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 54.165338503s ago: executing program 33 (id=2482): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async, rerun: 32) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x400, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xe, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x3}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x401, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 17.526270482s ago: executing program 4 (id=2735): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x760, 0x103382) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) syz_usb_connect$cdc_ncm(0x3, 0x86, &(0x7f0000000380)=ANY=[@ANYBLOB="12014002020000082505a1a44000010203010902feff020139f0040904000001020d0000052406000105240000060d240f010200000000000300b906241affff20042402070c241b0000ffff8d5403006108241c030005c10e0905810328000408090904018000020d000009040101"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x0, 0x3}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x32}) io_uring_enter(r6, 0x48e9, 0x0, 0x2, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r10, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x1c, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x48}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xa0}, @TCA_ROUTE4_CLASSID={0xffffffffffffff3f, 0x1, {0x7, 0x2}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) ioctl$LOOP_SET_STATUS(r0, 0x1277, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x7f, 0x0, 0xc, 0x11, "4b8b3ea40100dfed0b2f3409002200dd5a96a9040009918ae7fd1f0ececfe0f4fcdf997dd5210000000002000000000000000000000000000000000000000b00", "090000f0ff00000001006be3f0ad717e1085deb88d8d00006cec000000000800", [0x6, 0x6]}) 13.619617446s ago: executing program 4 (id=2744): syz_usb_connect(0x5, 0x48, &(0x7f0000000580)={{0x12, 0x1, 0x310, 0x35, 0xfe, 0x65, 0x10, 0x1aca, 0xb28e, 0x9232, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0xd, 0x1, 0x90, 0x2, [{{0x9, 0x4, 0x32, 0xa7, 0x2, 0x1, 0x3, 0x9e, 0x8, [], [{{0x9, 0x5, 0x8, 0x6, 0x10, 0x6, 0x4, 0x8, [@generic={0x4, 0x23, "87ac"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x4f8}]}}, {{0x9, 0x5, 0x7, 0x2, 0x200, 0x4, 0x2, 0x66, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x3}]}}]}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ncm(0x5, 0x96, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x2, 0x1, 0x6, 0xb0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "854cc7a3d0"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x9c34, 0xfff7, 0xa}, {0x6, 0x24, 0x1a, 0x2}, [@network_terminal={0x7, 0x24, 0xa, 0x9, 0xf, 0x4, 0x4}, @mbim={0xc, 0x24, 0x1b, 0x5, 0xffff, 0x5, 0xd, 0x0, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x81}, @mbim_extended={0x8, 0x24, 0x1c, 0x101, 0x2a, 0x5d4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0xf5, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x8, 0xf7, 0x5}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x150, 0x3d, 0x4, 0x0, 0x8, 0x4}, 0x45, &(0x7f0000000100)={0x5, 0xf, 0x45, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x5e, 0x1, 0x9, 0x10, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x4, 0x9, 0x5}, @ssp_cap={0x1c, 0x10, 0xa, 0x8, 0x4, 0x4, 0xf0f, 0xbe5, [0x3f00, 0xc0f0, 0xc000, 0xff6000]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1e, 0x7, 0x2, 0xe60, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x7, 0x1, 0x2}]}, 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xc0c}}, {0xd6, &(0x7f0000000200)=@string={0xd6, 0x3, "aebe398c5286b3a4f61cbcd32472098190fb70904d619f6f7307bf562db351d1fa9ab7e2acb9b4dcbf461ec62e512949cdbdd5feea6019eaccd858814d8ff2a0045791c9e1297bc32e3eabd08d14d5f8e687babc01025383ec3f7976db98a35ac3b2d0601c44b6a5af0d6e20512419fcc7e6cf78248ccfc76ee6d3e1ab73b282b7657e50f9a8c08ae569b901bce5257c65faf24ea19448a5384aab24021371f79a076841ff990e88aa51173aab6ae540c4919b258c09d33cc6c9ada1e475f9c1f4e6d561b19a100e9c4518f13929d19d58c0b9aa"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44f}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x429}}]}) 10.753705664s ago: executing program 4 (id=2754): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, &(0x7f00000004c0)={{0x6, @rose, 0x2}, [@null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) listen(r1, 0x80) accept$netrom(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="fd000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8088e3ad132bc192, 0x4002011, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r6, 0x8010aebc, &(0x7f0000000040)) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$FS_IOC_RESVSP(r4, 0x40305829, 0x0) recvmmsg(r0, &(0x7f0000007cc0), 0x0, 0x2000, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r9}, 0x10) 7.531743683s ago: executing program 4 (id=2767): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x9637, 0x9, 0x0, 0x2, 0x10000, 0x0, 0x4002004c4, 0x2, 0x0, 0x200, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8c], 0x2, 0x64c00}) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) r4 = semget(0x1, 0x4, 0x3c4) semop(r4, &(0x7f0000000080)=[{0x4, 0x7, 0x800}, {0x1, 0x0, 0x1000}], 0x2) semop(r4, &(0x7f0000000040)=[{0x2, 0xbbdd, 0x1000}], 0x1) semctl$GETZCNT(r4, 0x1, 0xf, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'batadv0\x00', &(0x7f00000002c0)=@ethtool_gstrings={0x1b, 0x1}}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) r5 = socket(0x2b, 0x1, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x50) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) preadv2(r3, &(0x7f0000000000), 0x0, 0xe, 0x1, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r6, &(0x7f0000000400), &(0x7f00000004c0)=@tcp=r5}, 0x20) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x42) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x2825810, &(0x7f0000002040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@verity_off}, {@userxattr}]}) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x100, 0x1) mknodat(r7, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) mknodat(r8, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x0, 0x7) linkat(r8, &(0x7f0000000100)='./file1\x00', r8, &(0x7f0000000240)='./file0\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000340)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 7.187722365s ago: executing program 1 (id=2772): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x80, 0x4, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x7, 0x1, 0x2, 0xb4, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0xf9, 0xf3}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x1c, 0x6, 0x8}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x3, 0x9, 0xf7, 0x40}, 0x1b, &(0x7f0000000100)={0x5, 0xf, 0x1b, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x16, 0x5, 0x50, 0x4, 0x9}, @wireless={0xb, 0x10, 0x1, 0x4, 0x94, 0xf, 0x0, 0x8, 0x8e}]}, 0x6, [{0x36, &(0x7f0000000140)=@string={0x36, 0x3, "ec0e32e39748a893f29ed3f74a22e5f0af429736dfdd144531495369e9faa7d7807db61a152f116ac7a0bb2df0c870d5bab0846b"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x430}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x42b}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x1007}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x455}}, {0x1e, &(0x7f0000000280)=@string={0x1e, 0x3, "67b6e8dbd87d8f2e837d24f549658b04deca5b7f67d2e853008d6030"}}]}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) 5.368593369s ago: executing program 6 (id=2776): capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=@raw=[@generic={0x6, 0x0, 0x9, 0x0, 0xffffffff}], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xa0}, 0x94) unshare(0x20000400) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a800000000000011800010014000100fc01000000000000000000002000000008000f00ffffffff140003006c6f00"/76], 0x4c}}, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @remote}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0100009ff1f5a500aaaaaaaa88a8600081"], 0x3a) unshare(0x28020480) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=@raw=[@generic={0x6, 0x0, 0x9, 0x0, 0xffffffff}], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xa0}, 0x94) (async) unshare(0x20000400) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a800000000000011800010014000100fc01000000000000000000002000000008000f00ffffffff140003006c6f00"/76], 0x4c}}, 0x0) (async) socket$kcm(0x2, 0xa, 0x2) (async) socket$igmp6(0xa, 0x3, 0x2) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00'}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @remote}) (async) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0100009ff1f5a500aaaaaaaa88a8600081"], 0x3a) (async) unshare(0x28020480) (async) 5.171619063s ago: executing program 4 (id=2778): pwritev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000000)="72c157fdac6a66f6278f253fd60569ee6b0c9960537d19e57399c80214bbacdb41986362d5f1c416f6d4e557641fcc6b65c28210c1f0807c0b178eda522f68dee35df09295e858983c25f4919b08fef279592978b56455c720ee8b7d7a8426ada6cd9718096f62f6e37a9cf81508ea6c226899fe01f95d0dad3e7671900bcb1ac044785d4eed4eece5a75c3e581b1ec016aeb77e80ce204082bc11bef9bbc14407aa5c9fc0206c02e46a0650d35b600270d462b5c117083549bd6b892d4bf654e6296d104c7b0d5d25c8148205ae4018f650f15b9f3732ed37158f3056b045", 0xdf}, {&(0x7f0000000100)="37833e79b2dab4ec29c707743dce6f67b2f9e5163767a28f35d4c53d04882090fc07ef3bca266c579276b0f3d3690207c09acc8c8897cff28788d58c9f413c7d211e143e310ee3e9dc3e0b7013ee41d81e9a52d5070cb36bf70bafd8dedd13c79fe015f2e3082dc644ab93c0c4ba8ee63fa99682b7e40bce82e1835e67fd", 0x7e}, {&(0x7f0000000180)="36b43655", 0x4}, {&(0x7f00000001c0)="d48a9049417a36b16a653b61bc4af11c52a13f6060a1c97e744213a5f7a04d3aa246a812857b8d0892719bff58123425557ae17c0925db382b68fcf2411bdc23a7e1631734176b9a30f9601619a7995826b6", 0x52}, {&(0x7f0000000240)="b7ad6a2ba89a467002812210972ac15cb5fb5842a56fbef2c80b6d721a150477", 0x20}, {&(0x7f0000000280)="2f6eb2b74bf985e00dd172f7400aebd8c977fd9e16ba53ef9b4b8fceda54584751", 0x21}, {&(0x7f00000002c0)="572c22a6d8e81d293fbf22fafca9f9809331d50593b95e02190f65b880a6dd7db60ed2a6a34e718d0fbf58b50f2107985238dfcbe6104c4a9af4e9345edd332c0c59cbd93354b02d1b4bd314dca3d1ba4da4ecf2f77af7289f367ce6e3eb13fc79", 0x61}, {&(0x7f0000000340)="0e58e7ec4dd30a7c3c58b4ce1cc8d61854e9453c2582139a143f570077b31fd673b7c00bcbc6644c8e3533942103b8dc14", 0x31}, {&(0x7f0000000380)="f069d97e9a2859f397943828b7f182e06e", 0x11}, {&(0x7f00000003c0)="b0e1cc52", 0x4}], 0xa, 0x33, 0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r0 = dup(0xffffffffffffffff) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000540)={0x8, 0x0, 0x2, 0x80000000, 0x40, 0x38}) sendfile(r0, r0, &(0x7f0000000580)=0x1, 0x1) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000005c0)="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") r1 = syz_open_dev$cec(&(0x7f00000006c0), 0x0, 0x840) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x70, r2, 0x20, 0x1ff, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x1, 0x3}, {0x14, 0x7}, {0xb}, {0x5, 0x7}, {0x80}, {0x1, 0x1}, {0xfe, 0x6}, {0x4, 0x6}, {0x1, 0x6}, {0x0, 0x6}, {0x9, 0x4}, {0x6, 0x1}, {0x5, 0x4}, {0x2, 0x5}, {0xa8, 0x2}, {0x4, 0x6}, {0x6}, {0x66, 0x4}, {0x8, 0x6}, {0x0, 0x2}, {0x6, 0x7}], "aa072b4ec0dd3a3c"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x2, 0x1}, {0x5, 0x3}, {0x9, 0x6}, {0x0, 0x4}, {0xc, 0x2}, {0x0, 0x6}, {0x0, 0x2}, {0x1, 0x3}, {0x6}, {0x5, 0x1}, {0x9, 0x6}], "bb368447733e30f3"}}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sendmmsg$alg(r0, &(0x7f0000001b00)=[{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000880)="5adedbabf97e6794d82dc3ec8591dd267e1383b9cea6acc8a7493524ed9594c95d", 0x21}, {&(0x7f00000008c0)="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", 0x1000}, {&(0x7f00000018c0)="26fc9260d2f5da8f4085b4c6cda5bdee6c26", 0x12}], 0x3, &(0x7f0000001940)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x6}, @assoc={0x18, 0x117, 0x4, 0xe}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0xa8, 0x117, 0x2, 0x94, "a2bfa4d2caa0a92e482bef1a95e3ff0e8b3171421e415d43bd7217889b10668bc2c688a1423883810a7504c14eb4113ce343fce41c370404452e3bc74d2337be4a3d7e102ad37626b782a83cc2d20e4dec0f6023a020127ba33fb0728f56ee5f85baf9cfaf8026a026882762b79794fe2656ce329972b29d9f4e3b0eeb3ebc6a783e6ac2158283aba0b6749bba87a620a5615c3c"}, @iv={0xb8, 0x117, 0x2, 0xa4, "4fe1425eaeabe873a2d36477ef6ae4b006bea5599c46d934501a87c58b39dcc048ca80d9292b9c97f4f36d872428b7a7de80dd6adbdfb60c91f3254efe2aea54be55472fc55b99cb4e6c5676eb227831bea730be04511d56febd09a2ee50bc8a07cf2b1babfca4a9baa20e27474da246ec265101e50f26836dc57c4a3d5ad77a549ea05b0f39e3853dcc45c95a12ccea01406540a5915a34d9fffc71c11dd52bfb7b37e7"}], 0x1c0, 0x48015}], 0x1, 0x40) connect$phonet_pipe(r0, &(0x7f0000001b40)={0x23, 0xe9, 0x7, 0x8}, 0x10) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001b80), 0x2, 0x0) flistxattr(r3, &(0x7f0000001bc0)=""/94, 0x5e) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000001c40)={'mangle\x00', 0x3, [{}, {}, {}]}, 0x58) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000001cc0)={0x7, 'syzkaller0\x00', {0x9}}) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000001d00)={0x7, 0x5, 0x1, 0x40, 0x15, "b233cd85c1667226"}) socket$l2tp6(0xa, 0x2, 0x73) mknod(&(0x7f0000001d40)='./file0\x00', 0x10, 0x5) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d80)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xe17, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3}, 0x50) fsetxattr$smack_xattr_label(r1, &(0x7f0000001e00)='security.SMACK64MMAP\x00', &(0x7f0000001e40)={'/dev/cec#\x00'}, 0xb, 0x2) ioctl$KVM_CAP_X86_GUEST_MODE(r0, 0x4068aea3, &(0x7f0000001e80)) syz_clone3(&(0x7f0000002100)={0x80040000, &(0x7f0000001f00)=0xffffffffffffffff, &(0x7f0000001f40), &(0x7f0000001f80), {0x17}, &(0x7f0000001fc0)=""/11, 0xb, &(0x7f0000002000)=""/171, &(0x7f00000020c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0xa, {r0}}, 0x58) close_range(r4, r0, 0x2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002180), r5) mkdir(&(0x7f00000021c0)='./file0\x00', 0x100) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000002200), 0x214c00, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r6, 0xc0505510, &(0x7f00000023c0)={0x5, 0x6, 0x3, 0x6, &(0x7f0000002240)=[{}, {}, {}, {}, {}, {}]}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000002440)={0x1, 0x1ff, 0x6, 0x4, 0xffffff6c, 0x400, 0x7, 0x100, 0x0}, &(0x7f0000002480)=0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000024c0)={0xb80f, 0x8008, 0x2600000, 0x334f, r7}, &(0x7f0000002500)=0x10) 5.015888254s ago: executing program 6 (id=2779): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x4}, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005880)=@newtfilter={0x24, 0x2c, 0xd27, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xd}}}, 0x24}}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) read$FUSE(r4, 0x0, 0x0) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (rerun: 32) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000500)=ANY=[@ANYBLOB="00000000ef2f46a0f4d417dd3618e33564d2b39d1b8326ec29f183a16e8255729aea28ea6bc65f598541e70a564f957bf774de1734df1f6735b5e85e33fc", @ANYRES16=r5, @ANYRES32=r7], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4881) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0xa, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf8, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x78, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) (rerun: 64) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xd0, r5, 0x4, 0xffffff00, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4}, 0x80) 4.897959855s ago: executing program 2 (id=2781): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010003b15000000000000000000214907", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010067726574617000001800028004001200060018001c00000006000e"], 0x48}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000000)={0x1, 0x7fffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000080), &(0x7f00000000c0)=r1}, 0x20) 4.806285334s ago: executing program 1 (id=2782): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) setresgid(0x0, 0x0, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x3, 0x0, 0x36}, @flat=@binder={0x73622a85, 0x1000, 0xffffffffffffffff}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}, 0x1000}], 0x0, 0x0, 0x0}) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r4 = eventfd2(0x40, 0x1) write$eventfd(r4, &(0x7f0000000140)=0x11bc, 0x8) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5867, 0x10, 0xfffffffc, 0x24e}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001000000", @ANYRES32, @ANYRES32], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\n\x00\x00'], 0x48) ioctl$SIOCSIFHWADDR(r7, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r8 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x3c1, 0x3, 0x428, 0x0, 0x5c, 0x160, 0x0, 0x3e0, 0x358, 0x228, 0x25a, 0x358, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [0xff, 0x0, 0xffffff00], 'bridge_slave_1\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a, 0x0, 0x0, 0x1}, 0x5002, 0x118, 0x160, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@limit={{0x48}, {0x80000001, 0x8000, 0x3ff, 0x5, 0x9, 0xfffff5b0}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x4}}}, {{@ipv6={@local, @private2, [0xffffffff, 0x0, 0x0, 0xff], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@mh={{0x28}, {'/ '}}, @common=@unspec=@string={{0xc0}, {0x16, 0x4, 'kmp\x00', "3cdb13b7fd3e40d09a25313f2820aa86c3bb18f22af9e4e52f7a45384c59bc86c0eb1687500da02f56a1e77ff7345755b22a17056e832800597bb9fcaac50bf25b291df60e418c669aae856e2146ff85d2e92810fb66131c775ebf044cfbae21facff5fedb2b8b61a9ef2a87ddd336fae687045d2df36af80d212819c4945359", 0x6f, 0x3, {0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0xd, 0x9, 0x40, 0xffff, 'syz1\x00', 'syz1\x00', {0x8000000000000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) r9 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x4, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f0000000040)={0x6, 0x1, 0x2}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r9, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x4, {0x1, @win={{}, 0x0, 0x6, 0x0, 0x0, 0x0}}}) 4.523522941s ago: executing program 6 (id=2784): socket(0xa, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_open_dev$video(0x0, 0x7ff, 0x40400) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="b700000018000000bca30000000000002403000040feffff720af0ff0000000071a4f0ff000000001f030000000000002e140200000000002604fdffffff000061140400000000001d430000000000007a0a00fe0000001f6114000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767912d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce0900000000000000499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc682928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348de20f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97b4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b4f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb1bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb36e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b78825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19ea"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 4.426198754s ago: executing program 1 (id=2785): r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000340)={0x1, @sliced={0x9, [0x4, 0x2, 0x7fff, 0x2, 0xfe01, 0xe, 0x2, 0x1, 0x6f, 0x4, 0xfff, 0x4, 0x8, 0x2, 0x0, 0x9, 0x9, 0x81, 0x3ff, 0x8, 0x4, 0xc, 0x3, 0x5, 0x0, 0xc, 0x7ff, 0xa9, 0x1, 0x80, 0x7, 0x9, 0x8, 0x5, 0x8, 0x8768, 0x725d, 0x5, 0xb, 0x2, 0x800, 0x8001, 0x8dca, 0x401, 0x3, 0x9, 0x7f, 0x7fe0], 0x8}}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000e0000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x20000) sendfile(r5, r5, &(0x7f0000000000)=0x1, 0x4) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)={[{@release_agent={'release_agent', 0x3d, './file0'}}, {@release_agent={'release_agent', 0x3d, './file0'}}]}) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r6, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0xd4, 0x0, 0x0, 0x6}, 0x6, 0x18000000, &(0x7f0000000300)={{0x0, 0x100000}}, 0x2, 0x0, 0x80}}) 3.948016484s ago: executing program 2 (id=2786): creat(&(0x7f00000002c0)='./file0\x00', 0x109) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) (async) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000003500)={'veth1_macvtap\x00'}) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) (async, rerun: 32) sendmmsg$inet(r2, &(0x7f00000045c0)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f00000000c0)="14e2", 0x2}], 0x1}}], 0x1, 0x8005) (rerun: 32) r3 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r3, 0x0) (async) sendto$inet6(r3, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) sendmmsg$inet6(r3, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000840)="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", 0xec8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)}}], 0x2, 0x4000800) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00@\x00'/28], 0x48) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) (async) socket$netlink(0x10, 0x3, 0x10) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') pread64(r5, &(0x7f0000000140)=""/74, 0x4a, 0x92) (async, rerun: 64) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[0x10000], 0x0, 0x0, 0x1, 0x1}}, 0x40) (rerun: 64) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 3.395412257s ago: executing program 1 (id=2788): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000480)={0xffffffff, [[0x400, 0x90000000, 0x6, 0x81, 0x9, 0x4, 0x6746cfe1, 0x6], [0x8, 0x4, 0x7fff, 0xffffffff, 0x1a, 0xfffffffa, 0xb3, 0x13a], [0x5c5, 0x8, 0x3, 0x9, 0x82, 0x2, 0x200007, 0x3]], '\x00', [{0x8, 0x1000004, 0x0, 0x1, 0x1}, {0x7, 0x6}, {0xfffffff7, 0x9, 0x1, 0x1, 0x1, 0x1}, {0x9, 0x101, 0x0, 0x1}, {0x2, 0x200, 0x0, 0x1}, {0x5, 0x20000007, 0x1, 0x1}, {0x79cd, 0x51023d9, 0x1, 0x0, 0x0, 0x1}, {0x5, 0xc, 0x0, 0x0, 0x1, 0x1}, {0x9, 0x5, 0x1}, {0x3, 0x80000000, 0x1, 0x0, 0x1, 0x1}, {0xb, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x41, 0x7fff, 0x0, 0x1, 0x0, 0x1}], '\x00', 0x10001}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x150ae5a14e12927c, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000005000000000000008000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000780)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="7bbf003b00023d0000050035004000000008003100030000bf54e3af28520ab4000000000000000000000000800000"], 0x3c}, 0x1, 0x0, 0x0, 0x4008010}, 0xc00) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r7, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r8, &(0x7f0000000380)="6f56d1276c7a6d434c50144a7f7dbf1a00003e7c1336242ea7777d1b5838b310949bff9d", 0x24, 0x4000054, 0x0, 0x0) sendto$inet(r8, &(0x7f00000004c0)='<', 0x1, 0x885, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/136, 0x88, 0x1, 0x0}, &(0x7f0000000180)=0x40) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000100)={0xc}) 3.242832168s ago: executing program 2 (id=2790): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) vmsplice(r2, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) write(r0, 0x0, 0x0) (async) openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x591002, 0x1, 0xc}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 2.45232975s ago: executing program 1 (id=2791): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000940)={0x24, r5, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044850}, 0x4008000) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x20008000}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0xfdff) 2.32571007s ago: executing program 2 (id=2792): sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="1ce0", 0x2, 0x40090, &(0x7f0000001100)={0x2, 0x0, @private=0x4000}, 0x10) r0 = socket(0xa, 0x3, 0x3a) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000080)='mountstats\x00') (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) fsetxattr$security_capability(r2, 0x0, 0x0, 0xfffffe04, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \'CD Capture\''], 0x86) (async) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x40, 0x0) dup3(r5, r4, 0x80000) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$FOU_CMD_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x40000) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x141, 0x0, 0x4}, 0x18) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) r6 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x824f, 0x2}, 0x0, 0x0) (async) r7 = eventfd(0x8009) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x7, &(0x7f0000000300)=r7, 0x1) (async) io_uring_enter(r6, 0x2d3e, 0x1, 0x0, 0x0, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) gettid() (async) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, 0x0, 0x0) 1.94504747s ago: executing program 5 (id=2794): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$rds(0x15, 0x5, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x201f) openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f00000000c0)='hugetlbfs\x00', 0x0) socket$netlink(0x10, 0x3, 0x5) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140), 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) sendmmsg(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000380)=@rc={0x1f, @none, 0x6}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000540)="3fd6db652bea97a5c1f6332038019556977feff728e9ca8fcf60cb309171b5cbc16be645dcd706dd61b0ef", 0x2b}, {&(0x7f0000000580)="657b81652316da2095c90faf0d376d4d95ea5dddee2f3f9183b7a81dbd05f75a", 0x20}, {&(0x7f00000005c0)="296a5bedf04170a3b553746a6d86f8d6f128f8aa", 0x14}, {&(0x7f0000000600)="898e2ee936230e9daca46da271cf77dab0e597e86fc2e9c002e467b978", 0x1d}, {&(0x7f0000002240)="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", 0x1000}], 0x5}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000880)="56e0e36333f5aad77a8f85cef29421fbc02179487ceb8759cfe2419852ecfafb3aff47908375aa89911b71344e474afb5fad1b28083e993f9bb336ab210e3eb73c8df36eeb15a95b6b3d6c2f936ced2e952d863c963a9aedfc833be7fe6a0efc02e1fc343b1910bf639a230f8c53", 0x6e}, {&(0x7f0000000900)="354a04af6bdd2c5afec1ff5f3f389f2c692d2cf90e8a224e10cc7ac1ff7e5d497957bc591fe288b3391328a09d3aa953cd42e3e1753344ec5ca0265edc5b354a6e3336197e617508eeb820f937f0d1d7cc41edcd9d0e8d8fc2930237e9f7c90d2e5a1a3472442e5a75189b5ce1865a3dd066c368289902b5", 0x78}, {&(0x7f0000000980)="6f86e6a65bb028f7868306a31ebb610f4ba422faf22a01e2eac65ea24406502799994f261b1beba059b73ac111c85f45d16e9a78d3004b536d20d688eb323c650643d0b983bb75526fcccd94fe9b7278384f08a9eaf0889162", 0x59}, {&(0x7f0000000a00)="ea21202aece1d3394ec7481b22fd2ee0c3861277ba0c811dd64c317ae99f57f7321f5d9b6f03f71cbeb6d7f386ac96abf98b0cf6c9fb853a543cec8c1030fa53268ee1cb7c328e9387ebd48d6f1e0e7438284f96cc1349642183401dc680264588a415f11fdc357506bb6918c81a8291be813a96a279b86836d894fc52ab7184415c9881f61b102f3b6dda02f165765154514ea8b0dc712996681cb65ad8eb7a0595919d70b55b1dc38893fe7f7fce8ac753487e", 0xb4}], 0x4}}], 0x2, 0x4000000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) unshare(0x20000400) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) inotify_add_watch(r3, &(0x7f0000000780)='./file0\x00', 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0a00000009000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20], 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="130200000002e80db7180b2d7531000018130000", @ANYRES32=r6, @ANYBLOB="0000000000000000850000002b000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f00000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a33120800", 0x0, 0xbffffffe, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300), 0xfffffffffffffffe, 0x3, r5}, 0x38) 1.807460652s ago: executing program 6 (id=2795): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x400, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000280)={0x20000000008, 0x200087}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000140)={0x8, "afac6f119ca94c6b377526ae090000bf00000000002000205b00005bee00"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'veth0_to_hsr\x00', 0x1}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x1a0, 0x4c, 0x1a, 0x1a0, 0x73, 0x300, 0x258, 0x258, 0x300, 0x258, 0x3, 0x0, {[{{@ipv6={@remote, @local, [0x0, 0x0, 0xff], [0x0, 0xffffff00], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0xe, 0xb, 0xc, 0xc07, 'syz1\x00', 'syz0\x00', {0x2}}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@icmp6={{0x28}, {0xc, "fc84"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x14, 0x8000, 0x7, 0x18d, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) gettid() bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000380)=[0x1, 0x5, 0x8, 0x3ff], 0x77, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x881b2f13a5776678, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x40000001270c2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x24, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x24}}, 0x0) dup(r4) 1.540162968s ago: executing program 2 (id=2796): openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x309000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_G_MODULATOR(r4, 0xc0445636, &(0x7f0000000040)={0x0, "92a55301a7a10500000052f50000929e9eca24674d9d3d4ef28dafe5360429b6"}) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001080)=@nat={'nat\x00', 0x670, 0x5, 0x370, 0x0, 0x0, 0xffffffff, 0x110, 0x110, 0x300, 0x300, 0xffffffff, 0x300, 0x300, 0x5, 0x0, {[{{@uncond, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x40000, 0x2, 0x0, 0x6}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4=@dev, @gre_key}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x250}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @local, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1, 0x3, "d596aeacb7ccdc0169c1d865b82ad7084d1c88c6b7cec8c99cc89cb57cda"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1cfaff00000005000300110000000000000000000000000000000000f8f8d32ca4aafea9198ad60080d38a1ce9016d3debe8ac6d8e5b0161da2c5bdc5b797cd93c373e82152646e88a0112cd814722"], 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x200000c4) shutdown(0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000cc0)={0x44, r6, 0x1, 0x70bd2c, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x29, 0x9, 0x5}}]}, 0x44}, 0x1, 0x0, 0x0, 0x200040d4}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={0xffffffffffffffff, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6}, 0x20) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/8, 0x8}, {&(0x7f0000000400)=""/189, 0xbd}, {&(0x7f0000000180)=""/83, 0x77}, {&(0x7f00000004c0)=""/184, 0xb8}], 0x4, &(0x7f0000000640)=""/150, 0x96}, 0x7}], 0x1, 0x2, 0x0) syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='.\x00', 0x0, 0x189, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@private1={0xfc, 0x1, '\x00', 0xfe}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e20, 0x4, 0x4e20, 0xbbda, 0x2, 0x80, 0x0, 0x5c}, {0x400, 0x7, 0xe064, 0x9, 0x2, 0x1d, 0x7fffffffffffffff, 0xfffffffffffffff5}, {0x9ae4, 0x8206, 0x5, 0x5}, 0x0, 0x6e6bb0, 0x2, 0x1, 0x3, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d2, 0x24}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3500, 0x0, 0x1, 0xfa, 0x9, 0x401, 0x2}}, 0xe8) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e20}, 0x9b) userfaultfd(0x1) 1.515699505s ago: executing program 5 (id=2797): r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000040)=0x1) fsync(r0) r1 = socket$kcm(0x29, 0x7, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r2) ioctl$RTC_WIE_ON(r2, 0x700f) write$cgroup_pressure(r2, &(0x7f0000000100)={'some', 0x20, 0x0, 0x20, 0x52e}, 0x2f) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000140)) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) r3 = fsopen(&(0x7f0000000640)='f2fs\x00', 0x0) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000a80)={&(0x7f0000000a00)=[{0x7, 0x4000, 0x52, &(0x7f0000000680)="7383c4c2c435a043a6824d8b89a067c99a08f840b29ae802129c2233841c63dcb2ce6511c6097e84373379a1b7eb732624c03b133d1d04f0b3000a77fb303cf097b2c844df019e7e6a70566923738b354e01"}, {0x7, 0x0, 0xee, &(0x7f0000000700)="e6573286f563cbf12bbcf42d045cd664c66f7ae3fda71f6abdaedd4dea4c23e2a81231487616eb1805be0398d41f486e9f5744d957092f1ffe0aa4d01dde592c714371805ee89aab78bc86fb60cd4857fe3daed35ce69d3a3dcf506972a62b2f9ed49701213cfec27e76bb3273acab3d93a90dd0db506f0cd5cc470ba91d7f373c36b4251db89ce5700451ef5e60560b1ad156abc7542b1a22d49d1a4e9ec529bfabbdab3411d573e15155c8457cd7a67a49afdea1dd2a6f7410f23c96dd49ee8e61a3fb020a3df1bdf5fbda798e9d4c98ceb466fb31615ecca8580817018222080b67e9cdacc84532e2fb7f0407"}, {0x8, 0xba10, 0x66, &(0x7f0000000800)="f7a8182e4f92ff31266aef4b096b71498c29aa41d63f22583024d37bdb0bbb7d013190d67ae2dc44ba984dab7043d0cdc214719bec2e90d82c7b3e4cbc15358ebb6a43f202447a1df7d2ee024fec064defac5560c9a6e5104e39e2d3dde7f5edba4b774e6f8f"}, {0xdc7, 0x0, 0xa4, &(0x7f0000000880)="862b8451a92bffa1bd4027c8249ecf0f8e3f673be1630898fc9e6639ca1ccdec1f180d7bf6d51434b4757485a8225c37ed5ed1b65f25f59673e9a4753221432e33468b166e835169d04fef6976f40c9b4dca4079b5a39655216e09bbfd11662a24cc472d1f86d705ef7fd3cd3c2e1a826a54eb363ab7166c1fe87ed51eb081c1c50f2b4da8a63a46041d38f53c650892650c51ec031208b6b5365e75af690a443a61d3ae"}, {0x5, 0x8411, 0x8f, &(0x7f0000000940)="1928c06db4329a4e75131835524b16f04f456f4c2d84c7050fa11b0d7a7cdb5e2defc1f92fcb32d9597601135b9de02e0ce134514c83b9273921c90ef5584d908bc543d8066e5af782c0fc018b01ecae0ce04fddacda132582c82a01342ec1bb4bcc99417c293cff83d8bb404ba243755bec342aea15431d55bb4f52bcb16ef245c4ee1bc988668b3268b88061f459"}], 0x5}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000ac0)=[@in6={0xa, 0x4e24, 0x5, @empty, 0x5}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @rand_addr=0x64010102}, @in6={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, 0x40}, @in6={0xa, 0x4e24, 0x4, @empty}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, '\x00', 0x16}, 0x5}, @in6={0xa, 0x4e22, 0x8, @mcast2, 0xa}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e21, @loopback}], 0xdc) sendto$inet6(r3, &(0x7f0000000bc0)="9151eee27134584c09c77468dde93cd3c67b944f3772307fd9a3634e47c741b65af4a53f81ead6f1da8704856f2b817aa1d08e2e4ef22f7ba8dce1804bdfe903660a88358f8e56e832", 0x49, 0x40, &(0x7f0000000c40)={0xa, 0x4e22, 0xfffffff4, @local, 0x8}, 0x1c) syz_open_dev$tty1(0xc, 0x4, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000cc0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000c80)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000d00)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x515, @loopback, 0x4}, {0xa, 0x4e22, 0x5, @loopback, 0x12}, r4, 0x7}}, 0x48) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000d80)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000e40)={{r5}, r6, 0x4, @inherit={0x78, &(0x7f0000000dc0)={0x1, 0x6, 0x3ff, 0xb7c0, {0x40, 0x2, 0x221, 0x37b, 0x3}, [0xae, 0x0, 0x8, 0x6, 0x0, 0x3]}}, @subvolid=0xa05}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e80), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000001f80)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001ec0)={0x7c, r7, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x9000000}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ee}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xfff}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000002140)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002100)={&(0x7f0000002000)={0xe8, r7, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x8, 0x4}, {0x94}], "3827b95d95e0da9f"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0xa, 0x4}, {0x64}, {0x5, 0x7}, {0xf, 0x1}, {0x0, 0x5}, {0x61, 0x2}, {0x7, 0x2}, {0xf7, 0x2}, {0x7, 0x5}, {0x7, 0x3}, {0xc, 0x1}, {0x8, 0x4}, {0x2, 0x1}, {0x4, 0x4}, {0xce, 0x7}, {0x8}, {0x9, 0x6}, {0x62, 0x7}], "8b0ed64b1aab78b1"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0xb, 0x5}, {0xf, 0x2}, {0x3, 0x5}, {0x1, 0x6}, {0x2, 0x7}, {0x4, 0x7}], "d5bfee2d3874f65b"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x3, 0x6}, {0x1, 0x5}, {0x7, 0x3}, {0x5, 0x2}, {0x2, 0x1}, {0x2, 0x3}, {0xf, 0x7}, {0x2, 0x7}, {0x7, 0x6}, {0x2, 0x3}, {0x18, 0x2}, {0x5, 0x3}], "0f6269143e246c42"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x61, 0x1}, {0xfd, 0x3}, {0xa9}, {0x8, 0x7}, {0x1, 0x7}, {0x24, 0x6}, {0xf8, 0x7}, {0x80, 0x1}, {0x6, 0x1}, {0x9, 0x7}, {0x9, 0x2}], "07d9b8acd392b768"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0xff, 0x6}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x9, 0x3}, {0x1}, {0x1, 0x6}, {0x2, 0x4}, {0x1, 0x3}, {0x2, 0x6}, {0x9}, {0xf, 0x5}, {0x7f, 0x2}, {0x2, 0x5}, {0xc, 0x3}, {0x8, 0x2}, {0x8, 0x6}, {}, {0x9, 0x1}, {0x3, 0x7}], "952051763fadca59"}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000}, 0x4810) socket$isdn(0x22, 0x3, 0x31) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ffa000/0x4000)=nil) ioctl$MON_IOCQ_RING_SIZE(r2, 0x9205) r8 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r8, &(0x7f0000002180)={'#! ', './file0', [{0x20, '}'}], 0xa, "bbfbc0d32f58092365a46e7e405880d3a1eb2d420374b924ee630a2b1378b24a9357cddf07b3ea55e09a52da419d417903a1be0e61a42739a6ba17eca0f0fceadbde42150fccdc655de7a9845c43d0f298462b78724acb40f8344156e2a15824d2b1611090581a27f308e1d16b838f2517b8d5eba8f9f1fd92d454676c6bca5d81156c4c"}, 0x91) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002280), r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000002500)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000024c0)={&(0x7f0000002440)={0x5c, r9, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x19}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c810}, 0x8000) 1.479651096s ago: executing program 6 (id=2798): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002f00)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {0x45c4}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, {}, {0x0, 0x20000007}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2}, {}, {}, {}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x20, 0xffff}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x800000}, {0x0, 0x0, 0x0, 0x0, 0xb4d0}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x52e}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x2000000}, {}, {}, {0x0, 0x0, 0x0, 0x2, 0xfffffff5}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, {0x3}, {}, {}, {0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x1eb}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x8}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {}, {0x8}, {}, {}, {0x0, 0xffffffff}, {0x0, 0x2}, {0x400}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x16e}, {}, {}, {}, {0x0, 0x5, 0x100}], [{0x2}, {0x3}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0xd4, 0x0, 0x0, 0x6}, 0x6, 0x18000000, &(0x7f0000000300)={{0x0, 0x100000}}, 0x2, 0x0, 0x80}}) 1.351804443s ago: executing program 6 (id=2799): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfd0"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r2) (async) r3 = dup(r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40140, 0x0) io_setup(0xbf, &(0x7f0000000100)=0x0) io_submit(r5, 0x1, &(0x7f00000001c0)=[&(0x7f0000000280)={0x20000000, 0x0, 0x7, 0x8, 0x0, r4, 0x0}]) write$UHID_INPUT(r3, &(0x7f0000001980)={0x765, {"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", 0x1000}}, 0x1006) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) (async) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000000180)=0x8001) (async) ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000000180)=0x8001) ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000000080)=0xfffffffb) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="580000001000040100001000f9ffffff0000004a", @ANYRES32=0x0, @ANYBLOB="018000000000000030002e25128008000100736974002400028005000a000000000006000d00073cef000000fa19bb7504f4c2d96845a2017006000d0003000000050b09000400000008001f000200332d4eac88f3d5dc1ec1e5316990d02bfcae5cfd2c04e03e44da0a6c10dbb3299861265c93232c86f6ea8a46173f4f4c77df13cb66e3b0637e87533857471d912312ccf1abee6e7f60cbfeecb38fdcd161"], 0x58}, 0x1, 0x0, 0x0, 0xd0}, 0x0) 617.451003ms ago: executing program 5 (id=2800): mount$binderfs(0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=000000000000']) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000fc0)=ANY=[], 0x44}], 0x1, 0x0, 0x0, 0x10004800}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0100000000000000560000000000000066ba2000b0e2ee"], 0x6e}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x10100, 0x0) r7 = eventfd(0x6) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f00000001c0)=r7) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 553.416151ms ago: executing program 4 (id=2801): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x2a6400, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r2, 0x80304d65, &(0x7f0000007580)) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYRES8, @ANYRES32=0x0, @ANYBLOB="0008000000020000bc0012800c0001006d6163766c616e00acdf0180080003000100000008000100100000000a0006000180c200000300000a00040000000000030000000800074c0005800a000400aaaaaaaaaabb00000a000400aa00"/105], 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0xc000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d000060000001800"/28, @ANYRES32, @ANYBLOB="000000000000000066080000000000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x10060, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r6, 0xc01064bd, &(0x7f0000000280)={&(0x7f00000008c0), 0xffa4}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r6, 0xc01064bd, &(0x7f0000000240)={&(0x7f00000001c0)="567a9821ba91442a3dcac7", 0xb}) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000140)="33aaf14f564b1bf220cb113788fb40", 0xf, 0x40000, &(0x7f0000000180)={0x11, 0x5, r8, 0x1, 0x8, 0x6, @local}, 0x14) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000003100)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 399.563866ms ago: executing program 2 (id=2802): keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000002640)=""/1, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000600)=[{&(0x7f00000003c0)="952f258e6d23e80a1cfdcdea2778670320058ed4a7791fea024d67524b1bf85c6e83a38bfa7223eae9a93b7f53997651ff3b6d7bfd3dbb4baa7b0a02971e5510aed91db96cc402b2d8ef89ae741308a1f3cef28c5b39cb79df42eac0af7e929240de7f144f944b01985c6aeb7bd8063f82c5a5604a5d89be7a162758", 0xfffffffffffffd15}, {0x0, 0xfffffffffffffec2}, {&(0x7f00000006c0)="a5977041bf7b8ea4b34e46907f7ebf6c8016f801e3b1a002417941b23216f02ae557f0c456cbb5d582164519e6706cf77a639f663b022289cde17b47f3a5840c6ddc203fa5011dc2eb6e780aee5a57e3863504b57966aabc051bab789b7f714562c9bc8e7c5c6180af5ad3b0f78268607e1e2deaf988cd023f1cb908d1a29d0b0db2a3110b3c137be4f00a3e5f09d9035a0bbc9a5f18b4e33c298d77d3359fc83adcb74b767d838406", 0xfffffea2}, {&(0x7f0000000480)="4aefa44e8ba39c4129c3af1d6075ea9c868f939643bf1c0d4d20554549c45b4ad05e4d73d009c7fd534b9c17135c63c67809", 0x32}, {&(0x7f0000000780)="8a36f24b77f649264f803aabc1badcdea17dbfcbb1f292b4cf60496108eae79631f3e93da3d39133925bc9081e2ebdccec4cb46938694489e816506bd66cb81c15bb3579df5634e39096b7bb374192704ed56d433d93370acddde9372d6fb10819eec4f51dc5b108127ac8adc82f79992b5148d69138e06d0bcb55c8f02636041db47566169518225fbf5c54486cc80b950a432a729ee98d4918ed0ce5b2b2564a1ae14ec478ef5409939627da350e44fa258c7b516c58e9d3056a92e76a71b60bfe46df219b22c8cf6433c6a8b222aa686b2c774ba1df4a0e3afd450c01f75d2480772b56aec0471f7c3ea5881ac3199cc09757"}], 0x4) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) fcntl$setstatus(r3, 0x4, 0x40000) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x24, r5, 0xd03, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010100}, @FOU_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8088}, 0x80) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, 0x0, 0x301, 0x0, 0x25dfdbfe, {{0x5}, {@void, @val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4044041}, 0x20000000) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="62b2208a346b126d1d02c3c718c4dfac201eab541401c2853d60a89c8351476b5612fb7bf5f00f59b12fb11325af521b6ca709d24fcca14aed1326f69f890ce3b3cbba63", @ANYRESHEX=r4, @ANYRESOCT=0x0, @ANYRES64=r0, @ANYRES32=r5], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0xa000) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x317, 0x1, 0x34, 0x9}, 0x9c) prlimit64(0x0, 0xe, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file1\x00', 0x84042, 0x8) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0xc) 399.066643ms ago: executing program 5 (id=2803): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000480)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2b}}, @in={0x2, 0x4e21, @local}], 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x50, 0x1, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x25}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @empty}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8004}, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000280)=0x3fa, 0x4) socket$inet(0x2, 0x80000, 0x6a2) listen(r0, 0x4) 185.135124ms ago: executing program 1 (id=2804): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000018c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYRESDEC=r0], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xb}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x6, 0xd6}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r4 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) r5 = syz_io_uring_setup(0xd6, &(0x7f00000003c0)={0x0, 0x117c, 0x100, 0x3, 0x347, 0x0, r4}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0xc, 0x0, r4, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0, 0x4040891, 0x1}) io_uring_enter(r5, 0x47ba, 0x3000000, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f0000000ec0)=[{{&(0x7f0000000440)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000580)=""/182, 0xb6}], 0x1, &(0x7f0000000640)=""/233, 0xe9}, 0x2000000}, {{&(0x7f0000000740)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000840)=[{&(0x7f00000007c0)=""/100, 0x64}, {&(0x7f00000004c0)=""/12, 0xc}], 0x2, &(0x7f0000000880)=""/255, 0xff}, 0x1}, {{&(0x7f0000000980)=@un=@abs, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000a00)=""/46, 0x2e}, {&(0x7f0000000a40)=""/83, 0x53}, {&(0x7f0000000ac0)=""/245, 0xf5}, {&(0x7f0000000c00)=""/54, 0x36}, {&(0x7f0000000f80)=""/136, 0x88}, {&(0x7f0000000c80)=""/159, 0x9f}], 0x6, &(0x7f0000000dc0)=""/243, 0xf3}, 0x9c800000}], 0x3, 0x2, 0x0) r11 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[], 0xfffffe2b}, 0x1, 0x0, 0x0, 0x80}, 0x2200c840) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x1, [{0xfbfffffa}]}}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r11) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x1}]}) process_mrelease(0xffffffffffffffff, 0x0) 131.970226ms ago: executing program 5 (id=2805): socket(0xa, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_open_dev$video(0x0, 0x7ff, 0x40400) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 0s ago: executing program 5 (id=2806): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x90) write$cgroup_int(r3, &(0x7f00000003c0)=0x500, 0x5) write$cgroup_int(r3, &(0x7f0000000300)=0x4078c1d5, 0x12) ioctl$USBDEVFS_BULK(r2, 0x5523, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000d40)=0x3) syz_usb_connect(0x4, 0xfffffffffffffee4, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xdf, 0x2f, 0x56, 0x38, 0x13d3, 0x3487, 0x95d3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcf2, 0x3, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x66, 0x40, 0xc, 0xe2, 0xcd, 0xb7, 0x6, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "20f820b4d0f1"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x8, 0x9, 0x93}, [@mdlm={0x15, 0x24, 0x12, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x2, 0xf7, 0x10}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x1, 0x5}, @dmm={0x7, 0x24, 0x14, 0x100, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x7f}]}, @uac_control={{0xa, 0x24, 0x1, 0x6, 0xff}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x204, 0x2, 0x4f, 0x81, 0x9, 0x40}]}], [{{0x9, 0x5, 0x80, 0x3, 0x20, 0x93, 0x1, 0x3}}, {{0x9, 0x5, 0x7, 0x10, 0x400, 0x7, 0x36, 0xad, [@generic={0x101, 0xc, "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"}, @generic={0x33, 0xf, "d619bf42367835223b580a0769db0d459033bfbb0a365c0a5db6b68f53a9d0e80972d3931c6ce95e2a678fd80fb8b5759d"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x40, 0xb3, 0x8, 0x0, [@generic={0x6f, 0x22, "add484c016ca098b9d08f8cae62fac828c9abb3410d2eeb29964b76f74c232741f0e30b64c05ad59987f6ec0f1c1c20b47ec336f3997b59fc9913f78381ef1d1b564da9e88cdb52601821139c8f3cb07e6a20f865b52e8e92b19e71b917635973d816338951161b1b9525db296"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x9}]}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x9, 0x2, 0x0, [@generic={0x39, 0xf, "482b34427f9a60b014992f7e7e86d5d29ac0315b23a65eb96ad87b32d6d30f6f15d5e463d3c79373f8cc9dcf4bde5e02c1aeec8797aeed"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0xf7, 0xff, 0x64, [@generic={0x3f, 0x5, "212de78d67f674f067f45e128f590f838b2319e1aa83f414c66ffb69a91de5f021ee80c8a85f546efe38f12b67e7ed009cfe29dae5a18f986f9f672cb9"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x0, 0x4, 0x7f}}, {{0x9, 0x5, 0xe, 0x4, 0x400, 0xad, 0xb, 0x2, [@generic={0x102, 0xe, "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"}]}}, {{0x9, 0x5, 0x7, 0xc, 0x200, 0x2, 0x5, 0x4}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0xa, 0x9f, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xa2, 0x5}, @generic={0x79, 0x11, "d90afc506c1cd5fede72a6cca2bfef290581c57dd7c2602b3f8b6e7f4702d9458f18f891688b08f066aabbc52ebe1e9c6a0fa38be84ff46a6845f7a5448d4f6dad1964b01fc474d2a95c0076c8ad7cae1a6942e9c55c63447b0295f769acf8932d3dd661681eebe5f263bc87f8bafe4c5a777ea3ae425e"}]}}, {{0x9, 0x5, 0xa, 0x8, 0x3ff, 0x7, 0x7f, 0xf}}, {{0x9, 0x5, 0x8, 0x1, 0x400, 0x1, 0xcc, 0x6}}, {{0x9, 0x5, 0xc, 0x3, 0x20, 0x0, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x1}]}}]}}, {{0x9, 0x4, 0xd3, 0x40, 0xc, 0xea, 0xa0, 0x68, 0x9, [], [{{0x9, 0x5, 0x4, 0x1, 0x40, 0xd3, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xd, 0x9}, @generic={0xd5, 0x22, "b9c4d6be9f37aa2bce023b696c2a269e88e9c694eedbafddadca65a45e7340fa8e132661bf2b241f409c1c60d0e608a7d3e86089e46b4f00ea75581e71de9e8658811756daf747d82f4ab52b205a3604e9131f75ed080a8281ec83645399dce2bca3e03337689709d8583ba6becae97382728bb392c7493f2c66d368057d5cb8b69a707e5c0334b776163d4bf6521f66f116decb29307f5cab74703fc85a4afad290874eca5212d31141046f1154594108f7db9eac5d4a6ff81ba9154d9134c8c85895bb2f1e7fb65692b5bc523031d8d18a8a"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x8, 0x6, 0x4, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7a, 0xfffe}, @generic={0x9, 0x0, "f657b8dedf60e7"}]}}, {{0x9, 0x5, 0x1, 0x1, 0x20, 0x9, 0x5, 0x40, [@generic={0x7, 0x23, "83abe2547a"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0x3, 0x4, 0x7, [@generic={0x102, 0x1, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x5}]}}, {{0x9, 0x5, 0x1, 0x1, 0x3ff, 0x0, 0x6, 0xa}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x0, 0x0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xe, 0x7}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x81, 0xf6, 0x6}}, {{0x9, 0x5, 0xc, 0x1c, 0x400, 0x81, 0x8, 0x79, [@generic={0xef, 0x22, "83f884cd7c33bb7abebc0ae17fb6fadb486a8dcbab1c9edea5a7416bd564276857c7a9c4af281b6c579d04a04302b569703d77937e6e6fa3e9d7462a677b0b08c7191817611afd2503f8f490fcbbb3554ae59f7ed3b024a85dd82a8a2558501c15cc3db71abbd050575a93d93c049ec41b5ab8455dd3f41b14fbec2f6298662c74fe06e3f3b0b1a40cdaecd1647d28974f7c1d981a1efc2b1da054967365085f2b794f58a8f60077f8f1c2a990d13326c88a6ecf14a4449e977a387007d7951de3ed5f59dc8adcab4805fe8c4f5b9c830d420afb65162432fbeb1a409191b5b035bbe6236dc655930b6abb9b56"}, @generic={0x14, 0x22, "20e303d0bf7fc0ab82411f68dbb8b916c280"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x8, 0x3, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x42, 0x80}]}}, {{0x9, 0x5, 0xa, 0x1, 0x10, 0xff, 0x7, 0xa}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x80, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x40, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x48, 0x5}]}}, {{0x9, 0x5, 0x5, 0x3, 0x5b7, 0xb, 0xd2, 0x2, [@generic={0xa, 0x22, "6c90333ccce74005"}]}}]}}, {{0x9, 0x4, 0x74, 0x8, 0xa, 0xff, 0xff, 0x0, 0x5, [@hid_hid={0x9, 0x21, 0x7a, 0xe, 0x1, {0x22, 0x36f}}, @uac_as={[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x6, 0xff, 0x96, "979aa91d46"}, @as_header={0x7, 0x24, 0x1, 0xa9, 0xf5, 0x1002}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x5, 0x9, 0xff, "eb100846cce3c76839"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x4, 0x0, 0x6, "467c692b8599d606"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x3, 0x2, 0x8, 0x3, "92"}]}], [{{0x9, 0x5, 0xf, 0x8, 0x200, 0x0, 0xbb, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x4}, @generic={0x4d, 0xe, "597ecec958a856e8f54b7594b3902c39bcbc799f389cfe6ab99773b79ea9ae0e4141dbd4181f046af571b8cd204bc4d766f3a560e686ae3067ea87959c0ca8d62513df5a2f809499e98d3b"}]}}, {{0x9, 0x5, 0x6, 0xc, 0x20, 0xf, 0xf7, 0x5, [@generic={0x5d, 0xd, "473a56ff4e6ace107f25063b1a9d1100113658fbf0054af1f9cf37e905eb2d2f7022859cdd2bb9c90aa472238bb4e34e05cb746df1edde895bc5b18da84f5d0ea88c846639f0e5bf1a5dde9a5e76f46a6d023201b1d02273a6ba4d"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x8, 0xc2, 0x8, 0x1, [@generic={0xb3, 0xb, "1aa4343adfe9e215f776f20da3760fa9e13f2413c7942591fc0f9b555f59c31ea36db7c0ffa45e8ecf486ecfa27d11d8d60fb7feab03e699ae9cf7b1a97bd50c89f24c84efdaeee00bea01c5f3b84910d8b1b46df6472588b3ea688e76d1c828c51ebb727721f7bbbe9bb8eab44c569230d7c0923b7d2e5570edbaf71cc85b9eeb8522f55b1f1f7aa61c1eca2a8cba354a1f1d12f398c000179c0c65bcae2a9dbbdded7bebfe22b873572d0924a6f093a6"}]}}, {{0x9, 0x5, 0x80, 0x13, 0x3ff, 0xba, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x40, 0x4}]}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0x5, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x63, 0xfff}]}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0x8, 0x4, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0xef45}]}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x1, 0x80, 0x40, [@generic={0xa9, 0x8, "087b0a4f86642db1bad6d363e048297a4d928731a98e52ea423543546266ef2898d52245f30216f5d34ae9f9f91e0da0a000dbe44abbd574b06f0b0c8c51b1dae12bbac77624563d981dbb9f20a817d485bb93adc7e3c511f53be5c54f3a898cda6c1eb28ff20162b718a2bd04ee71fa135e9c3d37e50978fc7ea9fb87a6035e4e2dbfa3e95eca357a91b950c622a1145bda7994580cee5cb821b3f1de91f651cf3fd8105fb5dd"}, @generic={0xf4, 0x31, "53dfe0d2a5bc6a98fdd8b24017d667fa53335d0838443b807d267771f4a65ad45afd0c1945eb7561cb3c1a385307e2b3ba42a13bde2c296f7dde75e1c1adf29dffbd986d045bfac001f5d4a43b31a78a0a56db99d997c0bedb645618ed29b3de14d5e36aea5a7166f3a57320e43b91fc977194b70fe594f6e16113fd6c198122629fb9cddd048ebb00a920a17b29d0df9fdc1e2f31553875cc9178cba9f81174a636014b346d9342206725d7f0e940c62ac81d7b94c564ef2acda36682802d270577d88fd626e6200b875e093563bcca94e5659ceb02d67ceb8946c82524969c4c6a56c8cbc73f38f3a3359d1a2d44a70e3d"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x8, 0x2, 0x10, 0x2}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x0, 0x2c, 0x1}}, {{0x9, 0x5, 0x4, 0x4, 0x40, 0x9, 0x1, 0x1, [@generic={0x102, 0x30, "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"}]}}]}}]}}]}}, 0x0) kernel console output (not intermixed with test programs): [ 528.507678][ T5904] gspca_spca501: reg write: error -71 [ 528.513712][ T5904] spca501 4-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 528.523505][ T5904] spca501 4-1:0.0: probe with driver spca501 failed with error -22 [ 528.540455][T12751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1870'. [ 528.576515][ T5904] usb 4-1: USB disconnect, device number 51 [ 528.967503][T12766] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 529.654699][T12772] binder: 12771:12772 ioctl c0046209 0 returned -22 [ 529.881708][T12778] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 529.904009][T12781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1877'. [ 529.928329][T12787] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1880'. [ 529.967952][T12787] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.100895][T12787] bridge_slave_1 (unregistering): left allmulticast mode [ 530.112181][T12787] bridge_slave_1 (unregistering): left promiscuous mode [ 530.121314][T12787] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.214208][ T9406] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 530.407136][ T9406] usb 3-1: Using ep0 maxpacket: 32 [ 530.439960][ T9406] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 530.452457][ T9406] usb 3-1: config 0 has no interface number 0 [ 530.467880][ T9406] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 530.478206][ T9406] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.486725][ T9406] usb 3-1: Product: syz [ 530.490974][ T9406] usb 3-1: Manufacturer: syz [ 530.496051][ T9406] usb 3-1: SerialNumber: syz [ 530.577481][ T9406] usb 3-1: config 0 descriptor?? [ 530.614596][T12800] 9pnet_fd: Insufficient options for proto=fd [ 530.623237][ T9406] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 530.632625][ T9406] usb 3-1: selecting invalid altsetting 1 [ 530.747655][ T9406] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 530.773701][ T9406] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 531.381642][ T9406] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 531.404248][ T9406] usb 3-1: media controller created [ 531.800348][ T9406] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 533.026470][T12813] 9pnet_fd: Insufficient options for proto=fd [ 533.218372][ T9406] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 533.439331][ T9406] usb 3-1: USB disconnect, device number 56 [ 536.431916][T12845] 9pnet_fd: Insufficient options for proto=fd [ 537.215961][ T30] audit: type=1326 audit(1755958409.669:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12846 comm="syz.1.1901" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5bcff8ebe9 code=0x0 [ 538.515332][T12855] netlink: 'syz.5.1902': attribute type 10 has an invalid length. [ 539.624424][ T5926] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 540.946967][ T5926] usb 4-1: config 4 has an invalid interface number: 121 but max is 0 [ 540.955859][ T5926] usb 4-1: config 4 has no interface number 0 [ 540.963808][ T5926] usb 4-1: config 4 interface 121 has no altsetting 0 [ 540.973869][ T5926] usb 4-1: New USB device found, idVendor=6b86, idProduct=c211, bcdDevice=25.ca [ 540.987127][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.996323][ T5926] usb 4-1: Product: syz [ 541.000660][ T5926] usb 4-1: Manufacturer: syz [ 541.009388][ T5926] usb 4-1: SerialNumber: syz [ 541.320277][T12889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1909'. [ 541.716278][ T5926] usb 4-1: USB disconnect, device number 52 [ 543.144302][ T5926] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 543.396302][ T5926] usb 3-1: not running at top speed; connect to a high speed hub [ 543.408447][ T5926] usb 3-1: config 95 has an invalid interface number: 86 but max is 0 [ 543.417467][ T5926] usb 3-1: config 95 has no interface number 0 [ 543.425461][ T5926] usb 3-1: config 95 interface 86 altsetting 8 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 543.436886][ T5926] usb 3-1: config 95 interface 86 has no altsetting 0 [ 543.448033][ T5926] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=88.93 [ 543.462729][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.485184][ T5926] usb 3-1: Product: syz [ 543.520698][ T5926] usb 3-1: Manufacturer: syz [ 543.532844][ T5926] usb 3-1: SerialNumber: syz [ 543.558537][T12925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1920'. [ 544.363285][T12935] 9pnet_fd: Insufficient options for proto=fd [ 544.390700][ T5926] iguanair 3-1:95.86: probe with driver iguanair failed with error -12 [ 544.414672][ T5926] usb 3-1: USB disconnect, device number 57 [ 545.453115][T12945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1927'. [ 545.483927][T12945] netlink: 'syz.1.1927': attribute type 10 has an invalid length. [ 545.545828][T12945] bond0: (slave wlan1): Releasing backup interface [ 545.773150][ T30] audit: type=1326 audit(1755958418.219:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12950 comm="syz.1.1930" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5bcff8ebe9 code=0x0 [ 545.842438][T12959] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1932'. [ 545.844268][T12958] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1932'. [ 545.863583][T12959] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1932'. [ 547.553941][T12985] gtp0: entered promiscuous mode [ 547.580520][T12985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1936'. [ 547.803306][T12989] kvm: pic: non byte write [ 548.379825][T12995] netlink: 'syz.2.1938': attribute type 10 has an invalid length. [ 548.387884][T12995] netlink: 'syz.2.1938': attribute type 49 has an invalid length. [ 548.845774][T13009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1945'. [ 548.863870][T13010] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1945'. [ 548.876646][T13010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1945'. [ 549.777705][T13016] delete_channel: no stack [ 550.656503][T13030] 9pnet_fd: Insufficient options for proto=fd [ 550.699462][ T30] audit: type=1326 audit(1755958423.149:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13024 comm="syz.3.1950" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f750338ebe9 code=0x0 [ 551.104238][ T926] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 551.266324][ T926] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 551.283291][ T926] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 551.312997][ T926] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 551.342640][ T926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.372540][T13046] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 551.382684][ T926] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 551.447572][T13054] overlay: Bad value for 'workdir' [ 553.009569][ T926] usb 3-1: USB disconnect, device number 58 [ 553.256805][T13046] syz.2.1956: attempt to access beyond end of device [ 553.256805][T13046] nbd2: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 553.275556][T13046] EXT4-fs (nbd2): unable to read superblock [ 553.375735][ T9406] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 553.538739][ T9406] usb 4-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 553.548085][ T9406] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.556680][ T9406] usb 4-1: Product: syz [ 553.560959][ T9406] usb 4-1: Manufacturer: syz [ 553.566017][ T9406] usb 4-1: SerialNumber: syz [ 553.573969][ T9406] usb 4-1: config 0 descriptor?? [ 553.582634][ T9406] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 554.262296][ T926] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 554.421528][ T9406] sonixb 4-1:0.0: Error writing register 01: -110 [ 554.910521][ T9406] sonixb 4-1:0.0: probe with driver sonixb failed with error -110 [ 554.982272][ T5904] usb 4-1: USB disconnect, device number 53 [ 555.000795][ T926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 555.019383][ T926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 555.034015][ T926] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 555.058479][ T926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.079301][ T926] usb 3-1: config 0 descriptor?? [ 556.326436][ T926] steelseries 0003:1038:12B6.0012: unknown main item tag 0x2 [ 556.336300][ T926] steelseries 0003:1038:12B6.0012: item fetching failed at offset 6/7 [ 556.344975][ T926] steelseries 0003:1038:12B6.0012: probe with driver steelseries failed with error -22 [ 556.527695][T13082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.536281][T13082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.748961][ T5904] usb 3-1: USB disconnect, device number 59 [ 556.957953][ T926] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 557.115644][ T926] usb 4-1: Using ep0 maxpacket: 16 [ 557.122566][ T926] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.134094][ T926] usb 4-1: config 0 interface 0 has no altsetting 0 [ 557.143298][ T926] usb 4-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 557.156155][ T926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.371572][ T926] usb 4-1: config 0 descriptor?? [ 557.883883][T13133] netlink: 'syz.1.1982': attribute type 5 has an invalid length. [ 557.909959][ T926] usbhid 4-1:0.0: can't add hid device: -71 [ 557.927734][ T926] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 557.961255][ T926] usb 4-1: USB disconnect, device number 54 [ 561.936753][T13197] xt_hashlimit: max too large, truncated to 1048576 [ 562.808360][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.840133][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.114005][T13215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.149402][T13215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.256475][T13219] can: request_module (can-proto-0) failed. [ 563.344259][ T9406] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 563.498548][ T9406] usb 4-1: Using ep0 maxpacket: 16 [ 563.525516][ T9406] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 563.541284][ T9406] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.549536][ T9406] usb 4-1: Product: syz [ 563.553712][ T9406] usb 4-1: Manufacturer: syz [ 563.563021][ T9406] usb 4-1: SerialNumber: syz [ 563.571057][ T9406] usb 4-1: config 0 descriptor?? [ 563.782688][ T9406] dvb_usb_dtv5100 4-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 563.802845][ T9406] usb 4-1: USB disconnect, device number 55 [ 564.104191][ T926] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 564.232580][ T30] audit: type=1326 audit(1755958436.669:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13242 comm="syz.5.2011" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f23e3b8ebe9 code=0x0 [ 564.285795][ T926] usb 3-1: config index 0 descriptor too short (expected 72, got 10) [ 564.314197][ T30] audit: type=1326 audit(1755958436.719:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13242 comm="syz.5.2011" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f23e3b8ebe9 code=0x0 [ 564.335425][ T926] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 564.342645][ T926] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 564.364075][ T30] audit: type=1326 audit(1755958436.769:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13242 comm="syz.5.2011" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f23e3b8ebe9 code=0x0 [ 564.388312][ T926] usb 3-1: string descriptor 0 read error: -71 [ 564.395746][ T926] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 564.405406][ T926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.417580][ T926] usb 3-1: can't set config #1, error -71 [ 564.430962][ T30] audit: type=1326 audit(1755958436.879:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13242 comm="syz.5.2011" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f23e3b8ebe9 code=0x0 [ 564.454265][ T926] usb 3-1: USB disconnect, device number 60 [ 564.564386][ T30] audit: type=1326 audit(1755958436.949:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13242 comm="syz.5.2011" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f23e3b8ebe9 code=0x0 [ 564.608006][ T30] audit: type=1326 audit(1755958437.009:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13242 comm="syz.5.2011" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f23e3b8ebe9 code=0x0 [ 564.709019][T13257] openvswitch: netlink: Multiple metadata blocks provided [ 565.127838][T13259] netlink: 'syz.3.2014': attribute type 58 has an invalid length. [ 565.284339][T13259] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2014'. [ 565.300960][ T30] audit: type=1326 audit(1755958437.749:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13242 comm="syz.5.2011" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f23e3b8ebe9 code=0x0 [ 565.360977][ T30] audit: type=1326 audit(1755958437.809:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13242 comm="syz.5.2011" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f23e3b8ebe9 code=0x0 [ 565.616745][T13264] comedi: valid board names for 8255 driver are: [ 565.623116][T13264] 8255 [ 565.634227][T13264] comedi: valid board names for vmk80xx driver are: [ 565.640843][T13264] vmk80xx [ 565.643872][T13264] comedi: valid board names for usbduxsigma driver are: [ 565.664208][T13264] usbduxsigma [ 565.684411][T13264] comedi: valid board names for usbduxfast driver are: [ 565.691290][T13264] usbduxfast [ 565.715300][T13264] comedi: valid board names for usbdux driver are: [ 565.744207][T13264] usbdux [ 565.747245][T13264] comedi: valid board names for ni6501 driver are: [ 565.763932][T13264] ni6501 [ 565.768703][T13264] comedi: valid board names for dt9812 driver are: [ 565.813620][T13264] dt9812 [ 565.821051][T13264] comedi: valid board names for ni_labpc_cs driver are: [ 565.828373][T13264] ni_labpc_cs [ 565.834423][T13264] comedi: valid board names for ni_daq_700 driver are: [ 565.841982][T13264] ni_daq_700 [ 565.849769][T13264] comedi: valid board names for labpc_pci driver are: [ 565.857149][T13264] labpc_pci [ 565.860365][T13264] comedi: valid board names for adl_pci9118 driver are: [ 566.463613][T13264] pci9118dg [ 566.469276][T13264] pci9118hg [ 566.472501][T13264] pci9118hr [ 566.477030][T13264] comedi: valid board names for 8255_pci driver are: [ 566.485930][T13264] 8255_pci [ 566.489215][T13264] comedi: valid board names for s526 driver are: [ 566.497505][T13264] s526 [ 566.500289][T13264] comedi: valid board names for multiq3 driver are: [ 566.507407][T13264] multiq3 [ 566.510524][T13264] comedi: valid board names for pcmuio driver are: [ 566.518573][T13264] pcmuio48 [ 566.521767][T13264] pcmuio96 [ 566.531874][T13264] comedi: valid board names for pcmmio driver are: [ 566.548757][T13264] pcmmio [ 566.551715][T13264] comedi: valid board names for pcmda12 driver are: [ 566.569051][T13264] pcmda12 [ 566.572918][T13264] comedi: valid board names for pcmad driver are: [ 566.583477][T13264] pcmad12 [ 566.594182][T13264] pcmad16 [ 566.597231][T13264] comedi: valid board names for ni_labpc driver are: [ 566.620430][T13264] lab-pc-1200 [ 566.623823][T13264] lab-pc-1200ai [ 566.643391][T13284] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2021'. [ 566.652573][T13284] tipc: Invalid UDP bearer configuration [ 566.652626][T13284] tipc: Enabling of bearer rejected, failed to enable media [ 566.684260][T13264] lab-pc+ [ 566.694211][T13264] comedi: valid board names for atmio16 driver are: [ 566.700866][T13264] atmio16 [ 566.703880][T13264] atmio16d [ 566.714284][T13264] comedi: valid board names for ni_at_ao driver are: [ 566.731123][T13264] at-ao-6 [ 566.735396][T13264] at-ao-10 [ 566.741232][T13264] comedi: valid board names for ni_at_a2150 driver are: [ 566.754284][T13264] ni_at_a2150 [ 566.757653][T13264] comedi: valid board names for adq12b driver are: [ 566.764457][T13264] adq12b [ 566.767385][T13264] comedi: valid board names for mpc624 driver are: [ 566.773862][T13264] mpc624 [ 566.792547][T13264] comedi: valid board names for c6xdigio driver are: [ 566.799866][T13264] c6xdigio [ 566.803040][T13264] comedi: valid board names for aio_iiro_16 driver are: [ 566.812194][T13264] aio_iiro_16 [ 566.817214][T13264] comedi: valid board names for aio_aio12_8 driver are: [ 566.825849][T13264] aio_aio12_8 [ 566.829295][T13264] aio_ai12_8 [ 566.832560][T13264] aio_ao12_4 [ 566.836506][T13264] comedi: valid board names for fl512 driver are: [ 566.843111][T13264] fl512 [ 566.847847][T13264] comedi: valid board names for dmm32at driver are: [ 566.855141][T13264] dmm32at [ 566.858221][T13264] comedi: valid board names for dt282x driver are: [ 566.871789][T13264] dt2821 [ 566.875924][T13264] dt2821-f [ 566.895504][T13264] dt2821-g [ 566.898640][T13264] dt2823 [ 566.907506][T13264] dt2824-pgh [ 566.917128][T13264] dt2824-pgl [ 566.926763][T13264] dt2825 [ 566.934264][T13264] dt2827 [ 566.937203][T13264] dt2828 [ 566.950315][T13264] dt2829 [ 566.953244][T13264] dt21-ez [ 566.956806][T13264] dt23-ez [ 566.959811][T13264] dt24-ez [ 566.962882][T13264] dt24-ez-pgl [ 566.969435][T13264] comedi: valid board names for dt2817 driver are: [ 566.976472][T13264] dt2817 [ 566.979395][T13264] comedi: valid board names for dt2815 driver are: [ 567.009269][T13264] dt2815 [ 567.012242][T13264] comedi: valid board names for dt2814 driver are: [ 567.036587][T13264] dt2814 [ 567.039564][T13264] comedi: valid board names for dt2811 driver are: [ 567.055012][T13264] dt2811-pgh [ 567.058396][T13264] dt2811-pgl [ 567.061689][T13264] comedi: valid board names for dt2801 driver are: [ 567.071009][T13264] dt2801 [ 567.073967][T13264] comedi: valid board names for das6402 driver are: [ 567.082463][T13264] das6402-12 [ 567.088334][T13264] das6402-16 [ 567.091725][T13264] comedi: valid board names for das1800 driver are: [ 567.100251][T13264] das-1701st [ 567.103616][T13264] das-1701st-da [ 567.110367][T13264] das-1702st [ 567.116733][T13264] das-1702st-da [ 567.120293][T13264] das-1702hr [ 567.123676][T13264] das-1702hr-da [ 567.128851][T13264] das-1701ao [ 567.132143][T13264] das-1702ao [ 567.139137][T13264] das-1801st [ 567.142437][T13264] das-1801st-da [ 567.150138][T13264] das-1802st [ 567.153443][T13264] das-1802st-da [ 567.159790][T13264] das-1802hr [ 567.163161][T13264] das-1802hr-da [ 567.179251][T13264] das-1801hc [ 567.234550][T13264] das-1802hc [ 567.237874][T13264] das-1801ao [ 567.241171][T13264] das-1802ao [ 567.244531][T13264] comedi: valid board names for das800 driver are: [ 567.251065][T13264] das-800 [ 567.254092][T13264] cio-das800 [ 567.259142][T13264] das-801 [ 567.262172][T13264] cio-das801 [ 567.269164][T13264] das-802 [ 567.272209][T13264] cio-das802 [ 567.277079][T13264] cio-das802/16 [ 567.280643][T13264] comedi: valid board names for isa-das08 driver are: [ 567.401964][T13264] isa-das08 [ 568.149338][T13264] das08-pgm [ 568.153003][T13264] das08-pgh [ 568.157431][T13264] das08-pgl [ 568.162618][T13264] das08-aoh [ 568.167096][T13264] das08-aol [ 568.171214][T13264] das08-aom [ 568.282416][T13264] das08/jr-ao [ 568.286501][T13264] das08jr-16-ao [ 568.290064][T13264] pc104-das08 [ 568.293510][T13264] das08jr/16 [ 568.297654][T13264] comedi: valid board names for das16m1 driver are: [ 568.310975][T13264] das16m1 [ 568.314025][T13264] comedi: valid board names for dac02 driver are: [ 568.366374][T13264] dac02 [ 568.369532][T13264] comedi: valid board names for rti802 driver are: [ 568.384161][T13264] rti802 [ 568.393435][T13264] comedi: valid board names for rti800 driver are: [ 568.404528][T13264] rti800 [ 568.407484][T13264] rti815 [ 568.416767][T13264] comedi: valid board names for pcm3724 driver are: [ 568.427542][T13306] kAFS: unable to lookup cell '/,' [ 568.433375][T13264] pcm3724 [ 568.437208][T13264] comedi: valid board names for pcl818 driver are: [ 568.443719][T13264] pcl818l [ 568.465560][T13306] xt_CT: You must specify a L4 protocol and not use inversions on it [ 568.474048][T13264] pcl818h [ 568.494653][T13264] pcl818hd [ 568.497784][T13264] pcl818hg [ 568.500893][T13264] pcl818 [ 568.503826][T13264] pcl718 [ 568.520664][T13264] pcm3718 [ 568.523712][T13264] comedi: valid board names for pcl816 driver are: [ 568.538340][T13264] pcl816 [ 568.541464][T13264] pcl814b [ 568.549512][T13264] comedi: valid board names for pcl812 driver are: [ 568.558255][T13264] pcl812 [ 568.561203][T13264] pcl812pg [ 568.582604][T13264] acl8112pg [ 568.590887][T13264] acl8112dg [ 568.597829][T13264] acl8112hg [ 568.601209][T13264] a821pgl [ 568.605415][T13264] a821pglnda [ 568.608775][T13264] a821pgh [ 568.611945][T13264] a822pgl [ 568.618408][T13264] a822pgh [ 568.622060][T13264] a823pgl [ 568.632231][T13264] a823pgh [ 568.638555][T13264] pcl813 [ 568.641558][T13264] pcl813b [ 568.645873][T13264] acl8113 [ 568.648973][T13264] iso813 [ 568.651974][T13264] acl8216 [ 568.658556][T13264] a826pg [ 568.661571][T13264] comedi: valid board names for pcl730 driver are: [ 568.670809][T13264] pcl730 [ 568.678345][T13264] iso730 [ 568.681424][T13264] acl7130 [ 568.688234][T13264] pcm3730 [ 568.692447][T13264] pcl725 [ 568.707663][T13264] p8r8dio [ 568.710962][T13264] acl7225b [ 568.714083][T13264] p16r16dio [ 568.724517][T13264] pcl733 [ 568.731833][T13264] pcl734 [ 568.737421][T13264] opmm-1616-xt [ 568.744493][T13264] pearl-mm-p [ 568.764216][T13264] ir104-pbf [ 568.774500][T13264] comedi: valid board names for pcl726 driver are: [ 568.781026][T13264] pcl726 [ 568.783969][T13264] pcl727 [ 568.798465][T13264] pcl728 [ 568.801432][T13264] acl6126 [ 568.812255][T13264] acl6128 [ 568.820078][T13264] comedi: valid board names for pcl724 driver are: [ 568.827363][T13264] pcl724 [ 568.830373][T13264] pcl722 [ 568.833552][T13264] pcl731 [ 568.842081][T13264] acl7122 [ 568.846871][T13264] acl7124 [ 568.849996][T13264] pet48dio [ 568.853179][T13264] pcmio48 [ 568.860322][T13264] onyx-mm-dio [ 568.863780][T13264] comedi: valid board names for pcl711 driver are: [ 568.889896][T13264] pcl711 [ 568.904042][T13264] pcl711b [ 568.907269][T13264] acl8112hg [ 568.910478][T13264] acl8112dg [ 568.913683][T13264] comedi: valid board names for amplc_pc263 driver are: [ 568.930931][T13264] pc263 [ 568.933815][T13264] comedi: valid board names for amplc_pc236 driver are: [ 568.941429][T13264] pc36at [ 568.947264][T13264] comedi: valid board names for amplc_dio200 driver are: [ 568.959579][T13264] pc212e [ 568.962542][T13264] pc214e [ 568.976395][T13264] pc215e [ 568.981399][T13264] pc218e [ 568.985004][T13264] pc272e [ 568.994243][ T926] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 568.998606][T13320] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2031'. [ 569.027269][T13264] comedi: valid board names for comedi_parport driver are: [ 569.038661][T13264] comedi_parport [ 569.042334][T13264] comedi: valid board names for comedi_test driver are: [ 569.051497][T13264] comedi_test [ 569.058423][T13264] comedi: valid board names for comedi_bond driver are: [ 569.062147][T13326] 9pnet_fd: Insufficient options for proto=fd [ 569.067142][T13264] comedi_bond [ 569.194325][ T926] usb 3-1: Using ep0 maxpacket: 8 [ 569.372664][ T926] usb 3-1: unable to get BOS descriptor or descriptor too short [ 569.523033][ T926] usb 3-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 569.963111][ T926] usb 3-1: config 1 interface 0 has no altsetting 0 [ 570.012438][ T926] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 570.164314][ T926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.172348][ T926] usb 3-1: Product: syz [ 570.201876][ T926] usb 3-1: Manufacturer: syz [ 570.211971][ T926] usb 3-1: SerialNumber: syz [ 570.253322][T13340] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2038'. [ 570.450084][T13356] netlink: 'syz.5.2043': attribute type 10 has an invalid length. [ 570.459205][T13356] bond0: (slave wlan1): Opening slave failed [ 570.475874][ T926] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 570.497525][ T926] usb 3-1: USB disconnect, device number 61 [ 571.868816][T13370] 9pnet: Could not find request transport: fdÿÿÿÿÿÿÿÿ [ 571.881936][T13370] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2049'. [ 572.172193][T13389] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2054'. [ 574.169936][T13413] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2059'. [ 574.510420][T13422] fuse: blksize only supported for fuseblk [ 577.602097][T13471] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2076'. [ 578.024204][ T5956] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 578.152518][T13494] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2084'. [ 578.163779][T13490] netlink: 324 bytes leftover after parsing attributes in process `syz.3.2081'. [ 578.224311][ T5956] usb 3-1: Using ep0 maxpacket: 16 [ 578.240017][ T5956] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 578.274371][ T5956] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 578.416714][ T5956] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 578.592096][ T5956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.832246][ T5956] usb 3-1: config 0 descriptor?? [ 579.012912][T13514] bridge0: port 1(syz_tun) entered blocking state [ 579.135372][T13514] bridge0: port 1(syz_tun) entered disabled state [ 579.148121][T13514] syz_tun: entered promiscuous mode [ 579.157562][T13514] bridge0: port 1(syz_tun) entered blocking state [ 579.164672][T13514] bridge0: port 1(syz_tun) entered forwarding state [ 579.681819][ T926] usb 3-1: USB disconnect, device number 62 [ 580.054351][ T9407] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 580.183560][T13539] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2094'. [ 580.373022][ T9407] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 580.568442][ T9407] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 580.578871][ T9407] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 580.588234][ T9407] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.619348][ T9407] usb 4-1: config 0 descriptor?? [ 581.800605][ T9407] usbhid 4-1:0.0: can't add hid device: -71 [ 581.814466][ T9407] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 581.850803][ T9407] usb 4-1: USB disconnect, device number 56 [ 585.212697][T13562] fuse: Unknown parameter '0xffffffffffffffffÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ' [ 585.315411][T13605] overlayfs: failed to clone lowerpath [ 585.364505][ T926] usb 3-1: new low-speed USB device number 63 using dummy_hcd [ 585.538326][ T926] usb 3-1: unable to get BOS descriptor or descriptor too short [ 585.557297][ T926] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 585.584245][ T926] usb 3-1: config 1 interface 0 altsetting 195 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 585.614162][ T926] usb 3-1: config 1 interface 0 has no altsetting 0 [ 585.651591][ T926] usb 3-1: string descriptor 0 read error: -22 [ 585.657972][ T926] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 585.704429][ T926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.729308][ T926] usb 3-1: bad CDC descriptors [ 585.754685][T13615] /dev/nullb0: Can't lookup blockdev [ 586.170588][T13628] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2119'. [ 586.179704][T13628] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2119'. [ 586.188690][T13628] netlink: 'syz.1.2119': attribute type 4 has an invalid length. [ 587.714313][T13654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2125'. [ 588.511105][ T5904] usb 3-1: USB disconnect, device number 63 [ 589.374571][T13677] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2133'. [ 589.554656][T13689] overlayfs: failed to resolve './file0': -2 [ 589.650970][T13691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2138'. [ 589.661190][T13690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2138'. [ 589.753504][T13697] tmpfs: Bad value for 'mpol' [ 590.476376][ T9407] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 590.656872][ T9407] usb 3-1: device descriptor read/64, error -71 [ 590.895150][ T9407] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 591.004385][ T926] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 591.024365][ T9407] usb 3-1: device descriptor read/64, error -71 [ 591.147238][ T9407] usb usb3-port1: attempt power cycle [ 591.155709][ T926] usb 4-1: device descriptor read/64, error -71 [ 591.394311][ T926] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 591.462322][T13729] dvmrp1: left allmulticast mode [ 591.468084][T13729] dvmrp8: left allmulticast mode [ 591.484244][ T9407] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 591.515191][ T9407] usb 3-1: device descriptor read/8, error -71 [ 591.794538][ T926] usb 4-1: device descriptor read/64, error -71 [ 591.911809][ T926] usb usb4-port1: attempt power cycle [ 591.936536][ T9407] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 591.968618][ T9407] usb 3-1: device descriptor read/8, error -71 [ 592.084757][ T9407] usb usb3-port1: unable to enumerate USB device [ 592.180680][T13736] overlayfs: failed to resolve './file1': -2 [ 592.284787][ T926] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 592.314774][ T926] usb 4-1: device descriptor read/8, error -71 [ 592.624923][ T926] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 592.777691][T13743] netlink: zone id is out of range [ 592.782994][T13743] netlink: zone id is out of range [ 592.788378][T13743] netlink: zone id is out of range [ 592.793622][T13743] netlink: zone id is out of range [ 592.798924][T13743] netlink: zone id is out of range [ 592.804588][T13743] netlink: zone id is out of range [ 592.809775][T13743] netlink: zone id is out of range [ 592.815112][T13743] netlink: zone id is out of range [ 592.820361][T13743] netlink: zone id is out of range [ 592.825683][T13743] netlink: zone id is out of range [ 592.949492][ T926] usb 4-1: device descriptor read/8, error -71 [ 593.244085][ T926] usb usb4-port1: unable to enumerate USB device [ 593.821564][T13757] tipc: Enabling of bearer rejected, failed to enable media [ 595.228899][T13794] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2172'. [ 595.336097][T13777] loop8: detected capacity change from 78 to 79 [ 595.835149][T13809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2174'. [ 596.634805][T13837] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2185'. [ 597.575979][T13848] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 599.230282][T13870] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 599.281881][T13870] net_ratelimit: 8 callbacks suppressed [ 599.281898][T13870] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 599.499942][T13878] team0: entered allmulticast mode [ 599.530171][T13878] team_slave_0: entered allmulticast mode [ 599.552504][T13878] team_slave_1: entered allmulticast mode [ 599.575190][T13878] geneve0: entered allmulticast mode [ 599.617238][T13878] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 599.645963][T13882] block device autoloading is deprecated and will be removed. [ 601.005681][T13912] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 601.670754][T13931] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2214'. [ 601.681940][T13931] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2214'. [ 601.696714][T13931] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2214'. [ 601.706149][T13931] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2214'. [ 601.715228][T13931] netlink: 'syz.5.2214': attribute type 6 has an invalid length. [ 602.035500][T13903] ALSA: mixer_oss: invalid index 40000 [ 602.941911][T13959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 603.007329][T13961] syz.2.2220: attempt to access beyond end of device [ 603.007329][T13961] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 603.027883][T13961] syz.2.2220: attempt to access beyond end of device [ 603.027883][T13961] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 603.042196][T13961] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 603.054289][T13961] syz.2.2220: attempt to access beyond end of device [ 603.054289][T13961] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 603.071728][T13961] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 603.139915][T13961] syz.2.2220: attempt to access beyond end of device [ 603.139915][T13961] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 603.159537][T13961] syz.2.2220: attempt to access beyond end of device [ 603.159537][T13961] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 603.192158][T13961] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 603.243430][T13961] syz.2.2220: attempt to access beyond end of device [ 603.243430][T13961] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 603.452406][T13961] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 603.758120][T13961] syz.2.2220: attempt to access beyond end of device [ 603.758120][T13961] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 603.869607][T13961] syz.2.2220: attempt to access beyond end of device [ 603.869607][T13961] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 603.909117][T13961] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 603.920953][T13961] syz.2.2220: attempt to access beyond end of device [ 603.920953][T13961] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 603.939613][T13961] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 603.952157][T13961] syz.2.2220: attempt to access beyond end of device [ 603.952157][T13961] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 603.969515][T13961] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 603.979999][T13961] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 603.993664][T13961] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 604.192724][T13977] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2228'. [ 605.304422][ T5956] usb 4-1: new low-speed USB device number 61 using dummy_hcd [ 605.307670][T13999] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 605.446674][ T5956] usb 4-1: device descriptor read/64, error -71 [ 605.504586][ T5904] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 605.587577][ T30] audit: type=1326 audit(1755958478.039:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14016 comm="syz.4.2241" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe9fb38ebe9 code=0x0 [ 605.609223][ T30] audit: type=1326 audit(1755958478.039:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14016 comm="syz.4.2241" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe9fb38ebe9 code=0x0 [ 605.664264][ T5904] usb 3-1: Using ep0 maxpacket: 8 [ 605.670731][ T5904] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 605.681107][ T5904] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 605.691909][ T5904] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 605.702099][ T5904] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 605.715579][ T5956] usb 4-1: new low-speed USB device number 62 using dummy_hcd [ 605.723470][ T5904] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 605.733507][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.864288][ T5956] usb 4-1: device descriptor read/64, error -71 [ 605.977358][ T5956] usb usb4-port1: attempt power cycle [ 606.003225][ T5904] usb 3-1: usb_control_msg returned -71 [ 606.017696][ T5904] usbtmc 3-1:16.0: can't read capabilities [ 606.034667][ T5904] usb 3-1: USB disconnect, device number 68 [ 606.041955][T14024] netlink: 566 bytes leftover after parsing attributes in process `syz.5.2242'. [ 606.764292][ T5956] usb 4-1: new low-speed USB device number 63 using dummy_hcd [ 606.795140][ T5956] usb 4-1: device descriptor read/8, error -71 [ 607.034478][ T5956] usb 4-1: new low-speed USB device number 64 using dummy_hcd [ 607.064917][ T5956] usb 4-1: device descriptor read/8, error -71 [ 607.142266][T14036] overlayfs: missing 'lowerdir' [ 607.178445][ T5956] usb usb4-port1: unable to enumerate USB device [ 607.400537][ T926] libceph: connect (1)[c::]:6789 error -101 [ 607.409497][ T926] libceph: mon0 (1)[c::]:6789 connect error [ 607.490598][T14057] overlayfs: failed to resolve './file1': -2 [ 607.501321][T14056] netlink: 'syz.1.2254': attribute type 2 has an invalid length. [ 607.694911][ T926] libceph: connect (1)[c::]:6789 error -101 [ 607.701026][ T926] libceph: mon0 (1)[c::]:6789 connect error [ 608.225537][ T9407] libceph: connect (1)[c::]:6789 error -101 [ 608.231564][ T9407] libceph: mon0 (1)[c::]:6789 connect error [ 608.237872][T14049] ceph: No mds server is up or the cluster is laggy [ 609.402957][T14091] FAULT_INJECTION: forcing a failure. [ 609.402957][T14091] name failslab, interval 1, probability 0, space 0, times 1 [ 609.445055][T14091] CPU: 0 UID: 0 PID: 14091 Comm: syz.3.2263 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 609.445083][T14091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 609.445098][T14091] Call Trace: [ 609.445109][T14091] [ 609.445118][T14091] dump_stack_lvl+0x189/0x250 [ 609.445163][T14091] ? __pfx____ratelimit+0x10/0x10 [ 609.445184][T14091] ? __pfx_dump_stack_lvl+0x10/0x10 [ 609.445207][T14091] ? __pfx__printk+0x10/0x10 [ 609.445238][T14091] ? __pfx___might_resched+0x10/0x10 [ 609.445259][T14091] ? fs_reclaim_acquire+0x7d/0x100 [ 609.445288][T14091] should_fail_ex+0x414/0x560 [ 609.445315][T14091] should_failslab+0xa8/0x100 [ 609.445338][T14091] __kmalloc_noprof+0xcb/0x4f0 [ 609.445356][T14091] ? kfree+0x4d/0x440 [ 609.445382][T14091] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 609.445420][T14091] tomoyo_realpath_from_path+0xe3/0x5d0 [ 609.445448][T14091] ? tomoyo_domain+0xda/0x130 [ 609.445480][T14091] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 609.445502][T14091] tomoyo_path_number_perm+0x1e8/0x5a0 [ 609.445526][T14091] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 609.445567][T14091] ? __lock_acquire+0xab9/0xd20 [ 609.445611][T14091] ? __fget_files+0x2a/0x420 [ 609.445636][T14091] ? __fget_files+0x2a/0x420 [ 609.445657][T14091] ? __fget_files+0x3a0/0x420 [ 609.445678][T14091] ? __fget_files+0x2a/0x420 [ 609.445704][T14091] security_file_ioctl+0xcb/0x2d0 [ 609.445730][T14091] __se_sys_ioctl+0x47/0x170 [ 609.445761][T14091] do_syscall_64+0xfa/0x3b0 [ 609.445782][T14091] ? lockdep_hardirqs_on+0x9c/0x150 [ 609.445803][T14091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.445824][T14091] ? clear_bhb_loop+0x60/0xb0 [ 609.445848][T14091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.445867][T14091] RIP: 0033:0x7f750338ebe9 [ 609.445889][T14091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 609.445908][T14091] RSP: 002b:00007f750412a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 609.445929][T14091] RAX: ffffffffffffffda RBX: 00007f75035b5fa0 RCX: 00007f750338ebe9 [ 609.445945][T14091] RDX: 0000200000000200 RSI: 0000000000001277 RDI: 0000000000000003 [ 609.445958][T14091] RBP: 00007f750412a090 R08: 0000000000000000 R09: 0000000000000000 [ 609.445970][T14091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 609.445982][T14091] R13: 00007f75035b6038 R14: 00007f75035b5fa0 R15: 00007fffb8bdb1a8 [ 609.446016][T14091] [ 609.446025][T14091] ERROR: Out of memory at tomoyo_realpath_from_path. [ 611.113739][T14118] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 611.674314][ T5956] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 611.685596][T14130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2278'. [ 611.704537][T14130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2278'. [ 611.839141][ T5956] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 611.851977][ T5956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.869080][ T5956] usb 4-1: config 0 descriptor?? [ 613.413040][T14153] fuse: Bad value for 'fd' [ 614.954943][T14121] netlink: 'syz.3.2277': attribute type 1 has an invalid length. [ 615.049070][T14156] bad cache= option: no%e [ 615.049070][T14156] [ 615.056054][T14156] CIFS: VFS: bad cache= option: no%e [ 615.183771][ T5956] usb 4-1: Cannot set autoneg [ 615.205217][ T5956] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 615.244612][ T5956] usb 4-1: USB disconnect, device number 65 [ 615.385264][T14183] gre1: entered allmulticast mode [ 615.406924][T14182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2294'. [ 615.440338][T14182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2294'. [ 615.560851][T14192] bridge0: entered allmulticast mode [ 615.580042][T14192] pim6reg: entered allmulticast mode [ 615.602387][T14192] pim6reg: left allmulticast mode [ 615.609720][T14192] bridge0: left allmulticast mode [ 616.645828][T14211] bond0: (slave bond_slave_1): Releasing backup interface [ 617.913851][T14231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2309'. [ 618.569915][T14234] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2308'. [ 618.598213][T14230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2309'. [ 618.608365][T14234] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2308'. [ 618.728438][ T30] audit: type=1326 audit(1755958491.139:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14217 comm="syz.3.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750338ebe9 code=0x7ffc0000 [ 618.795813][ T30] audit: type=1326 audit(1755958491.139:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14217 comm="syz.3.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750338ebe9 code=0x7ffc0000 [ 618.851726][ T30] audit: type=1326 audit(1755958491.159:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14217 comm="syz.3.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f750332ade9 code=0x7ffc0000 [ 618.885174][ T30] audit: type=1326 audit(1755958491.159:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14217 comm="syz.3.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f750332ade9 code=0x7ffc0000 [ 618.962064][ T30] audit: type=1326 audit(1755958491.159:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14217 comm="syz.3.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f750338ebe9 code=0x7ffc0000 [ 619.001368][ T30] audit: type=1326 audit(1755958491.159:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14217 comm="syz.3.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750338ebe9 code=0x7ffc0000 [ 619.033501][ T30] audit: type=1326 audit(1755958491.159:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14217 comm="syz.3.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750338ebe9 code=0x7ffc0000 [ 619.058159][ T30] audit: type=1326 audit(1755958491.179:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14217 comm="syz.3.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f750332ade9 code=0x7ffc0000 [ 619.084445][ T30] audit: type=1326 audit(1755958491.179:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14217 comm="syz.3.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f750332ade9 code=0x7ffc0000 [ 619.114246][ T30] audit: type=1326 audit(1755958491.179:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14217 comm="syz.3.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f750332ade9 code=0x7ffc0000 [ 619.378504][T14248] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2310'. [ 619.680598][T14262] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2318'. [ 619.825988][T14271] overlayfs: failed to clone upperpath [ 619.928914][T14276] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2323'. [ 619.965899][T14276] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2323'. [ 619.975682][T14276] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2323'. [ 619.984978][T14276] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2323'. [ 620.052699][T14284] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 620.923239][ T9407] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 621.280956][ T9407] usb 3-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 621.319388][ T9407] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.586392][ T9407] usb 3-1: Product: syz [ 621.590607][ T9407] usb 3-1: Manufacturer: syz [ 621.634291][ T9407] usb 3-1: SerialNumber: syz [ 621.642343][ T9407] usb 3-1: config 0 descriptor?? [ 621.656765][ T9407] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 622.843339][ T9407] sonixb 3-1:0.0: Error reading register 00: -110 [ 624.531269][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.539309][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.675454][ T5904] usb 3-1: USB disconnect, device number 69 [ 624.706280][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 624.706291][ T30] audit: type=1326 audit(1755958497.149:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14323 comm="syz.1.2336" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5bcff8ebe9 code=0x0 [ 624.887488][T14329] __nla_validate_parse: 42 callbacks suppressed [ 624.887509][T14329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2338'. [ 625.848366][ T5956] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 627.204258][ T5956] usb 3-1: Using ep0 maxpacket: 32 [ 627.416711][T14362] netlink: 'syz.3.2345': attribute type 10 has an invalid length. [ 627.729290][ T5956] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 627.737068][ T5956] usb 3-1: can't read configurations, error -61 [ 627.894278][ T5956] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 628.284259][ T5956] usb 3-1: device not accepting address 71, error -71 [ 628.299887][ T5956] usb usb3-port1: attempt power cycle [ 628.453825][T14382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2353'. [ 629.474389][ T5956] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 629.501841][ T30] audit: type=1326 audit(1755958501.949:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14410 comm="syz.3.2364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750338ebe9 code=0x7ffc0000 [ 629.539762][ T30] audit: type=1326 audit(1755958501.949:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14410 comm="syz.3.2364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750338ebe9 code=0x7ffc0000 [ 629.562266][ T30] audit: type=1326 audit(1755958501.949:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14410 comm="syz.3.2364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f750338ebe9 code=0x7ffc0000 [ 629.588522][ T30] audit: type=1326 audit(1755958501.949:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14410 comm="syz.3.2364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750338ebe9 code=0x7ffc0000 [ 629.611094][ T30] audit: type=1326 audit(1755958501.979:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14410 comm="syz.3.2364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f750338ebe9 code=0x7ffc0000 [ 629.643349][ T30] audit: type=1326 audit(1755958501.979:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14410 comm="syz.3.2364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750338ebe9 code=0x7ffc0000 [ 629.643403][ T30] audit: type=1326 audit(1755958501.979:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14410 comm="syz.3.2364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750338ebe9 code=0x7ffc0000 [ 629.643448][ T30] audit: type=1326 audit(1755958501.989:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14410 comm="syz.3.2364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f750338ebe9 code=0x7ffc0000 [ 629.643494][ T30] audit: type=1326 audit(1755958501.989:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14410 comm="syz.3.2364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750338ebe9 code=0x7ffc0000 [ 629.801324][ T5956] usb 3-1: Using ep0 maxpacket: 8 [ 629.829040][ T5956] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 629.838996][ T5956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.847587][ T5956] usb 3-1: Product: syz [ 629.851821][ T5956] usb 3-1: Manufacturer: syz [ 629.856599][ T5956] usb 3-1: SerialNumber: syz [ 629.865189][ T5956] usb 3-1: config 0 descriptor?? [ 629.906957][ T5956] gspca_main: sq930x-2.14.0 probing 2770:930c [ 631.674265][ T5956] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 631.731325][T14433] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2369'. [ 631.914619][ T5956] gspca_sq930x: Sensor ov9630 not yet treated [ 631.924476][ T5956] sq930x 3-1:0.0: probe with driver sq930x failed with error -22 [ 631.969736][ T5956] usb 3-1: USB disconnect, device number 73 [ 633.926925][T14468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2380'. [ 634.384544][ T5904] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 634.824786][ T5904] usb 4-1: Using ep0 maxpacket: 16 [ 634.835720][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 634.860462][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 634.884255][ T5904] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 634.914266][ T5904] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 634.933545][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.957005][ T5904] usb 4-1: config 0 descriptor?? [ 635.132854][ T3521] af_packet: tpacket_rcv: packet too big, clamped from 38 to 4294967286. macoff=82 [ 635.371075][ T5904] microsoft 0003:045E:07DA.0013: report_id 13667852 is invalid [ 635.381417][ T5904] microsoft 0003:045E:07DA.0013: item 0 4 1 8 parsing failed [ 635.392396][ T5904] microsoft 0003:045E:07DA.0013: parse failed [ 635.400200][ T5904] microsoft 0003:045E:07DA.0013: probe with driver microsoft failed with error -22 [ 635.492501][T14487] 9pnet_fd: Insufficient options for proto=fd [ 635.584545][ T5904] usb 4-1: USB disconnect, device number 66 [ 635.807136][T14499] overlayfs: failed to clone upperpath [ 636.228257][T14516] overlay: Unknown parameter 'seclabel' [ 637.722877][T14544] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2403'. [ 637.759474][T14546] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2401'. [ 638.021035][ T5926] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 638.188152][ T5926] usb 3-1: config 54 has an invalid descriptor of length 65, skipping remainder of the config [ 638.214695][ T5926] usb 3-1: config 54 has 0 interfaces, different from the descriptor's value: 1 [ 638.250316][ T5926] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 638.270317][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.294225][ T5926] usb 3-1: Product: syz [ 638.307709][ T5926] usb 3-1: Manufacturer: syz [ 638.322575][ T5926] usb 3-1: SerialNumber: syz [ 640.138987][T14587] 9pnet_fd: Insufficient options for proto=fd [ 640.474685][ T5956] usb 3-1: USB disconnect, device number 74 [ 641.428935][T14562] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.436552][T14562] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.446897][T14562] bridge0: entered allmulticast mode [ 641.542232][T14595] 8021q: adding VLAN 0 to HW filter on device team0 [ 641.559612][T14595] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 641.589478][T14597] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 642.129551][T14626] vcan0: tx drop: invalid da for name 0xf7fffffffffffffe [ 642.139662][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 642.139677][ T30] audit: type=1326 audit(1755958770.589:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14625 comm="syz.5.2427" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f23e3b8ebe9 code=0x0 [ 642.201552][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 642.211948][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 642.223516][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 642.236493][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 642.247919][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 642.261103][ T5851] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 642.276438][ T5851] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 642.286214][ T5851] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 642.307274][ T5851] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 642.315145][ T5851] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 642.381090][T14630] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2427'. [ 642.783319][T14638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2428'. [ 642.904929][ T6936] bridge0: port 1(syz_tun) entered disabled state [ 642.938783][ T6936] syz_tun (unregistering): left allmulticast mode [ 642.954185][ T6936] syz_tun (unregistering): left promiscuous mode [ 642.979621][ T6936] bridge0: port 1(syz_tun) entered disabled state [ 643.088835][T14627] chnl_net:caif_netlink_parms(): no params data found [ 643.140881][ T6936] raw-gadget.0 gadget.1: failed to queue disconnect event [ 643.321313][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.880699][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.994041][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.016527][T14627] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.023842][T14627] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.031803][T14627] bridge_slave_0: entered allmulticast mode [ 644.040376][T14627] bridge_slave_0: entered promiscuous mode [ 644.049383][T14627] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.061497][T14627] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.069427][T14627] bridge_slave_1: entered allmulticast mode [ 644.078083][T14627] bridge_slave_1: entered promiscuous mode [ 644.092029][T14673] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2435'. [ 644.104072][T14673] netlink: 62 bytes leftover after parsing attributes in process `syz.3.2435'. [ 644.238525][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.324012][T14627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 644.362770][T14627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 644.404558][ T5851] Bluetooth: hci5: command tx timeout [ 644.476585][T14627] team0: Port device team_slave_0 added [ 644.504389][ T5926] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 644.530083][T14627] team0: Port device team_slave_1 added [ 644.664389][ T5926] usb 4-1: Using ep0 maxpacket: 16 [ 644.821114][ T5926] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 644.855825][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.896325][ T5926] usb 4-1: Product: syz [ 644.925074][ T5926] usb 4-1: Manufacturer: syz [ 644.948407][ T5926] usb 4-1: SerialNumber: syz [ 645.006691][ T5926] usb 4-1: config 0 descriptor?? [ 645.026334][ T5926] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 645.039879][ T5926] usb 4-1: Detected FT-X [ 645.111219][T14627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 645.118535][T14627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 645.158926][T14627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 645.219492][ T5926] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 645.532445][ T12] geneve0 (unregistering): left allmulticast mode [ 645.544530][ T12] team0: Port device geneve0 removed [ 645.741273][ T5926] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 645.843870][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 645.885681][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 645.916364][ T12] bond0 (unregistering): Released all slaves [ 645.936407][T14627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 645.953266][T14677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.954172][T14627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 645.962178][T14677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.990140][T14627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 646.147515][T14711] netlink: 'syz.2.2447': attribute type 21 has an invalid length. [ 646.173634][T14627] hsr_slave_0: entered promiscuous mode [ 646.180492][T14627] hsr_slave_1: entered promiscuous mode [ 646.191663][T14627] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 646.201428][T14627] Cannot create hsr debugfs directory [ 646.221498][T14677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.231597][T14677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.486258][ T5851] Bluetooth: hci5: command tx timeout [ 646.709587][T14627] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 646.723375][T14627] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 646.742499][T14627] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 646.751388][ T926] usb 4-1: USB disconnect, device number 67 [ 646.778102][ T926] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 646.787883][ T926] ftdi_sio 4-1:0.0: device disconnected [ 646.806485][T14627] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 647.007224][T14627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 647.060122][T14627] 8021q: adding VLAN 0 to HW filter on device team0 [ 647.092680][T14627] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 647.103213][T14627] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 647.261261][ T7465] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.268415][ T7465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 647.278801][ T7465] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.285902][ T7465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 648.198520][ T30] audit: type=1326 audit(1755958776.649:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14752 comm="syz.2.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7749d8ebe9 code=0x7ffc0000 [ 648.238992][ T30] audit: type=1326 audit(1755958776.669:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14752 comm="syz.2.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7749d8ebe9 code=0x7ffc0000 [ 648.304194][ T30] audit: type=1326 audit(1755958776.669:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14752 comm="syz.2.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7749d8d550 code=0x7ffc0000 [ 648.330737][ T30] audit: type=1326 audit(1755958776.679:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14752 comm="syz.2.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7749d8d550 code=0x7ffc0000 [ 648.378654][T14627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 648.409232][ T30] audit: type=1326 audit(1755958776.679:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14752 comm="syz.2.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7749d8ebe9 code=0x7ffc0000 [ 648.450785][ T30] audit: type=1326 audit(1755958776.679:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14752 comm="syz.2.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7749d8ebe9 code=0x7ffc0000 [ 648.454617][T14627] veth0_vlan: entered promiscuous mode [ 648.483694][ T30] audit: type=1326 audit(1755958776.729:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14752 comm="syz.2.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7749d8ebe9 code=0x7ffc0000 [ 648.539721][T14627] veth1_vlan: entered promiscuous mode [ 648.544263][ T30] audit: type=1326 audit(1755958776.729:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14752 comm="syz.2.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7749d8ebe9 code=0x7ffc0000 [ 648.569166][ T5851] Bluetooth: hci5: command tx timeout [ 648.577717][ T30] audit: type=1326 audit(1755958776.729:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14752 comm="syz.2.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7749d8ebe9 code=0x7ffc0000 [ 648.608624][ T30] audit: type=1326 audit(1755958776.739:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14752 comm="syz.2.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f7749d8ebe9 code=0x7ffc0000 [ 648.624353][T14762] syz.3.2456 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 648.707821][T14627] veth0_macvtap: entered promiscuous mode [ 648.823414][T14627] veth1_macvtap: entered promiscuous mode [ 648.860557][T14627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 648.871328][T14773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2459'. [ 648.912077][T14627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 648.923722][T14627] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.943314][T14627] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.953680][T14627] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.963783][T14627] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.653427][ T5851] Bluetooth: hci5: command tx timeout [ 650.701408][ T12] hsr_slave_0: left promiscuous mode [ 650.889269][ T12] hsr_slave_1: left promiscuous mode [ 650.913519][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 650.954197][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 651.028015][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 651.058300][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 651.356790][ T12] veth1_macvtap: left promiscuous mode [ 651.362801][ T12] veth0_macvtap: left promiscuous mode [ 651.369371][ T12] veth1_vlan: left promiscuous mode [ 651.382687][ T12] veth0_vlan: left promiscuous mode [ 652.626103][ T12] team_slave_1 (unregistering): left allmulticast mode [ 652.647351][ T12] team0 (unregistering): Port device team_slave_1 removed [ 652.696523][ T12] team_slave_0 (unregistering): left allmulticast mode [ 652.707333][ T12] team0 (unregistering): Port device team_slave_0 removed [ 653.267571][ T3458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 653.279592][ T3458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.323510][ T3458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 653.358121][ T3458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.539611][T14830] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 654.066747][ T12] IPVS: stop unused estimator thread 0... [ 654.393346][T14856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2482'. [ 654.402706][T14856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2482'. [ 654.429835][T14856] netlink: 'syz.3.2482': attribute type 11 has an invalid length. [ 656.137591][T14915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2498'. [ 656.303849][T14918] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2496'. [ 657.054052][ T5905] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 657.364282][ T5905] usb 3-1: Using ep0 maxpacket: 32 [ 657.416734][ T5905] usb 3-1: config 0 has an invalid interface number: 232 but max is 0 [ 657.432159][ T5905] usb 3-1: config 0 has no interface number 0 [ 657.550920][ T5905] usb 3-1: config 0 interface 232 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 657.568024][ T5905] usb 3-1: New USB device found, idVendor=2040, idProduct=651b, bcdDevice=29.5a [ 657.577199][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.681978][ T5905] usb 3-1: Product: syz [ 657.691267][ T5905] usb 3-1: Manufacturer: syz [ 657.699935][ T5905] usb 3-1: SerialNumber: syz [ 657.783489][T14928] overlayfs: failed to clone lowerpath [ 657.820170][ T5905] usb 3-1: config 0 descriptor?? [ 658.303547][T14899] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 658.319718][ T5905] em28xx 3-1:0.232: New device syz syz @ 480 Mbps (2040:651b, interface 232, class 232) [ 658.398739][ T5905] em28xx 3-1:0.232: Video interface 232 found: bulk [ 658.441583][T14927] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2494'. [ 658.912113][ T5905] em28xx 3-1:0.232: unknown em28xx chip ID (0) [ 659.035087][ T5905] em28xx 3-1:0.232: reading from i2c device at 0xa0 failed (error=-5) [ 659.084231][ T5905] em28xx 3-1:0.232: board has no eeprom [ 659.156325][ T5905] em28xx 3-1:0.232: Identified as Hauppauge WinTV HVR 950 (card=16) [ 659.156365][ T5905] em28xx 3-1:0.232: analog set to bulk mode. [ 659.367249][ T5905] usb 3-1: USB disconnect, device number 75 [ 659.445041][ T5905] em28xx 3-1:0.232: Disconnecting em28xx [ 659.467759][ T10] em28xx 3-1:0.232: Registering V4L2 extension [ 659.543039][T14936] ALSA: mixer_oss: invalid index 40000 [ 659.570534][T14942] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2504'. [ 659.581969][T14942] netem: unknown loss type 0 [ 659.589012][T14942] netem: change failed [ 659.669528][ T10] em28xx 3-1:0.232: Config register raw data: 0xffffffed [ 659.679650][ T10] em28xx 3-1:0.232: AC97 chip type couldn't be determined [ 659.687468][ T10] em28xx 3-1:0.232: No AC97 audio processor [ 659.693369][ T10] em28xx 3-1:0.232: em28xx_v4l2_init: Error while setting audio - error [-19]! [ 659.708384][ T10] em28xx 3-1:0.232: Binding DVB extension [ 659.717110][ T10] em28xx 3-1:0.232: no endpoint for DVB mode and transfer type 0 [ 659.729638][ T10] em28xx 3-1:0.232: failed to pre-allocate USB transfer buffers for DVB. [ 659.739317][ T10] em28xx 3-1:0.232: Registering input extension [ 659.747593][ T5905] em28xx 3-1:0.232: Closing input extension [ 659.769466][ T5905] em28xx 3-1:0.232: Freeing device [ 660.244351][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 660.407365][ T10] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 660.417400][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 660.424599][ T10] usb 2-1: New USB device found, idVendor=056a, idProduct=0333, bcdDevice= 0.00 [ 660.433901][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.480051][ T10] usb 2-1: config 0 descriptor?? [ 660.735207][T14967] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2515'. [ 660.747176][T14967] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2515'. [ 661.108471][T14949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.136215][T14949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.264705][ T10] usb 2-1: USB disconnect, device number 19 [ 661.734381][ T5926] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 661.924410][ T5926] usb 2-1: Using ep0 maxpacket: 8 [ 661.951362][ T5926] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 661.969485][ T5926] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 661.981528][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 661.997613][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 662.011572][ T5926] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 662.032568][ T5926] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 662.042061][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 662.056031][ T5926] usb 2-1: Product: syz [ 662.060215][ T5926] usb 2-1: Manufacturer: syz [ 662.069209][ T5926] usb 2-1: SerialNumber: syz [ 662.146745][ T5926] usb 2-1: config 0 descriptor?? [ 662.409446][ T5926] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 662.423200][ T5926] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 662.448105][ T5926] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 662.469087][ T5926] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 662.478907][T15014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2526'. [ 662.481792][ T5926] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 662.497716][T15014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2526'. [ 662.585338][T15016] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2527'. [ 662.600603][T15017] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2527'. [ 662.603201][T15016] vlan2: entered promiscuous mode [ 662.761581][ T5926] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 662.785044][T15017] vlan2: entered promiscuous mode [ 663.798654][ T5926] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 663.807403][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 663.807418][ T30] audit: type=1326 audit(1755958792.249:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14986 comm="syz.1.2520" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f20c258ebe9 code=0x0 [ 663.834578][ C1] vkms_vblank_simulate: vblank timer overrun [ 663.841476][ T5926] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 663.852376][T15025] netlink: 'syz.2.2529': attribute type 3 has an invalid length. [ 663.857217][ T30] audit: type=1326 audit(1755958792.249:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14986 comm="syz.1.2520" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f20c258ebe9 code=0x0 [ 663.888860][ T5926] usb 2-1: USB disconnect, device number 20 [ 663.904975][T15025] netlink: 766 bytes leftover after parsing attributes in process `syz.2.2529'. [ 665.332845][T15031] syz.4.2530 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 665.344253][T15031] CPU: 0 UID: 0 PID: 15031 Comm: syz.4.2530 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 665.344279][T15031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 665.344292][T15031] Call Trace: [ 665.344299][T15031] [ 665.344308][T15031] dump_stack_lvl+0x189/0x250 [ 665.344339][T15031] ? __pfx_dump_stack_lvl+0x10/0x10 [ 665.344361][T15031] ? __pfx__printk+0x10/0x10 [ 665.344401][T15031] dump_header+0xd3/0x480 [ 665.344432][T15031] oom_kill_process+0x3b6/0x950 [ 665.344465][T15031] out_of_memory+0xf09/0x12a0 [ 665.344507][T15031] ? __pfx_out_of_memory+0x10/0x10 [ 665.344546][T15031] mem_cgroup_out_of_memory+0x145/0x240 [ 665.344573][T15031] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 665.344610][T15031] ? _raw_spin_unlock+0x28/0x50 [ 665.344638][T15031] ? memcg1_oom_prepare+0x37f/0x450 [ 665.344671][T15031] try_charge_memcg+0xdff/0x1290 [ 665.344711][T15031] ? __pfx_try_charge_memcg+0x10/0x10 [ 665.344753][T15031] charge_memcg+0x9f/0x180 [ 665.344774][T15031] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 665.344795][T15031] mem_cgroup_swapin_charge_folio+0x262/0x390 [ 665.344820][T15031] __read_swap_cache_async+0x28c/0x510 [ 665.344859][T15031] swap_cluster_readahead+0x4cf/0x5f0 [ 665.344893][T15031] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 665.344934][T15031] ? get_vma_policy+0x27c/0x3c0 [ 665.344958][T15031] swapin_readahead+0x17d/0xb50 [ 665.344984][T15031] ? __pfx_filemap_get_entry+0x10/0x10 [ 665.345023][T15031] ? __pfx_swapin_readahead+0x10/0x10 [ 665.345053][T15031] ? __filemap_get_folio+0x9a6/0xaf0 [ 665.345092][T15031] ? swap_cache_get_folio+0xae/0x3b0 [ 665.345122][T15031] do_swap_page+0x525/0x5ac0 [ 665.345173][T15031] ? __lock_acquire+0xab9/0xd20 [ 665.345205][T15031] ? do_swap_page+0x184/0x5ac0 [ 665.345232][T15031] ? __pfx_do_swap_page+0x10/0x10 [ 665.345262][T15031] ? __pfx_default_wake_function+0x10/0x10 [ 665.345295][T15031] ? ___pte_offset_map+0x21f/0x2c0 [ 665.345318][T15031] ? pte_offset_map_rw_nolock+0xea/0x160 [ 665.345340][T15031] __handle_mm_fault+0xf3e/0x5620 [ 665.345367][T15031] ? __lock_acquire+0xab9/0xd20 [ 665.345405][T15031] ? __pfx___handle_mm_fault+0x10/0x10 [ 665.345434][T15031] ? lock_vma_under_rcu+0xf8/0x710 [ 665.345466][T15031] ? lock_vma_under_rcu+0xf8/0x710 [ 665.345487][T15031] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 665.345516][T15031] handle_mm_fault+0x2d5/0x7f0 [ 665.345557][T15031] do_user_addr_fault+0xa81/0x1390 [ 665.345593][T15031] ? rcu_is_watching+0x15/0xb0 [ 665.345616][T15031] ? trace_page_fault_user+0x84/0x1e0 [ 665.345646][T15031] exc_page_fault+0x76/0xf0 [ 665.345669][T15031] asm_exc_page_fault+0x26/0x30 [ 665.345687][T15031] RIP: 0033:0x7fe9fb26563c [ 665.345704][T15031] Code: 66 0f 1f 44 00 00 69 3d 76 00 e8 00 e8 03 00 00 48 8d 1d 77 09 35 00 e8 12 95 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 665.345721][T15031] RSP: 002b:00007fff4e60d440 EFLAGS: 00010287 [ 665.345739][T15031] RAX: 0000000000000000 RBX: 00007fe9fb5b6090 RCX: 0000000000000000 [ 665.345752][T15031] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555e804808 [ 665.345763][T15031] RBP: 00007fe9fb5b7da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 665.345777][T15031] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000a2d35 [ 665.345789][T15031] R13: 00007fe9fb5b6090 R14: ffffffffffffffff R15: 00007fff4e60d550 [ 665.345823][T15031] [ 665.345830][T15031] memory: usage 305120kB, limit 307200kB, failcnt 2450 [ 665.680006][T15031] memory+swap: usage 219528kB, limit 9007199254740988kB, failcnt 0 [ 665.687978][T15031] kmem: usage 217176kB, limit 9007199254740988kB, failcnt 0 [ 665.695337][T15031] Memory cgroup stats for /syz4: [ 665.695657][T15031] cache 0 [ 665.703526][T15031] rss 24576 [ 665.706679][T15031] rss_huge 0 [ 665.709883][T15031] shmem 0 [ 665.712818][T15031] mapped_file 0 [ 665.716343][T15031] dirty 0 [ 665.719283][T15031] writeback 0 [ 665.722569][T15031] workingset_refault_anon 162 [ 665.727307][T15031] workingset_refault_file 0 [ 665.731807][T15031] swap 212992 [ 665.735156][T15031] swapcached 28672 [ 665.738883][T15031] pgpgin 343365 [ 665.742342][T15031] pgpgout 343357 [ 665.745961][T15031] pgfault 382132 [ 665.749506][T15031] pgmajfault 122 [ 665.753053][T15031] inactive_anon 0 [ 665.756756][T15031] active_anon 28672 [ 665.760563][T15031] inactive_file 0 [ 665.764271][T15031] active_file 0 [ 665.767733][T15031] unevictable 0 [ 665.771190][T15031] hierarchical_memory_limit 314572800 [ 665.776659][T15031] hierarchical_memsw_limit 9223372036854771712 [ 665.782817][T15031] total_cache 0 [ 665.786346][T15031] total_rss 24576 [ 665.789977][T15031] total_rss_huge 0 [ 665.793693][T15031] total_shmem 0 [ 665.797229][T15031] total_mapped_file 0 [ 665.801214][T15031] total_dirty 0 [ 665.804721][T15031] total_writeback 0 [ 665.808528][T15031] total_workingset_refault_anon 162 [ 665.813726][T15031] total_workingset_refault_file 0 [ 665.818810][T15031] total_swap 212992 [ 665.822619][T15031] total_swapcached 28672 [ 665.826910][T15031] total_pgpgin 343365 [ 665.830888][T15031] total_pgpgout 343357 [ 665.835014][T15031] total_pgfault 382132 [ 665.839083][T15031] total_pgmajfault 122 [ 665.843153][T15031] total_inactive_anon 0 [ 665.848715][T15031] total_active_anon 28672 [ 665.853058][T15031] total_inactive_file 0 [ 665.857540][T15031] total_active_file 0 [ 665.861530][T15031] total_unevictable 0 [ 665.865565][T15031] anon_cost 42 [ 665.868951][T15031] file_cost 0 [ 665.872280][T15031] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.2530,pid=15031,uid=0 [ 665.889537][T15031] Memory cgroup out of memory: Killed process 15031 (syz.4.2530) total-vm:101960kB, anon-rss:1052kB, file-rss:23080kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 667.175970][T15047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 667.304406][T15062] nfs4: Unknown parameter 'dev/sequencer' [ 669.123222][T15099] FAULT_INJECTION: forcing a failure. [ 669.123222][T15099] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 669.144281][T15099] CPU: 1 UID: 0 PID: 15099 Comm: syz.1.2554 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 669.144305][T15099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 669.144315][T15099] Call Trace: [ 669.144323][T15099] [ 669.144331][T15099] dump_stack_lvl+0x189/0x250 [ 669.144358][T15099] ? __pfx____ratelimit+0x10/0x10 [ 669.144379][T15099] ? __pfx_dump_stack_lvl+0x10/0x10 [ 669.144401][T15099] ? __pfx__printk+0x10/0x10 [ 669.144428][T15099] ? __might_fault+0xb0/0x130 [ 669.144454][T15099] should_fail_ex+0x414/0x560 [ 669.144478][T15099] _copy_from_user+0x2d/0xb0 [ 669.144504][T15099] video_usercopy+0xafc/0x14f0 [ 669.144542][T15099] ? __pfx___video_do_ioctl+0x10/0x10 [ 669.144568][T15099] ? __pfx_video_usercopy+0x10/0x10 [ 669.144592][T15099] ? smack_file_ioctl+0x2a9/0x340 [ 669.144623][T15099] ? __fget_files+0x2a/0x420 [ 669.144644][T15099] ? __fget_files+0x3a0/0x420 [ 669.144669][T15099] v4l2_ioctl+0x18a/0x1e0 [ 669.144696][T15099] ? __pfx_v4l2_ioctl+0x10/0x10 [ 669.144720][T15099] __se_sys_ioctl+0xfc/0x170 [ 669.144749][T15099] do_syscall_64+0xfa/0x3b0 [ 669.144769][T15099] ? lockdep_hardirqs_on+0x9c/0x150 [ 669.144787][T15099] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.144813][T15099] ? clear_bhb_loop+0x60/0xb0 [ 669.144835][T15099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.144851][T15099] RIP: 0033:0x7f20c258ebe9 [ 669.144867][T15099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 669.144882][T15099] RSP: 002b:00007f20c33ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 669.144900][T15099] RAX: ffffffffffffffda RBX: 00007f20c27b5fa0 RCX: 00007f20c258ebe9 [ 669.144914][T15099] RDX: 0000200000000080 RSI: 00000000c0285628 RDI: 0000000000000003 [ 669.144927][T15099] RBP: 00007f20c33ac090 R08: 0000000000000000 R09: 0000000000000000 [ 669.144938][T15099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 669.144949][T15099] R13: 00007f20c27b6038 R14: 00007f20c27b5fa0 R15: 00007ffcded53d08 [ 669.144978][T15099] [ 669.204352][ T10] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 669.204484][ C1] vkms_vblank_simulate: vblank timer overrun [ 669.372006][ T10] usb 3-1: config 150 has too many interfaces: 255, using maximum allowed: 32 [ 669.372018][ C1] vkms_vblank_simulate: vblank timer overrun [ 669.380868][ C1] hrtimer: interrupt took 226759636 ns [ 669.382960][T15101] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2555'. [ 669.406866][ T10] usb 3-1: config 150 has an invalid descriptor of length 114, skipping remainder of the config [ 669.444396][ T10] usb 3-1: config 150 has 1 interface, different from the descriptor's value: 255 [ 669.481937][ C1] vkms_vblank_simulate: vblank timer overrun [ 669.481942][ T10] usb 3-1: config 150 has no interface number 0 [ 669.481977][ T10] usb 3-1: too many endpoints for config 150 interface 204 altsetting 7: 255, using maximum allowed: 30 [ 669.680017][ T10] usb 3-1: config 150 interface 204 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 669.710082][ T10] usb 3-1: config 150 interface 204 has no altsetting 0 [ 669.720030][ T10] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 669.733356][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.753915][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 669.761222][T14940] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 669.772092][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 669.780761][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 669.792170][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 669.799484][ T10] usb 3-1: Product: syz [ 669.804715][ T10] usb 3-1: Manufacturer: syz [ 669.809734][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 669.817872][ T10] usb 3-1: SerialNumber: syz [ 669.938188][T14940] usb 2-1: Using ep0 maxpacket: 16 [ 669.947292][T14940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 669.967993][T14940] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 669.993676][T14940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 670.003896][T14940] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 670.033593][T14940] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 670.044597][T14940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.052923][T14940] usb 2-1: Product: syz [ 670.077563][T14940] usb 2-1: Manufacturer: syz [ 670.082467][T14940] usb 2-1: SerialNumber: syz [ 670.093588][T14940] usb 2-1: config 0 descriptor?? [ 670.103443][T15105] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 670.116272][ C0] port100 2-1:0.0: NFC: Urb failure (status -71) [ 670.123078][T14940] port100 2-1:0.0: NFC: Could not get supported command types [ 670.229679][ T10] usb 3-1: USB disconnect, device number 76 [ 670.278690][T15108] chnl_net:caif_netlink_parms(): no params data found [ 670.356323][T14940] usb 2-1: USB disconnect, device number 21 [ 671.435372][T14940] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 671.539963][ T926] IPVS: starting estimator thread 0... [ 671.569940][T15108] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.591772][T15108] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.609150][T15108] bridge_slave_0: entered allmulticast mode [ 671.617360][T15108] bridge_slave_0: entered promiscuous mode [ 671.728319][T14940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 671.732309][T15108] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.744324][T15146] IPVS: using max 28 ests per chain, 67200 per kthread [ 671.756750][T15108] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.764033][T15108] bridge_slave_1: entered allmulticast mode [ 671.773463][T14940] usb 2-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 671.773503][T15108] bridge_slave_1: entered promiscuous mode [ 671.799440][T14940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.955761][ T5851] Bluetooth: hci2: command tx timeout [ 671.981620][T14940] usb 2-1: config 0 descriptor?? [ 672.430854][T15108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 672.448733][T15154] netlink: 4400 bytes leftover after parsing attributes in process `syz.5.2567'. [ 672.461540][T15108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 672.567603][T15108] team0: Port device team_slave_0 added [ 672.588386][T15108] team0: Port device team_slave_1 added [ 672.641457][T15108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 672.650588][T15108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 672.728573][T15108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 672.778606][T14940] nintendo 0003:057E:200E.0015: unbalanced collection at end of report description [ 672.792905][T14940] nintendo 0003:057E:200E.0015: HID parse failed [ 672.822645][T14940] nintendo 0003:057E:200E.0015: probe - fail = -22 [ 672.833079][T14940] nintendo 0003:057E:200E.0015: probe with driver nintendo failed with error -22 [ 672.869280][T15108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 672.879241][T15108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 672.912788][T15108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 672.963389][T14940] usb 2-1: USB disconnect, device number 22 [ 673.033235][T15108] hsr_slave_0: entered promiscuous mode [ 673.039905][T15108] hsr_slave_1: entered promiscuous mode [ 673.047042][T15108] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 673.055185][T15108] Cannot create hsr debugfs directory [ 673.234702][T15108] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 673.244739][T15108] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 673.260444][T15108] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 673.271492][T15108] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 673.363296][T15108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 673.405159][T15108] 8021q: adding VLAN 0 to HW filter on device team0 [ 673.423365][ T7466] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.430535][ T7466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 673.503410][ T7466] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.511355][ T7466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 673.675435][T15178] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2571'. [ 674.161373][ T5851] Bluetooth: hci2: command tx timeout [ 674.881771][T15189] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2574'. [ 675.082081][T15108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 675.520604][T15219] netlink: 'syz.2.2579': attribute type 1 has an invalid length. [ 675.585948][T15219] 8021q: adding VLAN 0 to HW filter on device bond4 [ 675.598522][T15225] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 675.788309][T15108] veth0_vlan: entered promiscuous mode [ 675.821246][T15108] veth1_vlan: entered promiscuous mode [ 675.902639][T15108] veth0_macvtap: entered promiscuous mode [ 675.929543][T15108] veth1_macvtap: entered promiscuous mode [ 675.975746][T15108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 676.026321][T15108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 676.039433][T15108] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.050873][T15108] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.071937][T15108] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.100894][T15231] netlink: 'syz.2.2581': attribute type 6 has an invalid length. [ 676.113110][T15108] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.267932][ T5851] Bluetooth: hci2: command tx timeout [ 676.304019][ T3458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.323483][ T3458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.371851][T14919] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.393236][T14919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 677.388461][T15265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.401554][T15265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 677.431402][T15261] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2557'. [ 677.592643][T15268] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2588'. [ 677.664247][ T5904] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 677.674713][ T5926] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 677.869450][ T5904] usb 2-1: Using ep0 maxpacket: 16 [ 677.877021][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 677.889787][ T5904] usb 2-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=8b.57 [ 677.899978][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.908923][ T5904] usb 2-1: Product: syz [ 677.913615][ T5904] usb 2-1: Manufacturer: syz [ 677.918667][ T5904] usb 2-1: SerialNumber: syz [ 677.964383][ T5926] usb 7-1: Using ep0 maxpacket: 16 [ 678.014003][ T5926] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 678.016224][ T5904] usb 2-1: config 0 descriptor?? [ 678.095593][ T5926] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 678.151269][ T5926] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 678.213221][ T5926] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 678.213246][ T5904] port100 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 678.259120][ T5926] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 678.377921][ T5851] Bluetooth: hci2: command tx timeout [ 678.397391][ T5926] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 678.399176][ T10] usb 2-1: USB disconnect, device number 23 [ 678.412106][ T5926] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 678.420792][ T5926] usb 7-1: SerialNumber: syz [ 678.433960][T15261] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 678.443535][ T5926] cdc_acm 7-1:1.0: Control and data interfaces are not separated! [ 678.457789][ T5926] cdc_acm 7-1:1.0: probe with driver cdc_acm failed with error -12 [ 678.655665][ T5926] usb 7-1: USB disconnect, device number 2 [ 678.709913][T15289] IPVS: set_ctl: invalid protocol: 41 224.0.0.1:20003 [ 678.738962][T15289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 678.756121][T15289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2597'. [ 678.765385][T15289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2597'. [ 678.834708][ T5904] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 678.893666][T15294] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2598'. [ 679.365752][T15299] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 679.398744][ T5904] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 679.410613][ T5904] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 679.419892][ T5904] usb 3-1: config 1 has no interface number 1 [ 679.474275][ T5904] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 679.599519][ T5904] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 679.756423][ T30] audit: type=1326 audit(1755958808.119:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15302 comm="syz.6.2600" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9d7438ebe9 code=0x0 [ 679.798876][ T5904] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 679.810540][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.831832][T15307] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2600'. [ 679.963709][ T5904] usb 3-1: Product: syz [ 679.981172][ T5904] usb 3-1: Manufacturer: syz [ 680.159783][T15311] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2601'. [ 680.173543][T15311] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2601'. [ 680.183928][T15311] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2601'. [ 680.194997][T15311] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2601'. [ 680.568668][ T5904] usb 3-1: SerialNumber: syz [ 680.855068][T15287] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 681.148424][T15316] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 681.169759][T15316] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 681.394944][T15319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2602'. [ 681.404835][T15319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2602'. [ 681.791363][ T5904] usb 3-1: can't set config #1, error -71 [ 681.798349][ T5904] usb 3-1: USB disconnect, device number 77 [ 681.912123][T15331] fuse: Unknown parameter 'gro5p_id' [ 682.094742][T15341] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2611'. [ 682.387290][T15350] netlink: 'syz.6.2614': attribute type 2 has an invalid length. [ 683.844489][ T5904] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 684.101077][T15363] delete_channel: no stack [ 684.326532][ T5904] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 684.335428][T15396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2626'. [ 684.337933][T15362] delete_channel: no stack [ 684.350698][ T5904] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 684.368073][ T5904] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 684.377853][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.386881][ T5904] usb 2-1: Product: syz [ 684.391139][ T5904] usb 2-1: Manufacturer: syz [ 684.395936][ T5904] usb 2-1: SerialNumber: syz [ 684.531894][T15399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2628'. [ 684.543867][T15399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2628'. [ 685.690478][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.697039][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.825718][ T5904] cdc_ncm 2-1:1.0: bind() failure [ 686.417052][ T5904] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 686.435687][ T5904] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 686.458625][ T5904] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 686.493058][ T5904] usb 2-1: USB disconnect, device number 24 [ 686.686852][T15409] binder: 15408:15409 ioctl c0306201 200000000080 returned -14 [ 686.926369][T15433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2641'. [ 686.946649][T15433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2641'. [ 687.144435][T15446] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2643'. [ 687.183723][T15446] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2643'. [ 687.654458][ T5905] usb 3-1: new low-speed USB device number 78 using dummy_hcd [ 687.794545][ T5905] usb 3-1: device descriptor read/64, error -71 [ 688.054735][ T5905] usb 3-1: new low-speed USB device number 79 using dummy_hcd [ 688.091695][T15469] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 688.194327][ T5905] usb 3-1: device descriptor read/64, error -71 [ 688.203444][T15473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2652'. [ 688.223693][T15473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2652'. [ 688.304820][ T5905] usb usb3-port1: attempt power cycle [ 689.184295][ T5905] usb 3-1: new low-speed USB device number 80 using dummy_hcd [ 689.204290][ T5926] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 689.283637][ T5905] usb 3-1: device descriptor read/8, error -71 [ 689.377798][ T5926] usb 2-1: Using ep0 maxpacket: 8 [ 689.426828][ T5926] usb 2-1: config 6 has an invalid interface number: 2 but max is 0 [ 689.455421][ T5926] usb 2-1: config 6 has no interface number 0 [ 689.474720][ T5926] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 689.511684][ T5926] usb 2-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 689.525513][ T5905] usb 3-1: new low-speed USB device number 81 using dummy_hcd [ 689.558990][ T5926] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 689.594620][ T5926] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 689.640560][ T5905] usb 3-1: device descriptor read/8, error -71 [ 689.659025][ T5926] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 689.661778][T15498] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 689.676229][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.824998][ T5905] usb usb3-port1: unable to enumerate USB device [ 690.024219][ T5926] usb 2-1: Product: syz [ 690.034961][ T5926] usb 2-1: Manufacturer: syz [ 690.042240][ T5926] usb 2-1: SerialNumber: syz [ 690.101508][ T5926] hso 2-1:6.2: Failed to find BULK IN ep [ 690.179309][T15490] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2656'. [ 690.738600][ T5905] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 690.899128][ T5905] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.914200][ T5905] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 690.924747][ T5905] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 690.933855][ T5905] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.966182][ T5905] usb 7-1: config 0 descriptor?? [ 692.147856][ T5905] pyra 0003:1E7D:2CF6.0016: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.6-1/input0 [ 692.573613][ T5926] usb 2-1: USB disconnect, device number 25 [ 692.582966][ T5905] pyra 0003:1E7D:2CF6.0016: couldn't init struct pyra_device [ 692.625726][ T5905] pyra 0003:1E7D:2CF6.0016: couldn't install mouse [ 692.663742][ T5905] pyra 0003:1E7D:2CF6.0016: probe with driver pyra failed with error -71 [ 692.784617][ T5905] usb 7-1: USB disconnect, device number 3 [ 692.946455][T15546] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2672'. [ 693.154391][ T5904] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 694.323162][T15570] input: syz1 as /devices/virtual/input/input29 [ 695.188627][T15575] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 696.345575][T15588] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2681'. [ 696.414271][T15588] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2681'. [ 696.431521][T15588] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2681'. [ 696.714999][T15594] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 698.011424][T15618] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2691'. [ 698.779916][ T30] audit: type=1800 audit(1755958827.169:410): pid=15639 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.2695" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 698.834647][ T926] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 699.079097][ T926] usb 2-1: Using ep0 maxpacket: 8 [ 699.141105][ T926] usb 2-1: config 0 has an invalid interface number: 82 but max is 2 [ 699.174335][ T926] usb 2-1: config 0 has an invalid interface number: 126 but max is 2 [ 699.252110][ T926] usb 2-1: config 0 has an invalid interface number: 118 but max is 2 [ 699.261696][ T926] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 699.324376][ T926] usb 2-1: config 0 has no interface number 0 [ 699.330501][ T926] usb 2-1: config 0 has no interface number 1 [ 699.337191][ T926] usb 2-1: config 0 has no interface number 2 [ 699.347182][ T926] usb 2-1: config 0 interface 82 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 699.358892][ T926] usb 2-1: config 0 interface 82 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 699.375440][ T926] usb 2-1: config 0 interface 82 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 699.390393][ T926] usb 2-1: config 0 interface 82 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 699.414009][ T926] usb 2-1: config 0 interface 82 altsetting 0 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 699.438789][ T926] usb 2-1: config 0 interface 82 altsetting 0 has 7 endpoint descriptors, different from the interface descriptor's value: 6 [ 699.492138][ T926] usb 2-1: config 0 interface 126 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 1023 [ 699.498721][T15623] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2692'. [ 699.514014][ T926] usb 2-1: config 0 interface 126 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 699.528744][ T926] usb 2-1: config 0 interface 126 altsetting 3 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 699.541397][ T926] usb 2-1: config 0 interface 118 altsetting 64 has a duplicate endpoint with address 0xC, skipping [ 699.553091][ T926] usb 2-1: config 0 interface 118 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 699.564932][ T926] usb 2-1: config 0 interface 118 altsetting 64 has a duplicate endpoint with address 0x5, skipping [ 699.576975][ T926] usb 2-1: config 0 interface 118 altsetting 64 endpoint 0xB has an invalid bInterval 64, changing to 7 [ 699.588905][ T926] usb 2-1: config 0 interface 118 altsetting 64 has a duplicate endpoint with address 0x2, skipping [ 699.603898][ T926] usb 2-1: config 0 interface 118 altsetting 64 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 699.618330][ T926] usb 2-1: config 0 interface 126 has no altsetting 0 [ 699.631227][ T926] usb 2-1: config 0 interface 118 has no altsetting 0 [ 699.642900][ T926] usb 2-1: New USB device found, idVendor=045e, idProduct=0416, bcdDevice=80.68 [ 699.662434][ T926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.685903][ T926] usb 2-1: Product: syz [ 699.696530][ T926] usb 2-1: Manufacturer: syz [ 699.703265][T15657] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2700'. [ 699.707772][ T926] usb 2-1: SerialNumber: syz [ 699.727397][ T926] usb 2-1: config 0 descriptor?? [ 699.735467][T15633] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 699.978806][ T926] usb 2-1: bad CDC descriptors [ 700.013845][ T926] usb 2-1: USB disconnect, device number 26 [ 700.214781][ T5926] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 700.374468][ T5926] usb 7-1: Using ep0 maxpacket: 32 [ 700.386444][ T5926] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 700.408557][ T5926] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 700.412968][T15669] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2706'. [ 700.422568][ T5926] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 700.430163][T15669] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2706'. [ 700.436774][ T5926] usb 7-1: SerialNumber: á Œ [ 700.443862][T15669] netlink: 'syz.5.2706': attribute type 12 has an invalid length. [ 700.508500][T15669] netlink: 'syz.5.2706': attribute type 2 has an invalid length. [ 700.571179][T15674] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2708'. [ 700.834425][ T926] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 700.887337][ T5926] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 700.903633][ T5926] usb 7-1: USB disconnect, device number 4 [ 700.984254][ T926] usb 2-1: Using ep0 maxpacket: 8 [ 700.991769][ T926] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 701.004662][ T926] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 701.014432][ T926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.022429][ T926] usb 2-1: Product: syz [ 701.026847][ T926] usb 2-1: Manufacturer: syz [ 701.033612][ T926] usb 2-1: SerialNumber: syz [ 701.040214][ T926] usb 2-1: config 0 descriptor?? [ 701.073360][ T926] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 701.080625][ T926] usb 2-1: selecting invalid altsetting 1 [ 701.092776][T15679] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2709'. [ 701.275805][ T926] gspca_stk014: init reg: 0x00 [ 701.288097][ T926] stk014 2-1:0.0: probe with driver stk014 failed with error -5 [ 702.204357][ T926] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 702.280545][T14940] usb 2-1: USB disconnect, device number 27 [ 702.337709][T15697] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 702.348419][T15696] IPVS: stopping backup sync thread 15697 ... [ 702.459703][T15702] netlink: 'syz.5.2715': attribute type 1 has an invalid length. [ 702.493829][T15702] 8021q: adding VLAN 0 to HW filter on device bond4 [ 702.520775][ T926] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 702.571599][T15702] bond4: (slave geneve2): making interface the new active one [ 702.579894][ T926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.600479][T15702] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 702.615908][ T926] usb 3-1: Product: syz [ 702.630301][ T926] usb 3-1: Manufacturer: syz [ 702.637683][ T926] usb 3-1: SerialNumber: syz [ 702.660923][ T926] usb 3-1: config 0 descriptor?? [ 702.915885][T15713] netlink: 4400 bytes leftover after parsing attributes in process `syz.5.2718'. [ 702.965281][T15713] sysfs: cannot create duplicate filename '/class/ieee80211/Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!' [ 703.028247][T15713] CPU: 1 UID: 0 PID: 15713 Comm: syz.5.2718 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 703.028277][T15713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 703.028289][T15713] Call Trace: [ 703.028297][T15713] [ 703.028306][T15713] dump_stack_lvl+0x189/0x250 [ 703.028339][T15713] ? __pfx_dump_stack_lvl+0x10/0x10 [ 703.028362][T15713] ? __pfx__printk+0x10/0x10 [ 703.028388][T15713] ? kernfs_path_from_node+0x2c/0x260 [ 703.028413][T15713] ? kernfs_path_from_node+0x2c/0x260 [ 703.028436][T15713] ? kernfs_path_from_node+0x2c/0x260 [ 703.028461][T15713] ? kernfs_path_from_node+0x22c/0x260 [ 703.028483][T15713] ? kernfs_path_from_node+0x2c/0x260 [ 703.028512][T15713] sysfs_warn_dup+0x8e/0xa0 [ 703.028536][T15713] sysfs_do_create_link_sd+0xc0/0x110 [ 703.028562][T15713] device_add_class_symlinks+0x1cf/0x240 [ 703.028597][T15713] device_add+0x475/0xb50 [ 703.028668][T15713] wiphy_register+0x199a/0x26b0 [ 703.028715][T15713] ? __pfx_wiphy_register+0x10/0x10 [ 703.028740][T15713] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 703.028776][T15713] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 703.028810][T15713] ieee80211_register_hw+0x33e1/0x4120 [ 703.028861][T15713] ? ieee80211_register_hw+0x1471/0x4120 [ 703.028900][T15713] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 703.028935][T15713] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 703.028978][T15713] ? __hrtimer_setup+0x187/0x210 [ 703.028998][T15713] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 703.029031][T15713] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 703.029096][T15713] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 703.029123][T15713] ? trace_kmalloc+0x1f/0xd0 [ 703.029140][T15713] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 703.029162][T15713] ? kstrndup+0xbf/0x160 [ 703.029198][T15713] hwsim_new_radio_nl+0xea4/0x1b10 [ 703.029231][T15713] ? __pfx___nla_validate_parse+0x10/0x10 [ 703.029270][T15713] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 703.029302][T15713] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 703.029334][T15713] ? __nla_parse+0x40/0x60 [ 703.029361][T15713] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 703.029392][T15713] genl_family_rcv_msg_doit+0x215/0x300 [ 703.029424][T15713] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 703.029468][T15713] ? bpf_lsm_capable+0x9/0x20 [ 703.029493][T15713] ? security_capable+0x7e/0x2e0 [ 703.029527][T15713] genl_rcv_msg+0x60e/0x790 [ 703.029557][T15713] ? __pfx_genl_rcv_msg+0x10/0x10 [ 703.029575][T15713] ? ref_tracker_free+0x63a/0x7d0 [ 703.029596][T15713] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 703.029626][T15713] ? __pfx_ref_tracker_free+0x10/0x10 [ 703.029668][T15713] netlink_rcv_skb+0x205/0x470 [ 703.029696][T15713] ? __pfx_genl_rcv_msg+0x10/0x10 [ 703.029717][T15713] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 703.029766][T15713] ? down_read+0x1ad/0x2e0 [ 703.029794][T15713] genl_rcv+0x28/0x40 [ 703.029813][T15713] netlink_unicast+0x75c/0x8e0 [ 703.029852][T15713] netlink_sendmsg+0x805/0xb30 [ 703.029891][T15713] ? __pfx_netlink_sendmsg+0x10/0x10 [ 703.029929][T15713] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 703.029948][T15713] ? __pfx_netlink_sendmsg+0x10/0x10 [ 703.029978][T15713] __sock_sendmsg+0x21c/0x270 [ 703.030006][T15713] ____sys_sendmsg+0x505/0x830 [ 703.030043][T15713] ? __pfx_____sys_sendmsg+0x10/0x10 [ 703.030084][T15713] ? import_iovec+0x74/0xa0 [ 703.030117][T15713] ___sys_sendmsg+0x21f/0x2a0 [ 703.030150][T15713] ? __pfx____sys_sendmsg+0x10/0x10 [ 703.030225][T15713] ? __fget_files+0x2a/0x420 [ 703.030247][T15713] ? __fget_files+0x3a0/0x420 [ 703.030282][T15713] __x64_sys_sendmsg+0x19b/0x260 [ 703.030316][T15713] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 703.030359][T15713] ? rcu_is_watching+0x15/0xb0 [ 703.030393][T15713] ? do_syscall_64+0xbe/0x3b0 [ 703.030423][T15713] do_syscall_64+0xfa/0x3b0 [ 703.030447][T15713] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.030466][T15713] ? asm_common_interrupt+0x26/0x40 [ 703.030484][T15713] ? clear_bhb_loop+0x60/0xb0 [ 703.030509][T15713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.030529][T15713] RIP: 0033:0x7f23e3b8ebe9 [ 703.030546][T15713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 703.030564][T15713] RSP: 002b:00007f23e4ad1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 703.030586][T15713] RAX: ffffffffffffffda RBX: 00007f23e3db5fa0 RCX: 00007f23e3b8ebe9 [ 703.030602][T15713] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003 [ 703.030615][T15713] RBP: 00007f23e3c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 703.030635][T15713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 703.030647][T15713] R13: 00007f23e3db6038 R14: 00007f23e3db5fa0 R15: 00007ffc9e427068 [ 703.030683][T15713] [ 703.680538][ T5926] usb 3-1: USB disconnect, device number 83 [ 704.451353][T15733] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2723'. [ 705.033836][T15745] netlink: 'syz.1.2726': attribute type 2 has an invalid length. [ 705.043624][T15745] netlink: 'syz.1.2726': attribute type 1 has an invalid length. [ 705.294251][ T926] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 705.387481][T15760] mmap: syz.6.2730 (15760): VmData 37728256 exceed data ulimit 5. Update limits or use boot option ignore_rlimit_data. [ 705.481196][ T926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 705.497816][ T926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 705.518155][ T926] usb 2-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 705.534292][ T926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.624012][ T926] usb 2-1: config 0 descriptor?? [ 706.310290][ T926] samsung 0003:0419:0001.0017: item fetching failed at offset 1/5 [ 706.339898][ T926] samsung 0003:0419:0001.0017: parse failed [ 706.339941][ T926] samsung 0003:0419:0001.0017: probe with driver samsung failed with error -22 [ 706.360505][T15782] overlayfs: failed to clone upperpath [ 706.381002][T15783] ubi31: attaching mtd0 [ 706.383043][T15783] ubi31: scanning is finished [ 706.708772][T15783] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 706.755648][T15783] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 706.778037][T14940] usb 2-1: USB disconnect, device number 28 [ 706.784070][T15783] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 706.821770][T15783] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 706.831276][T15783] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 706.841172][T15783] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 706.851260][T15783] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 18705484 [ 706.864781][T15783] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 706.879769][T15797] ubi31: background thread "ubi_bgt31d" started, PID 15797 [ 707.134301][ T5904] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 707.291869][ T5904] usb 3-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 707.372861][ T5904] usb 3-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 707.389854][ T5904] usb 3-1: Product: syz [ 707.394067][ T5904] usb 3-1: Manufacturer: syz [ 707.402798][T15808] Invalid ELF section header size [ 707.409033][ T5904] usb 3-1: SerialNumber: syz [ 707.433693][ T5904] usb 3-1: config 0 descriptor?? [ 710.454238][T15486] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 710.589456][T15837] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 710.730839][T15486] usb 7-1: config 0 has an invalid interface number: 147 but max is 0 [ 711.396879][T15486] usb 7-1: config 0 has no interface number 0 [ 711.403028][T15486] usb 7-1: config 0 interface 147 altsetting 0 endpoint 0x1 has invalid maxpacket 2050, setting to 64 [ 711.520639][T15486] usb 7-1: config 0 interface 147 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 711.571762][T15486] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.03 [ 711.603027][T15486] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.651622][T15486] usb 7-1: Product: syz [ 711.670147][T15486] usb 7-1: Manufacturer: syz [ 711.681258][T15486] usb 7-1: SerialNumber: syz [ 711.713768][T15486] usb 7-1: config 0 descriptor?? [ 711.727660][ T5904] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 711.757477][ T5904] asix 3-1:0.0: probe with driver asix failed with error -71 [ 711.779549][T15486] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 711.783773][ T5904] usb 3-1: USB disconnect, device number 84 [ 712.131888][T15854] Invalid source name [ 712.136010][T15854] UBIFS error (pid: 15854): cannot open "ubifs", error -22 [ 712.525288][T15486] usb 7-1: USB disconnect, device number 5 [ 712.538615][ T3521] usb 7-1: Failed to submit usb control message: -71 [ 712.549694][ T3521] usb 7-1: unable to send the bmi data to the device: -71 [ 712.570121][ T3521] usb 7-1: unable to get target info from device [ 712.578471][ T3521] usb 7-1: could not get target info (-71) [ 712.585131][ T3521] usb 7-1: could not probe fw (-71) [ 713.959731][T15875] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2757'. [ 715.074244][ T10] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 715.214667][ T10] usb 7-1: device descriptor read/64, error -71 [ 715.765682][ T10] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 715.789029][T15896] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2763'. [ 715.877044][T15900] misc userio: The device must be registered before sending interrupts [ 715.904517][ T10] usb 7-1: device descriptor read/64, error -71 [ 715.948464][T15902] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2764'. [ 716.014567][ T10] usb usb7-port1: attempt power cycle [ 716.120392][T15900] misc userio: The device must be registered before sending interrupts [ 716.203146][T15909] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2768'. [ 716.242372][T15909] netlink: 268 bytes leftover after parsing attributes in process `syz.5.2768'. [ 716.279615][T15909] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2768'. [ 716.414535][ T10] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 716.472802][ T10] usb 7-1: device descriptor read/8, error -71 [ 716.714438][ T10] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 716.735071][ T10] usb 7-1: device descriptor read/8, error -71 [ 716.764476][ T5905] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 716.844602][ T10] usb usb7-port1: unable to enumerate USB device [ 716.915040][ T5905] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 716.926227][ T5905] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 716.954264][ T5905] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 716.965974][ T5905] usb 2-1: config 0 interface 0 has no altsetting 0 [ 716.973825][ T5905] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 716.984536][ T5905] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 716.995867][ T5905] usb 2-1: config 0 interface 0 has no altsetting 0 [ 717.004095][ T5905] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 717.013621][ T5905] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 717.027528][ T5905] usb 2-1: config 0 interface 0 has no altsetting 0 [ 717.037781][ T5905] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 717.050652][ T5905] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 717.062003][ T5905] usb 2-1: config 0 interface 0 has no altsetting 0 [ 717.071815][ T5905] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 717.081148][ T5905] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 717.093425][ T5905] usb 2-1: config 0 interface 0 has no altsetting 0 [ 717.102182][ T5905] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 717.111753][ T5905] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 717.130316][ T5905] usb 2-1: config 0 interface 0 has no altsetting 0 [ 717.139738][ T5905] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 717.149896][ T5905] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 717.161168][ T5905] usb 2-1: config 0 interface 0 has no altsetting 0 [ 717.169758][ T5905] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 717.179085][ T5905] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 717.190940][ T5905] usb 2-1: config 0 interface 0 has no altsetting 0 [ 717.200655][ T5905] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 717.210147][ T5905] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 717.229855][ T5905] usb 2-1: Product: syz [ 717.237752][ T5905] usb 2-1: Manufacturer: syz [ 717.242484][ T5905] usb 2-1: SerialNumber: syz [ 717.250981][ T5905] usb 2-1: config 0 descriptor?? [ 717.262669][ T5905] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 718.263353][T15486] usb 2-1: USB disconnect, device number 29 [ 718.303041][T15486] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 718.410157][T15935] syzkaller1: entered allmulticast mode [ 718.570647][T15941] kernel read not supported for file / œÏüÔ¢W)ëS“§Ç-ë (pid: 15941 comm: syz.5.2777) [ 718.590133][ T30] audit: type=1800 audit(1755958847.039:411): pid=15941 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.2777" name=20019CCFFCD4A25729EB5393A7C72DEB dev="mqueue" ino=44704 res=0 errno=0 [ 718.611578][ C1] vkms_vblank_simulate: vblank timer overrun [ 719.026075][T15952] xt_limit: Overflow, try lower: 2147483649/32768 [ 719.489222][T15966] cgroup: release_agent respecified [ 720.217583][T15976] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2787'. [ 720.602024][T15978] netlink: 'syz.1.2788': attribute type 11 has an invalid length. [ 721.532904][T15997] 9pnet_fd: Insufficient options for proto=fd [ 722.538076][T16017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2796'. [ 722.664552][ T5926] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 723.226599][ T5926] usb 7-1: Using ep0 maxpacket: 16 [ 723.253642][ T5926] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 723.271903][ T5926] usb 7-1: config 0 has no interface number 0 [ 723.278555][ T5926] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 723.302526][ T5926] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 723.314151][ T5926] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 723.342667][ T5926] usb 7-1: Product: syz [ 723.353011][ T5926] usb 7-1: SerialNumber: syz [ 723.379695][ T5926] usb 7-1: config 0 descriptor?? [ 723.391547][ T5926] cm109 7-1:0.8: invalid payload size 208, expected 4 [ 723.406201][ T5926] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input30 [ 724.026687][ C1] cm109 7-1:0.8: cm109_urb_irq_callback: urb status -71 [ 724.033672][ C1] ------------[ cut here ]------------ [ 724.039326][ C1] URB ffff88804e7b1b00 submitted while active [ 724.046153][ C1] WARNING: CPU: 1 PID: 16012 at drivers/usb/core/urb.c:379 usb_submit_urb+0xff3/0x1890 [ 724.055797][ C1] Modules linked in: [ 724.059860][ C1] CPU: 1 UID: 0 PID: 16012 Comm: syz.6.2799 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 724.069822][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 724.079868][ C1] RIP: 0010:usb_submit_urb+0xff3/0x1890 [ 724.085422][ C1] Code: 00 eb 5c e8 ff 58 a7 fa e9 be f0 ff ff e8 f5 58 a7 fa c6 05 1c e1 71 08 01 90 48 c7 c7 e0 5b 33 8c 48 89 de e8 7e 48 6b fa 90 <0f> 0b 90 90 e9 85 f0 ff ff e8 cf 58 a7 fa eb 11 e8 c8 58 a7 fa bd [ 724.105044][ C1] RSP: 0018:ffffc90000a087b8 EFLAGS: 00010046 [ 724.111100][ C1] RAX: 606bb97feb728f00 RBX: ffff88804e7b1b00 RCX: 0000000000040000 [ 724.119076][ C1] RDX: ffffc900023a1000 RSI: 0000000000007dc4 RDI: 0000000000007dc5 [ 724.127038][ C1] RBP: 000000000000000f R08: ffff8880b8724293 R09: 1ffff110170e4852 [ 724.135006][ C1] R10: dffffc0000000000 R11: ffffed10170e4853 R12: 1ffff1100ab2f00a [ 724.142964][ C1] R13: dffffc0000000000 R14: ffff88804e7b1b08 R15: 0000000000000820 [ 724.150920][ C1] FS: 000055556a034500(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000 [ 724.159839][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 724.166408][ C1] CR2: 00007f9d75174f98 CR3: 000000005e0d0000 CR4: 00000000003526f0 [ 724.174368][ C1] Call Trace: [ 724.177629][ C1] [ 724.180458][ C1] ? kcov_remote_start+0x97/0x7f0 [ 724.185475][ C1] cm109_urb_irq_callback+0x718/0xc80 [ 724.190838][ C1] __usb_hcd_giveback_urb+0x417/0x690 [ 724.196199][ C1] ? usb_hcd_unlink_urb_from_ep+0x2c/0x110 [ 724.201996][ C1] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 724.207883][ C1] ? usb_hcd_giveback_urb+0x10e/0x420 [ 724.213243][ C1] dummy_timer+0x862/0x4550 [ 724.217760][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 724.223143][ C1] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 724.228691][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 724.233617][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 724.238540][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 724.243465][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 724.248655][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 724.254360][ C1] ? read_tsc+0x9/0x20 [ 724.258417][ C1] ? __pfx_tasklet_action_common+0x10/0x10 [ 724.264229][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 724.269327][ C1] handle_softirqs+0x283/0x870 [ 724.274071][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 724.278821][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 724.284090][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 724.289287][ C1] __irq_exit_rcu+0xca/0x1f0 [ 724.293860][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 724.299047][ C1] irq_exit_rcu+0x9/0x30 [ 724.303270][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 724.308888][ C1] [ 724.311803][ C1] [ 724.314724][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 724.320691][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 724.327187][ C1] Code: 74 05 e8 fb 9b 5e f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 63 cc 27 f6 65 8b 05 1c 7a 33 07 85 c0 74 40 48 c7 04 24 0e 36 [ 724.346782][ C1] RSP: 0018:ffffc90013067a00 EFLAGS: 00000206 [ 724.353020][ C1] RAX: 606bb97feb728f00 RBX: 0000000000000a02 RCX: 606bb97feb728f00 [ 724.360992][ C1] RDX: 0000000000000006 RSI: ffffffff8d982fba RDI: 0000000000000001 [ 724.369039][ C1] RBP: ffffc90013067a90 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e [ 724.377024][ C1] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: dffffc0000000000 [ 724.384984][ C1] R13: ffff888028596500 R14: ffffffff8edcda60 R15: 1ffff9200260cf40 [ 724.392962][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 724.399289][ C1] ? usb_hcd_giveback_urb+0x2f8/0x420 [ 724.404656][ C1] usb_hcd_poll_rh_status+0x406/0x620 [ 724.410021][ C1] ? __pfx_usb_hcd_poll_rh_status+0x10/0x10 [ 724.415909][ C1] dummy_pullup+0x19b/0x200 [ 724.420399][ C1] ? __pfx_dummy_pullup+0x10/0x10 [ 724.425412][ C1] usb_gadget_disconnect_locked+0x140/0x4b0 [ 724.431295][ C1] gadget_unbind_driver+0xc4/0x430 [ 724.436391][ C1] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 724.442102][ C1] device_release_driver_internal+0x46f/0x7c0 [ 724.448156][ C1] driver_detach+0x1f3/0x2d0 [ 724.452728][ C1] bus_remove_driver+0x226/0x2f0 [ 724.457657][ C1] usb_gadget_unregister_driver+0x4e/0x70 [ 724.463367][ C1] raw_release+0xd7/0x260 [ 724.467684][ C1] ? __pfx_raw_release+0x10/0x10 [ 724.472611][ C1] __fput+0x449/0xa70 [ 724.476584][ C1] task_work_run+0x1d1/0x260 [ 724.481161][ C1] ? __pfx_task_work_run+0x10/0x10 [ 724.486264][ C1] ? exit_to_user_mode_loop+0x40/0x110 [ 724.491715][ C1] exit_to_user_mode_loop+0xec/0x110 [ 724.496985][ C1] do_syscall_64+0x2bd/0x3b0 [ 724.501559][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.507607][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 724.513742][ C1] ? clear_bhb_loop+0x60/0xb0 [ 724.518404][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.524283][ C1] RIP: 0033:0x7f9d7438ebe9 [ 724.528679][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 724.548287][ C1] RSP: 002b:00007ffe40da7cd8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 724.556689][ C1] RAX: 0000000000000000 RBX: 00007f9d745b7da0 RCX: 00007f9d7438ebe9 [ 724.564649][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 724.572604][ C1] RBP: 00007f9d745b7da0 R08: 0000000000000000 R09: 0000001140da7fcf [ 724.580560][ C1] R10: 000000000003fd44 R11: 0000000000000246 R12: 00000000000b170a [ 724.588514][ C1] R13: 00007f9d745b6180 R14: ffffffffffffffff R15: 00007ffe40da7df0 [ 724.596486][ C1] [ 724.599500][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 724.606768][ C1] CPU: 1 UID: 0 PID: 16012 Comm: syz.6.2799 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 724.616734][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 724.626777][ C1] Call Trace: [ 724.630041][ C1] [ 724.632885][ C1] dump_stack_lvl+0x99/0x250 [ 724.637468][ C1] ? __asan_memcpy+0x40/0x70 [ 724.642043][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 724.647227][ C1] ? __pfx__printk+0x10/0x10 [ 724.651810][ C1] panic+0x2db/0x790 [ 724.655726][ C1] ? __pfx_panic+0x10/0x10 [ 724.660158][ C1] __warn+0x31b/0x4b0 [ 724.664138][ C1] ? usb_submit_urb+0xff3/0x1890 [ 724.669082][ C1] ? usb_submit_urb+0xff3/0x1890 [ 724.674106][ C1] report_bug+0x2be/0x4f0 [ 724.678434][ C1] ? usb_submit_urb+0xff3/0x1890 [ 724.683351][ C1] ? usb_submit_urb+0xff3/0x1890 [ 724.688269][ C1] ? usb_submit_urb+0xff5/0x1890 [ 724.693197][ C1] handle_bug+0x84/0x160 [ 724.697425][ C1] exc_invalid_op+0x1a/0x50 [ 724.701914][ C1] asm_exc_invalid_op+0x1a/0x20 [ 724.706753][ C1] RIP: 0010:usb_submit_urb+0xff3/0x1890 [ 724.712283][ C1] Code: 00 eb 5c e8 ff 58 a7 fa e9 be f0 ff ff e8 f5 58 a7 fa c6 05 1c e1 71 08 01 90 48 c7 c7 e0 5b 33 8c 48 89 de e8 7e 48 6b fa 90 <0f> 0b 90 90 e9 85 f0 ff ff e8 cf 58 a7 fa eb 11 e8 c8 58 a7 fa bd [ 724.731875][ C1] RSP: 0018:ffffc90000a087b8 EFLAGS: 00010046 [ 724.737926][ C1] RAX: 606bb97feb728f00 RBX: ffff88804e7b1b00 RCX: 0000000000040000 [ 724.745895][ C1] RDX: ffffc900023a1000 RSI: 0000000000007dc4 RDI: 0000000000007dc5 [ 724.753845][ C1] RBP: 000000000000000f R08: ffff8880b8724293 R09: 1ffff110170e4852 [ 724.761801][ C1] R10: dffffc0000000000 R11: ffffed10170e4853 R12: 1ffff1100ab2f00a [ 724.769758][ C1] R13: dffffc0000000000 R14: ffff88804e7b1b08 R15: 0000000000000820 [ 724.777736][ C1] ? usb_submit_urb+0xff2/0x1890 [ 724.782662][ C1] ? kcov_remote_start+0x97/0x7f0 [ 724.787696][ C1] cm109_urb_irq_callback+0x718/0xc80 [ 724.793073][ C1] __usb_hcd_giveback_urb+0x417/0x690 [ 724.798435][ C1] ? usb_hcd_unlink_urb_from_ep+0x2c/0x110 [ 724.804242][ C1] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 724.810140][ C1] ? usb_hcd_giveback_urb+0x10e/0x420 [ 724.815499][ C1] dummy_timer+0x862/0x4550 [ 724.820015][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 724.825373][ C1] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 724.830919][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 724.835846][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 724.840781][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 724.845705][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 724.850907][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 724.856606][ C1] ? read_tsc+0x9/0x20 [ 724.860660][ C1] ? __pfx_tasklet_action_common+0x10/0x10 [ 724.866454][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 724.871549][ C1] handle_softirqs+0x283/0x870 [ 724.876298][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 724.881044][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 724.886313][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 724.891498][ C1] __irq_exit_rcu+0xca/0x1f0 [ 724.896070][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 724.901253][ C1] irq_exit_rcu+0x9/0x30 [ 724.905481][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 724.911100][ C1] [ 724.914017][ C1] [ 724.916943][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 724.922905][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 724.929399][ C1] Code: 74 05 e8 fb 9b 5e f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 63 cc 27 f6 65 8b 05 1c 7a 33 07 85 c0 74 40 48 c7 04 24 0e 36 [ 724.948989][ C1] RSP: 0018:ffffc90013067a00 EFLAGS: 00000206 [ 724.955059][ C1] RAX: 606bb97feb728f00 RBX: 0000000000000a02 RCX: 606bb97feb728f00 [ 724.963013][ C1] RDX: 0000000000000006 RSI: ffffffff8d982fba RDI: 0000000000000001 [ 724.970968][ C1] RBP: ffffc90013067a90 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e [ 724.978945][ C1] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: dffffc0000000000 [ 724.986901][ C1] R13: ffff888028596500 R14: ffffffff8edcda60 R15: 1ffff9200260cf40 [ 724.994868][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 725.001188][ C1] ? usb_hcd_giveback_urb+0x2f8/0x420 [ 725.006550][ C1] usb_hcd_poll_rh_status+0x406/0x620 [ 725.011912][ C1] ? __pfx_usb_hcd_poll_rh_status+0x10/0x10 [ 725.017797][ C1] dummy_pullup+0x19b/0x200 [ 725.022285][ C1] ? __pfx_dummy_pullup+0x10/0x10 [ 725.027308][ C1] usb_gadget_disconnect_locked+0x140/0x4b0 [ 725.033202][ C1] gadget_unbind_driver+0xc4/0x430 [ 725.038305][ C1] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 725.044012][ C1] device_release_driver_internal+0x46f/0x7c0 [ 725.050068][ C1] driver_detach+0x1f3/0x2d0 [ 725.054656][ C1] bus_remove_driver+0x226/0x2f0 [ 725.059590][ C1] usb_gadget_unregister_driver+0x4e/0x70 [ 725.065303][ C1] raw_release+0xd7/0x260 [ 725.069621][ C1] ? __pfx_raw_release+0x10/0x10 [ 725.074550][ C1] __fput+0x449/0xa70 [ 725.078529][ C1] task_work_run+0x1d1/0x260 [ 725.083108][ C1] ? __pfx_task_work_run+0x10/0x10 [ 725.088211][ C1] ? exit_to_user_mode_loop+0x40/0x110 [ 725.093653][ C1] exit_to_user_mode_loop+0xec/0x110 [ 725.098923][ C1] do_syscall_64+0x2bd/0x3b0 [ 725.103500][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.109546][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 725.115682][ C1] ? clear_bhb_loop+0x60/0xb0 [ 725.120349][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.126226][ C1] RIP: 0033:0x7f9d7438ebe9 [ 725.130625][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 725.150216][ C1] RSP: 002b:00007ffe40da7cd8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 725.158615][ C1] RAX: 0000000000000000 RBX: 00007f9d745b7da0 RCX: 00007f9d7438ebe9 [ 725.166571][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 725.174528][ C1] RBP: 00007f9d745b7da0 R08: 0000000000000000 R09: 0000001140da7fcf [ 725.182500][ C1] R10: 000000000003fd44 R11: 0000000000000246 R12: 00000000000b170a [ 725.190453][ C1] R13: 00007f9d745b6180 R14: ffffffffffffffff R15: 00007ffe40da7df0 [ 725.198420][ C1] [ 725.201663][ C1] Kernel Offset: disabled [ 725.205977][ C1] Rebooting in 86400 seconds..