last executing test programs: 2m33.909939516s ago: executing program 1 (id=35): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x70, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4, 0x1c95, 0x2, 0x1f, 0x1c, 0x1e, 0x8}}]}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x3ff, 0x2}}, {0x8, 0x2, [0x0, 0x1]}}]}]}, 0x70}}, 0x804) sysfs$1(0x1, &(0x7f0000000040)='$)-m#-#[\"$\x00') lstat(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000080)={0x2, 0xffffffffffffffff, 0x3}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x284, &(0x7f0000000280)="1a00000002000000", 0x65) sendto$inet6(r5, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000000200)={0x0, 0x45, "ba2ea15e502f1d2a28a3570d53fd0cfd3ab318ba199e4879745975394b744bcfe41f7146286e576a6166f66658c7d30946ce6ec0cbfae78762f92aab2b2095ad75a930dd45"}, &(0x7f00000000c0)=0x4d) tee(0xffffffffffffffff, r4, 0x4, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000fc0)={'wlan1\x00'}) 2m32.547167177s ago: executing program 0 (id=37): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000480)={&(0x7f0000000180)={0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="200000002900000032000000000000000000000f000d4e6d85dca09f29"], 0x20}, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000140)='/sys/power/pm_print_times', 0x20000, 0x31) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r0) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="080025bd70614d87b7404a03fedbe4250000000008001700", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000) r4 = socket$alg(0x26, 0x5, 0x0) shutdown(r4, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = io_uring_setup(0x13b5, &(0x7f0000000040)={0x0, 0xa03f, 0x40, 0xdfffffff, 0x305}) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r5, 0x1e, &(0x7f0000000000)={r5}, 0x1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x3) r7 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_TRANSMIT(r7, 0xc0386105, &(0x7f0000000480)={0x9, 0x0, 0x9, 0x0, 0x1, 0x0, "0ff8000000000000c5c6ff0717c3a86d", 0x0, 0x0, 0x0, 0xff, 0x0, 0x1, 0xff}) r8 = dup(r6) write$UHID_INPUT(r8, &(0x7f00000029c0)={0x765, {"a2e3ad084fc752f91b2909094bf70e0dd038e7ff7fc6e5539b3245078b089b39353b0e1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b39300d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000001008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3dfd495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae4a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d2462374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x9f6) ioctl$SNDRV_PCM_IOCTL_START(r8, 0x4142, 0x0) accept4(r4, 0x0, 0x0, 0x80000) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000040)) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x3) sendto$inet(r9, &(0x7f00000000c0)="c293db00c09c82b1215aa07deeddba190787c5fbb5d006ed45a57fa82b0159bfaf9a77f77b", 0x25, 0x4004800, &(0x7f0000000100)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) 2m30.887488417s ago: executing program 0 (id=40): r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='consume_skb\x00', 0xffffffffffffffff, 0x0, 0x1ffffffffffffffe}, 0xfffffffffffffe6d) fchdir(r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRES16=r1], 0x5c}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r2, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 2m30.472184279s ago: executing program 0 (id=42): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000140)={0x7, 0x0, [{0x2, 0x0, 0x0, 0x8, 0x5, 0xd2f}, {0x80000007, 0x2, 0x2, 0x1, 0x2, 0x81, 0x1ff}, {0x80000001, 0x1000, 0x5, 0x5, 0x10001, 0x64, 0x8000}, {0x2, 0x5, 0x6, 0x9, 0xffffff00, 0xfffffffb, 0x3}, {0xc0000001, 0x8, 0x2, 0x800, 0x6, 0x10000, 0xc2}, {0x40000001, 0xfb8, 0x7, 0xa, 0x64a, 0x7, 0x550}, {0x7, 0x8, 0x4, 0x1, 0x1, 0x44f9, 0x1}]}) sendfile(r0, r0, 0x0, 0x200000) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x5, 0xd}, @TCA_FQ_FLOW_REFILL_DELAY={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x200040d5}, 0x0) connect$can_bcm(r1, &(0x7f0000000000)={0x1d, r4}, 0x10) 2m29.672368854s ago: executing program 0 (id=43): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000000000858041150000000000001090224"], 0x0) openat$drirender128(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x68, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x6, 0x6}, 0x3c) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) syz_usb_connect(0x5, 0x35, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000545e0d209904b76b2f680102030109022300010d00c0050904970001ff75790008360201210126ff09058503"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2m29.532910095s ago: executing program 1 (id=44): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000005140100000200000000000008000100000000000800030000000017"], 0x20}}, 0x0) socket(0x400000000010, 0x3, 0x0) syz_open_dev$video4linux(&(0x7f0000000900), 0x4, 0x0) pipe2(&(0x7f0000000840), 0x0) epoll_create1(0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000006800210500000000010000ffff0000000000000004000b00080001"], 0x24}}, 0x0) r2 = userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x21, 0x3, 0x22) close(r5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000f, 0x810, r2, 0x57c68000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e24, @remote}, 0x10) writev(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r6, 0x1) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) pselect6(0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x80000000, 0x6, 0x1, 0x8, 0x0, 0x4, 0x8}, &(0x7f0000000280), &(0x7f0000000400)={&(0x7f00000003c0)={[0x7]}, 0x8}) write$UHID_INPUT(r9, &(0x7f0000001980)={0xc, {"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", 0x5c1}}, 0x505) 2m28.567928408s ago: executing program 1 (id=46): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_PAC_RESET_KEYS(0x36, 0x15) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x5, 0xe4}]}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99", 0x8e}, {&(0x7f00000007c0)="02999344565d9c61d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e432bcb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc402189195e92dc1d73fce0d96439a53073df328509806e960", 0x7d}], 0x2}}], 0x1, 0xc0) sendto$inet(r0, &(0x7f00000003c0)="012e9fda0dd5be0e974042ba5d9072db41eb5a7843fded42328933fd3cc86591962e85a4708971af342fffcb53eaad113a49dfb4adda439c49fdd828d2a2d4a7bbf0e8d435b0961bedf74d3d2b2f51b0bedf8ce5372accaa6ed2f721ed5b7d885d80ad52bc1c20563aefc60d4f4eb536e068f1657a68fa29f97a9b2aa77f7ea7a0ebe7ee207d45ba24af82665f2fcb612a505dd9f54a75268d7a8440c366b8e1e90b54668b84997ce057af40edf622c10c4419ae1ba3afb8583b758ddf770264816ce9bcdf4e", 0xc6, 0x10000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000001340)="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", 0xfffffffffffffdc0, 0x40040011, 0x0, 0x5a) 2m27.924772855s ago: executing program 0 (id=50): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x70, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4, 0x1c95, 0x2, 0x1f, 0x1c, 0x1e, 0x8}}]}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x3ff, 0x2}}, {0x8, 0x2, [0x0, 0x1]}}]}]}, 0x70}}, 0x804) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) sysfs$1(0x1, &(0x7f0000000040)='$)-m#-#[\"$\x00') lstat(0x0, 0x0) close(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$apparmor_exec(r4, &(0x7f0000000500)=ANY=[@ANYBLOB='stack : :'], 0x11) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000080)={0x2, 0xffffffffffffffff, 0x3}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x284, &(0x7f0000000280)="1a00000002000000", 0x65) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r6, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000200)={0x0, 0x45, "ba2ea15e502f1d2a28a3570d53fd0cfd3ab318ba199e4879745975394b744bcfe41f7146286e576a6166f66658c7d30946ce6ec0cbfae78762f92aab2b2095ad75a930dd45"}, &(0x7f00000000c0)=0x4d) tee(r4, r5, 0x4, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000fc0)={'wlan1\x00'}) 2m27.537150365s ago: executing program 1 (id=52): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) (async) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) (async) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100), &(0x7f0000000140), 0x0) (async) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) write(r2, &(0x7f0000000180)="01010101", 0x4) (async) r3 = syz_open_dev$I2C(&(0x7f00000000c0), 0xffff1fb9, 0x278400) ioctl$FS_IOC_GETFLAGS(r3, 0x80046601, 0x0) (async) close(r2) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f00000001c0), &(0x7f0000000200), 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r4) (async) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000280), &(0x7f00000002c0), 0x0) (async) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r7 = dup(0xffffffffffffffff) write$UHID_INPUT(r7, &(0x7f0000000040)={0xa, {"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", 0x1000}}, 0x1006) (async) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000020c0), 0x206600, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0x3) (async) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000004c0)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="000d02"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002140)={0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r9, 0x40047438, &(0x7f0000000180)=""/246) writev(r8, &(0x7f0000002080)=[{&(0x7f0000002100)="6eb3c0c0f90e65fced1e3205c021", 0xe}, {&(0x7f0000001080)="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", 0x1000}], 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000000)={r10, 0x1, 0x5, 0x5}, &(0x7f0000000040)=0x10) 2m26.7618428s ago: executing program 1 (id=54): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000140)={0x7, 0x0, [{0x2, 0x0, 0x0, 0x8, 0x5, 0xd2f}, {0x80000007, 0x2, 0x2, 0x1, 0x2, 0x81, 0x1ff}, {0x80000001, 0x1000, 0x5, 0x5, 0x10001, 0x64, 0x8000}, {0x2, 0x5, 0x6, 0x9, 0xffffff00, 0xfffffffb, 0x3}, {0xc0000001, 0x8, 0x2, 0x800, 0x6, 0x10000, 0xc2}, {0x40000001, 0xfb8, 0x7, 0xa, 0x64a, 0x7, 0x550}, {0x7, 0x8, 0x4, 0x1, 0x1, 0x44f9, 0x1}]}) sendfile(r0, r0, 0x0, 0x200000) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x5, 0xd}, @TCA_FQ_FLOW_REFILL_DELAY={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x200040d5}, 0x0) connect$can_bcm(r1, &(0x7f0000000000)={0x1d, r4}, 0x10) 2m26.016855822s ago: executing program 1 (id=57): r0 = openat$nullb(0xffffff9c, &(0x7f0000000000), 0x101100, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0401273, &(0x7f0000000080)={'\x00', 0xdb24, 0x11111111, 0xf, 0x3, 0x7}) 2m23.535131828s ago: executing program 0 (id=63): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000040)={'veth1\x00', {0x2, 0x4e21, @empty}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x10, 0x0, 0x0, 0x3, 0x0, 0x0, 0x100}}, 0x1c}}, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x2000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3800}, [@RTA_DST={0x8, 0x1, @remote}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7ff, 0x70}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r7 = openat$nullb(0xffffff9c, &(0x7f0000000000), 0x101100, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0401273, &(0x7f0000000080)={'\x00', 0xdb24, 0x6, 0xf, 0x3, 0x7}) 2m10.820641091s ago: executing program 32 (id=57): r0 = openat$nullb(0xffffff9c, &(0x7f0000000000), 0x101100, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0401273, &(0x7f0000000080)={'\x00', 0xdb24, 0x11111111, 0xf, 0x3, 0x7}) 2m9.853010281s ago: executing program 4 (id=100): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_PAC_RESET_KEYS(0x36, 0x15) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x5, 0xe4}]}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99", 0x8e}, {&(0x7f00000007c0)="02999344565d9c61d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e432bcb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc402189195e92dc1d73fce0d96439a53073df328509806e960", 0x7d}, {0x0}], 0x3}}], 0x1, 0xc0) sendto$inet(r0, &(0x7f00000003c0)="012e9fda0dd5be0e974042ba5d9072db41eb5a7843fded42328933fd3cc86591962e85a4708971af342fffcb53eaad113a49dfb4adda439c49fdd828d2a2d4a7bbf0e8d435b0961bedf74d3d2b2f51b0bedf8ce5372accaa6ed2f721ed5b7d885d80ad52bc1c20563aefc60d4f4eb536e068f1657a68fa29f97a9b2aa77f7ea7a0ebe7ee207d45ba24af82665f2fcb612a505dd9f54a75268d7a8440c366b8e1e90b54668b84997ce057af40edf622c10c4419ae1ba3afb8583b758ddf770264816ce9bcdf4e", 0xc6, 0x10000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000001340)="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", 0xfffffffffffffdc0, 0x40040011, 0x0, 0x5a) 2m9.10935164s ago: executing program 4 (id=102): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x2d8}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a45352, &(0x7f00000000c0)={{0x6, 0x8}, 'port1\x00', 0xa0, 0x805, 0xb9a0, 0xfffffffc, 0x1c000000, 0x5, 0x401, 0x0, 0x2, 0xe9}) r3 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) write$FUSE_INIT(r3, &(0x7f0000002340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x29, 0x0, 0x20582a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x108, 0xfffffffd}}, 0x50) write(r0, &(0x7f0000000000)="240000001a005f0400f9f407000904018000200000000000000000000800010000000000", 0x24) 2m8.757624775s ago: executing program 4 (id=103): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x70, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4, 0x1c95, 0x2, 0x1f, 0x1c, 0x1e, 0x8}}]}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x3ff, 0x2}}, {0x8, 0x2, [0x0, 0x1]}}]}]}, 0x70}}, 0x804) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) sysfs$1(0x1, &(0x7f0000000040)='$)-m#-#[\"$\x00') lstat(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$apparmor_exec(r3, &(0x7f0000000500)=ANY=[@ANYBLOB='stack : :'], 0x11) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000080)={0x2, 0xffffffffffffffff, 0x3}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x284, &(0x7f0000000280)="1a00000002000000", 0x65) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r5, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000000200)={0x0, 0x45, "ba2ea15e502f1d2a28a3570d53fd0cfd3ab318ba199e4879745975394b744bcfe41f7146286e576a6166f66658c7d30946ce6ec0cbfae78762f92aab2b2095ad75a930dd45"}, &(0x7f00000000c0)=0x4d) tee(r3, r4, 0x4, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000fc0)={'wlan1\x00'}) 2m7.953896483s ago: executing program 33 (id=63): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000040)={'veth1\x00', {0x2, 0x4e21, @empty}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x10, 0x0, 0x0, 0x3, 0x0, 0x0, 0x100}}, 0x1c}}, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x2000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3800}, [@RTA_DST={0x8, 0x1, @remote}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7ff, 0x70}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r7 = openat$nullb(0xffffff9c, &(0x7f0000000000), 0x101100, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0401273, &(0x7f0000000080)={'\x00', 0xdb24, 0x6, 0xf, 0x3, 0x7}) 2m4.821710883s ago: executing program 4 (id=110): syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) pselect6(0xa0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x80000000000300, 0x0, 0x0, 0x4, 0x80000000000}, 0x0, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000000), 0x10b200, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2000000000008000, 0x0, 0xd4}, 0x0) memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xcc\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5\x00\x00\x00\x00\x00\x00\x00\x05L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xaaw\xbe\xd0\xd0\xc8d\x96G\xcf\x066\x84\x82-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10\x04\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000500)=ANY=[], 0x24c) ioctl$HIDIOCSFLAG(r5, 0x4004480f, &(0x7f0000000000)=0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$ppp(0xffffffffffffff9c, 0x0, 0x101000, 0x0) listen(r6, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x4e20, 0xfffffffe, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40f8}}, 0x0, 0x0, 0x35, 0x0, "9e48baeacda14413230e99d972182df07928d25102b5558d9cb11747ac26830349f3f2d5a16aa0d4e13033b7ffa94564fa2caa35c6ce964b16f0e2a3a9a15bce32aaa5827472aae7ffb700"}, 0xd8) syz_open_dev$tty1(0xc, 0x4, 0x3) 1m59.041828137s ago: executing program 4 (id=120): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x2000c054) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r6, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1m58.397623197s ago: executing program 4 (id=121): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_io_uring_setup(0x24fc, &(0x7f0000000400)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x1066, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000340)={0x1e00, 0x5, 0x0, 0x0, 0x0, 'MkU\x00', 0xffffffff, 0xffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_PARM(r6, 0xc0cc5616, &(0x7f0000000280)={0x6, @raw_data="dd364b5d5567f0889254bc74326f3fcd4b348e929b361f54de08be962080cb2fc0e5a417bef1846530e40d4e9dd403e08dcc41f66d46bbc5bcc2342d63ecfefb7f11cea3f64ea607f870342471a934a3be3e1f9e916b1d5061d54447d1259ad6a59f425e7737f376888813f7a898222ac1b0c77252bebfffd554594022cf61449d2fff6e6c42dde5871eb30a5ddecb686fa22c071523d897fc30931c2e979a974434adc856066c38f0179089ae138ba20e7194575a8b6889bdd05e3d922bd07adb344c44495984d8"}) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x10001, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x29, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffff7e, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@map_fd={0x18, 0x2, 0x1, 0x0, r8}, @jmp={0x5, 0x0, 0x3, 0x0, 0x2, 0xfffffffffffffff8, 0xfffffffffffffff0}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb0b}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x8f}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @alu={0x0, 0x0, 0x3, 0x0, 0x2, 0xffffffffffffffc0, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x3, 0xc7, &(0x7f0000000240)=""/199, 0x41000, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x0, 0x4, 0x0, 0xd9}, 0x10, r9, 0xffffffffffffffff, 0x8, &(0x7f0000000380), &(0x7f00000003c0)=[{0x4, 0x1, 0xa, 0x5}, {0x3, 0x1, 0x4, 0x4}, {0x0, 0x1, 0xd, 0x6}, {0x5, 0x1, 0xb, 0x3}, {0x4, 0x3, 0xb, 0x8}, {0x0, 0x1, 0x0, 0x3}, {0x5, 0x5, 0x3, 0x5}, {0x0, 0x1, 0x3}], 0x10, 0x8bc, @void, @value}, 0x94) write$binfmt_aout(r8, 0x0, 0xffffffdb) ioctl$SG_BLKTRACESTART(r8, 0x1274, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 1m43.193337693s ago: executing program 34 (id=121): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_io_uring_setup(0x24fc, &(0x7f0000000400)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x1066, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000340)={0x1e00, 0x5, 0x0, 0x0, 0x0, 'MkU\x00', 0xffffffff, 0xffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_PARM(r6, 0xc0cc5616, &(0x7f0000000280)={0x6, @raw_data="dd364b5d5567f0889254bc74326f3fcd4b348e929b361f54de08be962080cb2fc0e5a417bef1846530e40d4e9dd403e08dcc41f66d46bbc5bcc2342d63ecfefb7f11cea3f64ea607f870342471a934a3be3e1f9e916b1d5061d54447d1259ad6a59f425e7737f376888813f7a898222ac1b0c77252bebfffd554594022cf61449d2fff6e6c42dde5871eb30a5ddecb686fa22c071523d897fc30931c2e979a974434adc856066c38f0179089ae138ba20e7194575a8b6889bdd05e3d922bd07adb344c44495984d8"}) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x10001, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x29, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffff7e, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@map_fd={0x18, 0x2, 0x1, 0x0, r8}, @jmp={0x5, 0x0, 0x3, 0x0, 0x2, 0xfffffffffffffff8, 0xfffffffffffffff0}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb0b}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x8f}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @alu={0x0, 0x0, 0x3, 0x0, 0x2, 0xffffffffffffffc0, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x3, 0xc7, &(0x7f0000000240)=""/199, 0x41000, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x0, 0x4, 0x0, 0xd9}, 0x10, r9, 0xffffffffffffffff, 0x8, &(0x7f0000000380), &(0x7f00000003c0)=[{0x4, 0x1, 0xa, 0x5}, {0x3, 0x1, 0x4, 0x4}, {0x0, 0x1, 0xd, 0x6}, {0x5, 0x1, 0xb, 0x3}, {0x4, 0x3, 0xb, 0x8}, {0x0, 0x1, 0x0, 0x3}, {0x5, 0x5, 0x3, 0x5}, {0x0, 0x1, 0x3}], 0x10, 0x8bc, @void, @value}, 0x94) write$binfmt_aout(r8, 0x0, 0xffffffdb) ioctl$SG_BLKTRACESTART(r8, 0x1274, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 12.814956055s ago: executing program 2 (id=421): syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) pselect6(0xa0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x80000000000300, 0x0, 0x0, 0x4, 0x80000000000}, 0x0, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000000), 0x10b200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2000000000008000, 0x0, 0xd4}, 0x0) memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xcc\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5\x00\x00\x00\x00\x00\x00\x00\x05L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xaaw\xbe\xd0\xd0\xc8d\x96G\xcf\x066\x84\x82-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10\x04\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000500)=ANY=[], 0x24c) ioctl$HIDIOCSFLAG(r4, 0x4004480f, &(0x7f0000000000)=0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$ppp(0xffffffffffffff9c, 0x0, 0x101000, 0x0) listen(r5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x4e20, 0xfffffffe, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40f8}}, 0x0, 0x0, 0x35, 0x0, "9e48baeacda14413230e99d972182df07928d25102b5558d9cb11747ac26830349f3f2d5a16aa0d4e13033b7ffa94564fa2caa35c6ce964b16f0e2a3a9a15bce32aaa5827472aae7ffb700"}, 0xd8) syz_open_dev$tty1(0xc, 0x4, 0x3) 12.373880989s ago: executing program 7 (id=424): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) sysfs$1(0x1, &(0x7f0000000040)='$)-m#-#[\"$\x00') lstat(0x0, 0x0) close(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$apparmor_exec(r2, &(0x7f0000000500)=ANY=[@ANYBLOB='stack : :'], 0x11) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000080)={0x2, 0xffffffffffffffff, 0x3}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x284, &(0x7f0000000280)="1a00000002000000", 0x65) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000200)={0x0, 0x45, "ba2ea15e502f1d2a28a3570d53fd0cfd3ab318ba199e4879745975394b744bcfe41f7146286e576a6166f66658c7d30946ce6ec0cbfae78762f92aab2b2095ad75a930dd45"}, &(0x7f00000000c0)=0x4d) tee(r2, r3, 0x4, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000fc0)={'wlan1\x00'}) 11.968580469s ago: executing program 6 (id=425): r0 = socket$inet_dccp(0x2, 0x6, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, 0x0) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r5, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) close(r5) connect$inet(r0, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000540)='\x00') r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb05, 0x17e0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x97d, 0x7, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, &(0x7f0000000d40)={0xc, &(0x7f0000000c40)={0x20, 0x27, 0x6, {0x6, 0x8, '1Fv~'}}, 0x0}, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x0, 0x0, &(0x7f0000000280)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x5c, 0x4, 0x5, 0xe553597ae03b6932, 0x6}, 0x1f, &(0x7f00000000c0)={0x5, 0xf, 0x1f, 0x1, [@generic={0x1a, 0x10, 0x9, "7aa1d0dddcea2673f19ec761408b513e6ee6719f03cbd0"}]}, 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x140c}}, {0x30, &(0x7f00000001c0)=@string={0x30, 0x3, "fb49ee3256c4c5e2ed008a0e8159caac83efab6a580410649695a2a1ecaf1efe5c241b7bdbb01537eb0b3892109e"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x3009}}]}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf) 9.226502643s ago: executing program 6 (id=432): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_PAC_RESET_KEYS(0x36, 0x15) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99", 0x8e}, {&(0x7f00000007c0)="02999344565d9c61d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e432bcb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc402189195e92dc1d73fce0d96439a53073df328509806e960", 0x7d}, {&(0x7f0000000c80)="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", 0x1af}], 0x3}}], 0x1, 0xc0) sendto$inet(r0, &(0x7f00000003c0)="012e9fda0dd5be0e974042ba5d9072db41eb5a7843fded42328933fd3cc86591962e85a4708971af342fffcb53eaad113a49dfb4adda439c49fdd828d2a2d4a7bbf0e8d435b0961bedf74d3d2b2f51b0bedf8ce5372accaa6ed2f721ed5b7d885d80ad52bc1c20563aefc60d4f4eb536e068f1657a68fa29f97a9b2aa77f7ea7a0ebe7ee207d45ba24af82665f2fcb612a505dd9f54a75268d7a8440c366b8e1e90b54668b84997ce057af40edf622c10c4419ae1ba3afb8583b758ddf770264816ce9bcdf4e", 0xc6, 0x10000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000001340)="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", 0xfffffffffffffdc0, 0x40040011, 0x0, 0x5a) 8.949951734s ago: executing program 5 (id=433): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x44, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x80000001}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "3460a2d6ca715fe0c1ae787dec86fe74"}]}, 0x44}, 0x1, 0x0, 0x0, 0x200040d0}, 0x800) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x6e) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getrusage(0x0, 0x0) 8.228680418s ago: executing program 2 (id=435): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, 0x0, 0x4000084) 8.002272226s ago: executing program 7 (id=436): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x4, 0x1, 0x3, 0x0, 0x8}, &(0x7f00000001c0)=0x14) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000100)='net/unix\x00') syz_80211_inject_frame(0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x401, 0x2) socket$inet(0xa, 0x801, 0x84) socket$inet6(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r3, @ANYRES64=r2, @ANYBLOB="ed"], 0x20) 7.862548108s ago: executing program 3 (id=437): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000007c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 7.756409316s ago: executing program 2 (id=438): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) sysfs$1(0x1, &(0x7f0000000040)='$)-m#-#[\"$\x00') lstat(0x0, 0x0) close(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$apparmor_exec(r2, &(0x7f0000000500)=ANY=[@ANYBLOB='stack : :'], 0x11) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000080)={0x2, 0xffffffffffffffff, 0x3}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x284, &(0x7f0000000280)="1a00000002000000", 0x65) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000200)={0x0, 0x45, "ba2ea15e502f1d2a28a3570d53fd0cfd3ab318ba199e4879745975394b744bcfe41f7146286e576a6166f66658c7d30946ce6ec0cbfae78762f92aab2b2095ad75a930dd45"}, &(0x7f00000000c0)=0x4d) tee(r2, r3, 0x4, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000fc0)={'wlan1\x00'}) 7.542807163s ago: executing program 3 (id=439): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x4000088) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800, 0x1, 0x8001, 0x8000000, 0xfffffffffffffffe, 0x0, 0x4}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, 0x0) r3 = syz_open_dev$media(&(0x7f0000000000), 0x2ec4, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f00000000c0)) write$dsp(r2, &(0x7f0000000000)="81", 0x1) close(r2) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000580)=0x0) sched_setaffinity(r6, 0x8, &(0x7f00000005c0)=0x2) write$uinput_user_dev(r5, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xf, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1], [0x0, 0x2, 0x0, 0x40, 0x0, 0x0, 0x6, 0x44a, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x180d, 0x80000000, 0x9, 0x0, 0x0, 0xffff82ee, 0x2, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa, 0x80, 0x0, 0x0, 0xfffffffc, 0x0, 0x7e, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) readv(r5, &(0x7f0000001900)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r8 = syz_open_pts(r7, 0x141601) write(r8, &(0x7f0000000000), 0x0) socket$inet6(0xa, 0x1, 0x0) 7.452020539s ago: executing program 6 (id=440): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xba, 0x54, 0x85, 0x20, 0x424, 0x7500, 0xb798, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x8, 0x87, 0x90, 0x7, [{{0x9, 0x4, 0x48, 0x1, 0x3, 0xe6, 0xf, 0x3a, 0xb5, [], [{{0x9, 0x5, 0xe81eb71784d4b393, 0x2, 0x400, 0x9, 0x3, 0x2e}}, {{0x9, 0x5, 0xb, 0x2, 0x3ff, 0x7, 0x9, 0x10}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x5, 0x9, 0x7f}}]}}]}}]}}, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe681}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x17}, 0x2000400c) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00') socket$inet_udplite(0x2, 0x2, 0x88) 7.286031975s ago: executing program 5 (id=441): pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = gettid() fcntl$setown(r1, 0x8, r2) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x4) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) 7.11388359s ago: executing program 7 (id=442): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0x82000001, {{0xa, 0x4e21, 0xffffff20, @mcast1}}}, 0x84) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000300)={0x5, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) (async) unshare(0x480) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x5e, 0x43, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000340)={r2, 0xe0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffd52, 0xff79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0xef, 0x8, 0x0, 0x0}}, 0x98) (async) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4100, 0x10020}}}}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r3}]}, 0x50}}, 0x0) 7.05389461s ago: executing program 5 (id=443): r0 = socket$inet_dccp(0x2, 0x6, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, 0x0) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r5, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) close(r5) connect$inet(r0, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000540)='\x00') r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb05, 0x17e0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x97d, 0x7, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, &(0x7f0000000d40)={0xc, &(0x7f0000000c40)={0x20, 0x27, 0x6, {0x6, 0x8, '1Fv~'}}, 0x0}, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x0, 0x0, &(0x7f0000000280)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x5c, 0x4, 0x5, 0xe553597ae03b6932, 0x6}, 0x20, &(0x7f00000000c0)={0x5, 0xf, 0x20, 0x1, [@generic={0x1b, 0x10, 0x9, "7aa1d0dddcea2673f19ec761408b513e6ee6719f03cbd098"}]}, 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x140c}}, {0x30, &(0x7f00000001c0)=@string={0x30, 0x3, "fb49ee3256c4c5e2ed008a0e8159caac83efab6a580410649695a2a1ecaf1efe5c241b7bdbb01537eb0b3892109e"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x3009}}]}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf) 6.125884417s ago: executing program 3 (id=444): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x70, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4, 0x1c95, 0x2, 0x1f, 0x1c, 0x1e, 0x8}}]}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x3ff, 0x2}}, {0x8, 0x2, [0x0, 0x1]}}]}]}, 0x70}}, 0x804) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) sysfs$1(0x1, &(0x7f0000000040)='$)-m#-#[\"$\x00') lstat(0x0, 0x0) close(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$apparmor_exec(r2, &(0x7f0000000500)=ANY=[@ANYBLOB='stack : :'], 0x11) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000080)={0x2, 0xffffffffffffffff, 0x3}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x284, &(0x7f0000000280)="1a00000002000000", 0x65) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000200)={0x0, 0x45, "ba2ea15e502f1d2a28a3570d53fd0cfd3ab318ba199e4879745975394b744bcfe41f7146286e576a6166f66658c7d30946ce6ec0cbfae78762f92aab2b2095ad75a930dd45"}, &(0x7f00000000c0)=0x4d) tee(r2, r3, 0x4, 0x4) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 4.830803215s ago: executing program 7 (id=445): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_PAC_RESET_KEYS(0x36, 0x15) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x5, 0xe4}]}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99", 0x8e}, {&(0x7f00000007c0)="02999344565d9c61d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e432bcb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc402189195e92dc1d73fce0d96439a53073df328509806e960", 0x7d}, {&(0x7f0000000c80)="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", 0x238}], 0x3}}], 0x1, 0xc0) sendto$inet(r0, &(0x7f00000003c0)="012e9fda0dd5be0e974042ba5d9072db41eb5a7843fded42328933fd3cc86591962e85a4708971af342fffcb53eaad113a49dfb4adda439c49fdd828d2a2d4a7bbf0e8d435b0961bedf74d3d2b2f51b0bedf8ce5372accaa6ed2f721ed5b7d885d80ad52bc1c20563aefc60d4f4eb536e068f1657a68fa29f97a9b2aa77f7ea7a0ebe7ee207d45ba24af82665f2fcb612a505dd9f54a75268d7a8440c366b8e1e90b54668b84997ce057af40edf622c10c4419ae1ba3afb8583b758ddf770264816ce9bcdf4e", 0xc6, 0x10000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000001340)="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", 0xfffffffffffffdc0, 0x40040011, 0x0, 0x5a) 4.523558703s ago: executing program 5 (id=446): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) r1 = msgget$private(0x0, 0x44) msgsnd(r1, &(0x7f0000000680)=ANY=[@ANYBLOB="d0"], 0x8, 0x0) msgrcv(r1, &(0x7f0000001800)={0x0, ""/4096}, 0x1008, 0x3, 0x2800) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f00000000c0)=""/127) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f00)={0x24, &(0x7f0000000d80)=ANY=[@ANYBLOB="401002001300020f"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 4.032631043s ago: executing program 3 (id=447): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000004c0)={0x18, 0x0, {0x2, @empty, 'gretap0\x00'}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x1d1c82, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x13) personality(0x400000) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2000009, 0x2172, 0xffffffffffffffff, 0x60f4b000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x18) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x8000, @private=0xa010100}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x11, @dev={0xac, 0x14, 0x14, 0x14}, 0x0, 0x2000, 'lc\x00', 0x5, 0x569f, 0x400006b}, 0x2c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) futex(0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x1) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x4004743a, &(0x7f0000000140)=0x40800) 3.791535682s ago: executing program 2 (id=448): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x8c, 0x2, 0x7, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xa}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x54, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x34}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x400}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9d2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xd5c5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x39e}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000084) 3.59510552s ago: executing program 7 (id=449): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x40400, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x80, 0x8400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x3, 0x7}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) connect$inet(r3, &(0x7f0000000480)={0x2, 0xce20, @local}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r3, 0x0, 0x17, &(0x7f0000000040)=0xe, 0x36) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, 0x0, 0x0, {0x2, 0xff, 0x3}, 0xff}, 0x18) setsockopt$inet_int(r3, 0x0, 0x14, &(0x7f0000000180)=0x40000000, 0x4) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) symlink(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000040)='./cgroup.cpu/cgroup.procs/file0\x00') ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYRESOCT=r3, @ANYRES32=r1, @ANYRES32, @ANYBLOB="ffffffff0000000000000000000000002001000000000000000000000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="000000000000000000ed000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000ff0f0000000000000000000008000b000000000008001600000000000c001500000000005d000000140008001000080000040800"], 0x154}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_usb_connect(0x6, 0x36, &(0x7f0000000bc0)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d1000905070000000000000905899b"], 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) 3.458769065s ago: executing program 3 (id=450): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_PAC_RESET_KEYS(0x36, 0x15) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99", 0x8e}, {&(0x7f00000007c0)="02999344565d9c61d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e432bcb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc402189195e92dc1d73fce0d96439a53073df328509806e960", 0x7d}, {&(0x7f0000000c80)="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", 0x1af}], 0x3}}], 0x1, 0xc0) sendto$inet(r0, &(0x7f00000003c0)="012e9fda0dd5be0e974042ba5d9072db41eb5a7843fded42328933fd3cc86591962e85a4708971af342fffcb53eaad113a49dfb4adda439c49fdd828d2a2d4a7bbf0e8d435b0961bedf74d3d2b2f51b0bedf8ce5372accaa6ed2f721ed5b7d885d80ad52bc1c20563aefc60d4f4eb536e068f1657a68fa29f97a9b2aa77f7ea7a0ebe7ee207d45ba24af82665f2fcb612a505dd9f54a75268d7a8440c366b8e1e90b54668b84997ce057af40edf622c10c4419ae1ba3afb8583b758ddf770264816ce9bcdf4e", 0xc6, 0x10000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000001340)="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", 0xfffffffffffffdc0, 0x40040011, 0x0, 0x5a) 3.385131676s ago: executing program 2 (id=451): r0 = openat$nvram(0xffffff9c, &(0x7f0000000000), 0x101000, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES32=r0], 0x0) read$FUSE(r0, &(0x7f0000005000)={0x2020}, 0x2020) 3.054429461s ago: executing program 6 (id=452): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x4, 0x1, 0x3, 0x0, 0x8}, &(0x7f00000001c0)=0x14) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000100)='net/unix\x00') syz_80211_inject_frame(0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x401, 0x2) socket$inet(0xa, 0x801, 0x84) socket$inet6(0xa, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r3, @ANYRES64=r2, @ANYBLOB="ed"], 0x20) 2.641710262s ago: executing program 7 (id=453): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x200000, 0x0) recvmsg$kcm(r3, 0x0, 0x40000100) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbffffffffffffffe, 0x0, 0xffffffff}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x20000) pselect6(0x40, &(0x7f0000000300)={0x0, 0x40, 0x3, 0xffffffffffffffff, 0x0, 0x1, 0x8000000000}, &(0x7f0000000000)={0x18, 0x2, 0x0, 0x1, 0x2, 0x4, 0x8000000000000}, 0x0, 0x0, 0x0) mprotect(&(0x7f0000510000/0x4000)=nil, 0x4000, 0x68f61b7c6e8a89be) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009662da204020014977470102030109022b0001000000000904"], 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x92, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/pid_for_children\x00') r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)}], 0x1) syz_pidfd_open(0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) read$FUSE(r0, &(0x7f0000008180)={0x2020, 0x0, 0x0}, 0x2020) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000000104030000000000000000000a000006080003400000000c08000540020000000800044000005b5e08000540000000090500010017000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20004010}, 0x4040) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r5, {0x7, 0x27}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000c280)="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", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.110186829s ago: executing program 6 (id=454): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x480241, 0x0) r1 = socket(0x10, 0x3, 0x0) setitimer(0x1, &(0x7f0000000580)={{}, {0x0, 0xea60}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001200010a001800000000000080"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) r2 = getpid() process_vm_readv(r2, &(0x7f0000000100)=[{&(0x7f0000006180)=""/152, 0x98}, {&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000000080)=""/61, 0x3d}], 0x3, &(0x7f0000008640), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$bt_hci(r3, 0x6, 0x1, &(0x7f0000004340)=""/4126, &(0x7f00000000c0)=0x101e) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = epoll_create(0x47f) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) ioctl$TIOCGSOFTCAR(r5, 0x5414, &(0x7f0000000040)) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) 2.049946641s ago: executing program 5 (id=455): munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0xb2903ea18c48acc, r1, {0x7, 0x1f, 0x100, 0x10408}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = dup2(r2, r0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x513883, 0x488) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x10000, 0xa) getdents(r6, &(0x7f0000000080)=""/87, 0x57) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r8 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r8, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r8, 0x20000005) r9 = socket$inet6(0xa, 0x6, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000200)={0x48, 0x1, r10, 0x0, 0x72, 0x3}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000480)=ANY=[@ANYBLOB="ffe0ffffffff0000001200000800450000300000000000019078ac1e0001ac1414aa0300907803240000450000000000000000010000ac1414aaac141400"], 0x0) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) close_range(r7, 0xffffffffffffffff, 0x0) 1.907761067s ago: executing program 3 (id=456): r0 = socket$inet_dccp(0x2, 0x6, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, 0x0) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r5, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) close(r5) connect$inet(r0, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000540)='\x00') r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb05, 0x17e0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x97d, 0x7, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, &(0x7f0000000d40)={0xc, &(0x7f0000000c40)={0x20, 0x27, 0x6, {0x6, 0x8, '1Fv~'}}, 0x0}, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x0, 0x0, &(0x7f0000000280)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x5c, 0x4, 0x5, 0xe553597ae03b6932, 0x6}, 0x20, &(0x7f00000000c0)={0x5, 0xf, 0x20, 0x1, [@generic={0x1b, 0x10, 0x9, "7aa1d0dddcea2673f19ec761408b513e6ee6719f03cbd098"}]}, 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x140c}}, {0x30, &(0x7f00000001c0)=@string={0x30, 0x3, "fb49ee3256c4c5e2ed008a0e8159caac83efab6a580410649695a2a1ecaf1efe5c241b7bdbb01537eb0b3892109e"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x3009}}]}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf) 1.049797116s ago: executing program 6 (id=457): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x70, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4, 0x1c95, 0x2, 0x1f, 0x1c, 0x1e, 0x8}}]}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x3ff, 0x2}}, {0x8, 0x2, [0x0, 0x1]}}]}]}, 0x70}}, 0x804) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) sysfs$1(0x1, &(0x7f0000000040)='$)-m#-#[\"$\x00') lstat(0x0, 0x0) close(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$apparmor_exec(r2, &(0x7f0000000500)=ANY=[@ANYBLOB='stack : :'], 0x11) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000080)={0x2, 0xffffffffffffffff, 0x3}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x284, &(0x7f0000000280)="1a00000002000000", 0x65) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000200)={0x0, 0x45, "ba2ea15e502f1d2a28a3570d53fd0cfd3ab318ba199e4879745975394b744bcfe41f7146286e576a6166f66658c7d30946ce6ec0cbfae78762f92aab2b2095ad75a930dd45"}, &(0x7f00000000c0)=0x4d) tee(r2, r3, 0x4, 0x4) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 1.026728261s ago: executing program 5 (id=458): socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x70, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4, 0x1c95, 0x2, 0x1f, 0x1c, 0x1e, 0x8}}]}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x3ff, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x70}}, 0x804) sysfs$1(0x1, &(0x7f0000000040)='$)-m#-#[\"$\x00') lstat(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000080)={0x2, 0xffffffffffffffff, 0x3}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x284, &(0x7f0000000280)="1a00000002000000", 0x65) sendto$inet6(r5, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000000200)={0x0, 0x45, "ba2ea15e502f1d2a28a3570d53fd0cfd3ab318ba199e4879745975394b744bcfe41f7146286e576a6166f66658c7d30946ce6ec0cbfae78762f92aab2b2095ad75a930dd45"}, &(0x7f00000000c0)=0x4d) tee(0xffffffffffffffff, r4, 0x4, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000fc0)={'wlan1\x00'}) 0s ago: executing program 2 (id=459): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_PAC_RESET_KEYS(0x36, 0x15) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x5, 0xe4}]}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99", 0x8e}, {&(0x7f00000007c0)="02999344565d9c61d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e432bcb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc402189195e92dc1d73fce0d96439a53073df328509806e960", 0x7d}, {&(0x7f0000000c80)="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", 0x238}], 0x3}}], 0x1, 0xc0) sendto$inet(r0, &(0x7f00000003c0)="012e9fda0dd5be0e974042ba5d9072db41eb5a7843fded42328933fd3cc86591962e85a4708971af342fffcb53eaad113a49dfb4adda439c49fdd828d2a2d4a7bbf0e8d435b0961bedf74d3d2b2f51b0bedf8ce5372accaa6ed2f721ed5b7d885d80ad52bc1c20563aefc60d4f4eb536e068f1657a68fa29f97a9b2aa77f7ea7a0ebe7ee207d45ba24af82665f2fcb612a505dd9f54a75268d7a8440c366b8e1e90b54668b84997ce057af40edf622c10c4419ae1ba3afb8583b758ddf770264816ce9bcdf4e", 0xc6, 0x10000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000001340)="0926050000006588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67a59bcecc7a95425a3a07e758044ab4ea6f7ae55d88fe8f90b1a7511bf746bec668323dafabdc58f9da5d7de35e7cc5894d185eae1605145f8707a0e27ea3233560d4465c0edb6262c3cc197f1beec72eecffcef11584b211a442bf1b58d4181cb840df1e1c1e0ee2841fbed9d03556b34e2897b9b13006a461ebde8baa2959487d9f238edf6fe3c70da2061d015c988ec6283a0a6101746257148ef186fa279fd53e82f93901533f62faa589616da2377f26018ff5a9fa9913f0000010000000000587f73a169396ef410a83834e34dd8823730b1aa1413ca7e8b44bbb0230cbf5935e2b6ffb125fc26802742053e7bc6517b80dea9b6562ab151ae457efd0975afdf4093891c06081fc53e29cf598c87bbb26c7b9a13da7f474e671269d7350e81a0b0d795f675bf5f7b8c7fa3d88f62bc7dc242afd8c7c6ec58e4b325a93fdb03be7211432ff90241fdebee0d0796ca05b1e11aecb7386cc21823cdbf6eede044f031231768a1b2cde942cb0f98c7cbeac0bf3f64dea506b0513e", 0xfffffffffffffdc0, 0x40040011, 0x0, 0x5a) kernel console output (not intermixed with test programs): 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 131.660255][ T5848] usb 5-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 131.672309][ T5848] usb 5-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 131.686568][ T5848] usb 5-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid wMaxPacketSize 0 [ 131.699773][ T5848] usb 5-1: config 0 interface 239 has no altsetting 0 [ 131.720890][ T5848] usb 5-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 131.731825][ T5848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.744207][ T5848] usb 5-1: Product: syz [ 131.751258][ T5848] usb 5-1: Manufacturer: syz [ 131.756017][ T5848] usb 5-1: SerialNumber: syz [ 131.767765][ T5848] usb 5-1: config 0 descriptor?? [ 131.776735][ T6213] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 131.796749][ T6213] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 131.883685][ T5893] usbhid 4-1:0.0: can't add hid device: -71 [ 131.899399][ T5893] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 131.912593][ T5893] usb 4-1: USB disconnect, device number 11 [ 132.141924][ T5896] usb 5-1: USB disconnect, device number 8 [ 132.372998][ T6226] netlink: 'syz.2.86': attribute type 2 has an invalid length. [ 132.505500][ T6228] tc_dump_action: action bad kind [ 132.626918][ T5848] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 132.796896][ T5848] usb 3-1: device descriptor read/64, error -71 [ 133.076896][ T5848] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 133.146916][ T5895] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 133.227580][ T5848] usb 3-1: device descriptor read/64, error -71 [ 133.350295][ T5895] usb 5-1: config 0 has no interfaces? [ 133.473685][ T5848] usb usb3-port1: attempt power cycle [ 133.559145][ T6229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.616606][ T5895] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 133.645851][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.675307][ T5895] usb 5-1: Product: syz [ 133.703751][ T5895] usb 5-1: Manufacturer: syz [ 133.717111][ T5895] usb 5-1: SerialNumber: syz [ 133.741448][ T5895] usb 5-1: config 0 descriptor?? [ 133.936866][ T5848] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 133.968590][ T5848] usb 3-1: device descriptor read/8, error -71 [ 134.206925][ T5848] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 134.248998][ T5848] usb 3-1: device descriptor read/8, error -71 [ 134.357206][ T5848] usb usb3-port1: unable to enumerate USB device [ 134.646913][ T5848] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 134.803282][ T5848] usb 4-1: config 0 has no interfaces? [ 134.825710][ T5848] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 134.840360][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.866074][ T5848] usb 4-1: Product: syz [ 134.887100][ T5848] usb 4-1: Manufacturer: syz [ 134.915150][ T5848] usb 4-1: SerialNumber: syz [ 134.945579][ T5848] usb 4-1: config 0 descriptor?? [ 135.636246][ T6244] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 135.666627][ T6244] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.675633][ T6244] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.720783][ T6244] syz.2.91 (6244) used greatest stack depth: 19416 bytes left [ 135.845954][ T5893] usb 5-1: USB disconnect, device number 9 [ 137.004458][ T6258] pim6reg: entered allmulticast mode [ 137.040471][ T6260] pim6reg: left allmulticast mode [ 137.346926][ T47] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 137.508390][ T47] usb 3-1: Using ep0 maxpacket: 16 [ 137.524708][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.545782][ T47] usb 3-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 137.564133][ T5154] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 137.574258][ T5154] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 137.582684][ T5154] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 137.591931][ T5154] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 137.600298][ T5154] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 137.610764][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.674689][ T47] usb 3-1: config 0 descriptor?? [ 138.205181][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.216863][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.316733][ T5897] usb 4-1: USB disconnect, device number 12 [ 138.350159][ T47] usbhid 3-1:0.0: can't add hid device: -71 [ 138.356237][ T47] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 138.410671][ T47] usb 3-1: USB disconnect, device number 15 [ 138.587216][ T6266] chnl_net:caif_netlink_parms(): no params data found [ 139.345216][ T6266] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.420976][ T6266] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.467038][ T6266] bridge_slave_0: entered allmulticast mode [ 139.486941][ T5893] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 139.570452][ T6266] bridge_slave_0: entered promiscuous mode [ 139.650287][ T6266] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.681767][ T6266] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.706962][ T5154] Bluetooth: hci5: command tx timeout [ 139.774907][ T6266] bridge_slave_1: entered allmulticast mode [ 139.785571][ T5893] usb 5-1: config 0 has no interfaces? [ 139.895453][ T6266] bridge_slave_1: entered promiscuous mode [ 139.928922][ T5893] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 139.950330][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.996735][ T5893] usb 5-1: Product: syz [ 140.022467][ T5893] usb 5-1: Manufacturer: syz [ 140.047079][ T5893] usb 5-1: SerialNumber: syz [ 140.081956][ T5893] usb 5-1: config 0 descriptor?? [ 140.203598][ T6266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.268274][ T6266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.634673][ T6266] team0: Port device team_slave_0 added [ 140.721672][ T6266] team0: Port device team_slave_1 added [ 141.137710][ T6266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.177097][ T6266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.340334][ T6266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.423782][ T5847] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 141.449683][ T5847] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 141.471818][ T5847] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 141.494923][ T6266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.518155][ T6266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.560913][ T5847] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 141.605540][ T5847] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 141.617555][ T6266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.777248][ T5154] Bluetooth: hci5: command tx timeout [ 142.003741][ T6266] hsr_slave_0: entered promiscuous mode [ 142.035910][ T6266] hsr_slave_1: entered promiscuous mode [ 142.061429][ T6266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.091078][ T6266] Cannot create hsr debugfs directory [ 142.691262][ T10] usb 5-1: USB disconnect, device number 10 [ 143.563519][ T5897] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 143.698559][ T5154] Bluetooth: hci6: command tx timeout [ 143.857043][ T5154] Bluetooth: hci5: command tx timeout [ 143.857304][ T5897] usb 5-1: Using ep0 maxpacket: 32 [ 143.959171][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.993556][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.072015][ T5897] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 144.122141][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.190554][ T5897] usb 5-1: config 0 descriptor?? [ 144.304913][ T6319] Zero length message leads to an empty skb [ 144.523221][ T6325] pim6reg: entered allmulticast mode [ 144.626939][ T6314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.650736][ T6326] pim6reg: left allmulticast mode [ 144.997230][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 145.031467][ T6266] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 145.198626][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 145.229390][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.276349][ T10] usb 4-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 145.303322][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.351789][ T10] usb 4-1: config 0 descriptor?? [ 145.522730][ T6266] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 145.565344][ T6266] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 145.777356][ T6305] chnl_net:caif_netlink_parms(): no params data found [ 145.797257][ T5154] Bluetooth: hci6: command tx timeout [ 145.875353][ T6266] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 145.949295][ T5154] Bluetooth: hci5: command tx timeout [ 146.153909][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 146.180640][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 146.269578][ T10] usb 4-1: USB disconnect, device number 13 [ 147.087019][ T6347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.103623][ T6305] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.140896][ T6305] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.173649][ T6305] bridge_slave_0: entered allmulticast mode [ 147.209867][ T6305] bridge_slave_0: entered promiscuous mode [ 147.480589][ T6305] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.499081][ T6305] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.522413][ T6305] bridge_slave_1: entered allmulticast mode [ 147.539532][ T6305] bridge_slave_1: entered promiscuous mode [ 147.857279][ T5154] Bluetooth: hci6: command tx timeout [ 147.934078][ T6305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.104503][ T6305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.257583][ T5897] usbhid 5-1:0.0: can't add hid device: -71 [ 148.264044][ T5897] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 148.328086][ T5897] usb 5-1: USB disconnect, device number 11 [ 148.744038][ T6305] team0: Port device team_slave_0 added [ 148.843506][ T6305] team0: Port device team_slave_1 added [ 148.997109][ T5893] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 149.193747][ T6305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.239105][ T5893] usb 3-1: config 0 has no interfaces? [ 149.265053][ T6305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.277203][ T5893] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 149.386980][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.411958][ T6305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.415514][ T5893] usb 3-1: Product: syz [ 149.476493][ T5893] usb 3-1: Manufacturer: syz [ 149.504528][ T6305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.516799][ T5893] usb 3-1: SerialNumber: syz [ 149.555103][ T6305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.569931][ T5893] usb 3-1: config 0 descriptor?? [ 149.716601][ T6305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.778000][ T6382] bridge0: entered promiscuous mode [ 149.857553][ T6382] macvlan2: entered promiscuous mode [ 149.937132][ T5154] Bluetooth: hci6: command tx timeout [ 150.414296][ T6305] hsr_slave_0: entered promiscuous mode [ 150.494169][ T6305] hsr_slave_1: entered promiscuous mode [ 150.545051][ T6305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.591890][ T6305] Cannot create hsr debugfs directory [ 151.311527][ T6266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.702800][ T6402] pim6reg: entered allmulticast mode [ 151.817797][ T6404] pim6reg: left allmulticast mode [ 152.001242][ T6266] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.063440][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.070805][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.135661][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.142888][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.207125][ T5893] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 152.367408][ T5893] usb 4-1: Using ep0 maxpacket: 16 [ 152.420496][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.472680][ T5893] usb 4-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 152.484676][ T6305] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 152.499482][ T10] usb 3-1: USB disconnect, device number 16 [ 152.511414][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.544281][ T6305] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 152.584716][ T5893] usb 4-1: config 0 descriptor?? [ 152.620645][ T6305] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 152.679594][ T6305] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 152.925313][ T6266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.997603][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 153.216077][ T10] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 153.250506][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.274224][ T6266] veth0_vlan: entered promiscuous mode [ 153.285425][ T10] usb 3-1: Product: syz [ 153.307863][ T10] usb 3-1: Manufacturer: syz [ 153.330041][ T6305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.337977][ T10] usb 3-1: SerialNumber: syz [ 153.381076][ T10] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 153.414649][ T6266] veth1_vlan: entered promiscuous mode [ 153.487698][ T9] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 153.544944][ T6305] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.624403][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.631699][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.716490][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.723765][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.869503][ T6266] veth0_macvtap: entered promiscuous mode [ 153.934601][ T6266] veth1_macvtap: entered promiscuous mode [ 154.041874][ T6266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.059673][ T6266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.074175][ T6266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.092611][ T6266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.106689][ T6266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.134131][ T6266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.162524][ T6266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.200113][ T6266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.230760][ T6266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.263454][ T6266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.288495][ T6266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.344906][ T6266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.403602][ T6266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.426541][ T5893] usbhid 4-1:0.0: can't add hid device: -71 [ 154.432835][ T5893] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 154.439866][ T6266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.502186][ T5893] usb 4-1: USB disconnect, device number 14 [ 154.507622][ T6266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.558391][ T6266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.582597][ T9] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 154.612167][ T6266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.633835][ T9] ath9k_htc: Failed to initialize the device [ 154.655668][ T6266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.686478][ T6266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.724146][ T9] usb 3-1: ath9k_htc: USB layer deinitialized [ 154.758606][ T6266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.843541][ T6266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.899582][ T6266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.949709][ T6266] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.056880][ T6266] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.086862][ T6266] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.095637][ T6266] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.410261][ T6305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.738932][ T5896] usb 3-1: USB disconnect, device number 17 [ 155.850219][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.872215][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.880684][ T6305] veth0_vlan: entered promiscuous mode [ 155.981143][ T6305] veth1_vlan: entered promiscuous mode [ 156.064135][ T6446] netlink: 'syz.2.127': attribute type 6 has an invalid length. [ 156.108238][ T6446] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.127'. [ 156.108963][ T2965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.250749][ T2965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.289334][ T6305] veth0_macvtap: entered promiscuous mode [ 156.367835][ T6305] veth1_macvtap: entered promiscuous mode [ 156.506918][ T5897] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 156.511701][ T6305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.637159][ T6305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.661010][ T6305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.692821][ T6305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.723599][ T6305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.754865][ T5897] usb 3-1: config 0 has no interfaces? [ 156.771031][ T6305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.801774][ T5897] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 156.820799][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.856939][ T6305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.880616][ T5897] usb 3-1: Product: syz [ 156.909957][ T5897] usb 3-1: Manufacturer: syz [ 156.914636][ T5897] usb 3-1: SerialNumber: syz [ 156.956843][ T6305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.987162][ T5897] usb 3-1: config 0 descriptor?? [ 157.007678][ T6305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.123406][ T6461] Cannot find map_set index 0 as target [ 157.308015][ T6305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.354004][ T6305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.745956][ T5892] IPVS: starting estimator thread 0... [ 157.778068][ T6305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.880629][ T6305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.033008][ T6305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.047396][ T6463] IPVS: using max 28 ests per chain, 67200 per kthread [ 158.077401][ T6305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.104118][ T6305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.276813][ T6305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.286706][ T6305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.396842][ T6305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.440188][ T6305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.482849][ T6305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.524284][ T6305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.562838][ T6305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.603432][ T6305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.645385][ T6305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.749746][ T6305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.895722][ T6305] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.948861][ T6305] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.992926][ T6305] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.028716][ T6305] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.517802][ T10] usb 3-1: USB disconnect, device number 18 [ 159.568142][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.588935][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.818881][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.840841][ T6469] netem: incorrect ge model size [ 159.846049][ T6469] netem: change failed [ 159.854632][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.646889][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 160.745399][ T6482] pim6reg: entered allmulticast mode [ 160.836732][ T6487] pim6reg: left allmulticast mode [ 160.843628][ T10] usb 3-1: config 0 has no interfaces? [ 160.859067][ T10] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 160.876820][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.910746][ T10] usb 3-1: Product: syz [ 160.914955][ T10] usb 3-1: Manufacturer: syz [ 160.948708][ T10] usb 3-1: SerialNumber: syz [ 160.994815][ T10] usb 3-1: config 0 descriptor?? [ 161.186869][ T5848] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 161.474030][ T6492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.132'. [ 161.743667][ T5896] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 161.886928][ T5848] usb 6-1: Using ep0 maxpacket: 16 [ 161.896940][ T5896] usb 4-1: Using ep0 maxpacket: 8 [ 161.906168][ T5848] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.940041][ T5848] usb 6-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 161.968219][ T5896] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 161.996132][ T5848] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.037067][ T5848] usb 6-1: config 0 descriptor?? [ 162.047115][ T5896] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 162.187408][ T5896] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 162.712000][ T5848] usbhid 6-1:0.0: can't add hid device: -71 [ 162.719349][ T5848] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 162.774058][ T5848] usb 6-1: USB disconnect, device number 2 [ 164.140504][ T5848] usb 3-1: USB disconnect, device number 19 [ 164.271817][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 164.476874][ T47] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 164.546312][ T5896] usb 4-1: string descriptor 0 read error: -71 [ 164.559593][ T5896] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 164.587073][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 164.597472][ T10] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 164.605920][ T10] usb 6-1: config 0 has no interface number 0 [ 164.612414][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.630630][ T10] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 164.648349][ T10] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 164.666184][ T5896] usb 4-1: can't set config #1, error -71 [ 164.682089][ T5896] usb 4-1: USB disconnect, device number 15 [ 164.693115][ T10] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 164.710759][ T47] usb 7-1: Using ep0 maxpacket: 32 [ 164.714678][ T10] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 164.809193][ T47] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.866843][ T47] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.882698][ T10] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 164.903610][ T47] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 164.968569][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.986863][ T47] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.019152][ T10] usb 6-1: config 0 descriptor?? [ 165.039592][ T47] usb 7-1: config 0 descriptor?? [ 165.061844][ T10] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 165.282796][ T10] usb 6-1: USB disconnect, device number 3 [ 165.327495][ T10] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 165.551106][ T6499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.549883][ T6518] bridge0: port 3(netdevsim0) entered blocking state [ 166.559246][ T6518] bridge0: port 3(netdevsim0) entered disabled state [ 166.568771][ T6518] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 166.625878][ T6518] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 166.635837][ T6518] bridge0: port 3(netdevsim0) entered blocking state [ 166.643770][ T6518] bridge0: port 3(netdevsim0) entered forwarding state [ 166.716907][ T5847] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 166.728461][ T5847] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 166.751128][ T5847] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 166.761681][ T5847] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 166.770659][ T5847] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 167.247159][ T5848] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 167.406873][ T5848] usb 6-1: Using ep0 maxpacket: 8 [ 167.424991][ T5848] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.436148][ T5848] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 167.465531][ T5848] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 167.524178][ T5848] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 167.696401][ T47] usbhid 7-1:0.0: can't add hid device: -71 [ 167.777883][ T47] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 167.783209][ T6523] chnl_net:caif_netlink_parms(): no params data found [ 167.792848][ T5848] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 167.844853][ T47] usb 7-1: USB disconnect, device number 2 [ 167.895420][ T5848] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 168.157669][ T6530] mmap: syz.3.147 (6530): VmData 46022656 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 168.180844][ T6530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.147'. [ 168.212729][ T5848] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.333740][ T5848] usb 6-1: config 0 descriptor?? [ 168.496407][ T6543] pim6reg: entered allmulticast mode [ 168.502710][ T6543] pim6reg: left allmulticast mode [ 168.600252][ T5896] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 168.727543][ T1539] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 168.789104][ T5896] usb 4-1: config 54 has an invalid interface number: 154 but max is 0 [ 168.808035][ T5896] usb 4-1: config 54 has no interface number 0 [ 168.827520][ T5896] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 168.827594][ T5154] Bluetooth: hci7: command tx timeout [ 168.847819][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.866567][ T5896] usb 4-1: Product: syz [ 168.894080][ T5896] usb 4-1: Manufacturer: syz [ 168.927321][ T1539] usb 7-1: Using ep0 maxpacket: 16 [ 168.934407][ T6523] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.942892][ T1539] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.957639][ T1539] usb 7-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 168.962390][ T5896] usb 4-1: SerialNumber: syz [ 169.018969][ T6523] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.021528][ T1539] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.066680][ T6523] bridge_slave_0: entered allmulticast mode [ 169.102844][ T6523] bridge_slave_0: entered promiscuous mode [ 169.119971][ T1539] usb 7-1: config 0 descriptor?? [ 169.130258][ T6523] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.159003][ T6523] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.177839][ T6523] bridge_slave_1: entered allmulticast mode [ 169.262887][ T6523] bridge_slave_1: entered promiscuous mode [ 169.411631][ T1165] usb 4-1: Failed to submit usb control message: -71 [ 169.424339][ T5896] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 169.462871][ T1165] usb 4-1: unable to send the bmi data to the device: -71 [ 169.472092][ T1165] usb 4-1: unable to get target info from device [ 169.496423][ T1165] usb 4-1: could not get target info (-71) [ 169.508559][ T1165] usb 4-1: could not probe fw (-71) [ 169.597529][ T5896] usb 4-1: USB disconnect, device number 16 [ 169.700265][ T9] usb 6-1: USB disconnect, device number 4 [ 169.763860][ T6523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.820731][ T1539] usbhid 7-1:0.0: can't add hid device: -71 [ 169.835910][ T1539] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 169.859786][ T6523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.905363][ T1539] usb 7-1: USB disconnect, device number 3 [ 170.089905][ T6523] team0: Port device team_slave_0 added [ 170.149200][ T6523] team0: Port device team_slave_1 added [ 170.388762][ T6523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.437498][ T6523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.579985][ T6523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.671640][ T6523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.686862][ T6523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.774376][ T6523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.897442][ T5154] Bluetooth: hci7: command tx timeout [ 171.573233][ T6523] hsr_slave_0: entered promiscuous mode [ 171.645342][ T6523] hsr_slave_1: entered promiscuous mode [ 171.698306][ T6523] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.706127][ T6523] Cannot create hsr debugfs directory [ 171.874579][ T6578] netlink: 44 bytes leftover after parsing attributes in process `syz.2.159'. [ 172.569609][ T6588] FAULT_INJECTION: forcing a failure. [ 172.569609][ T6588] name failslab, interval 1, probability 0, space 0, times 1 [ 172.598200][ T6585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.161'. [ 172.663771][ T6588] CPU: 0 UID: 0 PID: 6588 Comm: syz.3.162 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 172.663803][ T6588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 172.663820][ T6588] Call Trace: [ 172.663828][ T6588] [ 172.663837][ T6588] dump_stack_lvl+0x241/0x360 [ 172.663879][ T6588] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.663910][ T6588] ? __pfx__printk+0x10/0x10 [ 172.663945][ T6588] ? __pfx___might_resched+0x10/0x10 [ 172.663978][ T6588] should_fail_ex+0x424/0x570 [ 172.664007][ T6588] should_failslab+0xac/0x100 [ 172.664040][ T6588] __kmalloc_noprof+0xdf/0x4d0 [ 172.664069][ T6588] ? nf_tables_newrule+0x1610/0x2980 [ 172.664106][ T6588] nf_tables_newrule+0x1610/0x2980 [ 172.664156][ T6588] ? __pfx_nf_tables_newrule+0x10/0x10 [ 172.664217][ T6588] ? __nla_parse+0x40/0x60 [ 172.664248][ T6588] nfnetlink_rcv+0x12eb/0x28f0 [ 172.664307][ T6588] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 172.664383][ T6588] ? skb_clone+0x240/0x390 [ 172.664421][ T6588] ? netlink_deliver_tap+0x2e/0x1b0 [ 172.664454][ T6588] ? netlink_deliver_tap+0x2e/0x1b0 [ 172.664486][ T6588] netlink_unicast+0x7f8/0x9a0 [ 172.664521][ T6588] ? __pfx_netlink_unicast+0x10/0x10 [ 172.664550][ T6588] ? skb_put+0x114/0x1f0 [ 172.664582][ T6588] netlink_sendmsg+0x8c3/0xcd0 [ 172.664625][ T6588] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.664663][ T6588] ? __import_iovec+0x585/0x830 [ 172.664701][ T6588] ? aa_sock_msg_perm+0x91/0x160 [ 172.664734][ T6588] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.664760][ T6588] __sock_sendmsg+0x221/0x270 [ 172.664797][ T6588] ____sys_sendmsg+0x523/0x860 [ 172.664826][ T6588] ? __pfx_____sys_sendmsg+0x10/0x10 [ 172.664864][ T6588] __sys_sendmsg+0x271/0x360 [ 172.664891][ T6588] ? __pfx___sys_sendmsg+0x10/0x10 [ 172.664967][ T6588] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 172.664992][ T6588] ? lockdep_hardirqs_on+0x9d/0x150 [ 172.665019][ T6588] __do_fast_syscall_32+0xb4/0x110 [ 172.665043][ T6588] ? exc_page_fault+0x5f8/0x920 [ 172.665071][ T6588] do_fast_syscall_32+0x34/0x80 [ 172.665097][ T6588] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 172.665122][ T6588] RIP: 0023:0xf746d579 [ 172.665146][ T6588] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 172.665162][ T6588] RSP: 002b:00000000f50f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 172.665191][ T6588] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 172.665211][ T6588] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 172.665223][ T6588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 172.665234][ T6588] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 172.665247][ T6588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 172.665277][ T6588] [ 172.977127][ T5154] Bluetooth: hci7: command tx timeout [ 173.445997][ T6592] netlink: 'syz.3.163': attribute type 11 has an invalid length. [ 173.865558][ T6523] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 174.044452][ T6599] pim6reg: entered allmulticast mode [ 174.060662][ T6523] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 174.181509][ T6598] pim6reg: left allmulticast mode [ 174.373960][ T6523] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 174.429517][ T6523] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 174.477256][ T5896] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 174.697209][ T5896] usb 6-1: Using ep0 maxpacket: 16 [ 174.728409][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.793740][ T5896] usb 6-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 174.849836][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.906581][ T5896] usb 6-1: config 0 descriptor?? [ 174.989787][ T6523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.057196][ T5154] Bluetooth: hci7: command tx timeout [ 175.177847][ T6523] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.245606][ T30] audit: type=1400 audit(1744147460.914:2): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name="]'," pid=6607 comm="syz.3.169" [ 175.253615][ T2954] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.271712][ T2954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.363106][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.370415][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.631791][ T5896] usbhid 6-1:0.0: can't add hid device: -71 [ 175.640426][ T5896] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 175.707766][ T5896] usb 6-1: USB disconnect, device number 5 [ 175.805658][ T6523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.091471][ T6523] veth0_vlan: entered promiscuous mode [ 176.229721][ T6523] veth1_vlan: entered promiscuous mode [ 176.726625][ T6523] veth0_macvtap: entered promiscuous mode [ 176.749973][ T6523] veth1_macvtap: entered promiscuous mode [ 176.902413][ T6523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.979940][ T6523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.067181][ T6523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.100843][ T6523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.125003][ T6523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.150038][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 177.181676][ T6523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.275748][ T6523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.307160][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 177.338617][ T9] usb 6-1: too many configurations: 255, using maximum allowed: 8 [ 177.360948][ T9] usb 6-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=85.bd [ 177.377281][ T6523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.407330][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=254 [ 177.446950][ T9] usb 6-1: Product: syz [ 177.451271][ T9] usb 6-1: Manufacturer: syz [ 177.455904][ T9] usb 6-1: SerialNumber: syz [ 177.468030][ T6523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.479423][ T9] usb 6-1: config 0 descriptor?? [ 177.487607][ T6523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.503467][ T6523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.524469][ T6523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.561596][ T6523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.598407][ T6523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.610001][ T6523] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.629285][ T6523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.644731][ T6523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.666939][ T6523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.762042][ T6523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.871816][ T6523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.924673][ T6523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.965278][ T6523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.999696][ T6523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.030669][ T6523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.064020][ T9] usb 6-1: USB disconnect, device number 6 [ 178.095752][ T6523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.142944][ T6523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.179302][ T6523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.209936][ T6523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.257370][ T6523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.316131][ T6523] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.587369][ T30] audit: type=1326 audit(1744147464.254:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6626 comm="syz.6.175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 178.657933][ T30] audit: type=1326 audit(1744147464.284:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6626 comm="syz.6.175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 178.680044][ T30] audit: type=1326 audit(1744147464.284:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6626 comm="syz.6.175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 178.713652][ T30] audit: type=1326 audit(1744147464.284:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6626 comm="syz.6.175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 178.820509][ T30] audit: type=1326 audit(1744147464.284:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6626 comm="syz.6.175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 178.848249][ T30] audit: type=1326 audit(1744147464.284:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6626 comm="syz.6.175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 178.879741][ T30] audit: type=1326 audit(1744147464.294:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6626 comm="syz.6.175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 178.909295][ T6523] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.938676][ T6523] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.966863][ T6523] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.985958][ T30] audit: type=1326 audit(1744147464.294:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6626 comm="syz.6.175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 179.008337][ T6523] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.151913][ T30] audit: type=1326 audit(1744147464.294:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6626 comm="syz.6.175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 179.526551][ T6637] dccp_invalid_packet: P.type (CLOSEREQ) not Data || [Data]Ack, while P.X == 0 [ 179.814965][ T2965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.859141][ T6632] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 179.885041][ T2965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.118321][ T2954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.198066][ T2954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.227128][ T6642] netlink: 4 bytes leftover after parsing attributes in process `syz.5.180'. [ 181.061195][ T6649] pim6reg: entered allmulticast mode [ 181.116095][ T6649] pim6reg: left allmulticast mode [ 181.357074][ T5896] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 181.390240][ T6654] netlink: 'syz.7.139': attribute type 6 has an invalid length. [ 181.430633][ T6654] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.139'. [ 181.537718][ T5896] usb 7-1: Using ep0 maxpacket: 16 [ 181.600378][ T5896] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.656140][ T5896] usb 7-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 181.747549][ T5896] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.809073][ T5896] usb 7-1: config 0 descriptor?? [ 182.487590][ T5896] usbhid 7-1:0.0: can't add hid device: -71 [ 182.526519][ T5896] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 182.623722][ T5896] usb 7-1: USB disconnect, device number 4 [ 183.388503][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 183.388525][ T30] audit: type=1326 audit(1744147469.054:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6661 comm="syz.6.185" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 183.550779][ T30] audit: type=1326 audit(1744147469.054:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6661 comm="syz.6.185" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 183.670081][ T30] audit: type=1326 audit(1744147469.054:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6661 comm="syz.6.185" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 183.802251][ T30] audit: type=1326 audit(1744147469.054:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6661 comm="syz.6.185" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 183.904170][ T30] audit: type=1326 audit(1744147469.054:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6661 comm="syz.6.185" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 184.040574][ T30] audit: type=1326 audit(1744147469.054:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6661 comm="syz.6.185" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 184.144580][ T30] audit: type=1326 audit(1744147469.054:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6661 comm="syz.6.185" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 184.253133][ T30] audit: type=1326 audit(1744147469.054:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6661 comm="syz.6.185" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 184.387455][ T30] audit: type=1326 audit(1744147469.054:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6661 comm="syz.6.185" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 184.516055][ T30] audit: type=1326 audit(1744147469.054:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6661 comm="syz.6.185" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 184.727143][ T47] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 184.901055][ T47] usb 6-1: Using ep0 maxpacket: 8 [ 184.908951][ T47] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 184.922268][ T6677] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 184.922834][ T47] usb 6-1: config 0 has no interface number 0 [ 185.025388][ T47] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 185.049189][ T47] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 185.109377][ T47] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 185.157647][ T47] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 185.213384][ T47] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 185.262057][ T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.283836][ T47] usb 6-1: config 0 descriptor?? [ 185.311401][ T47] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 185.374804][ T6683] pim6reg: entered allmulticast mode [ 185.424197][ T6684] pim6reg: left allmulticast mode [ 185.631427][ T1539] usb 6-1: USB disconnect, device number 7 [ 185.658371][ T1539] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 186.146859][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 186.329756][ T9] usb 7-1: config 0 has no interfaces? [ 186.346925][ T5893] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 186.511902][ T6696] syzkaller0: entered promiscuous mode [ 186.577625][ T5893] usb 4-1: Using ep0 maxpacket: 16 [ 186.592521][ T6696] syzkaller0: entered allmulticast mode [ 186.602562][ T9] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 186.622639][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.662019][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.674697][ T5893] usb 4-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 186.685369][ T9] usb 7-1: Product: syz [ 186.695880][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.708919][ T9] usb 7-1: Manufacturer: syz [ 186.718737][ T9] usb 7-1: SerialNumber: syz [ 186.777805][ T5893] usb 4-1: config 0 descriptor?? [ 186.787966][ T9] usb 7-1: config 0 descriptor?? [ 187.133618][ T6708] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 188.490326][ T5893] usbhid 4-1:0.0: can't add hid device: -71 [ 188.496607][ T5893] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 188.590708][ T5893] usb 4-1: USB disconnect, device number 17 [ 189.180986][ T1539] usb 7-1: USB disconnect, device number 5 [ 190.116934][ T5848] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 190.298367][ T5848] usb 7-1: config 0 has no interfaces? [ 190.306933][ T5848] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 190.330907][ T5848] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.388126][ T5848] usb 7-1: config 0 descriptor?? [ 190.576943][ T47] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 190.728022][ T6716] netlink: 4 bytes leftover after parsing attributes in process `syz.6.204'. [ 190.781609][ T6720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.796840][ T47] usb 6-1: config 0 has no interfaces? [ 190.821474][ T6720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.848423][ T47] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 190.871320][ T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.894767][ T47] usb 6-1: Product: syz [ 190.910539][ T47] usb 6-1: Manufacturer: syz [ 190.920876][ T47] usb 6-1: SerialNumber: syz [ 190.938987][ T47] usb 6-1: config 0 descriptor?? [ 193.099734][ T47] usb 6-1: USB disconnect, device number 8 [ 193.254924][ T1539] usb 7-1: USB disconnect, device number 6 [ 193.536018][ T6729] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 193.646591][ T6734] pim6reg: entered allmulticast mode [ 193.663887][ T6734] pim6reg: left allmulticast mode [ 193.860654][ T30] kauditd_printk_skb: 89 callbacks suppressed [ 193.860674][ T30] audit: type=1326 audit(1744147479.534:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6736 comm="syz.7.211" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 193.974232][ T30] audit: type=1326 audit(1744147479.584:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6736 comm="syz.7.211" exe="/root/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 194.045185][ T30] audit: type=1326 audit(1744147479.584:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6736 comm="syz.7.211" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 194.199596][ T30] audit: type=1326 audit(1744147479.584:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6736 comm="syz.7.211" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 194.300749][ T30] audit: type=1326 audit(1744147479.584:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6736 comm="syz.7.211" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 194.347113][ T47] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 194.445047][ T30] audit: type=1326 audit(1744147479.584:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6736 comm="syz.7.211" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 194.503842][ T6747] pim6reg: entered allmulticast mode [ 194.526919][ T47] usb 7-1: Using ep0 maxpacket: 16 [ 194.535122][ T6747] pim6reg: left allmulticast mode [ 194.547602][ T47] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.563315][ T47] usb 7-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 194.584316][ T30] audit: type=1326 audit(1744147479.584:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6736 comm="syz.7.211" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 194.609130][ T6749] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 194.618754][ T47] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.658406][ T47] usb 7-1: config 0 descriptor?? [ 194.679092][ T30] audit: type=1326 audit(1744147479.584:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6736 comm="syz.7.211" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 195.020370][ T30] audit: type=1326 audit(1744147479.584:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6736 comm="syz.7.211" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 195.226341][ T30] audit: type=1326 audit(1744147479.584:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6736 comm="syz.7.211" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 195.631052][ T47] usbhid 7-1:0.0: can't add hid device: -71 [ 195.637332][ T47] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 195.699036][ T47] usb 7-1: USB disconnect, device number 7 [ 195.997931][ T6763] netlink: 4 bytes leftover after parsing attributes in process `syz.5.217'. [ 196.258063][ T6766] syz.5.217 uses obsolete (PF_INET,SOCK_PACKET) [ 196.295141][ T6766] syzkaller1: entered promiscuous mode [ 196.301033][ T6766] syzkaller1: entered allmulticast mode [ 196.318827][ T6766] netlink: 4 bytes leftover after parsing attributes in process `syz.5.217'. [ 196.371558][ T5896] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 196.579839][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.631203][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.707262][ T5896] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 196.776823][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.838473][ T5896] usb 4-1: config 0 descriptor?? [ 197.296260][ T5896] cp2112 0003:10C4:EA90.0001: item fetching failed at offset 0/7 [ 197.331180][ T5896] cp2112 0003:10C4:EA90.0001: parse failed [ 197.364933][ T5896] cp2112 0003:10C4:EA90.0001: probe with driver cp2112 failed with error -22 [ 198.006057][ T6785] pim6reg: entered allmulticast mode [ 198.052556][ T6786] pim6reg: left allmulticast mode [ 198.467153][ T5896] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 198.707063][ T5896] usb 6-1: Using ep0 maxpacket: 16 [ 198.720321][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.833856][ T5896] usb 6-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 198.873930][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.895357][ T5896] usb 6-1: config 0 descriptor?? [ 198.973584][ T5848] usb 4-1: USB disconnect, device number 18 [ 199.001017][ T6793] FAULT_INJECTION: forcing a failure. [ 199.001017][ T6793] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 199.062606][ T6793] CPU: 1 UID: 0 PID: 6793 Comm: syz.6.226 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 199.062637][ T6793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 199.062662][ T6793] Call Trace: [ 199.062671][ T6793] [ 199.062680][ T6793] dump_stack_lvl+0x241/0x360 [ 199.062721][ T6793] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.062752][ T6793] ? __pfx__printk+0x10/0x10 [ 199.062795][ T6793] should_fail_ex+0x424/0x570 [ 199.062824][ T6793] _copy_from_user+0x2d/0xb0 [ 199.062856][ T6793] input_event_from_user+0x1bf/0x510 [ 199.062886][ T6793] ? __pfx_input_event_from_user+0x10/0x10 [ 199.062914][ T6793] ? input_inject_event+0xd9/0x360 [ 199.062948][ T6793] evdev_write+0x4c4/0x7d0 [ 199.062981][ T6793] ? __pfx_evdev_write+0x10/0x10 [ 199.063005][ T6793] ? bpf_lsm_file_permission+0x9/0x10 [ 199.063031][ T6793] ? rw_verify_area+0x246/0x630 [ 199.063053][ T6793] ? __pfx_evdev_write+0x10/0x10 [ 199.063076][ T6793] vfs_write+0x2bc/0xd10 [ 199.063114][ T6793] ? __pfx_vfs_write+0x10/0x10 [ 199.063140][ T6793] ? __fget_files+0x2a/0x420 [ 199.063158][ T6793] ? __fget_files+0x2a/0x420 [ 199.063179][ T6793] ? __fget_files+0x39d/0x420 [ 199.063196][ T6793] ? __fget_files+0x2a/0x420 [ 199.063226][ T6793] ksys_write+0x19d/0x2d0 [ 199.063253][ T6793] ? __pfx_ksys_write+0x10/0x10 [ 199.063281][ T6793] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 199.063307][ T6793] ? lockdep_hardirqs_on+0x9d/0x150 [ 199.063335][ T6793] __do_fast_syscall_32+0xb4/0x110 [ 199.063360][ T6793] ? exc_page_fault+0x5f8/0x920 [ 199.063390][ T6793] do_fast_syscall_32+0x34/0x80 [ 199.063417][ T6793] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 199.063443][ T6793] RIP: 0023:0xf742d579 [ 199.063461][ T6793] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 199.063478][ T6793] RSP: 002b:00000000f509555c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 199.063501][ T6793] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 199.063515][ T6793] RDX: 0000000000002250 RSI: 0000000000000000 RDI: 0000000000000000 [ 199.063528][ T6793] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 199.063540][ T6793] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 199.063559][ T6793] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 199.063590][ T6793] [ 199.302809][ C1] vkms_vblank_simulate: vblank timer overrun [ 199.631027][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.638094][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.085777][ T6799] capability: warning: `syz.3.229' uses deprecated v2 capabilities in a way that may be insecure [ 200.115991][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 200.116012][ T30] audit: type=1800 audit(1744147485.784:212): pid=6801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.228" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 200.173229][ T5896] usbhid 6-1:0.0: can't add hid device: -71 [ 200.189482][ T5896] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 200.265466][ T5896] usb 6-1: USB disconnect, device number 9 [ 200.797252][ T6809] pim6reg: entered allmulticast mode [ 200.933374][ T6809] pim6reg: left allmulticast mode [ 201.407377][ T1539] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 201.566946][ T1539] usb 4-1: Using ep0 maxpacket: 16 [ 201.586272][ T1539] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.654613][ T1539] usb 4-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 201.692818][ T1539] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.777888][ T1539] usb 4-1: config 0 descriptor?? [ 203.342231][ T6834] FAULT_INJECTION: forcing a failure. [ 203.342231][ T6834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.373474][ T6834] CPU: 1 UID: 0 PID: 6834 Comm: syz.2.242 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 203.373511][ T6834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 203.373524][ T6834] Call Trace: [ 203.373533][ T6834] [ 203.373542][ T6834] dump_stack_lvl+0x241/0x360 [ 203.373582][ T6834] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.373614][ T6834] ? __pfx__printk+0x10/0x10 [ 203.373657][ T6834] should_fail_ex+0x424/0x570 [ 203.373687][ T6834] _copy_to_user+0x31/0xb0 [ 203.373721][ T6834] simple_read_from_buffer+0xc4/0x170 [ 203.373757][ T6834] proc_fail_nth_read+0x1ef/0x260 [ 203.373784][ T6834] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 203.373811][ T6834] ? rw_verify_area+0x246/0x630 [ 203.373834][ T6834] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 203.373858][ T6834] vfs_read+0x21f/0xb90 [ 203.373888][ T6834] ? __pfx___mutex_lock+0x10/0x10 [ 203.373916][ T6834] ? __pfx_vfs_read+0x10/0x10 [ 203.373944][ T6834] ? __fget_files+0x2a/0x420 [ 203.373966][ T6834] ? __fget_files+0x39d/0x420 [ 203.373984][ T6834] ? __fget_files+0x2a/0x420 [ 203.374013][ T6834] ksys_read+0x19d/0x2d0 [ 203.374040][ T6834] ? __pfx_ksys_read+0x10/0x10 [ 203.374068][ T6834] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 203.374093][ T6834] ? lockdep_hardirqs_on+0x9d/0x150 [ 203.374128][ T6834] __do_fast_syscall_32+0xb4/0x110 [ 203.374155][ T6834] ? exc_page_fault+0x5f8/0x920 [ 203.374184][ T6834] do_fast_syscall_32+0x34/0x80 [ 203.374212][ T6834] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 203.374237][ T6834] RIP: 0023:0xf7f06579 [ 203.374256][ T6834] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 203.374273][ T6834] RSP: 002b:00000000f5026590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 203.374296][ T6834] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5026620 [ 203.374311][ T6834] RDX: 000000000000000f RSI: 00000000f738cff4 RDI: 0000000000000000 [ 203.374324][ T6834] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 203.374337][ T6834] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 203.374349][ T6834] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 203.374381][ T6834] [ 203.597557][ C1] vkms_vblank_simulate: vblank timer overrun [ 203.926923][ T1539] usbhid 4-1:0.0: can't add hid device: -71 [ 203.933033][ T1539] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 203.988129][ T1539] usb 4-1: USB disconnect, device number 19 [ 204.200297][ T6839] FAULT_INJECTION: forcing a failure. [ 204.200297][ T6839] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.217113][ T6839] CPU: 1 UID: 0 PID: 6839 Comm: syz.2.243 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 204.217143][ T6839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 204.217156][ T6839] Call Trace: [ 204.217165][ T6839] [ 204.217174][ T6839] dump_stack_lvl+0x241/0x360 [ 204.217213][ T6839] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.217244][ T6839] ? __pfx__printk+0x10/0x10 [ 204.217286][ T6839] should_fail_ex+0x424/0x570 [ 204.217314][ T6839] _copy_to_user+0x31/0xb0 [ 204.217348][ T6839] simple_read_from_buffer+0xc4/0x170 [ 204.217384][ T6839] proc_fail_nth_read+0x1ef/0x260 [ 204.217410][ T6839] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 204.217436][ T6839] ? rw_verify_area+0x246/0x630 [ 204.217458][ T6839] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 204.217482][ T6839] vfs_read+0x21f/0xb90 [ 204.217512][ T6839] ? __pfx___mutex_lock+0x10/0x10 [ 204.217539][ T6839] ? __pfx_vfs_read+0x10/0x10 [ 204.217566][ T6839] ? __fget_files+0x2a/0x420 [ 204.217587][ T6839] ? __fget_files+0x39d/0x420 [ 204.217605][ T6839] ? __fget_files+0x2a/0x420 [ 204.217634][ T6839] ksys_read+0x19d/0x2d0 [ 204.217661][ T6839] ? __pfx_ksys_read+0x10/0x10 [ 204.217688][ T6839] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 204.217713][ T6839] ? lockdep_hardirqs_on+0x9d/0x150 [ 204.217741][ T6839] __do_fast_syscall_32+0xb4/0x110 [ 204.217767][ T6839] ? exc_page_fault+0x5f8/0x920 [ 204.217797][ T6839] do_fast_syscall_32+0x34/0x80 [ 204.217823][ T6839] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 204.217849][ T6839] RIP: 0023:0xf7f06579 [ 204.217868][ T6839] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 204.217885][ T6839] RSP: 002b:00000000f5005590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 204.217907][ T6839] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5005620 [ 204.217921][ T6839] RDX: 000000000000000f RSI: 00000000f738cff4 RDI: 0000000000000000 [ 204.217934][ T6839] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 204.217946][ T6839] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 204.217959][ T6839] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 204.217990][ T6839] [ 205.061651][ T1539] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 205.227006][ T5848] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 205.265885][ T1539] usb 4-1: config 0 has no interfaces? [ 205.277326][ T1539] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 205.302203][ T1539] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.320710][ T1539] usb 4-1: Product: syz [ 205.324967][ T1539] usb 4-1: Manufacturer: syz [ 205.338920][ T1539] usb 4-1: SerialNumber: syz [ 205.359344][ T1539] usb 4-1: config 0 descriptor?? [ 205.387709][ T5848] usb 6-1: Using ep0 maxpacket: 32 [ 205.413109][ T5848] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.506424][ T5848] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.524066][ T5848] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 205.612858][ T5848] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.713019][ T6853] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 205.743713][ T5848] usb 6-1: config 0 descriptor?? [ 205.772294][ T5892] usb 4-1: USB disconnect, device number 20 [ 206.012359][ T6865] xt_CT: No such helper "netbios-ns" [ 206.366128][ T6852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.024944][ T6876] pim6reg: entered allmulticast mode [ 207.034111][ T6876] pim6reg: left allmulticast mode [ 207.811522][ T5848] usbhid 6-1:0.0: can't add hid device: -71 [ 207.835175][ T6887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.259'. [ 207.841204][ T5848] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 207.913360][ T5848] usb 6-1: USB disconnect, device number 10 [ 208.747337][ T6905] TCP: TCP_TX_DELAY enabled [ 209.402776][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 209.707043][ T5892] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 209.729954][ T9] usb 6-1: config 0 has no interfaces? [ 209.755067][ T9] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 209.790757][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.830294][ T9] usb 6-1: Product: syz [ 209.847213][ T9] usb 6-1: Manufacturer: syz [ 209.887263][ T9] usb 6-1: SerialNumber: syz [ 209.912648][ T9] usb 6-1: config 0 descriptor?? [ 209.981809][ T5892] usb 7-1: config 0 has no interfaces? [ 210.044348][ T5892] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 210.135527][ T5892] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.198731][ T5893] usb 6-1: USB disconnect, device number 11 [ 210.205075][ T5892] usb 7-1: Product: syz [ 210.243004][ T5892] usb 7-1: Manufacturer: syz [ 210.266984][ T5892] usb 7-1: SerialNumber: syz [ 210.284911][ T5892] usb 7-1: config 0 descriptor?? [ 210.854294][ T6935] netlink: 56 bytes leftover after parsing attributes in process `syz.3.274'. [ 211.446988][ T1539] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 211.685447][ T1539] usb 3-1: Using ep0 maxpacket: 32 [ 211.854824][ T1539] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.935760][ T1539] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.939310][ T5847] Bluetooth: hci0: command 0x0406 tx timeout [ 211.980143][ T1539] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 212.095364][ T6954] pim6reg: entered allmulticast mode [ 212.116864][ T1539] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.144663][ T6954] pim6reg: left allmulticast mode [ 212.249631][ T1539] usb 3-1: config 0 descriptor?? [ 212.705477][ T6933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.725031][ T5848] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 212.954605][ T5848] usb 4-1: Using ep0 maxpacket: 16 [ 212.984358][ T5848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.048368][ T5848] usb 4-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 213.106642][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.186557][ T5848] usb 4-1: config 0 descriptor?? [ 213.634107][ T5893] usb 7-1: USB disconnect, device number 8 [ 213.734485][ T6964] usb usb1: usbfs: process 6964 (syz.5.283) did not claim interface 0 before use [ 214.635995][ T1539] usbhid 3-1:0.0: can't add hid device: -71 [ 214.642577][ T1539] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 214.693738][ T1539] usb 3-1: USB disconnect, device number 20 [ 214.868305][ T5892] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 214.993113][ T5848] usbhid 4-1:0.0: can't add hid device: -71 [ 215.046327][ T5848] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 215.059209][ T6974] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 215.122865][ T5892] usb 6-1: config 0 has no interfaces? [ 215.136880][ T5848] usb 4-1: USB disconnect, device number 21 [ 215.216655][ T5892] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 215.271470][ T5892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.302870][ T5892] usb 6-1: Product: syz [ 215.324651][ T5892] usb 6-1: Manufacturer: syz [ 215.345941][ T5892] usb 6-1: SerialNumber: syz [ 215.507008][ T5892] usb 6-1: config 0 descriptor?? [ 215.774441][ T5848] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 215.878407][ T5892] usb 6-1: USB disconnect, device number 12 [ 215.976909][ T5848] usb 7-1: Using ep0 maxpacket: 8 [ 215.985034][ T5848] usb 7-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.000147][ T5848] usb 7-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 216.049248][ T5848] usb 7-1: config 0 interface 0 has no altsetting 0 [ 216.149933][ T6982] FAULT_INJECTION: forcing a failure. [ 216.149933][ T6982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.177288][ T5848] usb 7-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 216.196856][ T5848] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.213885][ T5848] usb 7-1: config 0 descriptor?? [ 216.228891][ T6982] CPU: 1 UID: 0 PID: 6982 Comm: syz.2.289 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 216.228924][ T6982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 216.228938][ T6982] Call Trace: [ 216.228947][ T6982] [ 216.228955][ T6982] dump_stack_lvl+0x241/0x360 [ 216.228996][ T6982] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.229027][ T6982] ? __pfx__printk+0x10/0x10 [ 216.229069][ T6982] should_fail_ex+0x424/0x570 [ 216.229102][ T6982] _copy_to_user+0x31/0xb0 [ 216.229136][ T6982] simple_read_from_buffer+0xc4/0x170 [ 216.229171][ T6982] proc_fail_nth_read+0x1ef/0x260 [ 216.229197][ T6982] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 216.229230][ T6982] ? rw_verify_area+0x246/0x630 [ 216.229252][ T6982] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 216.229275][ T6982] vfs_read+0x21f/0xb90 [ 216.229303][ T6982] ? __pfx___mutex_lock+0x10/0x10 [ 216.229330][ T6982] ? __pfx_vfs_read+0x10/0x10 [ 216.229358][ T6982] ? __fget_files+0x2a/0x420 [ 216.229379][ T6982] ? __fget_files+0x39d/0x420 [ 216.229397][ T6982] ? __fget_files+0x2a/0x420 [ 216.229426][ T6982] ksys_read+0x19d/0x2d0 [ 216.229453][ T6982] ? __pfx_ksys_read+0x10/0x10 [ 216.229480][ T6982] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 216.229505][ T6982] ? lockdep_hardirqs_on+0x9d/0x150 [ 216.229533][ T6982] __do_fast_syscall_32+0xb4/0x110 [ 216.229559][ T6982] ? exc_page_fault+0x5f8/0x920 [ 216.229589][ T6982] do_fast_syscall_32+0x34/0x80 [ 216.229615][ T6982] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 216.229640][ T6982] RIP: 0023:0xf7f06579 [ 216.229658][ T6982] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 216.229676][ T6982] RSP: 002b:00000000f4fe4590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 216.229700][ T6982] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f4fe4620 [ 216.229714][ T6982] RDX: 000000000000000f RSI: 00000000f738cff4 RDI: 0000000000000000 [ 216.229728][ T6982] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 216.229740][ T6982] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 216.229753][ T6982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 216.229784][ T6982] [ 216.525135][ T6984] fuse: Unknown parameter 'dd<0000000000000000000000300000000000000000000003ÿÿÿÿÿÿÿÿ' [ 216.748053][ T6966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.789030][ T6966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.007682][ T5848] chicony 0003:04F2:1421.0002: unbalanced delimiter at end of report description [ 217.018340][ T5848] chicony 0003:04F2:1421.0002: Chicony hid parse failed: -22 [ 217.025853][ T5848] chicony 0003:04F2:1421.0002: probe with driver chicony failed with error -22 [ 217.065250][ T5846] Bluetooth: hci3: command 0x0406 tx timeout [ 217.065295][ T5849] Bluetooth: hci2: command 0x0406 tx timeout [ 217.074062][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 217.084975][ T5847] Bluetooth: hci4: command 0x0406 tx timeout [ 217.255195][ T5892] usb 7-1: USB disconnect, device number 9 [ 217.447074][ T5848] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 218.017043][ T5848] usb 4-1: config 0 has no interfaces? [ 218.059537][ T5848] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 218.068779][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.096918][ T5848] usb 4-1: Product: syz [ 218.101155][ T5848] usb 4-1: Manufacturer: syz [ 218.105790][ T5848] usb 4-1: SerialNumber: syz [ 218.126645][ T5848] usb 4-1: config 0 descriptor?? [ 218.408366][ T6996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.419592][ T6996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.426983][ T5896] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 219.632855][ T7009] pim6reg: entered allmulticast mode [ 219.712732][ T5896] usb 7-1: Using ep0 maxpacket: 32 [ 219.736602][ T5896] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.752436][ T5896] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.783443][ T7011] pim6reg: left allmulticast mode [ 219.813057][ T5896] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 219.928548][ T5896] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.959238][ T5896] usb 7-1: config 0 descriptor?? [ 220.166873][ T5848] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 220.390518][ T5848] usb 3-1: Using ep0 maxpacket: 16 [ 220.448408][ T7005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.730270][ T7008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.780587][ T5893] usb 4-1: USB disconnect, device number 22 [ 220.883949][ T5848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.950489][ T5848] usb 3-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 221.000775][ T5848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.096029][ T5848] usb 3-1: config 0 descriptor?? [ 221.794948][ T5848] usbhid 3-1:0.0: can't add hid device: -71 [ 221.836937][ T5848] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 221.967239][ T5848] usb 3-1: USB disconnect, device number 21 [ 222.337077][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 222.413827][ T5896] usbhid 7-1:0.0: can't add hid device: -71 [ 222.422612][ T5896] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 222.477154][ T5896] usb 7-1: USB disconnect, device number 10 [ 222.526925][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 222.552341][ T9] usb 6-1: config 5 has an invalid interface number: 117 but max is 0 [ 222.566195][ T9] usb 6-1: config 5 has no interface number 0 [ 222.587255][ T9] usb 6-1: config 5 interface 117 has no altsetting 0 [ 222.639467][ T9] usb 6-1: New USB device found, idVendor=1b3d, idProduct=01ec, bcdDevice=f0.f0 [ 222.654074][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.718740][ T9] usb 6-1: Product: syz [ 222.722989][ T9] usb 6-1: Manufacturer: â°‰ [ 222.756806][ T9] usb 6-1: SerialNumber: syz [ 222.937339][ T7029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.061985][ T7023] ptm ptm3: ldisc open failed (-12), clearing slot 3 [ 223.230006][ T9] ftdi_sio 6-1:5.117: FTDI USB Serial Device converter detected [ 223.276283][ T9] ftdi_sio ttyUSB0: unknown device type: 0xf0f0 [ 223.346352][ T9] usb 6-1: USB disconnect, device number 13 [ 223.381878][ T9] ftdi_sio 6-1:5.117: device disconnected [ 223.454233][ T7038] netlink: 56 bytes leftover after parsing attributes in process `syz.5.306'. [ 223.624820][ T7026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.494785][ T7056] FAULT_INJECTION: forcing a failure. [ 224.494785][ T7056] name failslab, interval 1, probability 0, space 0, times 0 [ 224.582282][ T7056] CPU: 1 UID: 0 PID: 7056 Comm: syz.7.312 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 224.582313][ T7056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 224.582327][ T7056] Call Trace: [ 224.582336][ T7056] [ 224.582345][ T7056] dump_stack_lvl+0x241/0x360 [ 224.582384][ T7056] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.582415][ T7056] ? __pfx__printk+0x10/0x10 [ 224.582448][ T7056] ? __pfx___might_resched+0x10/0x10 [ 224.582479][ T7056] should_fail_ex+0x424/0x570 [ 224.582507][ T7056] should_failslab+0xac/0x100 [ 224.582540][ T7056] __kmalloc_noprof+0xdf/0x4d0 [ 224.582567][ T7056] ? tomoyo_realpath_from_path+0xc2/0x5e0 [ 224.582599][ T7056] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 224.582638][ T7056] tomoyo_realpath_from_path+0xcf/0x5e0 [ 224.582685][ T7056] tomoyo_path_number_perm+0x245/0x790 [ 224.582717][ T7056] ? tomoyo_path_number_perm+0x215/0x790 [ 224.582744][ T7056] ? fuse_change_entry_timeout+0x329/0x490 [ 224.582770][ T7056] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 224.582798][ T7056] ? __pfx_fuse_change_entry_timeout+0x10/0x10 [ 224.582872][ T7056] ? __pfx_current_check_access_path+0x10/0x10 [ 224.582901][ T7056] ? lookup_one_qstr_excl+0x1de/0x3a0 [ 224.582927][ T7056] tomoyo_path_mknod+0x178/0x1c0 [ 224.582954][ T7056] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 224.582976][ T7056] ? __pfx_filename_create+0x10/0x10 [ 224.583009][ T7056] security_path_mknod+0x181/0x3a0 [ 224.583034][ T7056] do_mknodat+0x2b9/0x600 [ 224.583062][ T7056] ? __pfx_do_mknodat+0x10/0x10 [ 224.583085][ T7056] ? getname_flags+0x1e2/0x530 [ 224.583121][ T7056] __ia32_sys_mknod+0x8c/0xa0 [ 224.583155][ T7056] __do_fast_syscall_32+0xb4/0x110 [ 224.583181][ T7056] ? exc_page_fault+0x5f8/0x920 [ 224.583211][ T7056] do_fast_syscall_32+0x34/0x80 [ 224.583237][ T7056] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 224.583262][ T7056] RIP: 0023:0xf746d579 [ 224.583281][ T7056] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 224.583298][ T7056] RSP: 002b:00000000f50f655c EFLAGS: 00000206 ORIG_RAX: 000000000000000e [ 224.583321][ T7056] RAX: ffffffffffffffda RBX: 00000000800005c0 RCX: 0000000000000808 [ 224.583335][ T7056] RDX: 000000000000070e RSI: 0000000000000000 RDI: 0000000000000000 [ 224.583348][ T7056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 224.583360][ T7056] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 224.583372][ T7056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 224.583405][ T7056] [ 224.583415][ T7056] ERROR: Out of memory at tomoyo_realpath_from_path. [ 225.337321][ T7048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.844905][ T7068] pim6reg: entered allmulticast mode [ 225.872077][ T7068] pim6reg: left allmulticast mode [ 226.655831][ T10] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 226.846808][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 226.885513][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.950931][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.981953][ T10] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 227.001922][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.024774][ T10] usb 3-1: config 0 descriptor?? [ 227.192011][ T7075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.474932][ T7073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.829351][ T5893] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 227.990723][ T5893] usb 7-1: config 0 has no interfaces? [ 228.004624][ T5893] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 228.022216][ T5893] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.053934][ T5893] usb 7-1: Product: syz [ 228.591143][ T5893] usb 7-1: Manufacturer: syz [ 228.605455][ T5893] usb 7-1: SerialNumber: syz [ 228.621890][ T5893] usb 7-1: config 0 descriptor?? [ 228.968348][ T7090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.979600][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 228.993631][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 229.067217][ T10] usb 3-1: USB disconnect, device number 22 [ 229.321581][ T1539] usb 7-1: USB disconnect, device number 11 [ 230.205641][ T7116] netlink: 16 bytes leftover after parsing attributes in process `syz.6.333'. [ 230.221010][ T7116] netlink: 1 bytes leftover after parsing attributes in process `syz.6.333'. [ 230.430812][ T7119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.594708][ T7123] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 231.140226][ T7130] pim6reg: entered allmulticast mode [ 231.327432][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 231.447073][ T5848] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 231.563913][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 231.571935][ T9] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 231.600536][ T9] usb 4-1: config 0 has no interface number 0 [ 231.637007][ T9] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 231.640389][ T5848] usb 3-1: unable to get BOS descriptor or descriptor too short [ 231.714888][ T5848] usb 3-1: config 6 has an invalid interface number: 223 but max is 1 [ 231.719175][ T9] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 231.771358][ T5848] usb 3-1: config 6 has an invalid interface number: 88 but max is 1 [ 231.772421][ T9] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 231.789062][ T6128] syz.1.57: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 231.843134][ T5848] usb 3-1: config 6 has no interface number 0 [ 231.854208][ T9] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 231.880069][ T5848] usb 3-1: config 6 has no interface number 1 [ 231.892620][ T5848] usb 3-1: config 6 interface 223 altsetting 4 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 231.893536][ T9] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 231.919080][ T6128] CPU: 1 UID: 0 PID: 6128 Comm: syz.1.57 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 231.919112][ T6128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 231.919127][ T6128] Call Trace: [ 231.919136][ T6128] [ 231.919145][ T6128] dump_stack_lvl+0x241/0x360 [ 231.919186][ T6128] ? __pfx_dump_stack_lvl+0x10/0x10 [ 231.919217][ T6128] ? __pfx__printk+0x10/0x10 [ 231.919248][ T6128] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 231.919282][ T6128] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 231.919313][ T6128] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 231.919348][ T6128] warn_alloc+0x27c/0x410 [ 231.919378][ T6128] ? __pfx_warn_alloc+0x10/0x10 [ 231.919408][ T6128] ? relay_open_buf+0x231/0xd30 [ 231.919438][ T6128] ? __get_vm_area_node+0x1c8/0x2d0 [ 231.919470][ T6128] ? __get_vm_area_node+0x25c/0x2d0 [ 231.919508][ T6128] __vmalloc_node_range_noprof+0x634/0x1390 [ 231.919582][ T6128] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 231.919619][ T6128] ? __kasan_kmalloc_large+0x1a/0xa0 [ 231.919654][ T6128] ? relay_open_buf+0x231/0xd30 [ 231.919686][ T6128] __kvmalloc_node_noprof+0x3b2/0x5a0 [ 231.919720][ T6128] ? relay_open_buf+0x231/0xd30 [ 231.919748][ T6128] ? trace_kmalloc+0x1f/0xd0 [ 231.919776][ T6128] ? relay_open_buf+0x231/0xd30 [ 231.919804][ T6128] ? relay_open_buf+0x18c/0xd30 [ 231.919841][ T6128] relay_open_buf+0x231/0xd30 [ 231.919887][ T6128] relay_open+0x44b/0x960 [ 231.919926][ T6128] do_blk_trace_setup+0x57b/0x9c0 [ 231.919962][ T6128] blk_trace_ioctl+0x4fc/0x830 [ 231.919986][ T6128] ? tomoyo_path_number_perm+0x215/0x790 [ 231.920020][ T6128] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 231.920079][ T6128] ? file_to_blk_mode+0xcb/0x140 [ 231.920117][ T6128] compat_blkdev_ioctl+0x4a3/0x7e0 [ 231.920145][ T6128] ? __fget_files+0x2a/0x420 [ 231.920171][ T6128] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 231.920195][ T6128] ? __fget_files+0x2a/0x420 [ 231.920226][ T6128] __se_compat_sys_ioctl+0x50e/0xc30 [ 231.920257][ T6128] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 231.920314][ T6128] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 231.920342][ T6128] ? lockdep_hardirqs_on+0x9d/0x150 [ 231.920372][ T6128] __do_fast_syscall_32+0xb4/0x110 [ 231.920400][ T6128] ? ret_from_fork_asm+0x1a/0x30 [ 231.920420][ T6128] ? lockdep_hardirqs_on+0x9d/0x150 [ 231.920452][ T6128] do_fast_syscall_32+0x34/0x80 [ 231.920480][ T6128] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 231.920508][ T6128] RIP: 0023:0xf743d579 [ 231.920535][ T6128] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 231.920554][ T6128] RSP: 002b:00000000f50c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 231.920578][ T6128] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0401273 [ 231.920592][ T6128] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 231.920606][ T6128] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 231.920619][ T6128] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 231.920631][ T6128] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 231.920660][ T6128] [ 231.920669][ T6128] Mem-Info: [ 232.011286][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.013196][ T5848] usb 3-1: config 6 interface 223 has no altsetting 0 [ 232.049512][ T9] usb 4-1: config 0 descriptor?? [ 232.220596][ T5848] usb 3-1: config 6 interface 88 has no altsetting 0 [ 232.225892][ T6128] active_anon:1891 inactive_anon:1 isolated_anon:0 [ 232.225892][ T6128] active_file:10392 inactive_file:216 isolated_file:0 [ 232.225892][ T6128] unevictable:768 dirty:157 writeback:0 [ 232.225892][ T6128] slab_reclaimable:5828 slab_unreclaimable:109472 [ 232.225892][ T6128] mapped:44840 shmem:808 pagetables:991 [ 232.225892][ T6128] sec_pagetables:0 bounce:0 [ 232.225892][ T6128] kernel_misc_reclaimable:0 [ 232.225892][ T6128] free:144596 free_pcp:912 free_cma:0 [ 232.298888][ T7136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.317116][ T6128] Node 0 active_anon:60kB inactive_anon:0kB active_file:4kB inactive_file:36kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119348kB dirty:24kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10836kB pagetables:2840kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB [ 232.354544][ T6128] Node 1 active_anon:7704kB inactive_anon:4kB active_file:41564kB inactive_file:828kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:60012kB dirty:604kB writeback:0kB shmem:1696kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:972kB pagetables:1024kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 232.393832][ T5848] usb 3-1: string descriptor 0 read error: -22 [ 232.401516][ T5848] usb 3-1: New USB device found, idVendor=1554, idProduct=5010, bcdDevice=35.4b [ 232.418214][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.446220][ T6128] Node 0 DMA free:10200kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:132kB local_pcp:12kB free_cma:0kB [ 232.491602][ T6128] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 232.500585][ T6128] Node 0 DMA32 free:45568kB boost:2048kB min:36200kB low:44736kB high:53272kB reserved_highatomic:8192KB active_anon:60kB inactive_anon:0kB active_file:4kB inactive_file:36kB unevictable:1536kB writepending:24kB present:3129332kB managed:2547244kB mlocked:0kB bounce:0kB free_pcp:2776kB local_pcp:360kB free_cma:0kB [ 232.533264][ T6128] lowmem_reserve[]: 0 0 0 0 0 [ 232.538547][ T6128] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 232.567663][ T6128] lowmem_reserve[]: 0 0 0 0 0 [ 232.575198][ T6128] Node 1 Normal free:523384kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:7804kB inactive_anon:4kB active_file:41564kB inactive_file:828kB unevictable:1536kB writepending:604kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:1352kB local_pcp:468kB free_cma:0kB [ 232.607579][ T9] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 232.625768][ T6128] lowmem_reserve[]: 0 0 0 0 0 [ 232.631304][ T6128] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 2*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10200kB [ 232.653248][ T6128] Node 0 DMA32: 42*4kB (UMEH) 149*8kB (UMEH) 253*16kB (UMEH) 229*32kB (UMEH) 129*64kB (UMEH) 54*128kB (UME) 29*256kB (UME) 14*512kB (UM) 3*1024kB (UM) 0*2048kB 0*4096kB = 45568kB [ 232.675067][ T6128] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 232.708299][ T6128] Node 1 Normal: 2*4kB (UM) 4*8kB (UME) 47*16kB (UME) 56*32kB (UME) 105*64kB (UME) 33*128kB (UME) 7*256kB (UME) 6*512kB (UM) 8*1024kB (UME) 3*2048kB (UM) 120*4096kB (M) = 524248kB [ 232.732823][ T6128] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 232.743283][ T6128] Node 0 hugepages_total=6 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 232.756787][ T6128] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 232.772023][ T6128] Node 1 hugepages_total=4294967294 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 232.795774][ T6128] 12337 total pagecache pages [ 232.801384][ T6128] 921 pages in swap cache [ 232.805989][ T6128] Free swap = 105504kB [ 232.811203][ T6128] Total swap = 124996kB [ 232.815427][ T6128] 2097051 pages RAM [ 232.820115][ T6128] 0 pages HighMem/MovableOnly [ 232.825019][ T6128] 428582 pages reserved [ 232.829900][ T1539] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 232.839167][ T6128] 0 pages cma reserved [ 232.909039][ T5848] dvb-usb: found a 'Prolink Pixelview SBTVD' in cold state, will try to load a firmware [ 232.946844][ T5892] usb 4-1: USB disconnect, device number 23 [ 232.970645][ T5892] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 232.984299][ T5848] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 233.010325][ T1539] usb 6-1: config 0 has no interfaces? [ 233.017508][ T5848] dib0700: firmware download failed at 7 with -22 [ 233.025216][ T1539] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 233.037679][ T1539] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.063194][ T1539] usb 6-1: Product: syz [ 233.077171][ T5848] dvb-usb: found a 'Prolink Pixelview SBTVD' in cold state, will try to load a firmware [ 233.089532][ T1539] usb 6-1: Manufacturer: syz [ 233.094160][ T1539] usb 6-1: SerialNumber: syz [ 233.103838][ T5848] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 233.119995][ T1539] usb 6-1: config 0 descriptor?? [ 233.127100][ T5848] dib0700: firmware download failed at 7 with -22 [ 233.180367][ T5848] usb 3-1: USB disconnect, device number 23 [ 233.350152][ T5892] usb 6-1: USB disconnect, device number 14 [ 234.077213][ T5892] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 234.241838][ T5892] usb 4-1: Using ep0 maxpacket: 16 [ 234.277024][ T7158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.286003][ T5892] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 234.381502][ T5892] usb 4-1: config 0 has no interface number 0 [ 234.409204][ T5892] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 234.474396][ T5892] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice=fd.f5 [ 234.525767][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 234.565868][ T5892] usb 4-1: Product: syz [ 234.690839][ T5892] usb 4-1: SerialNumber: syz [ 234.737951][ T5892] usb 4-1: config 0 descriptor?? [ 235.098723][ T7171] netlink: 4 bytes leftover after parsing attributes in process `syz.7.354'. [ 235.138170][ T7171] bridge_slave_1: left allmulticast mode [ 235.190798][ T7172] netlink: 28 bytes leftover after parsing attributes in process `syz.7.354'. [ 235.267031][ T7171] bridge_slave_1: left promiscuous mode [ 235.338681][ T7172] netlink: 'syz.7.354': attribute type 7 has an invalid length. [ 235.346426][ T7172] netlink: 'syz.7.354': attribute type 8 has an invalid length. [ 235.360274][ T7171] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.528539][ T7174] netlink: 132 bytes leftover after parsing attributes in process `syz.6.355'. [ 235.545894][ T7171] bridge_slave_0: left allmulticast mode [ 235.556918][ T7172] netlink: 4 bytes leftover after parsing attributes in process `syz.7.354'. [ 235.624557][ T7171] bridge_slave_0: left promiscuous mode [ 235.656434][ T7171] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.872612][ T7172] erspan0: entered promiscuous mode [ 235.937782][ T7172] erspan0: left promiscuous mode [ 236.397595][ T7153] netlink: 36 bytes leftover after parsing attributes in process `syz.3.347'. [ 236.531035][ T5892] usbtouchscreen 4-1:0.214: Failed to read FW rev: -71 [ 236.560456][ T5892] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 236.609986][ T5892] usb 4-1: USB disconnect, device number 24 [ 236.718056][ T5848] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 236.901312][ T5848] usb 7-1: config 0 has no interfaces? [ 236.914096][ T5848] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 236.979122][ T7177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.009284][ T5848] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.025878][ T5848] usb 7-1: Product: syz [ 237.030429][ T5848] usb 7-1: Manufacturer: syz [ 237.035163][ T5848] usb 7-1: SerialNumber: syz [ 237.056205][ T5848] usb 7-1: config 0 descriptor?? [ 237.292448][ T5848] usb 7-1: USB disconnect, device number 12 [ 237.612984][ T7197] pim6reg: entered allmulticast mode [ 237.676451][ T7197] pim6reg: left allmulticast mode [ 238.296847][ T10] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 238.304607][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 238.478033][ T10] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 238.491605][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 238.510010][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.534104][ T10] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 238.544850][ T9] usb 4-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 238.554045][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.562760][ T10] usb 7-1: Product: syz [ 238.572854][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.586614][ T10] usb 7-1: Manufacturer: syz [ 238.599369][ T10] usb 7-1: SerialNumber: syz [ 238.608028][ T9] usb 4-1: config 0 descriptor?? [ 238.663745][ T7202] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 238.721761][ T7203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.847888][ T10] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 238.987122][ T10] usb 7-1: USB disconnect, device number 13 [ 239.030157][ T10] usblp0: removed [ 239.040033][ T7209] FAULT_INJECTION: forcing a failure. [ 239.040033][ T7209] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.063124][ T7209] CPU: 1 UID: 0 PID: 7209 Comm: syz.6.365 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 239.063156][ T7209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 239.063170][ T7209] Call Trace: [ 239.063179][ T7209] [ 239.063198][ T7209] dump_stack_lvl+0x241/0x360 [ 239.063237][ T7209] ? __pfx_dump_stack_lvl+0x10/0x10 [ 239.063268][ T7209] ? __pfx__printk+0x10/0x10 [ 239.063310][ T7209] should_fail_ex+0x424/0x570 [ 239.063339][ T7209] _copy_to_user+0x31/0xb0 [ 239.063373][ T7209] simple_read_from_buffer+0xc4/0x170 [ 239.063410][ T7209] proc_fail_nth_read+0x1ef/0x260 [ 239.063436][ T7209] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 239.063462][ T7209] ? rw_verify_area+0x246/0x630 [ 239.063486][ T7209] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 239.063510][ T7209] vfs_read+0x21f/0xb90 [ 239.063540][ T7209] ? __pfx___mutex_lock+0x10/0x10 [ 239.063582][ T7209] ? __pfx_vfs_read+0x10/0x10 [ 239.063609][ T7209] ? __fget_files+0x2a/0x420 [ 239.063632][ T7209] ? __fget_files+0x39d/0x420 [ 239.063649][ T7209] ? __fget_files+0x2a/0x420 [ 239.063679][ T7209] ksys_read+0x19d/0x2d0 [ 239.063705][ T7209] ? __pfx_ksys_read+0x10/0x10 [ 239.063732][ T7209] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 239.063758][ T7209] ? lockdep_hardirqs_on+0x9d/0x150 [ 239.063787][ T7209] __do_fast_syscall_32+0xb4/0x110 [ 239.063812][ T7209] ? exc_page_fault+0x5f8/0x920 [ 239.063848][ T7209] do_fast_syscall_32+0x34/0x80 [ 239.063875][ T7209] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 239.063901][ T7209] RIP: 0023:0xf742d579 [ 239.063920][ T7209] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 239.063939][ T7209] RSP: 002b:00000000f50b6590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 239.063962][ T7209] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f50b6620 [ 239.063977][ T7209] RDX: 000000000000000f RSI: 00000000f741cff4 RDI: 0000000000000000 [ 239.063990][ T7209] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 239.064003][ T7209] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 239.064017][ T7209] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 239.064075][ T7209] [ 240.046829][ T5893] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 240.251128][ T5893] usb 3-1: config 0 has no interfaces? [ 240.364080][ T1539] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 240.377977][ T5893] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 240.429209][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.470030][ T5893] usb 3-1: Product: syz [ 240.474482][ T5893] usb 3-1: Manufacturer: syz [ 240.626117][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 240.632980][ T5893] usb 3-1: SerialNumber: syz [ 240.720328][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 240.766546][ T5893] usb 3-1: config 0 descriptor?? [ 240.806876][ T1539] usb 7-1: Using ep0 maxpacket: 32 [ 240.846850][ T1539] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.953506][ T1539] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.037653][ T9] usb 4-1: USB disconnect, device number 25 [ 241.051116][ T1539] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 241.138299][ T1539] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.216374][ T1539] usb 7-1: config 0 descriptor?? [ 241.397834][ T5892] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 241.558298][ T5892] usb 6-1: Using ep0 maxpacket: 16 [ 241.608930][ T5892] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 241.717227][ T5892] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 241.806802][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.914001][ T7221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.012628][ T5892] usb 6-1: config 0 descriptor?? [ 242.064151][ T5892] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input8 [ 242.321199][ T5892] bcm5974 6-1:0.0: could not read from device [ 242.417468][ T5199] bcm5974 6-1:0.0: could not read from device [ 242.535641][ T5892] input: failed to attach handler mousedev to device input8, error: -5 [ 242.703054][ T5199] bcm5974 6-1:0.0: could not read from device [ 242.726581][ T5892] usb 6-1: USB disconnect, device number 15 [ 242.763244][ T5199] bcm5974 6-1:0.0: could not read from device [ 242.880313][ T7234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.374425][ T5893] usb 3-1: USB disconnect, device number 24 [ 243.657247][ T7246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.135898][ T1539] usbhid 7-1:0.0: can't add hid device: -71 [ 244.213614][ T1539] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 244.309996][ T1539] usb 7-1: USB disconnect, device number 14 [ 244.329508][ T7252] pim6reg: entered allmulticast mode [ 244.422369][ T7252] pim6reg: left allmulticast mode [ 244.697200][ T5897] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 244.756977][ T5848] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 244.897798][ T5897] usb 3-1: Using ep0 maxpacket: 16 [ 244.914941][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.936836][ T5848] usb 6-1: Invalid ep0 maxpacket: 64 [ 244.974554][ T5897] usb 3-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 245.018315][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.069452][ T5897] usb 3-1: config 0 descriptor?? [ 245.107843][ T5848] usb 6-1: new low-speed USB device number 17 using dummy_hcd [ 245.307470][ T5848] usb 6-1: Invalid ep0 maxpacket: 64 [ 245.313882][ T7274] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 245.321624][ T7274] IPv6: NLM_F_CREATE should be set when creating new route [ 245.328966][ T7274] IPv6: NLM_F_CREATE should be set when creating new route [ 245.356378][ T5848] usb usb6-port1: attempt power cycle [ 245.709644][ T5848] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 245.768078][ T5897] usbhid 3-1:0.0: can't add hid device: -71 [ 245.775816][ T5897] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 245.819039][ T5848] usb 6-1: Invalid ep0 maxpacket: 64 [ 245.891676][ T5897] usb 3-1: USB disconnect, device number 25 [ 245.996837][ T5848] usb 6-1: new low-speed USB device number 19 using dummy_hcd [ 245.996837][ T10] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 246.057996][ T5848] usb 6-1: Invalid ep0 maxpacket: 64 [ 246.090644][ T5848] usb usb6-port1: unable to enumerate USB device [ 246.177813][ T10] usb 7-1: config 0 has no interfaces? [ 246.227853][ T10] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 246.257338][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.286071][ T10] usb 7-1: Product: syz [ 246.290900][ T10] usb 7-1: Manufacturer: syz [ 246.306513][ T10] usb 7-1: SerialNumber: syz [ 246.388201][ T10] usb 7-1: config 0 descriptor?? [ 246.497822][ T7284] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.702564][ T5897] usb 7-1: USB disconnect, device number 15 [ 247.656968][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 247.853484][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 247.928175][ T10] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 247.984267][ T7296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.023640][ T10] usb 4-1: config 0 has no interface number 0 [ 248.066840][ T10] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 248.118665][ T10] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 248.268156][ T10] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 248.486840][ T10] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 248.596059][ T10] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 248.849669][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.953463][ T10] usb 4-1: config 0 descriptor?? [ 249.107424][ T10] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 249.209098][ T10] usb 4-1: USB disconnect, device number 26 [ 249.235968][ T10] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 249.536327][ T7321] pim6reg: entered allmulticast mode [ 249.585215][ T7321] pim6reg: left allmulticast mode [ 249.911376][ T5848] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 250.127705][ T5848] usb 6-1: Using ep0 maxpacket: 16 [ 250.141131][ T5848] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.169177][ T5848] usb 6-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 250.231686][ T5848] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.278293][ T7333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.322231][ T5848] usb 6-1: config 0 descriptor?? [ 250.907004][ T10] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 251.063388][ T5848] usbhid 6-1:0.0: can't add hid device: -71 [ 251.102169][ T5848] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 251.104087][ T10] usb 4-1: config 0 has no interfaces? [ 251.160434][ T5848] usb 6-1: USB disconnect, device number 20 [ 251.224696][ T10] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 251.275882][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.295535][ T7351] netlink: 'syz.7.412': attribute type 2 has an invalid length. [ 251.321290][ T10] usb 4-1: Product: syz [ 251.340484][ T10] usb 4-1: Manufacturer: syz [ 251.357529][ T10] usb 4-1: SerialNumber: syz [ 251.414052][ T10] usb 4-1: config 0 descriptor?? [ 251.815643][ T10] usb 4-1: USB disconnect, device number 27 [ 252.926078][ T7357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.476882][ T1539] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 253.660811][ T1539] usb 6-1: config 0 has no interfaces? [ 253.672214][ T1539] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 253.681758][ T1539] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.705325][ T7354] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 253.753204][ T1539] usb 6-1: Product: syz [ 253.762413][ T1539] usb 6-1: Manufacturer: syz [ 253.781567][ T1539] usb 6-1: SerialNumber: syz [ 253.820899][ T1539] usb 6-1: config 0 descriptor?? [ 255.000169][ T7380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.145161][ T1539] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 255.377734][ T1539] usb 4-1: Using ep0 maxpacket: 8 [ 255.386142][ T1539] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 255.397077][ T1539] usb 4-1: config 0 has no interface number 0 [ 255.414730][ T1539] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 255.443242][ T1539] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 255.479102][ T1539] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 255.497021][ T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 255.551439][ T1539] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 255.613323][ T1539] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 255.660940][ T1539] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.716920][ T1539] usb 4-1: config 0 descriptor?? [ 255.741522][ T1539] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 255.775009][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 255.812192][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.903612][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.962499][ T7392] pim6reg: entered allmulticast mode [ 255.987266][ T1539] usb 4-1: USB disconnect, device number 28 [ 256.015588][ T10] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 256.035973][ T1539] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 256.097136][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.108293][ T7393] pim6reg: left allmulticast mode [ 256.190718][ T10] usb 3-1: config 0 descriptor?? [ 256.415083][ T5848] usb 6-1: USB disconnect, device number 21 [ 256.526916][ T1539] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 256.647916][ T7384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.706896][ T1539] usb 7-1: Using ep0 maxpacket: 16 [ 256.741697][ T1539] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.768442][ T1539] usb 7-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 256.813089][ T1539] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.938512][ T1539] usb 7-1: config 0 descriptor?? [ 257.507183][ T5895] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 257.717821][ T1539] usbhid 7-1:0.0: can't add hid device: -71 [ 257.726526][ T1539] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 257.795811][ T1539] usb 7-1: USB disconnect, device number 16 [ 257.996874][ T5895] usb 4-1: config 0 has no interfaces? [ 258.017111][ T5895] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 258.071077][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.221011][ T5895] usb 4-1: Product: syz [ 258.264281][ T5895] usb 4-1: Manufacturer: syz [ 258.289187][ T5895] usb 4-1: SerialNumber: syz [ 258.355807][ T5895] usb 4-1: config 0 descriptor?? [ 258.658911][ T9] usb 4-1: USB disconnect, device number 29 [ 259.149809][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 259.208005][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 259.292090][ T10] usb 3-1: USB disconnect, device number 26 [ 259.766924][ T7415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.823080][ T7419] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 260.217946][ T1539] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 260.296124][ T7425] input: syz0 as /devices/virtual/input/input9 [ 260.462206][ T1539] usb 3-1: config 0 has no interfaces? [ 260.527227][ T1539] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 260.543363][ T1539] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.579844][ T1539] usb 3-1: Product: syz [ 260.597159][ T5896] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 260.614753][ T1539] usb 3-1: Manufacturer: syz [ 260.631473][ T1539] usb 3-1: SerialNumber: syz [ 260.668092][ T1539] usb 3-1: config 0 descriptor?? [ 260.824994][ T5896] usb 7-1: Using ep0 maxpacket: 32 [ 260.872424][ T5896] usb 7-1: config 8 has an invalid interface number: 72 but max is 0 [ 260.982131][ T5896] usb 7-1: config 8 has no interface number 0 [ 260.999452][ T7437] pim6reg: entered allmulticast mode [ 261.017393][ T7437] pim6reg: left allmulticast mode [ 261.027377][ T5896] usb 7-1: config 8 interface 72 altsetting 1 has an endpoint descriptor with address 0x93, changing to 0x83 [ 261.087648][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.094129][ T5896] usb 7-1: config 8 interface 72 altsetting 1 bulk endpoint 0x83 has invalid maxpacket 1024 [ 261.104825][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.125862][ T5896] usb 7-1: config 8 interface 72 altsetting 1 bulk endpoint 0xB has invalid maxpacket 1023 [ 261.139721][ T5896] usb 7-1: config 8 interface 72 altsetting 1 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 261.151452][ T5896] usb 7-1: config 8 interface 72 has no altsetting 0 [ 261.161272][ T5896] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=b7.98 [ 261.170757][ T5896] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.181454][ T5896] usb 7-1: Product: syz [ 261.185678][ T5896] usb 7-1: Manufacturer: syz [ 261.191543][ T5896] usb 7-1: SerialNumber: syz [ 261.204938][ T7427] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 261.212880][ T7427] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 261.226889][ T5892] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 261.396994][ T5892] usb 6-1: Using ep0 maxpacket: 16 [ 261.439078][ T5892] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.547013][ T5892] usb 6-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 261.588180][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.668638][ T5892] usb 6-1: config 0 descriptor?? [ 261.866983][ T10] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 262.183668][ T10] usb 4-1: config 0 has no interfaces? [ 262.223619][ T10] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 262.236846][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.255691][ T10] usb 4-1: Product: syz [ 262.269604][ T10] usb 4-1: Manufacturer: syz [ 262.274375][ T10] usb 4-1: SerialNumber: syz [ 262.297810][ T10] usb 4-1: config 0 descriptor?? [ 262.321529][ T5892] usbhid 6-1:0.0: can't add hid device: -71 [ 262.345455][ T5892] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 262.505074][ T5892] usb 6-1: USB disconnect, device number 22 [ 262.878656][ T5895] usb 4-1: USB disconnect, device number 30 [ 263.150628][ T55] Bluetooth: hci5: command 0x0406 tx timeout [ 263.453811][ T5895] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 263.692504][ T1539] usb 3-1: USB disconnect, device number 27 [ 263.799249][ T5895] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.849169][ T5895] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 263.942488][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.014188][ T5895] usb 6-1: config 0 descriptor?? [ 264.515001][ T5896] smsc75xx v1.0.0 [ 264.537903][ T5896] smsc75xx 7-1:8.72 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 264.587530][ T1539] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 264.616097][ T5896] smsc75xx 7-1:8.72: probe with driver smsc75xx failed with error -71 [ 264.673102][ T7460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.697780][ T5896] usb 7-1: USB disconnect, device number 17 [ 264.767477][ T1539] usb 3-1: device descriptor read/64, error -71 [ 264.856926][ T5895] usbhid 6-1:0.0: can't add hid device: -71 [ 264.880886][ T5895] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 265.077907][ T5895] usb 6-1: USB disconnect, device number 23 [ 265.127404][ T1539] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 265.347399][ T1539] usb 3-1: device descriptor read/64, error -71 [ 265.457794][ T1539] usb usb3-port1: attempt power cycle [ 265.877514][ T1539] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 265.888932][ T7475] pim6reg: entered allmulticast mode [ 265.901505][ T7475] pim6reg: left allmulticast mode [ 266.013193][ T1539] usb 3-1: device descriptor read/8, error -71 [ 266.277543][ T1539] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 266.297358][ T5892] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 266.308927][ T1539] usb 3-1: device descriptor read/8, error -71 [ 266.423956][ T1539] usb usb3-port1: unable to enumerate USB device [ 266.477357][ T5892] usb 4-1: Using ep0 maxpacket: 16 [ 266.492141][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.537527][ T5892] usb 4-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 266.610285][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.672321][ T5892] usb 4-1: config 0 descriptor?? [ 267.391165][ T5896] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 267.690262][ T5896] usb 7-1: config 0 has no interfaces? [ 267.700995][ T5896] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 267.729126][ T5896] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.755941][ T5896] usb 7-1: Product: syz [ 267.766109][ T5896] usb 7-1: Manufacturer: syz [ 267.777539][ T5896] usb 7-1: SerialNumber: syz [ 267.804331][ T5896] usb 7-1: config 0 descriptor?? [ 268.092746][ T5897] usb 7-1: USB disconnect, device number 18 [ 268.097176][ T31] INFO: task syz.0.63:6155 blocked for more than 143 seconds. [ 268.132216][ T31] Not tainted 6.15.0-rc1-syzkaller #0 [ 268.143758][ T7486] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 268.167432][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 268.208147][ T31] task:syz.0.63 state:D stack:25928 pid:6155 tgid:6154 ppid:5856 task_flags:0x400140 flags:0x20000004 [ 268.257580][ T5154] Bluetooth: hci6: command 0x0406 tx timeout [ 268.268246][ T31] Call Trace: [ 268.271731][ T31] [ 268.274832][ T31] __schedule+0x1b88/0x5240 [ 268.321078][ T31] ? schedule+0x163/0x360 [ 268.377602][ T31] ? __pfx___schedule+0x10/0x10 [ 268.400418][ T31] ? schedule+0x90/0x360 [ 268.410501][ T31] ? schedule+0x90/0x360 [ 268.420517][ T31] schedule+0x163/0x360 [ 268.432759][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 268.449024][ T31] schedule_preempt_disabled+0x13/0x30 [ 268.462723][ T31] __mutex_lock+0x805/0x10c0 [ 268.474133][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 268.485643][ T31] ? blk_trace_ioctl+0x4da/0x830 [ 268.523310][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 268.554007][ T31] blk_trace_ioctl+0x4da/0x830 [ 268.573834][ T31] ? tomoyo_path_number_perm+0x215/0x790 [ 268.589397][ T31] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 268.605797][ T31] ? file_to_blk_mode+0xcb/0x140 [ 268.629105][ T31] compat_blkdev_ioctl+0x4a3/0x7e0 [ 268.650743][ T31] ? __fget_files+0x2a/0x420 [ 268.684322][ T31] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 268.729798][ T31] ? __fget_files+0x2a/0x420 [ 268.748624][ T31] __se_compat_sys_ioctl+0x50e/0xc30 [ 268.774443][ T31] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 268.798899][ T31] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 268.836476][ T5892] usbhid 4-1:0.0: can't add hid device: -71 [ 268.877529][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 268.893233][ T5892] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 268.911719][ T31] __do_fast_syscall_32+0xb4/0x110 [ 268.935959][ T31] ? exc_page_fault+0x5f8/0x920 [ 268.942060][ T5892] usb 4-1: USB disconnect, device number 31 [ 268.974678][ T31] do_fast_syscall_32+0x34/0x80 [ 268.996547][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 269.038931][ T31] RIP: 0023:0xf7fc1579 [ 269.046457][ T31] RSP: 002b:00000000f50e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 269.062948][ T31] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000c0401273 [ 269.075935][ T31] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 269.086404][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 269.100278][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 269.114841][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 269.126278][ T31] [ 269.142277][ T31] [ 269.142277][ T31] Showing all locks held in the system: [ 269.159851][ T31] 2 locks held by kworker/0:1/10: [ 269.207753][ T31] #0: ffff8880b8639b18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 269.216819][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 269.219296][ T31] #1: ffff8880b8623b08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x41f/0x7a0 [ 269.251879][ T31] 1 lock held by khungtaskd/31: [ 269.271262][ T31] #0: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x30/0x180 [ 269.289832][ T31] 4 locks held by kworker/u8:3/53: [ 269.295193][ T31] 2 locks held by getty/5593: [ 269.312921][ T31] #0: ffff8880313220a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 269.325080][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x5bb/0x1700 [ 269.342779][ T31] 2 locks held by syz-executor/5829: [ 269.349569][ T31] #0: ffff8880b8639b18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 269.380330][ T31] #1: ffff8880b8623b08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x389/0x7a0 [ 269.403077][ T31] 3 locks held by syz.1.57/6128: [ 269.410858][ T31] 1 lock held by syz.0.63/6155: [ 269.415933][ T31] #0: ffff888143fb4398 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0x4da/0x830 [ 269.437612][ T31] 1 lock held by syz.4.121/6380: [ 269.442709][ T31] #0: ffff888143fb4398 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_startstop+0xa7/0x790 [ 269.454209][ T31] 1 lock held by syz.7.453/7464: [ 269.466549][ T31] #0: ffffffff8ed434f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x454/0x830 [ 269.486088][ T31] 1 lock held by syz.2.459/7485: [ 269.506066][ T31] [ 269.510861][ T31] ============================================= [ 269.510861][ T31] [ 269.525472][ T31] NMI backtrace for cpu 1 [ 269.525498][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 269.525524][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 269.525537][ T31] Call Trace: [ 269.525545][ T31] [ 269.525554][ T31] dump_stack_lvl+0x241/0x360 [ 269.525594][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 269.525625][ T31] ? __pfx__printk+0x10/0x10 [ 269.525664][ T31] nmi_cpu_backtrace+0x4ab/0x4e0 [ 269.525702][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 269.525731][ T31] ? _printk+0xd5/0x120 [ 269.525758][ T31] ? __wake_up_klogd+0xcc/0x110 [ 269.525791][ T31] ? __pfx__printk+0x10/0x10 [ 269.525823][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 269.525846][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 269.525882][ T31] watchdog+0x1058/0x10a0 [ 269.525907][ T31] ? watchdog+0x1ea/0x10a0 [ 269.525933][ T31] ? __pfx_watchdog+0x10/0x10 [ 269.525953][ T31] kthread+0x7b7/0x940 [ 269.525984][ T31] ? __pfx_watchdog+0x10/0x10 [ 269.526007][ T31] ? __pfx_kthread+0x10/0x10 [ 269.526033][ T31] ? __pfx_kthread+0x10/0x10 [ 269.526061][ T31] ? __pfx_kthread+0x10/0x10 [ 269.526089][ T31] ? __pfx_kthread+0x10/0x10 [ 269.526118][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 269.526139][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 269.526162][ T31] ? __pfx_kthread+0x10/0x10 [ 269.526190][ T31] ret_from_fork+0x4b/0x80 [ 269.526212][ T31] ? __pfx_kthread+0x10/0x10 [ 269.526238][ T31] ret_from_fork_asm+0x1a/0x30 [ 269.526272][ T31] [ 269.526282][ T31] Sending NMI from CPU 1 to CPUs 0: [ 269.694511][ C0] NMI backtrace for cpu 0 [ 269.694530][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 269.694550][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 269.694562][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 269.694586][ C0] Code: cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 a1 17 00 f3 0f 1e fa fb f4 cc cc cc cc 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 [ 269.694602][ C0] RSP: 0018:ffffffff8ea07d60 EFLAGS: 000002c6 [ 269.694619][ C0] RAX: f4f677406bbcd400 RBX: ffffffff8197af7e RCX: ffffffff8c30995c [ 269.694632][ C0] RDX: 0000000000000001 RSI: ffffffff8e69c651 RDI: ffffffff8ca1b620 [ 269.694645][ C0] RBP: ffffffff8ea07eb8 R08: ffff8880b8632b5b R09: 1ffff110170c656b [ 269.694658][ C0] R10: dffffc0000000000 R11: ffffed10170c656c R12: 1ffffffff1d40fc6 [ 269.694671][ C0] R13: 1ffffffff1d52cb0 R14: 0000000000000000 R15: dffffc0000000000 [ 269.694684][ C0] FS: 0000000000000000(0000) GS:ffff888124f96000(0000) knlGS:0000000000000000 [ 269.694698][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 269.694710][ C0] CR2: 0000000056eb59bc CR3: 000000007ac98000 CR4: 00000000003526f0 [ 269.694726][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 269.694737][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 269.694748][ C0] Call Trace: [ 269.694756][ C0] [ 269.694762][ C0] default_idle+0x13/0x20 [ 269.694786][ C0] default_idle_call+0x74/0xb0 [ 269.694809][ C0] do_idle+0x22e/0x5d0 [ 269.694835][ C0] ? __pfx_do_idle+0x10/0x10 [ 269.694856][ C0] ? rest_init+0x31/0x300 [ 269.694889][ C0] ? rest_init+0x31/0x300 [ 269.694912][ C0] cpu_startup_entry+0x42/0x60 [ 269.694932][ C0] rest_init+0x2dc/0x300 [ 269.694955][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 269.694980][ C0] start_kernel+0x484/0x510 [ 269.695001][ C0] x86_64_start_reservations+0x2a/0x30 [ 269.695024][ C0] x86_64_start_kernel+0x66/0x70 [ 269.695045][ C0] common_startup_64+0x13e/0x147 [ 269.695077][ C0] [ 270.016905][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 270.023891][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 270.034000][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 270.044109][ T31] Call Trace: [ 270.047426][ T31] [ 270.050383][ T31] dump_stack_lvl+0x241/0x360 [ 270.055106][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 270.060343][ T31] ? __pfx__printk+0x10/0x10 [ 270.064953][ T31] ? vscnprintf+0x5d/0x90 [ 270.069300][ T31] panic+0x349/0x880 [ 270.073314][ T31] ? __pfx_preempt_schedule+0x10/0x10 [ 270.078831][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 270.085056][ T31] ? __pfx_panic+0x10/0x10 [ 270.089508][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 270.094894][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 270.101097][ T31] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 270.107321][ T31] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 270.113500][ T31] watchdog+0x1097/0x10a0 [ 270.117859][ T31] ? watchdog+0x1ea/0x10a0 [ 270.122326][ T31] ? __pfx_watchdog+0x10/0x10 [ 270.127038][ T31] kthread+0x7b7/0x940 [ 270.131163][ T31] ? __pfx_watchdog+0x10/0x10 [ 270.135883][ T31] ? __pfx_kthread+0x10/0x10 [ 270.140598][ T31] ? __pfx_kthread+0x10/0x10 [ 270.145228][ T31] ? __pfx_kthread+0x10/0x10 [ 270.149834][ T31] ? __pfx_kthread+0x10/0x10 [ 270.154440][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 270.159645][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 270.164851][ T31] ? __pfx_kthread+0x10/0x10 [ 270.169456][ T31] ret_from_fork+0x4b/0x80 [ 270.173904][ T31] ? __pfx_kthread+0x10/0x10 [ 270.178512][ T31] ret_from_fork_asm+0x1a/0x30 [ 270.183329][ T31] [ 270.186642][ T31] Kernel Offset: disabled [ 270.190974][ T31] Rebooting in 86400 seconds..