last executing test programs: 7m28.182612264s ago: executing program 1 (id=1323): madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000280)={0x9c0000, 0x6, 0x800, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x990902, 0x5, '\x00', @ptr=0x7ff}}) r4 = socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$sock_buf(r4, 0x1, 0x52, 0xffffffffffffffff, &(0x7f0000000000)=0xa) r5 = semget(0x2, 0x3, 0x33a) semtimedop(r5, 0x0, 0x0, 0x0) semctl$GETVAL(r5, 0x2, 0xc, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x0, 0x0) mount(&(0x7f0000000040)=@filename='\x00', &(0x7f00000000c0)='.\x00', &(0x7f0000000240)='ubifs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x10402, 0x89) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="060000000600000002000000eb00000060080400", @ANYRES32, @ANYBLOB="1500000000000000000000000000000000000000c502f92b7a9b8de5ea0dfe8bee34a53e6d26f945cac9f2e2a84e1751303d93", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000020000000500"/28], 0x50) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f00000003c0)=[{0x3, 0x2, 0x1, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff010}, {0x6, 0xba, 0x2, 0xffffffff}]}, 0x10) socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)='.', 0x1}], 0x1, 0x0, 0x0, 0x39c}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000002c0)=ANY=[@ANYBLOB="e33110495bfdaaa2aaaaaa0086dd60f6003e00083a00fe80000000000000000000fe80000000b3559f945defbf8c0000aa80009078000000000000000000515f0f14f714f0974df62beb5fd4687fb30b286ecbaea169"], 0x0) 7m26.77529484s ago: executing program 1 (id=1327): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0x0, 0x0) 7m26.406147901s ago: executing program 1 (id=1328): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000b40)=ANY=[@ANYBLOB="18080000040000000000000000000000181100009ba6f1a0203f76773232e0e2dd89582d1a417958df6cb7a7d6342a17d7ec9ce71aeedc2bad7a50f1efed95b5b79f9d2b749b4fca923a30a30e78cbcdf89abae53f0e62848e07a9df0fe68930e4f2bd7bc5c6ff5e3da9f18952bb2bcc36d1c148a35c6b8134d9151c90e60bb7a370ed7c08f8122124d3e1cf73ba8754757d37e9f3f9b026315926c834d3bcc7a54602ce439a8972d2aa", @ANYRES32=r0, @ANYBLOB="000000000000007eb0f5240014000000b7030000000000008500000083000000bca90000000c000035090100070000007900000000000000b7080000180000007b9af0ff00000000b509000000000000c3aaf0ff00000000bf8600000000000007080000f809ffffbfa400000000000007040000f0fffffdb7020000ecff008018050000d6b90b26", @ANYRES32, @ANYBLOB="0000000002000000b7050000080000004608f0ff76000000bf9800000000000056080000010000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) fsopen(&(0x7f0000000240)='xfs\x00', 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) lsm_set_self_attr(0x68, 0x0, 0x0, 0x0) 7m25.522908135s ago: executing program 1 (id=1331): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f00000004c0)=0xe8) setresuid(r0, 0xee00, r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x10) mkdirat(r3, &(0x7f0000000080)='.\x02\x00', 0x117) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @empty, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000040)="37031c26000014000000", 0xa}], 0x100000000000020d, 0x0, 0x21}, 0x20004020) 7m25.221094189s ago: executing program 0 (id=1332): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x8840, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x10) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000002000e400000000000000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) 7m24.368909371s ago: executing program 1 (id=1334): syz_emit_ethernet(0x0, 0x0, &(0x7f0000000140)={0x1, 0x2, [0x3a1, 0x722, 0xc50, 0xb30]}) 7m24.212830187s ago: executing program 0 (id=1335): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() kcmp(r1, r1, 0x5, r0, r0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000240)={{{@in=@remote, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}}}, &(0x7f0000000340)=0xe8) read$FUSE(0xffffffffffffffff, &(0x7f00000008c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) setuid(r9) newfstatat(0xffffffffffffff9c, &(0x7f0000002900)='./file0\x00', &(0x7f0000002940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) r13 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x200a01, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r14) quotactl_fd$Q_GETQUOTA(r13, 0xffffffff80000702, r14, &(0x7f0000000100)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000029c0)={0x0, 0x0, 0x0}, &(0x7f0000002a00)=0xc) r16 = socket$nl_route(0x10, 0x3, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000002a40)='./file0\x00', &(0x7f0000002a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) sendmmsg$unix(r3, &(0x7f0000005800)=[{{&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000180)=[{&(0x7f00000000c0)="b393b035d32934e1513dee349944a74b3acafd6d87ae034f6571ec4667d5ae9ae1f53a23776749f34b1380e5529c41dc98c1bb777e8b34a010b9ee4767a44357a8391796ac8af0ff80f07705", 0x4c}], 0x1, &(0x7f0000002c40)=[@rights={{0x20, 0x1, 0x1, [r2, r0, r0, r2]}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, r7}}}, @cred={{0x1c, 0x1, 0x2, {r1, r9, r12}}}, @cred={{0x1c, 0x1, 0x2, {r1, r14, r15}}}, @rights={{0x28, 0x1, 0x1, [r3, r0, r3, r0, r3, r3]}}, @rights={{0x14, 0x1, 0x1, [r16]}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r0, r0, r2, r3]}}, @cred={{0x1c, 0x1, 0x2, {r1, r17}}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x10}}], 0x138, 0x4000815}}, {{&(0x7f0000002d80)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000003100)=[{&(0x7f0000002e00)="3ae61c11419a202d5a6da5d011c1e9cb9e58f4dc0e245d9f9935cfad7380c35b12a32a0ec3bff27f5c8d8417eb57a16bf67a7b9a55a4cccfef4278b6a523", 0x3e}, {&(0x7f0000002e40)="6d4e48a51d7faf5b10839e6d750f6156aa10a6da483c3e8203f381516a7bda91b5b8440d10c60702388950443446311e6de2c4f20a00d3ff1f68d9d1317b1fa3c463df29804f7040909138936918edc64917bf1f84f99dc0b183de6cb5e08d07dcd106b8b86a33905edb99e3ab0208ff79af48787349dc1feeb5a3ff24a7d4c70a42e099262797cadc64896612cadfbf1d18fd605228007fd5578143c3931a6477ab00124ab782ef1493a5", 0xab}, {&(0x7f0000002f00)="89a67da6b5db8eb7563d822c585b1f7d6be48a358ee2e34108a127b104c727e6d50c477eb7eaec8b07b0734deb8f4bb2da072dd29debdb6b60cc49319466db966c389edc0034426068f65db7024ba67d2419ca9d25ae503c9a9aa8eb023f5df67b16f309b7250103b7abd9658f6dea588a00d2211191f87c77fab6aef921d5e245884d472db016c219f7cb9bb7cd3a940948d72e9378e8ebb2bc2c58", 0x9c}, {&(0x7f0000002fc0)="d7335c1214d2e3bf232873aae7f120eb7cc35294a1bf0461c2dca10fc33d94151846123ae62aeeeae9c7f55e9abb801696025ac205934129821464a74b27f07d5811b1b577b170f57cc4248f17fa49ae2b1e334415c503267b53c666b767bd25f9305910e9f72091a23fc9e0a8638c5f48616e4db7e0a2f9e6131021a9331c8f78e28e797521734de8dee1ee351eb50ca221d53cc3", 0x95}, {&(0x7f0000003080)="e97c12e088cd4fba9356a5506833476b4924a00e201fd4da257ff827bd7832b3e903fb5a81716abfac05d8c32abd3e038e52d14cd3db5d779b306233054a51462f5d2450a9775157b6f7e2f5ae2f36ee9716acc963227ae531f5e8b25c0b", 0x5e}], 0x5}}, {{&(0x7f0000003180)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000003740)=[{&(0x7f0000003200)="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", 0xfe}, {&(0x7f0000003300)="8c93be5421e920d374df5284e036225bb38ec176aa6280bbf31919589e86b63ebfba4da58e73cc7484b89afa8e", 0x2d}, {&(0x7f0000003340)="8b5578f743f82f0afdcee9b79b367c1884d0908c9ed0ffe089f3b8ae8d6557b2309ff90feae7795f56e8d9673ca7e795df24ee860a0a08960bd9664bc888d93935e4c53cf455058d9852ba913861f9a2a590c20ae1b1d759d60039ad4deeb626b0d515f56483cb04c35f0942d23fc04a5c9f1ea654b33c4b481725cf09d11ef18b132f08b848710b203eb718e2973fdfdcd2d318b4807f92edfd1a482f5bce6b09caba0b052fc559895ded1eafa207a6a66421e43c5b864e205960bf59408bf3565bd80d8de9d90454c7f0727ffd32a423904a90513de645375006e7fdcfe8eeda926c817fdf272462c7", 0xea}, {&(0x7f0000003440)="bc939af7e4f0f47bf4b3c7eb513e6a0215d80ef5b69d4253beaabb0b9a64645eb008981b803e2b544ee5d2a01c74649b2245ebbe0e5554fe2108449765e8ec918b226a5db33fa569a4d7dbced520cfb0900e17e2b29250", 0x57}, {&(0x7f00000034c0)="493650b8fbdbdd30e929dee090bbe790ba7f", 0x12}, {&(0x7f0000003500)="401650c0ea5900ff91d94f19555835062e6a4622c3acab2a8a05b58b6980b4c0097ca322e64e076aaa89fd390f841c70152dedbda48c205a", 0x38}, {&(0x7f0000003540)="fdd054dc5c916ea7ce4725aef2afe4d46a67f4ffe10ed8b292cf49b78b651376603e3c1833954bd3879208a30f1e61284aad89abca2125d26dc84e2a295e0867d8f28c0024260092a309ef8de96dea45d14f5ed62e9ad961cf196b217ad38b80a630924034eff2bfd6e6a05cd0df6b2b9015ca22b1a63ad8dc41b2db52d4edca4c0b70fa43c228af19e9841502dee59c32de2d98d2e2ca4fd27f7c63763e1ff57d24eae9c923b4e7d5f81e2aea07ea60cbf5e72ebe5667cfced22f5721c48efa9701d14b478a8ec8bc3fa1d62388ebf18d89683cee6ebc2fd5917be69ecf90b9d80c0e07c26c861c77c1bdbb961104650b7343e8f068f112", 0xf8}, {&(0x7f0000003640)="d51174b31f091276cfe5f8ee6622a26ac814b025e891508be514bd8b104c5e092f8fa3863eab6ba1a14dcfc4ff6267e53e1c0e30173ac0487eeb7356962f26b1aff7c35bac7062d359b59b3f175d81f857e272d0148816aaa4e2bc66e06f75dd084169ec7c32cf69a6068968456b99d47627a999e50a041db1f0d7f699653b0885992b65b94cea758a7cf2322d2f3819c0693baef21e13fbe37a41f5ccd2aa33156640c52ad382e41495a2cab82a64ebfee25666435744d5884185b74edfb9e813a6debbb14b1d345130d42e76c4846f72abe06f", 0xd4}], 0x8, &(0x7f0000003800)=[@rights={{0x1c, 0x1, 0x1, [r3, r3, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r11, r18}}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000003880)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000003cc0)=[{&(0x7f0000003900)="affe08a11e5d0d7b8409f78d50b8e8ad065824ad1f00d2dac9ee1d5f72602919c59b5c356d478575b9f5255dd7816cc9fda1a86b2d96380c975c72b252d160e82f2c092f5c6049ce43059b8a69180c3dafdee02e870b818bb1cd898ff1379d74c8dc472a93348abe25473b3cce03deb99452c0b226096707f1aa1f4f0a9e8cef99aa487e3b3b86deb741885d454d04378a407da0b65201332f9b52973141f7e0bebb9a75f340476b97f4bc8ecf57e2a9ea17fceae278083aa00e1746b187f26d4afe7bd72f75e883", 0xc8}, {&(0x7f0000003a00)="a3bfef77f15406df64a977b3348935ab5df135ea8175d511b848d6470e251c370c29d7284829238857da9c31e33639820ae3ea9ee66581ee6adc73cda05c6c1becfe989ad462290b5e6599371539fc0fb984cb824cab719561393ab4de97b5ba43442feef615ec07fb13b0a2f0671dbc6ffed8570af2e15fae64b3b20745192eac90d6b0a4f40e0c09c45e579b454af915dee8b358f338cf477376b1b1df5173536057e27ef20df74e8190b91767574bcabfc03634cc8d742543cd3cc3a0a68f89020104bd84af93e6c9e6b428ae040377cf6f9d937743490ccf60cce6", 0xdd}, {&(0x7f0000003b00)="104b44238b286e038dad6b0b0532f7986c04958e7c0b94e404fa94212d04e4ad659213b93e5590b6c3106b048ce5f14335af18a018218228dc6fcdd6c6ee590a1301c0e51ee62111b29bf4327497359f2c81c4d42cd15af3f95aa4b621c31155fa53edb2842ce9b83d990b6a25a2399d4965d56c0030ad60c42422843820297fabb4c19666bdf5eb7ac0ccae619e289893f8566abf2210c1d1a0", 0x9a}, {&(0x7f0000003bc0)="8e9d725da90b3e9c127e3163c8a0229cdef34c9289439e5fa2fcaf2b67d1d9dca43cd74acdc795bab118e5ee4845507ba0fdb0e6b38a70a8194f4265960605720d8db4234b2c8934d674f9a1bb7bdad31f1358e25b62ea34ea8ddfef4612b4f82d498e6d8fdbac4d725871d01751eb7eb41f898c47e9b9eb686f9897c2372a304d6e33676fe34f23cfcc460a0e629c13d82434b7031e0353e99d0ef2ff964abccd6d4e8982b44f2a589f22df", 0xac}, {&(0x7f0000003c80)}], 0x5, &(0x7f0000003d40)=[@rights={{0x2c, 0x1, 0x1, [r0, r16, 0xffffffffffffffff, r3, r3, 0xffffffffffffffff, r13]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, r7}}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x10}}], 0xb0, 0x40}}, {{&(0x7f0000003e00)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000003f80)=[{&(0x7f0000003e80)="42f697a44e9daefa42265e6d554333a08541a0e447c902cbcf2873eae32967acf85fbe1a277b4f92889938f327a6181bb044f189d74a253db968ae37b907dc87027c83d8d8b3bef8c0d1e51df81f48c76da1abf13ffb5896fffc503c807884c912dc0e4370fee892c001c0c90411e17a5328d33f6b9491e33bdd41ea1a3c85b08c386bd153b70e7425ccb58c74d8f5e8422fec81d7129d456778e08832c5bd2a2d4e824829827c720a1d02b6873f4d70eed6a3c33f23f471f13b0bfc43facc1d8dd63e821941bbe4b7a6424620982448aee9737f3749d6073b585fab1dac", 0xde}], 0x1, &(0x7f0000004000)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r5}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r3, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r16, r2]}}], 0x50, 0x20000010}}, {{&(0x7f0000004080)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000005500)=[{&(0x7f0000004100)="0a94bec19b33a29e72585542", 0xc}, {&(0x7f0000004140)="2d645f921e", 0x5}, {&(0x7f0000004180)="ec560ca12ac02168c4c923b5845e2567b3f9a269438d4fb4b55b8c9bb25a7de6101245e43914b569fe4df1fce2dd621082", 0x31}, {&(0x7f00000041c0)="d48883d840f3292ba4a285de2dc811672f824bc95078e9a725c9237d3baa4a141d2d05b55d148b8a12122c6d1b9a33e7d0ca6238dea3cdba5b0ff08ad6010f850ac992963bac9a28f4235eb184ed32ea6c55d1292e3edd713f19048fed3f8f3b7d01ccb9fffcf9d5ab64e538029071961dd64ba13a56041e67a21ced72986520ca824c96e4f48349e72c6c5323e92589d965d921e46bd9f176b57ae5bcb81f974786f955f039bb6b35d3d206c7b04191e55e4ee0370eba", 0xb7}, {&(0x7f0000004280)="523c5b5cfed2bad773e2696d2695200d2b3d7ca9ba34074c8bc05bdfca037f3577ae00b58cdfc399e09dbfb3c3f2c7769147804dd6d9eaeb9fd361d7041d67f70110a88e901f1cd4d33317a9e45ea69f224c7733082ac320e9118802b0c8f22cba23d2e3166a7d530ce50620f3d6c97664b9eec2289447bde4dc79ccff", 0x7d}, {&(0x7f0000004300)="2aa3385363646a0c7a145df16fa04190242fa32fe4386b8b21ea844765c86e454cb0b434ae4f584c3ca274a0fda431b214126c9633be8399003a447d16ff7eb58562daac1476dd2031c106e7fcd697330cf3f109cd50d2c74aa2484af2a2ed54e92575ad911b80bb4f90028237fc2a33853c8dad994c9bc2", 0x78}, {&(0x7f0000004380)="90c7d346755a367a98111f5d8e997877ca651a15c568b7741df99a91b00930f6cb60204d2e3c74f6d65aac5d466bf14d539b8d7bac7dc4a6002be7cb3c2d28687a06499393104a0160376921b3f446447a5682fc95bf14090aaed6c9b987e03eac67a5f9d941c0bfd0884b3d02251776e895cf3e705da779df84412b9fbbd1af29d67835efde18b3912b6b2296719a370567b1271a5f3bb57d389d78207678624eee517da3a0a654afe6b9c0ef6461dead72096af4237a79c69bddd2a4158d1a5e48236e543050bcb6aa51ec884f5e4ecf082812aa23a0fd0e93e4413f581064d4a258e588bde2f4018fd81a64", 0xed}, {&(0x7f0000004480)="e272e7c54c056e12a898fe7152e57dcedff376152fc3737b1ce8174e687c4986e66573372cae5dc6ec2f2ff5a830d3ce7be8cdbd31b3db4fd93ec41cdd46ed247a14484cba815f5d1b60331137674f", 0x4f}, {&(0x7f0000004500)="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", 0x1000}], 0x9, &(0x7f0000005740)=[@cred={{0x1c, 0x1, 0x2, {r8}}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r10}}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r15}}}], 0xa8, 0x20000800}}], 0x6, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setgid(0xee00) r19 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r19) r20 = syz_open_procfs(0x0, &(0x7f0000000400)='stat\x00') pread64(r20, &(0x7f0000000140)=""/15, 0xf, 0x4) 7m23.951999417s ago: executing program 4 (id=1339): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x800000000000082, 0x20000000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0xffffffffffffff7c, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000100070000000900020073797a30000000001400078008001240fffffffe080013400000080015000300686173683a69702c706f72742c6e6574000000000500050002000000050004"], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r6, &(0x7f0000000100)={0x1, 0x6}, 0x2) socketpair(0x1, 0x2, 0x1, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) write$USERIO_CMD_REGISTER(r6, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r6, &(0x7f0000000000)={0x2, 0x3}, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x15, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018010000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000018110000", @ANYRES64=r4, @ANYBLOB="00000000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000950000000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 7m23.76805536s ago: executing program 0 (id=1340): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x10) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x80000000, 0x410400, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x20}}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b2a, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000021c0)={0x4, 0x0, &(0x7f00000020c0)=[@enter_looper], 0x0, 0x0, 0x0}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYRES64, @ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="d3a43f8b24ab33fe5fea9816f825de4e032b1d448a5246c44e8ca47c1d5a6bfd42c4f01951b0fcf97c", @ANYRESOCT=r1, @ANYRESOCT=r3, @ANYRESDEC=r1, @ANYRESDEC=r2], 0x4c}}, 0x0) r4 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$smackfs_label(r4, &(0x7f00000004c0)={'@,\\('}, 0x5) 7m23.608579746s ago: executing program 0 (id=1342): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x3c, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 7m23.450534001s ago: executing program 0 (id=1344): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f00000004c0)=0xe8) setresuid(r0, 0xee00, r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x10) 7m23.210739269s ago: executing program 0 (id=1347): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="08000000020603000001000000000000000000000500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1a, 0x0, 0x0, 0x0, 0x80000002, 0x57, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x1000, 0x0, 0xde0}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x7, 0x3, 0xfffffffb, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000004000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bca900000000000035090100070000007900000000000000b7080000180000007b9af0ff00000000b509000000000000c3aaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb7020000ecff008018050000", @ANYRES32, @ANYBLOB="0000000002000000b7050000080000004608f0ff76000000bf9800000000000056080000010000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14, 0x81800) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) 7m22.415474188s ago: executing program 4 (id=1352): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x10) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x80000000, 0x410400, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x20}}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYRESDEC], 0x38}}, 0x480d0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000021c0)={0x4, 0x0, &(0x7f00000020c0)=[@enter_looper], 0x0, 0x0, 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYRES64, @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="d3a43f8b24ab33fe5fea9816f825de4e032b1d448a5246c44e8ca47c1d5a6bfd42c4f01951b0fcf97c", @ANYRESOCT=r0, @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRESDEC=r1], 0x4c}}, 0x0) r3 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$smackfs_label(r3, &(0x7f00000004c0)={'@,\\('}, 0x5) 7m22.282176274s ago: executing program 1 (id=1353): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101700) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000080)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x400000000a0a01, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x39, 0x9}}, 0x20) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r6, 0xc0844123, &(0x7f00000001c0)) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4201, 0x0) ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x2) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110c230055) 7m22.281444281s ago: executing program 4 (id=1354): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0400f9f407000904018002200000000000000000000800010000000000", 0x24) userfaultfd(0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000000) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000540)={0x78, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x11, 0x2a, [@mesh_chsw={0x76, 0x6, {0x4, 0x58, 0x41, 0x1}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x3}}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xfff0}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_IE={0xe, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0xa5, 0x6}}, @channel_switch={0x25, 0x3, {0x0, 0xae, 0xf8}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x78}, 0x1, 0x0, 0x0, 0x40c0}, 0xe6fedbfe84de17cc) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000480), 0xa6f81, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x24000085) r4 = epoll_create(0x400) ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, 0x0) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000380)=0x1c) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) r5 = fsopen(&(0x7f0000000000)='jfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000003c0)='iochabset\xd9S\xdc\x85\xba\xbd\xd5\xb4B\x1b\x88$6\x85\\\xfe\x13\x1e\f\x14d\x04\x8e;\x9f\xa1/\xbe\xab\xc4\x82o\xe3c\xc5\xdd5\x1ca<\xdd\xd4\f\x14\xc2\xbd\xd2\x93H\x1a\xc3\x03\xf7\"\x16\xe2\xe6\xa5\xf7\ar\x0e\xedU\xb8!T\x13-\xef\x9fO\x1a\x03w\x99\xc5\xc3\x89\xd8\x99\xb6y\x18\x11\xb9\xf0\x17\x7fX\xfc\xb2\xc6\xc5\xbd\xde-\xdco*\xcd\xe8\xe9\x13\x04B\x9dw\xedH\xb0\xe0\x91\x04\xe6\t\xf1U\xb2Jn\x8da\xafv a\xee\xc3\xcf\x16+\xb4\xbbn \x1d<\xeeC\x1cv\'\xc8n\xd9.\xb8\xbe\xd7\xe0\xa8\xbb;\xf5\x1agV\xfcT\\\xb6\x7f\x9e|\xc5\xec6P\xd14\xfb\xe6~\xaa0\x955W6\xc8\x8d\x85\x86Q\x89\xf9\t3a\xed\xda\xb6\xc7\xf8\xa3\xcb>\x8a\xbd\x7fH\x80\x14', 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r6) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4081}, 0x200040c4) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x90, r7, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, '%/()]%-.]\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2e}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x90}, 0x1, 0x0, 0x0, 0x40840}, 0x4) 7m21.760446924s ago: executing program 32 (id=1353): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101700) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000080)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x400000000a0a01, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x39, 0x9}}, 0x20) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r6, 0xc0844123, &(0x7f00000001c0)) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4201, 0x0) ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x2) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110c230055) 7m20.677827769s ago: executing program 4 (id=1358): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) 7m20.531510184s ago: executing program 4 (id=1360): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x8840, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x10) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000002000e400000000000000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) 7m18.110384031s ago: executing program 4 (id=1364): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x10) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x80000000, 0x410400, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x20}}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYRESDEC], 0x38}}, 0x480d0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000021c0)={0x4, 0x0, &(0x7f00000020c0)=[@enter_looper], 0x0, 0x0, 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYRES64, @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="d3a43f8b24ab33fe5fea9816f825de4e032b1d448a5246c44e8ca47c1d5a6bfd42c4f01951b0fcf97c", @ANYRESOCT=r0, @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRESDEC=r1], 0x4c}}, 0x0) r3 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$smackfs_label(r3, &(0x7f00000004c0)={'@,\\('}, 0x5) 7m17.766420683s ago: executing program 33 (id=1364): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x10) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x80000000, 0x410400, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x20}}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYRESDEC], 0x38}}, 0x480d0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000021c0)={0x4, 0x0, &(0x7f00000020c0)=[@enter_looper], 0x0, 0x0, 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYRES64, @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="d3a43f8b24ab33fe5fea9816f825de4e032b1d448a5246c44e8ca47c1d5a6bfd42c4f01951b0fcf97c", @ANYRESOCT=r0, @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRESDEC=r1], 0x4c}}, 0x0) r3 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$smackfs_label(r3, &(0x7f00000004c0)={'@,\\('}, 0x5) 7m7.950765152s ago: executing program 34 (id=1347): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="08000000020603000001000000000000000000000500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1a, 0x0, 0x0, 0x0, 0x80000002, 0x57, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x1000, 0x0, 0xde0}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x7, 0x3, 0xfffffffb, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000004000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bca900000000000035090100070000007900000000000000b7080000180000007b9af0ff00000000b509000000000000c3aaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb7020000ecff008018050000", @ANYRES32, @ANYBLOB="0000000002000000b7050000080000004608f0ff76000000bf9800000000000056080000010000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14, 0x81800) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) 1m0.918887805s ago: executing program 2 (id=2672): sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r0, 0xffffffffffffffff}, 0x4) preadv(r1, 0x0, 0x0, 0x3, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="3d25ff005b7844b0d82eb423f700", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x21, 0x2, 0x2) 1m0.666196025s ago: executing program 2 (id=2674): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0xe) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x62, 0x5, 0x438, 0x280, 0x0, 0xffffffff, 0x188, 0x188, 0x3a0, 0x3a0, 0xffffffff, 0x3a0, 0x3a0, 0x5, 0x0, {[{{@ip={@multicast2, @broadcast, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key=0x9, @icmp_id}}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@addrtype={{0x30}, {0x100, 0x8, 0x6, 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @port=0x4e23}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@ttl={{0x28}, {0x1}}, @common=@inet=@set3={{0x50}, {{0xffffffffffffffff, 0x5}, {0x6, 0x4}, {0x2, 0x7}, 0x47}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x498) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e23, 0x800, @loopback}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="ffff0087"], 0x8) keyctl$clear(0x3, 0xfffffffffffffffd) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000180)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, {0x20000010304, @multicast}, 0x12, {0x2, 0x4e22, @rand_addr=0x64010102}}) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x10, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000fe8000"/294], 0x190) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000180)={0x4, 0x4, 0x6685d994, 0x107, 0xa, "0062ba7d82070000000000efffffffff086304"}) dup3(0xffffffffffffffff, r3, 0x80000) 59.668394908s ago: executing program 2 (id=2675): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f6, 0x0) 15.699468723s ago: executing program 3 (id=2768): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xffeffffffffffffb, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0xea5bc50b619917ee) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(0xffffffffffffffff, r5, 0x0, 0x7ffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@sg0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f0000000240)) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0xb, 0x1, 0x0, "f3f0b32aa4526bc424cc83055c5a8d21e6cb87d69b11022ef02d2b83dda571f8"}) clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) 14.362037163s ago: executing program 3 (id=2771): r0 = socket$kcm(0x28, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x20040001) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000340)={r1}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000480)="d8001c00180081020081e9bdf94f75e38e6ede8367f70500", 0x18}], 0x1, 0x0, 0xfffffffffffffdf6}, 0x20004005) r4 = socket$packet(0x11, 0x3, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000008c0)=r5, 0x4) r6 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) r7 = socket$inet6(0xa, 0x2, 0x3a) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000f8ffffff0000000000000000850000002a00000085000000a000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f0000000740)="f7e5ad6b4c4c03ca00000000f6ff", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendto$inet6(r7, &(0x7f0000000080)="800037bbfa9ba1ce2aefa0524c914071055619570f5163b916f0ac7bb317c3419b083951d761eb1f3ba903cc104de1a74c77e2b71000ce8ddfb39353885531390dd57ade8d10e1a2488d76b09f2c879acefcf515a5156e9d53cab705dcf76766042ef374bb291dd6b0d1ac418bad1b818be5d9d5b4fb6b7c0cd6329fdc147a8f2d4ff30f4c3e1ce6fe6ce23b7b4e5b24f49d8c99e4e3c0aaf95af8e70e7f0041d5a44ff77f30662752b7d66aed9889470ab952315f534612e9cc0f210bc5716840104afcb68e24c38abccc40ae74", 0xfffffe52, 0x8010, 0x0, 0x1e) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e3, &(0x7f0000000180)={r1, r3}) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r1, r3}) r9 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r9, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0) recvmsg$kcm(r9, &(0x7f0000000240)={0x0, 0x1200, &(0x7f0000000040)=[{&(0x7f0000000340)=""/4106, 0x6ae}], 0x10}, 0x406) 13.916074641s ago: executing program 3 (id=2775): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6, 0x9, 0x0, 0x1, 0xfffa0000}, {0x66, 0x0, 0x0, 0x6}}, [@printk={@llu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x6c, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x44, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x71}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5a56de32}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x14}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xef}]}, {0x4}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9a85972}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56284894}]}]}]}, 0x6c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="80000000100001e026bd700402d4df2500000000", @ANYRES32=r2, @ANYBLOB="884e0600c16a010060001280110001006272696467655f736c617665000000004800058005001c00000000000500200000000000050005000000000005001900020000000500060000000000050008"], 0x80}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) 13.61852344s ago: executing program 3 (id=2778): socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}, 0x1, 0x0, 0x0, 0x9014}, 0x4) fanotify_init(0x202, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x40, 0x183a02) ioctl$HIDIOCGNAME(r1, 0x80404806, &(0x7f0000000140)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xfffffffffffffed1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x7b69, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) keyctl$join(0x1, 0xfffffffffffffffc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in6={{0xa, 0x4e22, 0x4, @mcast2, 0x401}}, 0x2, 0x8}, 0x90) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x13, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="1a00"/12, @ANYRES32, @ANYBLOB="64009cd1e988e247f1f5be859cdbbee027000000000000ac6830f3d02d5ebcfe86abb6d00b7000240a33443d7a5c831ba9e9f1e22b8a11133f1b14177cd299d9ca9e08b565b0d14795a8ea8cdf294719e43580a87a685f49f1205ba8a5291c1c65d0f2ce47c91ce7abfe6cf5462545214e00"/128, @ANYRES64=0x0], 0x20) syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100015ae4c41096050100f5050100030109021b0001000000000904d60001b5e14500090583"], 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, r7, 0x731, 0x70bd26, 0x40000000, {0x38}}, 0x14}, 0x1, 0x2, 0x0, 0x40}, 0x8000) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) setsockopt$inet6_tcp_int(r4, 0x6, 0x5, &(0x7f0000000000)=0x9, 0x4) 10.870111293s ago: executing program 3 (id=2782): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x20400, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) sendto$inet(r2, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) 9.434034615s ago: executing program 6 (id=2789): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0400f9f407000904018002200000000000000000000800010000000000", 0x24) userfaultfd(0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000000) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000540)={0x78, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x11, 0x2a, [@mesh_chsw={0x76, 0x6, {0x4, 0x58, 0x41, 0x1}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x3}}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xfff0}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_IE={0xe, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0xa5, 0x6}}, @channel_switch={0x25, 0x3, {0x0, 0xae, 0xf8}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x78}, 0x1, 0x0, 0x0, 0x40c0}, 0xe6fedbfe84de17cc) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000480), 0xa6f81, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x24000085) r4 = epoll_create(0x400) ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, 0x0) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000380)=0x1c) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) r5 = fsopen(&(0x7f0000000000)='jfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000003c0)='iochabset\xd9S\xdc\x85\xba\xbd\xd5\xb4B\x1b\x88$6\x85\\\xfe\x13\x1e\f\x14d\x04\x8e;\x9f\xa1/\xbe\xab\xc4\x82o\xe3c\xc5\xdd5\x1ca<\xdd\xd4\f\x14\xc2\xbd\xd2\x93H\x1a\xc3\x03\xf7\"\x16\xe2\xe6\xa5\xf7\ar\x0e\xedU\xb8!T\x13-\xef\x9fO\x1a\x03w\x99\xc5\xc3\x89\xd8\x99\xb6y\x18\x11\xb9\xf0\x17\x7fX\xfc\xb2\xc6\xc5\xbd\xde-\xdco*\xcd\xe8\xe9\x13\x04B\x9dw\xedH\xb0\xe0\x91\x04\xe6\t\xf1U\xb2Jn\x8da\xafv a\xee\xc3\xcf\x16+\xb4\xbbn \x1d<\xeeC\x1cv\'\xc8n\xd9.\xb8\xbe\xd7\xe0\xa8\xbb;\xf5\x1agV\xfcT\\\xb6\x7f\x9e|\xc5\xec6P\xd14\xfb\xe6~\xaa0\x955W6\xc8\x8d\x85\x86Q\x89\xf9\t3a\xed\xda\xb6\xc7\xf8\xa3\xcb>\x8a\xbd\x7fH\x80\x14', 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r6) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000fddbdf250400000014000500fe8000000000000000000000000000aa0800020000000000434bc255f9f97b238ab42cecdd5d5e1fa5b759c4606de7669e22908c7d432237d13223216dd7b4c67d3fb25e1b2d54aeff47d32aaba543acf9914435afa38c02e63bf28e96806e9b51054ae6725c78fd0e25c7f89182d9ab1060474634ae7e419150618c005f810d076fca2f64d25f53aeff9f2e5df347466cfe78fff01d6bbe63723ebb65f7ddf831614c3fb99d98cbf7f434"], 0x30}, 0x1, 0x0, 0x0, 0x4081}, 0x200040c4) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x88, r7, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, '%/()]%-.]\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x88}, 0x1, 0x0, 0x0, 0x40840}, 0x4) 8.633701399s ago: executing program 7 (id=2791): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r4 = io_uring_setup(0x1c6c, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40885}, 0x0) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000180)='ufs\x00', 0x1a0c099, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000240)={0xf0f046, 0x100000}) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x840) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000004200)=[{{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{0x0}, {&(0x7f0000000580)="8cb62664682b0b56372eaa92c31014893e716501fbe3c18638755695861ce9c9d4fb08ec41224d269de41b095518248608f3cec709d9672cd8d9345b58de127908de11cfd8c8f5f783078628da407c020ee6d00cad6c56784e926ad6632355cc1398d5fd50aae292100c0e12dfa87636ab3c5081b2e56e2ffe22b93011b24a01ef978bf33fe8131ce7a2b36904ca6801026b62db0eeb51a9c5ae385c2840f55e561f64736b8210d95c29b1cf087c71c9ed1b6cfcc3e477557d9b6c37663249a9946a7ba1a4e5fbb2a5a7b22caca7ff3317fc3fc3f460fd9c993d49", 0xdb}, {&(0x7f0000000680)="4c5c10de91cd10142576cf845c4507887329032280c2a6d699964c694b6d7f28ecc79d87fe65d2cdb2384c5e76c98df256d4d25f7df4b8b200001d1b687ad69f6dc83ceb620e5d358bb6ac3a297dd152a0fd556a9afcbcb7d40631bf90fc7d2bd7d12db1b5aa4fd4c0c59d13c9d9731e4d00b7a42000e83a18ce2354d17834a3c5551a0d174db32252c27c2c09cce6bedf9e0271848525c2e35e0a565275b83f6b74c590d1942f2a95d66e383f541af20702636a86e4d364c10f702761ac8af62c2527a94949a4bbc58d106165bb61cac6bf0dc50fc7e694697be2f6ef9a9398aa20c5fc37cd65c265d5fc0c5b73502b3be97a5ec973ac319d", 0xf9}, {&(0x7f0000000100)="0cd492d259f828b35f4f1c67ca1e5056888e4cb80e651fded609b7d16d9e8748fb9bded582978e21cbbf2350a97def09c80cd8202e245e95d3e46ea82040c6", 0x3f}], 0x4, &(0x7f0000000840)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r3, r3, r2, r4]}}, @cred={{0x1c, 0x1, 0x2, {r6, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {r6}}}, @rights={{0x1c, 0x1, 0x1, [r2, r7, r3]}}, @rights={{0x24, 0x1, 0x1, [r4, r7, r7, r2, 0xffffffffffffffff]}}], 0xd0, 0x40000}}], 0x1, 0x4000) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 7.68105665s ago: executing program 3 (id=2793): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/schedstat\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000280)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="000204"], 0x18) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001840), 0x3b, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={0x0, 0xb4}, 0x1, 0x0, 0x0, 0x20008000}, 0x8840) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[], 0x48) syz_usb_connect(0x3, 0x3d, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b"], 0x0) 7.648167326s ago: executing program 6 (id=2794): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_emit_ethernet(0x19e, &(0x7f0000000680)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x2, 0x6, "351b91", 0x168, 0x32, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, {[@routing={0x1d, 0x2, 0x3, 0x1, 0x0, [@private0]}, @hopopts={0x29, 0x0, '\x00', [@pad1]}, @dstopts={0x3c, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @hao={0xc9, 0x10, @mcast2}]}, @routing={0x33, 0x2, 0x1, 0xd, 0x0, [@mcast1]}, @routing={0x88, 0xa, 0x1, 0x3, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x8}, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}]}, @dstopts={0x21, 0x4, '\x00', [@ra={0x5, 0x2, 0x2}, @enc_lim, @jumbo={0xc2, 0x4, 0x5}, @calipso={0x7, 0x18, {0x2, 0x4, 0xfb, 0xaf4, [0x10001, 0x1000]}}]}, @routing={0x22, 0x2, 0x1, 0x30, 0x0, [@private1]}, @hopopts={0x3a, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @pad1, @jumbo={0xc2, 0x4, 0x13}]}, @hopopts={0x2f, 0x8, '\x00', [@ra={0x5, 0x2, 0x4}, @calipso={0x7, 0x10, {0x1, 0x2, 0x0, 0x2, [0x81]}}, @enc_lim={0x4, 0x1, 0x1b}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @pad1, @hao={0xc9, 0x10, @private1}, @ra={0x5, 0x2, 0x3}]}]}}}}}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xa}, {0xfff2, 0x9}}}, 0x24}}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r0, 0x80000) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0]}}, 0x0, 0x33}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc0}}, &(0x7f0000000080)='GPL\x00', 0xf, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000180)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x2010, r3, 0xda8d7000) syz_emit_ethernet(0x176, &(0x7f0000000840)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @multicast, @val={@val={0x88a8, 0x2, 0x1, 0x1}, {0x8100, 0x4, 0x1, 0x3}}, {@ipv4={0x800, @tipc={{0x2b, 0x4, 0x2, 0x5, 0x160, 0x68, 0x0, 0xe3, 0x6, 0x0, @local, @dev={0xac, 0x14, 0x14, 0xe}, {[@noop, @end, @ssrr={0x89, 0x13, 0x45, [@dev={0xac, 0x14, 0x14, 0x16}, @rand_addr=0x64010100, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x14, 0xfb, 0x1, 0x1, [{@rand_addr=0x64010101, 0x9}, {@multicast2, 0x4}]}, @lsrr={0x83, 0x7, 0x32, [@broadcast]}, @rr={0x7, 0x7, 0xa7, [@loopback]}, @cipso={0x86, 0x60, 0x3, [{0x7, 0xe, "2d84889abdcf9155a4f19852"}, {0x7, 0x9, "031ebf22e56f0f"}, {0x7, 0x12, "2fc1a5d6e7be687fb37e892eee1cc0d6"}, {0x7, 0x3, "cb"}, {0x7, 0x2}, {0x6, 0x11, "3692ce829d562f37155f3a9aa2a666"}, {0x2, 0x10, "033a346e70eb6a7c8aa518be493f"}, {0x0, 0x5, "681c00"}, {0x6, 0x6, "ce89a445"}]}, @end]}}, @name_distributor={{0xb4, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x7, 0x0, 0x0, 0x3, 0x0, 0x3, 0x4e21, 0x4e23, 0x1}, [{0x1ff, 0x89, 0x9cd, 0xf, 0x7292, 0x7, 0xb, 0x4}, {0x9, 0x3, 0xed6b, 0x1, 0x8, 0x3, 0x7, 0x8}, {0x36c4aa9c, 0x3000, 0x20, 0x6, 0x3, 0x2, 0x4, 0xffffa51}, {0x259, 0x5, 0x9, 0x6, 0xfffffff8, 0x4a9, 0x3, 0x8}, {0x5, 0xd, 0x4, 0x7, 0x8, 0x9, 0xe, 0xf087}]}}}}}, &(0x7f0000000600)={0x0, 0x1, [0x1be, 0xb1e, 0x466, 0xda3]}) semget(0x1, 0x0, 0x101) 7.3617809s ago: executing program 7 (id=2795): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0400f9f407000904018002200000000000000000000800010000000000", 0x24) userfaultfd(0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000000) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000540)={0x78, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x11, 0x2a, [@mesh_chsw={0x76, 0x6, {0x4, 0x58, 0x41, 0x1}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x3}}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xfff0}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_IE={0xe, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0xa5, 0x6}}, @channel_switch={0x25, 0x3, {0x0, 0xae, 0xf8}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x78}, 0x1, 0x0, 0x0, 0x40c0}, 0xe6fedbfe84de17cc) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000480), 0xa6f81, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x24000085) r4 = epoll_create(0x400) ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, 0x0) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000380)=0x1c) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) r5 = fsopen(&(0x7f0000000000)='jfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000003c0)='iochabset\xd9S\xdc\x85\xba\xbd\xd5\xb4B\x1b\x88$6\x85\\\xfe\x13\x1e\f\x14d\x04\x8e;\x9f\xa1/\xbe\xab\xc4\x82o\xe3c\xc5\xdd5\x1ca<\xdd\xd4\f\x14\xc2\xbd\xd2\x93H\x1a\xc3\x03\xf7\"\x16\xe2\xe6\xa5\xf7\ar\x0e\xedU\xb8!T\x13-\xef\x9fO\x1a\x03w\x99\xc5\xc3\x89\xd8\x99\xb6y\x18\x11\xb9\xf0\x17\x7fX\xfc\xb2\xc6\xc5\xbd\xde-\xdco*\xcd\xe8\xe9\x13\x04B\x9dw\xedH\xb0\xe0\x91\x04\xe6\t\xf1U\xb2Jn\x8da\xafv a\xee\xc3\xcf\x16+\xb4\xbbn \x1d<\xeeC\x1cv\'\xc8n\xd9.\xb8\xbe\xd7\xe0\xa8\xbb;\xf5\x1agV\xfcT\\\xb6\x7f\x9e|\xc5\xec6P\xd14\xfb\xe6~\xaa0\x955W6\xc8\x8d\x85\x86Q\x89\xf9\t3a\xed\xda\xb6\xc7\xf8\xa3\xcb>\x8a\xbd\x7fH\x80\x14', 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r6) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000fddbdf250400000014000500fe8000000000000000000000000000aa0800020000000000434bc255f9f97b238ab42cecdd5d5e1fa5b759c4606de7669e22908c7d432237d13223216dd7b4c67d3fb25e1b2d54aeff47d32aaba543acf9914435afa38c02e63bf28e96806e9b51054ae6725c78fd0e25c7f89182d9ab1060474634ae7e419150618c005f810d076fca2f64d25f53aeff9f2e5df347466cfe78fff01d6bbe63723ebb65f7ddf831614c3fb99d98cbf7f434"], 0x30}, 0x1, 0x0, 0x0, 0x4081}, 0x200040c4) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x88, r7, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, '%/()]%-.]\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x88}, 0x1, 0x0, 0x0, 0x40840}, 0x4) 6.647380998s ago: executing program 6 (id=2796): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x22080) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000080)={0x2, 0x3, 0x9, 0x0, 0x1}) r3 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r3, 0x0) ftruncate(r3, 0x51a9497) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f0000000100)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0, 0x1}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000002) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000000)=0x1) mlock2(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000280)={0x9, 0x4, 0xfffffffd, 0x6, 0xc37f, 0x400}) 6.637407792s ago: executing program 2 (id=2676): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_connect(0x0, 0x62, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d24060101030200010006000609240305050306058109240306"], 0x0) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001780)=@newtfilter={0x284, 0x2c, 0x800, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xa, 0xffff}, {0xd, 0x8}, {0x7, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x10}}, @filter_kind_options=@f_bpf={{0x8}, {0x240, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x1fc, 0x1, [@m_simple={0xc4, 0x7, 0x0, 0x0, {{0xb}, {0x78, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x7, 0x6, 0x6, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x200, 0x20000000, 0x45aa, 0x7}}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x200, 0x5, 0x8, 0x8}}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x7f, 0x3, 0x10000, 0x7ff}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0xa, 0x3, 'wlan1\x00'}]}, {0x24, 0x6, "8353bfc853b14a49073f4d02b94bbadc4258e4fccb4328d1fdbfc4278d8ea548"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_sample={0x134, 0x1e, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x4000b, 0x9, 0x7, 0x7, 0x4}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xd}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xfffffff1}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x6, 0x800, 0xffffffffffffffff, 0x8c, 0x32bf}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xffffff30, 0x5, 0x20000000, 0x4, 0x3e5}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x10000}, @TCA_SAMPLE_RATE={0x8}]}, {0x88, 0x6, "ca474238226a52b73bf20517b7cf60544a39b34103d6e8d1dcf50f596d1a59395b27bbf89ecb09e4eecce5f76fb03dec992eb3bc7750fc696d6d8ecc6787d118d29e35a17f9bf6f58ab19e2b21cf8e2d55ee487f2881e9b761fe396ba3bd07e150d82bf03978417945b3adf6ce64f878695ebaa16324e6c39a7a89dfe34fd852711ddbde"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x14, 0x5, [{0x7, 0xf, 0x4, 0xbdb}, {0x1, 0x5f, 0xe, 0x80000000}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}, @TCA_BPF_FD={0x8, 0x6, r1}, @TCA_BPF_CLASSID={0x8, 0x3, {0xb, 0x7}}]}}, @TCA_RATE={0x6, 0x5, {0x80, 0x8}}, @TCA_CHAIN={0x8, 0xb, 0x240}]}, 0x284}}, 0x4040000) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6(0xa, 0x3, 0x2) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x3, @mcast2={0xff, 0x5}, 0xfffffffc}, 0x1c) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r4, 0x6, 0x9, 0x0, &(0x7f0000000f40)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"}) r5 = msgget$private(0x0, 0x404) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, 0x0) writev(r6, &(0x7f0000003400)=[{0x0, 0x20}, {&(0x7f00000020c0)="2890d1b12fb7c5b4948a84bcd5a8b830d9080624d863f59c3b96f5ce6e82cee8bdd5a507bab894f9f234c59bc9c790ad6ab7ff835cf35c5637db6427708bfa97c858251d", 0x44}, {&(0x7f00000022c0)}], 0x3) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) msgrcv(r5, &(0x7f00000004c0)={0x0, ""/4096}, 0x1008, 0x2, 0xc00) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000250091"], 0xfe33) read$FUSE(r8, &(0x7f00000030c0)={0x2020}, 0x2020) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000005100), &(0x7f0000005140)=0xc) 6.348008253s ago: executing program 5 (id=2798): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000ef07000000"], 0x44}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet6(0xa, 0x2, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x28000, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x4, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000140)=0x6, 0x4) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r3], 0x24}}, 0x0) 6.058183876s ago: executing program 5 (id=2799): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0, &(0x7f0000000040)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x72, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', r3}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x800, 0x0, 0x80000000}, {0x1000000a, 0x4}], 0x10, 0x40004}, 0x94) close(0x3) r4 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) close(0x3) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240), 0x128941, 0x0) preadv2(r7, 0x0, 0x0, 0x40, 0x4, 0x0) socket$kcm(0xa, 0x5, 0x0) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x6, 0x10000}, 0x80, 0x0}, 0x404d0f0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r8, 0x1c) recvmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffffffffffaa}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r9, 0x1c) 5.789693936s ago: executing program 5 (id=2800): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xffeffffffffffffb, 0x2) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32], 0x50) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(0xffffffffffffffff, r4, 0x0, 0x7ffffffd) request_key(&(0x7f0000000340)='id_legacy\x00', 0x0, &(0x7f00000003c0)='/dev/vsock\x00', 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@sg0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f0000000240)) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0xb, 0x1, 0x0, "f3f0b32aa4526bc424cc83055c5a8d21e6cb87d69b11022ef02d2b83dda571f8"}) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) 4.572807723s ago: executing program 7 (id=2801): bpf$BPF_BTF_LOAD(0x26, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0x7, 0x80, 0x0, 0x1995291a}, {0x1, 0x4, 0xd, 0x60}, {0x6, 0x8, 0x8, 0x6}]}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, 0x0, 0x0, 0x3}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) read(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xa9) r2 = socket$netlink(0x10, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="45312cfec74406000000000000006e63aefd892c03ca79d944d6e063e59f3663a335fc7762b3a0f3dd7d788c963d5ba3c4312fa99caa9a431050ddffbc5b6e06bfa5ac9cf7d2ef3e27048e83d1a1fc34b6e2271f81a351"], 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x20000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, r5, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x1, 0x4}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000025bd7000fddbdf25010000000000000001410000001800170000000e0000000c7564703a73797a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20048894}, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) 4.556122573s ago: executing program 6 (id=2802): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x20400, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) sendto$inet(r2, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) 3.452843229s ago: executing program 7 (id=2803): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r1}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x2ce6, &(0x7f0000000480)={0x0, 0xc89d, 0x80, 0x3, 0x10bf}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x8257f) socket$packet(0x11, 0x2, 0x300) pipe2$9p(0x0, 0x0) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0xffffffff, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_NOP128={0x3f, 0x0, 0x0, r1, 0x2, 0x6, 0x9, 0x14, 0x0, {0x6}}) io_uring_enter(r4, 0x7c65, 0xa334, 0x1, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x20000811) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, 0x0, 0x0) sendto$inet(r8, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvmsg(r8, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/37, 0x25}, 0x10043) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) r9 = userfaultfd(0x801) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000100)) 2.809906424s ago: executing program 6 (id=2804): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r4 = io_uring_setup(0x1c6c, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40885}, 0x0) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000180)='ufs\x00', 0x1a0c099, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000240)={0xf0f046, 0x100000}) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x840) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000004200)=[{{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{0x0}, {&(0x7f0000000580)="8cb62664682b0b56372eaa92c31014893e716501fbe3c18638755695861ce9c9d4fb08ec41224d269de41b095518248608f3cec709d9672cd8d9345b58de127908de11cfd8c8f5f783078628da407c020ee6d00cad6c56784e926ad6632355cc1398d5fd50aae292100c0e12dfa87636ab3c5081b2e56e2ffe22b93011b24a01ef978bf33fe8131ce7a2b36904ca6801026b62db0eeb51a9c5ae385c2840f55e561f64736b8210d95c29b1cf087c71c9ed1b6cfcc3e477557d9b6c37663249a9946a7ba1a4e5fbb2a5a7b22caca7ff3317fc3fc3f460fd9c993d49", 0xdb}, {&(0x7f0000000680)="4c5c10de91cd10142576cf845c4507887329032280c2a6d699964c694b6d7f28ecc79d87fe65d2cdb2384c5e76c98df256d4d25f7df4b8b200001d1b687ad69f6dc83ceb620e5d358bb6ac3a297dd152a0fd556a9afcbcb7d40631bf90fc7d2bd7d12db1b5aa4fd4c0c59d13c9d9731e4d00b7a42000e83a18ce2354d17834a3c5551a0d174db32252c27c2c09cce6bedf9e0271848525c2e35e0a565275b83f6b74c590d1942f2a95d66e383f541af20702636a86e4d364c10f702761ac8af62c2527a94949a4bbc58d106165bb61cac6bf0dc50fc7e694697be2f6ef9a9398aa20c5fc37cd65c265d5fc0c5b73502b3be97a5ec973ac319d", 0xf9}, {&(0x7f0000000100)="0cd492d259f828b35f4f1c67ca1e5056888e4cb80e651fded609b7d16d9e8748fb9bded582978e21cbbf2350a97def09c80cd8202e245e95d3e46ea82040c6", 0x3f}], 0x4, &(0x7f0000000840)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r3, r3, r2, r4]}}, @cred={{0x1c, 0x1, 0x2, {r6, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {r6}}}, @rights={{0x1c, 0x1, 0x1, [r2, r7, r3]}}, @rights={{0x24, 0x1, 0x1, [r4, r7, r7, r2, 0xffffffffffffffff]}}], 0xd0, 0x40000}}], 0x1, 0x4000) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2.590928767s ago: executing program 5 (id=2805): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_emit_ethernet(0x19e, &(0x7f0000000680)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x2, 0x6, "351b91", 0x168, 0x32, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, {[@routing={0x1d, 0x2, 0x3, 0x1, 0x0, [@private0]}, @hopopts={0x29, 0x0, '\x00', [@pad1]}, @dstopts={0x3c, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @hao={0xc9, 0x10, @mcast2}]}, @routing={0x33, 0x2, 0x1, 0xd, 0x0, [@mcast1]}, @routing={0x88, 0xa, 0x1, 0x3, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x8}, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}]}, @dstopts={0x21, 0x4, '\x00', [@ra={0x5, 0x2, 0x2}, @enc_lim, @jumbo={0xc2, 0x4, 0x5}, @calipso={0x7, 0x18, {0x2, 0x4, 0xfb, 0xaf4, [0x10001, 0x1000]}}]}, @routing={0x22, 0x2, 0x1, 0x30, 0x0, [@private1]}, @hopopts={0x3a, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @pad1, @jumbo={0xc2, 0x4, 0x13}]}, @hopopts={0x2f, 0x8, '\x00', [@ra={0x5, 0x2, 0x4}, @calipso={0x7, 0x10, {0x1, 0x2, 0x0, 0x2, [0x81]}}, @enc_lim={0x4, 0x1, 0x1b}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @pad1, @hao={0xc9, 0x10, @private1}, @ra={0x5, 0x2, 0x3}]}]}}}}}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xa}, {0xfff2, 0x9}}}, 0x24}}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r0, 0x80000) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x5f]}}, 0x0, 0x33}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc0}}, &(0x7f0000000080)='GPL\x00', 0xf, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000180)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x2010, r3, 0xda8d7000) syz_emit_ethernet(0x176, &(0x7f0000000840)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @multicast, @val={@val={0x88a8, 0x2, 0x1, 0x1}, {0x8100, 0x4, 0x1, 0x3}}, {@ipv4={0x800, @tipc={{0x2b, 0x4, 0x2, 0x5, 0x160, 0x68, 0x0, 0xe3, 0x6, 0x0, @local, @dev={0xac, 0x14, 0x14, 0xe}, {[@noop, @end, @ssrr={0x89, 0x13, 0x45, [@dev={0xac, 0x14, 0x14, 0x16}, @rand_addr=0x64010100, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x14, 0xfb, 0x1, 0x1, [{@rand_addr=0x64010101, 0x9}, {@multicast2, 0x4}]}, @lsrr={0x83, 0x7, 0x32, [@broadcast]}, @rr={0x7, 0x7, 0xa7, [@loopback]}, @cipso={0x86, 0x60, 0x3, [{0x7, 0xe, "2d84889abdcf9155a4f19852"}, {0x7, 0x9, "031ebf22e56f0f"}, {0x7, 0x12, "2fc1a5d6e7be687fb37e892eee1cc0d6"}, {0x7, 0x3, "cb"}, {0x7, 0x2}, {0x6, 0x11, "3692ce829d562f37155f3a9aa2a666"}, {0x2, 0x10, "033a346e70eb6a7c8aa518be493f"}, {0x0, 0x5, "681c00"}, {0x6, 0x6, "ce89a445"}]}, @end]}}, @name_distributor={{0xb4, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x7, 0x0, 0x0, 0x3, 0x0, 0x3, 0x4e21, 0x4e23, 0x1}, [{0x1ff, 0x89, 0x9cd, 0xf, 0x7292, 0x7, 0xb, 0x4}, {0x9, 0x3, 0xed6b, 0x1, 0x8, 0x3, 0x7, 0x8}, {0x36c4aa9c, 0x3000, 0x20, 0x6, 0x3, 0x2, 0x4, 0xffffa51}, {0x259, 0x5, 0x9, 0x6, 0xfffffff8, 0x4a9, 0x3, 0x8}, {0x5, 0xd, 0x4, 0x7, 0x8, 0x9, 0xe, 0xf087}]}}}}}, &(0x7f0000000600)={0x0, 0x1, [0x1be, 0xb1e, 0x466, 0xda3]}) semget(0x1, 0x0, 0x101) 2.584624607s ago: executing program 2 (id=2806): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newtaction={0x78, 0x30, 0xffff, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ife={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x0, 0x0, 0x100, 0x400}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfc}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x67c, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 1.813711678s ago: executing program 7 (id=2807): io_submit(0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) syz_usb_connect(0x3, 0x3f, &(0x7f00000065c0)=ANY=[@ANYBLOB="12012103c3c97710"], 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x801) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000300)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) openat$dsp1(0xffffffffffffff9c, &(0x7f0000001080), 0x1, 0x0) 1.809736768s ago: executing program 5 (id=2808): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000ef07000000"], 0x44}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet6(0xa, 0x2, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x28000, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x4, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000140)=0x6, 0x4) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r3], 0x24}}, 0x0) 1.639658237s ago: executing program 6 (id=2809): openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x4003, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000140)) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef80"], 0xfe33) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000026c0)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100e000000208000200ac1e00010c000280050001000000000008"], 0x64}}, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x20a00) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r4, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@iv={0x18}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x30, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabda", 0x47}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e385", 0x1c}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e6", 0xae}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1", 0x36}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x400, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000032000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r9, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r8}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r10, &(0x7f0000000300)="9d616edefff77ee278358083f037fa256b11b8d862b34bb124543d283c16bee1b5a8fb7d", &(0x7f0000000780)=""/205}, 0x20) socket$kcm(0x10, 0x400000002, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e446, [{{0x9, 0x2, 0xffffffffffffffe1}}]}}, 0x0) 694.118334ms ago: executing program 2 (id=2810): socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b3838108480b0310547b01020301090212000100000000090401"], 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file2\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) keyctl$setperm(0x5, 0x0, 0x200000) keyctl$describe(0x6, 0x0, 0x0, 0xffffffffffffff87) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f6, &(0x7f0000000100)={'syztnl0\x00', 0x0}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000051c0)=[{0x0}], 0x1) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r5}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000007c0)={0x28, 0x5, r5, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r4, 0x3b86, &(0x7f0000000040)={0x18, r5}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x2000) 596.078474ms ago: executing program 5 (id=2811): r0 = memfd_create(&(0x7f0000000b00)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x6) fallocate(r0, 0x0, 0x0, 0x400001) fcntl$addseals(r0, 0x409, 0xe) fcntl$setpipe(r0, 0x407, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000083c0)={0x18, 0x69, 0x1, 0xffffffff, 0x25dfdbff, {0x1, 0x3, 0x2}, [@nested={0x4, 0x12c}]}, 0x18}}, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000012006bcd9e3fe3dc6e48aa310b6b87033c00a6001f03000000000000040012000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000004000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff1d6405000000000065040400210000000404000001e37c60b7040000000000006a0a00fe000000008500000032000000b70000000000000095000000000000000ce0de7621e5e832249c04112cf7af2b75d0d1f034b1b3fb6bd3ce8fa62c7941272ff49142d860010ab162aa2264ab67e55a00000000000000edfe0969a9ddc125b686a1e83c8790c893d713b3295dad0ea697181d1e85b64126b5d72f204754d1d4a93f24215dee354e93cfc3f50ff23f8432c72012f021c84c59a9d4c142f439d3040cfee621589fb3a2f1407c7cbed48e7026f8d52d4bca2608c79aa4a73732028f88ce07ed1075da4a2ef44e3d8b88873f0b1de87dfb6d15936ec0a27cb554def9e27396df6b7851ffa26237ea6730880f06371beb3b290b7d8629a6f0373fefa0acb60888fc14ad2b83ca03ac2aee792482ced58af4140cc4ce3efef26e00c5b2200a91cb80c6065a697d6fc8aa8b65aee0783b04cff0218ce82c9687b4474da89c474c23727555fc5e5f8ad0f2f7a261140440fce1f12cc6df312accd011d888384283092d987c40bbb46f68c2431b97906f00000000349834fa147bd5923bbd4e606708034931a8f1a89bdf77093a0000427aab8e21e1a33d3fe093547532fce6549dd648ad233e05a7b3ea178007c1c32e871ac81f287c4aabbd153390b16d1d41ee433e3aee000000000009e106d6b5289f0000000000000000000000f7bc9f46cb71f6b889d37807865e3b4e9916dd0f72c9d58ea333b90f8886dcbf5ddda0e42ca08e3303632401f2f5212b40c0e88c957fd767dbfc80b07ad668b4f6f92fb209d7c2dbac597843c8eb7bf92fe6d0bb0b72549795c2ed19e441eb69869844152ba9da0588e42cdbc5fcd245ce5e3ef0dca64931276702a312db7956f0a75eb9caa17d47a6331c7c963cbf86a845ce27c26b7136d3e7207318b1df7a6320c64f18ccd926eaeddcde8d5006d6c38db117fb1115221a66169172720ccca770bff37e59511b2606138377eda44b2f288b491ab8aae0e11a98303b0e407e0f9d21f4a3ebbd3fabf6da9a1a1f869a339fab465d8322b7280b0734fd115a19b33c8644fff71b3c62f2e1b827e2663e06a751182e968c8ab05fb1d0115d4b11d944f2c06acc023a02b7416a9a10218d21503cda13bb5df6c992e52e1c01793b728eac000058ab3b3900d279297dadc127e2f38fc60c23af2e1fefa5a83456647191ba1953d320f59aa261fe79613df6bf43884e9649691e32680d75a541c27ffe74f9d13340f2cf1c7dc2b7db01213216cd4ecfd30efe137641471987289b7e23482e026b26eacd1b97443e2ea2d1d6e31a01ee0ae7fa195a2152b2338b086423a3883f2ce3e2f84e04f4d52c985eac4b46336908599564b47db0e6aa97ee51a360f4382fd99745725d44c77d097f69d19fe86f71c38a0226d44ebe0ecbd959f14b540745cd03b8c9f02b825ba45ca85706c73115f70871db9d2a1bc2a517b39f9648123917a5db07ba4e27f961373767e1ea8f7cc558e483abef1a9923c5cfa2081e430680950b7d7c377726b557ad31fdee17ba7057741f39d29d8ab295222f96297a777bb235416e72c84afef2bdb08fb375147b028b89f15af45bc8976b91158c13c9876daa71e7db0f5a17376be39ea79ce1246c547c740e31c64e5d293e0e5a544dd166010061d6ccae46c173b8e11721e4bce22c16af00000021f80ac6c3971006db853e3c40a5417d6eac09eb0e01ac6bd4c6dacdcb1d6d2ef9c8bdea91c984022821e961236d08f8b9072ec6cb5d5a68833fd5b4e80a5ac2bc6ff323f5ce612b59ce8177956c1affcc8baf4c8b59ab959aff9a7bd81f7c7c1f1bb92ddbeed6bce8041c7f0c1c584e6ae027678ce3cfbfea938aecc3c5119c5875b7fb35dc20f5c7aaae1e276104f607a73fe501c1045873a2b1eb80e95c87f099d98028dc82bdc7ef08c871fb3061c3c5ebd613e6e5e8cf099bb6e8c0441a133c85138b36a02c47fbedf7ed1d3ce74c9ec2c676c0b2d4b5eca61dbf5769b483c2a9f6bec666dae4e81960e9bad7f17cfc3d5bcc7b7f437110ca8ffa908c12086b2227eb202a8d56e0925ba994b05c98c39de44d25932449ddf08e5377814a40877eab4440ca01b3f50d2014a61a7d32105254b424238122386424efa3a7041254f686a5faac120942287f75e8e3db569ce47b120059d774a37e11d013be50cd2cbb00f6d2a23af61ec7d30bb7dc33a92f900b6ff1d29dc61cc40b846040dbafd00c6bcfbcf700"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x702, 0xe, 0x0, &(0x7f0000000380)="e460334470b8d480eb00c1520813", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xdffc, @remote}, 0x1c) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@updpolicy={0x148, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0xfffc, 0x0, 0x0, 0xa, 0x20}, {0x20008, 0x10, 0x100000002, 0x0, 0x6, 0xffffffffffffb475, 0xffffffffffffffff, 0x4}, {0x1000000003, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}, [@sec_ctx={0x7c, 0x8, {0x78, 0x8, 0x0, 0x0, 0x70, "70fa31755b8ff6d37299cd0fe88c2cfc2a50a2cf3d170b68276a61aed1aaedc7097597870b468fe226f16a8cb27bf9a71bafd73f5e15097edf022dbc29bbda924d20eb8dd7592711bd81c890283fa0739199b6c19d8e69575b6af9e75de8a330a5f6f245ac36cdecca3c8fbcf5281452"}}, @coaddr={0x14, 0xe, @in6=@private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x148}}, 0x4004) socket$nl_rdma(0x10, 0x3, 0x14) sigaltstack(&(0x7f00000000c0)={0x0, 0x80000002}, 0x0) sigaltstack(&(0x7f0000000240)={0x0, 0x1}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}}, 0x2c000010) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) ioctl$EVIOCREVOKE(r8, 0x40044591, 0x0) ioctl$EVIOCSCLOCKID(r8, 0x400445a0, &(0x7f0000000080)=0x10001) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000024c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYRES32, @ANYBLOB="14001780d90001000400040004"], 0x38}}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 0s ago: executing program 7 (id=2812): bpf$BPF_BTF_LOAD(0x26, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0x7, 0x80, 0x0, 0x1995291a}, {0x1, 0x4, 0xd, 0x60}, {0x6, 0x8, 0x8, 0x6}]}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, 0x0, 0x0, 0x3}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) read(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xa9) r2 = socket$netlink(0x10, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="45312cfec74406000000000000006e63aefd892c03ca79d944d6e063e59f3663a335fc7762b3a0f3dd7d788c963d5ba3c4312fa99caa9a431050ddffbc5b6e06bfa5ac9cf7d2ef3e27048e83d1a1fc34b6e2271f81a351"], 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x20000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, r5, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x1, 0x4}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000025bd7000fddbdf25010000000000000001410000001800170000000e0000000c7564703a73797a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20048894}, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) kernel console output (not intermixed with test programs): t: type=1326 audit(1784597059.166:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11105 comm="syz.6.1544" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a2a29de99 code=0x0 [ 430.584239][T11108] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1543'. [ 431.223108][ T5915] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 431.462784][ T5915] usb 6-1: Using ep0 maxpacket: 8 [ 431.479560][ T5915] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 431.479586][ T5915] usb 6-1: config 0 has no interface number 0 [ 431.479625][ T5915] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 431.479646][ T5915] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 431.479667][ T5915] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 431.479689][ T5915] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 431.479726][ T5915] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 431.479745][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.604955][ T5915] usb 6-1: config 0 descriptor?? [ 431.653722][ T5915] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 431.888815][T11130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.891135][T11130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.945838][ T5850] usb 6-1: USB disconnect, device number 5 [ 432.190114][ T5850] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 434.490735][T11175] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1559'. [ 434.490762][T11175] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1559'. [ 434.962660][T11187] loop2: detected capacity change from 0 to 7 [ 435.329747][T11187] Dev loop2: unable to read RDB block 7 [ 435.329798][T11187] loop2: AHDI p1 p2 p3 [ 435.329819][T11187] loop2: partition table partially beyond EOD, truncated [ 435.332725][T11187] loop2: p1 start 1601398130 is beyond EOD, truncated [ 435.332751][T11187] loop2: p2 start 1702059890 is beyond EOD, truncated [ 435.912780][ T5586] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 436.083716][ T5586] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 436.085151][ T5586] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 436.085217][ T5586] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 436.085240][ T5586] usb 7-1: config 0 interface 0 has no altsetting 0 [ 436.086784][ T5586] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 436.086845][ T5586] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 436.086870][ T5586] usb 7-1: config 0 interface 0 has no altsetting 0 [ 436.088379][ T5586] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 436.088426][ T5586] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 436.088449][ T5586] usb 7-1: config 0 interface 0 has no altsetting 0 [ 436.090453][ T5586] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 436.090500][ T5586] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 436.090523][ T5586] usb 7-1: config 0 interface 0 has no altsetting 0 [ 436.790072][ T5586] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 437.358117][ T5586] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 437.358149][ T5586] usb 7-1: config 0 interface 0 has no altsetting 0 [ 437.382519][ T5586] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 437.382572][ T5586] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 437.382596][ T5586] usb 7-1: config 0 interface 0 has no altsetting 0 [ 437.411793][ T5586] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 437.411846][ T5586] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 437.411870][ T5586] usb 7-1: config 0 interface 0 has no altsetting 0 [ 437.449954][ T5586] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 437.450006][ T5586] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 437.450028][ T5586] usb 7-1: config 0 interface 0 has no altsetting 0 [ 437.479963][ T5586] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 437.479990][ T5586] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 437.480008][ T5586] usb 7-1: Product: syz [ 437.480020][ T5586] usb 7-1: Manufacturer: syz [ 437.480030][ T5586] usb 7-1: SerialNumber: syz [ 437.803292][ T5586] usb 7-1: config 0 descriptor?? [ 438.576030][ T5586] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 438.624918][T11198] trusted_key: syz.6.1564 sent an empty control message without MSG_MORE. [ 438.693517][ T5586] usb 7-1: USB disconnect, device number 3 [ 438.712280][ T5586] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 438.869709][T11235] binder: 11234:11235 ioctl c0306201 2000000004c0 returned -14 [ 439.095949][ T5586] Process accounting resumed [ 440.409969][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.410037][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.792762][ T5615] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 440.922831][ T5615] usb 7-1: device descriptor read/64, error -71 [ 441.109808][T11262] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1578'. [ 441.184118][ T5615] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 441.332823][ T5615] usb 7-1: device descriptor read/64, error -71 [ 441.443268][ T5615] usb usb7-port1: attempt power cycle [ 441.794701][ T5615] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 441.820316][ T5613] Bluetooth: hci4: unexpected event for opcode 0x202d [ 441.833750][ T5615] usb 7-1: device descriptor read/8, error -71 [ 441.946279][ T36] audit: type=1326 audit(1784597070.836:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11277 comm="syz.7.1583" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f575a49de99 code=0x0 [ 442.073085][ T5615] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 442.541994][ T5615] usb 7-1: device descriptor read/8, error -71 [ 443.213015][ T5615] usb usb7-port1: unable to enumerate USB device [ 443.902893][ T5915] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 444.066406][ T5915] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 444.066432][ T5915] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.066448][ T5915] usb 6-1: config 0 has no interface number 0 [ 444.066489][ T5915] usb 6-1: config 0 interface 52 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 444.066511][ T5915] usb 6-1: config 0 interface 52 has no altsetting 0 [ 444.073637][ T5915] usb 6-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 444.073665][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 444.073682][ T5915] usb 6-1: Product: syz [ 444.073695][ T5915] usb 6-1: SerialNumber: syz [ 444.236711][ T5915] usb 6-1: config 0 descriptor?? [ 444.623904][ T823] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 444.732248][T11298] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1590'. [ 444.773116][ T823] usb 8-1: Using ep0 maxpacket: 16 [ 444.787034][ T823] usb 8-1: config 43 has an invalid interface number: 180 but max is 0 [ 444.787059][ T823] usb 8-1: config 43 has no interface number 0 [ 444.787088][ T823] usb 8-1: config 43 interface 180 has no altsetting 0 [ 444.826985][ T823] usb 8-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=c7.a7 [ 444.827013][ T823] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.827033][ T823] usb 8-1: Product: syz [ 444.827045][ T823] usb 8-1: Manufacturer: ᐁ [ 444.827056][ T823] usb 8-1: SerialNumber: syz [ 444.865470][ T5915] usb 6-1: USB disconnect, device number 6 [ 445.172805][ T823] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 445.173498][ T823] sonixb 8-1:43.180: Error reading register 00: -71 [ 445.185810][ T823] usb 8-1: USB disconnect, device number 2 [ 446.606863][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88803b3c7000: rx timeout, send abort [ 446.624115][ T5915] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 446.633713][ T5615] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 446.777221][ T5915] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 446.777246][ T5915] usb 6-1: config 0 has no interface number 0 [ 446.780952][ T5915] usb 6-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 446.780978][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.780994][ T5915] usb 6-1: Product: syz [ 446.781005][ T5915] usb 6-1: Manufacturer: syz [ 446.781018][ T5915] usb 6-1: SerialNumber: syz [ 446.792706][ T5615] usb 7-1: Using ep0 maxpacket: 8 [ 446.794410][ T5615] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 446.794431][ T5615] usb 7-1: config 0 has no interface number 0 [ 446.794469][ T5615] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 446.794490][ T5615] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 446.794511][ T5615] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 446.794532][ T5615] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 446.794550][ T5615] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 446.794587][ T5615] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 446.794606][ T5615] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.943910][ T5915] usb 6-1: config 0 descriptor?? [ 446.961019][ T5915] usb 6-1: selecting invalid altsetting 1 [ 446.961177][ T5915] dvb_ttusb_budget: ttusb_init_controller: error [ 446.961189][ T5915] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 447.002902][ T5615] usb 7-1: config 0 descriptor?? [ 447.089735][ T5615] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 447.106933][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88803b3c7000: abort rx timeout. Force session deactivation [ 447.431552][ T5915] DVB: Unable to find symbol stv0299_attach() [ 447.499376][T11342] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 448.278639][ T5915] DVB: Unable to find symbol tda8083_attach() [ 448.278653][ T5915] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 448.816189][ T5915] usb 7-1: USB disconnect, device number 8 [ 448.853361][ T5915] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 449.121249][T11347] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1601'. [ 449.337301][ T5615] usb 6-1: USB disconnect, device number 7 [ 449.416557][ T5915] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 449.571095][ T5915] usb 7-1: config 0 has an invalid interface number: 52 but max is 0 [ 449.571122][ T5915] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.571138][ T5915] usb 7-1: config 0 has no interface number 0 [ 449.571178][ T5915] usb 7-1: config 0 interface 52 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 449.571202][ T5915] usb 7-1: config 0 interface 52 has no altsetting 0 [ 449.582580][ T5915] usb 7-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 449.583232][ T5915] usb 7-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 449.583253][ T5915] usb 7-1: Product: syz [ 449.583266][ T5915] usb 7-1: SerialNumber: syz [ 449.673595][ T36] audit: type=1326 audit(1784597078.566:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11376 comm="syz.7.1608" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f575a49de99 code=0x0 [ 449.679924][ T5915] usb 7-1: config 0 descriptor?? [ 450.136923][T11367] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1606'. [ 450.210491][ T5615] usb 7-1: USB disconnect, device number 9 [ 451.062737][ T823] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 451.216568][ T823] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 451.221176][ T823] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 451.221216][ T823] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 451.221234][ T823] usb 6-1: SerialNumber: syz [ 451.332807][ T5615] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 451.502378][ T5615] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 451.502408][ T5615] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.502425][ T5615] usb 7-1: Product: syz [ 451.502437][ T5615] usb 7-1: Manufacturer: syz [ 451.502500][ T5615] usb 7-1: SerialNumber: syz [ 451.632265][ T5615] usb 7-1: config 0 descriptor?? [ 451.672859][ T5915] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 451.890548][ T5915] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 451.930467][ T5915] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 451.930496][ T5915] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 451.930513][ T5915] usb 8-1: SerialNumber: syz [ 452.106664][ T5615] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 452.880155][ T823] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 453.030717][ T5915] cdc_ether 8-1:1.0 usb1: register 'cdc_ether' at usb-dummy_hcd.7-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 453.312710][ T5586] usb 6-1: USB disconnect, device number 8 [ 453.321619][ T5615] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 453.467379][ T5586] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device [ 455.416396][ T5615] usb 8-1: USB disconnect, device number 3 [ 455.450112][ T5615] cdc_ether 8-1:1.0 usb1: unregister 'cdc_ether' usb-dummy_hcd.7-1, CDC Ethernet Device [ 455.456405][T11468] fuse: Unknown parameter 'fd (.' [ 455.803294][ T5850] usb 7-1: USB disconnect, device number 10 [ 455.878866][ T36] audit: type=1326 audit(1784597084.766:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11469 comm="syz.5.1624" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f155002de99 code=0x0 [ 456.622898][ T5615] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 456.778635][ T5615] usb 8-1: config 0 has an invalid interface number: 52 but max is 0 [ 456.778661][ T5615] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 456.778677][ T5615] usb 8-1: config 0 has no interface number 0 [ 456.778708][ T5615] usb 8-1: config 0 interface 52 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 456.778731][ T5615] usb 8-1: config 0 interface 52 has no altsetting 0 [ 456.780475][ T5615] usb 8-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 456.780498][ T5615] usb 8-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 456.780516][ T5615] usb 8-1: Product: syz [ 456.780527][ T5615] usb 8-1: SerialNumber: syz [ 456.803770][ T5615] usb 8-1: config 0 descriptor?? [ 457.052296][T11510] binder: 11507:11510 ioctl c0306201 200000000040 returned -22 [ 457.275576][T11474] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1625'. [ 458.228456][ T5615] usb 8-1: USB disconnect, device number 4 [ 459.782727][ T36] audit: type=1326 audit(1784597088.666:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11551 comm="syz.2.1641" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd65454de99 code=0x0 [ 459.871277][T11549] netlink: 'syz.3.1640': attribute type 29 has an invalid length. [ 459.872143][T11549] netlink: 'syz.3.1640': attribute type 29 has an invalid length. [ 459.886784][T11549] netlink: 'syz.3.1640': attribute type 29 has an invalid length. [ 461.681791][T11592] overlayfs: failed to clone upperpath [ 461.870017][T11602] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1655'. [ 461.954864][ T5613] Bluetooth: hci4: unexpected event for opcode 0x202d [ 461.962785][ T31] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 462.122737][ T31] usb 8-1: Using ep0 maxpacket: 8 [ 462.125005][ T31] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 462.125030][ T31] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 462.125071][ T31] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 462.125090][ T31] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 462.125110][ T31] usb 8-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 462.125156][ T31] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 462.125175][ T31] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.160596][ T31] usbtmc 8-1:16.0: bulk endpoints not found [ 463.471334][T11657] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1667'. [ 463.704405][ T5915] usb 8-1: USB disconnect, device number 5 [ 465.602786][ T5915] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 465.725078][T11710] JFS: charset not found [ 465.739079][T11712] sctp: [Deprecated]: syz.3.1685 (pid 11712) Use of int in maxseg socket option. [ 465.739079][T11712] Use struct sctp_assoc_value instead [ 465.757187][ T5915] usb 8-1: Using ep0 maxpacket: 16 [ 465.768935][ T5915] usb 8-1: config 235 has an invalid descriptor of length 243, skipping remainder of the config [ 465.768986][ T5915] usb 8-1: config 235 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 465.769010][ T5915] usb 8-1: config 235 interface 0 has no altsetting 0 [ 465.769040][ T5915] usb 8-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 465.769059][ T5915] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.283946][ T5915] usb 8-1: string descriptor 0 read error: -71 [ 466.303862][ T5915] usbhid 8-1:235.0: couldn't find an input interrupt endpoint [ 466.617074][ T5915] usb 8-1: USB disconnect, device number 6 [ 467.751610][T11737] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1693'. [ 469.672710][T11775] JFS: charset not found [ 470.495029][T11784] netlink: 'syz.5.1708': attribute type 10 has an invalid length. [ 470.657043][T11785] 9p: Bad value for 'rfdno' [ 470.727747][T11784] team0: Port device vlan0 added [ 471.902741][ T31] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 472.334004][ T31] usb 6-1: Using ep0 maxpacket: 8 [ 472.394989][ T5792] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 472.847679][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 472.847711][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 472.847802][ T31] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 472.847823][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.906257][ T31] usb 6-1: config 0 descriptor?? [ 473.078970][ T5792] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 473.097631][ T5792] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 473.097660][ T5792] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 473.097677][ T5792] usb 7-1: SerialNumber: syz [ 473.260836][ T31] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 473.420673][T11784] iowarrior 6-1:0.0: Error -90 while submitting URB [ 473.437079][ T5720] usb 6-1: USB disconnect, device number 9 [ 473.766029][T11816] netlink: 'syz.3.1717': attribute type 10 has an invalid length. [ 474.576562][T11819] JFS: charset not found [ 474.684172][T11796] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1714'. [ 475.100411][T11839] netlink: 'syz.2.1725': attribute type 1 has an invalid length. [ 475.100996][T11839] netlink: 'syz.2.1725': attribute type 29 has an invalid length. [ 475.101012][T11839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1725'. [ 475.360392][ T5792] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 475.392699][ T5792] usb 7-1: USB disconnect, device number 11 [ 476.024241][T11857] JFS: charset not found [ 476.280255][T11873] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1736'. [ 476.280355][T11873] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1736'. [ 476.592507][T11873] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1736'. [ 476.592571][T11873] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1736'. [ 477.046954][T11896] netlink: 'syz.6.1743': attribute type 10 has an invalid length. [ 478.055559][ T823] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 478.205914][ T823] usb 7-1: Using ep0 maxpacket: 8 [ 478.207817][ T823] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 478.207866][ T823] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 478.207885][ T823] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 478.207905][ T823] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 478.207923][ T823] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 478.207958][ T823] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 478.207978][ T823] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.450565][T11914] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1750'. [ 478.450594][T11914] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1750'. [ 478.506191][T11895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.506785][T11895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.542797][ T5720] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 478.605786][T11919] JFS: charset not found [ 478.703167][ T5720] usb 6-1: Using ep0 maxpacket: 8 [ 478.707639][ T5720] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 478.707667][ T5720] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 478.707711][ T5720] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 478.707731][ T5720] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 478.707753][ T5720] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 478.707790][ T5720] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 478.707811][ T5720] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.733292][ T5720] usbtmc 6-1:16.0: bulk endpoints not found [ 479.161663][T11928] binder: 11927:11928 ioctl c0306201 0 returned -14 [ 480.608559][ T823] usb 7-1: usb_control_msg returned -71 [ 480.608586][ T823] usbtmc 7-1:16.0: can't read capabilities [ 480.644957][ T823] usb 7-1: USB disconnect, device number 12 [ 482.538553][ T5792] usb 6-1: USB disconnect, device number 10 [ 482.786439][T11980] JFS: charset not found [ 483.435277][ T5720] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 484.442732][ T5720] usb 8-1: Using ep0 maxpacket: 16 [ 484.467687][ T5720] usb 8-1: config 235 has an invalid descriptor of length 243, skipping remainder of the config [ 484.467739][ T5720] usb 8-1: config 235 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 484.467764][ T5720] usb 8-1: config 235 interface 0 has no altsetting 0 [ 484.467795][ T5720] usb 8-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 484.467815][ T5720] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.775901][T12008] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1783'. [ 485.918025][ T5720] usb 8-1: string descriptor 0 read error: -71 [ 485.929316][ T5720] usbhid 8-1:235.0: couldn't find an input interrupt endpoint [ 485.945709][ T5720] usb 8-1: USB disconnect, device number 7 [ 487.544040][ T5615] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 487.715348][ T5615] usb 8-1: config 0 has an invalid interface number: 52 but max is 0 [ 487.715374][ T5615] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 487.715391][ T5615] usb 8-1: config 0 has no interface number 0 [ 487.715431][ T5615] usb 8-1: config 0 interface 52 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 487.715455][ T5615] usb 8-1: config 0 interface 52 has no altsetting 0 [ 487.771424][ T5615] usb 8-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 487.771450][ T5615] usb 8-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 487.771469][ T5615] usb 8-1: Product: syz [ 487.771482][ T5615] usb 8-1: SerialNumber: syz [ 487.861840][ T5615] usb 8-1: config 0 descriptor?? [ 488.860615][ T5611] Bluetooth: hci0: command 0x0406 tx timeout [ 489.396403][ T823] Process accounting resumed [ 489.413210][T12022] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1789'. [ 491.668863][T12098] vlan2: entered promiscuous mode [ 491.669504][T12098] bridge0: entered promiscuous mode [ 493.549943][ T5613] Bluetooth: hci2: command 0x0406 tx timeout [ 493.945345][T12122] 9pnet_fd: Insufficient options for proto=fd [ 494.794533][ T5615] usb 8-1: USB disconnect, device number 8 [ 495.264612][ T5611] Bluetooth: hci2: unexpected event for opcode 0x202d [ 497.890101][T12182] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1832'. [ 497.890122][T12182] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1832'. [ 498.383051][ T5613] Bluetooth: hci5: command 0x0406 tx timeout [ 499.182918][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 499.343691][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 499.392728][ T9] usb 6-1: config 43 has an invalid interface number: 180 but max is 0 [ 499.392755][ T9] usb 6-1: config 43 has no interface number 0 [ 499.392783][ T9] usb 6-1: config 43 interface 180 has no altsetting 0 [ 499.410323][ T9] usb 6-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=c7.a7 [ 499.410349][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.410366][ T9] usb 6-1: Product: syz [ 499.410378][ T9] usb 6-1: Manufacturer: ᐁ [ 499.410411][ T9] usb 6-1: SerialNumber: syz [ 501.449517][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.449584][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.544480][ T5611] Bluetooth: hci1: unexpected event for opcode 0x202d [ 501.545700][ T9] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 501.547610][ T9] sonixb 6-1:43.180: Error reading register 00: -71 [ 501.568752][ T9] usb 6-1: USB disconnect, device number 11 [ 501.601171][T12228] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 501.601194][T12228] CIFS mount error: No usable UNC path provided in device string! [ 501.601194][T12228] [ 501.601426][T12228] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 503.890246][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 504.045187][ T9] usb 6-1: config 0 has an invalid interface number: 120 but max is 0 [ 504.045213][ T9] usb 6-1: config 0 has no interface number 0 [ 504.045253][ T9] usb 6-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 504.045275][ T9] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 504.045311][ T9] usb 6-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 504.045330][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.056725][ T9] usb 6-1: config 0 descriptor?? [ 504.088568][ T9] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.120/input/input8 [ 504.112756][ T5792] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 504.263082][ T5792] usb 7-1: Using ep0 maxpacket: 8 [ 504.266750][ T5792] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 504.266774][ T5792] usb 7-1: config 0 has no interface number 0 [ 504.266814][ T5792] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 504.266948][ T5792] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 504.266970][ T5792] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 504.266991][ T5792] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 504.267010][ T5792] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 504.267047][ T5792] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 504.267067][ T5792] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.375586][ T5792] usb 7-1: config 0 descriptor?? [ 504.408737][ T5792] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 504.642934][ T9] usb 6-1: USB disconnect, device number 12 [ 505.256737][ T36] audit: type=1326 audit(1784597134.146:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12272 comm="syz.7.1862" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575a49de99 code=0x7ffc0000 [ 505.257386][ T36] audit: type=1326 audit(1784597134.146:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12272 comm="syz.7.1862" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575a49de99 code=0x7ffc0000 [ 505.269751][ T36] audit: type=1326 audit(1784597134.156:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12272 comm="syz.7.1862" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f575a49de99 code=0x7ffc0000 [ 505.281056][ T36] audit: type=1326 audit(1784597134.166:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12272 comm="syz.7.1862" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575a49de99 code=0x7ffc0000 [ 505.281113][ T36] audit: type=1326 audit(1784597134.166:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12272 comm="syz.7.1862" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575a49de99 code=0x7ffc0000 [ 505.281151][ T36] audit: type=1326 audit(1784597134.166:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12272 comm="syz.7.1862" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f575a49de99 code=0x7ffc0000 [ 505.281191][ T36] audit: type=1326 audit(1784597134.166:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12272 comm="syz.7.1862" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575a49de99 code=0x7ffc0000 [ 505.281226][ T36] audit: type=1326 audit(1784597134.166:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12272 comm="syz.7.1862" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575a49de99 code=0x7ffc0000 [ 505.314410][ T36] audit: type=1326 audit(1784597134.176:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12272 comm="syz.7.1862" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f575a49de99 code=0x7ffc0000 [ 505.314458][ T36] audit: type=1326 audit(1784597134.176:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12272 comm="syz.7.1862" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575a49de99 code=0x7ffc0000 [ 505.333744][T12274] netlink: 'syz.7.1862': attribute type 1 has an invalid length. [ 505.333763][T12274] netlink: 'syz.7.1862': attribute type 4 has an invalid length. [ 505.333774][T12274] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.1862'. [ 505.551172][T12298] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1864'. [ 505.566445][T12298] sg_write: data in/out 424924/122 bytes for SCSI command 0x0-- guessing data in; [ 505.566445][T12298] program syz.5.1864 not setting count and/or reply_len properly [ 505.683161][T12300] ipvlan1: entered promiscuous mode [ 505.897015][ T9] usb 7-1: USB disconnect, device number 13 [ 505.919330][ T9] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 505.933303][T12297] ipvlan1: left promiscuous mode [ 506.372811][ T5850] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 506.532894][ T5850] usb 6-1: Using ep0 maxpacket: 16 [ 506.535615][ T5850] usb 6-1: config 235 has an invalid descriptor of length 243, skipping remainder of the config [ 506.535662][ T5850] usb 6-1: config 235 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 506.535687][ T5850] usb 6-1: config 235 interface 0 has no altsetting 0 [ 506.535717][ T5850] usb 6-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 506.535737][ T5850] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.989950][ T5850] usb 6-1: string descriptor 0 read error: -71 [ 506.997217][ T5850] usbhid 6-1:235.0: couldn't find an input interrupt endpoint [ 507.007779][ T5850] usb 6-1: USB disconnect, device number 13 [ 507.129090][T12355] tap0: tun_chr_ioctl cmd 2147767521 [ 508.417581][ T5611] Bluetooth: hci0: unexpected event for opcode 0x202d [ 508.467829][T12408] JFS: charset not found [ 510.310024][ T5615] Process accounting resumed [ 510.820037][ T5615] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 510.972753][ T5615] usb 7-1: Using ep0 maxpacket: 8 [ 510.975251][ T5615] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 510.975277][ T5615] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 510.975323][ T5615] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 510.975342][ T5615] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 510.975362][ T5615] usb 7-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 510.975400][ T5615] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 510.975419][ T5615] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.477685][ T5615] usbtmc 7-1:16.0: bulk endpoints not found [ 511.574946][T12468] JFS: charset not found [ 511.818635][ T5615] Process accounting resumed [ 514.608631][T12504] binder: 12503:12504 ioctl c0306201 200000000040 returned -22 [ 514.707131][ T9] usb 7-1: USB disconnect, device number 14 [ 517.148927][T12536] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1958'. [ 517.148947][T12536] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1958'. [ 518.504996][T12555] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1963'. [ 518.713043][ T9] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 518.924954][ T9] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 518.924979][ T9] usb 7-1: config 0 has no interface number 0 [ 518.930112][ T9] usb 7-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 518.930139][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.930157][ T9] usb 7-1: Product: syz [ 518.930170][ T9] usb 7-1: Manufacturer: syz [ 518.930181][ T9] usb 7-1: SerialNumber: syz [ 518.984148][ T9] usb 7-1: config 0 descriptor?? [ 518.990123][ T9] usb 7-1: selecting invalid altsetting 1 [ 518.990336][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 518.990376][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 519.141147][ T9] DVB: Unable to find symbol stv0299_attach() [ 519.142796][ T5615] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 519.772740][ T5615] usb 6-1: Using ep0 maxpacket: 16 [ 519.775987][ T5615] usb 6-1: config 235 has an invalid descriptor of length 243, skipping remainder of the config [ 519.776043][ T5615] usb 6-1: config 235 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 519.776067][ T5615] usb 6-1: config 235 interface 0 has no altsetting 0 [ 519.776097][ T5615] usb 6-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 519.776118][ T5615] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.106171][T12554] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 520.491660][ T9] DVB: Unable to find symbol tda8083_attach() [ 520.491674][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 520.493442][ T5615] usb 6-1: string descriptor 0 read error: -71 [ 521.236604][ T5615] usbhid 6-1:235.0: couldn't find an input interrupt endpoint [ 521.269094][ T5615] usb 6-1: USB disconnect, device number 14 [ 521.650194][ T5615] usb 7-1: USB disconnect, device number 15 [ 521.882775][ T823] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 522.977265][ T823] usb 6-1: Using ep0 maxpacket: 16 [ 523.049812][ T823] usb 6-1: config 235 has an invalid descriptor of length 243, skipping remainder of the config [ 523.049864][ T823] usb 6-1: config 235 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 523.049887][ T823] usb 6-1: config 235 interface 0 has no altsetting 0 [ 523.049918][ T823] usb 6-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 523.049938][ T823] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.287586][T12616] CIFS mount error: No usable UNC path provided in device string! [ 523.287586][T12616] [ 523.287620][T12616] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 523.489639][T12619] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1985'. [ 524.088887][ T823] usb 6-1: string descriptor 0 read error: -71 [ 524.109518][ T823] usbhid 6-1:235.0: couldn't find an input interrupt endpoint [ 524.116871][ T823] usb 6-1: USB disconnect, device number 15 [ 527.781616][T12677] binder: 12675:12677 ioctl c0306201 0 returned -14 [ 528.843130][T12689] netlink: 'syz.3.1998': attribute type 10 has an invalid length. [ 529.101368][T12690] tipc: Enabling of bearer rejected, failed to enable media [ 530.618038][ T5586] Process accounting resumed [ 532.430926][T12718] binder: 12717:12718 ioctl c0306201 0 returned -14 [ 533.972947][T10811] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 534.149237][T10811] usb 6-1: config 0 has an invalid interface number: 120 but max is 0 [ 534.149263][T10811] usb 6-1: config 0 has no interface number 0 [ 534.149301][T10811] usb 6-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 534.149322][T10811] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 534.149373][T10811] usb 6-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 534.149393][T10811] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.364540][T10811] usb 6-1: config 0 descriptor?? [ 534.391373][T10811] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.120/input/input9 [ 534.731753][T12764] Process accounting resumed [ 534.853961][ T5611] Bluetooth: hci1: unexpected event for opcode 0x202d [ 536.408211][T12779] binder: 12778:12779 ioctl c0306201 0 returned -14 [ 536.509481][ T31] usb 6-1: USB disconnect, device number 16 [ 541.170500][T12819] netlink: 'syz.2.2026': attribute type 10 has an invalid length. [ 542.000986][T10811] Process accounting resumed [ 542.142920][ T5792] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 543.153934][T12829] syz.5.2030 (12829) used greatest stack depth: 16360 bytes left [ 544.873609][ T5792] usb 7-1: Using ep0 maxpacket: 16 [ 544.901495][ T5792] usb 7-1: device descriptor read/all, error -71 [ 546.538693][T10811] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 546.826170][T10811] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 546.831639][T10811] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 546.831667][T10811] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 546.831685][T10811] usb 8-1: SerialNumber: syz [ 549.391822][T10811] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -71 [ 549.651585][T10811] usb 8-1: USB disconnect, device number 9 [ 553.972793][ T9] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 557.295236][T12925] JFS: charset not found [ 557.459806][T10811] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 558.079644][ T5792] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 558.252789][T10811] usb 6-1: Using ep0 maxpacket: 16 [ 558.274990][ T5792] usb 7-1: config 0 has an invalid interface number: 52 but max is 0 [ 558.275014][ T5792] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 558.275030][ T5792] usb 7-1: config 0 has no interface number 0 [ 558.275123][ T5792] usb 7-1: config 0 interface 52 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 558.275149][ T5792] usb 7-1: config 0 interface 52 has no altsetting 0 [ 558.275886][T10811] usb 6-1: config 235 has an invalid descriptor of length 243, skipping remainder of the config [ 558.275931][T10811] usb 6-1: config 235 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 558.276007][T10811] usb 6-1: config 235 interface 0 has no altsetting 0 [ 558.276038][T10811] usb 6-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 558.276058][T10811] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.282008][ T5792] usb 7-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 558.282031][ T5792] usb 7-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 558.282047][ T5792] usb 7-1: Product: syz [ 558.282057][ T5792] usb 7-1: SerialNumber: syz [ 558.448158][ T5792] usb 7-1: config 0 descriptor?? [ 559.592503][T10811] usb 6-1: string descriptor 0 read error: -71 [ 559.624059][T10811] usbhid 6-1:235.0: couldn't find an input interrupt endpoint [ 559.688505][T10811] usb 6-1: USB disconnect, device number 17 [ 561.355837][T12947] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2056'. [ 563.322856][T10811] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 563.348060][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.348124][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.484568][ T5720] usb 7-1: USB disconnect, device number 18 [ 563.496181][T10811] usb 8-1: config 0 has an invalid interface number: 120 but max is 0 [ 563.496206][T10811] usb 8-1: config 0 has no interface number 0 [ 563.496247][T10811] usb 8-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 563.496268][T10811] usb 8-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 563.496303][T10811] usb 8-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 563.496323][T10811] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.703493][T10811] usb 8-1: config 0 descriptor?? [ 563.751547][T10811] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.120/input/input10 [ 563.953261][ T5792] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 564.928169][ T5792] usb 6-1: config 0 has an invalid interface number: 120 but max is 0 [ 564.928196][ T5792] usb 6-1: config 0 has no interface number 0 [ 564.928231][ T5792] usb 6-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 564.928253][ T5792] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 564.928289][ T5792] usb 6-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 564.928310][ T5792] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.993024][ T5720] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 564.995426][ T5792] usb 6-1: config 0 descriptor?? [ 565.006068][ T5850] usb 8-1: USB disconnect, device number 11 [ 565.079281][ T5792] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.120/input/input11 [ 565.184160][ T5720] usb 7-1: Using ep0 maxpacket: 16 [ 565.187428][ T5720] usb 7-1: config 235 has an invalid descriptor of length 243, skipping remainder of the config [ 565.187479][ T5720] usb 7-1: config 235 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 565.187502][ T5720] usb 7-1: config 235 interface 0 has no altsetting 0 [ 565.187532][ T5720] usb 7-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 565.187551][ T5720] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.469887][ T5720] usb 7-1: string descriptor 0 read error: -71 [ 565.488517][ T9] usb 6-1: USB disconnect, device number 18 [ 565.493740][ C0] usbtouchscreen 6-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -19 [ 565.559985][ T5720] usbhid 7-1:235.0: couldn't find an input interrupt endpoint [ 565.585246][ T5720] usb 7-1: USB disconnect, device number 19 [ 566.932784][ T5850] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 567.044987][T13012] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2078'. [ 567.084275][ T5850] usb 8-1: Using ep0 maxpacket: 8 [ 567.088029][ T5850] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 567.088055][ T5850] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 567.088098][ T5850] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 567.088118][ T5850] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 567.088137][ T5850] usb 8-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 567.088180][ T5850] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 567.088199][ T5850] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.116005][ T5850] usbtmc 8-1:16.0: bulk endpoints not found [ 567.222764][ T9] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 567.386533][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 567.388918][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 567.388945][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 567.388962][ T9] usb 6-1: SerialNumber: syz [ 567.432765][ T5720] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 567.588492][ T5720] usb 7-1: config 0 has an invalid interface number: 120 but max is 0 [ 567.588519][ T5720] usb 7-1: config 0 has no interface number 0 [ 567.589506][ T5720] usb 7-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 567.589673][ T5720] usb 7-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 567.589763][ T5720] usb 7-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 567.589782][ T5720] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.600246][ T5720] usb 7-1: config 0 descriptor?? [ 567.687749][T13005] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2074'. [ 567.846335][ T5720] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.120/input/input12 [ 567.884502][ T9] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 568.792829][ T9] usb 6-1: USB disconnect, device number 19 [ 568.860520][ T5720] usb 7-1: USB disconnect, device number 20 [ 568.860660][ C1] usbtouchscreen 7-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -19 [ 569.487016][ T5792] usb 8-1: USB disconnect, device number 12 [ 571.300280][T13060] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2097'. [ 571.367488][T13064] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2098'. [ 571.367511][T13064] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2098'. [ 571.462789][ T5720] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 571.582963][ T823] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 571.615967][ T5720] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 571.615992][ T5720] usb 8-1: config 0 has no interface number 0 [ 571.620035][ T5720] usb 8-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 571.620062][ T5720] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.620080][ T5720] usb 8-1: Product: syz [ 571.620092][ T5720] usb 8-1: Manufacturer: syz [ 571.620105][ T5720] usb 8-1: SerialNumber: syz [ 571.631537][ T5720] usb 8-1: config 0 descriptor?? [ 571.657957][ T5720] usb 8-1: selecting invalid altsetting 1 [ 571.658120][ T5720] dvb_ttusb_budget: ttusb_init_controller: error [ 571.658132][ T5720] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 571.725105][ T5720] DVB: Unable to find symbol stv0299_attach() [ 571.778920][ T5720] DVB: Unable to find symbol tda8083_attach() [ 571.778936][ T5720] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 571.798929][ T823] usb 7-1: config 0 has an invalid interface number: 52 but max is 0 [ 571.798953][ T823] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 571.798968][ T823] usb 7-1: config 0 has no interface number 0 [ 571.799022][ T823] usb 7-1: config 0 interface 52 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 571.799044][ T823] usb 7-1: config 0 interface 52 has no altsetting 0 [ 571.828142][ T823] usb 7-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 571.828181][ T823] usb 7-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 571.828200][ T823] usb 7-1: Product: syz [ 571.828212][ T823] usb 7-1: SerialNumber: syz [ 571.902385][ T823] usb 7-1: config 0 descriptor?? [ 572.193319][T13052] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 572.232055][ T5720] usb 8-1: USB disconnect, device number 13 [ 572.443348][T13055] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2094'. [ 577.358170][T13110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2110'. [ 577.358191][T13110] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2110'. [ 577.546710][ T823] usb 7-1: USB disconnect, device number 21 [ 577.967561][T13115] JFS: charset not found [ 578.241747][T13136] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2121'. [ 580.502749][ T5850] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 581.017767][ T5850] usb 8-1: Using ep0 maxpacket: 16 [ 581.147253][ T5850] usb 8-1: config 235 has an invalid descriptor of length 243, skipping remainder of the config [ 581.147306][ T5850] usb 8-1: config 235 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 581.147330][ T5850] usb 8-1: config 235 interface 0 has no altsetting 0 [ 581.147362][ T5850] usb 8-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 581.147382][ T5850] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.824937][ T5850] usb 8-1: string descriptor 0 read error: -71 [ 582.870214][ T5850] usbhid 8-1:235.0: couldn't find an input interrupt endpoint [ 582.933836][ T5850] usb 8-1: USB disconnect, device number 14 [ 584.493230][T13182] JFS: charset not found [ 585.689261][T13192] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2137'. [ 587.812932][ T5850] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 587.816996][T13221] JFS: charset not found [ 587.848703][T13228] JFS: charset not found [ 587.968149][ T5850] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 587.971087][ T5850] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 587.971114][ T5850] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 587.971131][ T5850] usb 6-1: SerialNumber: syz [ 589.859066][ T5850] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 589.959799][T13220] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2148'. [ 591.427003][ T5586] usb 6-1: USB disconnect, device number 20 [ 591.451881][ T5586] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device [ 591.638427][T13271] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2161'. [ 594.869815][T13308] JFS: charset not found [ 598.297025][ T5850] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 598.935260][ T5850] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 598.936696][ T5850] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 598.936720][ T5850] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 598.936737][ T5850] usb 6-1: SerialNumber: syz [ 599.067209][ T823] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 599.754995][ T823] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 599.759605][ T823] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 599.759632][ T823] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 599.759658][ T823] usb 8-1: SerialNumber: syz [ 600.346723][ T5850] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 600.567610][ T823] cdc_ether 8-1:1.0 usb1: register 'cdc_ether' at usb-dummy_hcd.7-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 600.760278][T13325] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2177'. [ 600.891571][T13329] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2179'. [ 602.012826][ T31] usb 6-1: USB disconnect, device number 21 [ 602.044668][ T31] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device [ 602.124758][ T5586] usb 8-1: USB disconnect, device number 15 [ 602.124831][ T5915] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 602.335381][ T5915] usb 7-1: config 0 has an invalid interface number: 52 but max is 0 [ 602.335407][ T5915] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 602.335423][ T5915] usb 7-1: config 0 has no interface number 0 [ 602.335464][ T5915] usb 7-1: config 0 interface 52 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 602.335488][ T5915] usb 7-1: config 0 interface 52 has no altsetting 0 [ 602.338985][ T5915] usb 7-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 602.339009][ T5915] usb 7-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 602.339028][ T5915] usb 7-1: Product: syz [ 602.339040][ T5915] usb 7-1: SerialNumber: syz [ 602.340976][T13373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2186'. [ 602.340993][T13373] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2186'. [ 603.432293][ T5586] cdc_ether 8-1:1.0 usb1: unregister 'cdc_ether' usb-dummy_hcd.7-1, CDC Ethernet Device [ 603.443064][ T5915] usb 7-1: config 0 descriptor?? [ 603.472956][T13383] CIFS mount error: No usable UNC path provided in device string! [ 603.472956][T13383] [ 603.472977][T13383] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 604.809391][T13351] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2182'. [ 605.990756][ T5586] usb 7-1: USB disconnect, device number 22 [ 606.177934][T13418] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2195'. [ 608.050719][T13457] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2200'. [ 608.050742][T13457] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2200'. [ 608.094718][T13456] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2199'. [ 611.520564][T13489] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2208'. [ 612.680892][T13512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2214'. [ 612.680913][T13512] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2214'. [ 613.843320][ T31] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 613.995610][ T31] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 613.997073][ T31] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 613.997098][ T31] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 613.997115][ T31] usb 8-1: SerialNumber: syz [ 615.123073][T13542] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2216'. [ 615.178253][T13544] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2228'. [ 615.178275][T13544] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2228'. [ 615.486053][T13546] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2227'. [ 615.617591][T13553] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2231'. [ 615.652104][T13555] FAULT_INJECTION: forcing a failure. [ 615.652104][T13555] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 615.652144][T13555] CPU: 1 UID: 0 PID: 13555 Comm: syz.5.2232 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 615.652171][T13555] Tainted: [L]=SOFTLOCKUP [ 615.652177][T13555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 615.652191][T13555] Call Trace: [ 615.652198][T13555] [ 615.652206][T13555] dump_stack_lvl+0xe8/0x150 [ 615.652238][T13555] should_fail_ex+0x467/0x600 [ 615.652269][T13555] _copy_from_user+0x2d/0xb0 [ 615.652289][T13555] __sys_bpf+0x2e7/0xd90 [ 615.652315][T13555] ? __pfx___sys_bpf+0x10/0x10 [ 615.652335][T13555] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 615.652359][T13555] ? rt_mutex_slowunlock+0x219/0x460 [ 615.652400][T13555] ? ksys_write+0x248/0x270 [ 615.652424][T13555] ? __pfx_ksys_write+0x10/0x10 [ 615.652449][T13555] __x64_sys_bpf+0xba/0xd0 [ 615.652473][T13555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.652492][T13555] do_syscall_64+0x174/0x580 [ 615.652510][T13555] ? trace_irq_disable+0x3b/0x140 [ 615.652535][T13555] ? clear_bhb_loop+0x40/0x90 [ 615.652556][T13555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.652584][T13555] RIP: 0033:0x7f155002de99 [ 615.652601][T13555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 615.652613][T13555] RSP: 002b:00007f154e286028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 615.652631][T13555] RAX: ffffffffffffffda RBX: 00007f15502b5fa0 RCX: 00007f155002de99 [ 615.652644][T13555] RDX: 0000000000000050 RSI: 00002000000001c0 RDI: 0000000000000000 [ 615.652653][T13555] RBP: 00007f154e286090 R08: 0000000000000000 R09: 0000000000000000 [ 615.652663][T13555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 615.652671][T13555] R13: 00007f15502b6038 R14: 00007f15502b5fa0 R15: 00007fff0b2da818 [ 615.652698][T13555] [ 616.594808][ T31] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -71 [ 616.713740][ T31] usb 8-1: USB disconnect, device number 16 [ 622.992038][T13639] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2262'. [ 624.293194][ T36] kauditd_printk_skb: 38 callbacks suppressed [ 624.293213][ T36] audit: type=1107 audit(1784597253.166:657): pid=13649 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 624.309528][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.309595][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.382358][T13656] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2263'. [ 625.563752][ T36] audit: type=1326 audit(1784597254.456:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13665 comm="syz.6.2269" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a2a29de99 code=0x0 [ 626.786996][T13681] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2273'. [ 627.682081][T13687] batadv0: entered promiscuous mode [ 627.682108][T13687] batadv0: entered allmulticast mode [ 631.130552][T13729] ip_vti0: entered allmulticast mode [ 631.247883][ T9] Process accounting resumed [ 632.392735][T10811] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 632.543724][T10811] usb 7-1: Using ep0 maxpacket: 8 [ 632.545569][T10811] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 632.545593][T10811] usb 7-1: config 0 has no interface number 0 [ 632.545622][T10811] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 632.545634][T10811] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 632.545645][T10811] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 632.545657][T10811] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 632.545668][T10811] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 632.545689][T10811] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 632.545700][T10811] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.559201][T10811] usb 7-1: config 0 descriptor?? [ 632.675903][T10811] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 632.734369][ T823] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 632.872360][ T5915] Process accounting resumed [ 632.886191][ T823] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 632.886217][ T823] usb 6-1: config 0 has no interface number 0 [ 632.889702][ T823] usb 6-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 632.889729][ T823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.889746][ T823] usb 6-1: Product: syz [ 632.889761][ T823] usb 6-1: Manufacturer: syz [ 632.889773][ T823] usb 6-1: SerialNumber: syz [ 632.904658][ T823] usb 6-1: config 0 descriptor?? [ 632.922175][ T823] usb 6-1: selecting invalid altsetting 1 [ 632.922341][ T823] dvb_ttusb_budget: ttusb_init_controller: error [ 632.922354][ T823] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 633.060866][ T823] DVB: Unable to find symbol stv0299_attach() [ 634.227988][ T823] DVB: Unable to find symbol tda8083_attach() [ 634.228003][ T823] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 634.308674][ T823] usb 7-1: USB disconnect, device number 23 [ 634.380547][ T823] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 634.720351][T13790] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 636.914022][ T5915] Process accounting resumed [ 637.080675][ T36] audit: type=1326 audit(1784597265.966:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13819 comm="syz.2.2316" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd65454de99 code=0x0 [ 637.523838][ T5586] usb 6-1: USB disconnect, device number 22 [ 639.102229][T10811] Process accounting resumed [ 639.512779][T10811] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 639.668746][T10811] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 639.669860][T10811] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 639.669885][T10811] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 639.669912][T10811] usb 8-1: SerialNumber: syz [ 641.348644][T10811] cdc_ether 8-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.7-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 642.424084][T13861] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2330'. [ 642.904800][ T5792] Process accounting resumed [ 643.072744][ T5586] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 643.192744][ T5792] usb 8-1: USB disconnect, device number 17 [ 643.238811][ T5586] usb 7-1: config 0 has an invalid interface number: 52 but max is 0 [ 643.238903][ T5586] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 643.238920][ T5586] usb 7-1: config 0 has no interface number 0 [ 643.238960][ T5586] usb 7-1: config 0 interface 52 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 643.238983][ T5586] usb 7-1: config 0 interface 52 has no altsetting 0 [ 643.251300][ T5586] usb 7-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 643.251326][ T5586] usb 7-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 643.251345][ T5586] usb 7-1: Product: syz [ 643.251357][ T5586] usb 7-1: SerialNumber: syz [ 643.282420][ T5586] usb 7-1: config 0 descriptor?? [ 643.320315][ T5792] cdc_ether 8-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.7-1, CDC Ethernet Device [ 643.805990][T13893] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2339'. [ 645.232185][T13948] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2353'. [ 645.279485][ T5615] Process accounting resumed [ 646.637913][ T5586] usb 7-1: USB disconnect, device number 24 [ 646.723111][T13979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2361'. [ 647.357477][ T5586] Process accounting resumed [ 647.402498][T14002] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2367'. [ 647.647739][ T36] audit: type=1326 audit(1784597276.546:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14007 comm="syz.5.2370" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f155002de99 code=0x0 [ 648.072796][ T5915] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 648.333034][ T5915] usb 8-1: Using ep0 maxpacket: 16 [ 648.336838][ T5915] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50077, setting to 1024 [ 648.336869][ T5915] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 648.336906][ T5915] usb 8-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 648.336925][ T5915] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.399734][ T5915] usb 8-1: config 0 descriptor?? [ 650.061802][T14052] binder: 14051:14052 ioctl c0306201 200000000040 returned -22 [ 650.535595][T14056] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2383'. [ 651.539072][T14060] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2385'. [ 651.874822][ T5915] usbhid 8-1:0.0: can't add hid device: -71 [ 651.874953][ T5915] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 651.919993][ T5915] usb 8-1: USB disconnect, device number 18 [ 654.617522][T14106] binder: 14101:14106 ioctl c0306201 200000000040 returned -22 [ 654.915004][T14109] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2397'. [ 654.978804][T14114] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2396'. [ 658.658642][T14141] binder: 14140:14141 ioctl c0306201 200000000040 returned -22 [ 659.115246][T14147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2409'. [ 659.258946][T14152] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2410'. [ 660.404380][T14158] ipvlan1: entered promiscuous mode [ 660.406521][T14158] ipvlan1: left promiscuous mode [ 661.592723][ T5915] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 661.613533][T14181] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2417'. [ 661.636367][T14183] binder: 14182:14183 ioctl c0306201 200000000040 returned -22 [ 661.776853][ T5915] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 661.776878][ T5915] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 661.776895][ T5915] usb 6-1: config 0 has no interface number 0 [ 661.776933][ T5915] usb 6-1: config 0 interface 52 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 661.776955][ T5915] usb 6-1: config 0 interface 52 has no altsetting 0 [ 661.778637][ T5915] usb 6-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 661.778683][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 661.778700][ T5915] usb 6-1: Product: syz [ 661.778712][ T5915] usb 6-1: SerialNumber: syz [ 661.802682][ T5915] usb 6-1: config 0 descriptor?? [ 661.889149][T14189] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2421'. [ 661.927681][T14191] FAULT_INJECTION: forcing a failure. [ 661.927681][T14191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 661.927714][T14191] CPU: 0 UID: 0 PID: 14191 Comm: syz.6.2422 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 661.927738][T14191] Tainted: [L]=SOFTLOCKUP [ 661.927744][T14191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 661.927754][T14191] Call Trace: [ 661.927761][T14191] [ 661.927768][T14191] dump_stack_lvl+0xe8/0x150 [ 661.927801][T14191] should_fail_ex+0x467/0x600 [ 661.927832][T14191] _copy_from_user+0x2d/0xb0 [ 661.927852][T14191] bpf_test_init+0xd8/0x150 [ 661.927875][T14191] bpf_prog_test_run_skb+0x31e/0x2230 [ 661.927913][T14191] ? __fget_files+0x3a8/0x420 [ 661.927931][T14191] ? __fget_files+0x2a/0x420 [ 661.927953][T14191] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 661.927972][T14191] bpf_prog_test_run+0x2cb/0x340 [ 661.927995][T14191] __sys_bpf+0xa22/0xd90 [ 661.928019][T14191] ? __pfx___sys_bpf+0x10/0x10 [ 661.928039][T14191] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 661.928062][T14191] ? rt_mutex_slowunlock+0x219/0x460 [ 661.928103][T14191] ? ksys_write+0x248/0x270 [ 661.928125][T14191] ? __pfx_ksys_write+0x10/0x10 [ 661.928149][T14191] __x64_sys_bpf+0xba/0xd0 [ 661.928173][T14191] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.928192][T14191] do_syscall_64+0x174/0x580 [ 661.928208][T14191] ? trace_irq_disable+0x3b/0x140 [ 661.928242][T14191] ? clear_bhb_loop+0x40/0x90 [ 661.928262][T14191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.928279][T14191] RIP: 0033:0x7f7a2a29de99 [ 661.928295][T14191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 661.928308][T14191] RSP: 002b:00007f7a284f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 661.928326][T14191] RAX: ffffffffffffffda RBX: 00007f7a2a525fa0 RCX: 00007f7a2a29de99 [ 661.928339][T14191] RDX: 0000000000000050 RSI: 00002000000007c0 RDI: 000000000000000a [ 661.928348][T14191] RBP: 00007f7a284f6090 R08: 0000000000000000 R09: 0000000000000000 [ 661.928359][T14191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 661.928368][T14191] R13: 00007f7a2a526038 R14: 00007f7a2a525fa0 R15: 00007ffe5afa81e8 [ 661.928398][T14191] [ 663.188357][T14209] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2426'. [ 665.882846][ T5792] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 666.026778][T10811] usb 6-1: USB disconnect, device number 23 [ 666.043711][ T5792] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 666.046702][ T5792] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 666.046730][ T5792] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 666.046748][ T5792] usb 7-1: SerialNumber: syz [ 666.506492][T10811] Process accounting resumed [ 666.634917][T14262] binder: 14261:14262 ioctl c0306201 200000000040 returned -22 [ 667.670400][ T5792] cdc_ether 7-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.6-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 667.793761][T14274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2445'. [ 667.986322][T14242] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2437'. [ 669.175463][ T5330] usb 7-1: USB disconnect, device number 25 [ 669.194510][ T5330] cdc_ether 7-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.6-1, CDC Ethernet Device [ 669.887928][T14306] binder: 14305:14306 ioctl c0306201 200000000040 returned -22 [ 673.513277][ T823] usb 8-1: new full-speed USB device number 19 using dummy_hcd [ 674.044606][ T823] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 674.044632][ T823] usb 8-1: config 0 has no interface number 0 [ 674.071313][ T823] usb 8-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 674.071340][ T823] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.071358][ T823] usb 8-1: Product: syz [ 674.071371][ T823] usb 8-1: Manufacturer: syz [ 674.071384][ T823] usb 8-1: SerialNumber: syz [ 674.128217][ T823] usb 8-1: config 0 descriptor?? [ 674.162900][ T823] usb 8-1: selecting invalid altsetting 1 [ 674.163056][ T823] dvb_ttusb_budget: ttusb_init_controller: error [ 674.163069][ T823] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 674.299554][ T823] DVB: Unable to find symbol stv0299_attach() [ 674.375341][ T823] DVB: Unable to find symbol tda8083_attach() [ 674.375355][ T823] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 674.392794][T14343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.393371][T14343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.585164][ T823] usb 8-1: USB disconnect, device number 19 [ 674.850024][T14376] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2467'. [ 675.189447][T14385] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2469'. [ 679.982982][ T5792] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 680.134004][T14433] binder: 14432:14433 ioctl c0306201 200000000040 returned -22 [ 680.135891][ T5792] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 680.138655][ T5792] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 680.138680][ T5792] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 680.138697][ T5792] usb 7-1: SerialNumber: syz [ 681.352079][ T36] audit: type=1326 audit(1784597310.236:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14438 comm="syz.2.2484" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65454de99 code=0x7ffc0000 [ 681.353058][ T36] audit: type=1326 audit(1784597310.236:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14438 comm="syz.2.2484" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65454de99 code=0x7ffc0000 [ 681.355851][ T36] audit: type=1326 audit(1784597310.246:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14438 comm="syz.2.2484" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fd65454de99 code=0x7ffc0000 [ 681.356195][ T36] audit: type=1326 audit(1784597310.246:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14438 comm="syz.2.2484" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65454de99 code=0x7ffc0000 [ 681.357550][ T36] audit: type=1326 audit(1784597310.246:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14438 comm="syz.2.2484" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fd65454de99 code=0x7ffc0000 [ 681.357838][ T36] audit: type=1326 audit(1784597310.246:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14438 comm="syz.2.2484" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65454de99 code=0x7ffc0000 [ 681.358167][ T36] audit: type=1326 audit(1784597310.246:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14438 comm="syz.2.2484" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65454de99 code=0x7ffc0000 [ 681.358405][ T36] audit: type=1326 audit(1784597310.246:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14438 comm="syz.2.2484" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd65454de99 code=0x7ffc0000 [ 681.358650][ T36] audit: type=1326 audit(1784597310.246:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14438 comm="syz.2.2484" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65454de99 code=0x7ffc0000 [ 681.359039][ T36] audit: type=1326 audit(1784597310.246:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14438 comm="syz.2.2484" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fd65454de99 code=0x7ffc0000 [ 681.748906][ T5792] cdc_ether 7-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.6-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 681.912214][T14425] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2478'. [ 683.513561][T10811] usb 7-1: USB disconnect, device number 26 [ 683.538717][T10811] cdc_ether 7-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.6-1, CDC Ethernet Device [ 685.555635][T10811] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 685.926460][T10811] usb 7-1: Using ep0 maxpacket: 8 [ 685.930517][T10811] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 685.930544][T10811] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 685.930559][T10811] usb 7-1: config 0 has no interface number 0 [ 685.965756][T10811] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 685.965783][T10811] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.965800][T10811] usb 7-1: Product: syz [ 685.965813][T10811] usb 7-1: Manufacturer: syz [ 685.965824][T10811] usb 7-1: SerialNumber: syz [ 685.977235][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.977298][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.043275][T10811] usb 7-1: config 0 descriptor?? [ 686.086559][T10811] uvcvideo 7-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 686.086732][T10811] uvcvideo 7-1:0.31: No valid video chain found. [ 686.549930][ T36] kauditd_printk_skb: 71 callbacks suppressed [ 686.549947][ T36] audit: type=1326 audit(1784597315.436:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14498 comm="syz.2.2497" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65454de99 code=0x7ffc0000 [ 686.549990][ T36] audit: type=1326 audit(1784597315.436:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14498 comm="syz.2.2497" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65454de99 code=0x7ffc0000 [ 686.590507][ T36] audit: type=1326 audit(1784597315.476:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14498 comm="syz.2.2497" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7fd65454de99 code=0x7ffc0000 [ 686.592836][ T36] audit: type=1326 audit(1784597315.476:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14498 comm="syz.2.2497" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65454de99 code=0x7ffc0000 [ 686.602077][ T36] audit: type=1326 audit(1784597315.476:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14498 comm="syz.2.2497" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65454de99 code=0x7ffc0000 [ 686.607921][T14509] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.2494'. [ 686.611153][ T36] audit: type=1326 audit(1784597315.496:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14498 comm="syz.2.2497" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd65454de99 code=0x7ffc0000 [ 686.611978][ T36] audit: type=1326 audit(1784597315.496:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14498 comm="syz.2.2497" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65454de99 code=0x7ffc0000 [ 686.613261][ T36] audit: type=1326 audit(1784597315.496:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14498 comm="syz.2.2497" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65454de99 code=0x7ffc0000 [ 686.614854][ T36] audit: type=1326 audit(1784597315.506:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14498 comm="syz.2.2497" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd65454de99 code=0x7ffc0000 [ 686.615603][ T36] audit: type=1326 audit(1784597315.506:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14498 comm="syz.2.2497" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65454de99 code=0x7ffc0000 [ 688.888257][T14532] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2504'. [ 688.903182][T14534] binder: 14533:14534 ioctl c0306201 200000000040 returned -22 [ 689.168971][ T5586] usb 7-1: USB disconnect, device number 27 [ 689.203655][T14542] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2507'. [ 692.647792][T14585] vivid-000: kernel_thread() failed [ 693.563527][T14582] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2514'. [ 693.778032][T14593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2516'. [ 693.812324][T14599] binder: 14595:14599 ioctl c0306201 200000000040 returned -22 [ 694.137098][T14602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2518'. [ 695.221654][T14615] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2522'. [ 697.662751][ T5792] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 697.670686][T14629] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2526'. [ 697.813004][ T5792] usb 7-1: Using ep0 maxpacket: 8 [ 698.056963][ T5792] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 698.056991][ T5792] usb 7-1: config 0 has no interface number 0 [ 698.057515][ T5792] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 698.057583][ T5792] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 698.057652][ T5792] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 698.057698][ T5792] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 698.057742][ T5792] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 698.057779][ T5792] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 698.057847][ T5792] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.744773][ T5792] usb 7-1: config 0 descriptor?? [ 698.817511][ T5792] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 700.766461][T14648] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2532'. [ 701.534692][ T9] usb 7-1: USB disconnect, device number 28 [ 701.561299][ T9] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 701.696651][ T36] audit: type=1326 audit(1784597330.586:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14666 comm="syz.3.2534" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe7bdfede99 code=0x0 [ 701.857736][T14673] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2535'. [ 704.320695][T14712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2544'. [ 704.355416][T14713] binder: 14709:14713 ioctl c0306201 200000000040 returned -22 [ 704.550276][T14714] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2543'. [ 704.550297][T14714] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2543'. [ 705.935815][ T36] audit: type=1326 audit(1784597334.826:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14727 comm="syz.6.2548" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a2a29de99 code=0x0 [ 708.218437][T14758] binder: 14756:14758 ioctl c0306201 200000000040 returned -22 [ 708.373394][ T5330] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 708.391572][T14766] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2560'. [ 708.534820][ T5330] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 708.536192][ T5330] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 708.536217][ T5330] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 708.536234][ T5330] usb 7-1: SerialNumber: syz [ 708.536928][T14770] FAULT_INJECTION: forcing a failure. [ 708.536928][T14770] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 708.536959][T14770] CPU: 1 UID: 0 PID: 14770 Comm: syz.5.2562 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 708.536983][T14770] Tainted: [L]=SOFTLOCKUP [ 708.536989][T14770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 708.537000][T14770] Call Trace: [ 708.537007][T14770] [ 708.537014][T14770] dump_stack_lvl+0xe8/0x150 [ 708.537045][T14770] should_fail_ex+0x467/0x600 [ 708.537075][T14770] _copy_from_iter+0x1d3/0x1660 [ 708.537104][T14770] ? rcu_is_watching+0x15/0xb0 [ 708.537125][T14770] ? trace_kmem_cache_alloc+0x29/0xe0 [ 708.537153][T14770] ? __pfx__copy_from_iter+0x10/0x10 [ 708.537177][T14770] ? __alloc_skb+0x276/0x7a0 [ 708.537192][T14770] ? __alloc_skb+0x276/0x7a0 [ 708.537213][T14770] ? netlink_sendmsg+0x650/0xb40 [ 708.537231][T14770] ? skb_put+0x112/0x210 [ 708.537251][T14770] netlink_sendmsg+0x6c0/0xb40 [ 708.537278][T14770] ? __pfx_netlink_sendmsg+0x10/0x10 [ 708.537298][T14770] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 708.537323][T14770] ? __kernel_text_address+0xd/0x30 [ 708.537340][T14770] ? unwind_get_return_address+0x4d/0x90 [ 708.537368][T14770] ? __pfx_netlink_sendmsg+0x10/0x10 [ 708.537386][T14770] sock_sendmsg_nosec+0x13a/0x180 [ 708.537412][T14770] ____sys_sendmsg+0x565/0x870 [ 708.537430][T14770] ? __might_fault+0xaf/0x130 [ 708.537453][T14770] ? __pfx_____sys_sendmsg+0x10/0x10 [ 708.537480][T14770] ? import_iovec+0x73/0xa0 [ 708.537502][T14770] ___sys_sendmsg+0x2a5/0x360 [ 708.537520][T14770] ? __lock_acquire+0x683/0x2ce0 [ 708.537541][T14770] ? __pfx____sys_sendmsg+0x10/0x10 [ 708.537593][T14770] ? __fget_files+0x2a/0x420 [ 708.537609][T14770] ? __fget_files+0x3a8/0x420 [ 708.537635][T14770] __x64_sys_sendmsg+0x1b7/0x290 [ 708.537656][T14770] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 708.537693][T14770] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.537712][T14770] do_syscall_64+0x174/0x580 [ 708.537729][T14770] ? trace_irq_disable+0x3b/0x140 [ 708.537754][T14770] ? clear_bhb_loop+0x40/0x90 [ 708.537776][T14770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.537793][T14770] RIP: 0033:0x7f155002de99 [ 708.537810][T14770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 708.537824][T14770] RSP: 002b:00007f154e286028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 708.537842][T14770] RAX: ffffffffffffffda RBX: 00007f15502b5fa0 RCX: 00007f155002de99 [ 708.537855][T14770] RDX: 0000000004000880 RSI: 0000200000000100 RDI: 0000000000000003 [ 708.537869][T14770] RBP: 00007f154e286090 R08: 0000000000000000 R09: 0000000000000000 [ 708.537879][T14770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 708.537890][T14770] R13: 00007f15502b6038 R14: 00007f15502b5fa0 R15: 00007fff0b2da818 [ 708.537919][T14770] [ 708.555801][ T5586] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 708.702784][ T5586] usb 8-1: Using ep0 maxpacket: 32 [ 708.705466][ T5586] usb 8-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 708.705491][ T5586] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.731671][ T5586] usb 8-1: config 0 descriptor?? [ 708.786917][ T5586] gspca_main: sunplus-2.14.0 probing 041e:400b [ 709.056178][ T36] audit: type=1326 audit(1784597337.946:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14775 comm="syz.3.2564" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe7bdfede99 code=0x0 [ 709.242824][ T823] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 709.318071][ T5330] cdc_ether 7-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.6-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 709.394628][ T823] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 709.394655][ T823] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 709.394669][ T823] usb 6-1: config 0 has no interface number 0 [ 709.394703][ T823] usb 6-1: config 0 interface 52 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 709.394727][ T823] usb 6-1: config 0 interface 52 has no altsetting 0 [ 709.396450][ T823] usb 6-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 709.396476][ T823] usb 6-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 709.396494][ T823] usb 6-1: Product: syz [ 709.396507][ T823] usb 6-1: SerialNumber: syz [ 709.401976][ T5586] gspca_sunplus: reg_r err -71 [ 709.402063][ T5586] sunplus 8-1:0.0: probe with driver sunplus failed with error -71 [ 709.540605][ T5586] usb 8-1: USB disconnect, device number 20 [ 709.613858][T14754] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2556'. [ 709.620526][ T823] usb 6-1: config 0 descriptor?? [ 710.820864][T14774] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2563'. [ 712.642748][ T5330] usb 7-1: USB disconnect, device number 29 [ 712.651105][ T5330] cdc_ether 7-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.6-1, CDC Ethernet Device [ 712.695120][T14819] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2572'. [ 712.910636][ T5915] usb 6-1: USB disconnect, device number 24 [ 713.108211][ T5586] Process accounting resumed [ 714.283036][ T36] audit: type=1326 audit(1784597343.166:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14845 comm="syz.5.2578" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f155002de99 code=0x0 [ 716.147404][T14896] binder: 14895:14896 ioctl c0306201 0 returned -14 [ 717.956616][T14911] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2587'. [ 718.016553][T14913] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2589'. [ 718.036456][T14913] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2589'. [ 718.036551][T14913] bridge_slave_1: left allmulticast mode [ 718.036581][T14913] bridge_slave_1: left promiscuous mode [ 718.036867][T14913] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.190185][ T5330] Process accounting resumed [ 718.998770][T14913] bridge_slave_0: left allmulticast mode [ 718.998805][T14913] bridge_slave_0: left promiscuous mode [ 719.062751][T14913] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.325137][ T36] audit: type=1326 audit(1784597348.216:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14924 comm="syz.7.2592" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f575a49de99 code=0x0 [ 722.496136][T14954] Process accounting resumed [ 723.638505][ T36] audit: type=1107 audit(1784597352.526:757): pid=14984 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='.' [ 724.833328][ T36] audit: type=1326 audit(1784597353.726:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14999 comm="syz.3.2613" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe7bdfede99 code=0x0 [ 726.569169][T15025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2619'. [ 730.522777][ T5586] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 731.480961][T15075] sg_write: data in/out 424924/122 bytes for SCSI command 0x0-- guessing data in; [ 731.480961][T15075] program syz.6.2628 not setting count and/or reply_len properly [ 731.693275][ T36] audit: type=1326 audit(1784597360.586:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15082 comm="syz.3.2629" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe7bdfede99 code=0x0 [ 731.734033][ T5586] usb 6-1: device descriptor read/all, error -71 [ 731.884170][T15089] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2630'. [ 732.034251][T15096] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2632'. [ 734.961412][T15149] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2642'. [ 735.272433][T15155] FAULT_INJECTION: forcing a failure. [ 735.272433][T15155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 735.272466][T15155] CPU: 1 UID: 0 PID: 15155 Comm: syz.6.2646 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 735.272491][T15155] Tainted: [L]=SOFTLOCKUP [ 735.272497][T15155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 735.272508][T15155] Call Trace: [ 735.272515][T15155] [ 735.272523][T15155] dump_stack_lvl+0xe8/0x150 [ 735.272558][T15155] should_fail_ex+0x467/0x600 [ 735.272589][T15155] _copy_from_user+0x2d/0xb0 [ 735.272607][T15155] bpf_test_init+0xd8/0x150 [ 735.272629][T15155] bpf_prog_test_run_xdp+0x4cc/0x11d0 [ 735.272661][T15155] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 735.272686][T15155] ? __fget_files+0x2a/0x420 [ 735.272709][T15155] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 735.272729][T15155] bpf_prog_test_run+0x2cb/0x340 [ 735.272752][T15155] __sys_bpf+0xa22/0xd90 [ 735.272777][T15155] ? __pfx___sys_bpf+0x10/0x10 [ 735.272798][T15155] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 735.272822][T15155] ? rt_mutex_slowunlock+0x219/0x460 [ 735.272861][T15155] ? ksys_write+0x248/0x270 [ 735.272885][T15155] ? __pfx_ksys_write+0x10/0x10 [ 735.272910][T15155] __x64_sys_bpf+0xba/0xd0 [ 735.272934][T15155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.272953][T15155] do_syscall_64+0x174/0x580 [ 735.272970][T15155] ? trace_irq_disable+0x3b/0x140 [ 735.272996][T15155] ? clear_bhb_loop+0x40/0x90 [ 735.273017][T15155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.273034][T15155] RIP: 0033:0x7f7a2a29de99 [ 735.273051][T15155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 735.273065][T15155] RSP: 002b:00007f7a284f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 735.273084][T15155] RAX: ffffffffffffffda RBX: 00007f7a2a525fa0 RCX: 00007f7a2a29de99 [ 735.273096][T15155] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 735.273107][T15155] RBP: 00007f7a284f6090 R08: 0000000000000000 R09: 0000000000000000 [ 735.273118][T15155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 735.273127][T15155] R13: 00007f7a2a526038 R14: 00007f7a2a525fa0 R15: 00007ffe5afa81e8 [ 735.273157][T15155] [ 735.433352][T15157] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2645'. [ 735.434198][T15157] sg_write: data in/out 424924/122 bytes for SCSI command 0x0-- guessing data in; [ 735.434198][T15157] program syz.7.2645 not setting count and/or reply_len properly [ 735.521036][T15159] netlink: 'syz.3.2643': attribute type 12 has an invalid length. [ 736.283022][ T5615] Process accounting resumed [ 736.303706][ T36] audit: type=1326 audit(1784597365.186:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15164 comm="syz.6.2648" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a2a29de99 code=0x0 [ 738.585545][T15214] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2654'. [ 738.892074][ T5586] Process accounting resumed [ 739.709058][T15242] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2662'. [ 739.730319][T15242] sg_write: data in/out 424924/122 bytes for SCSI command 0x0-- guessing data in; [ 739.730319][T15242] program syz.5.2662 not setting count and/or reply_len properly [ 740.932055][T15272] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2668'. [ 741.813409][ T5850] usb 8-1: new full-speed USB device number 21 using dummy_hcd [ 742.798484][ T5850] usb 8-1: config 0 has an invalid interface number: 52 but max is 0 [ 742.798512][ T5850] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 742.798528][ T5850] usb 8-1: config 0 has no interface number 0 [ 742.798568][ T5850] usb 8-1: config 0 interface 52 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 742.798592][ T5850] usb 8-1: config 0 interface 52 has no altsetting 0 [ 742.800405][ T5850] usb 8-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 742.800430][ T5850] usb 8-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 742.800448][ T5850] usb 8-1: Product: syz [ 742.800460][ T5850] usb 8-1: SerialNumber: syz [ 742.889129][ T5850] usb 8-1: config 0 descriptor?? [ 742.983692][ T5586] Process accounting resumed [ 744.169103][T15286] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2670'. [ 744.455118][ T36] audit: type=1326 audit(1784597373.336:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15306 comm="syz.6.2678" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2a29de99 code=0x7ffc0000 [ 744.455170][ T36] audit: type=1326 audit(1784597373.336:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15306 comm="syz.6.2678" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f7a2a29de99 code=0x7ffc0000 [ 744.710005][ T5613] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 744.750978][ T5613] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 744.760218][ T5613] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 744.797546][ T5613] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 744.817190][ T5613] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 745.279642][ T36] audit: type=1326 audit(1784597374.156:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15306 comm="syz.6.2678" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2a29de99 code=0x7ffc0000 [ 745.279693][ T36] audit: type=1326 audit(1784597374.166:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15306 comm="syz.6.2678" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2a29de99 code=0x7ffc0000 [ 745.363642][T15320] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2677'. [ 747.112308][ T5611] Bluetooth: hci3: command tx timeout [ 747.172800][ T31] usb 8-1: USB disconnect, device number 21 [ 747.189575][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.189638][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.183959][ T5611] Bluetooth: hci3: command tx timeout [ 749.188637][T15372] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2685'. [ 749.268350][T15373] netlink: 'syz.7.2685': attribute type 10 has an invalid length. [ 749.762348][T15372] veth3: entered promiscuous mode [ 749.894580][T15373] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 749.896447][T15373] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 750.462210][T15393] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2690'. [ 750.476047][T15393] sg_write: data in/out 424924/122 bytes for SCSI command 0x0-- guessing data in; [ 750.476047][T15393] program syz.6.2690 not setting count and/or reply_len properly [ 750.757471][T15399] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2691'. [ 750.757883][T15399] sg_write: data in/out 424924/122 bytes for SCSI command 0x0-- guessing data in; [ 750.757883][T15399] program syz.5.2691 not setting count and/or reply_len properly [ 750.930615][ T2974] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.140566][T15393] ipvlan1: entered promiscuous mode [ 751.311521][ T5611] Bluetooth: hci3: command tx timeout [ 751.358442][T15392] ipvlan1: left promiscuous mode [ 752.080483][T15312] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.080615][T15312] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.080820][T15312] bridge_slave_0: entered allmulticast mode [ 752.115432][ T5915] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 752.120586][T15312] bridge_slave_0: entered promiscuous mode [ 752.167696][T15312] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.169413][T15312] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.169612][T15312] bridge_slave_1: entered allmulticast mode [ 752.226784][T15312] bridge_slave_1: entered promiscuous mode [ 752.272709][ T5915] usb 6-1: Using ep0 maxpacket: 8 [ 752.275049][ T5915] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 752.275102][ T5915] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 752.275121][ T5915] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 752.275142][ T5915] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 752.275161][ T5915] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 752.275197][ T5915] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 752.275217][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.593387][ T5915] usb 6-1: usb_control_msg returned -32 [ 752.593435][ T5915] usbtmc 6-1:16.0: can't read capabilities [ 753.609985][ T5915] usb 6-1: USB disconnect, device number 27 [ 753.671974][ T5611] Bluetooth: hci3: command tx timeout [ 755.230810][ T2974] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.374654][ T36] audit: type=1107 audit(1784597384.266:765): pid=15448 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='.' [ 755.384695][T15312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 755.409624][T15312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 755.497524][T15452] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2702'. [ 755.649810][T15312] team0: Port device team_slave_0 added [ 755.673268][T15312] team0: Port device team_slave_1 added [ 755.847868][T15312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 755.847879][T15312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 755.847891][T15312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 755.849224][T15312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 755.849233][T15312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 755.849246][T15312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 756.643383][T15312] hsr_slave_0: entered promiscuous mode [ 756.644740][T15312] hsr_slave_1: entered promiscuous mode [ 756.645615][T15312] debugfs: 'hsr0' already exists in 'hsr' [ 756.645635][T15312] Cannot create hsr debugfs directory [ 759.123013][ T2974] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.864189][ T36] audit: type=1107 audit(1784597388.746:766): pid=15517 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='.' [ 760.853585][ T2974] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.094980][T15536] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2717'. [ 762.123649][T15536] sg_write: data in/out 424924/122 bytes for SCSI command 0x0-- guessing data in; [ 762.123649][T15536] program syz.7.2717 not setting count and/or reply_len properly [ 762.689737][T15538] ipvlan1: entered promiscuous mode [ 762.835779][T15533] ipvlan1: left promiscuous mode [ 764.692854][ T5330] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 764.858592][ T5330] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 764.858617][ T5330] usb 6-1: config 0 has no interface number 0 [ 764.867209][ T5330] usb 6-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 764.867236][ T5330] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.867253][ T5330] usb 6-1: Product: syz [ 764.867265][ T5330] usb 6-1: Manufacturer: syz [ 764.867278][ T5330] usb 6-1: SerialNumber: syz [ 764.927273][ T5330] usb 6-1: config 0 descriptor?? [ 764.937537][ T5330] usb 6-1: selecting invalid altsetting 1 [ 764.937689][ T5330] dvb_ttusb_budget: ttusb_init_controller: error [ 764.937709][ T5330] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 765.104578][ T5330] DVB: Unable to find symbol stv0299_attach() [ 765.348597][ T5330] DVB: Unable to find symbol tda8083_attach() [ 765.348612][ T5330] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 765.938433][T15568] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 766.365857][ T2974] bridge_slave_1: left allmulticast mode [ 766.365889][ T2974] bridge_slave_1: left promiscuous mode [ 766.366121][ T2974] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.504289][ T2974] bridge_slave_0: left allmulticast mode [ 766.504322][ T2974] bridge_slave_0: left promiscuous mode [ 766.504572][ T2974] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.659410][ T36] audit: type=1107 audit(1784597395.546:767): pid=15575 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='.' [ 766.802754][ T5608] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 766.956482][ T5608] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 766.957645][ T5608] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 766.957669][ T5608] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 766.957686][ T5608] usb 8-1: SerialNumber: syz [ 767.478739][T15588] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2727'. [ 767.479392][T15588] sg_write: data in/out 424924/122 bytes for SCSI command 0x0-- guessing data in; [ 767.479392][T15588] program syz.6.2727 not setting count and/or reply_len properly [ 767.764370][ T2974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 768.054061][ T2974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 768.076531][ T2974] bond0 (unregistering): Released all slaves [ 768.086280][ T2974] bond1 (unregistering): Released all slaves [ 768.963565][ T5615] usb 6-1: USB disconnect, device number 28 [ 768.993495][ T5259] 8021q: adding VLAN 0 to HW filter on device eth9 [ 769.000010][T15588] ipvlan1: entered promiscuous mode [ 769.133121][ T5608] cdc_ether 8-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.7-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 769.138312][T15588] ipvlan1: left promiscuous mode [ 769.614165][T15574] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2721'. [ 771.608882][ T5615] usb 8-1: USB disconnect, device number 22 [ 771.638468][ T5615] cdc_ether 8-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.7-1, CDC Ethernet Device [ 771.806744][ T36] audit: type=1107 audit(1784597400.696:768): pid=15619 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='.' [ 773.632767][ T5915] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 773.838066][ T5915] usb 7-1: config 0 has an invalid interface number: 255 but max is 0 [ 773.838083][ T5915] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 773.838092][ T5915] usb 7-1: config 0 has no interface number 0 [ 773.838117][ T5915] usb 7-1: config 0 interface 255 has no altsetting 0 [ 773.838134][ T5915] usb 7-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 773.838145][ T5915] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.841591][ T5915] usb 7-1: config 0 descriptor?? [ 774.481434][ T5608] usb 7-1: USB disconnect, device number 30 [ 775.550480][ T36] audit: type=1107 audit(1784597404.406:769): pid=15662 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='.' [ 775.673563][ T2974] hsr_slave_0: left promiscuous mode [ 775.779112][ T2974] hsr_slave_1: left promiscuous mode [ 775.781490][ T2974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 775.781515][ T2974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 775.913767][ T2974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 775.913793][ T2974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 776.215773][ T2974] veth1_macvtap: left promiscuous mode [ 776.215876][ T2974] veth0_macvtap: left promiscuous mode [ 776.216148][ T2974] veth1_vlan: left promiscuous mode [ 776.216325][ T2974] veth0_vlan: left promiscuous mode [ 778.783563][ T2974] team0 (unregistering): Port device team_slave_1 removed [ 778.824384][ T2974] team0 (unregistering): Port device team_slave_0 removed [ 779.000999][ T2974] team0 (unregistering): Port device dummy0 removed [ 779.056832][T15688] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 779.490578][ T5608] Process accounting resumed [ 779.823910][ T5586] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 779.922783][ T9] usb 8-1: new full-speed USB device number 23 using dummy_hcd [ 780.082692][ T5586] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 780.082718][ T5586] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 780.082734][ T5586] usb 6-1: config 0 has no interface number 0 [ 780.082763][ T5586] usb 6-1: config 0 interface 255 has no altsetting 0 [ 780.082791][ T5586] usb 6-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 780.082811][ T5586] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.090793][ T5586] usb 6-1: config 0 descriptor?? [ 780.112683][ T9] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 780.112708][ T9] usb 8-1: config 0 has no interface number 0 [ 780.175260][ T9] usb 8-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 780.175282][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.175297][ T9] usb 8-1: Product: syz [ 780.175309][ T9] usb 8-1: Manufacturer: syz [ 780.175320][ T9] usb 8-1: SerialNumber: syz [ 780.264307][ T9] usb 8-1: config 0 descriptor?? [ 780.293933][ T9] usb 8-1: selecting invalid altsetting 1 [ 780.294092][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 780.294164][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 780.339648][ T5608] usb 6-1: USB disconnect, device number 29 [ 780.432728][ T31] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 780.587839][ T31] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 780.587889][ T31] usb 7-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 780.587914][ T31] usb 7-1: config 2 interface 0 has no altsetting 0 [ 780.593261][ T31] usb 7-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 780.593288][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.593305][ T31] usb 7-1: Product: syz [ 780.593317][ T31] usb 7-1: Manufacturer: syz [ 780.593330][ T31] usb 7-1: SerialNumber: syz [ 781.334024][T15734] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 781.995022][ T31] ims_pcu 7-1:2.0: Missing CDC union descriptor [ 781.995076][ T31] ims_pcu 7-1:2.0: probe with driver ims_pcu failed with error -22 [ 782.076998][ T31] usb 7-1: USB disconnect, device number 31 [ 782.112328][ T9] DVB: Unable to find symbol stv0299_attach() [ 782.325010][ T9] DVB: Unable to find symbol tda8083_attach() [ 782.325025][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 783.557980][ T5915] usb 8-1: USB disconnect, device number 23 [ 784.301413][T15312] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 784.339227][T15312] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 784.341960][T15312] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 784.724961][T15312] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 784.767678][T15312] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 785.006274][T15312] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 785.009777][T15312] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 785.094925][T15312] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 785.133128][ T36] audit: type=1326 audit(1784597414.026:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15775 comm="syz.7.2760" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f575a49de99 code=0x0 [ 785.419539][T15773] JFS: charset not found [ 785.626546][T15792] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2762'. [ 786.910843][T15312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 787.071555][T15312] 8021q: adding VLAN 0 to HW filter on device team0 [ 787.136599][ T5966] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.136730][ T5966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 787.323557][T15815] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 787.456681][ T5966] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.456809][ T5966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 789.242226][ T36] audit: type=1326 audit(1784597418.136:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15830 comm="syz.5.2770" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f155002de99 code=0x0 [ 789.548352][T15844] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2773'. [ 789.816757][ T36] audit: type=1326 audit(1784597418.706:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15852 comm="syz.6.2776" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a2a29de99 code=0x0 [ 789.880751][T15850] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2775'. [ 789.898075][T15850] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.326589][T15312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 790.592279][T15312] veth0_vlan: entered promiscuous mode [ 790.720425][T15312] veth1_vlan: entered promiscuous mode [ 792.034990][T15312] veth0_macvtap: entered promiscuous mode [ 792.082184][T15312] veth1_macvtap: entered promiscuous mode [ 792.137792][T15312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 792.251684][T15312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 792.348037][T12085] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.348628][T12085] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.352515][T12085] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.352555][T12085] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.994580][T15887] binder: 15886:15887 ioctl c0306201 200000000040 returned -22 [ 793.691031][T15897] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2786'. [ 793.957536][ T36] audit: type=1326 audit(1784597422.846:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15902 comm="syz.5.2788" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f155002de99 code=0x0 [ 793.982846][ T3903] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 793.982865][ T3903] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 794.523414][T15915] JFS: charset not found [ 794.910480][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 794.910499][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.281942][T15929] binder: 15927:15929 ioctl c0306201 200000000040 returned -22 [ 797.312805][ T5915] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 797.375185][T15946] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2798'. [ 797.399962][T15941] JFS: charset not found [ 797.472770][ T5915] usb 3-1: Using ep0 maxpacket: 8 [ 797.589033][ T5915] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 797.589060][ T5915] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 797.589078][ T5915] usb 3-1: config 0 has no interface number 0 [ 797.634289][ T5915] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 797.634317][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.634334][ T5915] usb 3-1: Product: syz [ 797.634346][ T5915] usb 3-1: Manufacturer: syz [ 797.634358][ T5915] usb 3-1: SerialNumber: syz [ 798.917978][ T5915] usb 3-1: config 0 descriptor?? [ 799.077946][ T5915] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 799.077978][ T5915] uvcvideo 3-1:0.31: No valid video chain found. [ 799.200994][ T5613] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 799.209712][ T36] audit: type=1326 audit(1784597428.096:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15954 comm="syz.7.2801" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f575a49de99 code=0x0 [ 799.306801][ T5613] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 799.358746][ T5613] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 799.371377][ T5613] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 799.377433][ T5613] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 799.469908][T15958] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2676'. [ 800.144407][ T5615] usb 3-1: USB disconnect, device number 14 [ 801.662773][ T5611] Bluetooth: hci1: command tx timeout [ 801.690761][T15988] binder: 15986:15988 ioctl c0306201 200000000040 returned -22 [ 801.865974][T15990] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2808'. [ 802.093980][T15996] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.2809'. [ 802.210954][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.302920][ T5915] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 802.462871][ T5915] usb 8-1: Using ep0 maxpacket: 16 [ 802.933719][ T5915] usb 8-1: unable to get BOS descriptor or descriptor too short [ 802.933797][ T5915] usb 8-1: no configurations [ 802.933808][ T5915] usb 8-1: can't read configurations, error -22 [ 803.106102][ T5608] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 803.113413][ T5792] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 803.133790][T16007] netlink: 'syz.5.2811': attribute type 10 has an invalid length. [ 803.133810][T16007] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2811'. [ 803.253702][ T5608] usb 7-1: too many configurations: 70, using maximum allowed: 8 [ 803.254950][ T5608] usb 7-1: config index 0 descriptor too short (expected 65505, got 72) [ 803.255964][ T5608] usb 7-1: config index 1 descriptor too short (expected 65505, got 72) [ 803.256957][ T5608] usb 7-1: config index 2 descriptor too short (expected 65505, got 72) [ 803.257980][ T5608] usb 7-1: config index 3 descriptor too short (expected 65505, got 72) [ 803.259330][ T5608] usb 7-1: config index 4 descriptor too short (expected 65505, got 72) [ 803.261730][ T5608] usb 7-1: config index 5 descriptor too short (expected 65505, got 72) [ 803.323300][ T5608] usb 7-1: config index 6 descriptor too short (expected 65505, got 72) [ 803.343022][ T5608] usb 7-1: config index 7 descriptor too short (expected 65505, got 72) [ 803.349372][ T5792] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 803.349397][ T5792] usb 3-1: config 0 has no interface number 0 [ 803.350285][ T5608] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 803.350308][ T5608] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.350325][ T5608] usb 7-1: Product: syz [ 803.350593][ T5608] usb 7-1: Manufacturer: syz [ 803.350602][ T5608] usb 7-1: SerialNumber: syz [ 803.351549][ T5792] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 803.351572][ T5792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.351589][ T5792] usb 3-1: Product: syz [ 803.351601][ T5792] usb 3-1: Manufacturer: syz [ 803.351611][ T5792] usb 3-1: SerialNumber: syz [ 803.448635][ T5608] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 803.468321][ T5792] usb 3-1: config 0 descriptor?? [ 803.526760][ T31] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 803.583304][ T5792] usb 3-1: selecting invalid altsetting 1 [ 803.583584][ T5792] dvb_ttusb_budget: ttusb_init_controller: error [ 803.583599][ T5792] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 803.631208][ T36] audit: type=1326 audit(1784597432.516:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16011 comm="syz.7.2812" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f575a49de99 code=0x0 [ 803.747201][ T5611] Bluetooth: hci1: command tx timeout [ 803.778749][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.346765][T16021] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 804.765628][ T5608] usb 7-1: USB disconnect, device number 32 [ 804.988661][T12751] ================================================================== [ 804.988677][T12751] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130 [ 804.988714][T12751] Read of size 8 at addr ffffc9001052b008 by task kworker/u8:26/12751 [ 804.988729][T12751] [ 804.988744][T12751] CPU: 0 UID: 0 PID: 12751 Comm: kworker/u8:26 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 804.988768][T12751] Tainted: [L]=SOFTLOCKUP [ 804.988774][T12751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 804.988786][T12751] Workqueue: events_unbound cfg80211_wiphy_work [ 804.988814][T12751] Call Trace: [ 804.988821][T12751] [ 804.988829][T12751] dump_stack_lvl+0xe8/0x150 [ 804.988854][T12751] print_address_description+0x55/0x1e0 [ 804.988887][T12751] ? __list_add_valid_or_report+0x4e/0x130 [ 804.988910][T12751] print_report+0x58/0x70 [ 804.988932][T12751] kasan_report+0x117/0x150 [ 804.988950][T12751] ? rcu_is_watching+0x15/0xb0 [ 804.988971][T12751] ? __list_add_valid_or_report+0x4e/0x130 [ 804.989000][T12751] __list_add_valid_or_report+0x4e/0x130 [ 804.989025][T12751] kcov_remote_stop+0x457/0x680 [ 804.989048][T12751] ? ieee80211_iface_work+0x259/0x1010 [ 804.989070][T12751] ieee80211_iface_work+0x25e/0x1010 [ 804.989093][T12751] cfg80211_wiphy_work+0x29e/0x420 [ 804.989116][T12751] ? process_scheduled_works+0xa20/0x14e0 [ 804.989136][T12751] process_scheduled_works+0xa8e/0x14e0 [ 804.989166][T12751] ? __pfx_process_scheduled_works+0x10/0x10 [ 804.989187][T12751] ? assign_work+0x3cf/0x5d0 [ 804.989208][T12751] worker_thread+0xa47/0xfb0 [ 804.989233][T12751] ? __kthread_parkme+0x71/0x1f0 [ 804.989257][T12751] kthread+0x388/0x470 [ 804.989277][T12751] ? __pfx_worker_thread+0x10/0x10 [ 804.989294][T12751] ? __pfx_kthread+0x10/0x10 [ 804.989316][T12751] ret_from_fork+0x514/0xb70 [ 804.989340][T12751] ? __pfx_ret_from_fork+0x10/0x10 [ 804.989361][T12751] ? __switch_to+0xc89/0x1420 [ 804.989381][T12751] ? __pfx_kthread+0x10/0x10 [ 804.989402][T12751] ret_from_fork_asm+0x1a/0x30 [ 804.989425][T12751] [ 804.989431][T12751] [ 804.989436][T12751] The buggy address belongs to a vmalloc virtual mapping [ 804.989451][T12751] Memory state around the buggy address: [ 804.989461][T12751] ffffc9001052af00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 804.989472][T12751] ffffc9001052af80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 804.989483][T12751] >ffffc9001052b000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 804.989491][T12751] ^ [ 804.989500][T12751] ffffc9001052b080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 804.989511][T12751] ffffc9001052b100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 804.989518][T12751] ================================================================== [ 804.989537][T12751] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 804.989551][T12751] CPU: 0 UID: 0 PID: 12751 Comm: kworker/u8:26 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 804.989575][T12751] Tainted: [L]=SOFTLOCKUP [ 804.989581][T12751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 804.989592][T12751] Workqueue: events_unbound cfg80211_wiphy_work [ 804.989614][T12751] Call Trace: [ 804.989621][T12751] [ 804.989627][T12751] vpanic+0x56c/0xa60 [ 804.989645][T12751] ? __pfx_vpanic+0x10/0x10 [ 804.989664][T12751] panic+0xc5/0xd0 [ 804.989679][T12751] ? __pfx_panic+0x10/0x10 [ 804.989696][T12751] ? __list_add_valid_or_report+0x4e/0x130 [ 804.989725][T12751] ? __list_add_valid_or_report+0x4e/0x130 [ 804.989749][T12751] check_panic_on_warn+0x89/0xb0 [ 804.989773][T12751] ? __list_add_valid_or_report+0x4e/0x130 [ 804.989796][T12751] end_report+0x73/0x170 [ 804.989814][T12751] ? __list_add_valid_or_report+0x4e/0x130 [ 804.989838][T12751] kasan_report+0x128/0x150 [ 804.989855][T12751] ? rcu_is_watching+0x15/0xb0 [ 804.989880][T12751] ? __list_add_valid_or_report+0x4e/0x130 [ 804.989908][T12751] __list_add_valid_or_report+0x4e/0x130 [ 804.989933][T12751] kcov_remote_stop+0x457/0x680 [ 804.989957][T12751] ? ieee80211_iface_work+0x259/0x1010 [ 804.989978][T12751] ieee80211_iface_work+0x25e/0x1010 [ 804.990004][T12751] cfg80211_wiphy_work+0x29e/0x420 [ 804.990026][T12751] ? process_scheduled_works+0xa20/0x14e0 [ 804.990044][T12751] process_scheduled_works+0xa8e/0x14e0 [ 804.990074][T12751] ? __pfx_process_scheduled_works+0x10/0x10 [ 804.990096][T12751] ? assign_work+0x3cf/0x5d0 [ 804.990117][T12751] worker_thread+0xa47/0xfb0 [ 804.990142][T12751] ? __kthread_parkme+0x71/0x1f0 [ 804.990166][T12751] kthread+0x388/0x470 [ 804.990188][T12751] ? __pfx_worker_thread+0x10/0x10 [ 804.990206][T12751] ? __pfx_kthread+0x10/0x10 [ 804.990229][T12751] ret_from_fork+0x514/0xb70 [ 804.990254][T12751] ? __pfx_ret_from_fork+0x10/0x10 [ 804.990276][T12751] ? __switch_to+0xc89/0x1420 [ 804.990297][T12751] ? __pfx_kthread+0x10/0x10 [ 804.990320][T12751] ret_from_fork_asm+0x1a/0x30 [ 804.990343][T12751] [ 804.990664][T12751] Kernel Offset: disabled