last executing test programs: 13m52.22375574s ago: executing program 0 (id=1152): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000001340)}, 0x81}], 0x1, 0xc0032032, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003000)=[{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000240)="810c", 0x2}, {&(0x7f00000033c0)="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", 0x52a}], 0x2, 0x0, 0x0, 0xc855}], 0x1, 0x4004004) creat(&(0x7f00000006c0)='./file0\x00', 0x4) recvmsg(0xffffffffffffffff, 0x0, 0x102) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000740)="440f20c03505000020440f22c0fb01c966bad104ed00000f23c00f21f866b846008ed00f23f80f01cbb8010000000f01c146a7b9670900000f3236660fc6b8730f0000c9b98f020000b8b9000000ba000000000f30460f01c8", 0x59}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='fdinfo/3\x00') read$eventfd(r3, &(0x7f00000001c0), 0x8) process_madvise(r3, &(0x7f0000000680)=[{&(0x7f00000005c0)="e2761595e3717d05a382c788fa68d2165933175998a320af225929affa1ffd8d4a6bc09e7134047ce9db2da81b9c61867fc58abde66454957ee8c62a1e898206dc232638ce87f73c6b8984fd41c158b3b26e3038f6388e51b7d6b384940bb08336ec56d3c01e3f75d3b784fb7c8a8e3ef03f102284bfc4a2659ea873ddf048663aca5facaed1f7e75e4c9e0225bb8f8411", 0x91}, {&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000001900)="6c2e23a89a8acb2f05a5b497019015bdd6a5896af8cabcb3c1b14181dcee338c31bf5b5462c36bf9998d54ce1eee66323cff346bce9d408ed28b38ec54d2b45cc5c707beaa5157079d840f270a42de434bb7d4a9c79dea64c5032a8d8ef3864c49b6c4806c5a5a9fd46ce3dc32d6411b2a2b64ae92d26320e17ca481a5d61b50c2be3c8a9f1350d9b6824a383ca67bf91545919b7f92fa50a4f39ba57ffdb30b735d9d1d1008b3dccc651a072cd05007de3e4ece7c8929eb89ef8c4103b080670711a1040f309427edd7233892167c28ab3411bfabdca2c766ac6336c5d454c4f38337d40c03e53dccf5b85af9dade0e17437d89cad5", 0xf6}], 0x3, 0x2, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/notes', 0x204000, 0x20) recvmsg$inet_nvme(r4, &(0x7f00000008c0)={&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001a00)=""/242, 0xf2}, {&(0x7f0000001b00)=""/174, 0xae}, {&(0x7f0000001c40)=""/101, 0x65}, {&(0x7f0000001cc0)=""/174, 0xae}, {&(0x7f0000001d80)=""/168, 0xa8}], 0x5, &(0x7f0000000800)=""/176, 0xb0}, 0x12020) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13m51.876392836s ago: executing program 0 (id=1155): socket$nl_rdma(0x10, 0x3, 0x14) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 13m51.378446966s ago: executing program 0 (id=1156): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000001340)}, 0x81}], 0x1, 0xc0032032, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003000)=[{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000240)="810c", 0x2}, {&(0x7f00000033c0)="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", 0x52a}], 0x2, 0x0, 0x0, 0xc855}], 0x1, 0x4004004) recvmsg(0xffffffffffffffff, 0x0, 0x102) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000740)="440f20c03505000020440f22c0fb01c966bad104ed00000f23c00f21f866b846008ed00f23f80f01cbb8010000000f01c146a7b9670900000f3236660fc6b8730f0000c9b98f020000b8b9000000ba000000000f30460f01c8", 0x59}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13m51.226778678s ago: executing program 0 (id=1158): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xca, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x8, 0x34, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001400)={0x64, 0x0, 0x200, 0x70bd28, 0x8, {}, [@HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec", 0x6f}, {0x0}, {&(0x7f00000005c0)="f2b3", 0x2}], 0x3}}], 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000034000000040000000000000014000000000000002900000034000000fdffffff0000000000010000000000002900000004000000041c000000000000fe72f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc00f3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5801409e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad0738000000010c7a0180050000000000000009000000000000000400000000000000060000000000000000040000000000000b0000000000000005020a7e00010005020bf4c910fc0200000000000000000000780e000000000000000000140000000000000029000000340000000000000000000000700100000000000029000000360000005e2a000000000000ff4150d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70000100000100010800000000000000000708000000030000ff0f07100000000002070600ff7f00000000000008c6c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab3030700008000000000000001082bdb86d1ce6a20c2000000000020000000000000002900000037000000730000000000000000010000000000001400000000000000290000000b0000000000000200000000180000000000000029000000390000000000000000000000380000000000000029000000390000003a04027000000000ff010000000000000000000000000001ff020000000000000000000000000001"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000540)}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be", 0x8b}, {&(0x7f00000006c0)="138b9f8300af1d793c8e", 0xa}, {&(0x7f0000000700)}, {0x0}], 0x6}}], 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 13m50.369615895s ago: executing program 0 (id=1161): sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) write$P9_RLOPEN(r1, &(0x7f0000000140)={0x18, 0xd, 0x1, {{0x0, 0x3}, 0x81}}, 0x18) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000680)=0x2, 0x4) unshare(0x2040400) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3, r2, 0x4}, 0x38) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x38) r3 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r3, 0x1, 0x7b) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x1, @local, 0x9}, 0x1c) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3e, &(0x7f00000040c0)=0x40000007, 0x4) sendmmsg$inet(r4, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 13m48.781763503s ago: executing program 0 (id=1165): openat$audio(0xffffff9c, &(0x7f0000000000), 0x101100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000340)={0x0, 0x5, 0xffffffc0, 0x6, 0x6, 0x6, 0x3, 0x8, {0x0, @in={{0x2, 0x4e21, @remote}}, 0x80000001, 0x79f, 0x6f, 0x76, 0x9}}, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x11, 0xffffffffffffffff, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) 13m33.482860445s ago: executing program 32 (id=1165): openat$audio(0xffffff9c, &(0x7f0000000000), 0x101100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000340)={0x0, 0x5, 0xffffffc0, 0x6, 0x6, 0x6, 0x3, 0x8, {0x0, @in={{0x2, 0x4e21, @remote}}, 0x80000001, 0x79f, 0x6f, 0x76, 0x9}}, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x11, 0xffffffffffffffff, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) 13m16.293757169s ago: executing program 5 (id=1197): socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) syz_io_uring_setup(0x4a28, &(0x7f00000000c0)={0x0, 0xf7fa, 0x3180, 0x8000, 0x15e}, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c9, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 13m14.857962919s ago: executing program 5 (id=1241): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)={0x28, r1, 0xf21, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x22}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x91}, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x0) add_key$user(0x0, &(0x7f00000005c0), 0x0, 0x0, 0xfffffffffffffffd) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x3e0, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xa0, 0xc0, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x440) r6 = getpid() r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = socket$isdn(0x22, 0x2, 0x10) r10 = socket$isdn(0x22, 0x2, 0x2) r11 = dup3(r10, r9, 0x0) kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, 0xffffffffffffffff, &(0x7f0000000280)={r11, r8, 0x7}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 13m13.731512128s ago: executing program 5 (id=1246): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x0, 0x2, 0x8000000000000002, 0x100, 0x2, 0x9, {0x6, 0x9, 0x0, 0x80000000000000ff, 0x3, 0x0, 0x7fffffff, 0x58, 0xffffffff, 0x8000, 0x9, r3, r4, 0x1, 0x4}}, {0x20000000000000, 0x3, 0x2b, 0xf9, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x00\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r5, &(0x7f0000000100)=""/134, 0x86) getdents64(r5, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000010ec0)="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", 0x2000, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a03000000000000000000070000000900010073797a300000000084040000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d240012802000018008000100636d70001400028008000240000000030800014000000003080003400000011008000f"], 0x4cc}, 0x1, 0x0, 0x0, 0x4010}, 0x20050800) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r6, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) connect$inet(r6, &(0x7f00000001c0)={0x2, 0x4e20, @broadcast}, 0xc) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = open(&(0x7f0000000040)='./file0\x00', 0x82500, 0x122) r9 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) ioprio_set$pid(0x1, r9, 0x4004) write$binfmt_elf64(r8, &(0x7f00000001c0)=ANY=[], 0x61e) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f0000000340)=[{&(0x7f0000001f80)="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", 0x10d}], 0x1, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x47f8, 0x0, 0x0, 0x0, 0x0) listen(r0, 0x2) 13m12.406910442s ago: executing program 5 (id=1250): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r1) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNGETVNETLE(r1, 0x80047441, &(0x7f0000000180)) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x169142, 0x0) fcntl$setlease(r3, 0x400, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) clock_nanosleep(0x2, 0xffc99a3b, &(0x7f0000000100), &(0x7f0000000180)) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 13m6.051733022s ago: executing program 5 (id=1268): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x19, 0x4, 0x8, 0xb}, 0x50) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000000)={r1, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe, 0x14, "fee8a2ab78fc179fd1f809000100aca7ca44c6a4b3e00d9683dda1af01000000c0ff12001000000000000000000300", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xe0]}}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x14, 0x0, 0x0) connect$llc(r4, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000300)='./cgroup\x00', &(0x7f0000000040)='romfs\x00', 0x200440, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000000300)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @remote}, 0x0, {0x2, 0x40, @private}, 'syz_tun\x00'}) 13m5.403352026s ago: executing program 33 (id=1268): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x19, 0x4, 0x8, 0xb}, 0x50) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000000)={r1, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe, 0x14, "fee8a2ab78fc179fd1f809000100aca7ca44c6a4b3e00d9683dda1af01000000c0ff12001000000000000000000300", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xe0]}}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x14, 0x0, 0x0) connect$llc(r4, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000300)='./cgroup\x00', &(0x7f0000000040)='romfs\x00', 0x200440, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000000300)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @remote}, 0x0, {0x2, 0x40, @private}, 'syz_tun\x00'}) 13.375880117s ago: executing program 3 (id=3816): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth0_to_team\x00', &(0x7f0000000100)=@ethtool_stats={0x1d, 0x1, [0x5fb8]}}) 9.433689385s ago: executing program 3 (id=3822): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @remote}}}, 0x108) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000011c0)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x41) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001c0001"], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x40800) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x89fb, &(0x7f0000000040)={'bond0\x00', 0x10000}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x1412, 0x20, 0x70bd28, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x22008001}, 0x20000000) shutdown(0xffffffffffffffff, 0x0) 9.179060914s ago: executing program 2 (id=3825): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002840)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000", @ANYRES32=r2, @ANYBLOB="140006000802110000010000060066008e8800001c0033"], 0x4c}}, 0x0) 8.171630949s ago: executing program 1 (id=3827): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0x1e5}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}, 0x1, 0x0, 0x0, 0x4804}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r0, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) 7.921239024s ago: executing program 2 (id=3828): fsopen(&(0x7f00000000c0)='nilfs2\x00', 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x66cc81, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80140, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) socket$kcm(0x21, 0x2, 0x2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x42, 0x18) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0xfffd, @local}, {0x2, 0x4e27, @empty}, 0x1c9, 0x0, 0x0, 0x0, 0xfff6, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xfdef) 7.91388258s ago: executing program 4 (id=3829): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r0, @ANYRES16=r1, @ANYBLOB="210f00000000fedbdf252000000008000300", @ANYRES32=r2, @ANYBLOB="0c0099000100000022000000"], 0x28}, 0x1, 0x0, 0x0, 0x91}, 0xc000080) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x0) add_key$user(0x0, &(0x7f00000005c0), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="120000000800000004000000b47c000000000000", @ANYRES32, @ANYBLOB="008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) prlimit64(r3, 0xe, &(0x7f0000000140)={0xffffffffffffffff, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 7.817201132s ago: executing program 1 (id=3831): sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, 0x0, 0x400c4) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000280)={@local, @empty, @val={@val={0x88a8, 0x5, 0x0, 0x3}, {0x8100, 0x4, 0x1, 0x4}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0xffff, 0x0, 0x0, 0x73, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}, {0x4, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000440)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@rq={'rq', 0x3d, 0x9}}]}}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000480)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000006c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000700)) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000225bd7000fedbdf25150000000f0014007472616e733d72646d612c0008000100", @ANYRES32=0x0, @ANYBLOB="0e0014003132372e302e302e3100000008000100", @ANYRES32=0x0, @ANYBLOB="6aff0100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB], 0x2f8}, 0x1, 0x0, 0x0, 0x80}, 0x10) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0}, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000030402000000fedbdf250000", @ANYRES32=0x0, @ANYBLOB="10d40000a58b542a240012800e00010069703665727370616e000000100002800400120008000d0007"], 0x44}, 0x1, 0x0, 0x0, 0x40890}, 0x20000840) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x2, 0x0, 0xe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000084000000060a010400000000000000000100000008000b40000000005c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000240001800b0001007470726f78790000140002800800024000000011080001400000000a0900010073797a30"], 0xf8}}, 0x0) 6.773040964s ago: executing program 6 (id=3832): socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async, rerun: 32) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001500)={0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x6000}) (rerun: 32) socket$inet(0xa, 0x801, 0x84) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) (rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async, rerun: 32) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) (rerun: 32) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r3, 0x7) (async, rerun: 64) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64) listen(r4, 0x100) (async) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x8) r6 = socket$inet(0xa, 0x5, 0x0) listen(r6, 0x1) (async) r7 = socket$inet(0xa, 0x801, 0x84) listen(r7, 0x8) (async) r8 = socket$inet(0xa, 0xa, 0x84) listen(r8, 0x8) (async, rerun: 64) r9 = socket$netlink(0x10, 0x3, 0x4) (rerun: 64) writev(r9, &(0x7f0000000040)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r9) (async, rerun: 64) getsockopt$ax25_int(r2, 0x101, 0xa, &(0x7f0000001c40), &(0x7f0000001c80)=0x4) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x28a441, 0x143) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 6.482273328s ago: executing program 1 (id=3833): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') ioctl$BTRFS_IOC_RM_DEV(r0, 0x8008b705, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x8, 0x0, &(0x7f0000000800)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x140, 0x82) r2 = fanotify_init(0x1, 0x80000) unshare(0x22020600) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000100)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) r4 = syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000012d000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_usb_control_io$uac1(r4, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = socket$inet_udp(0x2, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x4ffe2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000000060102"], 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x4800) r7 = syz_open_dev$I2C(&(0x7f0000000180), 0x1, 0x402) writev(r7, &(0x7f0000000140), 0x0) 6.316190883s ago: executing program 6 (id=3834): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x4d8, 0x2c8, 0x0, 0xffffffff, 0x228, 0x370, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "9401d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x814, 0x20c0}, 0x80, 0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x80000000000, &(0x7f0000000300), 0x2, 0x4}}, 0x20) 5.916099158s ago: executing program 3 (id=3835): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x20, 0x140d, 0xfffffffffffffffd, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0xdd}, 0x850) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x40, 0x8}, 0x2) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, &(0x7f0000000580)={0x14, &(0x7f0000000500)={0x40, 0x24, 0x30, {0x30, 0x23, "2b350391b2fdb409540b9286a1c800e8ce4a98a262115bda0c6973685e3f1b85f8038617f0949275649959079b4c"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x809}}}, &(0x7f0000000840)={0x34, &(0x7f00000005c0)={0x40, 0x12, 0xdd, "1d257632e638763521705782fca3c7fafa1df22fb5d3038efa84edb50b38c50fd8f6fc7d68281a50c5c75bd6d26e265c3ebcd2df778b6907b0882f87029a27c980429ad1b4ff1b1afb0f9727110599a695db6f31748426e3680e8252d581c689ed3a71b4e46bc90e96f1a4a3b3884a43d9fbdcd128e77b9ce8ed287c1b4646cd922765fa41fb9282601841e09b5d632a797accf521bd556a8074389e1eb5a012da770f8ddf352b5718ed92ec77341bd703a7259b2e196344178fa85014da0c6792dbadfc12355ffdb8e7e8ef90f3ade60cdb7f709b110722f87f183c16"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0xb0}, &(0x7f0000000740)={0x20, 0x0, 0x78, {0x76, "1e924cee04ee11d927e3a54b5eea7f049dad371d8ce1869f07f70f58a1ef8b828b20e12675d402b21b77d7b288b289c9b9abe666b242b1878fc0d914e1c9a7ddf650d5d411e7c018ffba67b13f6f0bf82c13a9bcaeb81da168fae79061f4726d39c050c1f2bf25890617ba401e3285e1dbc7aab094c9"}}, &(0x7f00000007c0)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000800)={0x20, 0x0, 0x1, 0x2}}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x84441, 0x0) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) accept4(r4, 0x0, &(0x7f00000000c0), 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r5, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x36}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20048040) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000d40)={0x44, &(0x7f0000000b00)={0x40, 0xb, 0x16, "9c4bd0b26d741e1a989994db1c6f7cfec8414966c997"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r1, &(0x7f00000001c0)={0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="406b454bffa4603201dfc1e550da1acd0e18c881d8f39b3a635bb8e2f26d2cde5203e1a5005c1749b481d3d59c833a2397d711f9128fe1a04335261bbee42173e5609db3a449f848c3aa5601555e8e75689e9a3f7f20eeff7695f6577d26e45fa40d414895593b368f92c6ea974a432b40098d5584c14c71e1a67bdee8145218a47485b5740e9884fef3e3855ae8eb87d54af18975df76c7f50068f9e8935030e7c59078695041fdb11916dd3b85957e3dec09cf13382c3eb18eaad27af537952204862fe4ae15ca2c6bcb2a0b95dfba81388cb407a11f33a4"], &(0x7f0000000180)={0x0, 0x3, 0x1e, @string={0x1e, 0x3, "7461fc72c93c969a57ae8b7f353e607c66423146bc071e6cb824be58"}}}, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x17, 0x1d, "f1c39a97924c6079a8af2159a4825f70fc4bc1f06e7d88b06c42e53726"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0xfb}, &(0x7f00000002c0), &(0x7f0000000300)={0x40, 0x5, 0x4, "8c1254d6"}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x83, 0x66, 0x7d, 0x10, 0x2040, 0x264, 0x4ed1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) 5.806945377s ago: executing program 6 (id=3836): r0 = open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x6, &(0x7f00000003c0)=ANY=[@ANYRES16=r0], &(0x7f0000000300)='GPL\x00', 0x7, 0xc5, &(0x7f00000006c0)=""/197, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x37, r0, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, &(0x7f0000000100)=""/222, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x400080, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x3) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = userfaultfd(0x801) openat$qrtrtun(0xffffff9c, &(0x7f0000000240), 0x4202) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}}, 0x108) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)="80", 0x1}], 0x1, 0x0, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x7}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$cdc_ncm(0x3, 0x72, 0x0, 0x0) 5.76811997s ago: executing program 2 (id=3837): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300), 0x84, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0xc4) r6 = syz_open_dev$tty1(0xc, 0x4, 0x3) close_range(r6, 0xffffffffffffffff, 0x0) 3.706725494s ago: executing program 4 (id=3838): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0xc000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@getstats={0x1c, 0x5e, 0x10, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x1c}}, 0x10) r4 = socket$inet_icmp(0x2, 0x2, 0x1) process_vm_writev(r0, &(0x7f0000001440)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/236, 0xec}, {&(0x7f0000000280)=""/67, 0x43}], 0x3, &(0x7f0000001980)=[{&(0x7f0000001480)=""/51, 0x33}, {&(0x7f00000014c0)=""/149, 0x95}, {&(0x7f0000001580)=""/198, 0xc6}, {&(0x7f0000001740)=""/137, 0x89}, {&(0x7f0000001800)=""/158, 0x9e}, {&(0x7f0000001680)=""/19, 0x13}, {&(0x7f00000018c0)=""/162, 0xa2}], 0x7, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000001700)={0x84, @rand_addr=0x64010102, 0x4e21, 0x1, 'nq\x00', 0x1, 0x100, 0x51}, 0x2c) close(0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x19, 0x0, 0x0, @binary}, @typed={0x8, 0xc, 0x0, 0x0, @uid}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x1) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x8, 0xc9, 0x1}}}, 0x7) sendto$inet6(r6, &(0x7f0000000040)='\a', 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @mcast1}, 0x1c) 3.589831449s ago: executing program 2 (id=3839): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002840)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000081000000", @ANYRES32=r2, @ANYBLOB="140006000802110000010000060066008e8800001c0033"], 0x4c}}, 0x0) 3.549586562s ago: executing program 6 (id=3840): sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = syz_open_dev$video(&(0x7f00000001c0), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0xc, 0x1, 0x56555941, 0x5, 0x9, [{0x3, 0x10001}, {0x54, 0x5}, {0x4, 0x7}, {0x2, 0x3}, {0x9, 0x5}, {0x2, 0x10000}, {0x5, 0x400}, {0xc, 0x3000000}], 0xd, 0x7, 0x1, 0x1, 0x7}}) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = fanotify_init(0x40, 0x800) connect$llc(0xffffffffffffffff, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x200) syz_clone3(&(0x7f0000000540)={0x80000, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000180), {0x1b}, &(0x7f0000000480)=""/153, 0x99, &(0x7f0000000c80)=""/4096, &(0x7f00000002c0)=[0xffffffffffffffff, 0x0, 0x0], 0x3}, 0x58) sched_setscheduler(r6, 0x3, &(0x7f0000000300)=0x9) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port0\x00', 0x0, 0x60000, 0x0, 0xfffffffb, 0x6, 0xfffffffc, 0x10000000, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x7f}, 'port1\x00', 0x80, 0x14, 0x4, 0xfffffeff, 0x0, 0xc, 0x200000, 0x0, 0x4875c99660ff2b2d}) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000080)={0x84, @remote, 0x4e24, 0x1, 'lblcr\x00', 0x0, 0x5, 0x60}, 0x2c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r8, &(0x7f0000000bc0)=[{{&(0x7f0000000640)=@can, 0x80, &(0x7f00000006c0)=[{&(0x7f000001b000)=""/4096, 0x1000}], 0x1, &(0x7f0000000700)=""/16, 0x10}, 0x4}, {{&(0x7f0000000740)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000000b40)=[{&(0x7f00000007c0)=""/39, 0x27}, {&(0x7f0000000800)=""/208, 0xd0}, {&(0x7f0000000900)=""/151, 0x97}, {&(0x7f00000009c0)=""/179, 0xb3}, {&(0x7f0000000a80)=""/163, 0xa3}], 0x5, &(0x7f0000001c80)=""/249, 0xf9}, 0xfffffff9}], 0x2, 0x2, 0x0) accept4$llc(r0, &(0x7f00000005c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000600)=0x10, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000564404204e080110f9330102030109021b00010000000009040000014a90c2000905", @ANYRES16=r4, @ANYRESOCT=r5, @ANYRES16=r8, @ANYRESHEX=r1, @ANYRESOCT=r8], 0x0) 2.760352301s ago: executing program 1 (id=3841): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0x1e5}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}, 0x1, 0x0, 0x0, 0x4804}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r0, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) 2.720065028s ago: executing program 2 (id=3842): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000240)="b9800000c00f3235000100000f300f20c035000000800f22c066ba6100b805000000efc4e1555538c4c1b1d24900660f60c50f2055660fae3a66bad004edc744240000000080c7442402f8ff0000c7442406000000000f011c24", 0x5a}], 0x1, 0x44, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010028bd700bfbdbdf"], 0x14}, 0x1, 0x0, 0x0, 0x8048451}, 0x48110) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x9) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000700)=0x1, r7, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r7, 0x7}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000180)={0x13, 0x10, 0xfa00, {&(0x7f0000000440), r7, 0x1}}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$sock_qrtr_TIOCINQ(r5, 0x541b, &(0x7f0000000100)) 2.710661865s ago: executing program 1 (id=3843): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) syz_io_uring_setup(0x88d, &(0x7f0000000300)={0x0, 0xd54b, 0x1000, 0xfefffffd, 0x1a6}, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x80000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00'}, 0x65) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61156c00000000006113500000000000bfa000000000000016000f00080000002d0301"], 0x0}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getpeername$qrtr(0xffffffffffffffff, 0x0, 0x0) get_mempolicy(0x0, &(0x7f0000000100), 0x3, &(0x7f0000ffb000/0x4000)=nil, 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001940)=[{0x0}], 0x1}, 0x20002100) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r1, 0xc0040d07, &(0x7f0000000040)=0x121) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) sendmmsg$sock(r2, &(0x7f0000008340), 0x31, 0x4000c000) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f00000000c0)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000240)=0x2c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r3, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f008004de7f9c7643600000088ff", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) 1.716155441s ago: executing program 4 (id=3844): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8000000000000001}, 0x0) r0 = add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r0) keyctl$chown(0x4, r0, 0x0, 0x0) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, r0) keyctl$get_security(0x11, r0, &(0x7f0000000100), 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, '.\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) r5 = syz_io_uring_setup(0x9a, &(0x7f0000000480)={0x0, 0x5c46, 0x100, 0x7ffd, 0x1e3, 0x0, r4}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r4, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r5, 0x24a0, 0x4c1, 0x43, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) clock_gettime(0x0, 0x0) 1.667003792s ago: executing program 1 (id=3845): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @remote}}}, 0x108) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000011c0)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x41) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001c0001"], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x40800) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x89fb, &(0x7f0000000040)={'bond0\x00', 0x10000}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x1412, 0x20, 0x70bd28, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x22008001}, 0x20000000) shutdown(0xffffffffffffffff, 0x0) 767.589574ms ago: executing program 4 (id=3846): syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x128, r2, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x128}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x15c, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x15c}}, 0x80) signalfd(r1, &(0x7f0000000480)={[0x3]}, 0x8) (async) r3 = signalfd(r1, &(0x7f0000000480)={[0x3]}, 0x8) ioctl$FE_READ_SNR(r3, 0x80026f48, &(0x7f00000004c0)) (async) ioctl$FE_READ_SNR(r3, 0x80026f48, &(0x7f00000004c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), r3) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f0000000580)={0x188, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x69}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80a3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x14}, 0x20000000) (async) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f0000000580)={0x188, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x69}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80a3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x14}, 0x20000000) bind$802154_raw(r3, &(0x7f00000007c0)={0x24, @none={0x0, 0x2}}, 0x14) rt_sigsuspend(&(0x7f0000000800)={[0x5]}, 0x8) (async) rt_sigsuspend(&(0x7f0000000800)={[0x5]}, 0x8) syz_open_procfs$namespace(0x0, &(0x7f0000000840)='ns/ipc\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000900)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000940)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000980)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000980)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r6, &(0x7f0000000a80)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x44, r7, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) (async) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r6, &(0x7f0000000a80)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x44, r7, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000ac0)={{r4}, "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"}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001b00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f0000001d00)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001b40)={0x154, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0xf2, 0xac, "954a035bdc9d76df6c28f3801130f0eae1d86618614f50fe29b2c238cba1d464650cb9020fd38739cf82905126f639a0f7cedd6be3acde141bba3837a578f5d3f6ae244d6c5c3efec0b2632544831113cf48da2fc3c6937d2e79e420f297a09b136166cdc3bd613c8d9b02e6fb47a36bb093649f5e4d467a4a562c2157d1a96666a97a5778e9da32885bf621d82023dcb65a28e8ba2c98ac13251a4dc03f15ca9dd4fe2e9542ce622f16c63126f4e9019e97449c1d2e271e61cd4bf52e34b3cf39e406a2946e1e4d43f4e0728358c1c8c023130514f097726bb9fb0e34d57454383c548c878f04c18e6a2a808f68"}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x8}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x760}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x19, 0x13, [{0x3}, {0x4}, {0x18}, {0x4, 0x1}, {0x48, 0x1}, {0x36}, {0x0, 0x1}, {0x6c}, {0x48}, {0x16, 0x1}, {0x48}, {0x4, 0x1}, {0x0, 0x1}, {0x60, 0x1}, {0x60, 0x1}, {0x60}, {0x1b, 0x1}, {0x36, 0x1}, {0x16, 0x1}, {}, {0x6c, 0x1}]}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x637}]}, 0x154}, 0x1, 0x0, 0x0, 0x4000}, 0x4000074) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001d80), r1) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000002040)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002000)={&(0x7f0000001dc0)={0x208, r12, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9d}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x7, 0xffffffff, 0x400, 0x1, 0x10001, 0x8, 0xfffff2a3]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6ba}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x4, 0x0, 0x101]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x27}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffffc0}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xc4}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x157}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7fffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xa}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffff}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x0]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x40}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7ff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x401}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xd}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xf602}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0xc1, 0x0, 0x1000]}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x476}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x49}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xead8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x80000000, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8001}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x9, 0x10000]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x30}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4a}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xf7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xdd}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xa5}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x67f}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x0, 0xfffffffc, 0xe83, 0x5, 0x577]}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x12}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x400}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000002080)={0x8, 0x6, 0x7, 0x7, 0x3, 0x0, [{0x7, 0xcc, 0x10, '\x00', 0x210c}, {0x6, 0x6, 0x99, '\x00', 0x3008}, {0xfffffffffffffff3, 0x308, 0x3, '\x00', 0x20a}]}) (async) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000002080)={0x8, 0x6, 0x7, 0x7, 0x3, 0x0, [{0x7, 0xcc, 0x10, '\x00', 0x210c}, {0x6, 0x6, 0x99, '\x00', 0x3008}, {0xfffffffffffffff3, 0x308, 0x3, '\x00', 0x20a}]}) sendmsg$NFC_CMD_DEP_LINK_UP(r6, &(0x7f0000002240)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x24, r7, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000002580)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002540)={&(0x7f00000022c0)={0x254, 0x1, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_EXPECT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x81}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}, @CTA_EXPECT_NAT={0x140, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x108, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6}]}]}, @CTA_EXPECT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x82}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @empty}}}]}]}, 0x254}, 0x1, 0x0, 0x0, 0x4}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002880)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002840)={&(0x7f0000002600)=@ipv6_delroute={0x220, 0x19, 0x2, 0x70bd28, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x1, 0xfd, 0x1, 0xfd, 0x9, 0x100}, [@RTA_METRICS={0x103, 0x8, 0x0, 0x1, "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"}, @RTA_METRICS={0xf7, 0x8, 0x0, 0x1, "8495616e552c0cf0e0bb7943d104cd2938abc69260361ca24e23938784fbe11b1679634103b8a5c709f8bb2691764aca619dd4607427373dc414410e590df419659aef1af6b8f83386fbb0e0c8f07ebad3c8cc6fa82eec20b2833cef6f4497a9fcd1047f4d1f68702ac68035bdce7efa65b2fb3f6d2334879cb1bb53e2fa2f10d9e9f69edfec4d6247fb45da4b0e794c779321624e4741b6744d6b746e5eb0a7691461c90adf6ef5ac1c98d8ea9a623196a5d68ceb86fcc54742f63e3816f3f5c06f1de045acc98ee9730c910434d90dbd6b79aa2cefbe2c0d999290d3ead4924a4b620998144765921dbe486df82805e7df33"}, @RTA_EXPIRES={0x8, 0x17, 0x7f10}]}, 0x220}, 0x1, 0x0, 0x0, 0x200080d0}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002880)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002840)={&(0x7f0000002600)=@ipv6_delroute={0x220, 0x19, 0x2, 0x70bd28, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x1, 0xfd, 0x1, 0xfd, 0x9, 0x100}, [@RTA_METRICS={0x103, 0x8, 0x0, 0x1, "230f8a0e02511dd8223f84fa030e4ebaecf429ff651906dbd1ccb91c2126d06cbcd8aef278dc16174306de4a8277616e03d299b0c9e7d4649bdc0df90330df2721a69ed2c71472fc72a435ba70bc499c903c19bc6a83e0a2da6dbee55457ba15b3499623b02509a433fd60fa9f909c8aeb7940519324ec3600634f36b3e3e985ef78e21911655b53c2e1e82d5e851f4f92548916cdcc614b88a486e8be23f535882ab1ef8d5912f373d4ee04eea930cff54bfcd2a75e0f05bc56d09dc5850111728f5eeaa1e1a719eb04543f7af494a16b3ad2edc4c037026bba6ebf88b04a07c601f777c50bae4e081bb4c77df004ed8e795f5ab52174f00007689ec427fb"}, @RTA_METRICS={0xf7, 0x8, 0x0, 0x1, "8495616e552c0cf0e0bb7943d104cd2938abc69260361ca24e23938784fbe11b1679634103b8a5c709f8bb2691764aca619dd4607427373dc414410e590df419659aef1af6b8f83386fbb0e0c8f07ebad3c8cc6fa82eec20b2833cef6f4497a9fcd1047f4d1f68702ac68035bdce7efa65b2fb3f6d2334879cb1bb53e2fa2f10d9e9f69edfec4d6247fb45da4b0e794c779321624e4741b6744d6b746e5eb0a7691461c90adf6ef5ac1c98d8ea9a623196a5d68ceb86fcc54742f63e3816f3f5c06f1de045acc98ee9730c910434d90dbd6b79aa2cefbe2c0d999290d3ead4924a4b620998144765921dbe486df82805e7df33"}, @RTA_EXPIRES={0x8, 0x17, 0x7f10}]}, 0x220}, 0x1, 0x0, 0x0, 0x200080d0}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002900)={0xfc, r5, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xab}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfb7}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xc8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x59b}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x84}, 0x4) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000002a80)) 724.474854ms ago: executing program 3 (id=3847): bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r0, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b7030000000800008500000072000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x70, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 670.212732ms ago: executing program 2 (id=3848): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x500100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x20f47) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x105c00) syz_init_net_socket$netrom(0x6, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x480c5}, 0x85) sendmsg$nl_route_sched(r3, 0x0, 0x4004) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r5, 0x2a, 0x20006, 0x0, &(0x7f0000000000)) r6 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f000001b700)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRES16=r3, @ANYRESOCT=r2, @ANYRES32=r0, @ANYRES32=r6, @ANYRESDEC=r3, @ANYRES64=0x0, @ANYBLOB="9fc10167403df36510805665b6398cc6016bbbc62bd26296716a5a00ba0755aa6b633bb20df64467817e107f3f82a73584c04a650dd87f13af13de5ed1dd59ebd278ab6b70bd116943d2f14b0eecc2934a8013731f6a6e7f210f1db93e8d837f4e823c2fe26422109f843048a6119c3c1fe3a506d941f51cdbf250108a0db34f74189cb24b0d32d7a1fa4254814a65a6376f4122c8ec79118ad12ac16e0897c2c585ab5bce92830a4412e0265aed59f9", @ANYRESOCT=r8]) r9 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) add_key$keyring(&(0x7f0000000040), 0xfffffffffffffffc, 0x0, 0x0, r9) socket$inet6(0xa, 0x80001, 0x0) 669.998611ms ago: executing program 4 (id=3849): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, 0xffffffffffffffff, 0x3a, 0x0, @void}, 0x10) 468.088117ms ago: executing program 4 (id=3850): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x4d, 0x0, &(0x7f0000cab000)) close(r0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0) 434.925155ms ago: executing program 6 (id=3851): r0 = gettid() fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x3ef8, 0x9, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) iopl(0x3) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x150, 0x168, 0x9, 0x150, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'ip6gre0\x00', 'sit0\x00', {}, {0xff}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@srh={{0x30}, {0x11, 0xbd, 0xb5, 0x4, 0x0, 0x80, 0x40}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00', {0x4}}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x80}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 138.209912ms ago: executing program 3 (id=3852): prlimit64(0x0, 0x7, &(0x7f0000000140)={0x0, 0x2}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) personality(0xfe47fef9f5ff7379) io_uring_setup(0x78eb, &(0x7f00000000c0)={0x0, 0xc63b, 0x3018, 0x2, 0x1f9}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ppoll(0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x1f) 352.752µs ago: executing program 6 (id=3853): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0x1e5}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}, 0x1, 0x0, 0x0, 0x4804}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r0, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=3854): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x80000001, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) socket(0x2, 0x805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001a400)=""/102384, 0x18ff0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbb0800550000380000000009019078ac1e0001ac1414aa030490781209183f010000f64d519700ac14140aac14143700186371ae9b1c0700000000"], 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={[{@lowerdir={'lowerdir', 0x3d, './file1'}, 0x3a}, {@xino_auto}], [{@obj_role={'obj_role', 0x3d, '\'@-'}}], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8000, &(0x7f00000002c0)={[{@xino_off}], [], 0x2f}) r6 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file2\x00', 0x400004, 0x1f7) getdents64(r6, &(0x7f0000000400)=""/4096, 0xc00) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x24}}, 0x0) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x2b00, 0x0) ppoll(&(0x7f0000000140)=[{r7, 0x4000}], 0x1, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1466.831286][T11070] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1466.921612][T11070] usb 2-1: Product: syz [ 1466.939066][T11070] usb 2-1: Manufacturer: syz [ 1467.010248][T11070] usb 2-1: SerialNumber: syz [ 1467.089854][T11070] usb 2-1: config 0 descriptor?? [ 1467.131201][T11070] usb 2-1: selecting invalid altsetting 0 [ 1468.473434][T18584] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1468.640848][T18584] usb 7-1: Using ep0 maxpacket: 32 [ 1469.440626][T18584] usb 7-1: config 5 has an invalid interface number: 245 but max is 0 [ 1469.453400][T18584] usb 7-1: config 5 has no interface number 0 [ 1469.459505][T18584] usb 7-1: config 5 interface 245 has no altsetting 0 [ 1469.467655][ T24] usb 2-1: USB disconnect, device number 95 [ 1469.477663][T18584] usb 7-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=ba.d2 [ 1469.501761][T18584] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.517430][T18584] usb 7-1: Product: syz [ 1469.522714][T18584] usb 7-1: Manufacturer: syz [ 1469.528849][T18584] usb 7-1: SerialNumber: syz [ 1469.921023][ T24] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 1470.052518][ T5898] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1470.170075][T18584] gspca_main: mars-2.14.0 probing 093a:050f [ 1470.216563][T18584] usb 7-1: USB disconnect, device number 55 [ 1470.242109][ T24] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1470.262996][ T5898] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1470.273094][ T24] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 1470.273172][ T24] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1470.273194][ T24] usb 2-1: config 2 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 1470.273231][ T24] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1470.273253][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1470.590462][T19138] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1470.690930][ T5898] usb 5-1: config 2 interface 0 has no altsetting 0 [ 1470.709572][ T5898] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1470.719836][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.728000][ T5898] usb 5-1: Product: syz [ 1470.732639][ T5898] usb 5-1: Manufacturer: syz [ 1470.737251][ T5898] usb 5-1: SerialNumber: syz [ 1470.761933][ T5898] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1470.798401][ T5898] usb 5-1: selecting invalid altsetting 0 [ 1470.825447][ T5898] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1470.845253][T19138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1470.862112][ T5898] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 1470.872718][T19138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1470.891251][ T5898] usb 5-1: media controller created [ 1470.895229][ T29] audit: type=1400 audit(1470.853:985): avc: denied { write } for pid=19151 comm="syz.3.3306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 1470.953196][ T24] usbhid 2-1:2.0: can't add hid device: -71 [ 1470.969443][ T24] usbhid 2-1:2.0: probe with driver usbhid failed with error -71 [ 1470.988335][ T5898] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1470.992233][ T24] usb 2-1: USB disconnect, device number 96 [ 1471.450984][ T24] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1471.520889][ T5898] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 1471.610959][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 1471.623280][ T24] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1471.662547][ T24] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1471.681663][ T5898] usb 7-1: device descriptor read/64, error -71 [ 1471.701138][ T24] usb 2-1: config 2 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 1471.731960][ T24] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1471.763884][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1472.041777][ T5898] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 1472.295059][ T24] hid-thrustmaster 0003:044F:B65D.0026: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0 [ 1472.345799][ T24] hid-thrustmaster 0003:044F:B65D.0026: setup data couldn't be sent [ 1472.704409][ C1] hid-thrustmaster 0003:044F:B65D.0026: URB to get model id failed with error -71 [ 1472.751477][ T10] usb 5-1: USB disconnect, device number 74 [ 1472.773858][ T24] usb 2-1: USB disconnect, device number 97 [ 1472.822976][T19171] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3310'. [ 1472.888820][T19171] lo speed is unknown, defaulting to 1000 [ 1472.895661][ T5898] usb 7-1: device descriptor read/64, error -71 [ 1472.933495][ T29] audit: type=1326 audit(1473.897:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19170 comm="syz.3.3310" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f66ad39c799 code=0x0 [ 1473.063194][ T5898] usb usb7-port1: attempt power cycle [ 1473.423161][ T5898] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1473.503184][ T5898] usb 7-1: device descriptor read/8, error -71 [ 1473.511608][ T5954] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 1473.752843][ T5898] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1473.904898][ T5898] usb 7-1: device descriptor read/8, error -71 [ 1474.103482][ T5898] usb usb7-port1: unable to enumerate USB device [ 1474.152010][ T5954] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1475.136656][T19187] FAULT_INJECTION: forcing a failure. [ 1475.136656][T19187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1475.290107][T19187] CPU: 0 UID: 0 PID: 19187 Comm: syz.3.3315 Tainted: G L syzkaller #0 PREEMPT(full) [ 1475.290139][T19187] Tainted: [L]=SOFTLOCKUP [ 1475.290146][T19187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1475.290157][T19187] Call Trace: [ 1475.290163][T19187] [ 1475.290171][T19187] dump_stack_lvl+0x100/0x190 [ 1475.290206][T19187] should_fail_ex.cold+0x5/0xa [ 1475.290231][T19187] _copy_from_user+0x2e/0xd0 [ 1475.290260][T19187] copy_msghdr_from_user+0x9f/0x4f0 [ 1475.290291][T19187] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1475.290334][T19187] ___sys_sendmsg+0x106/0x1e0 [ 1475.290362][T19187] ? __pfx____sys_sendmsg+0x10/0x10 [ 1475.290418][T19187] __sys_sendmsg+0x170/0x220 [ 1475.290439][T19187] ? __pfx___sys_sendmsg+0x10/0x10 [ 1475.290467][T19187] ? rcu_is_watching+0x12/0xc0 [ 1475.290496][T19187] do_syscall_64+0x106/0xf80 [ 1475.290516][T19187] ? clear_bhb_loop+0x40/0x90 [ 1475.290539][T19187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1475.290558][T19187] RIP: 0033:0x7f66ad39c799 [ 1475.290575][T19187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1475.290592][T19187] RSP: 002b:00007f66ae30b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1475.290612][T19187] RAX: ffffffffffffffda RBX: 00007f66ad615fa0 RCX: 00007f66ad39c799 [ 1475.290624][T19187] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1475.290635][T19187] RBP: 00007f66ae30b090 R08: 0000000000000000 R09: 0000000000000000 [ 1475.290647][T19187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1475.290658][T19187] R13: 00007f66ad616038 R14: 00007f66ad615fa0 R15: 00007ffdf2f15948 [ 1475.290683][T19187] [ 1475.398104][ T5954] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1475.471584][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1475.479744][ T5954] usb 3-1: Product: syz [ 1475.483933][ T5954] usb 3-1: Manufacturer: syz [ 1475.488552][ T5954] usb 3-1: SerialNumber: syz [ 1475.538305][T19193] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1475.548668][ T5954] usb 3-1: config 0 descriptor?? [ 1475.568263][ T5954] usb 3-1: selecting invalid altsetting 0 [ 1476.171729][ T10] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1476.220904][T19175] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1476.354741][ T10] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1476.363899][ T10] usb 5-1: config 1 has an invalid descriptor of length 201, skipping remainder of the config [ 1476.380946][ T5954] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1476.765920][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1476.784672][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 235, changing to 11 [ 1476.801412][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9016, setting to 1024 [ 1476.815101][ T10] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1476.826000][ T10] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1476.835013][ T10] usb 5-1: Product: syz [ 1476.839285][ T10] usb 5-1: Manufacturer: syz [ 1476.855148][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 1476.865539][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 1476.876815][ T10] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1476.884120][ T10] cdc_wdm 5-1:1.0: Unknown control protocol [ 1477.069450][T19208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3319'. [ 1477.219356][ T10] usb 5-1: USB disconnect, device number 75 [ 1477.491902][ T5954] usb 4-1: Using ep0 maxpacket: 32 [ 1477.505748][ T5954] usb 4-1: config 5 has an invalid interface number: 245 but max is 0 [ 1477.516576][ T5954] usb 4-1: config 5 has no interface number 0 [ 1477.523257][ T5954] usb 4-1: config 5 interface 245 has no altsetting 0 [ 1477.531876][ T5954] usb 4-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=ba.d2 [ 1477.540940][ T5954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.548932][ T5954] usb 4-1: Product: syz [ 1477.553910][ T5954] usb 4-1: Manufacturer: syz [ 1477.558501][ T5954] usb 4-1: SerialNumber: syz [ 1477.741825][ T10] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 1477.879246][T11070] usb 3-1: USB disconnect, device number 52 [ 1477.966361][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 1478.059898][ T5898] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1478.082429][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1478.206349][ T10] usb 7-1: New USB device found, idVendor=08e4, idProduct=0163, bcdDevice= 0.40 [ 1478.226792][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1478.240221][ T10] usb 7-1: Product: syz [ 1478.246486][ T5954] gspca_main: mars-2.14.0 probing 093a:050f [ 1478.247283][ T10] usb 7-1: Manufacturer: syz [ 1478.258644][ T10] usb 7-1: SerialNumber: syz [ 1478.283597][ T5898] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1478.298169][ T5954] usb 4-1: USB disconnect, device number 105 [ 1478.306178][ T5898] usb 5-1: config 1 has an invalid descriptor of length 201, skipping remainder of the config [ 1478.356024][ T5898] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1478.392639][ T5898] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 235, changing to 11 [ 1478.421362][ T5898] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9016, setting to 1024 [ 1478.457202][ T5898] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1478.471761][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1478.559935][ T5898] usb 5-1: Product: syz [ 1478.566992][ T5898] usb 5-1: Manufacturer: syz [ 1478.931808][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1478.946080][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1478.981315][ T29] audit: type=1400 audit(1479.947:987): avc: denied { mounton } for pid=19209 comm="syz.6.3320" path="/file1" dev="ramfs" ino=77448 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 1479.257834][ T5898] usb 5-1: can't set config #1, error -71 [ 1479.385647][ T5898] usb 5-1: USB disconnect, device number 76 [ 1480.500958][T14979] Bluetooth: hci3: link tx timeout [ 1480.512262][T14979] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 1480.564087][T14979] Bluetooth: hci3: link tx timeout [ 1480.570992][T14979] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1480.964284][T19240] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3326'. [ 1482.511188][ T5954] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 1482.671259][T14979] Bluetooth: hci3: command 0x0406 tx timeout [ 1482.744249][ T5954] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1482.832328][ T5954] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1482.903796][ T5954] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1482.939192][ T5954] usb 5-1: Product: syz [ 1482.957187][ T5954] usb 5-1: Manufacturer: syz [ 1482.982218][ T5954] usb 5-1: SerialNumber: syz [ 1483.042140][T19255] fuse: Unknown parameter '' [ 1483.051508][ T5954] usb 5-1: config 0 descriptor?? [ 1483.135973][ T5954] usb 5-1: selecting invalid altsetting 0 [ 1483.191934][ T29] audit: type=1400 audit(1484.157:988): avc: denied { getopt } for pid=19253 comm="syz.3.3334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1483.371835][T19252] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1484.261364][ T10] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1484.268397][ T10] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1484.371009][ T10] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -32 [ 1484.393849][ T6516] udevd[6516]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1484.535614][T19269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3335'. [ 1485.160844][T18584] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1485.207868][ T5919] usb 5-1: USB disconnect, device number 77 [ 1485.322090][T18584] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1485.361465][T18584] usb 2-1: config 2 interface 0 has no altsetting 0 [ 1485.413702][T18584] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1485.430819][T18584] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1485.450848][T18584] usb 2-1: Product: syz [ 1485.455034][T18584] usb 2-1: Manufacturer: syz [ 1485.459619][T18584] usb 2-1: SerialNumber: syz [ 1485.504702][T18584] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1485.523845][T18584] usb 2-1: selecting invalid altsetting 0 [ 1485.558105][T18584] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1486.020860][T18584] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 1486.325217][T18584] usb 2-1: media controller created [ 1486.354850][ T5919] usb 7-1: USB disconnect, device number 60 [ 1486.361759][T14979] Bluetooth: hci3: command 0x0406 tx timeout [ 1486.375571][T18584] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1486.623961][ T29] audit: type=1400 audit(1487.597:989): avc: denied { create } for pid=19322 comm="syz.2.3343" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1486.646097][T19324] FAULT_INJECTION: forcing a failure. [ 1486.646097][T19324] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1486.663947][T19324] CPU: 1 UID: 0 PID: 19324 Comm: syz.2.3343 Tainted: G L syzkaller #0 PREEMPT(full) [ 1486.663975][T19324] Tainted: [L]=SOFTLOCKUP [ 1486.663982][T19324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1486.663992][T19324] Call Trace: [ 1486.663999][T19324] [ 1486.664006][T19324] dump_stack_lvl+0x100/0x190 [ 1486.664040][T19324] should_fail_ex.cold+0x5/0xa [ 1486.664063][T19324] strncpy_from_user+0x3b/0x2d0 [ 1486.664090][T19324] do_getname+0x78/0x390 [ 1486.664117][T19324] user_path_at+0x26/0x60 [ 1486.664133][T19324] __x64_sys_mount+0x1fb/0x310 [ 1486.664156][T19324] ? __pfx___x64_sys_mount+0x10/0x10 [ 1486.664186][T19324] do_syscall_64+0x106/0xf80 [ 1486.664204][T19324] ? clear_bhb_loop+0x40/0x90 [ 1486.664226][T19324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1486.664245][T19324] RIP: 0033:0x7f976e19c799 [ 1486.664260][T19324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1486.664277][T19324] RSP: 002b:00007f976efe0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1486.664295][T19324] RAX: ffffffffffffffda RBX: 00007f976e415fa0 RCX: 00007f976e19c799 [ 1486.664307][T19324] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000000000000000 [ 1486.664317][T19324] RBP: 00007f976efe0090 R08: 00002000000000c0 R09: 0000000000000000 [ 1486.664326][T19324] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000001 [ 1486.664336][T19324] R13: 00007f976e416038 R14: 00007f976e415fa0 R15: 00007ffe9d4d6078 [ 1486.664360][T19324] [ 1486.904757][ T29] audit: type=1400 audit(1487.877:990): avc: denied { unlink } for pid=18562 comm="syz-executor" name="file0" dev="tmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1488.312795][T19350] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3348'. [ 1488.909568][ T10] usb 2-1: USB disconnect, device number 98 [ 1489.044155][T19354] syzkaller0: entered promiscuous mode [ 1489.049675][T19354] syzkaller0: entered allmulticast mode [ 1489.152025][T19217] usb 4-1: new full-speed USB device number 106 using dummy_hcd [ 1489.640492][T19217] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1489.667298][T19217] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1489.690404][T19217] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1489.708493][T19217] usb 4-1: Product: syz [ 1489.719342][T19217] usb 4-1: Manufacturer: syz [ 1489.737997][T19217] usb 4-1: SerialNumber: syz [ 1489.775746][T19217] usb 4-1: config 0 descriptor?? [ 1489.808911][T19217] usb 4-1: selecting invalid altsetting 0 [ 1490.038205][T19344] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1490.854767][T19368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1490.882906][T19380] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3353'. [ 1491.896003][ T10] usb 4-1: USB disconnect, device number 106 [ 1492.168457][T19397] netlink: 'syz.3.3356': attribute type 1 has an invalid length. [ 1492.254702][T19397] bond2: entered promiscuous mode [ 1492.260151][T19397] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1492.369988][T19399] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1492.420727][T19399] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1492.461103][T19408] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=19408 comm=syz.1.3357 [ 1492.495632][T19399] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 1492.506252][T19408] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=19408 comm=syz.1.3357 [ 1492.508143][T19413] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1280 sclass=netlink_route_socket pid=19413 comm=syz.1.3357 [ 1492.519318][T19408] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=19408 comm=syz.1.3357 [ 1492.555959][T19408] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=19408 comm=syz.1.3357 [ 1492.677959][T19399] bond2: (slave wireguard0): making interface the new active one [ 1492.701992][T19412] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 1492.712940][T19399] wireguard0: entered promiscuous mode [ 1492.758293][T19399] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 1492.812707][T19397] bond2: (slave wireguard1): The slave device specified does not support setting the MAC address [ 1492.944925][T19397] bond2: (slave wireguard1): Enslaving as a backup interface with an up link [ 1493.085411][T19430] netlink: 'syz.3.3363': attribute type 1 has an invalid length. [ 1493.384933][T19432] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1493.433281][T19432] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 1493.564723][T19430] bond3: (slave gretap1): making interface the new active one [ 1493.607255][T19430] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 1493.667622][T19430] macvlan2: entered promiscuous mode [ 1493.697208][T19430] macvlan2: entered allmulticast mode [ 1493.727831][T19430] bond3: entered promiscuous mode [ 1493.754905][T19430] gretap1: entered promiscuous mode [ 1493.763294][T19430] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1493.811694][T19430] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 1493.905922][T19430] bond3: left promiscuous mode [ 1493.928028][T19430] gretap1: left promiscuous mode [ 1494.418279][T19436] fuse: Unknown parameter '0x0000000000000003' [ 1494.681931][T19448] wg1: entered promiscuous mode [ 1494.686879][T19448] wg1: entered allmulticast mode [ 1495.429770][ T29] audit: type=1400 audit(1496.397:991): avc: denied { map } for pid=19450 comm="syz.6.3367" path="socket:[77783]" dev="sockfs" ino=77783 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1495.747871][T19464] siw: device registration error -23 [ 1496.800897][T11070] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1496.967143][T19217] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1497.081328][T11070] usb 4-1: Using ep0 maxpacket: 16 [ 1497.096427][T11070] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1497.141141][T11070] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1497.153636][T11070] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.172615][T11070] usb 4-1: Product: syz [ 1497.180851][T11070] usb 4-1: Manufacturer: syz [ 1497.185460][T11070] usb 4-1: SerialNumber: syz [ 1497.204751][T11070] usb 4-1: config 0 descriptor?? [ 1497.222668][T11070] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1497.242504][T19217] usb 5-1: Using ep0 maxpacket: 16 [ 1497.247691][T11070] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 1497.265222][T19217] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1497.276211][T19217] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1497.288640][T19217] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1497.303605][T19217] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1497.315302][T19217] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1497.325363][ T29] audit: type=1400 audit(1498.297:992): avc: denied { ioctl } for pid=19489 comm="syz.1.3380" path="socket:[78871]" dev="sockfs" ino=78871 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1497.351217][T19217] usb 5-1: config 0 descriptor?? [ 1497.711158][T19503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3386'. [ 1498.280228][T19473] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 19473 comm: syz.3.3375) [ 1498.305082][ T29] audit: type=1800 audit(1499.277:993): pid=19473 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.3375" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=78902 res=0 errno=0 [ 1498.307276][T19217] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0027/input/input67 [ 1498.353047][ T5898] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1498.365619][T11070] em28xx 4-1:0.0: chip ID is em2765 [ 1498.445511][T17427] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1498.474210][T19217] microsoft 0003:045E:07DA.0027: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1498.530883][ T5898] usb 2-1: Using ep0 maxpacket: 32 [ 1498.537691][ T5898] usb 2-1: config 5 has an invalid interface number: 245 but max is 0 [ 1498.559585][T19506] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1498.660552][T17427] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1498.674602][ T5898] usb 2-1: config 5 has no interface number 0 [ 1498.883211][T17427] usb 3-1: config 2 interface 0 has no altsetting 0 [ 1498.889882][ T5898] usb 2-1: config 5 interface 245 has no altsetting 0 [ 1498.904814][T11070] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1498.930327][T11070] em28xx 4-1:0.0: board has no eeprom [ 1498.940918][ T5898] usb 2-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=ba.d2 [ 1498.950113][T17427] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1498.961882][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1498.971011][T17427] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1498.978998][T17427] usb 3-1: Product: syz [ 1498.990866][ T5898] usb 2-1: Product: syz [ 1498.995904][ T5898] usb 2-1: Manufacturer: syz [ 1499.000481][ T5898] usb 2-1: SerialNumber: syz [ 1499.015475][T17427] usb 3-1: Manufacturer: syz [ 1499.020093][T17427] usb 3-1: SerialNumber: syz [ 1499.024862][T11070] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1499.035865][T11070] em28xx 4-1:0.0: dvb set to bulk mode. [ 1499.046862][ T10] em28xx 4-1:0.0: Binding DVB extension [ 1499.064448][T11070] usb 4-1: USB disconnect, device number 107 [ 1499.099161][T17427] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1499.130640][T11070] em28xx 4-1:0.0: Disconnecting em28xx [ 1499.159532][T17427] usb 3-1: selecting invalid altsetting 0 [ 1499.179789][T17427] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1499.190911][ T10] em28xx 4-1:0.0: Registering input extension [ 1499.197174][T11070] em28xx 4-1:0.0: Closing input extension [ 1499.203409][T17427] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 1499.217063][T11070] em28xx 4-1:0.0: Freeing device [ 1499.222525][T17427] usb 3-1: media controller created [ 1499.481037][ T5954] usb 7-1: new full-speed USB device number 61 using dummy_hcd [ 1499.547908][T17427] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1499.621926][T19217] usb 5-1: reset high-speed USB device number 78 using dummy_hcd [ 1500.276959][ T5954] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 1500.316284][ T5954] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1500.343580][ T5898] gspca_main: mars-2.14.0 probing 093a:050f [ 1500.343989][ T5954] usb 7-1: Product: syz [ 1500.389491][ T5954] usb 7-1: Manufacturer: syz [ 1500.393241][ T5898] usb 2-1: USB disconnect, device number 99 [ 1500.398981][ T5954] usb 7-1: SerialNumber: syz [ 1500.433971][ T5954] usb 7-1: config 0 descriptor?? [ 1500.446533][T17427] usb 3-1: USB disconnect, device number 53 [ 1500.546567][ T5954] input: KB Gear Tablet as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input69 [ 1500.852410][T19526] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=19526 comm=syz.3.3390 [ 1500.865792][T19526] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=19526 comm=syz.3.3390 [ 1500.889804][T19526] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=19526 comm=syz.3.3390 [ 1500.907391][T19526] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=19526 comm=syz.3.3390 [ 1500.922169][T19527] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1280 sclass=netlink_route_socket pid=19527 comm=syz.3.3390 [ 1501.762029][T19548] siw: device registration error -23 [ 1501.776320][T19548] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1502.192560][ T10] usb 5-1: USB disconnect, device number 78 [ 1502.249230][ T24] usb 7-1: USB disconnect, device number 61 [ 1502.395609][ T29] audit: type=1400 audit(1503.367:994): avc: denied { checkpoint_restore } for pid=19554 comm="syz.4.3401" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1502.592454][T19567] bridge0: entered promiscuous mode [ 1502.670968][T19567] macsec1: entered promiscuous mode [ 1504.422297][T19579] wg1: entered promiscuous mode [ 1504.427448][T19579] wg1: entered allmulticast mode [ 1505.177879][T19593] Bluetooth: MGMT ver 1.23 [ 1505.371432][T19603] wg1: entered promiscuous mode [ 1505.376384][T19603] wg1: entered allmulticast mode [ 1505.844133][T19608] siw: device registration error -23 [ 1505.858637][T19608] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1506.285133][ T29] audit: type=1400 audit(1507.247:995): avc: denied { read append } for pid=19613 comm="syz.4.3417" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1506.318001][ T29] audit: type=1400 audit(1507.257:996): avc: denied { open } for pid=19613 comm="syz.4.3417" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1506.345784][T19616] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=19616 comm=syz.1.3416 [ 1506.365979][T19616] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=19616 comm=syz.1.3416 [ 1506.379206][T19616] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=19616 comm=syz.1.3416 [ 1506.392229][T19616] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=19616 comm=syz.1.3416 [ 1506.478376][T19616] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1280 sclass=netlink_route_socket pid=19616 comm=syz.1.3416 [ 1506.567900][ T29] audit: type=1400 audit(1507.377:997): avc: denied { map } for pid=19613 comm="syz.4.3417" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1506.664316][ T29] audit: type=1400 audit(1507.377:998): avc: denied { write execute } for pid=19613 comm="syz.4.3417" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1507.660376][ T5128] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 1509.292401][T19652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3428'. [ 1509.664572][ T24] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1509.835785][ T24] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1509.864719][ T24] usb 3-1: config 2 interface 0 has no altsetting 0 [ 1509.903852][ T24] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1509.942059][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1509.962193][ T24] usb 3-1: Product: syz [ 1509.967244][T19655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3429'. [ 1509.976347][ T24] usb 3-1: Manufacturer: syz [ 1509.983364][ T24] usb 3-1: SerialNumber: syz [ 1510.096973][ T24] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1510.144631][ T24] usb 3-1: selecting invalid altsetting 0 [ 1510.171973][ T24] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1510.184138][ T24] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 1510.192820][ T24] usb 3-1: media controller created [ 1510.203516][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1510.403706][T19660] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3430'. [ 1510.851285][T19662] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1511.579120][T19671] CIFS mount error: No usable UNC path provided in device string! [ 1511.579120][T19671] [ 1511.590292][T19671] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1512.006457][T19682] SET target dimension over the limit! [ 1512.159051][T19686] wg1: entered promiscuous mode [ 1512.166553][T19686] wg1: entered allmulticast mode [ 1512.958721][ T24] usb 3-1: USB disconnect, device number 54 [ 1513.035717][T19700] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3441'. [ 1513.507930][T19702] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3440'. [ 1514.875038][T19717] fuse: Unknown parameter '0x0000000000000003' [ 1514.934952][ T29] audit: type=1400 audit(1515.887:999): avc: denied { watch watch_reads } for pid=19718 comm="syz.4.3445" path="/bus" dev="proc" ino=4026531853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 1515.191625][T19733] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1516.177311][T19756] Bluetooth: hci1: Frame reassembly failed (-90) [ 1516.237206][T11361] Bluetooth: hci1: Frame reassembly failed (-84) [ 1516.301435][T19217] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1516.470960][T19217] usb 7-1: Using ep0 maxpacket: 16 [ 1516.479808][T19217] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 1516.492713][T19217] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1516.510955][T19217] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1516.521020][T19217] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 1516.620884][T19217] usb 7-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 1516.630008][T19217] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1516.643753][T19217] usb 7-1: config 0 descriptor?? [ 1517.040985][ T5847] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 1517.213431][ T5847] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1517.238513][ T5847] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1517.266576][ T5847] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1517.295372][ T5847] usb 3-1: Product: syz [ 1517.307389][ T5847] usb 3-1: Manufacturer: syz [ 1517.325840][ T5847] usb 3-1: SerialNumber: syz [ 1517.344080][ T5847] usb 3-1: config 0 descriptor?? [ 1517.364021][ T5847] usb 3-1: selecting invalid altsetting 0 [ 1517.891447][T19217] usbhid 7-1:0.0: can't add hid device: -71 [ 1517.910877][T19217] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1518.230892][ T5128] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1518.386904][T19797] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3459'. [ 1518.401120][T19217] usb 7-1: USB disconnect, device number 62 [ 1518.660229][ T29] audit: type=1400 audit(1519.627:1000): avc: denied { wake_alarm } for pid=19802 comm="syz.4.3462" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1519.004754][T19217] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 1519.567942][T19217] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1519.577832][T19217] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1519.587813][T19217] usb 7-1: config 0 descriptor?? [ 1519.598044][T19217] cp210x 7-1:0.0: cp210x converter detected [ 1520.112627][ T5847] usb 3-1: USB disconnect, device number 55 [ 1520.264714][T19821] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1520.318409][T19217] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1520.396870][T19217] cp210x 7-1:0.0: failed to get vendor val 0x3711 size 2: -121 [ 1520.408525][T19217] cp210x 7-1:0.0: GPIO initialisation failed: -121 [ 1520.426001][T19217] usb 7-1: cp210x converter now attached to ttyUSB0 [ 1520.974071][T19833] netlink: 'syz.3.3466': attribute type 1 has an invalid length. [ 1521.073885][T19836] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1521.110318][T19836] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 1521.199873][T19833] macvlan2: entered promiscuous mode [ 1521.216535][T19833] macvlan2: entered allmulticast mode [ 1521.235415][T19833] bond4: entered promiscuous mode [ 1521.253521][T19833] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1521.273602][T19833] bond4: left promiscuous mode [ 1522.339237][ T10] usb 7-1: USB disconnect, device number 63 [ 1522.364416][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1522.399577][ T10] cp210x 7-1:0.0: device disconnected [ 1522.626817][ T29] audit: type=1326 audit(1523.597:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19865 comm="syz.1.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6581f9c799 code=0x7fc00000 [ 1522.636801][T19868] SET target dimension over the limit! [ 1523.137520][T19880] orangefs_devreq_write_iter: total:0: must be at least:8240: [ 1523.285967][ T29] audit: type=1326 audit(1524.257:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19865 comm="syz.1.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6581f5cfce code=0x7fc00000 [ 1523.419291][ T29] audit: type=1326 audit(1524.257:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19865 comm="syz.1.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6581f5cfce code=0x7fc00000 [ 1523.457232][ T29] audit: type=1326 audit(1524.257:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19865 comm="syz.1.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6581f9c799 code=0x7fc00000 [ 1524.143532][ T29] audit: type=1326 audit(1524.257:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19865 comm="syz.1.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6581f9c799 code=0x7fc00000 [ 1524.205009][T19892] netlink: 'syz.6.3477': attribute type 20 has an invalid length. [ 1524.231092][T19894] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1524.243801][ T29] audit: type=1326 audit(1524.257:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19865 comm="syz.1.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6581f9c799 code=0x7fc00000 [ 1524.280843][T19217] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 1524.410509][ T29] audit: type=1326 audit(1524.257:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19865 comm="syz.1.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6581f9c799 code=0x7fc00000 [ 1524.882331][T19217] usb 3-1: config 8 has an invalid interface number: 177 but max is 0 [ 1524.892765][T19217] usb 3-1: config 8 has no interface number 0 [ 1524.899272][ T29] audit: type=1326 audit(1524.257:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19865 comm="syz.1.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6581f9c799 code=0x7fc00000 [ 1524.923330][T19217] usb 3-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1524.960415][T19217] usb 3-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1524.985844][ T29] audit: type=1326 audit(1524.257:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19865 comm="syz.1.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6581f9c799 code=0x7fc00000 [ 1525.029631][T19217] usb 3-1: config 8 interface 177 has no altsetting 0 [ 1525.046678][T19217] usb 3-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1525.073121][T19217] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1525.094476][ T29] audit: type=1326 audit(1524.257:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19865 comm="syz.1.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6581f9c799 code=0x7fc00000 [ 1525.129288][T19888] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1525.529036][T19915] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3484'. [ 1525.734768][T19917] netlink: 'syz.3.3485': attribute type 4 has an invalid length. [ 1525.924433][T19922] netlink: 'syz.3.3487': attribute type 1 has an invalid length. [ 1526.401373][T19217] usb 3-1: string descriptor 0 read error: -71 [ 1526.409173][T19217] ir_toy 3-1:8.177: required endpoints not found [ 1526.426492][T19217] usb 3-1: USB disconnect, device number 56 [ 1526.515081][T19925] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1526.546579][T19925] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 1526.894277][T19928] macvlan2: entered promiscuous mode [ 1526.908603][T19928] macvlan2: entered allmulticast mode [ 1526.933154][T19928] bond5: entered promiscuous mode [ 1526.945778][T19928] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1527.336761][T19928] bond5: left promiscuous mode [ 1527.342177][T18584] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1527.500999][T18584] usb 5-1: Using ep0 maxpacket: 16 [ 1527.525817][T18584] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1527.535842][T19954] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3497'. [ 1527.581681][T18584] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1527.582957][T19949] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3495'. [ 1527.618321][T19953] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1527.802878][T18584] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1527.863689][T18584] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1527.909298][T18584] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1527.958026][T18584] usb 5-1: config 0 descriptor?? [ 1528.150990][ T5847] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 1528.330893][ T5847] usb 7-1: Using ep0 maxpacket: 32 [ 1528.357774][ T5847] usb 7-1: config 5 has an invalid interface number: 245 but max is 0 [ 1528.408471][ T5847] usb 7-1: config 5 has no interface number 0 [ 1528.438541][T18584] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0028/input/input70 [ 1528.451048][ T5847] usb 7-1: config 5 interface 245 has no altsetting 0 [ 1528.461565][ T5847] usb 7-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=ba.d2 [ 1528.471896][ T5847] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1528.499172][ T5847] usb 7-1: Product: syz [ 1528.503504][ T5847] usb 7-1: Manufacturer: syz [ 1528.508159][ T5847] usb 7-1: SerialNumber: syz [ 1528.570083][T18584] microsoft 0003:045E:07DA.0028: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1528.651454][T19972] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1529.631040][ T24] usb 5-1: reset high-speed USB device number 79 using dummy_hcd [ 1530.161964][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 1530.161981][ T29] audit: type=1326 audit(1531.117:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19988 comm="syz.1.3501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6581f9c799 code=0x7ffc0000 [ 1530.210300][ T5847] gspca_main: mars-2.14.0 probing 093a:050f [ 1530.237327][ T29] audit: type=1326 audit(1531.117:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19988 comm="syz.1.3501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6581f9c799 code=0x7ffc0000 [ 1530.260971][ T29] audit: type=1326 audit(1531.117:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19988 comm="syz.1.3501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6581f9c799 code=0x7ffc0000 [ 1530.284752][ T29] audit: type=1326 audit(1531.117:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19988 comm="syz.1.3501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6581f9c799 code=0x7ffc0000 [ 1530.338221][ T5847] usb 7-1: USB disconnect, device number 64 [ 1530.450809][ T29] audit: type=1326 audit(1531.117:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19988 comm="syz.1.3501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6581f9c799 code=0x7ffc0000 [ 1530.601134][ T29] audit: type=1326 audit(1531.117:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19988 comm="syz.1.3501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6581f9c799 code=0x7ffc0000 [ 1531.042843][ T29] audit: type=1326 audit(1531.127:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19988 comm="syz.1.3501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6581f9c799 code=0x7ffc0000 [ 1531.072026][ T29] audit: type=1326 audit(1531.127:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19988 comm="syz.1.3501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6581f9c799 code=0x7ffc0000 [ 1531.161264][ T29] audit: type=1326 audit(1531.127:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19988 comm="syz.1.3501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6581f9c799 code=0x7ffc0000 [ 1531.184749][ T29] audit: type=1326 audit(1531.127:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19988 comm="syz.1.3501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6581f9c799 code=0x7ffc0000 [ 1531.741821][T20013] hub 9-0:1.0: USB hub found [ 1531.900324][T20013] hub 9-0:1.0: 1 port detected [ 1532.404146][T19217] libceph: connect (1)[c::]:6789 error -13 [ 1532.425794][T19217] libceph: mon0 (1)[c::]:6789 connect error [ 1532.458125][T20011] ceph: No mds server is up or the cluster is laggy [ 1532.483610][T20023] CIFS mount error: No usable UNC path provided in device string! [ 1532.483610][T20023] [ 1532.535654][T20023] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1532.888194][T20027] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3508'. [ 1533.175285][ T5919] usb 5-1: USB disconnect, device number 79 [ 1533.331324][T18584] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 1533.651137][T20035] dummy0: entered promiscuous mode [ 1533.657126][T20035] macsec1: entered allmulticast mode [ 1533.662673][T20035] dummy0: entered allmulticast mode [ 1533.742208][T18584] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1533.836411][T20035] dummy0: left allmulticast mode [ 1533.837519][T18584] usb 7-1: config 2 interface 0 has no altsetting 0 [ 1533.849795][T20035] dummy0: left promiscuous mode [ 1533.876800][T18584] usb 7-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1533.899444][T18584] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1533.914593][T20038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3511'. [ 1533.924706][T18584] usb 7-1: Product: syz [ 1533.930164][T20038] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3511'. [ 1533.940383][T18584] usb 7-1: Manufacturer: syz [ 1533.953055][T18584] usb 7-1: SerialNumber: syz [ 1533.954849][T20037] bond1: option xmit_hash_policy: invalid value (6) [ 1534.006863][T18584] usb 7-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1534.024590][T20037] bond1 (unregistering): Released all slaves [ 1534.030805][T18584] usb 7-1: selecting invalid altsetting 0 [ 1534.043351][T18584] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1534.043798][T20043] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1534.072066][T18584] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 1534.090866][T18584] usb 7-1: media controller created [ 1534.204180][T18584] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1534.568803][T20049] tipc: Enabling of bearer rejected, failed to enable media [ 1536.774481][T18584] usb 7-1: USB disconnect, device number 65 [ 1537.109465][T20066] CIFS mount error: No usable UNC path provided in device string! [ 1537.109465][T20066] [ 1537.129237][T20066] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1537.516412][T20078] vxcan1 speed is unknown, defaulting to 1000 [ 1537.533197][T20078] vxcan1 speed is unknown, defaulting to 1000 [ 1537.574762][T20079] syz.3.3518 uses old SIOCAX25GETINFO [ 1537.852913][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 1537.852943][ T29] audit: type=1326 audit(1538.537:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20070 comm="syz.3.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66ad39c799 code=0x7ffc0000 [ 1537.940192][T20078] vxcan1 speed is unknown, defaulting to 1000 [ 1537.979186][ T5898] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1538.101268][T20078] infiniband syz2: set active [ 1538.106279][T20078] infiniband syz2: added vxcan1 [ 1538.116457][T20078] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1538.120574][T20078] infiniband syz2: Couldn't open port 1 [ 1538.162855][T20078] RDS/IB: syz2: added [ 1538.167372][T20078] smc: adding ib device syz2 with port count 1 [ 1538.174640][T20078] smc: ib device syz2 port 1 has no pnetid [ 1538.182934][T20078] vxcan1 speed is unknown, defaulting to 1000 [ 1538.345988][T20078] vxcan1 speed is unknown, defaulting to 1000 [ 1538.508532][T20078] vxcan1 speed is unknown, defaulting to 1000 [ 1538.667997][T20078] vxcan1 speed is unknown, defaulting to 1000 [ 1538.806639][ T5847] vxcan1 speed is unknown, defaulting to 1000 [ 1538.828097][T20078] vxcan1 speed is unknown, defaulting to 1000 [ 1538.838366][ T29] audit: type=1326 audit(1538.537:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20070 comm="syz.3.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66ad39c799 code=0x7ffc0000 [ 1538.866159][T17427] vxcan1 speed is unknown, defaulting to 1000 [ 1538.873136][ T29] audit: type=1326 audit(1538.537:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20070 comm="syz.3.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f66ad39c799 code=0x7ffc0000 [ 1538.901415][ T29] audit: type=1326 audit(1538.537:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20070 comm="syz.3.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66ad39c799 code=0x7ffc0000 [ 1538.925199][ T29] audit: type=1326 audit(1538.537:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20070 comm="syz.3.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66ad39c799 code=0x7ffc0000 [ 1539.005016][T20078] vxcan1 speed is unknown, defaulting to 1000 [ 1539.061206][ T5898] usb 3-1: Using ep0 maxpacket: 8 [ 1539.070724][ T5898] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1539.086342][ T5898] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1539.281770][ T5898] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1539.447408][ T29] audit: type=1326 audit(1538.547:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20070 comm="syz.3.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f66ad39c799 code=0x7ffc0000 [ 1539.447500][ T5898] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1539.703750][T20085] netlink: 'syz.4.3521': attribute type 1 has an invalid length. [ 1539.746549][ T29] audit: type=1326 audit(1538.547:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20070 comm="syz.3.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66ad39c799 code=0x7ffc0000 [ 1539.958159][ T29] audit: type=1326 audit(1538.547:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20070 comm="syz.3.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66ad39c799 code=0x7ffc0000 [ 1540.211005][ T29] audit: type=1326 audit(1538.547:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20070 comm="syz.3.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f66ad39c799 code=0x7ffc0000 [ 1540.274008][T20087] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1540.397438][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1540.403894][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1540.429680][ T29] audit: type=1400 audit(1538.547:1293): avc: denied { write } for pid=20070 comm="syz.3.3518" path="socket:[80704]" dev="sockfs" ino=80704 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1540.471795][T20087] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1540.517631][T20095] netlink: 'syz.3.3522': attribute type 1 has an invalid length. [ 1540.528156][T20095] /dev/nullb0: Can't open blockdev [ 1540.617867][ T5898] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1540.631736][ T5898] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1540.640938][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1540.670196][ T5898] usb 3-1: can't set config #16, error -71 [ 1540.678829][ T5898] usb 3-1: USB disconnect, device number 57 [ 1540.885376][ T5919] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1541.137816][T20106] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3524'. [ 1541.789911][T20105] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1541.795854][T20085] bond1: (slave gretap1): making interface the new active one [ 1541.830854][ T5919] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1541.851844][T20085] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1541.861432][ T5919] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1541.952946][ T5919] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1541.969756][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1542.005845][T20087] macvlan2: entered promiscuous mode [ 1542.014413][ T5919] usb 4-1: Product: syz [ 1542.023361][T20087] macvlan2: entered allmulticast mode [ 1542.040778][ T5919] usb 4-1: Manufacturer: syz [ 1542.052602][T20087] bond1: entered promiscuous mode [ 1542.059882][ T5919] usb 4-1: SerialNumber: syz [ 1542.077293][T20087] gretap1: entered promiscuous mode [ 1542.101341][ T5919] cdc_mbim 4-1:1.0: skipping garbage [ 1542.106852][T20087] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1542.156475][T20087] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 1542.215406][T20087] bond1: left promiscuous mode [ 1542.220304][T20087] gretap1: left promiscuous mode [ 1542.290676][T20114] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.3526'. [ 1542.303570][T20095] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1542.351503][T20116] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1542.380828][T19217] usb 7-1: new full-speed USB device number 66 using dummy_hcd [ 1542.993910][T20095] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1543.003019][ T5919] cdc_mbim 4-1:1.0: setting tx_max = 184 [ 1543.028385][ T5919] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 1543.049573][ T5919] wwan wwan0: port wwan0mbim0 attached [ 1543.070185][ T5919] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 12:06:e7:af:20:b3 [ 1543.092518][T19217] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1543.108954][T19217] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1543.126605][T19217] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1543.168146][T19217] usb 7-1: Product: syz [ 1543.181623][T19217] usb 7-1: Manufacturer: syz [ 1543.193135][T20123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3529'. [ 1543.197722][T19217] usb 7-1: SerialNumber: syz [ 1543.242883][T19217] usb 7-1: config 0 descriptor?? [ 1543.268415][T19217] usb 7-1: selecting invalid altsetting 0 [ 1543.461270][ T5919] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1543.497218][T20112] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1544.389603][ T5919] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1544.437285][ T5919] usb 3-1: config 2 interface 0 has no altsetting 0 [ 1544.483793][T20140] CIFS mount error: No usable UNC path provided in device string! [ 1544.483793][T20140] [ 1544.511077][ T5919] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1544.543077][T20140] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1544.552784][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.569254][ T5847] usb 4-1: USB disconnect, device number 108 [ 1544.583816][ T5847] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 1544.594765][ T5919] usb 3-1: Product: syz [ 1544.599033][ T5919] usb 3-1: Manufacturer: syz [ 1544.608078][ T5919] usb 3-1: SerialNumber: syz [ 1544.642475][ T5919] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1544.697681][ T5919] usb 3-1: selecting invalid altsetting 0 [ 1544.723732][ T5919] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1544.774342][ T5847] wwan wwan0: port wwan0mbim0 disconnected [ 1545.200932][T19217] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 1545.261093][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 1545.295496][ T5919] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 1545.324853][ T5919] usb 3-1: media controller created [ 1545.354436][ T5919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1545.404891][T19217] usb 5-1: device descriptor read/64, error -32 [ 1545.439853][ T24] usb 7-1: USB disconnect, device number 66 [ 1545.788479][T19217] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 1546.331142][T20171] siw: device registration error -23 [ 1546.702739][T20172] netlink: 'syz.6.3535': attribute type 1 has an invalid length. [ 1547.391419][T20175] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1547.939592][T19217] usb 5-1: device descriptor read/all, error -71 [ 1548.045450][T20176] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1548.056817][T19217] usb usb5-port1: attempt power cycle [ 1548.080139][T20176] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 1548.163586][ T5898] usb 3-1: USB disconnect, device number 58 [ 1548.286010][T20172] macvlan0: entered promiscuous mode [ 1548.312999][T20172] macvlan0: entered allmulticast mode [ 1548.336915][T20172] bond4: entered promiscuous mode [ 1548.350065][T20172] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1548.392311][T20172] bond4: left promiscuous mode [ 1549.345613][T20199] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.3539'. [ 1549.969500][T20206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3542'. [ 1549.980842][T20206] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3542'. [ 1550.001334][T20206] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3542'. [ 1550.061983][T20208] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1551.715576][T20224] IPv6: NLM_F_CREATE should be specified when creating new route [ 1551.723789][T20224] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1551.731438][T20224] IPv6: NLM_F_CREATE should be set when creating new route [ 1551.831032][ T5954] usb 2-1: new full-speed USB device number 100 using dummy_hcd [ 1552.313398][ T5954] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1552.322628][ T5954] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1552.332134][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1552.341502][ T5954] usb 2-1: Product: syz [ 1552.345886][ T5954] usb 2-1: Manufacturer: syz [ 1552.350533][ T5954] usb 2-1: SerialNumber: syz [ 1552.355358][ T5847] usb 7-1: new full-speed USB device number 67 using dummy_hcd [ 1552.372472][ T5954] usb 2-1: config 0 descriptor?? [ 1552.462100][T20230] siw: device registration error -23 [ 1552.478112][T20230] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1552.803227][ T5954] usb 2-1: selecting invalid altsetting 0 [ 1552.844370][T20232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3548'. [ 1552.920873][ T5847] usb 7-1: device descriptor read/64, error -71 [ 1552.927231][ T24] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1553.004790][T20222] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1553.554156][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1553.567980][ T5954] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1553.599154][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1553.615865][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1553.628660][ T24] usb 5-1: Product: syz [ 1553.633002][ T5847] usb 7-1: new full-speed USB device number 68 using dummy_hcd [ 1553.646584][ T24] usb 5-1: Manufacturer: syz [ 1553.653250][ T24] usb 5-1: SerialNumber: syz [ 1553.752139][ T5954] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1553.763279][ T5954] usb 4-1: config 2 interface 0 has no altsetting 0 [ 1553.772837][ T5954] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1553.783729][ T5954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1553.791874][ T5954] usb 4-1: Product: syz [ 1553.796227][ T5954] usb 4-1: Manufacturer: syz [ 1553.801012][ T5954] usb 4-1: SerialNumber: syz [ 1553.814016][ T5954] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1553.822871][ T5954] usb 4-1: selecting invalid altsetting 0 [ 1553.830543][ T5954] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1553.841848][ T5954] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 1553.850165][ T5954] usb 4-1: media controller created [ 1553.861089][ T5954] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1553.875928][T20229] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1553.882464][T20229] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1553.894751][T20229] vhci_hcd vhci_hcd.0: Device attached [ 1553.991154][ T5847] usb usb7-port1: attempt power cycle [ 1554.109351][T20229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1554.120089][T20229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1554.130862][ T5898] usb 41-1: new high-speed USB device number 5 using vhci_hcd [ 1554.341916][ T5847] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 1554.352883][T20243] vhci_hcd: connection reset by peer [ 1554.359912][ T13] vhci_hcd vhci_hcd.4: stop threads [ 1554.361347][ T24] cdc_ncm 5-1:1.0: bind() failure [ 1554.369357][ T13] vhci_hcd vhci_hcd.4: release socket [ 1554.377437][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 1554.377659][ T24] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1554.392488][ T24] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1554.401200][ T5847] usb 7-1: Using ep0 maxpacket: 16 [ 1554.408061][ T24] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 1554.416574][T20246] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3548'. [ 1554.426725][ T5847] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1554.438014][ T5847] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1554.455226][ T24] usb 5-1: USB disconnect, device number 83 [ 1554.461287][ T5847] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1554.478284][ T5847] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1554.495533][ T5847] usb 7-1: config 0 descriptor?? [ 1554.677060][T18584] usb 2-1: USB disconnect, device number 100 [ 1554.818780][T20252] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.3552'. [ 1556.110645][ T5847] corsair 0003:1B1C:1B02.0029: collection stack underflow [ 1556.121739][ T5847] corsair 0003:1B1C:1B02.0029: item 0 0 0 12 parsing failed [ 1556.122917][ T792] usb 4-1: USB disconnect, device number 109 [ 1556.129631][ T5847] corsair 0003:1B1C:1B02.0029: parse failed [ 1556.146127][ T5847] corsair 0003:1B1C:1B02.0029: probe with driver corsair failed with error -22 [ 1556.291385][T20264] FAULT_INJECTION: forcing a failure. [ 1556.291385][T20264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1556.297030][ T5847] usb 7-1: USB disconnect, device number 69 [ 1556.310670][T20264] CPU: 0 UID: 0 PID: 20264 Comm: syz.3.3555 Tainted: G L syzkaller #0 PREEMPT(full) [ 1556.310699][T20264] Tainted: [L]=SOFTLOCKUP [ 1556.310705][T20264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1556.310714][T20264] Call Trace: [ 1556.310721][T20264] [ 1556.310727][T20264] dump_stack_lvl+0x100/0x190 [ 1556.310761][T20264] should_fail_ex.cold+0x5/0xa [ 1556.310783][T20264] _copy_to_user+0x32/0xd0 [ 1556.310810][T20264] simple_read_from_buffer+0xcb/0x170 [ 1556.310837][T20264] proc_fail_nth_read+0x1af/0x230 [ 1556.310862][T20264] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1556.310887][T20264] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1556.310909][T20264] vfs_read+0x1e4/0xb30 [ 1556.310938][T20264] ? __pfx_vfs_read+0x10/0x10 [ 1556.310961][T20264] ? __fget_files+0x215/0x3d0 [ 1556.310983][T20264] ? __fget_files+0x21f/0x3d0 [ 1556.311007][T20264] ksys_read+0x12a/0x250 [ 1556.311033][T20264] ? __pfx_ksys_read+0x10/0x10 [ 1556.311064][T20264] do_syscall_64+0x106/0xf80 [ 1556.311083][T20264] ? clear_bhb_loop+0x40/0x90 [ 1556.311105][T20264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1556.311124][T20264] RIP: 0033:0x7f66ad35cfce [ 1556.311139][T20264] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1556.311156][T20264] RSP: 002b:00007f66ae2e9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1556.311173][T20264] RAX: ffffffffffffffda RBX: 00007f66ae2ea6c0 RCX: 00007f66ad35cfce [ 1556.311184][T20264] RDX: 000000000000000f RSI: 00007f66ae2ea0a0 RDI: 0000000000000008 [ 1556.311194][T20264] RBP: 00007f66ae2ea090 R08: 0000000000000000 R09: 0000000000000000 [ 1556.311205][T20264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1556.311215][T20264] R13: 00007f66ad616128 R14: 00007f66ad616090 R15: 00007ffdf2f15948 [ 1556.311245][T20264] [ 1556.512038][T20266] netlink: 'syz.3.3555': attribute type 3 has an invalid length. [ 1556.544965][T20266] netlink: 'syz.3.3555': attribute type 1 has an invalid length. [ 1558.197974][T20285] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 1558.204515][T20285] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1558.571404][T20285] vhci_hcd vhci_hcd.0: Device attached [ 1558.715776][T20296] netlink: 'syz.1.3563': attribute type 72 has an invalid length. [ 1558.745350][T20287] vhci_hcd: connection closed [ 1558.745618][ T5934] vhci_hcd vhci_hcd.4: stop threads [ 1558.777276][T20291] fuse: Unknown parameter '0xffffffffffffffff' [ 1558.787081][ T5934] vhci_hcd vhci_hcd.4: release socket [ 1558.792806][ T5934] vhci_hcd vhci_hcd.4: disconnect device [ 1558.807757][T20300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3565'. [ 1558.950815][ T5847] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 1559.101007][ T792] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1559.132038][ T5847] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1559.162848][ T5847] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1559.176400][ T5847] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1559.184811][ T5847] usb 7-1: Product: syz [ 1559.191528][ T5847] usb 7-1: Manufacturer: syz [ 1559.199252][ T5847] usb 7-1: SerialNumber: syz [ 1559.234295][ T5898] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1559.273831][ T792] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1559.297242][ T792] usb 2-1: config 2 interface 0 has no altsetting 0 [ 1559.328477][ T792] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1559.341264][ T792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1559.370594][ T792] usb 2-1: Product: syz [ 1559.405735][ T792] usb 2-1: Manufacturer: syz [ 1559.427405][ T5847] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 70 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1559.458569][ T792] usb 2-1: SerialNumber: syz [ 1559.599586][ T792] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1560.157738][ T792] usb 2-1: selecting invalid altsetting 0 [ 1560.192763][ T792] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1560.205892][ C0] usblp0: nonzero write bulk status received: -71 [ 1560.213391][ T5847] usb 7-1: USB disconnect, device number 70 [ 1560.246884][ T5847] usblp0: removed [ 1560.256693][T20300] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3565'. [ 1560.291335][ T792] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 1560.324819][ T792] usb 2-1: media controller created [ 1560.406891][ T792] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1560.646175][ T792] usb 2-1: USB disconnect, device number 101 [ 1560.895840][T20320] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3569'. [ 1563.115096][T20339] netlink: 'syz.6.3575': attribute type 72 has an invalid length. [ 1563.260896][T20343] CIFS mount error: No usable UNC path provided in device string! [ 1563.260896][T20343] [ 1563.282444][T20343] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1563.353037][T20346] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3576'. [ 1563.635864][T20351] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3579'. [ 1563.647505][ T5954] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 1564.120823][ T5954] usb 7-1: Using ep0 maxpacket: 16 [ 1564.130064][ T5954] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1564.145951][ T5954] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1564.163742][ T5954] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1564.186774][ T5954] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1564.201516][ T5954] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1564.219600][ T5954] usb 7-1: config 0 descriptor?? [ 1564.640907][T17427] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1564.675895][ T5954] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.002A/input/input71 [ 1564.700878][ T5847] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1564.872253][T17427] usb 5-1: Using ep0 maxpacket: 32 [ 1564.882370][T17427] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1564.907830][T17427] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1565.373269][T20365] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1565.377866][ T5847] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1565.403751][T17427] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1565.420245][ T5847] usb 2-1: config 1 has an invalid interface number: 43 but max is 1 [ 1565.461561][T17427] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1565.462020][ T5954] microsoft 0003:045E:07DA.002A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 1565.488305][ T5847] usb 2-1: config 1 has no interface number 1 [ 1565.512612][ T5847] usb 2-1: config 1 interface 0 altsetting 247 endpoint 0x4 has invalid maxpacket 600, setting to 64 [ 1565.559429][T17427] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1565.584191][T17427] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 102 [ 1565.605326][ T5847] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1565.647073][ T5847] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=f6.75 [ 1565.651662][T17427] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1565.677126][T20368] kvm: kvm [20367]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0 [ 1565.680835][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1565.686352][T17427] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1565.714485][T17427] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1565.727201][ T5847] usb 2-1: Product: syz [ 1565.728275][T17427] usb 5-1: config 0 descriptor?? [ 1565.737569][T20355] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1565.752272][ T5847] usb 2-1: Manufacturer: syz [ 1565.758719][ T5847] usb 2-1: SerialNumber: syz [ 1565.870865][ T5954] usb 7-1: reset high-speed USB device number 71 using dummy_hcd [ 1565.957784][T17427] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 84 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1566.002082][ T5847] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1566.009436][ T5847] gspca_spca501: reg write: error -71 [ 1566.015629][T20372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3585'. [ 1566.026346][ T5847] spca501 2-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 1566.035819][ T5847] spca501 2-1:1.0: probe with driver spca501 failed with error -22 [ 1566.088663][ T5847] usb 2-1: USB disconnect, device number 102 [ 1566.177505][T20355] FAULT_INJECTION: forcing a failure. [ 1566.177505][T20355] name failslab, interval 1, probability 0, space 0, times 0 [ 1566.214037][T20355] CPU: 0 UID: 0 PID: 20355 Comm: syz.4.3581 Tainted: G L syzkaller #0 PREEMPT(full) [ 1566.214065][T20355] Tainted: [L]=SOFTLOCKUP [ 1566.214071][T20355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1566.214080][T20355] Call Trace: [ 1566.214084][T20355] [ 1566.214088][T20355] dump_stack_lvl+0x100/0x190 [ 1566.214110][T20355] should_fail_ex.cold+0x5/0xa [ 1566.214125][T20355] should_failslab+0xc2/0x120 [ 1566.214137][T20355] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1566.214165][T20355] ? alloc_empty_file+0x55/0x1c0 [ 1566.214185][T20355] ? __pfx_stack_trace_save+0x10/0x10 [ 1566.214209][T20355] alloc_empty_file+0x55/0x1c0 [ 1566.214227][T20355] path_openat+0xe8/0x31a0 [ 1566.214238][T20355] ? kasan_save_stack+0x3f/0x50 [ 1566.214252][T20355] ? kasan_save_stack+0x30/0x50 [ 1566.214267][T20355] ? kasan_save_track+0x14/0x30 [ 1566.214282][T20355] ? __kasan_slab_alloc+0x89/0x90 [ 1566.214306][T20355] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1566.214327][T20355] ? do_getname+0x35/0x390 [ 1566.214345][T20355] ? do_sys_openat2+0xc5/0x1e0 [ 1566.214364][T20355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1566.214378][T20355] ? __pfx_path_openat+0x10/0x10 [ 1566.214394][T20355] do_file_open+0x20e/0x430 [ 1566.214406][T20355] ? __pfx_do_file_open+0x10/0x10 [ 1566.214428][T20355] ? alloc_fd+0x476/0x790 [ 1566.214449][T20355] ? do_getname+0x191/0x390 [ 1566.214471][T20355] do_sys_openat2+0x10d/0x1e0 [ 1566.214491][T20355] ? __pfx_do_sys_openat2+0x10/0x10 [ 1566.214509][T20355] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1566.214525][T20355] ? __fget_files+0x21f/0x3d0 [ 1566.214538][T20355] __x64_sys_openat+0x12d/0x210 [ 1566.214552][T20355] ? __pfx___x64_sys_openat+0x10/0x10 [ 1566.214565][T20355] ? ksys_write+0x1ac/0x250 [ 1566.214593][T20355] do_syscall_64+0x106/0xf80 [ 1566.214611][T20355] ? clear_bhb_loop+0x40/0x90 [ 1566.214630][T20355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1566.214646][T20355] RIP: 0033:0x7fad5b95cfce [ 1566.214659][T20355] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1566.214670][T20355] RSP: 002b:00007fad5c77bb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1566.214681][T20355] RAX: ffffffffffffffda RBX: 00007fad5c77c6c0 RCX: 00007fad5b95cfce [ 1566.214688][T20355] RDX: 0000000000000002 RSI: 00007fad5c77bc00 RDI: ffffffffffffff9c [ 1566.214694][T20355] RBP: 00007fad5c77c090 R08: 0000000000000000 R09: 0000000000000000 [ 1566.214700][T20355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1566.214706][T20355] R13: 00007fad5bc16038 R14: 00007fad5bc15fa0 R15: 00007fff25aeb4b8 [ 1566.214723][T20355] [ 1566.483792][T17427] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1566.652145][T17427] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1566.662402][T17427] usb 4-1: config 2 interface 0 has no altsetting 0 [ 1566.671327][T17427] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1566.680436][T17427] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1566.688570][T17427] usb 4-1: Product: syz [ 1566.692797][T17427] usb 4-1: Manufacturer: syz [ 1566.697425][T17427] usb 4-1: SerialNumber: syz [ 1566.710973][T17427] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1566.719871][T17427] usb 4-1: selecting invalid altsetting 0 [ 1566.728996][T17427] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1566.739619][T17427] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 1566.748577][T17427] usb 4-1: media controller created [ 1566.761374][T17427] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1566.889269][ T5919] usb 5-1: USB disconnect, device number 84 [ 1567.382369][ T5919] usblp0: removed [ 1567.549514][T20384] CIFS mount error: No usable UNC path provided in device string! [ 1567.549514][T20384] [ 1567.567586][T20383] netlink: 'syz.4.3588': attribute type 72 has an invalid length. [ 1567.603696][T20384] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1567.735439][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 1567.735458][ T29] audit: type=1400 audit(1568.707:1325): avc: denied { create } for pid=20385 comm="syz.4.3590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1568.601456][T20379] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3585'. [ 1568.652144][T20396] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3592'. [ 1568.760874][ T5847] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1568.811682][T20396] syz_tun (unregistering): left allmulticast mode [ 1568.821908][ T24] usb 7-1: USB disconnect, device number 71 [ 1568.916634][T20400] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3594'. [ 1568.926291][ T5847] usb 5-1: device descriptor read/64, error -71 [ 1569.094239][T20402] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3595'. [ 1569.170837][ T5847] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1569.311435][ T5847] usb 5-1: device descriptor read/64, error -71 [ 1569.449297][T20406] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3596'. [ 1569.466159][ T5847] usb usb5-port1: attempt power cycle [ 1569.837695][ T5954] usb 4-1: USB disconnect, device number 110 [ 1570.103682][ T5847] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1570.155944][ T5847] usb 5-1: device descriptor read/8, error -71 [ 1570.243229][T20413] netlink: 'syz.1.3599': attribute type 1 has an invalid length. [ 1570.331279][T20417] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1570.384684][T20417] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1570.410820][ T5847] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1570.435252][ T5847] usb 5-1: device descriptor read/8, error -71 [ 1570.564513][T20413] bond1: (slave gretap1): making interface the new active one [ 1570.573077][ T5847] usb usb5-port1: unable to enumerate USB device [ 1570.578346][T20408] fuse: Unknown parameter '0xffffffffffffffff' [ 1570.592744][T20413] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1570.608416][T20417] macvlan2: entered promiscuous mode [ 1570.613941][T20417] macvlan2: entered allmulticast mode [ 1570.624805][T20417] bond1: entered promiscuous mode [ 1570.634560][T20417] gretap1: entered promiscuous mode [ 1570.644705][T20417] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1570.663531][T20417] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 1570.679627][T20417] bond1: left promiscuous mode [ 1570.684664][T20417] gretap1: left promiscuous mode [ 1570.928589][T20425] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1570.935113][T20425] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1570.993339][T20425] vhci_hcd vhci_hcd.0: Device attached [ 1571.013241][T20426] vhci_hcd: connection closed [ 1571.013513][ T6300] vhci_hcd vhci_hcd.2: stop threads [ 1571.040833][ T6300] vhci_hcd vhci_hcd.2: release socket [ 1571.068633][ T6300] vhci_hcd vhci_hcd.2: disconnect device [ 1571.171089][ T5847] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1571.435220][T20436] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3603'. [ 1571.790378][ T5847] usb 5-1: Using ep0 maxpacket: 16 [ 1571.797129][ T5847] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1571.808483][ T5847] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1571.818298][ T5847] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1571.836648][ T5847] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1571.849833][ T5847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1571.866822][ T5847] usb 5-1: config 0 descriptor?? [ 1572.489949][ T5847] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.002B/input/input72 [ 1572.604537][ T5847] microsoft 0003:045E:07DA.002B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1573.502847][T20457] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1574.550907][T18584] usb 5-1: reset high-speed USB device number 89 using dummy_hcd [ 1574.628288][T20467] ip6tnl0: Caught tx_queue_len zero misconfig [ 1575.293169][T20487] loop6: detected capacity change from 0 to 7 [ 1575.316520][ C0] blk_print_req_error: 10 callbacks suppressed [ 1575.316552][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1575.332418][ C0] buffer_io_error: 10 callbacks suppressed [ 1575.332433][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1575.348572][ T5919] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1575.363354][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1575.372977][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1575.381450][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1575.390857][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1575.400407][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1575.408744][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1575.418397][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1575.427048][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1575.436678][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1575.444699][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1575.454294][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1575.462701][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1575.472304][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1575.480244][T20487] ldm_validate_partition_table(): Disk read failed. [ 1575.501524][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1575.511230][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1575.523899][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1575.533534][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1575.541788][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1575.560884][T20487] Dev loop6: unable to read RDB block 0 [ 1575.570261][T20487] loop6: unable to read partition table [ 1575.572553][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1575.585924][T20487] loop6: partition table beyond EOD, truncated [ 1575.596398][ T5919] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1575.601827][T20487] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 1575.623001][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1575.717841][ T5919] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1575.730552][ T5919] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1575.799087][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1575.837043][ T5919] usb 2-1: Product: syz [ 1575.869317][ T5919] usb 2-1: Manufacturer: syz [ 1575.904526][ T5919] usb 2-1: SerialNumber: syz [ 1575.933502][ T5919] usb 2-1: config 0 descriptor?? [ 1575.962489][ T5919] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 1576.143146][T20508] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 1576.149679][T20508] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1576.160915][ T24] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1576.169984][T20508] vhci_hcd vhci_hcd.0: Device attached [ 1576.267707][ T5919] ums-isd200 2-1:0.0: probe with driver ums-isd200 failed with error -22 [ 1576.320867][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 1576.354490][ T24] usb 4-1: config 5 has an invalid interface number: 245 but max is 0 [ 1576.386555][ T24] usb 4-1: config 5 has no interface number 0 [ 1576.395555][T20509] vhci_hcd: connection closed [ 1576.395947][ T13] vhci_hcd vhci_hcd.6: stop threads [ 1576.422877][ T24] usb 4-1: config 5 interface 245 has no altsetting 0 [ 1576.442136][ T13] vhci_hcd vhci_hcd.6: release socket [ 1576.456793][ T24] usb 4-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=ba.d2 [ 1576.468610][ T13] vhci_hcd vhci_hcd.6: disconnect device [ 1576.487028][T19217] usb 45-1: new low-speed USB device number 5 using vhci_hcd [ 1576.512363][T19217] usb 45-1: enqueue for inactive port 0 [ 1576.527055][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1576.555080][ T24] usb 4-1: Product: syz [ 1576.570331][ T24] usb 4-1: Manufacturer: syz [ 1576.590792][T17427] usb 2-1: USB disconnect, device number 103 [ 1576.593544][ T24] usb 4-1: SerialNumber: syz [ 1576.661758][T19217] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1577.143823][ T5847] usb 5-1: USB disconnect, device number 89 [ 1577.873898][ T24] gspca_main: mars-2.14.0 probing 093a:050f [ 1577.932466][ T24] usb 4-1: USB disconnect, device number 111 [ 1578.148412][T20537] Cannot find add_set index 128 as target [ 1578.553401][ T24] IPVS: starting estimator thread 0... [ 1578.650817][T20546] IPVS: using max 46 ests per chain, 110400 per kthread [ 1578.880844][ T24] usb 2-1: new full-speed USB device number 104 using dummy_hcd [ 1579.702907][ T24] usb 2-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 1579.712963][ T24] usb 2-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 1579.724692][ T24] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 1579.733936][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1579.742188][ T24] usb 2-1: Product: syz [ 1579.747710][ T24] usb 2-1: Manufacturer: syz [ 1579.752635][ T24] usb 2-1: SerialNumber: syz [ 1579.780867][ T5847] usb 7-1: new full-speed USB device number 72 using dummy_hcd [ 1579.900879][T18584] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1579.932283][ T5847] usb 7-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 1579.941421][ T5847] usb 7-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 1579.954018][ T5847] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 1579.963507][ T5847] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1579.972165][ T5847] usb 7-1: Product: syz [ 1579.977430][ T5847] usb 7-1: Manufacturer: syz [ 1579.982512][ T5847] usb 7-1: SerialNumber: syz [ 1580.050792][T18584] usb 5-1: Using ep0 maxpacket: 16 [ 1580.059109][T18584] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1580.070705][T18584] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1580.081524][T18584] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1580.094714][T18584] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1580.105958][T18584] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1580.117772][T18584] usb 5-1: config 0 descriptor?? [ 1580.545887][T18584] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.002C/input/input73 [ 1580.647786][T18584] microsoft 0003:045E:07DA.002C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1580.815095][T20565] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1581.255338][T18584] usb 5-1: USB disconnect, device number 90 [ 1581.310550][ T24] usb 2-1: USB disconnect, device number 104 [ 1581.714307][ T5847] usb 7-1: USB disconnect, device number 72 [ 1581.719456][T20569] fuse: Unknown parameter '0x0000000000000003' [ 1581.906387][T20574] Cannot find set identified by id 0 to match [ 1582.169196][T20579] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3637'. [ 1582.498140][T20581] CIFS mount error: No usable UNC path provided in device string! [ 1582.498140][T20581] [ 1582.514655][T20581] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1585.049686][ T5847] IPVS: starting estimator thread 0... [ 1585.170870][T20603] IPVS: using max 43 ests per chain, 103200 per kthread [ 1585.433305][ T5898] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 1585.441438][T19217] usb 5-1: new full-speed USB device number 91 using dummy_hcd [ 1586.084286][ T5898] usb 7-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1586.630504][ T5898] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1586.640818][ T5898] usb 7-1: Product: syz [ 1586.651027][ T5898] usb 7-1: Manufacturer: syz [ 1586.656718][T19217] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1586.986300][ T5898] usb 7-1: SerialNumber: syz [ 1586.995840][ T5898] usb 7-1: config 0 descriptor?? [ 1587.007162][T19217] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1587.036307][ T5898] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1587.050159][T19217] usb 5-1: string descriptor 0 read error: -71 [ 1587.085539][T19217] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 1587.118140][T19217] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.147798][T19217] usb 5-1: config 0 descriptor?? [ 1587.154970][T19217] usb 5-1: can't set config #0, error -71 [ 1587.178196][T19217] usb 5-1: USB disconnect, device number 91 [ 1587.663554][T20627] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1588.037883][ T5898] gspca_sunplus: reg_w_riv err -110 [ 1588.045216][ T5898] sunplus 7-1:0.0: probe with driver sunplus failed with error -110 [ 1588.084668][T20629] netlink: 'syz.1.3649': attribute type 11 has an invalid length. [ 1588.115335][T20631] CIFS mount error: No usable UNC path provided in device string! [ 1588.115335][T20631] [ 1588.126792][T20631] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1588.136284][T18584] usb 7-1: USB disconnect, device number 73 [ 1589.291213][T20641] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3651'. [ 1590.073172][T20654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3657'. [ 1590.745750][T20666] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3660'. [ 1590.848856][T20666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3660'. [ 1590.891241][ T24] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1591.131364][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 1591.156754][ T24] usb 2-1: config 5 has an invalid interface number: 245 but max is 0 [ 1591.267673][ T24] usb 2-1: config 5 has no interface number 0 [ 1591.299867][ T24] usb 2-1: config 5 interface 245 has no altsetting 0 [ 1591.332913][ T24] usb 2-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=ba.d2 [ 1591.352018][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1591.606071][ T24] usb 2-1: Product: syz [ 1591.617495][ T24] usb 2-1: Manufacturer: syz [ 1591.622295][ T24] usb 2-1: SerialNumber: syz [ 1591.975854][T20674] netlink: 'syz.4.3659': attribute type 11 has an invalid length. [ 1593.129154][T20681] comedi comedi3: aio_iiro_16: I/O port conflict (0x8005,8) [ 1593.902298][ T24] gspca_main: mars-2.14.0 probing 093a:050f [ 1594.009160][ T24] usb 2-1: USB disconnect, device number 105 [ 1598.165885][T20722] CIFS mount error: No usable UNC path provided in device string! [ 1598.165885][T20722] [ 1598.231825][T20722] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1598.360903][ T29] audit: type=1400 audit(1599.337:1326): avc: denied { create } for pid=20723 comm="syz.6.3663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1599.447030][T20723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1599.817957][T20752] netlink: 'syz.2.3679': attribute type 10 has an invalid length. [ 1599.858010][ T792] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1600.662886][T20752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1600.670673][T20752] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1600.718595][ T29] audit: type=1400 audit(1600.847:1327): avc: denied { append } for pid=20747 comm="syz.2.3679" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1601.113748][ T792] usb 2-1: Using ep0 maxpacket: 32 [ 1601.126592][ T792] usb 2-1: config 5 has an invalid interface number: 245 but max is 0 [ 1601.138200][ T792] usb 2-1: config 5 has no interface number 0 [ 1601.154939][ T792] usb 2-1: config 5 interface 245 has no altsetting 0 [ 1601.162767][T20763] syzkaller0: entered promiscuous mode [ 1601.169647][T20763] syzkaller0: entered allmulticast mode [ 1601.177463][ T792] usb 2-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=ba.d2 [ 1601.187710][ T792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1601.201508][ T792] usb 2-1: Product: syz [ 1601.206476][ T792] usb 2-1: Manufacturer: syz [ 1601.220663][ T792] usb 2-1: SerialNumber: syz [ 1601.290812][T17427] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1601.440879][T17427] usb 5-1: Using ep0 maxpacket: 32 [ 1601.454069][T17427] usb 5-1: config 5 has an invalid interface number: 245 but max is 0 [ 1601.481914][ T792] gspca_main: mars-2.14.0 probing 093a:050f [ 1601.492231][T17427] usb 5-1: config 5 has no interface number 0 [ 1601.511914][T17427] usb 5-1: config 5 interface 245 has no altsetting 0 [ 1601.526356][ T792] usb 2-1: USB disconnect, device number 106 [ 1601.539623][T17427] usb 5-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=ba.d2 [ 1601.569564][T17427] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1601.582646][T17427] usb 5-1: Product: syz [ 1601.587927][T17427] usb 5-1: Manufacturer: syz [ 1601.600854][T17427] usb 5-1: SerialNumber: syz [ 1601.641008][ T24] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1601.794681][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1601.803320][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1602.038193][T20778] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3685'. [ 1602.413876][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1602.517738][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1602.557927][ T24] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1602.716669][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1602.745094][ T24] usb 4-1: config 0 descriptor?? [ 1602.802798][T17427] gspca_main: mars-2.14.0 probing 093a:050f [ 1602.850497][T17427] usb 5-1: USB disconnect, device number 92 [ 1603.547308][T20791] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3688'. [ 1603.814900][ T24] hid-led 0003:1D34:000A.002D: unknown main item tag 0x0 [ 1603.830922][ T24] hid-led 0003:1D34:000A.002D: unknown main item tag 0x0 [ 1603.987119][ T24] hid-led 0003:1D34:000A.002D: unknown main item tag 0x0 [ 1604.083793][T20793] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3690'. [ 1604.469574][ T24] hid-led 0003:1D34:000A.002D: probe with driver hid-led failed with error -71 [ 1604.694424][T20800] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3693'. [ 1605.094917][ T24] usb 4-1: USB disconnect, device number 112 [ 1605.102905][T20801] fuse: Unknown parameter '0x0000000000000003' [ 1605.553551][ T24] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1605.744955][T20814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=20814 comm=syz.1.3697 [ 1605.764082][T20814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=20814 comm=syz.1.3697 [ 1605.783669][T20814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=20814 comm=syz.1.3697 [ 1605.797071][T20814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=20814 comm=syz.1.3697 [ 1605.811423][T20816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1280 sclass=netlink_route_socket pid=20816 comm=syz.1.3697 [ 1605.902308][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1605.950767][ T24] usb 4-1: config 1 has an invalid interface number: 43 but max is 1 [ 1605.958880][ T24] usb 4-1: config 1 has no interface number 1 [ 1605.972684][ T24] usb 4-1: config 1 interface 0 altsetting 247 endpoint 0x4 has invalid maxpacket 600, setting to 64 [ 1605.989639][ T24] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1606.038036][ T24] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=f6.75 [ 1606.065747][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1606.101034][ T24] usb 4-1: Product: syz [ 1606.114479][ T24] usb 4-1: Manufacturer: syz [ 1606.130083][ T24] usb 4-1: SerialNumber: syz [ 1606.424936][ T24] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1606.434927][ T24] gspca_spca501: reg write: error -71 [ 1606.440322][ T24] spca501 4-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 1606.448391][ T24] spca501 4-1:1.0: probe with driver spca501 failed with error -22 [ 1606.521980][ T24] usb 4-1: USB disconnect, device number 113 [ 1606.729465][ T5847] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1607.074760][ T5847] usb 5-1: Using ep0 maxpacket: 32 [ 1607.435972][ T5847] usb 5-1: config 5 has an invalid interface number: 245 but max is 0 [ 1607.459273][ T5847] usb 5-1: config 5 has no interface number 0 [ 1607.471022][ T5847] usb 5-1: config 5 interface 245 has no altsetting 0 [ 1607.492069][ T5847] usb 5-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=ba.d2 [ 1607.502070][ T5847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1607.510155][ T5847] usb 5-1: Product: syz [ 1607.515191][ T5847] usb 5-1: Manufacturer: syz [ 1607.519800][ T5847] usb 5-1: SerialNumber: syz [ 1607.551730][T20835] CIFS mount error: No usable UNC path provided in device string! [ 1607.551730][T20835] [ 1607.581045][T20835] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1607.690934][T20840] bond0: Caught tx_queue_len zero misconfig [ 1608.187256][T20849] Cannot find del_set index 2 as target [ 1608.485009][ T5847] gspca_main: mars-2.14.0 probing 093a:050f [ 1608.536628][ T5847] usb 5-1: USB disconnect, device number 93 [ 1608.593491][T20855] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1609.638271][T20870] openvswitch: netlink: Key type 153 is out of range max 32 [ 1610.290882][T19217] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 1610.312945][T20885] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3720'. [ 1610.450919][T19217] usb 7-1: device descriptor read/64, error -71 [ 1610.729496][T20887] fuse: Unknown parameter '0x0000000000000003' [ 1610.890800][T19217] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 1611.184429][T20894] Cannot find del_set index 2 as target [ 1611.302482][T19217] usb 7-1: device descriptor read/64, error -71 [ 1611.372681][T20890] fuse: Unknown parameter '0x0000000000000003' [ 1611.421143][T19217] usb usb7-port1: attempt power cycle [ 1611.761040][T19217] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 1611.971291][T19217] usb 7-1: device descriptor read/8, error -71 [ 1612.120466][T20905] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3725'. [ 1612.140083][T20906] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3725'. [ 1612.248488][T19217] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 1612.273160][T19217] usb 7-1: device descriptor read/8, error -71 [ 1612.683545][T19217] usb usb7-port1: unable to enumerate USB device [ 1612.953520][T20915] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1614.075075][T20933] FAULT_INJECTION: forcing a failure. [ 1614.075075][T20933] name failslab, interval 1, probability 0, space 0, times 0 [ 1614.092530][T20933] CPU: 0 UID: 0 PID: 20933 Comm: syz.3.3732 Tainted: G L syzkaller #0 PREEMPT(full) [ 1614.092558][T20933] Tainted: [L]=SOFTLOCKUP [ 1614.092565][T20933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1614.092575][T20933] Call Trace: [ 1614.092582][T20933] [ 1614.092589][T20933] dump_stack_lvl+0x100/0x190 [ 1614.092622][T20933] should_fail_ex.cold+0x5/0xa [ 1614.092646][T20933] should_failslab+0xc2/0x120 [ 1614.092664][T20933] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1614.092689][T20933] ? xfrm_state_alloc+0x23/0x5c0 [ 1614.092706][T20933] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1614.092735][T20933] xfrm_state_alloc+0x23/0x5c0 [ 1614.092752][T20933] xfrm_add_sa+0x118f/0x5e80 [ 1614.092783][T20933] ? __pfx_xfrm_add_sa+0x10/0x10 [ 1614.092808][T20933] ? __nla_parse+0x40/0x60 [ 1614.092828][T20933] ? __pfx_xfrm_add_sa+0x10/0x10 [ 1614.092851][T20933] xfrm_user_rcv_msg+0x483/0xc00 [ 1614.092877][T20933] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1614.092900][T20933] ? kfree_skbmem+0x19f/0x210 [ 1614.092924][T20933] ? consume_skb+0xd6/0x110 [ 1614.092973][T20933] ? trace_contention_end+0x140/0x180 [ 1614.092993][T20933] ? __mutex_lock+0x26a/0x1b90 [ 1614.093018][T20933] netlink_rcv_skb+0x159/0x420 [ 1614.093041][T20933] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1614.093063][T20933] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1614.093095][T20933] xfrm_netlink_rcv+0x71/0x90 [ 1614.093110][T20933] netlink_unicast+0x5aa/0x870 [ 1614.093135][T20933] ? __pfx_netlink_unicast+0x10/0x10 [ 1614.093167][T20933] netlink_sendmsg+0x8b0/0xda0 [ 1614.093192][T20933] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1614.093211][T20933] ? __pfx___might_fault+0x10/0x10 [ 1614.093241][T20933] ____sys_sendmsg+0x9e1/0xb70 [ 1614.093262][T20933] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1614.093285][T20933] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1614.093327][T20933] ___sys_sendmsg+0x190/0x1e0 [ 1614.093354][T20933] ? __pfx____sys_sendmsg+0x10/0x10 [ 1614.093409][T20933] __sys_sendmsg+0x170/0x220 [ 1614.093430][T20933] ? __pfx___sys_sendmsg+0x10/0x10 [ 1614.093465][T20933] do_syscall_64+0x106/0xf80 [ 1614.093484][T20933] ? clear_bhb_loop+0x40/0x90 [ 1614.093507][T20933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1614.093525][T20933] RIP: 0033:0x7f66ad39c799 [ 1614.093540][T20933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1614.093553][T20933] RSP: 002b:00007f66ae30b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1614.093569][T20933] RAX: ffffffffffffffda RBX: 00007f66ad615fa0 RCX: 00007f66ad39c799 [ 1614.093580][T20933] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 1614.093590][T20933] RBP: 00007f66ae30b090 R08: 0000000000000000 R09: 0000000000000000 [ 1614.093600][T20933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1614.093610][T20933] R13: 00007f66ad616038 R14: 00007f66ad615fa0 R15: 00007ffdf2f15948 [ 1614.093633][T20933] [ 1614.401102][T20937] Cannot find del_set index 2 as target [ 1616.234861][T20970] lo speed is unknown, defaulting to 1000 [ 1616.242921][T20970] vxcan1 speed is unknown, defaulting to 1000 [ 1616.910359][T20976] Cannot find del_set index 2 as target [ 1617.018031][T20980] FAULT_INJECTION: forcing a failure. [ 1617.018031][T20980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1617.032262][T20980] CPU: 1 UID: 0 PID: 20980 Comm: syz.2.3744 Tainted: G L syzkaller #0 PREEMPT(full) [ 1617.032289][T20980] Tainted: [L]=SOFTLOCKUP [ 1617.032295][T20980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1617.032304][T20980] Call Trace: [ 1617.032310][T20980] [ 1617.032316][T20980] dump_stack_lvl+0x100/0x190 [ 1617.032347][T20980] should_fail_ex.cold+0x5/0xa [ 1617.032369][T20980] _copy_from_iter+0x1f4/0x1690 [ 1617.032397][T20980] ? __asan_memset+0x23/0x50 [ 1617.032419][T20980] ? __pfx__copy_from_iter+0x10/0x10 [ 1617.032442][T20980] ? __pfx___alloc_skb+0x10/0x10 [ 1617.032469][T20980] netlink_sendmsg+0x808/0xda0 [ 1617.032495][T20980] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1617.032515][T20980] ? __pfx___might_fault+0x10/0x10 [ 1617.032547][T20980] ____sys_sendmsg+0x9e1/0xb70 [ 1617.032567][T20980] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1617.032590][T20980] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1617.032629][T20980] ___sys_sendmsg+0x190/0x1e0 [ 1617.032655][T20980] ? __pfx____sys_sendmsg+0x10/0x10 [ 1617.032708][T20980] __sys_sendmsg+0x170/0x220 [ 1617.032728][T20980] ? __pfx___sys_sendmsg+0x10/0x10 [ 1617.032761][T20980] do_syscall_64+0x106/0xf80 [ 1617.032780][T20980] ? clear_bhb_loop+0x40/0x90 [ 1617.032800][T20980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1617.032816][T20980] RIP: 0033:0x7f976e19c799 [ 1617.032831][T20980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1617.032846][T20980] RSP: 002b:00007f976efe0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1617.032866][T20980] RAX: ffffffffffffffda RBX: 00007f976e415fa0 RCX: 00007f976e19c799 [ 1617.032878][T20980] RDX: 0000000000000000 RSI: 00002000000018c0 RDI: 0000000000000003 [ 1617.032888][T20980] RBP: 00007f976efe0090 R08: 0000000000000000 R09: 0000000000000000 [ 1617.032899][T20980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1617.032910][T20980] R13: 00007f976e416038 R14: 00007f976e415fa0 R15: 00007ffe9d4d6078 [ 1617.032934][T20980] [ 1617.393858][T20984] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1617.401305][ T29] audit: type=1400 audit(1618.367:1328): avc: denied { mount } for pid=20985 comm="syz.2.3749" name="/" dev="hugetlbfs" ino=84395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1619.591203][T18584] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 1620.015628][T18584] usb 3-1: config 8 has an invalid interface number: 177 but max is 0 [ 1620.692498][T18584] usb 3-1: config 8 has no interface number 0 [ 1620.701491][T18584] usb 3-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1620.714845][T18584] usb 3-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1620.725533][T18584] usb 3-1: config 8 interface 177 has no altsetting 0 [ 1620.733538][T18584] usb 3-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1620.743182][T18584] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1620.743801][T21005] lo speed is unknown, defaulting to 1000 [ 1620.753852][T18584] usb 3-1: can't set config #8, error -71 [ 1620.765492][T18584] usb 3-1: USB disconnect, device number 59 [ 1620.799056][T21005] vxcan1 speed is unknown, defaulting to 1000 [ 1620.901673][T19217] usb 7-1: new full-speed USB device number 78 using dummy_hcd [ 1621.223509][T21025] Cannot find del_set index 2 as target [ 1621.495355][T19217] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1621.523411][T19217] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1621.540846][ T29] audit: type=1400 audit(1622.487:1329): avc: denied { mounton } for pid=21015 comm="syz.1.3756" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 1621.564855][T19217] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 1621.575042][T19217] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1621.583537][T19217] usb 7-1: Product: syz [ 1621.587786][T19217] usb 7-1: Manufacturer: syz [ 1621.597465][T19217] usb 7-1: SerialNumber: syz [ 1621.639813][T19217] usb 7-1: config 0 descriptor?? [ 1621.655936][T21029] Cannot find del_set index 2 as target [ 1622.299297][ T29] audit: type=1400 audit(1623.267:1330): avc: denied { unmount } for pid=17283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1623.242221][T19217] usb 7-1: USB disconnect, device number 78 [ 1623.700915][T21050] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3761'. [ 1624.570892][ T5847] usb 2-1: new full-speed USB device number 107 using dummy_hcd [ 1624.664346][ T792] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1625.593608][ T5847] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 1625.609160][ T5847] usb 2-1: config 8 has no interface number 0 [ 1625.636934][ T5847] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1625.691015][ T792] usb 5-1: Using ep0 maxpacket: 16 [ 1625.742061][ T792] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1625.753423][ T5847] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1625.766815][ T792] usb 5-1: config 0 has no interface number 0 [ 1625.781337][ T792] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1625.803194][ T792] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1625.839134][ T792] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1625.859930][ T5847] usb 2-1: config 8 interface 177 has no altsetting 0 [ 1625.869707][ T792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1625.974476][ T5847] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1625.976494][ T792] usb 5-1: config 0 descriptor?? [ 1626.059281][ T5847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1626.278502][T21060] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1627.019030][ T792] input: HID 28bd:0071 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0071.002E/input/input74 [ 1627.279500][ T29] audit: type=1400 audit(1628.247:1331): avc: denied { mounton } for pid=21079 comm="syz.3.3773" path="/137/file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 1627.326237][ T792] input: HID 28bd:0071 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0071.002E/input/input75 [ 1627.381890][ T792] uclogic 0003:28BD:0071.002E: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.4-1/input1 [ 1627.404672][ T29] audit: type=1400 audit(1628.377:1332): avc: denied { bind } for pid=21083 comm="syz.3.3774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1627.467744][ T792] usb 5-1: USB disconnect, device number 94 [ 1627.539243][T21088] fido_id[21088]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1627.730809][ T1158] usb 7-1: new full-speed USB device number 79 using dummy_hcd [ 1627.772137][ T5847] usb 2-1: string descriptor 0 read error: -71 [ 1627.789612][ T5847] ir_toy 2-1:8.177: required endpoints not found [ 1627.832275][ T5847] usb 2-1: USB disconnect, device number 107 [ 1627.904303][ T1158] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1627.924640][ T1158] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1628.091795][ T1158] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 1628.100939][ T1158] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1628.109130][ T1158] usb 7-1: Product: syz [ 1628.113473][ T1158] usb 7-1: Manufacturer: syz [ 1628.118237][ T1158] usb 7-1: SerialNumber: syz [ 1628.124422][ T1158] usb 7-1: config 0 descriptor?? [ 1629.836444][ T1158] usb 7-1: USB disconnect, device number 79 [ 1629.854481][ T5837] udevd[5837]: setting mode of /dev/bus/usb/007/079 to 020664 failed: No such file or directory [ 1629.872598][ T5837] udevd[5837]: setting owner of /dev/bus/usb/007/079 to uid=0, gid=0 failed: No such file or directory [ 1630.401946][T21084] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1631.332718][T21159] Cannot find del_set index 2 as target [ 1632.638081][T21189] Cannot find del_set index 2 as target [ 1633.257130][T21197] siw: device registration error -23 [ 1633.278071][T21197] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1633.891467][T21200] fuse: Bad value for 'fd' [ 1633.942942][T21200] input: syz0 as /devices/virtual/input/input76 [ 1634.090843][ T29] audit: type=1400 audit(1634.817:1333): avc: denied { bind } for pid=21198 comm="syz.3.3807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1634.696808][ T792] usb 7-1: new full-speed USB device number 80 using dummy_hcd [ 1634.868056][ T792] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1634.880069][ T792] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1634.917536][ T792] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1634.972603][ T792] usb 7-1: Product: syz [ 1634.980252][ T792] usb 7-1: Manufacturer: syz [ 1634.995411][ T792] usb 7-1: SerialNumber: syz [ 1635.108293][ T792] usb 7-1: config 0 descriptor?? [ 1635.143617][ T792] usb 7-1: selecting invalid altsetting 0 [ 1636.285542][T21203] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1636.441383][ T792] usb 7-1: USB disconnect, device number 80 [ 1636.794303][T21233] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3817'. [ 1637.312611][T21234] Cannot find del_set index 2 as target [ 1637.797032][T21238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3819'. [ 1638.131303][ T24] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1638.305680][ T24] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1638.342251][ T24] usb 2-1: config 2 interface 0 has no altsetting 0 [ 1638.387056][ T24] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1638.403608][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1638.433825][ T24] usb 2-1: Product: syz [ 1638.451244][ T24] usb 2-1: Manufacturer: syz [ 1638.467732][ T24] usb 2-1: SerialNumber: syz [ 1638.567687][ T24] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1638.636633][ T24] usb 2-1: selecting invalid altsetting 0 [ 1638.680938][ T24] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1638.727816][ T24] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 1638.818374][ T24] usb 2-1: media controller created [ 1639.112804][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1639.384491][T21238] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3819'. [ 1639.781423][ T24] usb 2-1: USB disconnect, device number 108 [ 1642.908935][T21285] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3831'. [ 1643.377680][T21296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3833'. [ 1643.840827][ T5847] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1644.037694][ T5847] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1644.062606][ T1158] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1644.121445][ T5847] usb 2-1: config 2 interface 0 has no altsetting 0 [ 1644.178960][ T5847] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1644.220307][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1644.283806][ T1158] usb 4-1: Using ep0 maxpacket: 8 [ 1644.291502][ T5847] usb 2-1: Product: syz [ 1645.089952][ T5847] usb 2-1: Manufacturer: syz [ 1645.094706][ T1158] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1645.105658][ T5847] usb 2-1: SerialNumber: syz [ 1645.134115][ T1158] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1645.146433][ T5847] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1645.161581][ T1158] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1645.173820][ T5847] usb 2-1: selecting invalid altsetting 0 [ 1645.214735][ T5847] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1645.225944][ T1158] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1645.365585][ T5847] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 1645.375253][ T1158] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1645.842867][ T5847] usb 2-1: media controller created [ 1645.850067][ T1158] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1645.859749][T21296] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3833'. [ 1645.905209][ T1158] hub 4-1:1.0: bad descriptor, ignoring hub [ 1645.912297][ T5847] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1645.922205][ T1158] hub 4-1:1.0: probe with driver hub failed with error -5 [ 1645.983082][ T1158] cdc_wdm 4-1:1.0: skipping garbage [ 1645.988331][ T1158] cdc_wdm 4-1:1.0: skipping garbage [ 1646.104361][ T1158] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1646.117988][ T1158] cdc_wdm 4-1:1.0: Unknown control protocol [ 1646.161805][ T1158] usb 4-1: USB disconnect, device number 114 [ 1646.781000][ T5847] usb 2-1: USB disconnect, device number 109 [ 1646.788963][ T5837] udevd[5837]: setting mode of /dev/bus/usb/002/109 to 020664 failed: No such file or directory [ 1646.802009][T21319] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3839'. [ 1646.846355][ T5837] udevd[5837]: setting owner of /dev/bus/usb/002/109 to uid=0, gid=0 failed: No such file or directory [ 1647.150860][ T1158] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1647.390780][ T1158] usb 4-1: Using ep0 maxpacket: 32 [ 1647.400242][ T1158] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 1647.408713][ T1158] usb 4-1: config 0 has no interface number 0 [ 1647.416203][ T1158] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid maxpacket 1281, setting to 64 [ 1647.428404][ T1158] usb 4-1: config 0 interface 89 has no altsetting 0 [ 1647.440438][ T1158] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1647.449850][ T1158] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1647.461573][ T1158] usb 4-1: Product: syz [ 1647.465770][ T1158] usb 4-1: Manufacturer: syz [ 1647.470488][ T1158] usb 4-1: SerialNumber: syz [ 1647.481158][ T1158] usb 4-1: config 0 descriptor?? [ 1647.493242][ T1158] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1647.502949][ T1158] em28xx 4-1:0.89: Video interface 89 found: [ 1647.520804][T17427] usb 7-1: new full-speed USB device number 81 using dummy_hcd [ 1647.684561][T17427] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 12336, setting to 64 [ 1647.724574][T17427] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 1647.746170][T17427] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1647.765879][T17427] usb 7-1: Product: syz [ 1647.775954][T17427] usb 7-1: Manufacturer: syz [ 1647.795112][T17427] usb 7-1: SerialNumber: syz [ 1647.811963][T17427] usb 7-1: config 0 descriptor?? [ 1648.114023][ T1158] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 1648.757600][ T1158] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1648.772285][ T1158] em28xx 4-1:0.89: board has no eeprom [ 1648.992808][ T1158] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 1649.022030][ T1158] em28xx 4-1:0.89: analog set to bulk mode. [ 1649.057584][T18584] em28xx 4-1:0.89: Registering V4L2 extension [ 1649.089557][ T1158] usb 4-1: USB disconnect, device number 115 [ 1649.120403][ T1158] em28xx 4-1:0.89: Disconnecting em28xx [ 1649.130398][T18584] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 1649.164064][T18584] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 1649.202592][T18584] em28xx 4-1:0.89: No AC97 audio processor [ 1649.218439][ T24] usb 7-1: USB disconnect, device number 81 [ 1649.283732][T18584] usb 4-1: Decoder not found [ 1649.288463][T18584] em28xx 4-1:0.89: failed to create media graph [ 1649.463077][T21357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3850'. [ 1649.472236][T21357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3850'. [ 1649.576321][T18584] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 1649.667159][T21359] ================================================================== [ 1649.675240][T21359] BUG: KASAN: slab-use-after-free in v4l2_fh_init+0x27d/0x2c0 [ 1649.682673][T21359] Read of size 8 at addr ffff8880577ec748 by task v4l_id/21359 [ 1649.690201][T21359] [ 1649.692503][T21359] CPU: 0 UID: 0 PID: 21359 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 1649.692519][T21359] Tainted: [L]=SOFTLOCKUP [ 1649.692524][T21359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1649.692530][T21359] Call Trace: [ 1649.692535][T21359] [ 1649.692539][T21359] dump_stack_lvl+0x100/0x190 [ 1649.692558][T21359] print_report+0x156/0x4c9 [ 1649.692574][T21359] ? __virt_addr_valid+0x81/0x620 [ 1649.692590][T21359] ? __phys_addr+0xe8/0x180 [ 1649.692604][T21359] ? v4l2_fh_init+0x27d/0x2c0 [ 1649.692616][T21359] kasan_report+0xdf/0x1e0 [ 1649.692626][T21359] ? v4l2_fh_init+0x27d/0x2c0 [ 1649.692639][T21359] v4l2_fh_init+0x27d/0x2c0 [ 1649.692651][T21359] v4l2_fh_open+0x64/0xa0 [ 1649.692663][T21359] em28xx_v4l2_open+0x11e/0x570 [ 1649.692674][T21359] v4l2_open+0x1d2/0x490 [ 1649.692686][T21359] ? __pfx_v4l2_open+0x10/0x10 [ 1649.692698][T21359] chrdev_open+0x234/0x6a0 [ 1649.692709][T21359] ? __pfx_chrdev_open+0x10/0x10 [ 1649.692720][T21359] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1649.692734][T21359] do_dentry_open+0x6d8/0x1660 [ 1649.692751][T21359] ? __pfx_chrdev_open+0x10/0x10 [ 1649.692762][T21359] vfs_open+0x82/0x3f0 [ 1649.692775][T21359] path_openat+0x208c/0x31a0 [ 1649.692788][T21359] ? __pfx_path_openat+0x10/0x10 [ 1649.692801][T21359] do_file_open+0x20e/0x430 [ 1649.692812][T21359] ? __pfx_do_file_open+0x10/0x10 [ 1649.692827][T21359] ? alloc_fd+0x476/0x790 [ 1649.692838][T21359] ? do_getname+0x191/0x390 [ 1649.692851][T21359] do_sys_openat2+0x10d/0x1e0 [ 1649.692864][T21359] ? __pfx_do_sys_openat2+0x10/0x10 [ 1649.692879][T21359] __x64_sys_openat+0x12d/0x210 [ 1649.692892][T21359] ? __pfx___x64_sys_openat+0x10/0x10 [ 1649.692906][T21359] ? do_user_addr_fault+0x8d6/0x12f0 [ 1649.692918][T21359] do_syscall_64+0x106/0xf80 [ 1649.692930][T21359] ? clear_bhb_loop+0x40/0x90 [ 1649.692942][T21359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1649.692953][T21359] RIP: 0033:0x7f3cefca7407 [ 1649.692963][T21359] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1649.692973][T21359] RSP: 002b:00007ffea9b0b530 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1649.692984][T21359] RAX: ffffffffffffffda RBX: 00007f3cf03c3880 RCX: 00007f3cefca7407 [ 1649.692991][T21359] RDX: 0000000000000000 RSI: 00007ffea9b0bf1b RDI: ffffffffffffff9c [ 1649.692998][T21359] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1649.693004][T21359] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1649.693011][T21359] R13: 00007ffea9b0b780 R14: 00007f3cf052a000 R15: 00005650440324d8 [ 1649.693021][T21359] [ 1649.693025][T21359] [ 1649.953410][T21359] Allocated by task 18584: [ 1649.957798][T21359] kasan_save_stack+0x30/0x50 [ 1649.962464][T21359] kasan_save_track+0x14/0x30 [ 1649.967116][T21359] __kasan_kmalloc+0xaa/0xb0 [ 1649.971680][T21359] em28xx_v4l2_init.cold+0x94/0x3503 [ 1649.976939][T21359] em28xx_init_extension+0x13a/0x200 [ 1649.982207][T21359] request_module_async+0x61/0x80 [ 1649.987203][T21359] process_one_work+0x9d7/0x1920 [ 1649.992116][T21359] worker_thread+0x5da/0xe40 [ 1649.996692][T21359] kthread+0x370/0x450 [ 1650.000731][T21359] ret_from_fork+0x754/0xd80 [ 1650.005293][T21359] ret_from_fork_asm+0x1a/0x30 [ 1650.010026][T21359] [ 1650.012317][T21359] Freed by task 18584: [ 1650.016390][T21359] kasan_save_stack+0x30/0x50 [ 1650.021047][T21359] kasan_save_track+0x14/0x30 [ 1650.025697][T21359] kasan_save_free_info+0x3b/0x70 [ 1650.030787][T21359] __kasan_slab_free+0x5f/0x80 [ 1650.035535][T21359] kfree+0x1f6/0x6b0 [ 1650.039410][T21359] kref_put.isra.0+0x56/0x90 [ 1650.043988][T21359] em28xx_v4l2_init.cold+0x280/0x3503 [ 1650.049355][T21359] em28xx_init_extension+0x13a/0x200 [ 1650.054613][T21359] request_module_async+0x61/0x80 [ 1650.059615][T21359] process_one_work+0x9d7/0x1920 [ 1650.064522][T21359] worker_thread+0x5da/0xe40 [ 1650.069092][T21359] kthread+0x370/0x450 [ 1650.073130][T21359] ret_from_fork+0x754/0xd80 [ 1650.077690][T21359] ret_from_fork_asm+0x1a/0x30 [ 1650.082423][T21359] [ 1650.084717][T21359] The buggy address belongs to the object at ffff8880577ec000 [ 1650.084717][T21359] which belongs to the cache kmalloc-8k of size 8192 [ 1650.098737][T21359] The buggy address is located 1864 bytes inside of [ 1650.098737][T21359] freed 8192-byte region [ffff8880577ec000, ffff8880577ee000) [ 1650.112686][T21359] [ 1650.114981][T21359] The buggy address belongs to the physical page: [ 1650.121359][T21359] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x577e8 [ 1650.130084][T21359] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1650.138554][T21359] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1650.146071][T21359] page_type: f5(slab) [ 1650.150029][T21359] raw: 00fff00000000040 ffff88813fe3b280 dead000000000100 dead000000000122 [ 1650.158578][T21359] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 1650.167142][T21359] head: 00fff00000000040 ffff88813fe3b280 dead000000000100 dead000000000122 [ 1650.175782][T21359] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 1650.184425][T21359] head: 00fff00000000003 ffffea00015dfa01 00000000ffffffff 00000000ffffffff [ 1650.193067][T21359] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1650.201711][T21359] page dumped because: kasan: bad access detected [ 1650.208092][T21359] page_owner tracks the page as allocated [ 1650.213771][T21359] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5844, tgid 5844 (syz-executor), ts 330369047197, free_ts 12846953651 [ 1650.235006][T21359] post_alloc_hook+0x153/0x170 [ 1650.239745][T21359] get_page_from_freelist+0x111d/0x3140 [ 1650.245262][T21359] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 1650.251138][T21359] new_slab+0xa6/0x6c0 [ 1650.255179][T21359] refill_objects+0x26b/0x400 [ 1650.259826][T21359] __pcs_replace_empty_main+0x1ab/0x600 [ 1650.265344][T21359] __kvmalloc_node_noprof+0x7da/0xa00 [ 1650.270696][T21359] pfifo_fast_init+0x177/0x3b0 [ 1650.275446][T21359] qdisc_create_dflt+0x124/0x4c0 [ 1650.280354][T21359] mq_init_common+0x1f4/0x490 [ 1650.285008][T21359] mq_init+0x26/0x60 [ 1650.288876][T21359] qdisc_create_dflt+0x124/0x4c0 [ 1650.293780][T21359] dev_activate+0xaa9/0xce0 [ 1650.298257][T21359] __dev_open+0x4f1/0x960 [ 1650.302556][T21359] __dev_change_flags+0x558/0x6f0 [ 1650.307559][T21359] netif_change_flags+0x8d/0x160 [ 1650.312465][T21359] page last free pid 1 tgid 1 stack trace: [ 1650.318233][T21359] __free_frozen_pages+0x7e1/0x10d0 [ 1650.323401][T21359] free_contig_range+0xde/0x1d0 [ 1650.328221][T21359] destroy_args+0xa8/0x7a0 [ 1650.332610][T21359] debug_vm_pgtable+0x1b66/0x34c0 [ 1650.337619][T21359] do_one_initcall+0x11d/0x760 [ 1650.342352][T21359] kernel_init_freeable+0x6e5/0x7a0 [ 1650.347526][T21359] kernel_init+0x1f/0x1e0 [ 1650.351832][T21359] ret_from_fork+0x754/0xd80 [ 1650.356398][T21359] ret_from_fork_asm+0x1a/0x30 [ 1650.361134][T21359] [ 1650.363428][T21359] Memory state around the buggy address: [ 1650.369035][T21359] ffff8880577ec600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1650.377064][T21359] ffff8880577ec680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1650.385099][T21359] >ffff8880577ec700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1650.393138][T21359] ^ [ 1650.399515][T21359] ffff8880577ec780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1650.407546][T21359] ffff8880577ec800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1650.415579][T21359] ================================================================== [ 1650.457457][T18584] em28xx 4-1:0.89: Registering snapshot button... [ 1650.743202][T21371] overlayfs: failed to resolve 'xino=auto': -2 [ 1650.827532][T21372] overlay: Unknown parameter '/' [ 1651.363314][T21359] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1651.370631][T21359] CPU: 0 UID: 0 PID: 21359 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 1651.381215][T21359] Tainted: [L]=SOFTLOCKUP [ 1651.385519][T21359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1651.395553][T21359] Call Trace: [ 1651.398808][T21359] [ 1651.401716][T21359] dump_stack_lvl+0x100/0x190 [ 1651.406385][T21359] vpanic+0x552/0x970 [ 1651.410341][T21359] ? __pfx_vpanic+0x10/0x10 [ 1651.414819][T21359] ? v4l2_fh_init+0x27d/0x2c0 [ 1651.419476][T21359] panic+0xd1/0xe0 [ 1651.423176][T21359] ? __pfx_panic+0x10/0x10 [ 1651.427568][T21359] ? v4l2_fh_init+0x27d/0x2c0 [ 1651.432222][T21359] ? preempt_schedule_common+0x42/0xc0 [ 1651.437658][T21359] ? check_panic_on_warn+0x1f/0x90 [ 1651.442753][T21359] check_panic_on_warn.cold+0x19/0x34 [ 1651.448101][T21359] end_report.part.0+0x3a/0x90 [ 1651.452850][T21359] kasan_report.cold+0xe/0x18 [ 1651.457507][T21359] ? v4l2_fh_init+0x27d/0x2c0 [ 1651.462163][T21359] v4l2_fh_init+0x27d/0x2c0 [ 1651.466644][T21359] v4l2_fh_open+0x64/0xa0 [ 1651.470949][T21359] em28xx_v4l2_open+0x11e/0x570 [ 1651.475776][T21359] v4l2_open+0x1d2/0x490 [ 1651.480005][T21359] ? __pfx_v4l2_open+0x10/0x10 [ 1651.484757][T21359] chrdev_open+0x234/0x6a0 [ 1651.489169][T21359] ? __pfx_chrdev_open+0x10/0x10 [ 1651.494098][T21359] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1651.500419][T21359] do_dentry_open+0x6d8/0x1660 [ 1651.505217][T21359] ? __pfx_chrdev_open+0x10/0x10 [ 1651.510140][T21359] vfs_open+0x82/0x3f0 [ 1651.514196][T21359] path_openat+0x208c/0x31a0 [ 1651.518766][T21359] ? __pfx_path_openat+0x10/0x10 [ 1651.523684][T21359] do_file_open+0x20e/0x430 [ 1651.528171][T21359] ? __pfx_do_file_open+0x10/0x10 [ 1651.533193][T21359] ? alloc_fd+0x476/0x790 [ 1651.537512][T21359] ? do_getname+0x191/0x390 [ 1651.541995][T21359] do_sys_openat2+0x10d/0x1e0 [ 1651.546656][T21359] ? __pfx_do_sys_openat2+0x10/0x10 [ 1651.551846][T21359] __x64_sys_openat+0x12d/0x210 [ 1651.557028][T21359] ? __pfx___x64_sys_openat+0x10/0x10 [ 1651.562402][T21359] ? do_user_addr_fault+0x8d6/0x12f0 [ 1651.567670][T21359] do_syscall_64+0x106/0xf80 [ 1651.572242][T21359] ? clear_bhb_loop+0x40/0x90 [ 1651.576900][T21359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1651.582781][T21359] RIP: 0033:0x7f3cefca7407 [ 1651.587174][T21359] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1651.606760][T21359] RSP: 002b:00007ffea9b0b530 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1651.615159][T21359] RAX: ffffffffffffffda RBX: 00007f3cf03c3880 RCX: 00007f3cefca7407 [ 1651.623111][T21359] RDX: 0000000000000000 RSI: 00007ffea9b0bf1b RDI: ffffffffffffff9c [ 1651.631073][T21359] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1651.639024][T21359] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1651.647020][T21359] R13: 00007ffea9b0b780 R14: 00007f3cf052a000 R15: 00005650440324d8 [ 1651.654975][T21359] [ 1651.658285][T21359] Kernel Offset: disabled [ 1651.662593][T21359] Rebooting in 86400 seconds..