last executing test programs: 17m49.434195278s ago: executing program 3 (id=259): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x804c4700, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, "3eccd8f9d20000000000001000000200000500"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000000, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x4800) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r4 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000440)={0x0, 0xc}, &(0x7f0000000480)=0x8) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000580)={0x1, 0x0, 0x7, &(0x7f0000000540)={0x1c, "584fc4dfae9a34fb1ffbb539b436cc843759a57bf235d2f60200"}}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 0000096'], 0x2a, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="7570646174652064656661756c5820f57c99f45780757365723a847275"], 0x1d, 0xfffffffffffffffd) r5 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000100)={0x980000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90b, 0x9, '\x00', @p_u16=&(0x7f0000000040)}}) socket$nl_netfilter(0x10, 0x3, 0xc) 17m47.220404618s ago: executing program 3 (id=264): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2340, 0x0) close(r0) fchdir(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) shmdt(0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x8000008, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000000)=0x1) 17m46.112035595s ago: executing program 3 (id=268): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='contention_end\x00'}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) lseek(0xffffffffffffffff, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRESOCT=r1, @ANYRESHEX, @ANYRES8=r0, @ANYRES8=0x0, @ANYRESDEC=r0], 0x48) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000003c0)=@req3={0x5a4, 0x3, 0x40, 0x10001, 0x6, 0x1, 0x1}, 0x1c) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x2, "fa02c80a3a1e38dd031dd7504fe580963900"}) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYRES32=r0, @ANYRESOCT=0x0], 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@gettfilter={0x24, 0x2e, 0x200, 0x70bd27, 0x64c, {0x0, 0x0, 0x0, 0x0, {0xc, 0xffe0}, {0x2, 0xf}, {0xa, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000094}, 0xd0) fallocate(0xffffffffffffffff, 0x1, 0x2, 0x9) openat$dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) 17m43.192234335s ago: executing program 3 (id=277): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe90, 0x30, 0x25, 0x0, 0x0, {}, [{0xe7c, 0x1, [@m_pedit={0xe78, 0x1, 0x0, 0x0, {{0xa}, {0xe4c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x28, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x3, 0x0, 0x9}, {}, {}, {}, {}, {0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x10001}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x24}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xe90}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, 0x0) setpgid(0x0, r4) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file3\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file7\x00', 0x0) 17m38.627181467s ago: executing program 3 (id=285): r0 = openat(0xffffffffffffff9c, 0x0, 0x2c040, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}], 0x1, &(0x7f0000000040)}, 0x20040010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x1010, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0xfffffd10, &(0x7f0000000200)=0x2000000000006) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000300)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000000c0)={0x0, &(0x7f00000000c0)}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000040)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x0, 0x1, 0x0, {0x0, 0x9}, {0x3, 0x2, 0xfffffdfd}, {0xf4ef, 0xfffffffe}, {0x4, 0x0, 0x7fb}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0xffffff8e, 0x0, 0x0, 0x400000, 0x0, 0x2c, 0x0, 0x0, 0x4}) 17m36.717161295s ago: executing program 3 (id=290): syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000001080), 0x4) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x41}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000180)="27050200160014000600002fb96dbcf706e10500070088a801008100", 0x1c}, {&(0x7f0000000240)="cb4e88a8af3288", 0x7}, {&(0x7f0000000280)="3906e9", 0x3}], 0x3}, 0x4011) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r2, 0x80811501, &(0x7f00000002c0)={0x80}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETS(r3, 0x89f2, &(0x7f0000000100)={0x7, 0x2, 0x0, 0x7f, 0x13, "5dee00000059400000000000000100"}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x4004}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000095000000000000000e4daff427d5fab9830c0cb1364bc4f375ad071f437e8456"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00'}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000980)='kfree_skb\x00', r7}, 0x18) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 17m36.078888463s ago: executing program 32 (id=290): syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000001080), 0x4) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x41}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000180)="27050200160014000600002fb96dbcf706e10500070088a801008100", 0x1c}, {&(0x7f0000000240)="cb4e88a8af3288", 0x7}, {&(0x7f0000000280)="3906e9", 0x3}], 0x3}, 0x4011) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r2, 0x80811501, &(0x7f00000002c0)={0x80}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETS(r3, 0x89f2, &(0x7f0000000100)={0x7, 0x2, 0x0, 0x7f, 0x13, "5dee00000059400000000000000100"}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x4004}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000095000000000000000e4daff427d5fab9830c0cb1364bc4f375ad071f437e8456"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00'}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000980)='kfree_skb\x00', r7}, 0x18) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5m49.485392815s ago: executing program 1 (id=2118): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0xe2e) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="190000000400000008000000ffffff7f00000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000057ab9c51fdd29f6f000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000000c0)=@v={0x93, 0x5, 0x80, 0x2, @MIDI_NOTEON=@special, 0x10, 0x8}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 5m47.063078645s ago: executing program 1 (id=2124): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000)=0x74000000) write$dsp(r1, &(0x7f0000002000), 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x0, 0xe6, 0x6, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87}, {0x9, 0x8, 0x8, '\x00', 0xf}, {0xff, 0x7f, 0xd3, '\x00', 0x69}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xf5, '\x00', 0xb4}, {0xf, 0x4, 0x54, '\x00', 0xff}, {0x75, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x5, 0xc}, {0x7f, 0x5, 0x4a, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xfb, 0x58, 0xff, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x8, '\x00', 0x6}, {0xf, 0xee, 0x8, '\x00', 0x3}, {0x1, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x9}, {0x6, 0xc, 0x5, '\x00', 0xe9}, {0x7, 0x2, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x83, '\x00', 0x7c}, {0x10, 0x6, 0x92, '\x00', 0x10}, {0x1, 0x3, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4, '\x00', 0x5}]}}) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f00000000c0)={0x8, 0x5}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg(r5, &(0x7f00000029c0), 0x400006d, 0x20000004) 5m42.27970751s ago: executing program 1 (id=2127): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0xe2e) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="190000000400000008000000ffffff7f00000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000057ab9c51fdd29f6f000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000000c0)=@v={0x93, 0x5, 0x80, 0x2, @MIDI_NOTEON=@special, 0x10, 0x8}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 5m39.404401414s ago: executing program 1 (id=2131): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) ioctl$SG_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000240)={'\x00', 0x2, 0x7, 0x5, 0x8000000000000001, 0x6c, r2}) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) 5m37.404067311s ago: executing program 1 (id=2135): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYRESOCT=r0], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f00000004c0)={0x0, 0x1, 0x0, 0x0, 0x10000000, 0x5, 0x1000000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x2}, 0x94) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0x3000, 0x14000}) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000300)=ANY=[@ANYBLOB="f400c3ac8100ffffffffffff080211000001"], 0x10) 5m36.308404302s ago: executing program 1 (id=2139): socket$can_bcm(0x1d, 0x2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f0000000180), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180)) 5m34.892186311s ago: executing program 33 (id=2139): socket$can_bcm(0x1d, 0x2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f0000000180), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180)) 19.454539129s ago: executing program 5 (id=2864): sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x3d, "1a004e0078768000", 0x4, 0x2}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) 16.833281691s ago: executing program 5 (id=2872): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0xe2e) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="190000000400000008000000ffffff7f00000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000057ab9c51fdd29f6f000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000000c0)=@v={0x93, 0x5, 0x80, 0x2, @MIDI_NOTEON=@special, 0x10, 0x8}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) 13.032575995s ago: executing program 6 (id=2878): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = syz_open_dev$vbi(&(0x7f0000000080), 0x0, 0x2) bind$tipc(0xffffffffffffffff, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'wlan1\x00', @random="0100c3201000"}) socket$tipc(0x1e, 0x5, 0x0) socket(0x10, 0x803, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="110200000000000000000100000030000180060005004e2100001400040000000000000000000000000000000001"], 0x44}}, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r1, 0x808c563d, &(0x7f0000000300)) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000, {0x0, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r6, 0x0, 0x0) 12.815646048s ago: executing program 2 (id=2879): syz_usb_connect(0x2, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x1}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="a92e81d0991808e33c2323df00000000", 0x10}, {&(0x7f00000000c0)="200d354ec1cb1eea", 0x8}], 0x2, 0x0, 0x0, 0x880}], 0x1, 0x20084005) recvmmsg(r2, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000200)=""/23, 0x17}], 0x1}, 0x10000}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x10001}], 0x2, 0x102, 0x0) 11.97338541s ago: executing program 6 (id=2882): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB='x\n\x00'/20, @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r0], 0x78}}, 0x2000c814) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x20000) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f0000000180), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005ae4c41096050100f5050102030109021b0001000000000904d60001b5e14500090583"], 0x0) 10.947426329s ago: executing program 0 (id=2883): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623c, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x0, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffb, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0xf7, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x12, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0x7ff, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd5, 0x7, 0x20, 0x7, 0x4, 0x8, 0x437, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x2, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0xf5e, 0x5, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffe, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x9, 0x4, 0x50, 0x8, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa7, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x403e, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0xffffffff, 0xe, 0xf, 0x133, 0x6]}, 0x45c) 10.570574149s ago: executing program 0 (id=2885): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x67, 0x3, 0xfffffffd}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0x4000000000a9}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = msgget$private(0x0, 0x193) msgsnd(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="01"], 0x8, 0x0) msgsnd(r4, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0x3f9, 0x0) msgrcv(r4, &(0x7f00000002c0), 0x8, 0x1, 0x800) r5 = getuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@private0}}, &(0x7f00000001c0)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000004c0)=0x0) msgctl$IPC_SET(r4, 0x1, &(0x7f0000000500)={{0x0, r5, r6, r7, r8, 0xcc, 0x101}, 0x0, 0x0, 0x6e28, 0xbbc, 0x3, 0x400, 0x5, 0xf3b, 0x100, 0x1, r9, r1}) 10.278949799s ago: executing program 4 (id=2886): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) syz_open_pts(0xffffffffffffffff, 0x88000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100007292bd404020305582a80000000109021b00010000000009", @ANYBLOB="018f54"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000002100010000"], 0x44}}, 0x20000040) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000002280)={r1, 0x6d7d, {0x0, 0x0, 0x0, 0x80000000000, 0xd9b7, 0x0, 0x5, 0x1e, 0x11, "6af25333e66882f3d1d45d2d113485db295beb1c76ebd777e422cd120ad96f9bf8a78d8710b56d352315c07f57d9512b5f38f8685f0a830fd45b2463b1af482b", "4fdb58d2dd730cc12c930074b81d19d92f92fa87d2bf92ae08acf01486296a5898586239315b6aab202691f0cc70b377ea1d507b7cf161bfce42772144e00647", "e036195832aaab563b44f934ac45fae0df365bc3b217297c3be638d4bc94759b", [0x7, 0x5]}}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r3, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendfile(r3, r3, 0x0, 0x40008) 9.887387267s ago: executing program 5 (id=2887): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000)=0x74000000) write$dsp(r1, &(0x7f0000002000)='`', 0x88020) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x0, 0xe6, 0x6, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87}, {0x9, 0x8, 0x8, '\x00', 0xf}, {0xff, 0x7f, 0xd3, '\x00', 0x69}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xf5, '\x00', 0xb4}, {0xf, 0x4, 0x54, '\x00', 0xff}, {0x75, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x5, 0xc}, {0x7f, 0x5, 0x4a, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xfb, 0x58, 0xff, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x8, '\x00', 0x6}, {0xf, 0xee, 0x8, '\x00', 0x3}, {0x1, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x9}, {0x6, 0xc, 0x5, '\x00', 0xe9}, {0x7, 0x2, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x83, '\x00', 0x7c}, {0x10, 0x6, 0x92, '\x00', 0x10}, {0x1, 0x3, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4, '\x00', 0x5}]}}) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f00000000c0)={0x8, 0x5}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg(r5, &(0x7f00000029c0), 0x400006d, 0x20000004) 9.649010622s ago: executing program 0 (id=2888): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 9.578224555s ago: executing program 2 (id=2889): syz_usb_connect(0x2, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="a92e81d0991808e33c2323df00000000", 0x10}, {&(0x7f00000000c0)="200d354ec1cb1eea", 0x8}], 0x2, 0x0, 0x0, 0x880}], 0x1, 0x20084005) recvmmsg(r3, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000200)=""/23, 0x17}], 0x1}, 0x10000}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x10001}], 0x2, 0x102, 0x0) 9.495333304s ago: executing program 6 (id=2890): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYRESOCT=r0], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f00000004c0)={0x0, 0x1, 0x0, 0x0, 0x10000000, 0x5, 0x1000000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x2}, 0x94) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0x3000, 0x14000}) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, r5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) setns(0xffffffffffffffff, 0x66020000) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000300)=ANY=[@ANYBLOB="f400c3ac8100ffffffffffff080211000001"], 0x10) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="06ac37b2a5e7d0b3334342660274fdf4d89cc2f2883cb00295b9384a155f2add4daa89e2e5ecbe6e83a8d62850c3ae7c232dae98692f0ca7ba23cf25b26110fa4988967a86fc87cdeaae35659557e88a7e6c", @ANYRES16=r10, @ANYBLOB="000429bd7000fcdbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x4008000) 8.360370074s ago: executing program 4 (id=2891): socket$packet(0x11, 0xa, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r0}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r1}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_lsm={0x1d, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000020000000000000104000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000009c030000008500000083000000bf0900000000000055090100000000009500000000010000bf9100000000000070bb9320bb5627b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x7fff, 0x7f, &(0x7f00000004c0)=""/127, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0xc, 0x8, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000780)=[r0], 0x0, 0x10, 0xd8fb}, 0x94) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008000000008000bb"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = mq_open(&(0x7f00000001c0)='ba\xa5J_\xe5\xf9|a\x1dv]\x13mave_1\x00\xe0\xb2\xf0\xabT\x87I\xa4\xd4)c\xf2\xe0\xd0\xba\xdb\f\x16n\x96J\x90c\xc5~#\xc9\xfb\xef5\xab\xb9\xe8\xc7\xde\xc2\x80\f\x19L\xdb\xdc\x14\xb4\x86\x1d\xe0\x9b\xe4\"m\'+\xc8\x05\xa4\x1cT`\xdcL\x8f\xf0\xc9\xb7\xc8D\xcdWG\xe6%\xd9', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000004, 0x8, 0x1, 0xc05}) mq_timedreceive(r3, &(0x7f0000000140)=""/107, 0x6b, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f00000006c0)='asymmetric\x00', 0x0, &(0x7f0000000800)="3080", 0x2, 0xffffffffffffffff) 8.195453901s ago: executing program 4 (id=2892): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="1d23308a29482c7032ce77a6fcd6ae50a5c313d02111752bdf5bd799d4afdda57f3476bbc2969f8bb49aec757b050be2b4f952b6f3a2776d2b2193c52af2caae463bbdfcd6a6877132a3e658e227e9f911131efa0102ca58873e2d75308502d80f437a383c9e8bb918813c0da828c14a4090329fab47da7b5d3e90397be207b2fa7013", 0x83}, {&(0x7f0000000300)="ce22b7ee12a15cd832717b6845f762845e7a46bc93dff1462b48b0b43002a536ac98a674b0b6467c5e27b779090cbc7a6a272799a27c5ad3b742c07465fe8728c4a202ee1adf2e66c19e0abe60d4d3df6d974209acf5e3f447f85be47456f0aa04ff8f49f1f57df68281eda0384af2d5abd05d810050fa4a61eb5bc5f6f5", 0x7e}, {&(0x7f0000000640)="d1d9ce7a791543a710219cf30f02649b5b660dacda64126c5021f4a46c0fd67f17007adde0ff217005f3ee26b13603094d4a15fe7a28fd74a5b3cbd5df0771e1e95f1a8a3ea07beff492690a85e0309ab1b37f78640035ab08305ceea3c3357d67b1e98317726e74ec57195e03f562039f545a691eea530dae85da612567da8776ce28ffaa224ea32c218dc2b414ab8de07e4020f17f2aa901d794c629b938289d0e56e38384976a62f678c81c7b904bfd3495e127e9e3b437b2eb7435e1b3dfdce37f4831e42820ed5087fe39bc5e3361ed0e600c27a0c72dc8c0922edeefa4fd286802a9c36cfb0d7781cbcdc9e7546651fbfade70", 0xf6}], 0x3, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, r3, r2]}}], 0x68, 0x4}}, {{&(0x7f0000001a00)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001c00)=[{&(0x7f0000001a80)="8359cf0d9f6eb521721ebf7fac25736debab2caae627bf48bb055058ef4289a6278f45494ec25ba0a81c55f94471d5ad2d839c0996baee328d2637fde1a4f31b78216149185fe14c", 0x48}, {&(0x7f0000001b00)="2431996aca389134272de4f4c4842517c0891fcb86c4bf2f925e0cd9012cbf92fee502d5c814d27a6927f1f9adab7f96ef768499eaac50c1cc4cbedff92a2606882a4408cb6703af8f148e3583d0b94b007fb24cafb160c510cb579acef1d49a5d22442881791673f8fbe41cbb6aab492b78715b3745aeb1677f0b28e60606d406abc8325aa5cae155cf2e68dab53e5d78bb84fdfacc9a362703114b79b07e7495e4b860ed16ab426dec4fb853ba22d35d2fcba2c1600b1dae1b969b8160644509f5d4d1295270791a6bfc583417be760528b0a79ff91a2dcaa27cd2dd58cc0a7247b8415469e83affef", 0xea}, {&(0x7f0000002140)="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", 0x1000}], 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xc8}}], 0x2, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000008000000080000000060000000c00000002000084400000000f00000004000000060000000600000000000000010000000e0000000000000c010000000a0040000000000e0200000000f7ff000e00000000000010060000000b000000e7ff00060400000008000000001000000f000000060000000f0080001000000003004d0000000001000000004d0042010000005f0000"], &(0x7f0000000380)=""/107, 0x9e, 0x6b, 0xffffffff, 0x0, 0x10000}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f4e6ff0804000a000000fe0000000000aa0008000f00fd000000", 0x24) 8.053034157s ago: executing program 0 (id=2893): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000100), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x0, 0x1}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x3) sched_setaffinity(0x0, 0xfffffd10, &(0x7f0000000200)=0x2000000000006) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000a80), 0x40000) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000004c00)=""/102392, 0x18ff8) r4 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="3d0d1e8edb38b30e5d5f1b4a734528ba37f63fdea074aa7cb237f94d0d17e2bf1ea4f20f2f6a180fa6ccf5c0278042cde18bc9d80000", 0xffffffffffffff8c) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001800a0001006c696d697400000024000280080004"], 0x118}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_newrule={0x30, 0x20, 0x301, 0x800000, 0x0, {0x2, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000c}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x27}, @FRA_DST={0x8, 0x1, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0xc040}, 0x80) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_connect(0x5, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000b215f4404c05c10687be000000010902240001000000000904f90002600d180009050802120001083b09050b084008100000"], 0x0) syz_io_uring_setup(0x50d0, &(0x7f0000000000)={0x0, 0xfffffffd, 0x2, 0x2, 0x332}, 0x0, &(0x7f0000ff4000)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x400001c) 8.05056767s ago: executing program 2 (id=2894): socket$packet(0x11, 0xa, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r0}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r1}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_lsm={0x1d, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000020000000000000104000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000009c030000008500000083000000bf0900000000000055090100000000009500000000010000bf9100000000000070bb9320bb5627b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x7fff, 0x7f, &(0x7f00000004c0)=""/127, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0xc, 0x8, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000780)=[r0], 0x0, 0x10, 0xd8fb}, 0x94) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008000000008000bb"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = mq_open(&(0x7f00000001c0)='ba\xa5J_\xe5\xf9|a\x1dv]\x13mave_1\x00\xe0\xb2\xf0\xabT\x87I\xa4\xd4)c\xf2\xe0\xd0\xba\xdb\f\x16n\x96J\x90c\xc5~#\xc9\xfb\xef5\xab\xb9\xe8\xc7\xde\xc2\x80\f\x19L\xdb\xdc\x14\xb4\x86\x1d\xe0\x9b\xe4\"m\'+\xc8\x05\xa4\x1cT`\xdcL\x8f\xf0\xc9\xb7\xc8D\xcdWG\xe6%\xd9', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000004, 0x8, 0x1, 0xc05}) mq_getsetattr(r5, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0) mq_timedreceive(r5, &(0x7f0000000140)=""/107, 0x6b, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x5, 0x0) syz_clone3(0x0, 0x0) socket$packet(0x11, 0x2, 0x300) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f00000006c0)='asymmetric\x00', 0x0, &(0x7f0000000800)="3080", 0x2, 0xffffffffffffffff) 5.785784398s ago: executing program 6 (id=2895): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0900000004000000dd0000000a00000000000000", @ANYRES32, @ANYBLOB="00000000000f00000000000000000000009a59e4700ae06d000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000000000000020000000000"], 0x0, 0x1a, 0x0, 0x0, 0xf4, 0x10000}, 0x28) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x100}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="000009000000000000000000816bfd270000000000000000b7d838dba43bac7d88088f3f425dd1915b2bb37b33e065ba55c4082336891f087bb20b2b15b4df139d16e06714bea8ec66136e8f4e523d8af6b89453216ccaa28ae5133d02ff852b4787fd2667e975fa2bbadac04b3a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r1, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00001800010061119800000000001800000000000000000000000000000095000000000000"], 0x0}, 0x94) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x10) mkdir(0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) socket$kcm(0x2, 0xa, 0x2) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="a249b5f8b240ca262afd91cb6834c8b8a121997d95117651bb68861532e5", @ANYRESHEX=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x2, r5}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r7}, 0x18) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={0x0, r8}, 0x18) 5.783464873s ago: executing program 4 (id=2896): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB='x\n\x00'/20, @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r0], 0x78}}, 0x2000c814) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x20000) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f0000000180), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005ae4c41096050100f5050102030109021b0001000000000904d60001b5e14500090583"], 0x0) 5.772014311s ago: executing program 5 (id=2897): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000100), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x0, 0x1}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x3) sched_setaffinity(0x0, 0xfffffd10, &(0x7f0000000200)=0x2000000000006) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000a80), 0x40000) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000004c00)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="3d0d1e8edb38b30e5d5f1b4a734528ba37f63fdea074aa7cb237f94d0d17e2bf1ea4f20f2f6a180fa6ccf5c0278042cde18bc9d80000", 0xffffffffffffff8c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_newrule={0x30, 0x20, 0x301, 0x800000, 0x0, {0x2, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000c}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x27}, @FRA_DST={0x8, 0x1, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0xc040}, 0x80) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_connect(0x5, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000b215f4404c05c10687be000000010902240001000000000904f90002600d180009050802120001083b09050b084008100000"], 0x0) syz_io_uring_setup(0x50d0, &(0x7f0000000000)={0x0, 0xfffffffd, 0x2, 0x2, 0x332}, 0x0, &(0x7f0000ff4000)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x400001c) 4.796438534s ago: executing program 2 (id=2898): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x67, 0x3, 0xfffffffd}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0x4000000000a9}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = msgget$private(0x0, 0x193) msgsnd(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="01"], 0x8, 0x0) msgsnd(r4, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0x3f9, 0x0) msgrcv(r4, &(0x7f00000002c0), 0x8, 0x1, 0x800) r5 = getuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@private0}}, &(0x7f00000001c0)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000004c0)=0x0) msgctl$IPC_SET(r4, 0x1, &(0x7f0000000500)={{0x0, r5, r6, r7, r8, 0xcc, 0x101}, 0x0, 0x0, 0x6e28, 0xbbc, 0x3, 0x400, 0x5, 0xf3b, 0x100, 0x1, r9, r1}) 4.79510141s ago: executing program 6 (id=2899): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x0, 0x1}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x3) sched_setaffinity(0x0, 0xfffffd10, &(0x7f0000000200)=0x2000000000006) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000a80), 0x40000) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000004c00)=""/102392, 0x18ff8) r4 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="3d0d1e8edb38b30e5d5f1b4a734528ba37f63fdea074aa7cb237f94d0d17e2bf1ea4f20f2f6a180fa6ccf5c0278042cde18bc9d80000", 0xffffffffffffff8c) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001800a0001006c696d697400000024000280080004"], 0x118}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_newrule={0x30, 0x20, 0x301, 0x800000, 0x0, {0x2, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000c}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x27}, @FRA_DST={0x8, 0x1, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0xc040}, 0x80) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_connect(0x5, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000b215f4404c05c10687be000000010902240001000000000904f90002600d180009050802120001083b09050b084008100000"], 0x0) syz_io_uring_setup(0x50d0, &(0x7f0000000000)={0x0, 0xfffffffd, 0x2, 0x2, 0x332}, 0x0, &(0x7f0000ff4000)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x400001c) 3.675928382s ago: executing program 0 (id=2900): syz_usb_connect(0x2, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="a92e81d0991808e33c2323df00000000", 0x10}, {&(0x7f00000000c0)="200d354ec1cb1eea", 0x8}], 0x2, 0x0, 0x0, 0x880}], 0x1, 0x20084005) recvmmsg(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000200)=""/23, 0x17}], 0x1}, 0x10000}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x10001}], 0x2, 0x102, 0x0) 3.565479338s ago: executing program 2 (id=2901): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x8000000010, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$mouse(&(0x7f00000003c0), 0x9, 0x6000) ioctl$KVM_CREATE_VM(r4, 0xae01, 0xb) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18fe160c9e754f27f3ffffffff171100"/32, @ANYBLOB="0000000000000000cb9fc0bb000000007b8af8ff00000000bfa20000000000"], 0x0}, 0x94) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents(r6, &(0x7f0000000240)=""/167, 0xa7) 3.415275664s ago: executing program 4 (id=2902): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000100), 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x0, 0x1}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x3) sched_setaffinity(0x0, 0xfffffd10, &(0x7f0000000200)=0x2000000000006) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000a80), 0x40000) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000004c00)=""/102392, 0x18ff8) r4 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="3d0d1e8edb38b30e5d5f1b4a734528ba37f63fdea074aa7cb237f94d0d17e2bf1ea4f20f2f6a180fa6ccf5c0278042cde18bc9d80000", 0xffffffffffffff8c) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001800a0001006c696d697400000024000280080004"], 0x118}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_newrule={0x30, 0x20, 0x301, 0x800000, 0x0, {0x2, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000c}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x27}, @FRA_DST={0x8, 0x1, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0xc040}, 0x80) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_connect(0x5, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000b215f4404c05c10687be000000010902240001000000000904f90002600d180009050802120001083b09050b084008100000"], 0x0) syz_io_uring_setup(0x50d0, &(0x7f0000000000)={0x0, 0xfffffffd, 0x2, 0x2, 0x332}, 0x0, &(0x7f0000ff4000)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x400001c) 2.791835476s ago: executing program 5 (id=2903): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket$alg(0x26, 0x5, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x400, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x60, 0x10, 0xffffff1f, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private0}, @IFLA_GRE_LOCAL={0x14, 0x6, @private2}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) setgroups(0x1, &(0x7f0000000580)=[0xffffffffffffffff]) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000000)={0x28, 0x6, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) ioctl$VIDIOC_S_AUDIO(0xffffffffffffffff, 0x40345622, &(0x7f0000000040)={0xffffff20, "984c323de8fed63723b821c9a59a4006f7feede6e56d4cad6c8ad393b58ba111"}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000100)=0xfefffffd, 0x4) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b00)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0) capset(&(0x7f0000000480)={0x20080522}, &(0x7f0000000880)={0x0, 0xdd2, 0xffffffb3, 0x0, 0x8, 0x10}) 1.753108265s ago: executing program 5 (id=2904): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 1.737741207s ago: executing program 2 (id=2905): getpgrp(0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3a) sendmmsg$inet6(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="ad0ce79ce05a58c0485ebbe2e55611898dee271424d55fddbd978b6b2d6cdbe808c3ffca3d4639ccbd3d2eab8b2ecf639ca3bfcf", 0x34}], 0x1, &(0x7f0000000440)=[@dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x34}}}}, @dstopts_2292={{0x58, 0x29, 0x4, {0x0, 0x7, '\x00', [@calipso={0x7, 0x38, {0x0, 0xc, 0x1, 0x8, [0x9, 0x10001, 0x6, 0x9, 0xfffffffffffffffa, 0xd]}}, @enc_lim={0x4, 0x1, 0x3}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xff}}, @pktinfo={{0x24, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x1}}}}, @rthdr={{0xa8, 0x29, 0x39, {0xff, 0x12, 0x0, 0x0, 0x0, [@mcast1, @private2, @loopback, @private2, @private2, @dev={0xfe, 0x80, '\x00', 0x10}, @empty, @dev={0xfe, 0x80, '\x00', 0x36}, @remote]}}}], 0x180}}, {{&(0x7f0000000240)={0xa, 0x4e24, 0xb, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000280)="623a34e075001b431cde8f762aef3547178c037697b0946cfb38", 0x1a}, {&(0x7f00000002c0)="1ebac9f2f7753d8c7b2591c7c944bc8018d2d79bf83c3445b9c7ba2bc677de714a8a7942ac1ea11d50aef9", 0x2b}], 0x2, &(0x7f00000005c0)=[@rthdr_2292={{0x68, 0x29, 0x39, {0x2b, 0xa, 0x0, 0x4, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @private2={0xfc, 0x2, '\x00', 0x1}]}}}, @dstopts_2292={{0x28, 0x29, 0x4, {0x33, 0x1, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0x1}, @ra={0x5, 0x2, 0xffff}]}}}, @rthdrdstopts={{0x190, 0x29, 0x37, {0x3b, 0x2e, '\x00', [@generic={0x8, 0x8d, "3305c419cf6766ef9cfc333196e7ada68cf1389a4969a0833f605713ec758bc7482f390ac352d7833856ba3196ad390cd731893b1e62156ba5bfaf272f0d02e7247f685c92f443b38e7288cf1114e9cf29816e3b0a2a9ca5a0b985390713ec2bfe7443f7d4e7d3844de94eadfc6a6fa1120a2556c1d9cd041e3e429bb3ea45594efb84a82389cedb0f38515d7d"}, @hao={0xc9, 0x10, @local}, @jumbo={0xc2, 0x4, 0xd}, @generic={0x8, 0xbe, "fcd84c9fc9141424216c4768827ace1cc3b752572ac480a6ac246f26907b3b0e199aaabad4bb715a9cda16cfa53708e578d06d6ea4a4c391ec9df3cd5453dc54ba5c82e4b2d0452429292f7498e2c708499f016350f3960e937e217647d106570fb86868f3875466bd20629c76972bbb1d07c73f41b82c2e94d37f3821bc31afb73a9d772789d8bcb75221c0e11e36ff921a67f140ce3928333c9743bdf37eaa1a9192117e9202c5ab980b281be03274854d314608fbe8acb0b77d47cde8"}, @enc_lim={0x4, 0x1, 0xcf}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra]}}}], 0x220}}, {{&(0x7f00000003c0)={0xa, 0x4e24, 0x9, @local, 0x4}, 0x1c, &(0x7f0000000a00)=[{&(0x7f0000000840)="6ff4d858873655ecaf94898eef3848fd6f8798cb17020ded106898cc8a885518fbd46eab9c2bd06fa30e313841cee6878cd60c56d2aab2bcfdd07f3f86b26dba65f8611cad40b3426f0bb13808cff2d260bfe8f14d6f82caddfa1410978b37609b19001e67c385951e9798d4d22e597fab0d7969e2f0eaa05e59a57993297aa6fd11372ce42d1b22a2e54342b8c1953122e4d9068ebce9e3b267dad67bbb7abfb5111334a2c4dc96ffedcd6d4f43ed63dff31070eded2b20678202b1121b62011cec800275b724be86", 0xc9}, {&(0x7f0000000940)="138a4314429d0b550c0c0984e43e7c01b953f560d8624f9b4cb4b07963cf947d6d4a1dadda549216f94c271d8beabe94e7e02fe8907e50c3902204f6c8f174244cb58717e7d10a43fe46e57c1bbc9671b26fa0a59063ca4b5a898bddff245268f60bf690232570144b56b10976b6fa5d37b611dd5c73a990a3bcf95fb9683f205291d7c37b3fc6653bec834ef659500b8604549af5e98dc30185c1e048b4ae5555862721769adfc97dfd30c172dd94712072f76e", 0xb4}], 0x2, &(0x7f0000000a40)=[@hoplimit={{0x14, 0x29, 0x34, 0xa94c}}], 0x18}}, {{&(0x7f0000000cc0)={0xa, 0x4e20, 0x1, @empty, 0x8}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000ac0)="b31c5d6221eb97e0aa43e9601e8246feb1287019307253a729f034f6bda8041d3aa061850ee770cba1b2766c55972a80fe24ebfff6c4ded8f21d7c7ecb69a85a2cb7a882a1b0a05c84c9f995ad8c06f7221b85d66daa1387cf1ae471a785960ce437ba2d45548b7dd9fbd821fe21b8b28c5bd4dff774730b05b75d33191aac7d", 0x80}], 0x1, &(0x7f0000000b80)=[@rthdrdstopts={{0x128, 0x29, 0x37, {0x87, 0x21, '\x00', [@pad1, @generic={0x9, 0xc9, "a25673c4d505ab4d099ce182b5e05ce456f5253b4354ac5214833e569ccb75d968ef3d9ad1ddc31e2e5a47b853984d9c90d933e380e84043cf02c3228eb4a4c60e73d148e08138deaa9e22f5e5467cf54d6dd3cfa415d63f06f98344a026019063087135edbba40f39a5ba3788c06c9d4f4d2da20fe908addf45f60f8b6ecd239f283f1b00a877367a4afb3883646574ad0537c80b2879574ab3a2ca226e002b8a02e4688de95fca2d1c6966cf57642c3f0ea2db072090b4b2aea0b042aee8e8a18b35098a76d73f43"}, @enc_lim={0x4, 0x1, 0x5}, @ra={0x5, 0x2, 0x6}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @jumbo={0xc2, 0x4, 0x1eb0dfeb}, @jumbo={0xc2, 0x4, 0x4}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private2}]}}}], 0x128}}], 0x4, 0x4000010) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) read$dsp(r3, &(0x7f0000000080)=""/124, 0x7c) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32], 0x118) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) openat$comedi(0xffffff9c, 0x0, 0x628c00, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_ABS_SETUP(r6, 0x401c5504, &(0x7f0000000800)={0x2f, {0x1, 0x0, 0x4, 0x3, 0x3, 0x80000001}}) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x3) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.277034829s ago: executing program 6 (id=2906): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYRESOCT=r0], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) getpid() r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f00000004c0)={0x0, 0x1, 0x0, 0x0, 0x10000000, 0x5, 0x1000000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x2}, 0x94) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0x3000, 0x14000}) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, r5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) setns(r1, 0x66020000) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000300)=ANY=[@ANYBLOB="f400c3ac8100ffffffffffff080211000001"], 0x10) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="06ac37b2a5e7d0b3334342660274fdf4d89cc2f2883cb00295b9384a155f2add4daa89e2e5ecbe6e83a8d62850c3ae7c232dae98692f0ca7ba23cf25b26110fa4988967a86fc87cdeaae35659557e88a7e6c", @ANYRES16=r10, @ANYBLOB="000429bd7000fcdbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x4008000) 1.06859625s ago: executing program 0 (id=2907): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) write$dsp(r1, &(0x7f0000002000)='`', 0x88020) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x0, 0xe6, 0x6, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87}, {0x9, 0x8, 0x8, '\x00', 0xf}, {0xff, 0x7f, 0xd3, '\x00', 0x69}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xf5, '\x00', 0xb4}, {0xf, 0x4, 0x54, '\x00', 0xff}, {0x75, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x5, 0xc}, {0x7f, 0x5, 0x4a, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xfb, 0x58, 0xff, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x8, '\x00', 0x6}, {0xf, 0xee, 0x8, '\x00', 0x3}, {0x1, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x9}, {0x6, 0xc, 0x5, '\x00', 0xe9}, {0x7, 0x2, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x83, '\x00', 0x7c}, {0x10, 0x6, 0x92, '\x00', 0x10}, {0x1, 0x3, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4, '\x00', 0x5}]}}) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f00000000c0)={0x8, 0x5}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r5, &(0x7f00000029c0), 0x400006d, 0x20000004) readv(r6, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/220, 0xdc}], 0x1) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080), 0x1) 0s ago: executing program 4 (id=2908): socket$packet(0x11, 0xa, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r0}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r1}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_lsm={0x1d, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000020000000000000104000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000009c030000008500000083000000bf0900000000000055090100000000009500000000010000bf9100000000000070bb9320bb5627b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x7fff, 0x7f, &(0x7f00000004c0)=""/127, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0xc, 0x8, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000780)=[r0], 0x0, 0x10, 0xd8fb}, 0x94) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008000000008000bb"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = mq_open(&(0x7f00000001c0)='ba\xa5J_\xe5\xf9|a\x1dv]\x13mave_1\x00\xe0\xb2\xf0\xabT\x87I\xa4\xd4)c\xf2\xe0\xd0\xba\xdb\f\x16n\x96J\x90c\xc5~#\xc9\xfb\xef5\xab\xb9\xe8\xc7\xde\xc2\x80\f\x19L\xdb\xdc\x14\xb4\x86\x1d\xe0\x9b\xe4\"m\'+\xc8\x05\xa4\x1cT`\xdcL\x8f\xf0\xc9\xb7\xc8D\xcdWG\xe6%\xd9', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000004, 0x8, 0x1, 0xc05}) mq_getsetattr(r5, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0) mq_timedreceive(r5, &(0x7f0000000140)=""/107, 0x6b, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x5, 0x0) syz_clone3(0x0, 0x0) socket$packet(0x11, 0x2, 0x300) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f00000006c0)='asymmetric\x00', 0x0, &(0x7f0000000800)="3080", 0x2, 0xffffffffffffffff) kernel console output (not intermixed with test programs): = -EPIPE [ 961.931676][ T5925] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 961.961648][ T910] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 962.251355][ T5925] usb 6-1: config 0 has an invalid interface number: 249 but max is 0 [ 962.282701][ T5925] usb 6-1: config 0 has no interface number 0 [ 962.309340][ T5925] usb 6-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 18 [ 962.368722][ T5925] usb 6-1: config 0 interface 249 altsetting 0 endpoint 0xB has invalid maxpacket 2112, setting to 64 [ 962.476839][ T5925] usb 6-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 962.548202][ T5925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.675901][ T5925] usb 6-1: config 0 descriptor?? [ 962.742044][T15210] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 962.832896][ T5925] port100 6-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 963.040890][T15216] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2302'. [ 963.283092][ T910] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 963.558331][ T910] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 963.671015][ T5874] usb 6-1: USB disconnect, device number 74 [ 964.758144][ T910] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000118. ret = -EPROTO [ 965.641468][T15233] lo speed is unknown, defaulting to 1000 [ 965.684757][ T910] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 965.694556][ T910] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 965.723770][ T910] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 965.781494][ T910] usb 3-1: USB disconnect, device number 56 [ 966.614237][T15252] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2310'. [ 971.017976][T15288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 971.052624][ T5925] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 971.397008][ T5925] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 971.440714][ T5925] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 971.471534][ T5925] usb 3-1: config 0 has no interface number 0 [ 971.487897][ T5925] usb 3-1: too many endpoints for config 0 interface 1 altsetting 143: 84, using maximum allowed: 30 [ 971.549098][ T5925] usb 3-1: config 0 interface 1 altsetting 143 has 0 endpoint descriptors, different from the interface descriptor's value: 84 [ 971.581760][ T5925] usb 3-1: config 0 interface 1 has no altsetting 0 [ 971.598642][ T5925] usb 3-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 971.621080][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.660371][ T5925] usb 3-1: config 0 descriptor?? [ 971.683104][ T5925] smsusb:smsusb_probe: board id=8, interface number 1 [ 974.337685][T15303] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2321'. [ 975.710055][ T5992] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 975.908293][T15323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 975.957563][ T5992] usb 6-1: config 0 has an invalid interface number: 249 but max is 0 [ 975.966815][ T5992] usb 6-1: config 0 has no interface number 0 [ 975.974790][ T5992] usb 6-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 18 [ 975.985035][ T5992] usb 6-1: config 0 interface 249 altsetting 0 endpoint 0xB has invalid maxpacket 2112, setting to 64 [ 975.996781][ T5992] usb 6-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 976.005944][ T5992] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.017177][ T5992] usb 6-1: config 0 descriptor?? [ 976.024203][T15304] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 976.033361][ T5992] port100 6-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 976.101703][ T5874] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 976.255803][ T910] usb 3-1: USB disconnect, device number 57 [ 976.283113][ T5874] usb 1-1: Using ep0 maxpacket: 16 [ 976.290123][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 976.307000][ T5992] usb 6-1: USB disconnect, device number 75 [ 976.317440][T15325] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2327'. [ 976.352411][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 976.370477][ T5874] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 976.388506][ T5874] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 976.397805][ T5874] usb 1-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 976.406337][ T5874] usb 1-1: Manufacturer: syz [ 976.427397][ T5874] usb 1-1: config 0 descriptor?? [ 976.785907][T15322] netlink: 'syz.0.2325': attribute type 1 has an invalid length. [ 976.987003][T15322] bond1: entered promiscuous mode [ 976.999751][T15322] 8021q: adding VLAN 0 to HW filter on device bond1 [ 977.789979][T15329] SELinux: failed to load policy [ 979.048508][T15332] 8021q: adding VLAN 0 to HW filter on device bond1 [ 979.055731][T15332] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 979.071819][T15332] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 979.416902][T15332] bond1: (slave vcan1): making interface the new active one [ 979.433935][T15332] vcan1: entered promiscuous mode [ 979.456292][T15332] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 979.476518][T15346] netlink: 'syz.5.2331': attribute type 2 has an invalid length. [ 979.522396][T15346] netlink: 'syz.5.2331': attribute type 2 has an invalid length. [ 979.551761][T15346] !: left promiscuous mode [ 979.583104][ T5874] usbhid 1-1:0.0: can't add hid device: -71 [ 979.610485][ T5874] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 979.652707][ T5874] usb 1-1: USB disconnect, device number 55 [ 981.325093][T15375] netlink: 'syz.0.2339': attribute type 2 has an invalid length. [ 981.412900][T15378] FAULT_INJECTION: forcing a failure. [ 981.412900][T15378] name failslab, interval 1, probability 0, space 0, times 0 [ 981.425645][T15378] CPU: 0 UID: 0 PID: 15378 Comm: syz.5.2338 Not tainted syzkaller #0 PREEMPT(full) [ 981.425673][T15378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 981.425683][T15378] Call Trace: [ 981.425690][T15378] [ 981.425696][T15378] dump_stack_lvl+0x16c/0x1f0 [ 981.425713][T15378] should_fail_ex+0x512/0x640 [ 981.425727][T15378] ? __kmalloc_noprof+0xca/0x910 [ 981.425752][T15378] should_failslab+0xc2/0x120 [ 981.425775][T15378] __kmalloc_noprof+0xeb/0x910 [ 981.425801][T15378] ? __do_sys_futex_waitv+0x221/0x2c0 [ 981.425823][T15378] ? __do_sys_futex_waitv+0x221/0x2c0 [ 981.425838][T15378] __do_sys_futex_waitv+0x221/0x2c0 [ 981.425855][T15378] ? __pfx___do_sys_futex_waitv+0x10/0x10 [ 981.425880][T15378] do_syscall_64+0xcd/0xf80 [ 981.425892][T15378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.425904][T15378] RIP: 0033:0x7f01e1d8f749 [ 981.425913][T15378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 981.425924][T15378] RSP: 002b:00007f01e2bd8038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 981.425935][T15378] RAX: ffffffffffffffda RBX: 00007f01e1fe6090 RCX: 00007f01e1d8f749 [ 981.425943][T15378] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000001080 [ 981.425950][T15378] RBP: 00007f01e2bd8090 R08: 0000000000000001 R09: 0000000000000000 [ 981.425956][T15378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 981.425962][T15378] R13: 00007f01e1fe6128 R14: 00007f01e1fe6090 R15: 00007ffd705a3e58 [ 981.425977][T15378] [ 981.760275][T15379] netlink: 'syz.0.2339': attribute type 2 has an invalid length. [ 981.769873][T15375] !: entered promiscuous mode [ 981.808445][T15379] !: left promiscuous mode [ 982.362560][T15386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 982.425333][T15387] netlink: 220 bytes leftover after parsing attributes in process `syz.6.2341'. [ 982.841920][ T5925] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 983.023211][ T5925] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 983.036184][ T5925] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 983.065544][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 983.104163][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 983.115228][ T5925] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 983.145008][ T5925] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 983.156579][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 983.166638][ T5925] usb 1-1: Product: syz [ 983.171703][ T5925] usb 1-1: Manufacturer: syz [ 983.176928][ T5925] usb 1-1: SerialNumber: syz [ 983.204026][T15394] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2343'. [ 983.531335][ T5925] usb 1-1: config 0 descriptor?? [ 983.662799][ T7377] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 984.466599][T15402] lo speed is unknown, defaulting to 1000 [ 984.617609][ T5925] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 984.654556][ T5925] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 984.861820][ T7377] usb 7-1: config 0 has an invalid interface number: 249 but max is 0 [ 984.870121][ T7377] usb 7-1: config 0 has no interface number 0 [ 984.886076][ T7377] usb 7-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 18 [ 984.931838][ T7377] usb 7-1: config 0 interface 249 altsetting 0 endpoint 0xB has invalid maxpacket 2112, setting to 64 [ 984.971753][ T7377] usb 7-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 984.991779][ T7377] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.005808][ T30] audit: type=1400 audit(1765356468.952:674): avc: denied { execute } for pid=15388 comm="syz.0.2342" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 985.007746][ T5925] usb 1-1: USB disconnect, device number 56 [ 985.042289][ T7377] usb 7-1: config 0 descriptor?? [ 985.189478][T15395] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 985.652489][ T7377] port100 7-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 985.883973][ T7377] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 986.214734][ T5992] usb 7-1: USB disconnect, device number 7 [ 986.314732][ T7377] usb 6-1: config 0 has an invalid interface number: 249 but max is 0 [ 986.345181][ T7377] usb 6-1: config 0 has no interface number 0 [ 986.393001][ T7377] usb 6-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 18 [ 986.455512][ T7377] usb 6-1: config 0 interface 249 altsetting 0 endpoint 0xB has invalid maxpacket 2112, setting to 64 [ 986.504246][ T7377] usb 6-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 986.552688][ T7377] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.627879][ T7377] usb 6-1: config 0 descriptor?? [ 986.666308][T15412] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 986.692949][ T7377] port100 6-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 988.121151][ T910] usb 6-1: USB disconnect, device number 76 [ 988.477970][T15431] netlink: 220 bytes leftover after parsing attributes in process `syz.6.2353'. [ 988.690382][ T5874] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 989.285309][ T5874] usb 1-1: Using ep0 maxpacket: 16 [ 989.355013][ T5874] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 989.374190][ T5874] usb 1-1: config 0 has no interface number 0 [ 989.380313][ T5874] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 989.417478][ T5874] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 989.441623][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.457971][ T5874] usb 1-1: Product: syz [ 989.467369][ T5874] usb 1-1: Manufacturer: syz [ 989.476187][ T5874] usb 1-1: SerialNumber: syz [ 989.512797][ T5874] usb 1-1: config 0 descriptor?? [ 989.931999][T15444] comedi comedi0: Minor 3 specified more than once! [ 990.392130][ T5874] usbtouchscreen 1-1:0.214: Failed to read FW rev: 0 [ 990.411280][ T5874] usbtouchscreen 1-1:0.214: probe with driver usbtouchscreen failed with error -5 [ 990.625395][T15451] netlink: 'syz.6.2358': attribute type 1 has an invalid length. [ 990.806569][T15453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 992.181672][ T5925] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 992.341113][ T5925] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 992.381646][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.389663][ T5925] usb 3-1: Product: syz [ 992.411688][ T5925] usb 3-1: Manufacturer: syz [ 992.416303][ T5925] usb 3-1: SerialNumber: syz [ 992.427631][ T5925] usb 3-1: config 0 descriptor?? [ 992.465429][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.471802][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.671978][ T5874] usb 1-1: USB disconnect, device number 57 [ 992.710376][T15473] netlink: 220 bytes leftover after parsing attributes in process `syz.5.2366'. [ 993.501876][ T5925] airspy 3-1:0.0: usb_control_msg() failed -110 request 09 [ 993.505733][T15482] FAULT_INJECTION: forcing a failure. [ 993.505733][T15482] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 993.525412][T15482] CPU: 0 UID: 0 PID: 15482 Comm: syz.5.2368 Not tainted syzkaller #0 PREEMPT(full) [ 993.525438][T15482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 993.525450][T15482] Call Trace: [ 993.525457][T15482] [ 993.525465][T15482] dump_stack_lvl+0x16c/0x1f0 [ 993.525489][T15482] should_fail_ex+0x512/0x640 [ 993.525516][T15482] _copy_from_user+0x2e/0xd0 [ 993.525544][T15482] copy_msghdr_from_user+0x98/0x160 [ 993.525573][T15482] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 993.525611][T15482] ___sys_sendmsg+0xfe/0x1d0 [ 993.525638][T15482] ? __pfx____sys_sendmsg+0x10/0x10 [ 993.525696][T15482] __sys_sendmsg+0x16d/0x220 [ 993.525722][T15482] ? __pfx___sys_sendmsg+0x10/0x10 [ 993.525766][T15482] do_syscall_64+0xcd/0xf80 [ 993.525787][T15482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 993.525807][T15482] RIP: 0033:0x7f01e1d8f749 [ 993.525823][T15482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 993.525840][T15482] RSP: 002b:00007f01e2bf9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 993.525859][T15482] RAX: ffffffffffffffda RBX: 00007f01e1fe5fa0 RCX: 00007f01e1d8f749 [ 993.525872][T15482] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000004 [ 993.525884][T15482] RBP: 00007f01e2bf9090 R08: 0000000000000000 R09: 0000000000000000 [ 993.525895][T15482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 993.525906][T15482] R13: 00007f01e1fe6038 R14: 00007f01e1fe5fa0 R15: 00007ffd705a3e58 [ 993.525933][T15482] [ 994.161790][ T5874] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 994.274534][ T5925] airspy 3-1:0.0: Could not detect board [ 994.288790][ T5925] airspy 3-1:0.0: probe with driver airspy failed with error -110 [ 994.331660][ T5874] usb 6-1: Using ep0 maxpacket: 32 [ 994.349134][ T5874] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 994.396565][ T5874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.699799][ T910] usb 3-1: USB disconnect, device number 58 [ 996.222459][ T5874] usb 6-1: config 0 descriptor?? [ 996.454843][T15496] netlink: 'syz.2.2372': attribute type 1 has an invalid length. [ 996.597819][ T5874] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 996.674126][T15499] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2373'. [ 996.683265][T15499] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2373'. [ 996.893040][ T5874] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 996.912274][ T5874] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 996.939967][ T5874] usb 6-1: media controller created [ 996.964914][ T5874] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 996.997627][ T5874] az6027: usb out operation failed. (-71) [ 997.021555][ T5874] az6027: usb out operation failed. (-71) [ 997.028977][ T5874] stb0899_attach: Driver disabled by Kconfig [ 997.046725][ T5874] az6027: no front-end attached [ 997.046725][ T5874] [ 997.059888][ T5874] az6027: usb out operation failed. (-71) [ 997.071897][ T5874] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 997.085401][ T5874] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input43 [ 997.145394][ T5874] dvb-usb: schedule remote query interval to 400 msecs. [ 997.160944][ T5874] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 997.172965][T15506] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2377'. [ 997.185196][ T5874] usb 6-1: USB disconnect, device number 77 [ 997.408654][ T5874] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 998.018419][ T183] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 998.144338][ T5925] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 998.354920][ T5925] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 998.364953][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.415703][ T5925] usb 5-1: Product: syz [ 998.430065][ T5925] usb 5-1: Manufacturer: syz [ 998.461394][ T5925] usb 5-1: SerialNumber: syz [ 998.519902][ T5925] usb 5-1: config 0 descriptor?? [ 999.399837][ T183] usb 1-1: config 0 has an invalid interface number: 249 but max is 0 [ 999.421853][ T183] usb 1-1: config 0 has no interface number 0 [ 999.427966][ T183] usb 1-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 18 [ 999.453124][ T183] usb 1-1: config 0 interface 249 altsetting 0 endpoint 0xB has invalid maxpacket 2112, setting to 64 [ 999.464236][ T183] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 999.491627][ T183] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.544189][ T183] usb 1-1: config 0 descriptor?? [ 999.588835][T15506] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 999.621559][ T183] port100 1-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 999.803457][ T183] usb 1-1: USB disconnect, device number 58 [ 1000.079704][T15511] binder: 15510:15511 ioctl c0306201 200000000440 returned -14 [ 1000.335375][ T5925] airspy 5-1:0.0: Board ID: 00 [ 1001.336021][T15537] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 1001.345868][T15537] SELinux: failed to load policy [ 1001.378629][ T5925] airspy 5-1:0.0: Firmware version: [ 1001.729213][ T5925] airspy 5-1:0.0: usb_control_msg() failed -71 request 12 [ 1001.865607][ T5925] airspy 5-1:0.0: Registered as swradio24 [ 1001.912046][ T5925] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1003.626672][ T5925] usb 5-1: USB disconnect, device number 68 [ 1003.669892][T15550] lo speed is unknown, defaulting to 1000 [ 1006.702000][ T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1007.631694][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 1007.641129][ T9] usb 7-1: config 0 has an invalid interface number: 214 but max is 0 [ 1007.650929][ T9] usb 7-1: config 0 has no interface number 0 [ 1007.663716][ T9] usb 7-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1007.686589][ T9] usb 7-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1007.726163][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.758098][ T9] usb 7-1: Product: syz [ 1007.771687][ T9] usb 7-1: Manufacturer: syz [ 1007.837749][ T9] usb 7-1: SerialNumber: syz [ 1007.872407][ T9] usb 7-1: config 0 descriptor?? [ 1007.987936][ T183] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1008.035251][T15593] trusted_key: encrypted_key: master key parameter is missing [ 1008.151749][ T183] usb 6-1: Using ep0 maxpacket: 16 [ 1008.264074][ T183] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 1008.272569][ T183] usb 6-1: config 0 has no interface number 0 [ 1008.284865][ T183] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1008.307655][ T9] usbtouchscreen 7-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1008.380463][T15599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1008.761960][ T9] usb 7-1: USB disconnect, device number 8 [ 1008.782425][ T183] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1008.811703][ T5874] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 1008.820010][ T183] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.849510][ T183] usb 6-1: Product: syz [ 1008.857829][ T183] usb 6-1: Manufacturer: syz [ 1008.867527][ T183] usb 6-1: SerialNumber: syz [ 1008.879711][ T183] usb 6-1: config 0 descriptor?? [ 1008.984680][ T5874] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1009.001676][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.009670][ T5874] usb 1-1: Product: syz [ 1009.031633][ T5874] usb 1-1: Manufacturer: syz [ 1009.036248][ T5874] usb 1-1: SerialNumber: syz [ 1009.053312][ T5874] usb 1-1: config 0 descriptor?? [ 1009.098109][ T183] usbtouchscreen 6-1:0.214: Failed to read FW rev: 0 [ 1009.118407][ T183] usbtouchscreen 6-1:0.214: probe with driver usbtouchscreen failed with error -5 [ 1009.230643][T15603] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.2403'. [ 1009.428566][T15596] binder: 15594:15596 ioctl c0306201 200000000440 returned -14 [ 1010.092437][ T5874] airspy 1-1:0.0: Board ID: 00 [ 1010.097239][ T5874] airspy 1-1:0.0: Firmware version: [ 1010.618192][ T9] usb 6-1: USB disconnect, device number 78 [ 1010.973527][ T5874] airspy 1-1:0.0: usb_control_msg() failed -71 request 0f [ 1011.148587][T15651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1011.631724][T15648] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2407'. [ 1011.721456][ T5874] airspy 1-1:0.0: Registered as swradio24 [ 1011.733847][ T5874] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1011.768113][ T5874] usb 1-1: USB disconnect, device number 59 [ 1011.981253][T15656] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1012.052548][ T48] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1012.243416][ T48] usb 7-1: config 0 has an invalid interface number: 249 but max is 0 [ 1012.349859][ T48] usb 7-1: config 0 has no interface number 0 [ 1012.362786][ T48] usb 7-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 18 [ 1012.383790][ T48] usb 7-1: config 0 interface 249 altsetting 0 endpoint 0xB has invalid maxpacket 2112, setting to 64 [ 1012.870124][ T48] usb 7-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 1012.888748][ T48] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.908931][ T48] usb 7-1: config 0 descriptor?? [ 1012.913958][ T910] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 1012.928018][T15645] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1012.938974][ T48] port100 7-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 1013.135779][ T910] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1013.146286][ T910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.147628][T15671] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2413'. [ 1013.192154][ T910] usb 3-1: Product: syz [ 1013.245101][ T48] usb 7-1: USB disconnect, device number 9 [ 1013.255130][ T910] usb 3-1: Manufacturer: syz [ 1013.278998][ T910] usb 3-1: SerialNumber: syz [ 1013.306091][ T910] usb 3-1: config 0 descriptor?? [ 1013.321898][T15677] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.2415'. [ 1013.523025][T15660] binder_alloc: 15659: binder_alloc_buf, no vma [ 1013.635858][T15681] comedi comedi0: Minor 3 specified more than once! [ 1013.934124][ T9] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 1013.941754][ T5874] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1014.124538][ T5874] usb 6-1: config 0 has an invalid interface number: 249 but max is 0 [ 1014.133601][ T5874] usb 6-1: config 0 has no interface number 0 [ 1014.140590][ T5874] usb 6-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 18 [ 1014.151033][ T5874] usb 6-1: config 0 interface 249 altsetting 0 endpoint 0xB has invalid maxpacket 2112, setting to 64 [ 1014.162183][ T9] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1014.172549][ T5874] usb 6-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 1014.181792][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.191276][ T5874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.199377][ T9] usb 1-1: Product: syz [ 1014.203712][ T9] usb 1-1: Manufacturer: syz [ 1014.210820][ T5874] usb 6-1: config 0 descriptor?? [ 1014.216323][ T9] usb 1-1: SerialNumber: syz [ 1014.302025][T15671] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1014.326832][ T9] usb 1-1: config 0 descriptor?? [ 1014.349260][ T5874] port100 6-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 1014.389231][ T910] airspy 3-1:0.0: usb_control_msg() failed -110 request 09 [ 1014.400544][ T910] airspy 3-1:0.0: Could not detect board [ 1014.407264][ T910] airspy 3-1:0.0: probe with driver airspy failed with error -110 [ 1014.561225][ T5874] usb 6-1: USB disconnect, device number 79 [ 1014.636651][ T9] airspy 1-1:0.0: usb_control_msg() failed -71 request 09 [ 1014.644443][ T910] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 1014.655108][ T9] airspy 1-1:0.0: Could not detect board [ 1014.664182][ T9] airspy 1-1:0.0: probe with driver airspy failed with error -71 [ 1014.679796][ T9] usb 1-1: USB disconnect, device number 60 [ 1014.815294][ T910] usb 7-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1014.832149][ T910] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.847118][ T910] usb 7-1: Product: syz [ 1014.851292][ T910] usb 7-1: Manufacturer: syz [ 1014.856199][ T910] usb 7-1: SerialNumber: syz [ 1014.862458][ T910] usb 7-1: config 0 descriptor?? [ 1015.022123][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 1015.029359][T10507] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1015.136549][T15683] binder: 15682:15683 ioctl c0306201 200000000440 returned -14 [ 1015.307593][ T48] usb 3-1: USB disconnect, device number 59 [ 1015.376025][ T910] airspy 7-1:0.0: Board ID: 00 [ 1015.405816][ T910] airspy 7-1:0.0: Firmware version: [ 1015.645127][T15700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1015.771743][ T48] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1015.952764][ T48] usb 1-1: Using ep0 maxpacket: 16 [ 1015.977583][ T48] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 1015.985973][ T48] usb 1-1: config 0 has no interface number 0 [ 1015.992434][ T48] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1016.016465][ T48] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1016.031669][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.041553][ T48] usb 1-1: Product: syz [ 1016.045886][ T48] usb 1-1: Manufacturer: syz [ 1016.051381][ T48] usb 1-1: SerialNumber: syz [ 1016.113826][ T48] usb 1-1: config 0 descriptor?? [ 1016.209585][ T910] airspy 7-1:0.0: usb_control_msg() failed -71 request 0f [ 1016.238569][ T910] airspy 7-1:0.0: Registered as swradio24 [ 1016.244658][ T910] airspy 7-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1016.265870][ T910] usb 7-1: USB disconnect, device number 10 [ 1016.323550][ T48] usbtouchscreen 1-1:0.214: Failed to read FW rev: 0 [ 1016.330687][ T48] usbtouchscreen 1-1:0.214: probe with driver usbtouchscreen failed with error -5 [ 1016.799310][T15703] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2422'. [ 1016.808465][T15703] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2422'. [ 1016.818192][T15703] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2422'. [ 1017.182075][T10507] Bluetooth: hci0: command 0x0c1a tx timeout [ 1017.860741][T15715] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2425'. [ 1018.041801][T15721] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2426'. [ 1018.290561][ T183] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1018.341330][ T910] usb 1-1: USB disconnect, device number 61 [ 1018.499318][ T183] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1018.510272][ T183] usb 7-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 1018.519643][ T183] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.730102][ T48] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1018.768748][ T183] usb 7-1: config 0 descriptor?? [ 1018.781677][ T7377] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1018.787553][ T183] smsusb:smsusb_probe: board id=8, interface number 0 [ 1018.796803][ T183] smsusb:smsusb_probe: Device initialized with return code -19 [ 1018.982735][ T7377] usb 3-1: config 0 has an invalid interface number: 249 but max is 0 [ 1018.990934][ T7377] usb 3-1: config 0 has no interface number 0 [ 1018.999447][ T7377] usb 3-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 18 [ 1019.009529][ T7377] usb 3-1: config 0 interface 249 altsetting 0 endpoint 0xB has invalid maxpacket 2112, setting to 64 [ 1019.023097][ T7377] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 1019.428644][ T48] usb 5-1: config 0 has an invalid interface number: 249 but max is 0 [ 1019.441750][ T48] usb 5-1: config 0 has no interface number 0 [ 1019.451293][ T48] usb 5-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 18 [ 1019.462215][ T48] usb 5-1: config 0 interface 249 altsetting 0 endpoint 0xB has invalid maxpacket 2112, setting to 64 [ 1019.841040][ T7377] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.883880][ T7377] usb 3-1: config 0 descriptor?? [ 1019.889258][T15720] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1019.969807][ T48] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 1020.043952][ T7377] port100 3-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 1020.062931][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.179073][ T48] usb 5-1: config 0 descriptor?? [ 1020.240179][T15715] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1020.253659][ T48] port100 5-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 1020.384986][T15737] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2430'. [ 1020.564766][ T7377] usb 3-1: USB disconnect, device number 60 [ 1020.645347][ T48] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1020.771051][ T910] usb 7-1: USB disconnect, device number 11 [ 1020.803782][ T48] usb 6-1: config 0 has an invalid interface number: 249 but max is 0 [ 1020.856609][ T48] usb 6-1: config 0 has no interface number 0 [ 1020.881509][T15735] SELinux: failed to load policy [ 1020.902678][ T48] usb 6-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 18 [ 1020.921945][ T48] usb 6-1: config 0 interface 249 altsetting 0 endpoint 0xB has invalid maxpacket 2112, setting to 64 [ 1020.948889][ T5925] usb 5-1: USB disconnect, device number 69 [ 1020.999021][ T48] usb 6-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 1021.083662][ T48] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.153000][ T48] usb 6-1: config 0 descriptor?? [ 1021.195572][T15739] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1021.205476][ T48] port100 6-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 1021.360594][T15746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2433'. [ 1021.394647][T15746] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2433'. [ 1021.421263][T15749] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2432'. [ 1021.845906][ T48] usb 6-1: USB disconnect, device number 80 [ 1021.860299][T15746] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2433'. [ 1022.205324][T15758] SELinux: policydb magic number 0x7 does not match expected magic number 0xf97cff8c [ 1022.215196][T15758] SELinux: failed to load policy [ 1022.384192][T15755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1023.582339][T15756] SELinux: failed to load policy [ 1024.031760][ T9] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1025.097937][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1025.121831][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1025.131652][ T9] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1025.140674][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.707029][T15780] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2441'. [ 1025.722168][ T9] usb 6-1: config 0 descriptor?? [ 1025.976843][T15766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1026.036109][T15766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1027.441204][T15785] netlink: 'syz.0.2443': attribute type 2 has an invalid length. [ 1027.521404][T15786] netlink: 'syz.0.2443': attribute type 2 has an invalid length. [ 1027.939677][T15785] !: entered promiscuous mode [ 1027.993441][T15786] !: left promiscuous mode [ 1030.921847][T15836] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2448'. [ 1030.935612][T15836] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2448'. [ 1030.960289][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 1030.991704][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1031.007109][T15839] overlayfs: missing 'lowerdir' [ 1031.026834][ T9] usb 6-1: USB disconnect, device number 81 [ 1031.072404][ T30] audit: type=1326 audit(1765356515.022:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15833 comm="syz.6.2449" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff93698f749 code=0x0 [ 1031.373373][ T5992] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 1032.471328][T15859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1032.854859][T15844] SELinux: failed to load policy [ 1033.044840][T15864] netlink: 'syz.5.2454': attribute type 1 has an invalid length. [ 1033.243337][T15866] netlink: 'syz.4.2455': attribute type 2 has an invalid length. [ 1033.256176][T15866] !: entered promiscuous mode [ 1033.273985][T15866] netlink: 'syz.4.2455': attribute type 2 has an invalid length. [ 1033.283150][T15866] !: left promiscuous mode [ 1035.342119][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 1035.348339][T10507] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1035.371694][ T5992] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1035.553972][ T5992] usb 1-1: Using ep0 maxpacket: 16 [ 1035.567643][T15894] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2462'. [ 1035.577160][T15894] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2462'. [ 1035.837540][ T5992] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1035.855805][ T5992] usb 1-1: config 0 has no interface number 0 [ 1035.958917][ T5992] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1035.988022][ T5992] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.011866][ T5992] usb 1-1: Product: syz [ 1036.016052][ T5992] usb 1-1: Manufacturer: syz [ 1036.027123][ T5992] usb 1-1: SerialNumber: syz [ 1037.868410][ T5992] usb 1-1: config 0 descriptor?? [ 1037.889731][ T5992] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1038.174964][T15914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1039.192411][ T5992] gspca_spca1528: reg_w err -110 [ 1039.208362][T15913] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2466'. [ 1039.220035][ T5992] spca1528 1-1:0.1: probe with driver spca1528 failed with error -110 [ 1039.282277][ T6288] usb 1-1: USB disconnect, device number 63 [ 1040.226287][T15931] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2471'. [ 1040.518822][T15938] trusted_key: encrypted_key: master key parameter 'u' is invalid [ 1040.742673][ T5992] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1040.883323][T15943] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!‚lü1Ü*ø$pOcÚÉ”ÎÜr$åG—•µ [ 1040.972163][ T5992] usb 1-1: config 0 has an invalid interface number: 249 but max is 0 [ 1041.003399][ T5992] usb 1-1: config 0 has no interface number 0 [ 1041.013824][ T5992] usb 1-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 18 [ 1041.024256][ T5992] usb 1-1: config 0 interface 249 altsetting 0 endpoint 0xB has invalid maxpacket 2112, setting to 64 [ 1041.035687][ T5992] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 1041.051660][ T5992] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.168189][ T5992] usb 1-1: config 0 descriptor?? [ 1041.355999][T15927] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1041.371657][ T5992] port100 1-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 1041.821711][ T5992] usb 1-1: USB disconnect, device number 64 [ 1042.188839][T15959] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2481'. [ 1042.489532][T15967] comedi comedi0: Minor 3 specified more than once! [ 1042.861467][T15906] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1043.044332][T15906] usb 3-1: config 0 has an invalid interface number: 249 but max is 0 [ 1043.063487][T15906] usb 3-1: config 0 has no interface number 0 [ 1043.099190][T15906] usb 3-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 18 [ 1043.172345][T15906] usb 3-1: config 0 interface 249 altsetting 0 endpoint 0xB has invalid maxpacket 2112, setting to 64 [ 1043.341905][T15906] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 1043.689731][T15906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.756666][T15906] usb 3-1: config 0 descriptor?? [ 1043.783996][T15959] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1043.793393][T15906] port100 3-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 1044.214674][ T7377] usb 3-1: USB disconnect, device number 61 [ 1044.366886][T15990] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2486'. [ 1044.564575][T15993] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2487'. [ 1044.659604][T15996] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2489'. [ 1044.962453][T16001] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2490'. [ 1045.362607][T15906] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1045.370209][ T5992] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1045.579893][T15906] usb 5-1: config 0 has an invalid interface number: 249 but max is 0 [ 1045.618355][ T5992] usb 6-1: config 0 has an invalid interface number: 249 but max is 0 [ 1045.646561][T15906] usb 5-1: config 0 has no interface number 0 [ 1045.815205][ T5992] usb 6-1: config 0 has no interface number 0 [ 1045.821711][T15906] usb 5-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 18 [ 1045.938659][T16007] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2491'. [ 1046.372657][ T5992] usb 6-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 18 [ 1046.384782][T15906] usb 5-1: config 0 interface 249 altsetting 0 endpoint 0xB has invalid maxpacket 2112, setting to 64 [ 1046.400155][ T5992] usb 6-1: config 0 interface 249 altsetting 0 endpoint 0xB has invalid maxpacket 2112, setting to 64 [ 1046.414069][T15906] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 1046.424711][ T5992] usb 6-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 1046.509113][T15906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.579954][ T5992] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.622020][T15906] usb 5-1: config 0 descriptor?? [ 1046.690981][ T5992] usb 6-1: config 0 descriptor?? [ 1046.706791][T15994] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1046.749849][T15992] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1046.846912][T15906] port100 5-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 1046.867232][ T5992] port100 6-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 1047.877224][T15906] usb 6-1: USB disconnect, device number 82 [ 1048.227180][ T7377] usb 5-1: USB disconnect, device number 70 [ 1049.842237][T16046] netlink: 'syz.6.2501': attribute type 2 has an invalid length. [ 1049.881531][T16046] !: entered promiscuous mode [ 1051.105561][T16056] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2503'. [ 1051.423658][ T183] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 1051.526407][ T7377] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1051.686209][ T7377] usb 6-1: config 0 has an invalid interface number: 249 but max is 0 [ 1051.723381][ T7377] usb 6-1: config 0 has no interface number 0 [ 1051.734750][ T7377] usb 6-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 18 [ 1051.735976][ T183] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1051.747672][ T7377] usb 6-1: config 0 interface 249 altsetting 0 endpoint 0xB has invalid maxpacket 2112, setting to 64 [ 1051.775541][ T7377] usb 6-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 1051.785793][ T7377] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.805199][ T7377] usb 6-1: config 0 descriptor?? [ 1051.842987][T16053] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1051.852392][ T7377] port100 6-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 1051.880856][ T183] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.912802][ T183] usb 5-1: Product: syz [ 1051.921313][ T183] usb 5-1: Manufacturer: syz [ 1051.927305][ T183] usb 5-1: SerialNumber: syz [ 1052.018928][ T183] usb 5-1: config 0 descriptor?? [ 1052.636286][ T183] airspy 5-1:0.0: usb_control_msg() failed -71 request 09 [ 1052.673683][ T183] airspy 5-1:0.0: Could not detect board [ 1052.690592][ T183] airspy 5-1:0.0: probe with driver airspy failed with error -71 [ 1052.736696][T15906] usb 6-1: USB disconnect, device number 83 [ 1052.751422][ T183] usb 5-1: USB disconnect, device number 71 [ 1053.665880][T16087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1054.002159][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.008547][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.384362][T16093] netlink: 'syz.2.2516': attribute type 2 has an invalid length. [ 1054.462091][ T5925] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1054.651061][T16097] trusted_key: encrypted_key: insufficient parameters specified [ 1054.747191][ T5925] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1054.758019][ T5925] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1054.783020][ T5925] usb 5-1: config 0 has no interface number 0 [ 1054.789124][ T5925] usb 5-1: config 0 interface 1 has no altsetting 0 [ 1054.801159][ T5925] usb 5-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 1054.810476][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.895965][ T5925] usb 5-1: config 0 descriptor?? [ 1054.905313][ T5925] smsusb:smsusb_probe: board id=8, interface number 1 [ 1055.051249][T16106] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2518'. [ 1056.452005][ T7377] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1057.220614][ T183] usb 5-1: USB disconnect, device number 72 [ 1057.228638][ T7377] usb 6-1: config 0 has an invalid interface number: 249 but max is 0 [ 1057.247008][ T7377] usb 6-1: config 0 has no interface number 0 [ 1057.271675][ T7377] usb 6-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 18 [ 1057.307605][ T7377] usb 6-1: config 0 interface 249 altsetting 0 endpoint 0xB has invalid maxpacket 2112, setting to 64 [ 1057.332726][ T7377] usb 6-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 1057.355898][ T7377] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.379067][ T7377] usb 6-1: config 0 descriptor?? [ 1057.390145][T16107] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1057.562436][ T7377] port100 6-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 1057.692614][T16122] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1058.123469][ T7377] usb 6-1: USB disconnect, device number 84 [ 1059.018492][T16135] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2525'. [ 1059.681879][T15906] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1060.744820][T15906] usb 5-1: config 0 has an invalid interface number: 249 but max is 0 [ 1060.757130][T16147] netlink: 'syz.0.2530': attribute type 2 has an invalid length. [ 1060.791096][T15906] usb 5-1: config 0 has no interface number 0 [ 1061.135871][T15906] usb 5-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 18 [ 1061.191670][T15906] usb 5-1: config 0 interface 249 altsetting 0 endpoint 0xB has invalid maxpacket 2112, setting to 64 [ 1061.224338][T15906] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 1061.251718][T15906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.283198][T15906] usb 5-1: config 0 descriptor?? [ 1061.305713][T16135] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1061.331837][T15906] port100 5-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 1061.508024][ T7377] usb 5-1: USB disconnect, device number 73 [ 1063.259636][T16179] trusted_key: encrypted_key: insufficient parameters specified [ 1063.382167][T16181] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2537'. [ 1063.782173][ T6288] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1063.958064][ T6288] usb 5-1: config 0 has an invalid interface number: 249 but max is 0 [ 1064.211759][ T6288] usb 5-1: config 0 has no interface number 0 [ 1064.221437][ T6288] usb 5-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 18 [ 1064.236399][ T6288] usb 5-1: config 0 interface 249 altsetting 0 endpoint 0xB has invalid maxpacket 2112, setting to 64 [ 1064.248624][ T6288] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 1064.257741][ T6288] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.286874][ T6288] usb 5-1: config 0 descriptor?? [ 1064.314384][T16182] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1064.346373][ T6288] port100 5-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 1064.498101][T16195] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2541'. [ 1064.617628][T16196] SELinux: failed to load policy [ 1064.637468][ T6288] usb 5-1: USB disconnect, device number 74 [ 1064.712658][T16197] lo speed is unknown, defaulting to 1000 [ 1064.791682][T15906] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1064.887483][T16203] ip_vti0: Master is either lo or non-ether device [ 1064.978025][T15906] usb 1-1: config 0 has an invalid interface number: 249 but max is 0 [ 1064.999760][T15906] usb 1-1: config 0 has no interface number 0 [ 1065.012922][T15906] usb 1-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 18 [ 1065.029924][T15906] usb 1-1: config 0 interface 249 altsetting 0 endpoint 0xB has invalid maxpacket 2112, setting to 64 [ 1065.041137][T15906] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 1065.091913][T15906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.102071][T15906] usb 1-1: config 0 descriptor?? [ 1065.107534][T16195] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1065.126026][T15906] port100 1-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 1065.724380][T15906] usb 1-1: USB disconnect, device number 65 [ 1065.961392][ T30] audit: type=1400 audit(1765356549.912:676): avc: denied { ioctl } for pid=16213 comm="syz.4.2546" path="socket:[58891]" dev="sockfs" ino=58891 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1069.232748][T16256] netlink: 1624 bytes leftover after parsing attributes in process `syz.6.2552'. [ 1069.376034][T16260] SELinux: failed to load policy [ 1069.431159][T16262] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2553'. [ 1069.441669][ T7377] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1069.490368][T16266] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2555'. [ 1069.511638][T16266] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2555'. [ 1069.542457][T16266] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2555'. [ 1069.692026][ T7377] usb 1-1: Using ep0 maxpacket: 16 [ 1070.092687][T16275] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2557'. [ 1070.104498][ T7377] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 1070.145133][ T7377] usb 1-1: config 0 has no interface number 0 [ 1070.151899][ T7377] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1070.235231][ T7377] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1070.268052][ T7377] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.318423][ T7377] usb 1-1: Product: syz [ 1070.339797][ T7377] usb 1-1: Manufacturer: syz [ 1070.344747][ T7377] usb 1-1: SerialNumber: syz [ 1070.356942][ T183] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1070.362056][ T7377] usb 1-1: config 0 descriptor?? [ 1070.526832][ T183] usb 5-1: config 0 has an invalid interface number: 249 but max is 0 [ 1070.547500][ T183] usb 5-1: config 0 has no interface number 0 [ 1070.561008][ T183] usb 5-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 18 [ 1070.571042][ T183] usb 5-1: config 0 interface 249 altsetting 0 endpoint 0xB has invalid maxpacket 2112, setting to 64 [ 1070.582646][ T183] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 1070.593745][ T183] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.604574][ T7377] usbtouchscreen 1-1:0.214: Failed to read FW rev: -71 [ 1070.608488][ T183] usb 5-1: config 0 descriptor?? [ 1070.692223][ T7377] usbtouchscreen 1-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1070.727780][T16275] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1070.739297][ T7377] usb 1-1: USB disconnect, device number 66 [ 1070.751636][ T5992] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 1070.842900][ T183] port100 5-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 1070.961430][T16287] comedi comedi0: Minor 3 specified more than once! [ 1071.304878][ T183] usb 5-1: USB disconnect, device number 75 [ 1071.353931][ T5992] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 1071.370287][ T5992] usb 3-1: config 0 has no interface number 0 [ 1071.376501][ T5992] usb 3-1: config 0 interface 128 altsetting 6 endpoint 0x5 has invalid maxpacket 1024, setting to 1023 [ 1071.387727][ T5992] usb 3-1: config 0 interface 128 has no altsetting 0 [ 1071.397765][ T5992] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91 [ 1071.413694][ T5992] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.421824][ T5992] usb 3-1: Product: syz [ 1071.426043][ T5992] usb 3-1: Manufacturer: syz [ 1071.430662][ T5992] usb 3-1: SerialNumber: syz [ 1071.439957][ T5992] usb 3-1: config 0 descriptor?? [ 1071.451488][ T5992] radio-si470x 3-1:0.128: could not find interrupt in endpoint [ 1071.459176][ T5992] radio-si470x 3-1:0.128: probe with driver radio-si470x failed with error -5 [ 1071.468456][ T5992] usbhid 3-1:0.128: couldn't find an input interrupt endpoint [ 1071.559084][T16291] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2561'. [ 1071.716091][T16282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1071.781942][T16282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1071.891230][ T7377] usb 3-1: USB disconnect, device number 62 [ 1071.921656][ T5894] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1072.073342][ T5894] usb 6-1: config 0 has an invalid interface number: 249 but max is 0 [ 1072.082060][ T5894] usb 6-1: config 0 has no interface number 0 [ 1072.097252][ T5894] usb 6-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 18 [ 1072.107812][T16303] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.2565'. [ 1072.119240][ T5894] usb 6-1: config 0 interface 249 altsetting 0 endpoint 0xB has invalid maxpacket 2112, setting to 64 [ 1072.151708][ T183] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 1072.160198][ T5894] usb 6-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 1072.258052][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.342630][T16313] overlayfs: missing 'lowerdir' [ 1072.459320][ T30] audit: type=1326 audit(1765356556.362:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16310 comm="syz.4.2566" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa44e98f749 code=0x0 [ 1072.494230][ T183] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1072.520660][ T183] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1072.539469][ T183] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1072.620969][ T5894] usb 6-1: config 0 descriptor?? [ 1072.714993][T16290] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1072.747645][ T5894] port100 6-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 1072.812987][T16321] SELinux: policydb magic number 0x4b does not match expected magic number 0xf97cff8c [ 1072.822993][T16321] SELinux: failed to load policy [ 1074.306042][ T5894] usb 6-1: USB disconnect, device number 85 [ 1074.316025][ T183] usb 7-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1074.733294][ T183] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.741314][ T183] usb 7-1: Product: syz [ 1074.745538][ T183] usb 7-1: Manufacturer: syz [ 1074.750125][ T183] usb 7-1: SerialNumber: syz [ 1074.894312][ T183] usb 7-1: config 0 descriptor?? [ 1074.981733][ T183] usb 7-1: can't set config #0, error -71 [ 1075.047273][ T183] usb 7-1: USB disconnect, device number 12 [ 1075.323674][T16348] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2568'. [ 1076.603172][ T5874] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1076.926947][T16372] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2575'. [ 1076.982450][ T5874] usb 6-1: Using ep0 maxpacket: 16 [ 1077.062536][ T5874] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 1077.091189][ T5874] usb 6-1: config 0 has no interface number 0 [ 1077.112990][ T5874] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1077.186222][ T5874] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1077.266115][ T5874] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.296500][ T5874] usb 6-1: Product: syz [ 1077.300657][ T5874] usb 6-1: Manufacturer: syz [ 1077.341785][ T5874] usb 6-1: SerialNumber: syz [ 1077.351627][ T183] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1077.412163][ T5874] usb 6-1: config 0 descriptor?? [ 1077.566774][ T183] usb 7-1: config 0 has an invalid interface number: 249 but max is 0 [ 1077.596251][ T183] usb 7-1: config 0 has no interface number 0 [ 1077.611670][ T183] usb 7-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 18 [ 1077.626522][T16375] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.2576'. [ 1077.629814][ T5874] usbtouchscreen 6-1:0.214: Failed to read FW rev: -71 [ 1077.668253][ T183] usb 7-1: config 0 interface 249 altsetting 0 endpoint 0xB has invalid maxpacket 2112, setting to 64 [ 1077.681772][ T5874] usbtouchscreen 6-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1077.707306][ T183] usb 7-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 1077.763212][T16377] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2577'. [ 1077.772344][T16377] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2577'. [ 1078.011686][ T5874] usb 6-1: USB disconnect, device number 86 [ 1078.041646][ T183] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.094901][ T183] usb 7-1: config 0 descriptor?? [ 1078.122961][T16370] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1078.135081][ T183] port100 7-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 1078.221662][T10507] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1078.228069][T10507] Bluetooth: hci0: command 0x0c1a tx timeout [ 1078.336027][ T5894] usb 7-1: USB disconnect, device number 13 [ 1079.134086][T16390] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2581'. [ 1079.185724][T16394] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2581'. [ 1079.197241][T16390] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1079.237200][T16390] FAULT_INJECTION: forcing a failure. [ 1079.237200][T16390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1079.246459][T16394] bond1: entered promiscuous mode [ 1079.270770][T16390] CPU: 1 UID: 0 PID: 16390 Comm: syz.6.2581 Not tainted syzkaller #0 PREEMPT(full) [ 1079.270787][T16390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1079.270794][T16390] Call Trace: [ 1079.270798][T16390] [ 1079.270803][T16390] dump_stack_lvl+0x16c/0x1f0 [ 1079.270819][T16390] should_fail_ex+0x512/0x640 [ 1079.270837][T16390] _copy_from_user+0x2e/0xd0 [ 1079.270851][T16390] copy_msghdr_from_user+0x98/0x160 [ 1079.270868][T16390] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1079.270891][T16390] ___sys_sendmsg+0xfe/0x1d0 [ 1079.270907][T16390] ? __pfx____sys_sendmsg+0x10/0x10 [ 1079.270938][T16390] __sys_sendmsg+0x16d/0x220 [ 1079.270954][T16390] ? __pfx___sys_sendmsg+0x10/0x10 [ 1079.270978][T16390] do_syscall_64+0xcd/0xf80 [ 1079.270991][T16390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1079.271003][T16390] RIP: 0033:0x7ff93698f749 [ 1079.271013][T16390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1079.271024][T16390] RSP: 002b:00007ff934bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1079.271036][T16390] RAX: ffffffffffffffda RBX: 00007ff936be5fa0 RCX: 00007ff93698f749 [ 1079.271043][T16390] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000007 [ 1079.271050][T16390] RBP: 00007ff934bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1079.271057][T16390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1079.271063][T16390] R13: 00007ff936be6038 R14: 00007ff936be5fa0 R15: 00007fff56165cc8 [ 1079.271077][T16390] [ 1079.551728][ T5874] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1079.681655][ T5992] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 1079.741828][ T30] audit: type=1400 audit(1765356563.692:678): avc: denied { unmount } for pid=16397 comm="syz.6.2583" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1079.838545][ T5874] usb 6-1: Using ep0 maxpacket: 16 [ 1079.854951][ T5874] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1079.866139][ T5874] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1079.877626][ T5874] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1079.906159][ T5874] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1079.934575][ T5992] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1079.954183][ T5874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.976558][ T5992] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.088031][ T5874] usb 6-1: config 0 descriptor?? [ 1080.125905][ T5992] usb 1-1: Product: syz [ 1080.130163][ T5992] usb 1-1: Manufacturer: syz [ 1080.488039][ T5992] usb 1-1: SerialNumber: syz [ 1080.507415][ T5874] nzxt-smart2 0003:1E71:2009.0008: item fetching failed at offset 1/5 [ 1080.605602][ T5992] usb 1-1: config 0 descriptor?? [ 1080.623297][ T5874] nzxt-smart2 0003:1E71:2009.0008: probe with driver nzxt-smart2 failed with error -22 [ 1081.751719][ T5992] airspy 1-1:0.0: usb_control_msg() failed -110 request 09 [ 1081.781868][ T5992] airspy 1-1:0.0: Could not detect board [ 1081.787556][ T5992] airspy 1-1:0.0: probe with driver airspy failed with error -110 [ 1081.995740][T16396] binder: 16395:16396 ioctl c0306201 200000000440 returned -14 [ 1082.040924][ T48] usb 6-1: USB disconnect, device number 87 [ 1082.481721][ T5992] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 1082.498606][T16426] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2590'. [ 1082.533320][ T30] audit: type=1400 audit(1765356566.492:679): avc: denied { ioctl } for pid=16430 comm="syz.5.2591" path="socket:[59353]" dev="sockfs" ino=59353 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1082.644234][ T5992] usb 7-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1082.653305][ T5992] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.661319][ T5992] usb 7-1: Product: syz [ 1082.665855][ T5992] usb 7-1: Manufacturer: syz [ 1082.671899][ T5992] usb 7-1: SerialNumber: syz [ 1082.677928][ T5992] usb 7-1: config 0 descriptor?? [ 1082.702312][T10507] Bluetooth: hci0: command 0x0c1a tx timeout [ 1082.708422][ T52] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1082.761629][ T5800] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1082.811669][ T5916] usb 6-1: new low-speed USB device number 88 using dummy_hcd [ 1082.925785][ T5800] usb 5-1: config 0 has an invalid interface number: 249 but max is 0 [ 1082.933867][T16427] binder: 16424:16427 ioctl c0306201 200000000440 returned -14 [ 1082.934734][ T5800] usb 5-1: config 0 has no interface number 0 [ 1083.032315][ T5800] usb 5-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 18 [ 1083.032470][ T5916] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 1083.086370][ T5800] usb 5-1: config 0 interface 249 altsetting 0 endpoint 0xB has invalid maxpacket 2112, setting to 64 [ 1083.103889][T16435] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2592'. [ 1083.149222][ T5800] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 1083.203718][ T5992] airspy 7-1:0.0: Board ID: 00 [ 1083.208620][ T5916] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 1083.210899][ T48] usb 1-1: USB disconnect, device number 67 [ 1083.216858][ T5800] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.217837][ T5992] airspy 7-1:0.0: Firmware version: [ 1083.236552][ T5916] usb 6-1: config 0 has no interface number 0 [ 1083.243903][ T5916] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 1083.265212][ T5800] usb 5-1: config 0 descriptor?? [ 1083.270680][T16426] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1083.282105][ T5800] port100 5-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 1083.311310][ T5916] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1083.336613][ T5916] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1083.346938][ T5916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.363619][ T5916] usb 6-1: config 0 descriptor?? [ 1083.497441][ T5894] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1083.519775][ T5800] usb 5-1: USB disconnect, device number 76 [ 1083.675333][ T5894] usb 3-1: config 0 has an invalid interface number: 249 but max is 0 [ 1083.714032][ T5894] usb 3-1: config 0 has no interface number 0 [ 1083.739137][ T5894] usb 3-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 18 [ 1083.793604][ T5894] usb 3-1: config 0 interface 249 altsetting 0 endpoint 0xB has invalid maxpacket 2112, setting to 64 [ 1083.852752][ T5894] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 1083.877164][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.905985][ T5894] usb 3-1: config 0 descriptor?? [ 1083.923779][T16436] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 1083.941045][ T5894] port100 3-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 1083.985141][ T5916] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.21/input/input49 [ 1084.020302][ T5916] input: failed to attach handler kbd to device input49, error: -5 [ 1084.029332][ T5992] airspy 7-1:0.0: usb_control_msg() failed -71 request 0f [ 1084.037794][ T5992] airspy 7-1:0.0: Registered as swradio24 [ 1084.044655][ T5992] airspy 7-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1084.066166][ T5992] usb 7-1: USB disconnect, device number 14 [ 1084.207738][ T5894] usb 3-1: USB disconnect, device number 63 [ 1085.799183][ T5992] usb 6-1: USB disconnect, device number 88 [ 1086.909700][T16502] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1088.658567][T16525] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2605'. [ 1089.418566][ T5992] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1089.584444][ T5992] usb 5-1: config 0 has an invalid interface number: 249 but max is 0 [ 1089.595675][ T5992] usb 5-1: config 0 has no interface number 0 [ 1089.602065][ T5992] usb 5-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 18 [ 1089.611953][ T5992] usb 5-1: config 0 interface 249 altsetting 0 endpoint 0xB has invalid maxpacket 2112, setting to 64 [ 1089.623013][ T5992] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 1089.632081][ T5992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.649261][ T5992] usb 5-1: config 0 descriptor?? [ 1089.655695][T16525] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1089.666628][ T5992] port100 5-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 1090.029852][ T5992] usb 5-1: USB disconnect, device number 77 [ 1090.075757][ T30] audit: type=1400 audit(1765356574.032:680): avc: denied { getopt } for pid=16538 comm="syz.2.2608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1090.162623][T16541] FAULT_INJECTION: forcing a failure. [ 1090.162623][T16541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1090.176053][T16541] CPU: 0 UID: 0 PID: 16541 Comm: syz.5.2609 Not tainted syzkaller #0 PREEMPT(full) [ 1090.176079][T16541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1090.176090][T16541] Call Trace: [ 1090.176097][T16541] [ 1090.176104][T16541] dump_stack_lvl+0x16c/0x1f0 [ 1090.176127][T16541] should_fail_ex+0x512/0x640 [ 1090.176160][T16541] _copy_from_user+0x2e/0xd0 [ 1090.176183][T16541] copy_msghdr_from_user+0x98/0x160 [ 1090.176211][T16541] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1090.176249][T16541] ___sys_sendmsg+0xfe/0x1d0 [ 1090.176276][T16541] ? __pfx____sys_sendmsg+0x10/0x10 [ 1090.176332][T16541] __sys_sendmsg+0x16d/0x220 [ 1090.176359][T16541] ? __pfx___sys_sendmsg+0x10/0x10 [ 1090.176401][T16541] do_syscall_64+0xcd/0xf80 [ 1090.176423][T16541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.176442][T16541] RIP: 0033:0x7f01e1d8f749 [ 1090.176458][T16541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1090.176476][T16541] RSP: 002b:00007f01e2bf9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1090.176495][T16541] RAX: ffffffffffffffda RBX: 00007f01e1fe5fa0 RCX: 00007f01e1d8f749 [ 1090.176508][T16541] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 1090.176520][T16541] RBP: 00007f01e2bf9090 R08: 0000000000000000 R09: 0000000000000000 [ 1090.176531][T16541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1090.176543][T16541] R13: 00007f01e1fe6038 R14: 00007f01e1fe5fa0 R15: 00007ffd705a3e58 [ 1090.176569][T16541] [ 1090.402738][T16547] netlink: 'syz.6.2612': attribute type 2 has an invalid length. [ 1090.414000][T16547] netlink: 'syz.6.2612': attribute type 2 has an invalid length. [ 1090.421959][T16547] !: left promiscuous mode [ 1090.731605][ T6288] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1091.027823][ T6288] usb 1-1: device descriptor read/64, error -71 [ 1091.702425][ T30] audit: type=1400 audit(1765356575.642:681): avc: denied { map } for pid=16554 comm="syz.4.2614" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1091.795838][ T6288] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1092.071706][ T6288] usb 1-1: device descriptor read/64, error -71 [ 1092.182927][ T6288] usb usb1-port1: attempt power cycle [ 1092.225363][T16580] comedi comedi0: Minor 3 specified more than once! [ 1092.674635][T16582] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=16582 comm=syz.4.2620 [ 1092.975227][ T6288] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1093.107102][ T6288] usb 1-1: device descriptor read/8, error -71 [ 1093.591718][ T6288] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1093.647816][ T6288] usb 1-1: device descriptor read/8, error -71 [ 1093.661839][ T7377] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1093.795730][ T6288] usb usb1-port1: unable to enumerate USB device [ 1093.875125][ T7377] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1094.240190][T16599] FAULT_INJECTION: forcing a failure. [ 1094.240190][T16599] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1094.396977][T16599] CPU: 0 UID: 0 PID: 16599 Comm: syz.0.2623 Not tainted syzkaller #0 PREEMPT(full) [ 1094.397006][T16599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1094.397018][T16599] Call Trace: [ 1094.397025][T16599] [ 1094.397033][T16599] dump_stack_lvl+0x16c/0x1f0 [ 1094.397057][T16599] should_fail_ex+0x512/0x640 [ 1094.397086][T16599] _copy_to_user+0x32/0xd0 [ 1094.397111][T16599] simple_read_from_buffer+0xcb/0x170 [ 1094.397144][T16599] proc_fail_nth_read+0x197/0x240 [ 1094.397166][T16599] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1094.397186][T16599] ? rw_verify_area+0xcf/0x6c0 [ 1094.397206][T16599] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1094.397225][T16599] vfs_read+0x1e4/0xcf0 [ 1094.397249][T16599] ? __pfx___mutex_lock+0x10/0x10 [ 1094.397270][T16599] ? rcu_preempt_deferred_qs_irqrestore+0x500/0xbc0 [ 1094.397298][T16599] ? __pfx_vfs_read+0x10/0x10 [ 1094.397324][T16599] ? __rcu_read_unlock+0x2b5/0x5a0 [ 1094.397350][T16599] ? __fget_files+0x20e/0x3c0 [ 1094.397383][T16599] ksys_read+0x12a/0x250 [ 1094.397406][T16599] ? __pfx_ksys_read+0x10/0x10 [ 1094.397441][T16599] do_syscall_64+0xcd/0xf80 [ 1094.397462][T16599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.397482][T16599] RIP: 0033:0x7fea54d8e15c [ 1094.397497][T16599] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1094.397517][T16599] RSP: 002b:00007fea55ce6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1094.397536][T16599] RAX: ffffffffffffffda RBX: 00007fea54fe6090 RCX: 00007fea54d8e15c [ 1094.397549][T16599] RDX: 000000000000000f RSI: 00007fea55ce60a0 RDI: 0000000000000004 [ 1094.397562][T16599] RBP: 00007fea55ce6090 R08: 0000000000000000 R09: 0000000000000000 [ 1094.397573][T16599] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 1094.397585][T16599] R13: 00007fea54fe6128 R14: 00007fea54fe6090 R15: 00007ffc777d3b58 [ 1094.397612][T16599] [ 1095.451445][ T7377] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1095.463082][ T7377] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1095.473606][ T7377] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.483783][ T7377] usb 5-1: config 0 descriptor?? [ 1095.496946][T16606] SELinux: policydb magic number 0xfd does not match expected magic number 0xf97cff8c [ 1095.516717][T16606] SELinux: failed to load policy [ 1095.680404][T15906] usb 5-1: USB disconnect, device number 78 [ 1095.913791][T16613] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2625'. [ 1096.211742][ T5800] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1096.667893][T16626] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2630'. [ 1096.794558][ T5800] usb 1-1: config 0 has an invalid interface number: 249 but max is 0 [ 1096.865788][ T5800] usb 1-1: config 0 has no interface number 0 [ 1096.956285][T16631] fuse: Bad value for 'rootmode' [ 1097.001641][ T7377] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 1097.020970][ T5800] usb 1-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 18 [ 1097.031078][T15906] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1097.050133][ T5800] usb 1-1: config 0 interface 249 altsetting 0 endpoint 0xB has invalid maxpacket 2112, setting to 64 [ 1097.063806][ T5800] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 1097.078668][ T5800] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.090471][ T5800] usb 1-1: config 0 descriptor?? [ 1097.141366][T16613] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1097.194331][ T7377] usb 7-1: config 252 has an invalid interface number: 136 but max is 0 [ 1097.344026][ T7377] usb 7-1: config 252 has no interface number 0 [ 1097.381611][T15906] usb 6-1: config 0 has an invalid interface number: 249 but max is 0 [ 1097.393037][ T5800] port100 1-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 1097.403188][T15906] usb 6-1: config 0 has no interface number 0 [ 1097.409309][T15906] usb 6-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 18 [ 1097.425575][T15906] usb 6-1: config 0 interface 249 altsetting 0 endpoint 0xB has invalid maxpacket 2112, setting to 64 [ 1097.738143][T16638] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1098.138719][T15906] usb 6-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 1098.148712][T15906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.158284][ T7377] usb 7-1: config 252 interface 136 has no altsetting 0 [ 1098.181514][T15906] usb 6-1: config 0 descriptor?? [ 1098.209181][T16626] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1098.210077][ T7377] usb 7-1: New USB device found, idVendor=152d, idProduct=0578, bcdDevice= e.6d [ 1098.227424][T15906] port100 6-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 1098.264611][ T48] usb 1-1: USB disconnect, device number 72 [ 1098.338479][ T7377] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.382310][ T7377] usb 7-1: Product: syz [ 1098.386517][ T7377] usb 7-1: Manufacturer: syz [ 1098.391086][ T7377] usb 7-1: SerialNumber: syz [ 1098.450628][ T7377] usb-storage 7-1:252.136: USB Mass Storage device detected [ 1098.543155][ T7377] usb-storage 7-1:252.136: Quirks match for vid 152d pid 0578: 1000000 [ 1098.776055][ T30] audit: type=1400 audit(1765356582.732:682): avc: denied { getopt } for pid=16628 comm="syz.6.2631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1098.885336][T16651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1098.914049][T16651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1098.934205][ T5916] usb 6-1: USB disconnect, device number 89 [ 1100.509401][ T5916] usb 7-1: USB disconnect, device number 15 [ 1104.032839][T16689] comedi comedi0: Minor 3 specified more than once! [ 1104.539042][T16705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1105.206973][T16706] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2647'. [ 1106.182855][T16719] netlink: 'syz.4.2650': attribute type 1 has an invalid length. [ 1106.192011][T15906] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1106.321669][ T48] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1106.389434][T15906] usb 3-1: config 0 has an invalid interface number: 249 but max is 0 [ 1106.442829][T15906] usb 3-1: config 0 has no interface number 0 [ 1106.468534][T15906] usb 3-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 18 [ 1106.550043][T15906] usb 3-1: config 0 interface 249 altsetting 0 endpoint 0xB has invalid maxpacket 2112, setting to 64 [ 1106.604431][T15906] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 1106.661542][T15906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.778366][T15906] usb 3-1: config 0 descriptor?? [ 1106.879635][T16708] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1106.967897][T15906] port100 3-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 1107.153788][T16733] netlink: 'syz.0.2654': attribute type 2 has an invalid length. [ 1107.206505][T16733] !: entered promiscuous mode [ 1107.217449][T16735] netlink: 'syz.0.2654': attribute type 2 has an invalid length. [ 1107.270932][T16735] !: left promiscuous mode [ 1107.301168][ T48] usb 7-1: device descriptor read/64, error -71 [ 1107.425801][ T5894] usb 3-1: USB disconnect, device number 64 [ 1107.626935][ T48] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1109.969525][T16763] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2662'. [ 1111.045620][T16776] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2663'. [ 1112.090936][ T5925] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1112.129438][T16785] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2666'. [ 1112.318903][ T5925] usb 5-1: config 0 has an invalid interface number: 249 but max is 0 [ 1112.355914][ T5925] usb 5-1: config 0 has no interface number 0 [ 1112.433854][T16790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1112.862532][ T5925] usb 5-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 18 [ 1112.876222][ T5925] usb 5-1: config 0 interface 249 altsetting 0 endpoint 0xB has invalid maxpacket 2112, setting to 64 [ 1112.881633][ T7377] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1112.917491][ T5925] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 1112.948000][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.991320][ T5925] usb 5-1: config 0 descriptor?? [ 1113.023325][T16772] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1113.045604][ T5925] port100 5-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 1113.095004][ T7377] usb 3-1: config 0 has an invalid interface number: 249 but max is 0 [ 1113.197289][ T7377] usb 3-1: config 0 has no interface number 0 [ 1113.204073][ T7377] usb 3-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 18 [ 1113.216099][ T7377] usb 3-1: config 0 interface 249 altsetting 0 endpoint 0xB has invalid maxpacket 2112, setting to 64 [ 1113.228487][ T7377] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 1113.237770][ T7377] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.047060][ T5925] usb 5-1: USB disconnect, device number 79 [ 1114.063877][ T7377] usb 3-1: config 0 descriptor?? [ 1114.109731][T16785] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1114.122986][ T7377] port100 3-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 1114.280344][ T30] audit: type=1400 audit(1765356598.232:683): avc: denied { bind } for pid=16803 comm="syz.0.2671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1114.808673][ T30] audit: type=1400 audit(1765356598.252:684): avc: denied { write } for pid=16803 comm="syz.0.2671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1114.890116][T16808] trusted_key: encrypted_key: master key parameter is missing [ 1114.946887][ T5800] usb 3-1: USB disconnect, device number 65 [ 1115.751735][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.764148][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.249782][ T30] audit: type=1400 audit(1765356600.052:685): avc: denied { read } for pid=16816 comm="syz.2.2675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1116.356674][T16821] netlink: 220 bytes leftover after parsing attributes in process `syz.6.2676'. [ 1116.926440][T16826] lo speed is unknown, defaulting to 1000 [ 1119.577637][T16856] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2685'. [ 1120.395175][T16862] FAULT_INJECTION: forcing a failure. [ 1120.395175][T16862] name failslab, interval 1, probability 0, space 0, times 0 [ 1120.407859][T16862] CPU: 0 UID: 0 PID: 16862 Comm: syz.4.2686 Not tainted syzkaller #0 PREEMPT(full) [ 1120.407882][T16862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1120.407890][T16862] Call Trace: [ 1120.407895][T16862] [ 1120.407900][T16862] dump_stack_lvl+0x16c/0x1f0 [ 1120.407916][T16862] should_fail_ex+0x512/0x640 [ 1120.407931][T16862] ? fs_reclaim_acquire+0xae/0x150 [ 1120.407948][T16862] should_failslab+0xc2/0x120 [ 1120.407963][T16862] __kmalloc_noprof+0xeb/0x910 [ 1120.407981][T16862] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1120.407998][T16862] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1120.408010][T16862] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1120.408024][T16862] ? tomoyo_profile+0x47/0x60 [ 1120.408040][T16862] tomoyo_path_number_perm+0x245/0x580 [ 1120.408057][T16862] ? tomoyo_path_number_perm+0x237/0x580 [ 1120.408075][T16862] ? __schedule+0x1094/0x6150 [ 1120.408097][T16862] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1120.408129][T16862] ? find_held_lock+0x2b/0x80 [ 1120.408147][T16862] ? hook_file_ioctl_common+0x144/0x410 [ 1120.408165][T16862] ? __fget_files+0x20e/0x3c0 [ 1120.408183][T16862] security_file_ioctl+0x9b/0x240 [ 1120.408197][T16862] __x64_sys_ioctl+0xb7/0x210 [ 1120.408212][T16862] do_syscall_64+0xcd/0xf80 [ 1120.408224][T16862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1120.408236][T16862] RIP: 0033:0x7fa44e98f749 [ 1120.408246][T16862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1120.408258][T16862] RSP: 002b:00007fa44f8bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1120.408269][T16862] RAX: ffffffffffffffda RBX: 00007fa44ebe6090 RCX: 00007fa44e98f749 [ 1120.408276][T16862] RDX: 0000000000000000 RSI: 00000000c02063a0 RDI: 0000000000000004 [ 1120.408283][T16862] RBP: 00007fa44f8bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1120.408290][T16862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1120.408296][T16862] R13: 00007fa44ebe6128 R14: 00007fa44ebe6090 R15: 00007ffcd84c5748 [ 1120.408311][T16862] [ 1120.408329][T16862] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1121.058936][ T30] audit: type=1400 audit(1765356604.602:686): avc: denied { ioctl } for pid=16860 comm="syz.4.2686" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1122.019757][T16867] SELinux: failed to load policy [ 1122.404401][T16886] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2691'. [ 1122.895027][T16887] input: syz1 as /devices/virtual/input/input51 [ 1123.677975][T16894] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1123.729032][ T30] audit: type=1400 audit(1765356607.682:687): avc: denied { bind } for pid=16892 comm="syz.5.2695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1123.851676][ T5894] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1123.904760][ T30] audit: type=1400 audit(1765356607.862:688): avc: denied { connect } for pid=16892 comm="syz.5.2695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1129.281110][T16941] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2704'. [ 1129.842590][T16943] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2705'. [ 1130.498351][T16952] lo speed is unknown, defaulting to 1000 [ 1130.521434][T16955] FAULT_INJECTION: forcing a failure. [ 1130.521434][T16955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1130.559060][T16954] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2707'. [ 1130.589821][T16955] CPU: 1 UID: 0 PID: 16955 Comm: syz.4.2708 Not tainted syzkaller #0 PREEMPT(full) [ 1130.589848][T16955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1130.589859][T16955] Call Trace: [ 1130.589866][T16955] [ 1130.589873][T16955] dump_stack_lvl+0x16c/0x1f0 [ 1130.589893][T16955] should_fail_ex+0x512/0x640 [ 1130.589916][T16955] _copy_from_user+0x2e/0xd0 [ 1130.589938][T16955] copy_msghdr_from_user+0x98/0x160 [ 1130.589963][T16955] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1130.590010][T16955] ___sys_sendmsg+0xfe/0x1d0 [ 1130.590036][T16955] ? __pfx____sys_sendmsg+0x10/0x10 [ 1130.590097][T16955] __sys_sendmsg+0x16d/0x220 [ 1130.590122][T16955] ? __pfx___sys_sendmsg+0x10/0x10 [ 1130.590164][T16955] do_syscall_64+0xcd/0xf80 [ 1130.590183][T16955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.590201][T16955] RIP: 0033:0x7fa44e98f749 [ 1130.590214][T16955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1130.590230][T16955] RSP: 002b:00007fa44f8bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1130.590247][T16955] RAX: ffffffffffffffda RBX: 00007fa44ebe6090 RCX: 00007fa44e98f749 [ 1130.590258][T16955] RDX: 0000000004000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 1130.590269][T16955] RBP: 00007fa44f8bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1130.590279][T16955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1130.590289][T16955] R13: 00007fa44ebe6128 R14: 00007fa44ebe6090 R15: 00007ffcd84c5748 [ 1130.590313][T16955] [ 1131.081636][ T5925] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1131.344264][ T5925] usb 6-1: config 0 has an invalid interface number: 249 but max is 0 [ 1131.371888][ T5992] usb 5-1: new low-speed USB device number 80 using dummy_hcd [ 1131.491786][T16959] lo speed is unknown, defaulting to 1000 [ 1131.537850][ T5992] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1131.572413][ T5992] usb 5-1: config 0 has no interface number 0 [ 1131.596377][ T5992] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1131.643071][ T5992] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1131.677982][ T5992] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1131.726221][ T5992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.798298][ T5992] usb 5-1: config 0 descriptor?? [ 1131.863054][ T5992] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1131.999511][ T5925] usb 6-1: config 0 has no interface number 0 [ 1132.038081][T16964] iowarrior 5-1:0.1: Error -90 while submitting URB [ 1132.046150][ T5925] usb 6-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 18 [ 1132.059748][ T5925] usb 6-1: config 0 interface 249 altsetting 0 endpoint 0xB has invalid maxpacket 2112, setting to 64 [ 1132.089268][ T5992] usb 5-1: USB disconnect, device number 80 [ 1132.091670][ T5925] usb 6-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 1132.135596][ T5925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.173591][ T5925] usb 6-1: config 0 descriptor?? [ 1132.205962][T16954] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1132.218445][ T5925] port100 6-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 1133.627235][ T5894] usb 6-1: USB disconnect, device number 90 [ 1134.218805][T16973] SELinux: failed to load policy [ 1134.408148][T16988] trusted_key: encrypted_key: master key parameter is missing [ 1136.088502][T16997] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2719'. [ 1136.141474][T17000] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2721'. [ 1136.411800][ T5925] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1136.491919][ T5800] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1136.567641][ T5925] usb 7-1: config 0 has an invalid interface number: 249 but max is 0 [ 1136.614319][ T5925] usb 7-1: config 0 has no interface number 0 [ 1136.620910][ T5925] usb 7-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 18 [ 1136.673074][ T5925] usb 7-1: config 0 interface 249 altsetting 0 endpoint 0xB has invalid maxpacket 2112, setting to 64 [ 1136.736323][ T5925] usb 7-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 1136.788488][ T5925] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.817925][ T5800] usb 1-1: config 0 has an invalid interface number: 249 but max is 0 [ 1136.836731][ T5800] usb 1-1: config 0 has no interface number 0 [ 1136.861610][ T5800] usb 1-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 18 [ 1136.862287][ T5925] usb 7-1: config 0 descriptor?? [ 1136.924113][ T5800] usb 1-1: config 0 interface 249 altsetting 0 endpoint 0xB has invalid maxpacket 2112, setting to 64 [ 1136.968429][T16997] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1136.981607][ T5800] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 1137.001265][ T5800] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.025000][ T5800] usb 1-1: config 0 descriptor?? [ 1137.025114][ T5925] port100 7-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 1137.100199][T17000] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1137.122250][ T5800] port100 1-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 1137.657286][ T5925] usb 7-1: USB disconnect, device number 18 [ 1137.704897][ T5800] usb 1-1: USB disconnect, device number 74 [ 1139.116060][T17022] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2724'. [ 1139.125266][T17022] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2724'. [ 1139.435388][T17027] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2725'. [ 1139.958191][ T30] audit: type=1400 audit(1765356623.912:689): avc: denied { lock } for pid=17033 comm="syz.5.2729" path="socket:[62777]" dev="sockfs" ino=62777 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1145.270548][T17083] FAULT_INJECTION: forcing a failure. [ 1145.270548][T17083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1145.283815][T17083] CPU: 0 UID: 0 PID: 17083 Comm: syz.5.2737 Not tainted syzkaller #0 PREEMPT(full) [ 1145.283841][T17083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1145.283852][T17083] Call Trace: [ 1145.283859][T17083] [ 1145.283867][T17083] dump_stack_lvl+0x16c/0x1f0 [ 1145.283890][T17083] should_fail_ex+0x512/0x640 [ 1145.283918][T17083] _copy_from_user+0x2e/0xd0 [ 1145.283941][T17083] __sys_bpf+0x248/0x4980 [ 1145.283971][T17083] ? __pfx___sys_bpf+0x10/0x10 [ 1145.283996][T17083] ? find_held_lock+0x2b/0x80 [ 1145.284029][T17083] ? find_held_lock+0x2b/0x80 [ 1145.284063][T17083] ? __mutex_unlock_slowpath+0x161/0x790 [ 1145.284099][T17083] ? fput+0x70/0xf0 [ 1145.284126][T17083] ? ksys_write+0x1ac/0x250 [ 1145.284147][T17083] ? __pfx_ksys_write+0x10/0x10 [ 1145.284175][T17083] __x64_sys_bpf+0x78/0xc0 [ 1145.284200][T17083] ? lockdep_hardirqs_on+0x7c/0x110 [ 1145.284218][T17083] do_syscall_64+0xcd/0xf80 [ 1145.284239][T17083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.284257][T17083] RIP: 0033:0x7f01e1d8f749 [ 1145.284274][T17083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1145.284292][T17083] RSP: 002b:00007f01e2bf9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1145.284310][T17083] RAX: ffffffffffffffda RBX: 00007f01e1fe5fa0 RCX: 00007f01e1d8f749 [ 1145.284323][T17083] RDX: 00000000000000a8 RSI: 0000200000000480 RDI: 0000000000000005 [ 1145.284335][T17083] RBP: 00007f01e2bf9090 R08: 0000000000000000 R09: 0000000000000000 [ 1145.284346][T17083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1145.284356][T17083] R13: 00007f01e1fe6038 R14: 00007f01e1fe5fa0 R15: 00007ffd705a3e58 [ 1145.284382][T17083] [ 1145.503535][T17085] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2738'. [ 1145.951636][ T7377] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1146.811594][ T7377] usb 5-1: Using ep0 maxpacket: 32 [ 1146.859168][ T7377] usb 5-1: config 1 has an invalid descriptor of length 105, skipping remainder of the config [ 1146.892255][ T7377] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1147.247347][ T7377] usb 5-1: config 1 has no interface number 1 [ 1147.314539][T17108] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2742'. [ 1147.327356][ T7377] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 46, changing to 7 [ 1147.556649][ T7377] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1149.062733][ T7377] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.097411][ T7377] usb 5-1: Product: syz [ 1149.116482][ T7377] usb 5-1: Manufacturer: syz [ 1149.130199][ T7377] usb 5-1: SerialNumber: syz [ 1149.341712][ T5916] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1149.451321][ T7377] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 1149.479649][ T7377] usb 5-1: 2:1 : format type 6 is not supported yet [ 1149.490074][ T30] audit: type=1400 audit(1765356633.442:690): avc: denied { listen } for pid=17118 comm="syz.5.2743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1149.543759][ T5916] usb 1-1: config 0 has an invalid interface number: 249 but max is 0 [ 1149.543961][ T7377] usb 5-1: USB disconnect, device number 81 [ 1149.571619][ T5916] usb 1-1: config 0 has no interface number 0 [ 1149.577736][ T5916] usb 1-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 18 [ 1149.588490][ T30] audit: type=1400 audit(1765356633.542:691): avc: denied { create } for pid=17118 comm="syz.5.2743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1149.630918][ T30] audit: type=1400 audit(1765356633.562:692): avc: denied { ioctl } for pid=17118 comm="syz.5.2743" path="socket:[63720]" dev="sockfs" ino=63720 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1149.667158][T17116] udevd[17116]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1149.683009][ T5916] usb 1-1: config 0 interface 249 altsetting 0 endpoint 0xB has invalid maxpacket 2112, setting to 64 [ 1149.683054][ T5916] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 1149.683075][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1149.724982][ T30] audit: type=1400 audit(1765356633.582:693): avc: denied { connect } for pid=17118 comm="syz.5.2743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1149.725498][ T5916] usb 1-1: config 0 descriptor?? [ 1149.755634][ T30] audit: type=1400 audit(1765356633.582:694): avc: denied { remount } for pid=17118 comm="syz.5.2743" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1149.836446][T17106] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1149.846823][ T5916] port100 1-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 1150.256137][ T5916] usb 1-1: USB disconnect, device number 75 [ 1151.029756][T17143] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2748'. [ 1151.038865][T17143] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2748'. [ 1151.600757][T17152] netlink: 220 bytes leftover after parsing attributes in process `syz.6.2750'. [ 1155.019777][T17160] kvm: pic: non byte write [ 1155.027511][T17153] SELinux: failed to load policy [ 1157.122106][ T6288] usb 6-1: new full-speed USB device number 91 using dummy_hcd [ 1159.739725][ T6288] usb 6-1: device not accepting address 91, error -71 [ 1160.242764][T17213] input: syz1 as /devices/virtual/input/input53 [ 1160.519707][T17220] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2766'. [ 1160.804265][T17225] lo speed is unknown, defaulting to 1000 [ 1162.948475][T17237] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2770'. [ 1163.221733][ T6288] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1164.088284][ T6288] usb 7-1: config 0 has an invalid interface number: 249 but max is 0 [ 1164.169983][ T6288] usb 7-1: config 0 has no interface number 0 [ 1164.183526][ T6288] usb 7-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 18 [ 1164.195050][ T6288] usb 7-1: config 0 interface 249 altsetting 0 endpoint 0xB has invalid maxpacket 2112, setting to 64 [ 1164.206383][ T6288] usb 7-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 1164.215543][ T6288] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.242801][ T6288] usb 7-1: config 0 descriptor?? [ 1164.259465][T17237] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1164.278949][ T6288] port100 7-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 1165.167836][ T6288] usb 7-1: USB disconnect, device number 19 [ 1167.022636][T17270] SELinux: failed to load policy [ 1168.264854][T17276] lo speed is unknown, defaulting to 1000 [ 1168.952833][T17289] netlink: 'syz.6.2779': attribute type 8 has an invalid length. [ 1169.352352][T17290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1171.431885][ T5992] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1171.622789][ T5992] usb 5-1: config 0 has an invalid interface number: 249 but max is 0 [ 1171.662428][ T5992] usb 5-1: config 0 has no interface number 0 [ 1171.679085][ T5992] usb 5-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 18 [ 1171.701653][ T5992] usb 5-1: config 0 interface 249 altsetting 0 endpoint 0xB has invalid maxpacket 2112, setting to 64 [ 1171.712825][ T5992] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 1171.722350][ T5992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.733301][ T5992] usb 5-1: config 0 descriptor?? [ 1172.750092][T17294] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1172.778038][ T5992] port100 5-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 1173.013312][ T6288] usb 5-1: USB disconnect, device number 82 [ 1173.581878][ T52] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1173.801666][ T6288] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1174.194226][ T6288] usb 5-1: Using ep0 maxpacket: 16 [ 1174.432187][T17331] SELinux: failed to load policy [ 1174.670629][ T6288] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 1174.678882][ T6288] usb 5-1: config 0 has no interface number 0 [ 1174.686885][ T6288] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1174.698881][ T6288] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1174.711390][ T6288] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.719827][ T6288] usb 5-1: Product: syz [ 1174.724058][ T6288] usb 5-1: Manufacturer: syz [ 1174.730304][ T6288] usb 5-1: SerialNumber: syz [ 1174.737270][ T6288] usb 5-1: config 0 descriptor?? [ 1174.889047][T17340] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2794'. [ 1175.105621][T17341] trusted_key: encrypted_key: master key parameter 'us' is invalid [ 1175.123642][T17338] netlink: 'syz.6.2795': attribute type 72 has an invalid length. [ 1175.131703][ T6288] usbtouchscreen 5-1:0.214: Failed to read FW rev: -71 [ 1175.161683][ T6288] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1175.218504][ T6288] usb 5-1: USB disconnect, device number 83 [ 1175.361623][ T5992] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 1176.106633][ T5992] usb 6-1: config 0 has an invalid interface number: 249 but max is 0 [ 1176.115924][ T5992] usb 6-1: config 0 has no interface number 0 [ 1176.122415][ T5992] usb 6-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 18 [ 1176.142225][ T5992] usb 6-1: config 0 interface 249 altsetting 0 endpoint 0xB has invalid maxpacket 2112, setting to 64 [ 1176.158888][ T5992] usb 6-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 1176.189173][ T5992] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.199357][ T5992] usb 6-1: config 0 descriptor?? [ 1176.304716][T17340] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1176.474342][ T5992] port100 6-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 1176.795636][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.804396][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1176.950275][ T5992] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1177.011336][ T5800] usb 6-1: USB disconnect, device number 93 [ 1177.123323][ T5992] usb 7-1: config 0 has an invalid descriptor of length 143, skipping remainder of the config [ 1177.270245][ T5992] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1177.279635][ T5992] usb 7-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 1177.300483][ T5992] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.301643][ T5894] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1177.310908][ T5992] usb 7-1: config 0 descriptor?? [ 1177.588179][T17369] lo speed is unknown, defaulting to 1000 [ 1177.973284][ T5894] usb 1-1: config 0 has an invalid descriptor of length 143, skipping remainder of the config [ 1178.246316][ T5894] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1178.552818][ T5894] usb 1-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 1178.571571][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.588191][ T5894] usb 1-1: config 0 descriptor?? [ 1178.718453][ T5916] usb 7-1: USB disconnect, device number 20 [ 1178.770876][T17378] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2802'. [ 1178.848591][T17379] trusted_key: encrypted_key: master key parameter 'defaulX' is invalid [ 1179.177757][ T5916] usb 1-1: USB disconnect, device number 76 [ 1179.305258][ T5800] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1179.534513][T17385] lo speed is unknown, defaulting to 1000 [ 1180.106832][ T5800] usb 5-1: config 0 has an invalid interface number: 249 but max is 0 [ 1180.171612][ T5800] usb 5-1: config 0 has no interface number 0 [ 1180.217263][ T5800] usb 5-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 18 [ 1180.243819][ T5800] usb 5-1: config 0 interface 249 altsetting 0 endpoint 0xB has invalid maxpacket 2112, setting to 64 [ 1180.266241][T17390] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2805'. [ 1180.280858][T17390] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2805'. [ 1180.712025][ T5800] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 1180.782326][ T5800] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.890795][ T5800] usb 5-1: config 0 descriptor?? [ 1182.857645][T17409] netlink: 'syz.6.2809': attribute type 12 has an invalid length. [ 1183.857517][T17411] SELinux: failed to load policy [ 1184.518088][ T5800] usb 5-1: can't set config #0, error -71 [ 1184.544228][ T5800] usb 5-1: USB disconnect, device number 84 [ 1184.901745][ T5916] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1185.026711][T17432] comedi comedi0: Minor 3 specified more than once! [ 1185.086543][ T5916] usb 7-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1185.112187][ T5916] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1185.152047][ T5916] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1185.273112][ T5916] usb 7-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 1185.308596][ T5916] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1185.349587][ T5916] usb 7-1: config 0 descriptor?? [ 1185.444473][T17438] comedi comedi0: Minor 3 specified more than once! [ 1185.502317][T17440] trusted_key: encrypted_key: master key parameter 'us' is invalid [ 1185.884864][ T5800] usb 7-1: USB disconnect, device number 21 [ 1186.631630][ T5916] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1186.708810][T17309] Bluetooth: hci0: command 0x0c1a tx timeout [ 1186.714895][ T52] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1187.284110][ T5916] usb 5-1: Using ep0 maxpacket: 16 [ 1187.295549][ T5916] usb 5-1: too many configurations: 112, using maximum allowed: 8 [ 1187.434401][ T5916] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1187.451630][ T5916] usb 5-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 1187.476128][ T5916] usb 5-1: Product: syz [ 1187.501036][ T5916] usb 5-1: Manufacturer: syz [ 1187.543975][ T5916] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1187.564106][ T5916] r8152-cfgselector 5-1: config 0 descriptor?? [ 1187.610687][ T5916] cdc_acm 5-1:0.0: Zero length descriptor references [ 1187.641181][ T5916] cdc_acm 5-1:0.0: probe with driver cdc_acm failed with error -22 [ 1189.340915][T17456] SELinux: failed to load policy [ 1190.367925][T17468] netlink: 'syz.4.2819': attribute type 12 has an invalid length. [ 1190.615032][ T5800] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1190.869941][ T5800] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1190.953705][ T5800] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1191.120694][ T5800] usb 1-1: config 0 has no interface number 0 [ 1191.164405][ T5800] usb 1-1: too many endpoints for config 0 interface 1 altsetting 143: 84, using maximum allowed: 30 [ 1191.612123][ T5800] usb 1-1: config 0 interface 1 altsetting 143 has 0 endpoint descriptors, different from the interface descriptor's value: 84 [ 1191.626023][ T5800] usb 1-1: config 0 interface 1 has no altsetting 0 [ 1191.633312][ T5800] usb 1-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 1191.642465][ T5800] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.652664][ T5800] usb 1-1: config 0 descriptor?? [ 1191.669824][ T5800] smsusb:smsusb_probe: board id=8, interface number 1 [ 1191.945145][ T5800] usb 1-1: USB disconnect, device number 77 [ 1192.333740][ T5800] r8152-cfgselector 5-1: USB disconnect, device number 85 [ 1192.361622][ T6288] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1192.581816][ T6288] usb 7-1: Using ep0 maxpacket: 16 [ 1192.644663][ T6288] usb 7-1: config 0 has an invalid interface number: 214 but max is 0 [ 1192.680224][ T6288] usb 7-1: config 0 has no interface number 0 [ 1192.703001][ T6288] usb 7-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1192.744101][ T6288] usb 7-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1192.758772][ T6288] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.769732][ T6288] usb 7-1: Product: syz [ 1192.788295][ T6288] usb 7-1: Manufacturer: syz [ 1192.800259][ T6288] usb 7-1: SerialNumber: syz [ 1192.816778][ T6288] usb 7-1: config 0 descriptor?? [ 1193.041340][ T6288] usbtouchscreen 7-1:0.214: Failed to read FW rev: -71 [ 1193.064060][ T6288] usbtouchscreen 7-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1193.112885][ T6288] usb 7-1: USB disconnect, device number 22 [ 1194.061622][T17309] Bluetooth: hci0: command 0x0c1a tx timeout [ 1194.068851][ T52] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1194.762262][ T6288] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1194.924702][ T6288] usb 1-1: config 0 has an invalid interface number: 249 but max is 0 [ 1195.020399][ T6288] usb 1-1: config 0 has no interface number 0 [ 1195.041077][ T6288] usb 1-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 18 [ 1195.054971][ T6288] usb 1-1: config 0 interface 249 altsetting 0 endpoint 0xB has invalid maxpacket 2112, setting to 64 [ 1195.074400][ T6288] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 1195.084326][ T5894] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 1195.101567][ T6288] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.302729][ T6288] usb 1-1: config 0 descriptor?? [ 1195.325358][ T5894] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1195.340179][T17513] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1195.359422][ T6288] port100 1-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 1195.418908][ T5894] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1195.449569][ T5894] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1195.470444][ T5894] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1195.479672][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.496017][ T5894] usb 5-1: Product: syz [ 1195.501070][ T5894] usb 5-1: Manufacturer: syz [ 1195.531599][ T5894] usb 5-1: SerialNumber: syz [ 1195.544287][ T5894] usb 5-1: config 0 descriptor?? [ 1195.561711][ T5916] usb 1-1: USB disconnect, device number 78 [ 1195.777177][ T5894] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 1195.790548][ T5894] imon 5-1:0.0: unable to initialize intf0, err -90 [ 1195.797243][ T5894] imon:imon_probe: failed to initialize context! [ 1195.803727][ T5894] imon 5-1:0.0: unable to register, err -19 [ 1195.823646][ T5894] usb 5-1: USB disconnect, device number 86 [ 1197.687187][T17559] trusted_key: encrypted_key: master key parameter 'us' is invalid [ 1200.307955][T17566] SELinux: failed to load policy [ 1204.972956][T17614] SELinux: policydb magic number 0x7 does not match expected magic number 0xf97cff8c [ 1204.983161][T17614] SELinux: failed to load policy [ 1206.375782][T17618] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2856'. [ 1206.385245][T17618] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2856'. [ 1206.703902][T17630] trusted_key: encrypted_key: master key parameter is missing [ 1207.862086][T17647] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2865'. [ 1208.572766][T17656] lo speed is unknown, defaulting to 1000 [ 1208.576183][ T5916] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1208.629533][ T30] audit: type=1400 audit(1765356692.582:695): avc: denied { lock } for pid=17648 comm="syz.2.2870" path="socket:[66506]" dev="sockfs" ino=66506 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1208.872759][ T5916] usb 5-1: config 0 has an invalid interface number: 249 but max is 0 [ 1208.930655][ T5916] usb 5-1: config 0 has no interface number 0 [ 1209.047863][ T5916] usb 5-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 18 [ 1209.403622][T17665] lo speed is unknown, defaulting to 1000 [ 1209.620902][ T5916] usb 5-1: config 0 interface 249 altsetting 0 endpoint 0xB has invalid maxpacket 2112, setting to 64 [ 1209.732521][ T5916] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 1209.830435][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.899021][ T5916] usb 5-1: config 0 descriptor?? [ 1210.077416][T17647] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1210.085638][ T5916] port100 5-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 1210.199598][T17671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1210.645782][ T5916] usb 5-1: USB disconnect, device number 87 [ 1211.800556][T17680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1212.362132][T17688] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2878'. [ 1212.449112][T17688] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2878'. [ 1213.384585][T17682] SELinux: failed to load policy [ 1214.176764][ T6288] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1214.214539][ T5916] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 1214.362170][ T6288] usb 7-1: Using ep0 maxpacket: 16 [ 1214.372528][ T6288] usb 7-1: config 0 has an invalid interface number: 214 but max is 0 [ 1214.384487][ T6288] usb 7-1: config 0 has no interface number 0 [ 1214.391166][ T6288] usb 7-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1214.429355][ T6288] usb 7-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1214.447780][ T6288] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.465309][ T5916] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1214.471611][ T6288] usb 7-1: Product: syz [ 1214.475216][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.481600][ T6288] usb 7-1: Manufacturer: syz [ 1214.502261][ T6288] usb 7-1: SerialNumber: syz [ 1214.512898][ T5916] usb 3-1: Product: syz [ 1214.518972][ T6288] usb 7-1: config 0 descriptor?? [ 1214.521948][ T5916] usb 3-1: Manufacturer: syz [ 1214.544776][ T5916] usb 3-1: SerialNumber: syz [ 1214.569335][ T5916] usb 3-1: config 0 descriptor?? [ 1214.791496][ T5916] airspy 3-1:0.0: usb_control_msg() failed -71 request 09 [ 1214.822298][ T5916] airspy 3-1:0.0: Could not detect board [ 1214.828019][ T5916] airspy 3-1:0.0: probe with driver airspy failed with error -71 [ 1214.857873][ T5916] usb 3-1: USB disconnect, device number 66 [ 1214.932363][ T5800] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1214.972767][ T6288] usbtouchscreen 7-1:0.214: Failed to read FW rev: -71 [ 1214.979983][ T6288] usbtouchscreen 7-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1214.992896][ T6288] usb 7-1: USB disconnect, device number 23 [ 1215.128318][ T5800] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1215.137129][ T5800] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1215.147475][ T5800] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1215.159652][ T5800] usb 5-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 1215.168970][ T5800] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1215.186086][ T5800] usb 5-1: config 0 descriptor?? [ 1215.553443][ T5800] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1215.678338][ T10] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 1215.754971][ T5800] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1215.801130][ T5800] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.814032][ T5800] usb 1-1: Product: syz [ 1215.854894][ T10] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1215.873995][T17726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1215.959591][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.972803][ T5800] usb 1-1: Manufacturer: syz [ 1215.979495][ T10] usb 3-1: Product: syz [ 1215.984978][ T5800] usb 1-1: SerialNumber: syz [ 1215.991620][ T10] usb 3-1: Manufacturer: syz [ 1216.007473][ T5800] usb 1-1: config 0 descriptor?? [ 1216.012515][ T10] usb 3-1: SerialNumber: syz [ 1216.022806][ T10] usb 3-1: config 0 descriptor?? [ 1216.030983][ T6288] usb 5-1: USB disconnect, device number 88 [ 1216.223282][T17719] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2888'. [ 1216.233915][ T5800] usb-storage 1-1:0.0: USB Mass Storage device detected [ 1216.246530][ T10] airspy 3-1:0.0: usb_control_msg() failed -71 request 09 [ 1216.255407][ T10] airspy 3-1:0.0: Could not detect board [ 1216.261089][ T10] airspy 3-1:0.0: probe with driver airspy failed with error -71 [ 1216.270191][ T10] usb 3-1: USB disconnect, device number 67 [ 1216.300637][ T5800] usb 1-1: USB disconnect, device number 79 [ 1218.995869][T17740] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2893'. [ 1219.851668][ T5894] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1220.261698][ T5894] usb 5-1: Using ep0 maxpacket: 16 [ 1220.275889][ T5894] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 1220.285484][ T5894] usb 5-1: config 0 has no interface number 0 [ 1220.306590][ T5894] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1220.333454][ T5894] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1220.345334][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.365550][ T5894] usb 5-1: Product: syz [ 1220.376092][ T5894] usb 5-1: Manufacturer: syz [ 1220.386586][ T5894] usb 5-1: SerialNumber: syz [ 1220.386797][ T10] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1220.481837][ T5894] usb 5-1: config 0 descriptor?? [ 1220.531863][ T5992] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1220.621743][T17761] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2899'. [ 1220.785417][ T10] usb 1-1: config 0 has an invalid interface number: 249 but max is 0 [ 1220.801971][ T10] usb 1-1: config 0 has no interface number 0 [ 1220.813842][ T10] usb 1-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 18 [ 1220.841924][ T10] usb 1-1: config 0 interface 249 altsetting 0 endpoint 0xB has invalid maxpacket 2112, setting to 64 [ 1220.846217][ T5894] usbtouchscreen 5-1:0.214: Failed to read FW rev: -71 [ 1220.860408][ T10] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 1220.863713][ T5894] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1220.881603][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.894118][ T5894] usb 5-1: USB disconnect, device number 89 [ 1220.904802][ T10] usb 1-1: config 0 descriptor?? [ 1220.914647][T17737] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1220.922612][ T10] port100 1-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 1220.952942][ T5992] usb 6-1: config 0 has an invalid interface number: 249 but max is 0 [ 1220.961132][ T5992] usb 6-1: config 0 has no interface number 0 [ 1220.972009][ T5992] usb 6-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 18 [ 1220.988801][ T5992] usb 6-1: config 0 interface 249 altsetting 0 endpoint 0xB has invalid maxpacket 2112, setting to 64 [ 1221.004173][ T5992] usb 6-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 1221.014582][ T5992] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.025152][ T5992] usb 6-1: config 0 descriptor?? [ 1221.030510][T17755] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1221.037696][ T5800] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1221.046376][ T5992] port100 6-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 1221.199689][ T5992] usb 1-1: USB disconnect, device number 80 [ 1221.209787][ T5800] usb 7-1: config 0 has an invalid interface number: 249 but max is 0 [ 1221.220569][ T5800] usb 7-1: config 0 has no interface number 0 [ 1221.227037][ T5800] usb 7-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 18 [ 1221.237475][ T5800] usb 7-1: config 0 interface 249 altsetting 0 endpoint 0xB has invalid maxpacket 2112, setting to 64 [ 1221.262029][ T10] usb 6-1: USB disconnect, device number 94 [ 1221.273931][ T5800] usb 7-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 1221.288175][ T5800] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.305379][ T5800] usb 7-1: config 0 descriptor?? [ 1221.310970][T17761] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 1221.323332][ T5800] port100 7-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 1221.694800][ T5992] usb 1-1: new full-speed USB device number 81 using dummy_hcd [ 1221.754366][T17774] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2902'. [ 1222.015789][ T6288] usb 7-1: USB disconnect, device number 24 [ 1222.219167][ T5992] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1222.229203][ T5992] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.237475][ T5992] usb 1-1: Product: syz [ 1222.244432][ T5992] usb 1-1: Manufacturer: syz [ 1222.249102][ T5992] usb 1-1: SerialNumber: syz [ 1222.256041][ T5992] usb 1-1: config 0 descriptor?? [ 1222.963217][ T5894] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1223.169649][ T5992] airspy 1-1:0.0: usb_control_msg() failed -71 request 09 [ 1223.179987][ T5992] airspy 1-1:0.0: Could not detect board [ 1223.191664][ T5992] airspy 1-1:0.0: probe with driver airspy failed with error -71 [ 1223.207453][ T5992] usb 1-1: USB disconnect, device number 81 [ 1223.303412][ T5894] usb 5-1: config 0 has an invalid interface number: 249 but max is 0 [ 1223.321576][ T5894] usb 5-1: config 0 has no interface number 0 [ 1223.327695][ T5894] usb 5-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 18 [ 1223.351970][ T5894] usb 5-1: config 0 interface 249 altsetting 0 endpoint 0xB has invalid maxpacket 2112, setting to 64 [ 1223.385690][ T5894] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 1223.402375][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.644102][ T5894] usb 5-1: config 0 descriptor?? [ 1223.653532][T17775] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1223.672550][ T5894] port100 5-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 1223.948837][T17797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1224.872132][ T5992] usb 5-1: USB disconnect, device number 90 [ 1329.921495][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1329.928454][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5811/1:b..l [ 1329.936796][ C0] rcu: (detected by 0, t=10502 jiffies, g=80581, q=362 ncpus=2) [ 1329.944494][ C0] task:syz-executor state:R running task stack:23960 pid:5811 tgid:5811 ppid:5808 task_flags:0x400140 flags:0x00080000 [ 1329.958606][ C0] Call Trace: [ 1329.961880][ C0] [ 1329.964803][ C0] ? __schedule+0x10b9/0x6150 [ 1329.969481][ C0] __schedule+0x1139/0x6150 [ 1329.974019][ C0] ? __pfx___schedule+0x10/0x10 [ 1329.978884][ C0] ? mark_held_locks+0x49/0x80 [ 1329.983643][ C0] preempt_schedule_irq+0x51/0x90 [ 1329.988664][ C0] irqentry_exit+0x1d8/0x8c0 [ 1329.993246][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1329.999215][ C0] RIP: 0010:lock_acquire+0x62/0x330 [ 1330.004403][ C0] Code: 36 18 12 83 f8 07 0f 87 a2 02 00 00 89 c0 48 0f a3 05 82 7f ee 0e 0f 82 74 02 00 00 8b 35 1a b0 ee 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 99 36 18 12 0f 85 ad 02 00 00 48 83 c4 [ 1330.024003][ C0] RSP: 0018:ffffc90002f77b58 EFLAGS: 00000206 [ 1330.030054][ C0] RAX: 0000000000000046 RBX: ffffffff8e3c9620 RCX: 000000009cc6a4b5 [ 1330.038009][ C0] RDX: 0000000000000000 RSI: ffffffff8daa55bb RDI: ffffffff8bf2a580 [ 1330.045970][ C0] RBP: 0000000000000002 R08: 00000000f8bb13e4 R09: 000000004f8bb13e [ 1330.053928][ C0] R10: 0000000000000002 R11: ffff88802d3a2ff0 R12: 0000000000000000 [ 1330.061879][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1330.069848][ C0] ? refill_obj_stock+0x388/0x6d0 [ 1330.074871][ C0] __memcg_slab_free_hook+0x2e5/0x590 [ 1330.080231][ C0] ? __memcg_slab_free_hook+0x2d1/0x590 [ 1330.085768][ C0] kmem_cache_free+0x52d/0x770 [ 1330.090520][ C0] ? __sk_destruct+0x64c/0xbc0 [ 1330.095274][ C0] ? __sk_destruct+0x64c/0xbc0 [ 1330.100021][ C0] __sk_destruct+0x64c/0xbc0 [ 1330.104602][ C0] sk_destruct+0xc2/0xf0 [ 1330.108835][ C0] __sk_free+0xf4/0x3e0 [ 1330.112979][ C0] sk_free+0x6a/0x90 [ 1330.116869][ C0] tcp_close+0xd3/0x120 [ 1330.121017][ C0] inet_release+0xed/0x200 [ 1330.125510][ C0] __sock_release+0xb3/0x270 [ 1330.130090][ C0] ? __pfx_sock_close+0x10/0x10 [ 1330.134934][ C0] sock_close+0x1c/0x30 [ 1330.139081][ C0] __fput+0x402/0xb70 [ 1330.143061][ C0] fput_close_sync+0x118/0x260 [ 1330.147810][ C0] ? __pfx_fput_close_sync+0x10/0x10 [ 1330.153077][ C0] ? dnotify_flush+0x79/0x4c0 [ 1330.157745][ C0] __x64_sys_close+0x8b/0x120 [ 1330.162405][ C0] do_syscall_64+0xcd/0xf80 [ 1330.166895][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1330.172774][ C0] RIP: 0033:0x7fa44e98e3aa [ 1330.177174][ C0] RSP: 002b:00007ffcd84c5ab0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1330.185568][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fa44e98e3aa [ 1330.193521][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1330.201559][ C0] RBP: 00007ffcd84c5b0c R08: 00007ffcd84c53fc R09: 0079746972756365 [ 1330.209511][ C0] R10: 00007ffcd84c5460 R11: 0000000000000293 R12: 0000000000000233 [ 1330.217462][ C0] R13: 0000000000000025 R14: 000000000012a53c R15: 00007ffcd84c5b60 [ 1330.225430][ C0] [ 1330.228437][ C0] rcu: rcu_preempt kthread starved for 10481 jiffies! g80581 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1330.239610][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1330.249557][ C0] rcu: RCU grace-period kthread stack dump: [ 1330.255422][ C0] task:rcu_preempt state:R running task stack:28120 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1330.268892][ C0] Call Trace: [ 1330.272153][ C0] [ 1330.275070][ C0] ? __schedule+0x10b9/0x6150 [ 1330.279741][ C0] __schedule+0x1139/0x6150 [ 1330.284249][ C0] ? __pfx___schedule+0x10/0x10 [ 1330.289087][ C0] ? find_held_lock+0x2b/0x80 [ 1330.293754][ C0] ? schedule+0x2d7/0x3a0 [ 1330.298075][ C0] schedule+0xe7/0x3a0 [ 1330.302134][ C0] schedule_timeout+0x123/0x290 [ 1330.306975][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1330.312345][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1330.317618][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1330.323416][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 1330.328863][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 1330.333618][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1330.338889][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1330.344068][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1330.348992][ C0] ? rcu_gp_cleanup+0x7c1/0xe90 [ 1330.353835][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1330.359637][ C0] rcu_gp_kthread+0x26d/0x380 [ 1330.364301][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1330.369483][ C0] ? rcu_is_watching+0x12/0xc0 [ 1330.374230][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1330.379415][ C0] ? __kthread_parkme+0x19e/0x250 [ 1330.384433][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1330.389622][ C0] kthread+0x3c5/0x780 [ 1330.393678][ C0] ? __pfx_kthread+0x10/0x10 [ 1330.398255][ C0] ? rcu_is_watching+0x12/0xc0 [ 1330.402999][ C0] ? __pfx_kthread+0x10/0x10 [ 1330.407577][ C0] ret_from_fork+0x983/0xb10 [ 1330.412155][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1330.417253][ C0] ? __switch_to+0x7af/0x10d0 [ 1330.421918][ C0] ? __pfx_kthread+0x10/0x10 [ 1330.426494][ C0] ret_from_fork_asm+0x1a/0x30 [ 1330.431257][ C0] [ 1330.434260][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1330.440567][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 1330.449570][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1330.459607][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1330.465226][ C0] Code: 46 60 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 f9 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1330.484820][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 1330.490869][ C0] RAX: 000000000649d5fd RBX: 0000000000000000 RCX: ffffffff8b7766d9 [ 1330.498822][ C0] RDX: 0000000000000000 RSI: ffffffff8dacb65b RDI: ffffffff8bf2a580 [ 1330.506775][ C0] RBP: fffffbfff1c12f68 R08: 0000000000000001 R09: ffffed101708673d [ 1330.514727][ C0] R10: ffff8880b84339eb R11: ffffffff8e098670 R12: 0000000000000000 [ 1330.522681][ C0] R13: ffffffff8e097b40 R14: ffffffff908878d0 R15: 0000000000000000 [ 1330.530646][ C0] FS: 0000000000000000(0000) GS:ffff8881248fd000(0000) knlGS:0000000000000000 [ 1330.539560][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1330.546128][ C0] CR2: 000020000003e000 CR3: 000000005e3b3000 CR4: 00000000003526f0 [ 1330.554084][ C0] Call Trace: [ 1330.557346][ C0] [ 1330.560257][ C0] default_idle+0x13/0x20 [ 1330.564574][ C0] default_idle_call+0x6c/0xb0 [ 1330.569326][ C0] do_idle+0x38d/0x510 [ 1330.573391][ C0] ? __pfx_do_idle+0x10/0x10 [ 1330.577975][ C0] cpu_startup_entry+0x4f/0x60 [ 1330.582732][ C0] rest_init+0x16b/0x2b0 [ 1330.586965][ C0] ? acpi_subsystem_init+0x133/0x180 [ 1330.592241][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1330.597771][ C0] start_kernel+0x3ef/0x4d0 [ 1330.602262][ C0] x86_64_start_reservations+0x18/0x30 [ 1330.607702][ C0] x86_64_start_kernel+0x130/0x190 [ 1330.612802][ C0] common_startup_64+0x13e/0x148 [ 1330.617738][ C0]