last executing test programs: 4m57.558401546s ago: executing program 3 (id=40): syz_open_procfs(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0xa, &(0x7f0000000040)={0x0, 0xc8a1, 0x7581, 0x8, 0x315}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="b00000", 0x3}], 0x1}, 0x4000000) preadv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) unshare(0x20060400) fsync(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x16}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x20, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1a, 0x1, "10c4e3257eaa66a5725a38cd58d26115453baa910be0"}]}]}]}]}], {0x14, 0x10}}, 0xd4}}, 0x0) rename(0x0, &(0x7f00000000c0)='./file0\x00') mq_open(&(0x7f0000000000)='bat\x13\x1b\r\xcbs\xecave_5\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8d00, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40046f41, &(0x7f0000000540)=0x1f) 4m56.386901369s ago: executing program 3 (id=47): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x40a00, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040844) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f00003b6000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1e64, &(0x7f0000000040)={0x0, 0xc89a, 0xc000, 0x7fff, 0x65}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4m55.936964018s ago: executing program 3 (id=50): epoll_create(0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x81001) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xffdffe0000000001, 0x401, 0xffffffff}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{0x0}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x20004, 0xffffffffffffffff, 0x80000}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='schedstat\x00') preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000bc0)={{0xfd, 0x1}, {0xe}, 0x2005, 0xbfbf}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000001070101000000000000001b01000009140007800800014000000006080002"], 0x28}, 0x1, 0x0, 0x0, 0x804c}, 0xc080) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31384142, 0x0, @stepwise={0x0, 0x400}}) syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) 4m51.638289366s ago: executing program 3 (id=60): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x149000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, 0x3f, 0x4, 0x70bd28, 0x25dfdbff, {0x16}}, 0x14}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r4, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a24b9f00182b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x6c, 0x7, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x80000001}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x10000}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7fff}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000004) setpgid(r6, 0x0) setpgid(0x0, r6) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0x400}}, @enum64={0xf, 0x1, 0x0, 0x13, 0x1, 0x4, [{0x2, 0x2, 0x4}]}, @func={0x1000001, 0x0, 0x0, 0xc, 0x5}, @volatile={0x0, 0x0, 0x0, 0x9, 0xffffffff}, @volatile, @func={0x9, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x7c}, 0x28) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000840)={r2, &(0x7f0000000480)='#\'(\x00', 0x210040, &(0x7f0000000700)={@align=0x6, {0x5, 0x6, 0xfffffff4, 0x6}}, 0x2, &(0x7f0000000740)={@_ha_fsid}, &(0x7f0000000800)=0x3}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0x0, 0x10000, @value=r7}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) ioctl$BTRFS_IOC_ENCODED_READ(r7, 0x80809440, &(0x7f0000001c00)={&(0x7f0000001b80)=[{&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000001880)}, {&(0x7f00000018c0)="6fb8e4273fb3546a289c5c48db5438f430e814a0c5490d48fc1e4c5d935d66f3e4509355ea1c6f06a2892d9d2b2ce9a2d8db552ed95d7891f010799657414b0f7418da6265c888a6bd48991cfe2869906e330684235c47753cc7ab7a", 0x5c}, {&(0x7f0000001940)="3a4262915d4064a9495a46f3e38ff467fc45b4513157", 0x16}, {0x0}, {&(0x7f0000001ac0)="8ae4e05953ec278ba7b42abe85a3fa689d32e28a67b1a577ad8cb1321ea32d19b7dc76a1e5abe8e879c31b4997211916430363de13af88257c8ad77fbd74e6a1a1b66667adb88a8931f9fddf5cd6dcf7fc825841d1c5e59a6a124c5e3912b66c4f3f562ff9d0a43e17c2bce0abe912e60046bc34ab23455c0851730ec1d9c368ac265c6c7392c90938ea5f2feb923ae6b834c85960652597942ba747bf0343514d595343398b7171", 0xa8}], 0x6, 0x1, 0x0, 0x5, 0x7ff, 0x3, 0x3, 0x1}) r9 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) copy_file_range(r3, &(0x7f0000000000)=0x4, r1, &(0x7f0000000100)=0x6, 0x10001, 0x0) ptrace$ARCH_MAP_VDSO_32(0x1e, r6, 0x1, 0x2002) ioctl$AUTOFS_IOC_READY(r9, 0x9360, 0x800000000000001) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000440)={0x1, 0x9, 0x1, 0x0}) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000200)) 4m50.84079624s ago: executing program 3 (id=62): r0 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d2407010604000000000000e90924030000000001"], 0x0) syz_usb_control_io(r2, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000400)={0x40, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000740)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x81, 0x1, 'E'}, 0x0, 0x0, 0x0, 0x0}) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000000)=0xa5) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x4, 0x9, 0x6, 0xb, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, @empty, 0x0, 0x8, 0x9, 0x7}}) sendmsg$nl_route(r1, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=@delneigh={0x40, 0x1d, 0x2, 0x70bd2b, 0x25dfdbfe, {0x7, 0x0, 0x0, r4, 0x40, 0x24, 0xa}, [@NDA_LINK_NETNSID={0x8, 0xa, 0x1}, @NDA_PROTOCOL={0x5}, @NDA_VNI={0x8, 0x7, 0x100}, @NDA_DST_MAC={0xa, 0x1, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'/20, @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000003"], 0x98) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0, 0xffff0000}, 0x48) r6 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000400)={0x80000000, 0x0, &(0x7f0000000000)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000280)={r7, 0x0, &(0x7f0000000080)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000100)={{0x80000000, 0x0, 0x0, [0x3, 0x7]}, {0x80000000, r8, 0x6, [0xa, 0xf7]}, 0x4, [0x7, 0x80000007]}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbee, {0x0, 0x0, 0x0, 0x0, 0x40c35}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PROTECT={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r11}]}, 0x44}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 4m50.439532834s ago: executing program 3 (id=66): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x1, 0x100000, 0x2000, &(0x7f00005e5000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x3f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0x0) ftruncate(r1, 0x51a9497) userfaultfd(0x80001) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}}], 0x1, 0x9880) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000140)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000240), 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x9f634221288b0807, 0x0, {[0xa, 0x0, 0xab32, 0x9, 0x200000000000001, 0x100000001, 0x1, 0x3]}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r4, 0x29, 0x1a, 0x0, &(0x7f0000000040)) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@local, @loopback, @empty}, 0xc) 4m50.066585646s ago: executing program 32 (id=66): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x1, 0x100000, 0x2000, &(0x7f00005e5000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x3f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0x0) ftruncate(r1, 0x51a9497) userfaultfd(0x80001) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}}], 0x1, 0x9880) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000140)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000240), 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x9f634221288b0807, 0x0, {[0xa, 0x0, 0xab32, 0x9, 0x200000000000001, 0x100000001, 0x1, 0x3]}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r4, 0x29, 0x1a, 0x0, &(0x7f0000000040)) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@local, @loopback, @empty}, 0xc) 16.831191665s ago: executing program 1 (id=914): timer_create(0x7, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x804d) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002e00090027bd7000fedbdf250400000010001a"], 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x40084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000580)}, 0x0) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000580)={'pcl812\x00', [0x8001, 0x3, 0x4, 0x4, 0xedc5, 0xfffffffc, 0x2, 0x7, 0x1, 0x6, 0x200060, 0x1, 0x8, 0x2, 0x6, 0x8, 0x1, 0x5, 0x43, 0x547, 0x89, 0x10c, 0xfa7, 0x4, 0xd, 0x8, 0x5, 0x6, 0x8, 0xbf, 0xffffffb4]}) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0xfffffffffffffffe, 0x0, 0x9}) 12.520994525s ago: executing program 1 (id=922): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafc0d8c560a8447608004000000000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r2, 0x802c550a, 0x0) r3 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000000c0)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x9, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0xffff}}}}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d0008000c0000000005000000", 0x29}], 0x1) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000003c0)={0x20, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20024810}, 0x14) 11.294668208s ago: executing program 5 (id=926): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) accept4$x25(0xffffffffffffffff, &(0x7f00000001c0)={0x9, @remote}, &(0x7f00000002c0)=0x12, 0x80000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {}, {0xb, 0xb}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x20018041}, 0x4008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000340), 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x0, 0x2, 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f00000000c0)='ceph\x00', 0x0, &(0x7f0000000bc0)="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", 0x12d, r5) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043eae0f"], 0xd) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) 10.759989533s ago: executing program 2 (id=928): eventfd2(0x43, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[]) sendmmsg$inet(r4, &(0x7f0000006640)=[{{&(0x7f0000000a40)={0x2, 0x4e20, @broadcast}, 0x10, 0x0}}, {{&(0x7f0000001fc0)={0x2, 0x4e20, @broadcast}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4000020) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x11, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100037040400"/20, @ANYRES32=0x0, @ANYBLOB="830405000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="0004000002800000775b8928522b5e8e"], 0x48}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000002080)={0xc, {"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", 0x94a}}, 0x1006) r7 = syz_open_procfs(0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000000)=0x1, 0x4) landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) pread64(r7, &(0x7f0000002140)=""/17, 0x11, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) syz_open_dev$sndctrl(&(0x7f0000000040), 0x3, 0x0) 10.592264763s ago: executing program 5 (id=929): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newtaction={0x4ac, 0x30, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [{0x4}, {0x3c0, 0x1, [@m_tunnel_key={0x50, 0x4, 0x0, 0x0, {{0xf}, {0x4}, {0x1d, 0x6, "a1a3a121dedd1221d975ef956d032788fd0392a0787ac63500"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ct={0x128, 0x1a, 0x0, 0x0, {{0x7}, {0x58, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x1ff}, @TCA_CT_PARMS={0x18, 0x1, {0x5, 0x0, 0x20000000, 0x10}}, @TCA_CT_ZONE={0x6, 0x4, 0x4}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e1f}, @TCA_CT_ZONE={0x6, 0x4, 0x30}, @TCA_CT_LABELS={0x14, 0x7, "2f20e02df391e824ead989a105f00e74"}, @TCA_CT_MARK={0x8, 0x5, 0x8}]}, {0xa9, 0x6, "511bc28ed634eda200c153ebc8d9295a17366b529d737947cbe368b6a81121335032746da41c819efc2245f9714e21a26f981bbfe05963c579ac696b548673c431a3035252c26e0760f1dbf07ae398f8302217fffb386127ff8904a5a127a5b1c10098c20b55a55b76447d31d88da5336701a5654abacef02d0ffcd44af94d4d6c40e9450c64f808119f234cda97cdbc1d1148711cb7da37b902691c00f2f3a31124eda63c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0x138, 0x6, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x1000, 0x4, 0x9}, 0x2a}}]}, {0xee, 0x6, "f32d87591e59e11e04689c1146c991413a03c8b18c59693cae6806983aa84607a0e1b361faf098524523d44edbfb8828aa9ddc9d97610a022e560871c90bca26041aad2e1c0d2381261ecd48074883e79a9e3837ca0f51ddf83f9117fc394f8d5be66caa714c0b7c1ac8bdb188186367fad199af0a436c21784598c4ea6d0c5f1eb00405502f1145b26e464fec46d2275ced3907cce2054504a12a3006a6ee8148ac4585bb1dc51e237f52d5d55df1727084e39932dba094b7f3870810d796e8aa33c82fb52f0541d3a5b56952d85c319c523be37a7afaae84f5ca99e480d9c24130a80afa402da06b82"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_csum={0x10c, 0xb, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x7, 0x2, 0x3ff, 0x10}, 0x2d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xd, 0x1, 0x6, 0x0, 0x7}, 0x23}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x5, 0x10000000, 0x6, 0x3}, 0x5}}]}, {0x89, 0x6, "1c16c96694f381746c209fc9f3adb2b32bd6521021b40ecc28de4f9a7d1d7252654a68984fc6acdbf363b3bd5762b19b5ee45b7681c06e1584f35de648bfcbd4484832160389f92481d4dbd903368671acf42af590da67a994099dcdf5710da83a17f01027aa42b426df404753b5fc6be057aeb4eaa603ba227fea3a1584bb3771e96e369a"}, {0xc}, {0xc, 0x8, {0x3}}}}]}, {0xd4, 0x1, [@m_ctinfo={0xd0, 0xf, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x1000, 0x3, 0x2, 0x2b4000}}, @TCA_CTINFO_ACT={0x18, 0x3, {0xe6fa, 0x3, 0x20000000, 0x7, 0x41}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8001}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x81}]}, {0x5c, 0x6, "488d4271db46ec63905fc1cfc9d21928d5041174c9792372f32d4896b9512ff3fcc40084c83cb5f93c9e06ac913251076e75be1dda76386a4a14f52519019329573edcf09a3061c6ad8e494bb54841d8f6aba9bb853cdf39"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x4ac}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xffe0, 0xfff3}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0xbbf6}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x5) getuid() sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="28000000200081dc000000000300000002000000000000031f0000000c001400", @ANYRES32=r9], 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x44004) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) 9.716361545s ago: executing program 2 (id=930): syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0x2000775) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = getpid() syz_pidfd_open(r3, 0x0) socket$alg(0x26, 0x5, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000180)=0x589) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 9.572371458s ago: executing program 5 (id=931): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x6, r1, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000}) r2 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r2, &(0x7f00000000c0), &(0x7f0000000100)=0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r1}) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000240)={0x3, 0x9, 0x0, &(0x7f0000000200)}) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4e24, @empty}, 0x10) ioctl$IOMMU_VFIO_GET_API_VERSION(r0, 0x3b64) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f00000002c0)={0x18, 0x1, 0x1, 0x0, r1, 0x4}) syz_emit_ethernet(0x1f, &(0x7f0000000300)={@multicast, @empty, @val={@val={0x88a8, 0x3, 0x0, 0x4}, {0x8100, 0x2, 0x1, 0x1}}, {@generic={0x8864, "aef131925ee4e11058"}}}, &(0x7f0000000340)={0x0, 0x3, [0x4a8, 0x85d, 0x823, 0x2e]}) sendto$inet(r2, &(0x7f0000000380)="26fefbfc8dbccdc91c3ac9bb28496506af37a0a9c33b69873bb3b47135cff92a", 0x20, 0x4080c, &(0x7f00000003c0)={0x2, 0x4e24, @empty}, 0x10) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000400)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000440)={0x13}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl0\x00', &(0x7f0000000500)={'sit0\x00', 0x0, 0x7, 0x0, 0x8, 0x4, {{0x3c, 0x4, 0x3, 0x1, 0xf0, 0x64, 0x0, 0x7, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x3e}, {[@cipso={0x86, 0x40, 0x0, [{0x6, 0xf, "66062e80970e444483ad26eb57"}, {0x0, 0x10, "2ca447702d144129b3ab10458828"}, {0x6, 0x10, "aa05ae937e995f2713e14fa195c0"}, {0x7, 0xb, "649c9d6940cd9ad671"}]}, @rr={0x7, 0xb, 0x68, [@empty, @remote]}, @end, @timestamp={0x44, 0x20, 0xd6, 0x0, 0x1, [0x4, 0x1, 0x80000001, 0x3, 0x2, 0x1, 0x23]}, @ra={0x94, 0x4}, @generic={0x83, 0x12, "49df656a49640ff6c5a2288cad3ae4d0"}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xf, 0xc9, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @local]}, @cipso={0x86, 0x45, 0x1, [{0x1, 0x12, "67136370eb28cc449b636c82cf447ec6"}, {0x6, 0xd, "fe499b6d2fe4fd31802afc"}, {0x0, 0x2}, {0x7, 0x2}, {0x2, 0xf, "3cd5028920cf25ad9c4c9f0b9b"}, {0x7, 0xd, "5c4624d457a53cd913486d"}]}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000ac0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000680)={0x3e0, r5, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1a8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x3c, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x11, 0x5, "ceb24f1f82fb479928e049e5d1"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_BITS={0x50, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x33f}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_VALUE={0x97, 0x4, "024de9f0def3f754dc0f39771d1ca7719a672e9fc3d4a10d4a1c115847ad7e770f0176ccfae4fb407a6f20c773251d5285c919bae2b535457e2cd6458d82b237550e5c33007e94312f9485e0033481eaed52f7079a9c5558762a0ce34372444422a804a4ee65f010d35151d429652f7247d916d716c7850b677ad303bb8b8c58506a334e8b1a1c68df8d1c89199bb5015c52df"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_MASK={0x4f, 0x5, "c2b325c471e45a7b4bcad12e0a48a829040b7f6eb30c06421071f4f6956f62b6256aa9175b9f67dfcdedf7e6f9bde2a54c16ece17805a5b8f2847a3bcfea574e1208e00bdb245b25360794"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x100, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xfc, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '/selinux/load\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '/selinux/load\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, ':\':-#\x9a^-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe847}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xbb\xbb\xbb\xbb\xbb\xbb'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '/@#-(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '-{#!%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xd4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xc4, 0x4, "fb3af688099b90a3a06924a83de6bec2754120db18f93f90fc89699db61d5ffc8c24b264963ef71d8254ee92fb1d432b5a9aaae8b4705560437c571fcdddfa64f043dddeb0b83d20cde7fb6dc90ed38a7ff607adeda7e7b20eedd02153e729fe6cfe31a1b1a2066b98276feff4b7ac4e9410764b8d58544cac82db38c3f55b17613c4c66a3a2016d3e2c359ae8b7d4219e12c2d751692862ed89be35093ebd1af09ad99b4f3ef5bcb6c3ce4f655cdc978f8b077b3b2e32574b00b8efaf1ed800"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x3e0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r7, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x20, 0x140e, 0x2, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x8040080}, 0x20000000) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000c00)={'\x00', 0x1, 0xa0, 0x4, 0x940b, 0x8001, 0x0}) sched_setscheduler(r8, 0x0, &(0x7f0000000c80)) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000cc0), 0xc0, 0x0) ioctl$PPPIOCSMRRU(r9, 0x4004743b, &(0x7f0000000d00)=0x3) sendfile(r3, 0xffffffffffffffff, &(0x7f0000000d40)=0xdec8, 0x40) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r10 = msgget$private(0x0, 0x200) msgctl$IPC_STAT(r10, 0x2, &(0x7f0000000d80)=""/136) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000e40)={{{@in6=@ipv4, @in=@initdev}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000f40)=0xe8) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001100)={&(0x7f0000001000)={0xd4, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:xen_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:tetex_data_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0xd4}, 0x1, 0x0, 0x0, 0x800}, 0x4804) 9.247414898s ago: executing program 2 (id=932): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafc0d8c560a8447608004000000000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r2, 0x802c550a, 0x0) r3 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1b4c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0xc, 0x3, 0x0, 0x4, 0x0, {0x9, 0x21, 0x20, 0x0, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0x8, 0x45}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d0008000c0000000005000000", 0x29}], 0x1) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000003c0)={0x20, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20024810}, 0x14) 9.184695563s ago: executing program 1 (id=934): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000080), 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r1, 0x802c550a, 0x0) r2 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000000c0)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x9, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0xffff}}}}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) 9.184246003s ago: executing program 5 (id=935): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x4) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b010902"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1b4c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0xc, 0x3, 0x0, 0x4, 0x0, {0x9, 0x21, 0x20, 0x0, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0x8, 0x45}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000000c0)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x9, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0xffff}}}}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d0008000c0000000005000000", 0x29}], 0x1) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 8.907906975s ago: executing program 0 (id=937): r0 = io_uring_setup(0x7a76, &(0x7f0000000180)={0x0, 0xaefa, 0x0, 0x40}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file3\x00', &(0x7f0000000080)={0x8080, 0x0, 0x30}, 0x18) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000080)=0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000180)=@mmap={0x0, 0x2, 0x4, 0x800, 0x81, {0x0, 0xea60}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5, 0x1, {}, 0x1}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x2000) ioctl$SNDRV_PCM_IOCTL_FORWARD(r2, 0x40084149, &(0x7f0000000040)=0x9) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f0000000200)={0x4, "ca4d2d448b292c1bf13c9820d8b4b660d24cb83fd6c27f9124e1d375d01f792b2f3321f1e30ba3f48b95bb0f24d3ce10fe7c884ba99de95e01ac96fdd9dfc90a", {0x4, 0x9}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r1) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) socket$inet6(0xa, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8.544049s ago: executing program 0 (id=938): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000003c0)={'pcmda12\x00', [0x4f22, 0x2, 0x80001, 0x0, 0x1, 0x5, 0x4, 0xd287, 0x8, 0xfd, 0x8, 0x23, 0x4, 0x1, 0x9, 0x101, 0xf7fffffe, 0x6d, 0x2, 0x1, 0x8, 0x927, 0xeb96, 0x401, 0xfc000, 0xe69, 0x6, 0x10008, 0x1, 0x1cdc, 0xfbfffff8]}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x10000}]}, &(0x7f00000001c0)='syzkaller\x00', 0x81, 0xad, &(0x7f00000000c0)=""/173, 0x41100, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000500)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, r1], &(0x7f0000000200)=[{0x5, 0x5, 0x9, 0x2}, {0x4, 0x5, 0x2, 0x8}, {0x0, 0x5, 0x4, 0x2}], 0x10, 0xc11b}, 0x94) r2 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) write$tcp_mem(r2, &(0x7f0000000340)={0x900000000, 0x20, 0x8, 0x20, 0x5}, 0x48) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010023d5a3010000340200000200000008000100", @ANYRES32=r4, @ANYBLOB], 0x1c}}, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, 0x0, 0x0, 0x400000) futex(&(0x7f000000cffc), 0x4, 0x0, &(0x7f0000fd7ff0), &(0x7f0000048000)=0x1, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200040d0}, 0x40) msgget$private(0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r7, &(0x7f0000004a00)={0x2020}, 0x2020) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24008004) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r7, 0x5000943f, &(0x7f0000003a00)={{}, 0x0, 0x8, @unused=[0x8b, 0xfff, 0x9], @subvolid=0x4}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x3a) 7.292725993s ago: executing program 0 (id=942): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r2, 0x802c550a, 0x0) r3 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1b4c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0xc, 0x3, 0x0, 0x4, 0x0, {0x9, 0x21, 0x20, 0x0, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0x8, 0x45}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000000c0)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x9, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0xffff}}}}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d0008000c0000000005000000", 0x29}], 0x1) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000003c0)={0x20, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20024810}, 0x14) 6.368923432s ago: executing program 4 (id=943): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="4c330c000400000082931d00f1ffffff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2}, 0x94) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r2, 0x80047453, 0xffffffffffffffff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x424a00, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={@multicast1, 0x1, 0x0, 0x40, 0x0, [{@remote}, {}, {@empty}, {@empty}]}}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r3, 0x7a6, &(0x7f0000000080)={0x45754784, 0x5, 0x7f, 0x4, 0x2938, 0x100}) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x2, 0x0, {0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10001}}}, 0x32) epoll_create1(0x80000) r4 = socket$netlink(0x10, 0x3, 0x8) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000005580)=""/102392, 0x18ff8) r6 = syz_open_dev$vivid(0x0, 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0xe) sendmsg$NFNL_MSG_CTHELPER_GET(r4, 0x0, 0x240080c0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) socket(0xa, 0x1, 0x0) 6.349932751s ago: executing program 1 (id=944): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000080), 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r2, 0x802c550a, 0x0) r3 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1b4c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0xc, 0x3, 0x0, 0x4, 0x0, {0x9, 0x21, 0x20, 0x0, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0x8, 0x45}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000000c0)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x9, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0xffff}}}}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d0008000c0000000005000000", 0x29}], 0x1) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000003c0)={0x20, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20024810}, 0x14) 6.076314487s ago: executing program 5 (id=945): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafc0d8c560a8447608004000000000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r2, 0x802c550a, 0x0) r3 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000000c0)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x9, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0xffff}}}}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d0008000c0000000005000000", 0x29}], 0x1) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000003c0)={0x20, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20024810}, 0x14) 5.561107402s ago: executing program 2 (id=946): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) readv(r0, 0x0, 0x0) socket(0x10, 0x3, 0x0) setfsgid(0xee00) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000020c0)) keyctl$chown(0x4, r1, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000002140)='maps\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(r2, &(0x7f0000000080)={0x2020}, 0x2020) 5.489061971s ago: executing program 4 (id=947): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bind$qrtr(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0xff00, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 4.264022342s ago: executing program 2 (id=948): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102384, 0x18ff0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) sched_getattr(r2, &(0x7f0000000040)={0x38}, 0x38, 0x0) getrlimit(0xd, 0x0) sched_getattr(r2, &(0x7f00000000c0)={0x38}, 0x38, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a01020000000000000000020000090900010073797a300000000074000000160a030000000000000000000200000a4000038008000140000000002c00038014000100776c616e3000000000000000000000001400010070696d3672656731000000000000000008000240000000020900020073797a31000000000900010073797a30000000000800074000000001"], 0xbc}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfbffff1d, 0x1}}, './file0\x00'}) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x97}, [{0x9, 0x0, 0x4}, {0x7d}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc9d1}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, {0x448eade7, 0x3}, {0x0, 0x0, 0x80000000}, {}, {0x0, 0x0, 0x0, 0x2000}, {0x0, 0x0, 0x0, 0x0, 0x400}, {}, {}, {0x0, 0xfffffffe, 0x0, 0x4000000}, {0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x8001}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x80000}, {0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, {}, {0x0, 0x0, 0x100}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xfffffffc}, {}, {}, {}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0xfffffffe, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xd5}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x7bf}, {0x0, 0x10}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x800, 0x6}, {0x0, 0x3}, {}, {0x0, 0x0, 0x80000000, 0x3}, {}, {}, {0x0, 0x5, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {0xffffffff}, {}, {}, {0x0, 0x0, 0x31e9}, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x3}, {}, {0xf4, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffe}, {0x0, 0x800000}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {}, {}, {}, {}, {}, {0xa7}, {0x0, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x6}, {}, {0x0, 0x0, 0x1000}, {0x0, 0x7ff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {}, {}, {}, {0x4, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x10000000}, {}, {}, {}, {}, {}, {}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x4}, {0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x5}, {}, {}, {}, {0x5}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r6, &(0x7f0000009780)={0x2020}, 0x2020) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(r7) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000840)={0x10, 0xffffffda, 0x3}, 0x10) 4.010469967s ago: executing program 4 (id=949): r0 = socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) r2 = syz_clone(0x10000000, &(0x7f00000022c0)="b8f0fb7493c916fc5a320e66b6567feee800aad43cd6090dcf6c07337b7bb0ac766e29a87eff02311a35f031d2d0bed407772f3abc6a347685b2c84fbb3cc88ceba8fe9a0a766cc4ee08102c97", 0x4d, &(0x7f0000002340), &(0x7f0000002380), &(0x7f00000023c0)="93000b5dc31ef521eec616653e9ac327e9161951c778ba5240af36b584af9d4be833671cad61db0b475b8b7326cf030613e69c98ee0c9d3b5fc987cdd1c7122ea05ad95d4b7936d262a677c3455fbc40713e24f4bba13ff821bec2e1a7c215aedc0dae742cbb919ef3b8142ed5ebf39588f51fab095d9ad29858e96bec1477ed39") ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000002480)=0x0) rt_tgsigqueueinfo(r2, r3, 0x19, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(&(0x7f0000002740), 0x80080) r6 = fsopen(&(0x7f0000002240)='omfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000000200)={0x2020}, 0x2020) mount(0x0, 0x0, &(0x7f0000000180)='tmpfs\x00', 0x2204c96, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f00000001c0)='\x00', 0x0, r8) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r9, 0xfffd, 0x0) socket$inet6(0xa, 0x2, 0x0) r10 = socket(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x3}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x5a}, 0x20) write(r10, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00ff0300"]}, 0x108) 3.098401374s ago: executing program 4 (id=950): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) accept4$x25(0xffffffffffffffff, &(0x7f00000001c0)={0x9, @remote}, &(0x7f00000002c0)=0x12, 0x80000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {}, {0xb, 0xb}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x20018041}, 0x4008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000340), 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x0, 0x2, 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f00000000c0)='ceph\x00', 0x0, &(0x7f0000000bc0)="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", 0x12d, r5) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043eae0f"], 0xd) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) 2.825584942s ago: executing program 0 (id=951): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') pread64(r1, &(0x7f000001a240)=""/102399, 0x18fff, 0x100008) 2.609223031s ago: executing program 4 (id=952): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) recvmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x218}, 0x7b}], 0x1, 0x2, 0x0) 2.443945501s ago: executing program 5 (id=953): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_create(0x0, 0x0, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000000380)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x22201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000"], 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000000000000000000000003fd019f6ab0c10954cb9b3afcc0aa080f7f7f013f0ef27d01493f783f725a29caf1caa0bf1024b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 2.243157569s ago: executing program 0 (id=954): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newtaction={0x4ac, 0x30, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [{0x4}, {0x3c0, 0x1, [@m_tunnel_key={0x50, 0x4, 0x0, 0x0, {{0xf}, {0x4}, {0x1d, 0x6, "a1a3a121dedd1221d975ef956d032788fd0392a0787ac63500"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ct={0x128, 0x1a, 0x0, 0x0, {{0x7}, {0x58, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x1ff}, @TCA_CT_PARMS={0x18, 0x1, {0x5, 0x0, 0x20000000, 0x10}}, @TCA_CT_ZONE={0x6, 0x4, 0x4}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e1f}, @TCA_CT_ZONE={0x6, 0x4, 0x30}, @TCA_CT_LABELS={0x14, 0x7, "2f20e02df391e824ead989a105f00e74"}, @TCA_CT_MARK={0x8, 0x5, 0x8}]}, {0xa9, 0x6, "511bc28ed634eda200c153ebc8d9295a17366b529d737947cbe368b6a81121335032746da41c819efc2245f9714e21a26f981bbfe05963c579ac696b548673c431a3035252c26e0760f1dbf07ae398f8302217fffb386127ff8904a5a127a5b1c10098c20b55a55b76447d31d88da5336701a5654abacef02d0ffcd44af94d4d6c40e9450c64f808119f234cda97cdbc1d1148711cb7da37b902691c00f2f3a31124eda63c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0x138, 0x6, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x1000, 0x4, 0x9}, 0x2a}}]}, {0xee, 0x6, "f32d87591e59e11e04689c1146c991413a03c8b18c59693cae6806983aa84607a0e1b361faf098524523d44edbfb8828aa9ddc9d97610a022e560871c90bca26041aad2e1c0d2381261ecd48074883e79a9e3837ca0f51ddf83f9117fc394f8d5be66caa714c0b7c1ac8bdb188186367fad199af0a436c21784598c4ea6d0c5f1eb00405502f1145b26e464fec46d2275ced3907cce2054504a12a3006a6ee8148ac4585bb1dc51e237f52d5d55df1727084e39932dba094b7f3870810d796e8aa33c82fb52f0541d3a5b56952d85c319c523be37a7afaae84f5ca99e480d9c24130a80afa402da06b82"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_csum={0x10c, 0xb, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x7, 0x2, 0x3ff, 0x10}, 0x2d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xd, 0x1, 0x6, 0x0, 0x7}, 0x23}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x5, 0x10000000, 0x6, 0x3}, 0x5}}]}, {0x89, 0x6, "1c16c96694f381746c209fc9f3adb2b32bd6521021b40ecc28de4f9a7d1d7252654a68984fc6acdbf363b3bd5762b19b5ee45b7681c06e1584f35de648bfcbd4484832160389f92481d4dbd903368671acf42af590da67a994099dcdf5710da83a17f01027aa42b426df404753b5fc6be057aeb4eaa603ba227fea3a1584bb3771e96e369a"}, {0xc}, {0xc, 0x8, {0x3}}}}]}, {0xd4, 0x1, [@m_ctinfo={0xd0, 0xf, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x1000, 0x3, 0x2, 0x2b4000}}, @TCA_CTINFO_ACT={0x18, 0x3, {0xe6fa, 0x3, 0x20000000, 0x7, 0x41}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8001}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x81}]}, {0x5c, 0x6, "488d4271db46ec63905fc1cfc9d21928d5041174c9792372f32d4896b9512ff3fcc40084c83cb5f93c9e06ac913251076e75be1dda76386a4a14f52519019329573edcf09a3061c6ad8e494bb54841d8f6aba9bb853cdf39"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x4ac}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xffe0, 0xfff3}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0xbbf6}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x5) getuid() sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="28000000200081dc000000000300000002000000000000031f0000000c001400", @ANYRES32=r9], 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x44004) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) 2.233620614s ago: executing program 4 (id=955): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x4) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b010902"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1b4c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0xc, 0x3, 0x0, 0x4, 0x0, {0x9, 0x21, 0x20, 0x0, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0x8, 0x45}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000000c0)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x9, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0xffff}}}}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d0008000c0000000005000000", 0x29}], 0x1) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1.435837507s ago: executing program 1 (id=956): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) setresuid(0x0, 0xee00, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000030000120900a658170de7e8f02deae200698885723191f83a5be7cbe81700491baaf700353d74c51c080dbdf910e852cb6adc2571915d3ea7d5a38f3c049a1bd587b4789ee74023469291bd27927d536dbc369f21715deb18b80fc5891f2846fce810ef6771efb6be900492edefbb04f827fc04eefc121ab06cf827996b69881750d26b8e1cc94cf5e10112ab941f71628891d2ec3b2f51a8c07ab8794a45f71f15d15fbadd4a9ce48bbd56655e1841c79cae4a35187084fd34089f23981859c5c0a1a690724e1c361cf5bef621d797cedccb16965a52dfa5e237b230304e67189cdd16dd723c3f36e1af1803"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$qrtr(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) syz_clone(0x12000000, 0x0, 0x16, 0x0, 0x0, 0x0) getpriority(0x1, r4) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) mount$bpf(0x0, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140), 0x10404, &(0x7f0000000580)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB='?\x00id=', @ANYRESHEX=0x0, @ANYBLOB=',mode=00000000000000000000001,\x00']) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 1.277742174s ago: executing program 0 (id=957): socket$netlink(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001640)=ANY=[@ANYBLOB="18000000000000000000000000000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff8500000004000000954759ed1fe2d1d95eb67b64bd614bf89df82316ea5cd4db3193a45b61961c7685e022d70760041e62896c735e971e35eaf1e5a331ae04ce6a1407c4acf7d493d0a39b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b0}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00'}, 0x18) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) r2 = syz_open_dev$vim2m(0x0, 0x10003, 0x2) pwritev(r2, &(0x7f00000002c0)=[{&(0x7f0000000a80)}, {0x0}, {&(0x7f0000000100)}, {0x0}], 0x4, 0x5, 0x1) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r7 = fanotify_init(0xf00, 0x1000) fanotify_mark(r7, 0x105, 0x5000003a, r6, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r8, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x2710}, 0x10) connect$llc(r8, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x1) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568daf133e50b", @ANYRESHEX, @ANYRESOCT=r0], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r1, 0x35, 0x0, 0x6, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0]}, 0x40) 1.256498391s ago: executing program 2 (id=958): syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r2, &(0x7f0000000900)="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", 0x45c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, 0x0, 0x30, 0xb, @val=@netfilter={0x1, 0x1, 0x8, 0x1}}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r4, 0x0, 0x0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x220e0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000000)=0x3, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x1, 0xffffffff, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000240), 0x3) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r7) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x89901) fchdir(r9) r10 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000105804165000000000000109022400010000c04009040000010300000009210900000122a00009058103"], 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io(r10, &(0x7f0000000000)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x80) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) 0s ago: executing program 1 (id=959): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) setrlimit(0x6, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x3) fsopen(&(0x7f0000000080)='pvfs2\x00', 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca436b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b324e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x1, 0xb7, &(0x7f00000012c0)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000180)={r4, r5}) sendmmsg$inet(r6, &(0x7f00000028c0)=[{{&(0x7f00000001c0)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000280)="7fe1b33315b1fd8cd2523811f49a284c7da2c2dab8d7a3562386f41e36be53b97c6eb951e4cd864a0d49c5251ea819d1fb396061defd1768694a459ea9b8e4c53f8b742f21f50ec2a79795f2e2f94bf0da0d30ad6eac955cedbf65b0838294e2bcea1cbd94f308f0774bd9f4b60e9d", 0x6f}, {&(0x7f0000000340)="be177dbe6dc1fe2b2a0e8c6743f448687e14f1d7ebeff7cffd42ea22c8a2ac263d3788aa034dc019349e1be5cf505a9b501fbab07396bab3afec71f9767193f0b5309295e6d6188ce88368c55c5a2958d8800a3c2b81faff89887512fde0509148e68ab9788a6a6f8513e442607a7154e11fa396094eb9cc404b6b408c2c38b1ad77e8f41cbe776bf9a3e6961f39350c4a0c157f4dd8ed04ed53312ab6db19962fdc0d0f8cf23aff69951ac76e2deb4f3e8cd737a4f232eb5554096503e38701", 0xc0}, {&(0x7f0000000400)="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", 0xeb4}], 0x3}}, {{&(0x7f0000001400)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000001800)=[{&(0x7f0000001440)="85ac6755b3764d9d8071a63907858eec8443bec7adaaea2c917ac41790a95d62511755a808b50539fb719daae0341b7d172229c58deb7f2d95c793aee3365bd04cc81c838294ad5237c74cd19b3ea8431a190ea1caf0524e623f56791d2d55bf1a24c7c7b42198afd133af01bbbd167d04159bceb80648e2e740f1d58b762d50ed842933815a8f167dc01363284d8f27e69a83509fd9f1dd0cdeca61ffdb9524f408d698154fbb2ff5381369933e1815ed1703e58405478629df4311893798ead4acd67bc6ab", 0xc6}, {0x0}, {&(0x7f0000001540)="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", 0x151}, {&(0x7f00000012c0)}], 0x4}}], 0x2, 0x0) close(r6) kernel console output (not intermixed with test programs): bulk status received: -71 [ 254.464343][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 254.473448][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 254.482515][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 254.491564][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 254.500619][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 254.509665][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 254.634685][ T10] usb 2-1: USB disconnect, device number 19 [ 254.673973][ T5875] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 254.684046][ T5875] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 254.697882][ T5875] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 254.723118][ T5867] usb 6-1: USB disconnect, device number 21 [ 254.740806][ T5875] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 254.751257][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 254.762133][ T5875] usb 3-1: Product: syz [ 254.770136][ T5875] usb 3-1: Manufacturer: syz [ 254.779881][ T5875] usb 3-1: SerialNumber: syz [ 255.095373][ T5875] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 255.311622][ T8327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.341799][ T8327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.739830][ T5875] usb 3-1: USB disconnect, device number 22 [ 255.763281][ T5875] usblp0: removed [ 255.791562][ T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 256.008449][ T10] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 256.017670][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.035931][ T10] usb 1-1: Product: syz [ 256.040195][ T10] usb 1-1: Manufacturer: syz [ 256.073717][ T10] usb 1-1: SerialNumber: syz [ 256.087500][ T10] usb 1-1: config 0 descriptor?? [ 256.096208][ T10] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 256.118430][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 256.131619][ T10] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 256.141054][ T10] usb 1-1: media controller created [ 256.159628][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 256.310193][ T10] DVB: Unable to find symbol mt352_attach() [ 256.393371][ T8356] 9p: Bad value for 'wfdno' [ 256.757583][ T10] DVB: Unable to find symbol nxt6000_attach() [ 256.765800][ T10] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 256.783274][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input9 [ 256.817279][ T10] dvb-usb: schedule remote query interval to 1000 msecs. [ 256.841094][ T10] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 256.862503][ T10] dvb-usb: bulk message failed: -22 (7/0) [ 256.868266][ T10] dvb-usb: bulk message failed: -22 (7/0) [ 257.251022][ T8337] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 257.301842][ T5808] usb 1-1: USB disconnect, device number 18 [ 257.421583][ T8368] netlink: 'syz.5.579': attribute type 3 has an invalid length. [ 257.711697][ T5808] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 258.111217][ T30] audit: type=1400 audit(1775538421.072:394): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 258.933983][ T30] audit: type=1400 audit(1775538421.912:395): avc: denied { connect } for pid=8389 comm="syz.5.587" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 259.072986][ T5941] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 259.453894][ T5941] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 259.471943][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.494521][ T5941] usb 2-1: Product: syz [ 259.550572][ T5941] usb 2-1: Manufacturer: syz [ 259.653353][ T8401] netlink: 'syz.4.589': attribute type 3 has an invalid length. [ 259.863741][ T5941] usb 2-1: SerialNumber: syz [ 260.084358][ T5941] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 260.108050][ T5941] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 260.138894][ T5941] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 260.200252][ T5941] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 260.208237][ T5891] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 260.315602][ T5941] usb 2-1: USB disconnect, device number 20 [ 260.388803][ T5891] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 260.396999][ T5891] usb 5-1: config 0 has no interface number 0 [ 260.409491][ T5891] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 260.485406][ T8408] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 260.808044][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.854920][ T5891] usb 5-1: config 0 descriptor?? [ 260.869896][ T5891] usb 5-1: selecting invalid altsetting 1 [ 260.890944][ T5891] dvb_ttusb_budget: ttusb_init_controller: error [ 260.920286][ T5891] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 261.025152][ T5891] DVB: Unable to find symbol cx22700_attach() [ 261.121744][ T8404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.131225][ T8404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.680949][ T10] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 261.800686][ T8419] netlink: 'syz.1.593': attribute type 3 has an invalid length. [ 262.026986][ T5891] DVB: Unable to find symbol tda10046_attach() [ 262.033772][ T5891] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 262.092450][ T5891] usb 5-1: USB disconnect, device number 20 [ 262.098231][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 262.148712][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 262.188191][ T10] usb 3-1: config 6 has an invalid interface number: 162 but max is 0 [ 262.228901][ T10] usb 3-1: config 6 has no interface number 0 [ 262.241238][ T10] usb 3-1: config 6 interface 162 has no altsetting 0 [ 262.275334][ T10] usb 3-1: New USB device found, idVendor=0846, idProduct=9041, bcdDevice=d7.c4 [ 262.360498][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.430942][ T10] usb 3-1: Product: syz [ 262.463120][ T10] usb 3-1: Manufacturer: syz [ 262.500936][ T10] usb 3-1: SerialNumber: syz [ 262.613921][ T8430] netlink: 'syz.1.597': attribute type 1 has an invalid length. [ 262.659044][ T30] audit: type=1400 audit(1775538425.632:396): avc: denied { remount } for pid=8429 comm="syz.5.598" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 262.808781][ T791] hid-generic 0005:16C0:05DF.0004: item fetching failed at offset 0/1 [ 262.827063][ T791] hid-generic 0005:16C0:05DF.0004: probe with driver hid-generic failed with error -22 [ 262.974660][ T8430] 8021q: adding VLAN 0 to HW filter on device bond1 [ 263.027674][ T8433] bond1: (slave gretap1): making interface the new active one [ 263.051063][ T5875] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 263.164068][ T8433] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 263.201080][ T5875] usb 6-1: device descriptor read/64, error -71 [ 263.463231][ T30] audit: type=1400 audit(1775538426.412:397): avc: denied { module_request } for pid=8437 comm="syz.4.599" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 263.501695][ T5875] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 263.690991][ T5875] usb 6-1: device descriptor read/64, error -71 [ 263.817122][ T5875] usb usb6-port1: attempt power cycle [ 263.855838][ T30] audit: type=1400 audit(1775538426.832:398): avc: denied { bind } for pid=8459 comm="syz.4.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 263.911600][ T5891] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 263.942918][ T30] audit: type=1400 audit(1775538426.922:399): avc: denied { connect } for pid=8461 comm="syz.4.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 263.971593][ T8462] tipc: Started in network mode [ 263.976783][ T8462] tipc: Node identity 0eb47ea29ccd, cluster identity 4711 [ 263.990065][ T8462] tipc: Enabled bearer , priority 0 [ 264.024046][ T8463] syzkaller0: entered promiscuous mode [ 264.029654][ T8463] syzkaller0: entered allmulticast mode [ 264.079311][ T5891] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 264.093243][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 264.104206][ T5891] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 264.116385][ T5891] usb 2-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 264.125898][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.155052][ T5891] usb 2-1: Product: syz [ 264.162439][ T5875] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 264.170265][ T5891] usb 2-1: Manufacturer: syz [ 264.183424][ T5891] usb 2-1: SerialNumber: syz [ 264.213228][ T10] usb 3-1: USB disconnect, device number 23 [ 264.219225][ T5875] usb 6-1: device descriptor read/8, error -71 [ 264.331827][ T5891] usb 2-1: config 0 descriptor?? [ 264.353437][ T8457] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 264.571238][ T5875] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 264.594556][ T8461] tipc: Resetting bearer [ 264.601714][ T5875] usb 6-1: device descriptor read/8, error -71 [ 264.683999][ T8461] tipc: Disabling bearer [ 264.709983][ T30] audit: type=1400 audit(1775538427.682:400): avc: denied { ioctl } for pid=8455 comm="syz.1.602" path="socket:[20078]" dev="sockfs" ino=20078 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 264.755051][ T5875] usb usb6-port1: unable to enumerate USB device [ 264.840485][ T30] audit: type=1400 audit(1775538427.812:401): avc: denied { connect } for pid=8480 comm="syz.4.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 265.152618][ T8483] ubi31: attaching mtd0 [ 265.182260][ T8483] ubi31: scanning is finished [ 265.187138][ T8483] ubi31: empty MTD device detected [ 265.855363][ T8483] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 265.904771][ T5875] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 266.123675][ T5875] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 266.140931][ T5875] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 266.150762][ T5875] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 266.224051][ T5875] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 266.234521][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 266.247654][ T5875] usb 1-1: Product: syz [ 266.251943][ T5875] usb 1-1: Manufacturer: syz [ 266.256545][ T5875] usb 1-1: SerialNumber: syz [ 266.473399][ T5875] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 266.706377][ T8479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.841207][ T8479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.870017][ T5875] usb 2-1: USB disconnect, device number 21 [ 266.948536][ T8497] netlink: 'syz.4.609': attribute type 1 has an invalid length. [ 267.017952][ T8500] netlink: 'syz.0.606': attribute type 8 has an invalid length. [ 267.195343][ T8497] 8021q: adding VLAN 0 to HW filter on device bond1 [ 267.258384][ T8499] bond1: (slave gretap1): making interface the new active one [ 267.268463][ T8499] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 267.674787][ T5891] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 267.978661][ T5891] usb 3-1: Using ep0 maxpacket: 32 [ 268.004287][ T5891] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 268.012606][ T5891] usb 3-1: config 0 has no interface number 0 [ 268.018666][ T5891] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 268.118132][ T5939] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 268.534651][ T5891] usb 3-1: config 0 interface 89 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 268.544606][ T5891] usb 3-1: config 0 interface 89 has no altsetting 0 [ 268.553700][ T5891] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.f5 [ 268.562825][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.570923][ T5891] usb 3-1: Product: syz [ 268.575117][ T5891] usb 3-1: Manufacturer: syz [ 268.579704][ T8513] capability: warning: `syz.1.615' uses deprecated v2 capabilities in a way that may be insecure [ 268.593693][ T5891] usb 3-1: SerialNumber: syz [ 268.606673][ T5891] usb 3-1: config 0 descriptor?? [ 268.619795][ T5891] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 268.629986][ T5891] em28xx 3-1:0.89: Video interface 89 found: bulk [ 268.638129][ T5939] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 137 [ 268.649873][ T5939] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 268.666682][ T5939] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 268.676066][ T5939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 268.684248][ T5939] usb 6-1: Product: syz [ 268.688504][ T5939] usb 6-1: Manufacturer: syz [ 268.693175][ T5939] usb 6-1: SerialNumber: syz [ 268.807187][ T8508] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 269.438644][ T5939] usblp 6-1:1.0: usblp1: USB Unidirectional printer dev 26 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 269.601232][ T5939] usb 1-1: USB disconnect, device number 19 [ 269.608560][ T5939] usblp0: removed [ 269.751893][ T5891] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 269.849843][ T5891] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 269.869434][ T5891] em28xx 3-1:0.89: board has no eeprom [ 269.930932][ T5891] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 269.938244][ T5891] em28xx 3-1:0.89: analog set to bulk mode. [ 269.944916][ T5939] em28xx 3-1:0.89: Registering V4L2 extension [ 270.056573][ T5939] em28xx 3-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 270.067393][ T5939] em28xx 3-1:0.89: reading from i2c device at 0x48 failed (error=-5) [ 270.077242][ T5939] em28xx 3-1:0.89: reading from i2c device at 0x42 failed (error=-5) [ 270.087258][ T5939] em28xx 3-1:0.89: reading from i2c device at 0x40 failed (error=-5) [ 270.099528][ T5939] em28xx 3-1:0.89: Config register raw data: 0xfffffffb [ 270.150094][ T5939] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 270.180622][ T5939] em28xx 3-1:0.89: No AC97 audio processor [ 270.210156][ T5939] usb 3-1: Decoder not found [ 270.220441][ T5939] em28xx 3-1:0.89: failed to create media graph [ 270.228678][ T5939] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 270.256609][ T5939] em28xx 3-1:0.89: Registering snapshot button... [ 270.275980][ T791] usb 6-1: USB disconnect, device number 26 [ 270.280994][ T5939] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input10 [ 270.311781][ T791] usblp1: removed [ 270.319222][ T5939] em28xx 3-1:0.89: Remote control support is not available for this card. [ 270.442543][ T5891] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 270.495136][ T5939] usb 3-1: USB disconnect, device number 24 [ 270.512681][ T5939] em28xx 3-1:0.89: Disconnecting em28xx [ 270.518394][ T5939] em28xx 3-1:0.89: Closing input extension [ 270.565231][ T5939] em28xx 3-1:0.89: Deregistering snapshot button [ 270.660052][ T5891] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 137 [ 270.676697][ T5891] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 270.697506][ T5939] em28xx 3-1:0.89: Freeing device [ 270.707797][ T5891] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 271.008308][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 271.096658][ T5891] usb 2-1: Product: syz [ 271.101339][ T5891] usb 2-1: Manufacturer: syz [ 271.105943][ T5891] usb 2-1: SerialNumber: syz [ 271.113382][ T8534] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 271.154944][ T8547] capability: warning: `syz.5.625' uses 32-bit capabilities (legacy support in use) [ 271.551007][ T5939] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 271.585831][ T5891] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 271.741460][ T5939] usb 3-1: Using ep0 maxpacket: 32 [ 271.749015][ T5939] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 271.761462][ T5939] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 271.773491][ T5939] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 271.790121][ T8534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.798767][ T5939] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 271.819760][ T8534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.829651][ T5939] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 271.862681][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.870714][ T5939] usb 3-1: Product: syz [ 271.919375][ T8534] netlink: 'syz.1.621': attribute type 8 has an invalid length. [ 271.927963][ C1] usblp0: nonzero write bulk status received: -71 [ 271.937994][ T5808] usb 2-1: USB disconnect, device number 22 [ 271.946754][ T5808] usblp0: removed [ 271.957098][ T5939] usb 3-1: Manufacturer: syz [ 271.962113][ T5891] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 271.974479][ T5939] usb 3-1: SerialNumber: syz [ 272.014816][ C1] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 272.044842][ T5939] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input11 [ 272.336017][ T8559] netlink: 56 bytes leftover after parsing attributes in process `syz.0.628'. [ 272.346622][ T5891] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 272.356045][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.364779][ T5891] usb 6-1: Product: syz [ 272.380466][ T5891] usb 6-1: Manufacturer: syz [ 272.403033][ T8561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.627'. [ 272.519630][ T5939] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 272.801714][ T5939] (id 0x00) [ 272.819517][ T5891] usb 6-1: SerialNumber: syz [ 272.847459][ T5891] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 272.866392][ T1117] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 272.922489][ T8559] program syz.0.628 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 272.960940][ T5939] rc_core: IR keymap rc-imon-pad not found [ 272.961248][ T5817] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 272.966865][ T5939] Registered IR keymap rc-empty [ 273.001408][ T5939] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 273.035064][ T5939] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 273.092564][ T5939] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 273.106256][ T5939] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input12 [ 273.145213][ T5939] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:25> initialized [ 273.376063][ T8572] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 273.458330][ T8575] netlink: 108 bytes leftover after parsing attributes in process `syz.0.631'. [ 273.920973][ T1117] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 273.928236][ T1117] ath9k_htc: Failed to initialize the device [ 274.040363][ T1117] usb 6-1: ath9k_htc: USB layer deinitialized [ 274.049385][ T30] audit: type=1400 audit(1775538437.022:402): avc: denied { read write } for pid=8540 comm="syz.2.623" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 274.119056][ T8548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.125686][ T5941] usb 6-1: USB disconnect, device number 27 [ 274.159536][ T5891] usb 3-1: USB disconnect, device number 25 [ 274.171696][ T8562] imon:send_packet: packet tx failed (-71) [ 274.195481][ T30] audit: type=1400 audit(1775538437.022:403): avc: denied { open } for pid=8540 comm="syz.2.623" path="/132/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 274.219975][ T8562] imon:vfd_write: send packet #0 failed [ 274.221717][ T8583] netlink: 'syz.0.632': attribute type 1 has an invalid length. [ 274.614271][ T8586] ubi31: attaching mtd0 [ 274.638960][ T8586] ubi31: scanning is finished [ 275.158866][ T30] audit: type=1400 audit(1775538437.122:404): avc: denied { create } for pid=8540 comm="syz.2.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 275.178319][ T30] audit: type=1400 audit(1775538437.132:405): avc: denied { ioctl } for pid=8540 comm="syz.2.623" path="socket:[20306]" dev="sockfs" ino=20306 ioctlcmd=0x4942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 275.206816][ T8583] 8021q: adding VLAN 0 to HW filter on device bond3 [ 275.242910][ T8588] bond3: (slave geneve2): making interface the new active one [ 275.282883][ T8586] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 275.291766][ T8588] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 275.944407][ T8599] netlink: 'syz.2.638': attribute type 1 has an invalid length. [ 275.978507][ T8599] 8021q: adding VLAN 0 to HW filter on device bond2 [ 276.005111][ T8599] bond2: (slave geneve2): making interface the new active one [ 276.014002][ T8599] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 276.368706][ T8603] ubi31: attaching mtd0 [ 276.392256][ T8603] ubi31: scanning is finished [ 277.415152][ T8603] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 277.424412][ T8612] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 277.497229][ T8612] audit: out of memory in audit_log_start [ 277.617685][ T8616] netlink: 'syz.1.635': attribute type 1 has an invalid length. [ 277.625677][ T5875] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 277.727702][ T8616] 8021q: adding VLAN 0 to HW filter on device bond2 [ 277.845090][ T5875] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 277.907338][ T5875] usb 6-1: config 0 has no interface number 0 [ 277.978126][ T5875] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 278.087167][ T5875] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.253189][ T5875] usb 6-1: Product: syz [ 278.273894][ T5875] usb 6-1: Manufacturer: syz [ 278.336592][ T8623] FAULT_INJECTION: forcing a failure. [ 278.336592][ T8623] name failslab, interval 1, probability 0, space 0, times 0 [ 278.350471][ T8623] CPU: 0 UID: 0 PID: 8623 Comm: syz.0.644 Not tainted syzkaller #0 PREEMPT(full) [ 278.350497][ T8623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 278.350508][ T8623] Call Trace: [ 278.350514][ T8623] [ 278.350521][ T8623] dump_stack_lvl+0x100/0x190 [ 278.350555][ T8623] should_fail_ex.cold+0x5/0xa [ 278.350579][ T8623] should_failslab+0xc2/0x120 [ 278.350598][ T8623] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 278.350626][ T8623] ? __alloc_skb+0x140/0x710 [ 278.350654][ T8623] __alloc_skb+0x140/0x710 [ 278.350676][ T8623] ? __alloc_skb+0x5b7/0x710 [ 278.350699][ T8623] ? __pfx___alloc_skb+0x10/0x10 [ 278.350730][ T8623] alloc_skb_with_frags+0xe0/0x810 [ 278.350761][ T8623] ? __pfx___schedule+0x10/0x10 [ 278.350789][ T8623] sock_alloc_send_pskb+0x801/0x980 [ 278.350816][ T8623] ? lockdep_hardirqs_on+0x78/0x100 [ 278.350846][ T8623] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 278.350877][ T8623] ? __ip6_append_data+0xbe9/0x4dc0 [ 278.350897][ T8623] __ip6_append_data+0x2c3f/0x4dc0 [ 278.350922][ T8623] ? __pfx_ping_getfrag+0x10/0x10 [ 278.350951][ T8623] ? __pfx___ip6_append_data+0x10/0x10 [ 278.350971][ T8623] ? __pfx_ip6_mtu+0x10/0x10 [ 278.350996][ T8623] ? ip6_setup_cork+0x5be/0x14c0 [ 278.351019][ T8623] ip6_append_data+0x10b/0x410 [ 278.351038][ T8623] ? __pfx_ping_getfrag+0x10/0x10 [ 278.351059][ T8623] ping_v6_sendmsg+0xb51/0x1600 [ 278.351088][ T8623] ? __pfx_ping_v6_sendmsg+0x10/0x10 [ 278.351107][ T8623] ? avc_has_perm+0x1b1/0x1e0 [ 278.351133][ T8623] ? trace_contention_end.constprop.0+0x15b/0x1b0 [ 278.351157][ T8623] ? cpupri_find_fitness+0xd5/0x440 [ 278.351184][ T8623] ? sock_has_perm+0x258/0x2f0 [ 278.351206][ T8623] ? __pfx_sock_has_perm+0x10/0x10 [ 278.351239][ T8623] ? __fget_files+0x21f/0x3d0 [ 278.351259][ T8623] ? __pfx_ping_v6_sendmsg+0x10/0x10 [ 278.351282][ T8623] inet_sendmsg+0x11c/0x140 [ 278.351304][ T8623] __sys_sendto+0x446/0x4b0 [ 278.351326][ T8623] ? __pfx_inet_sendmsg+0x10/0x10 [ 278.351348][ T8623] ? __pfx___sys_sendto+0x10/0x10 [ 278.351371][ T8623] ? __schedule+0x1000/0x6120 [ 278.351423][ T8623] ? exit_to_user_mode_loop+0xdd/0x4a0 [ 278.351446][ T8623] __x64_sys_sendto+0xe0/0x1c0 [ 278.351468][ T8623] ? do_syscall_64+0x95/0xf80 [ 278.351484][ T8623] ? lockdep_hardirqs_on+0x78/0x100 [ 278.351511][ T8623] do_syscall_64+0x106/0xf80 [ 278.351526][ T8623] ? clear_bhb_loop+0x40/0x90 [ 278.351548][ T8623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.351565][ T8623] RIP: 0033:0x7f641539c819 [ 278.351580][ T8623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.351597][ T8623] RSP: 002b:00007f6416188028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 278.351614][ T8623] RAX: ffffffffffffffda RBX: 00007f6415616180 RCX: 00007f641539c819 [ 278.351626][ T8623] RDX: 000000000000ffd8 RSI: 0000200000000080 RDI: 0000000000000005 [ 278.351636][ T8623] RBP: 00007f6416188090 R08: 0000000000000000 R09: 0000000000000000 [ 278.351646][ T8623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.351655][ T8623] R13: 00007f6415616218 R14: 00007f6415616180 R15: 00007fff0728a438 [ 278.351679][ T8623] [ 278.745577][ T30] audit: type=1400 audit(1775538441.312:406): avc: denied { write } for pid=8620 comm="syz.0.644" laddr=fe80::13 lport=64084 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 278.779904][ T5875] usb 6-1: SerialNumber: syz [ 278.787924][ T5875] usb 6-1: config 0 descriptor?? [ 279.047689][ T5875] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 279.061270][ T5875] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 279.072403][ T5875] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 279.080428][ T5875] usb 6-1: media controller created [ 279.101294][ T791] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 279.129107][ T5875] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 279.258796][ T5875] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 279.400712][ T8645] 9pnet_virtio: no channels available for device syz [ 279.433762][ T8645] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 279.481164][ T8645] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 280.284627][ T791] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 280.311447][ T8643] Cannot find add_set index 0 as target [ 280.330749][ T791] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 280.469871][ T791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 280.521230][ T791] usb 2-1: Product: syz [ 280.525425][ T791] usb 2-1: Manufacturer: syz [ 280.531958][ T791] usb 2-1: SerialNumber: syz [ 280.767836][ T5875] usb 6-1: USB disconnect, device number 28 [ 280.981386][ T8655] 9p: Bad value for 'wfdno' [ 281.311782][ T8656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.321687][ T8650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.649'. [ 281.335674][ T8656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.364577][ T30] audit: type=1400 audit(1775538444.342:407): avc: denied { ioctl } for pid=8653 comm="syz.5.651" path="socket:[21529]" dev="sockfs" ino=21529 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 282.191475][ T8666] binder: BINDER_SET_CONTEXT_MGR already set [ 282.202054][ T8666] binder: 8664:8666 ioctl 4018620d 200000004a80 returned -16 [ 282.209649][ T30] audit: type=1400 audit(1775538445.162:408): avc: denied { set_context_mgr } for pid=8664 comm="syz.2.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 282.290947][ T791] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 282.319400][ T30] audit: type=1400 audit(1775538445.162:409): avc: denied { map } for pid=8664 comm="syz.2.654" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 282.461232][ T5875] usb 2-1: USB disconnect, device number 23 [ 282.483762][ T791] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 282.495171][ T791] usb 6-1: config 0 has no interface number 0 [ 282.524853][ T791] usb 6-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 282.534678][ T791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.557790][ T791] usb 6-1: Product: syz [ 282.572576][ T791] usb 6-1: Manufacturer: syz [ 282.583849][ T791] usb 6-1: SerialNumber: syz [ 282.623466][ T791] usb 6-1: config 0 descriptor?? [ 282.637443][ T791] usb 6-1: selecting invalid altsetting 1 [ 282.659786][ T791] dvb_ttusb_budget: ttusb_init_controller: error [ 282.680430][ T791] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 283.355734][ T791] DVB: Unable to find symbol stv0299_attach() [ 283.407979][ T791] DVB: Unable to find symbol tda8083_attach() [ 283.414553][ T791] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 284.313896][ T30] audit: type=1400 audit(1775538447.292:410): avc: denied { create } for pid=8692 comm="syz.2.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 284.381073][ T30] audit: type=1400 audit(1775538447.302:411): avc: denied { sys_admin } for pid=8692 comm="syz.2.659" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 284.802615][ T5867] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 285.246777][ T5875] usb 6-1: USB disconnect, device number 29 [ 285.257793][ T8707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.663'. [ 285.330912][ T5867] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 285.354033][ T5867] usb 3-1: config 0 has no interface number 0 [ 285.910550][ T5867] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 285.938624][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.025975][ T5867] usb 3-1: Product: syz [ 286.035782][ T5867] usb 3-1: Manufacturer: syz [ 286.047430][ T5867] usb 3-1: SerialNumber: syz [ 286.070416][ T5867] usb 3-1: config 0 descriptor?? [ 286.313998][ T8719] netlink: 'syz.4.667': attribute type 3 has an invalid length. [ 286.564915][ T5867] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 286.574392][ T5875] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 286.987511][ T5867] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 287.004153][ T5875] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 287.285039][ T5867] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 287.302474][ T5875] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 287.313345][ T5867] usb 3-1: media controller created [ 287.333530][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 287.348071][ T5867] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 287.363921][ T5875] usb 1-1: Product: syz [ 287.370648][ T5875] usb 1-1: Manufacturer: syz [ 287.476823][ T5875] usb 1-1: SerialNumber: syz [ 287.558149][ T5867] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 287.820539][ T5867] usb 3-1: USB disconnect, device number 26 [ 288.079180][ T30] audit: type=1400 audit(1775538451.052:412): avc: denied { mounton } for pid=8731 comm="syz.1.671" path="/file1" dev="ramfs" ino=21105 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 288.166175][ T8739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.228233][ T8739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.662598][ T8745] SET target dimension over the limit! [ 289.008214][ T30] audit: type=1400 audit(1775538451.982:413): avc: denied { append } for pid=8747 comm="syz.4.675" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 289.315942][ T10] usb 1-1: USB disconnect, device number 20 [ 289.597774][ T8758] 9p: Bad value for 'wfdno' [ 290.411013][ T5875] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 290.428953][ T5891] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 290.582960][ T5891] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 137 [ 290.593357][ T5891] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 290.620965][ T5875] usb 6-1: Using ep0 maxpacket: 16 [ 290.623827][ T5891] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 290.641590][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 290.660731][ T5891] usb 1-1: Product: syz [ 290.661749][ T5875] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 290.712031][ T8770] netlink: 'syz.4.680': attribute type 4 has an invalid length. [ 290.781073][ T5875] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 291.050957][ T5875] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 291.055204][ T5891] usb 1-1: Manufacturer: syz [ 291.070947][ T5875] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 291.096719][ T5891] usb 1-1: SerialNumber: syz [ 291.109074][ T8762] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 291.119826][ T5875] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 291.142002][ T5875] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.170158][ T5875] usb 6-1: Product: syz [ 291.176578][ T5875] usb 6-1: Manufacturer: syz [ 291.195068][ T5875] usb 6-1: SerialNumber: syz [ 291.354259][ T5891] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 291.473044][ T5875] usb 6-1: 0:2 : does not exist [ 291.814131][ T8762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.824552][ T5875] usb 6-1: USB disconnect, device number 30 [ 291.846340][ T8762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.886431][ T5797] udevd[5797]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 291.924115][ T8762] netlink: 'syz.0.679': attribute type 8 has an invalid length. [ 291.951209][ C1] usblp0: nonzero write bulk status received: -71 [ 291.966003][ T30] audit: type=1400 audit(1775538454.932:414): avc: denied { read append } for pid=8778 comm="syz.2.683" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 291.968594][ T8781] syzkaller1: entered promiscuous mode [ 292.004281][ T10] usb 1-1: USB disconnect, device number 21 [ 292.023599][ T30] audit: type=1400 audit(1775538454.932:415): avc: denied { open } for pid=8778 comm="syz.2.683" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 292.025654][ T10] usblp0: removed [ 292.067478][ T8781] syzkaller1: entered allmulticast mode [ 292.514629][ T30] audit: type=1400 audit(1775538455.492:416): avc: denied { create } for pid=8789 comm="syz.1.687" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 292.534542][ T30] audit: type=1400 audit(1775538455.512:417): avc: denied { write } for pid=8789 comm="syz.1.687" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 292.609581][ T8796] netlink: 16 bytes leftover after parsing attributes in process `syz.1.687'. [ 292.620266][ T8796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.687'. [ 292.750955][ T8779] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 292.757117][ T8779] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 292.776391][ T8779] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 292.783235][ T8779] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 292.790349][ T8779] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 292.796418][ T8779] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 292.803302][ T8779] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 292.809274][ T8779] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 292.817923][ T8779] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 293.342318][ T8819] SET target dimension over the limit! [ 293.363330][ T5941] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 293.910947][ T5941] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 293.918977][ T5941] usb 6-1: config 0 has no interface number 0 [ 293.927188][ T5941] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 293.985771][ T5941] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.016705][ T8827] FAULT_INJECTION: forcing a failure. [ 294.016705][ T8827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.041196][ T5941] usb 6-1: Product: syz [ 294.047582][ T5941] usb 6-1: Manufacturer: syz [ 294.083980][ T8827] CPU: 1 UID: 0 PID: 8827 Comm: syz.2.696 Not tainted syzkaller #0 PREEMPT(full) [ 294.083996][ T8827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 294.084003][ T8827] Call Trace: [ 294.084007][ T8827] [ 294.084012][ T8827] dump_stack_lvl+0x100/0x190 [ 294.084033][ T8827] should_fail_ex.cold+0x5/0xa [ 294.084049][ T8827] _copy_to_user+0x32/0xd0 [ 294.084063][ T8827] simple_read_from_buffer+0xcb/0x170 [ 294.084076][ T8827] proc_fail_nth_read+0x1af/0x230 [ 294.084093][ T8827] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 294.084110][ T8827] ? rw_verify_area+0xce/0x6d0 [ 294.084125][ T8827] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 294.084141][ T8827] vfs_read+0x1e4/0xb30 [ 294.084152][ T8827] ? __pfx_vfs_read+0x10/0x10 [ 294.084162][ T8827] ? __fget_files+0x215/0x3d0 [ 294.084176][ T8827] ? __fget_files+0x21f/0x3d0 [ 294.084192][ T8827] ksys_read+0x12a/0x250 [ 294.084201][ T8827] ? __pfx_ksys_read+0x10/0x10 [ 294.084215][ T8827] do_syscall_64+0x106/0xf80 [ 294.084225][ T8827] ? clear_bhb_loop+0x40/0x90 [ 294.084238][ T8827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.084249][ T8827] RIP: 0033:0x7fcf4ad5d04e [ 294.084259][ T8827] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 294.084274][ T8827] RSP: 002b:00007fcf4bc77fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 294.084285][ T8827] RAX: ffffffffffffffda RBX: 00007fcf4bc786c0 RCX: 00007fcf4ad5d04e [ 294.084291][ T8827] RDX: 000000000000000f RSI: 00007fcf4bc780a0 RDI: 0000000000000004 [ 294.084297][ T8827] RBP: 00007fcf4bc78090 R08: 0000000000000000 R09: 0000000000000000 [ 294.084304][ T8827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.084309][ T8827] R13: 00007fcf4b016038 R14: 00007fcf4b015fa0 R15: 00007fffb2e45688 [ 294.084323][ T8827] [ 294.089840][ T5941] usb 6-1: SerialNumber: syz [ 294.231096][ T5817] Bluetooth: hci2: command 0x0406 tx timeout [ 294.349683][ T5941] usb 6-1: config 0 descriptor?? [ 294.784585][ T8830] loop5: detected capacity change from 0 to 7 [ 294.843471][ T5822] Bluetooth: hci4: command 0x0406 tx timeout [ 294.843476][ T5817] Bluetooth: hci3: command 0x0406 tx timeout [ 294.891638][ T5941] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 294.900197][ T5822] Bluetooth: hci1: command 0x0c1a tx timeout [ 294.929248][ T5941] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 294.945690][ T5941] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 294.953762][ T5941] usb 6-1: media controller created [ 294.970199][ T5941] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 295.441265][ T5941] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 295.497962][ T5941] usb 6-1: USB disconnect, device number 31 [ 295.909899][ T8846] netlink: 'syz.4.701': attribute type 3 has an invalid length. [ 296.220982][ T5875] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 296.231182][ T5941] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 296.322052][ T5822] Bluetooth: hci2: command 0x0406 tx timeout [ 296.456720][ T5941] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 296.476626][ T5941] usb 3-1: config 0 has no interface number 0 [ 296.497792][ T5875] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.500147][ T5941] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 296.539393][ T5875] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 296.560075][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.565468][ T5875] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 296.585940][ T5941] usb 3-1: Product: syz [ 296.590464][ T5941] usb 3-1: Manufacturer: syz [ 296.590513][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.600436][ T5941] usb 3-1: SerialNumber: syz [ 296.627921][ T5941] usb 3-1: config 0 descriptor?? [ 296.650268][ T5875] usb 1-1: Product: syz [ 296.664177][ T5875] usb 1-1: Manufacturer: syz [ 296.711611][ T5875] usb 1-1: SerialNumber: syz [ 296.721095][ T30] audit: type=1400 audit(1775538459.692:418): avc: denied { setattr } for pid=8855 comm="syz.4.707" name="SCTP" dev="sockfs" ino=21420 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 296.724773][ T5875] cdc_mbim 1-1:1.0: skipping garbage [ 296.798528][ T8858] geneve2: entered promiscuous mode [ 296.803827][ T8858] geneve2: entered allmulticast mode [ 296.880961][ T5822] Bluetooth: hci3: command 0x0406 tx timeout [ 296.891084][ T5817] Bluetooth: hci4: command 0x0406 tx timeout [ 296.961037][ T5822] Bluetooth: hci1: command 0x0c1a tx timeout [ 296.971767][ T5941] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 297.013520][ T5941] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 297.025865][ T5941] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 297.035663][ T5941] usb 3-1: media controller created [ 297.035920][ T8845] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 297.053117][ T5941] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 297.152075][ T5941] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 297.221702][ T5941] usb 3-1: USB disconnect, device number 27 [ 297.552725][ T5867] IPVS: starting estimator thread 0... [ 297.661134][ T8870] IPVS: using max 75 ests per chain, 180000 per kthread [ 297.681179][ T5808] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 297.681595][ T10] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 297.832080][ T5808] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 297.841944][ T5808] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 297.842685][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 297.852269][ T5808] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 297.861761][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 297.884432][ T5808] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 297.896704][ T5808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 297.900993][ T5867] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 297.905165][ T5808] usb 5-1: Product: syz [ 297.927487][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 297.930911][ T5808] usb 5-1: Manufacturer: syz [ 297.943918][ T5808] usb 5-1: SerialNumber: syz [ 297.949017][ T10] usb 6-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 297.958344][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.966782][ T10] usb 6-1: Product: syz [ 297.971309][ T10] usb 6-1: Manufacturer: syz [ 297.975925][ T10] usb 6-1: SerialNumber: syz [ 297.996305][ T5875] cdc_mbim 1-1:1.0: bind() failure [ 298.005849][ T10] usb 6-1: config 0 descriptor?? [ 298.019404][ T5875] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 298.029306][ T8868] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 298.036900][ T5875] cdc_ncm 1-1:1.1: bind() failure [ 298.060694][ T5875] usb 1-1: USB disconnect, device number 22 [ 298.093248][ T5867] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 137 [ 298.156543][ T5867] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 298.205131][ T5808] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 298.602253][ T5867] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 298.611804][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 298.619909][ T5867] usb 2-1: Product: syz [ 298.636503][ T5867] usb 2-1: Manufacturer: syz [ 298.637307][ T8865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.644569][ T5867] usb 2-1: SerialNumber: syz [ 298.655469][ T8865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.667664][ T8873] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 298.936411][ T5867] usblp 2-1:1.0: usblp1: USB Unidirectional printer dev 24 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 299.040916][ T5822] Bluetooth: hci1: command 0x0c1a tx timeout [ 299.093572][ T8882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.714'. [ 299.138919][ T5867] usb 5-1: USB disconnect, device number 21 [ 299.147661][ T8873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.167728][ T5867] usblp0: removed [ 299.177700][ T8873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.579780][ T8873] netlink: 'syz.1.711': attribute type 8 has an invalid length. [ 299.589138][ T5808] usb 2-1: USB disconnect, device number 24 [ 299.601392][ T5941] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 299.611073][ T5808] usblp1: removed [ 299.678254][ T8868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.687135][ T8868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.938656][ T30] audit: type=1400 audit(1775538462.852:419): avc: denied { map } for pid=8867 comm="syz.5.710" path="socket:[21469]" dev="sockfs" ino=21469 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 300.050925][ T5941] usb 1-1: Using ep0 maxpacket: 32 [ 300.058032][ T5941] usb 1-1: unable to get BOS descriptor or descriptor too short [ 300.069585][ T5941] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 300.086083][ T5941] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 300.097129][ T5941] usb 1-1: New USB device found, idVendor=17cc, idProduct=2305, bcdDevice= 0.40 [ 300.106243][ T5941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.114319][ T5941] usb 1-1: Product: syz [ 300.118482][ T5941] usb 1-1: Manufacturer: Б [ 300.123035][ T5941] usb 1-1: SerialNumber: syz [ 300.281149][ T5891] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 300.331300][ T8896] Cannot find add_set index 0 as target [ 300.338512][ T8885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.347124][ T8885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.421598][ T5891] usb 3-1: device descriptor read/64, error -71 [ 300.751295][ T5891] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 300.761296][ T8900] netlink: 'syz.1.719': attribute type 1 has an invalid length. [ 300.829973][ T8902] netlink: 28 bytes leftover after parsing attributes in process `syz.1.719'. [ 300.915731][ T5891] usb 3-1: device descriptor read/64, error -71 [ 300.989980][ T5867] usb 6-1: USB disconnect, device number 32 [ 301.217711][ T30] audit: type=1400 audit(1775538463.682:420): avc: denied { ioctl } for pid=8898 comm="syz.1.719" path="socket:[21482]" dev="sockfs" ino=21482 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 301.289078][ T5891] usb usb3-port1: attempt power cycle [ 301.501715][ T8900] 8021q: adding VLAN 0 to HW filter on device bond3 [ 301.834174][ T5891] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 302.004399][ T5891] usb 3-1: device descriptor read/8, error -71 [ 302.293563][ T5808] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 302.382952][ T5891] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 302.452154][ T5941] usb 1-1: USB disconnect, device number 23 [ 302.465538][ T5891] usb 3-1: device descriptor read/8, error -71 [ 302.584187][ T5808] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 137 [ 302.594536][ T5808] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 302.607977][ T5891] usb usb3-port1: unable to enumerate USB device [ 302.620075][ T5808] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 302.632263][ T5808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 302.640947][ T5808] usb 5-1: Product: syz [ 302.649974][ T5808] usb 5-1: Manufacturer: syz [ 302.656604][ T5808] usb 5-1: SerialNumber: syz [ 302.701203][ T5867] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 302.751052][ T8908] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 302.873933][ T8920] netlink: 'syz.0.725': attribute type 1 has an invalid length. [ 302.881951][ T8920] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.751019][ T791] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 303.775456][ T5808] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 303.802053][ T5867] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 303.810078][ T5867] usb 2-1: config 0 has no interface number 0 [ 303.888408][ T30] audit: type=1400 audit(1775538466.862:421): avc: denied { write } for pid=8921 comm="syz.2.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 303.969402][ T5867] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 303.987398][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.995702][ T5867] usb 2-1: Product: syz [ 303.997769][ T8908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.999856][ T5867] usb 2-1: Manufacturer: syz [ 303.999873][ T5867] usb 2-1: SerialNumber: syz [ 304.021746][ T5867] usb 2-1: config 0 descriptor?? [ 304.123002][ T791] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 304.144810][ T791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.155979][ T791] usb 6-1: Product: syz [ 304.158483][ T8908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.819407][ T8915] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 304.821947][ T791] usb 6-1: Manufacturer: syz [ 305.062485][ T791] usb 6-1: SerialNumber: syz [ 305.080924][ T791] usb 6-1: config 0 descriptor?? [ 305.086278][ T5867] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 305.105900][ T791] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 305.132518][ T5867] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 305.159470][ T791] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 305.178970][ T5867] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 305.196630][ T5867] usb 2-1: media controller created [ 305.202951][ T791] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 305.227513][ T791] usb 6-1: media controller created [ 305.236145][ T5867] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 305.253199][ T791] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 305.261626][ T8930] netlink: 'syz.4.721': attribute type 8 has an invalid length. [ 305.313290][ T5867] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 305.315696][ T30] audit: type=1400 audit(1775538468.282:422): avc: denied { bind } for pid=8937 comm="syz.0.731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 305.340330][ T8915] usb 2-1: dvb_usb_ec168: I2C read not implemented [ 305.357699][ C1] usblp0: nonzero write bulk status received: -71 [ 305.372664][ T791] DVB: Unable to find symbol mt352_attach() [ 305.512937][ T5867] usb 2-1: USB disconnect, device number 25 [ 305.969102][ T791] DVB: Unable to find symbol nxt6000_attach() [ 305.994313][ T791] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 306.026521][ T791] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input13 [ 306.392433][ T8946] blktrace: Concurrent blktraces are not allowed on sg0 [ 306.392898][ T791] dvb-usb: schedule remote query interval to 1000 msecs. [ 306.574245][ T791] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 306.880486][ T791] dvb-usb: bulk message failed: -22 (7/0) [ 306.886265][ T791] dvb-usb: bulk message failed: -22 (7/0) [ 306.927594][ T791] usb 6-1: USB disconnect, device number 33 [ 307.119701][ T8960] netlink: 32 bytes leftover after parsing attributes in process `syz.5.738'. [ 307.143019][ T30] audit: type=1400 audit(1775538470.122:423): avc: denied { append } for pid=8958 comm="syz.5.738" name="sg0" dev="devtmpfs" ino=810 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 307.204944][ T8961] 9p: Bad value for 'wfdno' [ 307.573149][ T791] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 307.843975][ T30] audit: type=1400 audit(1775538470.612:424): avc: denied { ioctl } for pid=8962 comm="syz.2.739" path="socket:[22701]" dev="sockfs" ino=22701 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 307.966479][ T5867] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 308.020749][ T5941] usb 5-1: USB disconnect, device number 22 [ 308.040938][ T5941] usblp0: removed [ 308.081164][ T5808] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 308.191622][ T5867] usb 1-1: device descriptor read/64, error -71 [ 308.553573][ T5867] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 308.568937][ T5808] usb 3-1: config 150 has an invalid interface number: 204 but max is 1 [ 308.952967][ T5808] usb 3-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 308.963434][ T5808] usb 3-1: config 150 has 1 interface, different from the descriptor's value: 2 [ 308.978567][ T30] audit: type=1400 audit(1775538471.622:425): avc: denied { bind } for pid=8974 comm="syz.1.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 308.999259][ T8977] Illegal XDP return value 2546442593 on prog (id 78) dev N/A, expect packet loss! [ 309.024421][ T5808] usb 3-1: config 150 has no interface number 0 [ 309.030685][ T5808] usb 3-1: config 150 interface 204 has no altsetting 0 [ 309.044788][ T5867] usb 1-1: device descriptor read/64, error -71 [ 309.073931][ T5808] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 309.100929][ T5808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.112095][ T5808] usb 3-1: Product: syz [ 309.116384][ T5808] usb 3-1: Manufacturer: syz [ 309.121764][ T5808] usb 3-1: SerialNumber: syz [ 309.172089][ T5867] usb usb1-port1: attempt power cycle [ 309.251212][ T8984] blktrace: Concurrent blktraces are not allowed on sg0 [ 309.364355][ T791] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 309.603384][ T791] usb 6-1: config 0 has no interfaces? [ 309.610153][ T791] usb 6-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 309.619684][ T791] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.629485][ T791] usb 6-1: config 0 descriptor?? [ 309.700912][ T5867] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 309.721309][ T5867] usb 1-1: device descriptor read/8, error -71 [ 309.750909][ T5875] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 309.838626][ T8981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.847385][ T8981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.856001][ T791] usb 6-1: USB disconnect, device number 34 [ 309.912709][ T5875] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 309.920753][ T5875] usb 5-1: config 0 has no interface number 0 [ 309.929416][ T5875] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 309.938534][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.946677][ T5875] usb 5-1: Product: syz [ 309.951121][ T5875] usb 5-1: Manufacturer: syz [ 309.955750][ T5875] usb 5-1: SerialNumber: syz [ 309.967160][ T5875] usb 5-1: config 0 descriptor?? [ 309.975270][ T5867] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 310.211000][ T5867] usb 1-1: device not accepting address 27, error -71 [ 310.311315][ T5939] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 310.313701][ T5867] usb usb1-port1: unable to enumerate USB device [ 310.326210][ T5875] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 310.368572][ T5875] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 310.379806][ T5875] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 310.393001][ T5875] usb 5-1: media controller created [ 310.413605][ T5875] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 310.486638][ T8996] comedi comedi3: comedi_config --init_data is deprecated [ 310.502287][ T5939] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 310.510723][ T5939] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 310.538107][ T5808] usb 3-1: USB disconnect, device number 32 [ 310.544368][ T5875] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 310.559288][ T5939] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 310.574278][ T5939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.596943][ T5939] usb 6-1: Product: syz [ 310.617677][ T5939] usb 6-1: Manufacturer: syz [ 310.623349][ T5939] usb 6-1: SerialNumber: syz [ 310.639697][ T5939] rtl8150 6-1:1.0: couldn't find required endpoints [ 310.643465][ T5875] usb 5-1: USB disconnect, device number 23 [ 310.656114][ T5939] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 311.029057][ T9009] blktrace: Concurrent blktraces are not allowed on sg0 [ 311.173817][ T9014] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.191899][ T9014] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.323491][ T9014] bond2: left promiscuous mode [ 311.712739][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.719142][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.771434][ T9011] netlink: 'syz.2.756': attribute type 1 has an invalid length. [ 311.835512][ T9011] 8021q: adding VLAN 0 to HW filter on device bond3 [ 311.877912][ T9008] bond3: (slave gretap1): making interface the new active one [ 311.893661][ T9008] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 312.052376][ T30] audit: type=1400 audit(1775538475.032:426): avc: denied { setopt } for pid=9019 comm="syz.4.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 312.076904][ T9020] random: crng reseeded on system resumption [ 312.128806][ T9025] netlink: 24 bytes leftover after parsing attributes in process `syz.2.761'. [ 312.143260][ T30] audit: type=1400 audit(1775538475.052:427): avc: denied { write } for pid=9019 comm="syz.4.759" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 312.497498][ T791] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 312.516219][ T9029] FAULT_INJECTION: forcing a failure. [ 312.516219][ T9029] name failslab, interval 1, probability 0, space 0, times 0 [ 312.534506][ T9026] netlink: 388 bytes leftover after parsing attributes in process `syz.2.761'. [ 312.538250][ T9029] CPU: 0 UID: 0 PID: 9029 Comm: syz.4.762 Not tainted syzkaller #0 PREEMPT(full) [ 312.538270][ T9029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 312.538279][ T9029] Call Trace: [ 312.538284][ T9029] [ 312.538290][ T9029] dump_stack_lvl+0x100/0x190 [ 312.538319][ T9029] should_fail_ex.cold+0x5/0xa [ 312.538339][ T9029] ? lsm_blob_alloc+0x68/0x90 [ 312.538356][ T9029] should_failslab+0xc2/0x120 [ 312.538372][ T9029] __kmalloc_noprof+0xe0/0x850 [ 312.538393][ T9029] ? trace_kmalloc+0x101/0x130 [ 312.538412][ T9029] lsm_blob_alloc+0x68/0x90 [ 312.538429][ T9029] security_sk_alloc+0x2d/0x290 [ 312.538450][ T9029] sk_prot_alloc+0x12a/0x2a0 [ 312.538467][ T9029] sk_alloc+0x36/0xe80 [ 312.538488][ T9029] bpf_prog_test_run_skb+0x4cd/0x3230 [ 312.538517][ T9029] ? find_held_lock+0x2b/0x80 [ 312.538536][ T9029] ? __fget_files+0x215/0x3d0 [ 312.538559][ T9029] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 312.538584][ T9029] ? fput+0x79/0x100 [ 312.538604][ T9029] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 312.538626][ T9029] __sys_bpf+0x1725/0x4b90 [ 312.538642][ T9029] ? irqentry_exit+0x180/0x670 [ 312.538659][ T9029] ? __pfx___sys_bpf+0x10/0x10 [ 312.538676][ T9029] ? find_held_lock+0x2b/0x80 [ 312.538699][ T9029] ? find_held_lock+0x2b/0x80 [ 312.538717][ T9029] ? ksys_write+0x190/0x250 [ 312.538735][ T9029] ? __mutex_unlock_slowpath+0x15c/0x790 [ 312.538751][ T9029] ? __fget_files+0x215/0x3d0 [ 312.538777][ T9029] ? fput+0x79/0x100 [ 312.538795][ T9029] ? ksys_write+0x1ac/0x250 [ 312.538809][ T9029] ? __pfx_ksys_write+0x10/0x10 [ 312.538827][ T9029] __x64_sys_bpf+0x7b/0xc0 [ 312.538843][ T9029] ? lockdep_hardirqs_on+0x78/0x100 [ 312.538870][ T9029] do_syscall_64+0x106/0xf80 [ 312.538883][ T9029] ? clear_bhb_loop+0x40/0x90 [ 312.538901][ T9029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.538916][ T9029] RIP: 0033:0x7f7091b9c819 [ 312.538929][ T9029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.538943][ T9029] RSP: 002b:00007f7092a9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 312.538958][ T9029] RAX: ffffffffffffffda RBX: 00007f7091e15fa0 RCX: 00007f7091b9c819 [ 312.538967][ T9029] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 312.538976][ T9029] RBP: 00007f7092a9d090 R08: 0000000000000000 R09: 0000000000000000 [ 312.538985][ T9029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.538993][ T9029] R13: 00007f7091e16038 R14: 00007f7091e15fa0 R15: 00007ffec9a4a888 [ 312.539014][ T9029] [ 312.660916][ T791] usb 2-1: device descriptor read/64, error -71 [ 312.848017][ T5867] usb 6-1: USB disconnect, device number 35 [ 313.080952][ T791] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 313.561549][ T791] usb 2-1: device descriptor read/64, error -71 [ 313.726008][ T791] usb usb2-port1: attempt power cycle [ 314.012533][ T9051] blktrace: Concurrent blktraces are not allowed on sg0 [ 314.275292][ T9058] netlink: 'syz.4.771': attribute type 1 has an invalid length. [ 314.410114][ T791] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 314.540186][ T9063] 9p: Bad value for 'wfdno' [ 315.118372][ T9058] 8021q: adding VLAN 0 to HW filter on device bond2 [ 315.255683][ T791] usb 2-1: device descriptor read/8, error -71 [ 315.361324][ T5939] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 315.511061][ T5939] usb 1-1: device descriptor read/64, error -71 [ 316.342308][ T5939] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 316.378615][ T9086] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 316.387899][ T9086] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 316.396520][ T9086] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 316.453787][ T30] audit: type=1400 audit(1775538479.422:428): avc: denied { bind } for pid=9082 comm="syz.4.781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 316.501180][ T5939] usb 1-1: device descriptor read/64, error -71 [ 316.502742][ T9089] blktrace: Concurrent blktraces are not allowed on sg0 [ 316.551180][ T30] audit: type=1400 audit(1775538479.462:429): avc: denied { listen } for pid=9082 comm="syz.4.781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 316.642936][ T5939] usb usb1-port1: attempt power cycle [ 316.759194][ T30] audit: type=1400 audit(1775538479.712:430): avc: denied { listen } for pid=9092 comm="syz.5.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 317.000912][ T5939] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 317.031400][ T5939] usb 1-1: device descriptor read/8, error -71 [ 317.080963][ T5808] usb 6-1: new low-speed USB device number 36 using dummy_hcd [ 317.251786][ T30] audit: type=1400 audit(1775538480.222:431): avc: denied { shutdown } for pid=9103 comm="syz.1.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 317.292209][ T5808] usb 6-1: Invalid ep0 maxpacket: 32 [ 317.298236][ T5939] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 317.301385][ T9105] tmpfs: Bad value for 'mpol' [ 317.323983][ T9106] netlink: 'syz.4.787': attribute type 1 has an invalid length. [ 317.343452][ T9106] 8021q: adding VLAN 0 to HW filter on device bond3 [ 317.350959][ T5941] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 317.730971][ T30] audit: type=1400 audit(1775538480.282:432): avc: denied { mounton } for pid=9103 comm="syz.1.788" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 317.910915][ T5808] usb 6-1: new low-speed USB device number 37 using dummy_hcd [ 318.132374][ T5939] usb 1-1: device descriptor read/8, error -71 [ 318.165821][ T9112] FAULT_INJECTION: forcing a failure. [ 318.165821][ T9112] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.263686][ T5939] usb usb1-port1: unable to enumerate USB device [ 318.270075][ T5941] usb 3-1: Using ep0 maxpacket: 8 [ 318.287726][ T5808] usb 6-1: Invalid ep0 maxpacket: 32 [ 318.309175][ T5941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.320810][ T5808] usb usb6-port1: attempt power cycle [ 318.327194][ T5941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.355565][ T5941] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 318.369344][ T5941] usb 3-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 318.379078][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.397541][ T9112] CPU: 0 UID: 0 PID: 9112 Comm: syz.0.790 Not tainted syzkaller #0 PREEMPT(full) [ 318.397562][ T9112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 318.397572][ T9112] Call Trace: [ 318.397578][ T9112] [ 318.397584][ T9112] dump_stack_lvl+0x100/0x190 [ 318.397618][ T9112] should_fail_ex.cold+0x5/0xa [ 318.397641][ T9112] _copy_to_user+0x32/0xd0 [ 318.397662][ T9112] simple_read_from_buffer+0xcb/0x170 [ 318.397683][ T9112] proc_fail_nth_read+0x1af/0x230 [ 318.397708][ T9112] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 318.397734][ T9112] ? rw_verify_area+0xce/0x6d0 [ 318.397759][ T9112] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 318.397783][ T9112] vfs_read+0x1e4/0xb30 [ 318.397801][ T9112] ? __pfx_vfs_read+0x10/0x10 [ 318.397814][ T9112] ? __fget_files+0x215/0x3d0 [ 318.397837][ T9112] ? __fget_files+0x21f/0x3d0 [ 318.397862][ T9112] ksys_read+0x12a/0x250 [ 318.397877][ T9112] ? __pfx_ksys_read+0x10/0x10 [ 318.397900][ T9112] do_syscall_64+0x106/0xf80 [ 318.397916][ T9112] ? clear_bhb_loop+0x40/0x90 [ 318.397937][ T9112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.397955][ T9112] RIP: 0033:0x7f641535d04e [ 318.397969][ T9112] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 318.397985][ T9112] RSP: 002b:00007f64161c9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 318.398001][ T9112] RAX: ffffffffffffffda RBX: 00007f64161ca6c0 RCX: 00007f641535d04e [ 318.398012][ T9112] RDX: 000000000000000f RSI: 00007f64161ca0a0 RDI: 0000000000000006 [ 318.398021][ T9112] RBP: 00007f64161ca090 R08: 0000000000000000 R09: 0000000000000000 [ 318.398030][ T9112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.398039][ T9112] R13: 00007f6415616038 R14: 00007f6415615fa0 R15: 00007fff0728a438 [ 318.398063][ T9112] [ 318.585981][ T5941] usb 3-1: config 0 descriptor?? [ 318.877008][ T30] audit: type=1400 audit(1775538481.822:433): avc: denied { ioctl } for pid=9117 comm="syz.1.792" path="/dev/input/event2" dev="devtmpfs" ino=922 ioctlcmd=0x4518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 318.947080][ T30] audit: type=1400 audit(1775538481.862:434): avc: denied { write } for pid=9115 comm="syz.0.793" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 318.984172][ T5808] usb 6-1: new low-speed USB device number 38 using dummy_hcd [ 319.025535][ T5808] usb 6-1: Invalid ep0 maxpacket: 32 [ 319.190914][ T5808] usb 6-1: new low-speed USB device number 39 using dummy_hcd [ 319.245310][ T5941] dragonrise 0003:0079:0006.0005: hidraw0: USB HID v0.0b Device [HID 0079:0006] on usb-dummy_hcd.2-1/input0 [ 319.301675][ T5941] dragonrise 0003:0079:0006.0005: no inputs found [ 319.319966][ T5808] usb 6-1: Invalid ep0 maxpacket: 32 [ 319.330238][ T5808] usb usb6-port1: unable to enumerate USB device [ 319.336938][ T5941] dragonrise 0003:0079:0006.0005: force feedback init failed [ 319.598641][ T9132] netlink: 'syz.4.795': attribute type 3 has an invalid length. [ 320.498177][ T9136] ubi31: attaching mtd0 [ 320.503175][ T9136] ubi31: scanning is finished [ 320.533886][ T9141] xt_hashlimit: size too large, truncated to 1048576 [ 320.624217][ T9136] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 320.632261][ T9136] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 320.639533][ T9136] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 320.646599][ T9136] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 320.654314][ T9136] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 320.661155][ T9136] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 320.669799][ T9136] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 800716046 [ 320.679782][ T9136] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 320.763766][ T9145] FAULT_INJECTION: forcing a failure. [ 320.763766][ T9145] name failslab, interval 1, probability 0, space 0, times 0 [ 320.790936][ T9144] ubi31: background thread "ubi_bgt31d" started, PID 9144 [ 320.835926][ T9145] CPU: 0 UID: 0 PID: 9145 Comm: syz.0.798 Not tainted syzkaller #0 PREEMPT(full) [ 320.835951][ T9145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 320.835961][ T9145] Call Trace: [ 320.835968][ T9145] [ 320.835974][ T9145] dump_stack_lvl+0x100/0x190 [ 320.836008][ T9145] should_fail_ex.cold+0x5/0xa [ 320.836031][ T9145] should_failslab+0xc2/0x120 [ 320.836050][ T9145] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 320.836076][ T9145] ? skb_clone+0x190/0x400 [ 320.836111][ T9145] skb_clone+0x190/0x400 [ 320.836138][ T9145] netlink_deliver_tap+0xaed/0xcc0 [ 320.836171][ T9145] netlink_unicast+0x650/0x870 [ 320.836191][ T9145] ? __pfx_netlink_unicast+0x10/0x10 [ 320.836218][ T9145] netlink_sendmsg+0x8b0/0xda0 [ 320.836239][ T9145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.836255][ T9145] ? __might_fault+0x10/0x140 [ 320.836290][ T9145] ____sys_sendmsg+0x9e1/0xb70 [ 320.836308][ T9145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.836327][ T9145] ? __pfx_____sys_sendmsg+0x10/0x10 [ 320.836358][ T9145] ___sys_sendmsg+0x190/0x1e0 [ 320.836380][ T9145] ? __pfx____sys_sendmsg+0x10/0x10 [ 320.836431][ T9145] __sys_sendmsg+0x170/0x220 [ 320.836457][ T9145] ? __pfx___sys_sendmsg+0x10/0x10 [ 320.836499][ T9145] do_syscall_64+0x106/0xf80 [ 320.836515][ T9145] ? clear_bhb_loop+0x40/0x90 [ 320.836537][ T9145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.836554][ T9145] RIP: 0033:0x7f641539c819 [ 320.836569][ T9145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.836586][ T9145] RSP: 002b:00007f64161a9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 320.836605][ T9145] RAX: ffffffffffffffda RBX: 00007f6415616090 RCX: 00007f641539c819 [ 320.836616][ T9145] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 320.836626][ T9145] RBP: 00007f64161a9090 R08: 0000000000000000 R09: 0000000000000000 [ 320.836635][ T9145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.836645][ T9145] R13: 00007f6415616128 R14: 00007f6415616090 R15: 00007fff0728a438 [ 320.836669][ T9145] [ 321.064326][ T9145] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.101143][ T10] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 321.127747][ T9145] bridge_slave_0 (unregistering): left allmulticast mode [ 321.136175][ T9145] bridge_slave_0 (unregistering): left promiscuous mode [ 321.145446][ T9145] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.254030][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 321.264605][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.280983][ T10] usb 5-1: Product: syz [ 321.290969][ T10] usb 5-1: Manufacturer: syz [ 321.299996][ T10] usb 5-1: SerialNumber: syz [ 321.526159][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 321.555576][ T30] audit: type=1400 audit(1775538484.532:435): avc: denied { setopt } for pid=9149 comm="syz.1.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 321.557588][ T9150] FAULT_INJECTION: forcing a failure. [ 321.557588][ T9150] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.589745][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 321.611127][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 321.635177][ T9150] CPU: 0 UID: 0 PID: 9150 Comm: syz.1.802 Not tainted syzkaller #0 PREEMPT(full) [ 321.635202][ T9150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 321.635213][ T9150] Call Trace: [ 321.635219][ T9150] [ 321.635226][ T9150] dump_stack_lvl+0x100/0x190 [ 321.635258][ T9150] should_fail_ex.cold+0x5/0xa [ 321.635281][ T9150] _copy_from_iter+0x1f4/0x1690 [ 321.635306][ T9150] ? __pfx__copy_from_iter+0x10/0x10 [ 321.635324][ T9150] ? _copy_from_iter+0x270/0x1690 [ 321.635347][ T9150] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 321.635372][ T9150] skb_copy_datagram_from_iter+0x11f/0x720 [ 321.635394][ T9150] ? _kstrtoull+0x13c/0x1f0 [ 321.635416][ T9150] ? iov_iter_advance+0xac/0x6d0 [ 321.635431][ T9150] ? __pfx__kstrtoull+0x10/0x10 [ 321.635456][ T9150] tun_get_user+0x1884/0x3e10 [ 321.635485][ T9150] ? __pfx_tun_get_user+0x10/0x10 [ 321.635506][ T9150] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 321.635536][ T9150] ? find_held_lock+0x2b/0x80 [ 321.635561][ T9150] ? tun_get+0x191/0x370 [ 321.635576][ T9150] ? tun_get+0x191/0x370 [ 321.635598][ T9150] tun_chr_write_iter+0xdc/0x200 [ 321.635617][ T9150] vfs_write+0x6ac/0x1070 [ 321.635634][ T9150] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 321.635653][ T9150] ? __pfx_vfs_write+0x10/0x10 [ 321.635666][ T9150] ? find_held_lock+0x2b/0x80 [ 321.635703][ T9150] ksys_write+0x12a/0x250 [ 321.635717][ T9150] ? __pfx_ksys_write+0x10/0x10 [ 321.635739][ T9150] do_syscall_64+0x106/0xf80 [ 321.635755][ T9150] ? clear_bhb_loop+0x40/0x90 [ 321.635775][ T9150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.635792][ T9150] RIP: 0033:0x7fe2dd99c819 [ 321.635806][ T9150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.635823][ T9150] RSP: 002b:00007fe2de811028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 321.635838][ T9150] RAX: ffffffffffffffda RBX: 00007fe2ddc15fa0 RCX: 00007fe2dd99c819 [ 321.635850][ T9150] RDX: 0000000000000078 RSI: 0000200000000780 RDI: 0000000000000004 [ 321.635861][ T9150] RBP: 00007fe2de811090 R08: 0000000000000000 R09: 0000000000000000 [ 321.635872][ T9150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.635883][ T9150] R13: 00007fe2ddc16038 R14: 00007fe2ddc15fa0 R15: 00007ffefd0cbda8 [ 321.635907][ T9150] [ 321.872004][ T30] audit: type=1400 audit(1775538484.602:436): avc: denied { read } for pid=9147 comm="syz.0.801" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 321.894480][ T30] audit: type=1400 audit(1775538484.602:437): avc: denied { open } for pid=9147 comm="syz.0.801" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 321.917377][ T30] audit: type=1400 audit(1775538484.602:438): avc: denied { ioctl } for pid=9147 comm="syz.0.801" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 321.943259][ T10] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 321.957294][ T10] usb 5-1: USB disconnect, device number 24 [ 322.519020][ T5941] usb 3-1: USB disconnect, device number 33 [ 322.755426][ T9160] ubi31: detaching mtd0 [ 322.847525][ T9160] ubi31: mtd0 is detached [ 323.015678][ T9166] 9p: Bad value for 'wfdno' [ 324.114388][ T30] audit: type=1400 audit(1775538486.722:439): avc: denied { mount } for pid=9161 comm="syz.2.806" name="/" dev="hugetlbfs" ino=23713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 324.117748][ T10] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 324.270993][ T10] usb 6-1: device descriptor read/64, error -71 [ 324.533264][ T10] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 325.021454][ T10] usb 6-1: device descriptor read/64, error -71 [ 325.154705][ T10] usb usb6-port1: attempt power cycle [ 325.829885][ T9192] netlink: 14 bytes leftover after parsing attributes in process `syz.4.816'. [ 325.882003][ T9195] netlink: 14 bytes leftover after parsing attributes in process `syz.4.816'. [ 325.919156][ T9192] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.954446][ T9192] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.997123][ T9193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.811'. [ 326.055806][ T9192] bond0 (unregistering): Released all slaves [ 326.709909][ T9212] 9p: Bad value for 'wfdno' [ 327.081185][ T10] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 327.111501][ T10] usb 6-1: device descriptor read/8, error -71 [ 327.366847][ T10] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 327.399917][ T9219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.822'. [ 327.421142][ T5875] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 327.429405][ T10] usb 6-1: device descriptor read/8, error -71 [ 327.552693][ T10] usb usb6-port1: unable to enumerate USB device [ 327.588412][ T5875] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 327.603037][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.696871][ T5875] usb 3-1: Product: syz [ 327.701611][ T5875] usb 3-1: Manufacturer: syz [ 327.706447][ T5875] usb 3-1: SerialNumber: syz [ 327.723376][ T5875] usb 3-1: config 0 descriptor?? [ 327.730654][ T5875] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 327.752297][ T5875] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 327.769624][ T5875] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 327.797631][ T5875] usb 3-1: media controller created [ 327.835463][ T5875] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 327.978994][ T5875] DVB: Unable to find symbol mt352_attach() [ 328.145906][ T5875] DVB: Unable to find symbol nxt6000_attach() [ 328.158086][ T5875] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 328.174391][ T5875] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input14 [ 328.208012][ T5875] dvb-usb: schedule remote query interval to 1000 msecs. [ 328.217819][ T5875] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 328.247645][ T5875] dvb-usb: bulk message failed: -22 (7/0) [ 328.254120][ T5875] dvb-usb: bulk message failed: -22 (7/0) [ 328.600916][ T10] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 328.741237][ T10] usb 2-1: device descriptor read/64, error -71 [ 329.031482][ T10] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 329.201001][ T9214] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 329.201419][ T10] usb 2-1: device descriptor read/64, error -71 [ 329.328431][ T5875] dvb-usb: bulk message failed: -22 (7/0) [ 329.335892][ T5875] dvb-usb: error while querying for an remote control event. [ 329.374717][ T1117] usb 3-1: USB disconnect, device number 34 [ 329.425455][ T1117] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 329.461110][ T10] usb usb2-port1: attempt power cycle [ 329.879111][ T5808] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 329.986068][ T10] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 330.011536][ T10] usb 2-1: device descriptor read/8, error -71 [ 330.065741][ T5808] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 137 [ 330.076207][ T5808] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 330.118720][ T5808] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 330.129510][ T5808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 330.174517][ T5808] usb 6-1: Product: syz [ 330.198903][ T5808] usb 6-1: Manufacturer: syz [ 330.224727][ T5808] usb 6-1: SerialNumber: syz [ 330.427621][ T9243] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 330.463367][ T30] audit: type=1400 audit(1775538493.442:440): avc: denied { write } for pid=9258 comm="syz.4.835" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 330.563200][ T10] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 330.602350][ T10] usb 2-1: device descriptor read/8, error -71 [ 330.675902][ T5808] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 44 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 330.756883][ T10] usb usb2-port1: unable to enumerate USB device [ 330.947034][ T9270] ISOFS: Unable to identify CD-ROM format. [ 331.109581][ T9243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.147948][ T9243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.251752][ T9271] netlink: 'syz.5.830': attribute type 8 has an invalid length. [ 331.266868][ C1] usblp0: nonzero write bulk status received: -71 [ 332.195508][ T9284] No control pipe specified [ 332.311957][ T10] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 332.474522][ T5939] usb 6-1: USB disconnect, device number 44 [ 332.483535][ T5939] usblp0: removed [ 332.523274][ T5875] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 332.532219][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 332.549874][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 332.593850][ T10] usb 2-1: config 6 has an invalid interface number: 162 but max is 0 [ 332.602486][ T10] usb 2-1: config 6 has no interface number 0 [ 332.608689][ T10] usb 2-1: config 6 interface 162 has no altsetting 0 [ 332.621751][ T10] usb 2-1: New USB device found, idVendor=0846, idProduct=9041, bcdDevice=d7.c4 [ 332.630967][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.839602][ T10] usb 2-1: Product: syz [ 332.894518][ T5875] usb 1-1: device descriptor read/64, error -71 [ 332.927289][ T10] usb 2-1: Manufacturer: syz [ 332.932510][ T10] usb 2-1: SerialNumber: syz [ 332.937303][ T9290] xt_hashlimit: size too large, truncated to 1048576 [ 333.277499][ T5875] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 333.431502][ T5875] usb 1-1: device descriptor read/64, error -71 [ 333.495222][ T9296] netlink: 12 bytes leftover after parsing attributes in process `syz.5.846'. [ 333.614893][ T5875] usb usb1-port1: attempt power cycle [ 334.458643][ T10] usb 2-1: USB disconnect, device number 34 [ 334.532219][ T5939] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 334.729895][ T5939] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 137 [ 334.787785][ T5939] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 334.917862][ T5939] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 334.937064][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 334.954592][ T5939] usb 5-1: Product: syz [ 334.962924][ T5939] usb 5-1: Manufacturer: syz [ 334.967609][ T5939] usb 5-1: SerialNumber: syz [ 334.985921][ T9300] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 336.141988][ T5875] usb usb1-port1: Cannot enable. Maybe the USB cable is bad? [ 336.164072][ T5939] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 25 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 336.272111][ T5875] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 336.284777][ T5867] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 336.920957][ T10] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 336.930775][ T5875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 337.060066][ T5875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.070930][ T5875] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 337.101788][ T5875] usb 1-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 337.119950][ T5867] usb 6-1: Using ep0 maxpacket: 32 [ 337.180888][ T5867] usb 6-1: unable to get BOS descriptor or descriptor too short [ 337.241601][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 137 [ 337.253005][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.261150][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 337.276413][ T5867] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 337.287829][ T5875] usb 1-1: config 0 descriptor?? [ 337.301123][ T5867] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 337.313444][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 337.322847][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 337.323135][ T5941] usb 5-1: USB disconnect, device number 25 [ 337.331793][ T5867] usb 6-1: New USB device found, idVendor=17cc, idProduct=2305, bcdDevice= 0.40 [ 337.348187][ T10] usb 2-1: Product: syz [ 337.354468][ T10] usb 2-1: Manufacturer: syz [ 337.359084][ T10] usb 2-1: SerialNumber: syz [ 337.363854][ T5941] usblp0: removed [ 337.367531][ T5867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.367554][ T5867] usb 6-1: Product: syz [ 337.367568][ T5867] usb 6-1: Manufacturer: Б [ 337.367602][ T5867] usb 6-1: SerialNumber: syz [ 337.401278][ T9317] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 337.410897][ T5939] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 337.551988][ T5875] usbhid 1-1:0.0: can't add hid device: -71 [ 337.558025][ T5875] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 337.569355][ T5875] usb 1-1: USB disconnect, device number 35 [ 337.571532][ T5939] usb 3-1: Using ep0 maxpacket: 32 [ 337.585135][ T5939] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 337.599414][ T5939] usb 3-1: config 0 has no interface number 0 [ 337.607956][ T9315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.610504][ T5939] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 337.616756][ T9315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.629756][ T5939] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 337.646833][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.647536][ T10] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 35 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 337.688182][ T5939] usb 3-1: Product: syz [ 337.693244][ T5939] usb 3-1: Manufacturer: syz [ 337.698178][ T5939] usb 3-1: SerialNumber: syz [ 337.728149][ T5939] usb 3-1: config 0 descriptor?? [ 337.773045][ T5939] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 337.783739][ T5939] em28xx 3-1:0.132: Video interface 132 found: [ 338.039856][ T9317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.058702][ T9317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.125451][ T9330] netlink: 'syz.1.854': attribute type 8 has an invalid length. [ 338.141245][ C1] usblp0: nonzero write bulk status received: -71 [ 338.155942][ T30] audit: type=1400 audit(1775538501.132:441): avc: denied { create } for pid=9331 comm="syz.4.857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 338.259040][ T5939] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 338.342331][ T9332] tipc: Trying to set illegal importance in message [ 338.342333][ T30] audit: type=1400 audit(1775538501.322:442): avc: denied { setopt } for pid=9331 comm="syz.4.857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 338.515618][ T10] usb 2-1: USB disconnect, device number 35 [ 338.532550][ T10] usblp0: removed [ 338.572757][ T9337] blktrace: Concurrent blktraces are not allowed on sg0 [ 338.764382][ T5867] usb 6-1: USB disconnect, device number 45 [ 338.852556][ T5939] em28xx 3-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 339.015043][ T5939] em28xx 3-1:0.132: board has no eeprom [ 339.084693][ T30] audit: type=1400 audit(1775538502.062:443): avc: denied { create } for pid=9321 comm="syz.2.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 339.161283][ T5939] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 339.169584][ T5939] em28xx 3-1:0.132: analog set to bulk mode. [ 339.177206][ T5808] em28xx 3-1:0.132: Registering V4L2 extension [ 339.190047][ T5939] usb 3-1: USB disconnect, device number 35 [ 339.207825][ T5939] em28xx 3-1:0.132: Disconnecting em28xx [ 339.230280][ T9346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.862'. [ 339.861170][ T5867] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 339.887628][ T5808] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 339.914431][ T5808] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 339.965395][ T5808] em28xx 3-1:0.132: No AC97 audio processor [ 339.993493][ T5808] usb 3-1: Decoder not found [ 340.009431][ T5808] em28xx 3-1:0.132: failed to create media graph [ 340.021191][ T5867] usb 6-1: Using ep0 maxpacket: 32 [ 340.037540][ T5867] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.070925][ T5867] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 340.111038][ T5808] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 340.144023][ T5808] em28xx 3-1:0.132: Remote control support is not available for this card. [ 340.192460][ T5867] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 340.206245][ T5939] em28xx 3-1:0.132: Closing input extension [ 340.210817][ T5867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.607769][ T9363] xt_l2tp: v2 sid > 0xffff: 117440512 [ 340.624352][ T5939] em28xx 3-1:0.132: Freeing device [ 340.624675][ T5867] usb 6-1: config 0 descriptor?? [ 340.646526][ T30] audit: type=1400 audit(1775538503.612:444): avc: denied { ioctl } for pid=9361 comm="syz.1.866" path="socket:[24255]" dev="sockfs" ino=24255 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 340.863325][ T9366] netlink: 'syz.4.867': attribute type 3 has an invalid length. [ 341.288338][ T30] audit: type=1400 audit(1775538504.242:445): avc: denied { write } for pid=9367 comm="syz.1.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 342.229864][ T9384] Cannot find add_set index 0 as target [ 342.231261][ T1117] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 342.311075][ T5939] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 342.511014][ T5867] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 342.622329][ T5939] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 137 [ 342.671257][ T5867] usb 1-1: device descriptor read/64, error -71 [ 342.678737][ T5939] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 342.850991][ T1117] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 342.860740][ T1117] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 342.896004][ T5939] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 342.905484][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 342.920974][ T5939] usb 2-1: Product: syz [ 342.926291][ T5939] usb 2-1: Manufacturer: syz [ 342.931498][ T5939] usb 2-1: SerialNumber: syz [ 342.939568][ T1117] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 342.941540][ T5875] usb 6-1: USB disconnect, device number 46 [ 342.948864][ T1117] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 342.966991][ T1117] usb 3-1: Product: syz [ 342.971924][ T9379] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 342.985067][ T5867] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 342.988925][ T1117] usb 3-1: Manufacturer: syz [ 343.001886][ T1117] usb 3-1: SerialNumber: syz [ 343.112041][ T9388] syzkaller0: entered promiscuous mode [ 343.135727][ T9388] syzkaller0: entered allmulticast mode [ 343.141474][ T5867] usb 1-1: device descriptor read/64, error -71 [ 343.166329][ T9388] 0: reclassify loop, rule prio 0, protocol 800 [ 343.189672][ T5939] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 36 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 343.261675][ T5867] usb usb1-port1: attempt power cycle [ 343.294838][ T9392] netlink: 12 bytes leftover after parsing attributes in process `syz.4.876'. [ 343.403732][ T9379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.432539][ T9379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.891572][ T9395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.893080][ T9396] netlink: 'syz.1.872': attribute type 8 has an invalid length. [ 343.900264][ T9395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.917507][ C0] usblp0: nonzero write bulk status received: -71 [ 343.931035][ T5867] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 343.962528][ T5867] usb 1-1: device descriptor read/8, error -71 [ 344.220630][ T5867] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 344.291445][ T5867] usb 1-1: device descriptor read/8, error -71 [ 344.431333][ T9399] blktrace: Concurrent blktraces are not allowed on sg0 [ 344.581554][ T5867] usb usb1-port1: unable to enumerate USB device [ 345.211014][ T9404] netlink: 4 bytes leftover after parsing attributes in process `syz.5.878'. [ 345.641861][ T9408] netlink: 264 bytes leftover after parsing attributes in process `syz.0.880'. [ 345.738497][ T9408] team0: Device vlan3 is already an upper device of the team interface [ 345.891055][ T5867] usb 3-1: USB disconnect, device number 36 [ 345.965895][ T5941] usb 2-1: USB disconnect, device number 36 [ 345.988232][ T5941] usblp0: removed [ 346.084236][ T9416] FAULT_INJECTION: forcing a failure. [ 346.084236][ T9416] name failslab, interval 1, probability 0, space 0, times 0 [ 346.153745][ T9416] CPU: 1 UID: 0 PID: 9416 Comm: syz.1.882 Not tainted syzkaller #0 PREEMPT(full) [ 346.153761][ T9416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 346.153768][ T9416] Call Trace: [ 346.153772][ T9416] [ 346.153777][ T9416] dump_stack_lvl+0x100/0x190 [ 346.153799][ T9416] should_fail_ex.cold+0x5/0xa [ 346.153813][ T9416] ? lsm_blob_alloc+0x68/0x90 [ 346.153825][ T9416] should_failslab+0xc2/0x120 [ 346.153836][ T9416] __kmalloc_noprof+0xe0/0x850 [ 346.153852][ T9416] ? trace_kmalloc+0x101/0x130 [ 346.153865][ T9416] lsm_blob_alloc+0x68/0x90 [ 346.153878][ T9416] security_sk_alloc+0x2d/0x290 [ 346.153893][ T9416] sk_prot_alloc+0x12a/0x2a0 [ 346.153905][ T9416] sk_alloc+0x36/0xe80 [ 346.153921][ T9416] bpf_prog_test_run_skb+0x4cd/0x3230 [ 346.153943][ T9416] ? find_held_lock+0x2b/0x80 [ 346.153957][ T9416] ? __fget_files+0x215/0x3d0 [ 346.153972][ T9416] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 346.153991][ T9416] ? fput+0x79/0x100 [ 346.154006][ T9416] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 346.154023][ T9416] __sys_bpf+0x1725/0x4b90 [ 346.154037][ T9416] ? __pfx___sys_bpf+0x10/0x10 [ 346.154048][ T9416] ? proc_fail_nth_write+0x9f/0x220 [ 346.154064][ T9416] ? find_held_lock+0x2b/0x80 [ 346.154080][ T9416] ? find_held_lock+0x2b/0x80 [ 346.154094][ T9416] ? ksys_write+0x190/0x250 [ 346.154107][ T9416] ? __mutex_unlock_slowpath+0x15c/0x790 [ 346.154123][ T9416] ? __fget_files+0x215/0x3d0 [ 346.154141][ T9416] ? fput+0x79/0x100 [ 346.154153][ T9416] ? ksys_write+0x1ac/0x250 [ 346.154163][ T9416] ? __pfx_ksys_write+0x10/0x10 [ 346.154175][ T9416] __x64_sys_bpf+0x7b/0xc0 [ 346.154187][ T9416] ? lockdep_hardirqs_on+0x78/0x100 [ 346.154204][ T9416] do_syscall_64+0x106/0xf80 [ 346.154213][ T9416] ? clear_bhb_loop+0x40/0x90 [ 346.154226][ T9416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.154237][ T9416] RIP: 0033:0x7fe2dd99c819 [ 346.154247][ T9416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.154258][ T9416] RSP: 002b:00007fe2de811028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 346.154269][ T9416] RAX: ffffffffffffffda RBX: 00007fe2ddc15fa0 RCX: 00007fe2dd99c819 [ 346.154275][ T9416] RDX: 0000000000000022 RSI: 0000200000000100 RDI: 000000000000000a [ 346.154281][ T9416] RBP: 00007fe2de811090 R08: 0000000000000000 R09: 0000000000000000 [ 346.154287][ T9416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.154292][ T9416] R13: 00007fe2ddc16038 R14: 00007fe2ddc15fa0 R15: 00007ffefd0cbda8 [ 346.154306][ T9416] [ 346.816491][ T9427] netlink: 'syz.0.884': attribute type 1 has an invalid length. [ 347.024962][ T9427] 8021q: adding VLAN 0 to HW filter on device bond4 [ 347.462672][ T9436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.887'. [ 348.454458][ T9442] genirq: Flags mismatch irq 4. 00200000 (aio_iiro_16) vs. 00200080 (ttyS0) [ 348.522877][ T5808] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 348.606635][ T9454] netlink: 'syz.0.893': attribute type 1 has an invalid length. [ 348.661275][ T1117] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 348.669192][ T5808] usb 6-1: device descriptor read/64, error -71 [ 348.705936][ T9454] 8021q: adding VLAN 0 to HW filter on device bond5 [ 348.715062][ T5941] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 348.834121][ T1117] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 348.848538][ T1117] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 348.879577][ T1117] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 348.914557][ T5941] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 137 [ 348.924746][ T5808] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 348.939070][ T5941] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 348.967982][ T1117] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 348.997214][ T1117] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 349.015311][ T5941] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 349.036873][ T1117] usb 5-1: Product: syz [ 349.041919][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 349.059765][ T1117] usb 5-1: Manufacturer: syz [ 349.077926][ T5941] usb 3-1: Product: syz [ 349.082895][ T5808] usb 6-1: device descriptor read/64, error -71 [ 349.097520][ T1117] usb 5-1: SerialNumber: syz [ 349.107940][ T5941] usb 3-1: Manufacturer: syz [ 349.150187][ T5941] usb 3-1: SerialNumber: syz [ 349.204021][ T5808] usb usb6-port1: attempt power cycle [ 349.215726][ T9451] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 349.361726][ T1117] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 26 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 349.446381][ T5941] usblp 3-1:1.0: usblp1: USB Unidirectional printer dev 37 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 349.597703][ T9449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.614855][ T5808] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 349.662944][ T9449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.665211][ T9451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.733523][ T5808] usb 6-1: device descriptor read/8, error -71 [ 349.742818][ T9451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.743533][ T9463] syzkaller0: entered promiscuous mode [ 349.770902][ T9463] syzkaller0: entered allmulticast mode [ 349.885842][ T9468] netlink: 'syz.4.891': attribute type 8 has an invalid length. [ 349.892109][ T9469] netlink: 'syz.2.892': attribute type 8 has an invalid length. [ 349.970921][ T5808] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 350.001485][ T5808] usb 6-1: device descriptor read/8, error -71 [ 350.253517][ T5808] usb usb6-port1: unable to enumerate USB device [ 350.433094][ T9477] FAULT_INJECTION: forcing a failure. [ 350.433094][ T9477] name failslab, interval 1, probability 0, space 0, times 0 [ 350.447876][ T9477] CPU: 0 UID: 0 PID: 9477 Comm: syz.0.899 Not tainted syzkaller #0 PREEMPT(full) [ 350.447898][ T9477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 350.447908][ T9477] Call Trace: [ 350.447913][ T9477] [ 350.447920][ T9477] dump_stack_lvl+0x100/0x190 [ 350.447941][ T9477] should_fail_ex.cold+0x5/0xa [ 350.447956][ T9477] should_failslab+0xc2/0x120 [ 350.447968][ T9477] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 350.447984][ T9477] ? skb_clone+0x190/0x400 [ 350.448003][ T9477] skb_clone+0x190/0x400 [ 350.448019][ T9477] netlink_deliver_tap+0xaed/0xcc0 [ 350.448039][ T9477] netlink_unicast+0x650/0x870 [ 350.448051][ T9477] ? __pfx_netlink_unicast+0x10/0x10 [ 350.448066][ T9477] netlink_sendmsg+0x8b0/0xda0 [ 350.448079][ T9477] ? __pfx_netlink_sendmsg+0x10/0x10 [ 350.448088][ T9477] ? __might_fault+0x10/0x140 [ 350.448108][ T9477] ____sys_sendmsg+0x9e1/0xb70 [ 350.448119][ T9477] ? __pfx_netlink_sendmsg+0x10/0x10 [ 350.448130][ T9477] ? __pfx_____sys_sendmsg+0x10/0x10 [ 350.448148][ T9477] ___sys_sendmsg+0x190/0x1e0 [ 350.448161][ T9477] ? __pfx____sys_sendmsg+0x10/0x10 [ 350.448192][ T9477] __sys_sendmsg+0x170/0x220 [ 350.448208][ T9477] ? __pfx___sys_sendmsg+0x10/0x10 [ 350.448232][ T9477] do_syscall_64+0x106/0xf80 [ 350.448242][ T9477] ? clear_bhb_loop+0x40/0x90 [ 350.448255][ T9477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.448267][ T9477] RIP: 0033:0x7f641539c819 [ 350.448276][ T9477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.448287][ T9477] RSP: 002b:00007f64161ca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 350.448297][ T9477] RAX: ffffffffffffffda RBX: 00007f6415615fa0 RCX: 00007f641539c819 [ 350.448304][ T9477] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 350.448310][ T9477] RBP: 00007f64161ca090 R08: 0000000000000000 R09: 0000000000000000 [ 350.448316][ T9477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.448322][ T9477] R13: 00007f6415616038 R14: 00007f6415615fa0 R15: 00007fff0728a438 [ 350.448335][ T9477] [ 350.692599][ T9479] tipc: Started in network mode [ 350.697620][ T9479] tipc: Node identity b2e0718481f1, cluster identity 4711 [ 350.705353][ T9479] tipc: Enabled bearer , priority 0 [ 350.714079][ T9479] syzkaller0: entered promiscuous mode [ 350.719629][ T9479] syzkaller0: entered allmulticast mode [ 350.770088][ T9479] tipc: Resetting bearer [ 350.787226][ T9478] tipc: Resetting bearer [ 350.798030][ T9478] tipc: Disabling bearer [ 350.907430][ T5808] usb 3-1: USB disconnect, device number 37 [ 350.918296][ T5808] usblp1: removed [ 350.935506][ T5931] usb 5-1: USB disconnect, device number 26 [ 350.943544][ T5931] usblp0: removed [ 350.984275][ T9483] netlink: 12 bytes leftover after parsing attributes in process `syz.1.902'. [ 352.290929][ T9496] netlink: 'syz.1.904': attribute type 1 has an invalid length. [ 352.491389][ T9496] 8021q: adding VLAN 0 to HW filter on device bond4 [ 352.510942][ T5931] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 352.734324][ T5931] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 353.104613][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 353.252247][ T5931] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 353.312600][ T9507] netlink: 'syz.2.908': attribute type 3 has an invalid length. [ 353.369313][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.478084][ T5931] usb 1-1: Product: syz [ 353.485944][ T5931] usb 1-1: Manufacturer: syz [ 353.500064][ T5931] usb 1-1: SerialNumber: syz [ 353.790259][ T5931] usb 1-1: config 0 descriptor?? [ 353.807162][ T9514] tipc: Cannot configure node identity twice [ 354.203637][ T9520] netlink: 32 bytes leftover after parsing attributes in process `syz.2.911'. [ 354.212565][ T9520] netlink: 32 bytes leftover after parsing attributes in process `syz.2.911'. [ 354.807926][ T9531] netlink: 12 bytes leftover after parsing attributes in process `syz.1.914'. [ 354.921140][ T9533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.913'. [ 356.388352][ T5941] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 357.186626][ T5941] usb 6-1: config 0 has no interfaces? [ 357.205274][ T5941] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 357.250984][ T5941] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 357.269257][ T5941] usb 6-1: Product: syz [ 357.289426][ T5941] usb 6-1: Manufacturer: syz [ 357.323119][ T5941] usb 6-1: SerialNumber: syz [ 357.350500][ T5941] usb 6-1: config 0 descriptor?? [ 357.392028][ T5941] usb 1-1: USB disconnect, device number 40 [ 357.613814][ T5867] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 357.772320][ T5867] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 357.951897][ T9539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.212958][ T5867] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 358.224675][ T9539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.531470][ T5867] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 358.746916][ T9564] netlink: 'syz.0.921': attribute type 4 has an invalid length. [ 358.756115][ T9564] netlink: 'syz.0.921': attribute type 1 has an invalid length. [ 358.791199][ T5867] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 358.809234][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 358.845701][ T5867] usb 5-1: Product: syz [ 358.879690][ T5867] usb 5-1: Manufacturer: syz [ 358.884471][ T5867] usb 5-1: SerialNumber: syz [ 359.090932][ T10] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 359.100917][ T5931] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 359.114019][ T5867] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 359.281228][ T5931] usb 1-1: Using ep0 maxpacket: 16 [ 359.294232][ T5931] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 359.304486][ T5931] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 359.317415][ T9551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.325804][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 137 [ 359.337911][ T5931] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 359.347021][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 359.360209][ T9551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.369791][ T5931] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 359.379276][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.387651][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 359.399340][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 359.412059][ T5931] usb 1-1: Product: syz [ 359.416237][ T10] usb 2-1: Product: syz [ 359.420461][ T5931] usb 1-1: Manufacturer: syz [ 359.425256][ T10] usb 2-1: Manufacturer: syz [ 359.429913][ T5931] usb 1-1: SerialNumber: syz [ 359.434693][ T10] usb 2-1: SerialNumber: syz [ 359.446225][ T9572] netlink: 'syz.4.918': attribute type 8 has an invalid length. [ 359.450045][ T9566] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 359.672204][ T10] usblp 2-1:1.0: usblp1: USB Unidirectional printer dev 37 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 359.765599][ T10] usb 6-1: USB disconnect, device number 51 [ 359.983384][ T9568] syz.0.923 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 360.084191][ T9578] netlink: 'syz.1.922': attribute type 8 has an invalid length. [ 360.285564][ T9583] libceph: secret too big 289 [ 360.376490][ T5931] usb 1-1: 0:2 : does not exist [ 360.395353][ T5931] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 360.423558][ T9586] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9586 comm=syz.2.927 [ 360.454071][ T791] usb 5-1: USB disconnect, device number 27 [ 360.462468][ T5941] usb 2-1: USB disconnect, device number 37 [ 360.466131][ T791] usblp0: removed [ 360.477225][ T5941] usblp1: removed [ 360.523414][ T5931] usb 1-1: USB disconnect, device number 41 [ 361.325113][ T9596] 9p: Bad value for 'wfdno' [ 361.787619][ T9598] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 362.180473][ T9608] netlink: 12 bytes leftover after parsing attributes in process `syz.4.933'. [ 362.470912][ T5891] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 362.479255][ T5941] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 362.487345][ T5808] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 362.645897][ T5891] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 362.680573][ T5808] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 137 [ 362.700815][ T5941] usb 6-1: config 0 has no interfaces? [ 362.730988][ T5891] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 362.741667][ T5808] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 362.755733][ T5891] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 362.769553][ T5941] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 362.778903][ T5941] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 362.789282][ T5941] usb 6-1: Product: syz [ 362.789991][ T5808] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 362.803895][ T5941] usb 6-1: Manufacturer: syz [ 362.808520][ T5941] usb 6-1: SerialNumber: syz [ 362.813534][ T5891] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 362.823112][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 362.831331][ T5808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 362.840129][ T5891] usb 2-1: Product: syz [ 362.845162][ T5941] usb 6-1: config 0 descriptor?? [ 362.850169][ T5808] usb 3-1: Product: syz [ 362.854743][ T5891] usb 2-1: Manufacturer: syz [ 362.861568][ T5808] usb 3-1: Manufacturer: syz [ 362.876019][ T5891] usb 2-1: SerialNumber: syz [ 362.880722][ T5808] usb 3-1: SerialNumber: syz [ 362.980568][ T9604] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 363.265095][ T9626] libceph: secret too big 289 [ 363.270241][ T5891] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 38 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 363.294672][ T5808] usblp 3-1:1.0: usblp1: USB Unidirectional printer dev 38 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 363.696878][ T9633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.712208][ T9633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.724758][ T9604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.982792][ T5891] usb 2-1: USB disconnect, device number 38 [ 363.996729][ T9604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.006249][ T5891] usblp0: removed [ 364.146075][ T9641] netlink: 'syz.2.932': attribute type 8 has an invalid length. [ 364.254322][ T9642] 9p: Bad value for 'wfdno' [ 364.621212][ T791] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 364.812579][ T791] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 364.822572][ T791] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 364.832524][ T791] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 364.852176][ T791] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 364.861564][ T791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 364.869795][ T791] usb 1-1: Product: syz [ 364.874293][ T791] usb 1-1: Manufacturer: syz [ 364.942076][ T791] usb 1-1: SerialNumber: syz [ 364.988344][ T30] audit: type=1400 audit(1775538527.962:446): avc: denied { create } for pid=9643 comm="syz.4.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 365.133181][ T5891] usb 3-1: USB disconnect, device number 38 [ 365.147684][ T5891] usblp1: removed [ 365.169479][ T791] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 42 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 365.213107][ T791] usb 6-1: USB disconnect, device number 52 [ 365.271443][ T5808] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 365.431381][ T9639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.432218][ T5808] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 365.451298][ T5808] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 365.461539][ T5808] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 365.477455][ T9639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.478775][ T5808] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 365.496411][ T5808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 365.507230][ T5808] usb 2-1: Product: syz [ 365.514835][ T5808] usb 2-1: Manufacturer: syz [ 365.521542][ T5808] usb 2-1: SerialNumber: syz [ 365.593934][ T9651] netlink: 'syz.0.942': attribute type 8 has an invalid length. [ 365.606954][ T791] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 365.760414][ T5808] usblp 2-1:1.0: usblp1: USB Unidirectional printer dev 39 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 365.782847][ T791] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 137 [ 365.814798][ T791] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 365.840097][ T791] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 365.851431][ T791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 365.859823][ T791] usb 6-1: Product: syz [ 366.000523][ T9646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.036801][ T9646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.022803][ T791] usb 6-1: Manufacturer: syz [ 367.037804][ T791] usb 6-1: SerialNumber: syz [ 367.049647][ T9650] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 367.227984][ T9664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.948'. [ 367.310219][ T9665] netlink: 'syz.1.944': attribute type 8 has an invalid length. [ 367.452582][ T791] usblp 6-1:1.0: usblp2: USB Unidirectional printer dev 53 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 368.066042][ T9672] netlink: 'syz.5.945': attribute type 8 has an invalid length. [ 368.081020][ T5931] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 368.236052][ T5808] usb 6-1: USB disconnect, device number 53 [ 368.246600][ T5808] usblp2: removed [ 368.293456][ T5931] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 368.392240][ T9676] libceph: secret too big 289 [ 368.405449][ T5931] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 368.429482][ T5931] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 368.442965][ T5941] usb 1-1: USB disconnect, device number 42 [ 368.449734][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.487429][ T5941] usblp0: removed [ 368.531442][ T9668] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 368.576324][ T5931] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 368.936666][ T5941] usb 2-1: USB disconnect, device number 39 [ 368.941894][ T5931] usb 3-1: USB disconnect, device number 39 [ 368.978294][ T5941] usblp1: removed [ 369.346392][ T9692] 9p: Bad value for 'wfdno' [ 369.378871][ T5891] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 369.647477][ T9693] netlink: 'syz.5.953': attribute type 4 has an invalid length. [ 369.802548][ T5891] usb 5-1: config 0 has no interfaces? [ 369.810183][ T5891] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 369.820346][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 369.833637][ T5891] usb 5-1: Product: syz [ 369.838877][ T5891] usb 5-1: Manufacturer: syz [ 369.854107][ T5891] usb 5-1: SerialNumber: syz [ 369.873685][ T5891] usb 5-1: config 0 descriptor?? [ 370.072647][ T9698] siw: device registration error -23 [ 371.460506][ T9710] smc: removing ib device syz2 [ 371.679967][ T9712] netlink: 'syz.1.959': attribute type 1 has an invalid length. [ 371.679983][ T9713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.750391][ T9712] 8021q: adding VLAN 0 to HW filter on device bond5 [ 371.769541][ T9713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.197540][ T9710] ------------[ cut here ]------------ [ 372.203035][ T9710] !xa_empty(&pool->xa) [ 372.203042][ T9710] WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x46/0x60, CPU#0: syz.0.957/9710 [ 372.218262][ T9710] Modules linked in: [ 372.222306][ T9710] CPU: 0 UID: 0 PID: 9710 Comm: syz.0.957 Not tainted syzkaller #0 PREEMPT(full) [ 372.231485][ T9710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 372.241534][ T9710] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 372.246974][ T9710] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 d6 db 4e f9 5b e9 50 60 da 02 e8 cb db 4e f9 90 <0f> 0b 90 e8 c2 db 4e f9 5b e9 3c 60 da 02 e8 f7 6b bb f9 eb d0 0f [ 372.266586][ T9710] RSP: 0018:ffffc900033471a0 EFLAGS: 00010246 [ 372.272644][ T9710] RAX: 0000000000080000 RBX: ffff8880626cd3b8 RCX: ffffc9000f3e2000 [ 372.280590][ T9710] RDX: 0000000000080000 RSI: ffffffff88ba1b95 RDI: ffff8880626cd438 [ 372.288547][ T9710] RBP: ffffffff88b87e20 R08: 0000000000000005 R09: 0000000000000001 [ 372.296509][ T9710] R10: 0000000000000002 R11: 0000000000000000 R12: ffff8880626cc6b0 [ 372.304481][ T9710] R13: ffff8880626cbfe0 R14: ffff8880626cbfe0 R15: ffff8880626cd118 [ 372.312450][ T9710] FS: 00007f64161886c0(0000) GS:ffff888124339000(0000) knlGS:0000000000000000 [ 372.321503][ T9710] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 372.328080][ T9710] CR2: 0000000000000000 CR3: 00000000421f9000 CR4: 00000000003526f0 [ 372.336038][ T9710] Call Trace: [ 372.339291][ T9710] [ 372.342216][ T9710] rxe_dealloc+0x25/0xc0 [ 372.346447][ T9710] ib_dealloc_device+0x49/0x230 [ 372.351286][ T9710] __ib_unregister_device+0x396/0x480 [ 372.356656][ T9710] ib_unregister_device_and_put+0x5a/0x80 [ 372.362378][ T9710] nldev_dellink+0x226/0x320 [ 372.366958][ T9710] ? __pfx_nldev_dellink+0x10/0x10 [ 372.372065][ T9710] ? cpupri_find_fitness+0xd5/0x440 [ 372.377274][ T9710] ? rcu_is_watching+0x12/0xc0 [ 372.382023][ T9710] ? cap_capable+0x107/0x460 [ 372.386593][ T9710] ? bpf_lsm_capable+0x9/0x10 [ 372.391260][ T9710] ? security_capable+0x80/0x260 [ 372.396173][ T9710] ? ns_capable+0xd2/0xf0 [ 372.400477][ T9710] ? __pfx_nldev_dellink+0x10/0x10 [ 372.405628][ T9710] rdma_nl_rcv_msg+0x38a/0x6e0 [ 372.410372][ T9710] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 372.415646][ T9710] ? __lock_acquire+0x4a5/0x2630 [ 372.420557][ T9710] ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90 [ 372.427144][ T9710] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 372.433555][ T9710] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 372.440472][ T9710] ? netlink_deliver_tap+0x1ae/0xcc0 [ 372.445765][ T9710] netlink_unicast+0x5aa/0x870 [ 372.450505][ T9710] ? __pfx_netlink_unicast+0x10/0x10 [ 372.455776][ T9710] netlink_sendmsg+0x8b0/0xda0 [ 372.460516][ T9710] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.465802][ T9710] ____sys_sendmsg+0x9e1/0xb70 [ 372.470541][ T9710] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.475826][ T9710] ? __pfx_____sys_sendmsg+0x10/0x10 [ 372.481118][ T9710] ? try_to_wake_up+0x644/0x1a80 [ 372.486046][ T9710] ___sys_sendmsg+0x190/0x1e0 [ 372.490704][ T9710] ? __pfx____sys_sendmsg+0x10/0x10 [ 372.495896][ T9710] ? futex_private_hash_put+0x107/0x1c0 [ 372.501452][ T9710] __sys_sendmsg+0x170/0x220 [ 372.506020][ T9710] ? __pfx___sys_sendmsg+0x10/0x10 [ 372.511125][ T9710] ? __x64_sys_futex+0x34f/0x4d0 [ 372.516044][ T9710] do_syscall_64+0x106/0xf80 [ 372.520604][ T9710] ? clear_bhb_loop+0x40/0x90 [ 372.525283][ T9710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.531163][ T9710] RIP: 0033:0x7f641539c819 [ 372.535552][ T9710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.555145][ T9710] RSP: 002b:00007f6416188028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 372.563545][ T9710] RAX: ffffffffffffffda RBX: 00007f6415616180 RCX: 00007f641539c819 [ 372.571515][ T9710] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000005 [ 372.579460][ T9710] RBP: 00007f6415432c91 R08: 0000000000000000 R09: 0000000000000000 [ 372.587427][ T9710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 372.595394][ T9710] R13: 00007f6415616218 R14: 00007f6415616180 R15: 00007fff0728a438 [ 372.603373][ T9710] [ 372.606375][ T9710] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 372.613629][ T9710] CPU: 0 UID: 0 PID: 9710 Comm: syz.0.957 Not tainted syzkaller #0 PREEMPT(full) [ 372.622794][ T9710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 372.632821][ T9710] Call Trace: [ 372.636072][ T9710] [ 372.638977][ T9710] dump_stack_lvl+0x100/0x190 [ 372.643633][ T9710] vpanic+0x552/0x970 [ 372.647586][ T9710] ? __pfx_vpanic+0x10/0x10 [ 372.652076][ T9710] panic+0xd1/0xe0 [ 372.655768][ T9710] ? __pfx_panic+0x10/0x10 [ 372.660159][ T9710] check_panic_on_warn.cold+0x19/0x34 [ 372.665502][ T9710] ? rxe_pool_cleanup+0x46/0x60 [ 372.670330][ T9710] __warn.cold+0x191/0x348 [ 372.674750][ T9710] __report_bug+0x296/0x3d0 [ 372.679243][ T9710] ? rxe_pool_cleanup+0x46/0x60 [ 372.684070][ T9710] ? __pfx___report_bug+0x10/0x10 [ 372.689071][ T9710] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 372.694862][ T9710] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 372.700646][ T9710] ? __flush_workqueue+0x426/0x1200 [ 372.705813][ T9710] ? __mutex_unlock_slowpath+0x15c/0x790 [ 372.711417][ T9710] ? rxe_pool_cleanup+0x46/0x60 [ 372.716247][ T9710] report_bug+0xb2/0x220 [ 372.720467][ T9710] ? rxe_pool_cleanup+0x46/0x60 [ 372.725291][ T9710] handle_bug+0x16a/0x2a0 [ 372.729593][ T9710] exc_invalid_op+0x17/0x50 [ 372.734070][ T9710] asm_exc_invalid_op+0x1a/0x20 [ 372.738894][ T9710] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 372.744338][ T9710] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 d6 db 4e f9 5b e9 50 60 da 02 e8 cb db 4e f9 90 <0f> 0b 90 e8 c2 db 4e f9 5b e9 3c 60 da 02 e8 f7 6b bb f9 eb d0 0f [ 372.763927][ T9710] RSP: 0018:ffffc900033471a0 EFLAGS: 00010246 [ 372.769971][ T9710] RAX: 0000000000080000 RBX: ffff8880626cd3b8 RCX: ffffc9000f3e2000 [ 372.777914][ T9710] RDX: 0000000000080000 RSI: ffffffff88ba1b95 RDI: ffff8880626cd438 [ 372.785856][ T9710] RBP: ffffffff88b87e20 R08: 0000000000000005 R09: 0000000000000001 [ 372.793796][ T9710] R10: 0000000000000002 R11: 0000000000000000 R12: ffff8880626cc6b0 [ 372.801737][ T9710] R13: ffff8880626cbfe0 R14: ffff8880626cbfe0 R15: ffff8880626cd118 [ 372.809681][ T9710] ? __pfx_rxe_dealloc+0x10/0x10 [ 372.814604][ T9710] ? rxe_pool_cleanup+0x45/0x60 [ 372.819434][ T9710] rxe_dealloc+0x25/0xc0 [ 372.823649][ T9710] ib_dealloc_device+0x49/0x230 [ 372.828473][ T9710] __ib_unregister_device+0x396/0x480 [ 372.833826][ T9710] ib_unregister_device_and_put+0x5a/0x80 [ 372.839521][ T9710] nldev_dellink+0x226/0x320 [ 372.844085][ T9710] ? __pfx_nldev_dellink+0x10/0x10 [ 372.849171][ T9710] ? cpupri_find_fitness+0xd5/0x440 [ 372.854377][ T9710] ? rcu_is_watching+0x12/0xc0 [ 372.859118][ T9710] ? cap_capable+0x107/0x460 [ 372.863691][ T9710] ? bpf_lsm_capable+0x9/0x10 [ 372.868349][ T9710] ? security_capable+0x80/0x260 [ 372.873267][ T9710] ? ns_capable+0xd2/0xf0 [ 372.877569][ T9710] ? __pfx_nldev_dellink+0x10/0x10 [ 372.882654][ T9710] rdma_nl_rcv_msg+0x38a/0x6e0 [ 372.887392][ T9710] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 372.892651][ T9710] ? __lock_acquire+0x4a5/0x2630 [ 372.897559][ T9710] ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90 [ 372.904133][ T9710] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 372.910533][ T9710] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 372.917453][ T9710] ? netlink_deliver_tap+0x1ae/0xcc0 [ 372.922730][ T9710] netlink_unicast+0x5aa/0x870 [ 372.927474][ T9710] ? __pfx_netlink_unicast+0x10/0x10 [ 372.932736][ T9710] netlink_sendmsg+0x8b0/0xda0 [ 372.937474][ T9710] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.942736][ T9710] ____sys_sendmsg+0x9e1/0xb70 [ 372.947473][ T9710] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.952731][ T9710] ? __pfx_____sys_sendmsg+0x10/0x10 [ 372.957990][ T9710] ? try_to_wake_up+0x644/0x1a80 [ 372.962924][ T9710] ___sys_sendmsg+0x190/0x1e0 [ 372.967578][ T9710] ? __pfx____sys_sendmsg+0x10/0x10 [ 372.972753][ T9710] ? futex_private_hash_put+0x107/0x1c0 [ 372.978292][ T9710] __sys_sendmsg+0x170/0x220 [ 372.982862][ T9710] ? __pfx___sys_sendmsg+0x10/0x10 [ 372.987949][ T9710] ? __x64_sys_futex+0x34f/0x4d0 [ 372.992866][ T9710] do_syscall_64+0x106/0xf80 [ 372.997430][ T9710] ? clear_bhb_loop+0x40/0x90 [ 373.002081][ T9710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.007947][ T9710] RIP: 0033:0x7f641539c819 [ 373.012335][ T9710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.031924][ T9710] RSP: 002b:00007f6416188028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 373.040311][ T9710] RAX: ffffffffffffffda RBX: 00007f6415616180 RCX: 00007f641539c819 [ 373.048348][ T9710] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000005 [ 373.056293][ T9710] RBP: 00007f6415432c91 R08: 0000000000000000 R09: 0000000000000000 [ 373.064238][ T9710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 373.072181][ T9710] R13: 00007f6415616218 R14: 00007f6415616180 R15: 00007fff0728a438 [ 373.080132][ T9710] [ 373.083422][ T9710] Kernel Offset: disabled [ 373.087720][ T9710] Rebooting in 86400 seconds..