last executing test programs: 8m44.308179221s ago: executing program 2 (id=1397): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 8m44.084488647s ago: executing program 2 (id=1402): r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4880}, 0x40090) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000051}, 0x0) 8m42.966865533s ago: executing program 2 (id=1405): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x9, 0x0, 0x7fff0006}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/ttyGS0\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) close(r0) 8m42.643907902s ago: executing program 2 (id=1408): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, 0x0, 0x0, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 8m42.301355828s ago: executing program 2 (id=1412): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) ptrace$setregs(0xd, r0, 0x8, &(0x7f0000000200)="6a2f0527a2e2002f353158bb12250191f08af86afc2a13d121263e55580fee5602477a32d148af928dc8d474bf9bc29fa24dd6aa0b13c9d78480ba4d8533d4c54863c9577a86edce823c9b46fee1689ea91d38f8514607af30bf76a8af6d504713d8dc82") socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x400000000000003, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfbffffff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}}, 0x0) 8m41.161835166s ago: executing program 2 (id=1414): ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0x11) ioctl$TIOCSCTTY(r1, 0x540e, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0x48}, 0x1, 0x0, 0x0, 0x4404c810}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) lseek(0xffffffffffffffff, 0xc18, 0x4) syz_usb_disconnect(r4) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x8, 0x10, 0x1, "", [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x7, 0x1, 0x3, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x5, 0x4, 0x1a}}}}}]}}]}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00\n'], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 8m25.798099854s ago: executing program 32 (id=1414): ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0x11) ioctl$TIOCSCTTY(r1, 0x540e, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0x48}, 0x1, 0x0, 0x0, 0x4404c810}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) lseek(0xffffffffffffffff, 0xc18, 0x4) syz_usb_disconnect(r4) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x8, 0x10, 0x1, "", [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x7, 0x1, 0x3, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x5, 0x4, 0x1a}}}}}]}}]}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00\n'], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 6.545620752s ago: executing program 5 (id=4243): socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000008000000070000000300000001"], 0x50) socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$key(0xf, 0x3, 0x2) socket(0x40000000015, 0x5, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[0x0], &(0x7f00000001c0)=[0x2], &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7f}) 6.534014107s ago: executing program 0 (id=4244): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073", 0xac}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1b98e", 0xbc}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d", 0xb1}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8", 0x62}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6.394898599s ago: executing program 5 (id=4246): capset(0x0, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x8084) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001c0001fc28bd7000fcdbdf2507000000", @ANYRES32=r4, @ANYBLOB="8000260b0a0002000180c200000c00000c000e"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040010) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x2, 0x0, @vifc_lcl_ifindex, @private=0xa010102}, 0x10) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x400, 0x1) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004380)="4e5350994ebf71ce3049a58c5d050078bf16b0757a4c27b455e2a547739587dd3380b5df8f40a0696c5bd6cdb672cffe4d870c5c90ca92095b9ebf3e92fe31d8cd74275d857d34a74f7eecc7fac15e2f148d4e9d47bb45b858bbf078999970d180f28d7b2cefd92635d45a563d9229c9fd770efdc0848e52fa5efd9ada5c94a1ba94b4b7c7507f8b0819bb20910f9f50a83a010abbe126dd9f6a7b84eab6b0d5ce78d2ade77a5f7e4e997df1d03ffab4b4c945d803e4457909013127a98769c938c237f37263bc509a42bc56ff2dbf80e847e2c407009eef94f18e1e59069d62298fdbadae007ffbdf403c5049a4530ac0abecceb5608da02754c9a575af52c0b7e41226e2d642a814861c4310c935bcbae413516dde2132652b39c7aa0218a6ce65dabb4494965209ce879ba7e7e59039db5c1d36d6a7f86d72dd59954fd6f46124a2506b245a0db11aa89d2feb312a6596ea2fecaa7b6021f37a255f628da7ff6b6c36b514d3b6be34e505f9dac6acfb888198004699fb350ac93431533554658c4957df36703591438d6488bc03dd8290a75ebb367a481a50e79a46b04d005649cabd79e5c6326c066bc2b6fc5febb87ef66d832ef31a16c2a450a0b990fb549a5d810c928d1a81fa1dc795db2607ac7d46cb5716b68acdeb00987e429fe6a394632c83b43336e7b51d9cfdb50e83d8c6ba1784d9f74c16b476e048e65e7ac0af683b347d7377ac1795422e00e5bd8da9b313af83abb3348861116de7a99959169b7dff9f7d9b7a6d107f2e76670a6214a419bf8298f80eb570fa29264ba57a383c5ec5836ce33104ecaf1aec76e311280a1d2c8bd7abff3a5a242e6a637f7db63038ef5d78aca9c680d72b60da4dbeb0e1e683ddc82898647c589a81b8f92db06711d8a0af05560cd77fa7005283db71e8da21713fccd450822062b994d152aaed2cdcf0dec9c60617e15ba4df628da4e71279bf9d1eee5c7f055c27cddfdd45f9225d5d5529ef7119e2e3c9838e7362971e069be487797e949b24297de19c61340d1cd7a2bfa3880b91a71e934720a59e1e0ea992d2a1633a0852ad8addfcab73a291e35745e694a6471f429b124305886c1f79f67c78de3f3ec998c91e7fc59d26766cd446f6f0de603f2c6892e13cfda37d9e8e118d098b6986ccd991993ec152193e7d77394b05b99e7d310c506707f1be52249438fba9615f6dad2ec7244fedf36e34ec311b7d6bee64271d6491079e161190ded7e28e2ada4307a9b2986c267b1a30d2f720ff23408011f1d589ce9ee77f981c7833656ccf7df5b3a87ec253ff7c7ef1e67ceeb10c93e3fa683cdadad65850ffbc402b7744e94cdecef9db9d264c755c53d36278df23d4c9685fdefa69f7588a33b8a64b35191ee81abcb9765577d175cb06e31c582807ff7243bfef44961fbc0f8a235242f51ee991ea621803d4dcfed90d26f004b299425bf219f6d185fe6e088ae44601b03defada18794feac93787696a5d419f09f769bc590f43d2df6a131f6895da2de120c2644685e57b1d476c6aba5881e954fb2575356452b118b942cb02b4ea0fcf8f1bbb9a23b6e32c9d0accd3dd861452a3ad77b38fe709e216974932deb5397fd8033ff0e073d93ac0b4be762bca0424d69bd57b22ba914133f87671a29498b268c2911e793215463ca2164e38059456107dcb29beedfd6277e2b41a11d1c6f1361b19875c9384f04f9c53c1856d71f360a8fafe05f7aef750ec0cf2bfcfa971c017ad071b69a18fdaf970b384d4c889cfa5a0397dbe89543a5c6302645d6edf959aa60709ce0225fe6c3266c7ef62157ac8e78fddcd8a1f2ca5b58128218d19276885515775326aeeee0226cc810843eb05144bf8e2fe3340cf60b32cafd96d23cd7d0d3adcbdfec9a2a3d88307c362633b1c5637608ea8476d900b3f836a9734b5ecaf5e82983577128d3f74b903b0e3bf64326c1b564ae42aeeb0c07702b63a9ff74a2af6b45e5185a53f36c17bc29dfbc0ea28ca5cca43a15d751e9887ad3e6a87faacb6a278c4c8a8d21b9a77b9776f33102a6e645e99cc5cbc543ed0674282c2b9f8e5d14c2599aa9ac8f81438c77f2b9368bdac82edcdc5366f39adec9e9a3fbd55b79abc16d2ebff26b7d0c88f18b486e5836333575e3fc7808cb423b44781c57965767862922b4ff32d9bae76296843a46f430211c27ef9db168430026a5691623284dfd459dbdd1f1a6ec9bfad666507e6eacb1e2a7866da2e12e6d596d0bbb150500590013d9288af20596447f97bf1744eb9cfb244d8fca269b1fb71e14de664be4e95d83fff1b8abcfebcf3e78c1c66d28f260fb0c19f9fbcd2abbdd7dd7246e49dc25d954bf25f810a2ff6f9069dfdc62e7170fe3b0964b2ac95024256dfa3e7a426be5bb5f707fd82c2b3afec5d5dcf5bbb8fcb6dbc1b59f6c5330966c70d8b016956903a4278817414ba3652a102d7e7e37ecc79400267fc3bf7601c0731f87d479c33f100735e748874155267f708cea49d549e93cf7a398b20373dc90ad9afd56d9c77cd24e2c4a18f7130b366c7fe5b26bc4d11ca1ed1b98fa0b4d7396f82ae6593f4575d19f4d8fd586c991129e5cbe15c8bacc89c3ee15ca471dea966b5c48ede0d3ba2a7e28c75c04e6a4aa49a61f4e391ffe78eb5e40a5ef349f3aa4d15f2291cc86ec7e47ae301bf0b6083dae44b695820a893d46732553ef15ed1c16d28268d52a7e3a7e7c009d0c0708a356d3310c1ebcbcca4d7acf433e34bfc9fc115498142dcc725e7a16879c75e4c2f01c6c98b39619f3248bf530e6ee593467e38cf4026cfdc4db6296565722d587f3c580750b1453ecc141c0461495551297d88ae034acbd4f5e80ce198e6640c4c1e9501529988109cef006eb2090a6fcd974d7f60290b78f1a8ce3051ac2d69636c3219f0a6ad8c254764396a1684b2fd9805b1853525f2e640e513197283cc4d4073ac033e0539a88f08aabe1423cd40b8a7e073437d812b57a5d39a0531dcbe13f4466e89efc66c2a1e4b39a3e0b3073c9d44e6cf9b85f4df5c4e03628d05bc0f94ec04234c9eca4ed17463f190406834b02888728f625371cda75d15ec19efebd59f00ab659eb94eb88bcb2110862a369ad599610c1530fcc118f5b82205bc5215fe3623ac8ec297d8ff4eee75ace20731c5d505e6605c26203b7f754164c9463f0a6eefe3a2880b8e06e7bc66bb2adcc1a3f9b0325f5ec31d12a25f1f73c2aa6bb3a7680d786a082a63b13cce1822fa6a4b085a871ae3409eecbc1fd8661b5d52bb2b8b72f23e24a225075f272ed2ba0c6c5c693811a0ef8db6da7cfe7c966c647f0187ad223eedb1012a5b7af103e98464ac768c79b21ca45b12a52cf261de0d367442cda71c4b8ee39c94ded1b22ba06c13836cb467ebab4efea07bdf1e3de8da56a0ee6d4f848011253cc21fac10700003513d3167b7a73e0d752b861c49814bc5410ebe53a0264f76068c91ee6ec9e2daa343482b2f0f06e605c5aaf81f2a3cd570efc2094b4bc452f9526f1bbe7b22b694fb8109a5a987fabf6250912d6099e67da9cac79e8b6f2cce4702d1f17cbc5d06c38b8a48155ec758369c185ded839fb58cd736fbb74105fe5baf44e7e3ed06843f23601b60a43b1f88fd29e9b3f58479f9b95392a39d5ba1a31ee4441ca2d1fb57c0a8678a07a724b7a65b2ab16d1da197f435bce3ef003fce27fa2f0a67c9dd6c930a4bcf59e79e57b010000006fe34972958c28b56642d14ea89bf4d7d6f7fcbcf4fda8bd08fc9fe424de4359112b11f81fbdc1505658363697713ff6e1f8ca3c4be34a79993a9091f6017cda6c7489ae5c07062555231427c3eb42a049f42d22a060983b044a7d34ab5d2b5386cca79af72396a48aad6b8dcd7855410fc6106e4a165994f26efff1e7ea0aa8f560333b5dfdb2a0d899b0fda955155f90c75effd3c9535d88508e836feb7807d57b2a57cca42d3d08fe7de60d2a33376f49bdacdd3f814bd0927f417f15ad62a10b302f1cb390aaf82b0bc6af46bbf990b6ada45ef83ce13029d167c65134e7b82b59ddfdc367e61c40defd2732ccebb1d4000f6c742df964e1fb390c255d2b1dfc745c6ab34af8096b5b67aa179e3f341854f7a69f7bf47664c832037ec7a78f8e27209e3f20f833fb6e8c0fc4a40920a5ad2b0618982ff72540009d5db82f0f5bcaed2a27f35d1e50eaa0cf8e48c7a2d43c25d0264db750a7f33b44a4bfaae576cf9ee7594ed204513899566564ed8bbc97ed18b1d8868f926a5c70ac06fbac1eade46792186be7bf8ffa3301239edd093449b7d77192782b5111c14169d2b4a1b3443ad62e4abdf11aac6a5b89a5b20ab0ad0abd949b9d64582c67ffce018e7e46de4091fcc77a65b971fc67c8d9cbf0c341ca764b1056ee5014d9865059616a525a1d46ae2fad159afe86dd1df9b8246411827e19535ca0aa9f83050b06e70aa2737f27e93d584a9cef878a642e9361efaa5d20bd8da901fa2e064656f686d3b3ea31d1d850ae9196b7764548f5c6450a32a717e09b6b7e75d43fbbda76e43a24f186d5578933f408bfa28e0435cde525fb91e71d92d704cc5a9b5e3db7aaec46d2b1f8dcb3f921f69bd7397c96a1e132c39c8f1656cea4365c779abf76199cb5b6aada022edec5c901cdafa2e7f3765af9c8b20cb1a6785085fcb0dc901367b89051bdfdc6b68c5215fd04e2b3c7e1c454a4d21132953b25c50995af0f7159a5a8d0a1621f4808f126a5bd40ddc79fed90f49925ee367a57a05c070fbe39fe2c213e7c1724a907ecfa69efe6e021c06a262471a4377f3c9809e9fee4f375e27c31b6afbb2151da86b7cab63c7b4fa4b77fb30172b9d0d78b1c0535ec0639c4910b5eeecbb5b8b5c8aa74c140e7ad347812e36db3097a7ff85c09ab2c0020202307f50efefcdb497b9c060ca68c4be54a9165b4cebc6b2e2e14e5ffb9213142418faedcdf26fd326b7672399e71cfffe3ed712ced5317c254f9199ee10c24c802d102bd8749513d3145201ca4e01bc7c8bbcf430afa541ec5665f86dfb143be648521bb0f2b029018201444787f644f8c88b79e754e6ea9c797babdaec72a9680abadf3a41684cdd57c2b6e833acc0846be5aa927f1b1b36562d2acb9ecfb758455230d050daec6748ba280a5edc86d48e3f8af0f8f4ffb18ae3cd3c19a82d504a4fd52bb62289ae8026572a497fe268f87ef4b4b5886aa07eeb698b7cbf99683f710afc9ed1f8a488883ce0eb8f7fd055b82a9fe21a409caa231c41ba151008e9658919c611e157d7f3926a5e4248532a6860e615b9c86e9fea212128d96ed58c9b84ef22706071eb69f492e4d8321ed9faf6c6a8928f86172bdc930244583ea15be497d9ce4ae79cb3e6293a8512ffaa9e8e358f3c7c7117001fb92891a40b84f9126cc3def5cde67f463bbac9668b9f56c3e4ee72fceebb47e52fc226bab213d8193516e7064459fd1365350a95c5a1c3ac44a73bbba2a4c17ebe49dd781bff1995cd706b77bb533117594ad63566f4c0730beab85ff4c713b7f10b95480fe99a0f676c51ca11116b21e87887b462aa9770e85509e4e60f198148115f0a3ce6028516a946178d1acacf7767f6be7277891369eff67762aa58f928d48b7231e44d899cea8289003349117a53d61bc27b207fdc91c9db61e677d1e1a1bc6a1b6e8564130b335233db4b5de8d62324e6d0ccb2b08c2ff922324eb8c506711142d4b8d7a21223ef0a3d534fdb0de58be95cd827152f71bdd0a82766b62b4c87536f0b7e7df343c4263187da887de6e65d11d0360e2376c1d71c367ae85edeed8f767d24c644b1a9b455ded1dc3cc224f99936a6ee66931c45e5e3db2427719ab2d5cd9c20d9bb0ec004b69bccb00649f3d8e34a3572c257de114b9f027d76bc7db9007175cc03b9e2061b6b3fe7409e009b5371544e56fe438cbd361e5b11efbf2d79d1c250a1e73ca8c601c4f4d1e3761290950421c48c7daa45965e472f5ef3c4b8597444dc5dc01cd25358055b5000617f3e7291da3413e3f0853b1271366612405c35ff1b785b984d921b518425628a533a29ab65d3c11f44c6daa86f8b6457ebb9419274c481aa6f3fa4547641670aff58b9cc62c0993d49a509f02dee755ee5f1fd2710c995c43a91c4f873afa1bbdff19427cba2641052a8f361ecbc72e8a6cf587e83f8bd3110c95fb080edc77a6d43cd58c447b0e02261e4109500c6458dce70acb17aa8f9dc1d15b94a61354164031b5d563c25d0246fc45e6401cefceb501e1468903e5d677759dbe3f24bd48ce55ff8b8f26529fb3b2d669202a1e8a498984b449b4830a0126b18f0e78182c9ce78fe0c448c0e27845b926cfde28fa85e156fa98fefaeb19ed1247c9643b447b4342c94c114d3c4c35eed4d5b49aa70e6aad45bfb557f15e8fdb2d6e3d10d8338a13fe3f187751985b37a5bb10b750f79e36fc2e2ee9bdecc3ed156e202ed7b45a94809d77edaa398042fc6a825a4848c334c557303d24eb3f8e01be06995ceb283c70272b00da61c3381628f0e372fe2fcc779ff7daf7e4b7f2686c39d3fab674b8867b62b0bf9d5cfd0c1d3b270521f55f147de75142ffd7fc9ac7e5dae7ca2fdf26a9222d060823852409dd040cfd1f66f218c6dbdaaacddab34b123af22f97384d64fac64d84fd638c96378c8f9532a11927d48440bc777ff8b8b9be88f930f3b579a713c0bc449dca3a3bd5f2efa98240ccc594299e44451dc60c6c5c9edd0d7b777912b3dc40c57e0ea5f4425cd7047e686c7304f04ba9f7b5de6ad2bd524f1d29f8802a524441fa286015adf4589431710aa4d76de8a956dc1d39c0a13abb7fc309d24222d036e204ab6bb46ea7595d9e4512e0b9d5f8fd719a4e3072e1d806967045789c67a1681f2a9f1f4b19f4f5e1afdafc17db7a6d5196161499e62ab4b0ec27648f3eeb1fb2b78f8ecf9b05cf9509a3b9e2a361238deb1c91bdbc8b1d11bbeb939fd9da811cd439069da0ecc00665d72357aac01f259a0325409b201859cc0569e0eba67a7a9ca7e8b78078d9370bd3e37f0571680ede60cb6bbfe69435d6ab5efd80cf051d119a7004fc0b600844d49218d844de8f521524a47ee50229c7da25e42a8639b5db225e7f23967f5d4f8a297aff04a3cbedc2985b6393a5ba0b26b6c7b4ca22d369b35b410799d1ad02825104d34f73408db1948438597931ed1c1c260e78340517bfa2f734537dbdf5ec303518ff4640efe7f7b1c2f46babdb9247ce8eabad9718a8b9ddb7a18d5e87ced554c9d6de78f85d293349590c6c32483534bc968b24a28eb54b9515589d6dd8eb51a5ad0b4d896ce92250397cbc404323fcdf0ee47ed634e0c58213bc5b35a72b21a098e11b79c061430dc817c1e0c79a5b6ed3b002979933f1b83a17f250b1bd5c4958df4d75531ca03efbda89f6a92fe08c23ad9014ff562a7f3dcde578d6825b9847b5df04dbca4f2aa52d8e0f4cf8183ce121e39b50358a9796acde0372a8ff97769874a80ab997cd889145aad4888c06963c2f5b82f53a748a6729fbc79d35c06d84e05c62e44ff78040e56ebfc6efcf0d8b49337d5a17c4041f0d5a8b616244d585a162b69db073accd9071d12df5b326a43b834bbffc2f2a60deafcbddf1c6438a1769d6fb09fbe1990e89da12164ef237f326edb5be64bb64b143a030de8a99b3c5e543c871cb581e2be090a92134aa587701f864907cadd7c1ce20fcf8f5dc7f7ecd06a6c19d89a92ca0ad4393c208b80bba990c7a3702a9c79bddde75d5db244719ac32191b6ceb041ab541fb47680a97dc0422b8a50d91e32cb08cd341b0b099aca5bd12b69d4f89d10b755b351a6489180b786a3bebac926532a4a2d85b07bce6c090d1aaaff079e36d5394a612f1351b90c13a0fa6bf9d188d548dfe6fa51a9026edb52009c03ed45ac51d05c58a957bcc67e05a588985ba00d79f33ae9cdd5f5721d9fdc72ee6e880708be87e8a60c3c035c146f2091d1b9a4c2cfa56f292fe1ba62290d4e56c05669291bbe917f3cac51802a2cc8e9c90dadfe666c233c5a5bb71ee17deec51ce60c73f57bf9ecb84873afcc44815131810c6c1217bea485ef9aa2785e859b25315ef8aa3a274982786e45d622ae831fb76010d69a181b069e4cc55d4436edb10d1119b0c6000c6d5cff7c72f740a59dc0507e7a952b69403c62673f122c9d1264fac6ce2262e86cd8d6a402672f88530fc2d16f31736dd497a4e853253ac8d5aff8d1376895e9f5519b2490cc2a2412ba0c99cec855f668837310035e92fb646486de1b0acffb91ae7516df3eeef381456b55e65baa58e71461c928687e699d2b21814805591382e95e1b970aaa53259917f070281f2336b7d570249d838b3f1a32753c336864e15f4561badf8fee034a29c52ff3fca7456ae140f83e3b2fd5b57c9aef3f20c664200d235f236ec47dd2fc20b14dc6000812237aea992d987e5460679e8c5b76d931ef6d951e6c7087e3106b6ce2db9de6f228fdf3ffc38710c0e8d5000a195a79d1fa2301038f5b27c40b09c34c025e5099d40c2204ea0eae985263c9101cab88d6857a320c9e497f22348a24861a5fb8d734e08cad09f9933748ff01eab22f17756f58688dc1b486a397563ee9ad0784b8833cdb5f7c6bcf76d9c1105f71c3c6aabefd70dc6cd5c66d31caf916145ac5ed7fa070b4277c0448ab1eb78c943be9aeab0587d321a4bcb7754f070881178f8be668b686124899fac252519f4b60ec42db766a908755040463125c26850177402a977246d36d23afac0a11889d54640bd8f6f670d686cfd33f6fc5d90cf6cbd63d9d0fd201dd4c74dbbab899f3c23c0b7e37ea0b2aff421327200d0da58b5893a4186ae3652cc6e11c2c2a0e52184a3872532acce98c94cebf4f31333663a620f0dba0ffd89c3124380075bd28caa6d449a050b3661b8fbaf4747b77c4928b1378fdc8c7a7b38ade1aeec44bdfacc8271d0b132b2029b0f3582f9919f5c8cd543abc9caf6b82b197cd482c3ef61a64743506342bf50a3c1ff544563bb8b2002911ee1fad698f4ac133ffed5bfe81239c918207a03c7a8bd71a0a502aea78d38e970e3ab2abf754b598acb79cf276792aa08724d0ba24f2a694912ab795b3f45f52dec50d9bfbc99ae27e1d2c2216afec6709d6513a64b29ef58255bbe18478c5d4f15f74ea63a1e15487752eec8fd019f1d4a7aa25277664754bd2d7cd3a7a018b92c56d965a1974885363757286da9e055ef7fac17876f0a64c1026a597733b897a9155ecbf420159ae8e5209aa83a3544fff1fb4566f2d54f95e3bbd30dcca5f24397e4bd47ff01292f0d6fe9dd47a810e0c25382fa69b4987d1afd9b69ef125110ad6b240eaa9c85829a2646f9ab7874bc02bfa8346cc9190943e9d46b44880670b1e2aa3a29e83be5472d7418885a353faade6e8b18f4b588607bbb758588d1e2f11a9dfa1c4d61be50249f1ee32e6ff8c0c7722aaec1bc79654a4772efc578bd6a14c79abcc77a4e09c8b6c6ea35cd3ab31e35268fb55db843176f8042f8ce7be0ddd4ead6dbdad0ef9e7cb2323db5cc48119a72b27306b8ff6366c0bc682a85ab9e2cf2238b6d6eb2e38a97d5577e6334cb2aa6e7c86e489e876f9d7053577a5cb57f52812fab7c4bd7b19a34c228ffb67dcac9281612f778b58c580c140542200fd00cb3ad81d93420df93c5af2493f646d8de797102fa0a65247317882fbf171520f00b2c7638623b823ff11444fdde453570f99f9099b60061a908b83383ba8b82bb78edd074dccf9342afdf8d11a6129ba6ea7030f3629056264f1736c2b926171b6dc7e1fa455a473de656390495f3b6ad2f9f46f35eacb075628ff739ef78f28ba683448068c7f18fb63f28ba7dbbb78999100dde0a94e8b8570817c7114c13e139ceb333782b29a84a5b19497fa785915c7680dd7f972cb59ba22161f60886e5cb3c3e808726cbf96bc4da78914eee565c6d9d18e70d22cf8c0244cf3cf488c3550eaa400bc0f26d64e0f1bc8d0301a841d954073a641f3ef883d81f4d5db8e9df708e64e640b38df7295f7fe573863653086bae5507c880ab7fdb7a6c5ce77027ffa7395233d3ce536d77ae6c2e9c8ffb6fee78a3bcb3b5f888bd595caa3a5586948776b950a89cde4db8247ffff27491c882b430afdd60e7a22324f6635a9aa7139f3e624c6d9ece60f7f8153b2080cf0544fbf8e1c436503766e670b902604ab521e11aa5a65cedd64cfaf898ac5f55c08c87693c323517bcb0d99c28f5e072d4f6540c7ead70138d47c1a67fd72bd6ef5613af33a0af311c3d0a631ca2a2dfbe35d1021eb610e40b9be128683235a788b5a4cacf99babee382458d59e8aa1dd7bba7e09dd30c055a3df8ed721a1778b2c6ed587a403566325cd19962edd7831caa44a6b716517bad502130e7cf6a5ce5288dc84c0170f622ae0b1e1166a9c2c0771d91df9f9dd82ae210469602ce38964746c1c1d04321aae7d464eb801dbea7ec39505457e778208774d72673626c998b002c46a9b4b1e390d9344f0ca62212a1b6d41043a2100b35196bce42d40caa0ea9a486bf8526fd1f0f0d362c2cac463ea7377a20b54b9435442ca529fc00da4fd7e27c4eaf14215a06857b54254c26346956fd7fe215a5ce57ec38cedf50a3c759e563a4fd87494f00e7bd9b44f3b7e99c6ef67187056a21d2fe1ac9d24125b1947eb293189fdc448b591af4d9b8eb091d6bbb5e50fae79d000044e282bb2ab6c63cc9562b151c214e45015354e62be63e1881238b907f7bdb791ff44a4e03fa29dbd26db2f49d0f4729b7cd9ba69a65b0b493466d35d09b3f590c67c31660d95e2ab4af2c9f1df91f04ce5a57dde2d75206b42e3423126774d76593c2f713ae279d7092506b513fd5d18f0f52d3fafd7141dfd4a0de1063754dba865faf8dc0f6be9d90ef21ec86a275533f6ad4b4e360dc775413f29eab8b3daac6279b9abfe163ea2f183e09ed91ef67fbb090875109288a182cfdcc46d90678efe5edceda6518335e678438cac4bb47d376f3f0e12aa55301735d7f42653c073d6a4a37b2e17d332dc1be6b50918c007b14886307cc39250e81efecd63d24067a49994572725a9df1760caac13a28f5255556b27ec245e93969b85cdec7cd1c2d2a433d3f9572b93054a7ce8adff81bc1d30884d5fc4791e251bd907e37af5bec74235c3e2f804e4e0450b715289942b7859ad207bafcfec1b586dc15e7911fe6d20aa3d02fcd47e9956780e300d7c53c17dfa15754deb4c20efebc7270bda0fa6b37fc88c6be4250cac38c1b8186b364482026ab52d65d3a691903fccc39772277011bfaa421adba76bed9731077bec885ce88d40f36bbd2a839c67dc4b862c968491b877d4fd13fc90f8da57a29121e12f78e85af765cd66e72ba513593fe1cdf20019985b065d828707d8e509c6834eab188deea5c9ee97955f4b07d37b6fc7beed73be94887d423a349f35bb8782bc670ceaec870d97f061bda02ae73f6d575f81e0b6326eae6c1b3085cc584686120e12dd9ad8ce44036bec8a189f900", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000100, 0x20000000, 0x80000000000004, 0x6, 0x0, {0x0, 0x10041, 0x0, 0xc, 0x2, 0x2, 0x10000, 0x2, 0x0, 0xa000, 0xfffffffc, r6, 0x0, 0x7, 0x57}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000004300)={0x50, 0x0, r5, {0x7, 0x26, 0x6caff549, 0xfffffffff323ca46, 0x0, 0xfffc, 0x1, 0x80, 0x0, 0x0, 0x1, 0x10001}}, 0x50) openat$dir(0xffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0x240, 0x1e3) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010028bd7000fedbdf251200000008000300", @ANYRES32, @ANYBLOB="0c00430002000000ccf581070a0006000802110000"], 0x34}}, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0b080510"], 0xe) 6.233836902s ago: executing program 0 (id=4247): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206010800000000000000000000fffc0900020073797a30000000000500010006000000050005000a0000000500040000000000140007800800114000000000050015002800000011000300686173683a6e65742c6e6574"], 0x60}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000340)={0x0, {0x2, 0x4e22, @local}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e22, @broadcast}, 0x11, 0x0, 0x0, 0x0, 0xb7f, &(0x7f00000000c0)='sit0\x00', 0xffffffffffff68e0, 0x7, 0x2}) socket$nl_route(0x10, 0x3, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42b17000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0x40a85323, &(0x7f0000000480)={{0x6, 0x3b}, 'port1\x00', 0x44, 0x1030, 0x5, 0x6, 0x6, 0x7, 0xffff, 0x0, 0x3, 0x1}) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000018c0)='\xf5\xfc\xd2S?\x10s{\x84\x11\n\xaen|\xec]\x95zx8*\xa2d\x11\xb5\xb1\x01\x00\x00\x00\xe49{\x8a{\x81s\xea$\xdfg\xb1\x03DY!\x97\xadM\xd7\xff\x8a\xcd[>\x12e\xc3]d8\xba\x8ec\x00\x00\x00\x00\x00\x00\x00\xa0\xe2\xd5y\xec\x90\x00\x98Y\x91\x19\x16\x89\xd0\x1a\xad\xcd\xd6\xd0\xc6\xb9\xeb\x95\xd3\x9cl\x9cu#\xb4\xee\xe5\x9d\t\fV\xd4\xda\xfc`2?\x15P\xba\x14b\x1c\xcc\xd5\xb9jA$s\xb9g3\x15M\xd9\xb9 \xca[\xc7\xec\xa9;\xee\x01\xc9\xc4\x1f\xc3\xe4\xfa\xd3fU\x0e\x86\xc8\xa7\xaf\xaf\x04p\xa3\x8bb\xbf\\\xdb\x83\x00\x96sy\x14\x1eo\xcc9&\x946\xf9\xf5v\xee\xb5m$;\x01\xb8\xeau\x00\xd1S=\x920H\xc2z\xb5\xbe\x95\xef\xcb\xd1\xc8\xa1\xba\xacl\xbef\xa8\x86\xc2\x18\x9cC\x15\x9c^\xcf\xe9\xbcp\xb4Ff\x00\x9d>p\"\x19\xd8}|~\xae\xdb\a59f\xb8?\xba\xf2\x8e\xa5y\x11\xfb\xde\x93\xbe\x7f\xb7\x12\x983\xf3\x19\xc7\xc0/\xe9\x1a\x80=\xa72)\xd2\x00\x00\x00', &(0x7f0000000540)='\xa4\x93\xaatH\x98\xb7\x8c\xd5\xff\a\x03X\x11\xcbN\xc6L\xff\xdf{k\xdd\xeek\x05\x02\x00\xed<]\xcd\xfbX\xbfK\xf4g\f\xce\xe8\xc0\xb5S\x13\x9f\x9b\x18\xb3U\xb4>\"\xf9 \xf0\x80\x02\x00I\x0f\x98\xd1\fF\xe53\xa2\xb9\xc0\xbe\xfa\xe9+\xdc\x05\xf4_\x87\x82\x84\xfb\xd7\xabn~\xeb\xc8\xfb\x1e\x15\xf0F\xc5\x87\x02\x19\x13yfz2ph\x00\x10\x00\x00\x00\x00\xed.\xde\x90\x83,`OL\xc4\x10\xa8?U4\xc7|\x95U\x83\f\x9a\xa9\n\xf8\xd9\x84!\nh\xf8\"\x04P\xba)\x1ab\xc7\x10\xf0MK\x00v\xads\xc39\xe61q\x8c\xd9\xda\r]\xaf\xa4D\xbd\xceXG9\xa7\x9b\x80m.\xf7$U\xa2\xcd@\xfb\x12\x13\xa156Gl\x16\xe8\x1c\"\xcf\xbf[M!\xaciNO\x18\x9fdX\xe6\xed}\xce\x1e\xbaI!\xb2<1\xee\x99 \xb9\x0f\xb8\xa5\xda\xcd\xa4\x10\xb4\x18\x9aQ\x8e\xb7\x9b\xfb\xafA\xab\xc0,5\xca\x0e\x94\x02kf\xc7\xe1\xdc\x8b\xa3\xcf\xa01\xb6\x92\xb0\x92\x14\x96\x04\x80\x99\xfb9\x83\xc0\xc15\xbf\x8a$\xf4', 0x0) 5.821671369s ago: executing program 0 (id=4250): r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) 5.762405894s ago: executing program 0 (id=4251): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000580)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000600)={0x5, 0x10, 0xfa00, {&(0x7f0000000340), r2}}, 0x18) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10b, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x32}, @fd={0x66642a85, 0x0, r4}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000bc0)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 5.616275451s ago: executing program 4 (id=4253): syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xd1, &(0x7f0000000440)=""/209, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x7, 0x1, 0xf}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) 5.388990107s ago: executing program 3 (id=4255): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a09040000000000000000020000070900010073797a30000000000900020073797a320000000048000480440001800c0001007061796c6f616400340002800800044000000000080006400000000108000240000000020800054000000000080003"], 0x9c}}, 0x0) (fail_nth: 1) 5.383838192s ago: executing program 5 (id=4256): socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="38b30800ffffffffffff08021100000108021100000066000802110000011c008180080211000000ffffffffffff79006333a2155c1f90825c4975fc964d1006163563beb5e1f132fb6158e7501efe8239b2bf054ebbea2c13a1f07b5212f7171416c871bbe8d16e584644fcde"], 0x12e) r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4036, 0x4) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffd) syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x2, 0xc, 0xa4, 0x0, 0x4, 0x0, 0x9, 0x8, 0x0, 0x24, 0x2, 0x20}, 0xe) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) lsm_set_self_attr(0x64, &(0x7f0000000040)=ANY=[], 0x30, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x0, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x1d0}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x2c0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x482cea3f2f6f7be4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60}, 0x0) 4.866910805s ago: executing program 0 (id=4258): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@ipv4_newroute={0x28, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfe, {0x2, 0x20, 0x10, 0x0, 0xfd, 0x4, 0xfe, 0x2, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x1}, @RTA_METRICS={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x20004090) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006800e9780000a1b57b9dd024057c95dd7c0000000000000a"], 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x2, 0x80805, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x777) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write(r6, 0x0, 0x0) getsockopt$bt_hci(r5, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000004c0), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) 4.733730588s ago: executing program 3 (id=4259): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b18", 0xd2}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900), 0x0, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.81293109s ago: executing program 4 (id=4260): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}], 0x1, 0xc0) recvmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x7fff}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x10000, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093fd548fca4f3a6e7391c8acfda620b96e71569873b28a43558b1c85f34b806418d36165411c9ebd66627a", 0x55}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8c94e6bdf0c72c8e528f0778c5b5ad28a834e43f387c8282e50e7d6b0cd91a93f87f645b32c1f200f7d9f101c7bcf701e4462f36e5fe5503da319f5261659f63d203e503fc3476bb556d4987fbfbf", 0xbd}, {&(0x7f0000000440)="126ce0a7ad2d3c4b1b140fc7402f00828a02ec6c4e59757eda3f13f9d8a4376fed93dd5b8c0b", 0x26}], 0x4, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e00000007", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYRES32], 0x50) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.739592675s ago: executing program 3 (id=4261): r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) 3.704336288s ago: executing program 4 (id=4262): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0xc0800) sendmsg$alg(r2, 0x0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='hybla', 0x5) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendmmsg$inet(r3, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x300}}], 0x3, 0x240080e4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b5, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 3.50186613s ago: executing program 5 (id=4263): r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000100)={0x7, 0x0, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r1}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002bbd70000000000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a000000000afc00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000001000000000000000000000000000000ffffffffffffffff0000000000000000ff000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000700000000004400050064010102000000000000000000000000000000003c00000002000000ac1414aa00000000000000000000000006000000010300"/180], 0xfc}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = getpgrp(0x0) r6 = syz_pidfd_open(r5, 0x0) ioctl$FS_IOC_GETVERSION(r6, 0x80087601, 0x0) getsockopt$inet6_int(r4, 0x29, 0x18, 0x0, &(0x7f00000000c0)) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000100)={0x400, 0x80, 0x0, 0x478, 0x0, 0x17c, 0xf, 0x0, {0x0, 0x0, 0x1}, {0x100, 0x0, 0x1}, {0x2}, {0x2, 0xe97}, 0x0, 0x1, 0x0, 0x3, 0x0, 0xfffffffd, 0x1, 0xffffffff, 0x4, 0x1090, 0x0, 0xfffffffd, 0x28, 0x0, 0x1, 0xb}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000002d0007012bbd707bd08af4c60a492400080001"], 0x20}, 0x1, 0x0, 0x0, 0x10000004}, 0x4008030) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r10, 0x540a, 0x0) ioctl$TCXONC(r10, 0x540a, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x560, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x490, 0x2e8, 0x2e8, 0x490, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00', {0xff}}, 0x0, 0x2c0, 0x2f0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x3, 0x2}}, @common=@inet=@policy={{0x158}, {[{@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0xffffffff, 0xff000000, 0xffffff00], @ipv4=@rand_addr=0x64010102, [0x0, 0xffffffff, 0xffffffff, 0xff000000], 0x4d4, 0x3503, 0x3c, 0x0, 0x1, 0x4}, {@ipv4=@dev={0xac, 0x14, 0x14, 0x38}, [0x0, 0xffffff00, 0xffffff00, 0xff000000], @ipv6=@loopback, [0xffffff00, 0xff, 0xff000000, 0xff000000], 0x4d5, 0x0, 0x0, 0x0, 0x2, 0x2}, {@ipv6=@private1, [0x0, 0xff, 0xff, 0xff], @ipv6=@mcast2, [0xff, 0x0, 0xffffff00, 0xffffff00], 0x4d4, 0x3504, 0x2, 0x0, 0x14, 0x9}, {@ipv6=@local, [0xff, 0xffffffff, 0xffffffff], @ipv4=@empty, [0xffffff00, 0xff], 0x4d3, 0x3505, 0x62, 0x0, 0x7, 0x8}], 0xd9884bcd73343275, 0x1}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@mcast1, @loopback, [0xff, 0xffffff00, 0xffffff00, 0xffffff00], [0x0, 0x0, 0xff000000, 0xff], 'sit0\x00', 'caif0\x00', {}, {}, 0x67, 0x3, 0x0, 0x20}, 0x0, 0x138, 0x1a0, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'bond0\x00', 'veth1_virt_wifi\x00', 0x0, 0x1}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="240000002e000100000000000000000009000000", @ANYRES32=0x0, @ANYBLOB="09000080976b640868000000"], 0x24}], 0x1}, 0x0) sendmsg$nl_route(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x44004) socket$inet6(0xa, 0x3, 0x9) r13 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r13, &(0x7f0000004f80)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000000)="7f", 0x1}, {&(0x7f00000005c0)="3fd066da57b871d139fb26c35702ad909cc470ebd04da74a5532e144804dcf620b356104f5e0c18072399dc07e3757e98229cad455f33e670b82127d5b8ccb9947061df50121f86c7793e7f9c8d40214483a0500276f8149d5a873f37f6513501faf58c41bada18fa7abb46d7f05f4ed61fe5cdc8f78c38f500e35a91b14138111e71cef52860cc663fb8caae68e2309335021d7ac700d6f0caa3e96399f528c4eea7346eacdd5a2ccd3c9d97edd32419dd44b5dcd27a9d7b8839f305695f600", 0xc0}, {&(0x7f0000000680)="7965c287601e55aeb991c51d55f8b64eb525ff3510655ea224c473a23cd91e1978b648736d2af90ab299fb49a7ea0bab2bb2138b196cb78db9200dc1c39182fa2632eada7a", 0x45}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x4000095, 0x0) listen(r13, 0xf7f) accept(r13, 0xfffffffffffffffd, 0x0) socket$l2tp6(0xa, 0x2, 0x73) 3.501205807s ago: executing program 3 (id=4264): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="a0030000", @ANYRES16=r4, @ANYBLOB="020928bd700003dcef250100000008000100", @ANYRES32=r5, @ANYRESHEX=r5, @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="780102803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400010400004000010000000100656e61626c65640000000000000000000000000000000000000000000000000000000300060000000000040000000600", @ANYRES32=r5, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000104000008000600", @ANYRES32=r5, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=r5, @ANYBLOB="b80102803c000100240001006c625f74785f6d6574686f6400000000000000000000000000000000000000000500030005000000dcfe0400686173680000000087ff0100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000700000008000700000000003c00010024000100757365725f6c696e6b7570000000000000000000000000000000000000000000050003000600000062fe040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400020000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000040000100240001004c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000400000008000600", @ANYRES16=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400ef4c0000"], 0x3a0}, 0x1, 0x400000000000000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = syz_io_uring_setup(0x34b9, &(0x7f0000000100)={0x0, 0xe690, 0x80, 0x5, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r12 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_io_uring_submit(r9, r10, r11, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd=r12, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r8, 0x1, 0x1, 0x1, 0x0, 0x0) mbind(&(0x7f00000a2000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000200)=0x2000000000000008, 0x8000000005, 0x3) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r13, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r14) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES32=r15, @ANYRES64=r0], 0x7c}}, 0x0) 3.014749341s ago: executing program 1 (id=4265): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8e, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) 2.87220003s ago: executing program 5 (id=4266): bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x88804) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000540)=ANY=[@ANYRESHEX, @ANYRESOCT], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="0000000000000000b702000002", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f406", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.863580176s ago: executing program 1 (id=4267): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, 0x0, 0x0) 2.783431726s ago: executing program 4 (id=4268): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b18", 0xd2}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.627436995s ago: executing program 1 (id=4269): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x2, 0x4, 0x0, 0xe}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x10c2, &(0x7f0000006b00)=ANY=[@ANYBLOB="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"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f00000000c0)=0xfe, 0x4) recvmmsg(r0, &(0x7f0000006900)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/171, 0xab}], 0x1}, 0x3ec9}, {{&(0x7f0000000800)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000003000)=[{&(0x7f0000002000)=""/4096, 0x1000}], 0x1, &(0x7f0000003040)=""/233, 0xe9}, 0x8}, {{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000003140)=""/222, 0xde}, {&(0x7f0000003240)=""/168, 0xa8}, {&(0x7f0000003300)=""/204, 0xcc}, {&(0x7f0000003400)=""/208, 0xd0}, {&(0x7f0000003500)=""/100, 0x64}, {&(0x7f0000003580)=""/94, 0x5e}, {&(0x7f0000003600)=""/164, 0xa4}, {&(0x7f00000036c0)=""/248, 0xf8}, {&(0x7f00000037c0)=""/198, 0xc6}, {&(0x7f00000038c0)=""/250, 0xfa}], 0xa}, 0x6}, {{&(0x7f0000003a80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000003d00)=[{&(0x7f0000003b00)=""/126, 0x7e}, {&(0x7f0000003b80)=""/158, 0x9e}, {&(0x7f0000003c40)=""/142, 0x8e}], 0x3, &(0x7f0000003d40)=""/74, 0x4a}, 0x2}, {{&(0x7f0000003dc0)=@xdp, 0x80, &(0x7f0000003f00)=[{&(0x7f0000003e40)=""/57, 0x39}, {&(0x7f0000003e80)=""/112, 0x70}], 0x2}, 0x3d}, {{&(0x7f0000003f40)=@ieee802154, 0x80, &(0x7f0000004280)=[{&(0x7f0000003fc0)=""/3, 0x3}, {&(0x7f0000004000)=""/145, 0x91}, {&(0x7f00000040c0)=""/229, 0xe5}, {&(0x7f00000041c0)=""/102, 0x66}, {&(0x7f0000004240)=""/61, 0x3d}], 0x5, &(0x7f0000004300)=""/130, 0x82}, 0x800}, {{0x0, 0x0, &(0x7f0000005500)=[{&(0x7f00000043c0)=""/142, 0x8e}, {&(0x7f0000004480)=""/4096, 0x1000}, {&(0x7f0000005480)=""/121, 0x79}], 0x3, &(0x7f0000005540)=""/4096, 0x1000}, 0x6d6}, {{&(0x7f0000006540)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f00000067c0)=[{&(0x7f00000065c0)=""/104, 0x68}, {&(0x7f0000006640)=""/132, 0x84}, {&(0x7f0000006700)=""/10, 0xa}, {&(0x7f0000006740)=""/66, 0x42}], 0x4, &(0x7f0000006800)=""/220, 0xdc}, 0x8}], 0x8, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) syz_io_uring_complete(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="04040a000000a6"], 0xd) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) getrlimit(0x0, &(0x7f00000000c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)=ANY=[], 0x50}}, 0x0) r4 = getpgid(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(r4, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 2.610175792s ago: executing program 5 (id=4270): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000007c0), 0x441) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000040)="ff401709666c651a87aa90390b40f8ffff08ffffffff0900ff05c8d5", 0x1c}, {&(0x7f0000000100)="676328c9ace0385893eee89e92eef47c5851cdf473297db053c0062e", 0x1c}], 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000280)=@polexpire={0xd8, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000}}}, [@sec_ctx={0xc, 0x8, {0x2b, 0x8, 0x1}}, @mark={0xc, 0x15, {0x35075b}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) syz_usb_connect(0x1, 0x51, &(0x7f0000000080)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880f020000000009050300000000000009050cfeffff01060209050f000000000000090507"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 2.520771484s ago: executing program 3 (id=4271): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073", 0xac}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1b98e", 0xbc}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d", 0xb1}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc", 0x69}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.169547345s ago: executing program 4 (id=4272): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86", 0xdf}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1b98e", 0xbc}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52", 0xc5}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b919", 0xe3}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.15313256s ago: executing program 3 (id=4273): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000b1e000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0xe1}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4c}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xc0000000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.902800709s ago: executing program 4 (id=4274): socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="38b30800ffffffffffff08021100000108021100000066000802110000011c008180080211000000ffffffffffff79006333a2155c1f90825c4975fc964d1006163563beb5e1f132fb6158e7501efe8239b2bf054ebbea2c13a1f07b5212f7171416c871bbe8d16e584644fcde"], 0x12e) r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4036, 0x4) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffd) syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x2, 0xc, 0xa4, 0x0, 0x4, 0x0, 0x9, 0x8, 0x0, 0x24, 0x2, 0x20}, 0xe) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) lsm_set_self_attr(0x64, &(0x7f0000000040)=ANY=[], 0x30, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x0, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x1d0}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x2c0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x482cea3f2f6f7be4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60}, 0x0) 1.713541005s ago: executing program 1 (id=4275): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$MSR(&(0x7f0000000000), 0x6, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000480)={0x5, 0x0, [{0xa, 0xffffffff, 0x1, 0xffffff89, 0x800, 0x6, 0x48d4}, {0x8000000e, 0x8, 0x1, 0x3ff, 0x7ffffdff, 0x8005, 0xffff}, {0x80000019, 0x2, 0x1, 0x7, 0xdf1, 0x2, 0x80000001}, {0x80000000, 0x100, 0x4, 0x6, 0x3, 0x2, 0x3}, {0x80000001, 0x2, 0xb, 0xfffffff7, 0xfffffff9, 0xff, 0x6}]}) fstat(r0, &(0x7f000000bd40)) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)={0x5c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x5, 0x4, 0xc}]}}}]}}]}, 0x5c}}, 0x110) 1.350155132s ago: executing program 1 (id=4276): socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000008000000070000000300000001"], 0x50) socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$key(0xf, 0x3, 0x2) socket(0x40000000015, 0x5, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r1], &(0x7f00000001c0)=[0x2], &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7f}) 1.158430148s ago: executing program 1 (id=4277): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8e, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) 0s ago: executing program 0 (id=4278): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) getresuid(&(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="44d390f4ff000066ba4000b068eec4c22d933ce503000000b9bc0a0000b871000000ba000000000f3064450f01bffe5c00000f206466410f38805700c744240000580000c74424029e1a0000c7442406000000000f011424440f01b4e8dda90000231e", 0x63}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/softnet_stat\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000240)='4', 0x1}, {&(0x7f0000000040)="a0", 0x1}], 0x2) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x70}, 0x0) readv(r3, &(0x7f0000001440)=[{0x0}, {0x0, 0x61}], 0x2) kernel console output (not intermixed with test programs): ][T11026] usb 6-1: USB disconnect, device number 26 [ 844.619715][ C0] appletouch 6-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 844.630217][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.692817][ T9] usb 1-1: Product: syz [ 844.720609][ T9] usb 1-1: Manufacturer: syz [ 844.746494][ T9] usb 1-1: SerialNumber: syz [ 844.797452][T11026] appletouch 6-1:1.0: input: appletouch disconnected [ 845.003666][ T10] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 845.045973][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 845.067616][ T9] usb 1-1: MIDIStreaming interface descriptor not found [ 845.186543][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 845.243618][ T9] usb 1-1: USB disconnect, device number 38 [ 845.257703][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 845.306335][T18196] FAULT_INJECTION: forcing a failure. [ 845.306335][T18196] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 845.326110][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 845.366784][T18196] CPU: 0 UID: 0 PID: 18196 Comm: syz.5.3776 Not tainted syzkaller #0 PREEMPT(full) [ 845.366802][T18196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 845.366809][T18196] Call Trace: [ 845.366814][T18196] [ 845.366819][T18196] dump_stack_lvl+0x100/0x190 [ 845.366838][T18196] should_fail_ex.cold+0x5/0xa [ 845.366853][T18196] _copy_from_user+0x2e/0xd0 [ 845.366870][T18196] copy_msghdr_from_user+0x9f/0x4c0 [ 845.366891][T18196] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 845.366917][T18196] ___sys_sendmsg+0x106/0x1e0 [ 845.366936][T18196] ? __pfx____sys_sendmsg+0x10/0x10 [ 845.366954][T18196] ? __lock_acquire+0x49f/0x1a40 [ 845.366969][T18196] ? get_pid_task+0x106/0x250 [ 845.367004][T18196] __sys_sendmsg+0x160/0x210 [ 845.367020][T18196] ? __pfx___sys_sendmsg+0x10/0x10 [ 845.367042][T18196] do_syscall_64+0x115/0x870 [ 845.367056][T18196] ? clear_bhb_loop+0x40/0x90 [ 845.367071][T18196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.367083][T18196] RIP: 0033:0x7f255cd9de99 [ 845.367093][T18196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 845.367105][T18196] RSP: 002b:00007f255dcdd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 845.367116][T18196] RAX: ffffffffffffffda RBX: 00007f255d025fa0 RCX: 00007f255cd9de99 [ 845.367124][T18196] RDX: 0000000020000010 RSI: 0000200000001080 RDI: 0000000000000003 [ 845.367131][T18196] RBP: 00007f255dcdd090 R08: 0000000000000000 R09: 0000000000000000 [ 845.367137][T18196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 845.367144][T18196] R13: 00007f255d026038 R14: 00007f255d025fa0 R15: 00007ffddfa35918 [ 845.367160][T18196] [ 845.371585][ T10] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 845.724001][T16331] udevd[16331]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 845.789208][T18205] FAULT_INJECTION: forcing a failure. [ 845.789208][T18205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 845.841402][T18205] CPU: 0 UID: 0 PID: 18205 Comm: syz.4.3779 Not tainted syzkaller #0 PREEMPT(full) [ 845.841419][T18205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 845.841426][T18205] Call Trace: [ 845.841430][T18205] [ 845.841435][T18205] dump_stack_lvl+0x100/0x190 [ 845.841454][T18205] should_fail_ex.cold+0x5/0xa [ 845.841470][T18205] _copy_from_user+0x2e/0xd0 [ 845.841487][T18205] __sys_bpf+0x2f5/0x4e80 [ 845.841504][T18205] ? __pfx___sys_bpf+0x10/0x10 [ 845.841515][T18205] ? find_held_lock+0x2b/0x80 [ 845.841534][T18205] ? get_pid_task+0xfc/0x250 [ 845.841553][T18205] ? get_pid_task+0xfc/0x250 [ 845.841576][T18205] ? find_held_lock+0x2b/0x80 [ 845.841598][T18205] ? rcu_read_lock_any_held+0x6a/0xa0 [ 845.841610][T18205] ? find_held_lock+0x2b/0x80 [ 845.841628][T18205] ? ksys_write+0x190/0x250 [ 845.841646][T18205] ? ksys_write+0x190/0x250 [ 845.841683][T18205] ? fput+0x79/0x100 [ 845.841699][T18205] ? __x64_sys_bpf+0xce/0x140 [ 845.841711][T18205] __x64_sys_bpf+0xce/0x140 [ 845.841724][T18205] ? do_syscall_64+0x90/0x870 [ 845.841738][T18205] do_syscall_64+0x115/0x870 [ 845.841751][T18205] ? clear_bhb_loop+0x40/0x90 [ 845.841765][T18205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.841777][T18205] RIP: 0033:0x7ff64439de99 [ 845.841787][T18205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 845.841798][T18205] RSP: 002b:00007ff6452f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 845.841810][T18205] RAX: ffffffffffffffda RBX: 00007ff644625fa0 RCX: 00007ff64439de99 [ 845.841818][T18205] RDX: 0000000000000020 RSI: 00002000000000c0 RDI: 000000000000001c [ 845.841825][T18205] RBP: 00007ff6452f3090 R08: 0000000000000000 R09: 0000000000000000 [ 845.841832][T18205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 845.841839][T18205] R13: 00007ff644626038 R14: 00007ff644625fa0 R15: 00007ffd29a78af8 [ 845.841854][T18205] [ 846.166285][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.174411][ T10] usb 4-1: Product: syz [ 846.178567][ T10] usb 4-1: Manufacturer: syz [ 846.183129][ T10] usb 4-1: SerialNumber: syz [ 846.191496][ T10] usb 4-1: config 0 descriptor?? [ 846.198822][T18183] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 846.206069][T18183] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 846.214226][ T10] usb 4-1: ucan: probing device on interface #0 [ 846.323642][ T29] audit: type=1400 audit(1785339541.645:871): avc: denied { ioctl } for pid=18217 comm="syz.4.3783" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 846.355596][T18218] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 846.428414][T18183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 846.443048][T18183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 846.483655][T18183] tls_set_device_offload: netdev not found [ 846.723115][T18229] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3788'. [ 846.732843][ T10] usb 4-1: ucan: device reported invalid device info [ 846.741987][ T10] usb 4-1: ucan: probe failed; try to update the device firmware [ 847.639860][ T10] usb 4-1: USB disconnect, device number 45 [ 847.892135][T18228] misc userio: Invalid payload size [ 847.912216][T18237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3790'. [ 847.995781][T18240] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3791'. [ 848.227182][T18251] input: syz0 as /devices/virtual/input/input7 [ 849.251941][T18259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3797'. [ 849.309811][ T29] audit: type=1400 audit(1785339544.525:872): avc: denied { getopt } for pid=18254 comm="syz.3.3797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 849.340356][ T10] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 849.648350][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 849.678717][ T10] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 849.709842][ T10] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 849.781828][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 849.805369][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 849.833952][ T10] usb 6-1: Product: syz [ 849.843838][ T10] usb 6-1: Manufacturer: syz [ 849.859421][T18247] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 849.878083][ T10] usb_debug 6-1:1.0: debug converter detected [ 849.895446][ T10] usb 6-1: debug converter now attached to ttyUSB0 [ 849.987386][T17617] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 850.063977][ T10] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 850.110520][ T29] audit: type=1400 audit(1785339545.435:873): avc: denied { getopt } for pid=18276 comm="syz.0.3803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 850.133720][T18277] Bluetooth: MGMT ver 1.23 [ 850.143540][ T9] usb 6-1: USB disconnect, device number 27 [ 850.158786][T17617] usb 4-1: Using ep0 maxpacket: 16 [ 850.176050][T17617] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 850.199742][ T9] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 850.215419][T17617] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 850.226116][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 850.233891][ T9] usb_debug 6-1:1.0: device disconnected [ 850.241706][T17617] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 850.255387][ T10] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 850.271289][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.280189][T17617] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 850.291167][ T10] usb 5-1: Product: syz [ 850.301806][ T10] usb 5-1: Manufacturer: syz [ 850.311695][T17617] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 850.324053][ T10] usb 5-1: SerialNumber: syz [ 850.333732][ T10] usb 5-1: config 0 descriptor?? [ 850.339127][T17617] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.347886][T17617] usb 4-1: Product: syz [ 850.352322][T17617] usb 4-1: Manufacturer: syz [ 850.359689][ T10] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 850.369829][T17617] usb 4-1: SerialNumber: syz [ 850.383934][T17617] usb 4-1: config 0 descriptor?? [ 850.390384][T18268] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 850.400346][T17617] port100 4-1:0.0: NFC: Could not get supported command types [ 850.453242][T11026] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 850.593553][T11026] usb 1-1: device descriptor read/64, error -71 [ 850.853972][T11026] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 850.984959][T11026] usb 1-1: device descriptor read/64, error -71 [ 851.073864][T17617] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 851.098225][T18290] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3807'. [ 851.108043][T11026] usb usb1-port1: attempt power cycle [ 851.244636][T17617] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 851.253396][T17617] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 851.264177][T17617] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 851.273893][T17617] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 851.284246][T17617] usb 6-1: Manufacturer: syz [ 851.290462][T17617] usb 6-1: config 0 descriptor?? [ 851.353267][T17617] rc_core: IR keymap rc-hauppauge not found [ 851.359364][T17617] Registered IR keymap rc-empty [ 851.368758][T17617] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 851.385409][T17617] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input8 [ 851.417003][T16072] Bluetooth: hci3: command 0x0406 tx timeout [ 851.483586][T11026] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 851.514115][T11026] usb 1-1: device descriptor read/8, error -71 [ 851.635532][ T10] gspca_sonixj: reg_w1 err -71 [ 851.683388][ T10] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 851.697977][ T10] usb 5-1: USB disconnect, device number 38 [ 851.730837][ C0] igorplugusb 6-1:0.0: receive overflow invalid: 43 [ 851.763257][T11026] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 851.783681][T11026] usb 1-1: device descriptor read/8, error -71 [ 851.893476][T11026] usb usb1-port1: unable to enumerate USB device [ 851.952415][T18284] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3805'. [ 851.987376][T11026] usb 6-1: USB disconnect, device number 28 [ 852.339821][T18302] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3810'. [ 852.350021][T18304] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3810'. [ 852.422258][T18306] FAULT_INJECTION: forcing a failure. [ 852.422258][T18306] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 852.439603][T18306] CPU: 0 UID: 0 PID: 18306 Comm: syz.4.3811 Not tainted syzkaller #0 PREEMPT(full) [ 852.439620][T18306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 852.439627][T18306] Call Trace: [ 852.439632][T18306] [ 852.439637][T18306] dump_stack_lvl+0x100/0x190 [ 852.439656][T18306] should_fail_ex.cold+0x5/0xa [ 852.439671][T18306] _copy_from_user+0x2e/0xd0 [ 852.439688][T18306] copy_msghdr_from_user+0x9f/0x4c0 [ 852.439709][T18306] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 852.439735][T18306] ___sys_sendmsg+0x106/0x1e0 [ 852.439755][T18306] ? __pfx____sys_sendmsg+0x10/0x10 [ 852.439772][T18306] ? __lock_acquire+0x49f/0x1a40 [ 852.439788][T18306] ? get_pid_task+0x106/0x250 [ 852.439825][T18306] __sys_sendmsg+0x160/0x210 [ 852.439841][T18306] ? __pfx___sys_sendmsg+0x10/0x10 [ 852.439863][T18306] do_syscall_64+0x115/0x870 [ 852.439876][T18306] ? clear_bhb_loop+0x40/0x90 [ 852.439891][T18306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.439903][T18306] RIP: 0033:0x7ff64439de99 [ 852.439914][T18306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 852.439925][T18306] RSP: 002b:00007ff6452f3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 852.439937][T18306] RAX: ffffffffffffffda RBX: 00007ff644625fa0 RCX: 00007ff64439de99 [ 852.439945][T18306] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000004 [ 852.439952][T18306] RBP: 00007ff6452f3090 R08: 0000000000000000 R09: 0000000000000000 [ 852.439959][T18306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 852.439966][T18306] R13: 00007ff644626038 R14: 00007ff644625fa0 R15: 00007ffd29a78af8 [ 852.439981][T18306] [ 852.662163][T17617] usb 4-1: USB disconnect, device number 46 [ 852.802990][ T29] audit: type=1400 audit(1785339548.085:874): avc: denied { read } for pid=18307 comm="syz.5.3812" name="file0" dev="tmpfs" ino=1868 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 852.832319][T18308] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60008 sclass=netlink_route_socket pid=18308 comm=syz.5.3812 [ 852.929980][T18313] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3814'. [ 852.940705][T18313] team0: Unable to change to the same mode the team is in [ 852.991147][T18315] 9p: Bad value for 'wfdno' [ 853.194141][T18322] xt_connbytes: Forcing CT accounting to be enabled [ 853.559238][T18334] FAULT_INJECTION: forcing a failure. [ 853.559238][T18334] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 853.572314][T18334] CPU: 0 UID: 0 PID: 18334 Comm: syz.5.3819 Not tainted syzkaller #0 PREEMPT(full) [ 853.572329][T18334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 853.572337][T18334] Call Trace: [ 853.572342][T18334] [ 853.572347][T18334] dump_stack_lvl+0x100/0x190 [ 853.572366][T18334] should_fail_ex.cold+0x5/0xa [ 853.572382][T18334] _copy_from_user+0x2e/0xd0 [ 853.572400][T18334] __sys_bpf+0x2f5/0x4e80 [ 853.572417][T18334] ? __pfx___sys_bpf+0x10/0x10 [ 853.572428][T18334] ? find_held_lock+0x2b/0x80 [ 853.572447][T18334] ? get_pid_task+0xfc/0x250 [ 853.572466][T18334] ? get_pid_task+0xfc/0x250 [ 853.572489][T18334] ? find_held_lock+0x2b/0x80 [ 853.572511][T18334] ? rcu_read_lock_any_held+0x6a/0xa0 [ 853.572523][T18334] ? find_held_lock+0x2b/0x80 [ 853.572541][T18334] ? ksys_write+0x190/0x250 [ 853.572559][T18334] ? ksys_write+0x190/0x250 [ 853.572588][T18334] ? fput+0x79/0x100 [ 853.572605][T18334] ? __x64_sys_bpf+0xce/0x140 [ 853.572616][T18334] __x64_sys_bpf+0xce/0x140 [ 853.572631][T18334] ? do_syscall_64+0x90/0x870 [ 853.572646][T18334] do_syscall_64+0x115/0x870 [ 853.572659][T18334] ? clear_bhb_loop+0x40/0x90 [ 853.572673][T18334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.572685][T18334] RIP: 0033:0x7f255cd9de99 [ 853.572696][T18334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 853.572707][T18334] RSP: 002b:00007f255dcbc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 853.572719][T18334] RAX: ffffffffffffffda RBX: 00007f255d026090 RCX: 00007f255cd9de99 [ 853.572727][T18334] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 853.572734][T18334] RBP: 00007f255dcbc090 R08: 0000000000000000 R09: 0000000000000000 [ 853.572741][T18334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 853.572750][T18334] R13: 00007f255d026128 R14: 00007f255d026090 R15: 00007ffddfa35918 [ 853.572766][T18334] [ 854.235488][ T10] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 854.299652][ T29] audit: type=1400 audit(1785339549.605:875): avc: denied { getopt } for pid=18340 comm="syz.5.3822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 854.326234][T18341] gtp1: entered promiscuous mode [ 854.357307][T18341] gtp1: entered allmulticast mode [ 854.362972][T18343] FAULT_INJECTION: forcing a failure. [ 854.362972][T18343] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 854.415531][T18341] team0: Port device gtp1 added [ 854.428696][T18343] CPU: 0 UID: 0 PID: 18343 Comm: syz.1.3823 Not tainted syzkaller #0 PREEMPT(full) [ 854.428713][T18343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 854.428721][T18343] Call Trace: [ 854.428725][T18343] [ 854.428730][T18343] dump_stack_lvl+0x100/0x190 [ 854.428749][T18343] should_fail_ex.cold+0x5/0xa [ 854.428764][T18343] _copy_from_user+0x2e/0xd0 [ 854.428782][T18343] __sys_bpf+0x2f5/0x4e80 [ 854.428800][T18343] ? __pfx___sys_bpf+0x10/0x10 [ 854.428811][T18343] ? find_held_lock+0x2b/0x80 [ 854.428830][T18343] ? get_pid_task+0xfc/0x250 [ 854.428849][T18343] ? get_pid_task+0xfc/0x250 [ 854.428872][T18343] ? find_held_lock+0x2b/0x80 [ 854.428894][T18343] ? rcu_read_lock_any_held+0x6a/0xa0 [ 854.428905][T18343] ? find_held_lock+0x2b/0x80 [ 854.428929][T18343] ? ksys_write+0x190/0x250 [ 854.428948][T18343] ? ksys_write+0x190/0x250 [ 854.428978][T18343] ? xfd_validate_state+0x129/0x190 [ 854.428996][T18343] ? __x64_sys_bpf+0xce/0x140 [ 854.429008][T18343] __x64_sys_bpf+0xce/0x140 [ 854.429020][T18343] ? do_syscall_64+0x90/0x870 [ 854.429035][T18343] do_syscall_64+0x115/0x870 [ 854.429047][T18343] ? clear_bhb_loop+0x40/0x90 [ 854.429062][T18343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.429074][T18343] RIP: 0033:0x7fd30f39de99 [ 854.429084][T18343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 854.429096][T18343] RSP: 002b:00007fd310332028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 854.429107][T18343] RAX: ffffffffffffffda RBX: 00007fd30f625fa0 RCX: 00007fd30f39de99 [ 854.429115][T18343] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 854.429122][T18343] RBP: 00007fd310332090 R08: 0000000000000000 R09: 0000000000000000 [ 854.429129][T18343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 854.429136][T18343] R13: 00007fd30f626038 R14: 00007fd30f625fa0 R15: 00007ffddc8e5a58 [ 854.429151][T18343] [ 854.862906][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 854.922840][ T10] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 854.968173][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 855.029522][T18347] FAULT_INJECTION: forcing a failure. [ 855.029522][T18347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 855.063023][T18347] CPU: 0 UID: 0 PID: 18347 Comm: syz.5.3826 Not tainted syzkaller #0 PREEMPT(full) [ 855.063041][T18347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 855.063048][T18347] Call Trace: [ 855.063053][T18347] [ 855.063058][T18347] dump_stack_lvl+0x100/0x190 [ 855.063077][T18347] should_fail_ex.cold+0x5/0xa [ 855.063092][T18347] _copy_from_user+0x2e/0xd0 [ 855.063111][T18347] copy_msghdr_from_user+0x9f/0x4c0 [ 855.063132][T18347] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 855.063158][T18347] ___sys_sendmsg+0x106/0x1e0 [ 855.063178][T18347] ? __pfx____sys_sendmsg+0x10/0x10 [ 855.063195][T18347] ? __lock_acquire+0x49f/0x1a40 [ 855.063211][T18347] ? get_pid_task+0x106/0x250 [ 855.063248][T18347] __sys_sendmsg+0x160/0x210 [ 855.063263][T18347] ? __pfx___sys_sendmsg+0x10/0x10 [ 855.063286][T18347] do_syscall_64+0x115/0x870 [ 855.063300][T18347] ? clear_bhb_loop+0x40/0x90 [ 855.063315][T18347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.063327][T18347] RIP: 0033:0x7f255cd9de99 [ 855.063338][T18347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 855.063349][T18347] RSP: 002b:00007f255dcdd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 855.063362][T18347] RAX: ffffffffffffffda RBX: 00007f255d025fa0 RCX: 00007f255cd9de99 [ 855.063370][T18347] RDX: 0000000020000080 RSI: 0000200000000040 RDI: 0000000000000003 [ 855.063377][T18347] RBP: 00007f255dcdd090 R08: 0000000000000000 R09: 0000000000000000 [ 855.063384][T18347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 855.063391][T18347] R13: 00007f255d026038 R14: 00007f255d025fa0 R15: 00007ffddfa35918 [ 855.063406][T18347] [ 855.352920][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 855.362032][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 855.370050][ T10] usb 1-1: Product: syz [ 855.375438][ T10] usb 1-1: Manufacturer: syz [ 855.384719][T18335] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 855.396364][ T10] usb_debug 1-1:1.0: debug converter detected [ 855.403967][ T10] usb 1-1: debug converter now attached to ttyUSB0 [ 855.664199][ T9] usb 1-1: USB disconnect, device number 43 [ 855.752355][ T9] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 855.798455][ T9] usb_debug 1-1:1.0: device disconnected [ 856.073427][T17617] usb 6-1: new low-speed USB device number 29 using dummy_hcd [ 856.235695][T17617] usb 6-1: unable to get BOS descriptor or descriptor too short [ 856.260887][T17617] usb 6-1: config 6 has an invalid interface number: 146 but max is 0 [ 856.313020][T17617] usb 6-1: config 6 has no interface number 0 [ 856.325568][ T29] audit: type=1400 audit(1785339551.655:876): avc: denied { watch_mount } for pid=18375 comm="syz.1.3834" path="/169" dev="tmpfs" ino=885 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 856.390147][T17617] usb 6-1: string descriptor 0 read error: -22 [ 856.402595][T17617] usb 6-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice=ab.cd [ 856.481381][T17617] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.549214][T17617] usbhid 6-1:6.146: couldn't find an input interrupt endpoint [ 856.771720][T16072] Bluetooth: hci4: unexpected event for opcode 0x1005 [ 856.788799][T17617] usb 6-1: USB disconnect, device number 29 [ 857.069757][T18400] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 857.451815][ T29] audit: type=1400 audit(1785339552.775:877): avc: denied { nlmsg_read } for pid=18408 comm="syz.3.3843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 857.675013][T17617] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 857.864654][T17617] usb 6-1: Using ep0 maxpacket: 16 [ 857.901565][T17617] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 857.950314][T18430] FAULT_INJECTION: forcing a failure. [ 857.950314][T18430] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 857.991387][T17617] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 858.027431][T17617] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 858.046712][T18430] CPU: 0 UID: 0 PID: 18430 Comm: syz.3.3850 Not tainted syzkaller #0 PREEMPT(full) [ 858.046729][T18430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 858.046736][T18430] Call Trace: [ 858.046741][T18430] [ 858.046746][T18430] dump_stack_lvl+0x100/0x190 [ 858.046771][T18430] should_fail_ex.cold+0x5/0xa [ 858.046786][T18430] _copy_from_user+0x2e/0xd0 [ 858.046804][T18430] copy_msghdr_from_user+0x9f/0x4c0 [ 858.046825][T18430] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 858.046851][T18430] ___sys_sendmsg+0x106/0x1e0 [ 858.046871][T18430] ? __pfx____sys_sendmsg+0x10/0x10 [ 858.046888][T18430] ? __lock_acquire+0x49f/0x1a40 [ 858.046903][T18430] ? get_pid_task+0x106/0x250 [ 858.046939][T18430] __sys_sendmsg+0x160/0x210 [ 858.046954][T18430] ? __pfx___sys_sendmsg+0x10/0x10 [ 858.046977][T18430] do_syscall_64+0x115/0x870 [ 858.046991][T18430] ? clear_bhb_loop+0x40/0x90 [ 858.047006][T18430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.047017][T18430] RIP: 0033:0x7fa05ef9de99 [ 858.047028][T18430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 858.047039][T18430] RSP: 002b:00007fa05ff3d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 858.047051][T18430] RAX: ffffffffffffffda RBX: 00007fa05f225fa0 RCX: 00007fa05ef9de99 [ 858.047059][T18430] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 858.047066][T18430] RBP: 00007fa05ff3d090 R08: 0000000000000000 R09: 0000000000000000 [ 858.047073][T18430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 858.047079][T18430] R13: 00007fa05f226038 R14: 00007fa05f225fa0 R15: 00007ffd3404ad68 [ 858.047095][T18430] [ 858.246511][T17617] usb 6-1: Manufacturer: syz [ 858.252578][T17617] usb 6-1: config 0 descriptor?? [ 858.440409][T18436] syzkaller0: entered promiscuous mode [ 858.461146][T16072] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 858.473025][T18436] syzkaller0: entered allmulticast mode [ 858.665658][ T29] audit: type=1400 audit(1785339553.965:878): avc: denied { write } for pid=18446 comm="syz.3.3856" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 858.692356][T18450] macvlan2: entered promiscuous mode [ 858.737899][T18450] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 858.769195][ T29] audit: type=1400 audit(1785339553.965:879): avc: denied { map } for pid=18446 comm="syz.3.3856" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 858.810946][T18450] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 858.874599][T18450] team0: Port device macvlan2 added [ 858.914256][T17617] usb 6-1: USB disconnect, device number 30 [ 858.937896][ T29] audit: type=1800 audit(1785339554.165:880): pid=18443 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.3853" name="/" dev="fuse" ino=6 res=0 errno=0 [ 859.097938][T18460] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.3857'. [ 859.142219][T18465] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18465 comm=syz.1.3859 [ 859.488171][T18481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 859.579564][T16072] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 859.618699][T18491] input: syz1 as /devices/virtual/input/input9 [ 860.495393][T18491] input: failed to attach handler leds to device input9, error: -6 [ 860.546747][T18495] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3865'. [ 860.662774][T16072] Bluetooth: hci5: unexpected event for opcode 0x1005 [ 860.932637][T18509] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.3870'. [ 860.963423][ T5706] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 861.119227][T18518] FAULT_INJECTION: forcing a failure. [ 861.119227][T18518] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 861.165051][ T5706] usb 4-1: unable to get BOS descriptor or descriptor too short [ 861.189297][ T5706] usb 4-1: config 5 has an invalid interface number: 88 but max is 0 [ 861.204066][T18518] CPU: 0 UID: 0 PID: 18518 Comm: syz.5.3873 Not tainted syzkaller #0 PREEMPT(full) [ 861.204083][T18518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 861.204091][T18518] Call Trace: [ 861.204095][T18518] [ 861.204099][T18518] dump_stack_lvl+0x100/0x190 [ 861.204119][T18518] should_fail_ex.cold+0x5/0xa [ 861.204135][T18518] _copy_from_user+0x2e/0xd0 [ 861.204152][T18518] __sys_bpf+0x2f5/0x4e80 [ 861.204169][T18518] ? __pfx___sys_bpf+0x10/0x10 [ 861.204180][T18518] ? find_held_lock+0x2b/0x80 [ 861.204199][T18518] ? get_pid_task+0xfc/0x250 [ 861.204218][T18518] ? get_pid_task+0xfc/0x250 [ 861.204241][T18518] ? find_held_lock+0x2b/0x80 [ 861.204262][T18518] ? rcu_read_lock_any_held+0x6a/0xa0 [ 861.204274][T18518] ? find_held_lock+0x2b/0x80 [ 861.204292][T18518] ? ksys_write+0x190/0x250 [ 861.204310][T18518] ? ksys_write+0x190/0x250 [ 861.204339][T18518] ? fput+0x79/0x100 [ 861.204355][T18518] ? __x64_sys_bpf+0xce/0x140 [ 861.204367][T18518] __x64_sys_bpf+0xce/0x140 [ 861.204379][T18518] ? do_syscall_64+0x90/0x870 [ 861.204394][T18518] do_syscall_64+0x115/0x870 [ 861.204406][T18518] ? clear_bhb_loop+0x40/0x90 [ 861.204421][T18518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.204433][T18518] RIP: 0033:0x7f255cd9de99 [ 861.204444][T18518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 861.204455][T18518] RSP: 002b:00007f255dcdd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 861.204467][T18518] RAX: ffffffffffffffda RBX: 00007f255d025fa0 RCX: 00007f255cd9de99 [ 861.204475][T18518] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 861.204482][T18518] RBP: 00007f255dcdd090 R08: 0000000000000000 R09: 0000000000000000 [ 861.204488][T18518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 861.204495][T18518] R13: 00007f255d026038 R14: 00007f255d025fa0 R15: 00007ffddfa35918 [ 861.204510][T18518] [ 861.439247][ T5706] usb 4-1: config 5 has no interface number 0 [ 861.445387][ T5706] usb 4-1: config 5 interface 88 has no altsetting 0 [ 861.631560][ T5706] usb 4-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=b0.82 [ 861.660577][ T5706] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.671605][ T29] audit: type=1400 audit(1785339556.795:881): avc: denied { name_bind } for pid=18524 comm="syz.5.3876" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 861.700911][T18534] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000006' [ 862.527709][T18535] FAULT_INJECTION: forcing a failure. [ 862.527709][T18535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 862.542041][T18535] CPU: 0 UID: 0 PID: 18535 Comm: syz.5.3878 Not tainted syzkaller #0 PREEMPT(full) [ 862.542057][T18535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 862.542064][T18535] Call Trace: [ 862.542068][T18535] [ 862.542072][T18535] dump_stack_lvl+0x100/0x190 [ 862.542092][T18535] should_fail_ex.cold+0x5/0xa [ 862.542108][T18535] _copy_to_user+0x32/0xd0 [ 862.542126][T18535] simple_read_from_buffer+0xcb/0x170 [ 862.542139][T18535] proc_fail_nth_read+0x1af/0x230 [ 862.542158][T18535] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 862.542177][T18535] ? rw_verify_area+0xce/0x6d0 [ 862.542193][T18535] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 862.542211][T18535] vfs_read+0x1e4/0xb40 [ 862.542231][T18535] ? __pfx_vfs_read+0x10/0x10 [ 862.542248][T18535] ? __fget_files+0x215/0x3d0 [ 862.542264][T18535] ? __fget_files+0x21f/0x3d0 [ 862.542280][T18535] ksys_read+0x12a/0x250 [ 862.542298][T18535] ? __pfx_ksys_read+0x10/0x10 [ 862.542320][T18535] do_syscall_64+0x115/0x870 [ 862.542333][T18535] ? clear_bhb_loop+0x40/0x90 [ 862.542354][T18535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.542366][T18535] RIP: 0033:0x7f255cd5e6ce [ 862.542377][T18535] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 862.542389][T18535] RSP: 002b:00007f255dcbbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 862.542400][T18535] RAX: ffffffffffffffda RBX: 00007f255dcbc6c0 RCX: 00007f255cd5e6ce [ 862.542408][T18535] RDX: 000000000000000f RSI: 00007f255dcbc0a0 RDI: 0000000000000045 [ 862.542415][T18535] RBP: 00007f255dcbc090 R08: 0000000000000000 R09: 0000000000000000 [ 862.542422][T18535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 862.542429][T18535] R13: 00007f255d026128 R14: 00007f255d026090 R15: 00007ffddfa35918 [ 862.542445][T18535] [ 862.750181][ T5706] usb 4-1: Product: syz [ 862.754445][ T5706] usb 4-1: Manufacturer: syz [ 862.759022][ T5706] usb 4-1: SerialNumber: syz [ 862.778081][ T5706] usb 4-1: can't set config #5, error -71 [ 862.785247][ T5706] usb 4-1: USB disconnect, device number 47 [ 863.168856][T18532] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[16071] was attempted by " [ 863.769050][T18559] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.3882'. [ 863.992233][ T29] audit: type=1400 audit(1785339559.315:882): avc: denied { bind } for pid=18563 comm="syz.1.3890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 864.098115][T18561] team0: Port device vlan2 added [ 864.122969][ T29] audit: type=1400 audit(1785339559.375:883): avc: denied { ioctl } for pid=18563 comm="syz.1.3890" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x5512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 864.172694][T18561] netlink: 'syz.4.3888': attribute type 4 has an invalid length. [ 864.234107][T18572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 864.509161][ T29] audit: type=1400 audit(1785339559.835:884): avc: denied { write } for pid=18580 comm="syz.5.3895" name="g1" dev="configfs" ino=39693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 865.081092][ T29] audit: type=1400 audit(1785339560.395:885): avc: denied { mounton } for pid=18601 comm="syz.4.3904" path="/151/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 865.420537][ T29] audit: type=1400 audit(1785339560.735:886): avc: denied { bind } for pid=18601 comm="syz.4.3904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 865.565574][T18623] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 865.576632][ T29] audit: type=1400 audit(1785339560.745:887): avc: denied { listen } for pid=18601 comm="syz.4.3904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 866.013235][ T9] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 866.039849][ T29] audit: type=1400 audit(1785339561.365:888): avc: denied { map } for pid=18638 comm="syz.4.3917" path="socket:[105185]" dev="sockfs" ino=105185 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 866.244536][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 867.205340][ T29] audit: type=1400 audit(1785339562.525:889): avc: denied { map } for pid=18642 comm="syz.1.3918" path="socket:[105197]" dev="sockfs" ino=105197 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 867.261689][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 867.317625][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 867.373888][ T29] audit: type=1400 audit(1785339562.565:890): avc: denied { execute_no_trans } for pid=18624 comm="syz.5.3912" path="/474/file0" dev="tmpfs" ino=2465 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 867.421102][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 867.452754][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 867.483025][ T9] usb 1-1: Product: syz [ 867.499812][ T9] usb 1-1: Manufacturer: syz [ 867.521849][T18631] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 867.540594][ T9] usb_debug 1-1:1.0: debug converter detected [ 867.579753][ T9] usb 1-1: debug converter now attached to ttyUSB0 [ 867.666592][ T5625] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 867.744814][ T9] usb 1-1: USB disconnect, device number 44 [ 867.775128][ T9] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 867.810883][ T9] usb_debug 1-1:1.0: device disconnected [ 867.904879][T18661] syzkaller0: entered promiscuous mode [ 867.910581][T18661] syzkaller0: entered allmulticast mode [ 868.379527][T18671] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 868.387717][T18675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 868.468756][T18679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 869.287438][T18698] netlink: 'syz.3.3936': attribute type 4 has an invalid length. [ 869.315096][T16072] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 869.321988][ T5625] Bluetooth: hci1: command 0x1003 tx timeout [ 869.754650][ T29] audit: type=1400 audit(1785339565.085:891): avc: denied { read } for pid=18707 comm="syz.1.3939" path="socket:[105930]" dev="sockfs" ino=105930 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 869.800976][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.815279][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.072931][T14327] dvb-usb: did not find the firmware file 'dvb-usb-s660.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 870.169547][T18698] netlink: 'syz.3.3936': attribute type 1 has an invalid length. [ 870.215856][T14327] usb 2-1: USB disconnect, device number 12 [ 870.522063][T18735] futex_wake_op: syz.5.3944 tries to shift op by -1; fix this program [ 870.543710][T18737] FAULT_INJECTION: forcing a failure. [ 870.543710][T18737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 870.595094][T14327] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 870.633572][T18737] CPU: 0 UID: 0 PID: 18737 Comm: syz.0.3946 Not tainted syzkaller #0 PREEMPT(full) [ 870.633590][T18737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 870.633598][T18737] Call Trace: [ 870.633602][T18737] [ 870.633607][T18737] dump_stack_lvl+0x100/0x190 [ 870.633626][T18737] should_fail_ex.cold+0x5/0xa [ 870.633641][T18737] _copy_from_user+0x2e/0xd0 [ 870.633659][T18737] copy_msghdr_from_user+0x9f/0x4c0 [ 870.633679][T18737] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 870.633706][T18737] ___sys_sendmsg+0x106/0x1e0 [ 870.633725][T18737] ? __pfx____sys_sendmsg+0x10/0x10 [ 870.633743][T18737] ? __lock_acquire+0x49f/0x1a40 [ 870.633758][T18737] ? get_pid_task+0x106/0x250 [ 870.633796][T18737] __sys_sendmsg+0x160/0x210 [ 870.633811][T18737] ? __pfx___sys_sendmsg+0x10/0x10 [ 870.633834][T18737] do_syscall_64+0x115/0x870 [ 870.633848][T18737] ? clear_bhb_loop+0x40/0x90 [ 870.633863][T18737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.633875][T18737] RIP: 0033:0x7f5465b9de99 [ 870.633886][T18737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 870.633897][T18737] RSP: 002b:00007f5466b1f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 870.633912][T18737] RAX: ffffffffffffffda RBX: 00007f5465e25fa0 RCX: 00007f5465b9de99 [ 870.633920][T18737] RDX: 0000000004000841 RSI: 0000200000000940 RDI: 0000000000000003 [ 870.633927][T18737] RBP: 00007f5466b1f090 R08: 0000000000000000 R09: 0000000000000000 [ 870.633934][T18737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 870.633941][T18737] R13: 00007f5465e26038 R14: 00007f5465e25fa0 R15: 00007ffd097b5998 [ 870.633956][T18737] [ 870.652628][T18739] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3947'. [ 870.662074][T18739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3947'. [ 870.783357][T14327] usb 2-1: device descriptor read/64, error -71 [ 870.939879][ T29] audit: type=1400 audit(1785339566.265:892): avc: denied { write } for pid=18745 comm="syz.4.3950" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 871.027412][T14327] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 871.153220][T14327] usb 2-1: device descriptor read/64, error -71 [ 871.189229][T18753] syzkaller0: entered promiscuous mode [ 871.189245][T18753] syzkaller0: entered allmulticast mode [ 871.266397][T14327] usb usb2-port1: attempt power cycle [ 871.603370][T14327] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 871.623957][T14327] usb 2-1: device descriptor read/8, error -71 [ 871.713278][T16072] Bluetooth: hci3: command 0x0406 tx timeout [ 871.864570][T14327] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 871.888568][T14327] usb 2-1: device descriptor read/8, error -71 [ 871.994837][T14327] usb usb2-port1: unable to enumerate USB device [ 872.436534][ T29] audit: type=1326 audit(1785339567.765:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18791 comm="syz.3.3968" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa05ef9de99 code=0x0 [ 873.924281][T14327] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 874.094207][T18814] xt_CT: You must specify a L4 protocol and not use inversions on it [ 874.126496][ T5625] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 874.449961][ T29] audit: type=1400 audit(1785339569.775:894): avc: denied { mount } for pid=18818 comm="syz.3.3976" name="/" dev="rpc_pipefs" ino=106993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 874.868688][T18827] FAULT_INJECTION: forcing a failure. [ 874.868688][T18827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 874.932766][T18827] CPU: 0 UID: 0 PID: 18827 Comm: syz.0.3978 Not tainted syzkaller #0 PREEMPT(full) [ 874.932783][T18827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 874.932791][T18827] Call Trace: [ 874.932795][T18827] [ 874.932801][T18827] dump_stack_lvl+0x100/0x190 [ 874.932820][T18827] should_fail_ex.cold+0x5/0xa [ 874.932836][T18827] _copy_to_user+0x32/0xd0 [ 874.932854][T18827] simple_read_from_buffer+0xcb/0x170 [ 874.932870][T18827] proc_fail_nth_read+0x1af/0x230 [ 874.932889][T18827] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 874.932908][T18827] ? rw_verify_area+0xce/0x6d0 [ 874.932924][T18827] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 874.932942][T18827] vfs_read+0x1e4/0xb40 [ 874.932962][T18827] ? __pfx_vfs_read+0x10/0x10 [ 874.932979][T18827] ? __fget_files+0x215/0x3d0 [ 874.932995][T18827] ? __fget_files+0x21f/0x3d0 [ 874.933011][T18827] ksys_read+0x12a/0x250 [ 874.933029][T18827] ? __pfx_ksys_read+0x10/0x10 [ 874.933051][T18827] do_syscall_64+0x115/0x870 [ 874.933064][T18827] ? clear_bhb_loop+0x40/0x90 [ 874.933079][T18827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.933092][T18827] RIP: 0033:0x7f5465b5e6ce [ 874.933108][T18827] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 874.933120][T18827] RSP: 002b:00007f5466b1efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 874.933132][T18827] RAX: ffffffffffffffda RBX: 00007f5466b1f6c0 RCX: 00007f5465b5e6ce [ 874.933140][T18827] RDX: 000000000000000f RSI: 00007f5466b1f0a0 RDI: 0000000000000007 [ 874.933147][T18827] RBP: 00007f5466b1f090 R08: 0000000000000000 R09: 0000000000000000 [ 874.933154][T18827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 874.933161][T18827] R13: 00007f5465e26038 R14: 00007f5465e25fa0 R15: 00007ffd097b5998 [ 874.933176][T18827] [ 875.318317][T14327] usb 2-1: unable to get BOS descriptor or descriptor too short [ 875.345604][T14327] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 875.362802][T14327] usb 2-1: can't read configurations, error -71 [ 876.517923][T16072] Bluetooth: hci2: command 0x0406 tx timeout [ 876.569965][T14327] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 876.705667][T14327] usb 2-1: device descriptor read/64, error -71 [ 876.944464][T14327] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 877.084750][T14327] usb 2-1: device descriptor read/64, error -71 [ 877.194629][T14327] usb usb2-port1: attempt power cycle [ 877.428105][ T29] audit: type=1400 audit(1785339572.755:895): avc: denied { unmount } for pid=15497 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 877.536437][T14327] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 877.585949][T14327] usb 2-1: device descriptor read/8, error -71 [ 877.952938][ T29] audit: type=1400 audit(1785339573.275:896): avc: denied { connect } for pid=18852 comm="syz.5.3986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 877.985588][T14327] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 878.057727][T14327] usb 2-1: device descriptor read/8, error -71 [ 878.141592][ T29] audit: type=1400 audit(1785339573.465:897): avc: denied { getopt } for pid=18864 comm="syz.4.3989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 878.194560][ T5616] Bluetooth: hci3: command 0x0406 tx timeout [ 878.206769][T14327] usb usb2-port1: unable to enumerate USB device [ 878.304632][ T29] audit: type=1400 audit(1785339573.615:898): avc: denied { remount } for pid=18852 comm="syz.5.3986" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 878.606130][T18889] FAULT_INJECTION: forcing a failure. [ 878.606130][T18889] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 878.659304][T18889] CPU: 0 UID: 0 PID: 18889 Comm: syz.0.3996 Not tainted syzkaller #0 PREEMPT(full) [ 878.659322][T18889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 878.659330][T18889] Call Trace: [ 878.659334][T18889] [ 878.659338][T18889] dump_stack_lvl+0x100/0x190 [ 878.659360][T18889] should_fail_ex.cold+0x5/0xa [ 878.659376][T18889] _copy_from_user+0x2e/0xd0 [ 878.659394][T18889] copy_msghdr_from_user+0x9f/0x4c0 [ 878.659414][T18889] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 878.659440][T18889] ___sys_sendmsg+0x106/0x1e0 [ 878.659460][T18889] ? __pfx____sys_sendmsg+0x10/0x10 [ 878.659477][T18889] ? __lock_acquire+0x49f/0x1a40 [ 878.659492][T18889] ? get_pid_task+0x106/0x250 [ 878.659528][T18889] __sys_sendmsg+0x160/0x210 [ 878.659544][T18889] ? __pfx___sys_sendmsg+0x10/0x10 [ 878.659566][T18889] do_syscall_64+0x115/0x870 [ 878.659580][T18889] ? clear_bhb_loop+0x40/0x90 [ 878.659595][T18889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.659607][T18889] RIP: 0033:0x7f5465b9de99 [ 878.659617][T18889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 878.659628][T18889] RSP: 002b:00007f5466b1f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 878.659640][T18889] RAX: ffffffffffffffda RBX: 00007f5465e25fa0 RCX: 00007f5465b9de99 [ 878.659648][T18889] RDX: 0000000004000080 RSI: 0000200000000000 RDI: 0000000000000003 [ 878.659655][T18889] RBP: 00007f5466b1f090 R08: 0000000000000000 R09: 0000000000000000 [ 878.659662][T18889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 878.659669][T18889] R13: 00007f5465e26038 R14: 00007f5465e25fa0 R15: 00007ffd097b5998 [ 878.659684][T18889] [ 879.084680][ T9] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 879.293222][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 879.304429][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 879.312592][ T9] usb 5-1: config 0 has no interface number 0 [ 879.324676][ T9] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 879.456318][ T9] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 879.502697][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.551532][ T5625] Bluetooth: hci4: unexpected event for opcode 0x1005 [ 879.569618][ T9] usb 5-1: config 0 descriptor?? [ 879.686438][ T9] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 879.828046][T18881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 879.888593][T18881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 879.935575][T18880] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3994'. [ 879.957176][T18918] tipc: Started in network mode [ 879.972109][T18918] tipc: Node identity be00da612fdd, cluster identity 4711 [ 879.981540][T18881] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3994'. [ 880.008991][T18918] tipc: Enabled bearer , priority 0 [ 880.045289][T18919] syzkaller0: entered promiscuous mode [ 880.071956][T18919] syzkaller0: entered allmulticast mode [ 880.133646][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 880.167306][T18918] tipc: Resetting bearer [ 880.207706][T18917] tipc: Resetting bearer [ 880.278691][T18917] tipc: Disabling bearer [ 880.285341][ T9] usb 2-1: device descriptor read/64, error -71 [ 880.307194][T17617] usb 5-1: USB disconnect, device number 39 [ 880.768380][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 880.903471][ T9] usb 2-1: device descriptor read/64, error -71 [ 880.933290][T17617] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 881.023439][ T9] usb usb2-port1: attempt power cycle [ 881.099513][T17617] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 881.120586][T17617] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 881.161118][T17617] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 881.202040][T17617] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.238356][ T29] audit: type=1400 audit(1785339576.565:899): avc: denied { write } for pid=18940 comm="syz.0.4015" laddr=fe80::806d:e7ff:fead:16ac lport=45610 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 881.265506][T17617] usb 5-1: config 0 descriptor?? [ 881.279703][ T5625] Bluetooth: hci4: unexpected event for opcode 0x1005 [ 881.296658][T17617] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 881.392569][T17617] dvb-usb: bulk message failed: -22 (3/0) [ 881.414272][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 881.459272][ T29] audit: type=1400 audit(1785339576.595:900): avc: denied { map } for pid=18940 comm="syz.0.4015" path="socket:[108038]" dev="sockfs" ino=108038 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 881.459303][ T29] audit: type=1400 audit(1785339576.595:901): avc: denied { accept } for pid=18940 comm="syz.0.4015" path="socket:[108038]" dev="sockfs" ino=108038 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 881.467035][ T9] usb 2-1: device descriptor read/8, error -71 [ 881.528384][T17617] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 881.535606][T17617] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 881.535649][T17617] usb 5-1: media controller created [ 881.536957][T17617] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 881.615883][T18950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 881.616152][T18950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 881.678581][T17617] dvb-usb: bulk message failed: -22 (6/0) [ 881.678693][T17617] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 881.684452][T17617] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input10 [ 881.689660][T18955] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4019'. [ 881.689676][T18955] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 881.694128][T17617] dvb-usb: schedule remote query interval to 150 msecs. [ 881.694141][T17617] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 881.724579][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 881.749287][ T9] usb 2-1: device descriptor read/8, error -71 [ 881.774108][T18957] FAULT_INJECTION: forcing a failure. [ 881.774108][T18957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 881.774130][T18957] CPU: 0 UID: 60928 PID: 18957 Comm: syz.3.4020 Not tainted syzkaller #0 PREEMPT(full) [ 881.774145][T18957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 881.774152][T18957] Call Trace: [ 881.774156][T18957] [ 881.774160][T18957] dump_stack_lvl+0x100/0x190 [ 881.774180][T18957] should_fail_ex.cold+0x5/0xa [ 881.774195][T18957] _copy_to_user+0x32/0xd0 [ 881.774213][T18957] simple_read_from_buffer+0xcb/0x170 [ 881.774228][T18957] proc_fail_nth_read+0x1af/0x230 [ 881.774247][T18957] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 881.774266][T18957] ? rw_verify_area+0xce/0x6d0 [ 881.774283][T18957] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 881.774301][T18957] vfs_read+0x1e4/0xb40 [ 881.774321][T18957] ? __pfx_vfs_read+0x10/0x10 [ 881.774338][T18957] ? __fget_files+0x215/0x3d0 [ 881.774354][T18957] ? __fget_files+0x21f/0x3d0 [ 881.774370][T18957] ksys_read+0x12a/0x250 [ 881.774388][T18957] ? __pfx_ksys_read+0x10/0x10 [ 881.774410][T18957] do_syscall_64+0x115/0x870 [ 881.774423][T18957] ? clear_bhb_loop+0x40/0x90 [ 881.774439][T18957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.774451][T18957] RIP: 0033:0x7fa05ef5e6ce [ 881.774461][T18957] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 881.774472][T18957] RSP: 002b:00007fa05ff3cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 881.774483][T18957] RAX: ffffffffffffffda RBX: 00007fa05ff3d6c0 RCX: 00007fa05ef5e6ce [ 881.774491][T18957] RDX: 000000000000000f RSI: 00007fa05ff3d0a0 RDI: 0000000000000004 [ 881.774498][T18957] RBP: 00007fa05ff3d090 R08: 0000000000000000 R09: 0000000000000000 [ 881.774505][T18957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 881.774512][T18957] R13: 00007fa05f226038 R14: 00007fa05f225fa0 R15: 00007ffd3404ad68 [ 881.774528][T18957] [ 881.855738][ T9] usb usb2-port1: unable to enumerate USB device [ 881.856565][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 881.856617][ T9] dvb-usb: error while querying for an remote control event. [ 881.882611][ T29] audit: type=1400 audit(1785339577.205:902): avc: denied { read } for pid=18944 comm="syz.5.4016" name="buffer_size_kb" dev="tracefs" ino=1392 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 882.013816][T17617] dvb-usb: bulk message failed: -22 (1/0) [ 882.013836][T17617] dvb-usb: error while querying for an remote control event. [ 882.173404][T17617] dvb-usb: bulk message failed: -22 (1/0) [ 882.173424][T17617] dvb-usb: error while querying for an remote control event. [ 882.336910][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 882.336931][ T9] dvb-usb: error while querying for an remote control event. [ 882.469906][ T5625] Bluetooth: hci4: unexpected event for opcode 0x1005 [ 882.493254][ T5715] dvb-usb: bulk message failed: -22 (1/0) [ 882.493274][ T5715] dvb-usb: error while querying for an remote control event. [ 882.493309][T17617] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 882.655740][ T5715] dvb-usb: bulk message failed: -22 (1/0) [ 882.655760][ T5715] dvb-usb: error while querying for an remote control event. [ 882.661438][T17617] usb 4-1: Using ep0 maxpacket: 16 [ 882.662726][T17617] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 882.662747][T17617] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 882.662762][T17617] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 882.662776][T17617] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 882.664587][T17617] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 882.664604][T17617] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.664617][T17617] usb 4-1: Product: syz [ 882.664626][T17617] usb 4-1: Manufacturer: syz [ 882.664635][T17617] usb 4-1: SerialNumber: syz [ 882.666150][T17617] usb 4-1: config 0 descriptor?? [ 882.666571][T18973] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 882.670525][T17617] port100 4-1:0.0: NFC: Could not get supported command types [ 882.815228][T17617] dvb-usb: bulk message failed: -22 (1/0) [ 882.815246][T17617] dvb-usb: error while querying for an remote control event. [ 882.973244][ T5715] dvb-usb: bulk message failed: -22 (1/0) [ 882.973263][ T5715] dvb-usb: error while querying for an remote control event. [ 883.095470][T18995] FAULT_INJECTION: forcing a failure. [ 883.095470][T18995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 883.095494][T18995] CPU: 0 UID: 0 PID: 18995 Comm: syz.0.4032 Not tainted syzkaller #0 PREEMPT(full) [ 883.095509][T18995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 883.095516][T18995] Call Trace: [ 883.095520][T18995] [ 883.095524][T18995] dump_stack_lvl+0x100/0x190 [ 883.095547][T18995] should_fail_ex.cold+0x5/0xa [ 883.095563][T18995] _copy_from_user+0x2e/0xd0 [ 883.095581][T18995] copy_msghdr_from_user+0x9f/0x4c0 [ 883.095602][T18995] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 883.095628][T18995] ___sys_sendmsg+0x106/0x1e0 [ 883.095648][T18995] ? __pfx____sys_sendmsg+0x10/0x10 [ 883.095666][T18995] ? __lock_acquire+0x49f/0x1a40 [ 883.095683][T18995] ? get_pid_task+0x106/0x250 [ 883.095718][T18995] __sys_sendmsg+0x160/0x210 [ 883.095734][T18995] ? __pfx___sys_sendmsg+0x10/0x10 [ 883.095756][T18995] do_syscall_64+0x115/0x870 [ 883.095770][T18995] ? clear_bhb_loop+0x40/0x90 [ 883.095785][T18995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.095797][T18995] RIP: 0033:0x7f5465b9de99 [ 883.095808][T18995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 883.095819][T18995] RSP: 002b:00007f5466b1f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 883.095831][T18995] RAX: ffffffffffffffda RBX: 00007f5465e25fa0 RCX: 00007f5465b9de99 [ 883.095844][T18995] RDX: 0000000000000018 RSI: 0000200000000080 RDI: 0000000000000003 [ 883.095851][T18995] RBP: 00007f5466b1f090 R08: 0000000000000000 R09: 0000000000000000 [ 883.095858][T18995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 883.095865][T18995] R13: 00007f5465e26038 R14: 00007f5465e25fa0 R15: 00007ffd097b5998 [ 883.095881][T18995] [ 883.133914][T17617] dvb-usb: bulk message failed: -22 (1/0) [ 883.133933][T17617] dvb-usb: error while querying for an remote control event. [ 883.293533][T17617] dvb-usb: bulk message failed: -22 (1/0) [ 883.297118][T17617] dvb-usb: error while querying for an remote control event. [ 883.447625][T17617] usb 5-1: USB disconnect, device number 40 [ 883.609829][ T5625] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 883.611352][T17617] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 883.719199][ T5625] Bluetooth: hci4: unexpected event for opcode 0x1005 [ 884.090464][ T29] audit: type=1400 audit(1785339579.415:903): avc: denied { bind } for pid=19020 comm="syz.4.4040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 884.102267][ T29] audit: type=1400 audit(1785339579.425:904): avc: denied { listen } for pid=19020 comm="syz.4.4040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 884.107699][ T29] audit: type=1400 audit(1785339579.435:905): avc: denied { read write } for pid=19020 comm="syz.4.4040" name="uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 884.107925][ T29] audit: type=1400 audit(1785339579.435:906): avc: denied { open } for pid=19020 comm="syz.4.4040" path="/dev/uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 884.219152][ T9] hid_parser_main: 28 callbacks suppressed [ 884.219167][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 884.378663][ T9] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 884.544258][T19028] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4041'. [ 885.098410][ T9] usb 4-1: USB disconnect, device number 48 [ 885.223457][ T5715] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 885.397080][ T5715] usb 1-1: Using ep0 maxpacket: 8 [ 885.405859][ T5715] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 885.405888][ T5715] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 885.405902][ T5715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.407347][ T5715] usb 1-1: config 0 descriptor?? [ 885.522519][ T5625] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 885.626564][ T5715] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 885.745397][T17617] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 885.836531][ T5616] Bluetooth: hci0: unexpected event for opcode 0x1005 [ 885.896224][T17617] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 885.896255][T17617] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 885.896285][T17617] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 885.898352][T17617] usb 4-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 885.898370][T17617] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 885.898383][T17617] usb 4-1: Product: syz [ 885.898392][T17617] usb 4-1: Manufacturer: syz [ 885.900632][T19048] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 885.901734][T17617] usb_debug 4-1:1.0: debug converter detected [ 885.908992][T17617] usb 4-1: debug converter now attached to ttyUSB0 [ 886.111838][T17617] usb 4-1: USB disconnect, device number 49 [ 886.133325][ T5715] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 886.152793][T19033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 886.169460][T17617] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 886.202012][T17617] usb_debug 4-1:1.0: device disconnected [ 886.220385][ T9] usb 1-1: USB disconnect, device number 45 [ 886.313928][ T5715] usb 5-1: device descriptor read/64, error -71 [ 886.535376][T19074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4055'. [ 886.563700][ T5715] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 886.593699][T14327] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 886.714217][ T5715] usb 5-1: device descriptor read/64, error -71 [ 886.764344][T14327] usb 6-1: Using ep0 maxpacket: 16 [ 886.773873][T19079] syzkaller0: entered promiscuous mode [ 886.789486][ T29] audit: type=1400 audit(1785339582.115:907): avc: denied { map } for pid=19080 comm="syz.1.4058" path="/dev/video0" dev="devtmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 886.833311][T19079] syzkaller0: entered allmulticast mode [ 886.838969][T14327] usb 6-1: config 1 has an invalid interface number: 135 but max is 0 [ 886.862536][T14327] usb 6-1: config 1 has no interface number 0 [ 886.869476][ T5715] usb usb5-port1: attempt power cycle [ 886.891693][T14327] usb 6-1: config 1 interface 135 has no altsetting 0 [ 886.925215][ T29] audit: type=1400 audit(1785339582.115:908): avc: denied { execute } for pid=19080 comm="syz.1.4058" path="/dev/video0" dev="devtmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 886.974250][T14327] usb 6-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=25.a5 [ 886.997484][T14327] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.034715][T14327] usb 6-1: Product: syz [ 887.050713][T14327] usb 6-1: Manufacturer: syz [ 887.068812][T14327] usb 6-1: SerialNumber: syz [ 887.114015][T17617] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 887.231692][ T29] audit: type=1400 audit(1785339582.555:909): avc: denied { write } for pid=19078 comm="syz.3.4057" name="mice" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 887.260671][ T5715] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 887.289743][T17617] usb 1-1: Using ep0 maxpacket: 16 [ 887.303269][T19072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 887.314074][ T5715] usb 5-1: device descriptor read/8, error -71 [ 887.332854][T17617] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 119, changing to 10 [ 887.353961][T19072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 887.365786][ T29] audit: type=1400 audit(1785339582.555:910): avc: denied { open } for pid=19078 comm="syz.3.4057" path="/dev/input/mice" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 887.398807][T17617] usb 1-1: config 0 interface 0 has no altsetting 0 [ 887.418286][T17617] usb 1-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 887.437561][T14327] kalmia 6-1:1.135: probe with driver kalmia failed with error -22 [ 887.456346][T17617] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.466025][T14327] option 6-1:1.135: GSM modem (1-port) converter detected [ 887.492754][T17617] usb 1-1: config 0 descriptor?? [ 887.502716][T14327] usb 6-1: USB disconnect, device number 31 [ 887.559320][T14327] option 6-1:1.135: device disconnected [ 887.594414][ T5715] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 887.638443][ T5715] usb 5-1: device descriptor read/8, error -71 [ 887.764191][ T5715] usb usb5-port1: unable to enumerate USB device [ 887.793479][ T5616] Bluetooth: hci3: command 0x0406 tx timeout [ 887.930220][T19087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 887.966490][T19087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 888.385516][T17617] monterey 0003:0566:3004.0007: unknown main item tag 0x2 [ 888.419862][T19112] syzkaller0: entered promiscuous mode [ 888.426964][T17617] monterey 0003:0566:3004.0007: unknown main item tag 0x0 [ 888.448224][T19112] syzkaller0: entered allmulticast mode [ 888.462632][T17617] monterey 0003:0566:3004.0007: unknown main item tag 0x0 [ 888.507369][T17617] monterey 0003:0566:3004.0007: unknown main item tag 0x0 [ 888.522256][T19112] FAULT_INJECTION: forcing a failure. [ 888.522256][T19112] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 888.549226][ T5625] Bluetooth: hci0: unexpected event for opcode 0x1005 [ 888.558962][T17617] monterey 0003:0566:3004.0007: unknown main item tag 0x0 [ 888.575075][T19112] CPU: 0 UID: 0 PID: 19112 Comm: syz.5.4066 Not tainted syzkaller #0 PREEMPT(full) [ 888.575091][T19112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 888.575098][T19112] Call Trace: [ 888.575103][T19112] [ 888.575107][T19112] dump_stack_lvl+0x100/0x190 [ 888.575126][T19112] should_fail_ex.cold+0x5/0xa [ 888.575142][T19112] _copy_from_user+0x2e/0xd0 [ 888.575160][T19112] copy_msghdr_from_user+0x9f/0x4c0 [ 888.575181][T19112] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 888.575207][T19112] ___sys_sendmsg+0x106/0x1e0 [ 888.575226][T19112] ? __pfx____sys_sendmsg+0x10/0x10 [ 888.575244][T19112] ? __lock_acquire+0x49f/0x1a40 [ 888.575259][T19112] ? get_pid_task+0x106/0x250 [ 888.575294][T19112] __sys_sendmsg+0x160/0x210 [ 888.575310][T19112] ? __pfx___sys_sendmsg+0x10/0x10 [ 888.575333][T19112] do_syscall_64+0x115/0x870 [ 888.575346][T19112] ? clear_bhb_loop+0x40/0x90 [ 888.575361][T19112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.575372][T19112] RIP: 0033:0x7f255cd9de99 [ 888.575383][T19112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 888.575394][T19112] RSP: 002b:00007f255dcdd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 888.575406][T19112] RAX: ffffffffffffffda RBX: 00007f255d025fa0 RCX: 00007f255cd9de99 [ 888.575414][T19112] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000005 [ 888.575421][T19112] RBP: 00007f255dcdd090 R08: 0000000000000000 R09: 0000000000000000 [ 888.575428][T19112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 888.575435][T19112] R13: 00007f255d026038 R14: 00007f255d025fa0 R15: 00007ffddfa35918 [ 888.575450][T19112] [ 888.576479][T17617] monterey 0003:0566:3004.0007: unknown main item tag 0x0 [ 889.050343][T19127] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.4070'. [ 889.254597][T19136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4073'. [ 889.409036][T19139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 889.465015][T19141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4075'. [ 889.495290][T19141] team0: No ports can be present during mode change [ 889.606154][T17617] monterey 0003:0566:3004.0007: unknown main item tag 0x0 [ 889.652264][T17617] monterey 0003:0566:3004.0007: unknown main item tag 0x0 [ 889.698158][T17617] monterey 0003:0566:3004.0007: unknown main item tag 0x0 [ 889.736850][T17617] monterey 0003:0566:3004.0007: unknown main item tag 0x0 [ 889.794017][T17617] monterey 0003:0566:3004.0007: unknown main item tag 0x0 [ 889.826846][T17617] monterey 0003:0566:3004.0007: unknown main item tag 0x0 [ 889.927091][T17617] monterey 0003:0566:3004.0007: unknown main item tag 0x0 [ 889.976519][T17617] monterey 0003:0566:3004.0007: unknown main item tag 0x0 [ 890.015892][T17617] monterey 0003:0566:3004.0007: unknown main item tag 0x0 [ 890.050268][T17617] monterey 0003:0566:3004.0007: unknown main item tag 0x0 [ 890.104865][T17617] monterey 0003:0566:3004.0007: hidraw0: USB HID v0.04 Device [HID 0566:3004] on usb-dummy_hcd.0-1/input0 [ 890.130970][T19159] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.4082'. [ 890.180598][T17617] usb 1-1: USB disconnect, device number 46 [ 890.205874][T14327] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 890.323462][T19160] fido_id[19160]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 890.359007][T14327] usb 4-1: device descriptor read/64, error -71 [ 890.643663][T14327] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 890.653202][ T9] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 890.815471][T14327] usb 4-1: device descriptor read/64, error -71 [ 890.867424][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 890.904527][ T9] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 890.941383][ T9] usb 6-1: can't read configurations, error -71 [ 890.959320][T14327] usb usb4-port1: attempt power cycle [ 891.574620][T14327] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 891.798167][ T5715] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 891.873204][ T5616] Bluetooth: hci3: command 0x0406 tx timeout [ 892.276689][T14327] usb 4-1: device descriptor read/8, error -71 [ 892.406151][ T5715] usb 2-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 892.503687][ T5715] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 892.532499][ T5715] usb 2-1: Product: syz [ 892.543946][T14327] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 892.570299][ T5715] usb 2-1: config 0 descriptor?? [ 892.593077][ T29] audit: type=1400 audit(1785339587.915:911): avc: denied { mounton } for pid=19187 comm="syz.0.4093" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 892.621912][T14327] usb 4-1: device descriptor read/8, error -71 [ 892.647475][ T5715] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 892.684913][ T5715] usb 2-1: Detected FT232H [ 892.692561][T19200] syzkaller0: entered promiscuous mode [ 892.719864][T19200] syzkaller0: entered allmulticast mode [ 892.763869][T14327] usb usb4-port1: unable to enumerate USB device [ 892.850943][T19184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 892.920244][T19184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 892.991574][ T5715] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 893.059166][ T5715] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 893.109826][ T5715] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 893.173025][ T5715] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 893.257694][ T5715] usb 2-1: USB disconnect, device number 27 [ 893.272405][ T5625] Bluetooth: hci5: unexpected event for opcode 0x1005 [ 893.329563][ T5715] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 893.391954][ T5715] ftdi_sio 2-1:0.0: device disconnected [ 893.778928][ T5625] Bluetooth: hci0: unexpected event for opcode 0x1005 [ 893.994970][T19243] syzkaller0: entered promiscuous mode [ 894.029882][T19243] syzkaller0: entered allmulticast mode [ 894.059269][T19251] FAULT_INJECTION: forcing a failure. [ 894.059269][T19251] name failslab, interval 1, probability 0, space 0, times 0 [ 894.240388][T19251] CPU: 0 UID: 0 PID: 19251 Comm: syz.4.4112 Not tainted syzkaller #0 PREEMPT(full) [ 894.240407][T19251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 894.240415][T19251] Call Trace: [ 894.240419][T19251] [ 894.240425][T19251] dump_stack_lvl+0x100/0x190 [ 894.240445][T19251] should_fail_ex.cold+0x5/0xa [ 894.240461][T19251] should_failslab+0xc2/0x120 [ 894.240478][T19251] __kmalloc_noprof+0xfc/0x820 [ 894.240492][T19251] ? rcu_is_watching+0x12/0xc0 [ 894.240511][T19251] ? tomoyo_realpath_from_path+0xb6/0x690 [ 894.240527][T19251] tomoyo_realpath_from_path+0xb6/0x690 [ 894.240543][T19251] tomoyo_path_number_perm+0x23c/0x580 [ 894.240560][T19251] ? tomoyo_path_number_perm+0x22e/0x580 [ 894.240578][T19251] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 894.240611][T19251] ? find_held_lock+0x2b/0x80 [ 894.240630][T19251] ? __fget_files+0x215/0x3d0 [ 894.240642][T19251] ? hook_file_ioctl_common+0x140/0x440 [ 894.240656][T19251] ? __fget_files+0x215/0x3d0 [ 894.240671][T19251] ? __fget_files+0x21f/0x3d0 [ 894.240685][T19251] security_file_ioctl+0xd3/0x230 [ 894.240711][T19251] __x64_sys_ioctl+0xb7/0x210 [ 894.240731][T19251] do_syscall_64+0x115/0x870 [ 894.240745][T19251] ? clear_bhb_loop+0x40/0x90 [ 894.240760][T19251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.240773][T19251] RIP: 0033:0x7ff64439de99 [ 894.240783][T19251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 894.240795][T19251] RSP: 002b:00007ff6452f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 894.240807][T19251] RAX: ffffffffffffffda RBX: 00007ff644625fa0 RCX: 00007ff64439de99 [ 894.240816][T19251] RDX: 0000200000000440 RSI: 0000000040106410 RDI: 0000000000000003 [ 894.240823][T19251] RBP: 00007ff6452f3090 R08: 0000000000000000 R09: 0000000000000000 [ 894.240831][T19251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 894.240838][T19251] R13: 00007ff644626038 R14: 00007ff644625fa0 R15: 00007ffd29a78af8 [ 894.240854][T19251] [ 894.240860][T19251] ERROR: Out of memory at tomoyo_realpath_from_path. [ 894.612313][T19256] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 894.638970][ T29] audit: type=1400 audit(1785339589.935:912): avc: denied { accept } for pid=19255 comm="syz.3.4113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 894.886292][T19263] wlan0 speed is unknown, defaulting to 1000 [ 894.994589][T19272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 895.073379][ T5715] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 895.223942][ T5715] usb 4-1: Using ep0 maxpacket: 32 [ 895.233370][T14327] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 895.244860][ T5715] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 895.259257][ T5715] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 895.289438][ T5715] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 895.315401][ T5625] Bluetooth: hci5: unexpected event for opcode 0x1005 [ 895.324555][ T5715] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.348400][ T5715] usb 4-1: config 0 descriptor?? [ 895.399016][T14327] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 895.410716][T14327] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 895.432703][T14327] usb 1-1: config 0 has no interface number 0 [ 895.452991][T14327] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 895.482290][T14327] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 895.496876][T14327] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 895.518807][T14327] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 895.529076][T14327] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.537380][T14327] usb 1-1: Product: syz [ 895.541696][T14327] usb 1-1: Manufacturer: syz [ 895.546656][T14327] usb 1-1: SerialNumber: syz [ 895.558053][T14327] usb 1-1: config 0 descriptor?? [ 895.568365][ T5625] Bluetooth: hci5: unexpected event for opcode 0x1005 [ 895.781190][ T5715] ft260 0003:0403:6030.0008: item fetching failed at offset 0/2 [ 895.800804][ T5715] ft260 0003:0403:6030.0008: failed to parse HID [ 895.829230][ T5715] ft260 0003:0403:6030.0008: probe with driver ft260 failed with error -22 [ 895.897264][T19263] mmap: syz.0.4115 (19263) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 895.916261][ T5625] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 895.965915][T14327] usbtouchscreen 1-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 895.994011][T11026] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 896.007537][T14327] usb 1-1: USB disconnect, device number 47 [ 896.030709][T19291] syzkaller0: entered promiscuous mode [ 896.046286][T19291] syzkaller0: entered allmulticast mode [ 896.165426][T11026] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 896.175755][T11026] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 896.188652][T11026] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 896.206135][T11026] usb 2-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 896.215702][T11026] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 896.233230][T11026] usb 2-1: Product: syz [ 896.240238][T11026] usb 2-1: Manufacturer: syz [ 896.260503][T19287] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 896.286162][T11026] usb_debug 2-1:1.0: debug converter detected [ 896.311245][T11026] usb 2-1: debug converter now attached to ttyUSB0 [ 896.321611][T19296] FAULT_INJECTION: forcing a failure. [ 896.321611][T19296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 896.353127][T19296] CPU: 0 UID: 0 PID: 19296 Comm: syz.5.4126 Not tainted syzkaller #0 PREEMPT(full) [ 896.353148][T19296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 896.353156][T19296] Call Trace: [ 896.353162][T19296] [ 896.353167][T19296] dump_stack_lvl+0x100/0x190 [ 896.353187][T19296] should_fail_ex.cold+0x5/0xa [ 896.353203][T19296] _copy_to_user+0x32/0xd0 [ 896.353222][T19296] simple_read_from_buffer+0xcb/0x170 [ 896.353237][T19296] proc_fail_nth_read+0x1af/0x230 [ 896.353257][T19296] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 896.353276][T19296] ? rw_verify_area+0xce/0x6d0 [ 896.353293][T19296] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 896.353311][T19296] vfs_read+0x1e4/0xb40 [ 896.353332][T19296] ? __pfx_vfs_read+0x10/0x10 [ 896.353350][T19296] ? __fget_files+0x215/0x3d0 [ 896.353366][T19296] ? __fget_files+0x21f/0x3d0 [ 896.353383][T19296] ksys_read+0x12a/0x250 [ 896.353401][T19296] ? __pfx_ksys_read+0x10/0x10 [ 896.353424][T19296] do_syscall_64+0x115/0x870 [ 896.353437][T19296] ? clear_bhb_loop+0x40/0x90 [ 896.353453][T19296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.353465][T19296] RIP: 0033:0x7f255cd5e6ce [ 896.353476][T19296] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 896.353488][T19296] RSP: 002b:00007f255dcdcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 896.353501][T19296] RAX: ffffffffffffffda RBX: 00007f255dcdd6c0 RCX: 00007f255cd5e6ce [ 896.353509][T19296] RDX: 000000000000000f RSI: 00007f255dcdd0a0 RDI: 0000000000000006 [ 896.353516][T19296] RBP: 00007f255dcdd090 R08: 0000000000000000 R09: 0000000000000000 [ 896.353524][T19296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 896.353531][T19296] R13: 00007f255d026038 R14: 00007f255d025fa0 R15: 00007ffddfa35918 [ 896.353547][T19296] [ 896.551607][ T5706] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 896.599375][T14327] usb 2-1: USB disconnect, device number 28 [ 896.609497][T14327] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 896.618123][T14327] usb_debug 2-1:1.0: device disconnected [ 896.733122][ T5706] usb 5-1: Using ep0 maxpacket: 16 [ 896.741969][ T5706] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 896.802084][ T5706] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 896.813021][ T5706] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.834446][ T5706] usb 5-1: Product: syz [ 896.844771][ T5706] usb 5-1: Manufacturer: syz [ 896.855933][ T5706] usb 5-1: SerialNumber: syz [ 896.877795][ T5706] usb 5-1: config 0 descriptor?? [ 896.888597][ T5706] port100 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 897.087572][ T5706] usb 5-1: USB disconnect, device number 45 [ 898.217397][ T5706] usb 4-1: USB disconnect, device number 54 [ 898.331262][ T5625] Bluetooth: hci5: unexpected event for opcode 0x1005 [ 898.573379][T14327] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 899.334534][T14327] usb 1-1: config 0 has an invalid interface number: 163 but max is 0 [ 899.454537][T14327] usb 1-1: config 0 has an invalid descriptor of length 86, skipping remainder of the config [ 899.478774][T14327] usb 1-1: config 0 has no interface number 0 [ 900.326102][T14327] usb 1-1: config 0 interface 163 altsetting 100 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 900.372357][T14327] usb 1-1: config 0 interface 163 has no altsetting 0 [ 900.491210][T14327] usb 1-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=3f.5a [ 900.539946][T14327] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.590322][T14327] usb 1-1: Product: syz [ 900.618137][T14327] usb 1-1: Manufacturer: syz [ 900.651831][T14327] usb 1-1: SerialNumber: syz [ 900.698006][T14327] usb 1-1: config 0 descriptor?? [ 900.782249][T19339] FAULT_INJECTION: forcing a failure. [ 900.782249][T19339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 900.829771][T19339] CPU: 0 UID: 0 PID: 19339 Comm: syz.3.4143 Not tainted syzkaller #0 PREEMPT(full) [ 900.829789][T19339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 900.829797][T19339] Call Trace: [ 900.829802][T19339] [ 900.829807][T19339] dump_stack_lvl+0x100/0x190 [ 900.829827][T19339] should_fail_ex.cold+0x5/0xa [ 900.829843][T19339] _copy_from_user+0x2e/0xd0 [ 900.829861][T19339] __sys_bpf+0x2f5/0x4e80 [ 900.829880][T19339] ? __pfx___sys_bpf+0x10/0x10 [ 900.829892][T19339] ? find_held_lock+0x2b/0x80 [ 900.829911][T19339] ? get_pid_task+0xfc/0x250 [ 900.829930][T19339] ? get_pid_task+0xfc/0x250 [ 900.829954][T19339] ? find_held_lock+0x2b/0x80 [ 900.829975][T19339] ? rcu_read_lock_any_held+0x6a/0xa0 [ 900.829987][T19339] ? find_held_lock+0x2b/0x80 [ 900.830006][T19339] ? ksys_write+0x190/0x250 [ 900.830024][T19339] ? ksys_write+0x190/0x250 [ 900.830054][T19339] ? fput+0x79/0x100 [ 900.830070][T19339] ? __x64_sys_bpf+0xce/0x140 [ 900.830082][T19339] __x64_sys_bpf+0xce/0x140 [ 900.830095][T19339] ? do_syscall_64+0x90/0x870 [ 900.830109][T19339] do_syscall_64+0x115/0x870 [ 900.830122][T19339] ? clear_bhb_loop+0x40/0x90 [ 900.830137][T19339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.830149][T19339] RIP: 0033:0x7fa05ef9de99 [ 900.830161][T19339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 900.830173][T19339] RSP: 002b:00007fa05ff3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 900.830185][T19339] RAX: ffffffffffffffda RBX: 00007fa05f225fa0 RCX: 00007fa05ef9de99 [ 900.830193][T19339] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 900.830201][T19339] RBP: 00007fa05ff3d090 R08: 0000000000000000 R09: 0000000000000000 [ 900.830208][T19339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 900.830215][T19339] R13: 00007fa05f226038 R14: 00007fa05f225fa0 R15: 00007ffd3404ad68 [ 900.830231][T19339] [ 901.107235][T14327] net1080 1-1:0.163: probe with driver net1080 failed with error -22 [ 901.118116][T14327] usb 1-1: USB disconnect, device number 48 [ 901.231908][ T5625] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 901.523325][ T5706] usb 4-1: new low-speed USB device number 55 using dummy_hcd [ 901.673378][ T5706] usb 4-1: Invalid ep0 maxpacket: 16 [ 901.692898][T19362] IPVS: sh: FWM 3 0x00000003 - no destination available [ 901.700172][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 901.709121][T19362] IPVS: sh: FWM 3 0x00000003 - no destination available [ 901.716633][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 901.723960][T19362] IPVS: sh: FWM 3 0x00000003 - no destination available [ 901.730985][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 901.738160][T19362] IPVS: sh: FWM 3 0x00000003 - no destination available [ 901.745222][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 901.752340][T19362] IPVS: sh: FWM 3 0x00000003 - no destination available [ 901.760807][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 901.798540][T14327] IPVS: starting estimator thread 0... [ 901.889035][T19368] FAULT_INJECTION: forcing a failure. [ 901.889035][T19368] name failslab, interval 1, probability 0, space 0, times 0 [ 901.902836][T19368] CPU: 0 UID: 0 PID: 19368 Comm: syz.4.4149 Not tainted syzkaller #0 PREEMPT(full) [ 901.902853][T19368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 901.902861][T19368] Call Trace: [ 901.902865][T19368] [ 901.902870][T19368] dump_stack_lvl+0x100/0x190 [ 901.902890][T19368] should_fail_ex.cold+0x5/0xa [ 901.902907][T19368] should_failslab+0xc2/0x120 [ 901.902923][T19368] kmem_cache_alloc_noprof+0x91/0x6a0 [ 901.902938][T19368] ? do_getname+0x35/0x390 [ 901.902956][T19368] do_getname+0x35/0x390 [ 901.902973][T19368] __x64_sys_unlinkat+0xa0/0x130 [ 901.902988][T19368] do_syscall_64+0x115/0x870 [ 901.903002][T19368] ? clear_bhb_loop+0x40/0x90 [ 901.903017][T19368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.903030][T19368] RIP: 0033:0x7ff64439de99 [ 901.903041][T19368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 901.903052][T19368] RSP: 002b:00007ff6452d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 901.903065][T19368] RAX: ffffffffffffffda RBX: 00007ff644626090 RCX: 00007ff64439de99 [ 901.903073][T19368] RDX: 0000000000000000 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 901.903080][T19368] RBP: 00007ff6452d2090 R08: 0000000000000000 R09: 0000000000000000 [ 901.903087][T19368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 901.903100][T19368] R13: 00007ff644626128 R14: 00007ff644626090 R15: 00007ffd29a78af8 [ 901.903116][T19368] [ 902.058389][ T5706] usb 4-1: new low-speed USB device number 56 using dummy_hcd [ 902.076534][T19366] IPVS: using max 65 ests per chain, 156000 per kthread [ 902.213364][ T5706] usb 4-1: Invalid ep0 maxpacket: 16 [ 902.230184][ T5706] usb usb4-port1: attempt power cycle [ 902.482134][T19377] FAULT_INJECTION: forcing a failure. [ 902.482134][T19377] name failslab, interval 1, probability 0, space 0, times 0 [ 902.547661][T19377] CPU: 0 UID: 0 PID: 19377 Comm: syz.0.4154 Not tainted syzkaller #0 PREEMPT(full) [ 902.547680][T19377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 902.547688][T19377] Call Trace: [ 902.547693][T19377] [ 902.547698][T19377] dump_stack_lvl+0x100/0x190 [ 902.547718][T19377] should_fail_ex.cold+0x5/0xa [ 902.547734][T19377] should_failslab+0xc2/0x120 [ 902.547751][T19377] __kvmalloc_node_noprof+0x116/0x970 [ 902.547767][T19377] ? seq_read_iter+0x819/0x1270 [ 902.547782][T19377] seq_read_iter+0x819/0x1270 [ 902.547800][T19377] seq_read+0x344/0x4d0 [ 902.547812][T19377] ? __pfx_seq_read+0x10/0x10 [ 902.547824][T19377] ? lock_acquire+0x1b9/0x370 [ 902.547841][T19377] ? avc_policy_seqno+0x9/0x20 [ 902.547855][T19377] ? selinux_file_permission+0x8f/0x6d0 [ 902.547878][T19377] ? rw_verify_area+0xce/0x6d0 [ 902.547895][T19377] ? __pfx_seq_read+0x10/0x10 [ 902.547907][T19377] vfs_read+0x1e4/0xb40 [ 902.547927][T19377] ? __pfx_vfs_read+0x10/0x10 [ 902.547945][T19377] ? __fget_files+0x215/0x3d0 [ 902.547961][T19377] ? __fget_files+0x21f/0x3d0 [ 902.547978][T19377] ksys_read+0x12a/0x250 [ 902.548002][T19377] ? __pfx_ksys_read+0x10/0x10 [ 902.548026][T19377] do_syscall_64+0x115/0x870 [ 902.548040][T19377] ? clear_bhb_loop+0x40/0x90 [ 902.548055][T19377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.548068][T19377] RIP: 0033:0x7f5465b9de99 [ 902.548079][T19377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 902.548090][T19377] RSP: 002b:00007f5466b1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 902.548102][T19377] RAX: ffffffffffffffda RBX: 00007f5465e25fa0 RCX: 00007f5465b9de99 [ 902.548111][T19377] RDX: 0000000000002020 RSI: 0000200000000040 RDI: 0000000000000004 [ 902.548118][T19377] RBP: 00007f5466b1f090 R08: 0000000000000000 R09: 0000000000000000 [ 902.548126][T19377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 902.548133][T19377] R13: 00007f5465e26038 R14: 00007f5465e25fa0 R15: 00007ffd097b5998 [ 902.548149][T19377] [ 902.789678][ T5706] usb 4-1: new low-speed USB device number 57 using dummy_hcd [ 902.870098][ T5706] usb 4-1: Invalid ep0 maxpacket: 16 [ 903.003759][ T5706] usb 4-1: new low-speed USB device number 58 using dummy_hcd [ 903.023944][T19390] bridge_slave_0: left allmulticast mode [ 903.041678][ T5625] Bluetooth: hci4: unexpected event for opcode 0x1005 [ 903.064100][T19390] bridge_slave_0: left promiscuous mode [ 903.082522][T19390] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.111542][T19390] bridge_slave_1: left allmulticast mode [ 903.134939][T19390] bridge_slave_1: left promiscuous mode [ 903.140813][T19390] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.152632][ T5706] usb 4-1: Invalid ep0 maxpacket: 16 [ 903.158899][T19390] bond0: (slave bond_slave_0): Releasing backup interface [ 903.166854][ T5706] usb usb4-port1: unable to enumerate USB device [ 903.174606][T19390] bond_slave_0: left promiscuous mode [ 903.184832][T19390] bond0: (slave bond_slave_1): Releasing backup interface [ 903.198514][T19390] bond_slave_1: left promiscuous mode [ 903.208025][T19390] team0: Port device team_slave_0 removed [ 903.217919][T19390] team0: Port device team_slave_1 removed [ 903.226268][T19390] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 903.234899][T19390] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 903.245012][T19390] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 903.252531][T19390] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 903.343274][T14327] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 903.383531][T11026] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 903.450791][T19402] Illegal XDP return value 4294967294 on prog (id 348) dev N/A, expect packet loss! [ 903.503556][T14327] usb 2-1: unable to get BOS descriptor or descriptor too short [ 903.514463][T14327] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 903.548953][T11026] usb 1-1: unable to get BOS descriptor or descriptor too short [ 903.560322][T11026] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 903.571826][T14327] usb 2-1: can't read configurations, error -71 [ 903.581183][T19404] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.4163'. [ 903.604979][T11026] usb 1-1: can't read configurations, error -71 [ 905.763396][ T5715] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 905.927754][ T5715] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 905.960388][ T5715] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 905.973673][T11026] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 905.996746][ T5715] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 906.024581][ T5715] usb 5-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 906.041240][ T5715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 906.051043][ T5715] usb 5-1: Product: syz [ 906.055900][ T5715] usb 5-1: Manufacturer: syz [ 906.073362][T14327] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 906.082592][T19418] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 906.106113][ T5715] usb_debug 5-1:1.0: debug converter detected [ 906.129502][ T5715] usb 5-1: debug converter now attached to ttyUSB0 [ 906.140525][T11026] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 906.178808][T11026] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 906.212298][T11026] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 906.243887][T14327] usb 2-1: Using ep0 maxpacket: 8 [ 906.336597][ T5625] Bluetooth: hci5: unexpected event for opcode 0x1005 [ 906.349176][ T5715] usb 5-1: USB disconnect, device number 46 [ 906.362525][T14327] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 906.383668][T11026] usb 1-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 906.426725][ T5715] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 906.437032][T14327] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 906.446555][T11026] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 906.490702][ T5715] usb_debug 5-1:1.0: device disconnected [ 906.503325][T11026] usb 1-1: Product: syz [ 906.511068][T14327] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.530167][T11026] usb 1-1: Manufacturer: syz [ 906.567657][T19425] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 906.578922][T14327] usb 2-1: config 0 descriptor?? [ 906.615677][T11026] usb_debug 1-1:1.0: debug converter detected [ 906.643796][T11026] usb 1-1: debug converter now attached to ttyUSB0 [ 906.838567][T14327] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 906.864788][ T5715] wlan0 speed is unknown, defaulting to 1000 [ 906.921836][ T5715] syz0: Port: 1 Link DOWN [ 906.976422][T14327] usb 1-1: USB disconnect, device number 50 [ 907.022183][T14327] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 907.057186][T14327] usb_debug 1-1:1.0: device disconnected [ 907.086185][ T29] audit: type=1400 audit(1785339602.415:913): avc: denied { bind } for pid=19456 comm="syz.5.4182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 907.163965][T11026] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 907.359122][T11026] usb 4-1: unable to get BOS descriptor or descriptor too short [ 907.386885][T19429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 907.408413][T11026] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 907.430635][T11026] usb 4-1: can't read configurations, error -71 [ 907.438791][T14327] usb 2-1: USB disconnect, device number 31 [ 907.483583][ T5715] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 907.656292][ T5715] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 907.712796][ T5715] usb 5-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=6a.b1 [ 907.756247][ T5715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.789634][ T5715] usb 5-1: Product: syz [ 907.808978][ T5715] usb 5-1: Manufacturer: syz [ 907.831253][ T5715] usb 5-1: SerialNumber: syz [ 907.865025][ T5715] usb 5-1: config 0 descriptor?? [ 907.912936][ T5715] cytherm 5-1:0.0: Cypress thermometer device now attached [ 908.644264][T11026] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 908.827001][T11026] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 908.869705][T11026] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 908.930700][T11026] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 908.991251][T11026] usb 4-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 909.022293][T11026] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 909.073841][T11026] usb 4-1: Product: syz [ 909.096246][T11026] usb 4-1: Manufacturer: syz [ 909.126144][T19489] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 909.161790][T11026] usb_debug 4-1:1.0: debug converter detected [ 909.222436][T11026] usb 4-1: debug converter now attached to ttyUSB0 [ 909.385914][T17617] usb 4-1: USB disconnect, device number 61 [ 909.422557][T17617] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 909.460652][T17617] usb_debug 4-1:1.0: device disconnected [ 909.585716][ T5715] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 909.762122][ T5715] usb 2-1: unable to get BOS descriptor or descriptor too short [ 909.782937][ T5715] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 909.799776][ T5715] usb 2-1: can't read configurations, error -71 [ 909.933249][T14327] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 910.093455][T14327] usb 1-1: Using ep0 maxpacket: 16 [ 910.110569][T14327] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 910.148876][T14327] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 910.174405][ T29] audit: type=1400 audit(1785339605.495:914): avc: denied { load_policy } for pid=19524 comm="syz.3.4206" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 910.202805][T14327] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 910.228070][T14327] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 910.279699][T14327] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 910.308998][ T29] audit: type=1400 audit(1785339605.635:915): avc: denied { create } for pid=19524 comm="syz.3.4206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 910.344934][T14327] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.389300][T19528] loop5: detected capacity change from 0 to 7 [ 910.400310][T14327] usb 1-1: Product: syz [ 910.423561][T14327] usb 1-1: Manufacturer: syz [ 910.443694][ T29] audit: type=1400 audit(1785339605.685:916): avc: denied { ioctl } for pid=19524 comm="syz.3.4206" path="socket:[114275]" dev="sockfs" ino=114275 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 910.508790][T14327] usb 1-1: SerialNumber: syz [ 910.544675][T17617] usb 5-1: USB disconnect, device number 47 [ 910.552299][T14327] usb 1-1: config 0 descriptor?? [ 910.575495][T19525] SELinux: invalid class [ 910.586703][T17617] cytherm 5-1:0.0: Cypress thermometer now disconnected [ 910.602807][T19516] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 910.611600][T14327] port100 1-1:0.0: NFC: Could not get supported command types [ 910.655212][T19528] Dev loop5: unable to read RDB block 7 [ 911.009958][T19528] loop5: AHDI p1 p3 p4 [ 911.105251][T19528] loop5: partition table partially beyond EOD, truncated [ 911.209729][T19528] loop5: p1 size 100663296 extends beyond EOD, truncated [ 911.229652][T19525] SELinux: failed to load policy [ 911.254997][T19528] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 911.429786][T19533] Dev loop5: unable to read RDB block 7 [ 911.436470][T19552] FAULT_INJECTION: forcing a failure. [ 911.436470][T19552] name failslab, interval 1, probability 0, space 0, times 0 [ 911.449328][T19533] loop5: AHDI p1 p3 p4 [ 911.453919][T19533] loop5: partition table partially beyond EOD, truncated [ 911.461178][T19552] CPU: 0 UID: 0 PID: 19552 Comm: syz.5.4210 Not tainted syzkaller #0 PREEMPT(full) [ 911.461195][T19552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 911.461203][T19552] Call Trace: [ 911.461207][T19552] [ 911.461212][T19552] dump_stack_lvl+0x100/0x190 [ 911.461232][T19552] should_fail_ex.cold+0x5/0xa [ 911.461248][T19552] should_failslab+0xc2/0x120 [ 911.461265][T19552] __kmalloc_noprof+0xfc/0x820 [ 911.461279][T19552] ? rcu_is_watching+0x12/0xc0 [ 911.461298][T19552] ? tomoyo_realpath_from_path+0xb6/0x690 [ 911.461314][T19552] tomoyo_realpath_from_path+0xb6/0x690 [ 911.461330][T19552] tomoyo_path_number_perm+0x23c/0x580 [ 911.461347][T19552] ? tomoyo_path_number_perm+0x22e/0x580 [ 911.461365][T19552] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 911.461399][T19552] ? find_held_lock+0x2b/0x80 [ 911.461418][T19552] ? __fget_files+0x215/0x3d0 [ 911.461430][T19552] ? hook_file_ioctl_common+0x140/0x440 [ 911.461443][T19552] ? __fget_files+0x215/0x3d0 [ 911.461458][T19552] ? __fget_files+0x21f/0x3d0 [ 911.461473][T19552] security_file_ioctl+0xd3/0x230 [ 911.461494][T19552] __x64_sys_ioctl+0xb7/0x210 [ 911.461513][T19552] do_syscall_64+0x115/0x870 [ 911.461526][T19552] ? clear_bhb_loop+0x40/0x90 [ 911.461542][T19552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.461554][T19552] RIP: 0033:0x7f255cd9de99 [ 911.461565][T19552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 911.461576][T19552] RSP: 002b:00007f255dcbc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 911.461588][T19552] RAX: ffffffffffffffda RBX: 00007f255d026090 RCX: 00007f255cd9de99 [ 911.461596][T19552] RDX: 0000000000000000 RSI: 0000000080487436 RDI: 0000000000000003 [ 911.461603][T19552] RBP: 00007f255dcbc090 R08: 0000000000000000 R09: 0000000000000000 [ 911.461610][T19552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 911.461617][T19552] R13: 00007f255d026128 R14: 00007f255d026090 R15: 00007ffddfa35918 [ 911.461633][T19552] [ 911.461639][T19552] ERROR: Out of memory at tomoyo_realpath_from_path. [ 911.723832][T19533] loop5: p1 size 100663296 extends beyond EOD, truncated [ 911.766246][T19533] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 911.900920][T15319] udevd[15319]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 911.924923][T16257] udevd[16257]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 911.984726][ T5715] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 912.051394][T16257] udevd[16257]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 912.072019][T15319] udevd[15319]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 912.174953][ T5715] usb 2-1: Using ep0 maxpacket: 16 [ 912.197954][ T5715] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 912.271025][ T5715] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 912.344257][ T5715] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 912.391586][ T5715] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 912.449857][ T5715] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 912.517869][T14327] usb 1-1: USB disconnect, device number 51 [ 912.589651][ T5715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.616206][T19574] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 912.629119][T19570] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 912.635870][T19570] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 912.655231][ T5715] usb 2-1: Product: syz [ 912.669239][ T5715] usb 2-1: Manufacturer: syz [ 912.688685][ T5715] usb 2-1: SerialNumber: syz [ 912.741775][ T5715] usb 2-1: config 0 descriptor?? [ 912.761051][T19576] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(8) [ 912.767570][T19576] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 912.789496][T19554] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 912.798886][ T5715] port100 2-1:0.0: NFC: Could not get supported command types [ 912.835852][T19583] FAULT_INJECTION: forcing a failure. [ 912.835852][T19583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 912.852741][T19569] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(11) [ 912.859344][T19569] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 912.887782][T19583] CPU: 0 UID: 0 PID: 19583 Comm: syz.3.4220 Not tainted syzkaller #0 PREEMPT(full) [ 912.887801][T19583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 912.887809][T19583] Call Trace: [ 912.887814][T19583] [ 912.887819][T19583] dump_stack_lvl+0x100/0x190 [ 912.887839][T19583] should_fail_ex.cold+0x5/0xa [ 912.887855][T19583] copy_fpstate_to_sigframe+0x82d/0xae0 [ 912.887870][T19583] ? do_raw_spin_lock+0x128/0x260 [ 912.887890][T19583] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 912.887908][T19583] ? posixtimer_deliver_signal+0x19d/0x6e0 [ 912.887928][T19583] ? x86_task_fpu+0x5f/0x90 [ 912.887941][T19583] get_sigframe+0x3fb/0x940 [ 912.887958][T19583] ? __pfx_get_sigframe+0x10/0x10 [ 912.887970][T19583] ? rcu_is_watching+0x12/0xc0 [ 912.887990][T19583] ? siginfo_layout+0x156/0x290 [ 912.888008][T19583] x64_setup_rt_frame+0x12f/0xce0 [ 912.888025][T19583] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 912.888043][T19583] arch_do_signal_or_restart+0x5ee/0x7e0 [ 912.888057][T19583] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 912.888075][T19583] ? fput+0x79/0x100 [ 912.888092][T19583] exit_to_user_mode_loop+0x139/0x6f0 [ 912.888108][T19583] ? rcu_is_watching+0x12/0xc0 [ 912.888128][T19583] do_syscall_64+0x666/0x870 [ 912.888141][T19583] ? clear_bhb_loop+0x40/0x90 [ 912.888156][T19583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.888169][T19583] RIP: 0033:0x7fa05ef5e6ce [ 912.888179][T19583] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 912.888191][T19583] RSP: 002b:00007fa05ff3cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 912.888203][T19583] RAX: 0000000000000001 RBX: 00007fa05ff3d6c0 RCX: 00007fa05ef5e6ce [ 912.888211][T19583] RDX: 0000000000000001 RSI: 00007fa05ff3d090 RDI: 0000000000000004 [ 912.888218][T19583] RBP: 00007fa05ff3d090 R08: 0000000000000000 R09: 0000000000000000 [ 912.888225][T19583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 912.888232][T19583] R13: 00007fa05f226038 R14: 00007fa05f225fa0 R15: 00007ffd3404ad68 [ 912.888248][T19583] [ 913.482502][T17617] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 913.666294][T19570] vhci_hcd vhci_hcd.0: Device attached [ 913.673034][T19576] vhci_hcd vhci_hcd.0: Device attached [ 913.678730][T19569] vhci_hcd vhci_hcd.0: Device attached [ 913.786010][T19597] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(7) [ 913.792530][T19597] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 913.874681][ T5625] Bluetooth: hci5: unexpected event for opcode 0x1001 [ 913.884103][T19597] vhci_hcd vhci_hcd.0: Device attached [ 913.944239][T14327] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 914.630331][T14327] usb 4-1: device descriptor read/64, error -71 [ 914.985058][T19577] vhci_hcd: connection closed [ 914.986719][T19598] vhci_hcd: connection closed [ 914.995988][T19579] vhci_hcd: connection closed [ 915.007102][T19571] vhci_hcd: connection reset by peer [ 915.036867][T11026] usb 2-1: USB disconnect, device number 34 [ 915.042911][ T197] vhci_hcd vhci_hcd.5: stop threads [ 915.067432][ T197] vhci_hcd vhci_hcd.5: release socket [ 915.108522][ T197] vhci_hcd vhci_hcd.5: disconnect device [ 915.121367][T19601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4225'. [ 915.136345][T19601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4225'. [ 915.145969][T19601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4225'. [ 915.156961][T19601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4225'. [ 915.166182][T19601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4225'. [ 915.195619][ T197] vhci_hcd vhci_hcd.5: stop threads [ 915.207447][ T5715] IPVS: starting estimator thread 0... [ 915.237067][ T197] vhci_hcd vhci_hcd.5: release socket [ 915.269752][ T197] vhci_hcd vhci_hcd.5: disconnect device [ 915.303872][T14327] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 915.311553][T19609] IPVS: using max 65 ests per chain, 156000 per kthread [ 915.331524][ T197] vhci_hcd vhci_hcd.5: stop threads [ 915.360558][ T197] vhci_hcd vhci_hcd.5: release socket [ 915.384575][ T197] vhci_hcd vhci_hcd.5: disconnect device [ 915.410651][ T197] vhci_hcd vhci_hcd.5: stop threads [ 915.434949][ T197] vhci_hcd vhci_hcd.5: release socket [ 915.461091][ T197] vhci_hcd vhci_hcd.5: disconnect device [ 915.467400][T14327] usb 4-1: device descriptor read/64, error -71 [ 915.529178][T19616] faux_driver vkms: [drm] Unknown color mode 256; guessing buffer size. [ 915.594783][T14327] usb usb4-port1: attempt power cycle [ 915.673370][ T5715] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 915.844058][ T5715] usb 2-1: Using ep0 maxpacket: 32 [ 915.871170][ T5715] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 915.926606][ T29] audit: type=1400 audit(1785339611.245:917): avc: denied { ioctl } for pid=19627 comm="syz.5.4235" path="socket:[115079]" dev="sockfs" ino=115079 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 915.963014][T14327] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 915.970761][ T5715] usb 2-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 915.996195][ T5715] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.021786][T14327] usb 4-1: device descriptor read/8, error -71 [ 916.055722][ T5715] usb 2-1: config 0 descriptor?? [ 916.293476][T14327] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 916.323977][T14327] usb 4-1: device descriptor read/8, error -71 [ 916.433916][T14327] usb usb4-port1: unable to enumerate USB device [ 916.506742][ T5715] kye 0003:0458:4018.0009: unknown main item tag 0x7 [ 916.522465][ T5715] kye 0003:0458:4018.0009: unknown main item tag 0x0 [ 916.539878][ T5715] kye 0003:0458:4018.0009: unknown main item tag 0x1 [ 916.555296][ T5715] kye 0003:0458:4018.0009: reserved main item tag 0xd [ 916.585942][ T5715] kye 0003:0458:4018.0009: hidraw0: USB HID vff.fd Device [HID 0458:4018] on usb-dummy_hcd.1-1/input0 [ 916.779109][T11026] usb 2-1: USB disconnect, device number 35 [ 917.030199][ T29] audit: type=1400 audit(1785339612.355:918): avc: denied { write } for pid=19646 comm="syz.5.4241" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 917.054567][T19647] random: crng reseeded on system resumption [ 917.125614][ T29] audit: type=1400 audit(1785339612.385:919): avc: denied { open } for pid=19646 comm="syz.5.4241" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 917.214180][ T5715] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 917.375538][ T5715] usb 4-1: Using ep0 maxpacket: 16 [ 917.399263][ T5715] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 917.450402][ T5715] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 917.483340][ T5715] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 917.508088][ T5715] usb 4-1: Manufacturer: syz [ 917.536923][ T5715] usb 4-1: config 0 descriptor?? [ 917.571613][ T5625] Bluetooth: hci0: unexpected event for opcode 0x1005 [ 917.620775][ T5715] libceph: connect (1)[c::]:6789 error -101 [ 917.639176][ T5715] libceph: mon0 (1)[c::]:6789 connect error [ 917.660316][ T5715] libceph: connect (1)[c::]:6789 error -101 [ 917.670123][ T5625] Bluetooth: hci5: unexpected event for opcode 0x1005 [ 917.680639][T19664] ceph: No mds server is up or the cluster is laggy [ 917.687996][ T5715] libceph: mon0 (1)[c::]:6789 connect error [ 917.755636][ T5715] usb 4-1: USB disconnect, device number 66 [ 918.657630][T19689] FAULT_INJECTION: forcing a failure. [ 918.657630][T19689] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 918.671010][T17617] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 918.737408][T19691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 918.751047][T19689] CPU: 0 UID: 0 PID: 19689 Comm: syz.3.4255 Not tainted syzkaller #0 PREEMPT(full) [ 918.751067][T19689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 918.751074][T19689] Call Trace: [ 918.751079][T19689] [ 918.751084][T19689] dump_stack_lvl+0x100/0x190 [ 918.751105][T19689] should_fail_ex.cold+0x5/0xa [ 918.751122][T19689] _copy_from_user+0x2e/0xd0 [ 918.751140][T19689] copy_msghdr_from_user+0x9f/0x4c0 [ 918.751162][T19689] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 918.751189][T19689] ___sys_sendmsg+0x106/0x1e0 [ 918.751208][T19689] ? __pfx____sys_sendmsg+0x10/0x10 [ 918.751226][T19689] ? __lock_acquire+0x49f/0x1a40 [ 918.751242][T19689] ? get_pid_task+0x106/0x250 [ 918.751278][T19689] __sys_sendmsg+0x160/0x210 [ 918.751294][T19689] ? __pfx___sys_sendmsg+0x10/0x10 [ 918.751326][T19689] do_syscall_64+0x115/0x870 [ 918.751340][T19689] ? clear_bhb_loop+0x40/0x90 [ 918.751355][T19689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.751367][T19689] RIP: 0033:0x7fa05ef9de99 [ 918.751378][T19689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 918.751390][T19689] RSP: 002b:00007fa05ff3d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 918.751402][T19689] RAX: ffffffffffffffda RBX: 00007fa05f225fa0 RCX: 00007fa05ef9de99 [ 918.751411][T19689] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 918.751418][T19689] RBP: 00007fa05ff3d090 R08: 0000000000000000 R09: 0000000000000000 [ 918.751425][T19689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 918.751433][T19689] R13: 00007fa05f226038 R14: 00007fa05f225fa0 R15: 00007ffd3404ad68 [ 918.751449][T19689] [ 919.573273][T19697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4258'. [ 920.324933][T14327] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 920.393112][T19713] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4263'. [ 920.801023][ T29] audit: type=1400 audit(1785339616.115:920): avc: denied { write } for pid=19716 comm="syz.3.4264" path="socket:[115747]" dev="sockfs" ino=115747 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 920.837672][T14327] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 920.874110][T14327] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.917580][T14327] usb 1-1: Product: syz [ 920.930408][T14327] usb 1-1: Manufacturer: syz [ 920.954769][T14327] usb 1-1: SerialNumber: syz [ 921.371639][ T29] audit: type=1400 audit(1785339616.695:921): avc: denied { firmware_load } for pid=5715 comm="kworker/0:4" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 921.468771][ T5715] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 921.485300][ T5625] Bluetooth: hci0: connection err: -111 [ 921.713409][T11026] usb 6-1: new low-speed USB device number 34 using dummy_hcd [ 921.899107][T11026] usb 6-1: unable to get BOS descriptor or descriptor too short [ 921.938895][T11026] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 921.988235][T11026] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 922.007574][T19750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 922.032577][T11026] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC is Bulk; changing to Interrupt [ 922.076597][T19746] kvm: kvm [19745]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x186) = 0x1 [ 922.086684][T11026] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 922.124387][T11026] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 922.144138][T19746] kvm: kvm [19745]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x80 [ 922.176744][T11026] usb 6-1: string descriptor 0 read error: -22 [ 922.183817][T11026] usb 6-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 922.200948][T19753] bridge_slave_0: left allmulticast mode [ 922.206796][T19753] bridge_slave_0: left promiscuous mode [ 922.213946][T19753] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.225742][T19753] bridge_slave_1: left allmulticast mode [ 922.231510][T19753] bridge_slave_1: left promiscuous mode [ 922.237277][T19753] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.256079][T19753] bond0: (slave bond_slave_0): Releasing backup interface [ 922.265697][T19753] bond0: (slave bond_slave_1): Releasing backup interface [ 922.276981][T19753] team0: Port device team_slave_0 removed [ 922.287092][T19753] team0: Port device team_slave_1 removed [ 922.293500][T19753] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 922.300945][T19753] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 922.309294][T19753] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 922.316808][T19753] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 922.325429][T19753] net_ratelimit: 59 callbacks suppressed [ 922.325440][T19753] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 922.370151][T19746] kvm: kvm [19745]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x187) = 0x81 [ 922.401819][T11026] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.426016][T19746] kvm: kvm [19745]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x80 [ 922.441093][T11026] usb 6-1: config 0 descriptor?? [ 922.474768][T19738] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 922.483407][T19746] kvm: kvm [19745]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x186) = 0x81 [ 922.510912][T11026] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 922.531010][T19746] kvm: kvm [19745]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x186) = 0x1 [ 922.594875][ T5715] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 922.627841][ T5715] ath9k_htc: Failed to initialize the device [ 922.636220][T19746] kvm: kvm [19745]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x80 [ 931.704016][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.729756][ C0] sched: DL replenish lagged too much [ 968.284053][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1027.953342][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1027.960314][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P19749/1:b..l P11026/1:b..l [ 1027.969933][ C0] rcu: (detected by 0, t=10502 jiffies, g=177741, q=890 ncpus=1) [ 1027.977711][ C0] task:kworker/0:5 state:R running task stack:21736 pid:11026 tgid:11026 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1027.992068][ C0] Workqueue: usb_hub_wq hub_event [ 1027.997119][ C0] Call Trace: [ 1028.000374][ C0] [ 1028.003280][ C0] __schedule+0x125c/0x6730 [ 1028.007769][ C0] ? __lock_acquire+0xd5b/0x1a40 [ 1028.012681][ C0] ? __pfx___schedule+0x10/0x10 [ 1028.017520][ C0] ? mark_held_locks+0x40/0x70 [ 1028.022273][ C0] preempt_schedule_irq+0x50/0x90 [ 1028.027278][ C0] irqentry_exit+0x205/0xa00 [ 1028.031844][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1028.037798][ C0] RIP: 0010:lock_release+0x7d/0x310 [ 1028.042972][ C0] Code: 01 00 00 65 8b 05 03 8f 7e 12 85 c0 0f 85 39 01 00 00 65 4c 8b 25 3b 48 7e 12 41 8b bc 24 9c 0b 00 00 85 ff 0f 85 21 01 00 00 <48> 81 3b 80 09 6b 94 0f 84 14 01 00 00 9c 41 5e fa 48 c7 c7 e6 c3 [ 1028.062548][ C0] RSP: 0018:ffffc900051d6198 EFLAGS: 00000246 [ 1028.068586][ C0] RAX: 0000000000000000 RBX: ffffffff8ebe8180 RCX: ffffffff921b6801 [ 1028.076527][ C0] RDX: 0000000000000000 RSI: ffffffff8c401600 RDI: 0000000000000000 [ 1028.084468][ C0] RBP: ffffffff81b866be R08: 0000000000000001 R09: 0000000000000007 [ 1028.092437][ C0] R10: 0000000000000200 R11: 0000000000055e68 R12: ffff88803736ca80 [ 1028.100394][ C0] R13: ffffc900051d6250 R14: ffffc900051d6990 R15: ffffc900051d6284 [ 1028.108360][ C0] ? unwind_next_frame+0x3be/0x2090 [ 1028.113557][ C0] ? lock_release+0x24d/0x310 [ 1028.118216][ C0] unwind_next_frame+0x3c3/0x2090 [ 1028.123219][ C0] ? __driver_probe_device+0x20e/0x450 [ 1028.128658][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1028.134789][ C0] arch_stack_walk+0x94/0xf0 [ 1028.139362][ C0] ? driver_probe_device+0x4a/0x140 [ 1028.144537][ C0] stack_trace_save+0x8e/0xc0 [ 1028.149191][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1028.154539][ C0] ? __schedule+0x126e/0x6730 [ 1028.159190][ C0] kasan_save_stack+0x30/0x50 [ 1028.163856][ C0] ? kasan_save_stack+0x30/0x50 [ 1028.168681][ C0] ? kasan_save_track+0x14/0x30 [ 1028.173504][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 1028.178241][ C0] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 1028.183763][ C0] ? seq_create_client1+0x4d/0x5e0 [ 1028.188847][ C0] ? snd_seq_create_kernel_client+0x155/0x400 [ 1028.194886][ C0] ? snd_seq_midisynth_probe+0x116d/0x15c0 [ 1028.200683][ C0] ? snd_seq_bus_probe+0x67/0x90 [ 1028.205598][ C0] ? really_probe+0x241/0xa60 [ 1028.210246][ C0] ? __driver_probe_device+0x20e/0x450 [ 1028.215697][ C0] kasan_save_track+0x14/0x30 [ 1028.220349][ C0] __kasan_kmalloc+0xaa/0xb0 [ 1028.224915][ C0] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 1028.230283][ C0] ? __driver_probe_device+0x20e/0x450 [ 1028.235715][ C0] ? driver_probe_device+0x4a/0x140 [ 1028.240884][ C0] ? seq_create_client1+0x4d/0x5e0 [ 1028.245973][ C0] seq_create_client1+0x4d/0x5e0 [ 1028.250890][ C0] snd_seq_create_kernel_client+0x155/0x400 [ 1028.256773][ C0] ? __pfx_snd_seq_create_kernel_client+0x10/0x10 [ 1028.263164][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 1028.267901][ C0] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 1028.273423][ C0] ? snd_seq_midisynth_probe+0x10ef/0x15c0 [ 1028.279207][ C0] ? __pfx_snd_seq_midisynth_probe+0x10/0x10 [ 1028.285162][ C0] snd_seq_midisynth_probe+0x116d/0x15c0 [ 1028.290777][ C0] ? __pfx_snd_seq_midisynth_probe+0x10/0x10 [ 1028.296735][ C0] ? sysfs_do_create_link_sd+0xbb/0x140 [ 1028.302256][ C0] ? __pfx_snd_seq_midisynth_probe+0x10/0x10 [ 1028.308211][ C0] snd_seq_bus_probe+0x67/0x90 [ 1028.312952][ C0] ? __pfx_snd_seq_bus_probe+0x10/0x10 [ 1028.318387][ C0] really_probe+0x241/0xa60 [ 1028.322870][ C0] __driver_probe_device+0x20e/0x450 [ 1028.328144][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1028.334012][ C0] driver_probe_device+0x4a/0x140 [ 1028.339012][ C0] __device_attach_driver+0x1df/0x320 [ 1028.344359][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 1028.350224][ C0] bus_for_each_drv+0x159/0x1e0 [ 1028.355047][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1028.360390][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1028.365565][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1028.371343][ C0] __device_attach+0x1e4/0x4d0 [ 1028.376096][ C0] ? __pfx___device_attach+0x10/0x10 [ 1028.381356][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 1028.386531][ C0] device_initial_probe+0xaf/0xd0 [ 1028.391530][ C0] bus_probe_device+0x64/0x160 [ 1028.396266][ C0] device_add+0x121d/0x1970 [ 1028.400744][ C0] ? __pfx_device_add+0x10/0x10 [ 1028.405569][ C0] ? sprintf+0xcc/0x100 [ 1028.409696][ C0] ? __pfx_sprintf+0x10/0x10 [ 1028.414277][ C0] ? snd_device_new+0x31d/0x410 [ 1028.419132][ C0] snd_seq_device_dev_register+0x3d/0xf0 [ 1028.424741][ C0] ? __pfx_snd_seq_device_dev_register+0x10/0x10 [ 1028.431060][ C0] snd_device_register+0x156/0x1f0 [ 1028.436148][ C0] snd_rawmidi_dev_register+0x92f/0x1000 [ 1028.441762][ C0] ? __pfx_snd_rawmidi_dev_register+0x10/0x10 [ 1028.447803][ C0] ? __pfx_device_add+0x10/0x10 [ 1028.452629][ C0] ? snd_info_create_entry+0x21d/0x400 [ 1028.458067][ C0] ? __pfx_snd_rawmidi_dev_register+0x10/0x10 [ 1028.464110][ C0] snd_device_register_all+0x10f/0x1b0 [ 1028.469544][ C0] snd_card_register+0x106/0x760 [ 1028.474459][ C0] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1028.480079][ C0] ? __pfx_snd_card_register+0x10/0x10 [ 1028.485542][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1028.491520][ C0] try_to_register_card+0x1d6/0x3a0 [ 1028.496706][ C0] ? __pfx_try_to_register_card+0x10/0x10 [ 1028.502402][ C0] ? snd_info_create_entry+0x314/0x400 [ 1028.507846][ C0] usb_audio_probe+0xf6b/0x3b10 [ 1028.512683][ C0] ? __pfx_usb_audio_probe+0x10/0x10 [ 1028.517942][ C0] ? do_raw_spin_lock+0x128/0x260 [ 1028.522944][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1028.528295][ C0] ? mark_held_locks+0x40/0x70 [ 1028.533035][ C0] ? _raw_spin_lock_irqsave+0x52/0x60 [ 1028.538388][ C0] ? mark_held_locks+0x40/0x70 [ 1028.543123][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1028.548903][ C0] usb_probe_interface+0x303/0x8f0 [ 1028.554007][ C0] ? __pfx_usb_probe_interface+0x10/0x10 [ 1028.559617][ C0] really_probe+0x241/0xa60 [ 1028.564108][ C0] __driver_probe_device+0x20e/0x450 [ 1028.569369][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1028.575254][ C0] driver_probe_device+0x4a/0x140 [ 1028.580307][ C0] __device_attach_driver+0x1df/0x320 [ 1028.585679][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 1028.591555][ C0] bus_for_each_drv+0x159/0x1e0 [ 1028.596404][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1028.601751][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1028.606924][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1028.612717][ C0] __device_attach+0x1e4/0x4d0 [ 1028.617459][ C0] ? __pfx___device_attach+0x10/0x10 [ 1028.622733][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 1028.627913][ C0] device_initial_probe+0xaf/0xd0 [ 1028.632914][ C0] bus_probe_device+0x64/0x160 [ 1028.637652][ C0] device_add+0x121d/0x1970 [ 1028.642134][ C0] ? __pfx_device_add+0x10/0x10 [ 1028.646960][ C0] ? mark_held_locks+0x40/0x70 [ 1028.651702][ C0] usb_set_configuration+0xd97/0x1c60 [ 1028.657098][ C0] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 1028.663181][ C0] usb_generic_driver_probe+0xa1/0xe0 [ 1028.668550][ C0] usb_probe_device+0xef/0x400 [ 1028.673298][ C0] ? __pfx_usb_probe_device+0x10/0x10 [ 1028.678662][ C0] really_probe+0x241/0xa60 [ 1028.683149][ C0] __driver_probe_device+0x20e/0x450 [ 1028.688410][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1028.694278][ C0] driver_probe_device+0x4a/0x140 [ 1028.699278][ C0] __device_attach_driver+0x1df/0x320 [ 1028.704627][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 1028.710492][ C0] bus_for_each_drv+0x159/0x1e0 [ 1028.715314][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1028.720670][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1028.725858][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1028.731644][ C0] __device_attach+0x1e4/0x4d0 [ 1028.736385][ C0] ? __pfx___device_attach+0x10/0x10 [ 1028.741663][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 1028.746849][ C0] device_initial_probe+0xaf/0xd0 [ 1028.751850][ C0] bus_probe_device+0x64/0x160 [ 1028.756605][ C0] device_add+0x121d/0x1970 [ 1028.761087][ C0] ? __pfx_device_add+0x10/0x10 [ 1028.765915][ C0] ? usb_detect_static_quirks+0x335/0x3e0 [ 1028.771605][ C0] ? kfree+0x22b/0x6c0 [ 1028.775655][ C0] usb_new_device.cold+0x685/0x115c [ 1028.780850][ C0] ? _mutex_trylock_nest_lock+0x241/0x310 [ 1028.786543][ C0] ? do_raw_spin_lock+0x128/0x260 [ 1028.791549][ C0] ? __pfx_usb_new_device+0x10/0x10 [ 1028.796724][ C0] ? mark_held_locks+0x40/0x70 [ 1028.801466][ C0] hub_event+0x30a3/0x4a60 [ 1028.805893][ C0] ? __pfx_hub_event+0x10/0x10 [ 1028.810645][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 1028.816262][ C0] ? rcu_is_watching+0x12/0xc0 [ 1028.821008][ C0] process_one_work+0xa23/0x1940 [ 1028.825929][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1028.831280][ C0] ? __pfx_hub_event+0x10/0x10 [ 1028.836027][ C0] worker_thread+0x5ef/0xe50 [ 1028.840628][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1028.845739][ C0] ? kthread+0x13a/0x450 [ 1028.849967][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1028.855056][ C0] kthread+0x370/0x450 [ 1028.859113][ C0] ? __pfx_kthread+0x10/0x10 [ 1028.863676][ C0] ret_from_fork+0x72b/0xd50 [ 1028.868263][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1028.873354][ C0] ? __switch_to+0x800/0x10f0 [ 1028.878008][ C0] ? __pfx_kthread+0x10/0x10 [ 1028.882594][ C0] ret_from_fork_asm+0x1a/0x30 [ 1028.887362][ C0] [ 1028.890358][ C0] task:syz.4.4274 state:R running task stack:27144 pid:19749 tgid:19749 ppid:16071 task_flags:0x40004c flags:0x00080000 [ 1028.903810][ C0] Call Trace: [ 1028.907063][ C0] [ 1028.909984][ C0] __schedule+0x125c/0x6730 [ 1028.914462][ C0] ? __pfx_clockevents_program_event+0x10/0x10 [ 1028.920599][ C0] ? mark_held_locks+0x40/0x70 [ 1028.925337][ C0] ? __pfx___schedule+0x10/0x10 [ 1028.930160][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 1028.935505][ C0] preempt_schedule_common+0x42/0xc0 [ 1028.940763][ C0] preempt_schedule_thunk+0x16/0x40 [ 1028.945935][ C0] _raw_spin_unlock+0x3e/0x50 [ 1028.950591][ C0] __zap_vma_range+0x16f7/0x4a30 [ 1028.955518][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 1028.960787][ C0] unmap_vmas+0x299/0x5f0 [ 1028.965094][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 1028.969922][ C0] ? mas_next_slot+0x10a3/0x1960 [ 1028.974849][ C0] exit_mmap+0x1ef/0xa00 [ 1028.979071][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 1028.983807][ C0] ? rcu_is_watching+0x12/0xc0 [ 1028.988554][ C0] ? __lock_acquire+0x49f/0x1a40 [ 1028.993466][ C0] ? find_held_lock+0x2b/0x80 [ 1028.998133][ C0] ? uprobe_clear_state+0x5f/0x260 [ 1029.003230][ C0] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1029.008848][ C0] ? arch_uprobe_clear_state+0x107/0x150 [ 1029.014463][ C0] __mmput+0x12a/0x410 [ 1029.018513][ C0] mmput+0x67/0x80 [ 1029.022208][ C0] do_exit+0x8b1/0x2ae0 [ 1029.026353][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 1029.031697][ C0] ? __pfx_do_exit+0x10/0x10 [ 1029.036304][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 1029.041670][ C0] do_group_exit+0xd5/0x2a0 [ 1029.046158][ C0] __x64_sys_exit_group+0x3e/0x50 [ 1029.051164][ C0] x64_sys_call+0x102c/0x1530 [ 1029.055825][ C0] do_syscall_64+0x115/0x870 [ 1029.060391][ C0] ? clear_bhb_loop+0x40/0x90 [ 1029.065045][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.070925][ C0] RIP: 0033:0x7ff64439de99 [ 1029.075313][ C0] RSP: 002b:00007ffd29a78e38 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1029.083695][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff64439de99 [ 1029.091640][ C0] RDX: 00007ff6435f9000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1029.099583][ C0] RBP: 00007ffd29a78e9c R08: 0000000000000000 R09: 00000000000927c0 [ 1029.107526][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000000db [ 1029.115481][ C0] R13: 00000000000927c0 R14: 00000000000e10dc R15: 00007ffd29a78ef0 [ 1029.123432][ C0] [ 1029.126438][ C0] rcu: rcu_preempt kthread starved for 550 jiffies! g177741 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1029.137528][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1029.147464][ C0] rcu: RCU grace-period kthread stack dump: [ 1029.153317][ C0] task:rcu_preempt state:R running task stack:27592 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1029.166766][ C0] Call Trace: [ 1029.170019][ C0] [ 1029.172926][ C0] __schedule+0x125c/0x6730 [ 1029.177414][ C0] ? __pfx___schedule+0x10/0x10 [ 1029.182247][ C0] ? find_held_lock+0x2b/0x80 [ 1029.186921][ C0] ? schedule+0x225/0x2c0 [ 1029.191242][ C0] schedule+0xdd/0x2c0 [ 1029.195307][ C0] schedule_timeout+0x127/0x280 [ 1029.200162][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1029.205523][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1029.210790][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1029.216577][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 1029.222020][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 1029.226763][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1029.232025][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1029.236938][ C0] ? rcu_is_watching+0x12/0xc0 [ 1029.241678][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1029.247456][ C0] rcu_gp_kthread+0x179/0x230 [ 1029.252107][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1029.257278][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1029.263057][ C0] ? __kthread_parkme+0x18c/0x230 [ 1029.268058][ C0] ? kthread+0x13a/0x450 [ 1029.272270][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1029.277440][ C0] kthread+0x370/0x450 [ 1029.281568][ C0] ? __pfx_kthread+0x10/0x10 [ 1029.286129][ C0] ret_from_fork+0x72b/0xd50 [ 1029.290701][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1029.295789][ C0] ? __switch_to+0x800/0x10f0 [ 1029.300440][ C0] ? __pfx_kthread+0x10/0x10 [ 1029.305015][ C0] ret_from_fork_asm+0x1a/0x30 [ 1029.309764][ C0] [ 1029.312756][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1029.319056][ C0] CPU: 0 UID: 0 PID: 3225 Comm: kworker/R-bat_e Not tainted syzkaller #0 PREEMPT(full) [ 1029.328759][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1029.338789][ C0] Workqueue: bat_events batadv_tt_purge [ 1029.344319][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 1029.350721][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 b6 ee 27 f6 48 89 df e8 3e 3e 28 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 05 4e 17 f6 65 8b 05 4e 37 a6 08 85 c0 74 16 5b [ 1029.370320][ C0] RSP: 0018:ffffc90000007c68 EFLAGS: 00000246 [ 1029.376359][ C0] RAX: 0000000000000016 RBX: ffff888027e44000 RCX: 0000000000000004 [ 1029.384301][ C0] RDX: 0000000000000000 RSI: ffffffff8e1a5f23 RDI: ffffffff8c401680 [ 1029.392243][ C0] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000 [ 1029.400190][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88818a997410 [ 1029.408147][ C0] R13: ffff88818a997408 R14: ffff88802beab4a3 R15: ffff88802beab410 [ 1029.416089][ C0] FS: 0000000000000000(0000) GS:ffff888123ddc000(0000) knlGS:0000000000000000 [ 1029.424991][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1029.431546][ C0] CR2: 00007f2a22a80ca9 CR3: 0000000075189000 CR4: 00000000003526f0 [ 1029.439494][ C0] Call Trace: [ 1029.442747][ C0] [ 1029.445566][ C0] dummy_timer+0x1d91/0x36f0 [ 1029.450141][ C0] ? find_held_lock+0x2b/0x80 [ 1029.454797][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 1029.460405][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 1029.466012][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1029.471792][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 1029.477413][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 1029.483367][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1029.488282][ C0] ? mark_held_locks+0x40/0x70 [ 1029.493018][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1029.498810][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1029.503726][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 1029.508928][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 1029.514018][ C0] handle_softirqs+0x1ea/0x9b0 [ 1029.518759][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1029.524015][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1029.529273][ C0] ? batadv_tt_local_purge+0x21c/0x3d0 [ 1029.534709][ C0] do_softirq+0xac/0xe0 [ 1029.538862][ C0] [ 1029.541765][ C0] [ 1029.544666][ C0] __local_bh_enable_ip+0xf8/0x120 [ 1029.549751][ C0] batadv_tt_local_purge+0x21c/0x3d0 [ 1029.555016][ C0] ? __pfx_batadv_tt_local_purge+0x10/0x10 [ 1029.560801][ C0] batadv_tt_purge+0x8b/0xbd0 [ 1029.565471][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1029.571252][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 1029.576514][ C0] ? rcu_is_watching+0x12/0xc0 [ 1029.581262][ C0] process_one_work+0xa23/0x1940 [ 1029.586179][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1029.591527][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 1029.596803][ C0] rescuer_thread+0x905/0x14a0 [ 1029.601545][ C0] ? rescuer_thread+0x240/0x14a0 [ 1029.606456][ C0] ? rescuer_thread+0x118/0x14a0 [ 1029.611362][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 1029.616531][ C0] ? __kthread_parkme+0x18c/0x230 [ 1029.621530][ C0] ? kthread+0x13a/0x450 [ 1029.625741][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 1029.630909][ C0] kthread+0x370/0x450 [ 1029.634949][ C0] ? __pfx_kthread+0x10/0x10 [ 1029.639509][ C0] ret_from_fork+0x72b/0xd50 [ 1029.644077][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1029.649162][ C0] ? __switch_to+0x800/0x10f0 [ 1029.653809][ C0] ? __pfx_kthread+0x10/0x10 [ 1029.658369][ C0] ret_from_fork_asm+0x1a/0x30 [ 1029.663128][ C0]