last executing test programs: 11m14.996268624s ago: executing program 4 (id=464): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) sendmmsg$inet(r1, &(0x7f0000007800)=[{{&(0x7f0000000100)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000280)=[{&(0x7f00000001c0)="16fb2ce3abb1d683dadf95f2a3fff3b912add2f7c1588b6dfb0e96", 0x1b}], 0x1, &(0x7f0000000380)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x18}}, {{&(0x7f00000003c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="0b699c63a27f66b19068e0c771d850d3b88f09dcec7a5eb9ed35819d07e964c1a19331524cf8d634c9de53685ed664cbc0381dcb2952ac8c1cebe62025f14f953b140349e3b2217b82f1dc4c14a77b33d483b50516f5df12ec8cf28eebe7a1462e579704", 0x64}, {&(0x7f0000000480)="11bc687fd68b49ec247daf5ce9b42fb86d8a6425e661910e50c157fa5a3ec925b50690e6c022e0e981204bc5e3304016d5a17f62d779552e39c33d07d92062d5500765e6fadfb633c714f5f843f9480b2be20d048d54ff578abcc7ea3a57fa3dd1c2d6e42f099e6eff69dc30d2c71dc529f77932f0e6ca8e5a5bda166f2152eb8d2b3b5e33e2e2dd95b9044273dcd56bc75d0058b8a80504f67c629cd0f9b664fc723ddad7", 0xa5}], 0x2, &(0x7f0000007a40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xe5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_retopts={{0x68, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x1b, 0x3, [{0x2, 0x6, "36a34be2"}, {0x6, 0xf, "59ce957ed640b0fb92c99e7358"}]}, @generic={0x7, 0x12, "59580e65c83b57941029c1a2e8782163"}, @timestamp_addr={0x44, 0x14, 0xa0, 0x1, 0xe, [{@local}, {@broadcast, 0x2}]}, @generic={0x86, 0xc, "6fd0adbecbf18bc0aed9"}]}}}], 0xf8}}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f00000008c0)="6630d5fb0a783a80b35763278840b5f53457891d8a4fafad761ac4af3d3d84c3f62a2aa589597b4b89b120fe5a0e83f92a82e21a82014027883f4584f6afa2c24d31cf409d0c4de27151d77a6896a95933df281b979dceb294f5995338a876508a0d1ae718b7efc213bfe877a901e751b4caea68d697867ad8a3b513c3926a2369652e7ff04550eb34113df560b6d734464b963cdb5ba760b4904ad93b1de9546fdd4ce1d0a9afea69023ebc68dfcf8289f859be67ad2b1a9cefdcd823b19300", 0xc0}, {&(0x7f0000000680)="b323b54194cb62aa81f935fa9d311366a65cbce14cc5b8aa32c728cda7331178db457f2cd852b4bddf8a5483df97faf996029234b2c41db920518d088c514b1dc2664725604463", 0x47}, {&(0x7f0000000980)="85a3b64c59bfc1e3acbe68d74a5b81052d52725eb32d146776742c5cd204", 0x1e}, {&(0x7f00000009c0)="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", 0x1000}, {&(0x7f00000019c0)="c85dff1b46d2470e175f54e2746d9561a7ffa8a36ad73cc5d43a0b701c1c65693961948814ea3acf7e8472ed8d7e504ee5150776139b", 0x36}, {&(0x7f0000001a00)="4f18d341213c359db5ffaae7e1d00f13d565f10a51908ed6ef508e35893c2d2eca1d3da21cf238c8d97f240a844a807cc5220713c88aad4542e8cebbabff03d4d90bab337d3729a6f088a8695bcf62af15cffa12e84e4aedba2e66de9e4744cb0896f2a0e2550e6b13eecd9fbf1a3be39b3d57c5510b", 0x76}, {&(0x7f0000001a80)="1b638335bfca2e50524fcfaa9066aeb228e3dbabb1d61b6c0385d304b9dad7fd08d9e723de49f0ba17fbf93cffdba35ae03744bdd94fa0c5a8ba23c3a6c4c7d6ae1432fec375658c3d7f48f0ad04ee4c51e66b7887acc2e251697346bd64814e34df0cfd21a19f3f9dbee05ddd60002bed504a911a74d3cd9c1d9a11849e0649bc7febf32d503169ed1b73b131af349e4886903d59cd6f6019d1c40502abc7c9ff6ecca7b5c435889f595a808ba1d92b73212f6c9d29046d69d44f45d5575f2f71a155ea11a10de89fbeeb5b0bc4cb6297a93cf9f8ad18b71fcbf493b6be9f9f19327a0dc9a2014c87ac0d2b", 0xec}, {&(0x7f0000001b80)="302ec22c362b4182d9e0b9bc0dedece1899e032a28935f2197bcda47158ca4647c8939998229229b30c8641e3bc93a898236299abbb75e876eb70485b2c09c8486280a7de513c96486999560da769ef58e965b1f8e8a3d19c0cda97aafd9636ef26b085d88c7140e99322106e57bacc99806830a73e640634c4b16f4ba43cbde9d671eacbbdb2f728f1ae46edeadaf46ad38cd57a3f6ef938b4950a05d7bc6f6627c4a2cfbfcef105987fbadd8b0a4d89e304d803d16b9660df458154f3cca09c7e4464013b6cd248a6b13c6f0e132a182ceddf86b31716310dd85f0b4ae", 0xde}, {&(0x7f0000001c80)="b8868c90b990267fd62c3d3baaf1d9d3d9ab449ffd6efc308a60ec30c954749f4a01134a1ddc77673e92fe9eba94f52ebf644c6863590b9f1783d6af46b5c661ada98775a80f24449fd0a3d1c2d1e64d4a44e49985fefca6dcfce255656f2a122aa084691e66745668c9edd4fcae56b2ec06a8c429ded1fb793977b6e9e2b2e35b361b3ac96ed9561793fb864a86508a56ef3d1c53f66560e902cb964c2a5ef17ce22fbb4902ac66d11f1aae951bc9e7774f428b05ccea8a8b13216eba510927e47c8a30f296b43c466d144722439ca476ae48ef70617c4dd8d0ec5bdc9ef12a859cc608ead99cb777679ed3b4be193da6f14462", 0xf4}], 0x9, &(0x7f0000001e40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x18}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001e80)="6f12df053f002e77977453b4587574a479b9e0ebf9139a49", 0x18}, {&(0x7f0000001ec0)="de9022596ae99d6c6ccf15024f66eedc901d740d16a8c90f536516c099128a4094bf694fefd1ea9168c7757366c8ab06a5e5370303949916b5f8c4028a2baf958e337df6873ddc469db51b71d08f9913050f4444a4ae4d0c20b3fb0376f5abdadbde8575183dd305acb8b2b4354764a3cb6b51e7855eae99eb0595315ea8872aae03d9c3ef71673eee272dc5073d95d1d5ac951b169ee61ad170646a57d1db4a19a2f1f1f43455546953831febee980cafdfa082040a146e0c5782e6c01deeab903608acd33710047ffbaf6fdfb66807a637f8ae8f10ac494d25e8cd6c22e29e935c805c53ac209228e427", 0xeb}, {&(0x7f0000001fc0)="1e53978f955b29bc650173908851ced4133b4917d4c0a09f75a9f144810f48228e13c47dc170daa8ff57", 0x2a}, {&(0x7f0000002000)="6e179fa3b9e55802ba4e2a5e9634ddd02a8789f4bce1168e46485a035cf579a4fa641b77babf9a9ebe8f934d293d35cef140c6d5a06f610d293b263a4b42ce407c5d0058ed88a4594557efcc2a8387f18e0214b040cf099eeac181a12d114ccf358be48d1a692c19fa6ffa06bebe2fa465d4306a5810fc4d1ea788f7653a950329a85ca304fce7d7369f80bc4c8e27d92e572bce89a1cb8ef89ab95e342565ccbd97a2d77abf933ad69e3ed48247636e15e1476775fb1b8cf7eaef8a076ae0e4b13b76", 0xc3}], 0x4, &(0x7f0000002140)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1d7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x30}}, {{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000002180)="deb1ec7cb26f3bc826e4705cbe7412e55aaffcb6b0d6f66616f657d7ee8d83099010d7253f1d52fba3ff2d04ee025d36e392d8f48af12a0deb5361d223fef3ffb1dfb4a3f6271c9b2bd9d61a6fe8a7b65b3a089bf6a71c92d96e2c13340e42384974392250cf18cfafb2b33091ba7712d893a61a58d08fe34bdde80bfcb270ee21ff1f8f9a478aa08c54440038598dbbac130af487bf36fe37ea3300a1301d", 0x9f}, {&(0x7f0000002240)="bcb683322f9183c5f88c8ef2d45c84cf95", 0x11}, {&(0x7f0000002280)="d3b84170a814", 0x6}, {&(0x7f00000022c0)="e4ed8cdc008a2b4f240306aa682640a7356dbf0aecd71a0104fc45a2e6107bc0354cd8bf88dd94cdbd68711678d5de7c69512e792e97a6ebefd047d73ffcb2ca79c3652b1f5a1e4ed9c365d0a0596cc804f4321b3f00d25b2a6033944ffc41781dfac8bc533896971455c1878ddf9b61ba199590d2d4aefc0864aaa5", 0x7c}, {&(0x7f0000002340)="926ee32cdffedc585d4cef89e6be5380529f1f430899ca9ddf46ba7e7066afca12641c5dae99244876f0a514b843e7f5afe2adf2657da460183a5ec37630f101951f12306620dec6e82e8605c2410db7009a4db833fd60c5cf149548355a8f7fa2e8be0808839982245175f2aace9e5fbfb0dc314ef1857472f66623345999b72dfb96d011635cd264d4112ff84c6d86836cb1171063f1182d64d444d5", 0x9d}, {&(0x7f0000002400)="0229d79bd156bc0da5e59216aecf000b", 0x10}, {&(0x7f0000002440)="0a97ef2d4368fe28c08112c6f4860560b7690e32c14e4792d543be1632524a3610f453f8897679a84d069c2f510682622958800cbd6afd01dbf22889", 0x3c}], 0x7, &(0x7f0000002500)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x18}}, {{&(0x7f0000002540)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000002640)=[{&(0x7f0000002580)="86ea720bf6103c18d87addc8912393f5e4417804edf26192231f30510cc0bb090665052b2adb2fdac2af6c1318135e701aae8ce7fdeca6d16bfe40f38418a49af65cbb3a8bc865334f3878b1eb24f01109d3d382e8d7e63f01b6b27a015b29247c60faed6b62a4433636fd23c6a3ff2bb514fec0a205dedce197082515549fc19d4422a81a54c61410ca068e3dea6a34ebb5b0b1f93af5fede74a46bd1a7abab7cb9b9b918440e0d94ccae3ce1905816f30bddd0c517", 0xb6}], 0x1}}, {{&(0x7f0000002680)={0x2, 0x4e21, @local}, 0x10, &(0x7f00000039c0)=[{&(0x7f00000026c0)="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", 0x1000}, {&(0x7f00000036c0)="6ce368369342e3184715f814db436992383ac34349b6bf0fbaa359ae0d", 0x1d}, {&(0x7f0000003700)="6cc0f6a9cc99ba6dbaf85bd8b9b4497fa81862c57328a329a067c425a101b34f9e7c8886f869845e7229842133c39220fa487698555c618abb8ff012b1d57d8d726a2b5cb73429293fe7952ede95fbe77160cbde4f646b1ac5c67791bc440de9520b1bd2fe3a1e423ee9a1f8348d5ef7fb7e7cbce553eccf7be3df1898a97b3eb8f7cad9734e8c55a6424a0e2b7b0904fdbbba904d135e53179bc944e2a621901b31e444aeff01d8b94feca3eace88c92a740439549919839428c25a46fc28ecd2830157d9af93542106836ae00f29f6eb8b234e551efe60ce1dcc373395b8418060b6c87c6759f6952341acdcc680edb0435bed", 0xf4}, {&(0x7f0000003800)="40c9ce5f74d0900be1afbf744c926ba56fc487c58c2ea9035999138d60ff8f9a075f841c8bbec657e8acb6f0895b681f17684784793bd4bf3ddbb62c7c88cf5003", 0x41}, {&(0x7f0000003880)="7006baa8efac3848a8b2a95733dc83492abe78609afebe02519fd68e0ea86150cc92eb40e42c006720f84c31c2a7ed613f0a4b7a1e38bbe31fad086d1e3abbc85dcdf18a332db14b21c45fb3920e5292de5e7061ed505ac11f4f7c0eec42990784b97c3b5932bd9749fd411d7b58f68c3928544d8f8af098ceb43b26cbcc577a063142499cbd29cc63bfdc559245328928e0e2431152615056b5d0e9088c04c4529127eb574eb73e077277414c8cc62e2af8b8d7cdb8bcf12cc8902e31e3c1b8f953919dca9271c9ba4963", 0xcb}, {&(0x7f0000003980)="1b4a0610ac8bf5b70546b420c7c343496b0095873cd2e2325ce7318baf", 0x1d}], 0x6, &(0x7f0000003a40)}}, {{&(0x7f0000003a80)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000004140)=[{&(0x7f0000003ac0)="a76ac97b206cf22c2144edc0be6ce797190103a7b3704ce12a707b925f71b911d63531571a826dcc5bf468cfeb59444806043a0a81dc6be9fc8fc6da489b76d22a6c130241bd9a189ac042db883267e048bfdcfb206011847ca349a07d26e96e22ff6544b3dcfdd3577cb7795478a64ed3d7c8e519b564acbafe9be7ae695ce342d088497d353da09aa6c39609d37d65b46e50af94903a441b39e6b2b7abacd076244b22d15b21fb091d3bc4a54126904bd612f0ce9b2be91309488c1bd1cb58e8560b10d11949f3fe9c00a02bca68e781cf65a2c8db5bc83e96aa1e5362e6", 0xdf}, {&(0x7f0000003bc0)="76900339995e78b95d2063b31ce549ccd5e0a4b133be6e55ab3c508910e50afb7bae609d5590cbc03dd92ec6825102e916a642a15aa36f7c32170700acb1667875d437be52fca09ebd0dfd05e07d999cc25f011ddc06e0e855675f8561a3cd238ff9d1d8c4179fec19224267b2de19aee64ed701fa76cfc73dcaabd93570cf142fe3b5c950bebdc44cfc4ad459c6f16c2923bd1477fb925acd5650e2864fb024a35bd15a9991ad211e9334df2c04d1a4109294f754755b7dc5709f77f1b8217ccb1da01ec367f6665aaa126b3ebb230803aa9332497256cb3d8b41b42d6829", 0xdf}, {&(0x7f0000003cc0)="6d0af45ea6aa5246ce394d244f758f34641ea9d3e3966bb5db5295343ffbd697e5117819f10bfa69fba8f52c3b32075673464aecc0c91012f04dbca8ea0e1f670790088275ad5d1db391d69cac38267367386a0d4dbdec06695df86613bae36938df6bec1439367b7b7c80c9cdb17f8580c3b40a02e653ddd5c1482ae899314a9bd4000e63c71ae01776738fe848ee740de144ce8cfcb486adfe465a49e32a06bbc92d1bbbbd87fc3692714e71d3bbe25302aa7a2e3857ac6d03e530fc22c344a62ae1d2f0fa2ab8af942b8d", 0xcc}, {&(0x7f0000003dc0)="25373c43962173fc662faab25671e4a7524f2f10ef369d594ea206573a77fd77ec7eb2a3400b4007d7d1fcd960ba", 0x2e}, {&(0x7f0000003e00)="869006a0ee0d449104e7020140f1387481d2b7af5c419100af2b1c90f4d8be0d6aa2bf447aa72d748859b849a38fab6a281f569352d7bdb215a7796b518754d9b194415409fc8db55417dd077ffcffee0233791b8bbe3978ef7feabef2b748f78db02b69aa4d5e18d0d2457935785dac4594a7a983be578ade618529a9434282bf19222dc46007b791f1a792f7be79d6fcce926e640e046a6a275b7d8a64f64f1162710f8ec9d5e24d305048445f8a6ca8156c9c97edd4", 0xb7}, {&(0x7f0000003ec0)="43d8c7e6a7f2a1a6fe4a19eb4554b14e817eccbf82c4618331c1ba46628a3e1038f9b1e3e400fdfb53e3833a953ecee289cb0558337e534aa5e0b674680427d876274ea7e12cb5ce706004583c52ab2ac2cbcce4ac0acbfd8c98fbbb6495748a36b325e44d09cf1b6364d07ad5c6e0db2fed34046a5204be181ac24017cceb7a11d9c66fad4b89ec874cf9ac82cf1d53639c735431e70cfa06981f4787ce69827f075adac96cf8f7911fc6de0407b13ca3393382ecad1636840fff1603396a660784750c1042bdbdad99b47e285232d38ec15bb199b5c80906e2f6d472f7054d9a91a1", 0xe3}, {&(0x7f0000003fc0)="660550081bc12cb8fc40c408b6b0d85d887c70becd7bd03f404596630328c9c24c130281d5ce694f0b7dad1089466c28b655b000316dc91b16fa796a18fd091d9961919489d5267900b1a02041a057f1e141c9dfdf37c1433d143cd2af2f5fef488165619d3d709e979926e8fa098a352e60499f985c04aa56915abeee90285234", 0x81}, {&(0x7f0000004080)="9225741429a0188a9f5409844612b184d8cce104709331a1d2db56ba8115ad4fb81b8ebad243b489d73d5b2bfd2c2c938c018453cbf7b31d25c00bb778129bf4a664d98bb66c83bff9934f4a3eb0a6ee6158deb332cecc9712f18f5650d57afeb62c8b8c9223b0aa14207638621450007172303efaac3edf48b08b4b4a", 0x7d}, {&(0x7f0000004100)="df8489c70ee3551a8ea00427b4df21dc", 0x10}], 0x9, &(0x7f0000004200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x89e}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@rr={0x7, 0xb, 0xb9, [@remote, @private=0xa010102]}, @end]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfb}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x81}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@end, @generic={0x88, 0x10, "d305ec2bd0f5a38d4091a15c2e2b"}, @noop, @generic={0x83, 0x7, "b51a0e738d"}]}}}], 0x98}}, {{0x0, 0x0, &(0x7f0000007640)=[{&(0x7f00000042c0)="05b51dfd4e72cc", 0x7}, {&(0x7f0000004300)}, {&(0x7f0000004400)="2aa7a74f2e864d13390b3d33ecb7d0453cd26564e5dc5d9677e5c5111ed379f55a540af161a9fcfce91a0736f3cbb7c1", 0x30}, {0x0}, {&(0x7f0000007b40)="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", 0x1000}], 0x5, &(0x7f0000007700)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@noop, @generic={0x89, 0xb, "031c6d3ca456fa479a"}, @ra={0x94, 0x4}, @cipso={0x86, 0x9, 0x2, [{0x7, 0x3, "19"}]}]}}}, @ip_retopts={{0xbc, 0x0, 0x7, {[@noop, @cipso={0x86, 0x6e, 0x1, [{0x0, 0xd, "8f6ebf1c6da73665dca49f"}, {0x5, 0x4, '\\='}, {0x6, 0x2}, {0x0, 0x11, "5107644eaa3eaa6e8fce5d04f3977f"}, {0x1, 0xf, "d34936682f372fe579ce382d1d"}, {0x6, 0x6, "c05425db"}, {0x7, 0xf, "23e05cf7fa5fdc7aadd83fc446"}, {0x2, 0x4, "6cab"}, {0x7, 0x11, "b284398ac802067f846cb3e400228d"}, {0x5, 0xb, "084f2323101ee50c13"}]}, @timestamp={0x44, 0x10, 0xd9, 0x0, 0x4, [0x75, 0x4, 0x47]}, @noop, @generic={0x89, 0xa, "7f3e196729fe710b"}, @timestamp={0x44, 0x20, 0x9b, 0x0, 0x8, [0x0, 0x9, 0x5, 0x2, 0x575b, 0x5, 0x4]}]}}}], 0xf0}}], 0x9, 0x4004051) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xfd44) 11m13.338569403s ago: executing program 4 (id=466): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x4008032, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) 11m12.294656899s ago: executing program 4 (id=469): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) semop(0x0, &(0x7f0000000000)=[{0x1, 0xbbe1, 0x1000}], 0x1) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000000)={'security\x00', 0x6, "fb097dee6638"}, &(0x7f0000000100)=0x2a) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r3, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r5, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) bind$tipc(r1, 0x0, 0x0) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 11m12.144682365s ago: executing program 4 (id=470): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x28a5291, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) syz_80211_inject_frame(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000a99"], 0x10) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='ncpfs\x00', 0x101c040, 0x0) umount2(&(0x7f0000000340)='./file0/../file0\x00', 0x1) 11m11.108522282s ago: executing program 4 (id=473): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000ec0)={'wpan0\x00'}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r2) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002ebd7000fddbdf252000000008000300", @ANYRESHEX], 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x20004000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan4\x00'}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000000c0)={'wpan0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r7 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) read$msr(r7, &(0x7f0000002700)=""/102392, 0x18ff8) r9 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) execveat(r9, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) creat(&(0x7f0000000000)='./file0\x00', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 11m10.882308279s ago: executing program 4 (id=475): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000c80)=@broute={'broute\x00', 0x20, 0x5, 0x176, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000004c0], 0x0, 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"]}, 0x1ee) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x1f, 0x1e, 0x94, &(0x7f00000007c0)}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execve(&(0x7f0000000040)='./file2\x00', 0x0, &(0x7f00000005c0)={[&(0x7f00000004c0)='/dev/net/tun\x00']}) 11m10.525308939s ago: executing program 32 (id=475): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000c80)=@broute={'broute\x00', 0x20, 0x5, 0x176, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000004c0], 0x0, 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"]}, 0x1ee) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x1f, 0x1e, 0x94, &(0x7f00000007c0)}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execve(&(0x7f0000000040)='./file2\x00', 0x0, &(0x7f00000005c0)={[&(0x7f00000004c0)='/dev/net/tun\x00']}) 2m46.369108169s ago: executing program 0 (id=2293): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x14, 0x2e, 0x21, 0x0, 0x0, {0x19}}, 0x14}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0x2}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xd, &(0x7f0000000140)=[@cstype3={0x5, 0x7}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfff7f038}, {0x6}]}, 0x10) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) r4 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x8a37, 0x0, 0x3, 0x9c}, &(0x7f0000000180)=0x0, &(0x7f0000000640)=0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2m44.105018442s ago: executing program 0 (id=2302): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r4 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r5, 0x0, 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r8, 0x10e, 0xc, 0x0, 0x0) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r9, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r9, 0x4008af03, &(0x7f00000016c0)={0x2, 0x0, [{0x2, 0x28, &(0x7f0000000080)=""/40}, {0xd100828e98ba2273, 0xef, &(0x7f00000015c0)=""/239}]}) ioctl$VHOST_SET_FEATURES(r9, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r9, 0x4008af30, &(0x7f00000003c0)={0x1}) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@ipv6_getaddrlabel={0x38, 0x1a, 0x1, 0x70bd26, 0x0, {0x2, 0x0, 0x20}, [@IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_ADDRESS={0x14, 0x1, @private2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_deladdr={0x2c, 0x15, 0x200, 0x70bd28, 0x25dfdbfc, {0xa, 0x40, 0x4, 0xff, r10}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x2c}}, 0x2400c080) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r11, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x3f00000000000000) 2m40.010968701s ago: executing program 0 (id=2318): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000a80)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8, &(0x7f0000000280)=ANY=[]) 2m39.47085103s ago: executing program 0 (id=2323): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = landlock_create_ruleset(&(0x7f0000000040)={0xc015, 0x3}, 0x18, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f00000000c0)={0x1, 0x2}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) setreuid(0x0, 0xee00) r7 = shmget$private(0x0, 0xa000, 0x800, &(0x7f0000263000/0xa000)=nil) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1400000004000000080000000600000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000008500"/28], 0x50) r9 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r8, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r9}, 0x20) shmctl$SHM_STAT(r7, 0xd, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f00000002c0)={0x3, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0]}) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0012000200142603600e12080005007f370401a8001600200006000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@delchain={0x8f4, 0x65, 0x100, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x5, 0x1}, {0x1, 0x4}, {0xd, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0xe2, 0x80}}, @filter_kind_options=@f_u32={{0x8}, {0x40, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x9a}, @TCA_U32_DIVISOR={0x8, 0x4, 0x78}, @TCA_U32_MARK={0x10, 0xa, {0x81, 0x5ff}}, @TCA_U32_INDEV={0x14, 0x8, 'bond_slave_0\x00'}, @TCA_U32_DIVISOR={0x8, 0x4, 0xf4}]}}, @filter_kind_options=@f_cgroup={{0xb}, {0x85c, 0x2, [@TCA_CGROUP_EMATCHES={0xe0, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x64, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x60, 0x3, 0x0, 0x0, {{0x0, 0x9, 0x1}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x80}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3f}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x68, 0x2, 0x0, 0x1, [@TCF_EM_META={0x64, 0x1, 0x0, 0x0, {{0x5, 0x4, 0x8}, [@TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_LVALUE={0x20, 0x2, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_LVALUE={0x27, 0x2, [@TCF_META_TYPE_VAR="0f676e78a4ff807578", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR='y', @TCF_META_TYPE_VAR="c727", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="d0d3ec", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x3]}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}, @TCA_CGROUP_ACT={0x2ec, 0x1, [@m_connmark={0x19c, 0xc, 0x0, 0x0, {{0xd}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1ff, 0x5, 0x10000000, 0x2, 0x146}, 0xbe}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x56, 0x0, 0xffffffffffffffff, 0x0, 0x9}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff9, 0x6, 0x6, 0x9}, 0xff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0xd2f3, 0x10000000, 0x8, 0xffffffff}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0xffffffff, 0x6, 0x4a, 0x5}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x9, 0x3, 0xc006}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffff, 0x1c00, 0x0, 0x700, 0x8000}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x675c, 0xa065, 0x10000000, 0x9c, 0xee}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7880, 0x6, 0x8, 0x0, 0x2}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x6ce86c1e, 0x4, 0x4, 0xa95}, 0x9}}]}, {0x51, 0x6, "0c64b77b32ec17cb3659b84c98f82da103772a5fdd155dcff1235ad440eb51847912dd800a983c5e7c803571dfd6e5a6ed1507752ceac54dbb28c1816a9ef783b262e27502c79a79d4214d5c09"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x14c, 0x18, 0x0, 0x0, {{0x8}, {0xd4, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x18, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x3}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x5}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x2e, 0x4, 0x4, 0x9, 0x6}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x6, 0x4, 0x371, 0x4}}}, @TCA_IFE_METALST={0x3c, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x100}, @IFE_META_PRIO={0x8, 0x3, @val=0x4}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0xfc1}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x9}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x535}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, @TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7fff, 0x7, 0x0, 0x1, 0x10001}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0x8}]}, {0x54, 0x6, "5ca98b2f6ba393376da021c8c009a99a984536aa2d18708f5553ee94913bae1b791f56e99fa15ea75b3e06c0d34b51a64131560e5485967ef9a2520255436636e78fcfa44fde475c4df326450e1692ed"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_CGROUP_EMATCHES={0x48c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xf4, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x0, 0x3, 0x1}, {0x3, 0x3, 0x1, 0x8}}}, @TCF_EM_CONTAINER={0xc4, 0x1, 0x0, 0x0, {{0x5, 0x0, 0x10}, "912e202aa2f4bee003c339fd0d7a948afc4b5d99128df9c5c6ef2922f8354401494f81996f6c7064070a0ecdfd4fa15ebe64d28103d605fb0b9fc5319e5aa268b17df2bf2bca31cbd88c75f304f75c40e13e402981199c58cb12317a47d26d92cdda24db973aa3880658866b09629c948b5aef0565757086d7ac087255a2ae3a4c8a7863c1ccb305903a9e8715bee3d39bb3cd7060b704c41bedcc4ec0f5758778eb9c071dcc7e752e4875ed2c976dd9314865c44281"}}, @TCF_EM_IPSET={0x10, 0x0, 0x0, 0x0, {{0x70, 0x8, 0x80d6}, {0xffffffffffffffff, 0x4, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3a2d}}, @TCA_EMATCH_TREE_LIST={0x374, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x1, 0x2, 0x6}, {0x6, 0xa, 0x0, "52165b8c23fb12657596"}}}, @TCF_EM_CONTAINER={0x58, 0x3, 0x0, 0x0, {{0x9, 0x0, 0x7a58}, "96bbc9b357f45e6bb1aa7ae9f0335555f0081b47b215a86bdd6b4e8417c848c065f3fd322386b64102b9e146353e3d08cd0d31cf7b0c3bb7fd702f1f52198b3a2397784f38bf8ee16953de"}}, @TCF_EM_IPT={0xd4, 0x3, 0x0, 0x0, {{0xd, 0x9, 0x5}, [@TCA_EM_IPT_MATCH_DATA={0xaa, 0x5, "edaff2335d5ba414e30a19b399b8813d226815d0a61c496b9e2eac7c990b0574d80450fa1dcabc1d24daf6e8548b32fb3c8036a71fdeb10710c3ee4da188af27ba4dc70945592c69e7468458796e995362f84e1f949572f15f44df8d90236658349baeaf66201671f1313ea793fc70584cd7bf7ff00e45ea167a1680530ef02a8b54a9cfa55eefcddd4a643366eeffae8a5539e01540f392ef7200e2e2b6d2f674c4d104b727"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x40}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x800, 0x4, 0x8}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0xfe, 0x2}, {0x5, 0xff, 0x1}}}]}}, @TCF_EM_META={0x80, 0x2, 0x0, 0x0, {{0xfffd, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x5}, {0x360, 0xb}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x9, 0x2}, {0x3, 0xf, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xb, 0x18}, {0xe, 0x2, 0x1}}}, @TCA_EM_META_RVALUE={0x2e, 0x3, [@TCF_META_TYPE_VAR="e1f2ee", @TCF_META_TYPE_VAR="f1fe694c3f15", @TCF_META_TYPE_VAR="f9c4ca4d89b07c", @TCF_META_TYPE_VAR="84d71b6bec", @TCF_META_TYPE_VAR="df6f90707d", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="48d06815", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x10, 0x831a50691e979acc}, {0x8, 0x89, 0x1}}}, @TCA_EM_META_LVALUE={0x14, 0x2, [@TCF_META_TYPE_VAR="c8", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="315f41a342c3fc", @TCF_META_TYPE_INT=0x3]}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x4, 0x3, 0x10}, {0x4, 0x7, 0x1, 0x4}}}, @TCF_EM_META={0x30, 0x3, 0x0, 0x0, {{0xdc, 0x4, 0x81}, [@TCA_EM_META_LVALUE={0x24, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="23eb7c41", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x7]}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xffff, 0x1, 0x1}, {0x200, 0x2, 0x7f, 0x2, 0x2, 0x1}}}, @TCF_EM_META={0x68, 0x1, 0x0, 0x0, {{0xf650, 0x4, 0x1}, [@TCA_EM_META_LVALUE={0xb, 0x2, [@TCF_META_TYPE_VAR="3ee892441632a2", @TCF_META_TYPE_VAR]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x10, 0xab, 0x2}, {0xe684, 0x1b, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xe3, 0x3, 0x2}, {0x6, 0x9}}}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR='&l\f2', @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_LVALUE={0x26, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="9148a1fb", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="422e11fd11b4", @TCF_META_TYPE_VAR="2e78cb89"]}]}}, @TCF_EM_META={0xc4, 0x2, 0x0, 0x0, {{0x800, 0x4, 0x9}, [@TCA_EM_META_RVALUE={0x25, 0x3, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="11ab992bc2f616", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="ab8d69c0b3919b9f0e69"]}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_VAR="1062af65b6a6f207"]}, @TCA_EM_META_LVALUE={0x35, 0x2, [@TCF_META_TYPE_VAR="9fa3d99285fa4e", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="dc0c3dd92753022933", @TCF_META_TYPE_VAR="3a97fb5211", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="a7db0c89"]}, @TCA_EM_META_RVALUE={0x19, 0x3, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="d745110f99640a15", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="ad"]}, @TCA_EM_META_LVALUE={0x18, 0x2, [@TCF_META_TYPE_VAR=')^', @TCF_META_TYPE_VAR="481634e08410bcd8", @TCF_META_TYPE_VAR="0b27d16a7611f810f038"]}, @TCA_EM_META_LVALUE={0xb, 0x2, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="e23cf6e650566a"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0xf, 0x2}, {0x10, 0x8, 0x2}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0xa}}, @TCA_RATE={0x6, 0x5, {0xb, 0x8}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x8f4}, 0x1, 0x0, 0x0, 0x4000000}, 0x26004040) 2m38.469125865s ago: executing program 5 (id=2327): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x84, @local, 0x15, 0x3, 'fo\x00', 0x1, 0x0, 0x69}, 0x2c) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$sock(r0, &(0x7f0000000940)={&(0x7f0000000300)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000540)}, {&(0x7f0000000600)="bbc6351d5b17d69316ec14fbebe6d4f456979602ad91ae24f9a1da6834e77a49a31a836afb32294cf8453b100f60525874c6dd34f59950a10b18499cd72145cf42ccb624e5159a58257c6e1aed068f52", 0x50}, {&(0x7f0000000680)="cc18101d6bec7dadde1d231d7be01e1a3ebed24c1f1b0cacbb731e37f14830d34d9f1234d81e", 0x26}, {&(0x7f00000006c0)="2219a8d1a15d2cc1d9f7e487ed6138173c17bebef35e5c731961e6d1d07d4bc0a9699ac13447f29c363112c81f005fb311", 0x31}, {0x0}], 0x5}, 0x800) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYBLOB="05"], 0x10) close(r2) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m38.357922267s ago: executing program 5 (id=2328): r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x90009427, &(0x7f0000000080)) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0x5, &(0x7f0000000100)=0x20d8, 0x4) preadv(r4, &(0x7f00000026c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x15f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000004200)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r6, 0xffffffff80000800, 0x0, &(0x7f0000004180)={0x1, 0x6, 0x0, 0x0, 0x3, 0x3, 0x0, 0x6, 0x1}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x30, r8, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x30}}, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='vfat\x00', 0x800041, &(0x7f00000001c0)='discard') ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043a639f105b5e9f97700", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x6, 0x4}) 2m37.509119047s ago: executing program 0 (id=2331): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r1 = syz_io_uring_setup(0x4ed, &(0x7f0000000300)={0x0, 0xfec9, 0x0, 0xff7ffffc, 0x274}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xdb4, 0xd070, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x3, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x7f, 0x7}}) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000180)={0x3cea, 0xffffffffffffffff, 0x4, {0x0, 0x400}, 0x3}, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2m36.404793945s ago: executing program 0 (id=2334): r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x0, 0x801) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x0, r3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000180)={0xfffffffffffffffd, 0x0, 0x0, r3, 0x15}) writev(r0, &(0x7f0000000540)=[{&(0x7f00000005c0)='\b', 0x1}], 0x1) read$FUSE(r0, 0x0, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000040)='xfs\x00', 0x800000, 0x0) 2m34.638893572s ago: executing program 5 (id=2341): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x4, 0xf}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xee, 0x97, 0x8a, 0x40, 0x16ca, 0x1502, 0xa925, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7e, 0x24, 0x5, 0x0, [], [{{0x9, 0x5, 0xe, 0x6}}]}}]}}]}}, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) 2m32.656327939s ago: executing program 5 (id=2347): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket(0x400000000010, 0x3, 0x0) socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x1648, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x7, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x161c, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x6}}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_ACT={0x298, 0x7, [@m_mirred={0xf4, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x101, 0x7, 0x1000000a, 0x4, 0x7}, 0x1}}]}, {0xa6, 0x6, "6d0ebd70f4b0e91216663538d8c678d6ef1a9f5abdcfc457516be0e1f0c0ac238cf7869b62a031880cc6e72a0d5b2d75118951d10472f0cb9f8ce683c2ba77381f52b6a2725be98219c5721a46db9208d129e44a700a44e86efae666083f97b14ce38c0aa1a48cccbf32f693ca5e95f0a05e958fc6cbd8bf7ae4a19826563240c0269447abfe25f5157b78501220e78b47f8d2e43c03606a9f86f25e9f86acaec88c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_mirred={0xbc, 0xf, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7e11, 0x608, 0xffffffffffffffff, 0x9, 0xff}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x7, 0xffffffffffffffff, 0x10000, 0xfbb9}, 0x0, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x42, 0x8, 0x5, 0x7f}, 0x1}}]}, {0x2d, 0x6, "c0443a18b2479e5c33343f088520a3a96717bdb7c0108a31acaa924f75ee263b4c45f46d6daaff6a82"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_sample={0xe4, 0xc, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xeaba}]}, {0x9f, 0x6, "19ce47c81fa411aa8f877e99a000cf5468f906f2579893509ddb720ada83c5a6c6107d545d58a65d2ed34b7c8009e73839ff292cc987c5e0efde703bbb277c7444934ebb9b7085140fa3d704d11d1d7af82eb7cc613d77aabbea42b316569f02e20997717ee4c08e0ab87d534f3c2e11558de604a60b96ecc1787e1ce60f0eb57cf096ab452edc37f3870c710c55444d9c11b3780229ec7a8ade78"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_U32_POLICE={0xc1c, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0xaf, 0x1, 0x9, 0x10000000, 0x688, 0x2, 0x4, 0x200, 0x0, 0x0, 0x9ad, 0x6, 0x7, 0x1, 0x6b25, 0xe9, 0x10000, 0x4, 0x4, 0xc, 0x5, 0xfffffffa, 0x7382, 0x400, 0x2, 0x5, 0x8, 0x7, 0x5, 0xfffffffc, 0x7, 0x91, 0x10, 0xee, 0xffffa215, 0xe8, 0x2, 0x7, 0xa, 0x0, 0x2, 0x8, 0x1, 0x0, 0x6, 0x10001, 0x0, 0x4b, 0xc60, 0x9, 0x5, 0x6, 0x3, 0x2, 0x5, 0x693a, 0x7, 0xa1e4, 0x9, 0x8, 0x3, 0xf71, 0x1, 0x3a, 0x203, 0x2, 0x40, 0x1, 0x7, 0x1, 0x46b, 0x3, 0xe, 0xa, 0x1b, 0x5, 0xd1b1, 0x7, 0x8, 0x59, 0xa, 0x7, 0x7, 0x0, 0x5, 0x7fff, 0xb9ee, 0x6, 0xb5a3, 0xfffff69b, 0x4, 0x1, 0xb21, 0x89e9, 0xec2, 0x1, 0xfffff3d0, 0x7fffffff, 0x5, 0x9, 0x730, 0x0, 0xfffffffa, 0x3, 0x7, 0x4, 0x3, 0x3, 0x2, 0x2, 0x4, 0x4, 0x5, 0x4, 0x9, 0x9f540000, 0xc, 0xffffff7f, 0x0, 0x3, 0x7, 0x7, 0x1, 0xb3d, 0x8d8a, 0x6, 0xc, 0xfffffffa, 0x1, 0x0, 0x5, 0x8, 0x400, 0x0, 0xd611, 0x800, 0x59, 0x2, 0x4, 0x7, 0xfffffffa, 0xff, 0x31, 0x8, 0x2, 0x0, 0x907b, 0x1, 0x906, 0x5, 0x5e, 0x8001, 0x7, 0x4, 0x8001, 0x800, 0x8, 0xfffffff8, 0x1, 0x8, 0x401, 0x4, 0x8001, 0x200, 0x6, 0x2, 0x9, 0x7ff, 0x3, 0x0, 0x5, 0xb312, 0x9, 0x8d, 0x0, 0xc, 0x6, 0x0, 0x8, 0x3, 0x80000001, 0x8000, 0x4, 0x7ff, 0x2, 0x0, 0x5, 0x2, 0x4, 0x4, 0x5, 0xfffffffb, 0x9, 0xe9, 0x6, 0x2, 0xfffffffd, 0x6, 0x5000000, 0x2, 0xff, 0x19f2f64a, 0xfff, 0x81, 0x9, 0x3e4, 0x6, 0x2, 0x80, 0x1, 0x74, 0x0, 0x6, 0x0, 0x6, 0x9, 0x5, 0xac, 0x7, 0x1, 0x1, 0x8000, 0x69de, 0x6, 0x6, 0x8, 0x1, 0x4, 0x5, 0x3, 0x8000, 0x3, 0x0, 0x8, 0x1, 0x6, 0x7, 0x3, 0x4, 0x0, 0xa, 0x5, 0x72, 0x0, 0xe, 0x8, 0x7, 0x1bb, 0x6, 0x2, 0x7, 0x3, 0x9, 0x0, 0x800]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x2, 0x7, 0x6, 0xfff, 0xfffffffa, 0x4, 0xb, 0x10, 0x180, 0xffffad30, 0x8, 0x68bf8274, 0xffff, 0x9ab, 0x0, 0x40, 0x4, 0xaa, 0xc, 0x186b, 0x5, 0x7, 0x3, 0x2, 0x94, 0x800, 0xcef5, 0x10, 0x6, 0x7, 0x1, 0x1000, 0x2, 0x2, 0x6, 0x1, 0xb11, 0x6b, 0x4, 0x0, 0x9, 0xfd77, 0xff, 0xfffffffa, 0x96f4, 0x1, 0x5, 0x0, 0x393, 0x6, 0x7, 0x40, 0xc2a, 0x9, 0x401, 0x5, 0x1, 0x8, 0x4, 0x3, 0xf2, 0x9, 0xff, 0x285, 0x400, 0x5, 0x8, 0xd, 0x1ff, 0x1, 0x8, 0x6, 0x100, 0x9a65, 0x269, 0x0, 0x7, 0x6, 0x1, 0x10, 0x1, 0xffff3d8e, 0x9, 0x6, 0x6, 0x3, 0x7fffffff, 0x8, 0x96b, 0x7, 0x8001, 0x2, 0xff, 0x81, 0x7, 0x6, 0x6, 0x1ff, 0x1, 0x401, 0x9554, 0x3, 0x6, 0x800000, 0x0, 0xef, 0x80000001, 0x8000, 0x6b40, 0xe76, 0x4, 0x0, 0xfffffffe, 0x10001, 0xe4, 0xfff, 0x1ff, 0x1ff, 0x80000000, 0xfffffff8, 0x3ff, 0x7, 0x8, 0x2, 0x3, 0x4, 0x0, 0x80, 0xfffffffd, 0x1, 0x5, 0xfff, 0x2b92, 0x1c1c, 0xd, 0x3, 0x3ff, 0x3, 0x5, 0x2, 0x6, 0x8, 0x3, 0xfffffffe, 0x0, 0x1, 0xb, 0x9, 0x6, 0x2, 0x7fffffff, 0x5, 0x1, 0xdc, 0xfffffff7, 0x8, 0x8, 0x7, 0x1, 0x7fff, 0xe8, 0x0, 0x8, 0xc, 0x4, 0x7, 0x1, 0x4c26, 0x8, 0xa4d4, 0xc321, 0x0, 0x5, 0xfffffffc, 0xa, 0x3, 0x9, 0x4, 0x0, 0xe, 0xffffff67, 0xffff, 0x0, 0x1ff, 0x4, 0x9, 0x0, 0x4, 0x68b, 0x7, 0x8fd, 0x6, 0x9, 0x438c, 0x6, 0x6, 0x1, 0x10000, 0x7, 0x2, 0x8, 0x1, 0xfffffff6, 0x5, 0x7, 0x77bf, 0x10000, 0x8, 0x7, 0x1ff, 0x41bc, 0x4, 0x800, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0xb1, 0x5, 0x7, 0x10000, 0xf, 0x4, 0x7, 0x80, 0x1, 0x5, 0x8, 0x4, 0x100, 0x80000001, 0xce8, 0x3, 0xa, 0x725, 0x6, 0x9, 0x1, 0x7, 0x7, 0x3, 0x1000, 0x7fffffff, 0x656, 0xffffffff, 0x2000000, 0x798, 0xd, 0x40, 0x9, 0x17708ed1, 0x6, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x667, 0xa, 0xfffffc00, 0x1, 0x2, 0x6, 0x5, 0x8e, 0x6, 0x0, 0x0, 0x2, 0x2000, 0xc9, 0x7fff, 0x6, 0xb7, 0x1000, 0x4f9a, 0x62, 0x8, 0xf, 0x0, 0x3ff, 0xd, 0x5, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x8, 0xffff, 0xc, 0xe3e, 0x0, 0xe340, 0x80000000, 0x2, 0x6, 0x7, 0x2, 0x2, 0xfffffff8, 0x4000000, 0x8, 0x8, 0x3, 0x401, 0x8001, 0x7, 0x4, 0x7, 0xf, 0x1, 0x7, 0xe9, 0xfffffd1b, 0x3, 0x9, 0x3, 0x8, 0xc, 0x800, 0x7, 0x800, 0x1, 0x80000000, 0xf, 0xf, 0x0, 0x81, 0xdf, 0xba, 0x7, 0x2a5, 0x2, 0x3, 0x2, 0x1, 0x7, 0x5, 0x5c, 0x3, 0x8, 0x7, 0x7, 0x1, 0x8, 0x9a, 0x2, 0x1000, 0x3, 0x7fffffff, 0x8b, 0x80000001, 0xd, 0x9, 0x8, 0x2, 0x5, 0x1, 0x7, 0x3, 0x5, 0x6, 0x3ff, 0xffffffff, 0x5, 0x1, 0x1, 0xfffffff8, 0x0, 0x9, 0xffffff00, 0x6, 0x6, 0x5, 0x7, 0xfffffffe, 0x0, 0x7, 0x9, 0x2, 0x5, 0x9, 0xe, 0x3, 0x3, 0x7fff, 0xf, 0x2, 0x9, 0x4, 0xa787, 0x7fffffff, 0x7ff, 0x3, 0x1, 0x9, 0x5, 0x8, 0x8, 0xdf, 0x6, 0x7, 0x6, 0x3, 0x6, 0x8, 0x1, 0x369, 0x5, 0x7fffffff, 0x1d, 0x7fffffff, 0x2, 0x3, 0x9, 0x0, 0xfffffffe, 0x2, 0x7, 0x5, 0x8, 0x9, 0x6, 0x0, 0x1, 0x5, 0xfffffff7, 0x3, 0x4, 0x0, 0x2, 0x4, 0x1, 0xfb, 0x3, 0x60, 0xfff, 0x5, 0x0, 0x1, 0xce7, 0x9, 0x1, 0x8, 0x3, 0x0, 0x7fff, 0x0, 0xfffffffd, 0x4, 0xf, 0x5, 0x7, 0x4, 0x2, 0x9, 0x5, 0xc39, 0x6, 0x5e, 0x8, 0x4, 0x0, 0x1, 0x4, 0x5, 0x200, 0x5d, 0x9, 0xfffffffb, 0x100, 0x4, 0x0, 0x6, 0x9, 0x3, 0x3, 0x7, 0x8, 0xffff, 0x6070, 0x7, 0x9, 0x81, 0x100, 0x5, 0x6, 0x6, 0x604, 0xb2d, 0xe280, 0x3, 0x9, 0x6ab95aba, 0x5, 0x2, 0x6, 0x7, 0x6, 0x80000000, 0x5, 0x29f, 0xb0, 0x1, 0x8001, 0x30000, 0x7, 0x505b, 0x8ba, 0x7]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}]}, @TCA_U32_SEL={0x754, 0x5, {0x9, 0xd, 0x8, 0x401, 0x3e, 0x8000, 0x9, 0x93, [{0x7, 0x0, 0xf, 0x8000}, {0xc8a, 0x3, 0x8, 0x10}, {0xec00, 0x9, 0x2, 0x3}, {0x73, 0xf, 0x80, 0x76ff6fd1}, {0xc, 0x9, 0x3, 0x6}, {0x9, 0x1, 0x7fffffff, 0xa5}, {0x3, 0x7, 0x8, 0x6c6}, {0x7, 0x8, 0x3, 0x5}, {0xcb, 0x80, 0x0, 0x3}, {0x2, 0x2, 0x9ab, 0x405}, {0x5, 0xc, 0x2, 0xc}, {0x401, 0x3, 0x8, 0x3}, {0x6, 0x3502, 0x4, 0x4}, {0x9, 0x7, 0x40, 0x9}, {0x2, 0x346, 0x6, 0x3}, {0xd, 0x6, 0x3, 0x7}, {0x86, 0x3, 0x2, 0xfffffff6}, {0x100000, 0x4, 0x0, 0x3}, {0x7, 0x9fbe, 0x2, 0x4}, {0x4, 0x3, 0xc0f, 0x10}, {0xfffff868, 0x3, 0x80000001, 0x4}, {0xffffffff, 0x8001, 0x2, 0x8000}, {0x10, 0xa, 0x949, 0x22}, {0x9, 0x4e, 0xfed, 0x1}, {0x9, 0x1, 0x8, 0x9}, {0x9, 0x2, 0x1, 0x6}, {0x10000, 0x4, 0x3889, 0x7}, {0x38c00000, 0xa3, 0x874, 0x900000}, {0x400, 0x2, 0x9, 0xffffffff}, {0x7, 0x8, 0x5, 0x7}, {0xffffffff, 0x101, 0x0, 0x24409d41}, {0x7fff, 0x4, 0x9, 0x9}, {0x99, 0xdfc6, 0x0, 0xfb}, {0xffffffc0, 0x1, 0xaccd401c, 0x6}, {0x79, 0x402cb5ab, 0x1ac2, 0x4}, {0x4, 0x400, 0x3, 0xffff}, {0x7ff, 0x9, 0x1, 0xfe}, {0x4254, 0x9, 0x2, 0x800}, {0x7f, 0xa, 0x0, 0x5}, {0x6, 0x6, 0x6, 0x4}, {0x401, 0x2, 0x9, 0x8}, {0x3, 0x3, 0x4, 0x3b19}, {0x69, 0x3, 0x5, 0x28}, {0x4f, 0x8, 0x3, 0x1c}, {0x2, 0x6cc, 0xe, 0x3}, {0x331, 0x5, 0x4, 0x6}, {0x3ff, 0x8, 0x401}, {0x10, 0x808, 0x3, 0x9}, {0x80000001, 0x12000000, 0x6, 0xea}, {0x4, 0x3, 0x9, 0x9}, {0x7, 0x7f, 0x4, 0x1}, {0x3, 0x2, 0x6, 0x7}, {0x4, 0x8, 0x6, 0x10000}, {0x25aa, 0x756c, 0x40, 0x8000}, {0xffffffc0, 0x3, 0x5, 0x7ff}, {0x7fffffff, 0x200, 0x7, 0x4}, {0x10000, 0x9, 0x3, 0x7f6}, {0x5, 0x0, 0x5, 0x8}, {0x3, 0xfffffe01, 0x101, 0x1ff}, {0x6, 0x9, 0x86, 0x5}, {0x5, 0x3, 0x10}, {0x4, 0x0, 0x8000}, {0x0, 0xfb88, 0x7, 0xe864}, {0x3ff, 0x2, 0xf, 0xc400}, {0x2, 0x6, 0x2, 0xed}, {0x4, 0xce, 0x6, 0xae02}, {0x1, 0xd, 0x6, 0x4}, {0x6, 0x6, 0x1, 0x401}, {0x1000, 0x0, 0x40, 0x32}, {0x800, 0x4ff820dd, 0x0, 0xe}, {0x2, 0x3, 0x0, 0x8}, {0x3, 0xd, 0x56, 0x4e13}, {0x7fffffff, 0x7e8, 0x6, 0x3}, {0x5, 0x9, 0x7, 0xd8d}, {0x34fb, 0x3, 0xaa4, 0x4}, {0x2, 0x8, 0x3, 0x1}, {0x1, 0x9, 0x3, 0x2}, {0x267e0e74, 0xd, 0xe63, 0xffffffff}, {0x69050ef7, 0x10000, 0xfbe6, 0x4}, {0x3, 0x1, 0x9, 0xe38}, {0x1908, 0x5, 0x8, 0xf}, {0x7, 0x2, 0x6, 0x8001}, {0x7, 0x2, 0xfffffffe, 0x40}, {0x3, 0x5, 0x7, 0x2}, {0x101, 0xd, 0xbb, 0x9}, {0x40, 0x8, 0xffff9d5e, 0x8}, {0x2, 0xfffffffd, 0x5, 0x5}, {0x6, 0x3, 0x235f, 0xfffffff9}, {0xff, 0x9, 0x6f}, {0x3, 0x9, 0x8, 0xfffffff8}, {0x6, 0x0, 0x8001, 0x3ff}, {0xff, 0x0, 0x9, 0xffffff00}, {0x6, 0x9, 0xb839, 0xc0b}, {0x9, 0xe, 0x3, 0xdfa}, {0x1, 0x3, 0x10, 0x3}, {0x9, 0x5, 0x4, 0xcab}, {0x5, 0xffffffff, 0x7}, {0x2, 0x1, 0x3ff, 0x2}, {0x0, 0x8, 0x2ed, 0x100}, {0x0, 0x5, 0x4, 0x7}, {0x5, 0x3, 0xfffffffd, 0x1ff}, {0x1, 0x3b8915aa, 0xc, 0x6}, {0x7, 0x1, 0x2, 0x5f98}, {0xffffffff, 0x6, 0x9, 0x9}, {0x75be, 0x4, 0x3, 0x3}, {0x1, 0xd08, 0x4, 0xcdd}, {0x0, 0x1, 0x64, 0x7}, {0x7ff, 0x8, 0x7, 0x1}, {0x0, 0x4, 0x80000000, 0xb1d}, {0x1, 0xd9, 0x7, 0x3}, {0x8, 0xf, 0x62, 0xe}, {0x4, 0xfffffffc, 0x7}, {0x3, 0x1, 0x2e}, {0x10001, 0x8, 0x1ff, 0x9}, {0xd2a, 0xffffffff, 0x4, 0x8}, {0x6, 0x1, 0xfa, 0xe}]}}]}}]}, 0x1648}, 0x1, 0x0, 0x0, 0x20000810}, 0x20000000) 2m32.547363461s ago: executing program 5 (id=2349): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) readv(r1, &(0x7f0000001c80)=[{&(0x7f0000000740)=""/200, 0xc8}], 0x1) r2 = socket$inet(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0xc0403d11, 0xffffffffffffffff) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x400000}, 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r6, r7, 0x7, 0x0, @val=@tcx={@void, @value=r6}}, 0x1c) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000440)={&(0x7f0000800000/0x800000)=nil, &(0x7f000051f000/0x4000)=nil, 0x800000, 0x1, 0xfe}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r8, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000740)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\a\x00\x00\x00\x00\x00\x00\x00\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x04\x00\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\xf3\x00\xfc\xd1\xb5\xfd\xec@\xe5\x91\x8e\xd4\x89\xef\x95\x17\x16\xfc\x91\xa0\xbbE\x80)mh\xc7\xf1?\xbb\x13;\xbd\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfKn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\a0{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92$\x14a\xf4\x15_\x19Kt\r\xe3\xd9\xb4\x15mWl\xeb\xb7mLY#)\xc2\xa4\x8a\xc5\xca\xf5;W:-\xb4(\xce\x02y\x04\'\xbcY\xb0%\xea|\xbf\xc9\xda\xaet\xac\xee\xd5\xcb\xe8\xfc\xa8\xe9\xff\x06\x8d\x1f\xdf\xf7\x80+\xcc\x1e\nmt\x1d\xdf\xe0\x17\r\b\xc1)\x8b\x99O\xbc\x18\xf5\xcd\x81\x82\xe98\xdb\xe4\x9d\r\x9e\xd2\x93O\xc0\xbf\xda/\x05\xa8\xa8\xf7\xdf\x101<\x03\xd8\xccu8w\x93\xf5U\xde\x1f8\xe2\xafX+\'\xad\xbd\aH\xc0\xf4\xc6\xfd\x86+X\xbai\x02\nw\x97\x92R\x8d\xcb8\x16O(sz\xf5', 0x6) syz_io_uring_setup(0x2c0e, &(0x7f0000000400)={0x0, 0x6, 0xc002, 0x1000}, 0x0, 0x0) accept4$inet(r2, &(0x7f0000000100), 0x0, 0x80800) writev(r0, &(0x7f00000025c0)=[{0x0}, {0x0}], 0x2) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000180)={0x8, 0x4f, {r3}, {}, 0x5, 0x8001}) 2m30.297286171s ago: executing program 5 (id=2355): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000c80)=@broute={'broute\x00', 0x20, 0x5, 0x176, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000004c0], 0x0, 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"/372]}, 0x1ec) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) socket$inet_udplite(0x2, 0x2, 0x88) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x1f, 0x1e, 0x94, &(0x7f00000007c0)}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execve(&(0x7f0000000040)='./file2\x00', 0x0, &(0x7f00000005c0)={[&(0x7f00000004c0)='/dev/net/tun\x00']}) 2m21.106795365s ago: executing program 33 (id=2334): r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x0, 0x801) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x0, r3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000180)={0xfffffffffffffffd, 0x0, 0x0, r3, 0x15}) writev(r0, &(0x7f0000000540)=[{&(0x7f00000005c0)='\b', 0x1}], 0x1) read$FUSE(r0, 0x0, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000040)='xfs\x00', 0x800000, 0x0) 2m14.941399519s ago: executing program 34 (id=2355): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000c80)=@broute={'broute\x00', 0x20, 0x5, 0x176, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000004c0], 0x0, 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"/372]}, 0x1ec) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) socket$inet_udplite(0x2, 0x2, 0x88) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x1f, 0x1e, 0x94, &(0x7f00000007c0)}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execve(&(0x7f0000000040)='./file2\x00', 0x0, &(0x7f00000005c0)={[&(0x7f00000004c0)='/dev/net/tun\x00']}) 10.200444511s ago: executing program 3 (id=2845): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c4000000190001002dbd700000000000fe880000000000000000000000000001ac14142500000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000200000000000b6b5c46c4e6f286800000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000000000000000000000001000000000000000a00100001"], 0xc4}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c4000000190001002dbd700000000000fe880000000000000000000000000001ac14142500000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000200000000000b6b5c46c4e6f286800000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000000000000000000000001000000000000000a00100001"], 0xc4}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000dd479e2c5d470243cae33e0e103b00680001022bbd7000fcdbdf250200"], 0x20}, 0x1, 0x0, 0x0, 0x8840}, 0x80) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac14141500000000000000000000000000000005000000000a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f00000000000000000000000000000000000000000000ffffffffffffffffb50000000000000000000000000000000200000000000000000a000000000000000000000008000000000000000000080000000000000000010000000000000044000500fc000000000000000000000000000001000004d23c00000000000000ffffffff00000000000000000000000000000000000309"], 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0x6}, 0x1c) (async) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0x6}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x3ef8, 0x9, r6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="05000300000000000000f6e75f4fbd44e44b57f0aee811ea58530d410c21d703a2aad5e372494b9f3cd89298d963bfd8aa20786e76c98898cf0b64456760910967dbf395617252181aba8133cadeb2c2edae0951c1840a26d1da174c8ba22d0cc2a330e50cc8ec8bda6899edf823391e7ea519ec52445a", @ANYRES32=r9, @ANYBLOB="0a0018000303030303030000"], 0x28}}, 0x20040840) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="05000300000000000000f6e75f4fbd44e44b57f0aee811ea58530d410c21d703a2aad5e372494b9f3cd89298d963bfd8aa20786e76c98898cf0b64456760910967dbf395617252181aba8133cadeb2c2edae0951c1840a26d1da174c8ba22d0cc2a330e50cc8ec8bda6899edf823391e7ea519ec52445a", @ANYRES32=r9, @ANYBLOB="0a0018000303030303030000"], 0x28}}, 0x20040840) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x98, r5, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x7fff, 0x6, 0x6e51]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x19, 0x13, [{0x3, 0x1}, {0x36}, {0x48, 0x1}, {0x1b, 0x1}, {0x10}, {0x9}, {0x7, 0x1}, {0x24}, {0x48, 0x1}, {0x78, 0x1}, {0x24}, {0x6c}, {0x6c, 0x1}, {0x16, 0x1}, {0x5, 0x1}, {0x30}, {0x18}, {0x5}, {0x4}, {0x6, 0x1}, {0xb}]}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x16}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x7}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_STA_WME={0x1c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x8}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}]}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7}]}, 0x98}, 0x1, 0x0, 0x0, 0x40004}, 0x810) r10 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007882b740422c0917b7ca010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r10, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x40, 0x1, 0x1, 'q'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r10, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './file2'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) 8.394234536s ago: executing program 3 (id=2847): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) mount$9p_rdma(&(0x7f00000000c0), 0x0, &(0x7f00000001c0), 0x10000, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030303030346532332cf83b4cb378303030303030303030303030303030622c00"]) madvise(&(0x7f0000c2a000/0x2000)=nil, 0x2000, 0x17) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, &(0x7f0000000480)) r4 = syz_open_dev$loop(&(0x7f0000000040), 0xff, 0x1) ioctl$LOOP_SET_FD(r4, 0x4c00, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) r5 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f054071040403851099c300010902b901010000003f0904"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) 7.936444602s ago: executing program 1 (id=2849): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = syz_usb_connect$printer(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r4 = syz_open_dev$media(0x0, 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000080)) syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f00000003c0)={0x1}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@ipv6_getaddrlabel={0x38, 0x1a, 0x1, 0x70bd26, 0x0, {0x2, 0x0, 0x20}, [@IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_ADDRESS={0x14, 0x1, @private2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_deladdr={0x2c, 0x15, 0x200, 0x70bd28, 0x25dfdbfc, {0xa, 0x40, 0x4, 0xff, r8}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x2c}}, 0x2400c080) close_range(r0, 0xffffffffffffffff, 0x3f00000000000000) 7.515608744s ago: executing program 2 (id=2852): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1b6}}], 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0xfe, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xfffd}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 7.19779477s ago: executing program 2 (id=2855): unshare(0x24020400) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) syz_emit_ethernet(0x49, &(0x7f0000000300)={@local, @remote, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x3, 0x38, 0x3b, 0x68, 0x0, 0x7f, 0x6, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x2f}}, @payload_direct={{{{0x27, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, 0x2, 0x3766, 0x0, 0x1, 0x5, 0x4c1b4ea72191ce6b, 0x3, 0x81, 0x6, 0x4, 0x4e24, 0x4e21}, 0x3, 0x4}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) connect$rxrpc(r3, 0x0, 0x0) connect$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110, 0x1, 0xa7}}], 0x18, 0x4c00}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x300) socket$nl_generic(0x10, 0x3, 0x10) 6.242679874s ago: executing program 2 (id=2857): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000000c0)={0x0, 0x1, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0x9, '\x00', @p_u8=&(0x7f0000000280)=0xe6}}) r1 = syz_io_uring_setup(0x1717, &(0x7f00000020c0)={0x0, 0x4, 0x10000, 0x1, 0xd5}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000), 0x4}, 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x49, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000000, 0x1}) io_uring_enter(r1, 0x27e2, 0x0, 0xf, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) sendto$packet(r5, &(0x7f0000000180)="10031200e4ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140), 0x14) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000412ff8)="63429860415b7ac7", 0x8) r7 = accept(r6, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r7, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x0) 5.725682883s ago: executing program 2 (id=2858): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8, &(0x7f0000000280)=ANY=[]) 5.706385719s ago: executing program 7 (id=2859): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x54, r1, 0x207, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x54}}, 0x800) 5.610054666s ago: executing program 7 (id=2860): socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000001500)=""/123, 0x7b}, 0x2106) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = dup3(r2, r1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x20) r4 = io_uring_setup(0x549c, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x13, 0x0, 0x2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=@newqdisc={0x50, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x6}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}, @qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x10}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 5.202596684s ago: executing program 3 (id=2862): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) socket$nl_generic(0x10, 0x3, 0x10) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0xfffc, @broadcast}, 0x2}}, 0x2e) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r4, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="796100c5d2fbbd0000007e00"], 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) 5.09434456s ago: executing program 7 (id=2863): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) syz_io_uring_setup(0x83a, &(0x7f00000000c0)={0x0, 0x3d06, 0x400, 0x2, 0x154}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000c80)={0x5c, 0x1f, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x20, {0x0, 0x6, 0x9, 0x9, [0x1, 0x0, 0x6]}}, @generic={0x5, 0x4c, "b9c380379222677941cffac56629fecc6e64319424b36458238dd144d73568cd5b3cffcc29f4f2624a0906300109d090e600f3622782dab8a331a6e6fb75bef40a3ffd43e5e88aadc8466040"}, @calipso={0x7, 0x20, {0x0, 0x6, 0x9, 0x3, [0x8, 0x4, 0x3a]}}, @jumbo={0xc2, 0x4, 0x36aa}, @calipso={0x7, 0x50, {0x2, 0x12, 0xe6, 0x5, [0x4, 0x9, 0x6508, 0xa94, 0x2b84, 0xffffffff, 0x9, 0xffffffffffffffff, 0x1]}}, @pad1, @jumbo={0xc2, 0x4, 0xfa}]}, 0x100) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote, 0x3}}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000180)={0x0, 0xfff, 0x1, [0x3, 0x6, 0x100, 0x9, 0x800], [0x54, 0x2, 0x9, 0x7, 0x7, 0x5, 0x401, 0x2, 0x2, 0x4, 0x1, 0x3, 0x8e2, 0x5, 0x4, 0xd5cc, 0xffffffffffff0000, 0x400, 0x0, 0x101, 0x5, 0x1, 0x8, 0x8, 0x5, 0x8000, 0x4, 0x7fff, 0x8, 0x7, 0x59, 0x9c, 0x7, 0xc, 0x1e5b36cd, 0x8000000000000000, 0x6, 0x1004000, 0x0, 0x6, 0xe, 0x82f, 0x6, 0x4, 0x7, 0x10, 0x6, 0xb1c, 0x9, 0x7, 0x2, 0x3, 0x0, 0x1, 0xf267, 0x4, 0x2, 0x1, 0x5, 0xd65e, 0xffffffffffffffff, 0x100000000, 0x1, 0x8, 0x401, 0x7, 0x5, 0xfffffffffffffffe, 0xfffffffffffffff8, 0x9, 0x8, 0x3, 0x7, 0x1, 0x4, 0x9, 0x7, 0x5, 0x1, 0x80000000, 0x3, 0x6, 0x2, 0x0, 0x400, 0x4b8224c0, 0x1000, 0x4, 0x819d, 0x6, 0x3, 0x2, 0xcea, 0x57b2, 0x9, 0x6, 0x0, 0x3, 0xffffffffffffffff, 0x9, 0xa91a, 0x6, 0x7f, 0x2, 0x40, 0x6, 0x8000000000000, 0x6, 0x6, 0x5, 0x8, 0x1513, 0x0, 0x101, 0x0, 0xc, 0x8f, 0xfffffffffffffeff, 0x0, 0x9, 0x4]}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f0000000780)={{0x5, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7815]}) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') pread64(r10, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r9, 0xae80, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r10, 0x0, 0x486, &(0x7f0000000600), &(0x7f00000006c0)=0xc) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) 4.564729681s ago: executing program 6 (id=2864): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x5, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f00000000c0)=0x8b, 0x100000500) r5 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[0x0], &(0x7f00000003c0), 0x0, 0x1, 0x0, 0x0, r6}) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x5, 0x0, 0x0, r6}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000b00)={0x500, 0x2, &(0x7f0000000640)=[r6, 0x0], &(0x7f0000000680)=[0x5, 0x0], &(0x7f0000000a80)=[r9, r7], &(0x7f0000000ac0), 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x3, 0x1, 0x5}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01864ba, &(0x7f0000000280)={0xa670, r7, r10, 0xc0c0c0c0}) ptrace$getenv(0x4201, 0x0, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f00000001c0)=@md0, 0x0, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00') preadv(r11, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/4089, 0xff9}], 0x1, 0x740, 0x2) 4.550482282s ago: executing program 1 (id=2865): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) r6 = syz_clone(0xa1302400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace(0x8, r6) process_mrelease(0xffffffffffffffff, 0x700000000000000) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x24, r7, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x4}]}, 0x24}}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0xfffffffe, {0x7, 0x0, 0x0, r9, 0x80, 0x2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}}, 0x4004000) 3.512962225s ago: executing program 1 (id=2866): syz_usb_connect(0x2, 0xa56, &(0x7f0000001b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7, 0x81, 0x1, 0x40, 0x7}, 0x34, &(0x7f00000001c0)={0x5, 0xf, 0x34, 0x3, [@ssp_cap={0x10, 0x10, 0xa, 0xe, 0x1, 0x6, 0xff0f, 0x800, [0xc0]}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x8, 0x8, 0x7}, @generic={0x18, 0x10, 0x2, "24fd81e4385b579863d5b8b755526f4b3fb22966fe"}]}, 0x4, [{0x3, &(0x7f0000000180)=@string={0x3, 0x3, '\r'}}, {0x45, &(0x7f0000000400)=ANY=[@ANYBLOB="4503db3742046818c218e8820868e41173e9b39622cf202ba0b629fb6b3d834ecde3933b64477f76e76596ffacf0657f6a8d246362b5d48cc26b13bf3b3a22d09151c0861a"]}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1001}}, {0x56, &(0x7f0000000480)=ANY=[@ANYBLOB="560397c8f58940e8d66a30001f1865a600da78e815b741dbf7181fe682477fce9781eaa94683694a1c258fe78108789aa11baa2ec23e0ae0f3de75458b946acf3163651207246f7e241058216dc27068804c0adbe9b2"]}]}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(0xffffffffffffffff, 0x800442d4, &(0x7f0000000100)=0x3) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001064520bfe665a5e290000281a12c6578ae5f200090a010400000000000000fc9a3def5945a07925ee28a4e8000a0000040900010073797a31000000000900020073797a310000000008000a40fffffffc0800054000000024083fd2914f8f317eaa7863580003400000004408000f40"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, &(0x7f0000000200)}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20040040) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) close_range(r1, 0xffffffffffffffff, 0x0) 3.499458316s ago: executing program 6 (id=2867): socket$nl_rdma(0x10, 0x3, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x549c, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=@newqdisc={0x50, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x6}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}, @qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x10}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 3.431195635s ago: executing program 3 (id=2868): syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRESDEC=0x0], 0x200) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf", 0x30}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x138}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="2c385a7af3", 0x5) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x12, &(0x7f0000000000)=0x6ab8, 0x4) r4 = accept4(r2, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a2be6e254d827012967db0758c0fa31fff90c60693957939c8ce4ed025b", 0xa5}, {0x0}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {&(0x7f0000000980)="3d0296eb70593b74da27ad0ef43cdfacca013f61136666b092f154b82202e7f3b41215fbe3e3381a66b6abde7af0a9f608998408bae2f97394d17cd4fad43a83137abc47e294c03e1c127933e4a232eb62112ca14d3b2323af2120ec24e17f1fc1758194dc4f9774968f41354ff3b7d7f445a29938c18743b5d93c123c4a67c469d256d9f076c29593f9648b5a1bd4195a3d7059007458b7dcc193efed2bfc25fe4cf69d8cc14a45105d48307cb7b27e4938d9d0d3c60b47bf599136cac2f29f890845", 0xc3}, {&(0x7f0000000580)}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a3031271340b8ac67", 0x1e}, {&(0x7f0000000a80)}, {&(0x7f0000000ac0)="50591ee1c54cb070964417fd1f4ffe5a57c4ff8a3c5c5ce1d3957dfc44e8e17c719084f4e8da23c0e4667eeda56ce5d4d14d904f", 0x34}], 0x8, 0x4d9e, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000002840)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2ce845e3a1342bff693163c5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf9b}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)=0x1ff) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x4a981dc6ac3c29c7}) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x9, 0x7, 0x1, 0x5, 0x18, "88837f3d60559baac16d3d2828a5e42d79324d"}) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000880)="7d6b1f3b2d474df7ff9671dd2de662359fdbd08a22438e7a2750190dd48a838f4737b3f0a9895e74aecdb5541d8c5950dfb28a19ffca7ffccb15c9b57e27a4fa3699b5d718db2d486c03a49dad99ea66cd9e75c30cf3e5215453325f927e62e035d65ff9cddaf5aeb4e4f6bd33a79f86df2f44a69e0c6f409bc9bb64cc38a6523c7cddda5349b36454a5de479f0d4ec4aad1b7") ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.944358759s ago: executing program 7 (id=2869): syz_init_net_socket$ax25(0x3, 0x5, 0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x3f, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x48}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) iopl(0x3) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="e3", 0x1}], 0x1, 0x1) fcntl$setpipe(r2, 0x407, 0x176) vmsplice(r3, &(0x7f0000000480)=[{&(0x7f00000000c0)='{', 0x1}], 0x1, 0xd) vmsplice(r2, &(0x7f0000002a80)=[{&(0x7f0000000340)="b9", 0x1}], 0x1, 0x8) r4 = io_uring_setup(0x3edc, &(0x7f0000000040)={0x0, 0xc8a0, 0xc1b1, 0x2, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d00010004000000010004000000000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x50) ioctl$SNDRV_PCM_IOCTL_UNLINK(r4, 0x4161, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000400)={0xf0f020}) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000140)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="00060700000027024d9d128302"], &(0x7f0000000280)={0x0, 0x3, 0xc6, @lang_id={0x0, 0x3, 0x480a}}, &(0x7f0000000080)={0x0, 0x22, 0xb, {[@main=@item_012={0x2, 0x0, 0x3, "4089"}, @main=@item_012={0x2, 0x0, 0xb, 'V&'}, @main=@item_4={0x3, 0x0, 0xa, "ee688393"}]}}, &(0x7f0000000100)={0x0, 0x21, 0xfffffffffffffe5f, {0x9, 0x21, 0x5, 0xe9, 0x1, {0x22, 0x201}}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00050b00e778c559685d46fc29a8"], &(0x7f0000000380)={0x0, 0xa, 0x0, 0x2d}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000440)={0x20, 0x1, 0x51, "5109d85ba89a3937137db45fc7284ebf54b29207c53020a170180ec148498944e9f5c6017af683b747165d80317ee39943ae5bb330d0c29d524b5855139f60cd54c1a7a97ee38a6645e90333a61c7e7e48"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x2}}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) 2.928294778s ago: executing program 6 (id=2870): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x54, r1, 0x207, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x54}}, 0x800) 2.787683546s ago: executing program 6 (id=2871): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socket(0x15, 0x5, 0x0) r0 = inotify_init() inotify_add_watch(r0, 0x0, 0x400017e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r3, 0x83515, 0xc2de, 0x8, 0x0, 0x0) 2.680413243s ago: executing program 2 (id=2872): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x54, 0x0, 0x207, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x54}}, 0x800) 2.137007548s ago: executing program 3 (id=2873): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socket(0x15, 0x5, 0x0) r0 = inotify_init() inotify_add_watch(r0, 0x0, 0x400017e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r3, 0x83515, 0xc2de, 0x8, 0x0, 0x0) 2.128653578s ago: executing program 2 (id=2874): r0 = socket$caif_stream(0x25, 0x1, 0x3) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xff91) prctl$PR_SCHED_CORE(0x3e, 0x0, r1, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0xa, 0x3, 0xff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f0000000080)=0xc1, 0x1) r6 = memfd_create(0x0, 0x18) setrlimit(0x4, &(0x7f0000000000)={0x6bd7, 0x2}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="58000000020601010080000000000000000000000d00020073797a310000000005000435400000000c0007800500150003000000050005000a000000050001000600000014000300686173683a69702c706f72742c697000"], 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfe, 0x10000}, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x78}, 0x1, 0x0, 0x0, 0x480c1}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYRESHEX=r8, @ANYBLOB="81af5b5d10339517576e484bafacea121eac0f0a4d6c813abb251d8fcce8414cfe3767bdf26f654b29dcdf083986673cc1d741b6f7d92fa4228a582b7e2b67ef141e610e7c3580e1708d44fa45652d3b6d9886d144b312ae1918be6c7c868c85ef059d585e76462334dfc523ab52833f3f9b7bbde608d9c5079f7917420135f38e1344ddea580d14617fc5ba351fcbf0397c237af9eeb97a529cb83c169cd16e7ebf9155ab552fb2770874b9c3603b8cd6a8084edc918a6328aabd8b7477642c8082710bbb9c08d677646c7c479cc08c4e96a1d19e48917e11621c89936e897995b7fac3ab8a468032832fb0e6bd89a2", @ANYRES8=r6, @ANYBLOB="3d5bc6e07b0e5675dcfceb9f05aadb230f04e5da49f780b90aaf7be252f8bae03b66a691a67bbc36f91a6d272ebfae205ce2dc3087867e38a88228c441d83da2c69ac4c8846cef7b1b63d90dd678d0746a87cf4a32d45ce6bec42e80c909915da0074303d218f1e055e15e4f55189999e37ddd5253460a51278e44f0b28b4dda1abc08c319ab6e2d9ff73c28c6cecd365d74233e995ece96763f62fa361c551bc2530ed1eb5aa9d28ab2e55e1c34494e80098d43de9765c0b095e664062b51eb71", @ANYRESOCT=r6], 0x50) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x39) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c014) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="084a33bebde5a44070275290f5150102030109021200010000000009040000006f5c0a00"], 0x0) 2.035692607s ago: executing program 7 (id=2875): r0 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) socket$igmp6(0xa, 0x3, 0x2) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r2 = syz_usb_connect(0x3, 0x4a, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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", @ANYRES8=r1]) 1.529208405s ago: executing program 6 (id=2876): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) r6 = syz_clone(0xa1302400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace(0x8, r6) process_mrelease(0xffffffffffffffff, 0x700000000000000) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x24, r7, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x4}]}, 0x24}}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0xfffffffe, {0x7, 0x0, 0x0, r9, 0x80, 0x2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}}, 0x4004000) 720.178546ms ago: executing program 3 (id=2877): r0 = socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0xfffd, @random="c0c13c2baeb6", 'macvlan1\x00'}}, 0x1e) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e120602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4) getrlimit(0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = syz_usb_connect(0x2, 0x7, &(0x7f0000000200)={{0x12, 0x1, 0x141, 0x8f, 0x1b, 0x77, 0x10, 0x12d1, 0xd796, 0xf8f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xcf, 0x2, 0x2, 0xff, 0x6, 0x3f, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x10, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xc0, 0x7}]}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000040}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=@newtclass={0x68, 0x28, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff1}, {0xc, 0xa}, {0xc, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x5}}, @tclass_kind_options=@c_prio={0x9}, @tclass_kind_options=@c_cbs={0xfffffffffffffeee}, @TCA_RATE={0x6, 0x5, {0x80, 0x8}}, @tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x8, 0xf}}, @tclass_kind_options=@c_netem={0xa}]}, 0x68}}, 0x0) r4 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x205002) ioctl$FE_GET_EVENT(r4, 0x80286f4e, &(0x7f0000000080)={0x0, {0x0, 0x0, @qam}}) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, &(0x7f0000000100)=0xb, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x85c3}}) syz_open_dev$vcsn(&(0x7f0000000000), 0x621f, 0x4a41) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000080009000d000000", 0x24) 612.482726ms ago: executing program 7 (id=2878): syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) getpgid(0x0) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000480)=[@nested_amd_vmload={0x182, 0x18, 0x3}, @uexit={0x0, 0x18, 0x8001}, @wr_drn={0x68, 0x20, {0x3, 0xc4}}, @nested_amd_invlpga={0x17d, 0x20, {0x0, 0xdaae}}, @out_dx={0x6a, 0x28, {0x1581, 0x0, 0x1}}, @code={0xa, 0x56, {"f20f108100680000470f0966b808018ed80f2043410f01d166ba400066ed66baa100b000eec744240051000000c74424020d000000ff1c242ef30fc7b680ffffff410f01f8"}}, @nested_create_vm={0x12d, 0x18, 0x8}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x457, 0x10, 0xffff, 0x2}}, @uexit={0x0, 0x18, 0x2}, @enable_nested={0x12c, 0x18}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x56, 0x2, 0x4, 0x2}}], 0x1a6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x8}, @exit], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94) r3 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$USBDEVFS_REAPURB(r5, 0x4008550c, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800007, 0x11, r3, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) unshare(0x62040200) socket$inet(0xa, 0x801, 0x84) 572.261278ms ago: executing program 6 (id=2879): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r1], 0x4}}, 0x0) sendfile(r4, r2, 0x0, 0x100000000) 492.24334ms ago: executing program 1 (id=2880): socket$nl_rdma(0x10, 0x3, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x549c, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=@newqdisc={0x50, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x6}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}, @qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x10}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 93.367301ms ago: executing program 1 (id=2881): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x54, r1, 0x207, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x54}}, 0x800) 0s ago: executing program 1 (id=2882): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000a80)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8, &(0x7f0000000280)=ANY=[]) kernel console output (not intermixed with test programs): Product=6007, bcdDevice= 0.00 [ 756.881029][T12787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.014776][T12787] usb 4-1: config 0 descriptor?? [ 757.356814][ T5968] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 757.513891][T12787] hid-multitouch 0003:1FD2:6007.001D: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 757.856515][ T5968] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 757.870648][T15352] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2462'. [ 757.916754][ T5968] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 757.930536][ T5968] usb 3-1: config 0 interface 0 has no altsetting 0 [ 757.941400][ T5968] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 757.956028][ T5968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.980831][T15349] Unsupported ieee802154 address type: 0 [ 757.994863][ T5968] usb 3-1: config 0 descriptor?? [ 758.004886][ T9] usb 4-1: USB disconnect, device number 100 [ 758.107083][T15369] fido_id[15369]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 758.420443][ T5968] magicmouse 0003:05AC:0265.001E: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.2-1/input0 [ 758.432759][ T5968] magicmouse 0003:05AC:0265.001E: magicmouse input not registered [ 758.446912][ T5968] magicmouse 0003:05AC:0265.001E: probe with driver magicmouse failed with error -12 [ 758.629398][T15381] FAT-fs (nullb0): bogus number of reserved sectors [ 758.636200][T15381] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 758.665407][T15360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 758.675262][T15360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 758.686614][T15360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 758.695446][T15360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 759.449150][T15393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2476'. [ 759.464600][T15393] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2476'. [ 759.699849][T15398] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.2477' sets config #485 [ 759.887371][ T5968] usb 3-1: USB disconnect, device number 108 [ 760.032840][ T2721] block nbd0: Possible stuck request ffff888027c10000: control (read@0,1024B). Runtime 300 seconds [ 760.046442][ T2721] block nbd0: Possible stuck request ffff888027c10200: control (read@1024,1024B). Runtime 300 seconds [ 760.057847][ T2721] block nbd0: Possible stuck request ffff888027c10400: control (read@2048,1024B). Runtime 300 seconds [ 760.069347][ T2721] block nbd0: Possible stuck request ffff888027c10600: control (read@3072,1024B). Runtime 300 seconds [ 760.599402][T15414] netlink: 'syz.2.2483': attribute type 10 has an invalid length. [ 760.626537][T15414] veth0_vlan: left promiscuous mode [ 760.647411][T15414] veth0_vlan: entered promiscuous mode [ 760.676563][T15414] team0: Device veth0_vlan failed to register rx_handler [ 760.872575][ T5968] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 761.168740][ T5968] usb 8-1: Using ep0 maxpacket: 8 [ 761.194026][ T5968] usb 8-1: unable to get BOS descriptor or descriptor too short [ 761.202852][ T5968] usb 8-1: config 4 has an invalid interface number: 147 but max is 0 [ 761.211032][ T5968] usb 8-1: config 4 has an invalid descriptor of length 87, skipping remainder of the config [ 761.236984][ T5968] usb 8-1: config 4 has no interface number 0 [ 761.244496][ T5968] usb 8-1: language id specifier not provided by device, defaulting to English [ 761.261828][ T5968] usb 8-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 761.278930][ T5968] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.280486][T15425] netlink: 'syz.6.2488': attribute type 10 has an invalid length. [ 761.304912][T15425] veth0_vlan: left promiscuous mode [ 761.310808][T15425] veth0_vlan: entered promiscuous mode [ 761.318349][T15425] team0: Device veth0_vlan failed to register rx_handler [ 762.546163][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 762.546182][ T30] audit: type=1326 audit(762.076:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15427 comm="syz.1.2489" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc05ed9c629 code=0x0 [ 762.601486][ T10] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 762.627061][ T5968] uvcvideo 8-1:4.147: Found multiple Units with ID 6 [ 762.634606][ T5968] uvcvideo 8-1:4.147: Found UVC 0.02 device (04f2:b746) [ 762.644246][ T5968] uvcvideo 8-1:4.147: No valid video chain found. [ 762.654125][ T5968] usb 8-1: USB disconnect, device number 4 [ 762.796682][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 762.823236][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 762.841341][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 762.862403][ T10] usb 4-1: Product: syz [ 762.866591][ T10] usb 4-1: Manufacturer: syz [ 762.871180][ T10] usb 4-1: SerialNumber: syz [ 763.215826][ T10] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 101 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 763.288142][T15421] netlink: 'syz.3.2487': attribute type 1 has an invalid length. [ 763.329404][ T10] usb 4-1: USB disconnect, device number 101 [ 763.343475][ T10] usblp0: removed [ 763.368071][ T30] audit: type=1400 audit(763.517:1526): avc: denied { read } for pid=15440 comm="syz.6.2495" path="socket:[57332]" dev="sockfs" ino=57332 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 763.721046][T12787] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 763.786472][T15465] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.2497' sets config #485 [ 763.901292][T12787] usb 8-1: Using ep0 maxpacket: 32 [ 763.914939][T12787] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 764.052231][T12787] usb 8-1: config 0 has no interface number 0 [ 764.070965][T12787] usb 8-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 764.091278][T12787] usb 8-1: config 0 interface 1 has no altsetting 0 [ 764.150932][T12787] usb 8-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 764.219301][T12787] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.252679][T12787] usb 8-1: Product: syz [ 764.269895][T12787] usb 8-1: Manufacturer: syz [ 764.299387][T12787] usb 8-1: SerialNumber: syz [ 764.328095][T12787] usb 8-1: config 0 descriptor?? [ 764.345508][T15473] netlink: 'syz.6.2503': attribute type 10 has an invalid length. [ 764.359167][T15473] veth0_vlan: left promiscuous mode [ 764.373250][T15473] veth0_vlan: entered promiscuous mode [ 764.393918][T15473] team0: Device veth0_vlan failed to register rx_handler [ 764.415535][T15477] netlink: 'syz.3.2502': attribute type 1 has an invalid length. [ 764.570389][T12787] cx231xx 8-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 764.620214][T12787] cx231xx 8-1:0.1: Failed to read PCB config [ 764.630662][T12787] cx231xx 8-1:0.1: probe with driver cx231xx failed with error -71 [ 764.649511][T12787] usb 8-1: USB disconnect, device number 5 [ 764.840514][ T10] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 764.990401][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 764.997107][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 765.006929][ T10] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 765.022891][ T10] usb 2-1: config 4 has an invalid descriptor of length 215, skipping remainder of the config [ 765.039958][ T10] usb 2-1: config 4 has no interface number 0 [ 765.052858][ T10] usb 2-1: language id specifier not provided by device, defaulting to English [ 765.090530][ T5867] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 765.110713][ T10] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 765.120856][T12787] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 765.142087][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.263160][ T5867] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 765.272417][ T5867] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 765.280801][ T5867] usb 3-1: Product: syz [ 765.284997][ T5867] usb 3-1: Manufacturer: syz [ 765.290214][T12787] usb 8-1: device descriptor read/64, error -71 [ 765.300303][ T5867] usb 3-1: SerialNumber: syz [ 765.307064][ T5867] usb 3-1: config 0 descriptor?? [ 765.317852][ T5867] ch341 3-1:0.0: ch341-uart converter detected [ 765.414146][ T10] uvcvideo 2-1:4.147: Found multiple Units with ID 6 [ 765.421918][ T10] uvcvideo 2-1:4.147: Found UVC 0.02 device (04f2:b746) [ 765.429763][ T10] uvcvideo 2-1:4.147: No valid video chain found. [ 765.441224][ T10] usb 2-1: USB disconnect, device number 109 [ 765.480058][ T1202] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 765.520667][T15482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 765.530299][T15482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 765.540008][T12787] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 765.549801][ T5867] usb 3-1: failed to receive control message: -121 [ 765.556495][ T5867] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 765.639976][ T1202] usb 7-1: Using ep0 maxpacket: 16 [ 765.646306][ T1202] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 765.656688][ T1202] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 765.668591][ T1202] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 765.678290][ T1202] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 765.688048][T12787] usb 8-1: device descriptor read/64, error -71 [ 765.694358][ T1202] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 765.709592][ T1202] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 765.718832][ T1202] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 765.726843][ T1202] usb 7-1: Manufacturer: syz [ 765.734042][ T1202] usb 7-1: config 0 descriptor?? [ 765.768116][ T30] audit: type=1400 audit(765.918:1527): avc: denied { append } for pid=15481 comm="syz.2.2506" name="usbmon5" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 765.810377][T12787] usb usb8-port1: attempt power cycle [ 765.991720][ T1202] rc_core: IR keymap rc-hauppauge not found [ 765.997630][ T1202] Registered IR keymap rc-empty [ 766.002940][ T1202] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 766.043046][ T1202] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 766.110870][ T1202] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 766.162721][ T1202] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input122 [ 766.169950][ T10] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 766.177133][T12787] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 766.195433][ T1202] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 766.225061][ C1] rc rc0: IR event FIFO is full! [ 766.230241][ C1] rc rc0: IR event FIFO is full! [ 766.235187][ C1] rc rc0: IR event FIFO is full! [ 766.240130][ C1] rc rc0: IR event FIFO is full! [ 766.245073][ C1] rc rc0: IR event FIFO is full! [ 766.250262][ C1] rc rc0: IR event FIFO is full! [ 766.255208][ C1] rc rc0: IR event FIFO is full! [ 766.260154][ C1] rc rc0: IR event FIFO is full! [ 766.265385][ C1] rc rc0: IR event FIFO is full! [ 766.270331][ C1] rc rc0: IR event FIFO is full! [ 766.275271][ C1] rc rc0: IR event FIFO is full! [ 766.280207][ C1] rc rc0: IR event FIFO is full! [ 766.285142][ C1] rc rc0: IR event FIFO is full! [ 766.290076][ C1] rc rc0: IR event FIFO is full! [ 766.295007][ C1] rc rc0: IR event FIFO is full! [ 766.303763][ C1] rc rc0: IR event FIFO is full! [ 766.308730][ C1] rc rc0: IR event FIFO is full! [ 766.313667][ C1] rc rc0: IR event FIFO is full! [ 766.318612][ C1] rc rc0: IR event FIFO is full! [ 766.323560][ C1] rc rc0: IR event FIFO is full! [ 766.328496][ C1] rc rc0: IR event FIFO is full! [ 766.333432][ C1] rc rc0: IR event FIFO is full! [ 766.338369][ C1] rc rc0: IR event FIFO is full! [ 766.346900][ C1] rc rc0: IR event FIFO is full! [ 766.351863][ C1] rc rc0: IR event FIFO is full! [ 766.357186][ C1] rc rc0: IR event FIFO is full! [ 766.389751][ T1202] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 766.397531][T12787] usb 8-1: device descriptor read/8, error -71 [ 766.409966][ T1202] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 766.429652][ T1202] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 766.433223][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 766.450326][ T1202] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 766.458440][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 766.499584][ T1202] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 766.506388][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 766.529620][ T1202] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 766.542099][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 766.558366][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 766.569521][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.569574][ T1202] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 766.624449][ T10] usb 4-1: config 0 descriptor?? [ 766.649656][ T1202] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 766.679877][ T1202] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 766.732581][ T1202] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 766.741737][ T1202] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 766.754304][ T1202] usb 7-1: USB disconnect, device number 3 [ 766.869794][T15506] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 767.287438][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 767.293511][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 767.308298][ T10] usb 4-1: USB disconnect, device number 102 [ 767.349703][ T1202] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 767.590525][ T1202] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 767.782254][ T1202] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 767.791619][ T1202] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 767.806784][ T1202] usb 2-1: Product: syz [ 767.821745][ T1202] usb 2-1: Manufacturer: syz [ 767.836651][ T1202] usb 2-1: SerialNumber: syz [ 767.890587][ T10] usb 3-1: USB disconnect, device number 109 [ 767.897575][ T10] ch341 3-1:0.0: device disconnected [ 768.045177][T15519] trusted_key: encrypted_key: master key parameter 'uaer:t0000000000000004096' is invalid [ 768.080854][T15511] netlink: 'syz.1.2512': attribute type 1 has an invalid length. [ 768.091388][ T1202] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 110 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 768.127042][T15519] xt_hashlimit: max too large, truncated to 1048576 [ 768.129105][ T1202] usb 2-1: USB disconnect, device number 110 [ 768.147085][ T1202] usblp0: removed [ 769.207787][T15536] SELinux: ebitmap: empty map [ 769.347596][T15536] SELinux: failed to load policy [ 769.769504][ T30] audit: type=1400 audit(769.910:1528): avc: denied { rename } for pid=15554 comm="syz.1.2524" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 769.957933][ T1202] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 770.004193][T15564] geneve3: entered promiscuous mode [ 770.047870][ T5822] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 770.137850][ T1202] usb 4-1: Using ep0 maxpacket: 16 [ 770.145250][ T1202] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 770.160508][ T1202] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 770.172978][ T1202] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 770.274563][ T1202] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 770.287987][ T1202] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.419002][ T1202] usb 4-1: config 0 descriptor?? [ 771.081968][ T1202] usbhid 4-1:0.0: can't add hid device: -71 [ 771.094468][ T1202] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 771.123769][ T1202] usb 4-1: USB disconnect, device number 103 [ 771.130181][ T30] audit: type=1326 audit(771.271:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15569 comm="syz.1.2529" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc05ed9c629 code=0x0 [ 771.287212][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 771.447087][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 771.453611][ T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 771.884640][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 771.893981][ T9] usb 7-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 771.903221][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.912293][ T9] usb 7-1: Product: syz [ 771.916467][ T9] usb 7-1: Manufacturer: syz [ 771.921129][ T9] usb 7-1: SerialNumber: syz [ 771.938750][ T9] usb 7-1: config 0 descriptor?? [ 772.153995][ T9] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input123 [ 772.226683][ T1202] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 772.323900][T12787] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 772.341621][T15590] FAULT_INJECTION: forcing a failure. [ 772.341621][T15590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 772.355155][T15590] CPU: 0 UID: 0 PID: 15590 Comm: syz.7.2535 Tainted: G L syzkaller #0 PREEMPT(full) [ 772.355186][T15590] Tainted: [L]=SOFTLOCKUP [ 772.355192][T15590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 772.355202][T15590] Call Trace: [ 772.355209][T15590] [ 772.355216][T15590] dump_stack_lvl+0x100/0x190 [ 772.355252][T15590] should_fail_ex.cold+0x5/0xa [ 772.355275][T15590] _copy_from_user+0x2e/0xd0 [ 772.355296][T15590] move_addr_to_kernel+0x65/0x170 [ 772.355314][T15590] io_connect_prep+0x284/0x350 [ 772.355330][T15590] io_submit_sqes+0x99b/0x22f0 [ 772.355360][T15590] __do_sys_io_uring_enter+0x9c0/0x1a20 [ 772.355384][T15590] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 772.355404][T15590] ? __pfx___schedule+0x10/0x10 [ 772.355428][T15590] ? exit_to_user_mode_loop+0xdd/0x4a0 [ 772.355450][T15590] ? rcu_is_watching+0x12/0xc0 [ 772.355472][T15590] do_syscall_64+0x106/0xf80 [ 772.355493][T15590] ? clear_bhb_loop+0x40/0x90 [ 772.355510][T15590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.355524][T15590] RIP: 0033:0x7f327079c629 [ 772.355536][T15590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 772.355550][T15590] RSP: 002b:00007f32716e2028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 772.355564][T15590] RAX: ffffffffffffffda RBX: 00007f3270a16180 RCX: 00007f327079c629 [ 772.355573][T15590] RDX: 000000000000067f RSI: 0000000000003516 RDI: 000000000000000a [ 772.355582][T15590] RBP: 00007f32716e2090 R08: 0000000000000000 R09: 0000000000000000 [ 772.355591][T15590] R10: 0000000000000064 R11: 0000000000000246 R12: 0000000000000001 [ 772.355599][T15590] R13: 00007f3270a16218 R14: 00007f3270a16180 R15: 00007ffd77af5f48 [ 772.355621][T15590] [ 772.636478][ T1202] usb 4-1: Using ep0 maxpacket: 8 [ 772.667189][T15589] SELinux: ebitmap: empty map [ 772.672154][ T1202] usb 4-1: too many endpoints for config 0 interface 0 altsetting 41: 255, using maximum allowed: 30 [ 772.684393][ T1202] usb 4-1: config 0 interface 0 altsetting 41 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 772.696434][ T9] rc_core: IR keymap rc-imon-pad not found [ 772.703474][ T9] Registered IR keymap rc-empty [ 772.708519][ T9] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 772.712310][T15589] SELinux: failed to load policy [ 772.721319][ T9] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 772.725096][ T1202] usb 4-1: config 0 interface 0 has no altsetting 0 [ 772.747766][ T1202] usb 4-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 772.757469][ T1202] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.768402][ T1202] usb 4-1: config 0 descriptor?? [ 772.778639][T12787] usb 2-1: config 0 has no interfaces? [ 772.785621][T12787] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 772.795487][T12787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.807255][T12787] usb 2-1: config 0 descriptor?? [ 772.849688][ T9] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 772.863351][ T9] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input124 [ 772.877855][ T9] imon 7-1:0.0: iMON device (15c2:0041, intf0) on usb<7:4> initialized [ 773.058579][ T9] usb 2-1: USB disconnect, device number 111 [ 773.256544][ C0] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 773.266807][ T9] usb 7-1: USB disconnect, device number 4 [ 773.283248][ T1202] playstation 0003:054C:0BA0.001F: item fetching failed at offset 3/5 [ 773.301220][ T1202] playstation 0003:054C:0BA0.001F: Parse failed [ 773.311839][ T1202] playstation 0003:054C:0BA0.001F: probe with driver playstation failed with error -22 [ 773.502443][ T5867] usb 4-1: USB disconnect, device number 104 [ 773.844470][T15611] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2541'. [ 773.925816][T12787] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 774.096237][T12787] usb 2-1: Using ep0 maxpacket: 32 [ 774.454538][T12787] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 774.468005][ T30] audit: type=1400 audit(774.602:1530): avc: denied { bind } for pid=15621 comm="syz.6.2545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 774.554827][T12787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.602127][T12787] usb 2-1: config 0 descriptor?? [ 774.832226][ T30] audit: type=1400 audit(774.822:1531): avc: denied { ioctl } for pid=15621 comm="syz.6.2545" path="socket:[56274]" dev="sockfs" ino=56274 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 775.766200][T12787] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 775.998786][T12787] gspca_vc032x: reg_r err -32 [ 776.010853][T12787] gspca_vc032x: I2c Bus Busy Wait 00 [ 776.026305][T12787] gspca_vc032x: I2c Bus Busy Wait 00 [ 776.036739][T12787] gspca_vc032x: I2c Bus Busy Wait 00 [ 776.048955][T12787] gspca_vc032x: I2c Bus Busy Wait 00 [ 776.051088][T15633] sp0: Synchronizing with TNC [ 776.077683][T12787] gspca_vc032x: I2c Bus Busy Wait 00 [ 776.100486][T12787] gspca_vc032x: I2c Bus Busy Wait 00 [ 776.108582][T12787] gspca_vc032x: I2c Bus Busy Wait 00 [ 776.113936][ T30] audit: type=1400 audit(776.253:1532): avc: denied { shutdown } for pid=15631 comm="syz.7.2548" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 776.113940][T12787] gspca_vc032x: I2c Bus Busy Wait 00 [ 776.144339][T12787] gspca_vc032x: I2c Bus Busy Wait 00 [ 776.150731][T12787] gspca_vc032x: I2c Bus Busy Wait 00 [ 776.179394][T12787] gspca_vc032x: I2c Bus Busy Wait 00 [ 776.190985][T12787] gspca_vc032x: I2c Bus Busy Wait 00 [ 776.199569][T12787] gspca_vc032x: I2c Bus Busy Wait 00 [ 776.210788][T12787] gspca_vc032x: I2c Bus Busy Wait 00 [ 776.223125][T12787] gspca_vc032x: I2c Bus Busy Wait 00 [ 776.228812][T12787] gspca_vc032x: I2c Bus Busy Wait 00 [ 776.234274][T12787] gspca_vc032x: I2c Bus Busy Wait 00 [ 776.241152][T12787] gspca_vc032x: I2c Bus Busy Wait 00 [ 776.387303][T12787] gspca_vc032x: Unknown sensor... [ 776.393939][T12787] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 776.818833][T15631] [U] [ 777.082025][T12787] usb 2-1: USB disconnect, device number 112 [ 777.464081][T12787] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 777.654946][T12787] usb 2-1: Using ep0 maxpacket: 16 [ 777.670330][T12787] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 777.681574][T12787] usb 2-1: config 0 interface 0 has no altsetting 0 [ 777.691004][T12787] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 777.700718][T12787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.709630][T12787] usb 2-1: Product: syz [ 777.714127][T12787] usb 2-1: Manufacturer: syz [ 777.718784][T12787] usb 2-1: SerialNumber: syz [ 777.736896][T12787] usb 2-1: config 0 descriptor?? [ 777.855295][ T9] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 777.971768][T12787] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input125 [ 778.043791][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 778.059287][ T9] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 778.076891][ T9] usb 3-1: config 0 has no interface number 0 [ 778.089399][ T9] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 778.118038][ T9] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 778.136813][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.153775][ T9] usb 3-1: Product: syz [ 778.163161][ T9] usb 3-1: Manufacturer: syz [ 778.173169][ T9] usb 3-1: SerialNumber: syz [ 778.190761][ T9] usb 3-1: config 0 descriptor?? [ 778.212874][T15655] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 778.383676][T12787] rc_core: IR keymap rc-imon-pad not found [ 778.389545][T12787] Registered IR keymap rc-empty [ 778.396964][T12787] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 778.407496][T12787] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 778.444929][T12787] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 778.485644][T15655] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 778.492970][ T30] audit: type=1400 audit(778.644:1533): avc: denied { ioctl } for pid=15654 comm="syz.2.2555" path="cgroup:[4026532812]" dev="nsfs" ino=4026532812 ioctlcmd=0xf50a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 778.494668][T12787] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input126 [ 779.061528][T12787] imon 2-1:0.0: iMON device (15c2:0041, intf0) on usb<2:113> initialized [ 779.550653][ T9] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 779.610916][ T9] asix 3-1:0.188: probe with driver asix failed with error -61 [ 779.662628][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 779.671868][ T9] usb 3-1: USB disconnect, device number 110 [ 779.744867][ T5867] usb 2-1: USB disconnect, device number 113 [ 779.807233][T15671] netlink: 'syz.3.2559': attribute type 1 has an invalid length. [ 779.895371][T15674] bond4: (slave gretap1): Enslaving as a backup interface with an up link [ 780.119894][T15674] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2559'. [ 780.906955][T15689] SELinux: ebitmap: empty map [ 780.923702][T15687] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2562'. [ 780.956733][T15689] SELinux: failed to load policy [ 781.788430][T15697] syz.2.2567 (15697): /proc/15696/oom_adj is deprecated, please use /proc/15696/oom_score_adj instead. [ 781.801274][ T5929] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 782.002008][ T5929] usb 2-1: Using ep0 maxpacket: 16 [ 782.022732][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 782.078979][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 782.089026][ T5929] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 782.102509][ T5929] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 782.759300][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.819348][ T5929] usb 2-1: config 0 descriptor?? [ 783.862186][ T5929] usbhid 2-1:0.0: can't add hid device: -71 [ 783.868904][ T5929] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 783.907514][T15729] netlink: 'syz.3.2574': attribute type 10 has an invalid length. [ 783.909195][ T5929] usb 2-1: USB disconnect, device number 114 [ 783.917001][T15729] veth0_vlan: left promiscuous mode [ 783.929881][T15729] veth0_vlan: entered promiscuous mode [ 784.026267][T15729] batman_adv: batadv0: Interface activated: vlan1 [ 784.046435][T15729] team0: Device veth0_vlan failed to register rx_handler [ 784.060584][T15729] batman_adv: batadv0: Interface deactivated: vlan1 [ 784.639572][T15735] kernel read not supported for file /file0 (pid: 15735 comm: syz.2.2576) [ 784.670647][ T30] audit: type=1800 audit(784.817:1534): pid=15735 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.2576" name="file0" dev="mqueue" ino=58568 res=0 errno=0 [ 784.699977][ T5867] IPVS: starting estimator thread 0... [ 784.823059][T15737] IPVS: using max 38 ests per chain, 91200 per kthread [ 785.198402][T15744] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 785.739187][T15755] binder: Bad value for 'max' [ 785.770455][T15755] netlink: 'syz.3.2578': attribute type 13 has an invalid length. [ 786.249720][ T5929] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 786.576373][T15769] SELinux: Context is not valid (left unmapped). [ 786.625459][ T30] audit: type=1400 audit(786.748:1535): avc: denied { relabelto } for pid=15767 comm="syz.6.2586" name="blkio.bfq.io_serviced" dev="tmpfs" ino=239 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="" [ 787.167623][ T5929] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 787.185899][ T5929] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 787.199048][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 787.265789][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 787.286774][ T5929] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 787.303189][ T5929] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 787.309790][ T30] audit: type=1400 audit(786.748:1536): avc: denied { associate } for pid=15767 comm="syz.6.2586" name="blkio.bfq.io_serviced" dev="tmpfs" ino=239 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="" [ 787.320627][ T24] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 787.370314][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.435681][ T5929] usb 3-1: config 0 descriptor?? [ 787.447616][T15761] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 787.590354][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 787.607023][ T24] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 787.615513][ T24] usb 7-1: config 0 has no interface number 0 [ 787.623727][ T24] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 787.636391][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.654338][ T24] usb 7-1: Product: syz [ 787.674249][ T24] usb 7-1: Manufacturer: syz [ 787.683745][ T24] usb 7-1: SerialNumber: syz [ 787.700721][ T24] usb 7-1: config 0 descriptor?? [ 787.727909][ T24] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 787.827724][ T6358] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.848423][ T6358] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.863204][ T5929] plantronics 0003:047F:FFFF.0020: reserved main item tag 0xd [ 787.875781][ T5929] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 787.905902][ T6358] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.918011][T15769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 787.926671][T15769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 787.939707][ T24] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 788.053216][ T6358] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.089117][ T24] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 788.205082][T15789] netlink: 'syz.3.2589': attribute type 10 has an invalid length. [ 788.231649][T15789] veth0_vlan: left promiscuous mode [ 788.315986][T15789] veth0_vlan: entered promiscuous mode [ 788.346773][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 788.348099][T15789] batman_adv: batadv0: Interface activated: vlan1 [ 788.362114][T15789] team0: Device veth0_vlan failed to register rx_handler [ 788.377269][T15789] batman_adv: batadv0: Interface deactivated: vlan1 [ 788.448538][ T9] usb 7-1: USB disconnect, device number 5 [ 788.598650][ T24] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 788.684059][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 788.690608][T15793] netlink: 'syz.7.2590': attribute type 10 has an invalid length. [ 788.704868][T15793] veth0_vlan: entered allmulticast mode [ 788.734483][T15793] veth0_vlan: left promiscuous mode [ 788.736986][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 788.743451][T15793] veth0_vlan: entered promiscuous mode [ 788.784139][T15793] team0: Device veth0_vlan failed to register rx_handler [ 788.814575][ T9] quatech2 7-1:0.51: device disconnected [ 788.820550][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 788.853213][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 788.953235][ T24] usb 2-1: New USB device found, idVendor=0738, idProduct=1705, bcdDevice= 0.00 [ 788.962894][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.998510][ T24] usb 2-1: config 0 descriptor?? [ 789.207193][ T30] audit: type=1400 audit(789.360:1537): avc: denied { unlink } for pid=15015 comm="syz-executor" name="blkio.bfq.io_serviced" dev="tmpfs" ino=239 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="" [ 789.298134][ T5929] usb 3-1: reset high-speed USB device number 111 using dummy_hcd [ 789.439668][ T5929] usb 3-1: device descriptor read/64, error -32 [ 789.567034][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 789.583458][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 789.603235][ T24] usb 2-1: USB disconnect, device number 115 [ 789.708092][ T5929] usb 3-1: reset high-speed USB device number 111 using dummy_hcd [ 789.867825][ T5929] usb 3-1: device descriptor read/64, error -32 [ 790.050264][T15811] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2596'. [ 790.131431][ T2721] block nbd0: Possible stuck request ffff888027c10000: control (read@0,1024B). Runtime 330 seconds [ 790.142304][ T2721] block nbd0: Possible stuck request ffff888027c10200: control (read@1024,1024B). Runtime 330 seconds [ 790.153344][ T2721] block nbd0: Possible stuck request ffff888027c10400: control (read@2048,1024B). Runtime 330 seconds [ 790.164435][ T2721] block nbd0: Possible stuck request ffff888027c10600: control (read@3072,1024B). Runtime 330 seconds [ 790.288996][ T24] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 790.445629][T15797] lo speed is unknown, defaulting to 1000 [ 790.462099][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 790.468876][ T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 790.483271][T15815] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.2597' sets config #485 [ 790.507657][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 790.526347][ T24] usb 8-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 790.558913][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.617705][ T24] usb 8-1: Product: syz [ 790.647186][ T24] usb 8-1: Manufacturer: syz [ 790.665471][ T24] usb 8-1: SerialNumber: syz [ 790.677745][ T24] usb 8-1: config 0 descriptor?? [ 790.911349][ T24] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 790.933436][ T24] imon 8-1:0.0: unable to initialize intf0, err -19 [ 790.973110][ T24] imon:imon_probe: failed to initialize context! [ 790.993107][ T24] imon 8-1:0.0: unable to register, err -19 [ 791.100611][ T1202] usb 3-1: USB disconnect, device number 111 [ 791.441359][ T10] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 791.559126][ T1202] usb 4-1: new full-speed USB device number 105 using dummy_hcd [ 792.009165][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 792.024477][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.037586][ T10] usb 2-1: config 0 descriptor?? [ 792.045630][ T10] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 792.058283][ T1202] usb 4-1: config 4 has an invalid interface number: 88 but max is 0 [ 792.067612][ T1202] usb 4-1: config 4 has no interface number 0 [ 792.187058][ T1202] usb 4-1: config 4 interface 88 altsetting 119 has a duplicate endpoint with address 0xB, skipping [ 792.210720][ T1202] usb 4-1: config 4 interface 88 altsetting 119 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 792.872417][ T1202] usb 4-1: config 4 interface 88 altsetting 119 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 792.901812][ T1202] usb 4-1: config 4 interface 88 has no altsetting 0 [ 792.919373][ T1202] usb 4-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=af.e7 [ 792.941858][ T1202] usb 4-1: New USB device strings: Mfr=8, Product=0, SerialNumber=3 [ 793.016256][ T1202] usb 4-1: Manufacturer: syz [ 793.022216][ T1202] usb 4-1: SerialNumber: syz [ 793.030778][T15819] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 793.080139][ T9] usb 8-1: USB disconnect, device number 10 [ 793.115790][T15836] netlink: 'syz.6.2603': attribute type 10 has an invalid length. [ 793.187276][T15836] veth0_vlan: left promiscuous mode [ 793.193397][T15836] veth0_vlan: entered promiscuous mode [ 793.273797][T15836] team0: Device veth0_vlan failed to register rx_handler [ 793.630891][ T1202] usb 4-1: USB disconnect, device number 105 [ 794.444015][ T30] audit: type=1400 audit(794.602:1538): avc: denied { write } for pid=15850 comm="syz.7.2606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 794.511760][T15857] netlink: 'syz.6.2608': attribute type 1 has an invalid length. [ 794.674642][T15857] 8021q: adding VLAN 0 to HW filter on device bond1 [ 794.686081][ T10] usb 2-1: USB disconnect, device number 116 [ 794.741850][T15861] SELinux: ebitmap: empty map [ 794.831249][T15861] SELinux: failed to load policy [ 795.161842][T15868] FAT-fs (nullb0): bogus number of reserved sectors [ 795.168538][T15868] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 796.960153][ T5916] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 797.122280][ T5916] usb 7-1: device descriptor read/64, error -71 [ 797.284156][ T5929] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 797.400451][ T5916] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 797.475789][ T5929] usb 3-1: Using ep0 maxpacket: 8 [ 797.486712][ T5929] usb 3-1: unable to get BOS descriptor or descriptor too short [ 797.501942][ T10] libceph: connect (1)[c::]:6789 error -22 [ 797.508769][ T5929] usb 3-1: config 4 has an invalid interface number: 147 but max is 0 [ 797.509523][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 797.523346][ T5929] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 797.533874][ T5929] usb 3-1: config 4 has no interface number 0 [ 797.543644][T15897] netlink: 'syz.3.2622': attribute type 10 has an invalid length. [ 797.552240][ T5929] usb 3-1: language id specifier not provided by device, defaulting to English [ 797.562525][ T30] audit: type=1400 audit(797.734:1539): avc: denied { read } for pid=15892 comm="syz.1.2621" path="socket:[58338]" dev="sockfs" ino=58338 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 797.586461][T15897] veth0_vlan: left promiscuous mode [ 797.592624][T15897] veth0_vlan: entered promiscuous mode [ 797.594420][ T5916] usb 7-1: device descriptor read/64, error -71 [ 797.600484][T15897] batman_adv: batadv0: Interface activated: vlan1 [ 797.612864][T15897] team0: Device veth0_vlan failed to register rx_handler [ 797.666448][T15897] batman_adv: batadv0: Interface deactivated: vlan1 [ 797.682288][ T5929] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 797.691868][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.757637][T15893] ceph: No mds server is up or the cluster is laggy [ 797.776839][ T5867] libceph: connect (1)[c::]:6789 error -22 [ 797.782907][ T5916] usb usb7-port1: attempt power cycle [ 797.792407][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 797.932452][ T5929] uvcvideo 3-1:4.147: Found multiple Units with ID 6 [ 797.940942][ T5929] uvcvideo 3-1:4.147: Found UVC 0.02 device (04f2:b746) [ 797.949613][ T5929] uvcvideo 3-1:4.147: No streaming interface found for terminal 32774. [ 798.078072][ T5929] usb 3-1: USB disconnect, device number 112 [ 798.133961][ T5916] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 798.664695][ T5916] usb 7-1: device descriptor read/8, error -71 [ 798.913358][ T5916] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 799.013318][ T5867] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 799.056388][T15914] netlink: 'syz.6.2625': attribute type 1 has an invalid length. [ 799.059123][T15913] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 799.184013][ T5916] usb 7-1: device not accepting address 9, error -71 [ 799.192330][ T5867] usb 4-1: config 0 has no interfaces? [ 799.233204][ T5867] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 799.245304][ T5916] usb usb7-port1: unable to enumerate USB device [ 799.258712][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.270801][ T5867] usb 4-1: config 0 descriptor?? [ 800.407074][ T5867] usb 4-1: USB disconnect, device number 106 [ 800.822615][ T5929] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 800.830438][ T1202] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 800.892601][T15945] netlink: 'syz.2.2635': attribute type 1 has an invalid length. [ 800.964224][T15945] 8021q: adding VLAN 0 to HW filter on device bond6 [ 800.994454][ T5929] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 801.009655][ T1202] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 801.038613][ T5929] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 801.058379][ T1202] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 801.070629][ T5929] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 801.088556][ T1202] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 801.101761][ T5929] usb 8-1: Product: syz [ 801.118793][ T1202] usb 7-1: Product: syz [ 801.125965][ T5929] usb 8-1: Manufacturer: syz [ 801.186220][ T1202] usb 7-1: Manufacturer: syz [ 801.190910][ T5929] usb 8-1: SerialNumber: syz [ 801.203042][ T1202] usb 7-1: SerialNumber: syz [ 801.276211][T15956] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 801.431731][ T1202] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 801.548183][ T5929] usblp 8-1:1.0: usblp1: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 801.654153][ T5867] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 802.116371][T15971] netlink: 'syz.7.2631': attribute type 1 has an invalid length. [ 802.141714][ T5867] usb 2-1: Using ep0 maxpacket: 32 [ 802.148630][ T5867] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 802.157099][ T5867] usb 2-1: config 0 has no interface number 0 [ 802.164006][ T5867] usb 2-1: config 0 interface 184 has no altsetting 0 [ 802.173194][ T5867] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 802.182539][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.212879][ T5867] usb 2-1: Product: syz [ 802.217343][ T5867] usb 2-1: Manufacturer: syz [ 802.222190][ T5867] usb 2-1: SerialNumber: syz [ 802.234658][ T5867] usb 2-1: config 0 descriptor?? [ 802.788028][T15977] FAT-fs (nullb0): bogus number of reserved sectors [ 802.794736][T15977] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 802.903986][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 803.436567][T15978] netlink: 'syz.2.2643': attribute type 1 has an invalid length. [ 804.170730][ T793] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 804.225643][ T5929] usb 8-1: USB disconnect, device number 11 [ 804.230242][ T5916] usb 7-1: USB disconnect, device number 10 [ 804.247406][ T5929] usblp1: removed [ 804.254672][ T5916] usblp0: removed [ 804.305239][ T5867] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 804.325518][ T5867] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 804.339538][ T5867] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 804.356282][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 804.367631][ T793] usb 4-1: Using ep0 maxpacket: 16 [ 804.392668][ T793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 804.410965][ T5867] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 804.423905][ T793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 804.442214][ T5867] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 804.460517][ T793] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 804.483493][ T5867] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 804.494324][ T793] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 804.504836][ T5867] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 804.513524][ T793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.523811][ T5867] usb 2-1: USB disconnect, device number 117 [ 804.537172][ T793] usb 4-1: config 0 descriptor?? [ 804.650434][ T5929] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 804.680821][ T5916] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 804.730567][ T1202] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 804.800391][ T5929] usb 3-1: Using ep0 maxpacket: 32 [ 804.807226][ T5929] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 804.819285][ T5929] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 804.828472][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 804.830553][ T5916] usb 7-1: device descriptor read/64, error -71 [ 804.836787][ T5929] usb 3-1: Product: syz [ 804.847362][ T5929] usb 3-1: Manufacturer: syz [ 804.852134][ T5929] usb 3-1: SerialNumber: syz [ 804.858581][ T5929] usb 3-1: config 0 descriptor?? [ 804.868313][T15988] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 804.880314][ T1202] usb 8-1: Using ep0 maxpacket: 16 [ 804.894645][ T1202] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 804.910683][ T1202] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 804.933702][ T1202] usb 8-1: config 0 interface 0 has no altsetting 0 [ 804.943932][ T1202] usb 8-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 804.953541][ T1202] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.962732][ T1202] usb 8-1: Product: syz [ 804.968026][ T1202] usb 8-1: Manufacturer: syz [ 804.973024][ T1202] usb 8-1: SerialNumber: syz [ 804.989846][ T1202] usb 8-1: config 0 descriptor?? [ 805.002718][T15994] netlink: 'syz.1.2650': attribute type 10 has an invalid length. [ 805.010870][T15994] veth0_vlan: left promiscuous mode [ 805.016850][T15994] veth0_vlan: entered promiscuous mode [ 805.024272][T15994] team0: Device veth0_vlan failed to register rx_handler [ 805.080645][ T5916] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 805.225482][ T793] usbhid 4-1:0.0: can't add hid device: -71 [ 805.232209][ T793] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 805.252883][ T1202] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 805.264000][ T1202] imon 8-1:0.0: unable to initialize intf0, err -19 [ 805.291970][ T1202] imon:imon_probe: failed to initialize context! [ 805.298505][ T1202] imon 8-1:0.0: unable to register, err -19 [ 805.303002][ T793] usb 4-1: USB disconnect, device number 107 [ 805.351644][ T5916] usb 7-1: device descriptor read/64, error -71 [ 805.398088][ T10] usb 3-1: USB disconnect, device number 113 [ 805.460876][ T5916] usb usb7-port1: attempt power cycle [ 805.801696][ T5916] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 805.841016][ T5916] usb 7-1: device descriptor read/8, error -71 [ 805.870340][ T30] audit: type=1400 audit(806.048:1540): avc: denied { getopt } for pid=16004 comm="syz.1.2652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 806.089729][ T5916] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 806.110218][ T5916] usb 7-1: device descriptor read/8, error -71 [ 806.220038][ T5916] usb usb7-port1: unable to enumerate USB device [ 806.372949][T16015] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 806.705018][ T5916] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 806.758737][T16025] netlink: 'syz.3.2658': attribute type 1 has an invalid length. [ 806.871080][T16028] SELinux: ebitmap: empty map [ 806.878965][ T5916] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 806.909603][T16028] SELinux: failed to load policy [ 806.920979][ T5916] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 806.940767][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 806.961143][ T5916] usb 3-1: Product: syz [ 806.968390][ T5916] usb 3-1: Manufacturer: syz [ 806.975408][ T5916] usb 3-1: SerialNumber: syz [ 807.221331][ T5916] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 114 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 807.545009][ T5929] usb 8-1: USB disconnect, device number 12 [ 807.623335][ T30] audit: type=1400 audit(807.799:1541): avc: denied { override_creds } for pid=16042 comm="syz.7.2663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 807.791405][T16046] pim6reg1: entered promiscuous mode [ 807.819223][ T1202] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 807.870785][T16046] pim6reg1: entered allmulticast mode [ 808.014378][ T1202] usb 7-1: Using ep0 maxpacket: 16 [ 808.025871][ T1202] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 808.040734][ T1202] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 808.052961][ T1202] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 808.070481][ T1202] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 808.080479][ T1202] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.167525][ T1202] usb 7-1: config 0 descriptor?? [ 808.198876][ T5929] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 808.216590][T16056] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 808.360211][ T5929] usb 8-1: Using ep0 maxpacket: 16 [ 808.371638][ T5929] usb 8-1: unable to get BOS descriptor or descriptor too short [ 808.385935][ T5929] usb 8-1: config 1 has an invalid interface number: 206 but max is 0 [ 808.403928][ T5929] usb 8-1: config 1 has no interface number 0 [ 808.485482][ T5929] usb 8-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a [ 808.513039][ T5929] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.528701][ T5929] usb 8-1: Product: syz [ 808.533134][ T5929] usb 8-1: Manufacturer: syz [ 808.537969][ T5929] usb 8-1: SerialNumber: syz [ 808.631316][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 808.786949][ T1202] usbhid 7-1:0.0: can't add hid device: -71 [ 808.794543][ T1202] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 808.812352][ T1202] usb 7-1: USB disconnect, device number 15 [ 809.498011][ T793] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 809.649348][ T793] usb 2-1: config 0 has no interfaces? [ 809.654943][ T793] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 809.664707][ T793] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.674168][ T10] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 809.692350][ T793] usb 2-1: config 0 descriptor?? [ 809.847829][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 810.435143][T12787] usb 2-1: USB disconnect, device number 118 [ 810.461172][ T30] audit: type=1400 audit(810.620:1542): avc: denied { map } for pid=16084 comm="syz.2.2676" path="/dev/vcsu" dev="devtmpfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 810.523865][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 810.533717][ T5867] usb 3-1: USB disconnect, device number 114 [ 810.533778][ T10] usb 7-1: config 4 has an invalid interface number: 147 but max is 0 [ 810.557470][ T10] usb 7-1: config 4 has an invalid descriptor of length 215, skipping remainder of the config [ 810.567341][ T30] audit: type=1400 audit(810.620:1543): avc: denied { execute } for pid=16084 comm="syz.2.2676" path="/dev/vcsu" dev="devtmpfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 810.606113][ T5867] usblp0: removed [ 810.614539][ T10] usb 7-1: config 4 has no interface number 0 [ 810.641038][ T10] usb 7-1: language id specifier not provided by device, defaulting to English [ 810.657411][ T10] usb 7-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 810.667009][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.722730][ T5929] uvcvideo 8-1:1.206: probe with driver uvcvideo failed with error -22 [ 810.739000][ T5929] usb 8-1: USB disconnect, device number 13 [ 810.909508][ T10] uvcvideo 7-1:4.147: Found multiple Units with ID 6 [ 810.964303][ T10] uvcvideo 7-1:4.147: Found UVC 0.02 device (04f2:b746) [ 810.995890][T16097] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16097 comm=syz.1.2680 [ 811.014361][T16098] netlink: 'syz.2.2679': attribute type 1 has an invalid length. [ 811.022736][T16098] nbd: illegal input index -1677720961 [ 811.032372][ T10] uvcvideo 7-1:4.147: No valid video chain found. [ 811.101926][ T10] usb 7-1: USB disconnect, device number 16 [ 811.447683][T16110] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 811.601952][T16106] netdevsim netdevsim1: Direct firmware load for / [ 811.601952][T16106] failed with error -2 [ 811.620772][T16106] netdevsim netdevsim1: Falling back to sysfs fallback for: / [ 811.620772][T16106] [ 811.636577][ T30] audit: type=1400 audit(811.791:1544): avc: denied { firmware_load } for pid=16101 comm="syz.1.2681" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 811.940924][T16113] kvm: pic: non byte write [ 812.306026][T16118] netlink: 'syz.6.2684': attribute type 1 has an invalid length. [ 813.331257][T16127] FAT-fs (nullb0): bogus number of reserved sectors [ 813.337957][T16127] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 814.508948][ T5822] Bluetooth: hci6: unexpected event 0x2f length: 509 > 260 [ 814.560452][T16131] Invalid option length (255) for dns_resolver key [ 814.618010][ T5867] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 814.807448][ T5867] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 814.877894][ T5867] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 814.913219][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 814.944333][ T5867] usb 2-1: Product: syz [ 814.962877][ T5867] usb 2-1: Manufacturer: syz [ 814.970008][ T5867] usb 2-1: SerialNumber: syz [ 815.534006][ T5867] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 119 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 816.264010][T16164] FAT-fs (nullb0): bogus number of reserved sectors [ 816.270682][T16164] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 817.786068][ T5929] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 817.886706][ T1202] usb 2-1: USB disconnect, device number 119 [ 817.896267][ T1202] usblp0: removed [ 818.077329][ T5929] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 818.102254][ T5929] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=10.85 [ 818.112851][ T5929] usb 3-1: New USB device strings: Mfr=153, Product=195, SerialNumber=0 [ 818.122182][ T5929] usb 3-1: Product: syz [ 818.130952][ T5929] usb 3-1: Manufacturer: syz [ 818.166735][ T5929] usb 3-1: config 0 descriptor?? [ 818.188241][ T5929] pwc: Askey VC010 type 2 USB webcam detected. [ 818.239843][ T5867] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 818.353845][ T10] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 818.482961][ T5867] usb 7-1: Using ep0 maxpacket: 16 [ 818.489844][ T5867] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 818.503562][ T5867] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 818.513311][ T5867] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 818.526195][ T5867] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 818.535390][ T5867] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.605088][T16191] ptrace attach of "./syz-executor exec"[8605] was attempted by ""[16191] [ 818.922926][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 818.938418][ T5867] usb 7-1: config 0 descriptor?? [ 818.943548][ T5929] pwc: recv_control_msg error -32 req 02 val 2b00 [ 818.945842][ T10] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 818.958542][ T10] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 818.976757][ T5929] pwc: recv_control_msg error -32 req 02 val 2700 [ 818.986919][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 819.010772][ T5929] pwc: recv_control_msg error -32 req 02 val 2c00 [ 819.020814][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 819.049692][ T10] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 819.087463][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 819.154624][T16195] netlink: 'syz.3.2707': attribute type 1 has an invalid length. [ 819.203987][ T1202] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 819.290700][ T10] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 819.317011][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 819.339896][ T10] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 819.364874][ T1202] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 819.375103][ T1202] usb 2-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=fd.0b [ 819.385563][ T1202] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.394501][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.406919][ T1202] usb 2-1: config 0 descriptor?? [ 819.463493][ T10] usb 8-1: config 0 descriptor?? [ 819.593403][ T5867] usbhid 7-1:0.0: can't add hid device: -71 [ 819.599728][ T5867] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 819.617163][ T5867] usb 7-1: USB disconnect, device number 17 [ 820.059773][ T5929] pwc: recv_control_msg error -71 req 04 val 1000 [ 820.068214][ T5929] pwc: recv_control_msg error -71 req 04 val 1300 [ 820.081433][ T5929] pwc: recv_control_msg error -71 req 04 val 1400 [ 820.092787][ T5929] pwc: recv_control_msg error -71 req 02 val 2000 [ 820.099848][ T5929] pwc: recv_control_msg error -71 req 02 val 2100 [ 820.108253][ T5929] pwc: recv_control_msg error -71 req 04 val 1500 [ 820.120426][ T5929] pwc: recv_control_msg error -71 req 02 val 2500 [ 820.143561][ T2721] block nbd0: Possible stuck request ffff888027c10000: control (read@0,1024B). Runtime 360 seconds [ 820.155328][ T2721] block nbd0: Possible stuck request ffff888027c10200: control (read@1024,1024B). Runtime 360 seconds [ 820.167230][ T2721] block nbd0: Possible stuck request ffff888027c10400: control (read@2048,1024B). Runtime 360 seconds [ 820.178848][ T5929] pwc: recv_control_msg error -71 req 02 val 2400 [ 820.186034][ T2721] block nbd0: Possible stuck request ffff888027c10600: control (read@3072,1024B). Runtime 360 seconds [ 820.219658][T12787] usb 2-1: USB disconnect, device number 120 [ 820.299279][ T5929] pwc: recv_control_msg error -71 req 02 val 2600 [ 820.306819][ T5929] pwc: recv_control_msg error -71 req 02 val 2900 [ 820.317467][ T5929] pwc: recv_control_msg error -71 req 02 val 2800 [ 820.325874][ T5929] pwc: recv_control_msg error -71 req 04 val 1100 [ 820.885420][ T5929] pwc: recv_control_msg error -71 req 04 val 1200 [ 820.909767][ T5929] pwc: Registered as video103. [ 821.885510][ T5929] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input128 [ 821.931195][ T10] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 821.977838][ T10] usb 8-1: USB disconnect, device number 14 [ 821.996479][ T5929] usb 3-1: USB disconnect, device number 115 [ 822.005636][ T10] usblp0: removed [ 822.311577][ T793] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 822.483419][ T793] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 822.502125][ T793] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 822.511766][ T793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 822.531914][ T793] usb 2-1: Product: syz [ 822.538355][ T793] usb 2-1: Manufacturer: syz [ 822.548523][ T793] usb 2-1: SerialNumber: syz [ 822.581465][ T5929] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 822.836943][ T5929] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 822.898165][ T5929] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 822.908224][ T793] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 121 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 823.063476][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 823.111567][T16237] fuse: Unknown parameter 'defaultApermissions' [ 823.211133][ T5929] usb 3-1: Product: syz [ 823.222823][ T5929] usb 3-1: Manufacturer: syz [ 823.228158][ T5929] usb 3-1: SerialNumber: syz [ 823.917062][ T5929] usblp 3-1:1.0: usblp1: USB Unidirectional printer dev 116 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 824.002044][T16247] netlink: 'syz.2.2717': attribute type 1 has an invalid length. [ 824.020176][ T793] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 824.102738][ T24] usb 3-1: USB disconnect, device number 116 [ 824.114323][ T24] usblp1: removed [ 824.148611][T16246] team0 (unregistering): Port device team_slave_0 removed [ 824.182660][T16246] team0 (unregistering): Port device team_slave_1 removed [ 824.218720][ T793] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 824.261381][ T793] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=10.85 [ 824.278969][ T793] usb 4-1: New USB device strings: Mfr=153, Product=195, SerialNumber=0 [ 824.290667][ T5867] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 824.325930][ T793] usb 4-1: Product: syz [ 824.330168][ T793] usb 4-1: Manufacturer: syz [ 824.376888][ T793] usb 4-1: config 0 descriptor?? [ 824.403981][ T793] pwc: Askey VC010 type 2 USB webcam detected. [ 824.447117][ T9] IPVS: starting estimator thread 0... [ 824.470501][ T5867] usb 7-1: Using ep0 maxpacket: 16 [ 824.477347][ T5867] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 824.489557][ T5867] usb 7-1: config 0 interface 0 has no altsetting 0 [ 824.505096][ T5867] usb 7-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 824.523075][ T5867] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.532437][ T5867] usb 7-1: Product: syz [ 824.538960][ T5867] usb 7-1: Manufacturer: syz [ 824.546467][T16254] IPVS: using max 76 ests per chain, 182400 per kthread [ 824.553875][ T5867] usb 7-1: SerialNumber: syz [ 824.565981][ T5867] usb 7-1: config 0 descriptor?? [ 824.793414][ T5867] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input129 [ 824.815302][ T793] pwc: recv_control_msg error -32 req 02 val 2b00 [ 824.824601][ T793] pwc: recv_control_msg error -32 req 02 val 2700 [ 824.831850][ T793] pwc: recv_control_msg error -32 req 02 val 2c00 [ 825.130211][ T5867] rc_core: IR keymap rc-imon-pad not found [ 825.141783][ T5867] Registered IR keymap rc-empty [ 825.194497][ T5867] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 825.207321][ T5867] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 825.232593][ C0] usblp0: nonzero write bulk status received: -71 [ 825.232967][ T24] usb 2-1: USB disconnect, device number 121 [ 825.262947][ T5867] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 825.277489][ T5867] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input130 [ 825.305213][ T24] usblp0: removed [ 825.335535][ T5867] imon 7-1:0.0: iMON device (15c2:0041, intf0) on usb<7:18> initialized [ 825.650689][ C0] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 825.657918][ T5867] usb 7-1: USB disconnect, device number 18 [ 826.403834][ T24] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 827.014759][ T793] pwc: recv_control_msg error -71 req 04 val 1000 [ 827.022377][ T793] pwc: recv_control_msg error -71 req 04 val 1300 [ 827.029793][ T793] pwc: recv_control_msg error -71 req 04 val 1400 [ 827.036992][ T24] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 827.037239][ T793] pwc: recv_control_msg error -71 req 02 val 2000 [ 827.046575][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.061416][ T5867] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 827.080557][ T24] usb 8-1: config 0 descriptor?? [ 827.090481][ T24] cp210x 8-1:0.0: cp210x converter detected [ 827.091811][ T793] pwc: recv_control_msg error -71 req 02 val 2100 [ 827.113142][ T793] pwc: recv_control_msg error -71 req 04 val 1500 [ 827.120722][ T793] pwc: recv_control_msg error -71 req 02 val 2500 [ 827.127747][ T793] pwc: recv_control_msg error -71 req 02 val 2400 [ 827.134768][ T793] pwc: recv_control_msg error -71 req 02 val 2600 [ 827.143706][ T793] pwc: recv_control_msg error -71 req 02 val 2900 [ 827.159469][ T793] pwc: recv_control_msg error -71 req 02 val 2800 [ 827.166518][ T793] pwc: recv_control_msg error -71 req 04 val 1100 [ 827.173658][ T793] pwc: recv_control_msg error -71 req 04 val 1200 [ 827.249812][ T5867] usb 7-1: Using ep0 maxpacket: 16 [ 827.261832][ T5867] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 827.274135][ T793] pwc: Registered as video103. [ 827.281839][ T5867] usb 7-1: config 0 interface 0 has no altsetting 0 [ 827.289998][T16280] FAULT_INJECTION: forcing a failure. [ 827.289998][T16280] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 827.304866][ T793] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input131 [ 827.316447][T16280] CPU: 0 UID: 0 PID: 16280 Comm: syz.2.2732 Tainted: G L syzkaller #0 PREEMPT(full) [ 827.316473][T16280] Tainted: [L]=SOFTLOCKUP [ 827.316480][T16280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 827.316490][T16280] Call Trace: [ 827.316496][T16280] [ 827.316503][T16280] dump_stack_lvl+0x100/0x190 [ 827.316538][T16280] should_fail_ex.cold+0x5/0xa [ 827.316560][T16280] _copy_to_user+0x32/0xd0 [ 827.316582][T16280] simple_read_from_buffer+0xcb/0x170 [ 827.316607][T16280] proc_fail_nth_read+0x1af/0x230 [ 827.316627][T16280] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 827.316647][T16280] ? rw_verify_area+0xce/0x6d0 [ 827.316666][T16280] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 827.316686][T16280] vfs_read+0x1e4/0xb30 [ 827.316711][T16280] ? __pfx_vfs_read+0x10/0x10 [ 827.316732][T16280] ? __fget_files+0x215/0x3d0 [ 827.316762][T16280] ? __fget_files+0x21f/0x3d0 [ 827.316792][T16280] ksys_read+0x12a/0x250 [ 827.316813][T16280] ? __pfx_ksys_read+0x10/0x10 [ 827.316840][T16280] do_syscall_64+0x106/0xf80 [ 827.316866][T16280] ? clear_bhb_loop+0x40/0x90 [ 827.316888][T16280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.316905][T16280] RIP: 0033:0x7fe0f6b5cece [ 827.316920][T16280] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 827.316937][T16280] RSP: 002b:00007fe0f7a36fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 827.316955][T16280] RAX: ffffffffffffffda RBX: 00007fe0f7a376c0 RCX: 00007fe0f6b5cece [ 827.316967][T16280] RDX: 000000000000000f RSI: 00007fe0f7a370a0 RDI: 0000000000000004 [ 827.316977][T16280] RBP: 00007fe0f7a37090 R08: 0000000000000000 R09: 0000000000000000 [ 827.316987][T16280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 827.316997][T16280] R13: 00007fe0f6e16038 R14: 00007fe0f6e15fa0 R15: 00007ffef7dbb668 [ 827.317020][T16280] [ 827.318146][ T5867] usb 7-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 827.418287][T16282] netlink: 'syz.2.2733': attribute type 10 has an invalid length. [ 827.426787][ T793] usb 4-1: USB disconnect, device number 108 [ 827.433905][T16282] veth0_vlan: left promiscuous mode [ 827.478836][ T5867] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.669684][T16282] veth0_vlan: entered promiscuous mode [ 827.692978][ T5867] usb 7-1: Product: syz [ 827.793710][ T5867] usb 7-1: Manufacturer: syz [ 827.799823][ T5867] usb 7-1: SerialNumber: syz [ 827.822589][T16282] team0: Device veth0_vlan failed to register rx_handler [ 827.893664][ T5867] usb 7-1: config 0 descriptor?? [ 827.960649][ T24] cp210x 8-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 827.968320][ T24] cp210x 8-1:0.0: GPIO initialisation failed: -71 [ 827.991100][ T24] usb 8-1: cp210x converter now attached to ttyUSB0 [ 828.030128][ T24] usb 8-1: USB disconnect, device number 15 [ 828.047905][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 828.073338][ T24] cp210x 8-1:0.0: device disconnected [ 828.128538][ T5867] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input132 [ 828.141425][ T793] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 828.319763][ T793] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 828.358821][ T793] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 828.368048][ T793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 828.376439][ T793] usb 4-1: Product: syz [ 828.381245][ T793] usb 4-1: Manufacturer: syz [ 828.385893][ T793] usb 4-1: SerialNumber: syz [ 828.433330][ T5867] rc_core: IR keymap rc-imon-pad not found [ 828.440222][ T5867] Registered IR keymap rc-empty [ 828.445210][ T5867] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 828.455532][ T5867] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 828.583778][ T5867] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 828.611706][ T5867] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input133 [ 828.625379][ T5867] imon 7-1:0.0: iMON device (15c2:0041, intf0) on usb<7:19> initialized [ 828.718993][ T10] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 828.774493][ T793] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 109 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 828.861665][T16297] netlink: 'syz.3.2731': attribute type 1 has an invalid length. [ 828.908542][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 828.917112][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 828.927314][ T10] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 828.927342][ C1] usblp0: nonzero write bulk status received: -71 [ 828.936029][ T10] usb 2-1: config 4 has an invalid descriptor of length 215, skipping remainder of the config [ 828.954702][ T10] usb 2-1: config 4 has no interface number 0 [ 828.956173][ T5929] usb 4-1: USB disconnect, device number 109 [ 828.961690][ T10] usb 2-1: language id specifier not provided by device, defaulting to English [ 828.979678][ T5929] usblp0: removed [ 828.986449][ T10] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 828.996225][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.008493][ T7422] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 829.016330][ T24] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 829.051325][ C0] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 829.059822][ T793] usb 7-1: USB disconnect, device number 19 [ 829.178201][ T7422] usb 8-1: Using ep0 maxpacket: 16 [ 829.189606][ T24] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 829.202933][ T7422] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 829.214279][ T7422] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 829.226077][ T7422] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 829.240930][ T7422] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 829.243580][ T10] uvcvideo 2-1:4.147: Found multiple Units with ID 6 [ 829.257326][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 829.269369][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 829.273087][ T10] uvcvideo 2-1:4.147: Found UVC 0.02 device (04f2:b746) [ 829.277574][ T24] usb 3-1: Product: syz [ 829.287657][ T10] uvcvideo 2-1:4.147: No valid video chain found. [ 829.290916][ T7422] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.304532][ T24] usb 3-1: Manufacturer: syz [ 829.310577][ T24] usb 3-1: SerialNumber: syz [ 829.312301][ T10] usb 2-1: USB disconnect, device number 122 [ 829.315947][ T7422] usb 8-1: config 0 descriptor?? [ 829.536906][ T24] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 117 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 830.312694][T16305] SET target dimension over the limit! [ 831.127312][ T7422] usbhid 8-1:0.0: can't add hid device: -71 [ 831.140479][ T7422] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 831.244546][ T7422] usb 8-1: USB disconnect, device number 16 [ 831.536996][ T10] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 831.727092][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 831.772323][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 831.794493][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 832.315936][ T10] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 832.345343][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.361034][ T10] usb 2-1: Product: syz [ 832.365298][ T10] usb 2-1: Manufacturer: syz [ 832.370837][ T10] usb 2-1: SerialNumber: syz [ 832.395543][ T10] usb 2-1: config 0 descriptor?? [ 832.581484][ T793] usb 3-1: USB disconnect, device number 117 [ 832.607521][ T7422] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 832.616691][ T793] usblp0: removed [ 832.622781][ T10] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 832.644835][ T10] imon 2-1:0.0: unable to initialize intf0, err -19 [ 832.653382][ T10] imon:imon_probe: failed to initialize context! [ 832.663037][ T10] imon 2-1:0.0: unable to register, err -19 [ 832.726407][T16323] input: syz0 as /devices/virtual/input/input134 [ 832.838045][ T7422] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 832.861011][ T7422] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 833.388675][ T7422] usb 8-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 833.403807][ T7422] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.423343][ T7422] usb 8-1: config 0 descriptor?? [ 833.706533][ T30] audit: type=1400 audit(833.752:1545): avc: denied { ioctl } for pid=16334 comm="syz.6.2748" path="socket:[61480]" dev="sockfs" ino=61480 ioctlcmd=0x5882 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 834.045074][ T7422] usbhid 8-1:0.0: can't add hid device: -71 [ 834.076731][ T7422] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 834.174753][ T7422] usb 8-1: USB disconnect, device number 17 [ 834.755552][ T7422] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 834.825352][T12787] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 834.862918][ T793] usb 2-1: USB disconnect, device number 123 [ 834.950324][T16355] SELinux: ebitmap: empty map [ 834.964810][T16355] SELinux: failed to load policy [ 834.970634][ T7422] usb 3-1: Using ep0 maxpacket: 16 [ 834.988625][T12787] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 835.002321][ T7422] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 835.012926][ T7422] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 835.031432][T12787] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 835.040739][ T7422] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 835.051505][T12787] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 835.061438][ T7422] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 835.071349][T12787] usb 7-1: Product: syz [ 835.075700][T12787] usb 7-1: Manufacturer: syz [ 835.080363][T12787] usb 7-1: SerialNumber: syz [ 835.085251][ T24] usb 4-1: new full-speed USB device number 110 using dummy_hcd [ 835.165194][ T10] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 835.178485][ T7422] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 835.198736][ T7422] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 835.209223][ T7422] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 835.217268][ T7422] usb 3-1: Manufacturer: syz [ 835.223507][ T7422] usb 3-1: config 0 descriptor?? [ 836.308063][ T24] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 836.308163][ T10] usb 8-1: config 0 has no interfaces? [ 836.325497][ T10] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 836.326790][T12787] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 836.409368][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.427338][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.427718][ T10] usb 8-1: config 0 descriptor?? [ 836.452868][ T24] usb 4-1: Product: syz [ 836.473203][ T24] usb 4-1: Manufacturer: syz [ 836.485198][ T24] usb 4-1: SerialNumber: syz [ 836.506098][ T24] usb 4-1: config 0 descriptor?? [ 836.514694][ T7422] rc_core: IR keymap rc-hauppauge not found [ 836.525806][ T7422] Registered IR keymap rc-empty [ 836.538886][ T7422] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 836.547196][T16368] netlink: 'syz.6.2750': attribute type 1 has an invalid length. [ 836.560443][ T30] audit: type=1400 audit(836.743:1546): avc: denied { listen } for pid=16366 comm="syz.1.2756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 836.583423][ T7422] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 836.786039][ T24] airspy 4-1:0.0: usb_control_msg() failed -32 request 09 [ 836.800525][ T10] usb 8-1: USB disconnect, device number 18 [ 836.816084][ T7422] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 836.829583][ T24] airspy 4-1:0.0: Could not detect board [ 836.834391][ T30] audit: type=1400 audit(836.763:1547): avc: denied { connect } for pid=16366 comm="syz.1.2756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 836.835351][ T24] airspy 4-1:0.0: probe with driver airspy failed with error -32 [ 836.865529][ T7422] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input135 [ 836.981483][ T7422] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 837.017734][ T7422] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 837.064822][ T7422] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 837.114298][ T7422] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 837.134470][ T7422] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 837.154209][ T7422] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 837.174462][ T7422] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 837.194172][ T7422] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 837.214259][ T7422] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 837.234183][ T7422] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 837.255576][ T7422] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 837.265748][ T7422] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 837.283880][ T7422] usb 3-1: USB disconnect, device number 118 [ 837.445346][T16376] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 838.260615][ T7422] usb 4-1: USB disconnect, device number 110 [ 838.323358][T16384] netlink: 'syz.3.2760': attribute type 3 has an invalid length. [ 838.942511][T16392] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.2761' sets config #485 [ 839.179092][ T7422] usb 7-1: USB disconnect, device number 20 [ 839.254372][ T7422] usblp0: removed [ 839.481134][T16398] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 839.563086][ T1202] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 839.734275][ T1202] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 839.758692][ T5867] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 839.769519][ T1202] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 839.791272][ T1202] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 839.807974][ T1202] usb 4-1: Product: syz [ 839.820970][ T1202] usb 4-1: Manufacturer: syz [ 839.832415][ T1202] usb 4-1: SerialNumber: syz [ 839.942752][ T5867] usb 8-1: Using ep0 maxpacket: 16 [ 840.058693][ T5867] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 840.069841][ T5867] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 840.081125][ T5867] usb 8-1: config 0 interface 0 has no altsetting 0 [ 840.102165][ T1202] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 111 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 840.109145][ T5867] usb 8-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 840.204600][ T5867] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.213102][ T5867] usb 8-1: Product: syz [ 840.217397][ T5867] usb 8-1: Manufacturer: syz [ 840.221995][ T5867] usb 8-1: SerialNumber: syz [ 840.237320][ T5867] usb 8-1: config 0 descriptor?? [ 840.749237][ T5867] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 840.772740][T16403] SELinux: ebitmap: empty map [ 840.781664][T16409] netlink: 'syz.3.2762': attribute type 1 has an invalid length. [ 840.794664][ T5867] imon 8-1:0.0: unable to initialize intf0, err -90 [ 840.807467][ T5867] imon:imon_probe: failed to initialize context! [ 840.818161][ T5867] imon 8-1:0.0: unable to register, err -19 [ 840.875911][T16403] SELinux: failed to load policy [ 840.898854][ C1] usblp0: nonzero write bulk status received: -71 [ 840.900235][ T5867] usb 4-1: USB disconnect, device number 111 [ 840.918828][T16409] usblp0: removed [ 841.262616][ T30] audit: type=1400 audit(841.396:1548): avc: denied { bind } for pid=16412 comm="syz.1.2767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 841.366535][ T1202] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 841.615809][ T30] audit: type=1400 audit(841.406:1549): avc: denied { write } for pid=16412 comm="syz.1.2767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 841.634833][ T24] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 841.791903][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 841.802100][ T1202] usb 3-1: config 0 has no interfaces? [ 841.807715][ T1202] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 841.827862][ T1202] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.837092][ T24] usb 7-1: unable to get BOS descriptor or descriptor too short [ 841.851599][ T24] usb 7-1: config 4 has an invalid interface number: 147 but max is 0 [ 841.860459][ T1202] usb 3-1: config 0 descriptor?? [ 841.903559][ T24] usb 7-1: config 4 has an invalid descriptor of length 215, skipping remainder of the config [ 841.942916][T16419] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 841.951007][T16419] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 841.986071][ T24] usb 7-1: config 4 has no interface number 0 [ 841.996012][ T24] usb 7-1: language id specifier not provided by device, defaulting to English [ 842.019521][ T24] usb 7-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 842.030906][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.031556][T16424] netlink: 'syz.1.2770': attribute type 10 has an invalid length. [ 842.065115][T16424] veth0_vlan: left promiscuous mode [ 842.072127][T16424] veth0_vlan: entered promiscuous mode [ 842.084686][T16424] team0: Device veth0_vlan failed to register rx_handler [ 842.106700][ T793] usb 3-1: USB disconnect, device number 119 [ 842.294480][ T24] uvcvideo 7-1:4.147: Found multiple Units with ID 6 [ 842.302020][ T24] uvcvideo 7-1:4.147: Found UVC 0.02 device (04f2:b746) [ 842.309915][ T24] uvcvideo 7-1:4.147: No valid video chain found. [ 842.321816][ T24] usb 7-1: USB disconnect, device number 21 [ 842.893651][ T1202] usb 8-1: USB disconnect, device number 19 [ 843.283490][ T10] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 843.541332][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 843.550506][ T10] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 843.564724][ T10] usb 2-1: config 0 has no interface number 0 [ 843.576484][ T10] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 843.605164][ T10] usb 2-1: config 0 interface 85 has no altsetting 0 [ 843.621237][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 843.631236][ T793] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 843.638963][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.648612][ T10] usb 2-1: Product: syz [ 843.660982][ T10] usb 2-1: Manufacturer: syz [ 843.668914][ T10] usb 2-1: SerialNumber: syz [ 843.680455][ T10] usb 2-1: config 0 descriptor?? [ 843.792979][ T793] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 843.811508][ T793] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 843.823656][ T793] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 843.832076][ T793] usb 8-1: Product: syz [ 843.840801][ T793] usb 8-1: Manufacturer: syz [ 843.850826][ T793] usb 8-1: SerialNumber: syz [ 844.085920][ T793] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 844.340678][T16455] netlink: 'syz.7.2773': attribute type 1 has an invalid length. [ 844.427301][ T10] appletouch 2-1:0.85: Geyser mode initialized. [ 844.467894][ T10] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input136 [ 844.599280][ T24] usb 2-1: USB disconnect, device number 124 [ 844.605371][ C1] appletouch 2-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 844.726852][ T24] appletouch 2-1:0.85: input: appletouch disconnected [ 845.754014][T16470] netlink: 'syz.3.2782': attribute type 10 has an invalid length. [ 845.767785][T16470] veth0_vlan: left promiscuous mode [ 845.776370][T16470] veth0_vlan: entered promiscuous mode [ 845.786273][T16470] batman_adv: batadv0: Interface activated: vlan1 [ 845.795155][T16470] team0: Device veth0_vlan failed to register rx_handler [ 845.821144][T16470] batman_adv: batadv0: Interface deactivated: vlan1 [ 845.903193][ T24] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 846.020140][ T10] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 846.066096][ T24] usb 3-1: config 0 has no interfaces? [ 846.080017][ T24] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 846.107760][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.129731][ T24] usb 3-1: config 0 descriptor?? [ 846.180410][ T10] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 846.200449][ T10] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 846.209987][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 846.238301][ T10] usb 7-1: Product: syz [ 846.242657][ T10] usb 7-1: Manufacturer: syz [ 846.247249][ T10] usb 7-1: SerialNumber: syz [ 846.356274][ T9] usb 3-1: USB disconnect, device number 120 [ 846.412176][T12787] usb 8-1: USB disconnect, device number 20 [ 846.448268][T12787] usblp0: removed [ 846.521918][ T10] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 846.588185][T16480] netlink: 'syz.6.2784': attribute type 1 has an invalid length. [ 846.670596][ T24] usb 7-1: USB disconnect, device number 22 [ 846.687346][ T24] usblp0: removed [ 846.750397][ T5867] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 846.909267][ T5867] usb 4-1: Using ep0 maxpacket: 16 [ 846.922919][ T5867] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 846.965457][ T5867] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 846.992258][T12787] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 847.023056][ T5867] usb 4-1: config 0 interface 0 has no altsetting 0 [ 847.037561][ T5867] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 847.052408][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.064434][ T5867] usb 4-1: Product: syz [ 847.072868][ T5867] usb 4-1: Manufacturer: syz [ 847.080969][ T5867] usb 4-1: SerialNumber: syz [ 847.093044][ T5867] usb 4-1: config 0 descriptor?? [ 847.160284][T12787] usb 8-1: Using ep0 maxpacket: 16 [ 847.256727][T16488] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2787'. [ 847.281230][ T24] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 847.319397][ T5867] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 847.327098][ T5867] imon 4-1:0.0: unable to initialize intf0, err -90 [ 847.335321][ T5867] imon:imon_probe: failed to initialize context! [ 847.349598][T12787] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 847.364159][ T5867] imon 4-1:0.0: unable to register, err -19 [ 847.390681][T12787] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 847.407873][T12787] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 847.438626][T12787] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 847.462622][T12787] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.487202][T12787] usb 8-1: config 0 descriptor?? [ 847.509007][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 847.517191][ T24] usb 3-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 847.554178][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 847.560998][ T24] usb 3-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.00 [ 847.570438][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.688438][ T24] usb 3-1: config 0 descriptor?? [ 847.920876][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 847.937841][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 847.960860][ T24] usb 3-1: USB disconnect, device number 121 [ 848.119738][T12787] usbhid 8-1:0.0: can't add hid device: -71 [ 848.125758][T12787] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 848.141031][T12787] usb 8-1: USB disconnect, device number 21 [ 848.678721][T16507] netlink: 'syz.2.2793': attribute type 1 has an invalid length. [ 849.213005][T16518] netlink: 'syz.1.2796': attribute type 10 has an invalid length. [ 849.314281][T16518] veth0_vlan: left promiscuous mode [ 849.342860][T16521] netlink: 'syz.7.2797': attribute type 10 has an invalid length. [ 849.359029][T16518] veth0_vlan: entered promiscuous mode [ 849.393053][T16518] team0: Device veth0_vlan failed to register rx_handler [ 849.733454][ T10] usb 4-1: USB disconnect, device number 112 [ 850.145936][T16527] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.2799' sets config #485 [ 850.204857][T16529] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.2798' sets config #485 [ 850.239966][ T2721] block nbd0: Possible stuck request ffff888027c10000: control (read@0,1024B). Runtime 390 seconds [ 850.253026][ T2721] block nbd0: Possible stuck request ffff888027c10200: control (read@1024,1024B). Runtime 390 seconds [ 850.267615][ T2721] block nbd0: Possible stuck request ffff888027c10400: control (read@2048,1024B). Runtime 390 seconds [ 850.283531][ T2721] block nbd0: Possible stuck request ffff888027c10600: control (read@3072,1024B). Runtime 390 seconds [ 850.507556][ T10] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 850.671036][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 850.699877][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 850.742577][ T10] usb 4-1: config 4 has an invalid interface number: 147 but max is 0 [ 850.768622][ T10] usb 4-1: config 4 has an invalid descriptor of length 215, skipping remainder of the config [ 850.801077][ T10] usb 4-1: config 4 has no interface number 0 [ 850.822546][ T10] usb 4-1: language id specifier not provided by device, defaulting to English [ 850.852175][ T10] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 851.818336][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.243811][ T10] uvcvideo 4-1:4.147: Found multiple Units with ID 6 [ 852.254975][ T10] uvcvideo 4-1:4.147: Found UVC 0.02 device (04f2:b746) [ 852.263271][ T10] uvcvideo 4-1:4.147: No valid video chain found. [ 852.301553][ T10] usb 4-1: USB disconnect, device number 113 [ 852.479010][T16550] netlink: 'syz.2.2805': attribute type 10 has an invalid length. [ 852.509870][T16550] veth0_vlan: left promiscuous mode [ 852.521470][T16550] veth0_vlan: entered promiscuous mode [ 852.529835][T16550] team0: Device veth0_vlan failed to register rx_handler [ 852.550769][T16552] netlink: 212916 bytes leftover after parsing attributes in process `syz.1.2806'. [ 852.570107][ T5867] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 852.617009][ T24] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 852.883350][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 852.897810][ T24] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=10.85 [ 852.916290][ T24] usb 7-1: New USB device strings: Mfr=153, Product=195, SerialNumber=0 [ 852.926566][ T24] usb 7-1: Product: syz [ 852.930859][ T24] usb 7-1: Manufacturer: syz [ 852.944180][ T24] usb 7-1: config 0 descriptor?? [ 852.965140][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 853.076308][ T5867] usb 8-1: Using ep0 maxpacket: 16 [ 853.091907][ T5867] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 853.143853][ T5867] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 853.194541][ T5867] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 853.225795][ T5867] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 853.255986][ T5867] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 853.285994][ T5867] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 853.305778][ T5867] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 853.333105][ T5867] usb 8-1: Manufacturer: syz [ 853.346919][ T5867] usb 8-1: config 0 descriptor?? [ 853.363641][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 853.436627][ T7422] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 853.556348][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 853.709818][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 853.716531][ T7422] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 853.755023][ T7422] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 853.803010][ T7422] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 853.818217][ T5867] rc_core: IR keymap rc-hauppauge not found [ 853.825104][ T5867] Registered IR keymap rc-empty [ 853.830184][ T5867] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 853.844609][ T7422] usb 2-1: Product: syz [ 853.963630][ T5867] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 853.984924][ T7422] usb 2-1: Manufacturer: syz [ 854.415088][ T5867] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 854.437390][ T5867] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input137 [ 854.449856][ T7422] usb 2-1: SerialNumber: syz [ 854.461024][ T5867] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 854.520179][T16577] netlink: 'syz.3.2813': attribute type 10 has an invalid length. [ 854.532774][ T5867] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 854.544559][T16577] veth0_vlan: left promiscuous mode [ 854.555777][T16577] veth0_vlan: entered promiscuous mode [ 854.566208][T16577] batman_adv: batadv0: Interface activated: vlan1 [ 854.575546][ T5867] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 854.587826][T16577] team0: Device veth0_vlan failed to register rx_handler [ 854.598571][ T5867] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 854.688093][ T5867] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 854.697268][T16577] batman_adv: batadv0: Interface deactivated: vlan1 [ 854.782748][ T7422] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 125 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 854.804179][ T5867] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 854.855423][ T5867] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 854.939787][T16583] netlink: 'syz.1.2809': attribute type 1 has an invalid length. [ 854.957990][ T24] pwc: recv_control_msg error -71 req 04 val 1000 [ 854.959070][ T5867] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 854.977940][ T24] pwc: recv_control_msg error -71 req 04 val 1300 [ 854.988028][ T24] pwc: recv_control_msg error -71 req 04 val 1400 [ 854.998134][ T24] pwc: recv_control_msg error -71 req 02 val 2000 [ 855.081834][ T24] pwc: recv_control_msg error -71 req 02 val 2100 [ 855.096060][ T5867] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 855.108716][ T24] pwc: recv_control_msg error -71 req 04 val 1500 [ 855.125309][ T5867] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 855.127104][ T24] pwc: recv_control_msg error -71 req 02 val 2500 [ 855.166091][ T5867] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 855.195682][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 855.203497][ T5867] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 855.210568][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 855.322425][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 855.335311][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 855.342997][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 855.352345][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 855.369374][ T5867] usb 8-1: USB disconnect, device number 22 [ 855.377395][ T24] pwc: Registered as video103. [ 855.893865][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input138 [ 855.986901][ T24] usb 7-1: USB disconnect, device number 23 [ 856.444512][ T5822] Bluetooth: hci5: command 0x0406 tx timeout [ 857.140321][ T5867] IPVS: starting estimator thread 0... [ 857.244683][T16611] IPVS: using max 76 ests per chain, 182400 per kthread [ 857.295935][ T24] usb 2-1: USB disconnect, device number 125 [ 857.308334][ T24] usblp0: removed [ 857.424094][ T7422] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 857.494029][T12787] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 857.656215][ T7422] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 857.678563][ T7422] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.694030][T12787] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 857.711573][ T7422] usb 8-1: Product: syz [ 857.716435][ T7422] usb 8-1: Manufacturer: syz [ 857.723003][ T7422] usb 8-1: SerialNumber: syz [ 857.857714][T16628] delete_channel: no stack [ 857.864156][T16628] delete_channel: no stack [ 857.876332][T16628] overlayfs: failed lookup in lower (newroot/432, name='file1', err=-40): overlapping layers [ 858.038157][ T30] audit: type=1400 audit(857.984:1550): avc: denied { write } for pid=16622 comm="syz.1.2827" path="socket:[62494]" dev="sockfs" ino=62494 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 858.076773][T12787] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 858.107110][T12787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 858.162239][T12787] usb 3-1: Product: syz [ 858.186273][T12787] usb 3-1: Manufacturer: syz [ 858.219023][T12787] usb 3-1: SerialNumber: syz [ 858.342101][ T24] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 858.515152][T12787] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 122 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 858.585004][T16637] netlink: 'syz.2.2824': attribute type 1 has an invalid length. [ 859.340125][ T1202] usb 3-1: USB disconnect, device number 122 [ 859.380674][ T1202] usblp0: removed [ 859.425277][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 859.463868][ T24] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=10.85 [ 859.536833][ T24] usb 4-1: New USB device strings: Mfr=153, Product=195, SerialNumber=0 [ 859.666064][ T24] usb 4-1: Product: syz [ 859.674902][ T24] usb 4-1: Manufacturer: syz [ 859.726885][ T7422] rtl8150 8-1:1.0: eth5: rtl8150 is detected [ 859.733975][ T24] usb 4-1: config 0 descriptor?? [ 859.747412][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 859.854155][T16651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2835'. [ 860.143537][ T5867] usb 8-1: USB disconnect, device number 23 [ 860.172647][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 860.274400][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 860.349467][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 861.403412][ T5822] Bluetooth: hci6: command 0x0406 tx timeout [ 861.470457][ T24] pwc: recv_control_msg error -71 req 04 val 1000 [ 861.477334][ T24] pwc: recv_control_msg error -71 req 04 val 1300 [ 861.499130][ T24] pwc: recv_control_msg error -71 req 04 val 1400 [ 861.535419][ T24] pwc: recv_control_msg error -71 req 02 val 2000 [ 861.560754][ T24] pwc: recv_control_msg error -71 req 02 val 2100 [ 861.605625][ T24] pwc: recv_control_msg error -71 req 04 val 1500 [ 861.639400][ T24] pwc: recv_control_msg error -71 req 02 val 2500 [ 861.682283][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 861.719689][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 861.761950][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 861.787789][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 861.841168][T16679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2840'. [ 861.882500][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 861.932717][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 861.965144][ T24] pwc: Registered as video103. [ 861.971495][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input139 [ 862.050580][ T24] usb 4-1: USB disconnect, device number 114 [ 862.161660][ T5867] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 862.447780][ T5867] usb 2-1: config 0 has no interfaces? [ 862.478646][ T5867] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 862.517794][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.545628][ T5867] usb 2-1: config 0 descriptor?? [ 862.671449][ T7422] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 862.771452][ T10] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 862.811457][ T24] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 862.831383][ T7422] usb 3-1: Using ep0 maxpacket: 16 [ 862.838574][ T7422] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 862.849602][ T7422] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 862.892877][ T5867] usb 2-1: USB disconnect, device number 126 [ 862.907731][ T7422] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 862.941794][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 862.958113][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 862.968863][ T7422] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 862.973389][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 862.995007][ T24] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 863.056227][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.070555][ T7422] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 863.088910][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 863.088924][ T24] usb 4-1: Product: syz [ 863.143424][ T24] usb 4-1: Manufacturer: syz [ 863.150729][ T7422] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 863.176263][ T24] usb 4-1: SerialNumber: syz [ 863.180899][ T7422] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 863.207635][ T24] usb 4-1: config 0 descriptor?? [ 863.219775][ T10] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 863.233949][ T7422] usb 3-1: Manufacturer: syz [ 863.249507][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 863.249815][ T7422] usb 3-1: config 0 descriptor?? [ 863.293692][ T10] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 863.306470][ T10] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 863.315728][ T10] usb 7-1: Manufacturer: syz [ 863.334021][ T10] usb 7-1: config 0 descriptor?? [ 863.586292][T16699] overlayfs: workdir and upperdir must be separate subtrees [ 863.638737][ T24] usb 4-1: f81604_read: reg: 105 failed: -EPROTO [ 863.655587][ T10] rc_core: IR keymap rc-hauppauge not found [ 863.671297][ T10] Registered IR keymap rc-empty [ 863.679474][ T24] f81604 4-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 863.695290][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 863.702577][ T24] f81604 4-1:0.0: probe with driver f81604 failed with error -71 [ 863.721066][ T7422] rc_core: IR keymap rc-hauppauge not found [ 863.732744][ T7422] Registered IR keymap rc-empty [ 863.737975][ T24] usb 4-1: USB disconnect, device number 115 [ 863.746515][ T7422] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 863.762500][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 863.791717][ T7422] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 863.803805][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 863.836033][ T7422] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1 [ 863.865912][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input140 [ 863.883965][ T7422] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1/input141 [ 863.897814][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 863.906678][ T7422] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 863.951497][ T7422] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 863.964385][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 863.990862][ T7422] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 863.993287][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 864.011431][ T7422] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 864.040864][ T7422] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 864.040943][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 864.060870][ T7422] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 864.070727][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 864.091124][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 864.092922][ T7422] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 864.130687][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 864.142196][ T7422] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 864.150904][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 864.190773][ T7422] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 864.201709][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 864.212039][ T7422] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 864.230640][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 864.232203][ T7422] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 864.247079][ T7422] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 864.283558][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 864.414514][ T7422] usb 3-1: USB disconnect, device number 123 [ 864.429256][ T10] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 864.470223][ T10] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 864.523418][ T10] usb 7-1: USB disconnect, device number 24 [ 864.806075][ T793] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 864.840106][T16729] netlink: 'syz.1.2849': attribute type 1 has an invalid length. [ 864.991594][ T793] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 865.006867][ T793] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=10.85 [ 865.024532][ T793] usb 4-1: New USB device strings: Mfr=153, Product=195, SerialNumber=0 [ 865.080382][ T793] usb 4-1: Product: syz [ 865.093057][ T793] usb 4-1: Manufacturer: syz [ 865.128367][T16738] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2851'. [ 865.251845][ T793] usb 4-1: config 0 descriptor?? [ 865.280416][ T793] pwc: Askey VC010 type 2 USB webcam detected. [ 865.394744][T16742] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2854'. [ 865.680859][ T30] audit: type=1400 audit(865.808:1551): avc: denied { connect } for pid=16743 comm="syz.2.2855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 865.717095][ T793] pwc: recv_control_msg error -32 req 02 val 2b00 [ 865.901195][ T793] pwc: recv_control_msg error -32 req 02 val 2700 [ 865.941394][T16749] netlink: 'syz.7.2856': attribute type 10 has an invalid length. [ 865.957672][ T793] pwc: recv_control_msg error -32 req 02 val 2c00 [ 867.362447][ T793] pwc: recv_control_msg error -71 req 04 val 1000 [ 867.371392][ T793] pwc: recv_control_msg error -71 req 04 val 1300 [ 867.382287][ T793] pwc: recv_control_msg error -71 req 04 val 1400 [ 867.391457][ T793] pwc: recv_control_msg error -71 req 02 val 2000 [ 867.406701][ T793] pwc: recv_control_msg error -71 req 02 val 2100 [ 867.414491][ T793] pwc: recv_control_msg error -71 req 04 val 1500 [ 867.422297][ T793] pwc: recv_control_msg error -71 req 02 val 2500 [ 867.429886][ T793] pwc: recv_control_msg error -71 req 02 val 2400 [ 867.436833][ T793] pwc: recv_control_msg error -71 req 02 val 2600 [ 867.448027][ T793] pwc: recv_control_msg error -71 req 02 val 2900 [ 867.449232][ T24] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 867.454977][ T793] pwc: recv_control_msg error -71 req 02 val 2800 [ 867.478033][ T793] pwc: recv_control_msg error -71 req 04 val 1100 [ 867.485316][ T793] pwc: recv_control_msg error -71 req 04 val 1200 [ 867.529272][ T793] pwc: Registered as video103. [ 867.554755][ T793] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input142 [ 867.659898][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 867.824344][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 867.826917][ T793] usb 4-1: USB disconnect, device number 116 [ 867.861960][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 867.892778][ T24] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 867.921657][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.949890][ T24] usb 3-1: Product: syz [ 867.974516][ T24] usb 3-1: Manufacturer: syz [ 867.992390][ T24] usb 3-1: SerialNumber: syz [ 868.049572][ T24] usb 3-1: config 0 descriptor?? [ 869.358572][ T7422] usb 2-1: new full-speed USB device number 127 using dummy_hcd [ 869.372658][ C1] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 869.518305][ T24] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input143 [ 869.536905][ T24] imon:send_packet: packet tx failed (-71) [ 869.558345][ T24] imon 3-1:0.0: panel buttons/knobs setup failed [ 869.620650][ T24] rc_core: IR keymap rc-imon-pad not found [ 869.642125][ T24] Registered IR keymap rc-empty [ 869.651741][ T7422] usb 2-1: not running at top speed; connect to a high speed hub [ 869.665901][ T24] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 869.684654][ T7422] usb 2-1: config 8 has an invalid interface number: 183 but max is 2 [ 869.695800][ T24] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 869.705955][ T7422] usb 2-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 869.715198][ T7422] usb 2-1: config 8 has an invalid interface number: 80 but max is 2 [ 869.725546][ T24] imon:send_packet: packet tx failed (-71) [ 869.733003][ T7422] usb 2-1: config 8 has an invalid interface number: 81 but max is 2 [ 869.741288][ T7422] usb 2-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 869.750281][ T24] imon 3-1:0.0: remote input dev register failed [ 869.761064][ T7422] usb 2-1: config 8 has no interface number 0 [ 869.767509][ T24] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 869.774597][ T7422] usb 2-1: config 8 has no interface number 1 [ 869.781004][ T7422] usb 2-1: config 8 has no interface number 2 [ 869.795892][ T7422] usb 2-1: config 8 interface 183 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 869.813412][ T7422] usb 2-1: config 8 interface 80 altsetting 129 has a duplicate endpoint with address 0xA, skipping [ 869.825976][ T7422] usb 2-1: config 8 interface 80 altsetting 129 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 869.841214][ T24] imon 3-1:0.0: unable to initialize intf0, err 0 [ 869.848214][ T24] imon:imon_probe: failed to initialize context! [ 869.856450][ T24] imon 3-1:0.0: unable to register, err -19 [ 869.864752][ T7422] usb 2-1: config 8 interface 80 altsetting 129 has an endpoint descriptor with address 0xB1, changing to 0x81 [ 869.888579][ T24] usb 3-1: USB disconnect, device number 124 [ 869.921462][ T7422] usb 2-1: config 8 interface 80 altsetting 129 endpoint 0x81 has an invalid bInterval 145, changing to 4 [ 869.945409][ T7422] usb 2-1: config 8 interface 80 altsetting 129 endpoint 0x81 has invalid maxpacket 61715, setting to 1023 [ 869.970232][ T7422] usb 2-1: config 8 interface 80 altsetting 129 has a duplicate endpoint with address 0x2, skipping [ 870.318522][ T7422] usb 2-1: config 8 interface 80 altsetting 129 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 870.347233][ T7422] usb 2-1: config 8 interface 80 altsetting 129 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 870.395996][ T7422] usb 2-1: config 8 interface 80 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 870.448074][ T7422] usb 2-1: config 8 interface 80 altsetting 129 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 870.476411][ T7422] usb 2-1: config 8 interface 80 altsetting 129 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 870.504704][ T7422] usb 2-1: config 8 interface 80 altsetting 129 has a duplicate endpoint with address 0xC, skipping [ 870.525807][ T7422] usb 2-1: config 8 interface 80 altsetting 129 has 12 endpoint descriptors, different from the interface descriptor's value: 11 [ 870.540236][ T7422] usb 2-1: config 8 interface 81 altsetting 6 has a duplicate endpoint with address 0xB, skipping [ 870.576119][ T7422] usb 2-1: config 8 interface 81 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 870.590441][ T7422] usb 2-1: config 8 interface 81 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 870.605601][ T7422] usb 2-1: config 8 interface 80 has no altsetting 0 [ 870.621569][ T7422] usb 2-1: config 8 interface 81 has no altsetting 0 [ 870.634544][ T7422] usb 2-1: language id specifier not provided by device, defaulting to English [ 870.705597][T16812] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2874'. [ 870.928767][ T7422] usb 2-1: Dual-Role OTG device on HNP port [ 870.938336][ T7422] usb 2-1: New USB device found, idVendor=19d2, idProduct=1268, bcdDevice=4c.36 [ 870.947551][ T7422] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.957421][ T7422] usb 2-1: Product: ခ [ 870.961728][ T7422] usb 2-1: Manufacturer: 㟛тᡨᣂ苨栈ᇤ隳켢⬠뚠﬩㵫亃㮓䝤癿旧ヨ罥赪挤땢賔毂뼓㨻퀢冑蛀 [ 871.029196][ T7422] usb 2-1: SerialNumber: 좗觵櫖0᠟ꙥ뜕᣷䞂칿膗ꧪ荆䩩├ࢁ驸ᮡ⺪㻂䕵钋콪挱ብ␇繯ဤ⅘쉭桰䲀닩 [ 871.074541][ T30] audit: type=1400 audit(871.271:1552): avc: denied { read } for pid=16804 comm="syz.2.2874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 871.504618][ T5867] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 871.587350][ T7422] option 2-1:8.183: GSM modem (1-port) converter detected [ 871.625280][ T7422] usb 2-1: USB disconnect, device number 127 [ 871.642721][ T7422] option 2-1:8.183: device disconnected [ 871.717821][ T5867] usb 3-1: device descriptor read/64, error -71 [ 871.874020][T16822] netlink: 'syz.3.2877': attribute type 10 has an invalid length. [ 871.893262][T16822] veth0_vlan: left promiscuous mode [ 871.903875][T16822] veth0_vlan: entered promiscuous mode [ 871.912789][T16822] batman_adv: batadv0: Interface activated: vlan1 [ 871.920069][T16822] team0: Device veth0_vlan failed to register rx_handler [ 871.977489][T16822] batman_adv: batadv0: Interface deactivated: vlan1 [ 872.002754][ T5867] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 872.169785][ T5867] usb 3-1: device descriptor read/64, error -71 [ 872.496963][ T5867] usb usb3-port1: attempt power cycle [ 872.560360][ T793] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 872.612046][ T31] INFO: task syz.0.2334:14813 blocked for more than 143 seconds. [ 872.621021][ T31] Tainted: G L syzkaller #0 [ 872.627737][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 872.636520][ T31] task:syz.0.2334 state:D stack:27800 pid:14813 tgid:14812 ppid:5810 task_flags:0x400140 flags:0x00080002 [ 872.648656][ T31] Call Trace: [ 872.652323][ T31] [ 872.655246][ T31] __schedule+0xfee/0x60e0 [ 872.660040][ T31] ? __lock_acquire+0x4a5/0x2630 [ 872.667481][ T31] ? __pfx___schedule+0x10/0x10 [ 872.672765][ T31] ? find_held_lock+0x2b/0x80 [ 872.679866][ T31] ? schedule+0x2bf/0x390 [ 872.687296][ T31] schedule+0xdd/0x390 [ 872.692950][ T31] schedule_preempt_disabled+0x13/0x30 [ 872.701244][ T31] __mutex_lock+0xc9a/0x1b90 [ 872.707706][ T31] ? bdev_open+0xa2/0xe40 [ 872.713605][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 872.723987][ T793] usb 7-1: config 0 has no interfaces? [ 872.729778][ T793] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 872.739661][ T793] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.742005][ T31] ? bd_prepare_to_claim+0x1e0/0x280 [ 872.788662][ T793] usb 7-1: config 0 descriptor?? [ 872.826146][ T31] ? __pfx_bd_prepare_to_claim+0x10/0x10 [ 872.843607][ T31] ? file_init_path+0x48e/0x670 [ 872.846332][ T5867] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 872.856549][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 872.876402][ T31] ? bdev_open+0xa2/0xe40 [ 872.881072][ T31] bdev_open+0xa2/0xe40 [ 872.881108][ T5867] usb 3-1: device descriptor read/8, error -71 [ 872.885247][ T31] ? iput+0x3a/0x40 [ 872.885275][ T31] bdev_file_open_by_dev+0x179/0x210 [ 872.907164][ T31] setup_bdev_super+0x385/0x730 [ 872.914865][ T31] get_tree_bdev_flags+0x363/0x620 [ 872.924183][ T31] ? __pfx_xfs_fs_fill_super+0x10/0x10 [ 872.933294][ T31] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 872.945497][ T31] ? cap_capable+0x107/0x460 [ 872.952929][ T31] ? bpf_lsm_capable+0x9/0x10 [ 872.960705][ T31] ? security_capable+0x80/0x260 [ 872.966585][ T31] vfs_get_tree+0x92/0x320 [ 872.971061][ T31] path_mount+0x7d0/0x23d0 [ 872.975533][ T31] ? __pfx_path_mount+0x10/0x10 [ 872.980520][ T31] ? lockdep_hardirqs_on+0x78/0x100 [ 872.985759][ T31] ? putname+0xb1/0x110 [ 872.990036][ T31] ? kmem_cache_free+0x124/0x6a0 [ 872.995564][ T31] ? __x64_sys_mount+0x293/0x310 [ 873.001290][ T31] __x64_sys_mount+0x293/0x310 [ 873.014267][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 873.019224][ T31] ? __pfx___x64_sys_mount+0x10/0x10 [ 873.024774][ T31] do_syscall_64+0x106/0xf80 [ 873.031433][ T10] usb 7-1: USB disconnect, device number 25 [ 873.035333][ T31] ? clear_bhb_loop+0x40/0x90 [ 873.041935][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 873.047036][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.053603][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 873.063041][ T31] RIP: 0033:0x7faf9d59c629 [ 873.070338][ T31] RSP: 002b:00007faf9e4c1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 873.081428][ T31] RAX: ffffffffffffffda RBX: 00007faf9d815fa0 RCX: 00007faf9d59c629 [ 873.083153][ T9] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 873.089766][ T31] RDX: 0000200000000040 RSI: 00002000000001c0 RDI: 00002000000000c0 [ 873.098896][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.126940][ T5867] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 873.254803][ T9] usb 2-1: Product: syz [ 873.259296][ T9] usb 2-1: Manufacturer: syz [ 873.263944][ T9] usb 2-1: SerialNumber: syz [ 873.271504][ T9] usb 2-1: config 0 descriptor?? [ 873.278985][ T5867] usb 3-1: device descriptor read/8, error -71 [ 873.339090][T16842] lo speed is unknown, defaulting to 1000 [ 873.355127][ T31] RBP: 00007faf9d632b39 R08: 0000000000000000 R09: 0000000000000000 [ 873.369456][ T31] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000000 [ 873.384365][ T31] R13: 00007faf9d816038 R14: 00007faf9d815fa0 R15: 00007ffc26579568 [ 873.396825][ T5867] usb usb3-port1: unable to enumerate USB device [ 873.412852][ T31] [ 873.416665][ T31] INFO: task syz.5.2355:14892 blocked for more than 144 seconds. [ 873.428655][ T31] Tainted: G L syzkaller #0 [ 873.442674][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 873.459091][ T31] task:syz.5.2355 state:D stack:27912 pid:14892 tgid:14886 ppid:7732 task_flags:0x400040 flags:0x00080002 [ 873.471613][ T31] Call Trace: [ 873.474894][ T31] [ 873.478102][ T31] __schedule+0xfee/0x60e0 [ 873.482558][ T31] ? __lock_acquire+0x4a5/0x2630 [ 873.487575][ T31] ? __pfx___schedule+0x10/0x10 [ 873.492440][ T31] ? find_held_lock+0x2b/0x80 [ 873.497170][ T31] ? schedule+0x2bf/0x390 [ 873.501513][ T31] schedule+0xdd/0x390 [ 873.505574][ T31] super_lock+0x283/0x3f0 [ 873.510195][ T31] ? __pfx_super_lock+0x10/0x10 [ 873.515061][ T31] ? __pfx_var_wake_function+0x10/0x10 [ 873.520575][ T31] ? __iterate_supers+0x1b6/0x370 [ 873.525623][ T31] __iterate_supers+0x1e0/0x370 [ 873.530536][ T31] ? __pfx_quota_sync_one+0x10/0x10 [ 873.535739][ T31] __x64_sys_quotactl+0x2b3/0x400 [ 873.541962][ T31] ? __pfx___x64_sys_quotactl+0x10/0x10 [ 873.547625][ T31] do_syscall_64+0x106/0xf80 [ 873.552233][ T31] ? clear_bhb_loop+0x40/0x90 [ 873.557634][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.563529][ T31] RIP: 0033:0x7feb9bd9c629 [ 873.569647][ T31] RSP: 002b:00007feb9cc69028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 873.590161][T16808] caif:caif_disconnect_client(): nothing to disconnect [ 873.599124][ T31] RAX: ffffffffffffffda RBX: 00007feb9c016090 RCX: 00007feb9bd9c629 [ 873.607209][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff80000100 [ 873.615173][ T31] RBP: 00007feb9be32b39 R08: 0000000000000000 R09: 0000000000000000 [ 873.623399][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 873.632346][ T31] R13: 00007feb9c016128 R14: 00007feb9c016090 R15: 00007ffce4a500e8 [ 873.652062][ T31] [ 873.655326][ T31] [ 873.655326][ T31] Showing all locks held in the system: [ 873.695576][ T31] 4 locks held by kworker/0:0/9: [ 873.702235][ T31] #0: ffff888022ef1148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 873.716338][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 873.724462][ T9] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input145 [ 873.736391][ T31] #1: ffffc900000e7d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 873.748935][ T31] #2: ffff88802ac7a198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 873.759890][ T31] #3: ffff888036ae1198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 873.760058][ T9] imon:send_packet: packet tx failed (-71) [ 873.775249][ T31] 1 lock held by khungtaskd/31: [ 873.780313][ T31] #0: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 873.790859][ T9] imon 2-1:0.0: panel buttons/knobs setup failed [ 873.799075][ T31] 1 lock held by acpid/5161: [ 873.803680][ T31] #0: ffffffff8e7f4ff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 873.813890][ T31] 1 lock held by klogd/5165: [ 873.818842][ T31] #0: ffff8880b843b1a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 873.828930][ T31] 2 locks held by getty/5566: [ 873.833607][ T31] #0: ffff888037fe30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 873.843543][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 873.854247][ T31] 1 lock held by udevd/5823: [ 873.858898][ T31] #0: ffff8880276f6358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 873.868311][ T9] rc_core: IR keymap rc-imon-pad not found [ 873.874093][ T9] Registered IR keymap rc-empty [ 873.875779][ T31] 4 locks held by udevd/6049: [ 873.879028][ T9] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 873.883632][ T31] #0: [ 873.893665][ T9] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 873.893919][ T9] imon:send_packet: packet tx failed (-71) [ 873.897629][ T31] ffff88805d52d540 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 873.921451][ T31] #1: ffff888057003c88 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 873.931291][ T31] #2: ffff888085308c38 (kn->active#26){++++}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0 [ 873.931654][ T9] imon 2-1:0.0: remote input dev register failed [ 873.941076][ T31] #3: ffff888036ae1198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 873.958717][ T9] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 873.959448][ T31] 2 locks held by syz.0.2334/14813: [ 873.971024][ T31] #0: ffff88804fe360e0 (&type->s_umount_key#76/1){+.+.}-{4:4}, at: alloc_super+0x244/0xd20 [ 873.981275][ T31] #1: ffff8880276f6358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xa2/0xe40 [ 873.990606][ T31] 3 locks held by syz.7.2878/16842: [ 873.995926][ T31] #0: ffffffff905f6c70 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 874.005306][ T31] #1: ffffffff9060f568 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 [ 874.014449][ T31] #2: ffffffff8e7f4ff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 874.027758][ T31] [ 874.030099][ T31] ============================================= [ 874.030099][ T31] [ 874.043954][ T31] NMI backtrace for cpu 1 [ 874.043972][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 874.043997][ T31] Tainted: [L]=SOFTLOCKUP [ 874.044004][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 874.044013][ T31] Call Trace: [ 874.044019][ T31] [ 874.044026][ T31] dump_stack_lvl+0x100/0x190 [ 874.044058][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 874.044077][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 874.044106][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 874.044131][ T31] sys_info+0x141/0x190 [ 874.044150][ T31] watchdog+0xd25/0x1050 [ 874.044179][ T31] ? __pfx_watchdog+0x10/0x10 [ 874.044202][ T31] ? __kthread_parkme+0x18c/0x230 [ 874.044229][ T31] ? kthread+0x13a/0x450 [ 874.044244][ T31] ? __pfx_watchdog+0x10/0x10 [ 874.044264][ T31] kthread+0x370/0x450 [ 874.044278][ T31] ? __pfx_kthread+0x10/0x10 [ 874.044295][ T31] ret_from_fork+0x754/0xd80 [ 874.044314][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 874.044330][ T31] ? __switch_to+0x7b4/0x1120 [ 874.044347][ T31] ? __pfx_kthread+0x10/0x10 [ 874.044361][ T31] ret_from_fork_asm+0x1a/0x30 [ 874.044388][ T31] [ 874.044394][ T31] Sending NMI from CPU 1 to CPUs 0: [ 874.171619][ C0] NMI backtrace for cpu 0 [ 874.171636][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 874.171655][ C0] Tainted: [L]=SOFTLOCKUP [ 874.171661][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 874.171669][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 874.171695][ C0] Code: 18 83 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 6c 1c 00 fb f4 bc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 874.171708][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000242 [ 874.171721][ C0] RAX: 0000000003db27fd RBX: ffffffff8e4975c0 RCX: ffffffff8b8f1c75 [ 874.171731][ C0] RDX: 0000000000000000 RSI: ffffffff8de707eb RDI: ffffffff8c1aeba0 [ 874.171740][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1017086795 [ 874.171748][ C0] R10: ffff8880b8433cab R11: 0000000000000000 R12: fffffbfff1c92eb8 [ 874.171757][ C0] R13: 0000000000000000 R14: ffffffff90d95c10 R15: 0000000000000000 [ 874.171766][ C0] FS: 0000000000000000(0000) GS:ffff88812434a000(0000) knlGS:0000000000000000 [ 874.171781][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 874.171791][ C0] CR2: 0000001b2e322ff8 CR3: 00000000786f6000 CR4: 00000000003526f0 [ 874.171800][ C0] Call Trace: [ 874.171805][ C0] [ 874.171811][ C0] default_idle+0x9/0x10 [ 874.171824][ C0] default_idle_call+0x6c/0xb0 [ 874.171838][ C0] do_idle+0x35b/0x4b0 [ 874.171864][ C0] ? __pfx_do_idle+0x10/0x10 [ 874.171883][ C0] cpu_startup_entry+0x4f/0x60 [ 874.171899][ C0] rest_init+0x251/0x260 [ 874.171913][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 874.171932][ C0] start_kernel+0x47f/0x480 [ 874.171947][ C0] x86_64_start_reservations+0x24/0x30 [ 874.171962][ C0] x86_64_start_kernel+0x12b/0x130 [ 874.171976][ C0] common_startup_64+0x13e/0x148 [ 874.171998][ C0] [ 874.361780][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 874.368671][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 874.379370][ T31] Tainted: [L]=SOFTLOCKUP [ 874.383672][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 874.393702][ T31] Call Trace: [ 874.396969][ T31] [ 874.399894][ T31] dump_stack_lvl+0x100/0x190 [ 874.404570][ T31] vpanic+0x552/0x970 [ 874.408529][ T31] ? __pfx_vpanic+0x10/0x10 [ 874.413010][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 874.419147][ T31] panic+0xd1/0xe0 [ 874.422844][ T31] ? __pfx_panic+0x10/0x10 [ 874.427238][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 874.433379][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 874.439520][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 874.445668][ T31] ? watchdog.cold+0x198/0x1ca [ 874.450435][ T31] ? watchdog+0xd35/0x1050 [ 874.454852][ T31] watchdog.cold+0x1a9/0x1ca [ 874.459435][ T31] ? __pfx_watchdog+0x10/0x10 [ 874.464100][ T31] ? __kthread_parkme+0x18c/0x230 [ 874.469129][ T31] ? kthread+0x13a/0x450 [ 874.473360][ T31] ? __pfx_watchdog+0x10/0x10 [ 874.478031][ T31] kthread+0x370/0x450 [ 874.482091][ T31] ? __pfx_kthread+0x10/0x10 [ 874.486663][ T31] ret_from_fork+0x754/0xd80 [ 874.491235][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 874.496346][ T31] ? __switch_to+0x7b4/0x1120 [ 874.501006][ T31] ? __pfx_kthread+0x10/0x10 [ 874.505578][ T31] ret_from_fork_asm+0x1a/0x30 [ 874.510341][ T31] [ 874.513619][ T31] Kernel Offset: disabled [ 874.517918][ T31] Rebooting in 86400 seconds..