last executing test programs: 13m47.692235913s ago: executing program 2 (id=3315): r0 = socket(0x10, 0x3, 0x0) poll(0x0, 0x0, 0x3) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0x2031, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = socket(0x400000000010, 0x3, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0xa0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000300)=0x5f, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r6}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaccaaaaaa09aaaa350800090000000000000000119078ac1414bbac14140086d5d9f5790000000000"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='i2c_write\x00', r7}, 0x18) inotify_init() r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x0, 0x0, 0x0, 0xad, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffffd, [0x0, 0x80000000]}}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000006800010000000000feffffff0a00000000000000140006000000000000000000000000000000000108000500", @ANYRES32], 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x90) 13m46.238702252s ago: executing program 2 (id=3318): socket$nl_generic(0x10, 0x3, 0x10) setxattr$trusted_overlay_opaque(&(0x7f0000000480)='./cgroup\x00', &(0x7f00000004c0), &(0x7f0000000500), 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="000a000000000fd60730000000000a0000000000000000000000000000000000000000000000000000000d00000000000000000000ef60fc4bd8ecc4e3200000000006004dee00000000000032acaace3269d4"], 0xd0060) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, 0x0, &(0x7f0000000000)) socket$inet_mptcp(0x2, 0x1, 0x106) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x1, 0x3, 0x8000000000007, 0xaa, 0x3, 0x1, {0x0, 0x180, 0x20fe, 0x5, 0x87, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) r4 = syz_io_uring_setup(0x1a3, &(0x7f0000000240)={0x0, 0xf3ea, 0x80, 0x0, 0x34d}, &(0x7f0000000480)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, &(0x7f00000004c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) 13m45.313939745s ago: executing program 2 (id=3320): connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x15, 0x6, 0x1, 0x1, 0x400, 0x1, 0x135, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) fcntl$getownex(r3, 0x10, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x9}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x7}, 0x9c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 13m44.306606273s ago: executing program 2 (id=3324): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/uevent_helper', 0x7a9095e4ff480c4f, 0xba) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102397, 0x18ffd) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(r3, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x84, 0x30, 0xffff, 0x70bd2c, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1f4}}}}]}]}, 0x84}}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000440)={'macvlan1\x00', 0x0}) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f0000000780)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd3\xd4\xe2\xfd\x7f\xf5R%\xe8]l\xa1s\b\xa5\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xbb\x05vH\xdd\x01?k\x97\xa5\xbf\x89#=2G\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xa6\x7f\xc0\xcck.5=\xcc\x10Y\xad^*;MVh\xd9\xcf )\x0e%\x84\x95bXy\x81;o\xc9\x94\xc5M\xaf\xdbr\xec\xf6', 0x0) fallocate(r4, 0x0, 0x0, 0x200401) fallocate(r4, 0x0, 0x0, 0x200401) r5 = timerfd_create(0x0, 0x0) readv(r5, &(0x7f00000001c0)=[{&(0x7f0000001640)=""/4097, 0x693d4f623b09dbf1}], 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r7) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="ff0eb8b34e88148a", @ANYRES16=r8, @ANYBLOB="010067bd7000fbdbdf25010000005400018014000300fe8000000000000000000000000000bb060001000a00000008000600777272000c0007002e000000050000000800090039000000060002001100000008000800000000000600040001150000"], 0x68}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000400)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0], 0x0, 0xe0, &(0x7f0000000600)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x45, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c80)=@bridge_getlink={0x64, 0x12, 0x800, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x8004, 0x2}, [@IFLA_NET_NS_PID={0x8}, @IFLA_XDP={0x2c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}, @IFLA_XDP_FD={0x8, 0x1, r0}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x4}]}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x92b}, @IFLA_LINKMODE={0x5, 0x11, 0xfe}]}, 0x64}, 0x1, 0x0, 0x0, 0x2404d908}, 0x0) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) 13m41.196957901s ago: executing program 2 (id=3344): getpid() getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRESDEC], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000030000000060a010400000000000000000100000008000b40000000000900010073797a300000000005000740080000001400000011"], 0xa4}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0) socket$kcm(0xa, 0x2, 0x73) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRESOCT], 0xa0}}, 0x880) syz_open_dev$tty20(0xc, 0x4, 0x0) 13m40.635913967s ago: executing program 2 (id=3345): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f, 0x9}}, 0x20) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@mask_cswp={0x58, 0x114, 0x9, {{0x7f, 0x4}, &(0x7f0000000080)=0x6, &(0x7f0000000140)=0x2, 0x7, 0x3, 0x1, 0x9, 0xc00afd6940966bbb, 0x5}}], 0x58}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x400000001, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f00000004c0), r3, 0x1}}, 0x18) r4 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) write$6lowpan_enable(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000180)={0x13, 0x10, 0x7, {0x0, 0xffffffffffffffff, 0x1}}, 0xfffffce9) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) syz_open_procfs(0x0, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) write$P9_RSTATu(r5, &(0x7f0000000580)={0x21e, 0x2, 0x0, {{0x500, 0xdd, 0x0, 0x0, {}, 0x2810000, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, '\b\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, 0x0, 0xee01}}, 0x21e) socket(0x2, 0x80805, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f000001aa40)=""/102400, 0x19000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket(0x10, 0x3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4}}}, &(0x7f0000000040)=0x84) 13m25.516061985s ago: executing program 32 (id=3345): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f, 0x9}}, 0x20) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@mask_cswp={0x58, 0x114, 0x9, {{0x7f, 0x4}, &(0x7f0000000080)=0x6, &(0x7f0000000140)=0x2, 0x7, 0x3, 0x1, 0x9, 0xc00afd6940966bbb, 0x5}}], 0x58}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x400000001, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f00000004c0), r3, 0x1}}, 0x18) r4 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) write$6lowpan_enable(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000180)={0x13, 0x10, 0x7, {0x0, 0xffffffffffffffff, 0x1}}, 0xfffffce9) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) syz_open_procfs(0x0, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) write$P9_RSTATu(r5, &(0x7f0000000580)={0x21e, 0x2, 0x0, {{0x500, 0xdd, 0x0, 0x0, {}, 0x2810000, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, '\b\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, 0x0, 0xee01}}, 0x21e) socket(0x2, 0x80805, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f000001aa40)=""/102400, 0x19000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket(0x10, 0x3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4}}}, &(0x7f0000000040)=0x84) 12m47.222918308s ago: executing program 0 (id=3491): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="4c0000003c0007010000000000400000015c00001000fc800c00050008000000000000000c00018006000600800a000008000280c4139b781400070000000000000000000000000000000000e650497af40486456f5623ed630d1b453b84a2f7fc37d2884036fda4f0bcaf53158cffaa"], 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x1, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r4, r3, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x14}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 12m47.195415623s ago: executing program 0 (id=3493): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)={0x38, r1, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}}, 0xc000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/resume_offset', 0x149e82, 0x1) write$cgroup_int(r3, &(0x7f0000000000)=0xfe8e, 0x12) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000040)=0xfff, 0x4) 12m47.131674212s ago: executing program 0 (id=3494): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4192, 0x0, 0x5, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_open_procfs(0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000004340), 0x2, 0x0) r4 = socket$caif_seqpacket(0x25, 0x5, 0x5) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0x40000, 0x0, 0xfffffffc, 0x238}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}) io_uring_enter(r5, 0x3f70, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc0f8565c, &(0x7f0000000000)={0x0, 0x200, 0x0, {0xa, @sdr={0x4c47504a, 0x9}}, 0xfffffffc}) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af60, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0) write$sndseq(r8, 0x0, 0x0) syz_usb_connect(0x0, 0x12, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'tunl0\x00'}) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) 12m43.248218526s ago: executing program 0 (id=3511): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@rnullb, r0, &(0x7f0000000400)={0x6, 0x5, 0x28, 0x40, 0x2, 0x6, 0x5}) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000580)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x2e, 0x0, "6248bc9c8095fdfb8d639d954a0649542709e9baf27860bd22292b501f2c28d45a71ec3fa8539e7223c278d70126314aca030d71da9dcb99d1d087f250685685db59cf6de9c2a0496da59a4fcf3d9ceb"}, 0xd8) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) socket$inet6(0xa, 0x1, 0x9) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000340)='./file0/file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2001080, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x2881400, 0x0) 12m42.910536011s ago: executing program 0 (id=3514): connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x15, 0x6, 0x1, 0x1, 0x400, 0x1, 0x135, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getownex(r4, 0x10, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x9}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x7}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, &(0x7f0000000340)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 12m42.574604976s ago: executing program 0 (id=3516): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, 0x0}, 0x20000000) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f00000001c0)="84", 0x1}], 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x28) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) futex(0x0, 0x10b, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRES64=r2], 0x80}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0xfffffffa) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeec, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f0000002280)=[{{&(0x7f00000002c0)=@xdp, 0x80, &(0x7f0000000440)=[{&(0x7f0000000340)=""/212, 0xd4}, {&(0x7f0000000d40)=""/4096, 0x1000}], 0x2}, 0xfffffffd}, {{&(0x7f0000000480), 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000500)=""/95, 0x5f}, {&(0x7f0000000600)=""/162, 0xa2}, {&(0x7f00000006c0)=""/136, 0x88}, {&(0x7f0000000780)=""/169, 0xa9}, {&(0x7f0000000580)=""/30, 0x1e}], 0x5, &(0x7f0000000b40)=""/238, 0xee}, 0x4}, {{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000000840)=""/60, 0x3c}, {&(0x7f0000000c40)=""/153, 0x99}, {&(0x7f0000001d40)=""/197, 0xc5}, {&(0x7f0000001e40)=""/134, 0x86}, {&(0x7f0000001f00)=""/95, 0x5f}, {&(0x7f0000001f80)=""/228, 0xe4}, {&(0x7f0000002080)=""/115, 0x73}, {&(0x7f0000002100)=""/80, 0x50}, {&(0x7f0000002180)=""/44, 0x2c}], 0x9}, 0x4}], 0x3, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) chroot(0x0) fanotify_mark(0xffffffffffffffff, 0x7e, 0x40000018, 0xffffffffffffffff, 0x0) r7 = socket$inet(0x2, 0xa, 0x262) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @loopback}}) ioctl$sock_inet_SIOCSARP(r7, 0x8953, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xe, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x0, 0x3, 0x3, 0x3, 0x5a, 0x9e, 0xa, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xffd, 0x0, 0x180, 0x4, 0x14, 0xf4, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x6, 0x6, 0x45, 0x1, 0xbdb], 0x1, 0x1c6213}) 12m41.277262374s ago: executing program 33 (id=3516): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, 0x0}, 0x20000000) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f00000001c0)="84", 0x1}], 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x28) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) futex(0x0, 0x10b, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRES64=r2], 0x80}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0xfffffffa) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeec, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f0000002280)=[{{&(0x7f00000002c0)=@xdp, 0x80, &(0x7f0000000440)=[{&(0x7f0000000340)=""/212, 0xd4}, {&(0x7f0000000d40)=""/4096, 0x1000}], 0x2}, 0xfffffffd}, {{&(0x7f0000000480), 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000500)=""/95, 0x5f}, {&(0x7f0000000600)=""/162, 0xa2}, {&(0x7f00000006c0)=""/136, 0x88}, {&(0x7f0000000780)=""/169, 0xa9}, {&(0x7f0000000580)=""/30, 0x1e}], 0x5, &(0x7f0000000b40)=""/238, 0xee}, 0x4}, {{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000000840)=""/60, 0x3c}, {&(0x7f0000000c40)=""/153, 0x99}, {&(0x7f0000001d40)=""/197, 0xc5}, {&(0x7f0000001e40)=""/134, 0x86}, {&(0x7f0000001f00)=""/95, 0x5f}, {&(0x7f0000001f80)=""/228, 0xe4}, {&(0x7f0000002080)=""/115, 0x73}, {&(0x7f0000002100)=""/80, 0x50}, {&(0x7f0000002180)=""/44, 0x2c}], 0x9}, 0x4}], 0x3, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) chroot(0x0) fanotify_mark(0xffffffffffffffff, 0x7e, 0x40000018, 0xffffffffffffffff, 0x0) r7 = socket$inet(0x2, 0xa, 0x262) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @loopback}}) ioctl$sock_inet_SIOCSARP(r7, 0x8953, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xe, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x0, 0x3, 0x3, 0x3, 0x5a, 0x9e, 0xa, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xffd, 0x0, 0x180, 0x4, 0x14, 0xf4, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x6, 0x6, 0x45, 0x1, 0xbdb], 0x1, 0x1c6213}) 9.724074234s ago: executing program 5 (id=6721): syz_usb_connect(0x5, 0x58, &(0x7f0000003340)=ANY=[@ANYBLOB="12010000df2db040210418040ef00102030109024600010c0088800904ea19000202ff0005240600000524000d980d240f017f0000000001070000052406008c0d240f01"], 0x0) prctl$PR_SET_KEEPCAPS(0x59616d61, 0x1ffffffffffffff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) r0 = fsopen(&(0x7f0000000200)='omfs\x00', 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffff9f08004500001c000000000033907800000000ac1414aa0000000000089078b526012270990aeb766393d2c4d59d488e9b47fff7f6588a27cf50bbd9cc0e05660bca7beff2b95a5d67f4a94a00451f42df7f65a83c4167690f46975c48b0e83730039683c8be9f"], 0x0) ftruncate(0xffffffffffffffff, 0x51a9497) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) write$binfmt_script(r2, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0xffffffffffffffff, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r6, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f00000001c0)="d3", 0x1}]) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000540)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\a\x02\x00\xd2h\x93\xc9\xb57\xc3\xea\\E\xcaXV\x7f\a\xf8&k\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T4\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f\xb1\xb4\xfb\xbe\xe0\x1e)\x10>\xffY?k\xa7\x12\xe5>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9kr\xbb^\xb5\xcev\xc3\xfc1\xe2\xd4\xc3\xaes\xc7\x14\xd2v\\\xa1\x9a\"]\xff\xf2\x9be\xe5/\xb1\xa1\xc0\xbaZ\xe5\xda^7!O\xcc\xd6\x7f\x18\x1c m`W\xfa\x8e\x19R\b\x12\xd3\xcd X\xe5o\xc8\x04\x1ag\bR\xe9q\xbe\xeaai\xb2\xd7\xb7\xe0\xe2\"\xb9\xed\x96m{%\xc8\x97v\xa6\xdc\x98\x81\xfb\xb5\x89\xbc\x9a\x96\xaa\xac\x12\x14\x00\xda*\x01\xa2\t\xb1rpx\xdd\x18\xeb\xcd\xbc\xac\x10\xb9\x01\xff\xbdeC\a\xc7\xbb\xd6\xe3\xf4\xd0X\xe2\x14\x9ad\xed\xb2D\x17\xf9j\xf7\xd1\xbc\xc3E)FK\xa8e\x9c\xcd$f\x14\xd9\x93\f:XF\ak\x84N\x0f\xbb?\xc7:xi\xb4N\xdb\xb7I5\xaf\xb5\xb0\v\x19.z\xbf\x8e\xf7j\xfe\x9f\xa6\xf7\xd3:[N>\xda\xbbJ\xb3k\xc0\xea\x81kx\xa8\xc0\x92\xf1\xdbF\xf2\xa4\xc2\x13\xac\x13\x1ev#=\x94\xd8\xce\xed\xc6\xfe\xb1\xca\a*P\xb4\xb9\xf3\xe0\x83/\xf0D\x9aS\bjm\x80\x9f\x84\x02\x9f\xddnDp\t\x03\xf6\x11IT\t\x1f\xfd\xeb<\xf0I\x1emY7\xf0G\xceJ\f\x1d\xf5\xab\xe9\x9f\xdf\xd6\xd3\xa4\xa4\x84\x1f\x82\x7fs\r\xd6[7\xb7n\x86\xdc\x01b\xd6\x8a\x00\x0e\xb4\xca\xadH\xa6\x82Q\xa1\xab\xf9?\xd5\xd4$Z\xa4\f?\x9c#\x13\xfde\xafl\xf3\xe0Mq!{A)\xc0#Y0\xc9\x92\x01\xb9\x87\xdd\x8fe\xee\xe5\xe6=px\xa2\xb1\xcd\r\'\'\xd7\xe1\xd8\xadl\x9c\x11\xe3D\xd5\xdf\x17M\x02Az\xda8Q\n\x8eQ\xaf\xa7m\xc1\xe2\xe1<\xd4>\x14\x18O\n[\xdbZ\xebx\b\x90\x80\x8d`\x90\x98\tv\xf9\x00\x9fQ\xbc\xb2!\xed\xcd\f\xe1\xfbvh\xe9@\xb1\'\x9eF\xc1X\x11\xbc\x02\xe0\xf7\x96\xb5$\xfd\x14\x89h\xf3\xf4\xb9\xce\xca8\xe3\x11\xe1\xbfm\x87X\x8d\x95[\x1cy~r\x8d\xc4(\xb4\x1dW\x93L\xdd6@\xf7&\xda:\xcc\"', 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000000) open(0x0, 0x0, 0x1a1) 6.949955534s ago: executing program 5 (id=6730): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x40000043, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0xe42, &(0x7f00000005c0)={0x0, 0x2119, 0x100, 0x0, 0x15b}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x80000, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x1d}) io_uring_enter(r2, 0x6f58, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c010203010902240001010000100904690202ff5aa30009050402100000fa000905820240"], 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f00000000c0)={0x0, 0x5353, [0x8, 0x5, 0xff, 0xffffffffffffffff, 0xd95, 0x2]}) 6.174129635s ago: executing program 1 (id=6732): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000004c0)={0x30, r0, 0x9, 0x70bda7, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40804}, 0x4000000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000005c0)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0502103, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000040)) 6.148952816s ago: executing program 4 (id=6733): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a00000000000000010000020900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000084000000060a010400000000000000000100000008000b40000000005c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000250500020007000000240001800a000100717565756500000014000280060003400005000008000440000000020900010073797a3000000000140000001100010000000000000000000700000a"], 0xf8}, 0x1, 0x0, 0x0, 0x273ce7525161ede3}, 0x0) syz_clone3(&(0x7f0000000380)={0x800, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100), {0x3f}, &(0x7f0000000140)=""/234, 0xea, &(0x7f0000000240)=""/225, &(0x7f0000000340)=[0x0, 0x0], 0x2}, 0x58) r2 = socket(0xa, 0x5, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0xffffffffffffff95, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000"], 0xec}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r6, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x9, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000000080)={0x98f900}) vmsplice(r3, &(0x7f0000000040)=[{&(0x7f0000002500)="1f", 0x1}], 0x1, 0x8) mmap(&(0x7f00007b5000/0x4000)=nil, 0x4000, 0x2000007, 0x8010, r1, 0x4000) close_range(r2, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r11, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r11, &(0x7f0000000000), 0x400000000000041, 0x0) 4.839846088s ago: executing program 1 (id=6736): r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "9c21ae2a"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x6, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r3, 0x104, 0x7, &(0x7f0000000040)=0xa, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xd, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5b", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket(0x10, 0x803, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETSEL(r4, 0x541c, 0x0) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000000)) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000240)=ANY=[@ANYBLOB="20160400000037d11131"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.798356355s ago: executing program 4 (id=6737): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x30, r3, 0xb97534d5fe9704cf, 0x70bd29, 0xfffffffc, {{0x12}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x4000040) 4.730479653s ago: executing program 4 (id=6738): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000640), r0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x5}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffffffffffffff15, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000100)) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, 0x0, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000100)={0x0, @dev, @broadcast}, &(0x7f0000000300)=0xc) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000280)=[@mss, @timestamp, @window, @window={0x3, 0x0, 0x4}, @sack_perm], 0x5) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) write$sndseq(r1, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x10000082}, 0x8000) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r6, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x1d) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) 4.415806725s ago: executing program 3 (id=6742): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000880)=ANY=[@ANYBLOB="100902"], 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44030) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) r5 = socket$inet6(0xa, 0x802, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002300), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000002380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, r7, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xba}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x7}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8090}, 0x4804) socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r10, {}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@empty, 0x8, r10}) sendmmsg$inet6(r5, &(0x7f0000005440)=[{{&(0x7f0000000200)={0xa, 0x4e21, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="2400000000000000290000003900000062020201000000000000000000000000000000000000000079e39f81aaee87afb26bf5a6f46700934e6c48d0d451dc71baa3d3aa066f3eb203e3971bd11e372265f632e9153b15f926647fd7a491ee309c285de99be0d9d30878e93a2637e87f3991c6329dc03ef9cd39219bf82c501aed2baf2a9758a70adfe381224f9f9f52aa20e3dd96b8f09caeb1400ae70fda26a270f53fd19467a30f9e346aeeb466490ad5def3fd82ce6b1f051772d670e7242c4e234c23b7c6d8b6165c0915b202b2562a5b2008f6fc42939f"], 0x24}}], 0x1, 0x811) 3.768970286s ago: executing program 6 (id=6747): r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r2, &(0x7f00000000c0)=""/3, 0x3, 0x0, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) syz_open_dev$MSR(&(0x7f0000000000), 0x7f, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)={0x34, r6, 0x5, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x30048011}, 0x0) 3.634977141s ago: executing program 4 (id=6748): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, 0x0, 0x2, 0x0) write$cgroup_pid(r5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x60, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x1) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/19], 0x48) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, 0x0, 0x0) 3.099557841s ago: executing program 5 (id=6749): getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r2], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000030000000060a010400000000000000000100000008000b40000000000900010073797a300000000005000740080000001400000011"], 0xa4}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0) socket$kcm(0xa, 0x2, 0x73) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r2], 0xa0}}, 0x880) syz_open_dev$tty20(0xc, 0x4, 0x0) 2.88217358s ago: executing program 6 (id=6750): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="780005001000010400"/20, @ANYBLOB="04b8d71ffdde7b627806579a156dc97ac82bf627bf8c3397ffe603f083a3e238702e31bc561d3790d81f7d6474cd12ca4e36b5f42e1e2aff983b37d12272bc8f1ca70269a14c6deb6e6f3f9c4421dd6cb46a58eeee660a123e75fe54c033a11366c1faf92fae9e385986157585ec7322e82670bfdcd15efffec9592a05f297dc7d4fcccc643c258fcf0353ac466857dbfc521a3bffb02e36fccdd129daf32a8b58f624b5963a5120c36aed3deb949d029ce212e5a1fe24ae85b4275c1f57", @ANYBLOB="0305000000000000500012800e00010069703665727370616e0000003c0002800600030005cc0000060003000900000008000d0007000000060003000000000008000d0008000000060002"], 0x78}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x2a, 0x1, 'connmark\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x28, 0x3, 0x2}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b500000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080014"], 0x3c}}, 0x0) membarrier(0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000010}, 0x48000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@delchain={0x24, 0x65, 0x200, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xb, 0xf}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket(0x10, 0x80002, 0x0) getsockopt$sock_buf(r1, 0x1, 0x3e, 0x0, &(0x7f0000000040)) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.613064028s ago: executing program 6 (id=6751): r0 = socket$nl_generic(0x10, 0x3, 0x10) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a320000000005000400000000001400078008001240000000000500150022000000050005000200"], 0x64}}, 0x0) r3 = socket(0x2, 0x800, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001400b5952cbd7000ffdbdf250a180000", @ANYRES32=r4, @ANYBLOB="14000600010000000100070001000000feffffff14000100fec4"], 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x109101, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110c230000) r6 = fsopen(&(0x7f0000000240)='rpc_pipefs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000040)='E\xe1\x85\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) syz_open_procfs(r7, &(0x7f0000000140)='mounts\x00') 2.515133497s ago: executing program 1 (id=6752): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000500)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000580)="02042700ea0e0000000000001eafbcf706e105", 0x13}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b", 0x1e}], 0x2}, 0x40000) 2.489910848s ago: executing program 1 (id=6753): sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) r2 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4a, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r2, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 2.321731412s ago: executing program 1 (id=6754): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x0) poll(&(0x7f0000000080)=[{r1, 0x20}], 0x1, 0x1d) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0105000000000000002504000000140001800d0001007564703a73797a328aa7"], 0x28}}, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r4, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x0, 0x8, 0x10, 0x9, 0x1000000, 0x0, 0x0, 0x0, 0x1000}}, 0x50) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$FIONREAD(r6, 0x7041, 0x0) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) open_by_handle_at(r7, &(0x7f0000000140)=@fuse_with_parent={0x18, 0x82, {{0x3, 0x6, 0x3}, {0xfffffffa, 0xe, 0xfffffff9}}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000000, 0x8112, 0xffffffffffffffff, 0xf6d0d000) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e00000d0a0400"/17, @ANYRESOCT=r6, @ANYRES8=r3, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x7}, 0x0) mount(0x0, 0x0, 0x0, 0x1214040, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000001c0)="0f01c369930d00020066b85ce100000f23c80f21f86635040090000f23f8f30f09f2f08300130f01d50f20d86635080000000f22d8dbe9ba4200ec64660f38817382", 0x42}], 0x1, 0x40, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_RCVMTU(r11, 0x112, 0xd, &(0x7f0000000040)=0x6, 0x2) ioctl$KVM_RUN(r10, 0xae80, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001400010025bd7000fddbdf2501"], 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x80) ioctl$KVM_REGISTER_COALESCED_MMIO(r9, 0x4010ae67, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 2.174834672s ago: executing program 5 (id=6755): r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000040092db2c38bd8535ebf36487bbb69056007a215f5fe6526dc7b181cbc0808a69e9415192700d7fe1adf5ae221d7bc5323209b482b9f746f8d1ede830b8d58c4164664805c66fb8632c5436bb1b2f9d57490c2928d0000ebe4cb9914033b945718246006d327e834557b4cec19e6ac313a7baa94f9e7f4c8b6568", @ANYRES16=r2, @ANYBLOB="010028bd7000fadbdf254400000008000300", @ANYRES32=r3, @ANYBLOB="2400238008001a0001000000080017000600000006000d000600000008000b0002000000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x448f0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x4, 0x9c, [0x5c6646e8, 0xdff, 0x100000000, 0x2, 0x8000, 0x3ff], 0x8, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000100)=""/156}, &(0x7f0000000080)=0x78) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r2, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x4}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="9b9555e2f875"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x800) 2.067771728s ago: executing program 5 (id=6756): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.060889838s ago: executing program 1 (id=6757): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x17}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x10}]}, 0x2c}}, 0x64000) syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e"], 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001440)={'wpan3\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720af0fff8ffffff71a4f0ff0000000071103100000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0af8fe000000007203000000000006b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f18564a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccc99069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad24b89b6a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c87852730a3bd7ac923fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca4856ff03b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec860cde7c79f7b4d4e24c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b450100000001000000393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00400000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd599c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb80610eb37bd2d40ebdfed687f0b093e68f10b72146a0b749ee2105e2da94a288146abbbaf7c0b24fe0000000000000000f1a4f4de6a8d12dc9e71a20cbd412898586843b534d36e21379a8a06133c1babde9e5bd5b6afc5f684aada43ee560e800f58cb33b8483f6518abde7c86bd5d389c1b3c40fdd4bebe4adf87b1025ff57eb50984cc5bad9ea1c15484ea627c3c1501d612ed65939266e7332966f03e0376076e7c5dfe25f367dda7f69db89829b360dd2f59cbaad10f13e269eca792725bbacb96aa0a5c426ca76f84322661"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x20, r4, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x20}}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000001540)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x5c, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000005}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40810}, 0x24084080) syz_usb_connect(0x0, 0x551, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0xba, 0x1c, 0x5, 0x40, 0x451, 0x5052, 0x3468, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x53f, 0x3, 0x54, 0x1, 0x90, 0x2, [{{0x9, 0x4, 0x4a, 0xa, 0x9, 0xce, 0xa4, 0xb1, 0x2, [], [{{0x9, 0x5, 0xe, 0x10, 0x40, 0x1, 0x3, 0x0, [@generic={0xb1, 0x30, "d19ebde3badfd35e7f3fc36f155a8c81f8fb608d5371b8c4be1f0d25e7343cafe7fe5c33067499bdc9666c27f1010e26ff8acf1852f24c70464c87d9db130531cbc09ebf8652e21a42769c1f46c3cd73a068b9ff358ac70adc307306a04d4e352b0d6553d283cbf20b47f4c8c8906608a0190ae39651c34c716acc1bff28af245c499f1b23be63a3b9bf19db6293c1cc2a2e607528b8d07443aa6d5c54f725762a15c86e9dd4a4517c38e7c07a997a"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xfe, 0x8000}]}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x80, 0x2, 0xe8}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x2, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x1}]}}, {{0x9, 0x5, 0x4, 0x10, 0x28, 0xc, 0x4a, 0x8, [@generic={0x24, 0x31, "3180e62841506d32b3ec7f8aeeba05c92ac66b3032c988c284d1f623e3a547ca96ae"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x755}]}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0x2, 0x7f, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2}, @generic={0x9e, 0xe, "8a3d3adc9665d12f994b2779b8769661636acb1ec74a690d4dd3ac1bae755db2d582786ef8258b20f0a840adf68cc015230eb565bec2fcbf7a9bc1b086b74d3de2b61729fa56074c5745be2402427197afb3ddd68f341fb8cf8e368f1d476ef6d6b0e07d3a93176991aed1290948ea214a1b1d4175d9945dc0d24b8415bfc19e491b29837664cf69553911b8fd2547da73aa394ccec0075d384fadd9"}]}}, {{0x9, 0x5, 0x4, 0x1, 0xed6ae1f597687816, 0x1, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x34, 0x525}]}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x3, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x2}]}}, {{0x9, 0x5, 0x9c, 0x1, 0x8, 0x3e, 0x5, 0x3}}, {{0x9, 0x5, 0x2, 0x2, 0x400, 0xe, 0x7f, 0x6, [@generic={0x4e, 0xf, "77faf352c23516fc448a3fe2b6162e77a79fbc9a3740ef24969a3e9bef912948dae5690af1cd1673c1bdcf779122df3fb9664b25905e3cefcdd7ec365f9ce83aa21871100a9c8d10ba6ba671"}]}}]}}, {{0x9, 0x4, 0x84, 0x4, 0x1, 0x58, 0x84, 0xec, 0x0, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "b68398fc9a"}, {0x5, 0x24, 0x0, 0xff}, {0xd, 0x24, 0xf, 0x1, 0xfff, 0x4, 0x3, 0x2}, {0x6, 0x24, 0x1a, 0x6ee8, 0x21}, [@dmm={0x7, 0x24, 0x14, 0x2, 0xfff1}]}, @uac_control={{0xa, 0x24, 0x1, 0x1, 0x2}, [@mixer_unit={0x8, 0x24, 0x4, 0x5, 0x1, "50a113"}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x3, 0x2, 0x6, 0x1}, @extension_unit={0x8, 0x24, 0x8, 0x3, 0x4, 0x6, 'w'}, @selector_unit={0x6, 0x24, 0x5, 0x5, 0x1, '\b'}]}], [{{0x9, 0x5, 0xe, 0x10, 0x200, 0xd, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0xb}, @generic={0x93, 0xe, "5997015a6d514df86514318ba55d3e9771b8e4538c6402aee2aaa838cbe6d9ea14112caf90aa499b14d53c688ad1fcc9d42d5c6c51330ce67a31afb63ccdc74a81bf60383f7f6d3d301c6f4b4115ff4210db28d79baef26a5791c2e29db140568c462ba7e2f49413629850cdf8654295fb04e75e57adee7ca79724fab6d25c5505002b534871acd03fb19fc989b6ca787c"}]}}]}}, {{0x9, 0x4, 0x91, 0x4, 0x3, 0xed, 0xf1, 0x6, 0x9, [@uac_as={[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x9, 0x3, 0x3, 0x5, "e5c0a9c62f"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x0, 0x9, 0x8, "7bf4d8"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x2, 0x6, 0x0, 'p'}]}], [{{0x9, 0x5, 0x80, 0x10, 0x20, 0x80, 0x7, 0x6, [@generic={0xd2, 0x23, "78cad1d314c681bd41883f9053270ac948ebb7d666a1a1a2c9d6546ffa82040ba26a7ce2e927ef7d7329af00bed9d9852f041fc60a7efe93ba994cbe7f4b90ed72319fc20ef32c9a9e36b81ffc217a2285af41260cd851d06be981b275b14e3a96c53817ea968583dfeb8c23f91aeed44a96fb95ea3ba5f200fb91a539ed039308c3cc242098f70b3194f4248d7e10c833e2ca206944b606e3020aab9ae3118f0b131d37b4aa412ac9343e6713955b1d6d9c2818fd09003f52d5d639eda74df3987094490a104bdaa7bf1f05e7397dec"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0xf, 0x4, 0x5}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x8, 0xe, 0xb, [@generic={0xd4, 0x14, "1e467033c8ed61fcdcc1644b8d13171355b0655290cc8aa4c9ae5a1b21eaa97d7b778b84af21cad51b99d11a9ac8cc649db5fcaddd12f43638128d4e6f72879ae0cccb6a17e84123cdd53fdab4fd1c416d70e3d1707098f0183cb4a46489e81fd2631fbb386fc72e58fdf66df9ea0d3a738361ee5f418cf1f52c630deb4ef84f5215617e44f817bf2ae24649d67ce79dd5ffd565eb97b7105fe54a08296f8006ecf611634b963b57bc35919a95ca9b2f948effdc6da0dfa8ea734e58e54e2c5f4c40d8a104781d8a7651dbfe32dd22bdd788"}, @uac_iso={0x7, 0x25, 0x1, 0x181, 0x3, 0x2}]}}]}}]}}]}}, &(0x7f0000001380)={0xa, &(0x7f0000001140)={0xa, 0x6, 0x300, 0x6, 0xfa, 0x4, 0x10, 0x9}, 0x0, 0xfffffffffffffffe, 0x7, [{0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f00000011c0)=@lang_id={0x4}}, {0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0x2009}}, {0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x801}}, {0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x180a}}, {0x58, &(0x7f0000000240)=@string={0x58, 0x3, "696a604faaec2412f1729d8d47f5b4cf93a715637ccead05be81f3d34cc9e5a47a81881f77b6de3c9a3fb8ab93217ff97d5c7683e92b8cc5bfbe87c3505b1ba17aee80fb2a459168d1abf8521bc4e3da454a1f9168a2"}}]}) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d10501200002000000010902120001000000000904"], 0x0) r9 = dup(0xffffffffffffffff) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x237, &(0x7f0000000380)={0x0, 0x262e, 0x10100, 0x0, 0x170}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {}, 0x1}) 1.955857538s ago: executing program 3 (id=6758): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20048818) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) mount$fuseblk(&(0x7f0000000240), 0x0, &(0x7f0000000140), 0x218058, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000340)={0xfffff2d4, 0x200ffffe, 0x7, 0xffffffff, 0x0, "4d6b5ccb00"}) readv(r1, &(0x7f0000000280), 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000a40)) r2 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f00000000c0)=0x1e) r3 = socket(0xf, 0x5, 0x2) getsockopt(r3, 0x200000000114, 0x2711, 0x0, &(0x7f0000000080)=0xfffffffffffffdab) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) syz_open_pts(r1, 0x684400) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x200, 0x0, 0x2, 0x0, 0x0, 0x436, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffe]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$UI_DEV_DESTROY(r5, 0x5502) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 1.562960468s ago: executing program 3 (id=6759): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="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", 0x5b1, 0xfffffffffffffffb) keyctl$update(0x2, r2, &(0x7f0000000000)="1186", 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) rt_sigprocmask(0x1, &(0x7f0000000580)={[0x800]}, &(0x7f00000005c0), 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x30, r4, 0xb97534d5fe9704cf, 0x70bd29, 0xfffffffc, {{0x12}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r3}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x4000040) 1.494209722s ago: executing program 6 (id=6760): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) r2 = io_uring_setup(0x40f8, &(0x7f0000000180)={0x0, 0x42bad, 0x40, 0x1, 0x272}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x14, 0x0, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xe032, 0xffffffffffffffff, 0x80000000) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_readahead}], [], 0x6b}}) pipe2$9p(0x0, 0x80800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) mount(&(0x7f00000000c0)=@sg0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x218000, 0x0) syz_emit_vhci(&(0x7f0000002580)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x1, 0xc9}}}, 0x6) ptrace(0x10, 0x1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="50020000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c8024"], 0x250}}, 0x2000c000) 1.4352916s ago: executing program 3 (id=6761): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="780005001000010400"/20, @ANYBLOB="04b8d71ffdde7b627806579a156dc97ac82bf627bf8c3397ffe603f083a3e238702e31bc561d3790d81f7d6474cd12ca4e36b5f42e1e2aff983b37d12272bc8f1ca70269a14c6deb6e6f3f9c4421dd6cb46a58eeee660a123e75fe54c033a11366c1faf92fae9e385986157585ec7322e82670bfdcd15efffec9592a05f297dc7d4fcccc643c258fcf0353ac466857dbfc521a3bffb02e36fccdd129daf32a8b58f624b5963a5120c36aed3deb949d029ce212e5a1fe24ae85b4275c1f57", @ANYBLOB="0305000000000000500012800e00010069703665727370616e0000003c0002800600030005cc0000060003000900000008000d0007000000060003000000000008000d0008000000060002"], 0x78}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x2a, 0x1, 'connmark\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x28, 0x3, 0x2}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b500000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080014"], 0x3c}}, 0x0) membarrier(0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000010}, 0x48000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@delchain={0x24, 0x65, 0x200, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xb, 0xf}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket(0x10, 0x80002, 0x0) getsockopt$sock_buf(r1, 0x1, 0x3e, 0x0, &(0x7f0000000040)) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.435025154s ago: executing program 3 (id=6762): r0 = socket(0x2d, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x14) 1.301539682s ago: executing program 3 (id=6763): syz_usb_connect(0x5, 0x36, &(0x7f0000000840)={{0x12, 0x1, 0x110, 0x2d, 0x82, 0x88, 0x40, 0x6737, 0x1, 0xada7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0xe3, 0x30, 0x8, [{{0x9, 0x4, 0xc2, 0x6, 0x2, 0x49, 0x68, 0x23, 0x0, [], [{{0x9, 0x5, 0xf4427cbbe36756c3, 0x3, 0x8, 0x5, 0x5, 0x7a}}, {{0x9, 0x5, 0x1, 0x3, 0x438, 0x59, 0xa2, 0x8f}}]}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x1, 0x10, 0xb, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x7, 0x1, 0x2, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x7, 0x9, 0x2}}}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x3, 0x9, 0xb, 0x10, 0x9}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x2809}}, {0x7d, &(0x7f0000000100)=@string={0x7d, 0x3, "a05318e48e3e28e1f4381519c887ff52d90d6ad7b4559fa2ed6b4d202da743068cf3f5b57719a8eddb080676afdfdefe8b3cdad1c7ada6a3918d1439ae06a08b95abc5646e8f8cf78b271d2d6bb493134c8d46b636ccd36638c6b8469e0406f657bde639722ad0c341579e74374c7a73ed3edd662bbf5c9c64d5ab"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xf0ff}}]}) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000200)='nilfs2\x00', 0x410, &(0x7f0000000100)='barrier') syz_usb_connect$cdc_ncm(0x0, 0x7b, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x2, 0x1, 0x2, 0x80, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "260395dec18a"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x1aac, 0x6f, 0x8000, 0x2}, {0x6, 0x24, 0x1a, 0x2, 0x40}, [@network_terminal={0x7, 0x24, 0xa, 0x4, 0x1c, 0x9, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x40, 0x12, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xdf, 0x4, 0xe0}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x300, 0x3, 0xf9, 0x12, 0x20, 0x4}, 0x5, &(0x7f00000002c0)={0x5, 0xf, 0x5}, 0x1, [{0x58, &(0x7f0000000300)=@string={0x58, 0x3, "8723355bb014737ed9c6580cf2092e48035bca7cff873ef4a0d570c2da8af9c01c681ea89dca0d6b60c6de3ab8039981ba712a870779ab4bdcf172a0649915e6256cefc688c622b12e91eb47419678670bed181f2451"}}]}) 1.003604801s ago: executing program 4 (id=6764): sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) r2 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4a, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r2, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 988.128151ms ago: executing program 6 (id=6765): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="780005001000010400"/20, @ANYBLOB="04b8d71ffdde7b627806579a156dc97ac82bf627bf8c3397ffe603f083a3e238702e31bc561d3790d81f7d6474cd12ca4e36b5f42e1e2aff983b37d12272bc8f1ca70269a14c6deb6e6f3f9c4421dd6cb46a58eeee660a123e75fe54c033a11366c1faf92fae9e385986157585ec7322e82670bfdcd15efffec9592a05f297dc7d4fcccc643c258fcf0353ac466857dbfc521a3bffb02e36fccdd129daf32a8b58f624b5963a5120c36aed3deb949d029ce212e5a1fe24ae85b4275c1f57", @ANYBLOB="0305000000000000500012800e00010069703665727370616e0000003c0002800600030005cc0000060003000900000008000d0007000000060003000000000008000d0008000000060002"], 0x78}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x2a, 0x1, 'connmark\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x28, 0x3, 0x2}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b500000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080014"], 0x3c}}, 0x0) membarrier(0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000010}, 0x48000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@delchain={0x24, 0x65, 0x200, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xb, 0xf}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket(0x10, 0x80002, 0x0) getsockopt$sock_buf(r1, 0x1, 0x3e, 0x0, &(0x7f0000000040)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 671.954993ms ago: executing program 4 (id=6766): r0 = socket(0x2d, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x14) (fail_nth: 3) 112.53005ms ago: executing program 6 (id=6767): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) syz_emit_ethernet(0x46, &(0x7f0000000080)={@random="2f094301cbe5", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "12109b", 0x10, 0x3a, 0x0, @empty, @mcast2, {[], @ni={0x8c, 0x0, 0x0, 0x4, 0xad, 0x689}}}}}}, 0x0) 0s ago: executing program 5 (id=6768): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) kernel console output (not intermixed with test programs): e descriptor's value: 21 [ 1609.507402][T13227] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1609.553885][T13227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1609.588618][T13227] usb 4-1: config 0 descriptor?? [ 1609.700980][T26981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1609.761937][T26981] 8021q: adding VLAN 0 to HW filter on device team0 [ 1609.780290][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 1609.787413][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1609.844563][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 1609.851701][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1610.102047][T27068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1610.146418][T27068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1610.890074][T27097] lo speed is unknown, defaulting to 1000 [ 1610.962546][T25943] Bluetooth: hci0: command tx timeout [ 1611.082733][T13227] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1611.099401][T13227] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1611.118405][T13227] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1611.126026][ T9] usb 7-1: USB disconnect, device number 47 [ 1611.248541][T13227] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1611.256251][T13227] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1611.356518][T13227] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1611.366704][T13227] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1611.374117][T13227] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1611.381537][T13227] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1611.388935][T13227] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1611.420056][T13227] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1611.449401][T13227] usb 4-1: USB disconnect, device number 54 [ 1611.537040][T26981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1611.860851][ T5943] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1612.090807][ T5943] usb 6-1: Using ep0 maxpacket: 8 [ 1612.116623][ T5943] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1612.140125][ T5943] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1612.150338][ T9] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1612.171629][ T5943] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1612.188028][ T5943] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1612.210217][ T5943] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1612.232618][ T5943] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1612.255435][ T5943] usb 6-1: Product: syz [ 1612.267981][ T5943] usb 6-1: Manufacturer: syz [ 1612.370454][ T5943] usb 6-1: SerialNumber: syz [ 1612.394154][ T5943] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1612.563626][ T5943] usbtest 6-1:1.0: couldn't get endpoints, -22 [ 1612.607713][ T5943] usbtest 6-1:1.0: probe with driver usbtest failed with error -22 [ 1612.790246][T27124] lo speed is unknown, defaulting to 1000 [ 1612.994315][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1613.013079][T26981] veth0_vlan: entered promiscuous mode [ 1613.113412][ T9] usb 7-1: config 160 has an invalid interface number: 145 but max is 0 [ 1613.150467][T26981] veth1_vlan: entered promiscuous mode [ 1613.170099][ T9] usb 7-1: config 160 has no interface number 0 [ 1613.177596][ T9] usb 7-1: config 160 interface 145 has no altsetting 0 [ 1613.189811][ T9] usb 7-1: New USB device found, idVendor=1cf1, idProduct=0004, bcdDevice= b.7c [ 1613.206798][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1613.215581][ T9] usb 7-1: Product: syz [ 1613.219736][ T9] usb 7-1: Manufacturer: syz [ 1613.655408][ T9] usb 7-1: SerialNumber: syz [ 1613.773838][T26981] veth0_macvtap: entered promiscuous mode [ 1613.804889][T26981] veth1_macvtap: entered promiscuous mode [ 1613.861184][T26981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1613.883721][T26981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1613.897952][T27103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1613.910869][T27103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1613.927849][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1613.945135][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1613.945552][ T9] ftdi_sio 7-1:160.145: FTDI USB Serial Device converter detected [ 1613.965142][ T9] ftdi_sio ttyUSB0: unknown device type: 0xb7c [ 1613.974652][ T9] usb 7-1: USB disconnect, device number 48 [ 1613.982259][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1613.983660][ T9] ftdi_sio 7-1:160.145: device disconnected [ 1614.150167][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1614.174111][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1614.186728][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1614.237663][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1614.245774][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1614.769729][ T9] usb 6-1: USB disconnect, device number 33 [ 1615.079906][T27139] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6201'. [ 1615.202820][T27153] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6204'. [ 1615.212028][T27153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6204'. [ 1615.235105][T27153] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6204'. [ 1615.247074][T27153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6204'. [ 1615.750009][T12001] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1615.840757][T17198] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1615.910439][T12001] usb 7-1: Using ep0 maxpacket: 8 [ 1615.972863][T12001] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1615.982458][T12001] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1616.004628][T12001] usb 7-1: config 0 descriptor?? [ 1616.021168][T17198] usb 4-1: Using ep0 maxpacket: 16 [ 1616.062977][T17198] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1616.082187][T17198] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1616.097532][T17198] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1616.214493][T12001] asix 7-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1616.239763][T17198] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1616.258301][T17198] usb 4-1: config 0 descriptor?? [ 1616.330356][ T5943] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1616.510513][ T5943] usb 6-1: Using ep0 maxpacket: 8 [ 1616.520413][ T5943] usb 6-1: config 0 has an invalid interface number: 239 but max is 0 [ 1616.530000][ T5943] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1616.542520][ T5943] usb 6-1: config 0 has no interface number 0 [ 1616.550840][ T5943] usb 6-1: config 0 interface 239 altsetting 0 has an endpoint descriptor with address 0x64, changing to 0x4 [ 1616.562592][ T5943] usb 6-1: config 0 interface 239 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1616.572859][ T5943] usb 6-1: config 0 interface 239 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1616.588586][ T5943] usb 6-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 1616.597749][ T5943] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1616.607189][ T5943] usb 6-1: Product: syz [ 1616.611401][ T5943] usb 6-1: Manufacturer: syz [ 1616.616071][ T5943] usb 6-1: SerialNumber: syz [ 1616.620838][T12001] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1616.633723][ T5943] usb 6-1: config 0 descriptor?? [ 1616.638870][T12001] asix 7-1:0.0: probe with driver asix failed with error -61 [ 1617.154551][T27171] netlink: 'syz.5.6208': attribute type 2 has an invalid length. [ 1617.608439][T17198] usbhid 4-1:0.0: can't add hid device: -71 [ 1617.644973][T17198] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1617.693377][T17198] usb 4-1: USB disconnect, device number 55 [ 1617.722067][ T5943] ath6kl: Failed to submit usb control message: -110 [ 1617.752810][ T5943] ath6kl: unable to send the bmi data to the device: -110 [ 1617.788205][ T5943] ath6kl: Unable to send get target info: -110 [ 1617.813906][ T5943] ath6kl: Failed to init ath6kl core: -110 [ 1617.828084][ T5943] ath6kl_usb 6-1:0.239: probe with driver ath6kl_usb failed with error -110 [ 1618.590755][T17198] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1618.763551][T17198] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1618.790175][T17198] usb 4-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 1618.812743][T17198] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1618.847646][T17198] usb 4-1: config 0 descriptor?? [ 1618.877922][ T9] usb 7-1: USB disconnect, device number 49 [ 1619.561622][ T5882] usb 6-1: USB disconnect, device number 34 [ 1619.564085][T17198] hid_parser_main: 5 callbacks suppressed [ 1619.564100][T17198] aquacomputer_d5next 0003:0C70:F00B.0013: unknown main item tag 0x0 [ 1619.607967][T17198] aquacomputer_d5next 0003:0C70:F00B.0013: item fetching failed at offset 3/7 [ 1619.622185][T17198] aquacomputer_d5next 0003:0C70:F00B.0013: probe with driver aquacomputer_d5next failed with error -22 [ 1619.647022][T27197] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6216'. [ 1619.663108][T27197] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6216'. [ 1619.922563][T17198] usb 4-1: USB disconnect, device number 56 [ 1620.867310][T27217] 9pnet_fd: Insufficient options for proto=fd [ 1621.193078][T27224] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6221'. [ 1621.202911][T27224] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6221'. [ 1621.616725][ T9] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 1621.860307][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 1622.069003][ T5882] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1622.366079][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1622.384856][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1622.404381][ T9] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1622.413789][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1622.428270][ T9] usb 7-1: config 0 descriptor?? [ 1623.120381][ T5882] usb 6-1: too many configurations: 67, using maximum allowed: 8 [ 1623.157849][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 1623.176730][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1623.235822][ T9] usb 7-1: USB disconnect, device number 50 [ 1623.289784][ T5882] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1623.299451][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1623.308029][ T5882] usb 6-1: Product: syz [ 1623.313944][ T5882] usb 6-1: Manufacturer: syz [ 1623.318547][ T5882] usb 6-1: SerialNumber: syz [ 1623.438581][T27232] block device autoloading is deprecated and will be removed. [ 1623.978454][ T5882] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1623.992865][ T5943] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1624.754600][T27253] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6230'. [ 1624.778140][T27253] netlink: 43 bytes leftover after parsing attributes in process `syz.1.6230'. [ 1624.833604][T27253] netlink: 'syz.1.6230': attribute type 6 has an invalid length. [ 1624.928898][T27253] netlink: 'syz.1.6230': attribute type 5 has an invalid length. [ 1625.010355][T27253] netlink: 43 bytes leftover after parsing attributes in process `syz.1.6230'. [ 1625.617032][T17198] usb 6-1: USB disconnect, device number 35 [ 1625.641008][ T5943] usb 6-1: Service connection timeout for: 256 [ 1625.670431][ T5943] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1625.953339][ T5943] ath9k_htc: Failed to initialize the device [ 1625.973025][T17198] usb 6-1: ath9k_htc: USB layer deinitialized [ 1626.157811][T27269] netlink: 'syz.3.6234': attribute type 1 has an invalid length. [ 1626.169497][T27269] netlink: 172 bytes leftover after parsing attributes in process `syz.3.6234'. [ 1628.089163][T27290] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 1628.305885][T27297] /dev/sg0: Can't lookup blockdev [ 1628.336208][T27297] ptrace attach of "./syz-executor exec"[18605] was attempted by ""[27297] [ 1628.366349][T27297] netlink: 332 bytes leftover after parsing attributes in process `syz.6.6240'. [ 1628.375610][T27297] netlink: 160 bytes leftover after parsing attributes in process `syz.6.6240'. [ 1629.474654][T27309] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6242'. [ 1629.490045][T27309] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1629.719818][ T5943] IPVS: starting estimator thread 0... [ 1630.010678][T27311] IPVS: using max 41 ests per chain, 98400 per kthread [ 1630.589879][ T30] audit: type=1326 audit(1759430715.914:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27315 comm="syz.5.6244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451c58eec9 code=0x7ffc0000 [ 1630.838180][ T30] audit: type=1326 audit(1759430715.914:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27315 comm="syz.5.6244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f451c58eec9 code=0x7ffc0000 [ 1630.952394][ T30] audit: type=1326 audit(1759430715.914:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27315 comm="syz.5.6244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451c58eec9 code=0x7ffc0000 [ 1631.042835][ T30] audit: type=1326 audit(1759430715.914:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27315 comm="syz.5.6244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f451c58eec9 code=0x7ffc0000 [ 1631.066455][ T30] audit: type=1326 audit(1759430715.914:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27315 comm="syz.5.6244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451c58eec9 code=0x7ffc0000 [ 1631.104048][ T30] audit: type=1326 audit(1759430715.914:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27315 comm="syz.5.6244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451c58eec9 code=0x7ffc0000 [ 1631.137333][ T30] audit: type=1326 audit(1759430715.974:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27315 comm="syz.5.6244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f451c58eacb code=0x7ffc0000 [ 1631.166690][ T30] audit: type=1326 audit(1759430715.974:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27315 comm="syz.5.6244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f451c58eacb code=0x7ffc0000 [ 1631.304351][ T30] audit: type=1326 audit(1759430715.974:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27315 comm="syz.5.6244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f451c58eacb code=0x7ffc0000 [ 1631.665123][T17198] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1631.730997][ T30] audit: type=1326 audit(1759430715.974:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27315 comm="syz.5.6244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f451c58eacb code=0x7ffc0000 [ 1631.841322][T17198] usb 2-1: too many configurations: 67, using maximum allowed: 8 [ 1631.872347][T17198] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1631.881760][T17198] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1631.898247][T17198] usb 2-1: Product: syz [ 1631.906068][T17198] usb 2-1: Manufacturer: syz [ 1631.918096][T17198] usb 2-1: SerialNumber: syz [ 1632.081436][T17198] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1632.100236][T17542] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1633.063839][T27350] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 1633.664296][T12001] usb 2-1: USB disconnect, device number 31 [ 1634.041020][T17542] usb 2-1: Service connection timeout for: 256 [ 1634.051373][T17542] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1634.060850][T17542] ath9k_htc: Failed to initialize the device [ 1634.067169][T12001] usb 2-1: ath9k_htc: USB layer deinitialized [ 1635.589160][T27374] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6259'. [ 1636.118830][T27374] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6259'. [ 1636.156931][T27374] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6259'. [ 1636.252367][T27389] netlink: 332 bytes leftover after parsing attributes in process `syz.1.6263'. [ 1636.292709][T27389] netlink: 160 bytes leftover after parsing attributes in process `syz.1.6263'. [ 1636.709793][T27401] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 1637.641849][T25043] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1637.653254][T27412] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 1637.840360][T17542] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1637.860326][T25043] usb 4-1: Using ep0 maxpacket: 16 [ 1638.110665][T25043] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1638.129129][T25043] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1638.150564][T25043] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1638.162302][T25043] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1638.175002][T25043] usb 4-1: config 0 descriptor?? [ 1638.252466][T17542] usb 7-1: too many configurations: 67, using maximum allowed: 8 [ 1638.287192][T17542] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1638.312724][T17542] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1638.335840][T17542] usb 7-1: Product: syz [ 1638.341963][T17542] usb 7-1: Manufacturer: syz [ 1638.346640][T17542] usb 7-1: SerialNumber: syz [ 1638.358681][T17542] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1638.401173][T17198] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1638.487740][T25043] usbhid 4-1:0.0: can't add hid device: -71 [ 1638.494024][T25043] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1638.504618][T25043] usb 4-1: USB disconnect, device number 57 [ 1639.660331][T12001] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 1639.666136][T27440] netlink: 332 bytes leftover after parsing attributes in process `syz.1.6277'. [ 1639.711028][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 1639.711043][ T30] audit: type=1400 audit(1759430725.034:1973): avc: denied { relabelfrom } for pid=27421 comm="syz.3.6273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1639.723991][ T5943] usb 7-1: USB disconnect, device number 51 [ 1639.753742][T27440] netlink: 160 bytes leftover after parsing attributes in process `syz.1.6277'. [ 1639.770846][ T30] audit: type=1400 audit(1759430725.034:1974): avc: denied { relabelto } for pid=27421 comm="syz.3.6273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1639.800443][T17198] usb 7-1: Service connection timeout for: 256 [ 1639.801562][T12001] usb 5-1: device descriptor read/64, error -71 [ 1639.806710][T17198] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1639.980769][T17198] ath9k_htc: Failed to initialize the device [ 1640.014756][ T5943] usb 7-1: ath9k_htc: USB layer deinitialized [ 1640.110363][T12001] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 1640.240584][T12001] usb 5-1: device descriptor read/64, error -71 [ 1640.370285][T12001] usb usb5-port1: attempt power cycle [ 1640.710435][T12001] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 1640.750805][T12001] usb 5-1: device descriptor read/8, error -71 [ 1640.990460][T12001] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 1641.030705][T17198] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1641.033810][T12001] usb 5-1: device descriptor read/8, error -71 [ 1641.090333][T25043] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 1641.151492][T12001] usb usb5-port1: unable to enumerate USB device [ 1641.483021][T25043] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1641.590536][T12001] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 1641.608711][T25043] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1641.619757][T25043] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1641.632755][T25043] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1641.641914][T25043] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1641.653958][T25043] usbtmc 4-1:16.0: probe with driver usbtmc failed with error -22 [ 1641.674982][T25943] Bluetooth: hci0: unexpected event 0x14 length: 20 > 6 [ 1641.761861][T12001] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1641.779479][T12001] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1642.078443][T12001] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1642.092107][T12001] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1642.109865][T12001] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1642.147913][T17198] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1642.189889][T17198] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1642.193992][T12001] usbtmc 6-1:16.0: probe with driver usbtmc failed with error -22 [ 1642.206867][T17198] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1642.233701][T17198] usb 7-1: config 0 descriptor?? [ 1642.256619][T17198] pwc: Askey VC010 type 2 USB webcam detected. [ 1642.734441][T17198] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1642.742796][T17198] pwc: recv_control_msg error -32 req 02 val 2700 [ 1642.750338][T17198] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1642.764586][T17198] pwc: recv_control_msg error -32 req 04 val 1000 [ 1642.781661][T17198] pwc: recv_control_msg error -32 req 04 val 1300 [ 1643.313512][ T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1643.474418][T17198] pwc: recv_control_msg error -32 req 04 val 1400 [ 1643.487916][T17198] pwc: recv_control_msg error -32 req 02 val 2000 [ 1643.494813][T17198] pwc: recv_control_msg error -32 req 02 val 2100 [ 1643.521980][T27489] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 1643.731342][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1643.753431][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1643.792272][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1643.824875][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1643.835344][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1643.860382][ T9] usb 2-1: config 0 descriptor?? [ 1644.401233][T12001] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1644.550676][T12001] usb 5-1: Using ep0 maxpacket: 8 [ 1644.557105][T12001] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1644.567249][T12001] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1644.578235][T12001] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1644.593713][T12001] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1644.609151][T12001] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1644.618396][T12001] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1644.626427][T12001] usb 5-1: Product: syz [ 1644.630616][T12001] usb 5-1: Manufacturer: syz [ 1644.635203][T12001] usb 5-1: SerialNumber: syz [ 1644.644002][T12001] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 1644.653074][T12001] usbtest 5-1:1.0: couldn't get endpoints, -22 [ 1644.659249][T12001] usbtest 5-1:1.0: probe with driver usbtest failed with error -22 [ 1644.864612][T27449] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1645.018524][T17198] pwc: recv_control_msg error -71 req 02 val 2500 [ 1645.064690][T17198] pwc: recv_control_msg error -71 req 02 val 2400 [ 1645.111751][T25043] usb 4-1: USB disconnect, device number 58 [ 1645.436697][T17198] pwc: recv_control_msg error -71 req 02 val 2600 [ 1645.451653][T17198] pwc: recv_control_msg error -71 req 02 val 2900 [ 1645.464918][T17198] pwc: recv_control_msg error -71 req 02 val 2800 [ 1645.484772][ T10] usb 6-1: USB disconnect, device number 36 [ 1645.491374][T17198] pwc: recv_control_msg error -71 req 04 val 1100 [ 1645.503541][T17198] pwc: recv_control_msg error -71 req 04 val 1200 [ 1645.517081][T17198] pwc: Registered as video103. [ 1645.523909][T17198] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input15 [ 1645.543283][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 1645.556789][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1645.566595][T17198] usb 7-1: USB disconnect, device number 52 [ 1645.601355][ T9] usb 2-1: USB disconnect, device number 32 [ 1646.122218][T27512] fuse: Bad value for 'fd' [ 1646.430871][ T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1646.603401][ T9] usb 2-1: too many configurations: 67, using maximum allowed: 8 [ 1646.630958][ T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1646.691097][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1646.834141][ T9] usb 2-1: Product: syz [ 1646.847750][ T9] usb 2-1: Manufacturer: syz [ 1646.852996][ T9] usb 2-1: SerialNumber: syz [ 1646.868243][ T9] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1646.934238][T27522] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6297'. [ 1646.944508][T27522] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6297'. [ 1647.428767][T17198] usb 5-1: USB disconnect, device number 60 [ 1647.459864][ T10] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1648.345621][T27539] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 1648.508635][T17198] usb 2-1: USB disconnect, device number 33 [ 1648.742368][ T10] usb 2-1: Service connection timeout for: 256 [ 1648.748550][ T10] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1648.759462][ T10] ath9k_htc: Failed to initialize the device [ 1649.315810][T17198] usb 2-1: ath9k_htc: USB layer deinitialized [ 1649.869437][T27555] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 1649.960368][T25943] Bluetooth: hci3: command 0x0406 tx timeout [ 1650.093053][T27574] fuse: Bad value for 'fd' [ 1651.077847][T27562] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 1651.182916][T27580] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6310'. [ 1651.192250][T27580] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6310'. [ 1652.309819][T27595] /dev/sg0: Can't lookup blockdev [ 1652.363820][T27595] ptrace attach of "./syz-executor exec"[26020] was attempted by ""[27595] [ 1652.461769][T27595] netlink: 332 bytes leftover after parsing attributes in process `syz.3.6313'. [ 1652.474135][T27595] netlink: 160 bytes leftover after parsing attributes in process `syz.3.6313'. [ 1653.250343][T13227] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1653.297657][T27610] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 1653.890453][T13227] usb 4-1: Using ep0 maxpacket: 8 [ 1653.911969][T13227] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1653.923267][T13227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1653.970088][T13227] usb 4-1: config 0 descriptor?? [ 1654.440476][T13227] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1654.481898][T27625] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6321'. [ 1654.491638][T27625] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6321'. [ 1654.600363][T25943] Bluetooth: hci3: command 0x0406 tx timeout [ 1654.787481][ T9] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1655.350377][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1655.358290][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1655.374924][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1655.392141][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1655.401531][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1655.418066][ T9] usb 2-1: config 0 descriptor?? [ 1655.715514][ T5943] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1655.960643][ T5943] usb 5-1: Using ep0 maxpacket: 8 [ 1656.018279][ T5943] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1656.069303][ T5943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1656.096473][ T5943] usb 5-1: config 0 descriptor?? [ 1656.153851][T13227] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1656.178204][T13227] asix 4-1:0.0: probe with driver asix failed with error -71 [ 1656.195725][T13227] usb 4-1: USB disconnect, device number 59 [ 1656.387346][ T5943] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1657.683984][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 1657.689996][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1657.789956][ T9] usb 2-1: USB disconnect, device number 34 [ 1658.430646][T27680] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6332'. [ 1658.625923][ T5943] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1658.642479][ T5943] asix 5-1:0.0: probe with driver asix failed with error -71 [ 1658.687716][ T5943] usb 5-1: USB disconnect, device number 61 [ 1659.060331][ T9] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1659.311253][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 1659.320746][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1659.331641][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1659.350521][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1659.456415][ T9] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1659.593233][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1659.602493][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1659.620327][ T9] usb 7-1: Product: syz [ 1659.627806][ T9] usb 7-1: Manufacturer: syz [ 1659.635730][ T9] usb 7-1: SerialNumber: syz [ 1659.652151][ T9] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 1659.667653][ T9] usbtest 7-1:1.0: couldn't get endpoints, -22 [ 1659.733332][ T9] usbtest 7-1:1.0: probe with driver usbtest failed with error -22 [ 1660.408316][ T9] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1660.469561][T27704] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6339'. [ 1660.590430][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1660.599798][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1660.626608][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1660.663358][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1660.672515][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1660.702365][ T9] usb 6-1: config 0 descriptor?? [ 1660.783649][T17198] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1661.170312][T17198] usb 2-1: Using ep0 maxpacket: 16 [ 1661.180185][T17198] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1661.202112][T17198] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1661.223407][T17198] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1661.232776][T17198] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1661.243297][T17198] usb 2-1: config 0 descriptor?? [ 1661.746849][ T10] usb 7-1: USB disconnect, device number 53 [ 1661.750564][T27726] /dev/sg0: Can't lookup blockdev [ 1662.070419][T27724] netlink: 332 bytes leftover after parsing attributes in process `syz.3.6345'. [ 1662.079502][T27724] netlink: 160 bytes leftover after parsing attributes in process `syz.3.6345'. [ 1662.169636][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 1662.198823][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1662.345914][ T9] usb 6-1: USB disconnect, device number 37 [ 1662.733451][ T5837] Bluetooth: hci3: unexpected event for opcode 0x0c1c [ 1663.334646][T17198] usbhid 2-1:0.0: can't add hid device: -71 [ 1663.350569][T17198] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1663.374601][T17198] usb 2-1: USB disconnect, device number 35 [ 1664.115776][T27765] /dev/sg0: Can't lookup blockdev [ 1664.168089][T27765] netlink: 332 bytes leftover after parsing attributes in process `syz.3.6358'. [ 1664.178061][T27765] netlink: 160 bytes leftover after parsing attributes in process `syz.3.6358'. [ 1665.170413][T17198] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1665.790391][T17198] usb 7-1: Using ep0 maxpacket: 8 [ 1665.806988][T17198] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1665.869091][T17198] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1665.889065][T27785] ptrace attach of "./syz-executor exec"[26020] was attempted by "./syz-executor exec"[27785] [ 1665.899433][T17198] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1665.915621][T17198] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1665.935993][T17198] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1665.945257][T17198] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1665.953282][T17198] usb 7-1: Product: syz [ 1665.957469][T17198] usb 7-1: Manufacturer: syz [ 1665.967006][T17198] usb 7-1: SerialNumber: syz [ 1665.975933][T27792] ptrace attach of "./syz-executor exec"[26020] was attempted by "./syz-executor exec"[27792] [ 1665.995295][T17198] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 1666.004472][T17198] usbtest 7-1:1.0: couldn't get endpoints, -22 [ 1666.012413][T17198] usbtest 7-1:1.0: probe with driver usbtest failed with error -22 [ 1666.204737][T27799] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6366'. [ 1666.216933][T13769] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1666.352134][ T30] audit: type=1326 audit(1759430751.564:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27780 comm="syz.3.6363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82378eec9 code=0x7fc00000 [ 1666.452922][T27778] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6362'. [ 1666.590382][T12001] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 1666.710346][ T5954] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1667.090413][ T5954] usb 2-1: Using ep0 maxpacket: 16 [ 1667.098911][T12001] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1667.110429][T12001] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1667.127411][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1667.153838][ T5954] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1667.186781][T12001] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1667.195980][T12001] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1667.205404][T12001] usb 5-1: Product: syz [ 1667.218849][T12001] usb 5-1: Manufacturer: syz [ 1667.223865][T12001] usb 5-1: SerialNumber: syz [ 1667.228471][ T5954] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1667.248171][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1667.259734][ T5954] usb 2-1: config 0 descriptor?? [ 1667.408876][T13227] usb 7-1: USB disconnect, device number 54 [ 1668.498192][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.685643][ T5954] usbhid 2-1:0.0: can't add hid device: -71 [ 1668.720124][ T5954] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1668.748628][ T5954] usb 2-1: USB disconnect, device number 36 [ 1668.778437][ T5943] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 1668.957954][ T5943] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1668.970294][ T5943] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1669.009262][ T5943] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1669.030570][ T5943] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1669.050785][ T5943] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1669.104851][ T5943] usbtmc 4-1:16.0: probe with driver usbtmc failed with error -22 [ 1669.210042][T12001] usb 5-1: 0:2 : does not exist [ 1669.225086][T12001] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1669.340521][T12001] usb 5-1: USB disconnect, device number 62 [ 1669.684425][T27842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1669.693079][T27842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1669.702501][T27842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1669.710990][T27842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1672.947128][T27858] /dev/sg0: Can't lookup blockdev [ 1673.158610][T17198] usb 4-1: USB disconnect, device number 60 [ 1673.298084][T27862] : Can't lookup blockdev [ 1674.224466][ T30] audit: type=1400 audit(1759430759.544:1976): avc: denied { create } for pid=27879 comm="syz.6.6387" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_netfilter_socket permissive=1 [ 1674.623025][T27878] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 1675.170777][T27890] /dev/sg0: Can't lookup blockdev [ 1675.200463][T27890] ptrace attach of "./syz-executor exec"[26020] was attempted by "./syz-executor exec"[27890] [ 1675.219105][T27890] netlink: 332 bytes leftover after parsing attributes in process `syz.3.6386'. [ 1675.228569][T27890] netlink: 160 bytes leftover after parsing attributes in process `syz.3.6386'. [ 1676.380370][T17198] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1676.553238][T17198] usb 5-1: Using ep0 maxpacket: 16 [ 1676.721471][T17198] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1676.742229][T17198] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1676.756439][T27901] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.6392'. [ 1676.785640][T27907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6394'. [ 1676.840782][T17198] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1676.851392][T27907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6394'. [ 1676.866746][T17198] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1676.897234][T17198] usb 5-1: config 0 descriptor?? [ 1676.920782][T17198] usb 5-1: can't set config #0, error -71 [ 1676.937281][T17198] usb 5-1: USB disconnect, device number 63 [ 1677.283135][T27924] /dev/sg0: Can't lookup blockdev [ 1677.303709][T27924] ptrace attach of "./syz-executor exec"[24869] was attempted by "./syz-executor exec"[27924] [ 1677.327576][T27924] netlink: 332 bytes leftover after parsing attributes in process `syz.1.6399'. [ 1677.337096][T27924] netlink: 160 bytes leftover after parsing attributes in process `syz.1.6399'. [ 1677.438121][T27919] : Can't lookup blockdev [ 1677.989971][T27940] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 1679.140347][ T9] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1679.414553][T27960] tipc: Enabling of bearer rejected, failed to enable media [ 1679.480970][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1679.509210][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1679.557387][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1679.607535][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1679.629459][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1679.656709][ T9] usb 4-1: config 0 descriptor?? [ 1680.051115][T17198] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1680.200480][T17198] usb 2-1: Using ep0 maxpacket: 8 [ 1680.217058][T17198] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1680.236654][T17198] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1680.262840][T17198] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1680.273046][T17198] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1680.289884][T17198] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1680.290435][T12001] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1680.310178][T17198] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1680.318325][T17198] usb 2-1: Product: syz [ 1680.332932][T17198] usb 2-1: Manufacturer: syz [ 1680.337609][T17198] usb 2-1: SerialNumber: syz [ 1680.348447][T17198] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 1680.358576][T17198] usbtest 2-1:1.0: couldn't get endpoints, -22 [ 1680.364869][T17198] usbtest 2-1:1.0: probe with driver usbtest failed with error -22 [ 1680.544908][T12001] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1680.733278][T12001] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1680.871090][ T5943] usb 2-1: USB disconnect, device number 37 [ 1680.879641][T12001] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1680.892216][T12001] usb 7-1: config 0 descriptor?? [ 1681.034067][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 1681.042330][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1681.522133][T12001] keytouch 0003:0926:3333.0014: fixing up Keytouch IEC report descriptor [ 1681.523633][ T9] usb 4-1: USB disconnect, device number 61 [ 1681.569055][T12001] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0014/input/input16 [ 1681.692825][T12001] keytouch 0003:0926:3333.0014: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 1681.843881][T12001] usb 7-1: USB disconnect, device number 55 [ 1682.809101][ T5954] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1683.340471][ T5954] usb 5-1: Using ep0 maxpacket: 16 [ 1683.782237][ T5954] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1683.793168][ T5954] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1683.808367][ T5954] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1683.820361][ T5954] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1683.838240][ T5954] usb 5-1: config 0 descriptor?? [ 1684.148583][T28022] /dev/sg0: Can't lookup blockdev [ 1684.159678][T28022] ptrace attach of "./syz-executor exec"[18082] was attempted by "./syz-executor exec"[28022] [ 1684.179458][T28022] netlink: 332 bytes leftover after parsing attributes in process `syz.5.6423'. [ 1684.188762][T28022] netlink: 160 bytes leftover after parsing attributes in process `syz.5.6423'. [ 1684.896775][T28033] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 1685.715030][ T5954] usbhid 5-1:0.0: can't add hid device: -71 [ 1685.736309][ T5954] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1685.774554][ T5954] usb 5-1: USB disconnect, device number 64 [ 1690.087608][T28055] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 1690.108219][T28064] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6434'. [ 1690.391533][ T5943] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1690.704319][ T5943] usb 2-1: Using ep0 maxpacket: 16 [ 1690.711801][ T5943] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1690.722819][ T5943] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1690.742905][ T5943] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1690.753082][ T5943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1690.802323][ T5943] usb 2-1: config 0 descriptor?? [ 1691.670880][T28085] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 1691.860879][ T30] audit: type=1326 audit(1759430777.194:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28078 comm="syz.3.6439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82378eec9 code=0x7ffc0000 [ 1691.944754][T28087] fuse: Unknown parameter 'user_id00000000000000000000' [ 1691.990682][ T30] audit: type=1326 audit(1759430777.194:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28078 comm="syz.3.6439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82378eec9 code=0x7ffc0000 [ 1692.353699][ T30] audit: type=1326 audit(1759430777.194:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28078 comm="syz.3.6439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7fd82378eec9 code=0x7ffc0000 [ 1692.439584][T28088] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 1692.601885][ T30] audit: type=1326 audit(1759430777.194:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28078 comm="syz.3.6439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82378eec9 code=0x7ffc0000 [ 1692.627445][ T30] audit: type=1326 audit(1759430777.194:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28078 comm="syz.3.6439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82378eec9 code=0x7ffc0000 [ 1692.759317][ T30] audit: type=1326 audit(1759430777.194:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28078 comm="syz.3.6439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fd82378eec9 code=0x7ffc0000 [ 1692.820344][ T30] audit: type=1326 audit(1759430777.194:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28078 comm="syz.3.6439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82378eec9 code=0x7ffc0000 [ 1692.845163][ T30] audit: type=1326 audit(1759430777.194:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28078 comm="syz.3.6439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82378eec9 code=0x7ffc0000 [ 1692.868993][ T30] audit: type=1326 audit(1759430777.194:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28078 comm="syz.3.6439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fd82378eec9 code=0x7ffc0000 [ 1692.892601][ C0] vkms_vblank_simulate: vblank timer overrun [ 1692.901007][ T30] audit: type=1326 audit(1759430777.194:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28078 comm="syz.3.6439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82378eec9 code=0x7ffc0000 [ 1692.924442][ C0] vkms_vblank_simulate: vblank timer overrun [ 1692.940149][ T5943] usbhid 2-1:0.0: can't add hid device: -71 [ 1692.972672][ T5943] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1693.003324][ T5943] usb 2-1: USB disconnect, device number 38 [ 1693.506626][ T5943] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 1693.673160][ T5943] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1693.685775][ T5943] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1693.696093][ T5943] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1693.709301][ T5943] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1693.720821][ T5943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1693.738584][ T5943] usbtmc 2-1:16.0: probe with driver usbtmc failed with error -22 [ 1693.922129][ T9] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1694.128926][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1694.145792][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 1694.194626][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1694.208269][ T9] usb 4-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00 [ 1694.327396][T28120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1694.336189][T28120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1694.401650][T28122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1694.410428][T28122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1694.445374][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1694.456280][ T9] usb 4-1: config 0 descriptor?? [ 1694.798013][T28130] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1695.124029][T28110] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6446'. [ 1695.133748][T28110] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6446'. [ 1695.144106][ T5943] usb 4-1: USB disconnect, device number 62 [ 1696.219578][ T9] usb 2-1: USB disconnect, device number 39 [ 1696.305384][T28147] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6454'. [ 1696.970568][T17198] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1696.978189][ T10] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 1697.130365][T17198] usb 5-1: Using ep0 maxpacket: 8 [ 1697.135460][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 1697.143716][T17198] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1697.157318][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1697.168424][T17198] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1697.178236][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1697.191310][T17198] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1697.197913][T17198] usb 5-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 1697.207024][ T10] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1697.260964][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1697.270764][T17198] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1697.296073][T17198] usb 5-1: config 0 descriptor?? [ 1697.304616][ T10] usb 7-1: config 0 descriptor?? [ 1697.390337][T17542] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1697.483370][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1697.483408][ T30] audit: type=1400 audit(1759430782.824:1992): avc: denied { setattr } for pid=28167 comm="syz.1.6460" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1697.533939][ T30] audit: type=1400 audit(1759430782.824:1993): avc: denied { write } for pid=28167 comm="syz.1.6460" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1697.560324][T17542] usb 6-1: Using ep0 maxpacket: 16 [ 1697.566979][ T30] audit: type=1400 audit(1759430782.824:1994): avc: denied { open } for pid=28167 comm="syz.1.6460" path="/168/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1697.592106][T17542] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1697.603226][T17542] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1697.616102][T17542] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1697.625150][T17542] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1697.637515][T17542] usb 6-1: config 0 descriptor?? [ 1698.192565][T17198] input: HID 28bd:0905 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28BD:0905.0016/input/input17 [ 1698.219698][T28173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1698.228468][T28173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1698.274393][T17198] uclogic 0003:28BD:0905.0016: input,hidraw0: USB HID v8.15 Mouse [HID 28bd:0905] on usb-dummy_hcd.4-1/input0 [ 1698.409634][ T5943] usb 5-1: USB disconnect, device number 65 [ 1698.895761][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 1698.902976][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1698.917595][ T10] usb 7-1: USB disconnect, device number 56 [ 1699.686264][T17542] usbhid 6-1:0.0: can't add hid device: -71 [ 1699.701854][T17542] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1699.717547][T17542] usb 6-1: USB disconnect, device number 38 [ 1700.976985][T28201] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 1702.535531][T28204] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 1704.080598][ T5943] usb 7-1: new full-speed USB device number 57 using dummy_hcd [ 1704.224189][T28239] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 1704.301812][ T5943] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1704.324635][ T5943] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1704.364447][ T5943] usb 7-1: New USB device found, idVendor=1e7d, idProduct=0006, bcdDevice= 0.00 [ 1704.380461][ T5943] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1704.416891][ T5943] usb 7-1: config 0 descriptor?? [ 1705.935301][T28263] openvswitch: netlink: Flow actions attr not present in new flow. [ 1706.840734][T28256] overlayfs: statfs failed on './file0' [ 1707.554815][ T5943] usbhid 7-1:0.0: can't add hid device: -71 [ 1707.560901][ T5943] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1707.575933][ T5943] usb 7-1: USB disconnect, device number 57 [ 1708.418595][T28270] /dev/sg0: Can't lookup blockdev [ 1711.170413][ T10] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1711.460323][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 1711.558700][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1711.873373][T28313] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 1711.896288][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1711.912075][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1711.932366][ T10] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1711.947531][ T10] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1712.032674][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1712.286638][ T10] usb 7-1: Product: syz [ 1712.295572][ T10] usb 7-1: Manufacturer: syz [ 1712.324493][ T10] usb 7-1: SerialNumber: syz [ 1712.353699][ T10] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 1712.408217][ T10] usbtest 7-1:1.0: couldn't get endpoints, -22 [ 1712.422082][ T10] usbtest 7-1:1.0: probe with driver usbtest failed with error -22 [ 1712.516471][T28332] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6500'. [ 1712.758836][T12001] usb 7-1: USB disconnect, device number 58 [ 1713.340083][T28345] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6502'. [ 1713.371367][T28345] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6502'. [ 1713.389346][T28345] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6502'. [ 1713.647324][ T30] audit: type=1400 audit(1759430798.874:1995): avc: denied { map } for pid=28343 comm="syz.4.6502" path="socket:[97991]" dev="sockfs" ino=97991 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1713.690361][ T30] audit: type=1400 audit(1759430798.874:1996): avc: denied { accept } for pid=28343 comm="syz.4.6502" path="socket:[97991]" dev="sockfs" ino=97991 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1716.418728][T28360] FAULT_INJECTION: forcing a failure. [ 1716.418728][T28360] name failslab, interval 1, probability 0, space 0, times 0 [ 1716.474160][T28360] CPU: 1 UID: 0 PID: 28360 Comm: syz.5.6507 Not tainted syzkaller #0 PREEMPT(full) [ 1716.474188][T28360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1716.474199][T28360] Call Trace: [ 1716.474206][T28360] [ 1716.474213][T28360] dump_stack_lvl+0x16c/0x1f0 [ 1716.474244][T28360] should_fail_ex+0x512/0x640 [ 1716.474266][T28360] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1716.474295][T28360] should_failslab+0xc2/0x120 [ 1716.474313][T28360] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1716.474338][T28360] ? __alloc_skb+0x2b2/0x380 [ 1716.474365][T28360] __alloc_skb+0x2b2/0x380 [ 1716.474387][T28360] ? __pfx___alloc_skb+0x10/0x10 [ 1716.474418][T28360] alloc_skb_with_frags+0xe0/0x860 [ 1716.474451][T28360] sock_alloc_send_pskb+0x7f9/0x980 [ 1716.474473][T28360] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1716.474500][T28360] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1716.474521][T28360] ? find_held_lock+0x2b/0x80 [ 1716.474545][T28360] ? dev_get_by_index+0x17c/0x380 [ 1716.474573][T28360] raw_sendmsg+0x25c/0x1130 [ 1716.474597][T28360] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 1716.474622][T28360] ? __pfx_raw_sendmsg+0x10/0x10 [ 1716.474656][T28360] ____sys_sendmsg+0xa95/0xc70 [ 1716.474674][T28360] ? copy_msghdr_from_user+0x10a/0x160 [ 1716.474696][T28360] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1716.474726][T28360] ___sys_sendmsg+0x134/0x1d0 [ 1716.474750][T28360] ? __pfx____sys_sendmsg+0x10/0x10 [ 1716.474803][T28360] __sys_sendmsg+0x16d/0x220 [ 1716.474827][T28360] ? __pfx___sys_sendmsg+0x10/0x10 [ 1716.474867][T28360] do_syscall_64+0xcd/0x4e0 [ 1716.474901][T28360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1716.474919][T28360] RIP: 0033:0x7f451c58eec9 [ 1716.474934][T28360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1716.474951][T28360] RSP: 002b:00007f451d440038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1716.474969][T28360] RAX: ffffffffffffffda RBX: 00007f451c7e5fa0 RCX: 00007f451c58eec9 [ 1716.474981][T28360] RDX: 0000000020000800 RSI: 0000200000000440 RDI: 0000000000000003 [ 1716.474992][T28360] RBP: 00007f451d440090 R08: 0000000000000000 R09: 0000000000000000 [ 1716.475003][T28360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1716.475014][T28360] R13: 00007f451c7e6038 R14: 00007f451c7e5fa0 R15: 00007ffdae8c1288 [ 1716.475037][T28360] [ 1717.816863][T28382] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 1718.103061][T28378] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 1720.243784][T28407] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 1721.149940][T28419] FAULT_INJECTION: forcing a failure. [ 1721.149940][T28419] name failslab, interval 1, probability 0, space 0, times 0 [ 1721.162676][T28419] CPU: 0 UID: 0 PID: 28419 Comm: syz.1.6519 Not tainted syzkaller #0 PREEMPT(full) [ 1721.162699][T28419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1721.162709][T28419] Call Trace: [ 1721.162715][T28419] [ 1721.162721][T28419] dump_stack_lvl+0x16c/0x1f0 [ 1721.162750][T28419] should_fail_ex+0x512/0x640 [ 1721.162770][T28419] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1721.162799][T28419] should_failslab+0xc2/0x120 [ 1721.162814][T28419] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1721.162839][T28419] ? __alloc_skb+0x2b2/0x380 [ 1721.162863][T28419] __alloc_skb+0x2b2/0x380 [ 1721.162882][T28419] ? __pfx___alloc_skb+0x10/0x10 [ 1721.162905][T28419] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1721.162933][T28419] netlink_alloc_large_skb+0x69/0x130 [ 1721.162959][T28419] netlink_sendmsg+0x6a1/0xdd0 [ 1721.162986][T28419] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1721.163019][T28419] ____sys_sendmsg+0xa95/0xc70 [ 1721.163036][T28419] ? copy_msghdr_from_user+0x10a/0x160 [ 1721.163058][T28419] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1721.163085][T28419] ___sys_sendmsg+0x134/0x1d0 [ 1721.163109][T28419] ? __pfx____sys_sendmsg+0x10/0x10 [ 1721.163164][T28419] __sys_sendmsg+0x16d/0x220 [ 1721.163187][T28419] ? __pfx___sys_sendmsg+0x10/0x10 [ 1721.163224][T28419] do_syscall_64+0xcd/0x4e0 [ 1721.163249][T28419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1721.163265][T28419] RIP: 0033:0x7ff36178eec9 [ 1721.163278][T28419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1721.163293][T28419] RSP: 002b:00007ff36266c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1721.163309][T28419] RAX: ffffffffffffffda RBX: 00007ff3619e6090 RCX: 00007ff36178eec9 [ 1721.163320][T28419] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1721.163330][T28419] RBP: 00007ff36266c090 R08: 0000000000000000 R09: 0000000000000000 [ 1721.163339][T28419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1721.163349][T28419] R13: 00007ff3619e6128 R14: 00007ff3619e6090 R15: 00007fff9b087e78 [ 1721.163371][T28419] [ 1723.173424][T28441] 9pnet_fd: Insufficient options for proto=fd [ 1723.196770][T28430] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 1723.460447][T13227] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1723.548116][T28445] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 1723.578827][T28454] 9pnet_fd: Insufficient options for proto=fd [ 1723.614471][T28444] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6527'. [ 1723.741263][T13227] usb 7-1: Using ep0 maxpacket: 8 [ 1723.747913][T13227] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1723.757809][T13227] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1723.767600][T13227] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1723.777509][T13227] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1723.790902][T13227] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1723.799965][T13227] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1723.941468][T12001] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1724.315157][T28460] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6530'. [ 1724.361419][T12001] usb 6-1: Using ep0 maxpacket: 16 [ 1724.375086][ T30] audit: type=1400 audit(1759430809.714:1997): avc: denied { remount } for pid=28461 comm="syz.4.6531" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1724.402067][T12001] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1724.416873][T12001] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1724.430066][T12001] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1724.444647][T12001] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1724.454650][T13227] usb 7-1: GET_CAPABILITIES returned 0 [ 1724.595079][T13227] usbtmc 7-1:16.0: can't read capabilities [ 1724.603410][T12001] usb 6-1: config 0 descriptor?? [ 1724.720930][T28468] netlink: 1004 bytes leftover after parsing attributes in process `syz.1.6532'. [ 1726.888117][ T5837] Bluetooth: hci0: command 0x0406 tx timeout [ 1727.300383][T12001] usbhid 6-1:0.0: can't add hid device: -71 [ 1727.313459][T12001] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1727.339095][T12001] usb 6-1: USB disconnect, device number 39 [ 1728.133970][T28487] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 1728.327113][T25043] usb 7-1: USB disconnect, device number 59 [ 1729.159235][T28511] /dev/sg0: Can't lookup blockdev [ 1729.804172][T25043] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1729.814027][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1729.971735][T25043] usb 4-1: Using ep0 maxpacket: 16 [ 1729.983426][T25043] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1730.062336][T25043] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1730.088937][T25043] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1730.098666][T25043] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1730.114522][T25043] usb 4-1: config 0 descriptor?? [ 1730.710590][ T10] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 1730.872109][ T10] usb 7-1: config 3 has an invalid interface number: 155 but max is 2 [ 1730.882413][ T10] usb 7-1: config 3 has an invalid interface number: 93 but max is 2 [ 1730.901418][ T10] usb 7-1: config 3 has an invalid descriptor of length 186, skipping remainder of the config [ 1730.959590][ T10] usb 7-1: config 3 has 2 interfaces, different from the descriptor's value: 3 [ 1730.993380][ T10] usb 7-1: config 3 has no interface number 0 [ 1731.052597][ T10] usb 7-1: config 3 has no interface number 1 [ 1731.070432][ T10] usb 7-1: config 3 interface 155 altsetting 45 endpoint 0x5 has invalid maxpacket 9223, setting to 64 [ 1731.083326][ T10] usb 7-1: config 3 interface 155 altsetting 45 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 1731.153025][ T10] usb 7-1: config 3 interface 155 altsetting 45 has a duplicate endpoint with address 0x5, skipping [ 1731.248981][ T10] usb 7-1: config 3 interface 155 altsetting 45 has a duplicate endpoint with address 0x5, skipping [ 1731.274469][ T10] usb 7-1: config 3 interface 155 altsetting 45 has an invalid descriptor for endpoint zero, skipping [ 1731.316484][ T10] usb 7-1: config 3 interface 155 altsetting 45 endpoint 0x8 has invalid maxpacket 30723, setting to 1024 [ 1731.340577][ T10] usb 7-1: config 3 interface 155 altsetting 45 bulk endpoint 0x8 has invalid maxpacket 1024 [ 1731.385034][ T10] usb 7-1: config 3 interface 155 altsetting 45 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1731.499979][ T10] usb 7-1: config 3 interface 155 altsetting 45 has a duplicate endpoint with address 0x6, skipping [ 1731.514040][ T10] usb 7-1: config 3 interface 155 altsetting 45 has an invalid descriptor for endpoint zero, skipping [ 1731.531986][ T10] usb 7-1: config 3 interface 155 altsetting 45 has a duplicate endpoint with address 0x5, skipping [ 1731.546556][ T10] usb 7-1: config 3 interface 155 altsetting 45 has 14 endpoint descriptors, different from the interface descriptor's value: 12 [ 1731.560537][ T10] usb 7-1: config 3 interface 93 altsetting 9 has an endpoint descriptor with address 0xAF, changing to 0x8F [ 1731.600189][ T10] usb 7-1: config 3 interface 93 altsetting 9 endpoint 0x8F has invalid maxpacket 53081, setting to 64 [ 1731.612413][ T10] usb 7-1: config 3 interface 93 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 11 [ 1731.628527][ T10] usb 7-1: config 3 interface 155 has no altsetting 0 [ 1731.735861][ T10] usb 7-1: config 3 interface 93 has no altsetting 0 [ 1731.745453][ T10] usb 7-1: New USB device found, idVendor=0dd8, idProduct=1060, bcdDevice=a1.98 [ 1731.760509][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1731.769957][ T10] usb 7-1: Product: Ŷ讂㔗횭Ἇ㔪闃萢뛩瑩▥ᔞ薓⢰덳텨̷Ҽᤦ绕긆㍹✎៝襳䵢쎚蝽ꂜ০휂ศ휔ꕄٰ榽Ꞝꩨ摚몭逌䌸㑋ꗻ瘽៓鑟ᛘ送蘽翔뉩熠垽穅跘̪殆鰨燧精妳稒亿闼陰ꕹ哵蕦솎奪ꓳ㹝陷兕䌫鉼ቡ婯૸掞緻꺦谜郳㣋暄啬 [ 1731.875467][T25043] usbhid 4-1:0.0: can't add hid device: -71 [ 1731.889133][T25043] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1731.908586][T25043] usb 4-1: USB disconnect, device number 63 [ 1731.917360][ T10] usb 7-1: Manufacturer: 鮂⸂뇋뻮撽Ꮱ츠ꑋଶ髢Ҫʒ공둤姃酡岸菱擏媯 [ 1731.930904][ T10] usb 7-1: SerialNumber: Ј [ 1731.956858][T28531] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1732.059418][T28544] FAULT_INJECTION: forcing a failure. [ 1732.059418][T28544] name failslab, interval 1, probability 0, space 0, times 0 [ 1732.164845][T28544] CPU: 0 UID: 0 PID: 28544 Comm: syz.3.6550 Not tainted syzkaller #0 PREEMPT(full) [ 1732.164874][T28544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1732.164884][T28544] Call Trace: [ 1732.164891][T28544] [ 1732.164899][T28544] dump_stack_lvl+0x16c/0x1f0 [ 1732.164930][T28544] should_fail_ex+0x512/0x640 [ 1732.164955][T28544] ? fs_reclaim_acquire+0xae/0x150 [ 1732.164977][T28544] ? tomoyo_encode2+0x100/0x3e0 [ 1732.164999][T28544] should_failslab+0xc2/0x120 [ 1732.165060][T28544] __kmalloc_noprof+0xd2/0x510 [ 1732.165097][T28544] tomoyo_encode2+0x100/0x3e0 [ 1732.165122][T28544] tomoyo_encode+0x29/0x50 [ 1732.165144][T28544] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1732.165170][T28544] ? tomoyo_profile+0x47/0x60 [ 1732.165198][T28544] tomoyo_path_number_perm+0x245/0x580 [ 1732.165216][T28544] ? tomoyo_path_number_perm+0x237/0x580 [ 1732.165237][T28544] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1732.165258][T28544] ? find_held_lock+0x2b/0x80 [ 1732.165305][T28544] ? find_held_lock+0x2b/0x80 [ 1732.165327][T28544] ? hook_file_ioctl_common+0x145/0x410 [ 1732.165364][T28544] ? __fget_files+0x20e/0x3c0 [ 1732.165396][T28544] security_file_ioctl+0x9b/0x240 [ 1732.165419][T28544] __x64_sys_ioctl+0xb7/0x210 [ 1732.165445][T28544] do_syscall_64+0xcd/0x4e0 [ 1732.165473][T28544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1732.165491][T28544] RIP: 0033:0x7fd82378eec9 [ 1732.165507][T28544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1732.165524][T28544] RSP: 002b:00007fd8245b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1732.165543][T28544] RAX: ffffffffffffffda RBX: 00007fd8239e6090 RCX: 00007fd82378eec9 [ 1732.165555][T28544] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 1732.165565][T28544] RBP: 00007fd8245b4090 R08: 0000000000000000 R09: 0000000000000000 [ 1732.165576][T28544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1732.165586][T28544] R13: 00007fd8239e6128 R14: 00007fd8239e6090 R15: 00007ffc0c94cbc8 [ 1732.165611][T28544] [ 1732.480389][T28544] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1733.428584][ T10] usb-storage 7-1:3.155: USB Mass Storage device detected [ 1733.458575][ T10] usb-storage 7-1:3.155: Quirks match for vid 0dd8 pid 1060: 8 [ 1733.485302][T28563] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1733.575433][ T10] usb-storage 7-1:3.93: USB Mass Storage device detected [ 1733.585976][ T10] usb-storage 7-1:3.93: Quirks match for vid 0dd8 pid 1060: 8 [ 1733.648964][ T10] usb 7-1: USB disconnect, device number 60 [ 1733.806083][T28572] mkiss: ax0: crc mode is auto. [ 1734.739122][T28585] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 1734.899866][T28580] tipc: Started in network mode [ 1734.907837][T28580] tipc: Node identity 4a52167ee0c8, cluster identity 4711 [ 1734.916104][T28580] tipc: Enabled bearer , priority 0 [ 1734.928204][T28580] syzkaller0: entered promiscuous mode [ 1734.940569][T28580] syzkaller0: entered allmulticast mode [ 1735.395484][T28579] tipc: Resetting bearer [ 1735.459791][T28579] tipc: Disabling bearer [ 1736.730930][T17542] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1736.769256][T28595] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 1736.970888][T17542] usb 6-1: too many configurations: 67, using maximum allowed: 8 [ 1736.992328][T17542] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1737.046162][T28612] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 1737.160388][T17542] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1737.183249][T17542] usb 6-1: Product: syz [ 1737.191752][T17542] usb 6-1: Manufacturer: syz [ 1737.221921][T17542] usb 6-1: SerialNumber: syz [ 1737.253835][T17542] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1737.288508][T28615] FAULT_INJECTION: forcing a failure. [ 1737.288508][T28615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1737.305827][T17542] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1737.319192][T28615] CPU: 0 UID: 0 PID: 28615 Comm: syz.6.6566 Not tainted syzkaller #0 PREEMPT(full) [ 1737.319215][T28615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1737.319225][T28615] Call Trace: [ 1737.319231][T28615] [ 1737.319237][T28615] dump_stack_lvl+0x16c/0x1f0 [ 1737.319260][T28615] should_fail_ex+0x512/0x640 [ 1737.319277][T28615] _copy_to_user+0x32/0xd0 [ 1737.319294][T28615] simple_read_from_buffer+0xcb/0x170 [ 1737.319313][T28615] proc_fail_nth_read+0x197/0x240 [ 1737.319325][T28615] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1737.319338][T28615] ? rw_verify_area+0xcf/0x6c0 [ 1737.319353][T28615] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1737.319364][T28615] vfs_read+0x1e1/0xcf0 [ 1737.319383][T28615] ? __pfx___mutex_lock+0x10/0x10 [ 1737.319399][T28615] ? __pfx_vfs_read+0x10/0x10 [ 1737.319420][T28615] ? __fget_files+0x20e/0x3c0 [ 1737.319442][T28615] ksys_read+0x12a/0x250 [ 1737.319458][T28615] ? __pfx_ksys_read+0x10/0x10 [ 1737.319479][T28615] do_syscall_64+0xcd/0x4e0 [ 1737.319496][T28615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1737.319508][T28615] RIP: 0033:0x7fea43f8d8dc [ 1737.319518][T28615] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1737.319529][T28615] RSP: 002b:00007fea44f14030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1737.319539][T28615] RAX: ffffffffffffffda RBX: 00007fea441e5fa0 RCX: 00007fea43f8d8dc [ 1737.319547][T28615] RDX: 000000000000000f RSI: 00007fea44f140a0 RDI: 0000000000000005 [ 1737.319553][T28615] RBP: 00007fea44f14090 R08: 0000000000000000 R09: 0000000000000000 [ 1737.319559][T28615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1737.319566][T28615] R13: 00007fea441e6038 R14: 00007fea441e5fa0 R15: 00007ffe1ace09a8 [ 1737.319580][T28615] [ 1738.525299][ T5954] usb 6-1: USB disconnect, device number 40 [ 1738.623648][T17542] usb 6-1: Service connection timeout for: 256 [ 1738.638286][T17542] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1738.672384][T17542] ath9k_htc: Failed to initialize the device [ 1738.716709][ T5954] usb 6-1: ath9k_htc: USB layer deinitialized [ 1738.763818][T28621] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1738.795609][T28620] overlayfs: failed to resolve './file0': -2 [ 1739.268119][T28638] 9pnet_fd: Insufficient options for proto=fd [ 1739.847715][T28650] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6574'. [ 1741.775222][ T30] audit: type=1400 audit(1759430827.114:1998): avc: denied { watch } for pid=28658 comm="syz.5.6579" path="/proc/1867/net/raw6" dev="proc" ino=4026534393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1742.029199][ T30] audit: type=1400 audit(1759430827.114:1999): avc: denied { watch_sb watch_reads } for pid=28658 comm="syz.5.6579" path="/proc/1867/net/raw6" dev="proc" ino=4026534393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1743.386265][T28681] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1743.720449][T17542] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 1743.737754][ T30] audit: type=1326 audit(1759430829.074:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28686 comm="syz.3.6587" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd82378eec9 code=0x0 [ 1743.820339][T25043] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 1743.871592][T17542] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1743.885951][T17542] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1743.960305][T25043] usb 6-1: device descriptor read/64, error -71 [ 1743.979631][T17542] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1744.020370][T17542] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1744.041373][T17542] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1744.057747][T17542] usbtmc 2-1:16.0: probe with driver usbtmc failed with error -22 [ 1744.210561][T25043] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 1744.659914][T28704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1744.669429][T28704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1744.686997][T28704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1744.696603][T28704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1745.165994][T25043] usb 6-1: device descriptor read/64, error -71 [ 1745.312083][T25043] usb usb6-port1: attempt power cycle [ 1745.691023][T25043] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 1745.735363][T25043] usb 6-1: device descriptor read/8, error -71 [ 1746.206261][T25043] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 1746.252682][T25043] usb 6-1: device descriptor read/8, error -71 [ 1746.660534][T12001] usb 7-1: new full-speed USB device number 61 using dummy_hcd [ 1746.835184][T25043] usb usb6-port1: unable to enumerate USB device [ 1746.903450][ T5954] usb 2-1: USB disconnect, device number 40 [ 1746.931949][T12001] usb 7-1: config 8 has an invalid interface number: 223 but max is 0 [ 1746.946593][T12001] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1747.210503][T12001] usb 7-1: config 8 has no interface number 0 [ 1747.239698][T12001] usb 7-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1747.303856][T28734] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 1747.315216][T12001] usb 7-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 1747.328729][T12001] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1747.337775][T12001] usb 7-1: Product: syz [ 1747.342179][T12001] usb 7-1: Manufacturer: syz [ 1747.346882][T12001] usb 7-1: SerialNumber: syz [ 1747.350364][ T10] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1747.373447][T28739] syz_tun: entered allmulticast mode [ 1747.380076][T28739] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1747.398717][T28739] dvmrp1: entered allmulticast mode [ 1747.423363][T28739] lo speed is unknown, defaulting to 1000 [ 1747.530313][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 1747.536353][T28738] syz_tun: left allmulticast mode [ 1747.543007][ T10] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1747.552177][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1747.566784][T12001] usb 7-1: USB disconnect, device number 61 [ 1747.575288][ T10] usb 4-1: config 0 descriptor?? [ 1747.788882][T28745] 9pnet_fd: Insufficient options for proto=fd [ 1747.808846][ T10] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1748.555297][ T30] audit: type=1400 audit(1759430833.404:2001): avc: denied { bind } for pid=28746 comm="syz.4.6603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1748.575967][ T30] audit: type=1400 audit(1759430833.414:2002): avc: denied { write } for pid=28746 comm="syz.4.6603" path="socket:[98767]" dev="sockfs" ino=98767 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1749.054175][T28753] lo speed is unknown, defaulting to 1000 [ 1749.788225][T28767] IPv6: NLM_F_CREATE should be specified when creating new route [ 1749.842304][T28769] /dev/sg0: Can't lookup blockdev [ 1749.947097][T28771] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 1, id = 0 [ 1750.107036][ T10] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1750.117503][ T10] asix 4-1:0.0: probe with driver asix failed with error -71 [ 1750.187283][ T10] usb 4-1: USB disconnect, device number 64 [ 1750.320340][ T5954] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1750.610302][ T5954] usb 2-1: Using ep0 maxpacket: 8 [ 1750.619772][ T5954] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1751.069135][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1751.090360][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1751.110918][ T5954] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1751.158504][ T5954] usb 2-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 1751.284517][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1751.333430][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1751.344094][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1751.356168][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1751.366542][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1751.378492][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1751.450549][ T5954] usb 2-1: config 0 descriptor?? [ 1752.075791][T28789] lo speed is unknown, defaulting to 1000 [ 1752.428547][T28805] /dev/sg0: Can't lookup blockdev [ 1752.436503][T28805] ptrace attach of "./syz-executor exec"[26020] was attempted by "./syz-executor exec"[28805] [ 1752.448982][T28805] netlink: 332 bytes leftover after parsing attributes in process `syz.3.6615'. [ 1752.454224][ T5954] redragon 0003:0C45:760B.0017: unknown main item tag 0x0 [ 1752.469464][T28805] netlink: 160 bytes leftover after parsing attributes in process `syz.3.6615'. [ 1752.720305][ T5954] redragon 0003:0C45:760B.0017: unknown main item tag 0x0 [ 1752.727595][ T5954] redragon 0003:0C45:760B.0017: unknown main item tag 0x0 [ 1752.734939][ T5954] redragon 0003:0C45:760B.0017: unknown main item tag 0x0 [ 1752.742216][ T5954] redragon 0003:0C45:760B.0017: unknown main item tag 0x0 [ 1752.749476][ T5954] redragon 0003:0C45:760B.0017: unknown main item tag 0x0 [ 1752.783409][ T5954] redragon 0003:0C45:760B.0017: unknown main item tag 0x0 [ 1752.809699][ T5954] redragon 0003:0C45:760B.0017: unknown main item tag 0x0 [ 1752.830665][ T5954] redragon 0003:0C45:760B.0017: unknown main item tag 0x0 [ 1752.835323][T28789] chnl_net:caif_netlink_parms(): no params data found [ 1752.837858][ T5954] redragon 0003:0C45:760B.0017: unknown main item tag 0x0 [ 1752.893130][ T5954] redragon 0003:0C45:760B.0017: hidraw0: USB HID v0.04 Device [HID 0c45:760b] on usb-dummy_hcd.1-1/input0 [ 1752.966487][ T5954] usb 2-1: USB disconnect, device number 41 [ 1753.133352][T28789] bridge0: port 1(bridge_slave_0) entered blocking state [ 1753.159093][T28789] bridge0: port 1(bridge_slave_0) entered disabled state [ 1753.166688][T28789] bridge_slave_0: entered allmulticast mode [ 1753.176081][T28789] bridge_slave_0: entered promiscuous mode [ 1753.184167][T28789] bridge0: port 2(bridge_slave_1) entered blocking state [ 1753.191402][T28789] bridge0: port 2(bridge_slave_1) entered disabled state [ 1753.199434][T28789] bridge_slave_1: entered allmulticast mode [ 1753.208491][T28789] bridge_slave_1: entered promiscuous mode [ 1753.493010][T25943] Bluetooth: hci1: command tx timeout [ 1753.566919][T28789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1753.591786][T28789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1753.667337][T28817] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 1753.690369][T28789] team0: Port device team_slave_0 added [ 1753.713567][T28789] team0: Port device team_slave_1 added [ 1753.768986][T28789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1753.778523][T28789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1753.804873][T28789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1753.818767][T28789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1753.825920][T28789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1753.853024][T28789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1753.993125][T28789] hsr_slave_0: entered promiscuous mode [ 1753.999506][T28789] hsr_slave_1: entered promiscuous mode [ 1754.005822][T28789] debugfs: 'hsr0' already exists in 'hsr' [ 1754.012011][T28789] Cannot create hsr debugfs directory [ 1755.324192][T28789] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1755.560582][T25943] Bluetooth: hci1: command tx timeout [ 1755.597361][T28789] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1756.111036][T28789] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1757.635787][T28789] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1757.642613][T25943] Bluetooth: hci1: command tx timeout [ 1757.896517][T28864] /dev/sg0: Can't lookup blockdev [ 1758.284196][T28789] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1758.298338][T28789] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1758.335519][T28789] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1758.392147][T28868] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1759.271623][ T30] audit: type=1400 audit(1759430843.804:2003): avc: denied { rename } for pid=28865 comm="syz.3.6629" name="bus" dev="tmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1759.474327][T28789] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1759.524143][T28874] 9pnet_fd: Insufficient options for proto=fd [ 1759.740310][T25943] Bluetooth: hci1: command tx timeout [ 1759.910951][T28789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1759.949832][T28789] 8021q: adding VLAN 0 to HW filter on device team0 [ 1760.049775][ T5990] bridge0: port 1(bridge_slave_0) entered blocking state [ 1760.056906][ T5990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1760.069524][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 1760.076607][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1760.567990][T28789] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1760.579387][T28789] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1760.589931][ T5954] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 1760.752283][ T5954] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1760.768357][ T5954] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1760.880704][ T5954] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1760.893984][ T5954] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1760.903408][ T5954] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1760.966992][ T5954] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -22 [ 1761.009248][T28789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1762.003658][T28915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1762.013228][T28915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1762.056282][T28915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1762.065886][T28915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1763.345509][T28789] veth0_vlan: entered promiscuous mode [ 1763.475654][T28789] veth1_vlan: entered promiscuous mode [ 1763.550863][T28789] veth0_macvtap: entered promiscuous mode [ 1763.803690][T28789] veth1_macvtap: entered promiscuous mode [ 1763.888077][T28932] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 1763.916881][ T30] audit: type=1326 audit(1759430849.254:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28933 comm="syz.3.6643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82378eec9 code=0x7ffc0000 [ 1763.919438][T28789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1763.963763][T28939] tipc: Started in network mode [ 1763.968694][T28939] tipc: Node identity 86e7149c98da, cluster identity 4711 [ 1763.998690][T28939] tipc: Enabled bearer , priority 0 [ 1764.004830][ T30] audit: type=1326 audit(1759430849.254:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28933 comm="syz.3.6643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82378eec9 code=0x7ffc0000 [ 1764.041746][T28941] syzkaller0: entered promiscuous mode [ 1764.048522][T28926] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6640'. [ 1764.060171][T28941] syzkaller0: entered allmulticast mode [ 1764.113936][T28789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1764.125183][ T30] audit: type=1326 audit(1759430849.254:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28933 comm="syz.3.6643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fd82378eec9 code=0x7ffc0000 [ 1764.157585][ T30] audit: type=1326 audit(1759430849.254:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28933 comm="syz.3.6643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82378eec9 code=0x7ffc0000 [ 1764.183269][ T30] audit: type=1326 audit(1759430849.254:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28933 comm="syz.3.6643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82378eec9 code=0x7ffc0000 [ 1764.207766][ T30] audit: type=1326 audit(1759430849.284:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28933 comm="syz.3.6643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7fd82378eec9 code=0x7ffc0000 [ 1764.222185][T28941] tipc: Resetting bearer [ 1764.288683][T13227] usb 5-1: USB disconnect, device number 66 [ 1764.340275][ T10] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1764.357235][ T5976] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1764.369935][ T1154] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1764.550298][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 1764.561816][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1764.572924][ T30] audit: type=1326 audit(1759430849.284:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28933 comm="syz.3.6643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82378eec9 code=0x7ffc0000 [ 1764.572968][ T30] audit: type=1326 audit(1759430849.284:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28933 comm="syz.3.6643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82378eec9 code=0x7ffc0000 [ 1764.573009][ T30] audit: type=1326 audit(1759430849.294:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28933 comm="syz.3.6643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd82378eec9 code=0x7ffc0000 [ 1764.573049][ T30] audit: type=1326 audit(1759430849.294:2013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28933 comm="syz.3.6643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82378eec9 code=0x7ffc0000 [ 1764.573086][ T30] audit: type=1326 audit(1759430849.294:2014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28933 comm="syz.3.6643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82378eec9 code=0x7ffc0000 [ 1764.597443][T28933] tipc: Resetting bearer [ 1764.620086][ C0] vkms_vblank_simulate: vblank timer overrun [ 1764.621946][ T30] audit: type=1326 audit(1759430849.294:2015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28933 comm="syz.3.6643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd82378eec9 code=0x7ffc0000 [ 1764.734204][ T30] audit: type=1326 audit(1759430849.294:2016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28933 comm="syz.3.6643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82378eec9 code=0x7ffc0000 [ 1764.762733][ T30] audit: type=1326 audit(1759430849.294:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28933 comm="syz.3.6643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd82378eec9 code=0x7ffc0000 [ 1764.797513][ T30] audit: type=1326 audit(1759430849.294:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28933 comm="syz.3.6643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82378eec9 code=0x7ffc0000 [ 1764.822739][ T30] audit: type=1326 audit(1759430849.294:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28933 comm="syz.3.6643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd82378eec9 code=0x7ffc0000 [ 1764.863258][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1764.876965][T28933] tipc: Disabling bearer [ 1764.880071][ T10] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1764.894992][ T1154] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1764.895978][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1764.924493][T28949] /dev/sg0: Can't lookup blockdev [ 1764.937431][T28949] ptrace attach of "./syz-executor exec"[26981] was attempted by "./syz-executor exec"[28949] [ 1764.949006][ T1154] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1764.963315][ T10] usb 6-1: config 0 descriptor?? [ 1764.978768][T28949] netlink: 332 bytes leftover after parsing attributes in process `syz.4.6645'. [ 1765.026997][T28949] netlink: 160 bytes leftover after parsing attributes in process `syz.4.6645'. [ 1765.767647][ T1318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1765.775540][ T1318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1765.864938][T28736] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1765.879787][T28736] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1766.943734][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 1766.949684][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1767.000176][ T10] usb 6-1: USB disconnect, device number 45 [ 1767.006899][ T5837] Bluetooth: hci0: command 0x0406 tx timeout [ 1767.014302][T28963] block nbd3: Cannot use ioctl interface on a netlink controlled device. [ 1767.048924][T28963] block nbd3: Cannot use ioctl interface on a netlink controlled device. [ 1767.071225][T28963] block nbd3: Cannot use ioctl interface on a netlink controlled device. [ 1767.080408][T17198] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1767.081596][T28963] block nbd3: Cannot use ioctl interface on a netlink controlled device. [ 1767.513697][T17198] usb 7-1: Using ep0 maxpacket: 8 [ 1767.531202][T17198] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1767.946175][T17198] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1767.986211][T17198] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1768.037594][T17198] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1768.053188][T17198] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1768.642190][T17198] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1768.646509][T28981] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1768.803578][T17198] usb 7-1: Product: syz [ 1768.990434][T17198] usb 7-1: Manufacturer: syz [ 1768.995065][T17198] usb 7-1: SerialNumber: syz [ 1769.020621][T17198] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 1769.029560][T17198] usbtest 7-1:1.0: couldn't get endpoints, -22 [ 1769.040147][T17198] usbtest 7-1:1.0: probe with driver usbtest failed with error -22 [ 1769.459888][T28992] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 1769.552613][T17198] usb 7-1: USB disconnect, device number 62 [ 1770.769426][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 1770.769465][ T30] audit: type=1400 audit(1759430856.084:2061): avc: denied { getopt } for pid=29000 comm="syz.1.6659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1770.883590][T29012] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 1771.242456][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1771.262339][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1771.287987][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1771.425484][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1771.433744][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1772.506461][T29028] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 1772.574809][T29038] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 1, id = 0 [ 1772.587767][T29013] lo speed is unknown, defaulting to 1000 [ 1772.649011][T29014] lo speed is unknown, defaulting to 1000 [ 1773.054624][T29014] chnl_net:caif_netlink_parms(): no params data found [ 1773.171291][T29047] binder: BINDER_SET_CONTEXT_MGR already set [ 1773.177274][T29047] binder: 29046:29047 ioctl 4018620d 200000000040 returned -16 [ 1773.311266][T29047] syz.6.6665 (29047): drop_caches: 2 [ 1773.580683][ T5837] Bluetooth: hci2: command tx timeout [ 1774.898788][T29061] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 1775.052779][T29014] bridge0: port 1(bridge_slave_0) entered blocking state [ 1775.070149][T29014] bridge0: port 1(bridge_slave_0) entered disabled state [ 1775.084625][T29014] bridge_slave_0: entered allmulticast mode [ 1775.092018][T29014] bridge_slave_0: entered promiscuous mode [ 1775.365126][T29014] bridge0: port 2(bridge_slave_1) entered blocking state [ 1775.387127][T29014] bridge0: port 2(bridge_slave_1) entered disabled state [ 1775.410503][T29014] bridge_slave_1: entered allmulticast mode [ 1775.704933][T29014] bridge_slave_1: entered promiscuous mode [ 1776.111209][ T5837] Bluetooth: hci2: command tx timeout [ 1776.459324][T29075] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 1777.343952][T29093] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 1777.443191][T29014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1777.464774][T29014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1778.120372][ T5837] Bluetooth: hci2: command tx timeout [ 1779.266664][T29014] team0: Port device team_slave_0 added [ 1779.297271][T29014] team0: Port device team_slave_1 added [ 1779.406467][T29119] /dev/sg0: Can't lookup blockdev [ 1779.413219][T29119] ptrace attach of "./syz-executor exec"[26981] was attempted by "./syz-executor exec"[29119] [ 1779.427927][T29119] netlink: 332 bytes leftover after parsing attributes in process `syz.4.6679'. [ 1779.450038][T29119] netlink: 160 bytes leftover after parsing attributes in process `syz.4.6679'. [ 1780.200582][ T5837] Bluetooth: hci2: command tx timeout [ 1780.222774][T29014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1780.268084][T29014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1780.422323][T29014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1780.477194][T29014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1780.485638][T29014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1780.634093][T29014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1781.501690][T29014] hsr_slave_0: entered promiscuous mode [ 1781.556298][T29014] hsr_slave_1: entered promiscuous mode [ 1781.598292][T29014] debugfs: 'hsr0' already exists in 'hsr' [ 1781.640462][T29014] Cannot create hsr debugfs directory [ 1781.999562][T29142] Bluetooth: MGMT ver 1.23 [ 1783.286561][T29151] fuse: Bad value for 'group_id' [ 1783.295364][T29151] fuse: Bad value for 'group_id' [ 1784.239741][T29014] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1784.333897][T29152] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6687'. [ 1784.654855][T29014] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1784.679989][T29173] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6691'. [ 1784.706467][T29161] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 1784.760946][ T10] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1784.977510][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1785.001178][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1785.021436][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1785.058731][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1785.150344][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1785.167506][ T10] usb 4-1: config 0 descriptor?? [ 1785.226667][T29014] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1786.500658][T29014] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1786.870032][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 1787.212670][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1787.307729][ T10] usb 4-1: USB disconnect, device number 65 [ 1787.316967][T29184] /dev/sg0: Can't lookup blockdev [ 1789.354537][T29014] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1789.442017][T29014] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1790.364091][T29196] netlink: 'syz.4.6698': attribute type 1 has an invalid length. [ 1790.437316][T29014] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1790.646408][T29198] macvlan2: entered promiscuous mode [ 1790.652000][T29198] macvlan2: entered allmulticast mode [ 1790.661210][T29198] bond1: entered promiscuous mode [ 1790.969160][T29198] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1791.246684][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.486525][T29214] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 1791.507381][T29198] bond1: left promiscuous mode [ 1791.719257][T29014] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1792.257392][T29014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1792.340590][T29014] 8021q: adding VLAN 0 to HW filter on device team0 [ 1792.381104][T12001] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1792.407415][ T5976] bridge0: port 1(bridge_slave_0) entered blocking state [ 1792.414559][ T5976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1792.424256][ T5976] bridge0: port 2(bridge_slave_1) entered blocking state [ 1792.431381][ T5976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1792.560485][T12001] usb 4-1: Using ep0 maxpacket: 16 [ 1792.571273][T12001] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1792.590359][T17198] usb 7-1: new full-speed USB device number 63 using dummy_hcd [ 1792.607628][T12001] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1792.648609][T12001] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1792.676146][T12001] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1792.720265][T17198] usb 7-1: device descriptor read/64, error -71 [ 1792.720806][T12001] usb 4-1: config 0 descriptor?? [ 1792.793039][T29014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1792.950313][ T10] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1792.970274][T17198] usb 7-1: new full-speed USB device number 64 using dummy_hcd [ 1793.110411][T17198] usb 7-1: device descriptor read/64, error -71 [ 1793.116787][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 1793.127032][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1793.144658][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1793.175451][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1793.184630][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1793.194835][ T10] usb 5-1: config 0 descriptor?? [ 1793.230906][T17198] usb usb7-port1: attempt power cycle [ 1793.289896][T29014] veth0_vlan: entered promiscuous mode [ 1793.304338][T29014] veth1_vlan: entered promiscuous mode [ 1793.331456][T29014] veth0_macvtap: entered promiscuous mode [ 1793.342660][T29014] veth1_macvtap: entered promiscuous mode [ 1793.368050][T29014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1793.383326][T29014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1793.399944][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1793.413003][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1793.449367][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1793.460903][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1793.554034][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1793.570423][T17198] usb 7-1: new full-speed USB device number 65 using dummy_hcd [ 1793.580802][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1793.602327][T17198] usb 7-1: device descriptor read/8, error -71 [ 1793.616185][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1793.627950][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1793.850871][T17198] usb 7-1: new full-speed USB device number 66 using dummy_hcd [ 1793.884093][T17198] usb 7-1: device descriptor read/8, error -71 [ 1794.029046][T12001] usbhid 4-1:0.0: can't add hid device: -71 [ 1794.038511][T12001] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1794.050063][T17198] usb usb7-port1: unable to enumerate USB device [ 1794.051851][T12001] usb 4-1: USB disconnect, device number 66 [ 1794.072641][T29254] syz_tun: entered allmulticast mode [ 1794.084379][T29254] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1794.277192][ T30] audit: type=1326 audit(1759430879.574:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29255 comm="syz.3.6706" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd82378eec9 code=0x0 [ 1794.327025][T29258] lo speed is unknown, defaulting to 1000 [ 1794.666552][T29253] syz_tun: left allmulticast mode [ 1795.508697][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 1795.521040][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1795.577189][ T10] usb 5-1: USB disconnect, device number 67 [ 1796.412749][T29284] netlink: 'syz.5.6709': attribute type 5 has an invalid length. [ 1796.679975][ T10] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1797.243839][T29284] ip6erspan0: entered promiscuous mode [ 1797.257810][T29297] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1797.280309][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 1797.286755][ T10] usb 5-1: config index 0 descriptor too short (expected 4130, got 34) [ 1797.300404][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1797.311304][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x38, changing to 0x8 [ 1797.322836][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 1797.341370][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1797.351147][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1797.371359][ T10] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1797.380616][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1797.388832][ T10] usb 5-1: Product: syz [ 1797.393981][ T10] usb 5-1: Manufacturer: syz [ 1797.399039][ T10] usb 5-1: SerialNumber: syz [ 1797.406485][ T10] usb 5-1: config 0 descriptor?? [ 1797.682215][ T5954] usb 5-1: USB disconnect, device number 68 [ 1797.853229][T29303] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6717'. [ 1798.520278][ T10] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 1798.680341][ T10] usb 5-1: device descriptor read/64, error -71 [ 1798.898909][T29299] lo speed is unknown, defaulting to 1000 [ 1798.926589][T29303] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1798.940427][ T10] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 1799.170300][ T10] usb 5-1: device descriptor read/64, error -71 [ 1799.275440][T29322] bridge1: entered promiscuous mode [ 1799.837452][ T10] usb usb5-port1: attempt power cycle [ 1799.872246][ T5954] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1800.053466][ T30] audit: type=1400 audit(1759430885.364:2063): avc: denied { map } for pid=29307 comm="syz.6.6719" path="/dev/nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1800.270300][ T10] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 1800.281115][ T5954] usb 6-1: config 12 has an invalid interface number: 234 but max is 0 [ 1800.289368][ T5954] usb 6-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 1800.300281][ T5954] usb 6-1: config 12 has no interface number 0 [ 1800.307113][ T5954] usb 6-1: config 12 interface 234 has no altsetting 0 [ 1800.307130][ T10] usb 5-1: device descriptor read/8, error -71 [ 1800.772072][ T5954] usb 6-1: New USB device found, idVendor=0421, idProduct=0418, bcdDevice=f0.0e [ 1800.781314][ T5954] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1800.789290][ T5954] usb 6-1: Product: syz [ 1800.793604][ T5954] usb 6-1: Manufacturer: syz [ 1800.803076][ T5954] usb 6-1: SerialNumber: syz [ 1800.829776][ T5954] rndis_host 6-1:12.234: More than one union descriptor, skipping ... [ 1800.850468][ T5954] usb 6-1: bad CDC descriptors [ 1800.859078][ T5954] cdc_acm 6-1:12.234: More than one union descriptor, skipping ... [ 1801.060881][ T10] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 1801.098102][ T5954] usb 6-1: USB disconnect, device number 46 [ 1801.190795][ T10] usb 5-1: device descriptor read/8, error -71 [ 1801.367077][ T10] usb usb5-port1: unable to enumerate USB device [ 1801.775079][T29344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1801.874972][T29344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1802.500075][ T5954] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1802.704013][ T30] audit: type=1326 audit(1759430888.024:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29353 comm="syz.1.6732" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff36178eec9 code=0x0 [ 1802.775596][T29359] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6733'. [ 1803.292389][T17198] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 1803.798027][T17198] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 1803.829308][T17198] usb 6-1: config 1 has no interface number 0 [ 1803.847336][T29369] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 1803.856238][T17198] usb 6-1: config 1 interface 105 has no altsetting 0 [ 1803.899795][T17198] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1803.914350][T17198] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1803.936539][T17198] usb 6-1: Product: syz [ 1803.946136][T17198] usb 6-1: Manufacturer: syz [ 1803.956057][T17198] usb 6-1: SerialNumber: syz [ 1804.230386][ T5954] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1804.392278][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1804.406795][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1804.424587][ T5954] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1804.435696][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1804.458431][ T5954] usb 2-1: config 0 descriptor?? [ 1804.590360][ T9] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1804.742238][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1804.748905][ T9] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1804.760166][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1804.790543][ T9] usb 4-1: config 0 descriptor?? [ 1805.032309][ T9] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1805.299130][ T30] audit: type=1400 audit(1759430890.634:2065): avc: denied { setopt } for pid=29371 comm="syz.1.6736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1805.348091][ T5954] hid-led 0003:27B8:01ED.0018: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.1-1/input0 [ 1805.367553][ T5954] hid-led 0003:27B8:01ED.0018: ThingM blink(1) v1 initialized [ 1805.540346][T17198] aqc111 6-1:1.105: probe with driver aqc111 failed with error -71 [ 1805.582033][ T10] usb 2-1: USB disconnect, device number 43 [ 1805.604359][T17198] usb 6-1: USB disconnect, device number 47 [ 1806.168643][ T9] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1806.187527][ T9] asix 4-1:0.0: probe with driver asix failed with error -71 [ 1806.201819][ T9] usb 4-1: USB disconnect, device number 67 [ 1806.253261][T29423] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 1806.461668][T29427] fuse: Unknown parameter 'group_ie' [ 1806.781935][T29437] input: syz1 as /devices/virtual/input/input18 [ 1806.859126][ T9] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1806.981494][T17198] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 1807.170872][ T5837] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1807.255671][ T9] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1807.265050][T17198] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1807.376415][T29447] ptrace attach of "./syz-executor exec"[28789] was attempted by "./syz-executor exec"[29447] [ 1807.396397][T29447] netlink: 332 bytes leftover after parsing attributes in process `syz.6.6760'. [ 1807.411582][T29447] netlink: 160 bytes leftover after parsing attributes in process `syz.6.6760'. [ 1807.422100][T17198] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1807.437373][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1807.451096][T17198] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1807.480579][ T9] usb 6-1: config 0 descriptor?? [ 1807.487668][T17198] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1807.535295][T17198] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1807.598664][T17198] usbtmc 2-1:16.0: probe with driver usbtmc failed with error -22 [ 1807.670660][T12001] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1807.747424][T29452] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6765'. [ 1807.756539][T29452] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6765'. [ 1807.765855][T29452] netlink: 'syz.6.6765': attribute type 20 has an invalid length. [ 1807.798445][T29452] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6765'. [ 1807.807635][T29452] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6765'. [ 1807.818945][ T5953] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1807.827659][T29452] netlink: 'syz.6.6765': attribute type 20 has an invalid length. [ 1807.839222][ T5953] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1807.859419][T12001] usb 4-1: config 2 has an invalid interface number: 194 but max is 0 [ 1807.867794][T12001] usb 4-1: config 2 has no interface number 0 [ 1807.956417][ T1318] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1807.985267][ T9] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1807.993879][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 1808.036922][T12001] usb 4-1: config 2 interface 194 altsetting 6 has an endpoint descriptor with address 0xC3, changing to 0x83 [ 1808.048949][ T1318] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1808.055650][ T9] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 1808.205259][ T9] [drm] Initialized udl on minor 2 [ 1808.311234][T29461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1808.320768][T29461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1808.352283][T29461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1808.361914][T29461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1808.514139][T12001] usb 4-1: config 2 interface 194 altsetting 6 endpoint 0x1 has an invalid bInterval 89, changing to 10 [ 1808.550379][ T9] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1808.569278][T29463] FAULT_INJECTION: forcing a failure. [ 1808.569278][T29463] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1808.572071][ T9] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1808.596006][T12001] usb 4-1: config 2 interface 194 altsetting 6 endpoint 0x1 has invalid maxpacket 1080, setting to 1024 [ 1808.637056][T17198] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1808.654170][ T9] usb 6-1: USB disconnect, device number 48 [ 1808.661411][T12001] usb 4-1: config 2 interface 194 has no altsetting 0 [ 1808.668508][T29463] CPU: 1 UID: 0 PID: 29463 Comm: syz.4.6766 Not tainted syzkaller #0 PREEMPT(full) [ 1808.668532][T29463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1808.668543][T29463] Call Trace: [ 1808.668549][T29463] [ 1808.668557][T29463] dump_stack_lvl+0x16c/0x1f0 [ 1808.668587][T29463] should_fail_ex+0x512/0x640 [ 1808.668614][T29463] _copy_to_user+0x32/0xd0 [ 1808.668639][T29463] simple_read_from_buffer+0xcb/0x170 [ 1808.668667][T29463] proc_fail_nth_read+0x197/0x240 [ 1808.668687][T29463] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1808.668707][T29463] ? rw_verify_area+0xcf/0x6c0 [ 1808.668730][T29463] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1808.668749][T29463] vfs_read+0x1e1/0xcf0 [ 1808.668778][T29463] ? __pfx___mutex_lock+0x10/0x10 [ 1808.668803][T29463] ? __pfx_vfs_read+0x10/0x10 [ 1808.668836][T29463] ? __fget_files+0x20e/0x3c0 [ 1808.668870][T29463] ksys_read+0x12a/0x250 [ 1808.668895][T29463] ? __pfx_ksys_read+0x10/0x10 [ 1808.668928][T29463] do_syscall_64+0xcd/0x4e0 [ 1808.668954][T29463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1808.668972][T29463] RIP: 0033:0x7ff60538d8dc [ 1808.668987][T29463] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1808.669004][T29463] RSP: 002b:00007ff6061c2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1808.669022][T29463] RAX: ffffffffffffffda RBX: 00007ff6055e5fa0 RCX: 00007ff60538d8dc [ 1808.669034][T29463] RDX: 000000000000000f RSI: 00007ff6061c20a0 RDI: 0000000000000004 [ 1808.669045][T29463] RBP: 00007ff6061c2090 R08: 0000000000000000 R09: 0000000000000000 [ 1808.669056][T29463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1808.669066][T29463] R13: 00007ff6055e6038 R14: 00007ff6055e5fa0 R15: 00007ffd242727d8 [ 1808.669092][T29463] [ 1808.849009][T17198] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1808.882530][ T5837] ------------[ cut here ]------------ [ 1808.888406][ T5837] WARNING: CPU: 0 PID: 5837 at net/bluetooth/hci_conn.c:567 hci_conn_timeout+0x11a/0x210 [ 1808.898312][ T5837] Modules linked in: [ 1808.902586][ T5837] CPU: 0 UID: 0 PID: 5837 Comm: kworker/u9:9 Not tainted syzkaller #0 PREEMPT(full) [ 1808.912093][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1808.912723][T12001] usb 4-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=ad.a7 [ 1808.922179][ T5837] Workqueue: hci1 hci_conn_timeout [ 1808.922236][ T5837] RIP: 0010:hci_conn_timeout+0x11a/0x210 [ 1808.922265][ T5837] Code: 00 e8 6a 70 71 f7 4c 89 f1 4c 89 e2 48 c7 c6 e0 27 b7 8c 48 c7 c7 c8 0c 5c 90 e8 01 bc 87 fa e9 4d ff ff ff e8 47 70 71 f7 90 <0f> 0b 90 e8 3e 70 71 f7 48 8d bb f5 f6 ff ff 48 b8 00 00 00 00 00 [ 1808.922281][ T5837] RSP: 0018:ffffc90004337c30 EFLAGS: 00010293 [ 1808.922298][ T5837] RAX: 0000000000000000 RBX: ffff88805d488948 RCX: ffffffff8a49a80f [ 1808.922310][ T5837] RDX: ffff88802f842480 RSI: ffffffff8a49a8b9 RDI: 0000000000000005 [ 1808.922322][ T5837] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 1808.922334][ T5837] R10: 00000000ffffffff R11: 0000000000002b71 R12: ffff88805d488000 [ 1808.922346][ T5837] R13: 0000000000000000 R14: ffffffff90609e54 R15: ffffc90004337d10 [ 1808.922359][ T5837] FS: 0000000000000000(0000) GS:ffff888124e60000(0000) knlGS:0000000000000000 [ 1808.922377][ T5837] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1808.922391][ T5837] CR2: 0000001b2f5d9ff8 CR3: 0000000058ad2000 CR4: 00000000003526f0 [ 1808.922404][ T5837] Call Trace: [ 1808.922412][ T5837] [ 1808.922423][ T5837] process_one_work+0x9cf/0x1b70 [ 1808.922456][ T5837] ? __pfx_process_one_work+0x10/0x10 [ 1808.922482][ T5837] ? assign_work+0x1a0/0x250 [ 1808.922502][ T5837] worker_thread+0x6c8/0xf10 [ 1808.922530][ T5837] ? __kthread_parkme+0x19e/0x250 [ 1808.922559][ T5837] ? __pfx_worker_thread+0x10/0x10 [ 1808.947716][T12001] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1808.964118][ T5837] kthread+0x3c5/0x780 [ 1808.976816][T12001] usb 4-1: Product: syz [ 1808.977923][ T5837] ? __pfx_kthread+0x10/0x10 [ 1808.985482][T12001] usb 4-1: Manufacturer: syz [ 1808.985499][T12001] usb 4-1: SerialNumber: syz [ 1809.038520][T29449] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1809.041929][ T5837] ? rcu_is_watching+0x12/0xc0 [ 1809.058841][T29468] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6769'. [ 1809.061588][ T5837] ? __pfx_kthread+0x10/0x10 [ 1809.129034][ T5837] ret_from_fork+0x56a/0x730 [ 1809.133932][ T5837] ? __pfx_kthread+0x10/0x10 [ 1809.138790][ T5837] ret_from_fork_asm+0x1a/0x30 [ 1809.144662][ T5837] [ 1809.148704][ T5837] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1809.155973][ T5837] CPU: 0 UID: 0 PID: 5837 Comm: kworker/u9:9 Not tainted syzkaller #0 PREEMPT(full) [ 1809.165417][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1809.175468][ T5837] Workqueue: hci1 hci_conn_timeout [ 1809.180592][ T5837] Call Trace: [ 1809.183863][ T5837] [ 1809.186773][ T5837] dump_stack_lvl+0x3d/0x1f0 [ 1809.191361][ T5837] vpanic+0x6e8/0x7a0 [ 1809.195357][ T5837] ? __pfx_vpanic+0x10/0x10 [ 1809.199860][ T5837] ? hci_conn_timeout+0x11a/0x210 [ 1809.204890][ T5837] panic+0xca/0xd0 [ 1809.208606][ T5837] ? __pfx_panic+0x10/0x10 [ 1809.213023][ T5837] ? check_panic_on_warn+0x1f/0xb0 [ 1809.218130][ T5837] check_panic_on_warn+0xab/0xb0 [ 1809.223055][ T5837] __warn+0xf6/0x3c0 [ 1809.226943][ T5837] ? hci_conn_timeout+0x11a/0x210 [ 1809.231952][ T5837] report_bug+0x3c3/0x580 [ 1809.236281][ T5837] ? hci_conn_timeout+0x11a/0x210 [ 1809.241300][ T5837] handle_bug+0x184/0x210 [ 1809.245628][ T5837] exc_invalid_op+0x17/0x50 [ 1809.250113][ T5837] asm_exc_invalid_op+0x1a/0x20 [ 1809.254942][ T5837] RIP: 0010:hci_conn_timeout+0x11a/0x210 [ 1809.260559][ T5837] Code: 00 e8 6a 70 71 f7 4c 89 f1 4c 89 e2 48 c7 c6 e0 27 b7 8c 48 c7 c7 c8 0c 5c 90 e8 01 bc 87 fa e9 4d ff ff ff e8 47 70 71 f7 90 <0f> 0b 90 e8 3e 70 71 f7 48 8d bb f5 f6 ff ff 48 b8 00 00 00 00 00 [ 1809.280147][ T5837] RSP: 0018:ffffc90004337c30 EFLAGS: 00010293 [ 1809.286193][ T5837] RAX: 0000000000000000 RBX: ffff88805d488948 RCX: ffffffff8a49a80f [ 1809.294144][ T5837] RDX: ffff88802f842480 RSI: ffffffff8a49a8b9 RDI: 0000000000000005 [ 1809.302096][ T5837] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 1809.310045][ T5837] R10: 00000000ffffffff R11: 0000000000002b71 R12: ffff88805d488000 [ 1809.317998][ T5837] R13: 0000000000000000 R14: ffffffff90609e54 R15: ffffc90004337d10 [ 1809.325956][ T5837] ? hci_conn_timeout+0x6f/0x210 [ 1809.330883][ T5837] ? hci_conn_timeout+0x119/0x210 [ 1809.335900][ T5837] process_one_work+0x9cf/0x1b70 [ 1809.340828][ T5837] ? __pfx_process_one_work+0x10/0x10 [ 1809.346189][ T5837] ? assign_work+0x1a0/0x250 [ 1809.350765][ T5837] worker_thread+0x6c8/0xf10 [ 1809.355346][ T5837] ? __kthread_parkme+0x19e/0x250 [ 1809.360358][ T5837] ? __pfx_worker_thread+0x10/0x10 [ 1809.365451][ T5837] kthread+0x3c5/0x780 [ 1809.369501][ T5837] ? __pfx_kthread+0x10/0x10 [ 1809.374072][ T5837] ? rcu_is_watching+0x12/0xc0 [ 1809.378820][ T5837] ? __pfx_kthread+0x10/0x10 [ 1809.383400][ T5837] ret_from_fork+0x56a/0x730 [ 1809.387971][ T5837] ? __pfx_kthread+0x10/0x10 [ 1809.392548][ T5837] ret_from_fork_asm+0x1a/0x30 [ 1809.397310][ T5837] [ 1809.401327][ T5837] Kernel Offset: disabled [ 1809.405633][ T5837] Rebooting in 86400 seconds..