last executing test programs: 11.309654226s ago: executing program 4 (id=353): r0 = socket$nl_route(0x10, 0x3, 0x0) dup(r0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000002c0)={0xa, 0x4e20, 0x80000, @loopback, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@dstopts={{0x18, 0x29, 0x37, {0x3c}}}], 0x18}, 0xc044) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x404c840) sendto$packet(r0, &(0x7f0000000000)="28031e4000000000000000f588a8081266e9", 0xfffffffffffffd9e, 0x400c010, &(0x7f0000000080)={0x11, 0x3, 0x0, 0x1, 0xe9, 0x6, @random}, 0x14) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10.827677725s ago: executing program 4 (id=355): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000027c0)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000300)=[{&(0x7f0000000400)=""/185, 0xb9}, {&(0x7f0000001b80)=""/142, 0x8e}, {&(0x7f0000000580)=""/40, 0x28}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/194, 0xc2}, {&(0x7f00000016c0)=""/81, 0x51}, {&(0x7f0000001740)=""/80, 0x50}], 0x7, &(0x7f0000001800)=""/76, 0x4c}, 0x80}, {{&(0x7f0000001880)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000001900)=""/57, 0x39}, {&(0x7f0000001940)=""/139, 0x8b}, {&(0x7f0000001a00)=""/72, 0x48}], 0x3}, 0x8000}, {{&(0x7f0000001b00)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001c80), 0x0, &(0x7f0000001cc0)=""/182, 0xb6}, 0x1}, {{&(0x7f0000001d80)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000002040)=[{&(0x7f0000001e00)=""/220, 0xdc}, {&(0x7f0000001f00)=""/92, 0x5c}, {&(0x7f0000001f80)=""/18, 0x12}, {&(0x7f0000001fc0)=""/74, 0x4a}], 0x4, &(0x7f0000002080)=""/152, 0x98}, 0x2}, {{&(0x7f0000002140)=@sco={0x1f, @none}, 0x80, &(0x7f0000002280)=[{&(0x7f00000002c0)=""/25, 0x19}, {&(0x7f0000002200)}, {&(0x7f00000017c0)=""/2, 0x2}], 0x3}, 0xf7}, {{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f00000022c0)=""/236, 0xec}, {&(0x7f00000023c0)=""/246, 0xf6}, {&(0x7f00000024c0)=""/199, 0xc7}], 0x3, &(0x7f0000002600)=""/243, 0xf3}, 0x39f}], 0x6, 0x40000000, 0x0) r3 = syz_io_uring_setup(0x1088f, &(0x7f0000000140)={0x0, 0xaee2, 0x1, 0xffffffff, 0xbfdffffc}, 0x0, &(0x7f0000000280), &(0x7f0000000000)) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x300) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = fsopen(&(0x7f0000000340)='omfs\x00', 0x1) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r5, 0x3ba0, &(0x7f0000000380)={0x48, 0x16, 0x0, 0x0, 0xe160, 0x0, 0x0}) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048957}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r7, 0x0, 0x40000) close(0x3) r9 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r9, 0xc0045006, &(0x7f0000000180)=0x6f) r10 = dup2(r9, r9) ioctl$SNDCTL_DSP_SPEED(r10, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r10, &(0x7f00000063c0)={0x2020}, 0x2020) 8.843269562s ago: executing program 2 (id=363): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x374}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x8, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000, 0x0, {0x2}}) io_uring_enter(r1, 0x742f, 0x77ae, 0x1, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) unshare(0x400) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={r5}, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0500c694ae110000010000009000001b0000e40000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000140)={r6, 0x0, 0x0}, 0x10) sendmmsg$inet6(r0, &(0x7f0000000a00)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @rand_addr=' \x01\x00', 0x9}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000002100)={0xa, 0x4e22, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, 0x1c, &(0x7f0000002500)=[{&(0x7f0000002140)="cf", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x2, @private2, 0x9}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="b7a1", 0x2}], 0x1}}], 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) 8.5577656s ago: executing program 2 (id=364): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x54, 0x5, 0x8, 0x8001, 0x0, 0x5, 0x1, 0xfffffe0000000001, 0xfa11, 0x2}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000300)={@any, 0x2}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x94) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES8=r4], 0xc0}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) socket$nl_rdma(0x10, 0x3, 0x14) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) read$char_usb(r6, &(0x7f00000002c0)=""/151, 0x97) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r8, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNGETFILTER(r8, 0x801054db, &(0x7f00000006c0)=""/181) writev(r6, &(0x7f0000001880)=[{&(0x7f00000005c0)}, {&(0x7f0000000680)='T', 0x1}], 0x2) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 8.407455024s ago: executing program 3 (id=365): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, &(0x7f0000000940)}) r2 = epoll_create1(0x80000) syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r3 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000000200)={0x7, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7}) r4 = syz_open_dev$dvb_demux(0x0, 0x1, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000009a4ed6300080000025f1fe00000031322c9fe4641cd6366f362d9453962a09b22a5f27a57628168a4964f704b119b083c9d88da74c2cad7f3e040c89c4f9331f1094ae00f974b384420d999425401789f70da71bbcac50b39b34a936b4ca8ccdd50218844ab0687644c2face545ab1fe472afd70e94fe0f8e8e3b5c59b09bb0fb70282a80e10180d8e5c5eef715296ab830fcf842217a599abf16ab29d4a54e0845df53fee43db3c0879d72a11af8e80c19db01420f6f0a540a819865c0f929f1309bda5"], 0x14}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) lsm_get_self_attr(0x64, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f00000007c0), 0x2000000000000009}, 0x2}], 0x1, 0x40000000, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@random="1c549934872c", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x13}, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd}}}}}}, 0x0) 8.058249404s ago: executing program 1 (id=367): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000002c0)={0xa, 0x4e20, 0x80000, @loopback, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@dstopts={{0x18, 0x29, 0x37, {0x3c}}}], 0x18}, 0xc044) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x404c840) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000080)={'\x00', 0x7, 0x8001, 0x5, 0xe3, 0x4}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="28031e4000000000000000f588a8", 0xe, 0x400c010, &(0x7f0000000080)={0x11, 0x3, 0x0, 0x1, 0xe9, 0x6, @random}, 0x14) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.87023797s ago: executing program 0 (id=368): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc044) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x404c840) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000080)={'\x00', 0x7, 0x8001, 0x5, 0xe3, 0x4}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vlan1\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="28031e4000000000000000f588a8", 0xe, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r2, 0x1, 0xe9, 0x6, @random}, 0x14) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.515093566s ago: executing program 4 (id=369): r0 = socket$nl_route(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000002c0)={0xa, 0x4e20, 0x80000, @loopback, 0x7}, 0x1c, 0x0}, 0xc044) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000080)={'\x00', 0x7, 0x8001, 0x5, 0xe3, 0x4}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vlan1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="28031e4000000000000000f588a8", 0xe, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r3, 0x1, 0xe9, 0x6, @random}, 0x14) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 7.465901981s ago: executing program 1 (id=370): openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x120100, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x402c5342, &(0x7f00000000c0)) r1 = socket(0x1, 0x1, 0x0) r2 = io_uring_setup(0x16c8, &(0x7f0000000080)={0x0, 0xd621, 0x1001, 0x80000, 0x307}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000140)={@remote, @loopback, 0xe, 0x19}}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x24, &(0x7f0000001280)={0x1, 0x0, &(0x7f0000000200)}, 0x0) ioctl$sock_ifreq(r1, 0x8948, &(0x7f0000000040)={'bond0\x00', @ifru_names='veth0\x00'}) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write(r3, &(0x7f00000001c0)='\n6', 0x2) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r4, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002880)=""/60, 0x3c}, {0x0, 0x3c}], 0x2}, 0x2}], 0x1, 0x10000, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002ebd7000ffdbdf25450000000e0000000000000000050000000000000064657673696d30000069fd8e008350260c000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20048080) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000500)={0x30, r9, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}}, 0x4811) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x0, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000180)) syz_emit_ethernet(0x6a, &(0x7f0000001580)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb08004500005c0001000000119078000000000000000000004e2000489078030000000200000015f62cd7cb3fec80459b1bc8f67901253c48fd7927a627e7ad505f9ac99af88b3ffd69cbbf3162b2e4111a8a31cda377a503d20ccf673a16"], 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="88000000090601020000000000000000000000000900020073797a31000000000500010007000000600007800c00018008000140ffffffff1800028014000240000000000000000000000000000000000c001b4000000000000000060c001b4000000000000100011800028014000240fe8000000000000000000000000000bb06001d40000000009091be5b2a3bb6f66a395bed5a2a54ef4a04174ce110346546759f14e6d9b0a5546a6fa92760d0d5261755bca8cac8350abd809b8f6e0b3fcb264d51"], 0x88}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 7.406976732s ago: executing program 0 (id=371): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000002c0)={0xa, 0x4e20, 0x80000, @loopback, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@dstopts={{0x18, 0x29, 0x37, {0x3c}}}], 0x18}, 0xc044) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x404c840) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vlan1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="28031e4000000000000000f588a808", 0xf, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r3, 0x1, 0xe9, 0x6, @random}, 0x14) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 7.090760471s ago: executing program 0 (id=372): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000008982, 0x0) io_submit(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x19, 0x1, 0x0, r2, 0x0, 0x2000, 0x1000000, 0x0, 0x10}]) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='D'], 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x8004) syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[], 0x44}}, 0x28000) 6.86299674s ago: executing program 0 (id=373): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$TCSETS2(r2, 0x402c542b, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000007680)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}], 0x1, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}, {0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f00000008c0)="209dba0d9d1d55790a8e175d3d0f7aba285455569017336fbf34ec8e81b551d2f5c44481c676de17d2a619a60e66df7d25d69d4274ffde4a5f3678a1fbddb0234618071f9b4fa8ef9ccc4bacc0fa1dcc53ae234c2669f2186f48aff8d9fcd9baa8bc04d8ae2b38053e5660fde66ce8ed252bb43ca91341aa568fa615045145b6c7e1bf1668404cdb941cbb7d9a5efab114d8dffed3eb98af370a6745a8318000860de6305019e750067bf13cbd2196a1327435f08062390af962eed032d74294c58ce2a26b4e39ceba1d2681d6b0112ac39fd19464a24da6986188d6ba20ca101863734a93960a37f8b88137dd260a70d187c714e6294e3b8bba7800a6f1960cb4af2a378681ba389c77eca2301ca97feb8dbd830dc01e6e90b7474582bacd582f1c7ab7c58ff842442c71b4bed831ac952f264f36c45a7be81ef367e9ba38d7fa612d8b48e7a197b01167f3e340e957c49249b885c2f4d7fcb43fdc8a0d5f59d4d47c54c5bfe31bcb80a32f6c9b346f04fc10ee4418a17d139763c68167345374eab492777df9d6ae5cb713a10400a901fb0c49fe08cf1e36493929a00e1f6d56ea8da04e4708aed197dddc7c71b34a77bec23f3730ca439cbbcd76430e2d3703c550af3da57c8ca58b2d307af608a660df570156bef46c27792124a49363ff0ddec39ddf243b9a6d4389024abc960251e57753794de453bd726077429e2da66e51118d4d998856d1902978467150663ed9f65bf672f962b7d9ad5e957c6e387bac65cb0da4f9255010e0fce9cfc61b647712cf997063061c534c25dcbcb2616c77d54582ede22ee725b53f33a7e6a20a505c658c71fe2bb197deb502db780af57fa0e7d5da3cfe6613127cec04c788ae292b0c6cf92fa34fb80f25e4bd6e2933497dd764232f73232c3d722d61e55929122c289256c7590c26fdb3f0522746c2081aa898a7f76ceb81f6f923bdda721c7a36b30a405f78f7818fb7d8562b5b077b97706b6f360999fdb9b4e22cfb5262b802f9c37e50d31c4ca13281c0adcf8720f5c041a3998889e2f6bc829f4578d8ecdc968978d473a5d5883233cabd1d0f3715c76d619debceaeae1d99d93f601ba44192ef87a381b9bf605c50890516f2217b62a93040b37fde5b840ea7a632d84c41c96e5a4a9187d8e69a1db3e0df7ed8c1a665a3a85cbe9e8a294be62d84e8338bbb6fd0296de95f255b30c9b39a513588e2e747a99aa39e3a0ed1ab5a6398b202ada7f449ccb5ad599437ba5cf7a428e0f19c643b73cfc16ccdfe166903595a98b39cbf9f18921694262d6538dfbb579d751033ed776a741ae1f3daa9ecd90bc0a06a8c7ff4212b5e80078316af4798cefc73ee5b2bf89bb0fc530dc52f581869db890cec49a0fdc33a1c1780703d174a7976bc54fe2fd45f4236826aafca9469f4c911c2cfd2c20b96cba20c9b62658d2bde9126a50b83b105a3e71534dbd1774cf837a43aa79c25f22bc61143256b537e386c14490de7efdb52582f66f54a22d2219e9c672ca102ff1872a6b3109bea20eea9f5b8d410da3057b3b531c5f62c3bf44af765ce1e15cdc8798d9cd5fac0d955f727fafd13d76ccd8030f27348907f54e0a9617450fccf8a40e4d510fd7e0f51a11999dc95aa4264fdd5c16eb7f77961ff6a58c61ce74989b177d67b2e9f1aa17eee863d4755c7ce1308433017bd2ae60f5e9f0f482a1cbc6be49f6c79f2967ba78be50733a74b84cf0bc4d873a53bf5a391abe307c094bac137f978d5f0ceffb97f1076dd70f19c0171aa826a3fdcd03e1561252d874f955ec92cb7e53c029cc07dae51c8bc2f54a51428159919986b3e091d269b3b8a5bce421daf7242e2bc2e403e376051081f271973fb276517fc883f3195ae19719b0027b786eb0b6376ba27254a225e859f5dea7fa0ed327499c21d9a8d5d430efb14d1c569dabd999c9136c6147d3cafa707d9a840168db060f979e0b95e6f28f5d2962213efab3aaf9593293fcfd50b763172bc2251c7ed6a9c32a172c32fc7f544dd5499305d5d1d0a5b29f651463330b735600906ea0febcaecd7e663a3869181ae5978b8f9a4728fa9013d4957fcc817cf7d526e279a8bc473409360c8de05e1c6afedb964419f3117616c50d5bfaa24c5905310898c8e9ed111270a049e56d4e12c0120df5010beb67fd6400e7a293f4aa2387885a78f1bb59fd9b049c4b26b545cc1e4958d86c66902b8d7978e9721fe9b35194ecceea978e03cfb9b6d1f9f97578a46a1dbd451876e05f5f14ff306aff24cf0dfd474388af9e856b92927abf84de42e181006bf68281d3e62e6f51148ac96e127b6d141ccdd63396f6775b84afe149495c51c754286c7a939c28025398c6d35c1ccd84cfdc0cb42cfed7d1de483580d72b6975f5407b14df4877bab76a24ac56b52a8146f29480c1e0eacbd530a5bcadf400612c5eaebbecf7006c17322a208374e851bf11e523a18e23caceddf7ad07e783ba55e50d53ea32cdcdba23567e433c6410a8add7d53995f7022fa40bff32b2b0b7c250f597cd2d2b15e181144be4bc65f6f5dc5c8005dcbe60edeb61c2b0f004e1a00bcd281fbce93be302dcf66208b3018724c0a796c514fce1a777025e84d856ebaeebeadec386e90491ac1ca23711ae9b3ad9c8c4486aebc3367d788f27b95f2e7dbc2a4850ecf3cd40ee6fec6834e10dd8fc358c9beb5382ff81fd9c3e4e41180043eb4428e8f8f2c462579ab924d5ca6d834e11ad5c2a8ddbf7779993786ff7148e32ac76e4b689c85708b820b78b4f9e164f55bef9b4c70df7d085e08e4dedb84a684bbc61585669321e87b403980f37e495ae6c4439de486114d43e7e4194530ee28458f13af690f3042bee8146e46d01305059971ba2f3b65c54250d09c33802fc386c916a5830347a90216f6f8540b72fd03635360b890c93e63bd5609719b0e20fc25e2b68b302543c69bc5c25a941d9b6001af5a6e1de733a8bfbd4779de9ce0381775155f6e88fab276ec5780e1f9c34b430c4fbd4a3aa11b332fd06989edab076ec5f95f6bdf5d3082974a91c18c0c693879249896f37c8b4d4ab81296665be760e0b4d364116ea5b28d5cf2bd00da21612e26e6b68cc7547fe4d5cbabcd25310ddc719a29b0564d0e7011f95a9e9c54ef1a43b581b3899c88cae1dd1720c7db5001e4f907c1a4be2f4ab0bc3ebe16ec317e60847a27b6ad98b57b07bb27831c67ea7c2a51bcd3191b33e2d91173bd16c3adf832c21da2f855486975f81e088c8144e75c7a01d117ea6540c67b8c4ed2328769afdece26e90929bbe23fca416e0924c7825a99018de8d94727c3d5270238d2d0960601a4bc0140231330d2c0c83ddd528fd5021af9e9ca4725f732363fa8396f551e61b326bef31166da5ecc95fda22461010986687aa28d95328a4a76ee7da3af7c97ef5d7e9c9706644288dafcf6a95168fd1308bc66bc041d10d2ac362ffb2b448af9bb2b21474bb16aed1290f27740a881af386f699782673812acdfca0fd872b1a3d2e20157edbcff24aa232cef529c807a0deb98a870a070e986918930dc19e18489a241cab5fbf200a57bc0aaa6aaf3d349fbf45c543b9c4159df0fc73ca1ca560ba01ba52abc3b3b2c612c4a7ea34d9fad7009414ad9ed79f728ceb5c7da825fdafbc940c46d004814e7b8edfcd1c6496723891c392c9ab006b1a7094d94a8dce971011e7815ec1bb616e83ce0c748bf8cd17087f42735d75a39f70c8ef59a456aca86fec854bbb800554ebc739cc863ca1cb6481cd9d7612fe95d5bb52b3f6c43be841328a352867059a408d4d5c05d8a2241f62b24ffa2898a5664c7389ca5d3c603df9ba1fe48e9224c8f69b33f3d70a783a1294574b5301fe0afc27b499ce3683fd3216f12408071d82a7bb8cfe125692c921979c9685d2448c58546180cc757a3ab3ed7fc574a66455c95ee87873716ff3487b5d61462d3a1a661327148522dd0bf082161cd4f3550a9f0ecf818647bb215ffc9598f2a47a5e1cc312ce9287852e6596ba0c9caf90cc8bd887f418f24ac857e8284ec7992473d67248873e21c9f90d761afb717f02ed15b0a68c2f81d54da30ebd303de640f1afefd694014d43ae57f122fc2599e2154878fc7b12fd00a4d7a54a38deb87befe9a42c3b26cf3d89987e71b456b54b0e0b54e2dcc541c05abd7feca55bf42293b0fd5797c5fcb465427fde5c8df66dde63aca53968f9d0d29d7cdd73df12392a1adca6765fb64b9e97c871109b3d34442b1cb01b11786f5d405abba892efd1588a612a82c60c10133f75b01a46454ce9a2d825921c82d14a8c94eaaa98e7a6170a01fe843b2585e4be5f2a2e8a5544ae24fe2e2a9b7bbc5522640330dac1a44291ba28fcafa65d39fd1ffee03b35636f87e4cab39d4c020c387ca55275a5329e9e19e0d08e4d1ee6181718329673a3dede75bf7d16ed679f3cc74a3089627b76b732660736314c27f976b27ff650aae8dbe4b9d17b11d1685bf6d8c26eb2754e92e0aefa1adf810cfbb7a9db775a474bbcf608c2ad5f61012c5219721f7125dfe745e2b163e553b7ec1c419816ba77e09025894064ecf533a7b5cd53f01d7736bdcd40fbe60169cd67e9286d79240df063e762d3182b1acd6c353e841f3102ef96df13845709b9a1e7858312ae2d306e95e666f334fa1b82d58f7fe8b2fbbb895d3c9282de7cc0db049c79794cbda09ca24df5d59eb35fa879159a8d30886040d5e987fc612f78ee6c23881b47f8544c0e1ea83b53427f8ed199b674b27fb1cbc3e97587391786b5f9a83229f8d9fb0bed86925451fe40576165785e5fc09e19e2058a44afe3e9581142e41f33de7d0a8576b3ec4ef1529c248f0fb51460bec7abeeb35c590030470f160365620f7f01272ad4b7ec6597e8f523f66164abce1dce057d46e477486e87374d8af1226e4b808dc20243392306c6a95c8f8e57bc27c076c98a8db88b5d34caa1f2fde232bfbfba4863f8e6b64162b211f725f513e7a4802289a255a4a33bdde995395a3f0e4489abd8c627647721c43adf16d0c0e16bed7e3cefe95f5df2b3dbfdef20ca2f360265fb8cbf5f5e47e210489b75d7cb7958b4558bda41f760fa3635ba74cc8b5d9604a974c08cc94917cc1afb1940dead28917e476355bf0481b3fcc9ff695493f98b821a0a62034ad452cb11aee0f50dec0acd89d7d30ea68b9402b3947ec308102025b06c391bcc2483cee0d8210ec4ae736392ac3b4fbc136f4aea87d036ac66a250a86b1c78c3a468790aa49e1d2b180b5304fb4ba0000d569cd5087aac837d8294344c168535c167c6fd6ca9158de684f8338f611c8d791952d03930881c8a5834ac6f20e7440d8d10a57330d5905ea4533389f3a1f90c8d89516d30d0ddbd42dfe90356c0f5554009166f3a1654274b1fce29df4083636c41999eb16106e52de319d52cf713c017cc1b566787ec770e4c0cf67cb737705f997c99764bb2dc3bdc709697ae2caf7e4566bd64635a611a5bb32e72644ecc3a6a483b87d6b5142bd67852e62b3e747a66e87588b681368c59fedae5769fb45d9f88c24b933303b19980e9705c144108d48b13d554ac901c9145295aa53f443fcbb745242f2d7cd9c6b6122b0cd9629821caac43941011fddb782f11061105de6142f5b08b93bd7c5d414552bd15786ba65d73126ca21db232782da427c819e09ba56a772e9c41d2d3f9862b85ab9d3e3dc38f00ec76cfe6b144ecb62ffd4762ff10247457f0651680b8cb72f8c5ff7df2351f8b0ee65b0", 0x1000}, {&(0x7f00000018c0)="171edf832e0412b74bacaa416399e48f13095e9efe2eaa945b681e7c07fbb9ba52251c1b5b305be5e06173224eaf732b347ef694977758e90711acbd565de321549d37c1644b7afa5cba8fd0649d0731795943889ab513", 0x57}, {&(0x7f0000001940)="915609db4ebf7593d73c2d0e1464a76b359579f32eaa1498151c1f293ccfb6f3ae4f823c157cefb213a0bc12f9e8d5f521123f0e78daba417e5da226bea73d0e00033fabe77ae8af6252443f938b98b1f3adc362a8cd233729eb139604c5bd8c173d6793bcd1fb5657024d5d7a91ad818b593c5ad5319108f1c515579d465c07da3be319f6ffbc81b8c047b73061c8c530aafcc1e8c68ef38736db6b7af6009edadd49a38b1291e6d1dba1dbe1ef332c323e9cdc31c30051c1abc8c765f4ed66878ef23a675d6881e71265530ebe", 0xce}], 0x3, &(0x7f0000001a80)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x20000000}, {0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="fd03816080a5258290794cb34effc7a23d8e2165ae0ecded4a8e6e68dbfff2a9135c7333f0f860560ada85979828bac408117c3c9d40b710d90c48fdd70bdbae9a3f4fcfcafc43631600765b7666cded8e57395638420370fa408f437d7a9ea822e0a05a2e2cb40c220380359a24bd72dc229380bdfa570683a418e06231020d2ba996388abf95668b47c179016980596b8a6e66b77ab21bf4a313ca2c50937e5cf50f488ae3d57767fa2c713635439c55cdc590960eeb180fb61b2e9c62d1c7e2", 0xc1}], 0x1, &(0x7f0000000400)=[@iv={0x88, 0x117, 0x2, 0x78, "58ed1800bbf4814f3268a83fd07f3393fb95b4d20f65224c64492f2e14a08c0dc89cdc24df68cfd37141b8c6740e9e42f1b3069d907e87dce47b9dc45fc706366de72190d4adfd1a4502609c66f093af84208fa8f747aa68e51f4489db1f0133e909a6bfc94dbc6165cb610be65e247656eaa152dd809f3a"}, @assoc={0x10, 0x117, 0x4, 0x1}], 0x98, 0x20040800}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000009800)=[@op={0x10}, @iv={0xe0, 0x117, 0x2, 0xcf, "968a2bfe4637c3ef35b86c23c01ddb7f788362a666a9855080b87a95b17f958af3a9e56d1489648dfd26e628618513bb7b8f5cbf28f7a6fd3592f1e32ff40bc3e8d0dd874f5cf7807b51709adb05fd99609d15469669233cd67e48120f29f5ab9347f2faeab5d76fb6227689d0c2d140cde80f5fe01c674abb1e0484b52a20c0f0fa58a60557a36fce810be163d3422682aad370307fe2a0596dfdb47fa4a2df041a047a329fd08712d627127de9b80bd5b37ee6b223e4131ca2a697752cc7c5e7f40d852d00a381c8ff948e4d039a"}, @op={0x10, 0x117, 0x3, 0x1}, @iv={0xd8, 0x117, 0x2, 0xc5, "7663221ce6f9cc996677af11c91714d945875de38b13887b5eaf1962b2b331cd06f6b0358dcc4b26fecc0029147a064ea6b79d6188b63d346b438e240ff7e1b66bac9cde37be9d90e7d7c12ae14364eba9a558107d070dc40de650f9ac35264be3deabe8e41545e493543efdd87727e3a5464d07b2bd2b96aab1e1930632807343bacec85edf4a2f97f4f35c8d8ed6df8838ef11f41068e9cef99a2cd668a1645bd070d4e51fba533871395450fb7f1be4e1413a73ef7d2d4caefb895e9960a267f892df83"}, @iv={0x1010, 0x117, 0x2, 0x1000, "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"}], 0x11e8, 0x4000805}, {0x0, 0x0, &(0x7f0000007500)=[{&(0x7f00000074c0)="fea75ac8", 0x4}], 0x1, &(0x7f0000007540)=[@iv={0xb4, 0x117, 0x2, 0xa2, "8f94e0e98630c64099650220e5c56bd7fffd6ec1ff36e836771091ecf496bfd43bbb74c9fcc31cee8848777e87767c7c23718005ad99205e88ddae7d6b6e379f6060424739943d54e8e442eabfba42ff57a12cc47d6a82525e527468d8218ab1b9862fbb851a415a4a6425fa2fdc7926f9dafa75f3cd8bdc470171e8fe65e30d6f51e7242d857875346e5854959937237115b6dfef9d7d3f5ce50255686c5f5fb7f7"}, @op={0x10}, @op={0x10, 0x117, 0x3, 0x1}, @iv={0x6c, 0x117, 0x2, 0x5c, "3a6fbe02c4a7541a1c6666220ea8930bbc668c285a9c2854207379f42906f176858c2aac006b6fffc9c01c610d675c6aeee8005262a75b4967e46c8a082253b6d4ed133ce4c63269e8021ca9c545b7944c01d0ec7cdfe333659b69aa"}], 0x140, 0x4000000}], 0x5, 0x40800) recvmsg(r5, 0x0, 0x0) read$FUSE(r3, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) r7 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r7, 0x0) ftruncate(r7, 0x51a9497) open_tree(r7, &(0x7f0000000340)='./file0\x00', 0x88101) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x200000000000000) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0xfe05a, 0x5000, 0x0, 0x0, 0xc}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 6.561561659s ago: executing program 2 (id=374): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000940)=@mangle={'mangle\x00', 0x64, 0x6, 0x51c, 0xa4, 0x38c, 0xc8, 0x27c, 0xc8, 0x454, 0x454, 0x454, 0x454, 0x454, 0x6, 0x0, {[{{@ipv6={@remote, @mcast2, [0xff], [0x0, 0xffffffff, 0x0, 0xffffff00], 'gre0\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x7}, 0x0, 0xa4, 0xc8}, @common=@unspec=@NFQUEUE1={0x24, 'NFQUEUE\x00', 0x1, {0x599c, 0x6}}}, {{@uncond, 0x0, 0xc8, 0xec, 0x0, {}, [@common=@inet=@socket1={{0x24}, 0x1}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0x27c}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0x38c}}, {{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x4}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@empty, 'lo\x00', {0xd}}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @HL={0x24, 'HL\x00', 0x0, {0x2, 0x8}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x578) syz_emit_ethernet(0x14e, &(0x7f0000000200)={@broadcast, @random="3481c669c6d4", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "440101", 0x118, 0x2c, 0x0, @remote, @loopback, {[@routing={0x2b, 0x0, 0x2, 0x6}, @srh={0x33, 0x4, 0x4, 0x2, 0xa, 0x70, 0x9, [@local, @remote]}, @routing={0x29, 0xe, 0x0, 0xec, 0x0, [@empty, @private0, @dev={0xfe, 0x80, '\x00', 0x34}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x2f}, @mcast1, @private0]}, @srh={0x87, 0xc, 0x4, 0x6, 0x2, 0x0, 0xd, [@mcast1, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x32}, @remote, @mcast2]}, @fragment={0x67, 0x0, 0x1, 0x0, 0x0, 0x5, 0x66}]}}}}}, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r3) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b62011"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, &(0x7f00000001c0)=""/238, 0xee) read$char_usb(r4, &(0x7f0000000100)=""/178, 0xb2) syz_usb_ep_write(r3, 0x81, 0x9, &(0x7f00000002c0)="28d36689fb2134111f") syz_usb_connect(0x5, 0x0, 0x0, 0x0) keyctl$read(0xb, r2, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000000340)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_gettime(0x0, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x7b9, &(0x7f0000000280)) syz_emit_ethernet(0x6d, &(0x7f0000000180)={@multicast, @multicast, @void, {@llc_tr={0x11, {@snap={0x0, 0xaa, "dd", "c3b3b4", 0xa01, "e76568d77b22898728fb69f1d355d63681439765be3c2b3659c944432326da08f68556c29c61957a37099a6dc3e609f13147bbb82c0b0a9e0fefec69db2c499a589467128f730fec6a6cf7172f71841ab0fc588fa0ee0b"}}}}}, 0x0) 6.450346007s ago: executing program 1 (id=375): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x54, 0x5, 0x8, 0x8001, 0x0, 0x5, 0x1, 0xfffffe0000000001, 0xfa11, 0x2}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000300)={@any, 0x2}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x94) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES8=r4], 0xc0}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) read$char_usb(r7, &(0x7f00000002c0)=""/151, 0x97) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TUNSETOFFLOAD(r9, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNGETFILTER(r9, 0x801054db, &(0x7f00000006c0)=""/181) writev(r7, &(0x7f0000001880)=[{&(0x7f00000005c0)}, {&(0x7f0000000680)='T', 0x1}], 0x2) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d00)={0x24, 0x1402, 0x1, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c880}, 0x8914) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x4080) 6.023602128s ago: executing program 4 (id=376): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="050300000000000000000700fd8d635c7078ae97cf1c290000"], 0x14}}, 0x20000000) socket(0x2, 0x2, 0x1) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000280)={0xa1, 0x5, 0x802, 0xfffe, 0x0, 0x4, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040844) connect$unix(r2, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r6, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)}}], 0x1, 0x2000c001) recvmsg(r6, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x5c}, 0x123) shutdown(r6, 0x1) getpgid(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0100001000130426bd700040000000ac1414bb0000000000663f24a21696b516530e05cd2013f51b00000000000000ac1e010100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141422000000000000000000000000000004d43200000000000000000000000000ffffe000000100080000000000007d0100000000000000000000000000000400000000004000ffffffffffffffff06000000000000007f0000000000000002000000000000000000000000000000fd2100000000000004000000000000000400000000000000f6004000040000000800000000000000ff340000020001be330000004c001200726663343330392863636d28"], 0x13c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000804) creat(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) 5.172943165s ago: executing program 3 (id=377): open(&(0x7f00000001c0)='./bus\x00', 0x143bc2, 0x1c0) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x40) syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200080000002, 0x7, 0x8, 0x3}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000c00)=@filter={'filter\x00', 0x42, 0x4, 0xb5c, 0xffffffff, 0x9e4, 0x9e4, 0xec, 0xffffffff, 0xffffffff, 0xac8, 0xac8, 0xac8, 0xffffffff, 0x5, 0x0, {[{{@ip={@empty, @dev, 0x0, 0x0, 'bridge_slave_1\x00', 'nr0\x00'}, 0x3127, 0xc8, 0xec, 0x1ba, {0x46010000}, [@common=@addrtype={{0x2c}}, @common=@addrtype={{0x2c}}]}, @REJECT={0x24}}, {{@uncond, 0x287, 0x898, 0x8f8, 0x0, {0x0, 0x4}, [@common=@unspec=@u32={{0x7e0}, {[{[{}, {0x1000000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}, {[{}, {}, {0x0, 0x2}], [{}, {0x0, 0x8}]}, {}, {}, {[{}, {}, {}, {}, {}, {0xfffffffe}], [{0x6}, {0x0, 0x3}], 0xfe}, {[{}, {}, {}, {}, {}, {}, {0x0, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {0x0, 0xfe40}]}, {[{0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}, {[{}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}, {}, {[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}, {[], [{}, {0x4}]}], 0x5}}, @common=@unspec=@ipvs={{0x48}, {@ipv4=@private=0xa010102, [0xff000000, 0xff, 0xff0000ff], 0x4e24, 0xc, 0x2, 0x4e24, 0x1, 0x8}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x1], 0x1, 0x1}, {0x0, [0x4, 0x0, 0x5, 0x1, 0x5, 0x4], 0x4, 0x3}}}}, {{@ip={@multicast1, @broadcast, 0x0, 0x0, 'lo\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xc0, 0xe4, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x1, 0x1, 0x1}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0xbb8) dup2(0xffffffffffffffff, r2) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000001c0)={0x6, 0x2fc, &(0x7f00000009c0)="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", &(0x7f0000000640), 0xc00}) r3 = add_key$keyring(0x0, &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000980)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r3}) r5 = add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, r3) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040), 0xc) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000440)) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r6, 0x4008af04, &(0x7f0000000040)) request_key(&(0x7f0000000280)='id_resolver\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000300)='/dev/kvm\x00', r5) 4.708202086s ago: executing program 1 (id=378): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100000000004043554d000000000000010902242801f20030000904f0ff040300060009058103"], 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540), 0x0, 0x0) r0 = socket(0x2, 0x3, 0xff) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'dvmrp1\x00', {0x2, 0x0, @dev}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x2d, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x14, 0x0, 0x301, 0x70bd28, 0x25dfdbfe, {0x1c}}, 0x14}, 0x1, 0xffff000000000000}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@fallback, 0xffffffffffffffff, 0x25, 0x6fa90b6f9f48949a}, 0x20) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000280)={0x20, 0x18, 0x28, "bcce2847ed49859f18aded9e9908d612e9fb24aca886f1b1e773f070ce471d938a98ac0ce9d9f9db"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) preadv2(r3, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x8) 4.290476211s ago: executing program 0 (id=379): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000027c0)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000300)=[{&(0x7f0000000400)=""/185, 0xb9}, {&(0x7f0000001b80)=""/142, 0x8e}, {&(0x7f0000000580)=""/40, 0x28}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/194, 0xc2}, {&(0x7f00000016c0)=""/81, 0x51}, {&(0x7f0000001740)=""/80, 0x50}], 0x7, &(0x7f0000001800)=""/76, 0x4c}, 0x80}, {{&(0x7f0000001880)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000001900)=""/57, 0x39}, {&(0x7f0000001940)=""/139, 0x8b}, {&(0x7f0000001a00)=""/72, 0x48}], 0x3}, 0x8000}, {{&(0x7f0000001b00)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001c80), 0x0, &(0x7f0000001cc0)=""/182, 0xb6}, 0x1}, {{&(0x7f0000001d80)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000002040)=[{&(0x7f0000001e00)=""/220, 0xdc}, {&(0x7f0000001f00)=""/92, 0x5c}, {&(0x7f0000001f80)=""/18, 0x12}, {&(0x7f0000001fc0)=""/74, 0x4a}], 0x4, &(0x7f0000002080)=""/152, 0x98}, 0x2}, {{&(0x7f0000002140)=@sco={0x1f, @none}, 0x80, &(0x7f0000002280)=[{&(0x7f00000002c0)=""/25, 0x19}, {&(0x7f0000002200)}, {&(0x7f00000017c0)=""/2, 0x2}], 0x3}, 0xf7}, {{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f00000022c0)=""/236, 0xec}, {&(0x7f00000023c0)=""/246, 0xf6}, {&(0x7f00000024c0)=""/199, 0xc7}], 0x3, &(0x7f0000002600)=""/243, 0xf3}, 0x39f}], 0x6, 0x40000000, 0x0) r3 = syz_io_uring_setup(0x1088f, &(0x7f0000000140)={0x0, 0xaee2, 0x1, 0xffffffff, 0xbfdffffc}, 0x0, &(0x7f0000000280), &(0x7f0000000000)) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x300) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = fsopen(&(0x7f0000000340)='omfs\x00', 0x1) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r5, 0x3ba0, &(0x7f0000000380)={0x48, 0x16, 0x0, 0x0, 0xe160, 0x0, 0x0}) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048957}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r7, 0x0, 0x40000) close(0x3) r9 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r9, 0xc0045006, &(0x7f0000000180)=0x6f) r10 = dup2(r9, r9) ioctl$SNDCTL_DSP_SPEED(r10, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r10, &(0x7f00000063c0)={0x2020}, 0x2020) 4.226239653s ago: executing program 4 (id=380): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000080), &(0x7f0000000100)={'U-', 0x100000000}, 0x16, 0x2) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0x3, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x2, 0x600002) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e) connect$pppoe(r4, &(0x7f00000001c0)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x2, @broadcast, 'sit0\x00'}}) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) timerfd_create(0x2, 0x80000) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x85, 0x0, &(0x7f00000000c0)) r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9f, 0x18, 0x76, 0x20, 0x17ef, 0x7203, 0x2e36, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10}}]}}, 0x0) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195}, 0x94) setitimer(0x2, 0x0, 0x0) 3.618087752s ago: executing program 3 (id=381): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000002c0)={0xa, 0x4e20, 0x80000, @loopback, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@dstopts={{0x18, 0x29, 0x37, {0x3c}}}], 0x18}, 0xc044) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x404c840) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000080)={'\x00', 0x7, 0x8001, 0x5, 0xe3, 0x4}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="28031e4000000000000000f588a8", 0xe, 0x400c010, &(0x7f0000000080)={0x11, 0x3, 0x0, 0x1, 0xe9, 0x6, @random}, 0x14) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.489875241s ago: executing program 2 (id=382): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000002c0)={0xa, 0x4e20, 0x80000, @loopback, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@dstopts={{0x18, 0x29, 0x37, {0x3c}}}], 0x18}, 0xc044) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x404c840) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vlan1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="28031e4000000000000000f588a808", 0xf, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r3, 0x1, 0xe9, 0x6, @random}, 0x14) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.246554871s ago: executing program 3 (id=383): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000008982, 0x0) io_submit(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x19, 0x1, 0x0, r2, 0x0, 0x2000, 0x1000000, 0x0, 0x10}]) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='D'], 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x8004) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32=r6], 0x44}}, 0x28000) 2.326819523s ago: executing program 3 (id=384): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x54, 0x5, 0x8, 0x8001, 0x0, 0x5, 0x1, 0xfffffe0000000001, 0xfa11, 0x2}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000300)={@any, 0x2}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x94) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES8=r4], 0xc0}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) socket$nl_rdma(0x10, 0x3, 0x14) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) read$char_usb(r6, &(0x7f00000002c0)=""/151, 0x97) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r8, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNGETFILTER(r8, 0x801054db, &(0x7f00000006c0)=""/181) writev(r6, &(0x7f0000001880)=[{&(0x7f00000005c0)}, {&(0x7f0000000680)='T', 0x1}], 0x2) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 2.265792149s ago: executing program 2 (id=385): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) 1.33751796s ago: executing program 1 (id=386): r0 = socket$nl_route(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000002c0)={0xa, 0x4e20, 0x80000, @loopback, 0x7}, 0x1c, 0x0}, 0xc044) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000080)={'\x00', 0x7, 0x8001, 0x5, 0xe3, 0x4}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vlan1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="28031e4000000000000000f588a8", 0xe, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r3, 0x1, 0xe9, 0x6, @random}, 0x14) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 851.113614ms ago: executing program 0 (id=387): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, &(0x7f0000000940)}) r2 = epoll_create1(0x80000) syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r3 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000000200)={0x7, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7}) r4 = syz_open_dev$dvb_demux(0x0, 0x1, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000009a4ed6300080000025f1fe00000031322c9fe4641cd6366f362d9453962a09b22a5f27a57628168a4964f704b119b083c9d88da74c2cad7f3e040c89c4f9331f1094ae00f974b384420d999425401789f70da71bbcac50b39b34a936b4ca8ccdd50218844ab0687644c2face545ab1fe472afd70e94fe0f8e8e3b5c59b09bb0fb70282a80e10180d8e5c5eef715296ab830fcf842217a599abf16ab29d4a54e0845df53fee43db3c0879d72a11af8e80c19db01420f6f0a540a819865c0f929f1309bda5"], 0x14}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) lsm_get_self_attr(0x64, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, 0x0) bind$inet(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f00000007c0), 0x2000000000000009}, 0x2}], 0x1, 0x40000000, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@random="1c549934872c", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x13}, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd}}}}}}, 0x0) 631.779781ms ago: executing program 2 (id=388): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x54, 0x5, 0x8, 0x8001, 0x0, 0x5, 0x1, 0xfffffe0000000001, 0xfa11, 0x2}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000300)={@any, 0x2}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000003e040000000000003f000000000000005504000001ed0a002500000017ffffff46040000000000007b0a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9e104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f1300010000949b3aab06b1e042ff2164d80c8ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1e0600bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee6330000000000000000000000000000000000004000000000000000038600008fb854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8265e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e6"], &(0x7f00000001c0)='GPL\x00'}, 0x94) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES8=r4], 0xc0}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r5 = socket$nl_rdma(0x10, 0x3, 0x14) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) read$char_usb(r6, &(0x7f00000002c0)=""/151, 0x97) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TUNSETOFFLOAD(r8, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNGETFILTER(r8, 0x801054db, &(0x7f00000006c0)=""/181) writev(r6, &(0x7f0000001880)=[{&(0x7f00000005c0)}, {&(0x7f0000000680)='T', 0x1}], 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d00)={0x24, 0x1402, 0x1, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c880}, 0x8914) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x4080) 289.109549ms ago: executing program 3 (id=389): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$TCSETS2(r2, 0x402c542b, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000007680)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}], 0x1, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}, {0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f00000008c0)="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", 0x1000}, {&(0x7f00000018c0)="171edf832e0412b74bacaa416399e48f13095e9efe2eaa945b681e7c07fbb9ba52251c1b5b305be5e06173224eaf732b347ef694977758e90711acbd565de321549d37c1644b7afa5cba8fd0649d0731795943889ab513", 0x57}, {&(0x7f0000001940)="915609db4ebf7593d73c2d0e1464a76b359579f32eaa1498151c1f293ccfb6f3ae4f823c157cefb213a0bc12f9e8d5f521123f0e78daba417e5da226bea73d0e00033fabe77ae8af6252443f938b98b1f3adc362a8cd233729eb139604c5bd8c173d6793bcd1fb5657024d5d7a91ad818b593c5ad5319108f1c515579d465c07da3be319f6ffbc81b8c047b73061c8c530aafcc1e8c68ef38736db6b7af6009edadd49a38b1291e6d1dba1dbe1ef332c323e9cdc31c30051c1abc8c765f4ed66878ef23a675d6881e71265530ebe", 0xce}], 0x3, &(0x7f0000001a80)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x20000000}, {0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="fd03816080a5258290794cb34effc7a23d8e2165ae0ecded4a8e6e68dbfff2a9135c7333f0f860560ada85979828bac408117c3c9d40b710d90c48fdd70bdbae9a3f4fcfcafc43631600765b7666cded8e57395638420370fa408f437d7a9ea822e0a05a2e2cb40c220380359a24bd72dc229380bdfa570683a418e06231020d2ba996388abf95668b47c179016980596b8a6e66b77ab21bf4a313ca2c50937e5cf50f488ae3d57767fa2c713635439c55cdc590960eeb180fb61b2e9c62d1c7e2", 0xc1}], 0x1, &(0x7f0000000400)=[@iv={0x88, 0x117, 0x2, 0x78, "58ed1800bbf4814f3268a83fd07f3393fb95b4d20f65224c64492f2e14a08c0dc89cdc24df68cfd37141b8c6740e9e42f1b3069d907e87dce47b9dc45fc706366de72190d4adfd1a4502609c66f093af84208fa8f747aa68e51f4489db1f0133e909a6bfc94dbc6165cb610be65e247656eaa152dd809f3a"}, @assoc={0x10, 0x117, 0x4, 0x1}], 0x98, 0x20040800}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000009800)=[@op={0x10}, @iv={0xe0, 0x117, 0x2, 0xcf, "968a2bfe4637c3ef35b86c23c01ddb7f788362a666a9855080b87a95b17f958af3a9e56d1489648dfd26e628618513bb7b8f5cbf28f7a6fd3592f1e32ff40bc3e8d0dd874f5cf7807b51709adb05fd99609d15469669233cd67e48120f29f5ab9347f2faeab5d76fb6227689d0c2d140cde80f5fe01c674abb1e0484b52a20c0f0fa58a60557a36fce810be163d3422682aad370307fe2a0596dfdb47fa4a2df041a047a329fd08712d627127de9b80bd5b37ee6b223e4131ca2a697752cc7c5e7f40d852d00a381c8ff948e4d039a"}, @op={0x10, 0x117, 0x3, 0x1}, @iv={0xd8, 0x117, 0x2, 0xc5, "7663221ce6f9cc996677af11c91714d945875de38b13887b5eaf1962b2b331cd06f6b0358dcc4b26fecc0029147a064ea6b79d6188b63d346b438e240ff7e1b66bac9cde37be9d90e7d7c12ae14364eba9a558107d070dc40de650f9ac35264be3deabe8e41545e493543efdd87727e3a5464d07b2bd2b96aab1e1930632807343bacec85edf4a2f97f4f35c8d8ed6df8838ef11f41068e9cef99a2cd668a1645bd070d4e51fba533871395450fb7f1be4e1413a73ef7d2d4caefb895e9960a267f892df83"}, @iv={0x1010, 0x117, 0x2, 0x1000, "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"}], 0x11e8, 0x4000805}, {0x0, 0x0, &(0x7f0000007500)=[{&(0x7f00000074c0)="fea75ac8", 0x4}], 0x1, &(0x7f0000007540)=[@iv={0xb4, 0x117, 0x2, 0xa2, "8f94e0e98630c64099650220e5c56bd7fffd6ec1ff36e836771091ecf496bfd43bbb74c9fcc31cee8848777e87767c7c23718005ad99205e88ddae7d6b6e379f6060424739943d54e8e442eabfba42ff57a12cc47d6a82525e527468d8218ab1b9862fbb851a415a4a6425fa2fdc7926f9dafa75f3cd8bdc470171e8fe65e30d6f51e7242d857875346e5854959937237115b6dfef9d7d3f5ce50255686c5f5fb7f7"}, @op={0x10}, @op={0x10, 0x117, 0x3, 0x1}, @iv={0x6c, 0x117, 0x2, 0x5c, "3a6fbe02c4a7541a1c6666220ea8930bbc668c285a9c2854207379f42906f176858c2aac006b6fffc9c01c610d675c6aeee8005262a75b4967e46c8a082253b6d4ed133ce4c63269e8021ca9c545b7944c01d0ec7cdfe333659b69aa"}], 0x140, 0x4000000}], 0x5, 0x40800) recvmsg(r5, 0x0, 0x0) read$FUSE(r3, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) r7 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r7, 0x0) ftruncate(r7, 0x51a9497) open_tree(r7, &(0x7f0000000340)='./file0\x00', 0x88101) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x200000000000000) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0xfe05a, 0x5000, 0x0, 0x0, 0xc}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 161.859079ms ago: executing program 4 (id=390): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="050300000000000000000700fd8d635c7078ae97cf1c290000"], 0x14}}, 0x20000000) socket(0x2, 0x2, 0x1) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000280)={0xa1, 0x5, 0x802, 0xfffe, 0x0, 0x4, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040844) connect$unix(r2, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r6, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)}}], 0x1, 0x2000c001) recvmsg(r6, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x5c}, 0x123) shutdown(r6, 0x1) getpgid(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0100001000130426bd700040000000ac1414bb0000000000663f24a21696b516530e05cd2013f51b00000000000000ac1e010100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141422000000000000000000000000000004d43200000000000000000000000000ffffe000000100080000000000007d0100000000000000000000000000000400000000004000ffffffffffffffff06000000000000007f0000000000000002000000000000000000000000000000fd2100000000000004000000000000000400000000000000f6004000040000000800000000000000ff340000020001be330000004c001200726663343330392863636d28"], 0x13c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000804) creat(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) 0s ago: executing program 1 (id=391): open(&(0x7f00000001c0)='./bus\x00', 0x143bc2, 0x1c0) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x40) syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200080000002, 0x7, 0x8, 0x3}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000c00)=@filter={'filter\x00', 0x42, 0x4, 0xb5c, 0xffffffff, 0x9e4, 0x9e4, 0xec, 0xffffffff, 0xffffffff, 0xac8, 0xac8, 0xac8, 0xffffffff, 0x5, 0x0, {[{{@ip={@empty, @dev, 0x0, 0x0, 'bridge_slave_1\x00', 'nr0\x00'}, 0x3127, 0xc8, 0xec, 0x1ba, {0x46010000}, [@common=@addrtype={{0x2c}}, @common=@addrtype={{0x2c}}]}, @REJECT={0x24}}, {{@uncond, 0x287, 0x898, 0x8f8, 0x0, {0x0, 0x4}, [@common=@unspec=@u32={{0x7e0}, {[{[{}, {0x1000000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}, {[{}, {}, {0x0, 0x2}], [{}, {0x0, 0x8}]}, {}, {}, {[{}, {}, {}, {}, {}, {0xfffffffe}], [{0x6}, {0x0, 0x3}], 0xfe}, {[{}, {}, {}, {}, {}, {}, {0x0, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {0x0, 0xfe40}]}, {[{0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}, {[{}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}, {}, {[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}, {[], [{}, {0x4}]}], 0x5}}, @common=@unspec=@ipvs={{0x48}, {@ipv4=@private=0xa010102, [0xff000000, 0xff, 0xff0000ff], 0x4e24, 0xc, 0x2, 0x4e24, 0x1, 0x8}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x1], 0x1, 0x1}, {0x0, [0x4, 0x0, 0x5, 0x1, 0x5, 0x4], 0x4, 0x3}}}}, {{@ip={@multicast1, @broadcast, 0x0, 0x0, 'lo\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xc0, 0xe4, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x1, 0x1, 0x1}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0xbb8) dup2(0xffffffffffffffff, r2) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000001c0)={0x6, 0x2fc, &(0x7f00000009c0)="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", &(0x7f0000000640), 0xc00}) r3 = add_key$keyring(0x0, &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000980)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r3}) r5 = add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, r3) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040), 0xc) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000440)) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r6, 0x4008af04, &(0x7f0000000040)) request_key(&(0x7f0000000280)='id_resolver\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000300)='/dev/kvm\x00', r5) kernel console output (not intermixed with test programs): : Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.713001][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.740564][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.743419][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.772795][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.781052][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.796532][ T5838] Bluetooth: hci2: command tx timeout [ 93.802188][ T5838] Bluetooth: hci1: command tx timeout [ 93.811006][ T1150] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.825118][ T104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.846687][ T104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.866922][ T5147] Bluetooth: hci3: command tx timeout [ 93.866947][ T5838] Bluetooth: hci4: command tx timeout [ 93.914529][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.947598][ T5838] Bluetooth: hci0: command tx timeout [ 93.971048][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.980283][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.080037][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.109490][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.242663][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.268680][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.277586][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.290744][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.584878][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.667730][ T796] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 94.676002][ T5907] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.687288][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.825849][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.850014][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.886628][ T5907] usb 1-1: Using ep0 maxpacket: 8 [ 94.893117][ T796] usb 3-1: Using ep0 maxpacket: 8 [ 94.976756][ T5907] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 94.985218][ T5907] usb 1-1: config 0 has no interface number 0 [ 95.007110][ T5907] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 95.027363][ T5907] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 95.052890][ T796] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 95.061982][ T796] usb 3-1: config 0 has no interface number 0 [ 95.123087][ T796] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 95.242834][ T5907] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 95.353056][ T796] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 95.387136][ T5939] input: syz1 as /devices/virtual/input/input5 [ 95.583463][ T5907] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 95.598886][ T796] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 95.811927][ T5907] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 95.853063][ T796] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 95.853136][ T796] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 95.853155][ T796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.867677][ T796] usb 3-1: config 0 descriptor?? [ 95.876568][ T5838] Bluetooth: hci1: command tx timeout [ 95.876578][ T5147] Bluetooth: hci2: command tx timeout [ 95.929156][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.939781][ T5907] usb 1-1: config 0 descriptor?? [ 95.947893][ T5838] Bluetooth: hci3: command tx timeout [ 95.947927][ T5147] Bluetooth: hci4: command tx timeout [ 95.959851][ T796] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 96.026936][ T5147] Bluetooth: hci0: command tx timeout [ 96.045221][ T5907] ldusb 1-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 96.726810][ T5907] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 96.737904][ T5893] usb 3-1: USB disconnect, device number 2 [ 96.834311][ T5893] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 96.872797][ T5930] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 96.959187][ T5907] usb 5-1: Using ep0 maxpacket: 8 [ 97.352523][ T5907] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 97.352551][ T5907] usb 5-1: config 0 has no interface number 0 [ 97.352584][ T5907] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 97.352601][ T5907] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 97.352620][ T5907] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 97.352640][ T5907] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 97.352671][ T5907] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 97.352688][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.392241][ T5907] usb 5-1: config 0 descriptor?? [ 97.423209][ T5907] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 98.294354][ T5950] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 98.444074][ T5907] usb 5-1: USB disconnect, device number 2 [ 98.460488][ T5907] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 98.928107][ T30] audit: type=1326 audit(1775791575.136:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5953 comm="syz.1.6" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 98.974991][ T5960] process 'syz.1.6' launched './file2' with NULL argv: empty string added [ 99.046843][ T30] audit: type=1326 audit(1775791575.176:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5953 comm="syz.1.6" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 99.095665][ T30] audit: type=1326 audit(1775791575.176:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5953 comm="syz.1.6" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 99.154360][ T30] audit: type=1326 audit(1775791575.176:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5953 comm="syz.1.6" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 99.179523][ T30] audit: type=1326 audit(1775791575.186:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5953 comm="syz.1.6" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 99.240454][ T30] audit: type=1326 audit(1775791575.186:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5953 comm="syz.1.6" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 99.648617][ T5907] usb 1-1: USB disconnect, device number 2 [ 99.688672][ T5907] ldusb 1-1:0.55: LD USB Device #1 now disconnected [ 99.759205][ T5933] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 99.801502][ T30] audit: type=1326 audit(1775791575.186:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5953 comm="syz.1.6" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 99.862233][ T30] audit: type=1326 audit(1775791575.186:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5953 comm="syz.1.6" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 99.881028][ T10] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 100.179791][ T5975] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 100.210087][ T5933] usb 2-1: Using ep0 maxpacket: 32 [ 100.227980][ T30] audit: type=1326 audit(1775791575.206:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5953 comm="syz.1.6" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 100.326588][ T5933] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.372978][ T5933] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 100.394058][ T30] audit: type=1326 audit(1775791575.206:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5953 comm="syz.1.6" exe="/root/syz-executor" sig=0 arch=40000003 syscall=83 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 100.436479][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.456625][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 100.466356][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 100.485693][ T5933] usb 2-1: config 0 descriptor?? [ 100.496331][ T10] usb 3-1: config 255 has an invalid interface number: 180 but max is 0 [ 100.509605][ T10] usb 3-1: config 255 has no interface number 0 [ 100.520631][ T5933] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 100.573288][ T10] usb 3-1: config 255 interface 180 has no altsetting 0 [ 100.664991][ T10] usb 3-1: New USB device found, idVendor=0742, idProduct=2008, bcdDevice=76.8d [ 100.676019][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.694103][ T10] usb 3-1: Product: syz [ 100.705408][ T10] usb 3-1: Manufacturer: syz [ 100.735881][ T10] usb 3-1: SerialNumber: syz [ 101.206729][ T5921] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 101.388447][ T5921] usb 1-1: Using ep0 maxpacket: 8 [ 101.868320][ T5921] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 101.876599][ T5921] usb 1-1: config 0 has no interface number 0 [ 101.882928][ T5921] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 101.925826][ T5921] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 102.123092][ T5921] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 102.250329][ T5921] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 102.285111][ T5921] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 102.355061][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.473178][ T5921] usb 1-1: config 0 descriptor?? [ 102.504167][ T5921] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 102.964269][ T5983] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 103.089122][ T1210] usb 2-1: USB disconnect, device number 2 [ 103.290850][ T10] HFC-S_USB 3-1:255.180: probe with driver HFC-S_USB failed with error -5 [ 103.330633][ T10] usb 3-1: USB disconnect, device number 3 [ 103.355779][ T1210] usb 1-1: USB disconnect, device number 3 [ 103.410414][ T1210] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 103.962658][ T6004] mmap: syz.2.14 (6004) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 103.979408][ T6004] netlink: 'syz.2.14': attribute type 13 has an invalid length. [ 104.593135][ T6006] netlink: 32 bytes leftover after parsing attributes in process `syz.4.16'. [ 104.648674][ T1210] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 104.926595][ T1210] usb 2-1: Using ep0 maxpacket: 8 [ 104.935294][ T1210] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 104.943773][ T1210] usb 2-1: config 0 has no interface number 0 [ 104.964298][ T1210] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 104.978858][ T1228] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 105.006929][ T1210] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 105.076578][ T1210] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 105.091865][ T1210] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 105.127301][ T1210] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 105.172328][ T1228] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 105.205889][ T1228] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 105.219365][ T1210] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.238989][ T1228] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 105.321524][ T1210] usb 2-1: config 0 descriptor?? [ 105.326986][ T1228] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 105.443773][ T1228] usb 5-1: SerialNumber: syz [ 105.453144][ T1210] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 105.567166][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 105.683598][ T1228] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 105.740069][ T1228] usb-storage 5-1:1.0: USB Mass Storage device detected [ 105.803358][ T6020] input: syz1 as /devices/virtual/input/input6 [ 105.877564][ T1228] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 105.897372][ T1228] scsi host1: usb-storage 5-1:1.0 [ 105.926556][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 105.939187][ T10] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 105.955486][ T10] usb 4-1: config 0 has no interface number 0 [ 105.964636][ T10] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 105.995430][ T6020] netlink: 'syz.2.19': attribute type 1 has an invalid length. [ 106.029231][ T6020] gretap1: entered allmulticast mode [ 106.037189][ T6020] batman_adv: batadv0: Adding interface: gretap1 [ 106.043705][ T6020] batman_adv: batadv0: The MTU of interface gretap1 is too small (1454) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.094456][ T6020] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 106.192417][ T10] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 106.714536][ T10] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 106.726108][ T10] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 106.740046][ T10] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 106.849545][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.996487][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 107.007232][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c0!!! [ 107.053434][ T6025] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 107.169043][ T10] usb 4-1: config 0 descriptor?? [ 107.278329][ T24] usb 2-1: USB disconnect, device number 3 [ 107.359732][ T24] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 107.397812][ T10] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 107.585131][ T1228] usb 5-1: USB disconnect, device number 3 [ 107.926962][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 108.350815][ T6030] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 108.415692][ T6036] xt_TPROXY: Can be used only with -p tcp or -p udp [ 108.511659][ T1210] usb 4-1: USB disconnect, device number 2 [ 108.523165][ T1210] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 108.672095][ T6043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22'. [ 110.524496][ T6040] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 110.595108][ T6040] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 110.647086][ T6040] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 110.661551][ T6040] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 110.715438][ T6040] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 110.744445][ T6040] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 110.827648][ T6040] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 110.922935][ T6040] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 110.989242][ T6040] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 111.017658][ T6040] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 111.134549][ T6040] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 111.574573][ T6040] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 111.597571][ T6040] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 111.605154][ T6040] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 111.789643][ T6040] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 111.804720][ T5147] Bluetooth: hci0: command 0x0c1a tx timeout [ 112.096546][ T5921] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 112.126558][ T5933] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 112.256535][ T5921] usb 2-1: Using ep0 maxpacket: 8 [ 112.266361][ T5921] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 112.303212][ T5921] usb 2-1: config 0 has no interface number 0 [ 112.317646][ T5933] usb 1-1: Using ep0 maxpacket: 8 [ 112.339083][ T5921] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 112.362012][ T5933] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 112.400822][ T5921] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 112.412672][ T5933] usb 1-1: config 0 has no interface number 0 [ 112.450182][ T5933] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 112.472946][ T5921] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 112.531748][ T5933] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 112.559526][ T5921] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 112.609769][ T5933] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 112.628303][ T5921] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 112.648000][ T5933] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 112.667849][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.686601][ T5147] Bluetooth: hci2: command 0x0c1a tx timeout [ 112.696839][ T5933] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 112.722291][ T5933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.731238][ T5921] usb 2-1: config 0 descriptor?? [ 112.793328][ T5921] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 112.807240][ T5933] usb 1-1: config 0 descriptor?? [ 112.850560][ T5933] ldusb 1-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 112.906963][ T5147] Bluetooth: hci3: command 0x0c1a tx timeout [ 113.069009][ T5147] Bluetooth: hci1: command 0x0c1a tx timeout [ 113.307892][ T5933] usb 1-1: USB disconnect, device number 4 [ 113.342371][ T5933] ldusb 1-1:0.55: LD USB Device #1 now disconnected [ 113.440927][ T1210] usb 2-1: USB disconnect, device number 4 [ 113.492444][ T1210] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 113.627256][ T5147] Bluetooth: hci4: command 0x0c1a tx timeout [ 113.869139][ T5147] Bluetooth: hci0: command 0x0c1a tx timeout [ 113.996541][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 114.198824][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 114.226274][ T10] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 114.271860][ T10] usb 4-1: config 0 has no interface number 0 [ 114.341556][ T10] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 114.363901][ T10] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 114.408002][ T1228] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 114.454670][ T10] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 114.539952][ T10] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 114.568911][ T1228] usb 3-1: Using ep0 maxpacket: 8 [ 114.577498][ T1228] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 114.588110][ T1228] usb 3-1: config 0 has no interface number 0 [ 114.655702][ T10] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 114.669692][ T1228] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 114.700237][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.711776][ T1228] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 114.739384][ T10] usb 4-1: config 0 descriptor?? [ 114.746669][ T5147] Bluetooth: hci2: command 0x0c1a tx timeout [ 114.786322][ T1228] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 114.832230][ T10] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 114.870624][ T1228] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 114.916887][ T1228] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 114.937957][ T1228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.034188][ T5147] Bluetooth: hci3: command 0x0c1a tx timeout [ 115.147457][ T5147] Bluetooth: hci1: command 0x0c1a tx timeout [ 115.211935][ T6103] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 115.232259][ T1228] usb 3-1: config 0 descriptor?? [ 115.267523][ T1228] ldusb 3-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 115.460679][ T5933] usb 4-1: USB disconnect, device number 3 [ 115.498559][ T5921] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 115.854027][ T5147] Bluetooth: hci4: command 0x0c1a tx timeout [ 115.877152][ T5933] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 115.946843][ T5147] Bluetooth: hci0: command 0x0c1a tx timeout [ 116.144155][ T5921] usb 1-1: Using ep0 maxpacket: 8 [ 116.254075][ T5933] usb 3-1: USB disconnect, device number 4 [ 116.290324][ T5921] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 116.299471][ T5921] usb 1-1: config 0 has no interface number 0 [ 116.619714][ T5933] ldusb 3-1:0.55: LD USB Device #1 now disconnected [ 116.626633][ T5921] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 116.657513][ T5921] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 116.678142][ T5921] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 116.697742][ T5921] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 116.745710][ T5921] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 116.786868][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.827482][ T5147] Bluetooth: hci2: command 0x0c1a tx timeout [ 116.844543][ T5921] usb 1-1: config 0 descriptor?? [ 116.990469][ T5921] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 117.071220][ T5147] Bluetooth: hci3: command 0x0c1a tx timeout [ 117.226633][ T5147] Bluetooth: hci1: command 0x0c1a tx timeout [ 117.496468][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 117.788121][ T24] usb 1-1: USB disconnect, device number 5 [ 117.813885][ T24] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 117.881928][ T5147] Bluetooth: hci4: command 0x0c1a tx timeout [ 120.081169][ T6137] xt_TPROXY: Can be used only with -p tcp or -p udp [ 121.430259][ T6139] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 121.454943][ T6139] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 121.471709][ T6139] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 121.620341][ T6139] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 121.631726][ T6139] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 121.936538][ T1210] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 122.106975][ T1210] usb 2-1: Using ep0 maxpacket: 8 [ 122.152852][ T1210] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 122.349788][ T5147] Bluetooth: hci0: command 0x0c1a tx timeout [ 122.428041][ T1210] usb 2-1: config 0 has no interface number 0 [ 122.465321][ T1210] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 122.753979][ T1210] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 122.808847][ T1210] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 122.846067][ T1210] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 123.556155][ T1210] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 123.566149][ T1210] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.577179][ T5147] Bluetooth: hci2: command 0x0c1a tx timeout [ 123.577188][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 123.706569][ T5147] Bluetooth: hci4: command 0x0c1a tx timeout [ 123.708248][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 123.723750][ T1210] usb 2-1: config 0 descriptor?? [ 124.148250][ T1210] usb 2-1: can't set config #0, error -71 [ 124.316368][ T1210] usb 2-1: USB disconnect, device number 5 [ 124.512512][ T6193] netlink: 144 bytes leftover after parsing attributes in process `syz.1.54'. [ 124.759852][ T6193] netlink: 144 bytes leftover after parsing attributes in process `syz.1.54'. [ 125.096913][ T6203] xt_TPROXY: Can be used only with -p tcp or -p udp [ 126.711507][ T6206] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 126.718480][ T6206] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 126.745224][ T6206] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 126.757301][ T6206] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 126.763360][ T6206] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 127.515092][ T6245] xt_TPROXY: Can be used only with -p tcp or -p udp [ 127.523258][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 127.588697][ T1228] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 127.641119][ T5147] Bluetooth: hci0: command 0x0c1a tx timeout [ 127.936691][ T1228] usb 4-1: Using ep0 maxpacket: 8 [ 127.946036][ T10] usb 2-1: config index 0 descriptor too short (expected 10276, got 36) [ 127.957753][ T10] usb 2-1: config 242 has an invalid interface number: 240 but max is 0 [ 128.196303][ T10] usb 2-1: config 242 has an invalid descriptor of length 0, skipping remainder of the config [ 128.236560][ T1228] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 128.257230][ T1228] usb 4-1: config 0 has no interface number 0 [ 128.269644][ T1228] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 128.286143][ T10] usb 2-1: config 242 has no interface number 0 [ 128.292706][ T1228] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 128.417571][ T10] usb 2-1: config 242 interface 240 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.439972][ T1228] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 128.451882][ T10] usb 2-1: config 242 interface 240 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.462774][ T1228] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 128.476289][ T10] usb 2-1: config 242 interface 240 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 128.495360][ T1228] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 128.504784][ T10] usb 2-1: config 242 interface 240 has no altsetting 0 [ 128.517078][ T1228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.525756][ T10] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 128.577880][ T1228] usb 4-1: config 0 descriptor?? [ 128.583058][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.598648][ T1228] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 128.756520][ T5147] Bluetooth: hci3: command 0x0c1a tx timeout [ 128.756555][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 128.836652][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout [ 128.843033][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 129.478983][ T6249] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 129.500580][ T6249] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 129.513557][ T6249] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 129.526980][ T6249] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 129.543740][ T6249] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 129.728575][ T6255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.740594][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 129.902345][ T6255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.173721][ T10] usb 4-1: USB disconnect, device number 4 [ 130.193583][ T10] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 131.596992][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout [ 131.603177][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout [ 131.609248][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 131.615275][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 132.374309][ T1228] usb 2-1: USB disconnect, device number 6 [ 133.117694][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.124241][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.721577][ T5933] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 133.916829][ T5933] usb 5-1: Using ep0 maxpacket: 8 [ 133.933752][ T5933] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 133.962596][ T5933] usb 5-1: config 0 has no interface number 0 [ 134.008139][ T5933] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 134.075610][ T5933] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 134.276689][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 134.325558][ T5933] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 134.413539][ T5933] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 134.476508][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 134.485993][ T5933] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 134.519813][ T10] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 134.520527][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.615413][ T10] usb 2-1: config 0 has no interface number 0 [ 134.640590][ T5933] usb 5-1: config 0 descriptor?? [ 134.693475][ T5933] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 134.722661][ T10] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 134.748384][ T6300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.77'. [ 134.788800][ T10] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 135.064572][ T5921] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 135.077797][ T10] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 135.151913][ T6306] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 135.235390][ T10] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 135.238651][ T5921] usb 4-1: Using ep0 maxpacket: 8 [ 135.298443][ T10] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 135.319537][ T5921] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 135.333326][ T5921] usb 4-1: config 0 has no interface number 0 [ 135.351129][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.370096][ T5921] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 135.419952][ T10] usb 2-1: config 0 descriptor?? [ 135.477629][ T10] ldusb 2-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 135.637253][ T5921] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 135.685201][ T5921] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 135.714697][ T5921] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 135.791865][ T10] usb 2-1: USB disconnect, device number 7 [ 135.821149][ T10] ldusb 2-1:0.55: LD USB Device #1 now disconnected [ 135.840132][ T5921] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 135.879326][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.945367][ T5921] usb 4-1: config 0 descriptor?? [ 136.155082][ T5921] ldusb 4-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 136.289196][ T6312] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 136.366804][ T1210] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 136.616843][ T1210] usb 3-1: Using ep0 maxpacket: 8 [ 136.643322][ T1210] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 136.666801][ T1210] usb 3-1: config 0 has no interface number 0 [ 136.707628][ T1210] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 136.751724][ T1210] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 136.809820][ T1210] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 136.886453][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 136.906448][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 136.916497][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 136.976491][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 137.007355][ T10] usb 5-1: USB disconnect, device number 4 [ 137.039471][ T10] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 137.070523][ T1210] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 137.138169][ T1210] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 137.171788][ T1210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.234018][ T1210] usb 3-1: config 0 descriptor?? [ 137.420118][ T1210] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 137.581636][ T6311] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 137.644978][ T10] usb 3-1: USB disconnect, device number 5 [ 137.647226][ T5907] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 137.676314][ T10] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 137.977326][ T5907] usb 5-1: Using ep0 maxpacket: 8 [ 138.024773][ T5907] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 138.041516][ T5907] usb 5-1: config 0 has no interface number 0 [ 138.048420][ T5907] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 138.070107][ T5907] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 138.094353][ T5907] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 138.125085][ T5907] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 138.158305][ T5907] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 138.177473][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.200910][ T5907] usb 5-1: config 0 descriptor?? [ 138.231964][ T5907] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 138.776842][ T5921] usb 5-1: USB disconnect, device number 5 [ 138.788975][ T5921] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 138.939210][ T5933] usb 4-1: USB disconnect, device number 5 [ 138.971311][ T5933] ldusb 4-1:0.55: LD USB Device #1 now disconnected [ 139.501408][ T6335] xt_TPROXY: Can be used only with -p tcp or -p udp [ 141.630368][ T6340] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 141.637003][ T6340] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 141.643367][ T6340] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 141.652172][ T6340] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 141.659798][ T6340] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 141.939537][ T6348] kvm: kvm [6347]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x11e) = 0xbe70a111 [ 142.187780][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 142.348925][ T6355] netlink: 'syz.2.92': attribute type 3 has an invalid length. [ 142.447225][ T6358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.93'. [ 143.097199][ T5933] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 143.266748][ T5933] usb 3-1: Using ep0 maxpacket: 8 [ 143.292411][ T5933] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 143.306357][ T5933] usb 3-1: config 0 has no interface number 0 [ 143.313332][ T5933] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 143.371684][ T5933] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 143.403543][ T5933] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 143.452448][ T5933] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 143.501309][ T5933] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 143.618220][ T5933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.672178][ T5933] usb 3-1: config 0 descriptor?? [ 143.700170][ T5933] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 143.713094][ T5831] Bluetooth: hci4: command 0x0c1a tx timeout [ 143.719794][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 143.726100][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 143.732738][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout [ 144.049243][ T6369] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 144.124959][ T5907] usb 3-1: USB disconnect, device number 6 [ 144.174282][ T5907] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 147.565299][ T6401] Zero length message leads to an empty skb [ 149.666620][ T5933] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 150.096588][ T5933] usb 3-1: Using ep0 maxpacket: 8 [ 150.120994][ T5933] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 150.129675][ T5933] usb 3-1: config 0 has no interface number 0 [ 150.136773][ T5933] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 150.287152][ T5933] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 150.401607][ T5933] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 150.433241][ T5933] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 150.489583][ T5933] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 150.548186][ T5933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.573524][ T5933] usb 3-1: config 0 descriptor?? [ 150.633804][ T5933] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 151.288030][ T6424] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 151.708394][ T6429] netlink: 'syz.4.110': attribute type 3 has an invalid length. [ 151.866737][ T5933] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 152.002777][ T10] usb 3-1: USB disconnect, device number 7 [ 152.088588][ T10] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 152.116771][ T5933] usb 1-1: Using ep0 maxpacket: 8 [ 152.129439][ T5933] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 152.176562][ T5933] usb 1-1: config 0 has no interface number 0 [ 152.214452][ T5933] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 152.259419][ T5933] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 152.317377][ T5933] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 152.390858][ T5933] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 152.461245][ T5933] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 152.501449][ T5933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.568762][ T5933] usb 1-1: config 0 descriptor?? [ 152.619046][ T5933] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 152.996450][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 153.111916][ T6441] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 153.189101][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 153.310219][ T796] usb 1-1: USB disconnect, device number 6 [ 153.419900][ T10] usb 5-1: config index 0 descriptor too short (expected 10276, got 36) [ 153.442321][ T796] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 153.455586][ T10] usb 5-1: config 242 has an invalid interface number: 240 but max is 0 [ 153.500783][ T10] usb 5-1: config 242 has an invalid descriptor of length 0, skipping remainder of the config [ 153.544404][ T10] usb 5-1: config 242 has no interface number 0 [ 153.579367][ T10] usb 5-1: config 242 interface 240 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.616626][ T10] usb 5-1: config 242 interface 240 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.654864][ T10] usb 5-1: config 242 interface 240 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 153.780394][ T10] usb 5-1: config 242 interface 240 has no altsetting 0 [ 153.806742][ T10] usb 5-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 153.827982][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.546673][ T6453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.556287][ T6453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.292024][ T6462] kvm: MONITOR instruction emulated as NOP! [ 155.328653][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 155.493480][ T6466] xt_TPROXY: Can be used only with -p tcp or -p udp [ 155.557634][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 155.628775][ T10] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 155.640854][ T10] usb 2-1: config 0 has no interface number 0 [ 155.685415][ T10] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 155.700893][ T5907] usb 5-1: USB disconnect, device number 6 [ 155.720911][ T10] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 155.741825][ T10] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 155.761140][ T10] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 155.775310][ T10] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 156.188247][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.203091][ T10] usb 2-1: config 0 descriptor?? [ 156.285783][ T10] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 156.414080][ T6470] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 156.426752][ T6470] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 156.442423][ T6470] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 156.451704][ T6470] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 156.458200][ T6470] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 156.966464][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 157.243238][ T6484] kvm: kvm [6483]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x187) = 0x8000 [ 158.266664][ T5829] Bluetooth: hci0: command 0x0c1a tx timeout [ 158.311789][ T5907] usb 2-1: USB disconnect, device number 8 [ 158.341464][ T5907] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 158.486235][ T6498] netlink: 'syz.4.126': attribute type 13 has an invalid length. [ 158.599635][ T5147] Bluetooth: hci1: command 0x0c1a tx timeout [ 158.599652][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 158.599738][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 158.605773][ T5829] Bluetooth: hci4: command 0x0c1a tx timeout [ 160.212042][ T6524] netlink: 4 bytes leftover after parsing attributes in process `syz.1.133'. [ 160.804579][ T6534] netlink: 'syz.4.138': attribute type 3 has an invalid length. [ 160.856774][ T6536] xt_TPROXY: Can be used only with -p tcp or -p udp [ 161.489967][ T6548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.141'. [ 161.508855][ T6548] netlink: 20 bytes leftover after parsing attributes in process `syz.0.141'. [ 161.560197][ T6549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.141'. [ 161.619349][ T6549] netlink: 20 bytes leftover after parsing attributes in process `syz.0.141'. [ 161.664328][ T796] IPVS: starting estimator thread 0... [ 161.768766][ T6550] IPVS: using max 26 ests per chain, 62400 per kthread [ 161.817376][ T6540] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 161.824951][ T6553] FAULT_INJECTION: forcing a failure. [ 161.824951][ T6553] name failslab, interval 1, probability 0, space 0, times 1 [ 161.847703][ T6540] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 161.854295][ T6553] CPU: 1 UID: 0 PID: 6553 Comm: syz.0.141 Not tainted syzkaller #0 PREEMPT(full) [ 161.854325][ T6553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 161.854345][ T6553] Call Trace: [ 161.854354][ T6553] [ 161.854362][ T6553] dump_stack_lvl+0xe8/0x150 [ 161.854404][ T6553] should_fail_ex+0x412/0x560 [ 161.854442][ T6553] should_failslab+0xa8/0x100 [ 161.854471][ T6553] __kvmalloc_node_noprof+0x178/0x8a0 [ 161.854496][ T6553] ? file_tty_write+0x2e7/0xa20 [ 161.854525][ T6553] file_tty_write+0x2e7/0xa20 [ 161.854553][ T6553] vfs_write+0x61d/0xb90 [ 161.854584][ T6553] ? __pfx_vfs_write+0x10/0x10 [ 161.854615][ T6553] ? __fget_files+0x2a/0x420 [ 161.854641][ T6553] ksys_write+0x150/0x270 [ 161.854666][ T6553] ? __pfx_ksys_write+0x10/0x10 [ 161.854697][ T6553] __do_fast_syscall_32+0x20d/0x640 [ 161.854729][ T6553] ? do_fast_syscall_32+0x33/0x70 [ 161.854755][ T6553] ? asm_int80_emulation+0x1a/0x20 [ 161.854774][ T6553] ? do_int80_emulation+0x274/0x4d0 [ 161.854836][ T6553] ? trace_irq_disable+0x3b/0x150 [ 161.854858][ T6553] do_fast_syscall_32+0x33/0x70 [ 161.854887][ T6553] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 161.854924][ T6553] RIP: 0023:0xf702ef6c [ 161.854949][ T6553] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 161.854965][ T6553] RSP: 002b:00000000f53db50c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 161.854995][ T6553] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080002080 [ 161.855008][ T6553] RDX: 000000000000104a RSI: 0000000000000000 RDI: 0000000000000000 [ 161.855019][ T6553] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 161.855030][ T6553] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 161.855040][ T6553] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 161.855068][ T6553] [ 161.858766][ T6540] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 162.105431][ T6540] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 162.114178][ T6540] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 163.128006][ T6563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.144'. [ 163.194315][ T6567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.144'. [ 163.236542][ T5829] Bluetooth: hci0: command 0x0c1a tx timeout [ 163.258457][ T6570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.145'. [ 163.270195][ T6563] netlink: 20 bytes leftover after parsing attributes in process `syz.2.144'. [ 163.326901][ T6567] netlink: 20 bytes leftover after parsing attributes in process `syz.2.144'. [ 163.869165][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 163.869190][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 164.120425][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 164.186950][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout [ 164.486726][ T6599] xt_TPROXY: Can be used only with -p tcp or -p udp [ 164.736722][ T1210] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 164.956525][ T1210] usb 2-1: Using ep0 maxpacket: 8 [ 164.977667][ T1210] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 164.986059][ T1210] usb 2-1: config 0 has no interface number 0 [ 165.010512][ T1210] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 165.044541][ T1210] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 165.136513][ T1210] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 165.180009][ T1210] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 165.247586][ T1210] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 165.289141][ T1210] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.397197][ T1210] usb 2-1: config 0 descriptor?? [ 165.406841][ T6601] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 165.436895][ T6601] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 165.443093][ T6601] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 165.497967][ T1210] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 165.563939][ T6601] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 165.605066][ T6601] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 165.942422][ T1210] usb 2-1: USB disconnect, device number 9 [ 165.997202][ T1210] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 166.312513][ T6608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.157'. [ 166.906621][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 167.093158][ T6626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.165'. [ 167.224651][ T6631] FAULT_INJECTION: forcing a failure. [ 167.224651][ T6631] name failslab, interval 1, probability 0, space 0, times 0 [ 167.259384][ T6631] CPU: 0 UID: 0 PID: 6631 Comm: syz.1.166 Not tainted syzkaller #0 PREEMPT(full) [ 167.259417][ T6631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 167.259426][ T6631] Call Trace: [ 167.259432][ T6631] [ 167.259439][ T6631] dump_stack_lvl+0xe8/0x150 [ 167.259466][ T6631] should_fail_ex+0x412/0x560 [ 167.259494][ T6631] should_failslab+0xa8/0x100 [ 167.259517][ T6631] __kmalloc_noprof+0xe8/0x760 [ 167.259535][ T6631] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 167.259556][ T6631] tomoyo_realpath_from_path+0xe3/0x5d0 [ 167.259581][ T6631] ? tomoyo_path_number_perm+0x219/0x630 [ 167.259603][ T6631] tomoyo_path_number_perm+0x246/0x630 [ 167.259627][ T6631] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 167.259651][ T6631] ? __lock_acquire+0x6b5/0x2cf0 [ 167.259696][ T6631] ? __fget_files+0x2a/0x420 [ 167.259713][ T6631] ? __fget_files+0x3a0/0x420 [ 167.259726][ T6631] ? __fget_files+0x2a/0x420 [ 167.259742][ T6631] security_file_ioctl_compat+0xc3/0x2a0 [ 167.259766][ T6631] __ia32_compat_sys_ioctl+0x139/0x950 [ 167.259788][ T6631] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 167.259811][ T6631] ? __fget_files+0x3a0/0x420 [ 167.259829][ T6631] ? fput+0xa0/0xd0 [ 167.259852][ T6631] ? ksys_write+0x242/0x270 [ 167.259878][ T6631] __do_fast_syscall_32+0x20d/0x640 [ 167.259902][ T6631] ? do_fast_syscall_32+0x33/0x70 [ 167.259923][ T6631] ? asm_int80_emulation+0x1a/0x20 [ 167.259937][ T6631] ? do_int80_emulation+0x274/0x4d0 [ 167.259958][ T6631] ? trace_irq_disable+0x3b/0x150 [ 167.259974][ T6631] do_fast_syscall_32+0x33/0x70 [ 167.259996][ T6631] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 167.260016][ T6631] RIP: 0023:0xf6fcef6c [ 167.260030][ T6631] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 167.260042][ T6631] RSP: 002b:00000000f53bd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 167.260058][ T6631] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000004008ae89 [ 167.260068][ T6631] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 167.260077][ T6631] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 167.260085][ T6631] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 167.260094][ T6631] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 167.260117][ T6631] [ 167.260124][ T6631] ERROR: Out of memory at tomoyo_realpath_from_path. [ 167.537172][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 167.543445][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 167.666602][ T5829] Bluetooth: hci4: command 0x0c1a tx timeout [ 167.672844][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 168.294374][ T6641] xt_TPROXY: Can be used only with -p tcp or -p udp [ 168.596520][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 168.758672][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 168.783230][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 168.806211][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 168.840128][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 168.859055][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.882724][ T10] usb 2-1: Product: syz [ 168.892675][ T10] usb 2-1: Manufacturer: syz [ 168.903673][ T10] usb 2-1: SerialNumber: syz [ 168.930300][ T10] hub 2-1:1.0: bad descriptor, ignoring hub [ 168.943730][ T10] hub 2-1:1.0: probe with driver hub failed with error -5 [ 169.138539][ T10] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 169.268375][ T6642] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 169.275322][ T6642] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 169.283983][ T6642] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 169.291536][ T6642] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 169.297885][ T6642] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 169.329101][ T6647] netlink: 'syz.2.171': attribute type 2 has an invalid length. [ 169.349725][ T6647] netlink: 132 bytes leftover after parsing attributes in process `syz.2.171'. [ 169.496939][ T6649] faux_driver vkms: [drm] Unknown color mode 28; guessing buffer size. [ 170.001430][ T6656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.172'. [ 170.516596][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 170.916748][ T6674] netlink: 12 bytes leftover after parsing attributes in process `syz.3.177'. [ 171.305330][ T5933] usb 2-1: USB disconnect, device number 10 [ 171.316584][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout [ 171.318035][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 171.322737][ T5147] Bluetooth: hci2: command 0x0c1a tx timeout [ 171.336032][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 171.364179][ T5933] usblp0: removed [ 171.661760][ T6684] FAULT_INJECTION: forcing a failure. [ 171.661760][ T6684] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 171.711520][ T6684] CPU: 0 UID: 0 PID: 6684 Comm: syz.3.181 Not tainted syzkaller #0 PREEMPT(full) [ 171.711552][ T6684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 171.711565][ T6684] Call Trace: [ 171.711574][ T6684] [ 171.711583][ T6684] dump_stack_lvl+0xe8/0x150 [ 171.711620][ T6684] should_fail_ex+0x412/0x560 [ 171.711660][ T6684] _copy_to_user+0x31/0xb0 [ 171.711689][ T6684] simple_read_from_buffer+0xe1/0x170 [ 171.711734][ T6684] proc_fail_nth_read+0x1bb/0x230 [ 171.711771][ T6684] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 171.711807][ T6684] ? rw_verify_area+0x2a6/0x4d0 [ 171.711830][ T6684] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 171.711864][ T6684] vfs_read+0x20c/0xa70 [ 171.711887][ T6684] ? fdget_pos+0x246/0x320 [ 171.711911][ T6684] ? __pfx___mutex_lock+0x10/0x10 [ 171.711943][ T6684] ? __pfx_vfs_read+0x10/0x10 [ 171.711969][ T6684] ? __fget_files+0x2a/0x420 [ 171.711992][ T6684] ? __fget_files+0x3a0/0x420 [ 171.712011][ T6684] ? __fget_files+0x2a/0x420 [ 171.712039][ T6684] ksys_read+0x150/0x270 [ 171.712066][ T6684] ? __pfx_ksys_read+0x10/0x10 [ 171.712096][ T6684] ? __secure_computing+0xe1/0x2a0 [ 171.712125][ T6684] do_int80_emulation+0x173/0x4d0 [ 171.712155][ T6684] ? trace_irq_disable+0x3b/0x150 [ 171.712173][ T6684] ? asm_int80_emulation+0x1a/0x20 [ 171.712194][ T6684] ? clear_bhb_loop+0x40/0x90 [ 171.712216][ T6684] ? clear_bhb_loop+0x40/0x90 [ 171.712251][ T6684] asm_int80_emulation+0x1a/0x20 [ 171.712272][ T6684] RIP: 0023:0xf7165cab [ 171.712291][ T6684] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 171.712309][ T6684] RSP: 002b:00000000f541d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 171.712332][ T6684] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f541d5d0 [ 171.712346][ T6684] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 171.712358][ T6684] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 171.712370][ T6684] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 171.712382][ T6684] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 171.712417][ T6684] [ 172.171856][ T6691] xt_TPROXY: Can be used only with -p tcp or -p udp [ 172.263733][ T6700] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 172.329780][ T6696] kvm: kvm [6695]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x11e) = 0xbe70a111 [ 173.034633][ T6699] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 173.058703][ T6699] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 173.082235][ T6699] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 173.122151][ T6699] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 173.142643][ T6699] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 173.439941][ T6709] netlink: 'syz.1.188': attribute type 3 has an invalid length. [ 174.236512][ T1228] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 174.426630][ T5829] Bluetooth: hci0: command 0x0c1a tx timeout [ 174.439616][ T1228] usb 2-1: Using ep0 maxpacket: 8 [ 174.514838][ T1228] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 174.561606][ T1228] usb 2-1: config 0 has no interface number 0 [ 174.593453][ T1228] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 174.658522][ T1228] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 174.733978][ T1228] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 174.796645][ T1210] IPVS: starting estimator thread 0... [ 174.810955][ T1228] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 174.941869][ T1228] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 174.946909][ T6723] IPVS: using max 38 ests per chain, 91200 per kthread [ 175.024785][ T1228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.066578][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout [ 175.135452][ T1228] usb 2-1: config 0 descriptor?? [ 175.147929][ T5829] Bluetooth: hci4: command 0x0c1a tx timeout [ 175.154370][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 175.160782][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 175.367899][ T1228] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 175.586222][ T104] IPVS: stop unused estimator thread 0... [ 175.970626][ T6739] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 176.261673][ T1228] usb 2-1: USB disconnect, device number 11 [ 176.261965][ C1] ldusb 2-1:0.55: usb_submit_urb failed (-19) [ 176.367056][ T1228] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 176.521606][ T6745] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 176.763150][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 176.763167][ T30] audit: type=1400 audit(1775791652.976:61): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D3A9201013AFFFE80 pid=6749 comm="syz.3.199" [ 176.981637][ T6757] xt_TPROXY: Can be used only with -p tcp or -p udp [ 177.953658][ T6760] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 177.974534][ T6760] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 178.001396][ T6760] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 178.026675][ T6760] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 178.053336][ T6760] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 178.408637][ T1210] IPVS: starting estimator thread 0... [ 178.509952][ T10] IPVS: starting estimator thread 0... [ 178.546420][ T6779] IPVS: using max 39 ests per chain, 93600 per kthread [ 178.676485][ T6786] IPVS: using max 38 ests per chain, 91200 per kthread [ 178.696515][ T5933] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 178.860231][ T5933] usb 5-1: Using ep0 maxpacket: 32 [ 178.872265][ T5933] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 178.884383][ T5933] usb 5-1: config 0 has no interface number 0 [ 178.892919][ T5933] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 178.904362][ T5933] usb 5-1: config 0 interface 85 has no altsetting 0 [ 178.914115][ T5933] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 178.928503][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.940087][ T5933] usb 5-1: Product: syz [ 178.944997][ T5933] usb 5-1: Manufacturer: syz [ 178.954683][ T5933] usb 5-1: SerialNumber: syz [ 178.965381][ T5933] usb 5-1: config 0 descriptor?? [ 179.226737][ T5829] Bluetooth: hci0: command 0x0c1a tx timeout [ 179.427019][ T6781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.476846][ T6781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.531443][ T5933] appletouch 5-1:0.85: Geyser mode initialized. [ 179.588956][ T5933] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input7 [ 179.774504][ T5933] usb 5-1: USB disconnect, device number 7 [ 179.907243][ T5933] appletouch 5-1:0.85: input: appletouch disconnected [ 180.026571][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 180.032770][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 180.106931][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 180.113133][ T5829] Bluetooth: hci4: command 0x0c1a tx timeout [ 180.212875][ T6808] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 180.391066][ T6812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.215'. [ 180.866865][ T5907] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 181.042865][ T5907] usb 5-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 181.171083][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.217161][ T5907] usb 5-1: Product: syz [ 181.221421][ T5907] usb 5-1: Manufacturer: syz [ 181.252519][ T5907] usb 5-1: SerialNumber: syz [ 181.283763][ T5907] usb 5-1: config 0 descriptor?? [ 181.330812][ T5907] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 181.338071][ T6822] xt_TPROXY: Can be used only with -p tcp or -p udp [ 181.726767][ T5921] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 181.877595][ T5907] sonixb 5-1:0.0: Error reading register 00: -110 [ 181.899800][ T5921] usb 4-1: config index 0 descriptor too short (expected 10276, got 36) [ 181.931504][ T5921] usb 4-1: config 242 has an invalid interface number: 240 but max is 0 [ 181.958860][ T5921] usb 4-1: config 242 has an invalid descriptor of length 0, skipping remainder of the config [ 181.999945][ T5921] usb 4-1: config 242 has no interface number 0 [ 182.030832][ T5921] usb 4-1: config 242 interface 240 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.086575][ T5921] usb 4-1: config 242 interface 240 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.120851][ T6826] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 182.127273][ T5921] usb 4-1: config 242 interface 240 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 182.159254][ T6832] netlink: 'syz.2.219': attribute type 3 has an invalid length. [ 182.167978][ T5921] usb 4-1: config 242 interface 240 has no altsetting 0 [ 182.178562][ T5921] usb 4-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 182.188616][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.197524][ T6826] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 182.197777][ T6826] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 182.250602][ T6826] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 182.292580][ T6826] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 182.333504][ T5921] usb 5-1: USB disconnect, device number 8 [ 182.479624][ T6839] netlink: 'syz.1.222': attribute type 61 has an invalid length. [ 182.491019][ T6839] netlink: 'syz.1.222': attribute type 62 has an invalid length. [ 182.505102][ T6842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.221'. [ 182.529055][ T6842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.221'. [ 182.659378][ T6846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.672255][ T6846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.688718][ T796] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 182.848426][ T796] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.864820][ T796] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 182.886650][ T796] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 182.922562][ T796] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 182.939695][ T796] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 182.955839][ T796] usb 1-1: SerialNumber: syz [ 183.016124][ T6836] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 183.040956][ T796] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 183.071372][ T796] usb-storage 1-1:1.0: USB Mass Storage device detected [ 183.107752][ T796] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 183.132995][ T30] audit: type=1326 audit(1775791659.346:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6849 comm="syz.4.223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8f6c code=0x7ffc0000 [ 183.155607][ T30] audit: type=1326 audit(1775791659.346:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6849 comm="syz.4.223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8f6c code=0x7ffc0000 [ 183.178983][ T30] audit: type=1326 audit(1775791659.376:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6849 comm="syz.4.223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8f6c code=0x7ffc0000 [ 183.203837][ T30] audit: type=1326 audit(1775791659.376:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6849 comm="syz.4.223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8f6c code=0x7ffc0000 [ 183.228906][ T30] audit: type=1326 audit(1775791659.376:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6849 comm="syz.4.223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=316 compat=1 ip=0xf7fb8f6c code=0x7ffc0000 [ 183.261364][ T30] audit: type=1326 audit(1775791659.376:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6849 comm="syz.4.223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8f6c code=0x7ffc0000 [ 183.285655][ T30] audit: type=1326 audit(1775791659.376:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6849 comm="syz.4.223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8f6c code=0x7ffc0000 [ 183.315040][ T30] audit: type=1326 audit(1775791659.376:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6849 comm="syz.4.223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8f6c code=0x7ffc0000 [ 183.339680][ T30] audit: type=1326 audit(1775791659.376:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6849 comm="syz.4.223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb8f6c code=0x7ffc0000 [ 183.362389][ T30] audit: type=1326 audit(1775791659.376:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6849 comm="syz.4.223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8f6c code=0x7ffc0000 [ 183.548358][ T6854] netlink: 44 bytes leftover after parsing attributes in process `syz.4.224'. [ 183.584988][ T6854] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.593377][ T6854] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.626549][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 184.266650][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 184.272784][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 184.272980][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 184.337099][ T6860] FAULT_INJECTION: forcing a failure. [ 184.337099][ T6860] name failslab, interval 1, probability 0, space 0, times 0 [ 184.356505][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout [ 184.365088][ T6860] CPU: 0 UID: 0 PID: 6860 Comm: syz.1.235 Not tainted syzkaller #0 PREEMPT(full) [ 184.365126][ T6860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 184.365140][ T6860] Call Trace: [ 184.365149][ T6860] [ 184.365157][ T6860] dump_stack_lvl+0xe8/0x150 [ 184.365193][ T6860] should_fail_ex+0x412/0x560 [ 184.365254][ T6860] should_failslab+0xa8/0x100 [ 184.365286][ T6860] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 184.365312][ T6860] ? __alloc_skb+0x186/0x7d0 [ 184.365342][ T6860] ? __alloc_skb+0x1d0/0x7d0 [ 184.365358][ T6860] ? __local_bh_enable_ip+0xd0/0x130 [ 184.365382][ T6860] __alloc_skb+0x1d0/0x7d0 [ 184.365399][ T6860] ? __raw_spin_lock_init+0x45/0x100 [ 184.365417][ T6860] audit_log_start+0x416/0xa20 [ 184.365442][ T6860] ? __pfx_audit_log_start+0x10/0x10 [ 184.365465][ T6860] ? get_pid_task+0x20/0x1f0 [ 184.365480][ T6860] ? get_pid_task+0x20/0x1f0 [ 184.365498][ T6860] audit_seccomp+0x63/0x190 [ 184.365515][ T6860] ? clear_bhb_loop+0x40/0x90 [ 184.365531][ T6860] ? clear_bhb_loop+0xe/0x90 [ 184.365549][ T6860] __seccomp_filter+0xd48/0x1ef0 [ 184.365575][ T6860] ? __pfx___seccomp_filter+0x10/0x10 [ 184.365592][ T6860] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 184.365652][ T6860] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 184.365686][ T6860] ? __fget_files+0x3a0/0x420 [ 184.365722][ T6860] ? __secure_computing+0xe1/0x2a0 [ 184.365742][ T6860] __do_fast_syscall_32+0x332/0x640 [ 184.365766][ T6860] ? do_fast_syscall_32+0x33/0x70 [ 184.365786][ T6860] ? asm_int80_emulation+0x1a/0x20 [ 184.365801][ T6860] ? do_int80_emulation+0x274/0x4d0 [ 184.365821][ T6860] ? trace_irq_disable+0x3b/0x150 [ 184.365837][ T6860] do_fast_syscall_32+0x33/0x70 [ 184.365859][ T6860] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 184.365880][ T6860] RIP: 0023:0xf6fcef6c [ 184.365894][ T6860] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 184.365906][ T6860] RSP: 002b:00000000f53bd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000139 [ 184.365922][ T6860] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 184.365931][ T6860] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000010d00 [ 184.365940][ T6860] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 184.365948][ T6860] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 184.365956][ T6860] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 184.365977][ T6860] [ 184.825189][ T6865] kvm: kvm [6864]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x11e) = 0xbe70a111 [ 185.433600][ T1228] usb 1-1: USB disconnect, device number 7 [ 186.778962][ T6890] xt_TPROXY: Can be used only with -p tcp or -p udp [ 187.571552][ T6902] netlink: 44 bytes leftover after parsing attributes in process `syz.0.236'. [ 187.595824][ T6902] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.603557][ T6902] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.632691][ T6894] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 187.643023][ T6894] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 187.662973][ T6894] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 187.673128][ T6894] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 187.683284][ T6894] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 187.956648][ T1228] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 188.118265][ T1228] usb 2-1: Using ep0 maxpacket: 8 [ 188.130582][ T1228] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 188.156595][ T1228] usb 2-1: config 0 has no interface number 0 [ 188.163330][ T1228] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 188.217646][ T1228] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 188.256538][ T796] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 188.266143][ T1228] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 188.309203][ T1228] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 188.356141][ T1228] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 188.378644][ T1228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.419428][ T796] usb 5-1: Using ep0 maxpacket: 8 [ 188.439212][ T796] usb 5-1: unable to get BOS descriptor or descriptor too short [ 188.464162][ T796] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 188.489372][ T796] usb 5-1: config 1 interface 2 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 188.510303][ T796] usb 5-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice= 0.40 [ 188.525629][ T796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.536509][ T796] usb 5-1: Product: syz [ 188.541122][ T796] usb 5-1: Manufacturer: syz [ 188.552545][ T796] usb 5-1: SerialNumber: syz [ 188.582254][ T1228] usb 2-1: config 0 descriptor?? [ 188.608830][ T1228] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 188.764652][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 188.805224][ T796] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 188.849645][ T796] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 188.884902][ T796] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 188.916629][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 188.944931][ T10] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.968257][ T796] usb 5-1: USB disconnect, device number 9 [ 188.974218][ T10] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.989517][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 188.998581][ T10] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 189.014777][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.028468][ T5933] usb 2-1: USB disconnect, device number 12 [ 189.034474][ C1] ldusb 2-1:0.55: usb_submit_urb failed (-19) [ 189.054292][ T10] usb 1-1: config 0 descriptor?? [ 189.066668][ T5933] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 189.259931][ T5907] usb 4-1: USB disconnect, device number 6 [ 189.397563][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 189.506587][ T10] mcp2221 0003:04D8:00DD.0001: unbalanced delimiter at end of report description [ 189.537255][ T10] mcp2221 0003:04D8:00DD.0001: can't parse reports [ 189.572059][ T10] mcp2221 0003:04D8:00DD.0001: probe with driver mcp2221 failed with error -22 [ 189.696593][ T5907] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 189.706601][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout [ 189.706740][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 189.712821][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 189.720255][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 189.879822][ T5907] usb 4-1: config index 0 descriptor too short (expected 10276, got 36) [ 189.911208][ T5907] usb 4-1: config 242 has an invalid interface number: 240 but max is 0 [ 189.938116][ T5907] usb 4-1: config 242 has an invalid descriptor of length 0, skipping remainder of the config [ 189.977487][ T5907] usb 4-1: config 242 has no interface number 0 [ 189.998854][ T5907] usb 4-1: config 242 interface 240 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.026796][ T5907] usb 4-1: config 242 interface 240 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.050033][ T5907] usb 4-1: config 242 interface 240 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 190.083158][ T5907] usb 4-1: config 242 interface 240 has no altsetting 0 [ 190.099323][ T5907] usb 4-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 190.120262][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.493286][ T6929] vcan0: tx drop: invalid sa for name 0x0000000000000053 [ 191.117737][ T6942] xt_TPROXY: Can be used only with -p tcp or -p udp [ 191.176551][ T6930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.356187][ T6949] fuse: Bad value for 'fd' [ 191.411224][ T6930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.624519][ T5933] usb 1-1: USB disconnect, device number 8 [ 192.040208][ T6947] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 192.078465][ T6947] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 192.096291][ T6947] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 192.130128][ T6947] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 192.166617][ T6947] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 192.824285][ T6960] netlink: 'syz.1.252': attribute type 5 has an invalid length. [ 192.841692][ T5933] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 192.856555][ T5907] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 193.028378][ T5933] usb 5-1: config index 0 descriptor too short (expected 10276, got 36) [ 193.042475][ T5907] usb 1-1: Using ep0 maxpacket: 8 [ 193.058651][ T5933] usb 5-1: config 242 has an invalid interface number: 240 but max is 0 [ 193.087652][ T5933] usb 5-1: config 242 has an invalid descriptor of length 0, skipping remainder of the config [ 193.121251][ T5933] usb 5-1: config 242 has no interface number 0 [ 193.144408][ T5933] usb 5-1: config 242 interface 240 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.187792][ T5933] usb 5-1: config 242 interface 240 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.216546][ T5933] usb 5-1: config 242 interface 240 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 193.245403][ T6962] sctp: [Deprecated]: syz.1.254 (pid 6962) Use of int in maxseg socket option. [ 193.245403][ T6962] Use struct sctp_assoc_value instead [ 193.266537][ T5933] usb 5-1: config 242 interface 240 has no altsetting 0 [ 193.281380][ T5933] usb 5-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 193.324922][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.386559][ T5829] Bluetooth: hci0: command 0x0c1a tx timeout [ 193.412886][ T10] usb 4-1: USB disconnect, device number 7 [ 193.640175][ T5907] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 193.649014][ T6971] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 193.725442][ T5907] usb 1-1: config 0 has no interface number 0 [ 193.818117][ T5907] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 193.930020][ T5907] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 193.982704][ T5907] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 194.034725][ T5907] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 194.106747][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 194.112836][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout [ 194.126850][ T5907] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 194.136647][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.186569][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 194.192803][ T5829] Bluetooth: hci4: command 0x0c1a tx timeout [ 194.229846][ T5907] usb 1-1: config 0 descriptor?? [ 194.372753][ T5907] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 194.446478][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 194.510643][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.517229][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.688663][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 194.738144][ T10] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 194.772981][ T10] usb 2-1: config 0 has no interface number 0 [ 194.807033][ T1228] usb 1-1: USB disconnect, device number 9 [ 194.813084][ C0] ldusb 1-1:0.55: usb_submit_urb failed (-19) [ 194.859420][ T10] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 194.920974][ T6990] ldusb 1-1:0.55: Couldn't submit interrupt_out_urb -19 [ 194.921605][ T10] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 194.973959][ T6975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.988480][ T10] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 195.009977][ T10] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 195.044166][ T10] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 195.064423][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.095498][ T10] usb 2-1: config 0 descriptor?? [ 195.162201][ T6975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.177254][ T10] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 195.231002][ T1228] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 195.662005][ T1228] IPVS: starting estimator thread 0... [ 195.743802][ T1228] usb 2-1: USB disconnect, device number 13 [ 195.743854][ C0] ldusb 2-1:0.55: usb_submit_urb failed (-19) [ 195.756570][ T6995] IPVS: using max 38 ests per chain, 91200 per kthread [ 196.577004][ T3515] IPVS: stop unused estimator thread 0... [ 196.793068][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 196.793085][ T30] audit: type=1326 audit(1775791673.006:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7002 comm="syz.2.263" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feef6c code=0x7ffc0000 [ 196.879476][ T30] audit: type=1326 audit(1775791673.046:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7002 comm="syz.2.263" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feef6c code=0x7ffc0000 [ 196.947551][ T30] audit: type=1326 audit(1775791673.056:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7002 comm="syz.2.263" exe="/root/syz-executor" sig=0 arch=40000003 syscall=316 compat=1 ip=0xf6feef6c code=0x7ffc0000 [ 196.996856][ T1228] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 197.064926][ T7007] pim6reg: entered allmulticast mode [ 197.162757][ T30] audit: type=1326 audit(1775791673.056:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7002 comm="syz.2.263" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feef6c code=0x7ffc0000 [ 197.413902][ T30] audit: type=1326 audit(1775791673.056:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7002 comm="syz.2.263" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feef6c code=0x7ffc0000 [ 197.453436][ T7015] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 197.518864][ T7017] netlink: 'syz.1.267': attribute type 1 has an invalid length. [ 197.596625][ T5907] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 197.698832][ T7020] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 197.710713][ T30] audit: type=1326 audit(1775791673.066:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7002 comm="syz.2.263" exe="/root/syz-executor" sig=0 arch=40000003 syscall=254 compat=1 ip=0xf6feef6c code=0x7ffc0000 [ 197.764447][ T30] audit: type=1326 audit(1775791673.066:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7002 comm="syz.2.263" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feef6c code=0x7ffc0000 [ 197.829633][ T5907] usb 1-1: config index 0 descriptor too short (expected 10276, got 36) [ 197.856617][ T30] audit: type=1326 audit(1775791673.066:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7002 comm="syz.2.263" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feef6c code=0x7ffc0000 [ 197.907219][ T5907] usb 1-1: config 242 has an invalid interface number: 240 but max is 0 [ 197.938296][ T5907] usb 1-1: config 242 has an invalid descriptor of length 0, skipping remainder of the config [ 197.967912][ T5921] usb 5-1: USB disconnect, device number 10 [ 197.975055][ T30] audit: type=1326 audit(1775791673.066:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7002 comm="syz.2.263" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6feef6c code=0x7ffc0000 [ 198.003160][ T5907] usb 1-1: config 242 has no interface number 0 [ 198.019766][ T5907] usb 1-1: config 242 interface 240 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.037424][ T5907] usb 1-1: config 242 interface 240 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.053847][ T30] audit: type=1326 audit(1775791673.066:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7002 comm="syz.2.263" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feef6c code=0x7ffc0000 [ 198.091768][ T5907] usb 1-1: config 242 interface 240 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 198.105602][ T796] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 198.154262][ T5907] usb 1-1: config 242 interface 240 has no altsetting 0 [ 198.234560][ T5907] usb 1-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 198.250443][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.286559][ T796] usb 4-1: Using ep0 maxpacket: 32 [ 198.303030][ T796] usb 4-1: config 0 has an invalid interface number: 68 but max is 0 [ 198.316748][ T7028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.342127][ T796] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 198.388516][ T796] usb 4-1: config 0 has no interface number 0 [ 198.427788][ T796] usb 4-1: New USB device found, idVendor=045e, idProduct=0703, bcdDevice=6e.c0 [ 198.451401][ T796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.462106][ T796] usb 4-1: Product: syz [ 198.473228][ T796] usb 4-1: Manufacturer: syz [ 198.498262][ T796] usb 4-1: SerialNumber: syz [ 198.564637][ T796] usb 4-1: config 0 descriptor?? [ 198.848177][ T7020] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 198.877188][ T7015] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 198.893711][ T7020] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 198.918840][ T7020] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 198.937207][ T7032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.009288][ T7020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.024347][ T7032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.034939][ T7020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.059461][ T7020] syz.3.265 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 199.081404][ T7020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.265'. [ 199.836525][ T1228] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 200.112606][ T1228] usb 3-1: Using ep0 maxpacket: 8 [ 200.155889][ T1228] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 200.175999][ T1228] usb 3-1: config 0 has no interface number 0 [ 200.201489][ T1228] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 200.230386][ T1228] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 200.285243][ T1228] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 200.363639][ T1228] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 200.450688][ T1228] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 200.512832][ T1228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.576370][ T1228] usb 3-1: config 0 descriptor?? [ 200.639914][ T1228] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 200.694728][ T796] uvcvideo 4-1:0.68: Found Unit with invalid ID 0 [ 200.716711][ T796] uvcvideo 4-1:0.68: Found UVC 0.40 device syz (045e:0703) [ 200.724475][ T796] uvcvideo 4-1:0.68: No valid video chain found. [ 200.751348][ T796] usb 4-1: USB disconnect, device number 8 [ 201.145948][ T1228] usb 3-1: USB disconnect, device number 8 [ 201.146147][ C1] ldusb 3-1:0.55: usb_submit_urb failed (-19) [ 201.983707][ T796] usb 1-1: USB disconnect, device number 10 [ 202.422909][ T1228] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 202.466566][ T796] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 202.641359][ T796] usb 1-1: config index 0 descriptor too short (expected 10276, got 36) [ 202.669248][ T796] usb 1-1: config 242 has an invalid interface number: 240 but max is 0 [ 202.703594][ T796] usb 1-1: config 242 has an invalid descriptor of length 0, skipping remainder of the config [ 202.730206][ T796] usb 1-1: config 242 has no interface number 0 [ 202.748163][ T796] usb 1-1: config 242 interface 240 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.777598][ T796] usb 1-1: config 242 interface 240 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.790643][ T7071] loop7: detected capacity change from 0 to 7 [ 202.821729][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 202.831666][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 202.840670][ T796] usb 1-1: config 242 interface 240 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 202.875530][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 202.885392][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 202.896564][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 202.906429][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 202.915751][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 202.925610][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 202.934161][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 202.943972][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 202.952511][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 202.962164][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 202.966869][ T796] usb 1-1: config 242 interface 240 has no altsetting 0 [ 202.977729][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 202.987907][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 202.995803][ T7071] ldm_validate_partition_table(): Disk read failed. [ 203.013894][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 203.023581][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 203.036425][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 203.041343][ T796] usb 1-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 203.046128][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 203.064078][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 203.073776][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 203.086250][ T7071] Dev loop7: unable to read RDB block 0 [ 203.100430][ T796] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.110129][ T7071] loop7: unable to read partition table [ 203.116055][ T7071] loop7: partition table beyond EOD, truncated [ 203.130683][ T7071] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 203.260178][ T7074] netlink: 1820 bytes leftover after parsing attributes in process `syz.3.283'. [ 203.300054][ T7074] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.333165][ T7078] xt_TPROXY: Can be used only with -p tcp or -p udp [ 203.574384][ T7088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.628333][ T7088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.798524][ T7086] netlink: 12 bytes leftover after parsing attributes in process `syz.1.286'. [ 203.814354][ T7094] syz_tun: entered allmulticast mode [ 203.869068][ T7085] syz_tun: left allmulticast mode [ 204.377358][ T7081] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 204.399532][ T7081] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 204.452624][ T7081] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 204.469169][ T7081] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 204.486193][ T7081] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 204.632704][ T7087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.825542][ T7087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.116577][ T1228] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 205.299139][ T1228] usb 3-1: config index 0 descriptor too short (expected 10276, got 36) [ 205.310665][ T1228] usb 3-1: config 242 has an invalid interface number: 240 but max is 0 [ 205.319682][ T1228] usb 3-1: config 242 has an invalid descriptor of length 0, skipping remainder of the config [ 205.390832][ T1228] usb 3-1: config 242 has no interface number 0 [ 205.425513][ T1228] usb 3-1: config 242 interface 240 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.441912][ T1228] usb 3-1: config 242 interface 240 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.452796][ T1228] usb 3-1: config 242 interface 240 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 205.467607][ T1228] usb 3-1: config 242 interface 240 has no altsetting 0 [ 205.474664][ T1228] usb 3-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 205.508094][ T1228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.626693][ T5829] Bluetooth: hci0: command 0x0c1a tx timeout [ 205.646950][ T10] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 205.819887][ T10] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 205.841919][ T10] usb 2-1: config 0 has no interface number 0 [ 205.863565][ T10] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 205.904530][ T10] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 205.940356][ T10] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 205.974283][ T7123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.992045][ T7123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.020118][ T10] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 206.044504][ T10] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 206.066601][ T10] usb 2-1: Product: syz [ 206.071053][ T10] usb 2-1: SerialNumber: syz [ 206.123485][ T10] usb 2-1: config 0 descriptor?? [ 206.159290][ T10] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 206.219046][ T10] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input9 [ 206.236609][ T5921] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 206.417154][ T5921] usb 4-1: Using ep0 maxpacket: 8 [ 206.427020][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout [ 206.445209][ T5921] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 206.477133][ T5921] usb 4-1: config 0 has no interface number 0 [ 206.493181][ T5921] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 206.516593][ T5829] Bluetooth: hci4: command 0x0c1a tx timeout [ 206.522684][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 206.522699][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 206.545081][ T5907] usb 1-1: USB disconnect, device number 11 [ 206.577350][ T5921] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 206.643561][ T5921] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 206.708768][ T5921] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 206.753910][ T5921] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 206.779569][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.798336][ T5921] usb 4-1: config 0 descriptor?? [ 206.867482][ T5921] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 206.935486][ T7128] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 206.943024][ T7128] IPv6: NLM_F_CREATE should be set when creating new route [ 206.950420][ T7128] IPv6: NLM_F_CREATE should be set when creating new route [ 206.957720][ T7128] IPv6: NLM_F_CREATE should be set when creating new route [ 207.224101][ T7132] FAULT_INJECTION: forcing a failure. [ 207.224101][ T7132] name failslab, interval 1, probability 0, space 0, times 0 [ 207.240275][ T7132] CPU: 0 UID: 0 PID: 7132 Comm: syz.4.297 Not tainted syzkaller #0 PREEMPT(full) [ 207.240307][ T7132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 207.240326][ T7132] Call Trace: [ 207.240332][ T7132] [ 207.240338][ T7132] dump_stack_lvl+0xe8/0x150 [ 207.240364][ T7132] should_fail_ex+0x412/0x560 [ 207.240392][ T7132] should_failslab+0xa8/0x100 [ 207.240414][ T7132] __kmalloc_noprof+0xe8/0x760 [ 207.240431][ T7132] ? sock_kmalloc+0xd6/0x160 [ 207.240456][ T7132] sock_kmalloc+0xd6/0x160 [ 207.240477][ T7132] cmsghdr_from_user_compat_to_kern+0x2d1/0x810 [ 207.240506][ T7132] ? __pfx_cmsghdr_from_user_compat_to_kern+0x10/0x10 [ 207.240533][ T7132] ____sys_sendmsg+0x220/0x9f0 [ 207.240559][ T7132] ? __pfx_____sys_sendmsg+0x10/0x10 [ 207.240583][ T7132] ? kfree+0x4d/0x630 [ 207.240623][ T7132] ___sys_sendmsg+0x2a5/0x360 [ 207.240666][ T7132] ? __pfx____sys_sendmsg+0x10/0x10 [ 207.240705][ T7132] ? kstrtoull+0x12f/0x1d0 [ 207.240758][ T7132] __sys_sendmmsg+0x2e7/0x4e0 [ 207.240783][ T7132] ? __pfx___sys_sendmmsg+0x10/0x10 [ 207.240822][ T7132] ? fput+0xa0/0xd0 [ 207.240845][ T7132] ? ksys_write+0x242/0x270 [ 207.240867][ T7132] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 207.240888][ T7132] __do_fast_syscall_32+0x20d/0x640 [ 207.240912][ T7132] ? do_fast_syscall_32+0x33/0x70 [ 207.240933][ T7132] ? asm_int80_emulation+0x1a/0x20 [ 207.240948][ T7132] ? do_int80_emulation+0x274/0x4d0 [ 207.240969][ T7132] ? trace_irq_disable+0x3b/0x150 [ 207.240985][ T7132] do_fast_syscall_32+0x33/0x70 [ 207.241007][ T7132] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 207.241027][ T7132] RIP: 0023:0xf7fb8f6c [ 207.241041][ T7132] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 207.241053][ T7132] RSP: 002b:00000000f547650c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 207.241070][ T7132] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080006480 [ 207.241080][ T7132] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 207.241088][ T7132] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 207.241097][ T7132] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 207.241105][ T7132] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 207.241126][ T7132] [ 207.873945][ T5921] usb 4-1: USB disconnect, device number 9 [ 207.874471][ C0] ldusb 4-1:0.55: usb_submit_urb failed (-19) [ 208.357794][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 208.358861][ T5907] usb 2-1: USB disconnect, device number 14 [ 208.365661][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 208.476519][ T5933] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 208.496221][ T5907] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 208.637692][ T5933] usb 1-1: Using ep0 maxpacket: 32 [ 208.647414][ T5933] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 208.666590][ T5933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.728570][ T5933] usb 1-1: config 0 descriptor?? [ 208.742224][ T5933] as10x_usb: device has been detected [ 208.774992][ T5933] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 208.819527][ T5933] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 208.921200][ T5933] as10x_usb: error during firmware upload part1 [ 208.931786][ T5933] Registered device nBox DVB-T Dongle [ 209.297930][ T5907] IPVS: starting estimator thread 0... [ 209.397402][ T7151] IPVS: using max 27 ests per chain, 64800 per kthread [ 209.602175][ T7158] xt_TPROXY: Can be used only with -p tcp or -p udp [ 209.683480][ T3515] IPVS: stop unused estimator thread 0... [ 209.745132][ T5921] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 209.877031][ T5933] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 210.155011][ T5933] usb 2-1: Using ep0 maxpacket: 8 [ 210.259306][ T5933] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 210.300850][ T5933] usb 2-1: config 0 has no interface number 0 [ 210.328823][ T5933] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 210.409994][ T5933] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 210.505700][ T5933] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 210.509846][ T7159] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 210.540492][ T7159] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 210.549026][ T7159] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 210.555660][ T7159] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 210.562153][ T5933] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 210.562579][ T7159] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 210.626700][ T5933] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 210.638103][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.661454][ T5933] usb 2-1: config 0 descriptor?? [ 210.695293][ T5933] ldusb 2-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 210.995383][ T7164] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 211.007743][ T5893] usb 2-1: USB disconnect, device number 15 [ 211.023173][ T5893] ldusb 2-1:0.55: LD USB Device #1 now disconnected [ 211.181947][ T10] usb 3-1: USB disconnect, device number 9 [ 211.224022][ T5893] usb 1-1: USB disconnect, device number 12 [ 211.285733][ T5893] Unregistered device nBox DVB-T Dongle [ 211.292412][ T5893] as10x_usb: device has been disconnected [ 211.866527][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 212.586546][ T5831] Bluetooth: hci4: command 0x0c1a tx timeout [ 212.586572][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 212.586658][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 212.593157][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 212.688365][ T7188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.312'. [ 213.126526][ T5921] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 213.516560][ T5921] usb 5-1: Using ep0 maxpacket: 16 [ 213.548264][ T5921] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 213.591019][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 213.707387][ T24] IPVS: starting estimator thread 0... [ 213.756889][ T5921] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 213.771380][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.800540][ T5921] usb 5-1: Product: syz [ 213.810697][ T5921] usb 5-1: Manufacturer: syz [ 213.835804][ T5921] usb 5-1: SerialNumber: syz [ 213.846703][ T7203] IPVS: using max 38 ests per chain, 91200 per kthread [ 213.907807][ T5921] usb 5-1: config 0 descriptor?? [ 213.940602][ T5921] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 214.016047][ T5921] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 214.576537][ T5921] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 214.588127][ T5921] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 214.816536][ T5893] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 214.976523][ T5893] usb 3-1: Using ep0 maxpacket: 32 [ 215.012837][ T5893] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 215.024267][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.034606][ T12] IPVS: stop unused estimator thread 0... [ 215.043693][ T5893] usb 3-1: config 0 descriptor?? [ 215.086274][ T5893] as10x_usb: device has been detected [ 215.107751][ T5893] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 215.178172][ T5893] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 215.217369][ T5921] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 215.245944][ T5893] as10x_usb: error during firmware upload part1 [ 215.262649][ T5893] Registered device nBox DVB-T Dongle [ 215.293642][ T5921] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 215.368099][ T5921] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 215.392140][ T1210] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 215.407831][ T5921] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 215.936707][ T1210] usb 1-1: Using ep0 maxpacket: 8 [ 215.977336][ T1210] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 215.985943][ T1210] usb 1-1: config 0 has no interface number 0 [ 215.994233][ T1210] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 216.005782][ T1210] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 216.034363][ T1210] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 216.062005][ T1210] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 216.091843][ T1210] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 216.110923][ T1210] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.141590][ T1210] usb 1-1: config 0 descriptor?? [ 216.201191][ T1210] ldusb 1-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 216.509238][ T5921] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 216.521887][ T5921] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 216.578234][ T5921] usb 1-1: USB disconnect, device number 13 [ 216.617331][ T5921] ldusb 1-1:0.55: LD USB Device #1 now disconnected [ 216.952926][ T5893] usb 5-1: USB disconnect, device number 11 [ 217.526476][ T5921] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 217.577962][ T5933] usb 3-1: USB disconnect, device number 10 [ 217.671114][ T5933] Unregistered device nBox DVB-T Dongle [ 217.695395][ T5933] as10x_usb: device has been disconnected [ 217.711065][ T5921] usb 5-1: Using ep0 maxpacket: 8 [ 217.765939][ T5921] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 217.784269][ T5921] usb 5-1: config 0 has no interface number 0 [ 217.814604][ T5921] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 217.865777][ T5921] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 217.894888][ T5921] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 217.930419][ T5921] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 217.972981][ T5921] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 217.992397][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.021010][ T5921] usb 5-1: config 0 descriptor?? [ 218.134499][ T5921] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 218.372179][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 218.372200][ T30] audit: type=1326 audit(1775791694.576:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7243 comm="syz.3.327" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 218.444401][ T7239] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 218.587636][ T30] audit: type=1326 audit(1775791694.576:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7243 comm="syz.3.327" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 218.653783][ T30] audit: type=1326 audit(1775791694.576:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7243 comm="syz.3.327" exe="/root/syz-executor" sig=0 arch=40000003 syscall=316 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 218.694672][ T1210] usb 5-1: USB disconnect, device number 12 [ 218.731785][ T1210] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 218.886480][ T30] audit: type=1326 audit(1775791694.576:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7243 comm="syz.3.327" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 218.980487][ T30] audit: type=1326 audit(1775791694.576:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7243 comm="syz.3.327" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 219.010330][ T7260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.329'. [ 219.056567][ T5933] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 219.072399][ T30] audit: type=1326 audit(1775791694.576:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7243 comm="syz.3.327" exe="/root/syz-executor" sig=0 arch=40000003 syscall=254 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 219.174352][ T30] audit: type=1326 audit(1775791694.576:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7243 comm="syz.3.327" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 219.293070][ T30] audit: type=1326 audit(1775791694.576:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7243 comm="syz.3.327" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 219.301992][ T5933] usb 3-1: config index 0 descriptor too short (expected 10276, got 36) [ 219.396682][ T5933] usb 3-1: config 242 has an invalid interface number: 240 but max is 0 [ 219.405102][ T5933] usb 3-1: config 242 has an invalid descriptor of length 0, skipping remainder of the config [ 219.447187][ T30] audit: type=1326 audit(1775791694.576:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7243 comm="syz.3.327" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 219.485669][ T30] audit: type=1326 audit(1775791694.576:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7243 comm="syz.3.327" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 219.516544][ T5933] usb 3-1: config 242 has no interface number 0 [ 219.527667][ T5933] usb 3-1: config 242 interface 240 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.582027][ T5933] usb 3-1: config 242 interface 240 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.610238][ T5933] usb 3-1: config 242 interface 240 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 219.645463][ T5933] usb 3-1: config 242 interface 240 has no altsetting 0 [ 219.676507][ T5933] usb 3-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 219.721367][ T5933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.807734][ T5893] usb 3-1: USB disconnect, device number 11 [ 222.684566][ T7299] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 222.854223][ T7300] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 222.944419][ T7301] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 222.995814][ T7300] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 223.032679][ T7300] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 223.068229][ T7300] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 223.366538][ T5933] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 223.546868][ T5933] usb 5-1: Using ep0 maxpacket: 32 [ 223.594588][ T5933] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.687940][ T5933] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 223.745648][ T5933] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 223.770542][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.867331][ T5933] usb 5-1: Product: syz [ 223.912465][ T5933] usb 5-1: Manufacturer: syz [ 223.950151][ T5933] usb 5-1: SerialNumber: syz [ 224.000489][ T5933] usb 5-1: config 0 descriptor?? [ 224.152715][ T7315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.346'. [ 224.570264][ T7325] netlink: 16 bytes leftover after parsing attributes in process `syz.3.349'. [ 224.621082][ T7300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.340'. [ 224.932355][ T7330] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 225.437426][ T5893] IPVS: starting estimator thread 0... [ 225.556606][ T7334] IPVS: using max 38 ests per chain, 91200 per kthread [ 226.240411][ T5933] usb 5-1: USB disconnect, device number 13 [ 227.844805][ T7376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.362'. [ 229.429523][ T7386] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 229.609248][ T5921] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 229.766502][ T5921] usb 4-1: Using ep0 maxpacket: 32 [ 229.779712][ T5921] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 229.791240][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.808993][ T5921] usb 4-1: config 0 descriptor?? [ 229.821913][ T5921] as10x_usb: device has been detected [ 229.840983][ T5921] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 229.881306][ T5921] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 229.932142][ T5921] as10x_usb: error during firmware upload part1 [ 229.960479][ T5921] Registered device nBox DVB-T Dongle [ 231.091459][ T7412] x_tables: ip6_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 231.356709][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 231.589539][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.683705][ T10] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 231.736251][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.847759][ T10] usb 3-1: config 0 descriptor?? [ 231.928272][ T7422] netlink: 4 bytes leftover after parsing attributes in process `syz.4.376'. [ 232.140638][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 232.154987][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 232.309796][ T10] usb 3-1: USB disconnect, device number 12 [ 232.417925][ T1228] usb 4-1: USB disconnect, device number 10 [ 232.521452][ T1228] Unregistered device nBox DVB-T Dongle [ 232.568106][ T1228] as10x_usb: device has been disconnected [ 232.726522][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 232.966477][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 233.002721][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.024216][ T10] usb 3-1: New USB device found, idVendor=0911, idProduct=3333, bcdDevice= 0.40 [ 233.061122][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.093719][ T10] usb 3-1: config 0 descriptor?? [ 233.246521][ T1210] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 233.442026][ T1210] usb 2-1: config index 0 descriptor too short (expected 10276, got 36) [ 233.456632][ T1210] usb 2-1: config 242 has an invalid interface number: 240 but max is 0 [ 233.481391][ T1210] usb 2-1: config 242 has an invalid descriptor of length 0, skipping remainder of the config [ 233.503541][ T1210] usb 2-1: config 242 has no interface number 0 [ 233.524950][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 233.536701][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 233.545225][ T1210] usb 2-1: config 242 interface 240 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.587721][ T10] usb 3-1: USB disconnect, device number 13 [ 233.593967][ T1210] usb 2-1: config 242 interface 240 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.633200][ T1210] usb 2-1: config 242 interface 240 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 233.659666][ T1210] usb 2-1: config 242 interface 240 has no altsetting 0 [ 233.669173][ T1210] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 233.699630][ T7440] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 233.718048][ T1210] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.754756][ T7440] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 233.829961][ T7441] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 234.011377][ T7441] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 234.054553][ T7441] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 234.091372][ T7441] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 234.380715][ T1210] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 234.586499][ T1210] usb 5-1: Using ep0 maxpacket: 32 [ 234.618328][ T1210] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.655902][ T1210] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 234.696549][ T1210] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 234.726134][ T1210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.753321][ T1210] usb 5-1: Product: syz [ 234.766521][ T1210] usb 5-1: Manufacturer: syz [ 234.782522][ T1210] usb 5-1: SerialNumber: syz [ 234.823388][ T7451] netlink: 'syz.3.383': attribute type 3 has an invalid length. [ 234.838134][ T7451] netlink: 16 bytes leftover after parsing attributes in process `syz.3.383'. [ 234.937407][ T1210] usb 5-1: config 0 descriptor?? [ 236.210876][ T5921] usb 2-1: USB disconnect, device number 16 [ 237.432402][ T1210] usb 5-1: USB disconnect, device number 14 [ 237.707695][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 237.812482][ T7480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.390'. [ 237.937447][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 238.100209][ T10] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 238.128470][ T10] usb 3-1: config 0 has no interface number 0 [ 238.142356][ T10] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 238.168941][ T10] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 238.204031][ T10] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 238.249311][ T10] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 238.309059][ T1210] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 238.331984][ T10] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 238.379274][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.467072][ T10] usb 3-1: config 0 descriptor?? [ 238.509156][ T1210] usb 1-1: Using ep0 maxpacket: 32 [ 238.524513][ T1210] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 238.569153][ T1210] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.630526][ T1210] usb 1-1: config 0 descriptor?? [ 238.692550][ T1210] as10x_usb: device has been detected [ 238.727195][ T1210] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 238.807518][ T1210] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 238.839612][ T7485] ------------[ cut here ]------------ [ 238.845155][ T7485] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 238.845179][ T7485] WARNING: kernel/locking/mutex.c:593 at __mutex_lock+0x10a4/0x1300, CPU#0: syz.0.387/7485 [ 238.861428][ T7485] Modules linked in: [ 238.865445][ T7485] CPU: 0 UID: 0 PID: 7485 Comm: syz.0.387 Tainted: G L syzkaller #0 PREEMPT(full) [ 238.876382][ T7485] Tainted: [L]=SOFTLOCKUP [ 238.881032][ T7485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 238.891473][ T7485] RIP: 0010:__mutex_lock+0x10ab/0x1300 [ 238.897695][ T7485] Code: 12 90 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 33 02 00 00 83 3d d9 c6 60 04 00 75 13 48 8d 3d 0c dc 63 04 48 c7 c6 c0 e0 cc 8b <67> 48 0f b9 3a 90 e9 ac f0 ff ff 90 0f 0b 90 e9 73 f4 ff ff 90 0f [ 238.918205][ T7485] RSP: 0018:ffffc90003987880 EFLAGS: 00010246 [ 238.924417][ T7485] RAX: 0000000000000000 RBX: 1ffff92000730f28 RCX: 0000000000080000 [ 238.933046][ T7485] RDX: ffffc90005fc9000 RSI: ffffffff8bcce0c0 RDI: ffffffff90152100 [ 238.941147][ T7485] RBP: ffffc90003987a38 R08: ffffffff90120bc3 R09: 1ffffffff2024178 [ 238.949355][ T7485] R10: dffffc0000000000 R11: fffffbfff2024179 R12: ffff8880345e8b60 [ 238.957475][ T7485] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 238.965649][ T7485] FS: 0000000000000000(0000) GS:ffff888125454000(0063) knlGS:00000000f541db40 [ 238.974750][ T7485] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 238.981573][ T7485] CR2: 000000000c3ce935 CR3: 000000007a396000 CR4: 00000000003526f0 [ 238.989704][ T7485] Call Trace: [ 238.992999][ T7485] [ 238.996033][ T7485] ? __mutex_lock+0x319/0x1300 [ 239.001378][ T7485] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 239.007506][ T7485] ? dmx_section_feed_allocate_filter+0x34f/0x3e0 [ 239.013959][ T7485] ? __pfx___mutex_lock+0x10/0x10 [ 239.019048][ T7485] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 239.024711][ T7485] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 239.030739][ T7485] ? do_raw_spin_lock+0x12b/0x2f0 [ 239.035961][ T7485] as102_dvb_dmx_start_feed+0x70/0x290 [ 239.041478][ T7485] dmx_section_feed_start_filtering+0x518/0x6c0 [ 239.048141][ T7485] dvb_dmxdev_filter_start+0xcf4/0x10e0 [ 239.053845][ T7485] ? dvb_dmxdev_filter_set+0x2d1/0x580 [ 239.059646][ T7485] dvb_demux_do_ioctl+0x470/0x540 [ 239.064783][ T7485] dvb_usercopy+0x199/0x2e0 [ 239.069455][ T7485] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 239.075023][ T7485] ? __pfx_dvb_usercopy+0x10/0x10 [ 239.080138][ T7485] ? __fget_files+0x3a0/0x420 [ 239.085035][ T7485] dvb_demux_ioctl+0x29/0x40 [ 239.089797][ T7485] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 239.095323][ T7485] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 239.101962][ T7485] ? kmem_cache_free+0x187/0x630 [ 239.107335][ T7485] ? __se_sys_futex_time32+0x3ab/0x440 [ 239.112827][ T7485] ? rcu_is_watching+0x15/0xb0 [ 239.117632][ T7485] __do_fast_syscall_32+0x20d/0x640 [ 239.122888][ T7485] ? do_fast_syscall_32+0x33/0x70 [ 239.127981][ T7485] ? asm_int80_emulation+0x1a/0x20 [ 239.133208][ T7485] ? do_int80_emulation+0x274/0x4d0 [ 239.138532][ T7485] ? trace_irq_disable+0x3b/0x150 [ 239.143839][ T7485] do_fast_syscall_32+0x33/0x70 [ 239.148817][ T7485] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 239.155215][ T7485] RIP: 0023:0xf702ef6c [ 239.159429][ T7485] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 239.179301][ T7485] RSP: 002b:00000000f541d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 239.187780][ T7485] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000403c6f2b [ 239.195782][ T7485] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 239.204307][ T7485] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 239.212670][ T7485] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 239.220676][ T7485] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 239.228747][ T7485] [ 239.231779][ T7485] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 239.239085][ T7485] CPU: 0 UID: 0 PID: 7485 Comm: syz.0.387 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.249960][ T7485] Tainted: [L]=SOFTLOCKUP [ 239.254294][ T7485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 239.264356][ T7485] Call Trace: [ 239.267660][ T7485] [ 239.270597][ T7485] vpanic+0x56c/0xa60 [ 239.274621][ T7485] ? __pfx__printk+0x10/0x10 [ 239.279407][ T7485] ? __pfx_vpanic+0x10/0x10 [ 239.284028][ T7485] ? is_bpf_text_address+0x292/0x2b0 [ 239.289336][ T7485] ? is_bpf_text_address+0x26/0x2b0 [ 239.294850][ T7485] panic+0xc5/0xd0 [ 239.298687][ T7485] ? __pfx_panic+0x10/0x10 [ 239.303131][ T7485] __warn+0x315/0x4f0 [ 239.307133][ T7485] ? __mutex_lock+0x10a4/0x1300 [ 239.311999][ T7485] ? __mutex_lock+0x10a4/0x1300 [ 239.317009][ T7485] __report_bug+0x29a/0x540 [ 239.321634][ T7485] ? dvb_demux_do_ioctl+0x470/0x540 [ 239.327031][ T7485] ? __mutex_lock+0x10a4/0x1300 [ 239.331897][ T7485] ? __pfx___report_bug+0x10/0x10 [ 239.337124][ T7485] ? pfn_valid+0x125/0x4c0 [ 239.341577][ T7485] ? __lock_acquire+0x6b5/0x2cf0 [ 239.346553][ T7485] report_bug_entry+0x19a/0x290 [ 239.351457][ T7485] ? __mutex_lock+0x10ab/0x1300 [ 239.356329][ T7485] ? __mutex_lock+0x10b0/0x1300 [ 239.361219][ T7485] handle_bug+0xce/0x200 [ 239.365474][ T7485] exc_invalid_op+0x1a/0x50 [ 239.370010][ T7485] asm_exc_invalid_op+0x1a/0x20 [ 239.374899][ T7485] RIP: 0010:__mutex_lock+0x10ab/0x1300 [ 239.380474][ T7485] Code: 12 90 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 33 02 00 00 83 3d d9 c6 60 04 00 75 13 48 8d 3d 0c dc 63 04 48 c7 c6 c0 e0 cc 8b <67> 48 0f b9 3a 90 e9 ac f0 ff ff 90 0f 0b 90 e9 73 f4 ff ff 90 0f [ 239.400286][ T7485] RSP: 0018:ffffc90003987880 EFLAGS: 00010246 [ 239.406444][ T7485] RAX: 0000000000000000 RBX: 1ffff92000730f28 RCX: 0000000000080000 [ 239.414456][ T7485] RDX: ffffc90005fc9000 RSI: ffffffff8bcce0c0 RDI: ffffffff90152100 [ 239.422618][ T7485] RBP: ffffc90003987a38 R08: ffffffff90120bc3 R09: 1ffffffff2024178 [ 239.430700][ T7485] R10: dffffc0000000000 R11: fffffbfff2024179 R12: ffff8880345e8b60 [ 239.438857][ T7485] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 239.446853][ T7485] ? __mutex_lock+0x319/0x1300 [ 239.451936][ T7485] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 239.457585][ T7485] ? dmx_section_feed_allocate_filter+0x34f/0x3e0 [ 239.464008][ T7485] ? __pfx___mutex_lock+0x10/0x10 [ 239.469144][ T7485] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 239.474901][ T7485] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 239.481001][ T7485] ? do_raw_spin_lock+0x12b/0x2f0 [ 239.486044][ T7485] as102_dvb_dmx_start_feed+0x70/0x290 [ 239.491594][ T7485] dmx_section_feed_start_filtering+0x518/0x6c0 [ 239.498089][ T7485] dvb_dmxdev_filter_start+0xcf4/0x10e0 [ 239.503695][ T7485] ? dvb_dmxdev_filter_set+0x2d1/0x580 [ 239.509192][ T7485] dvb_demux_do_ioctl+0x470/0x540 [ 239.514246][ T7485] dvb_usercopy+0x199/0x2e0 [ 239.518809][ T7485] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 239.524379][ T7485] ? __pfx_dvb_usercopy+0x10/0x10 [ 239.529430][ T7485] ? __fget_files+0x3a0/0x420 [ 239.534139][ T7485] dvb_demux_ioctl+0x29/0x40 [ 239.538756][ T7485] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 239.544248][ T7485] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 239.550343][ T7485] ? kmem_cache_free+0x187/0x630 [ 239.555300][ T7485] ? __se_sys_futex_time32+0x3ab/0x440 [ 239.560783][ T7485] ? rcu_is_watching+0x15/0xb0 [ 239.565649][ T7485] __do_fast_syscall_32+0x20d/0x640 [ 239.570880][ T7485] ? do_fast_syscall_32+0x33/0x70 [ 239.575915][ T7485] ? asm_int80_emulation+0x1a/0x20 [ 239.581035][ T7485] ? do_int80_emulation+0x274/0x4d0 [ 239.586260][ T7485] ? trace_irq_disable+0x3b/0x150 [ 239.591294][ T7485] do_fast_syscall_32+0x33/0x70 [ 239.596166][ T7485] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 239.602503][ T7485] RIP: 0023:0xf702ef6c [ 239.606672][ T7485] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 239.626485][ T7485] RSP: 002b:00000000f541d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 239.635323][ T7485] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000403c6f2b [ 239.643405][ T7485] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 239.651500][ T7485] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 239.659765][ T7485] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 239.667862][ T7485] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 239.675889][ T7485] [ 239.679536][ T7485] Kernel Offset: disabled [ 239.683925][ T7485] Rebooting in 86400 seconds..