last executing test programs: 15m6.128345416s ago: executing program 1 (id=1409): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000009000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = open(0x0, 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x416eb135, 0x12) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d", 0x14}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) socket$kcm(0x10, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 15m5.459371884s ago: executing program 1 (id=1410): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000003700)=ANY=[@ANYBLOB], 0x0, 0x38, 0x0, 0x9, 0x3, 0x0, @void, @value}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_emit_ethernet(0x1b7, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {}, {0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x9200}, @TCA_FLOW_XOR={0x8, 0x7, 0x7ff}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 15m4.41157128s ago: executing program 1 (id=1412): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000b00)=ANY=[@ANYBLOB], 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r4 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) r9 = syz_pidfd_open(r4, 0x0) pidfd_getfd(r9, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2, 0x1) mkdir(0x0, 0x10) 15m2.93308448s ago: executing program 1 (id=1416): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r4 = syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="090200000000000000000100000008"], 0x24}}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/4094, 0xffe}], 0x1, 0xf0, 0x3) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) mount$nfs(&(0x7f0000000040)='@\a', &(0x7f0000000340)='./file1\x00', 0x0, 0x20887b, 0x0) mount$nfs(&(0x7f0000000080)='@\a', 0x0, &(0x7f0000000500), 0x20040c1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, 0x0) ioctl$TCFLSH(r6, 0x400455c8, 0x4) socket$inet6(0xa, 0x3, 0x4) 14m59.345637506s ago: executing program 1 (id=1418): creat(&(0x7f0000000300)='./file0\x00', 0xc3) r0 = inotify_init() flistxattr(r0, &(0x7f0000002500)=""/191, 0xbf) setsockopt(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0) socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_get$uid(0x3, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)="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", 0x11f}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832", 0xe4}, {0x0}, {&(0x7f00000002c0)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e", 0xb5}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274ef", 0x20}], 0x5}}], 0x1, 0xc0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100153a42908f00a71729188010203010902240001060000000904020002ffffff0009050b0000000000000905", @ANYRES16], 0x0) 14m54.141542646s ago: executing program 1 (id=1428): creat(&(0x7f0000000300)='./file0\x00', 0xc3) r0 = inotify_init() flistxattr(r0, &(0x7f0000002500)=""/191, 0xbf) setsockopt(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0) socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_get$uid(0x3, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)="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", 0x11f}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832", 0xe4}, {0x0}, {&(0x7f00000002c0)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36a0ee3df2ab1dc34cea42a4292e2fbaa86875a506bdd81f", 0xf1}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274ef", 0x20}], 0x5}}], 0x1, 0xc0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100153a42908f00a71729188010203010902240001060000000904020002ffffff0009050b0000000000000905", @ANYRES16], 0x0) 14m37.515353962s ago: executing program 32 (id=1428): creat(&(0x7f0000000300)='./file0\x00', 0xc3) r0 = inotify_init() flistxattr(r0, &(0x7f0000002500)=""/191, 0xbf) setsockopt(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0) socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_get$uid(0x3, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)="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", 0x11f}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832", 0xe4}, {0x0}, {&(0x7f00000002c0)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36a0ee3df2ab1dc34cea42a4292e2fbaa86875a506bdd81f", 0xf1}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274ef", 0x20}], 0x5}}], 0x1, 0xc0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100153a42908f00a71729188010203010902240001060000000904020002ffffff0009050b0000000000000905", @ANYRES16], 0x0) 1m57.801702578s ago: executing program 5 (id=3643): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) (fail_nth: 1) 1m56.756740154s ago: executing program 5 (id=3646): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x8) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CAP_STEAL_TIME(r1, 0x4068aea3, &(0x7f0000000080)) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000100)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000540)={0x0, 0xf}, &(0x7f0000000580)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value={r3, 0x2}, 0x8) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000640)={r3, 0x3}, &(0x7f0000000680)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000006c0)={r6, 0x80000001}, 0x8) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r5, 0x3309) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000700)=0x2, 0x4) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000740), 0x42, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELTABLE={0x60, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x88}, 0x1, 0x0, 0x0, 0x45}, 0x48001) r8 = accept$packet(r4, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000940)=0x14) ioctl$EXT4_IOC_GROUP_ADD(r8, 0x40286608, &(0x7f0000000980)={0x8, 0x4, 0xd, 0x5, 0x7fff, 0x4af3}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000ac0)={@fallback=r8, 0x1d, 0x0, 0x7, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b00)={@fallback=r7, r2, 0x23, 0x0, 0x0, @void, @value=r1, @void, @void, r10}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000cc0)={r2, 0x0, 0x77, 0x2f, &(0x7f0000000b40)="3f9bcb8b49bc0a8513106251d78421258628c23a75adfefdb8293309220bd4bdcc6abba0db34599c5b11be4bd186a9c3cee96dfad78cdd63ee044bb1dab80ad384f8dc1f5366b56332e0ef75dfb8b543a8271d4348a38b092eb284504ecc770d2b883c623fbf64dd17e1514523eaeb7dd277bee83362f6", &(0x7f0000000bc0)=""/47, 0x1, 0x0, 0x16, 0x52, &(0x7f0000000c00)="a5f7fe7762cf56d3f325bd773b26112e2b73ec23804c", &(0x7f0000000c40)="bc632d0eb3593884c4f9600d569fd9f1dcb89f856f0cd7b4de834a21a94f4b50951ad3f1bd0bbb02b3d7159455c56f8083287df66555dcf5e916fd21b08ac3d7a965f613d4903769102d62795c29eca5675b", 0x2, 0x0, 0x208d}, 0x50) set_mempolicy_home_node(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0) pipe2$9p(&(0x7f0000000d40), 0x186080) recvmmsg(r4, &(0x7f0000002cc0)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000d80)=""/14, 0xe}, {&(0x7f0000000dc0)=""/119, 0x77}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/32, 0x20}, {&(0x7f0000000f00)=""/216, 0xd8}, {&(0x7f0000001000)=""/108, 0x6c}], 0x6, &(0x7f0000001100)=""/227, 0xe3}, 0x3}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000001200)=""/127, 0x7f}, {&(0x7f0000001280)=""/25, 0x19}, {&(0x7f00000012c0)=""/155, 0x9b}, {&(0x7f0000001380)=""/123, 0x7b}, {&(0x7f0000001400)=""/55, 0x37}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000002440)=""/88, 0x58}, {&(0x7f00000024c0)=""/252, 0xfc}, {&(0x7f00000025c0)=""/97, 0x61}, {&(0x7f0000002640)=""/9, 0x9}], 0xa}, 0xe0}, {{&(0x7f0000002740)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, &(0x7f0000002c00)=[{&(0x7f00000027c0)=""/181, 0xb5}, {&(0x7f0000002880)=""/43, 0x2b}, {&(0x7f00000028c0)=""/186, 0xba}, {&(0x7f0000002980)=""/193, 0xc1}, {0xffffffffffffffff}, {&(0x7f0000002a80)=""/83, 0x53}, {&(0x7f0000002b00)=""/155, 0x9b}, {&(0x7f0000002bc0)=""/27, 0x1b}], 0x8, &(0x7f0000002c80)=""/57, 0x39}}], 0x3, 0x10020, &(0x7f0000002d80)={0x0, 0x3938700}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r9, 0xc0305602, 0xfffffffffffffffc) setsockopt$MRT_DEL_MFC_PROXY(r7, 0x0, 0xd3, &(0x7f0000002dc0)={@multicast1, @broadcast, 0xffffffffffffffff, "4d2cbe26506929a77eb33c8c4696055080ab1c402774ad1385b99a83e56e1307", 0xdd, 0xdc4, 0x2, 0xa}, 0x3c) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000002e00), &(0x7f0000002e40)=0xc) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f0000002ec0)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000003000)={@fallback=r5, 0x7, 0x1, 0x9, &(0x7f0000002f00)=[0x0], 0x1, 0x0, &(0x7f0000002f40)=[0x0, 0x0, 0x0], &(0x7f0000002f80)=[0x0, 0x0, 0x0], &(0x7f0000002fc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000003040)={0xfff7, 0x3, 0x3, 0x8}, 0x8) 1m55.002538636s ago: executing program 5 (id=3655): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRES64], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 1m54.309495474s ago: executing program 5 (id=3657): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1m53.537482412s ago: executing program 5 (id=3661): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m53.479045896s ago: executing program 5 (id=3662): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x2c, 0x0, &(0x7f0000000080)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x50) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) open(&(0x7f00000003c0)='./file0\x00', 0x559002, 0x8) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xffff8000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x2c, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000009000000000000000200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000fba20f0006000000851000000400000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018510000080000000000000000000000213806000000000055702000f0ffffffb7080000000000007b8af8ff00000000b7080000275e00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000f7c40915b6967d5346531a8de7", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000185200000d0000000000000000000000bd46feff1000000018000000fcffffff0000000003000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0xfffffff8, 0xc9, &(0x7f0000000200)=""/201, 0x40f00, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000005c0)=[r1, r1, r1, r1, r3, r1, r1, r1, r1], &(0x7f0000000600)=[{0x1, 0x3, 0xe}, {0x1, 0x5, 0xe, 0x8}, {0x3, 0x5, 0x3, 0x6}, {0x2, 0x5, 0x7, 0xa}, {0x2, 0x2, 0x3, 0x7}, {0x0, 0x2, 0xa}, {0x3, 0x5, 0x9, 0xc}, {0x0, 0x1, 0xb}], 0x10, 0x2c3, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a01020000000000000000010000000900030073797a32000000000900010073797a3100000000080007006e61740014f903800800014000000003080002400ce0556228000000000a05000000000000000000010000080900010073797a31000000000800024000000001140000001100010000000000000000000000000a"], 0xb8}}, 0x0) r8 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r10 = socket(0x2b, 0x1, 0x1) r11 = syz_io_uring_setup(0x110, &(0x7f00000004c0)={0x0, 0xfad9}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r12, r13, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x241}}) io_uring_enter(r11, 0x47f6, 0x0, 0x0, 0x0, 0x0) sendmmsg$sock(r10, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000001) connect$netlink(r10, &(0x7f0000000000)=@unspec, 0xc) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f0000000340)={0x0, 0x0, r9, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r14, 0x10000, 0x3, 0x0, 0x0, [0x0], [0x0, 0xffffffff], [0x8], [0x0, 0x400000000000000, 0x0, 0x2]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000140)={0x40003ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc00c642d, &(0x7f0000000040)={r15, 0x80000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000080)={r15, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000200)={r14}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r16}) 1m37.847988398s ago: executing program 33 (id=3662): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x2c, 0x0, &(0x7f0000000080)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x50) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) open(&(0x7f00000003c0)='./file0\x00', 0x559002, 0x8) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xffff8000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x2c, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000009000000000000000200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000fba20f0006000000851000000400000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018510000080000000000000000000000213806000000000055702000f0ffffffb7080000000000007b8af8ff00000000b7080000275e00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000f7c40915b6967d5346531a8de7", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000185200000d0000000000000000000000bd46feff1000000018000000fcffffff0000000003000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0xfffffff8, 0xc9, &(0x7f0000000200)=""/201, 0x40f00, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000005c0)=[r1, r1, r1, r1, r3, r1, r1, r1, r1], &(0x7f0000000600)=[{0x1, 0x3, 0xe}, {0x1, 0x5, 0xe, 0x8}, {0x3, 0x5, 0x3, 0x6}, {0x2, 0x5, 0x7, 0xa}, {0x2, 0x2, 0x3, 0x7}, {0x0, 0x2, 0xa}, {0x3, 0x5, 0x9, 0xc}, {0x0, 0x1, 0xb}], 0x10, 0x2c3, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a01020000000000000000010000000900030073797a32000000000900010073797a3100000000080007006e61740014f903800800014000000003080002400ce0556228000000000a05000000000000000000010000080900010073797a31000000000800024000000001140000001100010000000000000000000000000a"], 0xb8}}, 0x0) r8 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r10 = socket(0x2b, 0x1, 0x1) r11 = syz_io_uring_setup(0x110, &(0x7f00000004c0)={0x0, 0xfad9}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r12, r13, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x241}}) io_uring_enter(r11, 0x47f6, 0x0, 0x0, 0x0, 0x0) sendmmsg$sock(r10, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000001) connect$netlink(r10, &(0x7f0000000000)=@unspec, 0xc) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f0000000340)={0x0, 0x0, r9, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r14, 0x10000, 0x3, 0x0, 0x0, [0x0], [0x0, 0xffffffff], [0x8], [0x0, 0x400000000000000, 0x0, 0x2]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000140)={0x40003ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc00c642d, &(0x7f0000000040)={r15, 0x80000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000080)={r15, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000200)={r14}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r16}) 9.778743794s ago: executing program 4 (id=3974): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000090000000000000000000000000d09837c3db6e381fb7742d8033d5079688b461e117336080000000000"], 0x48) read(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000000)='debugfs\x00', 0x200000, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078) 9.635136425s ago: executing program 4 (id=3978): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000006380)={0x2020}, 0x2020) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback={0x18020000}}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1c0000001e006bcd9e3fe3dc6e08000007000000010000007e", 0x19}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x70cb0}], 0xc}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 8.482626506s ago: executing program 4 (id=3982): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000009000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003f3fdc20221802324a130102030109021b0001000010000904"], 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) write(r2, &(0x7f0000000040)="c6ce58e73ef29dabfb399754e0007e4c69ddd96bf5dfa4b0aae8e7c6c6b0c231d35cfe566f873eb9764e851e2ab2f6a51745159df98902d82aeac5fea2", 0x3d) 8.414058981s ago: executing program 0 (id=3983): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_buf(r0, 0x0, 0x11, &(0x7f00000000c0)="08f30b649f0bc1be482c29b36bd453d8acea2f4b6189f6ae82e035bbfc633bdc844632f0a7e290861e516488b361ed5bedb812a9e1a55e203cceb6c7f524753b1b307f2778ebb2d7c5a14b0a145d20d735cd39f3ecc90617753d39c5774ba3acd4de84737286980566bc8bf2ba425356f83c84b6f32951d3423233463d5de9f37459a8fb283fab5413fb5fc54a3b9221396e6930f5a913c47e9a60e35592dcf1d2de8aab429d0f826f861a1720914d9f508d2ee85828120ac91c5f24", 0xbc) 8.379798127s ago: executing program 0 (id=3984): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getpriority(0x2, 0x0) 7.423997319s ago: executing program 3 (id=3987): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x12}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r3 = accept$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, &(0x7f0000000200)=0x10) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f00000002c0)={'icmp6\x00'}, &(0x7f0000000300)=0x1e) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x1, {0x4e22, 0x4}}, 0x10, 0x0}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109022400010000000009040000025c291d0009050900000000060009050ae5"], 0x0) pselect6(0x40, &(0x7f0000000000)={0x32c, 0x7, 0x9, 0x1, 0x200, 0x0, 0x200, 0x100000000}, &(0x7f0000000040)={0xfffffffffffffffd, 0x100000000, 0x7, 0xf, 0x10001, 0x80000001, 0x3, 0xe}, &(0x7f00000000c0)={0x2, 0xffffffffffffff75, 0x3, 0x3, 0x5, 0x57, 0x9740000000, 0x7f}, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0x400]}, 0x8}) 6.846004547s ago: executing program 0 (id=3989): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(r3, &(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), 0xffffffffffffffff) prlimit64(0x0, 0x8, &(0x7f0000000000)={0x7, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x10, 0x5, 0x4c0, 0x210, 0x210, 0xffffffff, 0x120, 0x120, 0x438, 0x438, 0xffffffff, 0x438, 0x438, 0x5, 0x0, {[{{@ipv6={@private0, @private2, [], [], 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1, @ipv4=@loopback, @ipv6=@private0, @gre_key, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4, @port, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @port, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r6, &(0x7f0000000480)={0x18}, 0x18) write$FUSE_INIT(r6, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x0, 0x4, 0x53b, 0x7, 0x0, 0x0, 0x0, 0xa0, 0x200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x80, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}}) 6.207855387s ago: executing program 6 (id=3991): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000040)=0x5, 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ff9000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) get_mempolicy(0x0, 0x0, 0x203, &(0x7f0000394000/0x3000)=nil, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) 5.984937076s ago: executing program 6 (id=3992): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xd, &(0x7f0000000140)={0x2, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() syz_init_net_socket$ax25(0x3, 0x2, 0x7) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(0xffffffffffffffff, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) 5.900061702s ago: executing program 0 (id=3993): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) getpriority(0x2, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES64=0x0], 0x20) r1 = syz_open_dev$radio(&(0x7f0000001640), 0x0, 0x2) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) dup2(r2, r2) preadv(r1, &(0x7f00000033c0)=[{&(0x7f00000031c0)=""/207, 0xcf}], 0x1, 0x6, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="340000003e000701fefffffffcffffff017c0000080042800400b9e80c00018006000600800a00000c00028006001780b82f0000"], 0x34}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) sendmsg$inet(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000540)='`', 0x1}], 0x1}, 0x4010) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) writev(r3, &(0x7f00000006c0)=[{&(0x7f00000005c0)='I', 0x1}], 0x1) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x63c, 0x1, 0x3, 0xd59f83, 0x19f5, 0x3f, 0x7, 0x3, 0x6, 0x2800, 0x2800, 0x12, 0xba2, 0x5, 0x3e, {0x8, 0xffffffff}, 0xd0, 0x9}}) getsockopt$inet_buf(0xffffffffffffffff, 0x6, 0x29, 0x0, &(0x7f0000695ffc)) 5.505464334s ago: executing program 4 (id=3995): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x12}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) bind$tipc(r1, 0x0, 0x0) r3 = accept$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, &(0x7f0000000200)=0x10) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f00000002c0)={'icmp6\x00'}, &(0x7f0000000300)=0x1e) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x1, {0x4e22, 0x4}}, 0x10, 0x0}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109022400010000000009040000025c291d0009050900000000060009050ae5"], 0x0) pselect6(0x40, &(0x7f0000000000)={0x32c, 0x7, 0x9, 0x1, 0x200, 0x0, 0x200, 0x100000000}, &(0x7f0000000040)={0xfffffffffffffffd, 0x100000000, 0x7, 0xf, 0x10001, 0x80000001, 0x3, 0xe}, &(0x7f00000000c0)={0x2, 0xffffffffffffff75, 0x3, 0x3, 0x5, 0x57, 0x9740000000, 0x7f}, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0x400]}, 0x8}) 5.209537598s ago: executing program 3 (id=3996): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ppoll(&(0x7f0000000200)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x1}, 0x0, 0x0) 4.940680257s ago: executing program 2 (id=3997): prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0xf3988a9aec2c1a0e, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x180, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4.926671723s ago: executing program 2 (id=3998): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x0, 0x20, 0x0, 0x0, {{0x23, 0x4, 0x0, 0x0, 0x8c, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3, {[@ssrr={0x89, 0xf, 0xf2, [@multicast2, @empty, @multicast1]}, @lsrr={0x83, 0x7, 0xcd, [@rand_addr=0x64010101]}, @timestamp_addr={0x44, 0x4c, 0xa4, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@broadcast, 0x7}, {@broadcast, 0x3}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x6250}, {@multicast2, 0x40}, {@rand_addr=0x64010100, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x40}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x4}]}, @noop, @lsrr={0x83, 0x13, 0x20, [@dev={0xac, 0x14, 0x14, 0x1f}, @broadcast, @local, @multicast2]}]}}}}}) socket$inet6_sctp(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x0, 0x800) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x472c, &(0x7f00000000c0)={0x0, 0x10, 0x40, 0x1, 0x1}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x1}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x884) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="042f"], 0x200) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x41, 0x3) lstat(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140)) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4a8000, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x38011, r8, 0x10002000) bpf$MAP_CREATE(0x0, 0x0, 0x50) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) socket(0x6, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() 4.850321243s ago: executing program 6 (id=3999): r0 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) io_uring_enter(r0, 0x66a8, 0x4000, 0xf, 0x0, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) mmap(&(0x7f000082c000/0x3000)=nil, 0x3000, 0x5, 0x20010, r2, 0xb5399000) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) ptrace$cont(0x20, r4, 0x9c2, 0xff) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000003240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x22000000}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r7, 0xc01064ab, &(0x7f0000000000)={0xe4, r9, r8}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r7, 0xc01064ab, &(0x7f0000000380)={0x0, r9, r8}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r6, @ANYRES32, @ANYBLOB='&'], 0x10) recvmmsg(r5, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 4.13460503s ago: executing program 3 (id=4000): r0 = request_key(&(0x7f0000000200)='id_resolver\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000380)='\x00', 0xfffffffffffffffc) add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000180)="74c722f530228c7fc60a4a6530129cf0e1fa83532c4de2c801e72dd0e4859bfbe485f1ec5d9a", 0x26, r0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 4.133357924s ago: executing program 3 (id=4001): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x15) pipe(0x0) readv(0xffffffffffffffff, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"]) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000000)=ANY=[]) close(0x5) close(0x4) ioctl$TIOCSTI(r4, 0x5412, 0x0) ioctl$TIOCSTI(r4, 0x5412, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 4.016159322s ago: executing program 2 (id=4002): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYBLOB="00000000000000000000000000000000000000007128c61ba86240be6e68c61af39ed1751279feb1f206511b471ea79db4304e50d9bd8ecba0a6a79defd2a6d45d9b03ea7a75fbf7047a8bf331", @ANYRES32, @ANYBLOB='\x00'/27], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="020300020c00000000000000000000000200080008000000d700000000000000030006003c00000002004e20ac141400000000000000000002000100"], 0x60}, 0x1, 0x7}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r1, 0x63) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000091405002cbd7000fbdbdf25080001"], 0x50}, 0x1, 0x0, 0x0, 0x440008c0}, 0x4804) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, 0x0, &(0x7f0000000180)=@tcp}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, 0x0, 0x0, 0x1}, 0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x306, 0x0, 0x1, 0x0}, &(0x7f0000000040)=0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000600)={0x400, 0xa0, 0x5}, 0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000080)={r2, 0x3b, "8ce044ce4547c341ce1820e1283301c198f4d2ce053156a20eef4f2e05e38c102b25216cc0931b7a5ed452b612e9e8f5a31ba016d84a4daadb3942"}, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r4, &(0x7f0000000080)={'syz1\x00', {0x3ff, 0x3, 0x4}, 0x51, [0xd4, 0x6, 0x9, 0x8a4, 0x2, 0x2, 0x9, 0x80000001, 0x5, 0x1, 0x101, 0x3c6, 0x7, 0x6, 0xf70, 0x3, 0xe7, 0x7, 0x401, 0xbc5e, 0x0, 0x1, 0x8, 0xffff, 0xe, 0xe, 0x10, 0x20000000, 0x15098855, 0xb551, 0x2, 0xfffffffb, 0x6, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1ff4, 0x1, 0x1, 0x80000000, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x1, 0x1, 0x6, 0x2, 0x5, 0x9, 0x5, 0x9, 0x0, 0x3a23, 0x1000, 0x8, 0x2, 0x6, 0x7ff, 0xb8547353], [0x80000000, 0xffffffff, 0x4, 0x5, 0x7ffffffd, 0x4, 0x553, 0x6, 0x2, 0xfffffffc, 0x8, 0xc, 0x36, 0xc, 0x6, 0x1, 0x9, 0x98, 0x8, 0xe56d, 0xa4, 0x4, 0x99d, 0x8, 0x0, 0xd, 0x400, 0x0, 0x6e38, 0x8000, 0xa, 0x2, 0x3, 0x0, 0x5, 0x7, 0x4, 0xd, 0x9, 0xfff, 0x4, 0x0, 0x40, 0x1, 0x8, 0x5, 0x8, 0x0, 0x34f1, 0x1ff, 0x4, 0x1b2c5a17, 0x0, 0x9, 0xc, 0x0, 0xffffffff, 0x1, 0x6, 0x6, 0xac, 0x2, 0x54, 0xcfb9], [0x6, 0xdb8, 0x9, 0x4, 0x2, 0x6, 0x5, 0x5, 0x3, 0x5, 0xfffffffd, 0xc8d3, 0x33, 0x9a45, 0x0, 0xee40000, 0x1, 0x1, 0x43, 0x69d, 0x8, 0xffff, 0x0, 0x0, 0x8, 0x2, 0x4, 0x800, 0x7, 0x9, 0x0, 0x0, 0x1, 0xfffffffe, 0x3, 0x0, 0x9, 0x8c0, 0x9, 0x2, 0x7, 0x7, 0x6, 0xfffffffa, 0x81, 0x8, 0x17c, 0x55f2, 0xdf46, 0xfffffffd, 0x7f, 0x9, 0x8000, 0x40, 0x3, 0x2, 0xa, 0x6, 0x2, 0xffffff00, 0xda15, 0x7f, 0x0, 0x10], [0x0, 0x897, 0x8, 0x246d, 0x6, 0x101, 0xfffff410, 0xd, 0x7ff, 0x606, 0x4, 0x9, 0x80000001, 0x2, 0xb, 0x2, 0x7, 0xfffffffe, 0x7, 0x2, 0x7ff, 0x3ff, 0x0, 0x2, 0x6, 0x100, 0x1, 0xec9b, 0x61c8, 0x6, 0x0, 0x101, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0xae, 0x3000000, 0xe, 0x4000006, 0x7, 0x1, 0x9, 0x0, 0x4, 0x100009, 0x7, 0x3, 0x3c, 0x1000, 0x5, 0x2, 0x15, 0x8000, 0x7, 0x81, 0x5, 0x7, 0xfffffffc, 0x4, 0x6, 0xeff]}, 0x45c) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) syz_emit_ethernet(0x42, &(0x7f00000007c0)=ANY=[], 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x1, 0x1, 0x3, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x374b044b8a3b00f8}, 0x20000000) ioctl$UI_DEV_CREATE(r4, 0x5501) 3.932946622s ago: executing program 0 (id=4003): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000b00)=ANY=[@ANYBLOB], 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r3 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) (fail_nth: 1) r7 = syz_pidfd_open(r3, 0x0) pidfd_getfd(r7, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdir(0x0, 0x10) openat$fb0(0xffffffffffffff9c, 0x0, 0x180300, 0x0) 3.178286278s ago: executing program 4 (id=4004): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(r3, &(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), 0xffffffffffffffff) prlimit64(0x0, 0x8, &(0x7f0000000000)={0x7, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x10, 0x5, 0x4c0, 0x210, 0x210, 0xffffffff, 0x120, 0x120, 0x438, 0x438, 0xffffffff, 0x438, 0x438, 0x5, 0x0, {[{{@ipv6={@private0, @private2, [], [], 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1, @ipv4=@loopback, @ipv6=@private0, @gre_key, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4, @port, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @port, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r6, &(0x7f0000000480)={0x18}, 0x18) write$FUSE_INIT(r6, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x0, 0x4, 0x53b, 0x7, 0x0, 0x0, 0x0, 0xa0, 0x200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x80, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}}) 2.982550391s ago: executing program 3 (id=4005): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7d, 0x0, 0x0) io_uring_setup(0x71b9, &(0x7f00000000c0)={0x0, 0xc63b, 0x0, 0x0, 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$NBD_DISCONNECT(r3, 0xab08) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r4) sendmmsg$alg(r4, &(0x7f0000001800)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0x12c}, 0x1, 0x0, 0x0, 0x4040}, 0x4) 1.667947362s ago: executing program 4 (id=4006): syz_usb_connect(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x141, 0x3, 0xef, 0x92, 0x20, 0x557, 0x2021, 0x741a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x30, 0x0, [{{0x9, 0x4, 0x89, 0x4, 0x2, 0x8d, 0x80, 0xf7, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x12, 0x4, 0x5}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0xfe, 0x10}}]}}]}}]}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r4, r6}, 0x10) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f0000000bc0)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x1, @local, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000002700)="89", 0x1}], 0x1}}, {{&(0x7f00000084c0)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000008500)="88", 0x1}], 0x1}}], 0x2, 0x20040040) shutdown(r7, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e20, 0x9, @remote, 0x5}}}, &(0x7f0000000200)=0x84) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e22, 0xf7, @rand_addr=' \x01\x00', 0x9}}, 0x0, 0x0, 0xd, 0x0, "9874789da68e365165611e258ba3bbdc8a5a93582995160e82754006a1194f21e4c9f40c4a42b2795ba815068a5af9e777c5f06d6988ee5e1a3470665dd48e3363fe27d96a0f1d35e3200cfcf7d76d20"}, 0xd8) 1.651068665s ago: executing program 3 (id=4007): syz_usb_connect(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x141, 0x3, 0xef, 0x92, 0x20, 0x557, 0x2021, 0x741a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x30, 0x0, [{{0x9, 0x4, 0x89, 0x4, 0x2, 0x8d, 0x80, 0xf7, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x12, 0x4, 0x5}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0xfe, 0x10}}]}}]}}]}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r4, r6}, 0x10) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f0000000bc0)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x1, @local, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000002700)="89", 0x1}], 0x1}}, {{&(0x7f00000084c0)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000008500)="88", 0x1}], 0x1}}], 0x2, 0x20040040) shutdown(r7, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e20, 0x9, @remote, 0x5}}}, &(0x7f0000000200)=0x84) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e22, 0xf7, @rand_addr=' \x01\x00', 0x9}}, 0x0, 0x0, 0xd, 0x0, "9874789da68e365165611e258ba3bbdc8a5a93582995160e82754006a1194f21e4c9f40c4a42b2795ba815068a5af9e777c5f06d6988ee5e1a3470665dd48e3363fe27d96a0f1d35e3200cfcf7d76d20"}, 0xd8) 1.625127358s ago: executing program 6 (id=4008): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000b00)=ANY=[@ANYBLOB], 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r3 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) r7 = syz_pidfd_open(r3, 0x0) pidfd_getfd(r7, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdir(0x0, 0x10) openat$fb0(0xffffffffffffff9c, 0x0, 0x180300, 0x0) 1.547946098s ago: executing program 2 (id=4009): prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0xf3988a9aec2c1a0e, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x180, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.402645155s ago: executing program 2 (id=4010): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @private=0xa010100}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) prlimit64(0x0, 0xb, &(0x7f0000000140), 0x0) r5 = gettid() rt_sigqueueinfo(r5, 0x21, &(0x7f0000001500)={0xc, 0x0, 0x4}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r8 = dup3(r1, r0, 0x0) recvmmsg(r8, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) r9 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_QBUF(r9, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0xfffffffffffffffe, 0x9, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0xd, "0adb3fb8"}, 0xffff, 0x1, {}, 0xfffffffd}) 781.942766ms ago: executing program 0 (id=4011): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r0 = syz_open_dev$audion(&(0x7f00000000c0), 0x7, 0xc0200) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0xe, 0xf, 0x9, 0x4, 0x0, 0x70bd2d, 0x25dfdbfb, [@sadb_sa={0x2, 0x1, 0x4d4, 0x4f, 0x7, 0x5e, 0x1, 0x80000000}]}, 0x20}}, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x10, 0x803, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r7], 0x1c}}, 0x0) sendmmsg(r1, &(0x7f00000078c0)=[{{&(0x7f0000000200)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000280)="3bb98864c78de9ed48d4421fbba3967f57e1fd22021cc83e43b2ecc61071bfa53a40854fb8aa0b128db4c725d9d405642a7d280293aff9d3832ec7cf190ade5ef1a99a93c5dc84bd533270dec6bc0e1124ae44406ea2312bfeaf8ac78174d1fc", 0x60}, {&(0x7f0000000300)="3f07317cbae2babea6255418ffbeebb7ded853775ff495fd599a7dfc70c85fe4f3e87fe9f680bdfe4db46bffe7e89efd1c93bc6ef80295f1a916c03eecfc1ef004e0ca19952991fd670e4cab38aad438159a40bee1cf64f092e91af41ff64a26b5363d64833b8869602d321beb74bc023a9a20abffc50fa143a84c970d96bbe99077", 0x82}, {&(0x7f00000003c0)="5e4a601a79956ac5b609eda87a1ba5453dbaf3387187c5199869656b2c3bf920cf89b1c8e331370122720d5707113d04d76b22ef37fad936db6262354fb42901b87a92396d96418652eb14f4a464e2b823312f193db1d07bce472e28bae974c06337f9bed2f9254c3fc0d7fc7847e67480f3df9ed82719d1d1f97db94e48bf59517d3a40a11f5b8c82f275242b4a76053efdab84f5b1ddf5fbc900722a17210fa756580bb681570643ded2464c38e63afb2c586a097cbba4f2c7139f05784b45fe0989e2e03e20d2d6d8a3ba571e687243", 0xd1}, {&(0x7f0000000180)="9d64fe29c32206b85cb67ae2b013955be0d95a", 0x13}, {&(0x7f00000004c0)="01097a1d2cf0a238d0ade99eb001d32006bf6f4d7a0aaa0ce918d51c5e46c459d0772a84353ec4016368e490661922191d21b910291f4f8f2a9372dd9ed7f5afcd8c3cd7cf6c09e535ce628ffe55ddcf9cead2236d48362693070e7043c68e563c2c556ea1dc93069caf4976d94e69beb3a18201c5dc15a27967f1cb4f31b5a30a4ef7e78e7574e7452b092e5a6005c8259e8a61342f49c2139a416fa771b2ce1b80d51787020b3d444bb160c495cd08422dcf375d04ba06238558fb16077323cb942123eaa43e6e25721594e048afdd729722d1", 0xd4}], 0x5, &(0x7f0000000640)=[{0x48, 0x88, 0xc47, "a34af588d00a56b13a71835917abecd3d84a2c02021967b563bd157b00df0bd3166e77ad6d2fd9dd4a22c12ac7e9886414adaea0858419"}, {0xb0, 0x119, 0xc, "9cb500d813095a65b45db141431a5fd0c16971b48fc811ed5b2fb86178f2f9833f2214ad66fc94221c6503c9a15b0bf4724563017e7b7312df09370a7d233258d8693c53a67dd98277e7b428243f0027f4211644b33c905856662ebd2847039708dbeaefb7e5e89b1a0e378af1075dff25af295c40307dd312202cafc7660c9a6cb14a941ba582d314036a34ff19407d9e76b1e1f2e71781e2fce791b2f08035"}], 0xf8}}, {{&(0x7f0000000740)=@generic={0x2b, "867d96e44edc372df86c3ae0200986daeade0845752d4b09e44640e95fd9cff056ca0090f5c730c9712ab13ebd64f87e43f663d91748d886f8ca44ab5e8615ed2af62de3bdc4d0b923b131e38d01937014216f9e0fda070a8e00d48c795fb3714112c8234485297e953ef9e6e032096fb5cfaab65ebbc3d406d5b3b88c33"}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000007c0)="5ba30d189b02ee07c942692326e021f691fd43c4202e01b17f4e93189f78848588ce3e42f03f59b1ec423253ef11395d6303028a5c05a6abcd5eaa7577203fe6479692c19b4dc78e8eda9768a74b0f5a5d114234f412b85b960d4c6ffdf2501d0f9c322e73c0bbd7e234d9104159d8d6dcac461a4ec027ba4150d534847fe8578f0522ae51112b875a2b8759f0426d0b0c583521623627c69be5e82e25644c13378f3741e64b53eeb19b2df44fc66d51039c320c7b7ad2ee470cc5a6264d7b5367931d6c5edff3e04c1e8252a90f4ee1d2212cea42ceb7917a936b73", 0xdc}], 0x1, &(0x7f0000000900)=[{0xc8, 0x0, 0x2, "dfb06735b279b61218cd5633d547796a69394ab55b89a8f5e260bddc3cbc3970cd0733d41f5f854ad3507a4875df382a8b6c310cae4436a43f9dc8493a1788491f1fcfb21b55cb01286af442c953620b52f79004315553bc33c56bfc11956fbcbbbad92dd99931e0cbd5b4d648b4c422b0f6fd6c70ec6a6552848897f59034cea8ec55a7076f744f67749b6ac66638b164acc0c56a7d18d603a067309374644b99a73c6341a82f5b260efe9941c8106ff54596907a"}, {0x68, 0x102, 0x8, "446ff8085bd42bb220d2fbe98c7a67f97085b0305e84c58791813ba9bd5c6dba06c8eec28db8ff6bd49d7d3dcc950869c59ac1ced827a5332fae5959e3af0998b1831a455e0a9b2b8dd75685ca6d7190ed8eaea0bd00b3"}, {0x48, 0x101, 0x5, "ce62b78eabbe62c03ebbe7b5a7816798f7e3f55ecb4d42420fa30a9ef9a6c3c52b1edd452e1ee3467e47a857490fa401a9d39111c5e4"}, {0x58, 0x88, 0x7, "3e5c6646d4db0bb177f79a71d2c44efbefafce659cb5f4d4eee371b7c4507d078cd31cdd8d677d67a917a5b799a70f8262c18bce2b8df8428ea965dbc377527be4b7"}, {0x50, 0x6, 0x10000, "41c3f60f1f5ca228f0c5eee8a94b60cf57eb075dede19fd49286ac3f72f7031a0d6490dff5faacf13b4f52006ea94752492d4a96f289375aa133d89b8a69"}, {0xa0, 0x10d, 0xfffffffd, "71f74bcf4ef81c62954cf4b1114533b18c64cfbc900a75a57d99b23faaaa1dd2bbc5183cd11d5b232b1a83fe662b52b7a6dee6c4109a4cce92fb74880509ff26f6ddaa19c6a888cd861a498c04adac1f646efae6d8558b2056319f4a6f2b46c7eec1646dd9fdd8c483b11008438a7cf691ddde86bed2f92da37c8811c1cf7dd1ee1135d4d62d0b351c032384eec4"}], 0x2c0}}, {{&(0x7f0000000bc0)=@l2tp={0x2, 0x0, @rand_addr=0x64010101, 0x1}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000000c40)="ce21f02fa23274a724f78e21ad83ec2f2e2682a57274bccc28518415e1438a0e0245fbfc7dcf3df8f6d408bb9ba3bef2ff25f207e204c95ecd0a3ae40a34d6678737e9b651e686fd6a2041a3c3ee6b340f8003aeda0b5b5c074f31a5d440cb1ddd4a6348b21860b3eaa46bb57ff5e41116098b58dbe2852c45bb9cbc0a49197b0762ba1476a20e13d65d3ea5b6aea5b73817cca9dc4be2832cb2e438e288a4217e54529680be02400474d3c3741a77afce124d6847e921b3a9e0dccdbdc8dd95e1ed3ca47076fd540a57d39e44462eda4b8dc5533252ce09f79428d1da73a6", 0xdf}, {&(0x7f0000000d40)="30fc063316bc80323d0fa9f9ea7c5895a32dfff8824f3b07640f6b2f07258c5bc3a62751030fe9040a8a04adc9aaee73239a033344398b9d071673960d6cf26769c101d8ba91a83303fc0d7bb55cd35041ebac4b35daaeeaa9f69f0d5b83427d2c7edbfee157c54b71e3fcafeb700e97ba4b77dcb4b28a6363cf4d29c92fac62fbe86676de5924e96b0a33d1ada25c1f0d5958d17403dbdb6a5a9d294145e16ef493b6c8c32500d74148fc7c401d9614c74af36c9dba0411ac90a62557ec0a8245163fcfd519decee6bcd46cf28a382d602e94f300785193e5ca0f44686fcc31a7995cf9fa67e75b6c409c7a58e80b876bd657af21a872dd1299b781174c366eb9e0d630b8fa5baf3b07b79f84413013ea2c718f391fbba7281ab9c3bf9304251cbe768cfc2ffc5b6bd30a51085cb1adb1f44671c02f55b1f2cbee7287c783b2f6d5aa0c77cfb5822fe4f4f954df66200be549139a8a0f79221531e152e367096c440f3039fafcaeb2cf5fcbf3f280bd85a03cbcca031bd10877555d8fba92ffc75d7deb84d8a9198410523959f7562e086d5d234206aba9ff4d4ebde0b0e8581c8a2995ca6bd8e49606fd5b1b406ad376d6977f26912f3bbc4c7dd3e4c8547fca18307a6908db45b4707f115a676d0e301f219a2bdc690f73bafd9f89cfd49c761246f4a6eb1dbc4865bff4567f795889827ce1253f228318778ab6f65f4ac59be27965c2f705b082c9475d3950630217962cb8b3e5ad3fe81d8f5cc0029583a96bea73cf3d948f6b9d3530728ea6518d63a79840a610d828299ce7e7ea4aee51216b44c6cb86295037121d4cd2554905292879156f63de5309579bdd9a38961c121960cf1bbc4c88cb0e1c5eab790b366c3c9180750161be1dff66f1804d4364adf13fcbb408265c0d251f077d2eb599ca91c2250f76b030f7a660a64b5fbfef094518b4eb3aaea50cc9031ab3002944c8d55e6f785682db361358df5ebe965251d579d7ecdca11eb8fc6943f35f0fcb42f4e52cf46b3e150299494106c968f69795fff450c6d419a78baa42e6efe1f5cee4bbf882c68717e68e003937ed6deb3f4a4007261764cc14f3cbd48c7411108f4e1620c708b14128ef9f4944d2a819576501d192b393fcbc8981e6f92ff6b23e5eebeb21d17a597ae29ea03ec04debea5ca10027017c19c5a4f4d0f271b6c5a8d18cec39a899c208b92a6982410e29db59e173701f9ee50ba9dcdc0dad23c28da152808bc2e567428eceb062d095c9adf839c17cd06d34c86f07c3a32dff37aa1fb26f2165fbf24a7face68b2f248b44d60891db92a59425f0fb400c6b6ba4391ce0a2c3655cc3d7ee1be682bc6d6e53f90f586c2708513b02074b5f1c44368f0ea07cf3bde41874158b24d5f2266c492e78bed60eef4f683bf2419735d1d553bad8069ffac52167656c5b2a3f0b6b1e63af26d1675d8e1441a941a40b634482bf71d13661d3b04ae8d793290c3e29410ab81efb0dbd21c13a4906b65203c73af291de3ba1274df95c1351ba95a508f83205d608de1adf196e381e199649d068cc81e122aa1af3a47c9a541ab70d993e0e9483f2ea2b630a65f37acc8559a556940dc620b007bc746769de7291578ead007190151a2e839c72015c56b45ef8704538e0d155f996d1b056f10e917f21a3efe57df64bb5330468cc7f3bd4354db3bdec78f4b9e5afecc0cd9678a3887dbd9aecfb5e10ee28d2f44cc7608df3d9abe479855acde52650a1f38799a380f128cfda54851919f23e941d08528b8cf0fd0b538834863ee6f6c8e23ea15625db1b6b6ec3404d9fd1ea6b7f1f5b5483d4417dd3277c534293a16c2108003b5db51afc965dadd8808bacb32bcaf338d7811e2636ac8a3a22bfbb0b7c4fd01f499a5c3ae6e1a40fbbced9a49ffa409c8a74edb42b879d90f5006d1aa86f0b8781891ba8d3a7f887772fe76f5026c82cc89ce7552e5b8ba42b5452a9af374d759eb10a57669f79b3acc445f64e620e684395ed98ec92628f74a8653b133f1ca49f495412455fe24e6ebe3ac5804863c55627f22fdb1e26900dbdec2fd14ec04afe11a794315c97939ef158c89cdb439b66151f101b78be447730b7a0a5ae97f556a0d2e5a5f655c702ad96586597b498db2b10da3efbb9800b6471eb7aa8387716d1c7069c2f1bda1b63d7f209eeaa0cfb5ff8fb0e32299d1177bf065201dcc9c2d6cd51d53f4e85a47d96a8b881244471ecc3ba788a1b92f0f5a037d801bd19a421af97e50cbb79898afbae4c1385a2f59c54354086db6a31233346ffc9394c07a9d89cdafdeffa1e0942175c4c7a6fcb04488c790a09cb37c117bf037933075609a6a0742a6849c5ed8f9cb0668a513dd9a39b36a141a001a521594709f8b4703cc8f26ff5707c6f8e179d592cd666740715d6f3680afc42123bd51a9b00705e943586b2ce0852f31723e0aa9ed41aef54a5b55a510d9f501359c1a70e6d9a2a141690a03193ecc714a3b8fcfb62f6edc7e50ac5774b4e5ed35eec4a732833ba7e1af65834466fb310cc3d6ab67c6ec5ca8fb37e91e901890724a5888192328ab9f9e5f76d4217c5e36c0ccdb28ecfa36ebb47d62f0d34acf51f8a2f5124a5359abb9e0efea335842f89be402a8c4a0aa12c03201a93f9607f53ddeded6aaa7d1008c3f981d47b3c1c8eb3655b1ebc204926abc45750318ebf76631f5c87d825e600dfea27e28956e474438af6b20a887430dd4cfe648b0981f80bec8185d3eb9a138a7cdab1fd6fdb49c05388a583285ef0f47a0d85657ddca8bf0d65b358ef90b0e97eebef812b29828cfbe2c7c90d45ea64e23e7234a646c1d217f71372cbfaab0c55d405b963950aa724b576b13017ac032202c008952c4fb6f819a0023f42d92b6aa7c5ba0d9999de35ad387e5bacaef6147ec4542da03f9e8c2b017a7f6d5fc010162588f2e1d0c081cb1cf948aac9155eb6b1ba477c8311bb65a7e5707553613e2bf60fe2424e8521e4ea00d04674fa99c87eae99f61a036678a1a31cd1a8c8333bf4ae5d37715ccc97fa6509760c16f6221ee5f3fb23e1b54224e192ee9bfceb13ddf5af25682fe443a1f9c5e9a1796905b9d37ef71b4c454810562b380c15ea0877ee160530441e71237a6f40cf54105845e220a322488a8cd5ad2c00facbf16908a46fc0f3050c88d57f5c381c29f387b7274343e885062fe91ed2b4e55e8e4b88382136e27138a248514b6e95e1ad9775075e85ef51b11c6ae7edf80a1cf8937f2f96accaa9e2ce80140a5419cd9374a307cc486eb37a361d9713913360c41dd0b86c5081e93c6045f1ce2522ba121db5759b4ba377cfee66460d5e3a6a46f2a279ceeb34800d1d5b95ac557f18d88a7a55e2402e98f84918a47feb3ccc2ee03732be663484bae2e6676eab85265a1c3c7db681dcf9de5fca851e035c04843939e3c95f08f1934412c74f4d36712bf84789ebcfaf988009e8d6948187af770d3a3e0207b55c77d2921af8583c2c307e01d76e6ae21d32891ba18b7803c8d5e5d481ffaf5687a3a949f6f752acbf23419b9764e62412629460fa655d180751d6110e0bb786737cb83971920291325cf3d691b91a41cef2be7534eb5ff912bc5e94e4e3a84642da569f9245deec85297ef9fd0c3f6cd80e962670a4ba3e97b883f6cf304ed46a9542ff2bdcfdf5169f375277fe2d2299e150d311eb7a31788e18d6190aa5f3c72d45a0965eba615d6d07fa38a51ea22c9aad209bd78681eac09d4487ee7c1f644631c774512de2514bf23564d3fd04c0b0bc5d66d4cd6c953c7fa42e5f87425ec5fb58122fe718baba35f381604d70c3573b29823da3af759d22072acb3954d07c6b0ab91c087b2178f6bbd4341c0b1cd41975aeeca0216f68242d5f0fe0c7afb52cee2417988ffaeaf4cbc77d22910bcac88adbe5924f98d300374bbccc150956038e25e406d6820c0aa98f052704ccbb8c0f65aa9f187c3ad4e2ec96ea5e603f1638e574bab30a6b0141b58705f0d0cfb004cc9340aaddef312268be00457960e31583a8c1e4311f70aa391219d4da997f60d1dfc25b8461276f74aee19f5b3b2aa11e80805cdf0f0320359efaf7a4e4972c8d8f68d65af0ec3791e470c784fb1ac12aeff053155e63a411d05c2f999a64c9db05848ea76e1caba1b554e74121f5ad2c8cf6887eb3f2f4407a02ff114c2c41657169515fac5daec26c94cd7ee1b3d0d6d8bcbb87ff1777ea6afad14d19950f89a559d5a902af287a3b69a1c6febb80e45a72c77b8ba4a2e4e1ecdaa50e7fb20c27739c133323d7942785142550dc90da291b037a901b89221a6b6596123fda22a76cb64d8f4749ab97bb837c9e4da707bee6cc48fa3cac5056790791e95ab7c45d788288ef3f834065de8d947a19a6fb1f40ffce1f8ac8874ee212a70dc1de7be0c1c83508307eb5f1998d5093d3f1f3d470f5b87737b8298ef0af9219b05e8c7d7993193da4e703dde43dd2fb842a726c7ced00d8e9ea43d15148d61b218b66e52e880c985533d560a5c6c5dc9a8fa5d8fb9a2ddec194a9cfd8edc892f40798a6bd6f1697890bffe66eca2c57ecc39f20d2c6be66a79554e10fc1682b014ea75d59a77b24439f65678a5f187fe10960b787aa209c3714fb78402a51825c2254b2c60804fa30d3016b244aa0a06792e1f4402e574926a537e198486b60795ecd7dd891a19d9845555b6f3be1011df9f62b228d2e444b1c7ec8a2d8589514fc94a8df56346d279cbc301d28bdbdd87fcf5ced726d7cba060063f6ea575c04f58b8d6ed8d2ce56d6845364eb69aa9ce7c281b643d540b1bf84dcf66648dda2399b92eded308c59244f13ed50efa85295d3473083fe1b7f596f09ceb50d820050beb2175adc31fb51a84316caa9b930a53428c960a77c438e46ef347f5f443c6c6e68347ffc554d35428a6e3328f334138719039d7e1ab7bfaaf9de13aec4837a5208f62db7ab9e387ac5a994bd83ec2c3e98b06e06dfc9556fc29723fa7c48bc0fe5462e193c47d9ca4f5f814b462f88ae4b3a45bbf6ef704e036a3597cce2cd034b45a0dbb4f8e912ccaf16291e3050378a396090b81583af502dbc557710a79e5000cb90de6cc557e76969d71416f85607705ae2d90f0b7da80bc3373c70e4a743f801a590544f2d85771b3a34eddf1ea791e969ee5879f1f0b8fafea984be8e2e3804d31d895d56406072049685aaf7825f35e76d39aa7bc81b7e3a4a5f16f34cc9b9733d9ebfbf4d96622f2629fb70ffb1e57967fa82a08b56bed86a98ab85f5f1ff68d7faf980e07c851333353040df5eecf7340e77c4323a014dd852c19100ad1cdb2202ba9c8e36b00e33eef5e7cff5f605a096e20acc0e7fafdf0e53116c21bd075b139fb514885c00940bee950a7f740ddad0f1a9a23c2814404dc82e6cba51dc4501ee56bccd968c848f82edd6120407824a4dca218e17412b6cd8ad9031b585d4577bea3aaf453c3681715e25fa2068c7f2673d9811baeb33366aab1d0f745512ad1077a2f3ab639ece52d8e7714f4bcc368c30c6cee37cb493ba5cf73832860233aed5602b9afb1ba27be9b0bc67481e3a0725f918b80818931a53d6d893a20f09f5db99f0d83c12c92f72e1be37362d449e22b637eebf341bb589ded784b4d03d7fd60576c06874515a2d3b39c73f19977fd67646c563b56cd1c32ecc8e7951585d8ab18329a99f6e2508c284ab375a7c71c46a4443330f84ada8ff29d22801f23f262096b739df84427bdbccc8394aea598fe994e8a13c007956c9", 0x1000}], 0x2, &(0x7f0000001d80)=[{0x68, 0x10b, 0x5, "d5e23209396b9304abe834d07c5b10ffe28ae303c9b0a5bbc41373b54b9a2e58aa715dff37954f29c73d815da9c284f39056a454135cb0a1bdb79d195c011bbbe4b6e562ca6a4583fb14e1d78a77466bd29d1e87"}, {0x18, 0x0, 0x6, "ad"}, {0x30, 0xd88317cab78933b9, 0xfef9, "80120cc340cbe97c4c45b4e392ee8e62efcc1e11e921c331bb6db11b87"}, {0x80, 0x1, 0x9, "e264c88b7d72249ad17123ac133a5d1bc841720d492f6f8fff7569ed32df8965400ce4c977eebf36e94a5be85f63532263b4fbb2fbd425a530be7309b56171d27cf7e9d5193bbf5acd746a5d0bf4ac5ae4a339238492ca7cde6e21d18b09386dda34a034436a390c6fa71b"}, {0x10, 0xff, 0x3963}, {0x60, 0x101, 0x10, "a03a1fe5dfb04906e6b180da09694687c59021f2642aa8816a16921a0792a8eededbc6de5e3dcd72889bd61962ed2da14a5ff4c62e9d4fe3ea5071363f0f6c33dab8e278640e07c858a8b0238ecf"}], 0x1a0}}, {{&(0x7f0000001f40)=@in6={0xa, 0x4e22, 0x6, @remote, 0x2d4}, 0x80, &(0x7f0000002240)=[{&(0x7f0000001fc0)}, {&(0x7f0000002000)="e514381c212a00494e22", 0xa}, {&(0x7f0000002040)="07303787cd1ac292299091c0c6e3ffcf58e4bb2d30fe18ad38f27d4e25b6677032954e4e43a6bb1e8f9b2afb910c691c8f46cc882a1fd09ce8d7eff162ee02b2392cb506c304a7d66d167e6dd03d3828423009b2252e743cf1f6498da8851294d384de997377a25a98413d47e3732bb84471341a4e38b319e180d1d25c88a82f6f25432ed208355d86c8e0c2c3ac9312a7593b853fd8df120b7f6319ee34f7aee5da52030a5c86ade627d92b44aeebfd45e35b54517d027ec870af7f", 0xbc}, {&(0x7f0000002100)="c9512552e2bdfd3f1d623559e276f124c61c5aaaa1d213171c0e895fd3750de9523cab79d3348a13a4f31f33914b7c19f70f5aade02cc70a55f27b570adeaa23d3c6bbd96695b5", 0x47}, {&(0x7f0000002180)="445d4a69dee73fa169faa2cc5116d774011b090631b59ceee031bf71e546718d14eb7ffb2a81ac068a5f39ebc889ba21ad1c3d07544d35050b92123d0eb1bf2b4bc6bb0f74d824766be722b8df8c45bdca3e931ac8aeab932594d13ea2a098d6c3686c3abcc06fb09bc551a6bda612ea97b6a7351552b51e847e18e3c5267250caca2dbbbcebfc52d3d93ee0cedc5b03b78653cb790e05e42351255b58149e6dd9f3cd76f929a308ca7e8c268eef502ac596fbfdcfb8236a2017fb8895e73c", 0xbf}], 0x5}}, {{&(0x7f00000022c0)=@isdn={0x22, 0x5c, 0x2, 0x0, 0xb}, 0x80, &(0x7f0000002640)=[{&(0x7f0000002340)="0f1d7bf49bd317b4e31abb50a4c5e6845d3acde630892a6240891ba6e61bd0d995d85132bfa9df1ec794370054c88572fa994dc938b0d7a80a0e002bcfb9ed652910cf8a5d4c116f000e0265b05884320fed81dbdc225268fd7c0239a6696a07d3d08475b3fb10f0", 0x68}, {&(0x7f00000023c0)="30dbc07499e9be9930df54aef2b53d7a71b5d54e8b04771997068f4f52c5cf564fd98b54128e23a12cf205feea08f862dc36ad159247b39e31e2fbeb0da837b4610e4a3fbb2d1cbe6f252907d99d4388a44a718124579104a151", 0x5a}, {&(0x7f0000002440)="7653cf950694b7669c53898efc27e763f103c9e98792670c796e2887fd959e3b66333cafc8bc5c0a74530037f0c6c135790befed584db43e1c43e3927e5391f07edeee34bfd19e0d5644142ada76251abf3fa06936cb9e12c80c25ca2b13e57fb3bd8b9a6f57cb5073d41f1b84e4fcc2dbc5d355638a2167e9ecbe13e5925a797b1d251c3a5819c0db37f922c709c6e5a38a21a658d08b157d8b0678eb37d03395c487582b21c074e67ef4583c6fd577865c3f2ef0201dbf02c7a5d8d1494f50bf065352e6b6f05892362cb686e7c00ec3ab16c7ddee", 0xd6}, {&(0x7f0000002540)="b9a54e337d6437d5d1811dfde3", 0xd}, {&(0x7f0000002580)="9b00d337ee8efd4ab7e9748d5910fbcba1f4e2e590112a917ccfcd6214b0143e1f3faf3576cabf1518f4686bcafd24a05813f93e98ed390aafa9dbd41e480f418fc1dea68213b71e2b5aaeff928789c6313efc89c3a0001547e84bf00fd3080a9652e877a1a5b64cd7f28ca198c46b844f6db832a5f4b2414d2ef194fb62990f97c449354c2be00749a5c724a76f96a87b54c09a8a8bfe7d6c", 0x99}], 0x5, &(0x7f00000026c0)}}, {{&(0x7f0000002700)=@nfc_llcp={0x27, r7, 0xffffffffffffffff, 0x5, 0x4, 0x0, "65eb9db5ce39e65cb5d92c8dc9e2dcbda38da998391cb9c353a19d88e16c40cd8b7d51b4bc8461e0a6e558c3730544b1e0a43a2d0d1b49ab1096b0f57fbd35", 0x1}, 0x80, &(0x7f0000002a80)=[{&(0x7f0000002780)="21650fee84fd487931641ce78d6701172a2c097cc7f7dd597827a9191bc0659a31f8f0a15cc3092cb7a3854fcb20be4807aa1711861a3f2190bcc4d6b2c2365b2364c498d635eab59711822a2152a64b2fbdb87c32ec8c3950ebbd27b2fcec081f818c88c1b67b476484f99f71dc55aceada6efc5c2c516f95b8957629e2cebe3107bbcdfa92aae391760b1e79f4d84857e969c93de77ae33c0acbe93b181c1a5cddbd47a7e9e6979f85f66a0eca17d36fc139e027b5c2fbeaa14d025489b3591aa0a5a2bf17f1895ab3585a1a3ea59bd110def3bbd685", 0xd7}, {&(0x7f0000002880)="21c7f4356c609f753eea2629af20835a25db5bea240db8e92f27a692b10e5da0b9ba9b97c894bf2ae2bcbf244ba4dd65e310327b2c4bacdd7effea181ee50f4003cf53d094d8f4021ff0efec9b46d9ff573af782cde45188374cdfa2273d7c058de6df674d573937c2e939e2894fa8b7ae200925cdb1761c7d79718586d5b2c319751c59a02a2b86a32e728fef2a7266a097dc823dd472d9c45cf8eb2d46655a7fd249d33dc629759f3d6b5faa631e168de62f702ab24eb956c90ac1432654bb9a5e915f0ef50eb491ab7e954ff6a6a97cd0492d4ccdc98c583f0e", 0xdb}, {&(0x7f0000002980)="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", 0xff}], 0x3, &(0x7f0000002ac0)=[{0xa0, 0x88, 0x101, "bc1484a91825827552b56d5d29a7c2fa0c24adeeefbdb3d01e6a29c0e5fc49876a562406a5b878b6cd07446679efbb51e6e03634e78761e2d044797fd233cef1858e52be191c8c85287f2e6a680af9982ff3b03d30d8081177bda72d6a45e982af699cb306b9081182256ab7687a31424c76a39e1051f3000712a89fbf95886d9bed472071dfa340ab"}, {0x10, 0x88, 0x8}, {0x38, 0x139, 0x4, "4da9cc9586f41a959f0ef93e9ffe7872f665cc7525f257c196c267a955773e25266e"}, {0x88, 0x88, 0x3, "d189b24060557c342ac107e1fa2af2ce03f6657618436b948cc4b285c9299e514c01155161d5c556f5a4538735400782fbadb10a0aa84414b20d0523cf226e037c62f9bf3b7c2a0c9a95066c5e2b3a3bd41f2dde826d24808aefbd8daebf11bf65361786acdbbbd511f8850b488d89b30530b5adb09a"}, {0x80, 0x93, 0x2, "430e313841347dd5a8e547ccae30aaf0db37e43fb86c7fd51c8b407dd56eb574f0e7d607db9cc89c3385ca83773b639c55e2df34b3addca8f11ac16918bdbed186a2a1da10630d86ae0206da2c85684dcb735a46ae7c261e8bf04382bf5d1c5756fb33a5eaa4573a3bd5e36dc2"}], 0x1f0}}, {{&(0x7f0000002cc0)=@in={0x2, 0x5, @dev={0xac, 0x14, 0x14, 0x36}}, 0x80, &(0x7f0000004340)=[{&(0x7f0000002d40)="b469649276df202ce6ae150b8574d721c30bb3ab3a765c00c10257ac5d3ebaa52fcf370455b19593af9b0cc0b1e54e0c479263b5a4e95b7849b8d81f15476e6654bc09068e22b5716e645c33dc4710fc1459980b6dfc015eaab352ce0a3af1f3eb898996221c54857b6bc9d3e6de87062185cf3601bb67a8ef34acfc4df7fad15d5008b0f6b1cacb06b1c0c659a61fb98f5be7adadcc63c8bbbffd6e66dd82264a19396cd46af57f071b450c31c44f6ab1981dbf37429848709c15ebe82e2fba19dd8aff5731b1ff7b78163d6fdcb819f9194db2f330dfa101aeca6a80e1e8733ad43bb29a4b121de1f5", 0xea}, {&(0x7f0000002e40)="2f0d3a5f0ead5d0639e3f99168d09789b69891ed313895b3acec0893db71935d13a2f3f0d73987017a5c8225a5ea9136920f6d28306adee6764b7c2ea084c4d0dec8aa62bc7ef6161417ccaa3648e87c87f7479153daf13f57ee8c2df66972f1e6064f0ed3ae3f0e9486ef33c57d73e1554721a39be62179b00b3397ece7cfa3b32038bf9aba3487fe5338c434d749a80369c784f7f385", 0x97}, {&(0x7f0000002f00)="3eb0cad07599807cc555d58c6b4c4b93a9ffb95f9c6f4bc1e122a718a67e346e04a3cc220af514df8801779fa2ba9fdd50c6b5976c2bbdb492ec71f63a178e3ecbed5b416c2624031228db8d1c584394231322c3e570f45d653203c4f6d1007e431ab2ec7878f10e649e057cfbbabbf90b16445acd060dc611b8104cb15650320d18178489a05178b4862a21c0f13bea40f76254499d1c4974020de0f29419c9caed3b", 0xa3}, {&(0x7f0000002fc0)="e8c402adb0d8e7ed0ef1c90128cc1e45478b518d9725658c0d8f2e3b6cfba78b6920a14ae5ff05e29a39c0f3190f6862d7d1bab97365241f2fc16c9e48d102e8b9770b2d57472198d5b1cd35ee98", 0x4e}, {&(0x7f0000007b40)="584f08f69e0fe61c9103d4d1f5892ff70fb159e7ac976e056aecf688eae5bc08e7d0815fdb1a8d02bd010e5bed3be37f47d53bbbb386a2809319b8f59a2d45e608cb128b0dc1be0e2559bb90897e4ab2c4d618bca7f7f67e362dff9a588e93fe2eeae09c418b889eb285894f07634ab1b208f7108a6d7dab1db60591a0edef525af35760589fdbd2e070dc1caf9dcf8055e330575d1f8062b13dd96b14c58886593a0e0000b7066fdc0e13bcb76db414bf58c158b54f2f977436b634dd056cfb0f6613d369758d658e9eb7e34c8f512bb475fd6b5903fa56857669b971d3b8289b233a88e3672a22787de0386756c5a48b230464ff0061c0", 0xf8}, {&(0x7f00000030c0)="6163308c83cd220e9ad4d4e81c8b8faeecc01ab172c234c8390317215356fa18587dd7725065b03a00275c508c92557777aad6d083f4ee98a3aa2d036db8cf0c9192102a78f2a33a66b80d9fc4255636438e4fbfd42373bacb79b8a52978365bffd7e8637233ff2cd2bea065644e5381ea5f3bf42c9f6f0621970b03845e24fb0ed2837bb3b2cfa2cc9c65ac6d7c05cbc292f2fa669f7bb2e61289da0794f8269f3b97362e98e351df6dbab26923d608bb0c87edb423fee93c391cba7110263fa10434d9ebef5d9297e360fbdbccc257f6a3309eeaaf13f1f0c78bcfce912ba1eb7122dd2c37adb42a069fc53ee1661fc765ccbf94", 0xf5}, {&(0x7f00000031c0)="e98d93d93281b47948cd0b4152e999bce7f8cf0ff10fe0e64b36ef9cd8cf61cb0e54337057684c71d194d9c030a631396b0626221667358319cf1c792cf0430001b6bfc87b4a47", 0x47}, {&(0x7f0000003240)="a011e71133ba86feec9a2a91bbe2346d1f2c82bb86c64e887bf20fb883bb6846524691d4a1b7d47e65311e1b869afa0453e41d2d2c0b4217196d6b7114643afaaced4b7cd17c1f391c95a4d6d6d88138f3446cef9c0f992ff1ae498ac579cdcf73e58f8068459f21bb2128f059fad450137f243c89ad530739d9f8b0ae27965231ed79c2b32d24a834c446db31c88987043abb86281e85b0f3c85db29e7c10690954bd1970809039988db8870836ce42b9447502e87ae9189ee5d29d39b527be04dba6b151151bbb821c09299165d3307aa3b0585386b36fe2b5cbf9f6b168aa12092adb8c63d96a41", 0xe9}, {&(0x7f0000003340)="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", 0x1000}], 0x9, &(0x7f0000004400)=[{0x20, 0x109, 0x800, "9f4a146947d9a6ad33bfaf9c"}, {0xf0, 0x10f, 0xcb, "7d0cb423f8d3ce4608599ed3367b9ca14145025e74c4a2b30015f24d943a810f9997908b06ef550eadf1cf86ba711e5fdecfc30254afdef83ebd1a7d87275e4756cfe4647ecfd16e910826971402c2dc7844c542165d9466d54593e9a5b4b83218b11702d5faf1722c6dd10686e6d28e22d6ce31692096fa7009b9fe3d6581ed83975f139c829f278a5777584d5fddcf4abbae6eb39a9c3557e7d53d5885a2818794f25c5114669797400adca4cf3566956119ddb100e540b82af429cf4bf9f134cbf9f8deaa3470e39cf45b70a42e51647a1c82dceda483339605252ea44365"}, {0x48, 0x108, 0x8, "b8c16aeb82dbfb994d497308cf054cb79fdc4f1f0ca2000e1186f4e53d7798feaf9eeefb6551a272c22a3c7843b33bbbdeb7786af9bdd2"}, {0x98, 0x112, 0x3, "8581b0497d0994f02b22f6a656314c484eedcb02275ca023298cc7ea918950d0268713e25f933690303750afac9c7900fe2980c790ec3730c6fc486435c188738d03c3258e6c84f81bc651e556c2d34a62d320fe736e5de35f49910ab84d87f3703cf46434adc6beb408078442103c15f567b38858f1463d5e15a0250d1f0f936f92d4cd1a"}, {0xf8, 0x1, 0xf, "39461c953a9737ca966fcd1f62c99ff51d1facf385d67f91a595ef8419b57bcae3cfb579e97613f0aa3b7412dccd44514d8a0b526453ba6d72c38bdca47c8337d966fce243376488542b8212b8cd315c09b39695451fb039843d7bdde59fd115dfa25c8fcddbfe6921cb83ae6b7f4933cc4197cabd18cbf9cefa6a7093674c6f13cd9ec6609af22556970346a145b59028937835e70b3d8a343e64cb2bfb50fa8d61f45f6c475988030597b7063b4d3779c52208d6ee96a48a9efb644ab3d607c785d3bf26fd10ff0a1b5f9247925904d4f17fdc423260370e288a497667057a989a3cbb"}, {0x18, 0x12d, 0x0, "9c"}, {0x38, 0x102, 0x40, "4b07e5cbdc606e71e9cc7efd37008acb0bd53f6c09c9a1eb2d6a3d291bc7dd5b9e0d2f8b"}, {0x20, 0xff, 0x2, "c829c19f003597e4c68a4671cc"}, {0x20, 0x88, 0x40, "81d95a221daf5928060ecd91"}], 0x378}}, {{&(0x7f0000004780)=@xdp={0x2c, 0x9, r3, 0x19}, 0x80, &(0x7f0000004d40)=[{&(0x7f0000004800)="c54eb74570a577d810a6f78d03d50c23c2ec57a84b29b65a96a89960ade3662d269d4ffd412205b034367843f892316f72b5fdc9da993ef5f3b397d12e72950047b9d272e4f3c6a27283f434b2983126eb90eca7d03957", 0x57}, {&(0x7f0000004880)="dc53", 0x2}, {&(0x7f00000048c0)="f5b17290df90e147d0d619db7d665becfff9b9139a468d8d8e7afad0f193c1618d3386138f4c35fcaabfba7c38cd7d849c20", 0x32}, {&(0x7f0000004900)="c640fcfb49d9736ac4f727c056408e51479ad3aac97e449d4f691333f6e5b7c51c8b04d2c0d2baf54a99f2239887cdb5f186747cb11a914672f6fa66af5491dc8d209e71a40ad1f080cda866d269bf1c2093926f23a407297b27ab855659cd04dba2142153f62ba0e1d0bd24d33dc713f5a4df116f86dd371cd90816cbd72a8489c2", 0x82}, {&(0x7f00000049c0)="630b4b487047cfae9e91d32b82031c5778ecd1c4363891b038551d2e9d2bb846ca7c98f331176fea4f9a9c9bef79e051838073d097946084f52452bb18c007393d400dffab662c905c2354f33f4d2556d76377463b7fcaf8f714d6942009da490b00e6baf0902a64c4e50fea401bef82da67184b1bc56725ea8c4fdd83aec2cdc7906acf71082398852a7b59cd0781ce08ff717ac302421fe98720ab4c6ec529a5c176fd87773bbd3f5b1fca96249f0e7cd64b20871dcb9aaed204881c7e9e0cb3b749cec7b2a46da9a744d4c544e97989d5ad51ef3e92325067f61cab5e9e45631111", 0xe3}, {&(0x7f0000004ac0)="d8ef9483e9ccb8fdb22e83820f8afce501e1", 0x12}, {&(0x7f0000004b00)="21becda1b16fbb741ce2644f8897d1db902699e30d764a62fb54f22029d1bc412d548911eae8bc48e6dabf73fceb75011430452e5e112bbbb08215d01c48ca7498ddaa86d5128c6ad1aaef5aaf3c3a95f733f0d0ae30ca44", 0x58}, {&(0x7f0000004b80)="2818e7046e7eaa9ae3cdf037115aac69a66748f455f89ad13e11c24ef979ec6002e0618ebfa928360fa21aac958be11c0c20f75d7142a3252145c1fc43020198f3b3852dfab5b0851883ab5c1699acb8b3b5b0c81802f21d45df052328d2ea8771f5d1d9a2ad58249e9adf6d690c82155051ad3e1f3a85c73e5988ec84c65364d383352c6d84d0c18ec3edf399a578af95d2c1a2af90f055271d8901617a065008bea7599f75d18bbe85e879cca97d207e88ae030bdf963a7fbb43b62e6b164913a319735efc2e973dedde67ca30a4", 0xcf}, {&(0x7f0000004c80)="e9eddcd4bfc3adb6f212386f916016cdcaf051a32851992489b20c8c6da7e80ee35cbf1977ef1a0db249a943dac1ba31d9c1c357ea34d333b97b13b52adb7dc7aabb30f181c7f15cbac1fc47933d1adfbc6523f2245217088d5a422a905b4a527bfe29af22098792238d7c2d1f41a101444a198902aa5f5e86cffbee692d284fd7da213a02d5dbefe722", 0x8a}], 0x9, &(0x7f0000004e00)=[{0x1010, 0x1, 0x4, "50e0ecde196215eb36dae1c4e3c847a77902f7b985d1ea3a3bdefc1ca2e8479405eaf3bbf6cf77fd58adb1863b8c529097c25e6d5da7bbce7e5ae24dfcffb67fcddfffffe9f2420e481ac624359971993a5c349a54c648ba2c5bb38c275d344732728c84f61dbbb6bd4b5e4824401710c7c38cb8b96f36ee15f1df0a88335d0910c8030655826a50aa50b3bc0aa1db7f1ca6993d09716f8835273c7d7de618a08ac927668ca72a495203b551eaf0cd424a7e1c7668a74a054f83ebe8847a92b1da1902a7d70706390554be79543752b12934490ac53f6178931cef970659a8de9a1e8d5f271c79f1dd3cda414c79d3588f29cab108be914610544658cbd4e6a3cb27f87d4fbbc0def99f1e7ff60a4ade289fd965cb7965f54dc49a8aec19d8e9c22697829aa2de0a32984f3fbfc80a8c56022df6bc8ec22b8286a86636c1a4d53bf3d9f81a155b707e4672e44019449684f107d2e9706338e021bd737c5a380c78a8c5411d69179a686b7aed11ee9b8ecf1ef653d85af03eeceab8e319e5cfdafdba5d3131680408afb7a170fbdd5b7b9211297e0da68a29f703ef288e95606168967342ba2aeff83738321b14b865d4e440f8927cd5bbce63c662b17f812eba21b1494c1b236cd5ee3c60c0a8482749a3ec517239371dd404f5a562a1a5d0773adb41d5786c276f5cf0dc090ef673b691e4c7d139e8d7abca9eff312b814d06120a3d80dbe33c59f0cc8437d992c5435d8d2440108cd59f9b5ec311a34922526b83e203f527c4b7704cee49acf6a16a0d4fa2c4a1dc44df4f7cb1d9416a27681225fe1b5feab712025da8e2680c9d94bd5d962b1191c6063a05a3abf00d7f957671cf2134fe5c9a13c1e6a03cc302b10e70614b1307a4527865871dd65883a178c3d9ed224f5749ec9d70f36f6b76669d5c28bad9ec37836291059d6fb15c295a9210137050b4d344bd2825c1ff2e9abd9c30c70903e51c53eac45a7949ff974670c5eeb0388c7919c10e87f29692f57ead6902bb511281c6cd47e8f306513811a7f3a7f4a487c724b7b2af037c25ed1ed3184a47e7f55d97986e5aef2796fe7fb84a5478643129af80efe922f9c397852e81a52826e98bdcdcb408b26c449f5c6034fb4717c6dbf459d71849f5fa4b87b58da84356a058d460e3f4a255d43c899aaec9e11bcd211b29befd5214c3b792ddd706daf130c86648b574b64faf69bbb5dae5e7d170bfa559849ab53aeca83550d69b9a99f3aa5ead4bd3b914adc4d7a5f2fbeef111d6eac8a447e6e0e5d9a4a5b9967be47adad09504a7b41441b159765443cf345db6cad57645b6b347e11a6264fa83d48894f50130a480fa0ba74283dd4e31209d4e88ced8d64915d7cfb53dc39d49a0767864d1a5286dc17190b0dbdf9b6bc05ac138683e42c64e81e34a3b25004e7fce7fcb14e0414564de8e849115d27537df2c96cab4821255fb7a3e774bc729343295f012316e6b51b3e448ce7b9dc994fbd7c83d9c5d51dab6e78caed26e3365ebcad199bb78bd1a6c3526c88b05156bc6fc48b069f2ea160b6620516ce8b2b8c697c01b5bea7ea01bd5c2cf5eb3ea164a2194eb808f077c920df6e0f6eb72bc710b1d696a27e3d78c582b1753ccc25f5164f64df7f8c95b7eba147a6a94d832d060539ba1e5b20e48f8ffa2c1188032f77c3778776cb351a8fe0ff0a266d5963a97bb6d8066533649bd52ea8398f9e06e9c55dba16d6883ab1917a4cef055d57215b310ebae2fccb74f928f2ae5eca1ea6315d5c51493e3270fecd995b887a344bd533d05adf32278db765b4e95500252123cf43aa14073fe9b2ab5581fd55a5433175b242dcb12ec42eb0366fbffb5ae4b57fe992405fe463292b2d137eedb15c2a50f269063a212c78e7f56c712ba2c10828449bff5e3078a093f13d3ed0ac85d95b70a581a81148a1e6ba5e54ce3e27617af057de34237a004447586d9d3a127fe49f432fb4b1bee6d2bdb3d0339986564f481b31cde22140db9c0972362b826c4da429a4d9e970755c2444cafa553ec8a1199f4fa75c5dbd6d6a89b0ab1fa5ec5edec2ebc62bb64b4ead589384655e0f13f0736a03fdf7e0d29851e32ec8acd4aa1ae5b81154783bf0aa0bde267ac5dde5757d18e15a55bf44b26a6ca677cbaf8197c7a28d5948186401c65ede5590e92c983bc603b04923eda55d26ad99747136d98ba9b4c1b411e08038a3f73a8dd01ef316d43a3e1a280aea1af9c762e121cfc2706e5778ef70d714d3cf7499d4e2ae351ecdfe4865c03b47fa447e03af82462c58e23d3718c1c1f11880acc365f274a391dad16fc53026a32ce197e79d288491e71ce97277f6f7fe13e1ad5aa69659aa6450cb133a79d3f990ea2ef036aff206d3fcd891449dc98bfd502e95f00d62dcc2cb15904b858c1abf605763d1308e5fb1894164b87aa348993b154d38f49457cf3aa4e70b144aad54846a951734a5b66eb0e2d980b9661f5487d8451811a419977b7ffd05bfe2a9e78efb2c8fff97f3d09dfd70da4feb564a6d9c2e3b43270862fcbd1d3a37128a6f2fb287d147b132fd6f3aaf9577cc1734eb2d876ed23b5da003d476633e6edf9595fb1895cedec9e6139faf27432ab948e5186d944e7e210bbea0d877ad0a32ad5df3b06f08c3090450f57c0fcb8524ad0a69af276ec5f030602226f9c41753ee7e35fff4dba4b77052f9a58e85768653284c7cad0d1216d246f15c9b93240b6cf1a309750798b2b09e81e79c227f307abc9cf0086ee49df6323d5141d88f06bacdfcb47f4b7e186e7aec6e42323fda7f7dae7ec55c30e63de5accb74fcc1fbb6366527cd1d83d77783fc53ddddc20e8d981de0eb668cc0f83c93141a5c456f919aa35aa155b5cdce7164e07261e42764d1e439f52119274387fa5b3e37ba7516e58d420a9a11f9e43928635888d47b2de3851096e54824ad016d228078002dfa53b3da6c08ed1105c1685cb263d87aadbc00b0f67b344be2c76df56e7c058515ef5cd40d25e645c39907e8e0dbbed0818ba394a99ba0fecf18113e9fed70d24b4a93ee106e485199f521e648da544ff7d5b8c3c003decb9bba8113dd996f81801a8b2dae7ccf828539bfd0dd62b7f7dae19b87fc134cb770aed6e7b7d76a7974e8c03c825e8b3d803379462303c9a797678162b6e3ef1fe34fdab19e68d55ccc07653ba749fe27f3276814b26cfad5ed63811bce16c7e83842a726ddb1d752f8ac885480ed7d50bdd0cde7b1e3e832bfc030936814328898d401b0660e8ca387bc45b57a7380cab084eca2d5d18053a02c32b636aee1e13489103387a32638ff8888ac453c9ba6e58fdaeddbe69764a5c2a8cbec1022849c85ce6e1c950dbff9a8e880b08e7f14e9e048383549d24ff2b21d9817342e593280a6422ff3662df0341374dc5aceae6df9b7a6b66bf4b5cd78d1f2b05bbbe8657e7b8514a7b9e9d5e2fe4e82aeddb4df2b59b856f842b86698782f6c1c9ddb312602278dd7956545dea1fa80bf2c5108761ae6b34cfc0773ee87f7ab584ecb9da25a631a3a57a825cd67864e5bab6f62ecf5693704ff387508840238b960c06ee483f3b7e66857d7906d062356d97876ba3a43494ce2421f85ac80b3757b6392fb321fb030eaa300ac74afeee62ca0f3853243e2a5e8fc11263b0b11bb59beb05d4051af97dd368a05440fd3ca86696520ecfe0149a1a3c10d797412c20d93d388a3f54a2146290f492d4a21a1ede106017630d000bc6291ede2ddb1c9b5b29ce44b767fffbee9357ff42822392e02826af40ecb046e84018544aa5a148f7bafcb2c481eb689ff1981433e0bad6cc1b9cdcb3de8ed1267a5e6a3e4b9c6fac08c3d10b8246c8d68a7b37c854542525164491ee3033ca826f0e9634b8621bdeb6929b4bac4342f475217cca855e3a9d8c0cf98a34d6e8a5f7dde91379a1d273729f3f0d2f2a6967f430036327f084bf5fa2ec551567fde334963186919600e5a275da1f21aa3c6673adfc23eef3ea2fba70c41551379d8721a921f2b83ddf61ff0de46c0bcc7f2a4f38661d2550fd35cd6187202be9a6dca9a1b2112269ba2beac1c57baafd8acaa505951fa518012cb74a16055d9326405e93fec955e542a76b517b1ec4f5ca4442ed7a36d51329466377987115800435f1578363ac7141a629ba29e7bb1e13d6e0c9a2199e6f5cb650b8ab8f82eb62b2fc1b24d2f5e3e320957783be7c2f6ad1c108e77546328ebd4a0d47555f206bc701ab54b83b9739b94d21a8b3ee6695aa85b046e4fa654d01be520c06b26c8e9ecb0241a8cf411dc0f473c54ad4b075850326c2d23d667d1f66273ac57db455efd17cb2fa24f1cd38d1c0c465328fbd52411eb6da91845b116c04234653f16bb3a45b2d77d872dfa40ae017f5b8f7b220e4f82185d873f4d690ce6377dd5abf077bd87989a9bc5d032415a1c29e926f2455b07114468f0142978e65f9107922abc200cea156fccf3b5b6a6b11096c3d564b26ddfdb7b8b052e0bf75b94822848c57a69e2b518bae154b387cb36a92536cd64698819f55d7d8f937890afc563950e6b860e445be499aeedaf7ff32974df2a78eefc7ec13c1f380acdb91be88f693ef9f36c292e18eb78c8ec4af555b0ffe1f01edd6dcce7862e0fc619463354fd6c3dafbec86425c07fd70178ef11a0c7f36df362162a60e385dd126a4d9a6d6f0e46e650d6eac1285e33833bd0b458adf6b0844074e4a16e37c63aef599fd112d60d7536e3dad6212a3074fd08995e5e0d52126b3d5120f6bb1036a4ccca09ca9fdcd0b9a27abe66675cfdb93a246c2b4377e3ba1792e7bbca5106bb62a9c76a4ba873603aa4674a4b871ad86a44cdf9559bf23bc94412c89ac1f7fbd49a6f45fff6c19963b9719af5fc42c8186c74cd4c4bdc3c47c4ec07c76d258a89d116efd0d8857baeb5a80c29abeb334078620df567cd705fc47ea00e505e0559258d7ac85a65744ac2fbb2d44fbca9f8688cc38816ad50cd5bb27f12f2400da2f59900056a36499481d74a11c0ae41db2770b309f66f4995be2f9acbfa900997954cd089a5bb22b0545c7a4b0e18fa3d3437897f8cbe4ab40fd6a5d922b8d93dd760c8c8bc0c1809e8804640424179d5b2fa897dda7bb4dd48aae2065b00e013d1834b0e216c9f5f5f3d304df764e3ffc4226a0d0bfa04901a4cb4c8eaf955847f7369330ea78609246674d7c6a759d46e7eeb7c37061c8870558e1a8dcb80077100083f08736fb2e74e63669c31438b4fbc6d85721f1f2092f6da97ec33c09dc45cfc8ac3e466d80d952e4921795f73a0d35c4ad7f9c9d4aed9c1851ffb8c4ad2932e3df251d2e02cb82466a5116e9c1d0ae22d363a30ffc5d829cedbab512c10a1523df2095269784d0732aacd86b6c83c66646ee2404ef1ff66ed9a514e073ecc8f1e8ff4a3958a47de887b7a83231c74674978a229f3fc63947508b724e2bc9d768372f8d768dceb5f6ec57dae2eeec752c8e78979d4e16eae56066b87ad2ab056c72d89342903091ac907c3e001c49986b9019382c9c042c31d6061a27e5d2320a0e35cd0ef61429ae84c16da19ed2d7a29b75f1c7aba82ae3b02b5f0f9b57144f8e16df9e75e917fbe9f7ac42955df0d5a5163a0c0d3edf973ad30fe1d951a5c4a663bc189def96e3795956de509ef90747e8dfc09cfb96f7f5fdcebf93b0b1f04be48247e4bf91548afe865d118cbf8ca203e1b2702e542e65ea0e6090b62fae8fecf9dea6160ce160193c3bda0ededae0a3e41175580147468354757cdb"}, {0xa0, 0x0, 0x4, "2d8dd91c6693cb1e6ec005468043a562ed670c3b8a0973cc1befcfcfcffaf47e431a2af8d7f70259d20c3b6332b5c0e41bec31093c7fedcccff312dfbbc3b707ef44836bf2dedba5d26672ef2489dd51559016b854e95232c643443d7263a8dc1266a9ee6b5d6a2bd6f3e10e0c6172bbd912544a18ab5e62625cf58f50af0d2e08c7c9bb3e43eff2f64a63b328230a7c"}, {0x80, 0x1, 0x2, "0c2fffe143bf0e89120b2300f1758446acbdbc683c24930fb29dd687312af1c0487107034912626b9b15a781677460acad094d3ca0393042fefe6d110faf13d9fe10265665bdf27a23c35c568f86cf80de020e14c08aa49d221881a9d68b18271064eac73d935fdc7a8f83b29f2e"}, {0xf8, 0x88, 0x6, "5186469977ab438cee071102890fb30450ce0b392b462fbefecc2c5196e138f92deb03ec1be1796733d3e80328ea91f4579e8c02e533bbf4f701ffb23191ac0424f758bacfc3a51c9fca94a2716408fdc2477f9a5ee9bde9e28304ababf86785b4d4b843c5a15a646a6eddc1585e12b3f543378dd7ecdbf9fa44a53b956d95c0429b6643b061cb898cf3e4b9d09af9eaf71633f3349eec249aa9332c1219c528b1f8de560b00ab5155a3d2e617c1e600b0506fae29cda0e288f41a31e6fa3ec17a366cbcd0f68b404a22f264388a31dd84945b5ee7b5c64de50c4e06eea091025bfc14011b"}, {0xf8, 0x119, 0x5, "fb7c73b67bb11e73f7e7ac6080bf33912e9c0e3f34a3eb13d5d31fb28d5012321643621205251aae253e5e366631eefac264e0843ae7bb33289da4e23932f7fb743407fae1c6fb845d79a82ce94b6f6de569d4790cd6d5d064045671e1435e1e86218b8a23d93e84aa63200e39045ecc14394d50f36779d88cb9b17ef929ee12917e8cccbb9c98ad96c79c249da6744a44bd32c2245aa7dfedd8b6075d4285b2182c357942e982c73d78b17dc20b252b0fa24bff8525fbe231610c0cdb08257f6e171c564881e1f38c60620444a1f1d43a4bc8fbce108b2a9572d8a42760efc2077db87a"}, {0x98, 0x84, 0x10, "2ac7df5e6931d323d37ce5ed92c5fc29a40e7ffc06779f7c974956e42ec98a49969852fae8a5a2debc68efb0a993219e2c434390a7a90497c0de205c53c780543115b07422b538f3ac3564b59b2423681d85c03713c1b73b112bacb9a3c3d7941d8cb6b1d16dde2395c2646f6a7cab4be875ed87193b2a610c580151f915d3446f"}, {0xc8, 0x104, 0x8a42, "621de244877c3a9638d758e60315da62e7407d8178e79d16ffe069afa04c883768a2e24934a758159bd7efd76838eeef89d70f84f049068f9f67080c53ee271323ee5622e65e6fe3e5c5b566b8b7d370aa3442cf601ce9db455efb3d235da3b4a4ca7d8256d3bbeb8424d917143995f5b004a3e4fc2abd7a50cde2d82d1697dace7841fbd293081ef7bd7cb01200ab8a25da9cecd5070622f1d23a1c3cfcf0af8af9e7080023b5468466b0832097a4d2e31962b000619d35"}, {0xf0, 0x114, 0x3, "c6700e5bd77c85d9b9846aa33bb526c41999c25349ac43d58e1d51b0dda8d21191433162efe0d60a4222e52e9d0ed9e7f7b5222a044eff352b0b8fa10c47ea87d21f6d4a1c7d4208d1e8db5486437ac7fe677f6e376dbfd67c3a20360cd5d71c4778633fe3227479899699ebbcf61dd2765b560b7d287a9f2d60b9ab970c75ab639aa8c9888a3903871646574df3275c3ca7154dd8476f9f77345fe1a6e60229c00f8bfdb497720cfb1fdbc9d1edf962fc3fa7b07a9ad95ddae17557be470edc3a1d26e5ac85b7c97e609a383cc3ea71c44181f88feb4f59ca"}, {0x10, 0x108, 0x81}], 0x1580}}, {{&(0x7f0000006380)=@nl=@unspec, 0x80, &(0x7f0000006400), 0x0, &(0x7f0000006440)=[{0xe8, 0x110, 0x2, "dd0caf28de24385529ce67785e2326b925da402efb4f02bfa716309f655a3444169f39f3c6438d2b724c1b3a263e6b638b2bd704cd9c3ff9f2cc79503c3a1d2b875ccc2e9c0ede55885e56226079ff38464223820f2a776d87840078ef60ff88367b4126737fea8335dee30da1f364d2f949d01e06b736def900159707df92bffd759135df35d2a07e5acf7edb7c8213889c77e652fcec78aaad8f0faf100aa1c3244fe4111fc7857a493a448d2680aa39f62813b478dbbc9b6c64003990dbab31e7ffc61572c83443196346481f1d612a"}, {0xd8, 0x118, 0x5, "4b60b14193ab9ff0db75b005bf82405f8bcf5f3b0c570f1e332e58ab8f589c0493928f685918b692fd3304b50e538d4076366b7d44ce07c92979ab0710823f664247d764218cb8e35e26b9cbb2d1a7c2bac53ff7201a1ea65ce4987da9686e3ccac520267464afe01d89344dc21a89704c33559cce2ce8fa01737ef1b0db1c3b4e803a3f6f47a21a9f07e8e3fcd82ac0b69eb37a994a89c4ed6a490d08d4e5bb8be0b285a7035b39b1f410fa59c3289e2371efd647e1287ae0351460dd2f1f6617"}, {0x70, 0x119, 0x5, "ced554ff33d28a770f7220315cbda3e89b02a5b056101baa6ef80e78d94a882d01725587285a1d0c0637013d652840b59f29eeeeb170bcf382b80af3efb7ae4f74d51c299bb573bdede8a9f978384b1427391e64e6468df91f4a97"}, {0xa0, 0x111, 0x46, "f48ba800c9302dd690de9683aa4c878412a59b6bb4b44ee1422967abba7c2a2cb99ca5a28448ceae7f83543eecccedb30137ea567107a10c36cdbd0b465c01b59be3094b755ec0f98073a16d9b0fd626932779dadb11d825abd41a7f42959a71a6f4644a87d116ee0aa88b1308ca2510d2f79039847c8b30f7748054f020e1ca4c1611d2da60074e330aed25"}, {0x68, 0x10a, 0x9, "16ee146ae83c8542c790689b95e5a454c81f9fc95559547722338aff45ed6158cf3c8e6bd0e089bef8047f7c6742df97df02be0bfb726b1e303ab0cb04ac9372445d13561e84bd6d8ded3e070a5581d941b49bc81e83"}], 0x338}}, {{&(0x7f0000006780)=@l2={0x1f, 0xae94, @any, 0xc, 0x2}, 0x80, &(0x7f0000006840)=[{&(0x7f0000006800)="81f8ef37cf22a782679fbd90008f469f9fc521b0e7f094a7a274cf029829003ba019fbb66d06dddc6d4d47449260", 0x2e}], 0x1, &(0x7f0000006880)=[{0x1010, 0x111, 0x7, "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"}], 0x1010}}], 0xa, 0x0) 26.400469ms ago: executing program 6 (id=4012): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2139, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e00000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb, @void, @value}, 0x94) r0 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x82000, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x7005, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/191, 0x4}], 0x3) 25.812664ms ago: executing program 2 (id=4013): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083911000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) (fail_nth: 1) 0s ago: executing program 6 (id=4014): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x101700, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xfffffffffffffe7e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000, 0x100) mkdirat(r2, &(0x7f0000000280)='./file0\x00', 0x91) syz_io_uring_setup(0x1714, &(0x7f0000002040)={0x0, 0x0, 0x10100, 0x0, 0x0, 0x0, r0}, &(0x7f0000000080), &(0x7f0000000140)) add_key$user(&(0x7f0000000440), 0x0, 0x0, 0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x18, 0x0, 0x1, [@generic=' \bho']}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000380), 0x189940, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x258, 0x32, 0x5, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x100, 0x1, 0x3}) ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0) kernel console output (not intermixed with test programs): ce 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1592.392456][ T5869] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1592.409205][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1592.698430][T20395] Bluetooth: hci0: command 0x0406 tx timeout [ 1592.704751][T18963] Bluetooth: hci5: command 0x0406 tx timeout [ 1592.768189][T20395] Bluetooth: hci2: command 0x0406 tx timeout [ 1592.768311][T18963] Bluetooth: hci3: command 0x0406 tx timeout [ 1592.886200][ T5869] usb 1-1: Product: syz [ 1592.890464][ T5869] usb 1-1: Manufacturer: syz [ 1592.895056][ T5869] usb 1-1: SerialNumber: syz [ 1592.922240][ T5869] hso 1-1:6.2: Failed to find BULK IN ep [ 1593.724866][ T30] audit: type=1400 audit(1749110144.374:597): avc: denied { setopt } for pid=20511 comm="syz.4.3698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1593.780886][ T30] audit: type=1400 audit(1749110144.374:598): avc: denied { write } for pid=20511 comm="syz.4.3698" path="socket:[63579]" dev="sockfs" ino=63579 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1594.061868][T20526] FAULT_INJECTION: forcing a failure. [ 1594.061868][T20526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1594.091311][T20526] CPU: 1 UID: 0 PID: 20526 Comm: syz.2.3702 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) [ 1594.091338][T20526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1594.091349][T20526] Call Trace: [ 1594.091361][T20526] [ 1594.091368][T20526] dump_stack_lvl+0x16c/0x1f0 [ 1594.091396][T20526] should_fail_ex+0x512/0x640 [ 1594.091423][T20526] _copy_from_user+0x2e/0xd0 [ 1594.091450][T20526] copy_msghdr_from_user+0x98/0x160 [ 1594.091474][T20526] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1594.091508][T20526] ___sys_sendmsg+0xfe/0x1d0 [ 1594.091532][T20526] ? __pfx____sys_sendmsg+0x10/0x10 [ 1594.091552][T20526] ? __lock_acquire+0x622/0x1c90 [ 1594.091607][T20526] __sys_sendmsg+0x16d/0x220 [ 1594.091630][T20526] ? __pfx___sys_sendmsg+0x10/0x10 [ 1594.091669][T20526] do_syscall_64+0xcd/0x4c0 [ 1594.091694][T20526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1594.091711][T20526] RIP: 0033:0x7f5bd178e929 [ 1594.091725][T20526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1594.091742][T20526] RSP: 002b:00007f5bd257e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1594.091759][T20526] RAX: ffffffffffffffda RBX: 00007f5bd19b5fa0 RCX: 00007f5bd178e929 [ 1594.091771][T20526] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1594.091782][T20526] RBP: 00007f5bd257e090 R08: 0000000000000000 R09: 0000000000000000 [ 1594.091793][T20526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1594.091803][T20526] R13: 0000000000000000 R14: 00007f5bd19b5fa0 R15: 00007fffaf87cd28 [ 1594.091826][T20526] [ 1594.283478][T20528] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1594.747885][ T5871] usb 1-1: USB disconnect, device number 86 [ 1596.268381][ T5935] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1596.508284][ T5935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1596.521027][ T5935] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1596.557180][ T5935] usb 4-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 1596.658772][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1596.910179][ T5935] usb 4-1: config 0 descriptor?? [ 1597.139436][T20548] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1597.152331][T20548] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1597.161518][T20548] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1597.174282][T20548] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1597.190940][T20548] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1597.529946][ T5869] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1597.532708][T20542] delete_channel: no stack [ 1597.566639][ T5935] usbhid 4-1:0.0: can't add hid device: -71 [ 1597.578464][ T5935] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1597.600133][ T5935] usb 4-1: USB disconnect, device number 109 [ 1597.657332][ T30] audit: type=1400 audit(1749110148.704:599): avc: denied { getopt } for pid=20561 comm="syz.2.3714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1597.699957][ T5869] usb 1-1: Using ep0 maxpacket: 8 [ 1597.711729][ T5869] usb 1-1: config 6 has an invalid interface number: 2 but max is 0 [ 1597.727736][ T5869] usb 1-1: config 6 has no interface number 0 [ 1597.743234][ T5869] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1597.766502][ T5869] usb 1-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1597.784292][ T5869] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1597.797073][ T5869] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1597.809297][ T5869] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1597.818672][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1597.843535][ T5869] usb 1-1: Product: syz [ 1597.848592][ T5869] usb 1-1: Manufacturer: syz [ 1597.853276][ T5869] usb 1-1: SerialNumber: syz [ 1597.873301][ T5869] hso 1-1:6.2: Failed to find BULK IN ep [ 1598.368289][T20395] Bluetooth: hci1: command 0x0406 tx timeout [ 1599.200613][T20395] Bluetooth: hci0: command 0x0406 tx timeout [ 1599.248401][T20395] Bluetooth: hci2: command 0x0406 tx timeout [ 1599.254414][T20395] Bluetooth: hci3: command 0x0406 tx timeout [ 1599.261386][T20395] Bluetooth: hci5: command 0x0406 tx timeout [ 1599.535359][T20588] ubi31: attaching mtd0 [ 1599.554202][T20588] ubi31: scanning is finished [ 1599.559083][T20588] ubi31: empty MTD device detected [ 1599.938686][T20395] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1599.981939][T20395] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1599.991171][T20395] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1600.000087][T20395] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1600.008617][T20395] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1600.065941][ T5869] usb 1-1: USB disconnect, device number 87 [ 1600.169705][T20588] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1600.178408][T20588] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1600.187076][T20588] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1600.198212][T20588] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 1600.208134][T20588] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1600.216868][T20588] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1600.228636][T20588] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3895992278 [ 1600.228660][T20588] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1600.232741][T20594] ubi31: background thread "ubi_bgt31d" started, PID 20594 [ 1601.178246][T20597] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1601.215858][T20597] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1601.316694][T20597] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1601.429614][T20597] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1601.457019][T20597] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1601.480667][T20597] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1601.486746][T20597] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1601.500820][T20597] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1601.770032][ T5869] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1602.326490][T20591] chnl_net:caif_netlink_parms(): no params data found [ 1602.369062][T20395] Bluetooth: hci1: command 0x0406 tx timeout [ 1602.401705][ T5869] usb 4-1: Using ep0 maxpacket: 8 [ 1602.424634][ T5869] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 1602.447782][ T5869] usb 4-1: config 6 has no interface number 0 [ 1602.478174][ T5869] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1602.514958][ T5869] usb 4-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1602.554264][ T5869] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1602.573389][ T5869] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1602.583544][ T5903] usb 5-1: new full-speed USB device number 101 using dummy_hcd [ 1602.591385][T18819] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1602.627850][ T5869] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1602.638693][T20591] bridge0: port 1(bridge_slave_0) entered blocking state [ 1602.645797][T20591] bridge0: port 1(bridge_slave_0) entered disabled state [ 1602.655798][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1602.666358][ T5869] usb 4-1: Product: syz [ 1602.673781][ T5869] usb 4-1: Manufacturer: syz [ 1602.678736][T20591] bridge_slave_0: entered allmulticast mode [ 1602.686031][T20591] bridge_slave_0: entered promiscuous mode [ 1602.692889][ T5869] usb 4-1: SerialNumber: syz [ 1602.712458][ T5869] hso 4-1:6.2: Failed to find BULK IN ep [ 1602.734863][T20591] bridge0: port 2(bridge_slave_1) entered blocking state [ 1602.752645][T20591] bridge0: port 2(bridge_slave_1) entered disabled state [ 1602.769667][T18819] usb 1-1: Using ep0 maxpacket: 8 [ 1602.783528][ T5903] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1602.801617][T20591] bridge_slave_1: entered allmulticast mode [ 1602.808933][T18819] usb 1-1: config 6 has an invalid interface number: 2 but max is 0 [ 1602.820772][T18819] usb 1-1: config 6 has no interface number 0 [ 1602.828028][T18819] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1602.833534][T20591] bridge_slave_1: entered promiscuous mode [ 1602.838167][ T5903] usb 5-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1602.848162][ T5935] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1602.865091][T18819] usb 1-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1602.877869][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1602.886125][T18819] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1602.897213][ T5903] usb 5-1: Product: syz [ 1602.901569][ T5903] usb 5-1: Manufacturer: syz [ 1602.906167][ T5903] usb 5-1: SerialNumber: syz [ 1602.916101][T18819] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1602.928013][ T5903] usb 5-1: config 0 descriptor?? [ 1602.935755][T18819] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1602.946606][T18819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1602.956110][ T5903] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1602.967214][T18819] usb 1-1: Product: syz [ 1602.971603][T18819] usb 1-1: Manufacturer: syz [ 1602.976302][ T5903] dvb-usb: bulk message failed: -22 (3/0) [ 1602.983884][T18819] usb 1-1: SerialNumber: syz [ 1603.005803][T18819] hso 1-1:6.2: Failed to find BULK IN ep [ 1603.012761][ T5935] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1603.013719][ T5903] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1603.030791][T20591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1603.037676][ T5903] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1603.039900][ T5935] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1603.064270][T20591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1603.092099][ T5935] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1603.094289][ T5903] usb 5-1: media controller created [ 1603.109305][ T5935] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1603.122808][ T5903] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1603.127860][ T5935] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1603.149657][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1603.171540][T20591] team0: Port device team_slave_0 added [ 1603.179613][ T5935] usb 3-1: Product: syz [ 1603.184433][ T5935] usb 3-1: Manufacturer: syz [ 1603.202655][ T5903] dvb-usb: bulk message failed: -22 (6/0) [ 1603.217667][ T5935] cdc_wdm 3-1:1.0: skipping garbage [ 1603.223993][ T5903] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1603.244870][ T5935] cdc_wdm 3-1:1.0: skipping garbage [ 1603.250358][T20395] Bluetooth: hci5: command 0x0406 tx timeout [ 1603.253026][T10455] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1603.271604][ T5935] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1603.282403][ T5903] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input48 [ 1603.314866][T20591] team0: Port device team_slave_1 added [ 1603.326054][ T5903] dvb-usb: schedule remote query interval to 150 msecs. [ 1603.333019][T20395] Bluetooth: hci0: command 0x0406 tx timeout [ 1603.369778][ T5903] dvb-usb: bulk message failed: -22 (3/0) [ 1603.394353][T10455] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1603.398168][ T5903] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1603.425839][T20591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1603.434183][T20626] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3730'. [ 1603.437395][ T5903] usb 5-1: USB disconnect, device number 101 [ 1603.447663][T20591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1603.475210][ C1] vkms_vblank_simulate: vblank timer overrun [ 1603.508916][T20395] Bluetooth: hci4: command 0x041b tx timeout [ 1603.509163][T18963] Bluetooth: hci2: command 0x0406 tx timeout [ 1603.515628][T20395] Bluetooth: hci3: command 0x0406 tx timeout [ 1603.534831][T20591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1603.538612][T18819] dvb-usb: bulk message failed: -22 (1/0) [ 1603.547407][T20591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1603.558346][T20591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1603.584427][T18819] dvb-usb: error while querying for an remote control event. [ 1603.585425][T20591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1603.624258][ T5903] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1603.641283][T18819] usb 3-1: USB disconnect, device number 112 [ 1603.661942][T10455] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1603.694557][T19447] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1603.704537][T19447] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1603.721019][T18597] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1603.760072][T20591] hsr_slave_0: entered promiscuous mode [ 1603.773442][T20591] hsr_slave_1: entered promiscuous mode [ 1603.787786][T20591] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1603.799590][T20591] Cannot create hsr debugfs directory [ 1603.817989][T10455] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1603.989543][T18819] usb 4-1: USB disconnect, device number 110 [ 1604.278597][T18819] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1604.521169][ T30] audit: type=1400 audit(1749110155.564:600): avc: denied { block_suspend } for pid=20637 comm="syz.4.3735" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1604.605870][T18819] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1604.692674][T20641] 9pnet_fd: Insufficient options for proto=fd [ 1605.024560][T10455] team0: left allmulticast mode [ 1605.038029][ T48] usb 1-1: USB disconnect, device number 88 [ 1605.058738][T10455] team_slave_0: left allmulticast mode [ 1605.064511][T10455] team_slave_1: left allmulticast mode [ 1605.105821][T10455] team0: left promiscuous mode [ 1605.118804][T10455] team_slave_0: left promiscuous mode [ 1605.124526][T10455] team_slave_1: left promiscuous mode [ 1605.147649][T10455] bridge0: port 3(team0) entered disabled state [ 1605.196338][T10455] bridge_slave_1: left allmulticast mode [ 1605.206633][T10455] bridge_slave_1: left promiscuous mode [ 1605.214501][T10455] bridge0: port 2(bridge_slave_1) entered disabled state [ 1605.228711][T10455] bridge_slave_0: left allmulticast mode [ 1605.237170][T10455] bridge_slave_0: left promiscuous mode [ 1605.250536][T10455] bridge0: port 1(bridge_slave_0) entered disabled state [ 1605.658347][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1606.247469][T20395] Bluetooth: hci4: command 0x041b tx timeout [ 1606.298209][ T5903] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1606.463576][ T5903] usb 5-1: Using ep0 maxpacket: 32 [ 1606.558351][ T5935] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1606.667619][ T5903] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 1606.684753][ T5903] usb 5-1: config 0 has no interface number 0 [ 1606.752590][ T5935] usb 3-1: config 0 has an invalid interface number: 125 but max is 0 [ 1606.760907][ T5903] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1606.760939][ T5903] usb 5-1: config 0 interface 85 has no altsetting 0 [ 1606.762691][ T5903] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1606.773264][ T5935] usb 3-1: config 0 has no interface number 0 [ 1606.816758][ T5935] usb 3-1: New USB device found, idVendor=0421, idProduct=007b, bcdDevice=ed.44 [ 1606.820978][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1606.826021][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1606.835435][ T5903] usb 5-1: Product: syz [ 1606.844910][ T5935] usb 3-1: Product: syz [ 1606.850550][ T5935] usb 3-1: Manufacturer: syz [ 1606.855830][ T5935] usb 3-1: SerialNumber: syz [ 1606.856496][ T5903] usb 5-1: Manufacturer: syz [ 1606.879976][ T5903] usb 5-1: SerialNumber: syz [ 1606.887417][ T5903] usb 5-1: config 0 descriptor?? [ 1606.897050][ T5935] usb 3-1: config 0 descriptor?? [ 1606.907981][ T5935] rndis_host 3-1:0.125: invalid descriptor buffer length [ 1606.910930][T18597] usb 4-1: new full-speed USB device number 111 using dummy_hcd [ 1606.918786][ T5935] usb 3-1: bad CDC descriptors [ 1606.927891][ T5935] cdc_acm 3-1:0.125: invalid descriptor buffer length [ 1606.936477][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1606.991861][T10455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1607.002076][T10455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1607.015703][T10455] bond0 (unregistering): Released all slaves [ 1607.027854][T10455] bond1 (unregistering): Released all slaves [ 1607.102260][T20591] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1607.117540][T20591] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1607.170335][ T5903] appletouch 5-1:0.85: Failed to read mode from device. [ 1607.184132][T18597] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1607.198749][ T5903] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 1607.211126][T18597] usb 4-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1607.235977][T18597] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1607.313498][ T5903] usb 5-1: USB disconnect, device number 102 [ 1607.319594][T18597] usb 4-1: Product: syz [ 1607.364203][T18597] usb 4-1: Manufacturer: syz [ 1607.436073][T18597] usb 4-1: SerialNumber: syz [ 1607.513579][T18597] usb 4-1: config 0 descriptor?? [ 1607.648280][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1607.726501][T18597] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1607.804865][T18597] dvb-usb: bulk message failed: -22 (3/0) [ 1607.946836][T18597] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1607.986396][T18597] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1608.007027][T18597] usb 4-1: media controller created [ 1608.063215][T18597] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1608.095934][T20591] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1608.152579][T18597] dvb-usb: bulk message failed: -22 (6/0) [ 1608.174777][T18597] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1608.223646][T20591] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1608.240687][T18597] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input50 [ 1608.324463][T18597] dvb-usb: schedule remote query interval to 150 msecs. [ 1608.419246][T18597] dvb-usb: bulk message failed: -22 (3/0) [ 1608.429838][T20395] Bluetooth: hci4: command 0x041b tx timeout [ 1608.529352][T18597] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1608.627226][ T5903] dvb-usb: bulk message failed: -22 (1/0) [ 1608.653532][T18819] usb 3-1: USB disconnect, device number 113 [ 1608.684277][T18597] usb 4-1: USB disconnect, device number 111 [ 1608.721439][ T5903] dvb-usb: error while querying for an remote control event. [ 1609.927319][ T48] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1610.220688][T18597] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1610.274980][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1610.392029][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1610.465642][ T48] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1610.488291][T20395] Bluetooth: hci4: command 0x041b tx timeout [ 1610.496628][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1610.561289][ T48] usb 5-1: Product: syz [ 1610.565488][ T48] usb 5-1: Manufacturer: syz [ 1610.585992][ T48] usb 5-1: SerialNumber: syz [ 1610.615424][T20591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1610.636843][T20591] 8021q: adding VLAN 0 to HW filter on device team0 [ 1610.662655][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 1610.669832][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1610.684115][ T48] usb 5-1: config 0 descriptor?? [ 1610.706757][ T6109] bridge0: port 2(bridge_slave_1) entered blocking state [ 1610.713950][ T6109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1611.294892][ T48] usb 5-1: USB disconnect, device number 103 [ 1611.367909][ T7670] udevd[7670]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1611.450794][T18597] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1611.917871][T20591] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1611.969267][ T30] audit: type=1400 audit(1749110163.024:601): avc: denied { module_request } for pid=20591 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1612.068253][T18597] usb 4-1: Using ep0 maxpacket: 8 [ 1612.083727][T18597] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 1612.105929][ T30] audit: type=1400 audit(1749110163.154:602): avc: denied { map } for pid=20706 comm="syz.4.3749" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1612.137217][T18597] usb 4-1: config 6 has no interface number 0 [ 1612.228197][T18597] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1612.287315][T18597] usb 4-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1612.314688][ T30] audit: type=1400 audit(1749110163.154:603): avc: denied { execute } for pid=20706 comm="syz.4.3749" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1612.348142][T18597] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1612.530229][T20395] Bluetooth: hci4: command 0x041b tx timeout [ 1612.708131][T18597] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1612.785698][T18597] usb 4-1: string descriptor 0 read error: -71 [ 1612.794658][T18597] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1612.823056][T18597] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1612.865300][T18597] usb 4-1: can't set config #6, error -71 [ 1612.882673][T18597] usb 4-1: USB disconnect, device number 112 [ 1613.034301][T20591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1613.123975][T10455] hsr_slave_0: left promiscuous mode [ 1613.220766][T20714] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1613.228439][T20714] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1613.234548][T20714] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1613.518175][T10455] hsr_slave_1: left promiscuous mode [ 1613.524106][T10455] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1613.526964][T20714] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1613.542391][T10455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1613.562913][T20714] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1613.570593][T10455] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1613.604527][T10455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1613.650391][T10455] veth1_macvtap: left promiscuous mode [ 1613.670721][T10455] veth0_macvtap: left promiscuous mode [ 1613.700489][T10455] veth1_vlan: left promiscuous mode [ 1613.705819][T10455] veth0_vlan: left promiscuous mode [ 1613.908276][T18597] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1614.035686][T18819] usb 4-1: new full-speed USB device number 113 using dummy_hcd [ 1614.218166][T18597] usb 1-1: Using ep0 maxpacket: 8 [ 1614.286700][T18597] usb 1-1: config 6 has an invalid interface number: 2 but max is 0 [ 1614.303681][T18819] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1614.314111][T18597] usb 1-1: config 6 has no interface number 0 [ 1614.325025][T18819] usb 4-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1614.828155][T18597] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1614.837842][T18597] usb 1-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1614.849490][T18819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1614.865306][T12110] Bluetooth: hci5: command 0x0406 tx timeout [ 1614.878415][T18819] usb 4-1: Product: syz [ 1614.884039][T18819] usb 4-1: Manufacturer: syz [ 1614.892094][T18819] usb 4-1: SerialNumber: syz [ 1614.898817][T18597] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1614.922019][T18597] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1614.933709][T18819] usb 4-1: config 0 descriptor?? [ 1614.941076][T18597] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1614.952230][T18819] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1614.964621][T18597] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1614.973515][T18819] dvb-usb: bulk message failed: -22 (3/0) [ 1614.979390][T18597] usb 1-1: Product: syz [ 1614.983555][T18597] usb 1-1: Manufacturer: syz [ 1614.988242][T18597] usb 1-1: SerialNumber: syz [ 1615.130071][T18819] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1615.179809][T18597] hso 1-1:6.2: Failed to find BULK IN ep [ 1615.213136][T18819] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1615.248534][T20395] Bluetooth: hci0: command 0x0406 tx timeout [ 1615.254692][T12110] Bluetooth: hci3: command 0x0406 tx timeout [ 1615.274625][T18819] usb 4-1: media controller created [ 1615.333995][T18819] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1615.568304][T20395] Bluetooth: hci2: command 0x0406 tx timeout [ 1615.575335][T12110] Bluetooth: hci4: command 0x041b tx timeout [ 1615.667242][T18819] dvb-usb: bulk message failed: -22 (6/0) [ 1615.678346][T18819] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1615.696606][T18819] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input51 [ 1615.808473][T18819] dvb-usb: schedule remote query interval to 150 msecs. [ 1615.815646][T18819] dvb-usb: bulk message failed: -22 (3/0) [ 1615.847810][T18819] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1615.888284][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1616.326711][ T5903] dvb-usb: bulk message failed: -22 (1/0) [ 1616.332559][ T5903] dvb-usb: error while querying for an remote control event. [ 1616.350427][T18819] usb 4-1: USB disconnect, device number 113 [ 1616.412965][T18819] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1616.625058][T20771] FAULT_INJECTION: forcing a failure. [ 1616.625058][T20771] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1616.638761][T20771] CPU: 1 UID: 0 PID: 20771 Comm: syz.4.3762 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) [ 1616.638785][T20771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1616.638795][T20771] Call Trace: [ 1616.638801][T20771] [ 1616.638808][T20771] dump_stack_lvl+0x16c/0x1f0 [ 1616.638834][T20771] should_fail_ex+0x512/0x640 [ 1616.638860][T20771] _copy_from_user+0x2e/0xd0 [ 1616.638887][T20771] copy_msghdr_from_user+0x98/0x160 [ 1616.638909][T20771] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1616.638943][T20771] ___sys_sendmsg+0xfe/0x1d0 [ 1616.638965][T20771] ? __pfx____sys_sendmsg+0x10/0x10 [ 1616.638985][T20771] ? __lock_acquire+0x622/0x1c90 [ 1616.639040][T20771] __sys_sendmsg+0x16d/0x220 [ 1616.639063][T20771] ? __pfx___sys_sendmsg+0x10/0x10 [ 1616.639101][T20771] do_syscall_64+0xcd/0x4c0 [ 1616.639126][T20771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1616.639143][T20771] RIP: 0033:0x7fa2e2d8e929 [ 1616.639157][T20771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1616.639173][T20771] RSP: 002b:00007fa2e3c5c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1616.639189][T20771] RAX: ffffffffffffffda RBX: 00007fa2e2fb5fa0 RCX: 00007fa2e2d8e929 [ 1616.639199][T20771] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1616.639207][T20771] RBP: 00007fa2e3c5c090 R08: 0000000000000000 R09: 0000000000000000 [ 1616.639217][T20771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1616.639227][T20771] R13: 0000000000000000 R14: 00007fa2e2fb5fa0 R15: 00007ffe9c90d7a8 [ 1616.639249][T20771] [ 1616.843422][ T5871] usb 1-1: USB disconnect, device number 89 [ 1616.899562][ T24] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1616.981782][T10455] team0 (unregistering): Port device team_slave_1 removed [ 1617.040735][T10455] team0 (unregistering): Port device team_slave_0 removed [ 1617.068385][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 1617.079391][ T24] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 1617.087849][ T24] usb 3-1: config 0 has no interface number 0 [ 1617.094526][ T24] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1617.105902][ T24] usb 3-1: config 0 interface 85 has no altsetting 0 [ 1617.123893][ T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1617.133112][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1617.143027][ T24] usb 3-1: Product: syz [ 1617.147337][ T24] usb 3-1: Manufacturer: syz [ 1617.155507][ T24] usb 3-1: SerialNumber: syz [ 1617.218865][ T24] usb 3-1: config 0 descriptor?? [ 1617.726259][T20777] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1617.742815][T20777] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1617.758630][T20777] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1617.775141][T20777] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1617.795821][T20777] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1617.902504][ T24] appletouch 3-1:0.85: Geyser mode initialized. [ 1617.915801][ T24] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input52 [ 1618.298184][ T5871] usb 3-1: USB disconnect, device number 114 [ 1618.433248][ T5871] appletouch 3-1:0.85: input: appletouch disconnected [ 1618.509198][ T5903] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1618.561529][T20591] veth0_vlan: entered promiscuous mode [ 1618.701585][T20807] netdevsim netdevsim3: Direct firmware load for . [ 1618.701585][T20807] failed with error -2 [ 1618.717056][T20807] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1618.717056][T20807] [ 1618.726635][T20591] veth1_vlan: entered promiscuous mode [ 1618.779873][ T5903] usb 1-1: Using ep0 maxpacket: 8 [ 1618.805930][ T5903] usb 1-1: config 6 has an invalid interface number: 2 but max is 0 [ 1618.922423][ T5903] usb 1-1: config 6 has no interface number 0 [ 1619.667680][ T5903] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1619.687744][T20591] veth0_macvtap: entered promiscuous mode [ 1619.729280][T18963] Bluetooth: hci5: command 0x0406 tx timeout [ 1619.740888][T20591] veth1_macvtap: entered promiscuous mode [ 1619.766725][ T5903] usb 1-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1619.788937][ T5903] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1619.808912][T20395] Bluetooth: hci4: command 0x041b tx timeout [ 1619.815009][T18963] Bluetooth: hci2: command 0x0406 tx timeout [ 1619.821086][T18963] Bluetooth: hci3: command 0x0406 tx timeout [ 1619.828414][T20395] Bluetooth: hci0: command 0x0406 tx timeout [ 1619.837314][T20591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1619.844626][ T5903] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1619.858628][T20591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1619.867933][ T5903] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1619.878355][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1619.886358][ T5903] usb 1-1: Product: syz [ 1619.893099][T20591] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1619.923854][ T5903] usb 1-1: Manufacturer: syz [ 1619.928886][T20591] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1619.944579][ T5903] usb 1-1: SerialNumber: syz [ 1619.978475][T20591] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1619.989427][T20591] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1620.006053][ T5903] hso 1-1:6.2: Failed to find BULK IN ep [ 1620.628028][ T5903] usb 1-1: USB disconnect, device number 90 [ 1620.948231][T18819] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1621.010909][T20839] FAULT_INJECTION: forcing a failure. [ 1621.010909][T20839] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1621.024175][T20839] CPU: 0 UID: 0 PID: 20839 Comm: syz.0.3775 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) [ 1621.024199][T20839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1621.024210][T20839] Call Trace: [ 1621.024217][T20839] [ 1621.024223][T20839] dump_stack_lvl+0x16c/0x1f0 [ 1621.024256][T20839] should_fail_ex+0x512/0x640 [ 1621.024286][T20839] _copy_from_user+0x2e/0xd0 [ 1621.024313][T20839] move_addr_to_kernel+0x65/0x170 [ 1621.024334][T20839] __sys_connect+0xb1/0x160 [ 1621.024353][T20839] ? __pfx___sys_connect+0x10/0x10 [ 1621.024381][T20839] ? __pfx_ksys_write+0x10/0x10 [ 1621.024409][T20839] __x64_sys_connect+0x72/0xb0 [ 1621.024433][T20839] ? lockdep_hardirqs_on+0x7c/0x110 [ 1621.024457][T20839] do_syscall_64+0xcd/0x4c0 [ 1621.024483][T20839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1621.024500][T20839] RIP: 0033:0x7feb5158e929 [ 1621.024515][T20839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1621.024533][T20839] RSP: 002b:00007feb52497038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1621.024550][T20839] RAX: ffffffffffffffda RBX: 00007feb517b6160 RCX: 00007feb5158e929 [ 1621.024562][T20839] RDX: 000000000000001c RSI: 0000200000000000 RDI: 000000000000000a [ 1621.024574][T20839] RBP: 00007feb52497090 R08: 0000000000000000 R09: 0000000000000000 [ 1621.024584][T20839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1621.024594][T20839] R13: 0000000000000000 R14: 00007feb517b6160 R15: 00007fffcf3ef3f8 [ 1621.024618][T20839] [ 1622.156159][T12110] Bluetooth: hci4: command 0x041b tx timeout [ 1622.388247][T18819] usb 3-1: Using ep0 maxpacket: 8 [ 1622.396788][T18819] usb 3-1: config 6 has an invalid interface number: 2 but max is 0 [ 1622.422672][T18819] usb 3-1: config 6 has no interface number 0 [ 1622.758236][ T48] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1622.898277][T18819] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1622.907962][T18819] usb 3-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1622.908040][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1622.922786][T18819] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1622.938618][ T5903] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1622.948979][ T6109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1622.956785][ T6109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1622.992537][T18819] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1623.014383][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1623.131384][ T5903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1623.148168][ T48] usb 5-1: Using ep0 maxpacket: 16 [ 1623.167920][ T48] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 1623.183216][ T5903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1623.193679][ T48] usb 5-1: config 0 has an invalid descriptor of length 95, skipping remainder of the config [ 1623.207832][ T5903] usb 4-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 1623.258512][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1623.268539][ T30] audit: type=1326 audit(1749110174.314:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20857 comm="syz.0.3780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb5158e929 code=0x7ffc0000 [ 1623.276984][ T48] usb 5-1: config 0 has no interface number 0 [ 1623.435689][ T30] audit: type=1326 audit(1749110174.324:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20857 comm="syz.0.3780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb5158e929 code=0x7ffc0000 [ 1623.490102][ T5903] usb 4-1: config 0 descriptor?? [ 1623.545932][ T48] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1623.546466][ T30] audit: type=1326 audit(1749110174.344:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20857 comm="syz.0.3780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feb5158e929 code=0x7ffc0000 [ 1623.599438][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1624.022293][T20868] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1624.441970][ T48] usb 5-1: Product: syz [ 1624.503206][ T48] usb 5-1: Manufacturer: syz [ 1624.527938][ T30] audit: type=1326 audit(1749110174.344:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20857 comm="syz.0.3780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb5158e929 code=0x7ffc0000 [ 1624.570711][ T48] usb 5-1: SerialNumber: syz [ 1624.701099][ T48] usb 5-1: config 0 descriptor?? [ 1624.866549][ T48] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 1624.877017][ T5903] hid (null): unknown global tag 0xe [ 1624.920503][ T30] audit: type=1326 audit(1749110174.344:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20857 comm="syz.0.3780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb5158e929 code=0x7ffc0000 [ 1624.968346][ T48] usb 5-1: No valid video chain found. [ 1625.963898][ T5903] waltop 0003:172F:0038.0007: unknown global tag 0xe [ 1625.970917][ T5903] waltop 0003:172F:0038.0007: item 0 1 1 14 parsing failed [ 1625.979823][ T5903] waltop 0003:172F:0038.0007: probe with driver waltop failed with error -22 [ 1625.995429][ T30] audit: type=1326 audit(1749110174.344:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20857 comm="syz.0.3780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb5158e929 code=0x7ffc0000 [ 1626.021551][ T30] audit: type=1326 audit(1749110174.344:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20857 comm="syz.0.3780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb5158e929 code=0x7ffc0000 [ 1626.045049][ T30] audit: type=1326 audit(1749110174.344:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20857 comm="syz.0.3780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb5158e929 code=0x7ffc0000 [ 1626.068554][ T30] audit: type=1326 audit(1749110174.344:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20857 comm="syz.0.3780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb5158e929 code=0x7ffc0000 [ 1626.103690][ T30] audit: type=1326 audit(1749110174.344:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20857 comm="syz.0.3780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb5158e929 code=0x7ffc0000 [ 1626.153138][T18819] usb 3-1: string descriptor 0 read error: -71 [ 1626.175311][ T5868] usb 5-1: USB disconnect, device number 104 [ 1626.182707][ T5903] usb 4-1: USB disconnect, device number 114 [ 1626.237952][T18819] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1626.255446][T18819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1626.397115][T18819] usb 3-1: can't set config #6, error -71 [ 1626.434522][T18819] usb 3-1: USB disconnect, device number 115 [ 1626.506097][T20884] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3783'. [ 1626.788265][ T5871] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1627.048145][ T5871] usb 7-1: Using ep0 maxpacket: 32 [ 1627.067612][ T5871] usb 7-1: config 0 has an invalid interface number: 124 but max is 0 [ 1627.088070][ T5871] usb 7-1: config 0 has no interface number 0 [ 1627.094277][ T5871] usb 7-1: config 0 interface 124 altsetting 0 has an endpoint descriptor with address 0x1A, changing to 0xA [ 1627.115988][ T5871] usb 7-1: New USB device found, idVendor=0bfd, idProduct=001c, bcdDevice=8c.e8 [ 1627.125791][ T5871] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1627.137141][ T5871] usb 7-1: Product: syz [ 1627.141531][ T5871] usb 7-1: Manufacturer: syz [ 1627.150763][ T5871] usb 7-1: SerialNumber: syz [ 1627.158419][ T5871] usb 7-1: config 0 descriptor?? [ 1627.172160][ T5871] kvaser_usb 7-1:0.124: error -ENODEV: Cannot get usb endpoint(s) [ 1627.248551][ T5868] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1627.428259][ T5868] usb 1-1: Using ep0 maxpacket: 32 [ 1627.582602][T20908] overlayfs: missing 'lowerdir' [ 1628.228594][ T5868] usb 1-1: config 2 has an invalid interface number: 157 but max is 0 [ 1628.258609][ T5868] usb 1-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 1628.285427][ T5868] usb 1-1: config 2 has no interface number 1 [ 1628.300441][ T5868] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=a4.1b [ 1628.336437][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1628.372006][ T5868] usb 1-1: Product: syz [ 1628.387258][ T5868] usb 1-1: Manufacturer: syz [ 1628.412297][ T5868] usb 1-1: SerialNumber: syz [ 1628.583182][ T5903] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1628.851115][ T5868] imon 1-1:2.157: inconsistent driver matching [ 1629.049899][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1629.088344][ T5868] imon 1-1:2.157: unable to register, err -22 [ 1629.211419][ T5868] imon 1-1:2.157: probe with driver imon failed with error -22 [ 1629.223454][T20916] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1629.231435][T20916] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1629.234650][ T5903] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1629.237523][T20916] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1629.257110][T20916] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1629.277146][ T5868] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1629.294570][T20916] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1629.330846][ T5871] usb 7-1: USB disconnect, device number 2 [ 1629.377358][ T5903] usb 3-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 1629.388303][ T5868] imon 1-1:2.0: unable to initialize intf0, err -19 [ 1629.395320][ T5868] imon:imon_probe: failed to initialize context! [ 1629.408211][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1629.428151][ T5868] imon 1-1:2.0: unable to register, err -19 [ 1629.439019][ T5903] usb 3-1: config 0 descriptor?? [ 1629.444763][ T5868] usb 1-1: USB disconnect, device number 91 [ 1629.799628][T20927] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1630.183002][T20938] delete_channel: no stack [ 1630.601008][ T5903] usbhid 3-1:0.0: can't add hid device: -71 [ 1630.614253][ T5903] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1630.638987][T20933] FAULT_INJECTION: forcing a failure. [ 1630.638987][T20933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1630.659019][ T5903] usb 3-1: USB disconnect, device number 116 [ 1630.689210][T20933] CPU: 0 UID: 0 PID: 20933 Comm: syz.3.3796 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) [ 1630.689235][T20933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1630.689246][T20933] Call Trace: [ 1630.689252][T20933] [ 1630.689258][T20933] dump_stack_lvl+0x16c/0x1f0 [ 1630.689285][T20933] should_fail_ex+0x512/0x640 [ 1630.689312][T20933] _copy_from_user+0x2e/0xd0 [ 1630.689338][T20933] copy_msghdr_from_user+0x98/0x160 [ 1630.689360][T20933] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1630.689393][T20933] ___sys_sendmsg+0xfe/0x1d0 [ 1630.689416][T20933] ? __pfx____sys_sendmsg+0x10/0x10 [ 1630.689436][T20933] ? __lock_acquire+0x622/0x1c90 [ 1630.689492][T20933] __sys_sendmsg+0x16d/0x220 [ 1630.689514][T20933] ? __pfx___sys_sendmsg+0x10/0x10 [ 1630.689552][T20933] do_syscall_64+0xcd/0x4c0 [ 1630.689577][T20933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1630.689594][T20933] RIP: 0033:0x7fd27d38e929 [ 1630.689608][T20933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1630.689624][T20933] RSP: 002b:00007fd27e15f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1630.689641][T20933] RAX: ffffffffffffffda RBX: 00007fd27d5b5fa0 RCX: 00007fd27d38e929 [ 1630.689652][T20933] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1630.689662][T20933] RBP: 00007fd27e15f090 R08: 0000000000000000 R09: 0000000000000000 [ 1630.689672][T20933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1630.689681][T20933] R13: 0000000000000000 R14: 00007fd27d5b5fa0 R15: 00007fff14de2028 [ 1630.689704][T20933] [ 1631.273612][T12110] Bluetooth: hci3: command 0x0406 tx timeout [ 1631.279734][T12110] Bluetooth: hci0: command 0x0406 tx timeout [ 1631.285784][T12110] Bluetooth: hci5: command 0x0406 tx timeout [ 1631.352239][T12110] Bluetooth: hci2: command 0x0406 tx timeout [ 1631.408609][T12110] Bluetooth: hci4: command 0x041b tx timeout [ 1631.438209][ T5871] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1631.711346][ T5871] usb 1-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=c2.b7 [ 1631.745734][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1631.784207][ T5871] usb 1-1: config 0 descriptor?? [ 1631.830500][ T5871] gspca_main: mars-2.14.0 probing 093a:050f [ 1631.888699][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1632.878440][ T5869] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1633.820483][T20971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3801'. [ 1633.983501][ T5869] usb 4-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=c2.b7 [ 1634.005527][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1634.029560][ T5869] usb 4-1: config 0 descriptor?? [ 1634.037167][ T5869] gspca_main: mars-2.14.0 probing 093a:050f [ 1634.043715][ T5869] videodev: could not get a free minor [ 1634.050191][ T5869] gspca_main: video_register_device err -23 [ 1634.057491][ T5869] mars 4-1:0.0: probe with driver mars failed with error -23 [ 1634.902055][T20989] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3803'. [ 1635.594522][T20998] xt_CT: No such helper "snmp" [ 1635.599940][T21002] FAULT_INJECTION: forcing a failure. [ 1635.599940][T21002] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1635.624463][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 1635.624478][ T30] audit: type=1400 audit(1749110186.674:662): avc: denied { setopt } for pid=20992 comm="syz.6.3809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1635.659363][T21002] CPU: 0 UID: 0 PID: 21002 Comm: syz.2.3808 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) [ 1635.659389][T21002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1635.659399][T21002] Call Trace: [ 1635.659405][T21002] [ 1635.659412][T21002] dump_stack_lvl+0x16c/0x1f0 [ 1635.659440][T21002] should_fail_ex+0x512/0x640 [ 1635.659466][T21002] _copy_from_user+0x2e/0xd0 [ 1635.659492][T21002] copy_from_sockptr_offset.constprop.0+0x136/0x170 [ 1635.659513][T21002] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 1635.659539][T21002] sk_setsockopt+0x170/0x3e40 [ 1635.659569][T21002] ? __pfx_sk_setsockopt+0x10/0x10 [ 1635.659593][T21002] ? selinux_netlbl_socket_setsockopt+0x183/0x470 [ 1635.659619][T21002] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 1635.659642][T21002] ? proc_fail_nth_write+0x9f/0x250 [ 1635.659675][T21002] ? selinux_socket_setsockopt+0x6a/0x80 [ 1635.659699][T21002] do_sock_setsockopt+0x3f2/0x470 [ 1635.659723][T21002] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1635.659761][T21002] __sys_setsockopt+0x1a0/0x230 [ 1635.659786][T21002] __x64_sys_setsockopt+0xbd/0x160 [ 1635.659805][T21002] ? do_syscall_64+0x91/0x4c0 [ 1635.659827][T21002] ? lockdep_hardirqs_on+0x7c/0x110 [ 1635.659849][T21002] do_syscall_64+0xcd/0x4c0 [ 1635.659873][T21002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1635.659890][T21002] RIP: 0033:0x7f5bd178e929 [ 1635.659905][T21002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1635.659921][T21002] RSP: 002b:00007f5bd255d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1635.659937][T21002] RAX: ffffffffffffffda RBX: 00007f5bd19b6080 RCX: 00007f5bd178e929 [ 1635.659949][T21002] RDX: 000000000000000a RSI: 0000000000000001 RDI: 000000000000000c [ 1635.659957][T21002] RBP: 00007f5bd255d090 R08: 0000000000000004 R09: 0000000000000000 [ 1635.659967][T21002] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 1635.659976][T21002] R13: 0000000000000000 R14: 00007f5bd19b6080 R15: 00007fffaf87cd28 [ 1635.659998][T21002] [ 1635.874700][ T30] audit: type=1400 audit(1749110186.674:663): avc: denied { read } for pid=20992 comm="syz.6.3809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1635.939005][ T24] usb 1-1: USB disconnect, device number 92 [ 1636.613230][ T24] usb 4-1: USB disconnect, device number 115 [ 1637.055168][ T30] audit: type=1326 audit(1749110188.094:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21018 comm="syz.4.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e2d8e929 code=0x7ffc0000 [ 1637.274133][ T30] audit: type=1326 audit(1749110188.104:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21018 comm="syz.4.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e2d8e929 code=0x7ffc0000 [ 1637.300909][ T30] audit: type=1326 audit(1749110188.194:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21018 comm="syz.4.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa2e2d8e929 code=0x7ffc0000 [ 1637.350703][ T30] audit: type=1326 audit(1749110188.194:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21018 comm="syz.4.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e2d8e929 code=0x7ffc0000 [ 1637.433129][ T30] audit: type=1326 audit(1749110188.204:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21018 comm="syz.4.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e2d8e929 code=0x7ffc0000 [ 1637.759572][ T30] audit: type=1326 audit(1749110188.214:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21018 comm="syz.4.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2e2d8e929 code=0x7ffc0000 [ 1637.783438][ T30] audit: type=1326 audit(1749110188.214:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21018 comm="syz.4.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e2d8e929 code=0x7ffc0000 [ 1637.936361][ T24] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1637.945887][ T30] audit: type=1326 audit(1749110188.214:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21018 comm="syz.4.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e2d8e929 code=0x7ffc0000 [ 1638.602894][ T24] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1638.760087][ T24] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1638.770496][ T24] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1639.285156][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1639.353305][T21025] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1639.385258][ T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1639.568527][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1640.203013][ T24] usb 4-1: USB disconnect, device number 116 [ 1640.645129][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 1640.645146][ T30] audit: type=1326 audit(1749110191.654:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21062 comm="syz.4.3825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fa2e2d8e929 code=0x7ffc0000 [ 1640.712289][ T30] audit: type=1326 audit(1749110191.654:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21062 comm="syz.4.3825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e2d8e929 code=0x7ffc0000 [ 1640.819826][T21072] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1641.520006][ T30] audit: type=1326 audit(1749110191.654:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21062 comm="syz.4.3825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e2d8e929 code=0x7ffc0000 [ 1641.668585][ T30] audit: type=1326 audit(1749110191.694:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21062 comm="syz.4.3825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fa2e2d8e929 code=0x7ffc0000 [ 1641.693584][ T30] audit: type=1326 audit(1749110191.694:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21062 comm="syz.4.3825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e2d8e929 code=0x7ffc0000 [ 1641.727949][ T30] audit: type=1326 audit(1749110191.694:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21062 comm="syz.4.3825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e2d8e929 code=0x7ffc0000 [ 1641.785420][ T30] audit: type=1326 audit(1749110191.694:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21062 comm="syz.4.3825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa2e2d8e929 code=0x7ffc0000 [ 1641.909305][ T30] audit: type=1326 audit(1749110191.824:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21062 comm="syz.4.3825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e2d8e929 code=0x7ffc0000 [ 1641.935545][ T30] audit: type=1326 audit(1749110191.824:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21062 comm="syz.4.3825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e2d8e929 code=0x7ffc0000 [ 1641.968183][ T30] audit: type=1326 audit(1749110191.844:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21062 comm="syz.4.3825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fa2e2d8e929 code=0x7ffc0000 [ 1642.449646][ T5903] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1642.598327][T21098] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1642.801983][ T5903] usb 1-1: Using ep0 maxpacket: 8 [ 1642.815674][ T5903] usb 1-1: config 6 has an invalid interface number: 2 but max is 0 [ 1642.838549][ T5869] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1642.846438][ T5903] usb 1-1: config 6 has no interface number 0 [ 1642.886284][ T5903] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1642.916372][ T5903] usb 1-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1642.941794][ T5903] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1642.972207][ T5903] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1643.477148][ T5903] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1643.488336][ T5869] usb 4-1: Using ep0 maxpacket: 8 [ 1643.500501][ T5869] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 1643.510068][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1643.541235][ T5869] usb 4-1: config 6 has no interface number 0 [ 1643.562329][ T5869] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1643.589209][ T5903] usb 1-1: Product: syz [ 1643.609313][ T5903] usb 1-1: Manufacturer: syz [ 1643.614069][ T5903] usb 1-1: SerialNumber: syz [ 1643.618869][ T5869] usb 4-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1643.639439][ T5869] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1643.659776][ T5869] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1644.017571][ T5869] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1644.030020][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1644.038285][ T5869] usb 4-1: Product: syz [ 1644.043741][ T5869] usb 4-1: Manufacturer: syz [ 1644.048878][ T5869] usb 4-1: SerialNumber: syz [ 1644.066010][ T5869] hso 4-1:6.2: Failed to find BULK IN ep [ 1644.387107][ T5903] usb 1-1: can't set config #6, error -71 [ 1644.409990][ T5903] usb 1-1: USB disconnect, device number 93 [ 1645.599137][T18597] usb 4-1: USB disconnect, device number 117 [ 1646.038458][T18819] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1646.288281][T18819] usb 7-1: Using ep0 maxpacket: 8 [ 1646.754351][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1646.754367][ T30] audit: type=1400 audit(1749110197.804:741): avc: denied { mount } for pid=21151 comm="syz.4.3839" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1646.761496][T18819] usb 7-1: config 6 has an invalid interface number: 2 but max is 0 [ 1646.938606][T18819] usb 7-1: config 6 has no interface number 0 [ 1646.988179][T18819] usb 7-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1647.031657][T18597] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1647.208145][T18597] usb 4-1: Using ep0 maxpacket: 16 [ 1647.403394][T18597] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 1647.412929][T18819] usb 7-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1647.464602][T18597] usb 4-1: config 0 has an invalid descriptor of length 95, skipping remainder of the config [ 1647.765431][T18819] usb 7-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1647.865983][T18597] usb 4-1: config 0 has no interface number 0 [ 1647.873881][T18819] usb 7-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1647.886128][T18597] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1647.897242][T18597] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1647.905686][T18597] usb 4-1: Product: syz [ 1647.915721][T18597] usb 4-1: Manufacturer: syz [ 1647.920481][T18597] usb 4-1: SerialNumber: syz [ 1647.933110][T18819] usb 7-1: string descriptor 0 read error: -71 [ 1647.947854][T18597] usb 4-1: config 0 descriptor?? [ 1648.354288][T18819] usb 7-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1648.365357][T18819] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1648.376881][T18597] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 1648.384298][T18597] usb 4-1: No valid video chain found. [ 1648.404786][T18819] usb 7-1: can't set config #6, error -71 [ 1648.518244][ T30] audit: type=1400 audit(1749110199.564:742): avc: denied { unmount } for pid=17784 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1648.627811][T18819] usb 7-1: USB disconnect, device number 3 [ 1648.868869][T21170] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1649.338444][T18819] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1649.519228][T18819] usb 5-1: Using ep0 maxpacket: 8 [ 1649.546359][T18819] usb 5-1: config 6 has an invalid interface number: 2 but max is 0 [ 1649.579368][T18819] usb 5-1: config 6 has no interface number 0 [ 1649.602047][T18819] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1649.629731][T18819] usb 5-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1649.670413][ T30] audit: type=1326 audit(1749110200.724:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21198 comm="syz.6.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec5a38e929 code=0x7ffc0000 [ 1649.694612][T18597] usb 4-1: USB disconnect, device number 118 [ 1649.790366][T18819] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1649.815448][T18819] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1649.836829][ T30] audit: type=1326 audit(1749110200.754:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21198 comm="syz.6.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec5a38e929 code=0x7ffc0000 [ 1650.041983][ T30] audit: type=1326 audit(1749110200.754:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21198 comm="syz.6.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec5a38e929 code=0x7ffc0000 [ 1650.594282][T18819] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1650.611051][T18819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1650.642340][ T30] audit: type=1326 audit(1749110200.754:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21198 comm="syz.6.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec5a38e929 code=0x7ffc0000 [ 1650.650263][T18819] usb 5-1: Product: syz [ 1650.691921][ T30] audit: type=1326 audit(1749110200.754:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21198 comm="syz.6.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec5a38e929 code=0x7ffc0000 [ 1650.773170][ T30] audit: type=1326 audit(1749110200.754:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21198 comm="syz.6.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec5a38e929 code=0x7ffc0000 [ 1650.814429][T18819] usb 5-1: Manufacturer: syz [ 1650.822835][T18819] usb 5-1: SerialNumber: syz [ 1650.903654][T18819] hso 5-1:6.2: Failed to find BULK IN ep [ 1650.930303][ T30] audit: type=1326 audit(1749110200.754:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21198 comm="syz.6.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec5a38e929 code=0x7ffc0000 [ 1650.977524][ T30] audit: type=1326 audit(1749110200.754:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21198 comm="syz.6.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec5a38e929 code=0x7ffc0000 [ 1652.031628][T18819] usb 5-1: USB disconnect, device number 105 [ 1653.185947][T21244] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1653.281427][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 1653.281465][ T30] audit: type=1400 audit(1749110204.334:773): avc: denied { listen } for pid=21246 comm="syz.4.3859" lport=47579 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1653.458337][ T5871] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1653.556192][ T30] audit: type=1400 audit(1749110204.384:774): avc: denied { accept } for pid=21246 comm="syz.4.3859" lport=47579 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1653.908151][ T5903] usb 1-1: new full-speed USB device number 94 using dummy_hcd [ 1653.950347][ T5871] usb 4-1: device descriptor read/64, error -71 [ 1654.050540][T21259] FAULT_INJECTION: forcing a failure. [ 1654.050540][T21259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1654.083246][ T5903] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1654.100343][T21259] CPU: 0 UID: 0 PID: 21259 Comm: syz.6.3860 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) [ 1654.100371][T21259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1654.100382][T21259] Call Trace: [ 1654.100387][T21259] [ 1654.100395][T21259] dump_stack_lvl+0x16c/0x1f0 [ 1654.100423][T21259] should_fail_ex+0x512/0x640 [ 1654.100452][T21259] _copy_from_user+0x2e/0xd0 [ 1654.100479][T21259] __sys_bpf+0x21d/0x4d80 [ 1654.100507][T21259] ? __pfx___sys_bpf+0x10/0x10 [ 1654.100533][T21259] ? ksys_write+0x190/0x250 [ 1654.100559][T21259] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 1654.100599][T21259] ? fput+0x70/0xf0 [ 1654.100613][T21259] ? ksys_write+0x1ac/0x250 [ 1654.100635][T21259] ? __pfx_ksys_write+0x10/0x10 [ 1654.100662][T21259] __x64_sys_bpf+0x78/0xc0 [ 1654.100687][T21259] ? lockdep_hardirqs_on+0x7c/0x110 [ 1654.100709][T21259] do_syscall_64+0xcd/0x4c0 [ 1654.100734][T21259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1654.100752][T21259] RIP: 0033:0x7fec5a38e929 [ 1654.100766][T21259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1654.100782][T21259] RSP: 002b:00007fec5b20e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1654.100798][T21259] RAX: ffffffffffffffda RBX: 00007fec5a5b5fa0 RCX: 00007fec5a38e929 [ 1654.100810][T21259] RDX: 000000000000000c RSI: 0000200000000000 RDI: 000000000000000a [ 1654.100820][T21259] RBP: 00007fec5b20e090 R08: 0000000000000000 R09: 0000000000000000 [ 1654.100830][T21259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1654.100840][T21259] R13: 0000000000000000 R14: 00007fec5a5b5fa0 R15: 00007ffd98c4aee8 [ 1654.100863][T21259] [ 1654.102771][ T5903] usb 1-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1654.218145][ T5871] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1654.228378][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1654.305088][ T5903] usb 1-1: Product: syz [ 1654.376360][ T5903] usb 1-1: Manufacturer: syz [ 1654.391903][ T5903] usb 1-1: SerialNumber: syz [ 1654.395276][T21267] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3862'. [ 1654.463282][ T5903] usb 1-1: config 0 descriptor?? [ 1654.478184][ T5871] usb 4-1: device descriptor read/64, error -71 [ 1654.499037][ T5903] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1654.562631][ T5903] dvb-usb: bulk message failed: -22 (3/0) [ 1654.591600][ T5903] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1654.609373][ T5871] usb usb4-port1: attempt power cycle [ 1654.618809][ T5903] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1654.757182][T21245] dibusb: i2c wr: len=61 is too big! [ 1654.757182][T21245] [ 1654.782649][ T5903] usb 1-1: media controller created [ 1654.800445][ T5903] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1655.018391][ T5871] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1655.254315][ T5903] dvb-usb: bulk message failed: -22 (6/0) [ 1655.260734][ T5903] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1655.275486][ T5903] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input53 [ 1655.298638][ T5871] usb 4-1: device descriptor read/8, error -71 [ 1655.323582][ T5903] dvb-usb: schedule remote query interval to 150 msecs. [ 1655.335097][ T5903] dvb-usb: bulk message failed: -22 (3/0) [ 1655.368378][ T5903] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1655.401376][ T5903] usb 1-1: USB disconnect, device number 94 [ 1655.464670][ T5903] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1655.545287][ T5871] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1655.586477][ T5871] usb 4-1: device descriptor read/8, error -71 [ 1655.739245][ T5871] usb usb4-port1: unable to enumerate USB device [ 1656.857548][T21299] FAULT_INJECTION: forcing a failure. [ 1656.857548][T21299] name failslab, interval 1, probability 0, space 0, times 0 [ 1656.895482][T21299] CPU: 0 UID: 0 PID: 21299 Comm: syz.3.3871 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) [ 1656.895510][T21299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1656.895520][T21299] Call Trace: [ 1656.895526][T21299] [ 1656.895533][T21299] dump_stack_lvl+0x16c/0x1f0 [ 1656.895560][T21299] should_fail_ex+0x512/0x640 [ 1656.895584][T21299] ? fs_reclaim_acquire+0xae/0x150 [ 1656.895605][T21299] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1656.895630][T21299] should_failslab+0xc2/0x120 [ 1656.895656][T21299] __kmalloc_noprof+0xd2/0x510 [ 1656.895684][T21299] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1656.895712][T21299] ? tomoyo_profile+0x47/0x60 [ 1656.895732][T21299] tomoyo_path_number_perm+0x245/0x580 [ 1656.895753][T21299] ? tomoyo_path_number_perm+0x237/0x580 [ 1656.895777][T21299] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1656.895801][T21299] ? find_held_lock+0x2b/0x80 [ 1656.895844][T21299] ? find_held_lock+0x2b/0x80 [ 1656.895864][T21299] ? hook_file_ioctl_common+0x145/0x410 [ 1656.895888][T21299] ? __fget_files+0x20e/0x3c0 [ 1656.895917][T21299] security_file_ioctl+0x9b/0x240 [ 1656.895943][T21299] __x64_sys_ioctl+0xb7/0x210 [ 1656.895965][T21299] do_syscall_64+0xcd/0x4c0 [ 1656.895991][T21299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1656.896016][T21299] RIP: 0033:0x7fd27d38e929 [ 1656.896032][T21299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1656.896051][T21299] RSP: 002b:00007fd27e15f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1656.896069][T21299] RAX: ffffffffffffffda RBX: 00007fd27d5b5fa0 RCX: 00007fd27d38e929 [ 1656.896080][T21299] RDX: 0000200000000000 RSI: 0000000000008b18 RDI: 0000000000000003 [ 1656.896091][T21299] RBP: 00007fd27e15f090 R08: 0000000000000000 R09: 0000000000000000 [ 1656.896102][T21299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1656.896112][T21299] R13: 0000000000000000 R14: 00007fd27d5b5fa0 R15: 00007fff14de2028 [ 1656.896138][T21299] [ 1656.896162][T21299] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1657.139431][ T5871] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1657.208252][T21307] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1657.478566][ T5903] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1657.628154][ T5871] usb 5-1: Using ep0 maxpacket: 8 [ 1657.651124][ T5903] usb 1-1: Using ep0 maxpacket: 8 [ 1657.675913][ T5903] usb 1-1: config 6 has an invalid interface number: 2 but max is 0 [ 1657.685218][ T5903] usb 1-1: config 6 has no interface number 0 [ 1657.722929][ T5871] usb 5-1: config 6 has an invalid interface number: 2 but max is 0 [ 1657.726878][ T5903] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1657.766772][ T5871] usb 5-1: config 6 has no interface number 0 [ 1657.810443][ T5903] usb 1-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1657.813934][ T5871] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1657.826140][ T5903] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1657.907632][ T5903] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1657.912291][ T5871] usb 5-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1657.923801][ T5903] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1657.960082][T21309] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1657.989512][T21309] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1657.991741][ T30] audit: type=1400 audit(1749110209.034:775): avc: denied { bind } for pid=21321 comm="syz.3.3876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1658.016847][T21309] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1658.026554][ T5871] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1658.028477][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1658.054414][T21309] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1658.054489][ T5871] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1658.067026][T21309] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1658.114462][ T5871] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1658.116597][ T5903] usb 1-1: Product: syz [ 1658.123663][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1658.137000][ T5871] usb 5-1: Product: syz [ 1658.141301][ T5871] usb 5-1: Manufacturer: syz [ 1658.145953][ T5871] usb 5-1: SerialNumber: syz [ 1658.157765][ T5903] usb 1-1: Manufacturer: syz [ 1658.188223][ T5903] usb 1-1: SerialNumber: syz [ 1658.210669][ T5903] hso 1-1:6.2: Failed to find BULK IN ep [ 1658.389557][ T5871] hso 5-1:6.2: Failed to find BULK IN ep [ 1658.893576][T18597] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1658.982622][ T5903] usb 5-1: USB disconnect, device number 106 [ 1659.080200][T18597] usb 7-1: Using ep0 maxpacket: 8 [ 1659.126883][T18597] usb 7-1: config 6 has an invalid interface number: 2 but max is 0 [ 1659.136521][T18597] usb 7-1: config 6 has no interface number 0 [ 1659.156570][T18597] usb 7-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1659.177331][T18597] usb 7-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1659.208227][T18597] usb 7-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1659.227849][T18597] usb 7-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1659.243667][T18597] usb 7-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1659.258164][T18597] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1659.272945][T18597] usb 7-1: Product: syz [ 1659.291588][T18597] usb 7-1: Manufacturer: syz [ 1659.342432][T18597] usb 7-1: SerialNumber: syz [ 1659.568371][T12110] Bluetooth: hci5: command 0x0406 tx timeout [ 1659.588599][T18597] hso 7-1:6.2: Failed to find BULK IN ep [ 1659.919254][ T5868] usb 4-1: new full-speed USB device number 123 using dummy_hcd [ 1659.963822][T18819] usb 7-1: USB disconnect, device number 4 [ 1660.058577][T14831] Bluetooth: hci0: command 0x0406 tx timeout [ 1660.064795][T12110] Bluetooth: hci3: command 0x0406 tx timeout [ 1660.132495][T14831] Bluetooth: hci2: command 0x0406 tx timeout [ 1660.138700][T12110] Bluetooth: hci4: command 0x041b tx timeout [ 1660.156532][ T48] usb 1-1: USB disconnect, device number 95 [ 1660.179746][ T5868] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1660.204128][ T5868] usb 4-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1660.215134][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1660.223906][T18597] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1660.233725][ T5868] usb 4-1: Product: syz [ 1660.237938][ T5868] usb 4-1: Manufacturer: syz [ 1660.662585][ T5868] usb 4-1: SerialNumber: syz [ 1660.672723][ T5868] usb 4-1: config 0 descriptor?? [ 1660.685345][ T5868] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1660.703138][ T5868] dvb-usb: bulk message failed: -22 (3/0) [ 1660.733736][ T5868] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1660.743242][ T5868] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1660.755698][ T5868] usb 4-1: media controller created [ 1660.763560][ T5868] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1660.781188][ T5868] dvb-usb: bulk message failed: -22 (6/0) [ 1660.787381][ T5868] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1660.799352][T18597] usb 3-1: Using ep0 maxpacket: 8 [ 1660.807828][T18597] usb 3-1: config 6 has an invalid interface number: 2 but max is 0 [ 1660.816728][ T5868] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input54 [ 1660.828148][T18597] usb 3-1: config 6 has no interface number 0 [ 1660.837128][ T5868] dvb-usb: schedule remote query interval to 150 msecs. [ 1660.844624][T18597] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1660.854671][ T5868] dvb-usb: bulk message failed: -22 (3/0) [ 1660.860689][T18597] usb 3-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1660.891178][ T5868] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1660.914421][T21341] dibusb: i2c wr: len=61 is too big! [ 1660.914421][T21341] [ 1660.931707][T18597] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1661.236122][T18819] dvb-usb: bulk message failed: -22 (1/0) [ 1661.252266][ T5868] usb 4-1: USB disconnect, device number 123 [ 1661.269958][T18819] dvb-usb: error while querying for an remote control event. [ 1661.291004][T18597] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1661.337563][T18597] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1661.362173][T18597] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1661.386299][T18597] usb 3-1: Product: syz [ 1661.403927][T18597] usb 3-1: Manufacturer: syz [ 1661.441026][T18597] usb 3-1: SerialNumber: syz [ 1661.944703][ T5868] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1661.959681][T18597] hso 3-1:6.2: Failed to find BULK IN ep [ 1662.530894][ T5903] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1662.567409][T18597] usb 3-1: USB disconnect, device number 117 [ 1662.741166][ T5903] usb 1-1: Using ep0 maxpacket: 8 [ 1663.005249][ T5903] usb 1-1: config 6 has an invalid interface number: 2 but max is 0 [ 1663.037019][ T5903] usb 1-1: config 6 has no interface number 0 [ 1663.052246][ T5903] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1663.065679][ T5903] usb 1-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1663.080169][ T5903] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1663.771712][ T5903] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1663.813351][ T5903] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1663.822598][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1663.830834][ T5903] usb 1-1: Product: syz [ 1663.835332][ T5903] usb 1-1: Manufacturer: syz [ 1663.841062][ T5903] usb 1-1: SerialNumber: syz [ 1663.888244][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1663.909291][ T5869] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1664.077590][ T5903] usb 1-1: can't set config #6, error -71 [ 1664.102549][T21399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1664.106941][ T5903] usb 1-1: USB disconnect, device number 96 [ 1664.198149][ T5869] usb 4-1: Using ep0 maxpacket: 8 [ 1664.206767][ T5869] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 1664.218148][ T5869] usb 4-1: config 6 has no interface number 0 [ 1664.224261][ T5869] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1664.276394][ T5869] usb 4-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1664.290426][ T5869] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1664.304308][ T5869] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1664.332728][ T5869] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1664.362446][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1664.398257][ T5869] usb 4-1: Product: syz [ 1664.402445][ T5869] usb 4-1: Manufacturer: syz [ 1664.420532][ T5869] usb 4-1: SerialNumber: syz [ 1664.443157][ T5869] hso 4-1:6.2: Failed to find BULK IN ep [ 1664.517256][T21421] pim6reg1: entered promiscuous mode [ 1664.530945][T21421] pim6reg1: entered allmulticast mode [ 1664.546745][T21421] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 1664.618662][ T5903] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1664.724222][ T5869] usb 4-1: USB disconnect, device number 124 [ 1664.801287][ T5903] usb 3-1: Using ep0 maxpacket: 32 [ 1664.818029][ T5903] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 1664.846932][ T5903] usb 3-1: config 0 has no interface number 0 [ 1664.868277][ T5903] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1664.881924][ T5903] usb 3-1: config 0 interface 85 has no altsetting 0 [ 1664.891275][ T5903] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1664.900685][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1664.909954][ T5903] usb 3-1: Product: syz [ 1664.914554][ T5903] usb 3-1: Manufacturer: syz [ 1664.920183][ T5903] usb 3-1: SerialNumber: syz [ 1664.953069][ T5903] usb 3-1: config 0 descriptor?? [ 1665.146412][ T5871] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1665.325124][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1665.411189][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1665.555215][ T5871] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1665.590588][ T5903] appletouch 3-1:0.85: Geyser mode initialized. [ 1665.606050][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1665.608805][ T5903] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input55 [ 1665.637557][ T5871] usb 5-1: Product: syz [ 1665.646107][ T5871] usb 5-1: Manufacturer: syz [ 1665.751044][ T5871] usb 5-1: SerialNumber: syz [ 1665.766128][ T5871] usb 5-1: config 0 descriptor?? [ 1666.424474][ T5871] usb 5-1: USB disconnect, device number 107 [ 1666.432110][ T5903] usb 3-1: USB disconnect, device number 118 [ 1666.438215][ C0] appletouch 3-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 1666.491230][ T8892] udevd[8892]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1666.520966][T21438] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1666.532131][T21438] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1666.541897][ T5903] appletouch 3-1:0.85: input: appletouch disconnected [ 1666.542745][T21438] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1666.555864][T21438] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1666.619768][T21438] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1667.708209][T11848] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1667.888189][T14831] Bluetooth: hci5: command 0x0406 tx timeout [ 1668.028209][ T5903] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1668.260094][T11848] usb 1-1: Using ep0 maxpacket: 16 [ 1668.262318][ T5903] usb 5-1: Using ep0 maxpacket: 16 [ 1668.274831][T11848] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 1668.295250][ T30] audit: type=1400 audit(1749110219.344:776): avc: denied { create } for pid=21480 comm="syz.2.3909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1668.331482][ T5903] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 1668.339626][ T48] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1668.343663][ T5903] usb 5-1: config 0 has an invalid descriptor of length 95, skipping remainder of the config [ 1668.359146][T11848] usb 1-1: config 0 has an invalid descriptor of length 95, skipping remainder of the config [ 1668.367147][ T5903] usb 5-1: config 0 has no interface number 0 [ 1668.383585][T11848] usb 1-1: config 0 has no interface number 0 [ 1668.396665][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.467425][ T5903] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1668.477913][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1668.480165][T11848] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1668.486361][ T5903] usb 5-1: Product: syz [ 1668.533740][ T48] usb 7-1: Using ep0 maxpacket: 8 [ 1668.586650][ T5903] usb 5-1: Manufacturer: syz [ 1668.588552][ T48] usb 7-1: config 0 has an invalid interface number: 255 but max is 0 [ 1668.603574][T11848] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1668.617972][ T48] usb 7-1: config 0 has no interface number 0 [ 1668.618380][T14831] Bluetooth: hci2: command 0x0406 tx timeout [ 1668.624216][T12110] Bluetooth: hci3: command 0x0406 tx timeout [ 1668.634102][T18963] Bluetooth: hci0: command 0x0406 tx timeout [ 1668.636580][T11848] usb 1-1: Product: syz [ 1668.642088][ T5903] usb 5-1: SerialNumber: syz [ 1668.650704][ T48] usb 7-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1668.650744][ T48] usb 7-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1668.650771][ T48] usb 7-1: config 0 interface 255 has no altsetting 0 [ 1668.650802][ T48] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1668.650823][ T48] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1668.688416][T14831] Bluetooth: hci4: command 0x041b tx timeout [ 1668.720627][ T5903] usb 5-1: config 0 descriptor?? [ 1668.732938][ T5903] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 1668.736850][T11848] usb 1-1: Manufacturer: syz [ 1668.742344][ T5903] usb 5-1: No valid video chain found. [ 1668.765846][T11848] usb 1-1: SerialNumber: syz [ 1668.816160][T11848] usb 1-1: config 0 descriptor?? [ 1668.856279][T11848] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 1668.863174][T11848] usb 1-1: No valid video chain found. [ 1668.888248][ T5871] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1668.909985][ T48] usb 7-1: config 0 descriptor?? [ 1669.078285][ T5871] usb 4-1: Using ep0 maxpacket: 8 [ 1669.085544][ T5871] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 1669.095971][ T5871] usb 4-1: config 6 has no interface number 0 [ 1669.107338][ T5871] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1669.172580][ T5871] usb 4-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1669.223108][ T5871] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1669.243813][ T5871] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1669.293296][ T5871] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1669.310025][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1669.330018][ T5871] usb 4-1: Product: syz [ 1669.366724][ T5871] usb 4-1: Manufacturer: syz [ 1669.387365][ T5871] usb 4-1: SerialNumber: syz [ 1669.432131][ T5871] hso 4-1:6.2: Failed to find BULK IN ep [ 1669.741709][T21517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1669.766343][T21517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1669.785263][T21517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1669.797959][T21517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1670.098627][ T5871] usb 1-1: USB disconnect, device number 97 [ 1670.580609][ T5871] usb 5-1: USB disconnect, device number 108 [ 1670.650322][T21477] sd 0:0:1:0: device reset [ 1670.769979][ T5903] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1671.699963][ T5903] usb 1-1: Using ep0 maxpacket: 8 [ 1671.965040][ T9722] usb 4-1: USB disconnect, device number 125 [ 1672.014776][ T5903] usb 1-1: config 6 has an invalid interface number: 2 but max is 0 [ 1672.051746][ T5903] usb 1-1: config 6 has no interface number 0 [ 1672.070806][ T5903] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1672.093833][ T5903] usb 1-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1672.124441][T21548] FAULT_INJECTION: forcing a failure. [ 1672.124441][T21548] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1672.138504][ T5903] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1672.160690][T21548] CPU: 0 UID: 0 PID: 21548 Comm: syz.4.3916 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) [ 1672.160715][T21548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1672.160725][T21548] Call Trace: [ 1672.160731][T21548] [ 1672.160739][T21548] dump_stack_lvl+0x16c/0x1f0 [ 1672.160766][T21548] should_fail_ex+0x512/0x640 [ 1672.160794][T21548] _copy_from_user+0x2e/0xd0 [ 1672.160820][T21548] move_addr_to_kernel+0x65/0x170 [ 1672.160839][T21548] __sys_sendto+0x1be/0x520 [ 1672.160866][T21548] ? __pfx___sys_sendto+0x10/0x10 [ 1672.160884][T21548] ? lock_acquire+0x179/0x350 [ 1672.160917][T21548] ? bpf_trace_run2+0x265/0x590 [ 1672.160946][T21548] ? __might_fault+0xe3/0x190 [ 1672.160968][T21548] ? __might_fault+0x13b/0x190 [ 1672.160995][T21548] __x64_sys_sendto+0xe0/0x1c0 [ 1672.161014][T21548] ? syscall_trace_enter+0xee/0x260 [ 1672.161033][T21548] do_syscall_64+0xcd/0x4c0 [ 1672.161057][T21548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1672.161075][T21548] RIP: 0033:0x7fa2e2d8e929 [ 1672.161090][T21548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1672.161105][T21548] RSP: 002b:00007fa2e3c3b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1672.161122][T21548] RAX: ffffffffffffffda RBX: 00007fa2e2fb6080 RCX: 00007fa2e2d8e929 [ 1672.161133][T21548] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: 0000000000000008 [ 1672.161144][T21548] RBP: 00007fa2e3c3b090 R08: 0000200000000200 R09: 000000000000001c [ 1672.161159][T21548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1672.161168][T21548] R13: 0000000000000000 R14: 00007fa2e2fb6080 R15: 00007ffe9c90d7a8 [ 1672.161193][T21548] [ 1672.361328][ T5903] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1672.572259][T21548] openvswitch: netlink: Message has 2 unknown bytes. [ 1672.596765][ T5903] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1672.625332][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1672.635397][ T5903] usb 1-1: Product: syz [ 1672.645157][ T5903] usb 1-1: Manufacturer: syz [ 1672.653896][ T5903] usb 1-1: SerialNumber: syz [ 1672.696062][ T5903] hso 1-1:6.2: Failed to find BULK IN ep [ 1672.706796][T21548] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1672.716614][ T48] asix 7-1:0.255 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1672.796121][ T48] asix 7-1:0.255 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 1672.848444][ T30] audit: type=1326 audit(1749110223.874:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21551 comm="syz.2.3919" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5bd178e929 code=0x80000000 [ 1673.348388][ T48] asix 7-1:0.255: probe with driver asix failed with error -71 [ 1673.366687][ T48] usb 7-1: USB disconnect, device number 5 [ 1673.401248][ T5903] usb 1-1: USB disconnect, device number 98 [ 1673.427814][ T30] audit: type=1400 audit(1749110224.474:778): avc: denied { read } for pid=21557 comm="syz.3.3921" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1673.830714][ T30] audit: type=1400 audit(1749110224.474:779): avc: denied { open } for pid=21557 comm="syz.3.3921" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1673.916356][ T30] audit: type=1400 audit(1749110224.524:780): avc: denied { ioctl } for pid=21557 comm="syz.3.3921" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1674.639458][ T30] audit: type=1400 audit(1749110224.524:781): avc: denied { set_context_mgr } for pid=21557 comm="syz.3.3921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1674.918727][ T30] audit: type=1400 audit(1749110224.684:782): avc: denied { bind } for pid=21557 comm="syz.3.3921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1674.978183][ T5903] usb 1-1: new full-speed USB device number 99 using dummy_hcd [ 1675.180586][ T5903] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1675.638594][ T5903] usb 1-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1675.659206][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1675.676639][ T5903] usb 1-1: Product: syz [ 1675.697266][ T5903] usb 1-1: Manufacturer: syz [ 1675.713482][ T5903] usb 1-1: SerialNumber: syz [ 1675.732696][ T5903] usb 1-1: config 0 descriptor?? [ 1675.759962][ T5903] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1675.808973][ T5903] dvb-usb: bulk message failed: -22 (3/0) [ 1675.900373][ T5903] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1675.919724][ T5903] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1675.922093][ T9722] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1675.961696][ T5903] usb 1-1: media controller created [ 1675.989423][ T5903] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1676.079397][ T5903] dvb-usb: bulk message failed: -22 (6/0) [ 1676.094089][ T5903] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1676.198483][T21566] dibusb: i2c wr: len=61 is too big! [ 1676.198483][T21566] [ 1676.230351][ T5903] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input56 [ 1676.254158][ T9722] usb 5-1: Using ep0 maxpacket: 8 [ 1676.681921][ T5903] dvb-usb: schedule remote query interval to 150 msecs. [ 1676.689692][ T5903] dvb-usb: bulk message failed: -22 (3/0) [ 1676.713348][ T5903] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1676.713431][ T9722] usb 5-1: config 6 has an invalid interface number: 2 but max is 0 [ 1676.737610][ T9722] usb 5-1: config 6 has no interface number 0 [ 1676.744397][ T9722] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1676.751569][ T5903] usb 1-1: USB disconnect, device number 99 [ 1676.758943][ T9722] usb 5-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1676.949388][ T9722] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1676.960448][ T9722] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1676.996313][ T9722] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1677.540750][ T5903] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1677.565892][ T9722] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1677.587978][ T9722] usb 5-1: Product: syz [ 1677.597495][ T9722] usb 5-1: Manufacturer: syz [ 1677.703198][ T9722] usb 5-1: SerialNumber: syz [ 1677.957371][ T9722] hso 5-1:6.2: Failed to find BULK IN ep [ 1678.054861][T21534] usb 5-1: USB disconnect, device number 109 [ 1678.158489][T13601] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1678.171691][ T30] audit: type=1400 audit(1749110229.224:783): avc: denied { create } for pid=21613 comm="syz.3.3934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1678.319301][T13601] usb 7-1: Using ep0 maxpacket: 8 [ 1678.326054][T13601] usb 7-1: config 6 has an invalid interface number: 2 but max is 0 [ 1678.337136][T13601] usb 7-1: config 6 has no interface number 0 [ 1678.344328][T13601] usb 7-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1678.360685][T13601] usb 7-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1678.391777][T13601] usb 7-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1678.404157][T13601] usb 7-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1678.417547][T13601] usb 7-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1678.427265][T13601] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1678.435952][T13601] usb 7-1: Product: syz [ 1678.440413][T13601] usb 7-1: Manufacturer: syz [ 1678.445020][T13601] usb 7-1: SerialNumber: syz [ 1678.459813][T13601] hso 7-1:6.2: Failed to find BULK IN ep [ 1678.482065][ T9722] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1678.518597][T21534] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1678.638490][ T9722] usb 4-1: Using ep0 maxpacket: 32 [ 1678.645177][ T9722] usb 4-1: config 1 has an invalid interface number: 137 but max is 0 [ 1678.654844][ T9722] usb 4-1: config 1 has no interface number 0 [ 1678.666922][ T48] usb 7-1: USB disconnect, device number 6 [ 1678.680316][T21534] usb 5-1: config 0 has an invalid interface number: 125 but max is 0 [ 1678.704149][ T9722] usb 4-1: config 1 interface 137 has no altsetting 0 [ 1678.717349][T21534] usb 5-1: config 0 has no interface number 0 [ 1678.729231][T21534] usb 5-1: New USB device found, idVendor=0421, idProduct=007b, bcdDevice=ed.44 [ 1678.741397][T21534] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1678.749541][ T9722] usb 4-1: New USB device found, idVendor=0557, idProduct=2021, bcdDevice=74.1a [ 1678.760007][T21534] usb 5-1: Product: syz [ 1678.764181][T21534] usb 5-1: Manufacturer: syz [ 1678.770178][ T9722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1678.778479][T21534] usb 5-1: SerialNumber: syz [ 1678.783235][ T9722] usb 4-1: Product: syz [ 1678.787396][ T9722] usb 4-1: Manufacturer: syz [ 1678.794615][T21534] usb 5-1: config 0 descriptor?? [ 1678.799933][ T9722] usb 4-1: SerialNumber: syz [ 1678.808771][T21534] rndis_host 5-1:0.125: invalid descriptor buffer length [ 1678.818852][T21534] usb 5-1: bad CDC descriptors [ 1678.825520][T21534] cdc_acm 5-1:0.125: invalid descriptor buffer length [ 1679.751580][T13601] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1679.930148][ T5903] usb 5-1: USB disconnect, device number 110 [ 1679.959309][T13601] usb 3-1: Using ep0 maxpacket: 8 [ 1679.991622][ T9722] pl2303 4-1:1.137: required interrupt-in endpoint missing [ 1680.025471][T13601] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1680.043662][ T9722] usb 4-1: USB disconnect, device number 126 [ 1681.003945][T13601] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1681.013842][T13601] usb 3-1: New USB device found, idVendor=06a3, idProduct=0cfa, bcdDevice= 0.40 [ 1681.022984][T13601] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1681.031017][T13601] usb 3-1: Product: e [ 1681.035032][T13601] usb 3-1: Manufacturer: М [ 1681.039983][T13601] usb 3-1: SerialNumber: syz [ 1681.740514][T13601] usbhid 3-1:1.0: can't add hid device: -71 [ 1681.746513][T13601] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 1681.770710][T13601] usb 3-1: USB disconnect, device number 119 [ 1682.120306][ T9722] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1682.373760][T21686] netlink: 'syz.2.3955': attribute type 72 has an invalid length. [ 1682.404124][ T9722] usb 7-1: config 0 has an invalid interface number: 125 but max is 0 [ 1682.413482][ T9722] usb 7-1: config 0 has no interface number 0 [ 1682.860381][ T9722] usb 7-1: New USB device found, idVendor=0421, idProduct=007b, bcdDevice=ed.44 [ 1682.876828][ T9722] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1682.891427][ T9722] usb 7-1: Product: syz [ 1682.897758][ T9722] usb 7-1: Manufacturer: syz [ 1682.908104][ T9722] usb 7-1: SerialNumber: syz [ 1682.918723][ T9722] usb 7-1: config 0 descriptor?? [ 1682.929464][ T9722] rndis_host 7-1:0.125: invalid descriptor buffer length [ 1682.944799][ T9722] usb 7-1: bad CDC descriptors [ 1682.955110][ T9722] cdc_acm 7-1:0.125: invalid descriptor buffer length [ 1684.375841][ T5868] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1684.538511][ T5868] usb 3-1: Using ep0 maxpacket: 32 [ 1684.548453][ T5868] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 1684.556682][ T5868] usb 3-1: config 0 has no interface number 0 [ 1684.562941][ T5868] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1684.576892][T21712] pim6reg1: entered allmulticast mode [ 1684.584157][ T5868] usb 3-1: config 0 interface 85 has no altsetting 0 [ 1684.649003][ T5868] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1684.713836][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1684.718930][T21714] pim6reg1: entered allmulticast mode [ 1684.727766][ T30] audit: type=1400 audit(1749110235.774:784): avc: denied { read } for pid=21707 comm="syz.4.3962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1684.727774][ T5868] usb 3-1: Product: syz [ 1684.727821][ T5868] usb 3-1: Manufacturer: syz [ 1684.759952][ T5868] usb 3-1: SerialNumber: syz [ 1684.871526][ T5868] usb 3-1: config 0 descriptor?? [ 1684.960839][T13601] usb 7-1: USB disconnect, device number 7 [ 1685.202302][ T5868] appletouch 3-1:0.85: Failed to read mode from device. [ 1685.212962][ T5868] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 1685.246291][ T5868] usb 3-1: USB disconnect, device number 120 [ 1686.315631][T21726] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1686.338545][T21726] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1686.353160][T21726] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1686.362843][T21726] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1686.372909][T21726] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1686.431905][ T30] audit: type=1400 audit(1749110237.484:785): avc: denied { nlmsg_write } for pid=21739 comm="syz.6.3971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1686.460485][T21742] warning: `syz.4.3972' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1686.483309][ T30] audit: type=1400 audit(1749110237.484:786): avc: denied { audit_write } for pid=21739 comm="syz.6.3971" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1686.507957][ T30] audit: type=1107 audit(1749110237.484:787): pid=21739 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1686.508414][ T30] audit: type=1400 audit(1749110237.524:788): avc: denied { bind } for pid=21741 comm="syz.4.3972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1686.628779][ T30] audit: type=1400 audit(1749110237.524:789): avc: denied { write } for pid=21741 comm="syz.4.3972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1686.654612][T21746] overlayfs: failed to resolve './file0': -2 [ 1686.808194][ T30] audit: type=1400 audit(1749110237.854:790): avc: denied { read } for pid=21754 comm="syz.4.3978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1687.386522][T14831] Bluetooth: hci5: command 0x0406 tx timeout [ 1687.487787][T21762] FAULT_INJECTION: forcing a failure. [ 1687.487787][T21762] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1687.555241][T21762] CPU: 0 UID: 0 PID: 21762 Comm: syz.6.3979 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) [ 1687.555265][T21762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1687.555276][T21762] Call Trace: [ 1687.555281][T21762] [ 1687.555288][T21762] dump_stack_lvl+0x16c/0x1f0 [ 1687.555314][T21762] should_fail_ex+0x512/0x640 [ 1687.555340][T21762] _copy_from_user+0x2e/0xd0 [ 1687.555365][T21762] copy_msghdr_from_user+0x98/0x160 [ 1687.555387][T21762] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1687.555413][T21762] ? lock_acquire+0x179/0x350 [ 1687.555437][T21762] ? find_held_lock+0x2b/0x80 [ 1687.555458][T21762] ___sys_sendmsg+0xfe/0x1d0 [ 1687.555476][T21762] ? rcu_is_watching+0x12/0xc0 [ 1687.555497][T21762] ? __pfx____sys_sendmsg+0x10/0x10 [ 1687.555515][T21762] ? __lock_acquire+0x622/0x1c90 [ 1687.555566][T21762] __sys_sendmsg+0x16d/0x220 [ 1687.555586][T21762] ? __pfx___sys_sendmsg+0x10/0x10 [ 1687.555605][T21762] ? rcu_is_watching+0x12/0xc0 [ 1687.555638][T21762] do_syscall_64+0xcd/0x4c0 [ 1687.555660][T21762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1687.555675][T21762] RIP: 0033:0x7fec5a38e929 [ 1687.555689][T21762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1687.555704][T21762] RSP: 002b:00007fec5b20e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1687.555720][T21762] RAX: ffffffffffffffda RBX: 00007fec5a5b5fa0 RCX: 00007fec5a38e929 [ 1687.555730][T21762] RDX: 0000000004048010 RSI: 0000200000000080 RDI: 0000000000000003 [ 1687.555740][T21762] RBP: 00007fec5b20e090 R08: 0000000000000000 R09: 0000000000000000 [ 1687.555749][T21762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1687.555757][T21762] R13: 0000000000000000 R14: 00007fec5a5b5fa0 R15: 00007ffd98c4aee8 [ 1687.555778][T21762] [ 1687.739313][ C0] vkms_vblank_simulate: vblank timer overrun [ 1688.224791][T21781] FAULT_INJECTION: forcing a failure. [ 1688.224791][T21781] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1688.237908][T21781] CPU: 1 UID: 0 PID: 21781 Comm: syz.6.3980 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) [ 1688.237932][T21781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1688.237942][T21781] Call Trace: [ 1688.237949][T21781] [ 1688.237956][T21781] dump_stack_lvl+0x16c/0x1f0 [ 1688.237983][T21781] should_fail_ex+0x512/0x640 [ 1688.238017][T21781] _copy_from_user+0x2e/0xd0 [ 1688.238044][T21781] copy_msghdr_from_user+0x98/0x160 [ 1688.238071][T21781] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1688.238099][T21781] ? __lock_acquire+0xb8a/0x1c90 [ 1688.238132][T21781] ___sys_sendmsg+0xfe/0x1d0 [ 1688.238157][T21781] ? __pfx____sys_sendmsg+0x10/0x10 [ 1688.238177][T21781] ? __lock_acquire+0x622/0x1c90 [ 1688.238232][T21781] __sys_sendmsg+0x16d/0x220 [ 1688.238256][T21781] ? __pfx___sys_sendmsg+0x10/0x10 [ 1688.238289][T21781] ? rcu_is_watching+0x12/0xc0 [ 1688.238314][T21781] do_syscall_64+0xcd/0x4c0 [ 1688.238338][T21781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1688.238356][T21781] RIP: 0033:0x7fec5a38e929 [ 1688.238370][T21781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1688.238386][T21781] RSP: 002b:00007fec5b1cc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1688.238404][T21781] RAX: ffffffffffffffda RBX: 00007fec5a5b6160 RCX: 00007fec5a38e929 [ 1688.238415][T21781] RDX: 0000000000000010 RSI: 0000200000000500 RDI: 0000000000000009 [ 1688.238426][T21781] RBP: 00007fec5b1cc090 R08: 0000000000000000 R09: 0000000000000000 [ 1688.238437][T21781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1688.238447][T21781] R13: 0000000000000000 R14: 00007fec5a5b6160 R15: 00007ffd98c4aee8 [ 1688.238471][T21781] [ 1688.413129][T14831] Bluetooth: hci2: command 0x0406 tx timeout [ 1688.413158][T18963] Bluetooth: hci3: command 0x0406 tx timeout [ 1688.419153][T14831] Bluetooth: hci0: command 0x0406 tx timeout [ 1688.448151][T18963] Bluetooth: hci4: command 0x041b tx timeout [ 1688.538304][ T5868] usb 5-1: new full-speed USB device number 111 using dummy_hcd [ 1688.962637][ T30] audit: type=1400 audit(1749110240.014:791): avc: denied { write } for pid=21784 comm="syz.6.3985" name="mice" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1689.315602][ T5868] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1689.360817][ T5868] usb 5-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1689.377219][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1689.386737][ T5868] usb 5-1: Product: syz [ 1689.392467][ T5868] usb 5-1: Manufacturer: syz [ 1689.397711][ T5868] usb 5-1: SerialNumber: syz [ 1689.407341][ T5868] usb 5-1: config 0 descriptor?? [ 1689.417838][ T5868] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1689.429047][T13601] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1689.442030][ T5868] dvb-usb: bulk message failed: -22 (3/0) [ 1689.472289][ T5868] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1689.486305][ T5868] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1689.520169][ T5868] usb 5-1: media controller created [ 1689.527007][ T5868] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1689.565657][ T5868] dvb-usb: bulk message failed: -22 (6/0) [ 1689.576460][ T5868] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1689.591832][T13601] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1689.602064][T13601] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1689.618359][ T5868] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input58 [ 1689.631003][T13601] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1689.963993][T13601] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1689.977745][T13601] usb 4-1: Product: syz [ 1690.139729][ T5868] dvb-usb: schedule remote query interval to 150 msecs. [ 1690.147596][T21770] dibusb: i2c wr: len=61 is too big! [ 1690.147596][T21770] [ 1690.156917][T13601] usb 4-1: Manufacturer: syz [ 1690.167007][ T5868] dvb-usb: bulk message failed: -22 (3/0) [ 1690.173220][T13601] usb 4-1: SerialNumber: syz [ 1690.181082][T13601] usb 4-1: config 0 descriptor?? [ 1690.198826][ T5868] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1690.215741][ T5868] usb 5-1: USB disconnect, device number 111 [ 1690.266492][ T5868] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1690.286416][ T30] audit: type=1400 audit(1749110241.334:792): avc: denied { setopt } for pid=21802 comm="syz.6.3991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1690.513641][T13601] usb 4-1: USB disconnect, device number 127 [ 1690.791252][T21811] openvswitch: netlink: Message has 2 unknown bytes. [ 1690.797942][T21811] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1690.819615][ T7670] udevd[7670]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1690.835611][T21808] openvswitch: netlink: Message has 2 unknown bytes. [ 1690.842932][T21808] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1691.228850][ T5868] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1691.379982][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1691.412994][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1691.450161][ T5868] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1691.461010][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1691.478200][ T5868] usb 5-1: Product: syz [ 1691.488304][ T5868] usb 5-1: Manufacturer: syz [ 1691.498377][ T5868] usb 5-1: SerialNumber: syz [ 1691.510742][ T5868] usb 5-1: config 0 descriptor?? [ 1691.678485][T18963] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 1691.678519][T18963] Bluetooth: hci3: Malformed Event: 0x2f [ 1691.744844][ T5868] usb 5-1: USB disconnect, device number 112 [ 1692.193652][ T7670] udevd[7670]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1693.409486][T21844] FAULT_INJECTION: forcing a failure. [ 1693.409486][T21844] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1693.422603][T21844] CPU: 1 UID: 0 PID: 21844 Comm: syz.0.4003 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) [ 1693.422626][T21844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1693.422636][T21844] Call Trace: [ 1693.422642][T21844] [ 1693.422648][T21844] dump_stack_lvl+0x16c/0x1f0 [ 1693.422675][T21844] should_fail_ex+0x512/0x640 [ 1693.422703][T21844] _copy_from_user+0x2e/0xd0 [ 1693.422734][T21844] copy_msghdr_from_user+0x98/0x160 [ 1693.422757][T21844] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1693.422791][T21844] ___sys_sendmsg+0xfe/0x1d0 [ 1693.422814][T21844] ? __pfx____sys_sendmsg+0x10/0x10 [ 1693.422834][T21844] ? __lock_acquire+0x622/0x1c90 [ 1693.422891][T21844] __sys_sendmsg+0x16d/0x220 [ 1693.422914][T21844] ? __pfx___sys_sendmsg+0x10/0x10 [ 1693.422947][T21844] ? rcu_is_watching+0x12/0xc0 [ 1693.422972][T21844] do_syscall_64+0xcd/0x4c0 [ 1693.422996][T21844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1693.423014][T21844] RIP: 0033:0x7feb5158e929 [ 1693.423027][T21844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1693.423044][T21844] RSP: 002b:00007feb52497038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1693.423060][T21844] RAX: ffffffffffffffda RBX: 00007feb517b6160 RCX: 00007feb5158e929 [ 1693.423071][T21844] RDX: 0000000004000054 RSI: 0000200000000480 RDI: 0000000000000006 [ 1693.423082][T21844] RBP: 00007feb52497090 R08: 0000000000000000 R09: 0000000000000000 [ 1693.423093][T21844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1693.423103][T21844] R13: 0000000000000000 R14: 00007feb517b6160 R15: 00007fffcf3ef3f8 [ 1693.423126][T21844] [ 1693.428609][T21840] input: syz1 as /devices/virtual/input/input59 [ 1695.070030][ T5869] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1695.078028][T13601] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1695.268188][T13601] usb 4-1: Using ep0 maxpacket: 32 [ 1695.334949][T13601] usb 4-1: config 1 has an invalid interface number: 137 but max is 0 [ 1695.559504][T13601] usb 4-1: config 1 has no interface number 0 [ 1695.567710][T13601] usb 4-1: config 1 interface 137 has no altsetting 0 [ 1695.575781][ T5869] usb 5-1: Using ep0 maxpacket: 32 [ 1695.583360][ T5869] usb 5-1: config 1 has an invalid interface number: 137 but max is 0 [ 1695.592043][ T5869] usb 5-1: config 1 has no interface number 0 [ 1695.599404][ T5869] usb 5-1: config 1 interface 137 has no altsetting 0 [ 1695.606761][T13601] usb 4-1: New USB device found, idVendor=0557, idProduct=2021, bcdDevice=74.1a [ 1695.623156][ T5869] usb 5-1: New USB device found, idVendor=0557, idProduct=2021, bcdDevice=74.1a [ 1695.635006][T13601] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1695.643847][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1695.654385][T13601] usb 4-1: Product: syz [ 1696.206934][ T5869] usb 5-1: Product: syz [ 1696.211369][T13601] usb 4-1: Manufacturer: syz [ 1696.216185][T13601] usb 4-1: SerialNumber: syz [ 1696.228569][ T5869] usb 5-1: Manufacturer: syz [ 1696.256955][ T5869] usb 5-1: SerialNumber: syz [ 1696.427564][T21878] netlink: 'syz.2.4013': attribute type 33 has an invalid length. [ 1696.446111][T21878] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4013'. [ 1696.467088][T21878] FAULT_INJECTION: forcing a failure. [ 1696.467088][T21878] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1696.484581][T21878] CPU: 0 UID: 0 PID: 21878 Comm: syz.2.4013 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) [ 1696.484610][T21878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1696.484621][T21878] Call Trace: [ 1696.484626][T21878] [ 1696.484633][T21878] dump_stack_lvl+0x16c/0x1f0 [ 1696.484660][T21878] should_fail_ex+0x512/0x640 [ 1696.484688][T21878] _copy_from_user+0x2e/0xd0 [ 1696.484715][T21878] copy_msghdr_from_user+0x98/0x160 [ 1696.484736][T21878] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1696.484769][T21878] ___sys_sendmsg+0xfe/0x1d0 [ 1696.484790][T21878] ? __pfx____sys_sendmsg+0x10/0x10 [ 1696.484809][T21878] ? __lock_acquire+0x622/0x1c90 [ 1696.484862][T21878] __sys_sendmsg+0x16d/0x220 [ 1696.484884][T21878] ? __pfx___sys_sendmsg+0x10/0x10 [ 1696.484918][T21878] ? rcu_is_watching+0x12/0xc0 [ 1696.484943][T21878] do_syscall_64+0xcd/0x4c0 [ 1696.484968][T21878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1696.484990][T21878] RIP: 0033:0x7f5bd178e929 [ 1696.485004][T21878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1696.485022][T21878] RSP: 002b:00007f5bd257e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1696.485040][T21878] RAX: ffffffffffffffda RBX: 00007f5bd19b5fa0 RCX: 00007f5bd178e929 [ 1696.485052][T21878] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000006 [ 1696.485063][T21878] RBP: 00007f5bd257e090 R08: 0000000000000000 R09: 0000000000000000 [ 1696.485073][T21878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1696.485083][T21878] R13: 0000000000000000 R14: 00007f5bd19b5fa0 R15: 00007fffaf87cd28 [ 1696.485106][T21878] [ 1696.648239][T21882] ------------[ cut here ]------------ [ 1696.652186][ C0] vkms_vblank_simulate: vblank timer overrun [ 1696.655313][T21882] platform vkms: [drm] vblank wait timed out on crtc 0 [ 1696.691525][T21882] WARNING: CPU: 0 PID: 21882 at drivers/gpu/drm/drm_vblank.c:1307 drm_wait_one_vblank+0x2f6/0x5b0 [ 1696.691567][T21882] Modules linked in: [ 1696.691653][T21882] CPU: 0 UID: 0 PID: 21882 Comm: syz.6.4014 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) [ 1696.691680][T21882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1696.691706][T21882] RIP: 0010:drm_wait_one_vblank+0x2f6/0x5b0 [ 1696.691827][T21882] Code: ed 0f 84 12 02 00 00 e8 08 0c 40 fc 48 89 ef e8 20 ba 8e 00 44 89 e1 4c 89 ea 48 c7 c7 a0 2d 2b 8c 48 89 c6 e8 6b d7 fe fb 90 <0f> 0b 90 90 e9 4e fe ff ff e8 dc 0b 40 fc 48 89 ef e8 64 87 05 06 [ 1696.691851][T21882] RSP: 0018:ffffc90018527b20 EFLAGS: 00010286 [ 1696.691871][T21882] RAX: 0000000000000000 RBX: ffff888141f0a000 RCX: ffffc90011b8b000 [ 1696.691887][T21882] RDX: 0000000000080000 RSI: ffffffff817ae375 RDI: 0000000000000001 [ 1696.691902][T21882] RBP: ffff888025d4b010 R08: 0000000000000001 R09: 0000000000000000 [ 1696.691916][T21882] R10: 0000000000000001 R11: 0000000000054458 R12: 0000000000000000 [ 1696.691930][T21882] R13: ffff888140bc44a0 R14: 1ffff920030a4f67 R15: 00000000000112a6 [ 1696.691966][T21882] FS: 00007fec5b12c6c0(0000) GS:ffff88812475a000(0000) knlGS:0000000000000000 [ 1696.691987][T21882] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1696.691999][T21882] CR2: 0000001b33e0eff8 CR3: 0000000059ac9000 CR4: 00000000003526f0 [ 1696.692012][T21882] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1696.692024][T21882] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1696.692037][T21882] Call Trace: [ 1696.692045][T21882] [ 1696.692057][T21882] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 1696.692129][T21882] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1696.692162][T21882] ? lockdep_hardirqs_on+0x7c/0x110 [ 1696.692190][T21882] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1696.692215][T21882] ? drm_vblank_get+0x150/0x290 [ 1696.692267][T21882] drm_fb_helper_ioctl+0x156/0x1a0 [ 1696.692297][T21882] ? __pfx_drm_fb_helper_ioctl+0x10/0x10 [ 1696.692322][T21882] do_fb_ioctl+0x3d5/0x7e0 [ 1696.692345][T21882] ? __pfx_do_fb_ioctl+0x10/0x10 [ 1696.692370][T21882] ? do_vfs_ioctl+0x523/0x1a60 [ 1696.692450][T21882] ? selinux_file_ioctl+0x180/0x270 [ 1696.692482][T21882] fb_ioctl+0xe5/0x150 [ 1696.692500][T21882] ? __pfx_fb_ioctl+0x10/0x10 [ 1696.692521][T21882] __x64_sys_ioctl+0x18b/0x210 [ 1696.692569][T21882] do_syscall_64+0xcd/0x4c0 [ 1696.692598][T21882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1696.692618][T21882] RIP: 0033:0x7fec5a38e929 [ 1696.692637][T21882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1696.692656][T21882] RSP: 002b:00007fec5b12c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1696.692679][T21882] RAX: ffffffffffffffda RBX: 00007fec5a5b6080 RCX: 00007fec5a38e929 [ 1696.692735][T21882] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 000000000000000a [ 1696.692748][T21882] RBP: 00007fec5a410b39 R08: 0000000000000000 R09: 0000000000000000 [ 1696.692761][T21882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1696.692773][T21882] R13: 0000000000000001 R14: 00007fec5a5b6080 R15: 00007ffd98c4aee8 [ 1696.692802][T21882] [ 1696.692811][T21882] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1696.692824][T21882] CPU: 0 UID: 0 PID: 21882 Comm: syz.6.4014 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) [ 1696.692846][T21882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1696.692860][T21882] Call Trace: [ 1696.692868][T21882] [ 1696.692876][T21882] dump_stack_lvl+0x3d/0x1f0 [ 1696.692902][T21882] panic+0x71c/0x800 [ 1696.692930][T21882] ? __pfx_panic+0x10/0x10 [ 1696.692956][T21882] ? show_trace_log_lvl+0x29b/0x3e0 [ 1696.692993][T21882] ? drm_wait_one_vblank+0x2f6/0x5b0 [ 1696.693017][T21882] check_panic_on_warn+0xab/0xb0 [ 1696.693046][T21882] __warn+0xf6/0x3c0 [ 1696.693072][T21882] ? drm_wait_one_vblank+0x2f6/0x5b0 [ 1696.693095][T21882] report_bug+0x3c3/0x580 [ 1696.693116][T21882] ? drm_wait_one_vblank+0x2f6/0x5b0 [ 1696.693142][T21882] handle_bug+0x184/0x210 [ 1696.693168][T21882] exc_invalid_op+0x17/0x50 [ 1696.693195][T21882] asm_exc_invalid_op+0x1a/0x20 [ 1696.693214][T21882] RIP: 0010:drm_wait_one_vblank+0x2f6/0x5b0 [ 1696.693239][T21882] Code: ed 0f 84 12 02 00 00 e8 08 0c 40 fc 48 89 ef e8 20 ba 8e 00 44 89 e1 4c 89 ea 48 c7 c7 a0 2d 2b 8c 48 89 c6 e8 6b d7 fe fb 90 <0f> 0b 90 90 e9 4e fe ff ff e8 dc 0b 40 fc 48 89 ef e8 64 87 05 06 [ 1696.693256][T21882] RSP: 0018:ffffc90018527b20 EFLAGS: 00010286 [ 1696.693271][T21882] RAX: 0000000000000000 RBX: ffff888141f0a000 RCX: ffffc90011b8b000 [ 1696.693284][T21882] RDX: 0000000000080000 RSI: ffffffff817ae375 RDI: 0000000000000001 [ 1696.693296][T21882] RBP: ffff888025d4b010 R08: 0000000000000001 R09: 0000000000000000 [ 1696.693307][T21882] R10: 0000000000000001 R11: 0000000000054458 R12: 0000000000000000 [ 1696.693318][T21882] R13: ffff888140bc44a0 R14: 1ffff920030a4f67 R15: 00000000000112a6 [ 1696.693339][T21882] ? __warn_printk+0x1a5/0x350 [ 1696.693371][T21882] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 1696.693398][T21882] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1696.693426][T21882] ? lockdep_hardirqs_on+0x7c/0x110 [ 1696.693450][T21882] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1696.693472][T21882] ? drm_vblank_get+0x150/0x290 [ 1696.693499][T21882] drm_fb_helper_ioctl+0x156/0x1a0 [ 1696.693526][T21882] ? __pfx_drm_fb_helper_ioctl+0x10/0x10 [ 1696.693551][T21882] do_fb_ioctl+0x3d5/0x7e0 [ 1696.693572][T21882] ? __pfx_do_fb_ioctl+0x10/0x10 [ 1696.693598][T21882] ? do_vfs_ioctl+0x523/0x1a60 [ 1696.693653][T21882] ? selinux_file_ioctl+0x180/0x270 [ 1696.693677][T21882] fb_ioctl+0xe5/0x150 [ 1696.693690][T21882] ? __pfx_fb_ioctl+0x10/0x10 [ 1696.693712][T21882] __x64_sys_ioctl+0x18b/0x210 [ 1696.693730][T21882] do_syscall_64+0xcd/0x4c0 [ 1696.693751][T21882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1696.693764][T21882] RIP: 0033:0x7fec5a38e929 [ 1696.693775][T21882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1696.693790][T21882] RSP: 002b:00007fec5b12c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1696.693803][T21882] RAX: ffffffffffffffda RBX: 00007fec5a5b6080 RCX: 00007fec5a38e929 [ 1696.693813][T21882] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 000000000000000a [ 1696.693822][T21882] RBP: 00007fec5a410b39 R08: 0000000000000000 R09: 0000000000000000 [ 1696.693831][T21882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1696.693839][T21882] R13: 0000000000000001 R14: 00007fec5a5b6080 R15: 00007ffd98c4aee8 [ 1696.693859][T21882] [ 1696.694063][T21882] Kernel Offset: disabled