last executing test programs: 27m44.826025713s ago: executing program 2 (id=7): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xf5, 0x0, &(0x7f0000000500)="7660e8c94baabb760cbaa8f1ced2dbdfb9f1ed5dd6916f1d5d7b9f71ed6142c00af8de1085c695f6aec5fd675a2e75aece612a2ba37d8e9b0e49c42d54d5961c2323f50888cded42752cbe05316408f489d446f7a19d4ffc3f88bea0e5d0e6e607c1c7503b757ba20d0681f0b5a655842300c084636c51027f52678942885f38e9f0ad3476aa97cf6acb91f7b99d1fbce632b1e231513dc7eca5eff968cfa6dcd231332122f41d3f906bbd16653b822f5823c5c4dbd37c95190a7b1f741535956377c15678ffda5ea2d9feb04251fa178cfdcb9147546b2f8532433e6764acc1607aa98ba5d4d6075cdec94bb0f88a100c583c17ba"}) r5 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r5, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4008040) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x4014) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x2d, 0x2, 0x0) bind$xdp(r6, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x2bc67543}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000100000000700000008000300", @ANYRES32=r9, @ANYBLOB="140004006e696376663000000000000000000000080005000200000005005300010000009c835ba7c1abb7bd83b7151c6ef3467c954c3d42edacb6fc3713aa212b3105ea219b3d7c7193a5669d6152d7dab7055459709b8a5eafd44890ff"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) 27m43.83005051s ago: executing program 2 (id=10): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xc) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001e80)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f00000008c0)={{0x0, 0x7fff, 0xa1, 0x5, 0x4, 0xf, 0x8000000000000000, 0x3, 0x4974, 0x1, 0xaff, 0x4, 0x4, 0xffffffffffff3f38, 0x1}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000003140)={0x0, r2, "096e727f68d8feb15099da6e852b0856fae20177c12f030be503a4a07ff34137172704f35950c0093497fd6dde061cdcd343932884a034d555023818451e5cd2a3f00e6ed277e0a5aea2d0cc620c0ebc3a9adcdb36783c8376f10f28a459314185ca40e09df4d9b12417ee614bb6b23835e6c8a694c46c51713b47f70e0717b83535a75b74606b96859e98f89464ac328f8286025ddc5fc3fdc5333e946946b84e65cefc6a0f2b6f405c722aea6df8b4821c725fec60783eed6ea30d36854b256dd8dbdf6defe7e6832055f3b37049866a397ccebb65a64a12babf4974a8ccfe70b5d3b67e9eda4a65ed77b27bf5438f79eea127b43b31bbb0cc53857f4db197", "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"}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000880)={0x5, 0x2, 0xd5d3c000, 0x1000, &(0x7f00000e3000/0x1000)=nil}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r3, &(0x7f00000002c0)={'#! ', './file0', [], 0xa, "1f410e2852ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bd030000005a3c7c04055f1f70e4064d46b2bb9e5100d446bb6afb2c0fc07b58f4a9c1006a0b6c05639e23ec12979ff9b48ca61e6dec58682449c75d86eb4337b8d343ed9c18927289d3d788fa281a5742690ff5a505cfff34fc1503afbfd2d4"}, 0x8b) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x28) close(r3) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1, 0x141, 0x0) write$cgroup_pid(r4, &(0x7f0000000140), 0x12) recvmsg$unix(r0, &(0x7f0000000840)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000200)=""/91, 0x5b}, {&(0x7f0000000380)=""/84, 0x54}, {&(0x7f0000000400)=""/213, 0xd5}, {&(0x7f0000000500)=""/145, 0x91}, {&(0x7f00000005c0)=""/141, 0x8d}, {&(0x7f0000000680)=""/95, 0x5f}, {&(0x7f0000000100)=""/3, 0x3}], 0x7}, 0x3) 27m40.726291286s ago: executing program 2 (id=18): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0x0, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0xfffffe5d, &(0x7f0000000300)={&(0x7f0000000900)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5, 0x20000007, 0x5, 0x1, 0x0, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x80c0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="66ca68e151f4b3a89029493bb3918822e3130b1030186e5958b14598e0a5384d355ba7589eda3768961265583b51c90f114f0a419a015e32bab42fa2763fa4d7baa4604c0dac8ecdd6b70059ba43e91866fa3da76b8600c887ffffffff338b23b4dc2eb6666cd1eb40c625270c60b671a9859cff65d2d1826f08484e404c5e5096dd82747e83d6341751a8777575e1f0db0795938cc36844384387994879330889cbfa944389b8fc4626d62addcb3b9cfc9a16ec26d7abd202bb446558414e0f8d6e233c9e18f1a3045ba0436f1ae4773b2ab7e2efb224557f0441c44f95c0f1ceaa74c81754e8cd", @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) recvmsg$unix(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x22fe0}], 0x1}, 0x0) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 27m39.286513099s ago: executing program 2 (id=26): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_wait(r3, &(0x7f00000003c0)=[{}], 0x1, 0xffffffff) 27m37.899895879s ago: executing program 2 (id=30): syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x88f02) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x80) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20002) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r3, &(0x7f00000000c0)={0x1f, 0xae, @any, 0x0, 0x1}, 0xe) r4 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0xf6, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'veth0_macvtap\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0x90009, 0x3}, {0x8000006, 0x6}]}}) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x2) read$FUSE(r1, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x3ff, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, r6, {0x7, 0x2b, 0xffffffde, 0x2040d00c, 0x0, 0xfffe, 0x2, 0x1, 0x0, 0x0, 0x100, 0x100}}, 0x50) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x101081, 0x11) fcntl$lock(r7, 0x5, &(0x7f0000000200)={0x1}) close_range(r0, 0xffffffffffffffff, 0x0) 27m37.839886666s ago: executing program 2 (id=31): mbind(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x8002, &(0x7f00000003c0)=0x3ff, 0xd, 0x0) mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x2, &(0x7f0000000180)=0x3ff, 0xc, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) dup2(r2, r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240), 0x4000, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) connect$unix(r0, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x7d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100020000002082057d0040000102030109026b0003010680070904000000010100000a240108000a000201020904010000010200000904010101010200000bbe0201050380046c28d409050109000406b80807250104030100090402"], 0x0) fsopen(0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000f, 0x13, r3, 0xb530c000) epoll_create1(0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0x8000b3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r10, {0x6}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x10}, {0x6}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x880) 27m22.688625628s ago: executing program 32 (id=31): mbind(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x8002, &(0x7f00000003c0)=0x3ff, 0xd, 0x0) mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x2, &(0x7f0000000180)=0x3ff, 0xc, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) dup2(r2, r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240), 0x4000, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) connect$unix(r0, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x7d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100020000002082057d0040000102030109026b0003010680070904000000010100000a240108000a000201020904010000010200000904010101010200000bbe0201050380046c28d409050109000406b80807250104030100090402"], 0x0) fsopen(0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000f, 0x13, r3, 0xb530c000) epoll_create1(0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0x8000b3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r10, {0x6}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x10}, {0x6}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x880) 16m46.348604574s ago: executing program 1 (id=2050): syz_emit_ethernet(0x7e, &(0x7f0000000240)=ANY=[], 0x0) 16m46.294631801s ago: executing program 1 (id=2051): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xfce) 16m45.881638501s ago: executing program 1 (id=2055): socket$kcm(0xa, 0x2, 0x0) socket(0x840000000002, 0x3, 0xff) r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x1c, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {0x842a}}) socket(0x1d, 0x2, 0x6) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000040)={0xfffffffffffffdef, r0, 0x31, {0x5, 0x10001}, 0x6}, 0x1) 16m45.772978194s ago: executing program 1 (id=2059): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x8b141a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) 16m45.720965363s ago: executing program 1 (id=2060): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x78, 0x18, &(0x7f0000006c00)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x25}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x29}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 16m45.055557568s ago: executing program 1 (id=2071): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f000001fac0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd0000, 0xe, 0xf0, 0x40, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x7}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x0, 0x6, 0x5}, {0x8000000, 0x3000, 0x8, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x0, 0x1}, {0x100000, 0xdddd0000, 0x9, 0x1, 0x3, 0x9, 0x9, 0x5, 0x5, 0x44, 0xe, 0x4b}, {0x2, 0xd000, 0x0, 0x7, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x1000, 0xf, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x10000, 0xd, 0x5, 0x3, 0x3, 0xa, 0x9, 0x54, 0x6, 0x2, 0x7}, {0xeeee8000, 0x5}, {0x2, 0x9}, 0x40010000, 0x0, 0xf000, 0x300, 0x5, 0x0, 0xe6e70c00, [0xffffffffffffff47, 0x401, 0x5, 0xc5]}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000008c0)={{0xb000, 0x50000, 0x3, 0x6, 0x8, 0x9, 0x1, 0x49, 0x0, 0x0, 0x7, 0x5}, {0x3330e004, 0xeeee8000, 0x4, 0xf9, 0x57, 0x6, 0x7, 0x9, 0x9, 0x27, 0xd, 0x6}, {0xa000, 0x8080000, 0xf, 0x10, 0x1, 0x2, 0x8, 0x9, 0x31, 0x9, 0x9, 0x5}, {0xf000, 0x6000, 0x0, 0xe9, 0xc, 0x9, 0xb2, 0x5, 0x7f, 0x80, 0x0, 0x3}, {0x1, 0xd000, 0xa, 0x3, 0x4, 0x5, 0x81, 0x9, 0x2, 0x3, 0x4, 0x2}, {0x26000, 0xa000, 0x9, 0x2, 0x1, 0xc, 0x2, 0x5, 0xd, 0x1, 0x6, 0x9}, {0x10000, 0x10000, 0xf, 0xdf, 0x8, 0xe3, 0x1, 0x9, 0x40, 0x7, 0x9, 0x7a}, {0x41000, 0x100000, 0x3, 0x9, 0x7f, 0x60, 0x2, 0x2, 0xff, 0x7, 0x6, 0xfd}, {0x41000, 0x671}, {0x50000, 0x3fbe}, 0x1, 0x0, 0x5000, 0x10014, 0xf, 0x0, 0x9000, [0xf8c3, 0x100, 0x2dd0, 0x4]}) 16m44.905402499s ago: executing program 33 (id=2071): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f000001fac0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd0000, 0xe, 0xf0, 0x40, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x7}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x0, 0x6, 0x5}, {0x8000000, 0x3000, 0x8, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x0, 0x1}, {0x100000, 0xdddd0000, 0x9, 0x1, 0x3, 0x9, 0x9, 0x5, 0x5, 0x44, 0xe, 0x4b}, {0x2, 0xd000, 0x0, 0x7, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x1000, 0xf, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x10000, 0xd, 0x5, 0x3, 0x3, 0xa, 0x9, 0x54, 0x6, 0x2, 0x7}, {0xeeee8000, 0x5}, {0x2, 0x9}, 0x40010000, 0x0, 0xf000, 0x300, 0x5, 0x0, 0xe6e70c00, [0xffffffffffffff47, 0x401, 0x5, 0xc5]}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000008c0)={{0xb000, 0x50000, 0x3, 0x6, 0x8, 0x9, 0x1, 0x49, 0x0, 0x0, 0x7, 0x5}, {0x3330e004, 0xeeee8000, 0x4, 0xf9, 0x57, 0x6, 0x7, 0x9, 0x9, 0x27, 0xd, 0x6}, {0xa000, 0x8080000, 0xf, 0x10, 0x1, 0x2, 0x8, 0x9, 0x31, 0x9, 0x9, 0x5}, {0xf000, 0x6000, 0x0, 0xe9, 0xc, 0x9, 0xb2, 0x5, 0x7f, 0x80, 0x0, 0x3}, {0x1, 0xd000, 0xa, 0x3, 0x4, 0x5, 0x81, 0x9, 0x2, 0x3, 0x4, 0x2}, {0x26000, 0xa000, 0x9, 0x2, 0x1, 0xc, 0x2, 0x5, 0xd, 0x1, 0x6, 0x9}, {0x10000, 0x10000, 0xf, 0xdf, 0x8, 0xe3, 0x1, 0x9, 0x40, 0x7, 0x9, 0x7a}, {0x41000, 0x100000, 0x3, 0x9, 0x7f, 0x60, 0x2, 0x2, 0xff, 0x7, 0x6, 0xfd}, {0x41000, 0x671}, {0x50000, 0x3fbe}, 0x1, 0x0, 0x5000, 0x10014, 0xf, 0x0, 0x9000, [0xf8c3, 0x100, 0x2dd0, 0x4]}) 10m19.591280388s ago: executing program 4 (id=4610): bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xa, 0x4, 0x8, 0x8}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000006c0)="ac5bf07dfbe37df362733fa6e33fcfe007a76905029bf5f167a7418ebe47895ee8a38f7c4ae25d6ae91633bc0b5bcd5572d067", 0x33}], 0x1, 0x0, 0xe10}, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 10m19.264643281s ago: executing program 4 (id=4612): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2710, &(0x7f000001eec0)=""/102389, &(0x7f0000000000)=0xc74) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_emit_vhci(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0}, 0x94) syz_emit_vhci(0x0, 0x8) writev(0xffffffffffffffff, 0x0, 0x0) unshare(0x20000400) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x5, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$pppoe(0x18, 0x1, 0x0) 10m18.828037593s ago: executing program 4 (id=4613): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000005c0)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f0000007a00)=[{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000000a40)="f2", 0x1}, {0x0}], 0x2, &(0x7f0000003bc0)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x4, 0x3, 0x9, r3}}], 0x20, 0x4801}], 0x1, 0x0) 10m18.728182422s ago: executing program 4 (id=4616): socket(0x10, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/19, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4400000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000804003001c0012800b00010067726574617000000c00028008000700ac14142808000a00", @ANYRES32=r3], 0x44}}, 0x804) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd60"], 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) sendto$packet(r4, &(0x7f0000000040)="2717a90af1a30d71286f47000000", 0xe, 0x40000, &(0x7f0000000180)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 10m18.410177535s ago: executing program 4 (id=4618): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x18, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2}]}, 0x18}}, 0xc000) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000006c0)="ac5bf07dfbe37df362733fa6e33fcfe007a76905029bf5f167a7418ebe47895ee8a38f7c4ae25d6ae91633bc0b5bcd5572d067fa7af73dfb4605ec2b21cbe0ca844c8033fe927cd5f154695e5c65", 0x4e}, {0x0}], 0x2, &(0x7f0000003240)=ANY=[], 0xe10}, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 10m18.09281997s ago: executing program 4 (id=4620): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r4, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8993, &(0x7f0000000040)={'bond0\x00', @random='\x00\x00\x00\x00\x00 '}) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000100)=[0x0], 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[], 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x4, 0x9, {{0x10, 0x4, 0x3, 0x9, 0x40, 0x67, 0x0, 0x3a, 0x29, 0x0, @broadcast, @multicast1, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x6, 0xffffffffffffffff}, @timestamp_prespec={0x44, 0x14, 0xc1, 0x3, 0x0, [{@rand_addr=0x64010102, 0xfff}, {@broadcast, 0x8}]}, @timestamp={0x44, 0x4, 0xc0, 0x0, 0x8}, @timestamp={0x44, 0x4, 0x1f, 0x0, 0x5}, @timestamp={0x44, 0x4, 0x8f, 0x0, 0x5}]}}}}}) 10m1.94453841s ago: executing program 34 (id=4620): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r4, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8993, &(0x7f0000000040)={'bond0\x00', @random='\x00\x00\x00\x00\x00 '}) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000100)=[0x0], 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[], 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x4, 0x9, {{0x10, 0x4, 0x3, 0x9, 0x40, 0x67, 0x0, 0x3a, 0x29, 0x0, @broadcast, @multicast1, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x6, 0xffffffffffffffff}, @timestamp_prespec={0x44, 0x14, 0xc1, 0x3, 0x0, [{@rand_addr=0x64010102, 0xfff}, {@broadcast, 0x8}]}, @timestamp={0x44, 0x4, 0xc0, 0x0, 0x8}, @timestamp={0x44, 0x4, 0x1f, 0x0, 0x5}, @timestamp={0x44, 0x4, 0x8f, 0x0, 0x5}]}}}}}) 1m36.477441643s ago: executing program 6 (id=6389): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) r2 = socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = add_key(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000580)=ANY=[@ANYRES8, @ANYRESHEX=r5, @ANYRES8=r4, @ANYRES32=r6, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES8=r4], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x39}, 0x94) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f00000000c0)}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_CONTROL(r7, 0x40086414, &(0x7f00000001c0)={0x0, 0x4}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r8, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) syz_emit_ethernet(0x7e, &(0x7f0000000100)=ANY=[@ANYRESDEC=r2], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYBLOB="fdffffff00000000000000ac6a00000000a72f0db2668ea52f0af5ccbdfbe5e4ca6522e9005d1acb987eca2670a179ccd24370bdd80e780706eee10bdc67", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fdffffff00"/28], 0x50) r9 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x35c, 0x0) preadv(r9, &(0x7f0000000040)=[{&(0x7f00000023c0)=""/4103, 0x1007}], 0x1, 0x5, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r11, &(0x7f0000000340), 0x11000) writev(r11, &(0x7f0000000080)=[{&(0x7f0000000180)='b', 0x1}], 0x1) vmsplice(r10, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) unshare(0x64000600) 1m35.19698453s ago: executing program 6 (id=6393): bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xa, 0x4, 0x8, 0x8}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000006c0)="ac5bf07dfbe37df362733fa6e33fcfe007a76905029bf5f167a7418ebe47895ee8a38f7c4ae25d6ae91633bc0b5bcd5572d067", 0x33}], 0x1, &(0x7f0000003240)=ANY=[], 0xe10}, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m35.08563581s ago: executing program 6 (id=6394): socket(0x10, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000300)={0x1, 0x3, [0x3e9, 0x6b0, 0x584, 0x7f9]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x7) capset(0x0, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8071, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x6, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) memfd_create(&(0x7f0000000000)='\x02A\xbb\xcc\xeb\x14\x16\xe8m\x14oSaW', 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f00000000c0)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r5, r5, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000640)=[{&(0x7f00000004c0)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa800207d7b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffff5d100187000000000000020000000056c147ed1093946a53c684645578a5cecf", 0x58}, {&(0x7f0000000540)="c9a61adf360d3ca5a2265e7e92bc57b4931313cc63826447a1a80a26d75997b487f2ad18d7f423ef8a9c41e4866e305017fa085b2914030cb9aa9ccf7ec1925afacb1abacc446524dd84834804ab50eaa6b92382f7a58310b5169f8ffecf03573ed03f56cc7373a4aa42a77107792ca93302f15d63"}], 0x714841f) add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) 1m34.169000222s ago: executing program 6 (id=6397): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) ioctl$KVM_TDX_FINALIZE_VM(0xffffffffffffffff, 0xc008aeba, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) getrlimit(0xa, &(0x7f00000000c0)) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\t'], 0xa) mount$fuse(0x0, 0x0, 0x0, 0x100809, &(0x7f0000000040)=ANY=[@ANYBLOB='fd', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') statx(r4, 0x0, 0x400, 0xe4302b54727e0c9b, &(0x7f0000000480)) ioctl$KVM_GET_STATS_FD_vm(r4, 0xaece) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, 0x0, 0x180) chdir(&(0x7f0000000140)='./file0/file0\x00') setpgid(0x0, 0x0) 1m33.199957805s ago: executing program 6 (id=6400): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={&(0x7f0000000340)="c2f67717e86635b8e3a6386e2a204d82e33ed24bab9deb4ae30d061da425babb5825f98e50867360c2a0a8f5710a2619fc80725a2687d3c10e7a45437549073cac5d879e9e6c7dd8a71acacd9ab46e88b23a10b49925516a69c713a1fd0715dba2ef6dbe791b35c0f85c503992d94cddafc22baa687b76316212f1b7d05f345287ccc0619c5e8696c07d4d6e560c7b0dd22c6d65eeb3c5a25fd2e5593379702b713d33697ba92f1f8c74fa540ce6a0f061faa9064af494d44b154a5ccb1ab4a1e02a6255d25c96f8382bbc3f3fa491e940d9751a7b1fafb4bf827e2546902b706e51a5424876dd1dc14fba9824586b19863bf08305e37ea396c12cb9952489b34a894cfec8e1e85259592f28515c44dd148a741579ea20ae277236eeada7b2107a9443716b98c05ace4118243591551e735dd7b85dffd307b2ca22544e6f7654b5f62f80486d656197d54f95b906cadd5e5cd61faa5f7845c7f091eafcbce74c6e34a1a7879ecc58cc2ad6f6ab212ce3e5be1a86a2b02d2d2728dab725045443b779dc467d49b44b26a44877fa349a0559e341af0e0197585846bf9102067a63253ac5f8a027cf3e50c5793da82b921e488cb81e4780acda1683e5da8d35ab02f8facdca0c5a09828b40685f10a8c1c7dabf852e9bad0850d7dc500584308eb0dda0e8fc3d05bbf833fff8243f55f24106cbcf263a1dbf034d9c8f018d8d8bb8f86a5228b31b5ae81baa87fcd9147bcea02ef590a608eab6b98ad0cb05073ae8b096c1c3f7057eae556936e2a661f699febfc4cf463b2096f120cc06afd7421e76a1ff8b1d7f703e7b657600dba4a117950171c20796e9a6c445156ab6383b8dd3d574bf86e0185cecff5ebb0b493eca8a407f4c4572e8b065d3487a1b66dc8508de4d6a0c1610efcdd01e4cc14b1e51c329d303cd500ac2c56be8bec002714762e182e01b8cda3f7223145945718e2c9d36ee5f1ef292380664667644bd07340db64a32397c40a53767bd77b3da125ac424a53545828c6b957df739bf45fa49949a20218d2243c9cd244aa611003d61dd4b05d7af03a71acb19592c9db080637f3a354bcf693c4b7848f19ce82d7dedb2a1709d1d47efa6fe650653168eb55bf90283c7ed3d0122e276ca0f6f96f07ac125b13de3a7ba3e31d38e7c73d2d264eaa3010d452459e2e6acb8f05f1bf1c9596725056e9c220600a81e0c246558eba1e1ff3aa3efe843fff46d67c6fb16501848ebedaaa78f40cf22ed0b63be59b85fceb2eae505cdb7f17ef87e0c70844fe3e097aa6ae01dc3baef246cbb38a0d347f3a91c7032b1a1981401a1c48bdfcfa339012d4094d1a130030e10152dbdfc603fde75fdeb4a5f63dc5a129771a1edf3273cede267a968ce121ee27c081dc9d3a16a227ef9ceb210ddf4f16d594a542dd64a2f23257a9c108cb54dac8c63639ba343a5fe7e42f8e0445601582fcec9f037587ccb7c4453cf5d237ed1932f76e77f6c7df726ca7be667c517fcd8568f1b7f311f74f58dd8fe337b4e3ffd47ce1ba921ef429e9fed3d29f8ced26514d830bac93c2a0427a77e76ad467dead3e933ac90d820c9843db087a4f8209f34f81a9672a6428ea6a2cdd0bf736f00e3c6e6da0ce2f32856e4a90504946d59575778249df925059cbed8bd84a8554f8ffaf1e26bb429db1f992831f000115c4f35d5b8b5b0b259d876e7ae7eb8da0019b3a417f8870d59f1bda08ebf195a54f8473de08c23e8e69bb033ab57767974f7a9cc40924904f3577739ec5ee02e9b59e1f2a7a5387388bc931ef89bb5f4dea0ad35afb666bbfe64edbf25e6fbbe3bb900998a02619891b7485c47ba9bbf6064db7f3b6992f80c217cbb8cd5d659e3eef49a8cb5b10083925ff8dea0845cf622ea2a3ba0be41b8bf5afd49d98d4e7d5f24192081d1f2eab96a069655957e52c99312650599a56750a0ef6f129573fbd8858ba449ad200f6f83a3b7dbbb86d6fb2efa9e5e5fe344b0891897df2f09607ba5ec9817ef89ad6687b8378178673fbd41fb7932e31e7ee8826a90aee3c34718e86217e8da504ce21f42463d15666a48f017d5f259a09b9cd86b551545b3f05031fb8f04a22f9d99c0e08e9a22d7b40c5716f0ca7128b59e8c2e2b2963e7fdc4da8a64ebfd2a21b611675d591a18ce6fa1d49bc4156a252a54a81f996040d3ae44e636ddf6fa8d9f95f1ce35fc287c37194078ff004ce2f01b24b759520d604e5803bc284cfaa275ef8fd96f52df76acc29604af34abce35a23cedd00edda74b4fc0746bc4e3bc54cfe7b397861ab2e0fac85dc67f5034e399af5d98adc54c1cb9cb6be1d015eabb20fd12eee429a371bf05f72240d4ea8a56ea68ced793dd6616ad2bbed355711cafbc94e61f2c512e964f0e87598e299ba3b1b00654de7b18edfbc4b65de7462666f917d72cce96304c95f2ef08a3d58a93a7e63e5db49a626387897b35e8473d6aa82ac8844697b6370b0872f7ca858143c5e523087c2f0c847cb3eaf077c574764ab3d37fb276f8b6bdf51915d849bbde42575e6b776804445a8a4c776f439c110227d874605a87525bdebeeb50eb4b4023b0e7905020c375f9cc9be8e6e89224c77c2dd2c7040a1b9896052c3f5119aedcedba9eed39579f6a3b3d22bd6762549ad8a2c4ed7e5480ff76db27c248aa14f4ceae55c2d3b27a85cabf5e11077c3fe06af9580d2a289bf434fedadd376776add3e947c717980b4cbba922c4674983348bec2aceb6c790524eea008b14cc1af99622359d8b7648b7d0df79444894a23a064684a6a70e2b52005d5cc438e615d60bad4a27a61cbbf1dfa00f1712582e4a83a2c534b0c95d02e6e95f7998d155028859d2e4c13ca2cf22f8fba5300c3a7b475d8a473a7007feae97086f5f48de07f89697c6cb5e5acda5cf6a61bb68fd25806cc4d5c0581b194de4ed120c1c0766176c8b64b18b82e26081ee88e9ab2bcebed3bf445d78da65c43ec49e8575c14ff1df14d08bdf947f83932f4ef563800c3508d26d5dda2c3b2e51a748e7bc0a733438e3989bc23bb7dd6dd5b462dd9be22acbd7d1f9edf3f284ca0c410223a1f73abc06b85c822c581d80f87c5326f6501c25c9be74da2e10fcef54f0fa0985700599cad219068805bd12cdbddfe4b3cd901d3ce77e863ea67e502fae27e243ffd3b40cd1c261d99634d173468058e328c5efd7ee996622b3132075faa2684396185a35a29ac67689c0b93ed196488deae8a8862313588bb1577c862540d4bdeb819b3b0560276bcbb40b7e4e95c641f6de24652ef717f44dbcad723fec4e10e463dd215f3823e0a59582cc354f76c5312f9cb2231ae8978b54584b730a2c7110f2c64fee50e1f48e4fb4b68912fbbf742371928ac9419c8a98986c7909d4a5d86aa07f3b71a135b688a6c0ebe4f9be324ba8993d1fee1e1a76c8bdc100a2004bcabb1bf8956fe6c08e6db0f4d426ea1d250d830ac2771bc25d4abf4a960102e40abb1302161444694d1fadbc534ea45e13c98649269a05ffe1e5d41567f3d9827ce6df0f9af90b0865dd61372b67c3adf82bc237fa5e550e950fafaaadf705b7120db7ef86a4b2dd5d35e4dc43259dce834329eb692b19c473c045539db041230c1d4612995b0f5c90d1c0ceb9e20fc4310642e2148b7a6c2910d0b735aa9c4ca3294c0b4ab308d3edccc585981a9893862812d1289625c68ff5fc6406a5784e8b0180745fbdb8ba8350fe7c8044a7b86e7c0e895f58e0a325582316d1f003b80bbb375de9240e425902fa27e107f925442f753f938dbb829a75b8cd08eb60d69ed70c4ac9a2d07f9b6451a76d2c71bf1e8a0078706fd5abfe520b36699576dbfd3add0fea57f69f568d99b5ad160e38ecdd2870dd424f72baf56795785ec2d996f761220c6251e36cb69937f302d6044d53b8d9fc8dec90d2711f635acd5efd6affe41eba26b6738f8d8c02d1a44722dcdbcb2cc9b4b5aecdb126dfe6c996a2674e1643f2f231d6d6417d2437507ed2404905c499d7028eacc080e8b1fde2e3793ed70543ee22af3d9c57511019d3623c7b18e5726d671bf362c668eddbb0b1eebccaac989f1fe680cdc693ad939061f7122493cceb6e10360a753e513e2f2954a9826eb1ca2494afa4a7b8dc12e6e1dc70e92f74de71cbf0cc42e675f2eb5c03658fad637433510566ab0843ce1d8f7351fa2733602d24d8e7d85bd4df3d63856e79505a65fd245fb4dc1d322809994c8fc5a65186e18f37c206a38952ef79d86c18991112f8d7197ae14b8e37900d822f3580102b7cc7ab2a789ad9f44da0bf684c4e48e34d7afd8366f38a45eb830aee0aa695d5e914be4fd82204d48852ddf0dde1410d1d03cd7b6e792d8b27aa6bee973dddf7f112bcab57e51811d2fab81f589fbea4df676c0ef8ab4f74aadb0e3c75d26399fdb7beec47054815d0e56ff46a9e8a244bc450d83e098e8aa934f517a834d8b16393a7c5206344efb79c7f3d24bdefdc48ffe1f7d92f216103612f968c96f92c374da57f5bdc63795f8a0b297c34e27cb25e98b551db000e8572851537b744893bc24601cbb1aebc1da990f3c65ae5ec1bb174d664589f7c97abdf93f7d8a83a09237d83cbae0d35e0155584edaecb60c93a9232eae8aa827833a94eabac27cd95934dd148ea37ef0e2fe58f7aff23e0ab182cfdd2e5c64ab36c2abfe1bdbe1d8e4ccd09b9cf880021e8bee8fdf4fd8c743fa157048539120c742f0660bb249080d8f93510e6d7ef64bda2cd11a39f2fdb5ec956e34ae7ef151f4e71f8552daa35b1d98b715378ae7114daf25a30f81a0d8c444bee18a98f38adc03b2133533fd3187676b724d3242c11820b5b9a2609883ad425e958b4c2c1f8e68402be95f16bf4c061df8a2c03447c9f079cd0851bdb74eafcd06bf537db9c05230eeea14998a5c15e1e3fb6b1c0732e50c2cf57636fbb8f0d9578453e1d14bbb586924654fc51bbea15b597cfa5ec556101a8a3cccfb8c7243ca7c0f417bd853eb3618d3c2bb907d51860da96de7c9938fc0f215a1e9afaf8da8bb8547e8181e0b6ad60500583ff0458a7c403ad38daa3103c22bc42ee01a926ebf8929a6e78838f4f7bde1bac02a8fa8dd8288ce5e0489f72cd1c689953da809f1e68fde6edd84e21cf1bf7878941f0bc3e358fd5889bbf41397b2533343f7efc9864327c03e499f005e22fcbdb1c6df3ec31e2169d9e1d62417143a194e4f0e4b0facf98001a483892181b44e62c0a026987bd7a183e24c1637459d702b80d2ffed6df53b815d9006a82d29a6131011881c51c4b906fc29813ec0de97e0068acc960e5b68bd7859a80baf71680b071d968fddb9c52e073766f8e54de49941937179a30d583e1f8fbd5da1a743822009f21207f22e7027296de3f9bc36f58b0196f5f086492d1f040985c1c659cc5aa8848d5fd0f74473a9c9a7b017a5a635df8235caf8dcbd17cb9772cdfbf71cc573421d9a7eff265325aaf4419addeed90a410505c35348cf5c74062b0b56b9bc4b78e2c97e27667d771027a3423845b27b707f1a1ba956a587d5fc8c7f23cee0f07fcba4cf06501d9977d7a22d022e0a2a705f9a6121cfd5941f3c1493cd6a4cbc8d414b8726511bee8686d76e59ac976f1f17fa70beb1194516b98263362740b86dd70ebb9461345d21a770e17e5504aaaa8ba72dd86b2a315d8e705836035253bd1f67268c2e671aba409f5cc3b6a09269b29f5c121559e0867da831440291f453b5b17d0dd1fb27d16b04f0471098ef5d6fcbc8445f5f113df77e5", 0x0}}, &(0x7f0000000300)=0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000080), 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000100)={0x2, 0x3, 0x2, 0x101, r2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) fchown(r0, 0x0, 0xee01) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) 1m30.692838909s ago: executing program 6 (id=6415): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000240)={0xa, &(0x7f0000000600)=[{0x0, 0x0, 0x0, @dev}, {}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @link_local}, {}, {}]}) 1m15.376165528s ago: executing program 35 (id=6415): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000240)={0xa, &(0x7f0000000600)=[{0x0, 0x0, 0x0, @dev}, {}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @link_local}, {}, {}]}) 16.222468534s ago: executing program 0 (id=6701): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163", @ANYRES8=0x0], 0x5c}, 0x1, 0x0, 0x0, 0x20000894}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 14.59523976s ago: executing program 8 (id=6705): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r4, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8993, &(0x7f0000000040)={'bond0\x00', @random='\x00\x00\x00\x00\x00 '}) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000100)=[0x0], 0x1}) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[], 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) 10.223862483s ago: executing program 8 (id=6708): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') 8.696166042s ago: executing program 0 (id=6712): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x800000000, &(0x7f0000006680)) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x800) munlock(&(0x7f0000653000/0x3000)=nil, 0x3000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x17, 0x5c}, [@ldst={0x6, 0x0, 0x6, 0x7}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc8, &(0x7f0000000240)=""/200, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201000000000000000008"], 0x1508}}, 0x0) writev(r1, &(0x7f0000000040), 0x2) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r3, 0xc018480b, &(0x7f00000000c0)={0x3, 0xffffffff, 0x7f, 0x9, 0x7, 0xf}) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000080)={0x49db, 0x0, 0xfff9, 0xbfff, 0x1a, "ec28a144f13d7607"}) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000001c0)={0x0, 0xffffef7b, 0x0, 0xb2, 0x10, "1b09000040000000000000e678000000001000"}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x44) 7.512645318s ago: executing program 3 (id=6716): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000280)={0x2, 0x4, {r0}, {0xee00}, 0x2, 0x8}) prlimit64(r1, 0x7, 0x0, &(0x7f0000000340)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r6, 0x25, 0x0, @void}, 0x10) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='map_files\x00') getdents64(r7, 0xfffffffffffffffe, 0x39) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r7, 0x13, 0x0, @void}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000020800410073697700140033006c6f000000000000000000000000000073d2fe3f54359b4286f1b73223ef1629c2f01b7e5d45d39aafb856cf994b881d79dbcf63b6364d378cd8ecbffbb5d8ab103f13112ba07a99719ca7255c366361519196330a9b1ff1c26be47718327ffde0d8332cb9105b"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0x2}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r8, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000640)={0x8c, 0x0, &(0x7f0000000680)=[@free_buffer, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000480)={@ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/91, 0x5b, 0x1, 0x3f}, @flat=@weak_binder={0x77622a85, 0x100}, @fda={0x66646185, 0xd, 0x1, 0x22}}, &(0x7f00000005c0)={0x0, 0x28, 0x40}}, 0x400}, @decrefs={0x40046307, 0x1}, @enter_looper, @acquire_done={0x40106309, 0x1}, @clear_death, @register_looper], 0x0, 0x0, 0x0}) 7.298768131s ago: executing program 8 (id=6717): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f, 0x19, 0x0, &(0x7f0000000040)="0300ab94ebc8f38e2b978482fd1900"/25, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000000}, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x0, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000340)=0x1) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000001c0)=0x400000) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0xfffffffffffffc45, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0xc854}, 0x4084) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 6.661162556s ago: executing program 7 (id=6720): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000002240)="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", 0x205) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/296], &(0x7f0000000100)='GPL\x00'}, 0x48) 6.634938828s ago: executing program 8 (id=6721): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_open_dev$I2C(&(0x7f0000000180), 0x1, 0x402) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1) mount$fuse(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00', &(0x7f0000002100), 0xa0001, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRES8=r1, @ANYRES64=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRES32=r1]) rmdir(&(0x7f0000000040)='./file0/../file0/file0\x00') 6.503880299s ago: executing program 3 (id=6722): socket(0x10, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000300)={0x1, 0x3, [0x3e9, 0x6b0, 0x584, 0x7f9]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x7) capset(0x0, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8071, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x6, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) memfd_create(&(0x7f0000000000)='\x02A\xbb\xcc\xeb\x14\x16\xe8m\x14oSaW', 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r4, r4, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000640)=[{&(0x7f00000004c0)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa800207d7b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffff5d100187000000000000020000000056c147ed1093946a53c684645578a5cecf", 0x58}, {&(0x7f0000000540)="c9a61adf360d3ca5a2265e7e92bc57b4931313cc63826447a1a80a26d75997b487f2ad18d7f423ef8a9c41e4866e305017fa085b2914030cb9aa9ccf7ec1925afacb1abacc446524dd84834804ab50eaa6b92382f7a58310b5169f8ffecf03573ed03f56cc7373a4aa42a77107792ca93302f15d63"}], 0x714841f) add_key$user(&(0x7f00000000c0), &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000180)="d3a2", 0x2, 0xffffffffffffffff) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) 6.201871488s ago: executing program 8 (id=6723): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000200)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.111626196s ago: executing program 7 (id=6724): socket(0x10, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000300)={0x1, 0x3, [0x3e9, 0x6b0, 0x584, 0x7f9]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x7) capset(0x0, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8071, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x6, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) memfd_create(&(0x7f0000000000)='\x02A\xbb\xcc\xeb\x14\x16\xe8m\x14oSaW', 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f00000000c0)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r5, r5, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000640)=[{&(0x7f00000004c0)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa800207d7b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffff5d100187000000000000020000000056c147ed1093946a53c684645578a5cecf", 0x58}, {&(0x7f0000000540)="c9a61adf360d3ca5a2265e7e92bc57b4931313cc63826447a1a80a26d75997b487f2ad18d7f423ef8a9c41e4866e305017fa085b2914030cb9aa9ccf7ec1925afacb1abacc446524dd84834804ab50eaa6b92382f7a58310b5169f8ffecf03573ed03f56cc7373a4aa42a77107792ca93302f15d63"}], 0x714841f) add_key$user(&(0x7f00000000c0), &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000180)="d3a2", 0x2, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) 5.258133112s ago: executing program 3 (id=6725): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x4, 0xfffffffe) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x94, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1f88fd56}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e22, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}}, @in6={0xa, 0x4e23, 0xa, @private2, 0x1}]}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000200)={r3, 0x9}, 0x8) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000009380)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x25dfdbff}, 0x24}, 0x1, 0x0, 0x0, 0x40051}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001580)={0x2, 0x4, &(0x7f0000000240)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000001340)='GPL\x00'}, 0x80) mmap(&(0x7f00009c4000/0x1000)=nil, 0x1000, 0x2, 0x10010, 0xffffffffffffffff, 0xa8447000) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) 5.167186732s ago: executing program 7 (id=6727): socket(0x10, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000300)={0x1, 0x3, [0x3e9, 0x6b0, 0x584, 0x7f9]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x7) capset(0x0, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8071, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) memfd_create(&(0x7f0000000000)='\x02A\xbb\xcc\xeb\x14\x16\xe8m\x14oSaW', 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r3, r3, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000640)=[{&(0x7f00000004c0)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa800207d7b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffff5d100187000000000000020000000056c147ed1093946a53c684645578a5cecf", 0x58}, {&(0x7f0000000540)="c9a61adf360d3ca5a2265e7e92bc57b4931313cc63826447a1a80a26d75997b487f2ad18d7f423ef8a9c41e4866e305017fa085b2914030cb9aa9ccf7ec1925afacb1abacc446524dd84834804ab50eaa6b92382f7a58310b5169f8ffecf03573ed03f56cc7373a4aa42a77107792ca93302f15d63"}], 0x714841f) add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) 5.105866234s ago: executing program 3 (id=6728): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@deltaction={0x14, 0x31, 0x200, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xe, 0x0, &(0x7f0000000380)="fc5cc45c490704289349a8af1d25", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 5.002269906s ago: executing program 0 (id=6729): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d0102030109021200"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000200)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.588350895s ago: executing program 7 (id=6731): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) shutdown(0xffffffffffffffff, 0x1) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001b00)=ANY=[@ANYBLOB="140000001000010000000000000006000000000a3c000000120a09000000000000000000020008030900020073797a3100000000080004"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) bind$alg(r3, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128-aesni)\x00'}, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x80000000, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x80000000]}}], 0x10af) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000000000)=',', 0x1}, {&(0x7f0000000a40)="cffd57a6ac7ece112d5767751fdef76189cfc0a6c05c57e8d605b750547123eeda6fc7b4851d24b2eab397a284ded0bde3ca74a11818fd64b69f61067900d61e0b37b41fef24e5da2c741b0a46fbc7201c459ccb6c8d2180529e0422e4e3e8e2a565dd1235573763d4b976a80dfc6fc2a2fbe2e7a402513273c0bf9293053ad7645d2e1a87444c16bf3a2c6f4a8f92c6ed145824e380b978daf8f969ba5aa3d72a0a95072fa22c824337de747328abb1f427c75baccb35662cb2065998dd94da", 0xc0}, {&(0x7f0000000b00)="4280b516a5a2e5e2bd044801411e6872999ae93efab3acee2dd80e69177faf00438835b5", 0x24}, {&(0x7f0000000b40)="df36cee95cd26684db0eec1ad149d226c1376ade5ac95a83f6758bad248e2d8f65b377ffd0d6d73cb3a8c6c495141bc1b18c67b61d1bec9970a8163fd408f89748c159deaff86118ed36c3c0ed7ada5d6fde229f3cd5ae534e67bd3ab9f04de49bab3542fbebfbfcce3a6f2a38320308d7e6031d240edfcf3cf6e47356b728d14c3f5b75f6d7f208f464fa97d7e99d340a352f0ab99daf1ebe8c4ecbf892f75856460eff6a6f05a7487e", 0xaa}, {&(0x7f0000000c00)="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", 0x4f9}], 0x5, 0x0, 0x0, 0x2c}, 0x44004) 3.578474721s ago: executing program 3 (id=6732): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@broadcast, @multicast, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "d172f5", 0x10, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @ni={0xc46ee13d8e75c188, 0x0, 0x0, 0xc2, 0x2, 0x9}}}}}}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, &(0x7f0000000240)) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0xfffe, @dev}, 0x2}}, 0x2e) 3.424357706s ago: executing program 5 (id=6733): r0 = syz_io_uring_setup(0xb7f, &(0x7f0000000500)={0x0, 0x38ab, 0x800, 0x0, 0x1e6}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r3, &(0x7f00000004c0)={&(0x7f0000000100)={0x1d, r4}, 0x10, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="010000008d000080ffffff0000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="00000080010000000100008008010000c75c85e8b0e3eb49"], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000800) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000000307010300000000000000000500000d090001"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x12, r5, 0x0, 0x0, 0x0, 0x40000222, 0x0, {0x1}}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 3.423030941s ago: executing program 7 (id=6734): r0 = signalfd4(0xffffffffffffffff, &(0x7f00000004c0), 0x8, 0x800) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000780)={0x9, 0x0, [{0xb, 0x7, 0x2, 0x0, 0x9, 0x1, 0x8001}, {0xd, 0x1, 0x0, 0x2, 0x1, 0x4, 0x3}, {0xc0000000, 0x3800, 0x5, 0x8008001, 0x7ff, 0x9, 0x8}, {0x4, 0x8000, 0x6, 0x40, 0xcb, 0x7fff, 0x5}, {0x7, 0x7, 0x0, 0x8, 0xc, 0x6, 0xbdf}, {0x80000019, 0x0, 0x6, 0xc, 0x1, 0x6ada, 0x2}, {0xb, 0x10000, 0x4, 0x798, 0x8, 0x4}, {0x80000008, 0x5000, 0x0, 0x6, 0x80, 0x7, 0x6}, {0xb, 0x2, 0x0, 0x1, 0xffff, 0xc2, 0x6}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x6, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="8742af752d37c226f7bd23b1bb5c4a5c6ae587c57616dbae8effb0eb1613ad359953810e794e80462783f5160e139c0996f1cb42ba67c07fe2b1c0046e6d065fc2ade30441f46701b07c030c1ff312a7b14b6e239e748c1891d5fada689b873ca85f5210748d03db9ed56011023b641cd8c2f73d5bd449ee75824a4d4312cc7ef2a574270c2797e9327acf8dabe63c825dd4222be4babe55597b0438f0e3db48a66bb022"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x2}, 0x10}, 0x94) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0xef) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x7e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000000, 0x6, 0x0, &(0x7f0000000c40)="63eced8e46dc", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r6 = accept4$alg(r5, 0x0, 0x0, 0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, 0x0, 0x0, r2}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r7 = io_uring_setup(0xd9f, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x43) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$vhost_msg_v2(r6, &(0x7f00000003c0)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x3}}, 0x48) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="fd70b7fec10d7e1b7bd6c1bc27ed203e476e2627163a4ebb41c5f22a0606992631b7805085b8f8aa6214aaf8521955c9fc9dbc636cabc1326ecf0e25c13c557a00", @ANYRES16, @ANYBLOB], 0xd0}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="58000000020603000000000000000000070000000c00078008000840000000180500010006000000050005000200000005000400000000000997020073797a310000000013000300686173683a6e65742c69666163650000"], 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004090) r10 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSUUID(r10, 0x80111500, &(0x7f0000000600)) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) 3.297129795s ago: executing program 5 (id=6735): ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x3, 0xffffffffffffffff, 0x80000}) ioctl$SNDRV_PCM_IOCTL_INFO(r0, 0x81204101, &(0x7f0000000040)) r1 = io_uring_setup(0x5a72, &(0x7f0000000180)={0x0, 0x89ef, 0x9928, 0x3, 0x1c5}) (async) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r0, 0x40184152, &(0x7f0000001340)={0x0, &(0x7f0000001300)=[&(0x7f0000000200)="4d1a752bebd14bd41c1172acfa726b951b9b234efd8c1b07411a07106cf0e4ac8ef7f9963a", &(0x7f0000000240)="0ea198bab5b8bc4da226297463f4aae67d6bdcd4089343b064d465d2b9b2d9527260de2c051e564eaa8816d7ec53659bbb203471c924c015a472fbb8d82b941c01e0f858489694d7053ca93b8bece62031a885946596e73f98c34d0ab3b0a6be96f8fb58ab8b20a90c127e76c9de4e600f0c06", &(0x7f00000002c0)="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", &(0x7f00000012c0)="f8f1c45611fc6c4b6c577b0be282df09bb4c268f6f1605"], 0x8}) (async) r2 = openat$incfs(r0, &(0x7f0000001380)='.pending_reads\x00', 0x200, 0xac) connect$unix(r2, &(0x7f00000013c0)=@file={0x1, './file0\x00'}, 0x6e) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001440)={0x3, @pix_mp={0x3, 0x8, 0x56544943, 0x9, 0x9, [{0x1, 0x7}, {0xc537, 0x7}, {0x6, 0x3}, {0xff, 0xffffffff}, {0x7, 0x9}, {}, {0xfffffffe, 0x400}, {0x2, 0x3}], 0x2, 0x2, 0x7, 0x1, 0x5}}) shutdown(r0, 0x1) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000001580)={&(0x7f0000001540)="463f9a8a612ff5937f3d73a8c415ab99872372ef7ac6d00a627d277c5cba", 0x1e}) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000001600)={0x3, &(0x7f00000015c0)=[{0x1, 0x1, 0x6, 0x8}, {0x1, 0x4, 0x44, 0x10000}, {0x1, 0xf5, 0xb3, 0x4}]}) bind$inet(r0, &(0x7f0000001640)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000019c0)={0x1, &(0x7f0000001980)=[{0x7, 0x1, 0x1, 0x3}]}) r5 = fanotify_init(0x10, 0x8000) (async) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x200080, 0x0) (async) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001e40), 0x4202, 0x0) r8 = accept(r0, &(0x7f0000001e80)=@xdp, &(0x7f0000001f00)=0x80) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000001f40)=0x0) (async) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000001f80)=0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000001fc0)='./file0\x00', &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) (async) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000002080)=0x0) (async) getresuid(&(0x7f00000020c0)=0x0, &(0x7f0000002100)=0x0, &(0x7f0000002140)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002180)={0x0, 0x0, 0x0}, &(0x7f00000021c0)=0xc) r19 = syz_clone3(&(0x7f00000023c0)={0x120808400, &(0x7f0000002200)=0xffffffffffffffff, &(0x7f0000002240)=0x0, &(0x7f0000002280)=0x0, {0x16}, &(0x7f00000022c0)=""/97, 0x61, &(0x7f0000002340)=""/9, &(0x7f0000002380)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x9}, 0x58) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002440)={{{@in=@private, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@ipv4}}, &(0x7f0000002540)=0xe8) sendmsg$netlink(r2, &(0x7f00000026c0)={&(0x7f0000001680)=@proc={0x10, 0x0, 0x25dfdbfb, 0x200401}, 0xc, &(0x7f0000001dc0)=[{&(0x7f00000016c0)={0x2a8, 0x30, 0x300, 0x70bd28, 0x25dfdbfb, "", [@nested={0x70, 0x80, 0x0, 0x1, [@nested={0x4, 0xc2}, @generic="3a89a6ab3bcbafb632a3b59d4b98b7cdf49ceb1c5055e8de36a8a96760457892ce49b20af926e8effc3777db09378b9421d8c158105b2ba120ad95109f9fbed550850be24819d9d29c42a30c70615d3e28655ce693405116cd7945467efafd9a", @nested={0x4, 0xaa}, @nested={0x4, 0x7e}]}, @generic="3190290125ab07669ca849d06ad22ffb118703a5d1286e20ca16b6de6a3bd085fe5cde7fb515a587697681c7e3b1917d6259fdcf097e60413ce0e482301876ace420ff47efdf5fc099139cfcca5c7e904e0a15580833245ba3de65c75c78fc784577b0563336f112c2218e12931075c7af2123319456543217b66a6c9664732cb25b4f5fb9c2d3fefc831d990e811f4aa839d31812313f0919571d28f96b9b37cf01c7eea5c74654fd2717f73201c45f46b6bc3e6d4f179aa9d4ee6361801ce1c6f3edd5416fa439b0ac3c51764fbd60dcc0e4b4498c2ca1f4e8e0bce6bebab17707db63992fcf52", @nested={0x13d, 0x15, 0x0, 0x1, [@generic="9249ee8b44a97dda163e39d3a397843420ddbbd2d0d3ab87", @typed={0x14, 0x79, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3c}}, @nested={0x4, 0x134}, @nested={0x4, 0xff}, @nested={0x4, 0x154}, @typed={0x14, 0x95, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic="7c413de1dfd17bbca5bf06a0c7c18e262a32c85616c0e323a17131b83e0dfb7c477402d0b5646930fc5e111e4977a6ed00069a4a02100b83b0389f68acf1b8ffd58801f6f2bfb664256ff38ca8c62f3e137dfd07c0f680d1fc5d8ded37f1cae346deb0db75b6a1ba69375220674136d6b4061d757ac13e2f9c3a6e160c19f4835208c1b8211f3df038676ca49e12609c5b064a2ed4d0ff844c1fa8f0a41e1a4c91c05752c43c84cb9d42147333a6b552f147705e37b85df579ed16fd72f3581d367329c44d2049986a2416d3ee", @generic="3b583cf3d7d3dcf132827e7c4261569f0d742c4d745701625cc87cbe", @nested={0x4, 0xfd}]}]}, 0x2a8}, {&(0x7f0000001a00)={0x234, 0x3b, 0x300, 0x70bd28, 0x25dfdbfd, "", [@typed={0x8, 0xc0, 0x0, 0x0, @fd=r4}, @generic="3c64764d368f2392164efaf2dbc0c94e5954043e2bb658f4ae5df32d71e3be7f1b00ca023faaf500d30c0a0df5ed81eebd8cfda5a90267616dd43483122e98bd8bb01a9a13cdfb4295d13350", @typed={0xc, 0xa6, 0x0, 0x0, @u64=0x2}, @typed={0x5, 0xa3, 0x0, 0x0, @str='\x00'}, @nested={0xb1, 0xc8, 0x0, 0x1, [@typed={0x8, 0x8b, 0x0, 0x0, @fd=r3}, @nested={0x4, 0x10}, @nested={0x4, 0xa6}, @nested={0x4, 0xcd}, @generic="ea4a51e70d263b6a6f43207a06f8cc23118e91c1851315434d8c1e73df6a79ae003ccdd5044cadd4d9791f5f2673b71cfde828079c699ad8f8f290fc03f8000ff1fb1560a34dab9b7d630d8e117019cbdf5a66c8d033a550ffc52625047a4f5a663b2aead68cfb7944c977cc0572e8c9b7989bc669151ae22a695e7eae0b6e4117cee31577be28fb4649b3adc6", @typed={0x8, 0x37, 0x0, 0x0, @fd=r5}, @nested={0x4, 0x69}]}, @typed={0x14, 0x72, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @typed={0xc, 0xe7, 0x0, 0x0, @u64=0x80000001}, @typed={0xc, 0x10e, 0x0, 0x0, @u64=0x9}, @generic="a603ab09ef729bc117e134e755f64ecbec2aec8407311e7809386cd70d58878d665b40ccf1bc608b91d83db12a188a7ca8bff8066d6083ff48372c8ac2466b61e3a9f3ceadf015d15b52fe46930d306ba683decbf0770667bd49784f02724dc4911f33a5b08224c66ed60060caa2ce0fa6318b5b5ee56b2dc0db26f3b02a422490da31378cbd0e56400e8c23e2b393087182e7471740d792ec2585d744cac2d9ccc9f7e0e7883ff382ad67731a40ad4293f441b2c44f858ad73743566c4bfb7f970a65e0ca9fa9932ee5402f4763583f3b47326b8f288dea6d808fbb"]}, 0x234}, {&(0x7f0000001c40)={0x170, 0x3a, 0x300, 0x70bd2c, 0x25dfdbfd, "", [@generic="a385d75dfa29efc107563a9160d69d887e3581379c30d14388eb47c6c929feae7f9bcf9812ac11c3a4e6ddf6ef1dc89e63a9bfcda46a32d5f4c2f018c6ef0db6da2c47b316fb0ee14983de963357b1c4373880ca6eda38c90e67bec73173a96f493f516ab30d71c358a829ec0e58d106394dc435d1b75b9d14f4a39ecc67a3247258348f95ba46cfa8ea04df0c2a54d4f4edf71729dd87061105dc6d7db4c6a921cbdb9aa4db1cc04009d1d396e42694c840df227d1974935e4b96ce05f2c7335275a77512c69a91b18976ab8f51869dbda875e5552306de2593167699a1cd09e6e0ff1ea850621596", @typed={0x4, 0x6}, @generic="683633e27bda16faaa276790670bf59e3be1a1d7d0a55e64a658dc77f20882952b2520f4226f150380cd1a1a6319f892319cf9133e35d0905dc37d0aa33aaadde8f98b597d773522af4041d19a41457c0f815e9f69e4f3bd68524edfa21e618884684b1d1526ce19e4283caa29d6a9655bff"]}, 0x170}], 0x3, &(0x7f0000002580)=[@rights={{0x2c, 0x1, 0x1, [r6, r7, 0xffffffffffffffff, r1, r0, r1, r8]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @rights={{0x18, 0x1, 0x1, [r1, r2]}}, @cred={{0x1c, 0x1, 0x2, {r12, r15, r18}}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [r2, 0xffffffffffffffff, r3]}}, @rights={{0x28, 0x1, 0x1, [r3, r0, r2, r1, r2, 0xffffffffffffffff]}}], 0x108, 0x10}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r24 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002700), 0x10081, 0x0) (rerun: 32) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r24, 0x6628) (async) r25 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000002a00), 0x2, 0x0) sendmmsg$unix(r24, &(0x7f0000005700)=[{{&(0x7f0000002740)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000029c0)=[{&(0x7f00000027c0)="5758b318737cb85bda825520dd529ef51986bd39f81e5537d569e95ef8ec97ab8f", 0x21}, {&(0x7f0000002800)="50a382ab8ab5a16b030efca3c2bbccab528898dcad185e05077bb49e4a885a21699f6c3042623d690e58f489d4d3a109a29c41e53a9850052a5ebb09733a290689d6da5bc8b43c5be69b91f298202431f8bf3d6ab4d76c7787789c698530440ceed86a02ad486ae13f030d18ee38e7a5ed0696c3a24303294aa98bd4c234061e936469a4a840afbdeada2d23a52830490a65c2f8d698222364c58b976d056951dca347518920083c75d69458fa17cc752f", 0xb1}, {&(0x7f00000028c0)="e7ade9a84999ee9ae7861866c1bfe6ffa6caa29df5cdc713fd16f3a6987398d7128f7c83926faf62e406a48638b0193310f2cc881ff4b65d318c81bb2f78eefa0c99a76ba3ee5744fb6c18925b7c6cfcd6f6625f7baf231e60d4019db01caa4332e5483c9fed6581c9876a89253bf93a6c4692b57392eee6bd9abcf7b6475f79f204f5f939fe7fb413bb5619eac7ab103de706c6f2459dff4167e256a3e03e8a1e0d2433e1f1bd7fb55d92adaa2c1cf3b323e6611f8c4936f2d396f0345439220b87581ec3a6657883c4f9080cbc4684ec41ddfad95e7e8a1b28e60d54", 0xdd}], 0x3, &(0x7f0000002b40)=[@rights={{0x38, 0x1, 0x1, [r1, r5, r7, 0xffffffffffffffff, r25, r24, r2, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r8, r0, r8, r24, r20, r6, r0]}}, @cred={{0x1c, 0x1, 0x2, {r21, r13}}}, @rights={{0x14, 0x1, 0x1, [r20]}}, @cred={{0x1c, 0x1, 0x2, {r19, r14, r18}}}], 0xc0, 0x8880}}, {{&(0x7f0000002c00)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000004080)=[{&(0x7f0000002c80)="2f3a4b24cd9ca54da2801c3d4607599568f1c4442f70e42fec912bc48296f4d74d774246e7248d54cacbf003ab8caf433f3dba838ccedbf1106d7a62ce966c1dfbd51d2db8985b298172cea4f970a17daca34726c60e78541753ff0cd3bfb5dad98f930c440ea804ba06e6f41caddec317e55f352227e1d64623c9cb9467597eaa6eb517bb29487c5935c48003b75b1360b44aa68cf3c1820b3d3f8de2b612a18c6f9aed91a69af59f231d0643e35063a33a76701fa6963a", 0xb8}, {&(0x7f0000002d40)="c4443d0a9411e5d3c02ce2a76169aed3a3b3c8c1a31cf004526350cba43dd577dc86c1aed7a75102cbb5c94ea469bfae88fc1816a75f5e", 0x37}, {&(0x7f0000002d80)="2e202f7d74109ec79c81", 0xa}, {&(0x7f0000002dc0)="2e7a44ab47ef1977807a422a65f66c43f5a23db763505ddf682303384df794aa58a69bd25022b90b9f50f76488b15602d4d5f49250aa477eeed765cb18f87931115173c02215131bf5d280913cd2967e9a1636c455a1ae6eb3ac9fd2cf1f08c7cb2d341b9f41cb9f7aaf64191994fcfb45bfda5b6ebf1d5139eb2ac282964e56664038a935a2083f102034a44b4163f082606c4fe71907fa04ea78f68e3c26805cc4ba77656c40675314688e6cfd0c686a9e30d368ca42711c661f7c63c9bd6f0bc0aeae9c30e3302f29472e907e325c2ccdb8b35ef57800094165d78e8e67aa153655ff5c611927", 0xe8}, {&(0x7f0000002ec0)="603a215ba13c0ff211915f32f47f0069b0596c172bf8758b2b69e87475302fb3a450", 0x22}, {&(0x7f0000002f00)}, {&(0x7f0000002f40)="b81aea2915bfa54d8f025a8fa714ebf175f862d1d705ad22b7c23d245dc271d895f9ddebfacb187839411d319184ddbb2ad55975549117c5439f438c377e05520361a7919964e639f74a6c0ce2a367b3db12f722caabfab4f9673711cc0cfa9e184a8cd2f763fd4658f1660b3f422ce468af398a0e55e578d905c1d409daf30f149b451082a1deb6a0c24616801d3bf9c878698cd69efd5b1a733adf6da723d333cb7cbf3f7327d41e69", 0xaa}, {&(0x7f0000003000)="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", 0x1000}, {&(0x7f0000004000)="2f556ebbac2c410ca2bfcd81151986a044c2f875c69fdea9c0395f3352c989847e57f28284bca0313b938a4b9f9520b92c1d5cebe8340e57c840131d4ce1e5e29009d45695a4a853", 0x48}], 0x9, &(0x7f0000004180)=[@cred={{0x1c, 0x1, 0x2, {r16, r23, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r11}}}, @rights={{0x2c, 0x1, 0x1, [r24, r6, 0xffffffffffffffff, 0xffffffffffffffff, r7, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {r22, r17, r18}}}], 0x90, 0x8090}}, {{&(0x7f0000004240)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000005600)=[{&(0x7f00000042c0)="fcd23924ac2b46c1212872697c09e26460a9936268da041e7744e1d37b084f1837b905afd3b5aa72380fef59b3b93df777280f1b3cd798ac7b", 0x39}, {&(0x7f0000004300)="701a2dae362b9fbc86accb70026e1476d0a75c1fa2114ae9cfef6172579461141bc98bd1d938497ca7ede9f0623080cc1becbda574767ea7d15dff09e49ca076a71fb0654a1e4bce209a1dd0bd3096952369a75ece87dda21d2bd528dbfe8757e3833c42ce6394d3ded73dac4a14c7218b8946a8d0b2ca8e41b0185cb7802c372e755ed8eedcc817c52935e1a3bc220791fcb3b861c80ccef137d2edbb832ca3a76445fbb6509d4521006c5e1e0afed22d2ee3ecfed81e66b720b87e14d19741", 0xc0}, {&(0x7f00000043c0)="4f54c1fb1da1006b075fe4885906794825a5419c93517c84245355de53b39a938204d2139817690acbeb947abb0cdef504a534ae161b6b10410d803f45c86f666a3883cbcfe9bdedb2331be8fcb8e5e0cd8ddfebd81cbafe94f986ed6c68522c18bfd44cde741b8ef69210c07e7006b1c0e03001898fc539cbd544c089a17282624ec809f13fb014fd2daeebf352876904094dd5c53754f3c55fa293fa81cb01ffbb552da64e335e79f3bf7143749413f9aafb7685a23f794abb75049dfd7bf7d3271633ceb146e116c0721730d92d22770c63a1d1737e8d", 0xd8}, {&(0x7f00000044c0)="6c17e73c9d8da04edcbf7121006a2165618c540c2c1559da04ed8816a6adb03311ad16e6f0c66e730d3b2137d8ea4dde8caf675c3b8a56dcc52708220b487bbfd6889fdc776ace365584d64debd70947ff2ea6672cbd75f06c463d7ad2e898fb67a4fbb9bf9e49125f9e1efaaa0cccd418736857edec605137b1d463ebc07c98d229d81c1edd9fc6049804637b20bd6bf069754bb68cc25336b5b87939053b74e43c87c01ee879e6e0d43f3a3772dbc59e7443df69f98b5ee345c9d85c90a1676e5b0d8035a030a80a5c7103c4f5", 0xce}, {&(0x7f00000045c0)="63a2ddeaa310063ffd95b0a5b60e55d38c0c0066ec32f378", 0x18}, {&(0x7f0000004600)="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", 0x1000}], 0x6, &(0x7f0000005680)=[@rights={{0x20, 0x1, 0x1, [r0, r4, r5, r0]}}, @cred={{0x1c, 0x1, 0x2, {r12, r10, r18}}}, @rights={{0x1c, 0x1, 0x1, [r5, 0xffffffffffffffff, r3]}}], 0x60, 0x4000}}], 0x3, 0x800) 3.28838798s ago: executing program 5 (id=6736): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x993a, 0x0, 0x5}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000078000000060a010400000000000000000500000008000b400000000050000480240001800b00010074756e6e656c000014000280080001400000000108000240000001000000000000000100667764001c0002800800024000000017080003400000000a08000140000000090900010073797a30"], 0xec}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x830, 0x0, 0x7000000}]}) r5 = socket(0x1e, 0x4, 0x0) sendmsg$DCCPDIAG_GETSOCK(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="7c0000001300200026bd7000fbdbdf252306060800014e23b20f0000f90f000001800000ff070000ff07000005000000adaa00000800000078e0e2a4086262047ce24cdc5f1b18f542ff48435e8a3f7dd184cf318079e64cc64a2cad3a3e8f2bebbe9327c78582a80e61c1263c15517bf3fa5946fe9ee4af5513c805a14884f7f735cccf515190d5889125ae52477caaa6dc5d7f7c53e5f05263e6ef1070b6dda34d3ff45e586eb0476ce20010ad9ad6aadaaa294708cd66d49ef818fd450fb3e1e123c546d6a3fa80ba272f823a2e78436b3cbb9f440609da006d1c7a0d0f1b8eceadd3d1df32f88239abb8bb183e81275394e54483e86e71cd59d006b6c6f20e8dc2cd7810409ddacaed56062ac1efba5ddb5d255fffa79e7c", @ANYRES32=0x0, @ANYBLOB="0100000000007425000000000100000030000100860a7bcf181b5594214e6fcd755e0a50357cfbaec07cbe3ba33e231ec543a2a5d7a290e00fe8a69cdb6bd775"], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r6, 0x15, &(0x7f0000000340), 0x0) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r7, &(0x7f0000007ac0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000340)="2a69c2583452089188ca", 0xa}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000980)="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", 0x1c1}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x19}}, {{0x0, 0x0, 0x0}}], 0x5, 0x40) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002300), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x3) r9 = getpid() sched_setscheduler(r9, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r11, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x1d, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfc, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x0, 0xc9c, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x7f, 0x7, 0x2, 0x0, 0xfbfffffffffffffd, 0x5, 0xffffffffffffffff}, {0xffffffff, 0x0, 0xf, 0x5}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r6, &(0x7f00000023c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES16=r8, @ANYBLOB="020029bd7000fbdbdf25410000000c0099000100000004000000080027000000000008002600b409000008009f0001000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000805}, 0x1) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0xfffffffffffffd72}], 0x1}}], 0x400000000000181, 0x9200000000000000) 2.971565982s ago: executing program 8 (id=6737): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x703, 0x270bd24, 0x25dfdbf8, {0xd}}, 0x14}}, 0x4008800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) setsockopt$inet_mreqn(r1, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r4, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801}], 0x1, 0x54) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x30, r8, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x30}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r6, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) mlockall(0x2) r10 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0xffffffffffffffff}, 0x78) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r12, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r12, 0x40047459, 0x0) shmat(r10, &(0x7f0000ffd000/0x1000)=nil, 0x7000) 2.649388375s ago: executing program 3 (id=6738): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb) epoll_create1(0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000240)={0xfffffffffffffffa, 0xffffffffffffffff, 'id1\x00'}) socket$alg(0x26, 0x5, 0x0) fsopen(0x0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x6) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) setreuid(0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, "4620f63a4e6b5c9b4410b99e0e549fcfdeb92566761ad1c34ca4a1abe476fa96"}) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x2, &(0x7f0000391000/0x4000)=nil, &(0x7f0000e18000/0x3000)=nil, 0x1000, 0x0, 0x0, 0x20002b5, 0x0, 0x0, 0x0, 0x18}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8c853}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000120a0900000000000000000002000a2f0900010073797a30000000000900020073797a3100000000080003400000000108000840000000000800044000000000140000001100"], 0x6c}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, 0x0}], 0x1, 0x18, &(0x7f0000000740)=[@cr4={0x1, 0x100008}], 0x1) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg1\x00'}) sendmsg$NFQNL_MSG_VERDICT(r1, 0x0, 0x0) 2.374652306s ago: executing program 5 (id=6739): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000002000010027bd7000000000000a002040000000070000000014000200fe880000000000000000000000000101080018004e204e202140729197c22c26598aa36907a4ce2ecfdfaca050b5a966ceae2226274f16d9f11c9793b612b72e64b494d2afcfbe203de2ef149a7109882fc01c690a36ce133e01c8d3eb1ee561180def660f7a0e"], 0x38}, 0x1, 0x0, 0x0, 0x24048844}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906125a10053c8e288ac4445ff0e999d423cc250e31e8650d248e49ba5fb3be8db01db38acf5a4455941fccee465ff611f05df90d63", 0x78}, {&(0x7f00000008c0)="ef7791000dc7777cb951ca638ea0e1b5d280548c882aa59a68cd17c0e7f23d6d56a03be6caa272b3505e304463179c4d7768d9c3e5521f3a9d63ffde6682c5ecfe50122e579f88d4", 0x48}], 0x2, 0x0, 0x0, 0x240001d1}], 0x1, 0x45) recvmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)=""/56, 0x38}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x7fff}], 0x1, 0x10043, 0x0) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r4 = gettid() timer_create(0x9, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r4}, &(0x7f00000000c0)) add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000480)="99", 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000600), 0x80) 1.86560716s ago: executing program 0 (id=6740): bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xa, 0x4, 0x8, 0x8}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000006c0)="ac5bf07dfbe37df362733fa6e33fcfe007a76905029bf5f167a7418ebe47895ee8a38f7c4ae25d6ae91633bc0b5bcd5572d067", 0x33}], 0x1, &(0x7f0000003240)=ANY=[], 0xe10}, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.794672832s ago: executing program 0 (id=6741): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r7, 0x0, 0x0) connect$pptp(r7, &(0x7f0000000000)={0x18, 0x2, {0xffff, @local}}, 0x1e) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r8, 0x12b084226d2dad07, 0x0, 0x0, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}}, 0x2c}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) r10 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CMD(r10, 0x80506409, &(0x7f0000000180)={0x1, 0x30000, 0x80, 0xd, 0x10, 0x3e7, 0x2, 0x0, 0x20, 0x1, 0x20, 0xffffffff, &(0x7f0000000600)=[0x7], 0x1, 0x0, 0xffffffffffffffb8}) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f00000002c0)={0x0, 0x6}, 0x4) 1.356997579s ago: executing program 5 (id=6742): socket(0x10, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000300)={0x1, 0x3, [0x3e9, 0x6b0, 0x584, 0x7f9]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x7) capset(0x0, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8071, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) memfd_create(&(0x7f0000000000)='\x02A\xbb\xcc\xeb\x14\x16\xe8m\x14oSaW', 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r3, r3, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000640)=[{&(0x7f00000004c0)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa800207d7b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffff5d100187000000000000020000000056c147ed1093946a53c684645578a5cecf", 0x58}, {&(0x7f0000000540)="c9a61adf360d3ca5a2265e7e92bc57b4931313cc63826447a1a80a26d75997b487f2ad18d7f423ef8a9c41e4866e305017fa085b2914030cb9aa9ccf7ec1925afacb1abacc446524dd84834804ab50eaa6b92382f7a58310b5169f8ffecf03573ed03f56cc7373a4aa42a77107792ca93302f15d63"}], 0x714841f) add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) 508.065638ms ago: executing program 0 (id=6743): open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89101) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x182000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000580)='net/fib_trie\x00') pread64(r0, &(0x7f0000019180)=""/102349, 0x18fcd, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x18}}, 0x4000) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) setitimer(0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a000000050001000600000005000400000000000900020073797a300000000014000300686173683a6970"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x0) 194.021897ms ago: executing program 7 (id=6744): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) r1 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0x80003125, 0x3cd0, 0x4004, 0x181}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x34, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_FILES(r1, 0x20, &(0x7f0000000000)=[r1], 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x11fe, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="09000000040000000c0000000b"], 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000000000000850000006d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="060600000000000008000000880000000000000080f19aba1ace2395b5810d3b9e673d2ad1cccf3600cb586b52e4b9cd13d0ea70cdd1e28c6857030bdcd24bdacc7bf511eec475d7fb396f3b73d2b5a8ff7a6107584cfe074efdee7b14f2ee059a467f815768a17a1522a61c9a44ba7af04184dbc12ef94e85e93bfcb10cbaca12d39a3a42f8540b44098aaa59a4da63513c7995c3d3e552415a1a38ec92f49c0717377e59791ce45dff60669087b0da81a708d88ffd6f6ff069c60897317183c813f1755989bf1d05750e558013dad7be9343e183fccce7be6ffdd4e24723ed2434446d3f6b36912dd1461d", @ANYRES32, @ANYRES32=r5, @ANYRES32=r0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x205, 0x41}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRESHEX=r5, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r6}, 0xc) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r2, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x102, 0x8) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0xf9) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000001c0)=0xd) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000280)=0xb3) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) r7 = socket$inet6(0xa, 0x80001, 0x0) ioctl$sock_SIOCSIFBR(r7, 0x8941, &(0x7f00000004c0)=@add_del={0x2, &(0x7f0000000480)='dvmrp0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b00)=ANY=[@ANYBLOB="1c0000001e000103020000200000000001000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) dup3(r7, r2, 0x80000) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x3) 0s ago: executing program 5 (id=6745): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r1, 0x3b8c, &(0x7f0000000780)={0x30, r3, 0x0, 0x0, 0x0, 0x0, 0xec8, 0x0}) bpf$MAP_CREATE(0x100000000000018, &(0x7f0000000380)=@base={0xa, 0x16, 0xeb5, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r5) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x4, &(0x7f0000000000)=0x7, 0x4) bind$inet6(r8, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) setsockopt$inet6_opts(r8, 0x29, 0x3b, &(0x7f0000000700)=ANY=[], 0x8) close_range(r7, 0xffffffffffffffff, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r6, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008080}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f0000000300)={0x4, 0x1000, 0x8}) fanotify_init(0x8, 0x2) kernel console output (not intermixed with test programs): e_0 [ 1599.653563][T10343] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1600.471552][T27568] Bluetooth: hci0: command tx timeout [ 1600.593818][ T30] audit: type=1400 audit(1774322222.937:897): avc: denied { setopt } for pid=29214 comm="syz.6.6256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1600.593917][T29230] mmap: syz.6.6256 (29230) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1600.649691][T17370] usb 6-1: device descriptor read/64, error -71 [ 1600.874625][T17370] usb usb6-port1: attempt power cycle [ 1601.414935][T10343] team0 (unregistering): Port device team_slave_1 removed [ 1601.444082][T27677] Bluetooth: hci6: Frame reassembly failed (-84) [ 1601.501694][T10343] team0 (unregistering): Port device team_slave_0 removed [ 1601.678223][T17370] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 1601.722092][T17370] usb 6-1: device descriptor read/8, error -71 [ 1601.775125][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1601.783429][ T1295] lec:lec_start_xmit: lec0:No lecd attached [ 1602.001226][T17370] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 1602.233850][T29260] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1602.271027][T17370] usb 6-1: device not accepting address 110, error -71 [ 1602.288899][T17370] usb usb6-port1: unable to enumerate USB device [ 1602.503413][ T5806] Bluetooth: hci0: command tx timeout [ 1603.134736][T29278] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6267'. [ 1603.235400][T29278] openvswitch: netlink: Key type 12053 is out of range max 32 [ 1603.272763][T29110] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1603.328109][T29110] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1603.451560][T27568] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1603.453249][ T5806] Bluetooth: hci6: command 0x1003 tx timeout [ 1603.495009][T29110] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1603.548460][T29110] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1603.880050][T29297] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29297 comm=syz.6.6271 [ 1604.515544][T29110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1604.562297][T29110] 8021q: adding VLAN 0 to HW filter on device team0 [ 1604.582157][T24514] bridge0: port 1(bridge_slave_0) entered blocking state [ 1604.589285][T24514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1604.634877][T24514] bridge0: port 2(bridge_slave_1) entered blocking state [ 1604.642037][T24514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1604.712160][T29110] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1605.294465][T15274] usb 1-1: new full-speed USB device number 127 using dummy_hcd [ 1605.400851][T29110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1605.474112][T15274] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1605.489728][T15274] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1605.503330][T29110] veth0_vlan: entered promiscuous mode [ 1605.510996][T15274] usb 1-1: Product: syz [ 1605.528288][T15274] usb 1-1: Manufacturer: syz [ 1605.535426][T29110] veth1_vlan: entered promiscuous mode [ 1605.542205][T15274] usb 1-1: SerialNumber: syz [ 1605.569849][T15274] usb 1-1: config 0 descriptor?? [ 1605.846399][T29110] veth0_macvtap: entered promiscuous mode [ 1605.874155][T29351] Cache volume key already in use (9p,(null),) [ 1605.882873][T29110] veth1_macvtap: entered promiscuous mode [ 1605.936504][T15274] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1605.951161][T29110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1605.994610][T29110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1606.020429][T17630] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1606.050758][T17630] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1606.091764][T17630] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1606.126808][T17630] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1606.457428][T10343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1606.561054][T10343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1606.668138][T29373] autofs: Unknown parameter 'fd00000000000000000000' [ 1606.833829][T17630] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1606.853454][T17630] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1606.984036][T15274] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1607.371336][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5590 ms [ 1607.379357][ C0] lec:lec_tx_timeout: lec0 [ 1607.687767][T29387] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(14) [ 1607.694385][T29387] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1607.702786][T29387] vhci_hcd vhci_hcd.0: Device attached [ 1607.710541][T29387] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(16) [ 1607.717139][T29387] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1607.727716][T29387] vhci_hcd vhci_hcd.0: Device attached [ 1607.734996][T29387] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(18) [ 1607.741587][T29387] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1607.749306][T29387] vhci_hcd vhci_hcd.0: Device attached [ 1607.756391][T29387] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(20) [ 1607.762983][T29387] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1607.770618][T29387] vhci_hcd vhci_hcd.0: Device attached [ 1607.782014][T29387] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(22) [ 1607.788603][T29387] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1607.796329][T29387] vhci_hcd vhci_hcd.0: Device attached [ 1607.803276][T29387] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1607.812516][T29387] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1607.821842][T29387] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1607.937891][T29397] vhci_hcd: connection closed [ 1607.938239][T27279] vhci_hcd vhci_hcd.6: stop threads [ 1607.945337][T15274] usb 45-1: new low-speed USB device number 13 using vhci_hcd [ 1607.949834][T29390] vhci_hcd: connection closed [ 1607.955799][T29388] vhci_hcd: connection closed [ 1607.960893][T29394] vhci_hcd: connection closed [ 1607.965645][T29400] vhci_hcd: connection closed [ 1607.980019][T27279] vhci_hcd vhci_hcd.6: release socket [ 1607.993372][T29389] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1608.031834][T27279] vhci_hcd vhci_hcd.6: disconnect device [ 1608.038791][T15284] usb 1-1: USB disconnect, device number 127 [ 1608.068041][T27279] vhci_hcd vhci_hcd.6: stop threads [ 1608.088040][T27279] vhci_hcd vhci_hcd.6: release socket [ 1608.118414][T27279] vhci_hcd vhci_hcd.6: disconnect device [ 1608.148804][T27279] vhci_hcd vhci_hcd.6: stop threads [ 1608.171858][T27279] vhci_hcd vhci_hcd.6: release socket [ 1608.211243][T27279] vhci_hcd vhci_hcd.6: disconnect device [ 1608.227953][T27279] vhci_hcd vhci_hcd.6: stop threads [ 1608.251245][T27279] vhci_hcd vhci_hcd.6: release socket [ 1608.261374][T27279] vhci_hcd vhci_hcd.6: disconnect device [ 1608.278554][T27279] vhci_hcd vhci_hcd.6: stop threads [ 1608.283998][T27279] vhci_hcd vhci_hcd.6: release socket [ 1608.299681][T27279] vhci_hcd vhci_hcd.6: disconnect device [ 1609.935973][T29440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6290'. [ 1610.056941][T29440] chnl_net:caif_netlink_parms(): no params data found [ 1611.844990][T29450] IPv6: sit1: Disabled Multicast RS [ 1611.851015][T29450] sit1: entered allmulticast mode [ 1612.216427][T29470] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(14) [ 1612.223055][T29470] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1612.282527][T29470] vhci_hcd vhci_hcd.0: Device attached [ 1612.292195][T29475] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(17) [ 1612.298798][T29475] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1612.321318][T23275] usb 4-1: new full-speed USB device number 109 using dummy_hcd [ 1612.331031][T29475] vhci_hcd vhci_hcd.0: Device attached [ 1612.371058][T29470] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(16) [ 1612.371272][T15281] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 1612.377668][T29470] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1612.389739][T29470] vhci_hcd vhci_hcd.0: Device attached [ 1612.396977][T15280] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 1612.797816][T29475] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(20) [ 1612.804439][T29475] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1612.812549][T15281] usb 8-1: Using ep0 maxpacket: 32 [ 1612.834199][T15280] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1612.859421][T29475] vhci_hcd vhci_hcd.0: Device attached [ 1612.866607][T15281] usb 8-1: config 0 has an invalid interface number: 132 but max is 0 [ 1612.868111][T23275] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1612.881273][T15280] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1612.902610][T15281] usb 8-1: config 0 has no interface number 0 [ 1612.911408][T29470] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(23) [ 1612.917423][T15281] usb 8-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 97, changing to 7 [ 1612.917998][T29470] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1612.934310][T15280] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1612.943674][T23275] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1612.951328][T15281] usb 8-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid maxpacket 24929, setting to 1024 [ 1612.977848][T23275] usb 4-1: Product: syz [ 1612.981900][T15280] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1612.999908][T23275] usb 4-1: Manufacturer: syz [ 1613.002515][T15280] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1613.007778][T23275] usb 4-1: SerialNumber: syz [ 1613.022022][T15281] usb 8-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1613.031314][T15281] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1613.032221][T29492] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1613.039287][T15281] usb 8-1: Product: syz [ 1613.065597][T15280] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1613.076422][T29475] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1613.086339][ T5806] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1613.094092][T15280] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1613.100213][T23275] usb 4-1: config 0 descriptor?? [ 1613.107836][T15281] usb 8-1: Manufacturer: syz [ 1613.119221][ T5806] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1613.125466][T29475] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1613.136111][ T5806] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1613.138633][T15281] usb 8-1: SerialNumber: syz [ 1613.148385][T15280] usb 1-1: Product: syz [ 1613.158257][ T5806] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1613.160756][T15280] usb 1-1: Manufacturer: syz [ 1613.170453][ T5806] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1613.175908][T15281] usb 8-1: config 0 descriptor?? [ 1613.183111][T15280] usb 1-1: SerialNumber: syz [ 1613.218872][T15280] usb 1-1: config 0 descriptor?? [ 1613.231037][T15281] em28xx 8-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1613.245774][T29470] vhci_hcd vhci_hcd.0: Device attached [ 1613.251699][T15281] em28xx 8-1:0.132: Video interface 132 found: isoc [ 1613.273614][T29487] vhci_hcd: connection closed [ 1613.274065][T29480] vhci_hcd: connection closed [ 1613.274069][T29476] vhci_hcd: connection closed [ 1613.280870][T29471] vhci_hcd: connection reset by peer [ 1613.283501][T29485] vhci_hcd: connection closed [ 1613.302926][T17630] vhci_hcd vhci_hcd.6: stop threads [ 1613.320870][T29493] lo speed is unknown, defaulting to 1000 [ 1613.332592][T17630] vhci_hcd vhci_hcd.6: release socket [ 1613.351664][T23275] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1613.360133][T17630] vhci_hcd vhci_hcd.6: disconnect device [ 1613.373928][T17630] vhci_hcd vhci_hcd.6: stop threads [ 1613.379134][T17630] vhci_hcd vhci_hcd.6: release socket [ 1613.393705][T17630] vhci_hcd vhci_hcd.6: disconnect device [ 1613.404836][T17630] vhci_hcd vhci_hcd.6: stop threads [ 1613.410510][T17630] vhci_hcd vhci_hcd.6: release socket [ 1613.417251][T17630] vhci_hcd vhci_hcd.6: disconnect device [ 1613.432439][T17630] vhci_hcd vhci_hcd.6: stop threads [ 1613.440364][ T5474] veth0_vlan: left promiscuous mode [ 1613.449962][T17630] vhci_hcd vhci_hcd.6: release socket [ 1613.456097][T17630] vhci_hcd vhci_hcd.6: disconnect device [ 1613.464150][T17630] vhci_hcd vhci_hcd.6: stop threads [ 1613.469422][T17630] vhci_hcd vhci_hcd.6: release socket [ 1613.472702][ T5474] veth0_vlan: entered promiscuous mode [ 1613.476790][T17630] vhci_hcd vhci_hcd.6: disconnect device [ 1613.481846][T15274] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1613.499837][T15280] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1613.509316][T15280] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1613.632510][T15281] em28xx 8-1:0.132: unknown em28xx chip ID (0) [ 1613.712392][T15280] radio-si470x 1-1:0.0: software version 0, hardware version 0 [ 1613.730694][T15281] em28xx 8-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1613.748094][T15280] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1613.769678][T15281] em28xx 8-1:0.132: board has no eeprom [ 1613.769898][T24514] erspan0: left allmulticast mode [ 1613.776939][T15280] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1613.788564][T24514] erspan0: left promiscuous mode [ 1613.819354][T24514] bridge0: port 3(erspan0) entered disabled state [ 1613.856462][T24514] bridge_slave_1: left allmulticast mode [ 1613.858860][T15281] em28xx 8-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1613.874750][T15281] em28xx 8-1:0.132: analog set to isoc mode. [ 1613.879701][T24514] bridge_slave_1: left promiscuous mode [ 1613.880794][ T10] em28xx 8-1:0.132: Registering V4L2 extension [ 1613.896720][T24514] bridge0: port 2(bridge_slave_1) entered disabled state [ 1613.901523][T15281] usb 8-1: USB disconnect, device number 43 [ 1613.915099][T15280] radio-si470x 1-1:0.0: submitting int urb failed (-90) [ 1613.932536][T15281] em28xx 8-1:0.132: Disconnecting em28xx [ 1613.957469][T24514] bridge_slave_0: left allmulticast mode [ 1613.985390][T24514] bridge_slave_0: left promiscuous mode [ 1614.005739][T24514] bridge0: port 1(bridge_slave_0) entered disabled state [ 1614.114053][T29466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1614.123023][T29466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1614.145028][T24514] bond7 (unregistering): (slave ip6erspan0): Releasing active interface [ 1614.150843][ T10] em28xx 8-1:0.132: Config register raw data: 0xffffffed [ 1614.160526][ T10] em28xx 8-1:0.132: AC97 chip type couldn't be determined [ 1614.180733][ T10] em28xx 8-1:0.132: No AC97 audio processor [ 1614.214117][ T10] usb 8-1: Decoder not found [ 1614.218731][ T10] em28xx 8-1:0.132: failed to create media graph [ 1614.241340][ T10] em28xx 8-1:0.132: V4L2 device video103 deregistered [ 1614.249751][ T10] em28xx 8-1:0.132: Remote control support is not available for this card. [ 1614.381364][T23275] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1614.391269][T15281] em28xx 8-1:0.132: Closing input extension [ 1614.392353][T24514] bond0 (unregistering): (slave gretap1): Releasing active interface [ 1614.514263][T29534] autofs: Unknown parameter 'fd00000000000000000000' [ 1614.617891][T15280] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1614.628530][T15281] em28xx 8-1:0.132: Freeing device [ 1614.641627][T15280] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -22 [ 1614.691842][T15280] usb 1-1: USB disconnect, device number 2 [ 1614.724271][T29497] udevd[29497]: setting mode of /dev/bus/usb/001/002 to 020664 failed: No such file or directory [ 1614.776447][T29497] udevd[29497]: setting owner of /dev/bus/usb/001/002 to uid=0, gid=0 failed: No such file or directory [ 1615.046142][T24514] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1615.055981][T24514] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1615.064762][T24514] .` (unregistering): Released all slaves [ 1615.073093][T24514] bond0 (unregistering): Released all slaves [ 1615.083981][T24514] bond1 (unregistering): Released all slaves [ 1615.095253][T24514] bond2 (unregistering): Released all slaves [ 1615.111222][T24514] bond3 (unregistering): (slave veth3): Releasing active interface [ 1615.119594][T24514] bond3 (unregistering): Released all slaves [ 1615.130145][T24514] bond4 (unregistering): Released all slaves [ 1615.140624][T24514] bond5 (unregistering): Released all slaves [ 1615.155581][T24514] bond6 (unregistering): Released all slaves [ 1615.171947][T24514] bond7 (unregistering): Released all slaves [ 1615.184739][T29493] chnl_net:caif_netlink_parms(): no params data found [ 1615.211979][ T5806] Bluetooth: hci2: command tx timeout [ 1615.282030][T24514] tipc: Left network mode [ 1615.474117][T29561] autofs: Unknown parameter 'fd00000000000000000000' [ 1616.329833][T17369] usb 4-1: USB disconnect, device number 109 [ 1616.397707][T29493] bridge0: port 1(bridge_slave_0) entered blocking state [ 1616.414143][T29493] bridge0: port 1(bridge_slave_0) entered disabled state [ 1616.443071][T29493] bridge_slave_0: entered allmulticast mode [ 1616.591319][T29493] bridge_slave_0: entered promiscuous mode [ 1617.292515][ T5806] Bluetooth: hci2: command tx timeout [ 1617.370228][T29493] bridge0: port 2(bridge_slave_1) entered blocking state [ 1617.428099][T29493] bridge0: port 2(bridge_slave_1) entered disabled state [ 1617.441833][T29493] bridge_slave_1: entered allmulticast mode [ 1617.459267][T29493] bridge_slave_1: entered promiscuous mode [ 1617.521952][T29582] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(14) [ 1617.528561][T29582] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1617.552618][T29582] vhci_hcd vhci_hcd.0: Device attached [ 1617.579402][T29582] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(16) [ 1617.586017][T29582] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1617.601367][T24514] hsr_slave_0: left promiscuous mode [ 1617.613028][T24514] hsr_slave_1: left promiscuous mode [ 1617.617259][T29582] vhci_hcd vhci_hcd.0: Device attached [ 1617.647203][T29597] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(19) [ 1617.653801][T29597] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1617.662211][T29597] vhci_hcd vhci_hcd.0: Device attached [ 1617.673413][T29582] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(18) [ 1617.679999][T29582] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1617.688090][T29582] vhci_hcd vhci_hcd.0: Device attached [ 1617.702885][T29582] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(22) [ 1617.709482][T29582] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1617.720279][T29582] vhci_hcd vhci_hcd.0: Device attached [ 1617.726816][T29582] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1617.738107][T29582] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1617.747557][T29582] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1617.841924][T15281] usb 39-1: new low-speed USB device number 13 using vhci_hcd [ 1617.868981][T29584] vhci_hcd: connection closed [ 1617.869214][T29587] vhci_hcd: connection closed [ 1617.883532][ T9543] vhci_hcd vhci_hcd.3: stop threads [ 1617.888393][T29598] vhci_hcd: connection closed [ 1617.893591][T29602] vhci_hcd: connection closed [ 1617.898428][T29600] vhci_hcd: connection closed [ 1617.931267][ T9543] vhci_hcd vhci_hcd.3: release socket [ 1617.955187][ T9543] vhci_hcd vhci_hcd.3: disconnect device [ 1617.974376][ T9543] vhci_hcd vhci_hcd.3: stop threads [ 1617.979579][ T9543] vhci_hcd vhci_hcd.3: release socket [ 1617.993638][ T9543] vhci_hcd vhci_hcd.3: disconnect device [ 1618.009473][ T9543] vhci_hcd vhci_hcd.3: stop threads [ 1618.021412][T29610] overlayfs: failed to resolve './file2': -2 [ 1618.036719][T29610] input: syz1 as /devices/virtual/input/input71 [ 1618.057360][ T9543] vhci_hcd vhci_hcd.3: release socket [ 1618.067218][ T9543] vhci_hcd vhci_hcd.3: disconnect device [ 1618.080543][ T9543] vhci_hcd vhci_hcd.3: stop threads [ 1618.089467][ T9543] vhci_hcd vhci_hcd.3: release socket [ 1618.100190][ T9543] vhci_hcd vhci_hcd.3: disconnect device [ 1618.107170][ T9543] vhci_hcd vhci_hcd.3: stop threads [ 1618.112805][ T9543] vhci_hcd vhci_hcd.3: release socket [ 1618.118346][ T9543] vhci_hcd vhci_hcd.3: disconnect device [ 1618.137989][T24514] team0 (unregistering): Port device team_slave_1 removed [ 1618.156195][T24514] team0 (unregistering): Port device team_slave_0 removed [ 1618.316703][T29493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1618.782737][T29617] FAULT_INJECTION: forcing a failure. [ 1618.782737][T29617] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1618.813390][T29493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1618.836114][T29617] CPU: 0 UID: 0 PID: 29617 Comm: syz.0.6314 Tainted: G L syzkaller #0 PREEMPT(full) [ 1618.836141][T29617] Tainted: [L]=SOFTLOCKUP [ 1618.836153][T29617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1618.836164][T29617] Call Trace: [ 1618.836171][T29617] [ 1618.836177][T29617] dump_stack_lvl+0x100/0x190 [ 1618.836211][T29617] should_fail_ex.cold+0x5/0xa [ 1618.836236][T29617] _copy_from_user+0x2e/0xd0 [ 1618.836254][T29617] copy_msghdr_from_user+0x9f/0x4f0 [ 1618.836275][T29617] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1618.836305][T29617] ___sys_sendmsg+0x106/0x1e0 [ 1618.836325][T29617] ? __pfx____sys_sendmsg+0x10/0x10 [ 1618.836373][T29617] __sys_sendmsg+0x170/0x220 [ 1618.836397][T29617] ? __pfx___sys_sendmsg+0x10/0x10 [ 1618.836436][T29617] do_syscall_64+0x106/0xf80 [ 1618.836461][T29617] ? clear_bhb_loop+0x40/0x90 [ 1618.836485][T29617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1618.836504][T29617] RIP: 0033:0x7fe2b199c799 [ 1618.836519][T29617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1618.836535][T29617] RSP: 002b:00007fe2b27a3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1618.836553][T29617] RAX: ffffffffffffffda RBX: 00007fe2b1c15fa0 RCX: 00007fe2b199c799 [ 1618.836564][T29617] RDX: 0000000020040040 RSI: 0000200000000000 RDI: 0000000000000003 [ 1618.836574][T29617] RBP: 00007fe2b27a3090 R08: 0000000000000000 R09: 0000000000000000 [ 1618.836585][T29617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1618.836595][T29617] R13: 00007fe2b1c16038 R14: 00007fe2b1c15fa0 R15: 00007fff251e9608 [ 1618.836619][T29617] [ 1619.058691][T29493] team0: Port device team_slave_0 added [ 1619.153198][T29493] team0: Port device team_slave_1 added [ 1619.327166][T29620] bridge0: port 3(erspan0) entered blocking state [ 1619.334503][T29620] bridge0: port 3(erspan0) entered disabled state [ 1619.351574][T29620] erspan0: entered allmulticast mode [ 1619.367022][T29620] erspan0: entered promiscuous mode [ 1619.375216][T29620] bridge0: port 3(erspan0) entered blocking state [ 1619.381830][T29620] bridge0: port 3(erspan0) entered forwarding state [ 1619.452007][ T5806] Bluetooth: hci2: command tx timeout [ 1619.561263][T23275] usb 8-1: new full-speed USB device number 44 using dummy_hcd [ 1619.580630][T29628] autofs: Unknown parameter 'fd00000000000000000000' [ 1619.789701][T23275] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1619.902617][T23275] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1619.970074][T23275] usb 8-1: Product: syz [ 1620.008738][T23275] usb 8-1: Manufacturer: syz [ 1620.048838][T23275] usb 8-1: SerialNumber: syz [ 1620.068669][T29493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1620.180281][T29493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1620.206704][T29493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1620.206961][T23275] usb 8-1: config 0 descriptor?? [ 1620.218875][T29493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1620.233222][T29493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1620.259900][T29493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1620.348670][T29493] hsr_slave_0: entered promiscuous mode [ 1620.365048][T29638] FAULT_INJECTION: forcing a failure. [ 1620.365048][T29638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1620.381714][T29493] hsr_slave_1: entered promiscuous mode [ 1620.391608][T29493] debugfs: 'hsr0' already exists in 'hsr' [ 1620.403357][T29493] Cannot create hsr debugfs directory [ 1620.460667][T29638] CPU: 0 UID: 0 PID: 29638 Comm: syz.3.6320 Tainted: G L syzkaller #0 PREEMPT(full) [ 1620.460699][T29638] Tainted: [L]=SOFTLOCKUP [ 1620.460705][T29638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1620.460716][T29638] Call Trace: [ 1620.460722][T29638] [ 1620.460729][T29638] dump_stack_lvl+0x100/0x190 [ 1620.460762][T29638] should_fail_ex.cold+0x5/0xa [ 1620.460786][T29638] _copy_from_user+0x2e/0xd0 [ 1620.460806][T29638] move_addr_to_kernel+0x65/0x170 [ 1620.460827][T29638] __sys_connect+0xb5/0x170 [ 1620.460846][T29638] ? __pfx___sys_connect+0x10/0x10 [ 1620.460865][T29638] ? __fget_files+0x21f/0x3d0 [ 1620.460892][T29638] ? __pfx_ksys_write+0x10/0x10 [ 1620.460914][T29638] __x64_sys_connect+0x72/0xb0 [ 1620.460933][T29638] ? lockdep_hardirqs_on+0x78/0x100 [ 1620.460958][T29638] do_syscall_64+0x106/0xf80 [ 1620.460982][T29638] ? clear_bhb_loop+0x40/0x90 [ 1620.461004][T29638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1620.461021][T29638] RIP: 0033:0x7f49ce59c799 [ 1620.461036][T29638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1620.461053][T29638] RSP: 002b:00007f49cf477028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1620.461070][T29638] RAX: ffffffffffffffda RBX: 00007f49ce815fa0 RCX: 00007f49ce59c799 [ 1620.461082][T29638] RDX: 0000000000000048 RSI: 0000200000000180 RDI: 0000000000000005 [ 1620.461098][T29638] RBP: 00007f49cf477090 R08: 0000000000000000 R09: 0000000000000000 [ 1620.461108][T29638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1620.461119][T29638] R13: 00007f49ce816038 R14: 00007f49ce815fa0 R15: 00007fffde8fb5e8 [ 1620.461143][T29638] [ 1620.912901][T23275] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1621.541291][ T5806] Bluetooth: hci2: command tx timeout [ 1621.875864][T23275] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1622.300740][T29493] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1622.373764][T29493] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1622.386596][T29493] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1622.679166][T29493] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1622.967542][T23275] usb 8-1: USB disconnect, device number 44 [ 1623.041717][T15281] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1623.084199][T29692] autofs: Unknown parameter 'fd00000000000000000000' [ 1623.403372][T29493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1623.476889][T29493] 8021q: adding VLAN 0 to HW filter on device team0 [ 1623.981271][ T10] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1624.218122][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1624.321154][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1624.453737][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1624.472756][ T166] bridge0: port 1(bridge_slave_0) entered blocking state [ 1624.479874][ T166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1624.519585][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1624.551348][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1624.567815][ T166] bridge0: port 2(bridge_slave_1) entered blocking state [ 1624.574983][ T166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1624.603617][ T10] usb 4-1: SerialNumber: syz [ 1624.637095][ T10] usb 4-1: 0:2 : does not exist [ 1625.040746][T29493] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1625.051554][ T10] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1625.079398][ T10] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1625.180065][ T10] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1625.249434][ T10] usb 4-1: USB disconnect, device number 110 [ 1625.300345][T29463] udevd[29463]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1625.427411][T29493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1625.462605][T17369] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 1625.642107][T17369] usb 1-1: no configurations [ 1625.646736][T17369] usb 1-1: can't read configurations, error -22 [ 1625.811356][T17369] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 1626.013345][T17369] usb 1-1: no configurations [ 1626.018024][T17369] usb 1-1: can't read configurations, error -22 [ 1626.030617][T17369] usb usb1-port1: attempt power cycle [ 1626.426686][T29493] veth0_vlan: entered promiscuous mode [ 1626.474901][T29493] veth1_vlan: entered promiscuous mode [ 1626.565025][T29493] veth0_macvtap: entered promiscuous mode [ 1626.578851][T29493] veth1_macvtap: entered promiscuous mode [ 1626.633116][T29493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1626.719909][T29493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1626.750851][ T9073] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1626.781090][ T9073] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1626.791676][T17369] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 1626.810111][ T9073] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1626.841009][T17630] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1626.872363][T17369] usb 1-1: no configurations [ 1626.878870][T17369] usb 1-1: can't read configurations, error -22 [ 1627.043177][T22899] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 1627.054846][T24514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1627.104877][T17369] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 1627.120509][T24514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1627.522925][ T166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1627.593457][ T166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1627.923289][T17369] usb 1-1: no configurations [ 1627.927916][T17369] usb 1-1: can't read configurations, error -22 [ 1627.937899][T17369] usb usb1-port1: unable to enumerate USB device [ 1628.093976][T22899] usb 8-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 1628.111336][T22899] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1628.575295][T22899] usb 8-1: config 0 descriptor?? [ 1628.865032][T22899] hackrf 8-1:0.0: usb_control_msg() failed -71 request 0e [ 1628.917190][T22899] hackrf 8-1:0.0: Could not detect board [ 1629.029444][T22899] hackrf 8-1:0.0: probe with driver hackrf failed with error -71 [ 1629.057543][T22899] usb 8-1: USB disconnect, device number 45 [ 1630.049072][T29801] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6344'. [ 1630.404148][T29818] netlink: 68 bytes leftover after parsing attributes in process `syz.7.6347'. [ 1631.057480][T23275] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1631.184053][T29844] siw: device registration error -23 [ 1631.622249][T23275] usb 4-1: Using ep0 maxpacket: 16 [ 1631.648641][T23275] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1631.676080][T23275] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1631.686403][T23275] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1631.720708][T23275] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1631.852800][T23275] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1631.887319][T23275] usb 4-1: config 0 descriptor?? [ 1632.556117][T23275] usbhid 4-1:0.0: can't add hid device: -71 [ 1632.562284][T23275] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1632.595015][T23275] usb 4-1: USB disconnect, device number 111 [ 1632.728454][T29868] autofs: Unknown parameter 'fd00000000000000000000' [ 1633.712577][T29884] netlink: 'syz.0.6361': attribute type 21 has an invalid length. [ 1635.321319][T23275] usb 4-1: new full-speed USB device number 112 using dummy_hcd [ 1635.813655][T23275] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1635.823105][T23275] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1635.831089][T23275] usb 4-1: Product: syz [ 1635.836117][T23275] usb 4-1: Manufacturer: syz [ 1635.840719][T23275] usb 4-1: SerialNumber: syz [ 1635.908314][T23275] usb 4-1: config 0 descriptor?? [ 1636.227706][T23275] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1636.408169][T29924] siw: device registration error -23 [ 1637.193375][T29920] siw: device registration error -23 [ 1637.298324][T29934] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6378'. [ 1637.801369][ T10] usb 8-1: new full-speed USB device number 46 using dummy_hcd [ 1638.041926][T23275] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1638.046944][ T10] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1638.060074][T23275] usb 4-1: USB disconnect, device number 112 [ 1638.075554][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1638.085414][ T10] usb 8-1: Product: syz [ 1638.182168][ T10] usb 8-1: Manufacturer: syz [ 1638.186831][ T10] usb 8-1: SerialNumber: syz [ 1638.194141][ T10] usb 8-1: config 0 descriptor?? [ 1638.853130][ T10] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1639.361427][T23275] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 1639.376677][T29956] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1639.546446][T23275] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1639.559364][T23275] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1639.570948][T23275] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 1639.587703][T23275] usb 6-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 1639.597647][T23275] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1639.606095][T23275] usb 6-1: Product: syz [ 1639.611025][T29957] FAULT_INJECTION: forcing a failure. [ 1639.611025][T29957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1639.624688][T29957] CPU: 1 UID: 0 PID: 29957 Comm: syz.3.6386 Tainted: G L syzkaller #0 PREEMPT(full) [ 1639.624715][T29957] Tainted: [L]=SOFTLOCKUP [ 1639.624721][T29957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1639.624732][T29957] Call Trace: [ 1639.624738][T29957] [ 1639.624745][T29957] dump_stack_lvl+0x100/0x190 [ 1639.624778][T29957] should_fail_ex.cold+0x5/0xa [ 1639.624804][T29957] _copy_to_user+0x32/0xd0 [ 1639.624826][T29957] simple_read_from_buffer+0xcb/0x170 [ 1639.624848][T29957] proc_fail_nth_read+0x1af/0x230 [ 1639.624875][T29957] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1639.624902][T29957] ? rw_verify_area+0xce/0x6d0 [ 1639.624933][T29957] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1639.624958][T29957] vfs_read+0x1e4/0xb30 [ 1639.624990][T29957] ? __pfx_vfs_read+0x10/0x10 [ 1639.625017][T29957] ? __fget_files+0x215/0x3d0 [ 1639.625042][T29957] ? __fget_files+0x21f/0x3d0 [ 1639.625068][T29957] ksys_read+0x12a/0x250 [ 1639.625085][T29957] ? __pfx_ksys_read+0x10/0x10 [ 1639.625109][T29957] do_syscall_64+0x106/0xf80 [ 1639.625134][T29957] ? clear_bhb_loop+0x40/0x90 [ 1639.625156][T29957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1639.625174][T29957] RIP: 0033:0x7f49ce55cfce [ 1639.625190][T29957] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1639.625206][T29957] RSP: 002b:00007f49cf455fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1639.625224][T29957] RAX: ffffffffffffffda RBX: 00007f49cf4566c0 RCX: 00007f49ce55cfce [ 1639.625236][T29957] RDX: 000000000000000f RSI: 00007f49cf4560a0 RDI: 000000000000000a [ 1639.625247][T29957] RBP: 00007f49cf456090 R08: 0000000000000000 R09: 0000000000000000 [ 1639.625258][T29957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1639.625269][T29957] R13: 00007f49ce816128 R14: 00007f49ce816090 R15: 00007fffde8fb5e8 [ 1639.625295][T29957] [ 1639.629469][T23275] usb 6-1: Manufacturer: syz [ 1639.900522][T23275] usb 6-1: SerialNumber: syz [ 1640.095145][T29964] tipc: Started in network mode [ 1640.100168][T29964] tipc: Node identity 7f000001, cluster identity 4711 [ 1640.114166][T29964] tipc: Enabling of bearer rejected, failed to enable media [ 1640.181634][T29965] autofs: Unknown parameter 'fd00000000000000000000' [ 1640.185330][T29964] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1640.198579][T29964] tipc: Enabled bearer , priority 10 [ 1640.820308][ T10] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1640.854445][ T10] usb 8-1: USB disconnect, device number 46 [ 1641.179176][T29968] lo speed is unknown, defaulting to 1000 [ 1641.211314][T22899] tipc: Node number set to 2130706433 [ 1641.316077][T23275] usb 6-1: Can't get UAC3 power state for id 10 [ 1641.332411][T23275] usb 6-1: 2:0: failed to get current value for ch 0 (-71) [ 1641.343165][T23275] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1641.426572][T29975] kvm: pic: single mode not supported [ 1641.426590][T29975] kvm: pic: level sensitive irq not supported [ 1641.433053][T23275] usb 6-1: USB disconnect, device number 111 [ 1641.465959][T29975] kvm: pic: single mode not supported [ 1641.466125][T29975] kvm: pic: single mode not supported [ 1641.472009][T29975] kvm: pic: level sensitive irq not supported [ 1641.483931][T29975] kvm: pic: single mode not supported [ 1641.490038][T29975] kvm: pic: level sensitive irq not supported [ 1641.501380][T29975] kvm: pic: level sensitive irq not supported [ 1641.507972][T29975] kvm: pic: single mode not supported [ 1641.555421][T29975] kvm: pic: level sensitive irq not supported [ 1641.568406][T29975] kvm: pic: single mode not supported [ 1641.576818][T29975] kvm: pic: level sensitive irq not supported [ 1641.603277][T29497] udevd[29497]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1641.632272][T29975] kvm: pic: single mode not supported [ 1641.632389][T29975] kvm: pic: level sensitive irq not supported [ 1641.695369][T29975] kvm: pic: single mode not supported [ 1641.750322][T29975] kvm: pic: level sensitive irq not supported [ 1641.790079][T29975] kvm: pic: single mode not supported [ 1641.817695][T29975] kvm: pic: level sensitive irq not supported [ 1641.843823][T29975] kvm: pic: single mode not supported [ 1641.858029][T29975] kvm: pic: level sensitive irq not supported [ 1642.473080][T29990] comedi comedi3: comedi_config --init_data is deprecated [ 1642.859290][T29996] siw: device registration error -23 [ 1643.192512][T15281] usb 6-1: new full-speed USB device number 112 using dummy_hcd [ 1643.446971][T30004] autofs: Unknown parameter 'fd00000000000000000000' [ 1643.454942][T15281] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 1643.683400][T15281] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1643.752990][T15281] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1643.769300][T15281] usb 6-1: Product: syz [ 1643.780844][T15281] usb 6-1: Manufacturer: syz [ 1643.789551][T15281] usb 6-1: SerialNumber: syz [ 1643.889663][T15281] usb 6-1: config 0 descriptor?? [ 1643.922124][T15281] hub 6-1:0.0: bad descriptor, ignoring hub [ 1644.360659][T15281] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1644.371137][T15281] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input72 [ 1644.407472][T30013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6401'. [ 1644.434902][T30013] chnl_net:caif_netlink_parms(): no params data found [ 1644.452034][T15281] usb 6-1: USB disconnect, device number 112 [ 1644.732660][T30018] evm: overlay not supported [ 1644.770607][ T30] audit: type=1400 audit(1774322267.867:898): avc: denied { setopt } for pid=30015 comm="syz.3.6402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1644.990012][T30035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6408'. [ 1645.611164][T30049] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6413'. [ 1645.621627][T30049] chnl_net:caif_netlink_parms(): no params data found [ 1646.454171][T15281] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 1646.622736][T15281] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 1646.635457][T15281] usb 6-1: config 1 has no interface number 0 [ 1646.644174][T15281] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1646.657834][T15281] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1646.670569][T15281] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1646.686585][T15281] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1646.697620][T15281] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1646.705676][T15281] usb 6-1: Product: syz [ 1646.709884][T15281] usb 6-1: Manufacturer: syz [ 1646.717365][T15281] usb 6-1: SerialNumber: syz [ 1646.734707][T30052] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1646.821471][ T10] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 1646.830586][T15274] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1646.841252][T17370] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1646.950367][T30052] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1646.991356][T17370] usb 4-1: Using ep0 maxpacket: 8 [ 1646.992671][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1646.998130][T17370] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1647.008446][T15274] usb 1-1: Using ep0 maxpacket: 16 [ 1647.018500][T17370] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1647.022769][ T10] usb 8-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 1647.032133][T17370] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1647.041826][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1647.057286][T17370] usb 4-1: config 0 descriptor?? [ 1647.058148][T15274] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1647.065353][T17370] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1647.074555][T15274] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1647.090356][ T10] usb 8-1: config 0 descriptor?? [ 1647.095785][T15274] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1647.105637][T30064] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1647.113354][T15274] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1647.167865][T15281] sierra_net 6-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.5-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:02:07 [ 1647.372417][T10343] wlan1: Trigger new scan to find an IBSS to join [ 1647.736901][ T30] audit: type=1400 audit(1774322270.837:899): avc: denied { accept } for pid=30065 comm="syz.0.6420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1647.766687][T15274] usbhid 1-1:128.0: can't add hid device: -71 [ 1647.774029][T15274] usbhid 1-1:128.0: probe with driver usbhid failed with error -71 [ 1647.805696][T15274] usb 1-1: USB disconnect, device number 7 [ 1647.814237][ T10] usbhid 8-1:0.0: can't add hid device: -71 [ 1647.823650][ T10] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1647.839070][ T10] usb 8-1: USB disconnect, device number 47 [ 1648.025851][ T10] usb 6-1: USB disconnect, device number 113 [ 1648.044858][ T10] sierra_net 6-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.5-1, Sierra Wireless USB-to-WWAN Modem [ 1648.101867][ T10] sierra_net 6-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 1648.536035][T17370] usb 4-1: USB disconnect, device number 113 [ 1648.775900][T30125] lo speed is unknown, defaulting to 1000 [ 1649.001402][T30127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1649.086279][T30124] lo speed is unknown, defaulting to 1000 [ 1650.263411][T30135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6427'. [ 1650.732886][T30135] chnl_net:caif_netlink_parms(): no params data found [ 1650.740135][ T9543] wlan1: Trigger new scan to find an IBSS to join [ 1650.755863][T30123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1651.695961][T30143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6430'. [ 1652.597167][T30154] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6431'. [ 1652.802890][T22899] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 1652.812549][T17284] lec:lec_start_xmit: lec0:No lecd attached [ 1653.402779][T22899] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1653.412124][T22899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1653.441943][T22899] usb 1-1: config 0 descriptor?? [ 1653.449320][T22899] cp210x 1-1:0.0: cp210x converter detected [ 1653.456057][ T9073] wlan1: Creating new IBSS network, BSSID 7e:0d:b0:fe:c4:59 [ 1655.776195][T30183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6432'. [ 1655.830849][T30152] xt_hashlimit: size too large, truncated to 1048576 [ 1655.901609][T30184] overlayfs: failed to resolve './file0': -2 [ 1656.999824][T30194] overlayfs: failed to resolve './file0': -2 [ 1657.967619][T30208] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=30208 comm=syz.5.6444 [ 1658.011880][T22899] cp210x 1-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 1658.019459][T22899] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 1658.044937][T22899] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1658.055116][T22899] usb 1-1: USB disconnect, device number 8 [ 1658.064007][T22899] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1658.074551][T22899] cp210x 1-1:0.0: device disconnected [ 1658.166361][T15281] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1658.411205][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5600 ms [ 1658.419264][ C0] lec:lec_tx_timeout: lec0 [ 1658.482644][T15281] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1658.494169][T15281] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1658.506856][T30220] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(14) [ 1658.513442][T30220] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1658.521366][T30220] vhci_hcd vhci_hcd.0: Device attached [ 1658.526258][T15281] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 1658.549262][T30220] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(16) [ 1658.555866][T30220] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1658.556470][T15281] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1658.563684][T30220] vhci_hcd vhci_hcd.0: Device attached [ 1658.592688][T30225] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(19) [ 1658.599289][T30225] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1658.607181][T30225] vhci_hcd vhci_hcd.0: Device attached [ 1658.607887][T15281] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1658.622258][T30220] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(18) [ 1658.625796][T15281] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1658.628843][T30220] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1658.646071][T30220] vhci_hcd vhci_hcd.0: Device attached [ 1658.656084][T30220] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(22) [ 1658.662655][T30220] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1658.672572][T15281] usb 4-1: SerialNumber: syz [ 1658.693285][T30199] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1658.700049][T30225] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1658.700489][T30199] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1658.709352][T30225] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1658.727647][T30225] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1658.732606][T30220] vhci_hcd vhci_hcd.0: Device attached [ 1658.759709][T30232] vhci_hcd: connection closed [ 1658.759903][T30226] vhci_hcd: connection closed [ 1658.764881][ T9543] vhci_hcd vhci_hcd.0: stop threads [ 1658.764976][T30223] vhci_hcd: connection closed [ 1658.769578][ T9543] vhci_hcd vhci_hcd.0: release socket [ 1658.774820][T30221] vhci_hcd: connection closed [ 1658.774995][T30229] vhci_hcd: connection closed [ 1658.791858][T15280] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 1658.804185][T15274] usb 33-1: new low-speed USB device number 13 using vhci_hcd [ 1658.814334][T30222] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1658.814690][ T9543] vhci_hcd vhci_hcd.0: disconnect device [ 1658.831564][ T9543] vhci_hcd vhci_hcd.0: stop threads [ 1658.836897][ T9543] vhci_hcd vhci_hcd.0: release socket [ 1658.844148][ T9543] vhci_hcd vhci_hcd.0: disconnect device [ 1658.850365][ T9543] vhci_hcd vhci_hcd.0: stop threads [ 1658.859154][ T9543] vhci_hcd vhci_hcd.0: release socket [ 1658.865619][ T9543] vhci_hcd vhci_hcd.0: disconnect device [ 1658.951458][T30236] bridge0: port 3(erspan0) entered blocking state [ 1658.958150][T30236] bridge0: port 3(erspan0) entered disabled state [ 1658.966081][T30236] erspan0: entered allmulticast mode [ 1659.032360][ T9543] vhci_hcd vhci_hcd.0: stop threads [ 1659.033016][T15280] usb 8-1: device descriptor read/64, error -71 [ 1659.037621][ T9543] vhci_hcd vhci_hcd.0: release socket [ 1659.037746][ T9543] vhci_hcd vhci_hcd.0: disconnect device [ 1659.068586][T30236] erspan0: entered promiscuous mode [ 1659.077422][ T9543] vhci_hcd vhci_hcd.0: stop threads [ 1659.083183][ T9543] vhci_hcd vhci_hcd.0: release socket [ 1659.088707][ T9543] vhci_hcd vhci_hcd.0: disconnect device [ 1659.090017][T30236] bridge0: port 3(erspan0) entered blocking state [ 1659.101075][T30236] bridge0: port 3(erspan0) entered forwarding state [ 1659.291275][T15280] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 1659.299567][ T5806] Bluetooth: hci0: unexpected Set CIG Parameters response data [ 1659.431323][T15280] usb 8-1: device descriptor read/64, error -71 [ 1659.503594][T30199] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1659.510770][T30199] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1659.551541][T15280] usb usb8-port1: attempt power cycle [ 1659.591912][T30245] netlink: 'syz.0.6451': attribute type 21 has an invalid length. [ 1659.631819][T24514] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1659.661966][T24514] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1659.673958][T24514] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1659.683023][T24514] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1659.923526][T15280] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 1660.215453][T15280] usb 8-1: device descriptor read/8, error -71 [ 1660.303118][T15281] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 1660.414981][T15281] usb 4-1: USB disconnect, device number 114 [ 1660.531350][T15280] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 1660.551742][T15280] usb 8-1: device descriptor read/8, error -71 [ 1660.661862][T15280] usb usb8-port1: unable to enumerate USB device [ 1660.798233][T30273] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(14) [ 1660.804854][T30273] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1660.812536][T30273] vhci_hcd vhci_hcd.0: Device attached [ 1660.823038][T30273] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(16) [ 1660.829646][T30273] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1660.837794][T30273] vhci_hcd vhci_hcd.0: Device attached [ 1660.846616][T30273] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(18) [ 1660.853297][T30273] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1660.872050][T30273] vhci_hcd vhci_hcd.0: Device attached [ 1660.879360][T30273] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(20) [ 1660.885965][T30273] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1660.901771][T30273] vhci_hcd vhci_hcd.0: Device attached [ 1660.909205][T30273] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(22) [ 1660.915805][T30273] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1660.931240][T30273] vhci_hcd vhci_hcd.0: Device attached [ 1660.937917][T30273] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1660.947401][T30273] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1660.958579][T30273] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1661.015129][T30283] vhci_hcd: connection closed [ 1661.015327][T17630] vhci_hcd vhci_hcd.5: stop threads [ 1661.015526][T30276] vhci_hcd: connection closed [ 1661.020095][T17630] vhci_hcd vhci_hcd.5: release socket [ 1661.025612][T30281] vhci_hcd: connection closed [ 1661.025774][T30278] vhci_hcd: connection closed [ 1661.027666][T30274] vhci_hcd: connection closed [ 1661.041306][T17630] vhci_hcd vhci_hcd.5: disconnect device [ 1661.095133][T17369] usb 43-1: new low-speed USB device number 12 using vhci_hcd [ 1661.105667][T30275] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1661.126125][T30285] bridge0: port 3(erspan0) entered blocking state [ 1661.136827][T30285] bridge0: port 3(erspan0) entered disabled state [ 1661.147613][T30285] erspan0: entered allmulticast mode [ 1661.164073][T30285] erspan0: entered promiscuous mode [ 1661.204582][T17630] vhci_hcd vhci_hcd.5: stop threads [ 1661.210020][T17630] vhci_hcd vhci_hcd.5: release socket [ 1661.225700][T17630] vhci_hcd vhci_hcd.5: disconnect device [ 1661.234046][T17630] vhci_hcd vhci_hcd.5: stop threads [ 1661.239255][T17630] vhci_hcd vhci_hcd.5: release socket [ 1661.245152][T30288] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6462'. [ 1661.254401][T17630] vhci_hcd vhci_hcd.5: disconnect device [ 1661.271231][T17630] vhci_hcd vhci_hcd.5: stop threads [ 1661.276424][T17630] vhci_hcd vhci_hcd.5: release socket [ 1661.281868][T17630] vhci_hcd vhci_hcd.5: disconnect device [ 1661.287502][T17630] vhci_hcd vhci_hcd.5: stop threads [ 1661.324152][T30285] bridge0: port 3(erspan0) entered blocking state [ 1661.330803][T30285] bridge0: port 3(erspan0) entered forwarding state [ 1661.508429][T17630] vhci_hcd vhci_hcd.5: release socket [ 1661.514038][T17630] vhci_hcd vhci_hcd.5: disconnect device [ 1661.561098][T30288] chnl_net:caif_netlink_parms(): no params data found [ 1662.222646][T17370] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1662.264093][T27568] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1662.277290][T27568] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1662.292238][T27568] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1662.311627][T27568] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1662.319073][T27568] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1662.367091][T30303] lo speed is unknown, defaulting to 1000 [ 1662.411570][T17370] usb 4-1: Using ep0 maxpacket: 8 [ 1662.432833][T17370] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1662.457876][T17370] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1662.487570][T17370] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1662.504278][T30303] chnl_net:caif_netlink_parms(): no params data found [ 1662.522749][T17370] usb 4-1: config 0 descriptor?? [ 1662.529967][T30313] FAULT_INJECTION: forcing a failure. [ 1662.529967][T30313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1662.543157][T23275] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 1662.573456][T17370] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1662.618658][T30303] bridge0: port 1(bridge_slave_0) entered blocking state [ 1662.625938][T30303] bridge0: port 1(bridge_slave_0) entered disabled state [ 1662.633076][T30313] CPU: 1 UID: 0 PID: 30313 Comm: syz.0.6469 Tainted: G L syzkaller #0 PREEMPT(full) [ 1662.633102][T30313] Tainted: [L]=SOFTLOCKUP [ 1662.633109][T30313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1662.633119][T30313] Call Trace: [ 1662.633126][T30313] [ 1662.633133][T30313] dump_stack_lvl+0x100/0x190 [ 1662.633169][T30313] should_fail_ex.cold+0x5/0xa [ 1662.633194][T30313] _copy_from_user+0x2e/0xd0 [ 1662.633214][T30313] copy_msghdr_from_user+0x9f/0x4f0 [ 1662.633235][T30313] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1662.633266][T30313] ___sys_sendmsg+0x106/0x1e0 [ 1662.633286][T30313] ? __pfx____sys_sendmsg+0x10/0x10 [ 1662.633334][T30313] __sys_sendmsg+0x170/0x220 [ 1662.633359][T30313] ? __pfx___sys_sendmsg+0x10/0x10 [ 1662.633398][T30313] do_syscall_64+0x106/0xf80 [ 1662.633422][T30313] ? clear_bhb_loop+0x40/0x90 [ 1662.633444][T30313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1662.633463][T30313] RIP: 0033:0x7fe2b199c799 [ 1662.633478][T30313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1662.633495][T30313] RSP: 002b:00007fe2b27a3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1662.633513][T30313] RAX: ffffffffffffffda RBX: 00007fe2b1c15fa0 RCX: 00007fe2b199c799 [ 1662.633524][T30313] RDX: 0000000000000040 RSI: 0000200000000b80 RDI: 0000000000000003 [ 1662.633534][T30313] RBP: 00007fe2b27a3090 R08: 0000000000000000 R09: 0000000000000000 [ 1662.633545][T30313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1662.633554][T30313] R13: 00007fe2b1c16038 R14: 00007fe2b1c15fa0 R15: 00007fff251e9608 [ 1662.633577][T30313] [ 1662.635023][T30303] bridge_slave_0: entered allmulticast mode [ 1662.741314][T23275] usb 6-1: Using ep0 maxpacket: 8 [ 1662.752152][T29517] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 1662.779351][T23275] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1662.788123][T30303] bridge_slave_0: entered promiscuous mode [ 1662.825951][T23275] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1662.860031][T23275] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1662.876368][T30303] bridge0: port 2(bridge_slave_1) entered blocking state [ 1662.894249][T23275] usb 6-1: config 0 descriptor?? [ 1662.906269][T23275] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1662.921714][T30303] bridge0: port 2(bridge_slave_1) entered disabled state [ 1662.928878][T30303] bridge_slave_1: entered allmulticast mode [ 1662.936256][T29517] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 1662.946148][T29517] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1662.952828][T30303] bridge_slave_1: entered promiscuous mode [ 1662.962108][T29517] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1662.984326][T29517] usb 8-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 1663.002347][T29517] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1663.010419][T29517] usb 8-1: Product: syz [ 1663.021398][T29517] usb 8-1: Manufacturer: syz [ 1663.028125][T29517] usb 8-1: SerialNumber: syz [ 1663.039715][T29517] usb 8-1: config 0 descriptor?? [ 1663.048716][T30308] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1663.131768][T30303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1663.153822][T30303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1663.188210][T30303] team0: Port device team_slave_0 added [ 1663.215648][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1663.216858][T30303] team0: Port device team_slave_1 added [ 1663.223813][ T1295] lec:lec_start_xmit: lec0:No lecd attached [ 1663.252361][T30303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1663.267467][T15280] usb 8-1: USB disconnect, device number 52 [ 1663.269468][T30303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1663.321254][T30303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1663.344272][T29517] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1663.358459][T30303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1663.365748][T30303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1663.393800][T30303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1663.457463][T30303] hsr_slave_0: entered promiscuous mode [ 1663.468632][T30303] hsr_slave_1: entered promiscuous mode [ 1663.475732][T30303] debugfs: 'hsr0' already exists in 'hsr' [ 1663.481944][T30303] Cannot create hsr debugfs directory [ 1663.502636][T29517] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xCE, changing to 0x8E [ 1663.527758][T29517] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 999, setting to 64 [ 1663.557268][T29517] usb 1-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 1663.568766][T29517] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1663.577131][T29517] usb 1-1: Product: syz [ 1663.581558][T29517] usb 1-1: Manufacturer: syz [ 1663.587397][T29517] usb 1-1: SerialNumber: syz [ 1663.612573][T30295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1663.627757][T30295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1663.784374][ T9543] erspan0: left allmulticast mode [ 1663.796225][ T9543] erspan0: left promiscuous mode [ 1663.811538][ T9543] bridge0: port 3(erspan0) entered disabled state [ 1663.825681][T29517] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1663.837741][T29517] usb 1-1: MIDIStreaming interface descriptor not found [ 1663.860472][ T9543] bridge_slave_1: left allmulticast mode [ 1663.878729][ T9543] bridge_slave_1: left promiscuous mode [ 1663.895121][ T9543] bridge0: port 2(bridge_slave_1) entered disabled state [ 1663.921345][T15274] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1663.929025][T30306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1663.939652][T30306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1664.021652][T29517] usb 1-1: USB disconnect, device number 9 [ 1664.099147][T15281] usb 4-1: USB disconnect, device number 115 [ 1664.115248][ T9543] bridge_slave_0: left allmulticast mode [ 1664.143746][ T9543] bridge_slave_0: left promiscuous mode [ 1664.151514][ T9543] bridge0: port 1(bridge_slave_0) entered disabled state [ 1664.208260][T30335] udevd[30335]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1664.421651][ T5806] Bluetooth: hci6: command tx timeout [ 1664.450368][T15281] usb 6-1: USB disconnect, device number 114 [ 1664.473441][ T9543] bond2 (unregistering): (slave gretap1): Releasing active interface [ 1664.699085][T30355] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(14) [ 1664.705682][T30355] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1664.716627][T30355] vhci_hcd vhci_hcd.0: Device attached [ 1664.769060][ T9543] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1664.785670][T30355] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(16) [ 1664.792271][T30355] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1664.808984][ T9543] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1664.832576][ T9543] bond0 (unregistering): Released all slaves [ 1664.840335][T30355] vhci_hcd vhci_hcd.0: Device attached [ 1664.843856][ T9543] bond1 (unregistering): Released all slaves [ 1664.861266][T30362] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(19) [ 1664.868128][T30362] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1664.881457][T30362] vhci_hcd vhci_hcd.0: Device attached [ 1664.899335][ T9543] bond2 (unregistering): Released all slaves [ 1664.907412][T30355] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(18) [ 1664.914015][T30355] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1664.917269][ T9543] bond3 (unregistering): Released all slaves [ 1664.931465][T30355] vhci_hcd vhci_hcd.0: Device attached [ 1664.948229][T30355] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(22) [ 1664.951279][T15280] usb 39-1: new low-speed USB device number 14 using vhci_hcd [ 1664.954820][T30355] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1664.956041][T30355] vhci_hcd vhci_hcd.0: Device attached [ 1665.023539][T30355] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1665.045436][T30355] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1665.085931][ T9543] tipc: Left network mode [ 1665.090707][T30355] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1665.178910][T30303] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1665.260369][T30303] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1665.270787][T30363] vhci_hcd: connection closed [ 1665.271099][T24514] vhci_hcd vhci_hcd.3: stop threads [ 1665.271798][T30368] vhci_hcd: connection closed [ 1665.283586][T30358] vhci_hcd: connection closed [ 1665.284767][T30370] vhci_hcd: connection closed [ 1665.294892][T24514] vhci_hcd vhci_hcd.3: release socket [ 1665.299129][T30356] vhci_hcd: connection reset by peer [ 1665.301213][T24514] vhci_hcd vhci_hcd.3: disconnect device [ 1665.335777][T24514] vhci_hcd vhci_hcd.3: stop threads [ 1665.343463][T24514] vhci_hcd vhci_hcd.3: release socket [ 1665.343838][T30303] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1665.348934][T24514] vhci_hcd vhci_hcd.3: disconnect device [ 1665.363949][T24514] vhci_hcd vhci_hcd.3: stop threads [ 1665.370026][T24514] vhci_hcd vhci_hcd.3: release socket [ 1665.436560][T24514] vhci_hcd vhci_hcd.3: disconnect device [ 1665.481993][T30303] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1665.635091][T30391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6480'. [ 1665.884449][T24514] vhci_hcd vhci_hcd.3: stop threads [ 1665.944793][T30391] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1665.954318][T30391] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1665.965496][T30391] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1666.011276][T24514] vhci_hcd vhci_hcd.3: release socket [ 1666.011425][ T30] audit: type=1400 audit(1774322289.067:900): avc: denied { firmware_load } for pid=30382 comm="syz.0.6480" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1666.051255][T24514] vhci_hcd vhci_hcd.3: disconnect device [ 1666.062315][T24514] vhci_hcd vhci_hcd.3: stop threads [ 1666.070180][T24514] vhci_hcd vhci_hcd.3: release socket [ 1666.110639][T24514] vhci_hcd vhci_hcd.3: disconnect device [ 1666.251358][T17369] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1666.329625][ T9543] hsr_slave_0: left promiscuous mode [ 1666.355362][ T9543] hsr_slave_1: left promiscuous mode [ 1666.381924][ T9543] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1666.421530][T24764] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1666.452610][ T9543] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1666.475507][ T9543] batman_adv: batadv0: Removing interface: dummy0 [ 1666.501218][ T5806] Bluetooth: hci6: command tx timeout [ 1666.592493][T24764] usb 4-1: Using ep0 maxpacket: 32 [ 1666.615261][T24764] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1666.653221][T24764] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1666.695546][T24764] usb 4-1: config 0 descriptor?? [ 1666.715269][T24764] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1666.741525][T15274] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1666.828078][ T9543] team0 (unregistering): Port device team_slave_1 removed [ 1666.889648][ T9543] team0 (unregistering): Port device team_slave_0 removed [ 1666.923961][T15274] usb 1-1: Using ep0 maxpacket: 8 [ 1666.934109][T15274] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1666.956194][T15274] usb 1-1: config 179 has no interface number 0 [ 1666.975917][T15274] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1666.989871][T15274] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1667.011275][T15274] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1667.031352][T15274] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1667.047575][T15274] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1667.064678][T15274] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1667.076510][T15274] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1667.089443][T30418] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1667.130141][T30422] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6484'. [ 1667.151832][T30422] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 1667.285811][T30428] xt_recent: Unsupported userspace flags (000000de) [ 1667.325686][ T30] audit: type=1400 audit(1774322290.427:901): avc: denied { read } for pid=30427 comm="syz.7.6486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1667.338370][T30431] netlink: 'syz.5.6487': attribute type 1 has an invalid length. [ 1667.351007][T30303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1667.372716][T24764] gspca_vc032x: reg_w err -71 [ 1667.379114][T24764] gspca_vc032x: I2c Bus Busy Wait 00 [ 1667.379573][T30433] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1667.413931][T24764] gspca_vc032x: I2c Bus Busy Wait 00 [ 1667.419653][T24764] gspca_vc032x: I2c Bus Busy Wait 00 [ 1667.434478][T24764] gspca_vc032x: I2c Bus Busy Wait 00 [ 1667.441736][T30418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1667.450258][T24764] gspca_vc032x: I2c Bus Busy Wait 00 [ 1667.456936][T24764] gspca_vc032x: I2c Bus Busy Wait 00 [ 1667.463271][T30418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1667.475077][T24764] gspca_vc032x: I2c Bus Busy Wait 00 [ 1667.482179][T24764] gspca_vc032x: I2c Bus Busy Wait 00 [ 1667.487616][T24764] gspca_vc032x: I2c Bus Busy Wait 00 [ 1667.493719][T24764] gspca_vc032x: I2c Bus Busy Wait 00 [ 1667.499147][T24764] gspca_vc032x: I2c Bus Busy Wait 00 [ 1667.525129][T15281] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input73 [ 1667.544894][T24764] gspca_vc032x: I2c Bus Busy Wait 00 [ 1667.550253][T24764] gspca_vc032x: I2c Bus Busy Wait 00 [ 1667.606606][T24764] gspca_vc032x: I2c Bus Busy Wait 00 [ 1667.635005][ T30] audit: type=1400 audit(1774322290.737:902): avc: denied { listen } for pid=30430 comm="syz.5.6487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1667.655472][T24764] gspca_vc032x: I2c Bus Busy Wait 00 [ 1667.670492][T24764] gspca_vc032x: I2c Bus Busy Wait 00 [ 1667.676554][T24764] gspca_vc032x: I2c Bus Busy Wait 00 [ 1667.700261][ T30] audit: type=1400 audit(1774322290.737:903): avc: denied { accept } for pid=30430 comm="syz.5.6487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1667.727803][T30437] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1667.736378][T24764] gspca_vc032x: I2c Bus Busy Wait 00 [ 1667.748604][T24764] gspca_vc032x: Unknown sensor... [ 1667.764419][T30437] bond1: (slave bond2): making interface the new active one [ 1667.773017][T24764] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 1667.785946][T24764] usb 4-1: USB disconnect, device number 116 [ 1667.794685][T30437] bond1: (slave bond2): Enslaving as an active interface with an up link [ 1667.892890][T30431] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 1667.916442][T30303] 8021q: adding VLAN 0 to HW filter on device team0 [ 1667.944497][ T9073] bridge0: port 1(bridge_slave_0) entered blocking state [ 1667.951637][ T9073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1667.981195][ T9073] bridge0: port 2(bridge_slave_1) entered blocking state [ 1667.988320][ T9073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1667.994338][T24764] usb 1-1: USB disconnect, device number 10 [ 1667.995535][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1667.995577][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1668.216444][T30458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6488'. [ 1668.411213][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5180 ms [ 1668.419306][ C0] lec:lec_tx_timeout: lec0 [ 1668.594182][ T5806] Bluetooth: hci6: command tx timeout [ 1668.625686][ T30] audit: type=1400 audit(1774322291.727:904): avc: denied { unmount } for pid=29493 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1668.979883][T30303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1670.224090][T15280] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1670.721249][ T5806] Bluetooth: hci6: command tx timeout [ 1671.460586][T30499] tipc: Enabled bearer , priority 0 [ 1671.487446][T30499] syzkaller0: entered promiscuous mode [ 1671.501334][T30499] syzkaller0: entered allmulticast mode [ 1671.555765][T30512] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6499'. [ 1671.572807][T22899] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1671.581060][T30499] tipc: Resetting bearer [ 1671.599849][T30495] tipc: Resetting bearer [ 1671.632251][T30495] tipc: Disabling bearer [ 1671.738560][T30303] veth0_vlan: entered promiscuous mode [ 1671.750497][T30303] veth1_vlan: entered promiscuous mode [ 1671.774311][T30303] veth0_macvtap: entered promiscuous mode [ 1671.785289][T30303] veth1_macvtap: entered promiscuous mode [ 1671.792721][T22899] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1671.832707][T22899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1671.861891][T30303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1671.888942][T22899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1671.910501][T30303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1671.922188][T22899] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1671.944191][T27677] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1671.948477][T22899] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1671.963487][T22899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1671.985461][T27677] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1672.017868][T22899] usb 4-1: config 0 descriptor?? [ 1672.030733][T27677] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1672.053483][T27677] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1672.111910][T17370] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 1672.236240][ T9543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1672.275658][ T9543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1672.299047][T30524] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6502'. [ 1672.324230][T17370] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1672.358013][T17370] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1672.370313][T30524] chnl_net:caif_netlink_parms(): no params data found [ 1672.379850][T27279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1672.390504][T27279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1672.397558][T17370] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1672.440218][T30498] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.6498'. [ 1672.457079][T17370] usb 1-1: Product: syz [ 1672.470914][T30498] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.6498'. [ 1672.481331][ T30] audit: type=1400 audit(1774322295.577:905): avc: denied { mounton } for pid=30303 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1672.482574][T17370] usb 1-1: Manufacturer: syz [ 1672.529680][T22899] usbhid 4-1:0.0: can't add hid device: -71 [ 1672.538770][T22899] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1672.561771][T22899] usb 4-1: USB disconnect, device number 117 [ 1672.574092][T17370] usb 1-1: SerialNumber: syz [ 1672.632299][T17370] usb 1-1: config 0 descriptor?? [ 1672.703128][T30532] FAULT_INJECTION: forcing a failure. [ 1672.703128][T30532] name failslab, interval 1, probability 0, space 0, times 0 [ 1672.715864][T30532] CPU: 0 UID: 0 PID: 30532 Comm: syz.5.6503 Tainted: G L syzkaller #0 PREEMPT(full) [ 1672.715891][T30532] Tainted: [L]=SOFTLOCKUP [ 1672.715898][T30532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1672.715909][T30532] Call Trace: [ 1672.715915][T30532] [ 1672.715922][T30532] dump_stack_lvl+0x100/0x190 [ 1672.715956][T30532] should_fail_ex.cold+0x5/0xa [ 1672.715981][T30532] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1672.716008][T30532] should_failslab+0xc2/0x120 [ 1672.716029][T30532] __kmalloc_noprof+0xe0/0x850 [ 1672.716061][T30532] tomoyo_realpath_from_path+0xb6/0x690 [ 1672.716095][T30532] tomoyo_path_number_perm+0x23c/0x580 [ 1672.716117][T30532] ? tomoyo_path_number_perm+0x22e/0x580 [ 1672.716142][T30532] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1672.716191][T30532] ? find_held_lock+0x2b/0x80 [ 1672.716214][T30532] ? __fget_files+0x215/0x3d0 [ 1672.716232][T30532] ? hook_file_ioctl_common+0x146/0x410 [ 1672.716256][T30532] ? __fget_files+0x21f/0x3d0 [ 1672.716280][T30532] security_file_ioctl+0xd3/0x230 [ 1672.716307][T30532] __x64_sys_ioctl+0xb7/0x210 [ 1672.716336][T30532] do_syscall_64+0x106/0xf80 [ 1672.716362][T30532] ? clear_bhb_loop+0x40/0x90 [ 1672.716385][T30532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1672.716404][T30532] RIP: 0033:0x7fbf67b9c799 [ 1672.716419][T30532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1672.716437][T30532] RSP: 002b:00007fbf68af2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1672.716455][T30532] RAX: ffffffffffffffda RBX: 00007fbf67e15fa0 RCX: 00007fbf67b9c799 [ 1672.716467][T30532] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1672.716478][T30532] RBP: 00007fbf68af2090 R08: 0000000000000000 R09: 0000000000000000 [ 1672.716488][T30532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1672.716499][T30532] R13: 00007fbf67e16038 R14: 00007fbf67e15fa0 R15: 00007ffde9039528 [ 1672.716524][T30532] [ 1672.716531][T30532] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1673.041591][T30539] lo speed is unknown, defaulting to 1000 [ 1673.047612][T30539] lo speed is unknown, defaulting to 1000 [ 1673.058620][T30539] lo speed is unknown, defaulting to 1000 [ 1673.115101][T30539] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1673.241056][T30539] lo speed is unknown, defaulting to 1000 [ 1673.255902][T30539] lo speed is unknown, defaulting to 1000 [ 1673.270557][T30539] lo speed is unknown, defaulting to 1000 [ 1673.285027][T30539] lo speed is unknown, defaulting to 1000 [ 1673.300309][T30539] lo speed is unknown, defaulting to 1000 [ 1673.313836][T30539] lo speed is unknown, defaulting to 1000 [ 1674.906359][T22899] usb 1-1: USB disconnect, device number 11 [ 1675.076236][T30577] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048) [ 1676.381377][T22899] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 1676.385268][T30605] fuse: Bad value for 'fd' [ 1676.553070][T22899] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1676.568835][T22899] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1676.593069][T22899] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1676.603331][T30605] lo speed is unknown, defaulting to 1000 [ 1676.630713][T22899] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1676.786017][T30617] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1676.801285][T22899] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1677.559834][T22899] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1677.588514][T30617] tmpfs: Unknown parameter 'mpol””†cżźe¶ńI>6t¨' [ 1677.595778][T22899] usb 8-1: config 0 descriptor?? [ 1678.068275][ T5474] veth1_macvtap: left promiscuous mode [ 1678.106830][ T5474] veth1_macvtap: entered promiscuous mode [ 1678.161886][T30601] netlink: 4768 bytes leftover after parsing attributes in process `syz.7.6516'. [ 1678.185740][T30601] netlink: 4768 bytes leftover after parsing attributes in process `syz.7.6516'. [ 1678.222088][T22899] usbhid 8-1:0.0: can't add hid device: -71 [ 1678.237723][T22899] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1678.276707][T22899] usb 8-1: USB disconnect, device number 53 [ 1678.559553][T30662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1678.573500][T30662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1678.622211][T30665] netlink: 'syz.5.6528': attribute type 10 has an invalid length. [ 1678.633250][T30665] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6528'. [ 1678.647899][T30662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1678.676077][T30665] ipvlan2: entered promiscuous mode [ 1678.719320][T30665] bridge0: port 4(ipvlan2) entered blocking state [ 1678.756804][T30665] bridge0: port 4(ipvlan2) entered disabled state [ 1678.771471][T30665] ipvlan2: entered allmulticast mode [ 1678.797718][T30665] bridge0: entered allmulticast mode [ 1678.826927][T30665] ipvlan2: left allmulticast mode [ 1678.836641][T30665] bridge0: left allmulticast mode [ 1679.139863][T30693] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6533'. [ 1679.251279][T29517] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 1679.561395][T29517] usb 6-1: Using ep0 maxpacket: 8 [ 1679.623357][T29517] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1679.645649][T29517] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1679.667335][ T30] audit: type=1326 audit(1774322302.687:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30703 comm="syz.3.6539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ce59c799 code=0x7ffc0000 [ 1679.690762][T29517] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1679.701317][T29517] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1679.716897][ T30] audit: type=1326 audit(1774322302.767:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30703 comm="syz.3.6539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f49ce59c799 code=0x7ffc0000 [ 1679.740581][T29517] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1679.752072][T29517] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1679.787616][ T30] audit: type=1326 audit(1774322302.767:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30703 comm="syz.3.6539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ce59c799 code=0x7ffc0000 [ 1679.889758][ T30] audit: type=1326 audit(1774322302.767:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30703 comm="syz.3.6539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ce59c799 code=0x7ffc0000 [ 1679.955380][T30716] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6540'. [ 1679.962029][ T30] audit: type=1326 audit(1774322302.857:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30703 comm="syz.3.6539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f49ce59c799 code=0x7ffc0000 [ 1679.965350][T30716] chnl_net:caif_netlink_parms(): no params data found [ 1680.034040][T29517] usb 6-1: GET_CAPABILITIES returned 0 [ 1680.066507][T29517] usbtmc 6-1:16.0: can't read capabilities [ 1680.122893][ T30] audit: type=1326 audit(1774322302.857:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30703 comm="syz.3.6539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ce59c799 code=0x7ffc0000 [ 1680.160587][ T30] audit: type=1326 audit(1774322302.857:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30703 comm="syz.3.6539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f49ce59c799 code=0x7ffc0000 [ 1680.214244][ T30] audit: type=1326 audit(1774322302.857:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30703 comm="syz.3.6539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ce59c799 code=0x7ffc0000 [ 1680.224218][T22899] usb 6-1: USB disconnect, device number 115 [ 1680.238725][ T30] audit: type=1326 audit(1774322302.857:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30703 comm="syz.3.6539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49ce59c799 code=0x7ffc0000 [ 1680.304946][ T30] audit: type=1326 audit(1774322302.857:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30703 comm="syz.3.6539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ce59c799 code=0x7ffc0000 [ 1681.894401][T30745] tmpfs: Bad value for 'mpol' [ 1681.902067][T30747] tmpfs: Bad value for 'mpol' [ 1683.651272][T15280] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1683.801247][T15280] usb 4-1: Using ep0 maxpacket: 16 [ 1683.816634][T15280] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1683.828072][T15280] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1683.842799][T15280] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1683.871228][T15280] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1683.877875][T15280] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1683.888307][T17370] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 1683.947479][T15280] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1683.974020][T15280] usb 4-1: config 0 descriptor?? [ 1684.177966][T17370] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1684.202319][T17370] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1684.223426][T17370] usb 9-1: config 0 descriptor?? [ 1684.325942][T17370] cp210x 9-1:0.0: cp210x converter detected [ 1684.669793][T15280] hid (null): nested delimiters [ 1685.744542][T15280] usb 4-1: USB disconnect, device number 118 [ 1686.331268][T15280] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 1686.375461][T30820] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6557'. [ 1686.432430][T30773] xt_hashlimit: size too large, truncated to 1048576 [ 1687.122390][T15280] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 1687.214974][T15280] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1687.270323][T15280] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1687.307906][T15280] usb 1-1: Product: syz [ 1687.329394][T15280] usb 1-1: Manufacturer: syz [ 1687.347767][T15280] usb 1-1: SerialNumber: syz [ 1687.368869][T15280] usb 1-1: config 0 descriptor?? [ 1687.394289][T15280] hub 1-1:0.0: bad descriptor, ignoring hub [ 1687.411813][T15280] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1687.445389][T15280] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input75 [ 1688.104584][T30849] FAULT_INJECTION: forcing a failure. [ 1688.104584][T30849] name failslab, interval 1, probability 0, space 0, times 0 [ 1688.122805][T30849] CPU: 1 UID: 0 PID: 30849 Comm: syz.5.6571 Tainted: G L syzkaller #0 PREEMPT(full) [ 1688.122832][T30849] Tainted: [L]=SOFTLOCKUP [ 1688.122838][T30849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1688.122848][T30849] Call Trace: [ 1688.122854][T30849] [ 1688.122860][T30849] dump_stack_lvl+0x100/0x190 [ 1688.122891][T30849] should_fail_ex.cold+0x5/0xa [ 1688.122917][T30849] should_failslab+0xc2/0x120 [ 1688.122936][T30849] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1688.122960][T30849] ? alloc_empty_file+0x55/0x1c0 [ 1688.122988][T30849] alloc_empty_file+0x55/0x1c0 [ 1688.123012][T30849] alloc_file_pseudo+0x13a/0x230 [ 1688.123037][T30849] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1688.123061][T30849] ? hugetlbfs_get_inode+0x36e/0x750 [ 1688.123082][T30849] ? __fget_files+0x215/0x3d0 [ 1688.123104][T30849] hugetlb_file_setup+0x2a8/0x5b0 [ 1688.123128][T30849] ksys_mmap_pgoff+0x232/0x650 [ 1688.123150][T30849] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1688.123167][T30849] ? fput+0x79/0x100 [ 1688.123188][T30849] ? ksys_write+0x1ac/0x250 [ 1688.123205][T30849] ? __pfx_ksys_write+0x10/0x10 [ 1688.123225][T30849] __x64_sys_mmap+0x125/0x190 [ 1688.123248][T30849] do_syscall_64+0x106/0xf80 [ 1688.123272][T30849] ? clear_bhb_loop+0x40/0x90 [ 1688.123293][T30849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1688.123311][T30849] RIP: 0033:0x7fbf67b9c799 [ 1688.123327][T30849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1688.123344][T30849] RSP: 002b:00007fbf68af2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1688.123360][T30849] RAX: ffffffffffffffda RBX: 00007fbf67e15fa0 RCX: 00007fbf67b9c799 [ 1688.123372][T30849] RDX: 0000000001000002 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 1688.123383][T30849] RBP: 00007fbf68af2090 R08: ffffffffffffffff R09: 0000000000000000 [ 1688.123393][T30849] R10: 000200000005c831 R11: 0000000000000246 R12: 0000000000000001 [ 1688.123404][T30849] R13: 00007fbf67e16038 R14: 00007fbf67e15fa0 R15: 00007ffde9039528 [ 1688.123428][T30849] [ 1688.432587][T17370] cp210x 9-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 1688.440165][T17370] cp210x 9-1:0.0: GPIO initialisation failed: -71 [ 1688.455081][T17370] usb 9-1: cp210x converter now attached to ttyUSB0 [ 1688.463574][T17370] usb 9-1: USB disconnect, device number 2 [ 1688.477024][T17370] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1688.490422][T17370] cp210x 9-1:0.0: device disconnected [ 1688.500187][T30860] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6574'. [ 1688.510041][T30860] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6574'. [ 1688.596962][T30861] pic_ioport_write: 9 callbacks suppressed [ 1688.596980][T30861] kvm: pic: single mode not supported [ 1688.603380][T30861] pic_ioport_write: 11 callbacks suppressed [ 1688.603396][T30861] kvm: pic: level sensitive irq not supported [ 1688.651572][T15280] usb 1-1: USB disconnect, device number 12 [ 1688.657969][T30861] kvm: pic: single mode not supported [ 1688.687168][T30861] kvm: pic: single mode not supported [ 1688.692917][T30861] kvm: pic: level sensitive irq not supported [ 1688.710511][T30861] kvm: pic: single mode not supported [ 1688.716625][T30861] kvm: pic: level sensitive irq not supported [ 1688.728877][T30861] kvm: pic: level sensitive irq not supported [ 1688.737461][T30861] kvm: pic: single mode not supported [ 1688.744672][T30861] kvm: pic: single mode not supported [ 1688.750071][T30861] kvm: pic: level sensitive irq not supported [ 1688.812016][T17370] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1688.973948][T17370] usb 4-1: Using ep0 maxpacket: 16 [ 1688.979329][T22899] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 1688.992809][T17370] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1689.721322][T17370] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1689.731066][T17370] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1689.744044][T17370] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1689.753303][T17370] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1690.264427][T22899] usb 8-1: Using ep0 maxpacket: 16 [ 1690.284482][T22899] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1690.340584][T17370] usb 4-1: config 0 descriptor?? [ 1690.347113][T22899] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1690.360056][T22899] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1690.419764][T22899] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1690.428926][T22899] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1690.447853][T22899] usb 8-1: config 0 descriptor?? [ 1690.791507][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 1690.791547][ T30] audit: type=1400 audit(1774322313.887:939): avc: denied { accept } for pid=30896 comm="syz.5.6582" laddr=fe80::13 lport=37925 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1690.895654][T30891] bridge0: port 3(erspan0) entered blocking state [ 1690.902465][T30891] bridge0: port 3(erspan0) entered disabled state [ 1690.909305][T30891] erspan0: entered allmulticast mode [ 1691.201609][T22899] usbhid 8-1:0.0: can't add hid device: -71 [ 1691.207676][T22899] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1691.225247][T22899] usb 8-1: USB disconnect, device number 54 [ 1691.231254][T17369] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 1691.245258][T17370] usbhid 4-1:0.0: can't add hid device: -71 [ 1691.251429][T17370] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1691.265729][T17370] usb 4-1: USB disconnect, device number 119 [ 1691.276696][T30891] erspan0: entered promiscuous mode [ 1691.301730][T30891] bridge0: port 3(erspan0) entered blocking state [ 1691.308198][T30891] bridge0: port 3(erspan0) entered forwarding state [ 1691.426359][T17369] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1691.437316][T17369] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1691.471214][T17369] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1691.590694][T17369] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1691.608914][T30898] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1691.635165][T17369] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1692.814113][T30929] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:1536 [ 1693.169437][ T10] usb 6-1: USB disconnect, device number 116 [ 1693.221247][T15280] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 1694.262396][T15280] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1694.271709][T15280] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1694.282074][T15280] usb 1-1: config 0 descriptor?? [ 1694.288555][T15280] cp210x 1-1:0.0: cp210x converter detected [ 1694.343082][T30949] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6594'. [ 1694.627874][T30957] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 1694.635726][ T30] audit: type=1400 audit(1774322317.727:940): avc: denied { append } for pid=30954 comm="syz.3.6596" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1694.725757][T30958] siw: device registration error -23 [ 1695.421318][ T30] audit: type=1400 audit(1774322318.507:941): avc: denied { connect } for pid=30956 comm="syz.8.6597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1696.301502][T30976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6589'. [ 1696.314674][T30976] xt_hashlimit: size too large, truncated to 1048576 [ 1696.396496][T30979] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1697.110228][T30990] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:1536 [ 1699.464604][T15280] cp210x 1-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 1699.481202][T15280] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 1699.585726][T15280] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1699.603339][T15280] usb 1-1: USB disconnect, device number 13 [ 1699.707851][T15280] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1699.717891][T31012] nfs: Unknown parameter 'ac˙˙˙˙' [ 1699.755395][T15280] cp210x 1-1:0.0: device disconnected [ 1700.397538][T24764] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 1700.801219][T24764] usb 8-1: Using ep0 maxpacket: 8 [ 1700.809371][T24764] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1700.839651][T24764] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1700.894165][T24764] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1700.917250][T24764] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1700.990971][T24764] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1701.016433][T24764] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1701.308260][T27568] Bluetooth: hci3: command 0x0406 tx timeout [ 1701.551676][T24764] usb 8-1: GET_CAPABILITIES returned 0 [ 1701.557184][T24764] usbtmc 8-1:16.0: can't read capabilities [ 1702.008886][T24764] usb 8-1: USB disconnect, device number 55 [ 1702.276262][T31074] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:1536 [ 1702.494699][T31077] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6622'. [ 1704.920463][T31128] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6634'. [ 1705.007250][T24764] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1705.187283][T31128] chnl_net:caif_netlink_parms(): no params data found [ 1705.535545][T24764] usb 9-1: Using ep0 maxpacket: 8 [ 1705.661493][T24764] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1705.670710][T24764] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1705.673181][T31144] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1705.690912][T31144] SELinux: failed to load policy [ 1705.734065][T24764] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1705.770632][T24764] pvrusb2: ********** [ 1705.777705][T24764] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1705.788409][T24764] pvrusb2: Important functionality might not be entirely working. [ 1705.810251][T24764] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1705.824974][T24764] pvrusb2: ********** [ 1705.976041][ T2341] pvrusb2: Invalid write control endpoint [ 1706.071703][T31153] siw: device registration error -23 [ 1706.489707][T31122] pvrusb2: Invalid write control endpoint [ 1706.514599][ T2341] pvrusb2: Invalid write control endpoint [ 1706.524032][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1706.535689][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1706.543804][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1706.556460][ T2341] pvrusb2: Device being rendered inoperable [ 1706.567900][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1706.726439][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1706.744712][ T2341] pvrusb2: Attached sub-driver cx25840 [ 1706.746112][T15280] usb 9-1: USB disconnect, device number 3 [ 1706.750369][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1706.834504][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1707.012545][T24764] usb 6-1: new full-speed USB device number 117 using dummy_hcd [ 1707.193398][T24764] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1707.213931][T24764] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1707.234224][T24764] usb 6-1: config 0 descriptor?? [ 1707.248693][T24764] cp210x 6-1:0.0: cp210x converter detected [ 1707.556775][T31175] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6650'. [ 1707.566221][T31175] chnl_net:caif_netlink_parms(): no params data found [ 1708.142978][T31187] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6645'. [ 1708.197737][T31188] xt_hashlimit: size too large, truncated to 1048576 [ 1708.577364][ T10] usb 8-1: new full-speed USB device number 56 using dummy_hcd [ 1708.956759][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 1709.022267][ T10] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1709.073452][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1709.109024][ T10] usb 8-1: Product: syz [ 1709.127655][ T10] usb 8-1: Manufacturer: syz [ 1709.147892][ T10] usb 8-1: SerialNumber: syz [ 1709.243254][ T10] usb 8-1: config 0 descriptor?? [ 1709.260638][ T10] hub 8-1:0.0: bad descriptor, ignoring hub [ 1709.288531][ T10] hub 8-1:0.0: probe with driver hub failed with error -5 [ 1709.328975][ T10] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input76 [ 1709.614447][T31207] FAULT_INJECTION: forcing a failure. [ 1709.614447][T31207] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1709.642139][T31207] CPU: 1 UID: 0 PID: 31207 Comm: syz.8.6658 Tainted: G L syzkaller #0 PREEMPT(full) [ 1709.642167][T31207] Tainted: [L]=SOFTLOCKUP [ 1709.642174][T31207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1709.642184][T31207] Call Trace: [ 1709.642190][T31207] [ 1709.642197][T31207] dump_stack_lvl+0x100/0x190 [ 1709.642231][T31207] should_fail_ex.cold+0x5/0xa [ 1709.642256][T31207] _copy_from_user+0x2e/0xd0 [ 1709.642287][T31207] kstrtouint_from_user+0xd6/0x1d0 [ 1709.642310][T31207] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1709.642332][T31207] ? __lock_acquire+0x4a5/0x2630 [ 1709.642352][T31207] ? lock_acquire+0x1cf/0x380 [ 1709.642374][T31207] proc_fail_nth_write+0x83/0x220 [ 1709.642400][T31207] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1709.642430][T31207] vfs_write+0x2aa/0x1070 [ 1709.642448][T31207] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1709.642475][T31207] ? __pfx_vfs_write+0x10/0x10 [ 1709.642491][T31207] ? __fget_files+0x215/0x3d0 [ 1709.642517][T31207] ? __fget_files+0x21f/0x3d0 [ 1709.642542][T31207] ksys_write+0x12a/0x250 [ 1709.642557][T31207] ? __pfx_ksys_write+0x10/0x10 [ 1709.642581][T31207] do_syscall_64+0x106/0xf80 [ 1709.642604][T31207] ? clear_bhb_loop+0x40/0x90 [ 1709.642626][T31207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1709.642644][T31207] RIP: 0033:0x7fe1d395cfce [ 1709.642660][T31207] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1709.642675][T31207] RSP: 002b:00007fe1d48c2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1709.642692][T31207] RAX: ffffffffffffffda RBX: 00007fe1d48c36c0 RCX: 00007fe1d395cfce [ 1709.642703][T31207] RDX: 0000000000000001 RSI: 00007fe1d48c30a0 RDI: 0000000000000004 [ 1709.642713][T31207] RBP: 00007fe1d48c3090 R08: 0000000000000000 R09: 0000000000000000 [ 1709.642723][T31207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1709.642733][T31207] R13: 00007fe1d3c16038 R14: 00007fe1d3c15fa0 R15: 00007ffc3a864688 [ 1709.642759][T31207] [ 1709.982767][T31211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6657'. [ 1710.104572][T24764] cp210x 6-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 1710.115464][T24764] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 1710.191644][T29517] usb 8-1: USB disconnect, device number 56 [ 1710.212738][T24764] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1710.248329][T31214] sd 0:0:1:0: PR command failed: 1026 [ 1710.253775][T31214] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1710.260432][T31214] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1710.280301][T24764] usb 6-1: USB disconnect, device number 117 [ 1710.315166][T24764] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1710.346035][T24764] cp210x 6-1:0.0: device disconnected [ 1711.240777][T31234] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(14) [ 1711.247404][T31234] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1711.272139][T31238] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1711.291362][T31240] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(18) [ 1711.297967][T31240] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1711.351398][T31240] vhci_hcd vhci_hcd.0: Device attached [ 1711.400512][T31234] vhci_hcd vhci_hcd.0: Device attached [ 1711.437378][T31240] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(20) [ 1711.443963][T31240] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1711.502262][T31254] netlink: 'syz.5.6669': attribute type 10 has an invalid length. [ 1711.517452][T31254] netlink: 228 bytes leftover after parsing attributes in process `syz.5.6669'. [ 1711.552023][T31240] vhci_hcd vhci_hcd.0: Device attached [ 1711.561234][T17369] usb 47-1: new low-speed USB device number 13 using vhci_hcd [ 1711.648849][T31234] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(16) [ 1711.655474][T31234] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1711.659031][T31263] netlink: 4096 bytes leftover after parsing attributes in process `syz.5.6669'. [ 1711.681490][ T30] audit: type=1400 audit(1774322334.757:942): avc: denied { read append } for pid=31256 comm="syz.8.6672" name="file0" dev="tmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1711.715297][T31257] block device autoloading is deprecated and will be removed. [ 1711.722845][T31234] vhci_hcd vhci_hcd.0: Device attached [ 1711.741263][T31240] vhci_hcd vhci_hcd.0: pdev(7) rhport(4) sockfd(24) [ 1711.747858][T31240] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1711.795934][T31234] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1711.827116][T31271] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1711.879123][T31240] vhci_hcd vhci_hcd.0: Device attached [ 1711.998574][T31276] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1712.117759][T31266] vhci_hcd: connection closed [ 1712.118525][T31261] vhci_hcd: connection closed [ 1712.124551][T31246] vhci_hcd: connection closed [ 1712.131782][ T9543] vhci_hcd vhci_hcd.7: stop threads [ 1712.142437][ T9543] vhci_hcd vhci_hcd.7: release socket [ 1712.161599][T31241] vhci_hcd: connection closed [ 1712.176089][T31236] vhci_hcd: connection reset by peer [ 1712.188355][ T9543] vhci_hcd vhci_hcd.7: disconnect device [ 1712.198711][ T9543] vhci_hcd vhci_hcd.7: stop threads [ 1712.204645][ T9543] vhci_hcd vhci_hcd.7: release socket [ 1712.283299][T31282] siw: device registration error -23 [ 1712.651592][ T9543] vhci_hcd vhci_hcd.7: disconnect device [ 1712.666371][ T9543] vhci_hcd vhci_hcd.7: stop threads [ 1712.674084][ T9543] vhci_hcd vhci_hcd.7: release socket [ 1712.722970][ T9543] vhci_hcd vhci_hcd.7: disconnect device [ 1712.761439][ T9543] vhci_hcd vhci_hcd.7: stop threads [ 1712.773939][ T9543] vhci_hcd vhci_hcd.7: release socket [ 1712.790082][ T9543] vhci_hcd vhci_hcd.7: disconnect device [ 1712.869313][ T9543] vhci_hcd vhci_hcd.7: stop threads [ 1713.082581][ T9543] vhci_hcd vhci_hcd.7: release socket [ 1713.115839][ T9543] vhci_hcd vhci_hcd.7: disconnect device [ 1713.322606][T31304] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6678'. [ 1713.483774][T31304] block nbd0: server does not support multiple connections per device. [ 1713.521591][T31304] block nbd0: shutting down sockets [ 1713.829797][T31322] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6683'. [ 1714.237758][T31307] netlink: 'syz.5.6680': attribute type 1 has an invalid length. [ 1714.559534][T31307] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1714.716358][T31348] FAULT_INJECTION: forcing a failure. [ 1714.716358][T31348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1714.801214][T31348] CPU: 1 UID: 0 PID: 31348 Comm: syz.3.6687 Tainted: G L syzkaller #0 PREEMPT(full) [ 1714.801234][T31348] Tainted: [L]=SOFTLOCKUP [ 1714.801239][T31348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1714.801250][T31348] Call Trace: [ 1714.801254][T31348] [ 1714.801259][T31348] dump_stack_lvl+0x100/0x190 [ 1714.801282][T31348] should_fail_ex.cold+0x5/0xa [ 1714.801297][T31348] _copy_from_user+0x2e/0xd0 [ 1714.801310][T31348] copy_msghdr_from_user+0x9f/0x4f0 [ 1714.801322][T31348] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1714.801341][T31348] ___sys_sendmsg+0x106/0x1e0 [ 1714.801353][T31348] ? __pfx____sys_sendmsg+0x10/0x10 [ 1714.801381][T31348] __sys_sendmsg+0x170/0x220 [ 1714.801396][T31348] ? __pfx___sys_sendmsg+0x10/0x10 [ 1714.801420][T31348] do_syscall_64+0x106/0xf80 [ 1714.801437][T31348] ? clear_bhb_loop+0x40/0x90 [ 1714.801451][T31348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1714.801463][T31348] RIP: 0033:0x7f49ce59c799 [ 1714.801473][T31348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1714.801483][T31348] RSP: 002b:00007f49cf477028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1714.801497][T31348] RAX: ffffffffffffffda RBX: 00007f49ce815fa0 RCX: 00007f49ce59c799 [ 1714.801504][T31348] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1714.801511][T31348] RBP: 00007f49cf477090 R08: 0000000000000000 R09: 0000000000000000 [ 1714.801517][T31348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1714.801523][T31348] R13: 00007f49ce816038 R14: 00007f49ce815fa0 R15: 00007fffde8fb5e8 [ 1714.801538][T31348] [ 1715.446832][T31351] overlayfs: failed to resolve './file2': -2 [ 1716.305465][T31366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6686'. [ 1716.492976][T31337] Bluetooth: hci0: command 0x0406 tx timeout [ 1716.919096][T17284] lec:lec_start_xmit: lec0:No lecd attached [ 1717.011983][T17369] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 1717.013572][T31373] overlayfs: failed to resolve './file2': -2 [ 1717.618679][T15280] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1717.669411][T31386] autofs: Unknown parameter './cgroup.net/syz0' [ 1718.242081][T15280] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1718.480914][T15280] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1718.588512][T15280] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1718.598781][T15280] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1718.645042][T15280] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1718.662598][T15280] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1720.792028][T15280] usb 4-1: config 0 descriptor?? [ 1720.833573][T15280] usb 4-1: can't set config #0, error -71 [ 1720.868570][T15280] usb 4-1: USB disconnect, device number 120 [ 1721.225282][T15280] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1722.191029][T15280] usb 4-1: Using ep0 maxpacket: 8 [ 1722.197834][T15280] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1722.392156][T15280] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1722.411206][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5490 ms [ 1722.419224][ C0] lec:lec_tx_timeout: lec0 [ 1722.464874][T15280] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1722.585218][T15280] pvrusb2: ********** [ 1722.589305][T15280] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1722.600693][T15280] pvrusb2: Important functionality might not be entirely working. [ 1722.618968][T15280] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1722.631976][T15280] pvrusb2: ********** [ 1723.615827][ T2341] pvrusb2: Invalid write control endpoint [ 1724.561259][T31407] pvrusb2: Invalid write control endpoint [ 1724.567749][T17370] usb 4-1: USB disconnect, device number 121 [ 1724.659273][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1724.669726][ T1295] lec:lec_start_xmit: lec0:No lecd attached [ 1724.705372][ T2341] pvrusb2: Invalid write control endpoint [ 1724.717446][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1724.734670][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1724.746547][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1724.764178][ T2341] pvrusb2: Device being rendered inoperable [ 1724.929695][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1724.944959][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1724.995493][ T2341] pvrusb2: Attached sub-driver cx25840 [ 1725.050579][T31435] siw: device registration error -23 [ 1725.971429][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1726.937218][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1728.280246][T31446] netlink: 'syz.7.6709': attribute type 1 has an invalid length. [ 1728.603062][T31452] FAULT_INJECTION: forcing a failure. [ 1728.603062][T31452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1728.621055][T31452] CPU: 1 UID: 0 PID: 31452 Comm: syz.7.6709 Tainted: G L syzkaller #0 PREEMPT(full) [ 1728.621085][T31452] Tainted: [L]=SOFTLOCKUP [ 1728.621091][T31452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1728.621102][T31452] Call Trace: [ 1728.621109][T31452] [ 1728.621117][T31452] dump_stack_lvl+0x100/0x190 [ 1728.621153][T31452] should_fail_ex.cold+0x5/0xa [ 1728.621177][T31452] _copy_from_user+0x2e/0xd0 [ 1728.621196][T31452] copy_msghdr_from_user+0x9f/0x4f0 [ 1728.621216][T31452] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1728.621247][T31452] ___sys_sendmsg+0x106/0x1e0 [ 1728.621267][T31452] ? __pfx____sys_sendmsg+0x10/0x10 [ 1728.621315][T31452] __sys_sendmsg+0x170/0x220 [ 1728.621344][T31452] ? __pfx___sys_sendmsg+0x10/0x10 [ 1728.621374][T31452] ? rcu_is_watching+0x12/0xc0 [ 1728.621402][T31452] do_syscall_64+0x106/0xf80 [ 1728.621426][T31452] ? clear_bhb_loop+0x40/0x90 [ 1728.621448][T31452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1728.621467][T31452] RIP: 0033:0x7f207059c799 [ 1728.621482][T31452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1728.621499][T31452] RSP: 002b:00007f207148a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1728.621518][T31452] RAX: ffffffffffffffda RBX: 00007f2070816180 RCX: 00007f207059c799 [ 1728.621530][T31452] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 1728.621541][T31452] RBP: 00007f207148a090 R08: 0000000000000000 R09: 0000000000000000 [ 1728.621551][T31452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1728.621561][T31452] R13: 00007f2070816218 R14: 00007f2070816180 R15: 00007ffdc6bdaa68 [ 1728.621585][T31452] [ 1729.325065][T31446] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1729.632870][T15281] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1729.739835][T31469] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6717'. [ 1729.832043][T31471] siw: device registration error -23 [ 1729.970376][T27568] Bluetooth: hci5: Unexpected cc 0x0000 with no status [ 1730.172546][T15281] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1730.185362][T15281] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1730.196800][T15281] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1730.206864][T15281] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1730.220502][T15281] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1730.229796][T15281] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1730.273125][T15281] usb 1-1: config 0 descriptor?? [ 1730.407983][T31480] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6719'. [ 1730.418901][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 1730.418936][ C0] lec:lec_tx_timeout: lec0 [ 1730.711713][T31455] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.6712'. [ 1730.726812][T31455] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.6712'. [ 1730.879263][T15281] usbhid 1-1:0.0: can't add hid device: -71 [ 1730.887960][T15281] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1731.635122][T29517] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 1731.695899][T15281] usb 1-1: USB disconnect, device number 14 [ 1731.942699][T29517] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1731.952864][T29517] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1731.964912][T29517] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1731.974654][T29517] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1731.983013][T29517] usb 9-1: Product: syz [ 1731.987406][T29517] usb 9-1: Manufacturer: syz [ 1731.992133][T29517] usb 9-1: SerialNumber: syz [ 1732.010589][T29517] usb 9-1: config 0 descriptor?? [ 1733.435413][T31512] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6731'. [ 1733.521332][T17369] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 1733.704802][T17369] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1733.723322][T17369] usb 1-1: config 0 has no interfaces? [ 1733.734475][T31528] ieee802154 phy1 wpan1: encryption failed: -22 [ 1733.747252][T17369] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1733.757305][T17369] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1733.765510][T17369] usb 1-1: Product: syz [ 1733.769802][T17369] usb 1-1: Manufacturer: syz [ 1733.776112][T17369] usb 1-1: SerialNumber: syz [ 1733.783220][T17369] usb 1-1: config 0 descriptor?? [ 1733.797536][T31530] netlink: 168 bytes leftover after parsing attributes in process `syz.5.6736'. [ 1733.821242][T23275] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 1733.980212][T17369] usb 9-1: USB disconnect, device number 4 [ 1733.986860][T23275] usb 8-1: Using ep0 maxpacket: 32 [ 1733.996985][T23275] usb 8-1: config 0 has an invalid interface number: 89 but max is 0 [ 1734.008630][T23275] usb 8-1: config 0 has no interface number 0 [ 1734.017519][T23275] usb 8-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1734.036699][T23275] usb 8-1: config 0 interface 89 has no altsetting 0 [ 1734.047119][T23275] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1734.056314][T23275] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1734.064490][T23275] usb 8-1: Product: syz [ 1734.068687][T23275] usb 8-1: Manufacturer: syz [ 1734.073710][T23275] usb 8-1: SerialNumber: syz [ 1734.080642][T23275] usb 8-1: config 0 descriptor?? [ 1734.087894][T23275] em28xx 8-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1734.097420][T23275] em28xx 8-1:0.89: Video interface 89 found: [ 1734.253165][T31534] nbd0: detected capacity change from 0 to 63 [ 1734.334696][T31521] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6734'. [ 1734.418159][T31539] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6738'. [ 1734.739133][T23275] em28xx 8-1:0.89: unknown em28xx chip ID (0) [ 1734.925861][T23275] em28xx 8-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1734.940281][T23275] em28xx 8-1:0.89: board has no eeprom [ 1735.011312][T23275] em28xx 8-1:0.89: Identified as Terratec Grabby (card=67) [ 1735.030617][T23275] em28xx 8-1:0.89: analog set to bulk mode. [ 1735.098216][T15280] usb 1-1: USB disconnect, device number 15 [ 1735.180616][T23275] usb 8-1: USB disconnect, device number 57 [ 1735.215062][T23275] em28xx 8-1:0.89: Disconnecting em28xx [ 1735.229954][T17370] em28xx 8-1:0.89: Registering V4L2 extension [ 1736.196440][T17370] em28xx 8-1:0.89: Config register raw data: 0xffffffed [ 1736.211676][T17370] em28xx 8-1:0.89: AC97 chip type couldn't be determined [ 1736.751120][T17370] em28xx 8-1:0.89: No AC97 audio processor [ 1736.825912][T27568] block nbd0: Receive control failed (result -104) [ 1736.826529][T17370] usb 8-1: Decoder not found [ 1736.846964][T17370] em28xx 8-1:0.89: failed to create media graph [ 1736.883784][T17370] em28xx 8-1:0.89: V4L2 device video103 deregistered [ 1737.041303][T31567] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6743'. [ 1737.250628][T17370] em28xx 8-1:0.89: Registering snapshot button... [ 1737.282514][T31563] ================================================================== [ 1737.290583][T31563] BUG: KASAN: slab-use-after-free in v4l2_fh_init+0x27d/0x2c0 [ 1737.298042][T31563] Read of size 8 at addr ffff8880387ac790 by task v4l_id/31563 [ 1737.305566][T31563] [ 1737.307873][T31563] CPU: 0 UID: 0 PID: 31563 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 1737.307894][T31563] Tainted: [L]=SOFTLOCKUP [ 1737.307899][T31563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1737.307908][T31563] Call Trace: [ 1737.307914][T31563] [ 1737.307920][T31563] dump_stack_lvl+0x100/0x190 [ 1737.307946][T31563] print_report+0x156/0x4c9 [ 1737.307965][T31563] ? __virt_addr_valid+0x81/0x620 [ 1737.307987][T31563] ? __phys_addr+0xe8/0x180 [ 1737.308007][T31563] ? v4l2_fh_init+0x27d/0x2c0 [ 1737.308026][T31563] kasan_report+0xdf/0x1e0 [ 1737.308041][T31563] ? v4l2_fh_init+0x27d/0x2c0 [ 1737.308062][T31563] v4l2_fh_init+0x27d/0x2c0 [ 1737.308081][T31563] v4l2_fh_open+0x64/0xa0 [ 1737.308100][T31563] em28xx_v4l2_open+0x11e/0x570 [ 1737.308120][T31563] v4l2_open+0x1d2/0x490 [ 1737.308140][T31563] ? __pfx_v4l2_open+0x10/0x10 [ 1737.308159][T31563] chrdev_open+0x234/0x6a0 [ 1737.308174][T31563] ? __pfx_chrdev_open+0x10/0x10 [ 1737.308189][T31563] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1737.308209][T31563] do_dentry_open+0x6d8/0x1660 [ 1737.308222][T31563] ? __pfx_chrdev_open+0x10/0x10 [ 1737.308239][T31563] vfs_open+0x82/0x3f0 [ 1737.308256][T31563] path_openat+0x208c/0x31a0 [ 1737.308275][T31563] ? __pfx_path_openat+0x10/0x10 [ 1737.308293][T31563] do_file_open+0x20e/0x430 [ 1737.308309][T31563] ? __pfx_do_file_open+0x10/0x10 [ 1737.308334][T31563] ? alloc_fd+0x476/0x790 [ 1737.308351][T31563] ? do_getname+0x191/0x390 [ 1737.308370][T31563] do_sys_openat2+0x10d/0x1e0 [ 1737.308388][T31563] ? __pfx_do_sys_openat2+0x10/0x10 [ 1737.308409][T31563] __x64_sys_openat+0x12d/0x210 [ 1737.308427][T31563] ? __pfx___x64_sys_openat+0x10/0x10 [ 1737.308446][T31563] ? do_user_addr_fault+0x8d6/0x12f0 [ 1737.308464][T31563] do_syscall_64+0x106/0xf80 [ 1737.308484][T31563] ? clear_bhb_loop+0x40/0x90 [ 1737.308500][T31563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1737.308515][T31563] RIP: 0033:0x7f0cadca7407 [ 1737.308527][T31563] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1737.308542][T31563] RSP: 002b:00007fff20597120 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1737.308556][T31563] RAX: ffffffffffffffda RBX: 00007f0cae3e6880 RCX: 00007f0cadca7407 [ 1737.308566][T31563] RDX: 0000000000000000 RSI: 00007fff20597f1b RDI: ffffffffffffff9c [ 1737.308575][T31563] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1737.308584][T31563] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1737.308592][T31563] R13: 00007fff20597370 R14: 00007f0cae54d000 R15: 00005618f89214d8 [ 1737.308606][T31563] [ 1737.308611][T31563] [ 1737.568729][T31563] Allocated by task 17370: [ 1737.573132][T31563] kasan_save_stack+0x30/0x50 [ 1737.577793][T31563] kasan_save_track+0x14/0x30 [ 1737.582451][T31563] __kasan_kmalloc+0xaa/0xb0 [ 1737.587025][T31563] em28xx_v4l2_init.cold+0x94/0x3503 [ 1737.592283][T31563] em28xx_init_extension+0x13a/0x200 [ 1737.597555][T31563] request_module_async+0x61/0x80 [ 1737.602554][T31563] process_one_work+0xa23/0x19a0 [ 1737.607471][T31563] worker_thread+0x5ef/0xe50 [ 1737.612037][T31563] kthread+0x370/0x450 [ 1737.616084][T31563] ret_from_fork+0x754/0xd80 [ 1737.620648][T31563] ret_from_fork_asm+0x1a/0x30 [ 1737.625393][T31563] [ 1737.627693][T31563] Freed by task 17370: [ 1737.631732][T31563] kasan_save_stack+0x30/0x50 [ 1737.636391][T31563] kasan_save_track+0x14/0x30 [ 1737.641050][T31563] kasan_save_free_info+0x3b/0x70 [ 1737.646054][T31563] __kasan_slab_free+0x5f/0x80 [ 1737.650802][T31563] kfree+0x1f6/0x6b0 [ 1737.654677][T31563] kref_put.isra.0+0x56/0x90 [ 1737.659243][T31563] em28xx_v4l2_init.cold+0x280/0x3503 [ 1737.664589][T31563] em28xx_init_extension+0x13a/0x200 [ 1737.669856][T31563] request_module_async+0x61/0x80 [ 1737.674853][T31563] process_one_work+0xa23/0x19a0 [ 1737.679768][T31563] worker_thread+0x5ef/0xe50 [ 1737.684333][T31563] kthread+0x370/0x450 [ 1737.688377][T31563] ret_from_fork+0x754/0xd80 [ 1737.692945][T31563] ret_from_fork_asm+0x1a/0x30 [ 1737.697690][T31563] [ 1737.700002][T31563] The buggy address belongs to the object at ffff8880387ac000 [ 1737.700002][T31563] which belongs to the cache kmalloc-8k of size 8192 [ 1737.714031][T31563] The buggy address is located 1936 bytes inside of [ 1737.714031][T31563] freed 8192-byte region [ffff8880387ac000, ffff8880387ae000) [ 1737.727975][T31563] [ 1737.730280][T31563] The buggy address belongs to the physical page: [ 1737.736661][T31563] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x387a8 [ 1737.745394][T31563] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1737.753866][T31563] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1737.761384][T31563] page_type: f5(slab) [ 1737.765342][T31563] raw: 00fff00000000040 ffff88813fe40280 dead000000000100 dead000000000122 [ 1737.773902][T31563] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 1737.782474][T31563] head: 00fff00000000040 ffff88813fe40280 dead000000000100 dead000000000122 [ 1737.791121][T31563] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 1737.799769][T31563] head: 00fff00000000003 ffffea0000e1ea01 00000000ffffffff 00000000ffffffff [ 1737.808414][T31563] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1737.817056][T31563] page dumped because: kasan: bad access detected [ 1737.823440][T31563] page_owner tracks the page as allocated [ 1737.829128][T31563] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 30361, tgid 30360 (syz.7.6476), ts 1664858811847, free_ts 1664766186286 [ 1737.850637][T31563] post_alloc_hook+0x153/0x170 [ 1737.855382][T31563] get_page_from_freelist+0x111d/0x3140 [ 1737.860911][T31563] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 1737.866806][T31563] new_slab+0xa6/0x6b0 [ 1737.870853][T31563] refill_objects+0x26b/0x400 [ 1737.875509][T31563] __pcs_replace_empty_main+0x1ab/0x660 [ 1737.881037][T31563] __kvmalloc_node_noprof+0x7da/0xa00 [ 1737.886391][T31563] kvm_dev_ioctl_get_cpuid+0x126/0x700 [ 1737.891837][T31563] kvm_arch_dev_ioctl+0x4de/0x770 [ 1737.896839][T31563] kvm_dev_ioctl+0x73a/0x1a50 [ 1737.901498][T31563] __x64_sys_ioctl+0x18e/0x210 [ 1737.906247][T31563] do_syscall_64+0x106/0xf80 [ 1737.910820][T31563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1737.916688][T31563] page last free pid 9543 tgid 9543 stack trace: [ 1737.922986][T31563] __free_frozen_pages+0x7e1/0x10d0 [ 1737.928162][T31563] qlist_free_all+0x47/0xe0 [ 1737.932648][T31563] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1737.938092][T31563] __kasan_slab_alloc+0x69/0x90 [ 1737.942918][T31563] kmem_cache_alloc_node_noprof+0x25a/0x6f0 [ 1737.948793][T31563] __alloc_skb+0x140/0x710 [ 1737.953188][T31563] rtmsg_ifinfo_build_skb+0x81/0x260 [ 1737.958454][T31563] rtnetlink_event+0x137/0x1f0 [ 1737.963198][T31563] notifier_call_chain+0x99/0x420 [ 1737.968200][T31563] call_netdevice_notifiers_info+0xbe/0x110 [ 1737.974091][T31563] __netdev_upper_dev_unlink+0x210/0x510 [ 1737.979709][T31563] netdev_upper_dev_unlink+0x83/0xb0 [ 1737.984978][T31563] __bond_release_one+0x5c3/0xa20 [ 1737.989995][T31563] bond_uninit+0x113/0x180 [ 1737.994388][T31563] unregister_netdevice_many_notify+0x16fd/0x2580 [ 1738.000785][T31563] ops_undo_list+0x8ff/0xab0 [ 1738.005356][T31563] [ 1738.007657][T31563] Memory state around the buggy address: [ 1738.013262][T31563] ffff8880387ac680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1738.021319][T31563] ffff8880387ac700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1738.029354][T31563] >ffff8880387ac780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1738.037391][T31563] ^ [ 1738.041954][T31563] ffff8880387ac800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1738.049996][T31563] ffff8880387ac880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1738.058030][T31563] ================================================================== [ 1738.072245][T17370] input: em28xx snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.89/input/input78 [ 1738.136263][T31569] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1738.138551][T17370] em28xx 8-1:0.89: Remote control support is not available for this card. [ 1738.161201][T23275] em28xx 8-1:0.89: Closing input extension [ 1738.167026][T23275] em28xx 8-1:0.89: Deregistering snapshot button [ 1738.249372][ T30] audit: type=1400 audit(1774322361.347:943): avc: denied { read } for pid=5160 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1738.293059][ T30] audit: type=1400 audit(1774322361.347:944): avc: denied { search } for pid=5160 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1738.340380][T31563] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1738.347565][T31563] CPU: 0 UID: 0 PID: 31563 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 1738.358119][T31563] Tainted: [L]=SOFTLOCKUP [ 1738.362412][T31563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1738.372435][T31563] Call Trace: [ 1738.375684][T31563] [ 1738.378597][T31563] dump_stack_lvl+0x100/0x190 [ 1738.383255][T31563] vpanic+0x552/0x970 [ 1738.387210][T31563] ? __pfx_vpanic+0x10/0x10 [ 1738.391701][T31563] ? v4l2_fh_init+0x27d/0x2c0 [ 1738.396353][T31563] panic+0xd1/0xe0 [ 1738.400045][T31563] ? __pfx_panic+0x10/0x10 [ 1738.404431][T31563] ? v4l2_fh_init+0x27d/0x2c0 [ 1738.409081][T31563] ? preempt_schedule_common+0x42/0xc0 [ 1738.414514][T31563] ? check_panic_on_warn+0x1f/0x90 [ 1738.419596][T31563] check_panic_on_warn.cold+0x19/0x34 [ 1738.424938][T31563] end_report.part.0+0x3a/0x90 [ 1738.429678][T31563] kasan_report.cold+0xe/0x18 [ 1738.434341][T31563] ? v4l2_fh_init+0x27d/0x2c0 [ 1738.438996][T31563] v4l2_fh_init+0x27d/0x2c0 [ 1738.443472][T31563] v4l2_fh_open+0x64/0xa0 [ 1738.447776][T31563] em28xx_v4l2_open+0x11e/0x570 [ 1738.452600][T31563] v4l2_open+0x1d2/0x490 [ 1738.456816][T31563] ? __pfx_v4l2_open+0x10/0x10 [ 1738.461552][T31563] chrdev_open+0x234/0x6a0 [ 1738.465950][T31563] ? __pfx_chrdev_open+0x10/0x10 [ 1738.470857][T31563] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1738.477166][T31563] do_dentry_open+0x6d8/0x1660 [ 1738.481899][T31563] ? __pfx_chrdev_open+0x10/0x10 [ 1738.486808][T31563] vfs_open+0x82/0x3f0 [ 1738.490859][T31563] path_openat+0x208c/0x31a0 [ 1738.495421][T31563] ? __pfx_path_openat+0x10/0x10 [ 1738.500332][T31563] do_file_open+0x20e/0x430 [ 1738.504805][T31563] ? __pfx_do_file_open+0x10/0x10 [ 1738.509804][T31563] ? alloc_fd+0x476/0x790 [ 1738.514105][T31563] ? do_getname+0x191/0x390 [ 1738.518581][T31563] do_sys_openat2+0x10d/0x1e0 [ 1738.523229][T31563] ? __pfx_do_sys_openat2+0x10/0x10 [ 1738.528400][T31563] __x64_sys_openat+0x12d/0x210 [ 1738.533226][T31563] ? __pfx___x64_sys_openat+0x10/0x10 [ 1738.538571][T31563] ? do_user_addr_fault+0x8d6/0x12f0 [ 1738.543828][T31563] do_syscall_64+0x106/0xf80 [ 1738.548393][T31563] ? clear_bhb_loop+0x40/0x90 [ 1738.553052][T31563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1738.558915][T31563] RIP: 0033:0x7f0cadca7407 [ 1738.563301][T31563] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1738.582881][T31563] RSP: 002b:00007fff20597120 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1738.591262][T31563] RAX: ffffffffffffffda RBX: 00007f0cae3e6880 RCX: 00007f0cadca7407 [ 1738.599203][T31563] RDX: 0000000000000000 RSI: 00007fff20597f1b RDI: ffffffffffffff9c [ 1738.607142][T31563] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1738.615081][T31563] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1738.623032][T31563] R13: 00007fff20597370 R14: 00007f0cae54d000 R15: 00005618f89214d8 [ 1738.630975][T31563] [ 1738.634239][T31563] Kernel Offset: disabled [ 1738.638536][T31563] Rebooting in 86400 seconds..