last executing test programs: 1m43.904237303s ago: executing program 1 (id=1132): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r3, 0x0, 0x40040) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x2b1e}, 0x10000084) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4000000) unshare(0x28000600) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002cbd7000fedbdf2511000408bfffffff0800040001000000080005001a0100000c000180060001000a000000080005001f0000000800040006000000080004000800000008000500ffffffff"], 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) 1m41.191431821s ago: executing program 1 (id=1140): socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "a2a88faa7ec665a571a9ad3d1f9512e3c591df4a4554c6c2e2cc6cb4d9aee4579684743ad4888f1522a47ddaff3d4f9450d288e8559bc4f795aa0d1bc74d926038adb808cba6e90535b2eb8ba3e8ff927207d17a86b10d604e77a459df67e7f0c842d463ca5977b7e2eb55fbb9881d15633717817c735da52a1da7d64bb22e58550d8ee20883e41ec2f119a6a6364d68900c1cce4a3b3225a9ce9e1e00b444e9e7bcd10e1dec202ce7786aa7cf10d4dd6bbcee586d7903a6239ff90b49cd7fddb0c67ddab326cdb2d0fa48a783f691be9ebaa1243b21afd04a372650aa7eb46a2675cc67ae12d3b99c9acb4d9fb7c78081d269b443affd86eededd4867311221"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xfff, 0xfffffffc}}]}}]}, 0x14c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) syz_open_pts(r3, 0xa000) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", '\x00', "0f00", "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "cf6cce2296b3f853e224c4e0"]}) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x2a, &(0x7f0000000140)=0x2f, 0x4) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f0000000280)=@ethtool_gfeatures={0x3a, 0x8, [{}, {}, {}, {}, {}, {}, {}, {}]}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x11cd, &(0x7f0000002100)=ANY=[@ANYBLOB="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"], &(0x7f00000020c0)={0x0, 0x3, [0x1c8, 0x620, 0x47, 0xe42]}) r5 = getpid() getpriority(0x0, r5) r6 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) ptrace(0x10, 0x0) read$msr(r6, &(0x7f000001aa40)=""/102392, 0x18ff8) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r7, 0x201, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x24040000) 1m40.723038628s ago: executing program 1 (id=1141): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d", 0x54}, {&(0x7f0000000800)}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb8", 0x91}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x78}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m40.521812147s ago: executing program 1 (id=1142): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00') socket$kcm(0xa, 0x5, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x121201, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x20000004) r0 = io_uring_setup(0xa, &(0x7f0000000500)={0x0, 0xc8a1, 0x200, 0x8, 0xc3}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf0000000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f962347813", 0xd8}, {0x0}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f", 0x18}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224", 0x1b}], 0x1, &(0x7f0000000f40)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x18}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa4", 0xc}], 0x1}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', 0x0, 0x3f, &(0x7f0000000000)={[{}]}) r1 = syz_open_dev$video(&(0x7f00000001c0), 0x20, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000940)={0x2, 0x100, 0x3, {0x8000, 0x1000, 0x0, 0x2}}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m39.750850041s ago: executing program 1 (id=1144): socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xfff, 0xfffffffc}}]}}]}, 0x14c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) syz_open_pts(r3, 0xa000) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", '\x00', "0f00", "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "cf6cce2296b3f853e224c4e0"]}) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f0000000280)=@ethtool_gfeatures={0x3a, 0x8, [{}, {}, {}, {}, {}, {}, {}, {}]}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x11cd, &(0x7f0000002100)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa884800000000000000000000000000000000461011af00650000022f9078ffffffffac1414284414a983ffffffff000000056401010100000005440c5311e00000020000000344249913ac14141e00000004ffffffff00000497ffffffff0000000064010100000008d40420880b10000002000333f8ef2fe8bdd30fb5532fbf31ac82e89decdb8eab99396a48a041c77d07524e392ef5261a5e69529135a60d73bfa60898c7229644936ff4f8f6f1064f35baba230732081ba774621cee09abbd36561b622a16430323a90e48397e134b5db1e75d2777d8e2f102e5cf683f3f965e927644dc3ed24d8d467b9e77cb38e3e60a2cad45a87a11a5450d23cc3ffe0f903689003d5b5fc04606a95325c042b1a5feb6f7bdd78e3d41dfb3bd8c7ed5be462edf646d3e11ecd8a6337d6bd93843f9dd5e4223c5e69511302bea67d5143968594b6d4fb760b75340c2d20251fd0120b09bb327640d062820e5b7d627f563cb13e644dc718fee4faddc1a26d18af8d658fe0b2496418a19230be855f4a40d76826830569a19ee5db90ecf05cf6f5e15043ff43e3ba3f0f2ad5aade9af58c7af9a7ecc28e17a394cba8680f89150b4b58584def2981b5a85fe30f9710d6e8cbf99dbbb7f60181774b874135ccdab5525069ec034036b808cbb4f90e1388edb61c82ece1ea8e3f04265351a8d520a30b4f172911f1a02d189f49483aecf7acda18fb0f34dd6894474226904374489907d5a2909ce803ee7f27f027c0080752e7b055be16d1f98c999fe48f4c354b5b8578589d9c812cadc00fd34c258e6d81b3ccbb21cbc8f1b5d10e8e703740464ab379b022c00813109ff7de1dc2cec532df374f33bff9dfa92a5cd6336e4079b915e48163ce6b484b2443372b6c2c83b83598a71ab238fc648c6a4c656bbb885f0fa7030dd9424807b48ec6f08ca92cf0c80ad73cf05a276fff234b432581e75a79070ce2ae3b02e89bb6869372a598d0733f4198dcca321cff52a556e05e041dbf079cdd4abaf49d5ea836ec7431cfe57d70ea48a9cc3ae04baf603efd1a8b5952eb0015cc344c2425994f76ac09ac6c9d7bc8a39b3b65e96407eed8b74b51eaf885bb3b72556f230b8d73e580de201bfe799bc531f1284629100c73cfa14cbd2df6363835945018acb7ecdb13403ea144bcec966179a6057227c9cac8d90c9bf266879f7c437a1c0a21e0cb4427313f5e1c19c3f8860427810a8d0069c6f9ef92caa6cb0128ddb3c71598befb5b9c5e1c03dad837af7a15d5977b1dd8ffa0b3560b8cc94710a24d879f28e2e2bcff1ed4a46de8094f4dbd4bb0bbf715ac893efbd1c619b3412a99f1fd7ec8a5a4e8241bb77b4aa9b729e7e3798839009b551636031ff3e240e2d3af20013aa62a9eeb85d58aa236fc59ea68ff9537397b27a145c1702e2c640b3a1b214a4ed9f2a706530ad7c293e3e7d0ffce014f0fb114e7b4f5b9b7dd2ce11e39571775f99e241de49641733183e6d66e92dea9a25b83726c58659f1578a92101ee090a87489f02c9b0d32812b3c3643ef00995a033e339f05bd5fe9801a6be94cb7ff4a7b085e6a4ed65cc6cd4d7b15e20c2243f8cc04904f0aca6ac0c64734f71225d187119d1afe878bd9cfab57743aba4e4f436a721d664a17759645d3a15b8d3a09c46815480013d588248d6735c061f50332907b28884c73de02c6fedb519de7eb5eadf68764b05861382fa54f6d820ed092f5e0e089d2b39b5e1f25e3b2aa4e45594538abeed1dd23cdeb57f4dfb957ce62e89ae8298e363e48f040e692ff021e0666befbc2cfe708843d3fa5d56747fd0c15d200d5ffd75fda6dc8397866183f498918826f68e96720f39e060eeadf7d3fdabd31581639c3e2611358ea57f52db624100f356911f5b4068f4c0722cf62512a1e1fdc9c6af6c6ee7f90d7e76b59f5c9080a5c90f6129fdeb1ab67394373ff9ab7e7c6028e821dbf7e34ed21643025f98ceb2a0c5eea7d4429d835be4e20e552e47d7d610be41fd03522f3086c82522e7ebdeb30b02f10f69df61df73ac89a8d273bb17a0b99bfc54e0953cc15387745865cea248cfb3f443e0e8421a4835bfca62231d1616bef146b17a8f972c38a57d6a01d37562e93ff7d7f5b6388de3f657a9963ba664e2df1c3d0e66de7839e53d5e42e070fca3224c4fcf251705ce79a567c18236a1b1b2edc5f7cc2f1a14c8e568d778aa972d279ecffd2fbf622f49aed79b46fa60d754e2e9107219442272d931b8a023aa8888008a3523ecb8cdf31396c27374cd73568a74261ab0f6f8cc18f4fcc59c6a83544fd7c70ecd7676b44455766f70dc8e0b0c2461cdf98dc564178014bdd35a6c08a266861d7bb8ae85d20527183feb575105447b9c566c2a9d57f7f8bb0e33620551425228c6270c186cd847a4a1931497be0eaad1c41b6d0f8f876120d41d8e73bdb3015760f0d047bd6d567b48f4cc186793520a9f22b95f816a5aabcab31164689a6d1f748b62efd753dea34aded7467a1d80c956c4c4655ad7bac38438bdb94278431dc711913197c5d31a2e6119131ff1599d93dcf09dd21bb2c7084a34bc07d4ae28b9383972c6ee0602a260892f85c9ea9204150672d46db4b919273f8cd420d4a5ef0f72ac115bcaac0408398c8679aa2545cd1f39e2dfb3c0e40d114750d7da9a8a91c845ec1654ea3b8a115fd7d76e2892c20f083c6b5c0505e2ebb7fb6d131fc5dd8b71373d01884a01808d4e311bf560572aff96c55bc8279b2bb055c5b698927b8edc8f45c1cf5a6a925a0e5ec0d8de6583aca912915715cb810fa274823f090415088e0be78a0905e98666fc9527aa63507906600e2c59f0c91ea5faef46fc9d87d7a769407b5a1ca024c687dae3d7a9be4adbb606d9b64bde4115dbfcf475d06da6d915ef6b7d203512a9e7b514614e85f99766682be9d2556cf3f83373d5d98cbb000538c8edb74b8b7d72643544f1edb6dcd8c17b759b9080f77b70131fe81b5e2c6aa95b2e0c065bc9d297a32e18f4bffa644c3b98b73a75dc55aec13b0446b491a461ea62a5bfff1d48a3f9b4af5aadaec38f0f7158b1a01fc4f71d9ab21bbddfd7a24665dd47cea10bdf2c63f84054a2ffed3522d29981077354f8ae2e5a4e865938d085aaf1a6247be0779f8b37a7c17c0b5e39edbed221c56d9e4f5519c7f22f720223a3d68d3414428bccde683c9892b9cad4650e9bfced0a10e058f9228e3d884e07a141ce53118745b3172adfdfa0144eaecc12016728b0911ae3b21b23236ab86cdad39c4fb0adb11fd2dffd2e3a36c3790ba3e2d5ab4f161541963356fdd1b120b5eaccf05602d2a69f391e256aa1038bff2ba415da91d8b0b7d1b50abb8c0c4a4cd20a9e8844d6e7e44d7625e73e2d83dbc548c41cf05eb4bf5a8c75dd8e6a9cb1ca5a7735f332ae2ba228d0447b7a34a751b7d3cb615d21ee12218ba4c631600a78377a0a570b329124e01b8480cb7da56a1bff75b1ce3bd69461b07d9be14d6c5f100ab1a89ac5cd583d2e3a2a2cdd96f2428dff167b1957c123be266636d85b4d86b99fedf0505e5d56334e2487f50f6bd1fa47241859484faf699a1b03dc64f24ccd08e26a680b488ff7e9f5afd93361979419ba19c131e3aa25916f7eb94116206027f19f069e806b2db47a7073fdea8610d1ffb6b534db5df915c43fc962921aef6ad2e98965ca9ca3652a3ba1f9c490b7ef9cff602e76d07775d60b103c13f22bf0ce79726ef2bd6b11853248288df7d68b8cbaa7558b268c1542bb5db8ee6f307921619d4ab8f1f2ee09784ce21ece42baa9d91c2ae6b22e091d69217022cf3a3800b64f0fa4fefa4d204bdd008b6fa2fa2d76f35def515ab4efaec773f133fe8718dfe720869ec60ca934a887d23b75a982d3af0c71f9e180249cc28d961f8b21f8cb1a63f57fe74d25e79f89fb6d5bb0bd88a26c1c2d2dd5949a654cde0cddd9738800a99cf29f46cf4dd665e609c011f19098c259dee930ba7b4acae98603848149a4f8d9b52630efa96c781347e5cdb640e41066728aafc6ae245a8b1e9a535dcc851d6163f0b2d0a8a4c7fe9ef7f97bb342829848da2ba331dce3c827b24f2540168b0e46709bc484d7323d8b1aec91e95d348a15d0d5c9f21d2bc4ddb8844c9c8d8752b960c2d8cbb701abc41a7f9f36a3238e0fefd49f2a2e27af1f24558d406855491c1cdf0ca9585d2448a9dc10b16e20c4bfaa76597a88af0b19f7e7c1055b40c4053898e2638a8cccc540eed5dd9f31ad0c7c447745e672d2596168ec210f4135424e6cfa6934144579dafc8f1ab93c958124bd8e95e207c17567b2cbe019d75c37b1bea1123fcf68cd728f97af5ea50b5d603b381caa3585f0bb68bcb75df10f7809135d98124d1d778529ff9a91762c97eb8c67c7f4aa0edcd7d3be16af317699c0bf27cbbd802c7555ce7bb714d4bccb0e1bb6bd0da714bb97da63e3ce8b128032cfdb8c653e8b6c316c68e6820a3523d7e00a7dc5fd529da30c7b9887dd9fa7da5b464deff7b1d5afb84b01c168e55bdf2502922e591c8b2eed5918ac7dc021750a004113f2c866fec144ed7edf25c081f2ea1cd57c4f40496845832060de2fc13fb8a1a306a6e1a57492786ae667502a8b44402c78ebfd3e624073284823afea75ccb428053115141b32085bf5f3535b5bc62be966e38fa1dba2de2a6e3b8fde44f95b966d77646f8529bf4e0938b6ec916d689630f357449b6f7ecfe543d15a197fd0948c60fbaa3e4c5bc3dfeaf0f83da02025b85ca8a98de51a0e96e613e50163f751f0175a9d955c6072bb6e947f65598d188b8d0a5ed9467c60b1d75c01dd698d12f3a0d4dd997afca61869fbb0fd3b26575ec49ee0c2b60def6bcf5b54b79976e5e945386b694d6fb8ee502a57a0f96aa86b165c390d74d02f22dce60eafcdb76a1ce81474aa90ab9b34c69a5d184bed34dc2a8ab624015b787d15a65c4677c14f12f75a3cdb4192b7ba86af059b21d5dd67d45f75e201200fbd9fc822f3470b41c83d066ccda8f396a6581374899feaebd714657a915baa5d9502103258052e790dbf8d5bb29d10feef1dd60637cf820aa1876f5c309a84f0021e614fdef4e7f552f644462a78feb07ce1b025c15f564366e5c264966f5bacf912295df296e4447b2227952898ae4694281ac173a7560f13658f0d59757647dee310531077895c71590f99e678a5216c0f379739ea13b298e46c4d9a50c8fda590631f1e855d6364c659b8d05d57741bf3aad7cc8f9e10e4c62d1c297feca12f7810e97f6ca6fad4e07c1aa4c489a4dbfdeaf1c56ccb5e8ed87ffed89e5f26adb4f96a38a4b12bb0485bf71f1a9365ada0fd9666b44dbea1b0aa66b863c970576250fa4be901dd8f4d8407b0e3d298f5096efd259565546e536be3c5d6456166d7cd2d84dab3eda43e1326bf8eda79835594032c74daaac85df8e5a145cd71cd1eef05cee96288a1932cd3feb8f57b676238fc942f2150e15034a6869d9136d41cdc35e275775b848bf9eda6aebb51a05c6d85241e804b27fad4034806b30c7224065fcadf3db37687d5043708b37f7095dfa1b0791dca5fd8ad9af965388a654d5941071a7ea013949eaa99e61498d8a698a0bf3eab05c00d7fd7adea6bfe6a2fe8bc4bc3d18e384f53b26889f2a80fc3f786330c753277df3f455121253b7c37ffb86b427fceff53a61969d5346780a975e6956efc0ff04f291ead2d09ff2508f5a52fddaa3703da1c03a4182ca7c081ba01f3b6817ce3db76918c91030565db181ecaecff824c72d8067461718a280134e569620f90082ef447381af7479f39b1da8aedc3ed92128ad43743fd77f87c147a3794b6da6d01091ee52eb8b31b3f852c33af60f98de7ccf25f7a34478ef79155c5dd515e7fe9f69b39410c5053b09ec58a52979e0aa556869068f5a21a583a3e2f4cd9df408000800ec803f825b57c25632a906d6dd585e5f93509f5931dbb01f48b4793732627e7a2a8705c31001674e15c5391c2e4f3b75cbd37ded1c18b201707fdcc68f68b77791080086dd00080002a07f97c04a115f2cfd0b224bdfe9f0d20e6357390b94c2fe16b397eaaa1565d5ff62b561635eef350dced8b963b8e5acc61b094d3981f3f216b6d8a1a8dcfd864160361cb70a4e88cc0189ec89c65ae4c894347f0b454ea5976606339624617f118ca02b080088be000000011604070b0100000000000001080022eb0000000320009e04020000000000000500074b0a08006558000000010b7de9404c654211f28bd41f64b267ebbab8090a467b326f8926e5621b5e3e7f31b45db7c2c86064c26de50d35ecf7648c90017679e45e3dd29358ca5575c7b51b226f309382ffb553ae480da48c1115b59b967d24e9200d5cb85d94b28c8a51800dc762a7e1ef182c3306bca95adee31eff6490"], &(0x7f00000020c0)={0x0, 0x3, [0x1c8, 0x620, 0x47, 0xe42]}) r5 = getpid() getpriority(0x0, r5) r6 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r6, &(0x7f000001aa40)=""/102392, 0x18ff8) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r7, 0x201, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x24040000) 1m39.589862092s ago: executing program 1 (id=1145): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r1}) socket$nl_rdma(0x10, 0x3, 0x14) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setpriority(0x0, r2, 0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x34]}, &(0x7f00000000c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000001"]) keyctl$KEYCTL_WATCH_KEY(0x20, r5, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x36, 0x36, 0x0, 0x0, 0x64]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00", 0xfffffffc}, 0x48, 0xfffffffffffffffe) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r6, &(0x7f0000000300)=[{&(0x7f00000023c0)=""/4096, 0x1000}], 0x1, 0xffffffff, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r7) sendmsg$MPTCP_PM_CMD_GET_ADDR(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000800) 1m39.195230088s ago: executing program 32 (id=1145): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r1}) socket$nl_rdma(0x10, 0x3, 0x14) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setpriority(0x0, r2, 0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x34]}, &(0x7f00000000c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000001"]) keyctl$KEYCTL_WATCH_KEY(0x20, r5, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x36, 0x36, 0x0, 0x0, 0x64]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00", 0xfffffffc}, 0x48, 0xfffffffffffffffe) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r6, &(0x7f0000000300)=[{&(0x7f00000023c0)=""/4096, 0x1000}], 0x1, 0xffffffff, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r7) sendmsg$MPTCP_PM_CMD_GET_ADDR(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000800) 17.929068205s ago: executing program 4 (id=1351): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8}, 0x0) r2 = getpgid(0xffffffffffffffff) sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdc, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010001, 0xffffffffffffffff) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x1, @mcast2, 0x200}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x7d, &(0x7f00000002c0)={r7, 0x81}, 0x8) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000100)=@riscv64_v={0x8030000009000017, 0x0}) eventfd2(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x1, 0x0, 0x0) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) read$dsp(r8, &(0x7f0000000280)=""/79, 0x4f) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x640100fc}]}, &(0x7f0000000140)=0x10) 9.87844146s ago: executing program 3 (id=1369): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x1, {0x1, 0xf0}, 0xfe}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 9.815944911s ago: executing program 4 (id=1370): socket$packet(0x11, 0x2, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) fsopen(&(0x7f0000000000)='udf\x00', 0x0) r3 = gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x8000000000000001, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000080) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(r4) 9.717062825s ago: executing program 3 (id=1371): symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00') (async, rerun: 64) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) (rerun: 64) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='gadgetfs\x00', 0x10, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031601002abd7000fedbdf2d0900020073797a3100000000080041007369770014003300626f6e64300040000000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf251e00000008000100", @ANYRES32, @ANYBLOB="080004"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc0686611, &(0x7f0000000180)={0x17, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r4, 0x10, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x24040801) (async) flock(r0, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) (async, rerun: 64) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) (async, rerun: 64) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) (async) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) r6 = getpid() (rerun: 32) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) (async) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r10, 0x0, 0xf3a, 0x0) timer_settime(r8, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 32) 9.57303817s ago: executing program 3 (id=1373): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xbc, &(0x7f0000000500)=""/188, 0x41000, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c9, &(0x7f0000000500)) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) getpid() syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="170000000700"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='O', 0x1, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020011b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) r5 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000000)={0x8000001, 0x0, 0x0, 0x0, 0x4}) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, 0x0) socket$key(0xf, 0x3, 0x2) 8.426780953s ago: executing program 5 (id=1376): writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x2, 0x0, 0x48) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)="02", 0x1}, {&(0x7f0000000200)="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", 0x1000}], 0x2) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) prlimit64(r2, 0xa, &(0x7f0000000100)={0x9a8, 0x407}, &(0x7f0000000140)) 7.671683624s ago: executing program 0 (id=1378): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f00000001c0)={@loopback, @dev}, &(0x7f0000000200)=0xc) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x4, 0x7, 0x48c1, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 7.376528883s ago: executing program 0 (id=1379): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) r4 = syz_open_dev$vbi(&(0x7f0000000780), 0x0, 0x2) ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000300)=0xffffffffffffff86) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$dsp(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x4, 0x0, 0x0) r8 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) setsockopt$ax25_int(r8, 0x101, 0x5, &(0x7f0000000000)=0x20e, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x30, 0x3, 0x8, 0x201, 0x0, 0x0, {0xd50d195639973afc, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048080}, 0x8000) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000014c0)={0x558, 0x25, 0x1, 0x0, 0x0, "", [@nested={0x545, 0x20b1, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @nested={0x165, 0x1fc, 0x0, 0x1, [@generic="aacb078fbe8fcbd3844064688b2b4f72c8b118a6a90ed572e0926e98ff65077497ecdfa2dd0b5be86a30b081592ea9aee28a5b9348e4309e890e00a64b80b2f24c4e21bbf0e68a8e654b69e6ffbeb86cad20e8b308763f888071387b6411d1d7a3daf18fa5b322cf482b526b0a09ec57b041b4725cdc1a60af0c680b1c0876c75d014155cffa2183cb7b0cef3d0fb8771666304bb326ae16138cf54860b3b23ea42b6d60982de3c6ad7bddef702a654f13fff71f05637e0a13e0534ac5ddf248333a135ad7629cff78c318eefec08d0d3b67eb20d03f38eb4ac5ec825788c56d07a5ef39bdbc3913dd175f1b1f1fc98ec55124715319", @generic="fae644f50596f81d9ad9081d397c66b15f5eaf36bc97fc82590eed387df8a1852954f8892f18315574824837ae0ffbd6ee87e5a331e118cfdbd0ea0cb2c9afbcc6c7f301d71f0a16bff8718e908545b6008dd320da4618006dccda8c1c3249c67738b4e6ecd1164f16d2ad"]}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd", @generic="5caea6b5632cbdaeb803efb9c9e1daf5c4b73ad69ccfec1417b90e4f5754149da8393b98f8718558", @nested={0x2c8, 0xab, 0x0, 0x1, [@typed={0x12, 0x9d, 0x0, 0x0, @str='./cgroup/syz0\x00'}, @nested={0x2a5, 0x137, 0x0, 0x1, [@generic="200e2805f3ca3c8e2b3f91ed64d1ba244e8659ccd6ce01b7548da9e915f46d9b50855a", @generic="6079327b8b55c7fefe291392ab10287835ed5676b9e9637642ac8557d5c06a2768f6d95b11dc3969d69bcebcf7a8bbd574a69e71aa072ea8d700f51a8bfdc3e361d99e57a329721e51543712d60dbc8ebf89c787c1556ecb75056870ce21bbd9fb0e60288fb877c1b358a1ee774db04aa4fe1cfdbce1620b0d87b28140487c31d4c5addcb38a58812bfabe8a67d902a72e2596b10bb4738ff3082c", @typed={0x4, 0x6b0}, @generic="7a4c1d2a20023c5203309605826dbe8f4175229108c7471aa43286c0c55950ce53663b77ba475fe7ad7ccd656f1bac79d9cc633765ab52050a1da13195486b60d0c68d57f2", @typed={0x69, 0x79, 0x0, 0x0, @binary="f056f335bef5a8e0bd6fba39177e3db13fc05cfdc330d0cdd0193a38268c06a036f899a91a33fb9485f439f549a3a28d701ae3408f7788da6f2c54bbf816a147f7e9231ccd324f273aceaf801ddf023ddab6bfe6d1e16eb10aac2978aefa04db93d5bbe007"}, @generic="4a5c60886b1b4652c2d2fa849088848efdb2690e04b5dab6ca69c33db7c77d3fe60e3a6974093c270eb3a7ce7e90c272351e2f8efded1b3fdf39008d3592ae6587d24389f8", @nested={0x4, 0x10e}, @generic="a92c2305f8dc6c005f719ae0262cda829425cf2b8f67eb021172d100110d5da13acd658f298bf83722ab3186b6f41b012719df362d5807b253a9fbb9a4e37368e8a583b56c351b8928bee8ce925f83fa1236d7b1160a7649d5aaca3554e5446bf98b56e7fc261998fcca174dccb01b1cbab84339ef5fc1826435db91075f2b3f31c7e8435fa871e3a849a2ffb63b648474a2289196c29b48e1fca834ca3bd8dfd3787cf1962a40997fef68e36752d6824038dd8bae4823c8d77a572696ca5e07ea034a6a8dd0f83726f53905e111e504aaf441c72da79f9065d5e30f8159bac941", @nested={0x4, 0xcd}]}, @typed={0x8, 0x10d, 0x0, 0x0, @pid}]}]}]}, 0x558}], 0x1}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 7.301585772s ago: executing program 5 (id=1380): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000780), 0x0, 0x2) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000300)=0xffffffffffffff86) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$dsp(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x4, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xf0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x30, 0x3, 0x8, 0x201, 0x0, 0x0, {0xd50d195639973afc, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048080}, 0x8000) 6.603996974s ago: executing program 4 (id=1381): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x1, {0x1, 0xf0}, 0xfe}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 6.226905353s ago: executing program 5 (id=1382): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x240}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 6.121130657s ago: executing program 5 (id=1384): ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000000)=""/49) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000040)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000440)={r0, "aaf3fa10554ad4c3bd2a692f0b7d7943"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000001440)=0x4) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001480), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f00000014c0)={'syz1\x00', {0xc, 0x1, 0x3ff}, 0x14, [0x2, 0x200, 0x400, 0xfffffffb, 0x80000000, 0x8, 0xfff, 0x3, 0x8000, 0x0, 0x80000001, 0x4, 0x50000000, 0x247c, 0x5c37, 0x7, 0xf4f, 0x4, 0x6, 0x7fffffff, 0x7f, 0xfffffffb, 0x5, 0x9, 0x80000001, 0x9, 0x9, 0x3ff, 0xa67e, 0x2, 0x3, 0xd4e0, 0x7, 0x4, 0xffff, 0x3, 0x1, 0x20ec, 0x9, 0x3, 0x3, 0x7ff, 0x7f, 0x7ae, 0x10761539, 0x5, 0x7, 0x8, 0x3, 0x0, 0x40, 0x1, 0x3, 0x4993, 0x2, 0xd, 0x3, 0xfffffffd, 0x2, 0x0, 0x4, 0x2, 0x4, 0x1], [0x473, 0x9, 0x2e, 0x1, 0x30, 0x80000001, 0x5, 0x5, 0xf, 0x3, 0x0, 0x3, 0x1e, 0x3, 0x4, 0xb4, 0xe, 0x3ff, 0x800, 0x3, 0xffffffb3, 0x6, 0x100, 0x1000, 0x8, 0x1ad98ee0, 0x6, 0x5, 0x8, 0xffffff3c, 0x4, 0xfffffff8, 0x6, 0x0, 0x0, 0x7, 0xb8a3, 0x40, 0x2, 0x1, 0xfffffffa, 0x1af3, 0x4, 0x4, 0x81, 0x3, 0x3ae, 0x56, 0x7, 0x1, 0x2, 0x700000, 0xd7b, 0x4, 0xfffff6b5, 0x0, 0x80000001, 0xd1, 0x3, 0x1, 0x4, 0x7, 0x10001, 0x1], [0x1, 0x8, 0xb, 0x3, 0x10, 0x3, 0x98, 0x4, 0xc30c, 0x8, 0x2, 0x5, 0x5, 0xfa, 0x1, 0x6, 0xf630, 0x8fcf, 0x5, 0x5, 0x2, 0x8a8, 0xf2fa, 0x8, 0x9, 0x1, 0x7, 0x1, 0x3, 0xaa7, 0x8, 0x9, 0xffff, 0x4, 0x6, 0x818, 0x7ff, 0x9e8b, 0x7, 0x400, 0x4, 0x10, 0x80000000, 0x6, 0x0, 0x8, 0x4, 0xde1e, 0x9, 0x2, 0xff, 0xfffffff0, 0x1, 0x6, 0x2, 0x7ac9, 0x7, 0x74cb57ce, 0x5, 0x5, 0x4, 0x2, 0x5, 0x4], [0x9, 0x8, 0xffffb2dd, 0x2acb, 0xc9, 0x400, 0xc00, 0x2, 0x7f, 0x6, 0xfffffc01, 0x8, 0xfffffffc, 0x5, 0x8000, 0x10001, 0x8e, 0x4, 0xffffffe4, 0x4, 0xff, 0x9, 0x1, 0x200000, 0x6, 0xcd, 0x4, 0x7, 0x4, 0x7, 0x325d, 0xa6, 0x3ff, 0xa10b, 0x1763, 0x3, 0x4, 0x5, 0x3, 0x6, 0x0, 0x400, 0x1, 0x3, 0x3ff, 0x9, 0x2, 0x8, 0x5, 0x6, 0x4, 0x5, 0x9, 0x7, 0x80000000, 0x8001, 0x200000, 0xfffff42b, 0x8000, 0x0, 0x1, 0x0, 0x90, 0x1d2]}, 0x45c) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r1, 0xc040583f, &(0x7f00000019c0)={{@align=0x9, {0x1, 0x9, 0x3, 0x3}}, {{[0x5, 0x0, 0x2, 0x3]}, 0x0, 0x7, 0x0, 0x0, &(0x7f0000001940)=[{{@_ha_fsid={[0x6e9d, 0x9]}, {0x401, 0x7ff, 0x7fffffff, 0x6}}, 0x5751, 0x0, '%%.{\'}\x00'}, {{@_ha_fsid={[0x800, 0xfffffffe]}, {0x3, 0x7, 0xcdb2}}, 0x2a1b, 0x0, '(\x00'}]}}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001a00), 0x40000, 0x0) r4 = openat2(r3, &(0x7f0000001a40)='./file0\x00', &(0x7f0000001a80)={0x440c0, 0x111, 0x9}, 0x18) write$khugepaged_scan(r3, &(0x7f0000001ac0), 0x8) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000001b00)='./file0\x00', 0x200800, 0x8c) file_getattr(r5, &(0x7f0000001b40)='./file0\x00', &(0x7f0000001b80), 0x18, 0x100) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001c40)={'ip_vti0\x00', &(0x7f0000001bc0)={'erspan0\x00', 0x0, 0x20, 0x7, 0x6781, 0x3, {{0xc, 0x4, 0x2, 0x9, 0x30, 0x65, 0x0, 0x9, 0x2f, 0x0, @multicast1, @broadcast, {[@timestamp_addr={0x44, 0x1c, 0xa, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0xff}, 0x5}, {@empty, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc85}]}]}}}}}) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000001c80)={{{@in=@local, @in6=@mcast1, 0x4e22, 0x6, 0x4e20, 0x7ff, 0x2, 0x80, 0x80, 0x6, r7, 0xffffffffffffffff}, {0x3, 0x3, 0x7ff, 0xe4ca, 0x6, 0x6, 0x6, 0x7fffffffffffffff}, {0x0, 0x3ff, 0x338d, 0x41c}, 0x7, 0x6e6bb6, 0x0, 0x0, 0x0, 0x1}, {{@in=@local, 0x4d5, 0x5f}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3502, 0x0, 0x3, 0xfd, 0x3, 0x4, 0x5}}, 0xe8) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) ioctl$EXT4_IOC_GETFSUUID(r4, 0x8008662c, &(0x7f0000001d80)) write$uinput_user_dev(r3, &(0x7f0000001dc0)={'syz1\x00', {0x7, 0x8, 0x2, 0x5}, 0x39, [0x7f, 0x7, 0x3ff, 0x4, 0xffffc73c, 0x4, 0x0, 0x800, 0x3ff, 0x1, 0x6, 0x10, 0x5, 0x4, 0xfffffffc, 0x6, 0x4, 0x10001, 0x5, 0x55b9, 0x1, 0x6d7, 0xe, 0x6, 0x8, 0x0, 0x8e1, 0x6, 0x49f, 0x0, 0xb, 0x8c, 0xa, 0x9, 0x4, 0x10, 0xfff, 0xfffffff2, 0x6, 0x2, 0x10, 0x4, 0x73, 0xffff8001, 0x71b, 0x6, 0x5ded, 0xf, 0x3, 0x2, 0x2, 0x7f, 0x40, 0x80, 0x1, 0x0, 0x9, 0x3ff, 0x3, 0xffffff31, 0x1000, 0x1fffc, 0x7, 0x6], [0x3000, 0xc2, 0xff, 0x0, 0x8, 0x9, 0x909b, 0x8, 0xfff, 0x10000, 0x7, 0x3, 0xe49, 0x3, 0x5, 0x9, 0x3, 0xff, 0x3, 0x9, 0x0, 0x80000000, 0x2, 0x0, 0x5, 0x100, 0x1, 0x4, 0x6, 0xfffffff9, 0xff, 0x800, 0xc, 0x7, 0x7, 0x7, 0xffffff26, 0x2d0d, 0x7, 0xb, 0x2, 0x8e8, 0x3, 0x401, 0x0, 0x0, 0xfffffff9, 0x38c6, 0x6307, 0x401, 0x80000000, 0xaf8, 0xfffffff9, 0x9, 0x2, 0x1ff, 0x7f, 0x80000000, 0x7, 0x5, 0x401, 0x4, 0x2, 0x10], [0x1ff, 0x0, 0x1, 0x9, 0x3, 0x0, 0xa6, 0xfffffff9, 0x7ff, 0x2, 0x28000, 0x4, 0x8, 0x9, 0x7fffffff, 0xfb, 0xb31, 0x6, 0x5, 0x416, 0x5, 0x9, 0x3, 0x1, 0x3, 0x6, 0x7, 0x10001, 0x4, 0x7, 0x0, 0xfffffffb, 0x29, 0x8, 0x6, 0xb, 0x6, 0x2, 0x9853, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x200, 0x1000, 0x53, 0x1, 0x10, 0x9, 0x4, 0xfffffff7, 0xfffff800, 0x9, 0x1ff, 0x0, 0x2, 0x8, 0x1, 0x5, 0xfffffff9, 0xc7], [0x3ff, 0x8, 0x0, 0x7, 0x8, 0x1, 0x1, 0x7, 0x10, 0x7f00, 0x8, 0xd92, 0x7, 0x3, 0x8, 0x24, 0x78b, 0xffff, 0x6, 0x1, 0x7fff, 0x1, 0x3cc3, 0x4, 0x81, 0x1be2, 0x800, 0x3, 0x3, 0x1, 0xa, 0x9, 0x8, 0x13, 0x5, 0x7ff, 0x4, 0x9, 0x8, 0x287, 0xd, 0xd, 0x80000000, 0x6, 0x800, 0x10, 0x0, 0x8ab, 0x100, 0x6, 0x8, 0x81, 0x0, 0x100, 0x3ff, 0x5, 0x1, 0xdd3, 0xffffffff, 0x0, 0x0, 0x2, 0x800, 0x8]}, 0x45c) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000002280), r3) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000002380)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002340)={&(0x7f00000022c0)={0x78, r8, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pim6reg\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'netdevsim0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip_vti0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x78}}, 0x40000) close_range(r2, r3, 0x0) syz_emit_vhci(&(0x7f00000023c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x20}, @l2cap_cid_le_signaling={{0x1c}, @l2cap_ecred_reconf_req={{0x19, 0x9, 0x18}, {0x5fdc, 0x4, [0x57e3, 0x7f, 0x8, 0x6, 0x0, 0xddf0, 0x446a, 0x8, 0xe, 0x5]}}}}, 0x25) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002400)='./file0\x00', 0x3) request_key(&(0x7f0000002440)='cifs.idmap\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='$]{{\x00', 0xfffffffffffffff8) ioctl$XFS_IOC_INUMBERS(r1, 0x80405880, &(0x7f0000002500)={{0x0, 0x3, 0xc0000000, 0x8001, 0xf}, [{0x4, 0x3, 0x8, 0x9}]}) sched_setattr(0x0, &(0x7f0000002580)={0x38, 0x0, 0x0, 0xb1, 0x98, 0x6, 0x10000, 0x9, 0x735, 0x2}, 0x0) 5.711673821s ago: executing program 0 (id=1385): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getresgid(0x0, 0x0, &(0x7f00000016c0)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000380), 0x4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="7402616e733d66642c7266646e6f3d", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00']) sendmmsg$unix(r2, &(0x7f0000002a00)=[{{&(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002780)=[{&(0x7f0000001700)="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", 0x1000}, {&(0x7f0000002700)="45076feaf046f386a26f631dc26e52dc078421052adabe66097d886c116431a7608f83c43a8cab164027ced1622bb4701aabd9efd0a41f1a33e0cb7925f46bdad5af73a035e6b2ffe9ae5867cb43558c4df68ea04c3d4050f64189d39a5d4dea99f31b16620a0dca02f21078ad99db44430625320da82bd98931d9", 0x7b}], 0x2, &(0x7f00000029c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r0}}}, @cred={{0x1c}}], 0x40, 0x8880}}], 0x1, 0x10) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'caif0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) 5.710763311s ago: executing program 3 (id=1386): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000100), &(0x7f0000000140)=0x4) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000400620180100000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0}, 0x0) syz_usb_connect$cdc_ecm(0x5, 0xe1, 0x0, 0x0) 5.657148403s ago: executing program 5 (id=1387): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800155fad330000000000000000000f0000000000000000"], &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x4, &(0x7f0000000040)=[{0x2, 0x0, 0x7f, 0x7}, {0x3, 0xd5, 0x80, 0x2}, {0x3, 0x3, 0x4, 0x84}, {0x2, 0x8, 0x1a, 0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/comedi3\x00', 0x10600, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)="e43006ea3eb060409f11616b0ff107c8b5c84a2513725dd800704d068c0a1d6565ec464eaa", 0x0, 0x3}, 0x38) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000580)=ANY=[@ANYRES8=0x0, @ANYRES32=0x0, @ANYRESHEX], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020103000000000000000000030000000823535c250a4ee7cf0002802c0001801c0003000000000000000000000000000000000014000400ff010000000000000000000000000001"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4}) ioctl(r5, 0x8b1a, &(0x7f0000000040)) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x8, 0xfff3}, {}, {0xf, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @rand_addr=0x64010102}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000400)=0x10212, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) socket$inet6_sctp(0xa, 0x1, 0x84) 5.59338128s ago: executing program 4 (id=1388): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8}, 0x0) r2 = getpgid(0xffffffffffffffff) sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdc, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010001, 0xffffffffffffffff) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x1, @mcast2, 0x200}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x7d, &(0x7f00000002c0)={r7, 0x81}, 0x8) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000100)=@riscv64_v={0x8030000009000017, 0x0}) eventfd2(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000000)=0x7) read$dsp(0xffffffffffffffff, &(0x7f0000000280)=""/79, 0x4f) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x640100fc}]}, &(0x7f0000000140)=0x10) 5.486256597s ago: executing program 2 (id=1389): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f00000001c0)={@loopback, @dev}, &(0x7f0000000200)=0xc) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 5.181353021s ago: executing program 2 (id=1390): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012800b00010065727370616e000018000280080010000000000005001600fe000000040012"], 0x48}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x25, &(0x7f0000000040)={0x0, 0x0, 0x1a}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8002, 0xc, 0xb, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r3) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x2, 0x0, 0xc6}) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r4, &(0x7f0000000a40)=ANY=[@ANYRES32, @ANYRES16], 0x2c2) r5 = socket$netlink(0x10, 0x3, 0xc) setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f0000000200)=0x400, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_ENDIAN(0x13, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000020c0)='net/rt_cache\x00') sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000020105000000000000000000f9ffff07"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0xc0) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) listen(r9, 0x9) r10 = syz_create_resource$binfmt(&(0x7f0000000140)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r10, 0x41, 0x1ff) 4.994123956s ago: executing program 2 (id=1391): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x3c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x8}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x7}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x1}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0xfffffffc}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x4065}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x40}]}}]}, 0x6c}}, 0x0) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x3}, 0x26}) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$pokeuser(0x6, r6, 0x388, 0xd) ptrace$pokeuser(0x6, r6, 0x358, 0xfffffffffffffff8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = syz_open_dev$usbmon(&(0x7f0000000000), 0x7fffffff, 0x42000) ioctl$MON_IOCX_GET(r7, 0x40189206, &(0x7f0000000280)={&(0x7f0000000180), 0x0}) timer_create(0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 3.421695458s ago: executing program 2 (id=1392): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000780), 0x0, 0x2) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000000300)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$dsp(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x4, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xf0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x30, 0x3, 0x8, 0x201, 0x0, 0x0, {0xd50d195639973afc, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048080}, 0x8000) 2.544816498s ago: executing program 3 (id=1393): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500004400000000002190337bf58400ffffffff050090780a0101026a0000000000000000000000ac1e0001ac14140107be00e0000002000000"], 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000001c0)=@req3={0x1, 0x3, 0x47, 0x100, 0x1, 0x3, 0x5}, 0x1c) r8 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r8, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) socket(0x200000000000011, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000080)={0x204801600, &(0x7f00000001c0), 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r9}}, 0x58) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x30, 0x10, 0x300, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x6}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x40008a0) r10 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 2.470535813s ago: executing program 2 (id=1394): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x240}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 2.461554425s ago: executing program 4 (id=1395): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) r4 = syz_open_dev$vbi(&(0x7f0000000780), 0x0, 0x2) ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000300)=0xffffffffffffff86) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$dsp(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x4, 0x0, 0x0) r8 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) setsockopt$ax25_int(r8, 0x101, 0x5, &(0x7f0000000000)=0x20e, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x30, 0x3, 0x8, 0x201, 0x0, 0x0, {0xd50d195639973afc, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048080}, 0x8000) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000014c0)={0x558, 0x25, 0x1, 0x0, 0x0, "", [@nested={0x545, 0x20b1, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @nested={0x165, 0x1fc, 0x0, 0x1, [@generic="aacb078fbe8fcbd3844064688b2b4f72c8b118a6a90ed572e0926e98ff65077497ecdfa2dd0b5be86a30b081592ea9aee28a5b9348e4309e890e00a64b80b2f24c4e21bbf0e68a8e654b69e6ffbeb86cad20e8b308763f888071387b6411d1d7a3daf18fa5b322cf482b526b0a09ec57b041b4725cdc1a60af0c680b1c0876c75d014155cffa2183cb7b0cef3d0fb8771666304bb326ae16138cf54860b3b23ea42b6d60982de3c6ad7bddef702a654f13fff71f05637e0a13e0534ac5ddf248333a135ad7629cff78c318eefec08d0d3b67eb20d03f38eb4ac5ec825788c56d07a5ef39bdbc3913dd175f1b1f1fc98ec55124715319", @generic="fae644f50596f81d9ad9081d397c66b15f5eaf36bc97fc82590eed387df8a1852954f8892f18315574824837ae0ffbd6ee87e5a331e118cfdbd0ea0cb2c9afbcc6c7f301d71f0a16bff8718e908545b6008dd320da4618006dccda8c1c3249c67738b4e6ecd1164f16d2ad"]}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd", @generic="5caea6b5632cbdaeb803efb9c9e1daf5c4b73ad69ccfec1417b90e4f5754149da8393b98f8718558", @nested={0x2c8, 0xab, 0x0, 0x1, [@typed={0x12, 0x9d, 0x0, 0x0, @str='./cgroup/syz0\x00'}, @nested={0x2a5, 0x137, 0x0, 0x1, [@generic="200e2805f3ca3c8e2b3f91ed64d1ba244e8659ccd6ce01b7548da9e915f46d9b50855a", @generic="6079327b8b55c7fefe291392ab10287835ed5676b9e9637642ac8557d5c06a2768f6d95b11dc3969d69bcebcf7a8bbd574a69e71aa072ea8d700f51a8bfdc3e361d99e57a329721e51543712d60dbc8ebf89c787c1556ecb75056870ce21bbd9fb0e60288fb877c1b358a1ee774db04aa4fe1cfdbce1620b0d87b28140487c31d4c5addcb38a58812bfabe8a67d902a72e2596b10bb4738ff3082c", @typed={0x4, 0x6b0}, @generic="7a4c1d2a20023c5203309605826dbe8f4175229108c7471aa43286c0c55950ce53663b77ba475fe7ad7ccd656f1bac79d9cc633765ab52050a1da13195486b60d0c68d57f2", @typed={0x69, 0x79, 0x0, 0x0, @binary="f056f335bef5a8e0bd6fba39177e3db13fc05cfdc330d0cdd0193a38268c06a036f899a91a33fb9485f439f549a3a28d701ae3408f7788da6f2c54bbf816a147f7e9231ccd324f273aceaf801ddf023ddab6bfe6d1e16eb10aac2978aefa04db93d5bbe007"}, @generic="4a5c60886b1b4652c2d2fa849088848efdb2690e04b5dab6ca69c33db7c77d3fe60e3a6974093c270eb3a7ce7e90c272351e2f8efded1b3fdf39008d3592ae6587d24389f8", @nested={0x4, 0x10e}, @generic="a92c2305f8dc6c005f719ae0262cda829425cf2b8f67eb021172d100110d5da13acd658f298bf83722ab3186b6f41b012719df362d5807b253a9fbb9a4e37368e8a583b56c351b8928bee8ce925f83fa1236d7b1160a7649d5aaca3554e5446bf98b56e7fc261998fcca174dccb01b1cbab84339ef5fc1826435db91075f2b3f31c7e8435fa871e3a849a2ffb63b648474a2289196c29b48e1fca834ca3bd8dfd3787cf1962a40997fef68e36752d6824038dd8bae4823c8d77a572696ca5e07ea034a6a8dd0f83726f53905e111e504aaf441c72da79f9065d5e30f8159bac941", @nested={0x4, 0xcd}]}, @typed={0x8, 0x10d, 0x0, 0x0, @pid}]}]}]}, 0x558}], 0x1}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 2.331601572s ago: executing program 2 (id=1396): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000380)={0x60, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}, {}]}}) timerfd_create(0x8, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000fef000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x647, &(0x7f0000000040)={0x0, 0x188d, 0xc000, 0x20000a, 0x35}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0\x00'}) socket$nl_route(0x10, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ef62c0000040000010902"], 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000980)={[0x4001ffffffffd]}, 0x8, 0x0) syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100, 0x2, 0x24, 0x0, r4}, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0/..\x00', 0x22a040, 0x121) socket$rds(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f00004d4000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000890000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x2, 0xc0}) 2.14091056s ago: executing program 0 (id=1397): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3c}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x4, 0x10cba, 0x1, {0x6, @sliced={0x7072, [0x5, 0x2, 0x5, 0xe93, 0xa5ee, 0x4cd, 0x6, 0x7, 0x7, 0x3, 0xc, 0x57, 0x42d1, 0x6, 0x5, 0x101, 0x2d, 0xfffd, 0x5, 0x3e7, 0x7, 0xffff, 0x6, 0x0, 0x1, 0x5, 0x7, 0x2, 0x32, 0xffff, 0x9a, 0xff, 0x3, 0xff5a, 0x9, 0x9, 0x4, 0x1f, 0x5, 0x5, 0xf, 0x8, 0xfa3e, 0xebf4, 0x7, 0x0, 0xce, 0xfff], 0xa}}, 0x40004}) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000480)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002e000000180100003f786c2500000000002020207a1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendto(r0, &(0x7f0000000000)="6f6e0239b1b2d920cc6edcd1498d4c7d21d2ad1bfbb070d9ca9412650ed8d94124ef", 0x22, 0x2000c841, &(0x7f0000000040)=@in6={0xa, 0x4e21, 0x80000001, @private1, 0x8000}, 0x80) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000000008010100000000000000000500000a0900010073797a310000000004000480050003003a00000006000240f108000043088bd27d5b"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4004) 1.17175227s ago: executing program 0 (id=1398): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x1, {0x1, 0xf0}, 0xfe}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 432.096765ms ago: executing program 3 (id=1399): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d0, 0x1f8, 0x111, 0x4b4, 0x0, 0x700, 0x300, 0x278, 0x278, 0x300, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast1, @empty, [0x0, 0x0, 0x0, 0xff0000ff], [0x1fffffffe, 0x0, 0xffffff00, 0xff], 'vlan1\x00', 'veth0_vlan\x00', {}, {0xff}, 0x6}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@socket1={{0x28}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@local, [0xff, 0x0, 0xffffffff, 0xffffff00], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xff, 0xff, 0xffffffff, 0xff000000], @ipv6=@empty, [0xff, 0xff, 0xff0000ff], @ipv4=@dev={0xac, 0x14, 0x14, 0x2a}, [0xffffff00, 0xff000000, 0xff], 0xfffffe00, 0xe, 0x89, 0x9, 0x4e24, 0x4e21, 0x4e24, 0x100, 0x82}, 0x141, 0x200}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, [], [], 'macvlan1\x00', 'erspan0\x00', {}, {}, 0x33}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x67, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) syz_emit_ethernet(0x2e, &(0x7f0000000040)={@multicast, @empty, @val={@val={0x88a8, 0x7, 0x1, 0x2}, {0x8100, 0x4, 0x1, 0x4}}, {@generic={0x18, "42ec0741366f0e85f7602533fbedac16dd7ade389224cb01"}}}, 0x0) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f0000000400)={0xf, &(0x7f0000000200)=[{0x22, '\x00', @st={0x4, [{0x3, @uvalue=0x1}, {0x2, @svalue=0x401}, {0x2, @uvalue=0x8}, {0x1, @svalue=0x1}]}, 0x3}]}) (async) ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f0000000400)={0xf, &(0x7f0000000200)=[{0x22, '\x00', @st={0x4, [{0x3, @uvalue=0x1}, {0x2, @svalue=0x401}, {0x2, @uvalue=0x8}, {0x1, @svalue=0x1}]}, 0x3}]}) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) (async) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r2 = syz_open_dev$sndpcmc(&(0x7f0000000100), 0x8, 0x40601) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r2, 0x40044104, &(0x7f00000000c0)=0xee6e) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat(0xffffffffffffffff, 0x0, 0xc00080, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) getrlimit(0xf, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) (async) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) fsmount(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x10, 0x80002, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = getpid() r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x6, 0x101, 0x100}}) (async) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x6, 0x101, 0x100}}) sched_getaffinity(r6, 0x8, &(0x7f0000000200)) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="230000001000010000000000000000000500000a9c000000060a010400000000000000000a00000109000173797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2e00b9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000040000000000e00010049444c4554494d45520000000900020073797a32001ab47bf24eff8d64f64c6cc632ebeb04fdce283f4b1bfd8274ba2291ec975b0b", @ANYRESOCT=r3, @ANYRES32=r2, @ANYBLOB], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008090) recvmmsg$unix(r4, &(0x7f0000002380), 0x0, 0x26022, 0x0) (async) recvmmsg$unix(r4, &(0x7f0000002380), 0x0, 0x26022, 0x0) socket$alg(0x26, 0x5, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) 417.136913ms ago: executing program 4 (id=1400): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x40020000000002) r1 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000040)={0x0, 0x7ff, 0x41, 0x0, 0x1}) close(0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000040)={0xfffffffb, 0x80, 0x1, 'queue1\x00', 0x85}) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000002c80)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESHEX=r3, @ANYRESDEC=0x0]) mknodat$loop(r3, &(0x7f0000000340)='./file0\x00', 0x6000, 0x1) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r6, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x24ff871999b0dbe7, 0xdcf, 0x4005, 0xb, 0x800, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f00000042c0)="0d9ec529eb18ec94a35378619cb10ff8c913f67139447b7ee0cca809e36c363ba1d3975a7446b70c6bdd99e2cff540eda7589ea89efeb498df568916036f0848ede5f089bf502b483c67c0432c34b98b1bc085a99e2981103397e0b0eed2ec64c1075798b56a42ea532091f5326c97622a47c53fbf42e71c3ed4b954c559424b49a13598c6c63ef65b62384b038b3e6e98ebecd178289831eaecd986a01c751e8cca7a57c009f2b5310fe9dd8a63b91c4b5b13d1c44d2b874b32ae3e961b9e96a511ffaa3ed20248dfb470460d305e44ffcd287b355380319fd31f7538c6d00de06ddb8f72b3a59c4699c94d7379e1e190c6dd7786e12096f9e963a038b6b4375535047135ecc07b16035ceeb27ed09d77f52b6eae27a03071e060b05bf347b9ba44a984e5db346d230ae9c5324ecfd4e7725bc5019a9f4d20237c820359d73b82f9c668ae71f6b85d5350140a16f988bb2b8010effb52636e0b728be1b1ed37c1b8868ec67edd52951dbf65b479aa25e92667a98c755d88995e6303a48a64317bd4b201fc6dea59381abfb5e0fb1035bbd32a97a6324b08f404fe3991879a0c6362032864031737941d9cc534697da61a43c8723ecd1062906b65c504d86383cdf9631f228372b13aee64f8ea8db00dffc37fa092ab5daeb7431dab37091c44f91c9202df60876a6e06ceee3e6a095406fe5cc1f83de1a4adf36fbef5a94a622132cc85e56fb53a9cff67bc69a24d8c259ccfe19b1925061f0cad95d6b4158c1394b8acfa9a8f52a566c6cb4e0b14dd30c85b309289a5f395e01d981735f6fce6ab30994643d70b2f322b7a233a339e621ea2eb00a0082a175c231b330a58062680546c28db8ff5b7e66c0e3df0a9b74ab72abfd241fcbe1e3d27a2d1eab44cf88180dcef4482c866324133f9e4780b891a7c5000b005cab0c131c225e944fd1aab5de9e8d17b8770b4472b6e4a13b6cce90ba152e5144acf74cd8a9821ce3eae72dc7ddc81b76482226098329c3a8ecb923822610aa0b086f44329522dd8f9ae355b4666d1a10911ef8e21377578b42fe6ee0b2a77917157488d6e0bb388951f80551dcaebf212b396d1f922aec595bd340390d310f6006c4b3efdd80838f39d25470db39d6205ba8f52bac634f8145a3c10ed007acc2f25c5dbfe911f18f44a0c57cee33725eb8c5f2d9112f91787c2c323b67b67d9d1f593d26430d77189d4678fd8d7c11c1f2d744ad59a03a8cffc52ee0293c90b00d61897c80184aa63fcf43c109b06af20c808035af0a0bf9cbe544681768f92a2ebe3b4458dd020fb0550822bc2f769631e00d63bd91e7100299bbc4ce53a35e993e24028dc5c81d46f5377d21f2f38a9688ed981044346b865161b68f3390a50c2e625052396cdb6637e9434904c63d8ca45aa2325626293cdd9cd0179b1d995be10281fa8d281db16320f520e42af268ff30dc2d8885aa3d9e7f294eadb4d827d195cd5d18632928f2153261345c231efd143288b881638b61dc5dab8114c1948d83b8ac4e278f131ec3eef4e87e43a36f4b41a699a741ef3a7cd4f0bc5dbd2dffb1d223a5c5b38b98e49092631a176d15c4f3c077d639726a3482bf2fdc73c2bdb09208aaf90bc64b5fee89d231bb1679de3e5d31662db2c5824ce9941f94500e5a11b8fe79da548efed8cc44e9bc1d5175dd77fc16f8219a83b83ccca2181bf411b0945312598817e08e5277530eccffff17d198613cc8c991349141ced56e79031ab6cb98f3f39e5f20bac76017083041a1ee99ca257d0e0cf95e59617139afb08cf0c6a607d3f2ac2b5d3f4394a4a063c9769bb884ec522d46138228c7e9b5c7ea5e3a6c70815b565ce15a13fd0a5deb28e710c15fe25c744b430b4f6482532fb96566381c56e12632cab5acb5e08d6f973003c96a7d81ff76966e0f93c83c462bfcef230939e48c4983bfed78f68b0f540d1fff2196cbd1f1c1a1c310ec10f5a2745407000bc6db1fcc8540282cc7e96cf5582c4eaf874a2fe6369534176429b7505eb0aade883260806be2d86a42e76b315a76e5f686ca669f49e1f9054a77b8eaff14a43e9a9801244e8e94ff50a17b60dee0122ea70819bae3375070466c7f202c4ea0fc0c9aaae50c43cb65febea224c2b554e937f67689b3e18ed543749a7ef0997a7a7530b918c4ef935137137e1ee7e6a8919fb76a8f008ddcc2d8b2e18f3eb90f7a13cf4f49170ccf50c75de82e92a5e2d1f311e59071ff202b6cae4d6243fc3787cb9fbd401938cc18dcf5620f8b8f74e9e3b13dcde85ef896f31f5a2458118addae77206ab1506882f91873b4828950a7b91ddae74888155a9c486c7c60492813ac0e33362dc4e21e00538e5b05b78271d82486a0d156d4a5a07085bb1cd74f5d63763f18648a489352b5d05107909fe54b5d332cde2900c82c150b11071e028eeb275cc9a9614f1eda4e4830b128870e732d473100c24152aff2aa1659daa65d7e9591ebfcae5dca4e84c9a0965a01668e59843ef4a093d9b01067a0ae9d09e3d810c2cb63600ee05b10fc8685e8cb150e2d6d75baecfb8762f7a7d131417eb0721e19e1d21f5adcc1e09489f06b81d91b48608107fc7b3853e214a3c786a9812113ccbcf09907506d0e9cd72c79793584b4fe06a18a627bd969f628a5936367961f1e7d117d03a8fabc85f5ecdd0ddcfae49aa293893a2e5ae376be11031abc0e05ff250b35926345b52f8d3dc02b7497f7513e759247353db9b8e493120e73981aef4c4d9747621537a089848754c14cda1cad18084274e98ea2bf7400ca846184e0e31a571f9bd770222b1038a4ce60dcf8fe9cca4d60048cc29c37c1345de992e9dc7128ef093c1ce80232a88a3da7ae8bc87120c5b1f405d5186141288998fed9e021cd0ad6b12b51c217849390be3ea00cbd6c755958140bfb9b2a2765ad1f51ac045fdc5c28ee5886b1436015b88bd90d19328f91394110b0d891678e63b63d6cc4d35279f6f616d7692c6fe177a79d80ae8f7e4ad5078d8d7096f3ee664dcdb2f634eba98f4788de1f5e34f32ef09e2f0aee4fdc5bec4bc4aeec5721ac3a2da1bf52da017c3312095403d50dcde39671242b610f11832773796557f71455376a7741ab242a9fc94464180bf224d5e8c79b462e3a816f6c08ab0f5503386d34ddfd808b4b8d5d333548d4b873923c6c297b2fa1abe433ec9264385c50dca40316c37ed85db382e7c853ba331c727043cb3345de9f89b1c804e98205eda3d6b6e042c9c41877d456dcb8f12663e6dc1ba809229536fbcc4c58d01a137eb80af8596dfc7b5fa7a044cd141238aa82e440526e55a28c4ed2f4b26157a0eebb4a77c5ab66fcce2602e1a70aea07e5e7e7e5321d58ad128a5ea6b574730037f24a7300e0ad6fc96bd18e03763bbbf21bd3c388aff1cc5ea13728ba2f8e1eb70148d2603e55bb01cce0763c2020b5627a0ccb35ae3a9b3df380e6d9800d9506219a90971a3b8bde1dae6a43fce2aaecbc026be8f4e9bd749e10c87ed7d78f92014342fa449eef28e7175548e5a8ec4fe7d31fc86737aee63ef40b54485380b6898161676f0d82f76113b12a529fbce4482dd278a90aa416077c677aea623ddb3761bc81527ab7e3d73a3b4c8c3e4352c7c083cee8953ebd972a83caed837587e8d7cf360f28ce6ca71de75c9174e8744ba1098513bb6c7fdc6a3c7c8e5870223d6cc0b18b5d6edea926d5376aeb85488d3712e8f67128f0d3fb2b42f82363a0d4c1c806ff283f6e4ddc10ce4a0803be66a247207d6606c7dd67cd293dada159016d7fd7e88c4df53d09bdd9fd9fa3c732da45fb92bdf6f442eda15edd97bf1928a7699008f0b482240a684ff5efef0cadbf1b4f16888650d59b2bdaeae0d1112a79c5522dd0933ccc16fed7cd0ccabe929f625de8947b3b1532dc04253cca988a1584df2b31492b19410d6f681d614eaa20029592c00c948a98973a9fba87f1397f8859ba543edeb5c0b0db92f65462a1103947d780b539433332d65bd1418bc00c9e815f73e0cc0aca5fcc9f95f707c455013a55a0c4a29093b05b94edc5b5284ec7ccf3ec091002b4229036c174e2927127f40769ece890612bbeb960d9392f442765a2ca8990c52ad7d4441e975a7cf079d139945f2b2a8a34f0e85d76cbc96efbb52cf8b5ae681234e14b6648244d41cfee2d9b189cd831cc2f31ae7e5f11aaaff1629f8c2cf73494ac38e58da7010dd986f8b6134ee0dabfdcb30617d15720cffbec7651f22253aea21696d2ece4fe026543ea2f3473e4c12e65dbb3cbf764ffa0b3a396382b9b7f0c24eaaf3495554b2319b66f3cabf01a8d6cfd1382d94ab71cd11eae2a42e4dc841d4a9732c395688d3377c8ccff7e3f88a3129855a5f41a7de6b6a9ac40a87c288f4821295edfc4f5b8fe5a1fc0162e9820205c809935cc6047e8a835c651be02fb41c21de30ac770d7a7f2108c6a3f1cf2649cac444f028a6ebf4db422cbbdb7fd0cb39109a3130ffae17810bb58f5c557c99670224c2678fa07f1064911e6c665c0d1c26cd2f40f7089789208a48eb339bb8885910e035b4b8c69b1c3ad79270ac6e70b963493a6628b90501822878cdfac866268d914d8af2814612b0198f9e4c6b48e739e414d61f34e2f69ff7cdc4fc7ffe45a64c5faf191ef6c4e31cecebe09a2f6a63d60926ebaa7e925ccea5c93e403c7ec0ee55423ce4893471440006d4c09c141e489dda5577f73b57ecfc764ee5bc1bc88f7866dc6a494e3ee560c956dc12ae51842030251f1cedf2caca15549d0bb4ee3bef03702197350cd7586b5916ef6a0abcb5f30548d22ce5d8c4dbd82030b8d7b5481c51676b7d14d35c20346c74dcc7d96ea0b13f890f755a219993e88739da8246283ebbd82eb1b15956b5ec16ad523768c19ceba9199f97d7bb43b85fa11349ff7fb89a97b463b34c584ae9e2af6c8f20ab528750a22ff6c2297e400065fbd9a4660ec2c658afff6db9b67070352d2aa5e6cfe534eeb5ff271575b828dfd7f537e3627a1a6419ed0c84297fc3d362a52f3860a2eb7ae0a50f06d3c68c4a1463ec331ead7af2dba792332218b04d5b585de1a471d296df6e10316852d50f211e07643f749a1d75410e66e47db40bfcefe4b708d0b2879a50ccbd85939b89fe4b905a6a89a2d5a4e28d18c048e66108a06d8b6a64ec5737b5ae283d914484167c8ac7dde7ec007aad1999854c4d6a0e5f887f99de3662610d5e8d49bac7d41d6fb7d90b4b04939638e2151ba67e75362aded50edfb7d9919b345b5b7df6a909193ce64b20470e3480c68bd764968f4d8a5779ffd9a35e58558272a214ae26a094360b9f2ec97c5e0a7693f4b7509b962cd8537e90ce7be70b54e9531e7295f894b94566df49c50c2265842392dff50e17ed3f7beb9ba4ad0520a73db1d8d3b39759e7fffcbf26517316bc74437fef944fc915ec24affc1a53748cfc883e3ddea9e25063ea8383b06f0d5c9db13a0ff335f52699226b391543060ae5e2c25b585b9efdd5ff9495a4873cac58b5feff5f08717b04e81bfea349accc58fcc6a6505de3aa6ff4985d9c38bb83e8daa663ccb356df3ed52343ed7723687e416816f987c565eae22c7548c1d6b56a5b6819583da0ddf92739f65e604e37b3275a6cb1252d4ef7a515c4b1e9068d714be80066bf0d422f1e4d2ce6f95c9eac081d6e4596a6a8e16a57b732b575b7de16f176ff0e34e84b293d3fd77fa30a7b7cf12a1edd54170e56bf7f2d40620ad56acbc5cc615556300ff9e95ce3dda93c8333f23f0d97a5da12a0fe58f95d6b911f614563d343ac6e4f9fee1d149c94fc75a97ac839b6d8d7b27c5efb870d2bfc6dbe6b688490b23597d83982d7858215c59011042b1957a0b386842621c72f89a9b524008794ffa0c179753ab48d0f73e5ff13624b3b90287edaf6a5367dcfe4094a21ffad3e881b428b77ccac6924d5bde9c781d4189654d8f29885fbde07e6334c6406dd3ece359c6ac7c6147f5c4906e56764e9980a669bfdddd9eb780e7f9988630d1eb098b3e4fd4c795f11441fb6d0ff7cf086eb291b1ec8d90092e1eaf9722ccdcd15408617cdb8c49043bf71a6ea0ee6b7e840344fbcd377b995bfb1faf22754fcb363f6c630501b619bbd87cc13d5df0948a176771d2d69236eb50dd313817d9687967e7d71f854db6bff803f4501d999dfe3da37ccfdf894a7914c4c113fa7a18c3468a52d646a5070614a6f02b7ff21c9f6927f5de55be85ba815f4bb9e29f26a94423c58338947c804e0627d69bc5a6e93fc5fe8cae851700253f2d494622c6127b4d77bf54a1ac27957234628cbe2fea1729ec53be7d90806d510ccddfd76fab1b9bf1207db8b05c3eaa88fa4c0a5db13cec9310f4e02c1d8114705446fd6649df3829aa12786b8d10b4540d8c1f1c8208c4b41998435e3fa1ec5199cb2d3d0c5c04c5e0b3ffd69112252106bb39333ff23b38d167a9b45ad1bdabf434c8695e2676d461b34c5f048e70b67a44d824baa090c8be13a22ef0d0970cc7a94ed4b77bfc3a40427c6c11abd2b415817243f6801d535a3adc9924a1671b645100e822a0c1876a37d9c9e230e3d762f1cfbb89a8b28255ba4cc5b46cb1635cf185578fa068b68bac93991982b48e7faacc09745a7e33bb12de6b25a2342a7e03cff06dde29b4d05de84e56c78fc6d9dcd180438da3136767d5846bfe7168faeac5b9434394bd747126c5c1ecc6621d10817ce9b6540433828a3bb8f6da0cd8f2b54a47cd5473f6bc3dc1234bd115a6890aa678d1bce7840d7a4559cda556740860079e46217c20e45ee59b8b7078d9b70cb6a249eb2e5e4071d044f456fb61649f261689b8d7a532afaf88eb30041242ce491fb7e654a1f06add370e2706f75c2fe1afe8e065804414c660ec4d96f496b1ad87592de8b7d04baa7ab142f580f262c64c57fce8ef933f18904f001809cfdf94eb679c9eced5d125b4f1d0064ca2ccf5eaf61bb7841bd408ae213deeb15d860f7ee7224b9d2dd38ee9f6c3fca6590335715c218db8f8c98e6339a6944817a1ce2e115ae984699861631b9893c143f594d6dde0895a0c7edb9912fe9cd8fd0765227b3963033306d15711387044bc373ac10d7be73cd80f1a79cf1ea0989ea9ae8a0dbbd1227bc33df652792a6bd95f1d21c6497c4c35b9a1eadc0217e322285a2eb832753aae74ef42fc983e58a126b7c23e4b0bac16f0de1eff7d41477bb25052f32cc9cc956ebd209d6b945b1fa9182857e180672a6be7edeb5234830668b1ea749d0a0dd3a244684d4dd76221c3bdf98c2f1eacb7a6dcccafd249b0ba2592c88790de40895799ea4dfb045cc2392dbb623bfe420b24e5a425b84a4b24d787a68bbec9db363ac4e9453df597f0224d8b7b21629e1989e53accbae97e189cf9b59ebf8bb89591fe3fda450af548ffc46eff98b5216e238a9246e2fb95810f8f4d89504633a6d223484a765b9e6e5497159b31c51fa6cc10641bafa81b10c5ab853f3136fa1b4334bcbde99cb4689f077ca3c29c2f1aca2a05762943073d5992aac4d9b0d411ba25905c34fd02b8eb7b9db375a6f6516446cc195eb55eda1e007e26328e9e2642a9c4e90c56440cc60a1db77713860a56820901b3022d55c621e9d54f759dd17fc5b59331c63cf30e07081bf0cdee6cc94ddfe8c6179e7ed86607d4ba7d5f1e97fbc1139b43ae5fd04c1c715f4600f028d0852a421d472b1b48e591b6edfebcd86be3db2caf967b06776096e14f0deffc9bb126ec329c49ada996b963e942d9c404967dc23bdbd0eee951b2879f2ef7ae224d4ff25edac4ddeb2c0b8e579af283e87c625d3fae5286fa855930e45207af7054763937a9247dc38e37e6dee2e325b617280846012e463707b6ccfa2fc399a66e534221a45626cd18c79d46f5c77c2d359e19ea870cd230709b5e33cd52fd43388ef91dea0a1e0df6c72688d9fd32bb67f489a3618604ef1dfa0d7f569d40cc68e39994e4edab4007c988998f59485ce4723c1eeb7c72f7e833418bab47735a91c7ab24e8555d2ccf3a812b6c634c0c3a68271ec8b536aaa442e056945feca6fb4e54d2cf60a0334f494b2bdb6fbd597de0ce9d2cf03333a0c7121e086aa4c657360fbfb60f3ce0fc0d90ff12b03464e8ff0e5e546ff79735c5c800a0f9b680a478c772f60173a760e280d8287681986038444f2103e2894d5809d062cfe8380e34bca86475da3d7634131c2a8cdc98c5927bc137db61f94eaf9a74f87cc85072c201766eae17fbd5b732859fb1b1c980b36e377aa41a95bca18ccea529420e742899af7b968c1fb9c0d181da9f86358dbeea877c3e9123a9289c362fa61d96c707ac94b427318a1e5f21078aa9d1fd7a52704e0d73e527f3ca65b7b459734dd30db5335c450f1dbcc1e4259d657d13b6d6b4adddc3d0eae034d1878cd0aa1825991d75f8e6b5b4c0d6d17e8ce709b19ff794a8ef856abdfac65cd13631f1b66b20f2ebf2f3122d18e03cbfff88206a5998fc3cb2b40634fcecdb8f5bdbfe044dbf169ccd2cd60f7bf033272f38f587943fcc75d2d65d9028c02891c8415706c2b2459b7a3c5cc82b0446088d3b3bcc033ad453136afd4ac4678320fc17288dbfa1c5180ad57508a2a298ed4ebc716ede34fded574d9779be5d56517d4dd40f197312390c488f46914b0927b13901ce70c1684801f2811168fab533998a1fdabbb6e683abfa021f6b80077f19455c34cecf5dbdb2fa6e3930eb5940cb14504050cc74249424310dff81116b8f2076b8ebece84c302e758fa90af5a1888aa8a5a2bff4aeb7ebd1c7a216bdbb84bf9c021caf3c8efbfdc5d3aede46381bcda372a5398c89868ad57287736fec2a7e8ed638974fde5875eafa506a6bd7f772d2b221f4bde4920fe0c56f8e0847e2a7e8387c64ddef4203d77a526c46d7871befe0c5f9128bd67319acd963fc040185aac4e7815f728bbd7ffd8f3d125e63320182f202fa9a52505be9585556a5d1308c118ccdf01978027cbace7ab339d6f53d15e795b7f3fedae4f86c3f257ed80ee634375dc2333ceed1ccaeab1b6be7a9611ff33d79dccdec2007558c06dfc06612d56d37882e5f1de340cf05f4fffbe1a5def6d045bc5bdaf633f07360f9028cedd103bf03fec8beb9fdbf8c5fc684d12efae1859c53e2cc3e2f508a9cd0410ec036648d3760dd591f7ae04e4cdd61a2566319c943f0b63d87e422dfe5c0d1edcb2dc515778a0d7bb2c93ced3b1435adbc51d3fdca9c13679397bc4490093d64869998d6a28bb862ead0fa411585289cc00dc199eac6c607b8a84123dad3be80dd8fd86aa202113131046336352235f34c05f5ea6d5265adda98edbbfd11d6839c5b1bfe4fad4e688558d633d4a281df44d9c0a35abd464e01f8ab01a1e272cc8cd155a40b8aca4c6b1dc894c0fdc02f15a8f67ce94c7f99b6fcc0e4a3a8a71365645ad7809d47bb26f46ed8bd02f6e8f3d277224f82f3d41695f367e343ac6d507413f4bdacf9e344a49156c4de36d68c075415f8004748055b38b8a4110f869fafcc59cdae5663eda72a05be365a50e98bfd4b00e35aef687afae7bd6622cdd725326776f6fb1476c8cf8c20a0e5223e2bea494a1bbe4e79b25a5e48ba34bc66a84ecc4a0aba98e74ca2b1f61893e61a29498d855a778a2a9ce7b7fcaa44b4aedcbd0e28d6c49bdb6776975bf69161f372b964e4288ce6a3b877c3126f90c4c9749d45b8c5c840983b035993e484a945be5fc9d2d1bd3f3de4e6de7bc74a7a07b13e9e82acc11db85454f1d928fe52ad42ca783fd20dd3e94471b498c2736af40d2a45ff74f9ef874639e33306daa8a667674571e2ed93a48f49b57e9e3382fa8090774bc795609ee510b6a1ca48d9833819cbe8ac77eeebb0e3b6c59ced2d1ab355264934ff1914a3f654249bba60a692dd36368b8a866b333320e57e9c7d3646c375696ff14e303780ffd7b957d89ccdf57823d2d1e158773c2075233dd2f331eafe3802da683c293eaa24cd8b63a7582ddb202cd6f8c837c74f823727641c7eb680fe51ce7f250adb34956e4cab17b8a5f10edf144c700e376c682dd46c8fc89830fee1a44fafe0a5a2e7581d5d16ad6267d1dc2d5be8547f9352d1591b42de94f2559b44a80038360c6394541a77d95b196558a479b609882fc597b9cbe285ad7c7a41133ed85c8ab6e6dec5bf70f9e787985512d48865022705098a6703b255a6f2b05b62fc7ab32e67f06d785ccb33fb348205a76939e6c2991486c5aae8ec1556b2f8e30ca445a4a495cbf2c6013042b8cea615e58899fccbbf1fc4f17a6dc37e46b17ada0be033dc67904fbd7903086d3417e423af64338426a84ca0c2a3252db62695f9cdf10ebc09b9da5747d30e7f4adfb374e1d2bb24542b0373b1fb897690b49fe24d8575ec9800f019c9c76459421c11f002989ac82c13c04a202cf7f9f38b053f9a680d4d5012887a11d25cad201df20a4eee6d2c0474055579ac729c7514a88b1675bbf6b773448c6c1a5ccd157f44f7e032a6b848f2e734d773f029e48fd13c90d41666f9bd4e9bea91950737b6e7502f9d2677938f240e3f905d6095bb0f8bbe961b99b2d025538c3888bfff8957e3592ee5b26a75399b59c697f59fcdfbbe3bcffb8777340875611bf75486d2378e68de771800bfffe0572fb36ca855ec5fc8cb90c76455773c36ec40b101fb30c48f8a8e775f5220e024b4da9dddc2fcf4da413e7c5db9e0567cbb5fad0c91d779a0939debd9247d3f7d8107fd986f73a9c9067e6594fabde0b9e887040cfbe7d31332f41259de57b38f33275597725392efea51f290b8e1b5c243ffd9eb4c0231600f9b4b204344736849d527156c4720a463bbe88fbbdc333099d949853d5c6fda98bcd35ad3f1fb1d5a7d00541a8a202c8590e35360bb9d25d6431476649e1898f901fad37975d6dce9833956e7a78d0306f533d4aa3c9676017c7abc7e1f8f2f117774a4f5beba55d1c3cd580fb18defccc349cce24e94a4cf1f4c6f45d783ee0167a55369c9b5e1eb6d0a836f3eb2354fad3cd771a9d777ff84c63120baee86ddc52b3e6817dce339ac9c240e75f3e2f77afbffbc1d54eb5936d045370ce3b77365c5320892dc7bc36e488019461d2e552969de9f25bd8de049d693be450c43c5d22d7569fc384e8d56ddb577c5f3c3471f5ba2998bc0c697a06b6d8ba5f2f7236e78aaed69b468e761a5f07145c0326ebb94f50aaa8c5666c92006d8d139036f981003933f8e2eba106a0e251fa9f5407544e44aedbbb271a3bf1c660a9cb8c74dbd0713aaebba2dd046af8b9428709646521d6bf387a92996b35748e1e67b602309b7da0fb642e89de19f550925f4db082ef7e9821ac4b2aee93c9cf791c086751c4cb4172608a4f903dc40727858046851529205b45786e294c17abf5e5f6bc730cbfb8fd977c5501a8140ac7984a267880b53cb94157be9ac157be1cf12d8a9e5612947772b734ed6ae30e548a3b2faecf94a7e03f86317f52ac797aefb957d2a29de8f8ced414ce22c800e0dc7e49d3672fca633248f3e68c00", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x1, {0x8, 0x0, 0x0, {0x5, 0x0, 0x8, 0x80000001, 0x40000000000003, 0x1, 0x9eb, 0x35741061, 0x0, 0x8000, 0x9e7, 0xffffffffffffffff, 0x0, 0x3d, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x400000000, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000180)={0xffbc, 0x8200, 0xd, 0x80000000}, 0x10) 162.389385ms ago: executing program 0 (id=1401): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r1 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x190ec) flistxattr(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10010, 0xffffffffffffffff, 0xb19f2000) socket(0x14, 0x2, 0x4) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e7cc6120c4108a81ad7d0102030109021b00010000c0050904230001"], 0x0) socket(0x1, 0x80802, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x8) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="27738d50c7f5"}, 0x14) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="001503"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) 0s ago: executing program 5 (id=1402): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a}}) ioctl$TCSETS2(r3, 0x402c542b, 0x0) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0xf, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, &(0x7f0000000080), &(0x7f0000000340)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) kernel console output (not intermixed with test programs): ing to iommu group 0 [ 402.916580][ T9227] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 402.977597][ T9317] binder: 9316:9317 ioctl c0306201 200000000080 returned -14 [ 403.000343][ T9318] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 403.163934][ T9227] usb 5-1: config 0 has an invalid interface number: 113 but max is 0 [ 403.182204][ T9319] binder: BINDER_SET_CONTEXT_MGR already set [ 403.188302][ T9227] usb 5-1: config 0 has no interface number 0 [ 403.241331][ T9317] binder: 9316:9317 ioctl c0306201 2000000003c0 returned -14 [ 403.252114][ T9319] binder: 9316:9319 ioctl 4018620d 200000000040 returned -16 [ 403.260525][ T9227] usb 5-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 403.302192][ T9227] usb 5-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 403.329634][ T9227] usb 5-1: config 0 interface 113 has no altsetting 0 [ 403.355482][ T9227] usb 5-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 403.492562][ T9227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.574349][ T9325] netlink: 'syz.1.898': attribute type 1 has an invalid length. [ 403.582112][ T9325] netlink: 976 bytes leftover after parsing attributes in process `syz.1.898'. [ 404.102125][ T9227] usb 5-1: Product: syz [ 404.106383][ T9227] usb 5-1: Manufacturer: syz [ 404.110980][ T9227] usb 5-1: SerialNumber: syz [ 404.191724][ T9227] usb 5-1: config 0 descriptor?? [ 404.203585][ T9227] pn533_usb 5-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 404.241693][ T9227] usb 5-1: USB disconnect, device number 22 [ 408.608146][ T9248] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 408.825497][ T9347] netlink: 'syz.2.903': attribute type 1 has an invalid length. [ 408.833278][ T9347] netlink: 976 bytes leftover after parsing attributes in process `syz.2.903'. [ 409.262309][ T9248] usb 5-1: Using ep0 maxpacket: 32 [ 409.269931][ T9248] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 409.284805][ T9248] usb 5-1: config 0 has no interface number 0 [ 409.298994][ T9248] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 409.315806][ T9248] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 409.327130][ T9248] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.335920][ T9248] usb 5-1: Product: syz [ 409.341054][ T9248] usb 5-1: Manufacturer: syz [ 409.346870][ T9248] usb 5-1: SerialNumber: syz [ 409.354004][ T9351] netlink: 12 bytes leftover after parsing attributes in process `syz.3.905'. [ 409.364607][ T9248] usb 5-1: config 0 descriptor?? [ 409.370403][ T9339] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 409.537515][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 409.611182][ T9353] netlink: 72 bytes leftover after parsing attributes in process `syz.3.905'. [ 410.077891][ T9339] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 410.122103][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 410.142523][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.163879][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 410.178670][ T9] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 410.189914][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.275714][ T9] usb 1-1: Product: syz [ 410.279940][ T9] usb 1-1: Manufacturer: syz [ 410.299692][ T9] usb 1-1: SerialNumber: syz [ 410.326187][ T9] usb 1-1: config 0 descriptor?? [ 411.178148][ T9375] netlink: 12 bytes leftover after parsing attributes in process `syz.1.909'. [ 411.292617][ T9248] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 411.303380][ T9248] asix 5-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 411.340050][ T9248] asix 5-1:0.188: probe with driver asix failed with error -61 [ 411.704503][ T9240] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 411.826037][ T9381] netlink: 'syz.3.910': attribute type 1 has an invalid length. [ 411.833970][ T9381] netlink: 976 bytes leftover after parsing attributes in process `syz.3.910'. [ 412.249577][ T9241] usb 1-1: USB disconnect, device number 22 [ 412.262111][ T9240] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 412.297723][ T9240] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 412.315010][ T9240] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 412.328241][ T9240] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.345569][ T9374] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 412.384632][ T9240] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 412.408933][ T9385] netlink: 16 bytes leftover after parsing attributes in process `syz.0.911'. [ 412.417926][ T9385] netlink: 16 bytes leftover after parsing attributes in process `syz.0.911'. [ 412.563667][ T9387] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 412.594649][ T9240] usb 5-1: USB disconnect, device number 23 [ 413.062181][ T29] audit: type=1800 audit(1775580814.483:416): pid=9396 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.914" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 413.238527][ T9393] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 413.293319][ T9373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.537097][ T9373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.357622][ T9241] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 415.406320][ T9248] usb 2-1: USB disconnect, device number 32 [ 415.552120][ T9241] usb 5-1: Using ep0 maxpacket: 8 [ 415.624310][ T9241] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 415.697522][ T9241] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.928143][ T9434] netlink: 'syz.0.924': attribute type 1 has an invalid length. [ 415.936001][ T9434] netlink: 976 bytes leftover after parsing attributes in process `syz.0.924'. [ 416.172092][ T9240] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 416.393644][ T9241] usb 5-1: Product: syz [ 416.447957][ T9437] netlink: 'syz.3.926': attribute type 1 has an invalid length. [ 416.752034][ T9241] usb 5-1: Manufacturer: syz [ 416.756665][ T9241] usb 5-1: SerialNumber: syz [ 416.767598][ T9241] usb 5-1: config 0 descriptor?? [ 416.816868][ T9241] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 416.829542][ T9241] dvb-usb: bulk message failed: -22 (2/0) [ 416.840958][ T9241] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 416.851200][ T9241] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 416.861203][ T9241] usb 5-1: media controller created [ 416.893383][ T9240] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 416.922931][ T9241] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 416.940008][ T9240] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 416.983697][ T9240] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 417.014986][ T9448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.929'. [ 417.034260][ T9240] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.072537][ T9241] dvb-usb: bulk message failed: -22 (1/0) [ 417.290385][ T9422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.300896][ T9422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.323353][ T9428] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 417.375475][ T9241] DVB: Unable to find symbol mt352_attach() [ 417.384770][ T9240] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 417.437202][ T9452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.445853][ T9452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.472558][ T9241] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 417.552182][ T9248] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 417.670875][ T9428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.702928][ T9428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.719594][ T9248] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 417.766464][ T9248] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 417.797140][ T9248] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 417.802087][ T9241] rc_core: IR keymap rc-dvico-portable not found [ 417.832070][ T9248] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.841730][ T9241] Registered IR keymap rc-empty [ 417.855920][ T9241] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 417.872324][ T9444] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 417.893304][ T9248] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 417.988985][ T9241] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input20 [ 418.113380][ T9444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.121945][ T9444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.165618][ T9241] dvb-usb: schedule remote query interval to 100 msecs. [ 418.173411][ T9241] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 418.215367][ T9241] usb 5-1: USB disconnect, device number 24 [ 418.374887][ T9241] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 418.512093][ T9459] binder: 9458:9459 ioctl c0306201 200000000080 returned -14 [ 418.534755][ T9459] binder: 9458:9459 ioctl c0306201 2000000003c0 returned -14 [ 418.838119][ T9] usb 3-1: USB disconnect, device number 23 [ 418.914002][ T9465] netlink: 'syz.1.934': attribute type 1 has an invalid length. [ 418.921724][ T9465] netlink: 976 bytes leftover after parsing attributes in process `syz.1.934'. [ 418.936218][ T9248] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 419.406059][ T9467] syzkaller0: entered promiscuous mode [ 419.412560][ T9467] syzkaller0: entered allmulticast mode [ 419.446064][ T9248] usb 4-1: Using ep0 maxpacket: 32 [ 419.724334][ T9248] usb 4-1: unable to get BOS descriptor or descriptor too short [ 419.733058][ T9248] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 419.818210][ T9241] usb 1-1: USB disconnect, device number 23 [ 419.837220][ T9248] usb 4-1: New USB device found, idVendor=08e4, idProduct=017f, bcdDevice= 0.40 [ 419.874034][ T9474] netlink: 'syz.1.937': attribute type 10 has an invalid length. [ 419.887706][ T9248] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.900773][ T9248] usb 4-1: Product: syz [ 419.910976][ T9474] netlink: 40 bytes leftover after parsing attributes in process `syz.1.937'. [ 419.919904][ T9248] usb 4-1: Manufacturer: syz [ 419.924839][ T9248] usb 4-1: SerialNumber: syz [ 419.971195][ T9475] random: crng reseeded on system resumption [ 420.243959][ T9461] kvm: Disabled LAPIC found during irq injection [ 420.338392][ T9248] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 420.397495][ T9248] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 420.413457][ T9248] usb 4-1: USB disconnect, device number 33 [ 420.450527][ T5797] udevd[5797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 421.624735][ T9474] vlan1: entered promiscuous mode [ 421.640877][ T9474] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 422.035307][ T9490] netlink: 'syz.2.939': attribute type 1 has an invalid length. [ 422.043066][ T9490] netlink: 976 bytes leftover after parsing attributes in process `syz.2.939'. [ 423.158888][ T9502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.947'. [ 423.162912][ T29] audit: type=1400 audit(1775580824.903:417): avc: denied { connect } for pid=9501 comm="syz.2.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 425.040652][ T9531] netlink: 'syz.0.951': attribute type 10 has an invalid length. [ 425.052311][ T9531] netlink: 40 bytes leftover after parsing attributes in process `syz.0.951'. [ 425.071541][ T9531] vlan1: entered promiscuous mode [ 425.103516][ T9531] batman_adv: batadv0: Adding interface: vlan1 [ 425.314157][ T9531] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.426623][ T9534] tmpfs: Bad value for 'mpol' [ 425.622763][ T9531] batman_adv: batadv0: Interface activated: vlan1 [ 425.691858][ T9531] random: crng reseeded on system resumption [ 425.871805][ T9538] syzkaller0: entered promiscuous mode [ 425.883240][ T9538] syzkaller0: entered allmulticast mode [ 426.093565][ T9545] netlink: 16 bytes leftover after parsing attributes in process `syz.1.955'. [ 426.103281][ T9545] netlink: 16 bytes leftover after parsing attributes in process `syz.1.955'. [ 427.886752][ T9572] netlink: 'syz.1.963': attribute type 10 has an invalid length. [ 427.895145][ T9574] netlink: 'syz.3.962': attribute type 10 has an invalid length. [ 427.895168][ T9574] netlink: 40 bytes leftover after parsing attributes in process `syz.3.962'. [ 427.922875][ T9572] netlink: 40 bytes leftover after parsing attributes in process `syz.1.963'. [ 428.001900][ T9576] random: crng reseeded on system resumption [ 428.814112][ T9586] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 429.551053][ T9574] vlan1: entered promiscuous mode [ 429.557056][ T9574] batman_adv: batadv0: Adding interface: vlan1 [ 429.566164][ T9574] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.600507][ T9574] batman_adv: batadv0: Interface activated: vlan1 [ 429.607871][ T9572] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 430.662161][ T9600] overlayfs: overlapping lowerdir path [ 430.684722][ T9599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.969'. [ 431.681780][ T9618] tmpfs: Bad value for 'mpol' [ 431.967499][ T9601] netlink: 16 bytes leftover after parsing attributes in process `syz.3.971'. [ 432.264261][ T9601] netlink: 16 bytes leftover after parsing attributes in process `syz.3.971'. [ 432.659652][ T9628] syzkaller0: entered promiscuous mode [ 432.665765][ T9628] syzkaller0: entered allmulticast mode [ 433.071481][ T9634] netlink: 'syz.4.979': attribute type 10 has an invalid length. [ 433.102068][ T9634] netlink: 40 bytes leftover after parsing attributes in process `syz.4.979'. [ 433.462079][ T9241] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 433.512982][ T9647] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 433.545559][ T9239] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 433.647254][ T9241] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 433.658517][ T9241] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 433.676640][ T9241] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 433.685957][ T9239] usb 3-1: device descriptor read/64, error -71 [ 433.702794][ T9241] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.748211][ T9641] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 433.764968][ T9241] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 433.932492][ T9239] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 434.047719][ T9641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.073032][ T9641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.192129][ T9239] usb 3-1: device descriptor read/64, error -71 [ 434.302370][ T9239] usb usb3-port1: attempt power cycle [ 434.665362][ T9239] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 434.698643][ T9239] usb 3-1: device descriptor read/8, error -71 [ 434.917545][ T9634] vlan1: entered promiscuous mode [ 434.923610][ T9634] batman_adv: batadv0: Adding interface: vlan1 [ 434.929769][ T9634] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.955816][ T9239] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 434.967855][ T9634] batman_adv: batadv0: Interface activated: vlan1 [ 434.998872][ T9239] usb 3-1: device descriptor read/8, error -71 [ 435.128585][ T9239] usb usb3-port1: unable to enumerate USB device [ 436.497163][ T9239] usb 1-1: USB disconnect, device number 24 [ 436.902092][ T9] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 437.589399][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 438.172308][ T9] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 438.182245][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.187088][ T307] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 438.190247][ T9] usb 4-1: Product: syz [ 438.190265][ T9] usb 4-1: Manufacturer: syz [ 438.218946][ T9] usb 4-1: SerialNumber: syz [ 438.228942][ T9] usb 4-1: config 0 descriptor?? [ 438.298894][ T9] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 438.317983][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 438.352128][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 438.411390][ T9] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 438.472527][ T9] usb 4-1: media controller created [ 438.610096][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 438.706366][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 438.759386][ T9] DVB: Unable to find symbol mt352_attach() [ 438.767419][ T9692] netlink: 'syz.0.995': attribute type 10 has an invalid length. [ 438.776024][ T9] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 438.793943][ T9692] netlink: 40 bytes leftover after parsing attributes in process `syz.0.995'. [ 438.861770][ T9695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.882792][ T9695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.953249][ T9] rc_core: IR keymap rc-dvico-portable not found [ 438.962250][ T9] Registered IR keymap rc-empty [ 439.002385][ T9] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 439.015996][ T9669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.036780][ T9669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.054204][ T9] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input21 [ 439.103194][ T9] dvb-usb: schedule remote query interval to 100 msecs. [ 439.119287][ T9] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 439.381763][ T9248] dvb-usb: bulk message failed: -22 (1/0) [ 439.389037][ T9] usb 4-1: USB disconnect, device number 34 [ 439.469821][ T9] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 439.873956][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.880305][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.353454][ T9248] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 441.542107][ T9248] usb 3-1: device descriptor read/64, error -71 [ 441.982082][ T9248] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 442.122092][ T9248] usb 3-1: device descriptor read/64, error -71 [ 442.241531][ T9723] SELinux: failed to load policy [ 442.247139][ T9248] usb usb3-port1: attempt power cycle [ 442.492127][ T9241] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 442.524754][ T9730] netlink: 'syz.4.1006': attribute type 10 has an invalid length. [ 442.539848][ T9730] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1006'. [ 442.612216][ T9248] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 442.652718][ T9248] usb 3-1: device descriptor read/8, error -71 [ 442.742251][ T9241] usb 2-1: Using ep0 maxpacket: 32 [ 442.754166][ T9241] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 442.763567][ T9241] usb 2-1: config 0 has an invalid descriptor of length 15, skipping remainder of the config [ 442.782143][ T9241] usb 2-1: config 0 has no interface number 0 [ 442.796011][ T9241] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 443.256609][ T9241] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 443.266082][ T9241] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.274319][ T9241] usb 2-1: Product: syz [ 443.278463][ T9241] usb 2-1: Manufacturer: syz [ 443.283360][ T9241] usb 2-1: SerialNumber: syz [ 443.297485][ T9241] usb 2-1: config 0 descriptor?? [ 443.432915][ T9248] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 443.465792][ T9241] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 443.474894][ T9738] netlink: 'syz.0.1009': attribute type 10 has an invalid length. [ 443.483801][ T9241] radio-si470x 2-1:0.35: probe with driver radio-si470x failed with error -5 [ 443.486691][ T9248] usb 3-1: device descriptor read/8, error -71 [ 443.588960][ T9740] netlink: 'syz.3.1008': attribute type 1 has an invalid length. [ 443.596839][ T9740] netlink: 976 bytes leftover after parsing attributes in process `syz.3.1008'. [ 443.624774][ T9738] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1009'. [ 443.745751][ T9248] usb usb3-port1: unable to enumerate USB device [ 443.852918][ T9241] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 443.860435][ T9241] usbhid 2-1:0.35: couldn't find an input interrupt endpoint [ 444.437869][ T9239] usb 2-1: USB disconnect, device number 33 [ 444.573579][ T9754] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 444.765061][ T9248] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 445.004675][ T9248] usb 4-1: config 0 has no interfaces? [ 445.014234][ T9248] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 445.023820][ T9248] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 445.032150][ T9248] usb 4-1: Product: syz [ 445.401250][ T9248] usb 4-1: Manufacturer: syz [ 445.436836][ T9248] usb 4-1: config 0 descriptor?? [ 446.419162][ T9769] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 446.436604][ T9771] netlink: 'syz.1.1019': attribute type 16 has an invalid length. [ 446.470966][ T9771] netlink: 'syz.1.1019': attribute type 17 has an invalid length. [ 446.643333][ T9239] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 446.696563][ T9771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.766397][ T9775] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1019'. [ 447.141763][ T9771] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.166451][ T9771] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 447.192772][ T9239] usb 3-1: Using ep0 maxpacket: 16 [ 447.201717][ T9239] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 447.212286][ T9239] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.223814][ T9239] usb 3-1: config 0 has no interface number 0 [ 447.233237][ T9239] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17 [ 447.243179][ T9239] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.251587][ T9239] usb 3-1: Product: syz [ 447.252371][ T9777] @0Ù: renamed from virt_wifi0 [ 447.256344][ T9239] usb 3-1: Manufacturer: syz [ 447.265508][ T9239] usb 3-1: SerialNumber: syz [ 447.280497][ T9239] usb 3-1: config 0 descriptor?? [ 447.315564][ T9239] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 447.326372][ T9239] uvcvideo 3-1:0.105: No valid video chain found. [ 447.455344][ T9239] usb 4-1: USB disconnect, device number 35 [ 447.683443][ T29] audit: type=1400 audit(1775580849.413:418): avc: denied { listen } for pid=9779 comm="syz.4.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 447.978842][ T29] audit: type=1400 audit(1775580849.413:419): avc: denied { shutdown } for pid=9779 comm="syz.4.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 448.005174][ T9784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 448.755893][ T9780] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1021'. [ 448.765119][ T9780] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1021'. [ 448.902160][ T9239] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 449.137903][ T9795] SELinux: failed to load policy [ 449.153516][ T9239] usb 2-1: device descriptor read/64, error -71 [ 449.357800][ T9241] usb 3-1: USB disconnect, device number 32 [ 449.412335][ T9227] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 449.422269][ T9239] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 449.562393][ T9239] usb 2-1: device descriptor read/64, error -71 [ 449.593030][ T9227] usb 4-1: Using ep0 maxpacket: 32 [ 449.624275][ T9227] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 449.666133][ T9227] usb 4-1: config 0 has an invalid descriptor of length 15, skipping remainder of the config [ 449.699939][ T9239] usb usb2-port1: attempt power cycle [ 449.706992][ T9227] usb 4-1: config 0 has no interface number 0 [ 449.744532][ T9227] usb 4-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 449.798247][ T9227] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 449.831638][ T9227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.891424][ T9227] usb 4-1: Product: syz [ 449.916406][ T9227] usb 4-1: Manufacturer: syz [ 449.965957][ T9227] usb 4-1: SerialNumber: syz [ 450.107165][ T9227] usb 4-1: config 0 descriptor?? [ 450.127421][ T9239] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 450.196782][ T9239] usb 2-1: device descriptor read/8, error -71 [ 450.214967][ T9227] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 450.303768][ T9227] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5 [ 450.546865][ T9227] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 450.608022][ T9227] usbhid 4-1:0.35: couldn't find an input interrupt endpoint [ 450.926903][ T9239] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 451.007501][ T9240] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 451.041646][ T9239] usb 2-1: device descriptor read/8, error -71 [ 451.131246][ T9227] usb 4-1: USB disconnect, device number 36 [ 451.164188][ T9239] usb usb2-port1: unable to enumerate USB device [ 451.216011][ T9240] usb 1-1: unable to get BOS descriptor or descriptor too short [ 451.231507][ T9240] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 451.240539][ T9240] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 451.269439][ T9240] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 451.280155][ T9240] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 451.296998][ T9240] usb 1-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 451.309525][ T9240] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.318571][ T9240] usb 1-1: Product: syz [ 451.324114][ T9240] usb 1-1: Manufacturer: syz [ 451.328839][ T9240] usb 1-1: SerialNumber: syz [ 451.991961][ T9816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.001723][ T9816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.013763][ T9816] syz.0.1027 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 452.282501][ T9239] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 452.303128][ T9822] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 453.003807][ T9239] usb 2-1: Using ep0 maxpacket: 8 [ 453.011070][ T9239] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 453.019615][ T9239] usb 2-1: config 0 has no interface number 0 [ 453.026979][ T9239] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 453.038054][ T9239] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 453.049894][ T9239] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 453.064584][ T9239] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 453.092866][ T9239] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 453.108444][ T9239] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.150352][ T9239] usb 2-1: config 0 descriptor?? [ 453.228679][ T9240] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 453.252618][ T9240] usb 1-1: unit 2 not found! [ 453.257272][ T9240] usb 1-1: unit 8: unexpected type 0x0c [ 453.266398][ T9239] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 453.354434][ T9834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1036'. [ 453.403406][ T9240] usb 1-1: USB disconnect, device number 25 [ 453.451323][ T9815] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 453.512608][ T29] audit: type=1400 audit(1775580855.253:420): avc: denied { getopt } for pid=9814 comm="syz.1.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 454.097437][ T9847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1038'. [ 454.106733][ T9847] openvswitch: netlink: Missing key (keys=200040, expected=100) [ 454.922481][ T9248] usb 2-1: USB disconnect, device number 38 [ 455.137844][ T9248] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 455.277225][ T9249] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 455.359310][ T9249] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 455.967995][ T9864] fido_id[9864]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 456.172479][ T9879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1043'. [ 456.572073][ T10] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 456.713352][ T10] usb 4-1: device descriptor read/64, error -71 [ 456.917203][ T9903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1045'. [ 457.202673][ T10] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 457.312097][ T9239] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 457.332200][ T10] usb 4-1: device descriptor read/64, error -71 [ 457.838823][ T10] usb usb4-port1: attempt power cycle [ 457.852115][ T9239] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 457.904637][ T9239] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 457.945129][ T9239] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 457.976273][ T9239] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.032644][ T9906] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 458.061632][ T9239] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 458.212146][ T10] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 458.251557][ T10] usb 4-1: device descriptor read/8, error -71 [ 458.302713][ T9903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.382398][ T9903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.576705][ T10] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 458.613008][ T10] usb 4-1: device descriptor read/8, error -71 [ 458.834490][ T9933] netlink: 'syz.2.1050': attribute type 1 has an invalid length. [ 458.842742][ T9933] netlink: 976 bytes leftover after parsing attributes in process `syz.2.1050'. [ 458.855174][ T10] usb usb4-port1: unable to enumerate USB device [ 459.489729][ T9936] netlink: 'syz.4.1051': attribute type 1 has an invalid length. [ 459.497619][ T9936] netlink: 976 bytes leftover after parsing attributes in process `syz.4.1051'. [ 460.017781][ T9941] netlink: 'syz.4.1053': attribute type 10 has an invalid length. [ 460.072134][ T9941] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1053'. [ 460.360449][ T9952] netlink: 'syz.1.1049': attribute type 1 has an invalid length. [ 461.147812][ T10] usb 1-1: USB disconnect, device number 26 [ 461.219107][ T9957] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1055'. [ 461.988544][ T10] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 462.170965][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 462.504245][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 462.518535][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.550200][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 462.557568][ T10] pvrusb2: ********** [ 462.580577][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 462.629596][ T10] pvrusb2: Important functionality might not be entirely working. [ 462.659098][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 462.849275][ T10] pvrusb2: ********** [ 462.871829][ T2336] pvrusb2: Invalid write control endpoint [ 463.030963][ T2336] pvrusb2: Invalid write control endpoint [ 463.043717][ T9988] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 463.232368][ T9994] tmpfs: Bad value for 'mpol' [ 463.295008][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 463.563621][ T9973] SELinux: syz.3.1058 (9973) set checkreqprot to 1. This is no longer supported. [ 463.609982][ T9239] usb 4-1: USB disconnect, device number 41 [ 463.616794][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 463.625025][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 463.822169][ T2336] pvrusb2: Device being rendered inoperable [ 463.828368][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 463.951888][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 463.997817][ T2336] pvrusb2: Attached sub-driver cx25840 [ 464.017960][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 464.076827][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 464.354259][T10008] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 465.332920][ T10] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 465.400491][T10023] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1065'. [ 465.515544][ T10] usb 2-1: device descriptor read/64, error -71 [ 465.742132][ T9239] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 465.779355][T10035] netlink: 'syz.3.1066': attribute type 1 has an invalid length. [ 465.912510][ T10] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 466.072189][ T10] usb 2-1: device descriptor read/64, error -71 [ 466.144500][ T9239] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 466.165919][ T9239] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 466.222414][ T10] usb usb2-port1: attempt power cycle [ 466.265173][ T9239] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 466.302752][ T9239] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.349449][T10031] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 466.386043][ T9239] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 466.609380][T10023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.619315][T10023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.179648][ T10] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 467.232966][ T9] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 467.248065][ T10] usb 2-1: device descriptor read/8, error -71 [ 467.534876][ T9] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 467.600087][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 467.643179][ T9] usb 3-1: config 0 has no interface number 0 [ 467.652121][ T10] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 467.671359][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 467.701435][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.710079][ T10] usb 2-1: device descriptor read/8, error -71 [ 467.719984][ T9] usb 3-1: Product: syz [ 467.730083][ T9] usb 3-1: Manufacturer: syz [ 467.750320][ T9] usb 3-1: SerialNumber: syz [ 467.768026][ T9] usb 3-1: config 0 descriptor?? [ 467.784694][ T9] hub 3-1:0.31: bad descriptor, ignoring hub [ 467.790939][ T9] hub 3-1:0.31: probe with driver hub failed with error -5 [ 467.807542][ T9] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 467.820170][ T9] uvcvideo 3-1:0.31: No valid video chain found. [ 467.832405][ T10] usb usb2-port1: unable to enumerate USB device [ 468.180225][T10060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.189040][T10060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.316288][T10064] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 468.814952][ T10] usb 5-1: USB disconnect, device number 25 [ 469.052569][T10070] FAULT_INJECTION: forcing a failure. [ 469.052569][T10070] name failslab, interval 1, probability 0, space 0, times 0 [ 469.070490][T10070] CPU: 1 UID: 0 PID: 10070 Comm: syz.4.1075 Tainted: G L syzkaller #0 PREEMPT(full) [ 469.070519][T10070] Tainted: [L]=SOFTLOCKUP [ 469.070523][T10070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 469.070534][T10070] Call Trace: [ 469.070541][T10070] [ 469.070549][T10070] dump_stack_lvl+0x100/0x190 [ 469.070586][T10070] should_fail_ex.cold+0x5/0xa [ 469.070614][T10070] should_failslab+0xc2/0x120 [ 469.070633][T10070] __kmalloc_cache_noprof+0x7a/0x6f0 [ 469.070648][T10070] ? vhost_task_create+0xee/0x370 [ 469.070662][T10070] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 469.070680][T10070] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 469.070697][T10070] vhost_task_create+0xee/0x370 [ 469.070710][T10070] ? __pfx_vhost_task_create+0x10/0x10 [ 469.070723][T10070] ? trace_contention_end+0x140/0x180 [ 469.070739][T10070] ? __pfx_vhost_task_fn+0x10/0x10 [ 469.070753][T10070] ? __pfx___mutex_lock+0x10/0x10 [ 469.070765][T10070] ? kasan_quarantine_put+0x104/0x240 [ 469.070781][T10070] ? lockdep_hardirqs_on+0x78/0x100 [ 469.070801][T10070] kvm_mmu_post_init_vm+0x1b3/0x370 [ 469.070815][T10070] kvm_arch_vcpu_ioctl_run+0x66/0x1830 [ 469.070828][T10070] ? kvm_vcpu_ioctl+0x155c/0x1730 [ 469.070848][T10070] kvm_vcpu_ioctl+0x730/0x1730 [ 469.070866][T10070] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 469.070882][T10070] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 469.070899][T10070] ? do_vfs_ioctl+0x226/0x13e0 [ 469.070916][T10070] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 469.070933][T10070] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 469.070960][T10070] ? __fget_files+0x215/0x3d0 [ 469.070972][T10070] ? hook_file_ioctl_common+0x146/0x410 [ 469.070989][T10070] ? selinux_file_ioctl+0x139/0x290 [ 469.071004][T10070] ? selinux_file_ioctl+0xb4/0x290 [ 469.071021][T10070] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 469.071037][T10070] __x64_sys_ioctl+0x18e/0x210 [ 469.071059][T10070] do_syscall_64+0x106/0xf80 [ 469.071069][T10070] ? clear_bhb_loop+0x40/0x90 [ 469.071084][T10070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.071095][T10070] RIP: 0033:0x7f6aaff9c819 [ 469.071106][T10070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.071116][T10070] RSP: 002b:00007f6ab0df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 469.071128][T10070] RAX: ffffffffffffffda RBX: 00007f6ab0215fa0 RCX: 00007f6aaff9c819 [ 469.071135][T10070] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 469.071142][T10070] RBP: 00007f6ab0df6090 R08: 0000000000000000 R09: 0000000000000000 [ 469.071149][T10070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.071155][T10070] R13: 00007f6ab0216038 R14: 00007f6ab0215fa0 R15: 00007ffc3b4bfe08 [ 469.071174][T10070] [ 469.504724][ T9] usb 3-1: USB disconnect, device number 33 [ 469.952097][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 470.402087][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 470.418853][ T9] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 470.430258][ T9] usb 5-1: config 0 has no interface number 0 [ 470.448727][ T9] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 470.487525][ T9] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 470.520165][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.551065][ T9] usb 5-1: Product: syz [ 470.565762][ T9] usb 5-1: Manufacturer: syz [ 470.574158][ T9] usb 5-1: SerialNumber: syz [ 470.581380][ T9] usb 5-1: config 0 descriptor?? [ 470.592343][T10079] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 470.806904][T10079] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 470.957581][T10089] netlink: 'syz.1.1082': attribute type 10 has an invalid length. [ 470.997787][T10089] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1082'. [ 471.007530][T10089] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 471.061866][T10089] random: crng reseeded on system resumption [ 471.562285][ T10] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 471.642264][ T5814] Bluetooth: hci0: command 0x0c1a tx timeout [ 471.648351][ T5805] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 471.662124][ T9239] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 471.683807][ T9] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 471.694070][ T10] usb 3-1: device descriptor read/64, error -71 [ 471.700334][ T9] asix 5-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 471.711208][ T9] asix 5-1:0.188: probe with driver asix failed with error -61 [ 471.822042][ T9239] usb 2-1: Using ep0 maxpacket: 32 [ 471.828853][ T9239] usb 2-1: unable to get BOS descriptor or descriptor too short [ 471.837941][ T9239] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 471.851466][ T9239] usb 2-1: New USB device found, idVendor=08e4, idProduct=017f, bcdDevice= 0.40 [ 471.860781][ T9239] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.868840][ T9239] usb 2-1: Product: syz [ 471.873212][ T9239] usb 2-1: Manufacturer: syz [ 471.882087][ T9239] usb 2-1: SerialNumber: syz [ 471.942094][ T10] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 472.122098][ T10] usb 3-1: device descriptor read/64, error -71 [ 472.320473][ T9240] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 472.552143][ T9240] usb 1-1: Using ep0 maxpacket: 32 [ 472.629396][ T9240] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 472.744274][ T9240] usb 1-1: config 0 has an invalid descriptor of length 15, skipping remainder of the config [ 472.816497][ T10] usb usb3-port1: attempt power cycle [ 472.897418][ T9240] usb 1-1: config 0 has no interface number 0 [ 472.958973][ T9240] usb 1-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 473.060034][ T9240] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 473.243084][ T9240] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.327378][T10112] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1088'. [ 473.336524][T10112] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1088'. [ 473.757539][ T5805] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 473.758108][ T9240] usb 1-1: Product: syz [ 473.767894][ T9240] usb 1-1: Manufacturer: syz [ 473.772556][ T9240] usb 1-1: SerialNumber: syz [ 473.788168][ T5814] Bluetooth: hci0: command 0x0c1a tx timeout [ 473.799750][ T9240] usb 1-1: config 0 descriptor?? [ 473.868016][ T9240] radio-si470x 1-1:0.35: could not find interrupt in endpoint [ 474.073686][ T9240] radio-si470x 1-1:0.35: probe with driver radio-si470x failed with error -5 [ 474.466443][ T9240] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 474.562696][ T9240] usbhid 1-1:0.35: couldn't find an input interrupt endpoint [ 474.741533][ T9] usb 5-1: USB disconnect, device number 26 [ 474.792634][ T9239] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 474.862466][ T9227] usb 1-1: USB disconnect, device number 27 [ 475.361345][ T9239] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 475.394619][ T9239] usb 2-1: USB disconnect, device number 43 [ 475.426579][ T5797] udevd[5797]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 475.595000][T10128] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1093'. [ 475.659531][T10131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1094'. [ 475.715283][T10131] bridge_slave_1: left allmulticast mode [ 475.745398][ T9239] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 475.768311][T10131] bridge_slave_1: left promiscuous mode [ 475.807946][T10131] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.846228][T10131] bridge_slave_0: left allmulticast mode [ 475.859514][T10131] bridge_slave_0: left promiscuous mode [ 475.876154][T10131] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.922096][ T9227] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 475.931283][ T9239] usb 2-1: Using ep0 maxpacket: 32 [ 476.023463][ T9239] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 476.033200][ T9239] usb 2-1: config 0 has no interface number 0 [ 476.039897][ T9239] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 476.121112][ T9227] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 476.335216][ T9227] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 476.348472][ T9227] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 476.359805][ T9239] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 476.369844][ T9239] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.378783][ T9227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.387215][ T9239] usb 2-1: Product: syz [ 476.392468][ T9239] usb 2-1: Manufacturer: syz [ 476.465460][ T9239] usb 2-1: SerialNumber: syz [ 476.513808][T10132] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 476.521199][ T9239] usb 2-1: config 0 descriptor?? [ 476.546457][ T9227] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 476.554977][T10124] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 476.817233][T10128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.827589][T10128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.863133][ T5805] Bluetooth: hci0: command 0x0c1a tx timeout [ 476.869255][ T5814] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 476.959096][T10124] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 477.868301][ T9239] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 477.891655][ T9239] asix 2-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 477.914250][ T9239] asix 2-1:0.188: probe with driver asix failed with error -61 [ 478.522288][ T9239] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 478.522449][ T9] usb 5-1: USB disconnect, device number 27 [ 478.673701][ T9239] usb 3-1: Using ep0 maxpacket: 32 [ 478.684520][ T9239] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 478.712064][ T9239] usb 3-1: config 0 has no interface number 0 [ 478.718207][ T9239] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 478.744197][ T9239] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 478.762211][ T9239] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.770242][ T9239] usb 3-1: Product: syz [ 478.782198][ T9239] usb 3-1: Manufacturer: syz [ 478.786832][ T9239] usb 3-1: SerialNumber: syz [ 478.802086][ T9227] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 478.810700][ T9239] usb 3-1: config 0 descriptor?? [ 478.821265][T10152] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 478.913802][T10163] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 479.039728][T10152] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 479.046862][ T9227] usb 1-1: device descriptor read/64, error -71 [ 479.096165][ T9240] usb 2-1: USB disconnect, device number 44 [ 479.197355][ T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 479.579914][ T9] usb 5-1: device descriptor read/64, error -71 [ 479.682258][ T9227] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 479.923875][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 480.067267][ T9227] usb 1-1: device descriptor read/64, error -71 [ 480.079881][ T9239] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 480.100357][ T9239] asix 3-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 480.118050][ T9239] asix 3-1:0.188: probe with driver asix failed with error -61 [ 480.133198][ T9] usb 5-1: device descriptor read/64, error -71 [ 480.219853][ T9227] usb usb1-port1: attempt power cycle [ 480.258929][ T9] usb usb5-port1: attempt power cycle [ 480.605801][T10179] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1108'. [ 480.742285][ T9227] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 480.772058][ T9] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 480.782559][ T9227] usb 1-1: device descriptor read/8, error -71 [ 480.892671][ T9] usb 5-1: device descriptor read/8, error -71 [ 481.022224][ T9227] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 481.092651][ T9227] usb 1-1: device descriptor read/8, error -71 [ 481.202072][ T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 481.213337][ T9227] usb usb1-port1: unable to enumerate USB device [ 481.230821][ T9] usb 5-1: device descriptor read/8, error -71 [ 481.348250][T10187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1110'. [ 481.379844][ T9] usb usb5-port1: unable to enumerate USB device [ 481.529324][ T9247] usb 3-1: USB disconnect, device number 37 [ 481.624984][T10191] netlink: 'syz.2.1111': attribute type 16 has an invalid length. [ 481.640048][T10191] netlink: 'syz.2.1111': attribute type 17 has an invalid length. [ 481.672328][T10191] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 481.989108][T10194] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1111'. [ 483.417945][T10206] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 483.627124][T10214] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 483.782072][ T9240] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 483.951843][ T9240] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 483.968951][ T9240] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.988768][ T9240] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 484.021491][ T9240] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.047296][ T9240] usb 5-1: config 0 descriptor?? [ 484.433372][T10223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1121'. [ 484.684539][T10227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1122'. [ 485.090631][T10232] fuse: Bad value for 'fd' [ 485.237769][ T9240] usbhid 5-1:0.0: can't add hid device: -71 [ 485.244321][ T9240] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 485.281024][ T9240] usb 5-1: USB disconnect, device number 32 [ 486.013672][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 486.030810][ T9] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 486.064874][ T9247] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 486.092817][ T9239] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 486.427709][T10243] fido_id[10243]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 486.445280][ T9239] usb 1-1: device descriptor read/64, error -71 [ 486.542987][T10250] netlink: 'syz.1.1129': attribute type 16 has an invalid length. [ 486.550888][T10250] netlink: 'syz.1.1129': attribute type 17 has an invalid length. [ 486.562791][ T9247] usb 3-1: Using ep0 maxpacket: 32 [ 486.568365][T10250] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 486.570091][ T9247] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 486.592634][ T9247] usb 3-1: config 0 has no interface number 0 [ 486.598759][ T9247] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 486.614059][ T9247] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 486.624407][ T9247] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.633055][ T9247] usb 3-1: Product: syz [ 486.637476][ T9247] usb 3-1: Manufacturer: syz [ 486.662056][ T9247] usb 3-1: SerialNumber: syz [ 486.670438][ T9247] usb 3-1: config 0 descriptor?? [ 486.686671][T10236] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 486.792069][ T9239] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 486.853753][T10260] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1129'. [ 487.198459][T10236] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 487.323667][ T9239] usb 1-1: device descriptor read/64, error -71 [ 487.445688][ T9239] usb usb1-port1: attempt power cycle [ 487.862899][T10271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1132'. [ 487.919743][ T9239] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 487.943927][ T9239] usb 1-1: device descriptor read/8, error -71 [ 488.414128][ T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 488.602198][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 488.647225][T10282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1135'. [ 488.656736][ T9] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 488.677398][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 488.737856][ T9] usb 5-1: config 0 has no interface number 0 [ 488.745067][ T9247] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 488.755533][ T9247] asix 3-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 488.769540][ T9247] asix 3-1:0.188: probe with driver asix failed with error -61 [ 488.778673][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17 [ 488.788446][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.796565][ T9] usb 5-1: Product: syz [ 488.802110][ T9239] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 488.808738][ T9] usb 5-1: Manufacturer: syz [ 488.822093][ T9] usb 5-1: SerialNumber: syz [ 488.822779][ T9239] usb 1-1: device descriptor read/8, error -71 [ 488.837745][ T9] usb 5-1: config 0 descriptor?? [ 488.847331][ T9] uvcvideo 5-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 488.854796][ T9] uvcvideo 5-1:0.105: No valid video chain found. [ 488.993241][ T9239] usb usb1-port1: unable to enumerate USB device [ 489.226731][T10286] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1136'. [ 489.235845][T10286] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1136'. [ 489.861154][T10295] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 490.040577][ T9247] usb 3-1: USB disconnect, device number 38 [ 490.560547][ T29] audit: type=1326 audit(1775580892.303:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10293 comm="syz.0.1138" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3271f9c819 code=0x0 [ 490.792905][ T29] audit: type=1400 audit(1775580892.453:422): avc: denied { ioctl } for pid=10304 comm="syz.1.1141" path="socket:[26064]" dev="sockfs" ino=26064 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 490.891446][ T9247] usb 5-1: USB disconnect, device number 33 [ 490.927923][T10309] netlink: 'syz.4.1143': attribute type 16 has an invalid length. [ 490.948014][T10309] netlink: 'syz.4.1143': attribute type 17 has an invalid length. [ 491.125761][T10309] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 491.217399][T10312] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1143'. [ 492.666713][ T7276] bridge_slave_1: left allmulticast mode [ 492.680138][ T7276] bridge_slave_1: left promiscuous mode [ 492.697670][ T7276] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.773438][ T7276] bridge_slave_0: left allmulticast mode [ 492.788751][ T7276] bridge_slave_0: left promiscuous mode [ 492.809913][ T7276] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.944421][ T5805] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 492.955133][ T5805] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 492.972178][ T5805] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 492.995696][ T5805] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 493.012156][ T5805] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 493.132320][ T9] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 493.304199][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 493.312512][ T9] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 493.333467][ T9] usb 5-1: config 0 has no interface number 0 [ 493.347642][ T9] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 493.370217][ T9] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 493.396661][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.420159][ T9] usb 5-1: Product: syz [ 493.436247][T10343] netlink: 'syz.3.1147': attribute type 1 has an invalid length. [ 493.441184][ T9] usb 5-1: Manufacturer: syz [ 493.454979][ T9] usb 5-1: SerialNumber: syz [ 493.466084][ T9] usb 5-1: config 0 descriptor?? [ 493.476058][T10328] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 493.582089][ T10] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 493.782081][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 493.796149][ T10] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 493.798460][T10328] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 493.813352][ T10] usb 1-1: config 0 has no interface number 0 [ 493.814701][ T7276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 493.819891][ T10] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 493.873621][ T7276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 493.875765][ T10] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 493.893668][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.901686][ T10] usb 1-1: Product: syz [ 493.923888][ T7276] bond0 (unregistering): Released all slaves [ 493.943116][ T10] usb 1-1: Manufacturer: syz [ 493.947881][ T10] usb 1-1: SerialNumber: syz [ 493.974228][ T7276] bond1 (unregistering): Released all slaves [ 493.982831][ T10] usb 1-1: config 0 descriptor?? [ 493.994941][T10339] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 494.174793][ T7276] IPVS: stopping master sync thread 7997 ... [ 494.235903][T10350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1153'. [ 494.247608][T10339] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 494.368205][T10350] bond1: Invalid ad_actor_system MAC address. [ 494.374395][T10350] bond1: option ad_actor_system: invalid value (1) [ 494.384604][T10350] bond1 (unregistering): Released all slaves [ 494.689531][ T9] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 494.710330][ T9] asix 5-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 494.731812][ T9] asix 5-1:0.188: probe with driver asix failed with error -61 [ 494.909435][ T7276] hsr_slave_0: left promiscuous mode [ 494.948647][ T7276] hsr_slave_1: left promiscuous mode [ 494.961725][ T7276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.995506][ T7276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 495.020029][ T7276] batman_adv: batadv0: Removing interface: vlan1 [ 495.082810][ T5805] Bluetooth: hci3: command tx timeout [ 495.089569][ T10] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 495.107969][ T10] asix 1-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 495.136572][ T10] asix 1-1:0.188: probe with driver asix failed with error -61 [ 495.322371][ T9] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 495.359497][ T7276] team0 (unregistering): Port device team_slave_1 removed [ 495.384617][ T7276] team0 (unregistering): Port device team_slave_0 removed [ 495.472073][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 495.480484][ T9] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 495.489849][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.508874][ T9] usb 4-1: Product: syz [ 495.518991][ T9] usb 4-1: Manufacturer: syz [ 495.529140][ T9] usb 4-1: SerialNumber: syz [ 495.550545][ T9] usb 4-1: config 0 descriptor?? [ 495.568301][T10329] chnl_net:caif_netlink_parms(): no params data found [ 495.570160][ T9] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 495.599656][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 495.664919][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 495.725084][ T9] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 495.745392][T10329] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.749056][ T9] usb 4-1: media controller created [ 495.762372][T10329] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.769691][T10329] bridge_slave_0: entered allmulticast mode [ 495.777283][T10329] bridge_slave_0: entered promiscuous mode [ 495.795466][T10329] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.797860][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 495.803183][T10329] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.820327][T10329] bridge_slave_1: entered allmulticast mode [ 495.833309][T10329] bridge_slave_1: entered promiscuous mode [ 495.854256][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 495.919204][T10329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.934947][ T9] DVB: Unable to find symbol mt352_attach() [ 495.945882][ T10] usb 5-1: USB disconnect, device number 34 [ 495.959081][ T9] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 495.985079][T10329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.052403][ T9247] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 496.062600][T10374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.086323][T10374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.090096][T10329] team0: Port device team_slave_0 added [ 496.103015][ T9] rc_core: IR keymap rc-dvico-portable not found [ 496.109376][ T9] Registered IR keymap rc-empty [ 496.126759][T10329] team0: Port device team_slave_1 added [ 496.144060][ T9] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 496.174236][T10374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.184518][T10374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.194409][ T9] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input23 [ 496.225475][T10329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.235170][T10329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.261678][ T9] dvb-usb: schedule remote query interval to 100 msecs. [ 496.270953][ T9] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 496.281188][ T9247] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 496.298750][ T9247] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.312278][T10329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.326736][ T9247] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 496.342554][ T9247] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.353069][T10329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.360021][T10329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.366138][ T9240] usb 1-1: USB disconnect, device number 36 [ 496.386480][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 496.429219][T10329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.446202][ T9] usb 4-1: USB disconnect, device number 42 [ 496.459234][ T9247] usb 3-1: config 0 descriptor?? [ 496.492092][ T10] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 496.520886][T10405] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 496.696538][ T10] usb 5-1: config 0 has an invalid interface number: 107 but max is 0 [ 496.715087][T10329] hsr_slave_0: entered promiscuous mode [ 496.718871][ T9] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 496.721565][T10329] hsr_slave_1: entered promiscuous mode [ 496.735688][ T10] usb 5-1: config 0 has no interface number 0 [ 496.739706][T10329] debugfs: 'hsr0' already exists in 'hsr' [ 496.744072][ T10] usb 5-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 65535, setting to 64 [ 496.873538][ T10] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 497.028240][ T10] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 497.124869][T10329] Cannot create hsr debugfs directory [ 497.139439][ T10] usb 5-1: Product: syz [ 497.148252][ T10] usb 5-1: Manufacturer: syz [ 497.154695][ T10] usb 5-1: SerialNumber: syz [ 497.177701][ T5805] Bluetooth: hci3: command tx timeout [ 497.223164][ T10] usb 5-1: config 0 descriptor?? [ 497.230203][T10396] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 497.324591][ T10] keyspan 5-1:0.107: Keyspan 4 port adapter converter detected [ 497.361075][ T10] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 81 [ 497.370666][ T10] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 1 [ 497.381360][ T10] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 497.495250][T10396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1157'. [ 497.586561][ T10] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 2 [ 497.606394][ T10] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 497.618894][ T10] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 4 [ 498.131302][ T10] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 498.170868][ T10] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 6 [ 498.207914][ T10] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 498.512402][T10423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1161'. [ 498.865196][T10329] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 498.927676][T10329] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 498.954699][T10329] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 499.013858][T10329] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 499.083203][ T29] audit: type=1400 audit(1775580900.823:423): avc: denied { attach_queue } for pid=10428 comm="syz.3.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 499.201702][T10431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1163'. [ 499.236118][ T9239] usb 5-1: USB disconnect, device number 35 [ 499.262240][ T5805] Bluetooth: hci3: command tx timeout [ 499.288413][ T9239] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 499.371541][ T9239] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 499.534735][ T9239] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 499.562116][ T9247] usbhid 3-1:0.0: can't add hid device: -71 [ 499.568076][ T9247] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 499.934703][ T9239] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 499.961706][ T9239] keyspan 5-1:0.107: device disconnected [ 499.973114][ T9247] usb 3-1: USB disconnect, device number 39 [ 500.656218][T10329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.728742][T10329] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.755677][ T3490] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.762866][ T3490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.810882][ T3490] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.818007][ T3490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.900455][T10329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 500.996472][T10474] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 501.117495][T10477] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1539 sclass=netlink_tcpdiag_socket pid=10477 comm=syz.0.1173 [ 501.245936][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.252586][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.322093][ T5805] Bluetooth: hci3: command tx timeout [ 501.586951][T10329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 501.682118][T10492] netlink: 'syz.4.1169': attribute type 1 has an invalid length. [ 503.175597][T10514] netlink: 'syz.0.1178': attribute type 1 has an invalid length. [ 504.477168][T10531] netlink: 'syz.0.1184': attribute type 1 has an invalid length. [ 504.485133][T10531] netlink: 976 bytes leftover after parsing attributes in process `syz.0.1184'. [ 504.602081][ T5805] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 504.614148][ T5805] Bluetooth: hci0: command 0x0c1a tx timeout [ 504.872583][ T9247] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 504.886138][T10329] veth0_vlan: entered promiscuous mode [ 504.902899][T10329] veth1_vlan: entered promiscuous mode [ 504.931642][T10329] veth0_macvtap: entered promiscuous mode [ 504.942905][T10329] veth1_macvtap: entered promiscuous mode [ 504.962021][T10329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 504.973620][T10329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 505.072115][ T9247] usb 5-1: Using ep0 maxpacket: 8 [ 505.182078][ T3490] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.196979][ T7176] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.210803][ T9247] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 505.229839][ T7176] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.242684][ T9247] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.295669][ T9247] pvrusb2: Hardware description: Terratec Grabster AV400 [ 505.303048][ T9247] pvrusb2: ********** [ 505.307171][ T9247] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 505.317882][ T9247] pvrusb2: Important functionality might not be entirely working. [ 505.325856][ T9247] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 505.337782][ T9247] pvrusb2: ********** [ 505.456598][ T7176] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.001088][ T2336] pvrusb2: Invalid write control endpoint [ 506.042922][ T7276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.073109][ T7276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.090693][T10543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1187'. [ 506.271019][ T3570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.284130][T10547] SELinux: syz.4.1183 (10547) set checkreqprot to 1. This is no longer supported. [ 506.285464][ T2336] pvrusb2: Invalid write control endpoint [ 506.302956][ T3570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.320474][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 506.333175][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 506.340822][ T29] audit: type=1400 audit(1775580908.083:424): avc: denied { mounton } for pid=10329 comm="syz-executor" path="/root/syzkaller.GV67G2/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 506.377482][T10546] kvm: Disabled LAPIC found during irq injection [ 506.382574][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 506.412004][ T2336] pvrusb2: Device being rendered inoperable [ 506.432141][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 507.277777][ T29] audit: type=1400 audit(1775580908.083:425): avc: denied { mounton } for pid=10329 comm="syz-executor" path="/root/syzkaller.GV67G2/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 507.309830][T10552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1189'. [ 507.336525][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 507.362639][ T2336] pvrusb2: Attached sub-driver cx25840 [ 507.368118][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 507.475584][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 507.486283][ T29] audit: type=1400 audit(1775580908.083:426): avc: denied { mounton } for pid=10329 comm="syz-executor" path="/root/syzkaller.GV67G2/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=27855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 507.552541][ T29] audit: type=1400 audit(1775580908.173:427): avc: denied { mounton } for pid=10329 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 507.893919][ T9247] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 508.042196][ T9247] usb 6-1: device descriptor read/64, error -71 [ 508.130739][ T29] audit: type=1400 audit(1775580909.863:428): avc: denied { mount } for pid=10562 comm="syz.3.1191" name="/" dev="ramfs" ino=27100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 508.267747][T10572] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 508.384088][ T9227] usb 5-1: USB disconnect, device number 36 [ 508.403974][ T9247] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 508.572047][ T9247] usb 6-1: device descriptor read/64, error -71 [ 508.702382][ T9247] usb usb6-port1: attempt power cycle [ 509.232074][ T9247] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 509.256003][T10575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1194'. [ 509.305672][ T9247] usb 6-1: device descriptor read/8, error -71 [ 509.669050][T10583] netlink: 'syz.2.1196': attribute type 1 has an invalid length. [ 509.676871][T10583] netlink: 976 bytes leftover after parsing attributes in process `syz.2.1196'. [ 510.035536][ T5814] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 510.041720][ T5805] Bluetooth: hci0: command 0x0c1a tx timeout [ 510.079015][ T29] audit: type=1400 audit(1775580911.803:429): avc: denied { ioctl } for pid=10579 comm="syz.4.1195" path="socket:[27927]" dev="sockfs" ino=27927 ioctlcmd=0x9416 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 510.542058][ T9247] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 510.565009][ T29] audit: type=1400 audit(1775580912.313:430): avc: denied { create } for pid=10590 comm="syz.4.1198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 510.656389][ T9247] usb 6-1: device descriptor read/8, error -71 [ 510.796047][T10603] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 510.834118][ T9247] usb usb6-port1: unable to enumerate USB device [ 510.965082][T10606] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1201'. [ 511.112299][ T9227] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 511.327567][ T9227] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 511.930531][ T9227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.939189][ T9227] usb 4-1: Product: syz [ 511.943433][ T9227] usb 4-1: Manufacturer: syz [ 511.948031][ T9227] usb 4-1: SerialNumber: syz [ 511.954448][ T9227] usb 4-1: config 0 descriptor?? [ 511.964877][ T9227] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 043 [ 511.971837][T10614] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1203'. [ 512.332961][ T9241] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 512.364983][ T9227] (null): failure reading functionality [ 512.375850][ T9227] i2c i2c-1: connected i2c-tiny-usb device [ 512.513173][ T9241] usb 1-1: Using ep0 maxpacket: 8 [ 512.519527][ T9241] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 512.544233][ T9241] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.583114][T10599] overlayfs: missing 'lowerdir' [ 512.598664][ T9227] usb 4-1: USB disconnect, device number 43 [ 512.663077][ T9241] pvrusb2: Hardware description: Terratec Grabster AV400 [ 512.692287][ T9241] pvrusb2: ********** [ 512.722055][ T9241] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 512.767954][ T9241] pvrusb2: Important functionality might not be entirely working. [ 512.794841][ T9241] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 512.866212][T10640] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1207'. [ 512.963245][ T9241] pvrusb2: ********** [ 512.976405][ T2336] pvrusb2: Invalid write control endpoint [ 513.095035][ T2336] pvrusb2: Invalid write control endpoint [ 513.105350][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 513.118808][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 513.150408][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 513.172143][ T9227] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 513.286250][ T2336] pvrusb2: Device being rendered inoperable [ 513.320137][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 513.383650][T10646] SELinux: syz.0.1204 (10646) set checkreqprot to 1. This is no longer supported. [ 513.471892][ T9227] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 513.495345][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 513.518979][ T2336] pvrusb2: Attached sub-driver cx25840 [ 513.532532][ T9227] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 513.622475][ T9227] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 513.637976][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 513.677323][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 513.713569][ T9227] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.922975][ T9248] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 514.067278][T10639] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 514.119309][ T9227] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 514.272334][ T9248] usb 4-1: Using ep0 maxpacket: 16 [ 514.308070][ T9248] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 514.327123][ T9248] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 514.371395][ T9248] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 514.428093][T10639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.438151][T10639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.523325][ T9248] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 514.532540][ T9248] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.540531][ T9248] usb 4-1: Product: syz [ 514.545043][ T9248] usb 4-1: Manufacturer: syz [ 514.549644][ T9248] usb 4-1: SerialNumber: syz [ 515.312687][T10650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.330502][T10650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.364087][T10650] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1208'. [ 515.493133][ T9227] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 515.539755][ T9248] usb 4-1: 0:2 : does not exist [ 515.575779][ T9248] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1) [ 515.587504][T10677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1213'. [ 515.636754][ T29] audit: type=1400 audit(1775580917.383:431): avc: denied { ioctl } for pid=10675 comm="syz.4.1213" path="socket:[28097]" dev="sockfs" ino=28097 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 515.642621][ T9227] usb 6-1: device descriptor read/64, error -71 [ 515.729289][ T9248] usb 4-1: USB disconnect, device number 44 [ 516.266212][ T10] usb 1-1: USB disconnect, device number 37 [ 516.432069][ T9227] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 516.556683][ T9247] usb 3-1: USB disconnect, device number 40 [ 516.577578][ T5797] udevd[5797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 516.664654][T10686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1215'. [ 516.673816][ T9227] usb 6-1: device descriptor read/64, error -71 [ 516.786487][ T9227] usb usb6-port1: attempt power cycle [ 517.228470][ T9227] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 517.252679][ T9227] usb 6-1: device descriptor read/8, error -71 [ 517.772355][ T9227] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 517.846312][ T9227] usb 6-1: device descriptor read/8, error -71 [ 517.962413][ T9227] usb usb6-port1: unable to enumerate USB device [ 520.436669][ T9227] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 520.482064][ T9248] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 520.592648][ T9227] usb 5-1: Using ep0 maxpacket: 8 [ 520.634574][ T9227] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 520.920486][ T9227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.012312][ T9227] pvrusb2: Hardware description: Terratec Grabster AV400 [ 521.062052][ T9227] pvrusb2: ********** [ 521.093153][ T9227] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 521.106013][ T9248] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 521.131049][ T9248] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 521.154791][ T9227] pvrusb2: Important functionality might not be entirely working. [ 521.171317][ T9248] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 521.172723][ T9227] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 521.191589][ T9248] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.214427][T10749] netlink: 'syz.2.1230': attribute type 16 has an invalid length. [ 521.255720][T10749] netlink: 'syz.2.1230': attribute type 17 has an invalid length. [ 521.272409][ T9227] pvrusb2: ********** [ 521.281903][ T2336] pvrusb2: Invalid write control endpoint [ 521.429863][T10749] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 521.504835][T10757] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1230'. [ 521.881569][T10724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.106590][T10762] SELinux: syz.4.1228 (10762) set checkreqprot to 1. This is no longer supported. [ 522.490249][T10724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.537571][ T2336] pvrusb2: Invalid write control endpoint [ 522.580448][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 522.590306][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 522.604715][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 522.632932][ T2336] pvrusb2: Device being rendered inoperable [ 522.646361][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 522.666525][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 522.688814][ T2336] pvrusb2: Attached sub-driver cx25840 [ 522.700365][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 522.723706][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 522.737734][T10772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1234'. [ 523.550811][ T9227] usb 5-1: USB disconnect, device number 37 [ 523.639184][ T9239] usb 1-1: USB disconnect, device number 38 [ 525.879865][T10818] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 526.222518][ T9] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 526.405661][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 526.439750][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 526.481455][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 526.515974][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.547449][ T9] usb 3-1: Product: syz [ 526.561617][ T9] usb 3-1: Manufacturer: syz [ 526.605696][ T9] usb 3-1: SerialNumber: syz [ 527.255794][ T29] audit: type=1400 audit(1775580928.573:432): avc: denied { mount } for pid=10819 comm="syz.4.1247" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 527.278467][ T29] audit: type=1400 audit(1775580928.583:433): avc: denied { remount } for pid=10819 comm="syz.4.1247" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 527.304655][ T9] usb 3-1: 0:1 : does not exist [ 527.309601][ T9] usb 3-1: BAAD SPEAKER p_chmask mismatch [ 527.376332][ T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 527.462080][ T29] audit: type=1400 audit(1775580929.203:434): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 527.486754][ T9] usb 3-1: USB disconnect, device number 41 [ 527.571861][ T5797] udevd[5797]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 528.057033][T10827] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1249'. [ 528.089827][T10827] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1249'. [ 528.142761][ T29] audit: type=1400 audit(1775580929.883:435): avc: denied { write } for pid=10826 comm="syz.3.1249" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 528.421245][ T9248] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 528.662673][ T9248] usb 5-1: Using ep0 maxpacket: 16 [ 528.780865][T10842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1253'. [ 528.795976][ T9248] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.807659][ T9248] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.159822][ T9248] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 529.173229][ T9248] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 529.195286][ T9248] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.209151][ T9248] usb 5-1: config 0 descriptor?? [ 529.305496][T10850] Bluetooth: MGMT ver 1.23 [ 529.310078][T10850] FAULT_INJECTION: forcing a failure. [ 529.310078][T10850] name failslab, interval 1, probability 0, space 0, times 0 [ 529.370063][T10850] CPU: 1 UID: 0 PID: 10850 Comm: syz.5.1255 Tainted: G L syzkaller #0 PREEMPT(full) [ 529.370097][T10850] Tainted: [L]=SOFTLOCKUP [ 529.370101][T10850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 529.370108][T10850] Call Trace: [ 529.370112][T10850] [ 529.370118][T10850] dump_stack_lvl+0x100/0x190 [ 529.370151][T10850] should_fail_ex.cold+0x5/0xa [ 529.370176][T10850] ? __pfx_start_discovery_sync+0x10/0x10 [ 529.370197][T10850] should_failslab+0xc2/0x120 [ 529.370218][T10850] ? __pfx_start_discovery_sync+0x10/0x10 [ 529.370239][T10850] __kmalloc_cache_noprof+0x7a/0x6f0 [ 529.370264][T10850] ? hci_cmd_sync_submit+0xbc/0x330 [ 529.370284][T10850] ? __pfx_start_discovery_complete+0x10/0x10 [ 529.370296][T10850] ? __pfx_start_discovery_sync+0x10/0x10 [ 529.370313][T10850] hci_cmd_sync_submit+0xbc/0x330 [ 529.370345][T10850] ? __pfx_start_discovery_sync+0x10/0x10 [ 529.370367][T10850] ? __pfx_start_discovery_complete+0x10/0x10 [ 529.370386][T10850] hci_cmd_sync_queue+0x79/0xa0 [ 529.370405][T10850] start_discovery_internal+0x4ee/0x830 [ 529.370421][T10850] ? __pfx_start_discovery_internal+0x10/0x10 [ 529.370435][T10850] ? timer_init_key+0x150/0x340 [ 529.370460][T10850] ? __pfx_mgmt_init_hdev+0x10/0x10 [ 529.370491][T10850] hci_sock_sendmsg+0x154e/0x2620 [ 529.370524][T10850] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 529.370546][T10850] sock_write_iter+0x524/0x5a0 [ 529.370559][T10850] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 529.370574][T10850] ? __pfx_sock_write_iter+0x10/0x10 [ 529.370593][T10850] ? bpf_lsm_file_permission+0x9/0x10 [ 529.370623][T10850] ? security_file_permission+0x76/0x210 [ 529.370656][T10850] ? rw_verify_area+0xce/0x6d0 [ 529.370680][T10850] vfs_write+0x6ac/0x1070 [ 529.370692][T10850] ? __pfx_sock_write_iter+0x10/0x10 [ 529.370705][T10850] ? __pfx_vfs_write+0x10/0x10 [ 529.370714][T10850] ? find_held_lock+0x2b/0x80 [ 529.370746][T10850] ksys_write+0x1f8/0x250 [ 529.370765][T10850] ? __pfx_ksys_write+0x10/0x10 [ 529.370793][T10850] do_syscall_64+0x106/0xf80 [ 529.370812][T10850] ? clear_bhb_loop+0x40/0x90 [ 529.370838][T10850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.370856][T10850] RIP: 0033:0x7f6a86d9c819 [ 529.370866][T10850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.370878][T10850] RSP: 002b:00007f6a87d0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 529.370891][T10850] RAX: ffffffffffffffda RBX: 00007f6a87015fa0 RCX: 00007f6a86d9c819 [ 529.370904][T10850] RDX: 0000000000000007 RSI: 0000200000000140 RDI: 0000000000000004 [ 529.370917][T10850] RBP: 00007f6a87d0d090 R08: 0000000000000000 R09: 0000000000000000 [ 529.370929][T10850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.370941][T10850] R13: 00007f6a87016038 R14: 00007f6a87015fa0 R15: 00007ffcb259b888 [ 529.370970][T10850] [ 530.094945][T10830] random: crng reseeded on system resumption [ 530.248699][ T9248] input: HID 0955:7214 Haptics as /devices/virtual/input/input24 [ 530.907837][ T9248] shield 0003:0955:7214.0010: Registered Thunderstrike controller [ 530.916098][ T9248] shield 0003:0955:7214.0010: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 532.020714][ T9248] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 532.035239][ T10] usb 5-1: USB disconnect, device number 38 [ 532.056178][ T9248] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 532.084249][ T9248] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 532.099352][ T9248] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 532.394346][ T9240] IPVS: starting estimator thread 0... [ 532.481509][T10879] netlink: 'syz.2.1261': attribute type 1 has an invalid length. [ 532.489756][T10879] netlink: 976 bytes leftover after parsing attributes in process `syz.2.1261'. [ 532.926345][T10877] IPVS: using max 65 ests per chain, 156000 per kthread [ 533.120512][T10883] netlink: 'syz.5.1263': attribute type 16 has an invalid length. [ 533.129508][T10883] netlink: 'syz.5.1263': attribute type 17 has an invalid length. [ 533.169261][T10883] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 533.487096][T10893] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1263'. [ 537.717585][ T10] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 537.728327][ T29] audit: type=1400 audit(1775580939.413:436): avc: denied { setopt } for pid=10895 comm="syz.2.1265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 537.948032][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 537.960707][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 537.971297][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.006276][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 538.083430][T10931] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 538.398123][ T10] pvrusb2: ********** [ 538.404445][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 538.467892][ T10] pvrusb2: Important functionality might not be entirely working. [ 538.510847][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 538.542685][ T10] pvrusb2: ********** [ 538.561898][ T2336] pvrusb2: Invalid write control endpoint [ 538.628609][T10934] netlink: 'syz.5.1274': attribute type 10 has an invalid length. [ 538.774328][T10934] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1274'. [ 538.775014][ T2336] pvrusb2: Invalid write control endpoint [ 538.800691][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 538.859719][T10934] vlan1: entered promiscuous mode [ 538.885311][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 538.905417][T10922] SELinux: syz.4.1271 (10922) set checkreqprot to 1. This is no longer supported. [ 539.293629][T10934] batman_adv: batadv0: Adding interface: vlan1 [ 539.299795][T10934] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 539.325863][T10934] batman_adv: batadv0: Interface activated: vlan1 [ 539.326666][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 539.455270][ T2336] pvrusb2: Device being rendered inoperable [ 539.472157][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 539.488572][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 539.668802][ T2336] pvrusb2: Attached sub-driver cx25840 [ 539.731860][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 539.839174][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 541.452496][ T9241] usb 5-1: USB disconnect, device number 39 [ 542.296519][T10966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1280'. [ 542.724344][ T9247] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 542.772340][ T9241] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 543.263806][ T9247] usb 4-1: device descriptor read/64, error -71 [ 543.460078][T10982] netlink: 'syz.4.1286': attribute type 10 has an invalid length. [ 543.502165][ T9241] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 543.517058][T10982] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1286'. [ 543.526180][ T9247] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 543.562364][ T9241] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 543.599437][ T9241] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 543.632098][ T9241] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.686167][ T9247] usb 4-1: device descriptor read/64, error -71 [ 543.720434][T10966] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 543.754505][ T9241] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 543.803988][ T9247] usb usb4-port1: attempt power cycle [ 544.515691][T10965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.527018][T10965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.743654][ T9247] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 544.805658][ T9247] usb 4-1: device descriptor read/8, error -71 [ 545.505442][ T9247] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 545.575216][ T9247] usb 4-1: device descriptor read/8, error -71 [ 545.703901][ T9247] usb usb4-port1: unable to enumerate USB device [ 546.831046][T11003] SELinux: failed to load policy [ 546.851332][ T9247] usb 3-1: USB disconnect, device number 42 [ 546.912238][ T9248] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 547.404694][ T10] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 547.463615][ T9248] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 547.484396][ T9248] usb 1-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 547.507340][ T9248] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 547.522761][ T9248] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 547.533314][ T9248] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.566006][ T9248] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 547.624134][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 547.649730][ T10] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 547.666297][ T10] usb 4-1: config 0 has an invalid descriptor of length 15, skipping remainder of the config [ 547.682723][ T10] usb 4-1: config 0 has no interface number 0 [ 547.683454][ T9248] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 547.698644][ T10] usb 4-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 547.718194][ T10] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 547.739116][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.749952][ T10] usb 4-1: Product: syz [ 547.759546][ T10] usb 4-1: Manufacturer: syz [ 547.765711][T11008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.775885][T11008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.785122][ T10] usb 4-1: SerialNumber: syz [ 547.791551][ T10] usb 4-1: config 0 descriptor?? [ 547.818750][ T10] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 547.837011][ T10] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5 [ 548.541165][ T10] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 548.553941][ T10] usbhid 4-1:0.35: couldn't find an input interrupt endpoint [ 548.598859][T11024] netlink: 'syz.2.1298': attribute type 10 has an invalid length. [ 548.612487][T11024] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1298'. [ 548.679093][T11026] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 548.689130][T11026] SELinux: failed to load policy [ 548.909681][ T9241] usb 1-1: USB disconnect, device number 39 [ 549.022544][ T9240] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 549.256650][ T9240] usb 6-1: Using ep0 maxpacket: 32 [ 549.325897][ T9240] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 549.426923][ T9240] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 549.550354][ T9240] usb 6-1: config 0 has no interface number 0 [ 549.631629][ T9240] usb 6-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 549.770278][T11030] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 549.963780][ T9240] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 549.992713][ T9240] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.603276][ T29] audit: type=1400 audit(1775580951.703:437): avc: denied { append } for pid=11028 comm="syz.4.1300" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 550.866471][ T9240] usb 6-1: Product: syz [ 550.906095][ T9241] usb 4-1: USB disconnect, device number 49 [ 550.947047][ T9240] usb 6-1: Manufacturer: syz [ 551.014916][ T9240] usb 6-1: SerialNumber: syz [ 551.069265][ T29] audit: type=1400 audit(1775580952.253:438): avc: denied { ioctl } for pid=11028 comm="syz.4.1300" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x587a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 551.205414][ T9240] usb 6-1: config 0 descriptor?? [ 551.323611][ T9240] radio-si470x 6-1:0.35: could not find interrupt in endpoint [ 551.480323][ T9240] radio-si470x 6-1:0.35: probe with driver radio-si470x failed with error -5 [ 551.744268][T11043] netlink: 'syz.3.1304': attribute type 16 has an invalid length. [ 551.772117][ T9240] radio-raremono 6-1:0.35: this is not Thanko's Raremono. [ 551.794310][T11043] netlink: 'syz.3.1304': attribute type 17 has an invalid length. [ 551.811503][ T9240] usbhid 6-1:0.35: couldn't find an input interrupt endpoint [ 552.032153][T11043] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 552.109099][T11049] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1304'. [ 552.696694][ T9239] usb 6-1: USB disconnect, device number 10 [ 552.822908][T11053] netlink: 'syz.4.1305': attribute type 1 has an invalid length. [ 556.572820][ T9241] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 556.789620][ T9241] usb 1-1: Using ep0 maxpacket: 32 [ 556.806714][ T9241] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 556.824413][ T9241] usb 1-1: config 0 has an invalid descriptor of length 15, skipping remainder of the config [ 556.835208][ T9241] usb 1-1: config 0 has no interface number 0 [ 556.841446][ T9241] usb 1-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 556.889790][ T9241] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 556.939582][ T9241] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.964503][ T9241] usb 1-1: Product: syz [ 556.979833][T11083] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1314'. [ 556.982019][ T9241] usb 1-1: Manufacturer: syz [ 557.016234][ T9241] usb 1-1: SerialNumber: syz [ 557.033353][ T9241] usb 1-1: config 0 descriptor?? [ 557.039851][ T9241] usb 1-1: can't set config #0, error -71 [ 557.058983][ T9241] usb 1-1: USB disconnect, device number 40 [ 557.722469][ T9239] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 558.234241][ T9239] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 558.252357][ T9239] usb 6-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 558.278307][ T9239] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 558.284947][T11100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1316'. [ 558.319040][ T9239] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 558.328561][ T9239] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.347518][ T9239] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 558.427681][ T9239] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 558.452021][ T10] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 558.551305][T11082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.567114][T11082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.863030][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 558.906252][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 558.962120][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 559.086631][ T10] usb 5-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 559.111448][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.160729][ T10] usb 5-1: config 0 descriptor?? [ 559.750359][ T10] samsung 0003:0419:0600.0011: item fetching failed at offset 12/41 [ 559.773608][ T10] samsung 0003:0419:0600.0011: parse failed [ 559.780005][ T10] samsung 0003:0419:0600.0011: probe with driver samsung failed with error -22 [ 559.856779][T11112] netlink: 'syz.0.1320': attribute type 1 has an invalid length. [ 559.864623][T11112] netlink: 976 bytes leftover after parsing attributes in process `syz.0.1320'. [ 560.257138][ T9] usb 6-1: USB disconnect, device number 11 [ 560.290398][ T10] usb 5-1: USB disconnect, device number 40 [ 561.005994][T11122] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 561.300952][T11129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1323'. [ 561.832671][T11138] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1325'. [ 562.067599][ T29] audit: type=1400 audit(1775580963.813:439): avc: denied { connect } for pid=11141 comm="syz.2.1327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 562.136810][T11147] hsr0: entered promiscuous mode [ 562.192171][ T9239] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 562.273423][T11152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1328'. [ 562.301766][T11152] hsr_slave_0: left promiscuous mode [ 562.454673][T11152] hsr_slave_1: left promiscuous mode [ 562.509433][ T9239] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 562.526916][T11157] 9p: Bad value for 'wfdno' [ 562.534491][ T9239] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 562.546549][ T9239] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 562.561382][ T9239] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.571497][T11152] hsr0 (unregistering): left promiscuous mode [ 562.686628][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.695285][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.735480][T11140] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 562.786707][ T9239] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 563.223445][T11138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.233636][T11138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.571133][T11175] netlink: 'syz.0.1332': attribute type 1 has an invalid length. [ 565.579190][T11175] netlink: 976 bytes leftover after parsing attributes in process `syz.0.1332'. [ 566.251909][ T9] usb 5-1: USB disconnect, device number 41 [ 567.233318][T11197] FAULT_INJECTION: forcing a failure. [ 567.233318][T11197] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 567.253675][T11197] CPU: 0 UID: 0 PID: 11197 Comm: syz.0.1341 Tainted: G L syzkaller #0 PREEMPT(full) [ 567.253697][T11197] Tainted: [L]=SOFTLOCKUP [ 567.253700][T11197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 567.253708][T11197] Call Trace: [ 567.253712][T11197] [ 567.253717][T11197] dump_stack_lvl+0x100/0x190 [ 567.253740][T11197] should_fail_ex.cold+0x5/0xa [ 567.253755][T11197] _copy_from_user+0x2e/0xd0 [ 567.253769][T11197] copy_msghdr_from_user+0x9f/0x4f0 [ 567.253784][T11197] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 567.253804][T11197] ___sys_sendmsg+0x106/0x1e0 [ 567.253817][T11197] ? __pfx____sys_sendmsg+0x10/0x10 [ 567.253848][T11197] __sys_sendmsg+0x170/0x220 [ 567.253864][T11197] ? __pfx___sys_sendmsg+0x10/0x10 [ 567.253889][T11197] do_syscall_64+0x106/0xf80 [ 567.253901][T11197] ? clear_bhb_loop+0x40/0x90 [ 567.253915][T11197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.253948][T11197] RIP: 0033:0x7f3271f9c819 [ 567.253959][T11197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 567.253970][T11197] RSP: 002b:00007f3272f1b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 567.253982][T11197] RAX: ffffffffffffffda RBX: 00007f3272215fa0 RCX: 00007f3271f9c819 [ 567.253989][T11197] RDX: 0000000000020000 RSI: 0000200000000280 RDI: 0000000000000003 [ 567.253996][T11197] RBP: 00007f3272f1b090 R08: 0000000000000000 R09: 0000000000000000 [ 567.254003][T11197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 567.254009][T11197] R13: 00007f3272216038 R14: 00007f3272215fa0 R15: 00007ffd36846e88 [ 567.254025][T11197] [ 569.900934][ T9248] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 572.612984][ T9248] usb 1-1: Using ep0 maxpacket: 32 [ 572.650999][ T9248] usb 1-1: device descriptor read/all, error -71 [ 573.172046][ T9239] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 573.347513][T11234] netlink: 'syz.2.1348': attribute type 1 has an invalid length. [ 573.356507][ T9239] usb 6-1: Using ep0 maxpacket: 8 [ 573.372864][T11234] netlink: 976 bytes leftover after parsing attributes in process `syz.2.1348'. [ 573.377332][ T9239] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 573.391263][ T9239] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.417141][ T9239] usb 6-1: Product: syz [ 573.421338][ T9239] usb 6-1: Manufacturer: syz [ 573.440459][ T9239] usb 6-1: SerialNumber: syz [ 573.450272][ T9239] usb 6-1: config 0 descriptor?? [ 573.459103][ T9239] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 573.535446][ T9239] dvb-usb: bulk message failed: -22 (2/0) [ 573.557308][ T9239] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 573.567910][ T9239] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 573.577264][ T9239] usb 6-1: media controller created [ 573.590222][ T9239] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 573.668796][ T9239] dvb-usb: bulk message failed: -22 (1/0) [ 573.873844][T11231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.905734][T11231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.937584][ T9239] DVB: Unable to find symbol mt352_attach() [ 573.963716][ T9239] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 574.025863][T11231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.034643][T11231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.103698][ T9239] rc_core: IR keymap rc-dvico-portable not found [ 574.116189][ T9239] Registered IR keymap rc-empty [ 574.137998][ T9239] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 574.214761][ T9239] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input27 [ 574.248581][ T9239] dvb-usb: schedule remote query interval to 100 msecs. [ 574.266049][ T9239] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 574.325020][ T9239] usb 6-1: USB disconnect, device number 12 [ 575.436108][ T9239] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 577.657533][ T9247] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 579.842019][ T9247] usb 3-1: Using ep0 maxpacket: 32 [ 579.867296][ T9247] usb 3-1: device descriptor read/all, error -71 [ 580.303033][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 580.483914][ T9] usb 6-1: device descriptor read/64, error -71 [ 580.800395][ T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 580.874897][T11300] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 580.972136][ T9] usb 6-1: device descriptor read/64, error -71 [ 581.139052][T11308] netlink: 'syz.3.1364': attribute type 1 has an invalid length. [ 581.157640][T11308] netlink: 976 bytes leftover after parsing attributes in process `syz.3.1364'. [ 581.318184][ T9] usb usb6-port1: attempt power cycle [ 581.659050][ T29] audit: type=1400 audit(1775580983.403:440): avc: denied { unmount } for pid=11317 comm="syz.3.1371" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 581.679069][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 581.702963][ T9] usb 6-1: device descriptor read/8, error -71 [ 582.002269][ T9240] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 582.233880][ T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 582.264049][ T9] usb 6-1: device descriptor read/8, error -71 [ 582.343526][ T9240] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 582.382507][ T9] usb usb6-port1: unable to enumerate USB device [ 582.386639][ T9240] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 582.427475][ T9240] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 582.460463][ T9240] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 582.489860][ T9240] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.528918][ T9240] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 582.558831][ T9240] usb 5-1: invalid MIDI out EP 0 [ 582.730041][T11320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.754506][T11320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.785655][ T9240] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 582.838393][T11338] udevd[11338]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 583.892168][ T9248] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 584.052583][ T9248] usb 3-1: Using ep0 maxpacket: 32 [ 584.064148][ T9248] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 584.206316][ T9248] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.250978][ T9248] usb 3-1: config 0 descriptor?? [ 584.269878][ T9248] as10x_usb: device has been detected [ 584.286597][ T9248] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 584.331536][ T9248] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 584.407701][ T9248] as10x_usb: error during firmware upload part1 [ 584.415710][ T9248] Registered device nBox DVB-T Dongle [ 584.501490][ T9248] usb 3-1: USB disconnect, device number 45 [ 584.555951][ T9248] Unregistered device nBox DVB-T Dongle [ 584.557940][ T9248] as10x_usb: device has been disconnected [ 584.614239][ T10] usb 5-1: USB disconnect, device number 42 [ 584.924546][T11359] netlink: 'syz.0.1379': attribute type 1 has an invalid length. [ 584.932527][T11359] netlink: 976 bytes leftover after parsing attributes in process `syz.0.1379'. [ 585.038452][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807cd5c400: rx timeout, send abort [ 585.089564][ T29] audit: type=1400 audit(1775580986.803:441): avc: denied { read } for pid=5161 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 585.152482][ T29] audit: type=1400 audit(1775580986.803:442): avc: denied { search } for pid=5161 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 585.232143][ T29] audit: type=1400 audit(1775580986.803:443): avc: denied { search } for pid=5161 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 585.341116][ T29] audit: type=1400 audit(1775580986.803:444): avc: denied { add_name } for pid=5161 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 585.411443][ T29] audit: type=1400 audit(1775580986.863:445): avc: denied { create } for pid=5161 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 585.493870][ T29] audit: type=1400 audit(1775580986.873:446): avc: denied { append open } for pid=5161 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 585.539567][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807cd5c800: rx timeout, send abort [ 585.547916][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807cd5c400: abort rx timeout. Force session deactivation [ 585.579115][ T29] audit: type=1400 audit(1775580986.873:447): avc: denied { getattr } for pid=5161 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 585.992034][ T9240] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 586.047802][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807cd5c800: abort rx timeout. Force session deactivation [ 586.122187][ T9240] usb 4-1: device descriptor read/64, error -71 [ 586.177744][T11384] netlink: 'syz.2.1390': attribute type 16 has an invalid length. [ 586.262707][ T29] audit: type=1400 audit(1775580988.003:448): avc: denied { listen } for pid=11383 comm="syz.2.1390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 586.435601][ T9240] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 586.712106][ T9240] usb 4-1: device descriptor read/64, error -71 [ 586.894152][ T9240] usb usb4-port1: attempt power cycle [ 587.734761][ T29] audit: type=1400 audit(1775580989.203:449): avc: denied { ioctl } for pid=11390 comm="syz.2.1391" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 588.596674][ T9240] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 588.654191][ T9240] usb 4-1: device descriptor read/8, error -71 [ 589.389048][ T9239] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 589.921862][ T9239] usb 3-1: config index 0 descriptor too short (expected 65535, got 36) [ 589.935874][ T9239] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 589.961789][ T9239] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 589.994932][ T9239] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 590.020774][ T9239] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 590.038309][ T9239] usb 3-1: Manufacturer: syz [ 590.059093][ T9239] usb 3-1: rejected 1 configuration due to insufficient available bus power [ 590.084605][ T9239] usb 3-1: no configuration chosen from 1 choice [ 590.415623][T11422] netlink: 'syz.4.1395': attribute type 1 has an invalid length. [ 590.423587][T11422] netlink: 976 bytes leftover after parsing attributes in process `syz.4.1395'. [ 590.534282][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880328d1800: rx timeout, send abort [ 591.034364][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880328d0000: rx timeout, send abort [ 591.042925][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880328d1800: abort rx timeout. Force session deactivation [ 591.079465][T11429] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 591.087148][T11429] IPv6: NLM_F_CREATE should be set when creating new route [ 591.094606][T11429] IPv6: NLM_F_CREATE should be set when creating new route [ 591.101904][T11429] IPv6: NLM_F_CREATE should be set when creating new route [ 591.152823][T11429] fuse: Bad value for 'user_id' [ 591.154693][T11427] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 591.166945][T11429] fuse: Bad value for 'user_id' [ 591.453162][T11425] ================================================================== [ 591.461236][T11425] BUG: KASAN: slab-use-after-free in dvb_frontend_release+0x4f3/0x5d0 [ 591.469377][T11425] Read of size 4 at addr ffff88802ccae43c by task syz.3.1399/11425 [ 591.477258][T11425] [ 591.479598][T11425] CPU: 1 UID: 0 PID: 11425 Comm: syz.3.1399 Tainted: G L syzkaller #0 PREEMPT(full) [ 591.479617][T11425] Tainted: [L]=SOFTLOCKUP [ 591.479621][T11425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 591.479628][T11425] Call Trace: [ 591.479633][T11425] [ 591.479637][T11425] dump_stack_lvl+0x100/0x190 [ 591.479660][T11425] print_report+0x156/0x4c9 [ 591.479676][T11425] ? __virt_addr_valid+0x239/0x430 [ 591.479694][T11425] ? dvb_frontend_release+0x4f3/0x5d0 [ 591.479712][T11425] kasan_report+0xdf/0x1e0 [ 591.479723][T11425] ? dvb_frontend_release+0x4f3/0x5d0 [ 591.479740][T11425] dvb_frontend_release+0x4f3/0x5d0 [ 591.479757][T11425] ? __pfx_dvb_frontend_release+0x10/0x10 [ 591.479772][T11425] __fput+0x3ff/0xb40 [ 591.479788][T11425] task_work_run+0x150/0x240 [ 591.479801][T11425] ? __pfx_task_work_run+0x10/0x10 [ 591.479812][T11425] ? do_raw_spin_unlock+0x145/0x1e0 [ 591.479827][T11425] do_exit+0x8b8/0x2b60 [ 591.479845][T11425] ? preempt_schedule_irq+0x7b/0x90 [ 591.479863][T11425] ? __pfx_do_exit+0x10/0x10 [ 591.479878][T11425] ? do_raw_spin_lock+0x128/0x260 [ 591.479890][T11425] ? find_held_lock+0x2b/0x80 [ 591.479904][T11425] ? get_signal+0x7e0/0x21e0 [ 591.479918][T11425] do_group_exit+0xd5/0x2a0 [ 591.479935][T11425] get_signal+0x1ec7/0x21e0 [ 591.479948][T11425] ? kasan_quarantine_put+0x95/0x240 [ 591.479966][T11425] ? __pfx_get_signal+0x10/0x10 [ 591.479980][T11425] ? putname+0xb6/0x110 [ 591.479992][T11425] ? do_sys_openat2+0x157/0x1e0 [ 591.480007][T11425] arch_do_signal_or_restart+0x91/0x7a0 [ 591.480023][T11425] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 591.480040][T11425] ? __pfx___x64_sys_openat+0x10/0x10 [ 591.480055][T11425] exit_to_user_mode_loop+0x86/0x4a0 [ 591.480067][T11425] do_syscall_64+0x67c/0xf80 [ 591.480077][T11425] ? clear_bhb_loop+0x40/0x90 [ 591.480097][T11425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.480108][T11425] RIP: 0033:0x7f0cecb5d04e [ 591.480118][T11425] Code: Unable to access opcode bytes at 0x7f0cecb5d024. [ 591.480123][T11425] RSP: 002b:00007f0ceda48b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 591.480134][T11425] RAX: fffffffffffffffc RBX: 00007f0ceda496c0 RCX: 00007f0cecb5d04e [ 591.480142][T11425] RDX: 0000000000000002 RSI: 00007f0ceda48c00 RDI: ffffffffffffff9c [ 591.480149][T11425] RBP: 00007f0ceda48c00 R08: 0000000000000000 R09: 0000000000000000 [ 591.480156][T11425] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 591.480163][T11425] R13: 00007f0cece16038 R14: 00007f0cece15fa0 R15: 00007ffe72c78a28 [ 591.480174][T11425] [ 591.480178][T11425] [ 591.542685][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880328d0000: abort rx timeout. Force session deactivation [ 591.546004][T11425] Allocated by task 1: [ 591.546017][T11425] kasan_save_stack+0x30/0x50 [ 591.747120][T11425] kasan_save_track+0x14/0x30 [ 591.751795][T11425] __kasan_kmalloc+0xaa/0xb0 [ 591.756383][T11425] dvb_register_device+0x1d6/0x1e20 [ 591.761568][T11425] dvb_register_frontend+0x5a8/0x8a0 [ 591.766863][T11425] vidtv_bridge_probe+0x44b/0xa30 [ 591.771873][T11425] platform_probe+0x106/0x1d0 [ 591.776536][T11425] really_probe+0x241/0xa60 [ 591.781106][T11425] __driver_probe_device+0x1de/0x400 [ 591.786374][T11425] driver_probe_device+0x4c/0x1b0 [ 591.791383][T11425] __driver_attach+0x21f/0x5d0 [ 591.796126][T11425] bus_for_each_dev+0x13e/0x1d0 [ 591.800980][T11425] bus_add_driver+0x305/0x5b0 [ 591.805646][T11425] driver_register+0x1e2/0x360 [ 591.810405][T11425] vidtv_bridge_init+0x38/0x70 [ 591.815155][T11425] do_one_initcall+0x11d/0x760 [ 591.819907][T11425] kernel_init_freeable+0x6e5/0x7a0 [ 591.825095][T11425] kernel_init+0x1f/0x1e0 [ 591.829409][T11425] ret_from_fork+0x754/0xd80 [ 591.833982][T11425] ret_from_fork_asm+0x1a/0x30 [ 591.838732][T11425] [ 591.841036][T11425] Freed by task 11425: [ 591.845084][T11425] kasan_save_stack+0x30/0x50 [ 591.849753][T11425] kasan_save_track+0x14/0x30 [ 591.854422][T11425] kasan_save_free_info+0x3b/0x70 [ 591.859431][T11425] __kasan_slab_free+0x5f/0x80 [ 591.864175][T11425] kfree+0x1f6/0x6b0 [ 591.868229][T11425] dvb_device_put.part.0+0x57/0x90 [ 591.873416][T11425] dvb_generic_release+0xe2/0x160 [ 591.878429][T11425] dvb_frontend_release+0x13d/0x5d0 [ 591.883617][T11425] __fput+0x3ff/0xb40 [ 591.887586][T11425] task_work_run+0x150/0x240 [ 591.892158][T11425] do_exit+0x8b8/0x2b60 [ 591.896305][T11425] do_group_exit+0xd5/0x2a0 [ 591.900811][T11425] get_signal+0x1ec7/0x21e0 [ 591.905298][T11425] arch_do_signal_or_restart+0x91/0x7a0 [ 591.910832][T11425] exit_to_user_mode_loop+0x86/0x4a0 [ 591.916101][T11425] do_syscall_64+0x67c/0xf80 [ 591.920682][T11425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.926558][T11425] [ 591.928873][T11425] The buggy address belongs to the object at ffff88802ccae400 [ 591.928873][T11425] which belongs to the cache kmalloc-256 of size 256 [ 591.942924][T11425] The buggy address is located 60 bytes inside of [ 591.942924][T11425] freed 256-byte region [ffff88802ccae400, ffff88802ccae500) [ 591.956881][T11425] [ 591.959199][T11425] The buggy address belongs to the physical page: [ 591.965586][T11425] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2ccae [ 591.974335][T11425] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 591.982812][T11425] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 591.990349][T11425] page_type: f5(slab) [ 591.994318][T11425] raw: 00fff00000000040 ffff88813fe40b40 dead000000000100 dead000000000122 [ 592.002898][T11425] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 592.011462][T11425] head: 00fff00000000040 ffff88813fe40b40 dead000000000100 dead000000000122 [ 592.020116][T11425] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 592.028770][T11425] head: 00fff00000000001 ffffea0000b32b81 00000000ffffffff 00000000ffffffff [ 592.037422][T11425] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 592.046435][T11425] page dumped because: kasan: bad access detected [ 592.052848][T11425] page_owner tracks the page as allocated [ 592.058709][T11425] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 10300018319, free_ts 0 [ 592.078399][T11425] post_alloc_hook+0x153/0x170 [ 592.083154][T11425] get_page_from_freelist+0x111d/0x3140 [ 592.088687][T11425] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 592.094572][T11425] new_slab+0xa6/0x6b0 [ 592.098627][T11425] refill_objects+0x26b/0x400 [ 592.103290][T11425] __pcs_replace_empty_main+0x1ab/0x660 [ 592.108825][T11425] __kmalloc_cache_noprof+0x493/0x6f0 [ 592.114180][T11425] bus_add_driver+0x92/0x5b0 [ 592.118759][T11425] driver_register+0x1e2/0x360 [ 592.123549][T11425] usb_register_driver+0x21c/0x3e0 [ 592.128649][T11425] do_one_initcall+0x11d/0x760 [ 592.133398][T11425] kernel_init_freeable+0x6e5/0x7a0 [ 592.138584][T11425] kernel_init+0x1f/0x1e0 [ 592.143248][T11425] ret_from_fork+0x754/0xd80 [ 592.147826][T11425] ret_from_fork_asm+0x1a/0x30 [ 592.152663][T11425] page_owner free stack trace missing [ 592.158004][T11425] [ 592.160307][T11425] Memory state around the buggy address: [ 592.165912][T11425] ffff88802ccae300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 592.173957][T11425] ffff88802ccae380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 592.181999][T11425] >ffff88802ccae400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 592.190035][T11425] ^ [ 592.195909][T11425] ffff88802ccae480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 592.203954][T11425] ffff88802ccae500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 592.211992][T11425] ================================================================== [ 592.252100][T11425] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 592.259319][T11425] CPU: 0 UID: 0 PID: 11425 Comm: syz.3.1399 Tainted: G L syzkaller #0 PREEMPT(full) [ 592.270234][T11425] Tainted: [L]=SOFTLOCKUP [ 592.274534][T11425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 592.284581][T11425] Call Trace: [ 592.287839][T11425] [ 592.290756][T11425] dump_stack_lvl+0x100/0x190 [ 592.295432][T11425] vpanic+0x552/0x970 [ 592.299399][T11425] ? __pfx_vpanic+0x10/0x10 [ 592.303891][T11425] ? dvb_frontend_release+0x4f3/0x5d0 [ 592.309244][T11425] panic+0xd1/0xe0 [ 592.312945][T11425] ? __pfx_panic+0x10/0x10 [ 592.317335][T11425] ? dvb_frontend_release+0x4f3/0x5d0 [ 592.322686][T11425] ? preempt_schedule_common+0x42/0xc0 [ 592.328225][T11425] ? check_panic_on_warn+0x1f/0x90 [ 592.333310][T11425] check_panic_on_warn.cold+0x19/0x34 [ 592.338671][T11425] end_report.part.0+0x3a/0x90 [ 592.343420][T11425] kasan_report.cold+0xe/0x18 [ 592.348079][T11425] ? dvb_frontend_release+0x4f3/0x5d0 [ 592.353435][T11425] dvb_frontend_release+0x4f3/0x5d0 [ 592.358621][T11425] ? __pfx_dvb_frontend_release+0x10/0x10 [ 592.364316][T11425] __fput+0x3ff/0xb40 [ 592.368284][T11425] task_work_run+0x150/0x240 [ 592.372846][T11425] ? __pfx_task_work_run+0x10/0x10 [ 592.377929][T11425] ? do_raw_spin_unlock+0x145/0x1e0 [ 592.383106][T11425] do_exit+0x8b8/0x2b60 [ 592.387239][T11425] ? preempt_schedule_irq+0x7b/0x90 [ 592.392413][T11425] ? __pfx_do_exit+0x10/0x10 [ 592.396977][T11425] ? do_raw_spin_lock+0x128/0x260 [ 592.401977][T11425] ? find_held_lock+0x2b/0x80 [ 592.406629][T11425] ? get_signal+0x7e0/0x21e0 [ 592.411193][T11425] do_group_exit+0xd5/0x2a0 [ 592.415694][T11425] get_signal+0x1ec7/0x21e0 [ 592.420172][T11425] ? kasan_quarantine_put+0x95/0x240 [ 592.425435][T11425] ? __pfx_get_signal+0x10/0x10 [ 592.430260][T11425] ? putname+0xb6/0x110 [ 592.434388][T11425] ? do_sys_openat2+0x157/0x1e0 [ 592.439211][T11425] arch_do_signal_or_restart+0x91/0x7a0 [ 592.444733][T11425] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 592.450878][T11425] ? __pfx___x64_sys_openat+0x10/0x10 [ 592.456239][T11425] exit_to_user_mode_loop+0x86/0x4a0 [ 592.461521][T11425] do_syscall_64+0x67c/0xf80 [ 592.466101][T11425] ? clear_bhb_loop+0x40/0x90 [ 592.470871][T11425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.476750][T11425] RIP: 0033:0x7f0cecb5d04e [ 592.481143][T11425] Code: Unable to access opcode bytes at 0x7f0cecb5d024. [ 592.488131][T11425] RSP: 002b:00007f0ceda48b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 592.496516][T11425] RAX: fffffffffffffffc RBX: 00007f0ceda496c0 RCX: 00007f0cecb5d04e [ 592.504460][T11425] RDX: 0000000000000002 RSI: 00007f0ceda48c00 RDI: ffffffffffffff9c [ 592.512405][T11425] RBP: 00007f0ceda48c00 R08: 0000000000000000 R09: 0000000000000000 [ 592.520347][T11425] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 592.528288][T11425] R13: 00007f0cece16038 R14: 00007f0cece15fa0 R15: 00007ffe72c78a28 [ 592.536248][T11425] [ 592.539574][T11425] Kernel Offset: disabled [ 592.543882][T11425] Rebooting in 86400 seconds..