last executing test programs: 2m49.883110631s ago: executing program 0 (id=1700): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4048010) socket$nl_sock_diag(0x10, 0x3, 0x4) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) userfaultfd(0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 2m46.215222858s ago: executing program 0 (id=1711): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x12, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x10, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x59368f8353c3b040}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x2}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc085}, 0x20000808) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@broadcast, @random="6c7621d7cc94", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x48, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "98a350", 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}, @private1, [@hopopts={0x11}], "fafb17c103001c193eb46558f48ce6b9"}}}}}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500060008000000050003000500000005000300fd00000008000200", @ANYRES32, @ANYBLOB="08000100"], 0x90}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)={0x114, 0x30, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767fc734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 2m43.955813003s ago: executing program 0 (id=1717): epoll_wait(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0xbd) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000400)=ANY=[], 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2400c110, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) socket$unix(0x1, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r4, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0xd007) creat(&(0x7f0000000300)='./file0\x00', 0x60) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="1700000054000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="058335fa", @ANYRES32=0x0, @ANYBLOB="00000000fe8000"/24], 0x38}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffff00"/28], 0x50) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000000000403e"], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m43.005160863s ago: executing program 0 (id=1720): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000140)="24000000010006", 0x7) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000a5976ac6acd41fd8"], 0x48}}, 0x4008004) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000007060108000000000000000000000000050001000600"], 0x1c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000003880)=ANY=[@ANYBLOB="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"], 0x4718}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041000000", @ANYRES32, @ANYBLOB="0100008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x82, &(0x7f0000000180), &(0x7f0000000780)=0x8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000007c0)="87167da334a85edb36b880d36c03a4e67579", &(0x7f0000000840)="b89e9772f85699acf3bdcf65ca2bd4979fdd5677eba9e627065fd10f6403d5f6d43f7032f2431351e2c854f53a29392ec56bfc691a878513046075f96dce4e", 0x800, r7}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r7}, 0x38) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="4001000000000000fe88000000000075f7229900eb00000120010000000000000000000000000000fffd00004e2400000200002000000000a670dff12f51ad466cf4f31b7ec88fd844314893d0998c7e6844d4d7e458b83f0015c9c499922cfb44aa2a790a5e3a2357a3b29bc725ca03f9fe35bcd5a3b8800bd0b8a9b5017de1383dc45b3d5bee412352d49a9e69bca997ca3bccb147e6090c8a0484ecd4c072b65e2ccff73c2279e7966d74154f25303b9f7e539ebe2b37bceda6c3dd29024e2469fe356887ed1aabb04a3d00"/224, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="640101000000000000000000000000000000002032000000fc0100000000000000000000000000000000000000000000070000000000000000000000008000000400000000000000f7b500000000000004000000000000000800000000020000000000000000000001000000010000000800000000000000cc000000000000000800000000000000f8000000000000000300000000000000040000000200000100000000000000004f001200726663343330392863636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000004000000006ec8700"], 0x140}}, 0x844) connect$inet6(r6, &(0x7f0000000240)={0xa, 0x4e23, 0x27bf, @dev={0xfe, 0x80, '\x00', 0x5}, 0x3}, 0x1c) 2m41.395738579s ago: executing program 0 (id=1724): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[], 0x60}, 0x1, 0x7}, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000280)={0xc, r1}) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f90753"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80ae", 0x72}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e14575562668985", 0x15}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418f", 0x30}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2m40.093514461s ago: executing program 0 (id=1727): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="a443fcd7770245fc989b50ea09817223dd9fac342f8f7c3d2cdcae3b14f82c974dc1", 0x22}], 0x1}, 0x6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r2 = syz_open_dev$ndb(&(0x7f0000004480), 0x0, 0x0) ioctl$IOC_PR_RELEASE(r2, 0xc01070ce, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000600)={0xbe, 0x0, 0x1}) r4 = userfaultfd(0x801) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r5, 0x4b65, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = socket(0x1e, 0x4, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x8, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x400000, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) 2m32.190378928s ago: executing program 2 (id=1743): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, &(0x7f0000000040)={0x190, 0xa0, 0x780, 0x670, 0x3, 0x2, 0x0, 0x0, {0x8, 0x7, 0xffffffff}, {0x27, 0x0, 0x1}, {0x401, 0x7}, {0xffffffff, 0x4, 0x1}, 0x3, 0x0, 0xe513, 0x7fff, 0x1, 0x6e, 0x10, 0x2, 0x3, 0x80, 0x8fac, 0x5, 0x8, 0x100, 0x0, 0xa}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000300), 0x4000, 0x0) acct(0x0) chroot(0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) socket$igmp(0x2, 0x3, 0x2) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000040)=ANY=[], 0x268}, 0x1, 0x0, 0x0, 0x4000085}, 0x8052) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(0x0, &(0x7f00000193c0)='./file0\x00', &(0x7f0000019400), 0x10, &(0x7f0000019540)=ANY=[@ANYBLOB='trans=virtio,fscache,directio,cache=readahead']) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56f0a2f7", @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB=',group']) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b", 0xe3}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d4", 0x7a}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc", 0x2a}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f", 0x7e}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fa", 0xca}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) 2m31.201221744s ago: executing program 2 (id=1745): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000680)={'syz0\x00', {0x9, 0x78, 0xffff, 0x1}, 0x9, [0x2, 0x2, 0x1, 0x3, 0xffffffc0, 0x5, 0x7ff, 0xa1c5, 0x4, 0x1f90, 0x8, 0x3ff, 0x0, 0x4, 0x81, 0xe3, 0x2, 0x3, 0x4, 0x4, 0x6, 0x3, 0x2, 0x0, 0x800, 0x0, 0xff, 0x9, 0xfffffc2f, 0xfffffffd, 0x0, 0x6, 0x401, 0xfffffffe, 0x800, 0xe2, 0x1000, 0xa, 0xfe, 0x1b000000, 0x9, 0xfffffffb, 0xd6, 0x9, 0x0, 0x1, 0x72, 0x8, 0x2, 0x4, 0x0, 0x6, 0xc9, 0x8, 0x9, 0x2f8d8d4b, 0x80000001, 0x5, 0x6, 0xfffffffb, 0x4, 0x8, 0x8], [0x5, 0x0, 0x7fff, 0x1, 0x2144, 0x0, 0x9, 0x7, 0x338, 0x8, 0x4, 0x5c0, 0xa345f49, 0x3, 0x5, 0x6, 0x0, 0x6, 0x0, 0x614700f0, 0xa, 0x0, 0x5325, 0x2, 0x4, 0xffffffff, 0x3, 0x10000, 0x6, 0x68599e4c, 0xf751, 0x6, 0x7ff, 0x1ff, 0x100, 0x9, 0x9, 0x4, 0x5, 0x3, 0x100, 0x2e, 0x6, 0x4, 0x1, 0x8, 0x1, 0xf2, 0x80000000, 0x9, 0x1, 0x5, 0xffffffc0, 0x4, 0x8, 0x3, 0x9, 0x4, 0x80, 0x0, 0x8, 0x3d, 0x1], [0xd, 0x1000, 0x81, 0x68, 0x2, 0x12c, 0x10000, 0x9db6, 0x0, 0x5, 0x7, 0xb06, 0x9, 0x2, 0xfffff001, 0x3, 0x81d5, 0x80, 0x2, 0x5, 0x0, 0x90, 0x200, 0x3, 0x6, 0x0, 0x4, 0x7fffffff, 0x5ff, 0x5, 0xfffffffa, 0xffffffff, 0x800, 0x4, 0x86, 0x1, 0x9, 0x7, 0x6, 0x1, 0x401, 0x9, 0x9, 0x3, 0x0, 0x5, 0x9, 0x35e3, 0x7f, 0x6, 0x4, 0x7fff, 0x5, 0x392, 0x5, 0x80, 0x1, 0x0, 0x180000, 0x2, 0x7, 0x1, 0x10000, 0x5], [0x8000, 0x9, 0x8, 0xffffffff, 0x82, 0xb, 0x5, 0x9, 0x7f, 0x200, 0x0, 0x7, 0x400, 0x6, 0xdf5, 0x1, 0x1, 0xfffffffc, 0x5, 0x3, 0x100, 0x2, 0x6, 0x76, 0x0, 0x8, 0x2, 0x1, 0x5, 0x9, 0x1, 0x1, 0x5, 0x9, 0x800, 0xb0, 0x1ff, 0x80, 0x7, 0x5, 0x6, 0x81, 0x7, 0x0, 0x3, 0x5, 0x0, 0x9e, 0x2, 0x11c9, 0x4, 0x4, 0x5dd, 0x3, 0x1, 0x2, 0xffff2897, 0x3, 0xd697, 0x8, 0x2, 0xc, 0x9000, 0x8]}, 0x45c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@mpls_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000000080)) sendmsg$netlink(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="240000002d00010000000067a441856eee05774a88a8f97ae7bf749b6511c33986802faf", @ANYRES32, @ANYBLOB="0b0000800010"], 0x24}], 0x1}, 0x0) 2m30.646850866s ago: executing program 2 (id=1747): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX], 0x50) write$bt_hci(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="27bc4a0bb7"], 0x5) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f", 0x39}], 0x1}}], 0x1, 0x20000044) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m30.064512499s ago: executing program 2 (id=1748): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000055d51f524f94f6579c001000370400"/29, @ANYRES32=0x0, @ANYBLOB="8b040400234e00001c00128008000100677265001000028008000700e000000104001200"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000280012800e00010069703665727370616e0000001414298006000300060000000600020009000000"], 0x48}}, 0x4000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f00000004c0)='./file1/file0\x00', &(0x7f0000000500)='./file1/file0\x00', 0x0, 0x5040, 0x0) socket(0x2b, 0x4, 0x4000000) pipe(&(0x7f0000000040)) syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_usb_connect$uac3(0x5, 0xa0, 0x0, 0x0) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x54010) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000640)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) 2m26.589035644s ago: executing program 2 (id=1758): epoll_wait(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0xbd) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2400c110, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) socket$unix(0x1, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r4, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0xd007) creat(&(0x7f0000000300)='./file0\x00', 0x60) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="1700000054000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="058335fa", @ANYRES32=0x0, @ANYBLOB="00000000fe8000"/24], 0x38}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffff00"/28], 0x50) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x8a1, 0xb08a, 0x6, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000000000403e"], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 2m26.294312333s ago: executing program 2 (id=1760): ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0x7, 0x1) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)={0x0, r1}) close_range(r0, r0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0x2, 0x20000000}) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, 0x0, 0x0, &(0x7f0000000080)) creat(&(0x7f0000000400)='./file0\x00', 0x128) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e000000040000000400000001200000"], 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='acl,fsc=unc']) r6 = memfd_secret(0x80000) ioctl$XFS_IOC_READLINK_BY_HANDLE(r6, 0xc038586c, &(0x7f00000001c0)={r4, &(0x7f00000000c0)='$&\']\x00', 0x40000, &(0x7f0000000100)={@align=0x2000000000, {0x8, 0x8e2, 0x4, 0x3}}, 0x5, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x9}) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x4, 0x11) unshare(0x62040200) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="07010100ffd9f810f80600b0f97d0102030109022c04010000000209040000"], 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r7, 0x0, 0x40, &(0x7f0000000240)={'raw\x00', 0x0, [0x8, 0x3, 0xfd, 0xe, 0x5]}, &(0x7f0000000000)=0x54) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@getchain={0x24, 0x11, 0x1, 0x0, 0x1fffffd, {0x0, 0x0, 0x0, 0x0, {0xd}, {0x8}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000051}, 0x8008004) 2m25.772723069s ago: executing program 32 (id=1760): ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0x7, 0x1) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)={0x0, r1}) close_range(r0, r0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0x2, 0x20000000}) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, 0x0, 0x0, &(0x7f0000000080)) creat(&(0x7f0000000400)='./file0\x00', 0x128) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e000000040000000400000001200000"], 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='acl,fsc=unc']) r6 = memfd_secret(0x80000) ioctl$XFS_IOC_READLINK_BY_HANDLE(r6, 0xc038586c, &(0x7f00000001c0)={r4, &(0x7f00000000c0)='$&\']\x00', 0x40000, &(0x7f0000000100)={@align=0x2000000000, {0x8, 0x8e2, 0x4, 0x3}}, 0x5, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x9}) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x4, 0x11) unshare(0x62040200) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="07010100ffd9f810f80600b0f97d0102030109022c04010000000209040000"], 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r7, 0x0, 0x40, &(0x7f0000000240)={'raw\x00', 0x0, [0x8, 0x3, 0xfd, 0xe, 0x5]}, &(0x7f0000000000)=0x54) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@getchain={0x24, 0x11, 0x1, 0x0, 0x1fffffd, {0x0, 0x0, 0x0, 0x0, {0xd}, {0x8}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000051}, 0x8008004) 2m24.473184541s ago: executing program 33 (id=1727): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="a443fcd7770245fc989b50ea09817223dd9fac342f8f7c3d2cdcae3b14f82c974dc1", 0x22}], 0x1}, 0x6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r2 = syz_open_dev$ndb(&(0x7f0000004480), 0x0, 0x0) ioctl$IOC_PR_RELEASE(r2, 0xc01070ce, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000600)={0xbe, 0x0, 0x1}) r4 = userfaultfd(0x801) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r5, 0x4b65, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = socket(0x1e, 0x4, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x8, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x400000, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) 13.477013069s ago: executing program 5 (id=2138): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x9af8dba271b76fd5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x4000080) read$msr(r1, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e0a0f0d04"], 0xd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x0, 0x0, &(0x7f00000005c0)='syzkaller\x00', 0x2}, 0x94) recvfrom$inet(r0, &(0x7f0000000880)=""/4096, 0x1000, 0x10000, &(0x7f0000001880)={0x2, 0x4e24, @loopback}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x8804, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x810\x8f\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, 0x0, 0x0) syz_usb_connect(0x2, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file2/../file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) syz_usb_connect$uac2(0x6, 0x102, &(0x7f0000000440)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0xa92, 0x1020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf0, 0x3, 0x1, 0x7f, 0x1a0, 0x1, {0x8, 0xb, 0x1, 0x0, 0x1, 0xe, 0x20, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0x0, 0x19}, [@input_terminal={0x10, 0x24, 0x2, 0x5, 0x100, 0x74, 0x9, 0x9, 0x7, 0xfc, 0x2, 0xfc}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x8, 0x2, 0x3, 0x1002, 0x2, 0x2, 0x6}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xa0, 0x2, 0x2, 0x37, "ecfa498f7c842f5f"}, @as_header={0x10, 0x24, 0x1, 0xc7, 0x3, 0x1, 0x0, 0x4f, 0x7fff, 0x3}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x81}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xfc, 0x5, 0x81, 0x5, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x6, 0x8, 0xa5, {0x8, 0x25, 0x1, 0x2, 0x3, 0x40, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x4, 0x9, 0x6, "6e08991514af99"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x94, 0x3, 0xe7, 0x2}, @as_header={0x10, 0x24, 0x1, 0x4, 0x1, 0x2, 0x4, 0x4, 0x6, 0xd}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xb, 0xbe, 0x40, 0x4, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xff, 0x8, 0x9, {0x8, 0x25, 0x1, 0x81, 0xc, 0x36, 0xd8}}}}}}}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x250, 0xda, 0x9, 0x3, 0x10}, 0x2d, &(0x7f00000005c0)={0x5, 0xf, 0x2d, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x3, 0xf9, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xf, 0x9, 0x270}, @ss_container_id={0x14, 0x10, 0x4, 0xee, "ef32ca8b0ca0fa22af48eda491f16453"}]}, 0x3, [{0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x44a}}, {0xcf, &(0x7f00000009c0)=@string={0xcf, 0x3, "67dc494a106476c46c06df64b5d7cc18ef46e1804d6964e2d263278a3a520766b09a859276c68e566539eb2ae4f5bd8a4f5770e1a743173a67d956c39322c34394e30edede3c59b95d6bfce7831b6a38a434e09c87d10274a996e4cb205c35c68bfde23989f781dabd3580c0d915ed4ae68d067e2a9aeb906bcf8bdf42403144931b66f8fb1c9249a96ce1063d2412e8e80d2df890f36e1f7869dd2d633e127426bddfb8b7a47d1a7b1c463ce4e4121ea7d5cfd7b18e499f6ab8e90ae0b5b8e4d87197632581d4540d6a331313"}}, {0x0, 0x0}]}) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="050000"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f00000006c0), &(0x7f0000000700)=r7}, 0x20) sendmsg$inet(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000000c0)='U', 0x1}], 0x1}, 0x34000017) socket$inet(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @broadcast}, 0x10) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xc, 0xa}, {0x6, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x20040000) getpid() 9.587767019s ago: executing program 6 (id=2151): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c000880"], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000180)={0x43f5}, 0x4) sendto$inet6(r1, &(0x7f0000000040)='l', 0x1, 0x20000010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}, 0x1c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) 9.27109938s ago: executing program 5 (id=2154): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) socket$inet6(0xa, 0x2, 0x0) close(0xffffffffffffffff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x180) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x800000, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f000000a280)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x4000) r3 = userfaultfd(0x80801) r4 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x11, r4, 0xc2945000) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) 7.98638868s ago: executing program 1 (id=2156): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) (fail_nth: 1) 7.697631323s ago: executing program 6 (id=2158): r0 = socket$inet_tcp(0x2, 0x1, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x5, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x20000) read$msr(r1, &(0x7f0000001740)=""/102400, 0x19000) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f00000000c0)=0x3f9, 0x4) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x8010, r0, 0x34d76000) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xfffffffe, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=@deltaction={0x24, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x24}}, 0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0, 0x40002102, 0x1, {0x3}}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) 6.895210106s ago: executing program 5 (id=2161): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX], 0x50) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb", 0x42}, {0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917b", 0x2f}], 0x3}}], 0x1, 0x20000044) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6.893123174s ago: executing program 4 (id=2162): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbfe, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x380, 0x1e8, 0xb, 0x148, 0x0, 0x148, 0x2e8, 0x240, 0x240, 0x2e8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x180, 0x1e8, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0xb, [0x4e20, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e23], [0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "d40b98e613e5c0d53fa5668bfbd8659b9ba9affcbed065733d0012e401764f592fc2c2bfb0e657e39980dd3655cfdfebceab664ab18605949120401237b982613cbdde69fbfbd40e9505ea3909a03f93f0be8cd9870b50e1d8a655f0a2cc7dba129d9af19184e11feeab1ddd11aa07abfef2f0ace242261fac91893e25989bb2", 0x4, 0x8a119efdab096be9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x8, 0x1, '\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000b80)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xffe0, 0x10}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x3, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x8}]}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4044004}, 0x40010) r9 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r9, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aac200aaaaaaaaaaaaaaaa00810010000800490000380002000001069078ac1e0001ac1414aa0702440c0cf1ac1414aa00008001000000004e21e7d75351862d2a551baefdd7a21f6a96ce836ceafca3856bbbb016ebfe", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c10000090780000"], 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) 6.273551844s ago: executing program 1 (id=2163): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz1\x00', {0x5, 0x1, 0x0, 0x1000}, 0x0, [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x4001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0xffffffff, 0x6, 0xd127, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x816, 0x8, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x5, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x1001f, 0x3, 0x4, 0x0, 0x4, 0x0, 0x42ac, 0x10, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xe43, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4], [0xfffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400000, 0x0, 0x4, 0x0, 0x7c45, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffd, 0x81, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x526d, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x956, 0x0, 0x1]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x40000071, 0x0, 0x80040}]}) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r4 = socket(0x10, 0x803, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, 0x0, 0x310) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffedd}, 0x94) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_ifreq(r4, 0x8994, &(0x7f0000000080)={'veth0_virt_wifi\x00', @ifru_settings={0x6, 0xffff, @raw_hdlc=0x0}}) r10 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="120100003a982a08cd0ca310a223010203010902120001000000000904"], 0x0) syz_usb_control_io$uac2(r10, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="400a06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r10, 0x0, 0x0) syz_usb_control_io$uac1(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io$uac1(r10, 0x0, 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) 6.262992765s ago: executing program 5 (id=2164): socket$kcm(0x15, 0x5, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x404a) recvmsg$kcm(r0, 0x0, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, 0x0, 0x3, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x38}, 0x18) close(r1) socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000009700000005000000850000005000000095"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) 5.88676815s ago: executing program 3 (id=2165): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x123e00, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) clock_gettime(0x2, 0x0) timer_settime(r2, 0x1, 0x0, 0x0) ioctl$TCSETSW2(r1, 0x5408, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x29, 0x800, 0x10) ioctl$sock_TIOCINQ(r3, 0x541b, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0xe8, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x5c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x20}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x89}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) 5.737486785s ago: executing program 4 (id=2166): socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001900)=""/4079, 0xfef, 0x66) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0x0) unshare(0x28000600) r1 = fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 5.033416548s ago: executing program 4 (id=2167): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x26000841) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x20060400) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) pread64(r2, 0x0, 0x30, 0xfffffffffffffffa) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095", @ANYRES64, @ANYRES8=r4], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x19, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP_VS_SO_GET_INFO(r7, 0x0, 0x481, &(0x7f0000000180), &(0x7f0000000500)=0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000080), &(0x7f0000000240)=r6}, 0x20) ioctl$IOMMU_VFIO_IOAS$GET(r3, 0x3b88, &(0x7f00000000c0)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r8}) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYRES8=r0], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x200000c, 0x200000006c832, 0xffffffffffffffff, 0x0) 5.0066318s ago: executing program 3 (id=2168): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, &(0x7f0000000040)={0x190, 0xa0, 0x780, 0x670, 0x3, 0x2, 0x0, 0x0, {0x8, 0x7, 0xffffffff}, {0x27, 0x0, 0x1}, {0x401, 0x7}, {0xffffffff, 0x4, 0x1}, 0x3, 0x0, 0xe513, 0x7fff, 0x1, 0x6e, 0x10, 0x2, 0x3, 0x80, 0x8fac, 0x5, 0x8, 0x100, 0x0, 0xa}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000300), 0x4000, 0x0) acct(0x0) chroot(&(0x7f0000000040)='./file0\x00') r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) socket$igmp(0x2, 0x3, 0x2) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000040)=ANY=[], 0x268}, 0x1, 0x0, 0x0, 0x4000085}, 0x8052) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(0x0, &(0x7f00000193c0)='./file0\x00', 0x0, 0x10, &(0x7f0000019540)=ANY=[@ANYBLOB='trans=virtio,fscache,directio,cache=readahead']) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56f0a2f7", @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB=',group']) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b", 0xe3}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d4", 0x7a}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc", 0x2a}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f", 0x7e}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fa", 0xca}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) 3.959041272s ago: executing program 3 (id=2169): socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001900)=""/4079, 0xfef, 0x66) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x8e) unshare(0x8000280) mknodat$loop(r3, &(0x7f0000000140)='./file0\x00', 0x4, 0x1) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf2502000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) 3.697430564s ago: executing program 6 (id=2170): r0 = syz_open_dev$media(&(0x7f0000001a80), 0x4b, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) fsmount(r2, 0x0, 0x8a5f4d38b2ae9654) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000e80)={0x0, 0x1, 0x0, &(0x7f00000008c0)=[{}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.633330682s ago: executing program 5 (id=2171): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4048010) socket$nl_sock_diag(0x10, 0x3, 0x4) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3, 0x0, 0x0, 0x0, 0x80, 0x5}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) userfaultfd(0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x10001, 0x3) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) openat(0xffffffffffffff9c, 0x0, 0x48042, 0x8c) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44687e1f018a324e}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x4c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xa}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000840)=@newtaction={0x494, 0x30, 0x12f, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x1400000000}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x5, 0x80000001, 0x2, 0xe9c, {0xb, 0x1, 0x4, 0x8, 0x0, 0x2}, {0x6, 0x1, 0x8000, 0x6, 0x2f3}, 0x40, 0xca, 0x20009d9}}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0xf, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffc, 0x60, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x80000003, 0x0, 0xca5, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x651, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x494}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 3.551966626s ago: executing program 6 (id=2172): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f00000003c0)={'broute\x00', 0x0, 0x0, 0x0, [0x60, 0x1, 0x9cd, 0x12, 0x6, 0x1]}, &(0x7f0000000180)=0x50) connect$can_bcm(r0, &(0x7f0000000140), 0x10) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_io_uring_setup(0xf00, &(0x7f00000002c0)={0x0, 0x57b0, 0x80, 0xfffffffd, 0x40055}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r2, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00', 0x6) r7 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x0, 0x186) ioctl$PTP_CLOCK_GETCAPS(r7, 0x80503d01, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES32=r9, @ANYBLOB="02"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f0000000100)={r9, 0x2}, 0x8) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000100000002cf8bc8b75d"], 0x48}}, 0x0) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r10, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r10, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="070000000000000200000000000000bc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000070000a464357177330772"], 0x48}, 0x1, 0x0, 0x0, 0x200440c3}, 0x0) 3.3907173s ago: executing program 6 (id=2173): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f0000000000)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x2}]}, 0x14}], 0x1}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') mount$binderfs(0x0, &(0x7f0000000340)='./binderfs\x00', &(0x7f0000000380), 0x402, &(0x7f0000000000)={[{@stats}]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{0x4b564d05, 0x0, 0x390}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9203, 0x4000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x15, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x15}}, &(0x7f0000000480)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x67, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) lseek(r1, 0x1, 0x0) r6 = shmget(0x3, 0x2000, 0x54000000, &(0x7f0000ffc000/0x2000)=nil) shmat(r6, &(0x7f0000ffc000/0x4000)=nil, 0x1800) 3.0803711s ago: executing program 3 (id=2174): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX], 0x50) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb", 0x42}, {0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917b", 0x2f}], 0x3}}], 0x1, 0x20000044) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.996880111s ago: executing program 6 (id=2175): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x26000841) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x20060400) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) pread64(r2, 0x0, 0x30, 0xfffffffffffffffa) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095", @ANYRES64, @ANYRES8=r4], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x19, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP_VS_SO_GET_INFO(r7, 0x0, 0x481, &(0x7f0000000180), &(0x7f0000000500)=0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000080), &(0x7f0000000240)=r6}, 0x20) ioctl$IOMMU_VFIO_IOAS$GET(r3, 0x3b88, &(0x7f00000000c0)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r8}) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYRES8=r0], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x200000c, 0x200000006c832, 0xffffffffffffffff, 0x0) 2.974439268s ago: executing program 4 (id=2176): socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000000cfe897fcbc934b90fc5dab5ac47b923000000004000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x1a) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100017800c0015"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x400000000000000, &(0x7f0000000000)=@base={0x1d, 0x4, 0x2, 0x0, 0x201}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd700000000000010000000c00020002000000000000001c0007800c000180080001", @ANYRES32=r1, @ANYBLOB="0c00018008000100", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0x4) recvmsg$unix(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/8, 0x8}], 0x1}, 0x10022) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCSDEBUG(r6, 0x40047440, &(0x7f00000000c0)=0xfff) socket$inet_tcp(0x2, 0x1, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@getstats={0x1c, 0x5e, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x1c}}, 0x884) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140020001000010000000000000000000500000a140000001100010000000000000000000700000a"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r8, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r9, 0x400452c8, &(0x7f0000000100)) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000001f00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000004d40)={0x1104, 0x0, 0x0, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x2e}}}}, [@NL80211_ATTR_CSA_IES={0x10d8, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x460, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @initial, {0x4}, @value=@ver_80211n={0x0, 0x1, 0x3, 0x2}}, 0x5, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @val={0x4, 0x6, {0xa, 0x4, 0x9893, 0x5}}, @void, @void, @val={0x25, 0x3, {0x1, 0xb0, 0x2}}, @val={0x2a, 0x1, {0x0, 0x1}}, @val={0x3c, 0x4, {0x0, 0x5, 0xb1, 0x9}}, @val={0x2d, 0x1a, {0x20, 0x0, 0x1, 0x0, {0x80000001, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x3}, 0x1, 0x8000009}}, @void, @val={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}}, @val={0x76, 0x6, {0x14, 0x3, 0x9, 0x6}}, [{0xdd, 0x6, "b6a561a90b98"}, {0xdd, 0xd6, "fb8fd72c3aa20f8a63973d74799f9419cbda9f9f588a85fe74d3c166c3c2d4874d5108f2ae495a08d1de4fb5e22151728ece9609003b47d3ca313ba16a0e49799faf0e17dff6f2c0e09b77271e182fe71a565df1960a7f7defad878dce0f6a302ebb37cf57a10fc8595b0df3acb58cc8ed594f507a0a97254675bb9bf05796b05d9b79272d2b34888f554871f500f6089a0fdc664f44bff8a38eb1d5dfd01a5e6056ef2dda94671ba4ed9d5470030ce30efa01d866b16ebbafd8ee6cae67c5562d0a765760ebbcbac56a5c35feec51891a439276aa1f"}, {0xdd, 0xc5, "3872648729b9ec8335e1b3d1b4d1a8753156b03d5935afaed533f6e85684ed1ca153764b02330cec005e0de445c031767946db2bfa0701a4b83a0e2d253dd10ea1364227c3497968facab90c5a8f338d99d7a3e89f16acda49a7e3e77ba7d0117cadfc16ddb1597c0410140f9a5e2eabe8006db01eaea8820efe3fab29ca121251bedacac87d60d1c960d4742796a3f910d95e24dbb5804b2bcdc74e5e04e484bd2ef25aaac8393293ad27a4db4051cd1ef0500dd4195aefe7ad8d8b9a4129191ce9c99c9b"}, {0xdd, 0xe, "e2451528754229ea52c6adaaab30"}, {0xdd, 0x25, "905e9738a285b9e9d7ab8b174e52adaeda45aabcd68fdb9fc4cd9902b5d575d4a66ced7986"}, {0xdd, 0x94, "422f0cc570b37976ba95d2a2a28728441c0a1de83b99512eb043e7034a72c53eaeedea2eab78fded86f474b3028f352957f9d7f50dcc13547bef3f03a018b11de2f5d6aa71d03e01dc2e74391e6c607c27ecccb16638d87fef68aafb04323c798c8934d1fe2c3b60284e45db8e8a3b0b97aa7d21c4d377aab7dc3eedc81044f7d36e101ea6aa37593a38e1bab32ea94fc537795e"}, {0xdd, 0x7b, "7169b95ef9250b76bb769d21f86202d2531d7c10a967d5c2d4721114ab1c5707c99dad63ecae0b8308c05a5f574db90afdff8c837d5a22c5904308e2cc832cecacd3db1fa7f331d771df95bc14dc5ead167ae800a600fbe0c6dc846117e03cacfcfe544f42e11c04963ab52430b31270eefcd397220215d833a638"}, {0xdd, 0x18, "c355dd09d9929b4615d919fcdb37479cef415c8bd84f1eee"}, {0xdd, 0x3b, "1ef1f712b973ffc5eda5e36fb267239506609d4c3bd68aacdbdbfbbd66820e52e1e228348c13d078874d99e3f3a5d2e0af16869de96eb932c01d7c"}, {0xdd, 0x9f, "932acae26a80ac016f5611a5cac9ab2c8e82e3adb12eb1d3d5b89b22fe1f3f8a8bd3fe6918204b627268685e1f8bc1d0e091edfac3d74b43052a7514ed2db3a54d5e5f3c37a53c4c7a3704f7b77979526fd088eec505995b17ddac47c11a5af3847570790effcfc8083daab54e906c74846b0ed05f2c54f54d804703b64bec42b1cf0370729527897bddc947058a85b80fb9372e2a5113cf5924a32f9093af"}]}}, @NL80211_ATTR_FTM_RESPONDER={0x13c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x50, 0x2, "1b32c1fd42d443991dec086b057f1bbb8598dc87c3a70b292547809ff3c37ad4d7d8360d1e353f4abf674d4470a97c724a512cf12e091572c10f7cf69955627ea89ac53e5fa752dbad02ce65"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x3b, 0x3, "c2ddfe97521fef181efd19c468ee69b8118015f88ee27e998763cbc5a759fed484875ad9bb7d41064ec5f79ec317d15c6d81a9a9dbe95e"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xa2, 0x2, "60fbb0ca326ed57118206a2d31d693303a63e19d75c97ddf8642b584ea1a4eaab3997c4312f41c9a10d25f51c6f3868f20b8372903411f64697c3abc3abbe56db3a867c55f07df4128c1c1a8b94ef1fcd375677ba6f7ed72aedb4c5a2a20cde34b8159dc6c07888fdd9b17b7fb4f479ed7f795a0f9aa0005c8fa12ac76c9df0f577086c9c0e48aad724d92f6777243d88469d73bc269a099c376b59eb5ba"}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x21b, 0x80, [@perr={0x84, 0xf5, {0x5, 0xf, [{{}, @device_a, 0x9, @void, 0x23}, {{}, @broadcast, 0x2, @void, 0x2d}, {{}, @device_a, 0x4, @void, 0x24}, {{0x0, 0x1}, @broadcast, 0x10001, @value=@broadcast}, {{0x0, 0x1}, @broadcast, 0x5dc6acd2, @value=@broadcast, 0x3c}, {{}, @broadcast, 0x6, @void, 0x13}, {{0x0, 0x1}, @broadcast, 0x4f0b, @value=@broadcast, 0x19}, {{0x0, 0x1}, @broadcast, 0x8, @value=@broadcast, 0x9}, {{0x0, 0x1}, @device_b, 0xffffffff, @value, 0x2a}, {{}, @device_a, 0x7, @void, 0xb}, {{0x0, 0x1}, @broadcast, 0x6, @value=@device_b, 0x28}, {{0x0, 0x1}, @device_a, 0x5, @value=@device_b, 0x21}, {{0x0, 0x1}, @device_b, 0x9a, @value, 0x3f}, {{}, @device_b, 0x1, @void, 0x41}, {{}, @device_b, 0x35, @void, 0x23}]}}, @link_id={0x65, 0x12, {@initial, @device_a, @broadcast}}, @mic={0x8c, 0x18, {0xd87, "ee139894fd6a", @long="4c80027005c45f1e0ff5b6ad8b6acb95"}}, @cf={0x4, 0x6, {0x3, 0x81, 0xff31, 0x2867}}, @random={0x0, 0xe0, "15a1a706f2cb61a7837c1a6bbc17f24cda318bacca6bce6e37880eb85a496e0e1dcadc6843e7acc617a4f5c81edbc54634ecd90998e59b48c68c83ad37aa308b74e7a1ac18d5795ec22c6528f066d5b3601c0989558eb4fce80ed6d0c2e0fd07c9cacff1a851fdf24de7a372c5da29491002ba074992b878b62bd527994906fd5e8070a359e524cf351be105b7576999afc05df2cfbb0f72424b80001bab2d9986611a2020e1b9922a22825c0a8df993c9a82b414685afedea2e3641f8f9700130c6f259e43f48a07c2c4d8616455781aa1e995f37cf29f751264d9812215108"}, @mesh_chsw={0x76, 0x6, {0x5, 0xc, 0x32, 0xab2f}}]}, @NL80211_ATTR_FTM_RESPONDER={0x4}, @NL80211_ATTR_IE={0x38, 0x2a, [@supported_rates={0x1, 0x6, [{0x6c}, {0x1b}, {0x9, 0x1}, {0x2}, {0x12}, {0x6c, 0x1}]}, @peer_mgmt={0x75, 0x16, {0x1, 0x7, @val=0xff, @void, @val="239a533e2d642491ee606e3571fdf7de"}}, @link_id={0x65, 0x12, {@initial, @broadcast, @device_b}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x30, 0x80, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x6c, 0xa, @device_a, 0xfffffff1, @value, 0x40, 0x401, @device_b, 0x6}}, @supported_rates={0x1, 0x3, [{0x4, 0x1}, {0x7a}, {0x18}]}]}, @NL80211_ATTR_IE={0x6a, 0x2a, [@rann={0x7e, 0x15, {{0x0, 0x1}, 0x1, 0x75, @device_a, 0x5, 0x3ff, 0x100}}, @erp={0x2a, 0x1, {0x1}}, @chsw_timing={0x68, 0x4, {0x2, 0x1}}, @mesh_chsw={0x76, 0x6, {0x0, 0x4, 0x2c, 0xc9}}, @erp={0x2a, 0x1, {0x1}}, @challenge={0x10, 0x1, 0xa3}, @prep={0x83, 0x1f, {{}, 0x2, 0xf, @device_b, 0x401, @void, 0x7, 0x6, @broadcast, 0xe}}, @challenge={0x10, 0x1, 0x9}, @link_id={0x65, 0x12, {@initial, @broadcast}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x11, 0x7f, [@challenge={0x10, 0x1, 0x36}, @ibss={0x6, 0x2, 0x81f4}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @sec_chan_ofs={0x3e, 0x1, 0x3}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x4}, @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x11, 0x80, [@ssid={0x0, 0x6, @default_ibss_ssid}, @channel_switch={0x25, 0x3, {0x0, 0x95, 0xe}}]}], @beacon_params=[@NL80211_ATTR_BEACON_TAIL={0x37, 0xf, [@gcr_ga={0xbd, 0x6, @broadcast}, @mesh_id={0x72, 0x6}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x8, 0xae, 0xa}}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0x0, 0x2, 0x2}}, @link_id={0x65, 0x12, {@random="56b3218fcac7", @broadcast, @broadcast}}]}, @NL80211_ATTR_PROBE_RESP={0x7a5, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x4}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x18, 0xbb, [0x4, 0xf, 0x4, 0x9, 0xd, 0x9, 0x7, 0x6, 0x4, 0x5]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0xffff]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x0, 0x6, 0x100]}]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x7d}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x1104}, 0x1, 0x0, 0x0, 0x4ccf121fbb019e87}, 0x20000000) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c9, &(0x7f0000000100)) 2.873441864s ago: executing program 3 (id=2177): r0 = getpid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r0, @ANYRES64=r0, @ANYRES64=r0, @ANYRES16=0x0, @ANYBLOB="0a79c7d7d2aea620e6b2d3ceec931f4f9c596c29359fa793940e"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpgrp(0x0) sched_setaffinity(r3, 0xfffffffffffffdc3, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) fsopen(&(0x7f0000000180)='jffs2\x00', 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=@ipv6_newroute={0x20, 0x18, 0x111, 0x1, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_METRICS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x3c, r8, 0x1, 0x3, 0x0, {0x33}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x20000040) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netstat\x00') lseek(r9, 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x4017, 0x7d) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r10, 0x3ba0, &(0x7f00000003c0)={0x48, 0xd, 0xffffffffffffffff, 0x0, 0x400, 0x0, &(0x7f0000000180), 0x7}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.934251636s ago: executing program 3 (id=2178): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4048010) socket$nl_sock_diag(0x10, 0x3, 0x4) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3, 0x0, 0x0, 0x0, 0x80, 0x5}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) userfaultfd(0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x10001, 0x3) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44687e1f018a324e}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x4c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xa}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000840)=@newtaction={0x494, 0x30, 0x12f, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x1400000000}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x5, 0x80000001, 0x2, 0xe9c, {0xb, 0x1, 0x4, 0x8, 0x0, 0x2}, {0x6, 0x1, 0x8000, 0x6, 0x2f3}, 0x40, 0xca, 0x20009d9}}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0xf, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffc, 0x60, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x80000003, 0x0, 0xca5, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x651, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x494}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 1.830907301s ago: executing program 1 (id=2179): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, &(0x7f0000000040)={0x190, 0xa0, 0x780, 0x670, 0x3, 0x2, 0x0, 0x0, {0x8, 0x7, 0xffffffff}, {0x27, 0x0, 0x1}, {0x401, 0x7}, {0xffffffff, 0x4, 0x1}, 0x3, 0x0, 0xe513, 0x7fff, 0x1, 0x6e, 0x10, 0x2, 0x3, 0x80, 0x8fac, 0x5, 0x8, 0x100, 0x0, 0xa}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000300), 0x4000, 0x0) acct(0x0) chroot(&(0x7f0000000040)='./file0\x00') r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) socket$igmp(0x2, 0x3, 0x2) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000040)=ANY=[], 0x268}, 0x1, 0x0, 0x0, 0x4000085}, 0x8052) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(0x0, &(0x7f00000193c0)='./file0\x00', 0x0, 0x10, &(0x7f0000019540)=ANY=[@ANYBLOB='trans=virtio,fscache,directio,cache=readahead']) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56f0a2f7", @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB=',group']) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b", 0xe3}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d4", 0x7a}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc", 0x2a}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f", 0x7e}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fa", 0xca}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) 1.662134288s ago: executing program 4 (id=2180): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000200)="08001efbb0", 0x5}, {&(0x7f00000002c0)="dcd8a7", 0x3}], 0x2, 0x0, 0x0, 0x60000000}, 0x20000004) 904.042984ms ago: executing program 4 (id=2181): r0 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000100)={0x40, 0x31, 0xb8, {0xb8, 0x24, "03edeb718fd924e80e1f34702780c51c5e36682236beea5649d08ddc8f9cd8322be41eeaaf62f90fb585a7f288c8f5e811ff8b5f841f14b882a314f22c4642bd406c8beea90df170059fb6f8a4e23d98855d6212d852d49f89a40bcbac946e36bf6407e90df77c40fd0452705c042b8ae9631befdb7859db421ea25f72acb390e614b58b03999d3fdb3e88fdbffc0b5a28729d9240c6eaa917bbdf85a93946bed4f43dcabaaa7edb0bae224549e90d83d1ec62291914"}}, &(0x7f00000001c0)={0x0, 0x3, 0x78, @string={0x78, 0x3, "4414a3d5abceac5f59e8a69464437751e52ade04b197eb1852aa8b1494f73cc83cad024ed6ff21a4d7ea183d4d6e8b1acc2a3644aec2cf5ad24fc48d47414d374c6be3a4441a439f4fda9173f43f0f3048d5318f66a3b6d4c3ce4ca4c7e4f1f1a90661135bcc91337bf37ad2ae65a36886df61a17af6"}}, &(0x7f0000000280)={0x0, 0xf, 0x20, {0x5, 0xf, 0x20, 0x2, [@ssp_cap={0x18, 0x10, 0xa, 0x6, 0x3, 0x0, 0x88f, 0x8, [0x30, 0x0, 0xc000]}, @ptm_cap={0x3}]}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x60, 0xd, 0xa1, "88721074", "97e08a86"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x1, 0x9, 0x8, 0xa5, 0x5, 0x40}}}, &(0x7f00000008c0)={0x84, &(0x7f0000000380)={0x0, 0x11, 0xef, "dc31e33fbc7ee592fe2134cf4c2557de19e3871ccfd29f1ed596e7cc144915ca604a6d0832eab93c960ae673681f2b0dfe49b206867c22e17741f9c7b1a3d8bcccce126fd6f8ca57629e617aa90a14039c82f4fcedbb77ad8a0a0da41d5cdedafeebbcb1b99ded0d731b5081ab4e7231a34a3cfaad758084c3124ed97f2f205cce96dab24137377e1fe1ffc86691322f9a6bd05afeadcd11f8b2c388c55196ceb347a50df4ba199099a4a37ff3eb8264be568b247bbda37579db044cc49a5f11c6d10aa7610656613913cc8de382bce6e6d59c9fd408c9df9b625a3c6a07e62a3d93c71095118f2caf68930203addf"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0xa}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x100, 0x40}}, &(0x7f00000005c0)={0x40, 0x7, 0x2}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0xe}, &(0x7f0000000640)={0x40, 0xb, 0x2, "f144"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x7}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000700)={0x40, 0x17, 0x6, @random="0dd22ff3d2e8"}, &(0x7f0000000740)={0x40, 0x19, 0x2, "81c6"}, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000800)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0xfe}}) r1 = gettid() r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000040)=""/61, 0x3d}, {&(0x7f0000000300)=""/69, 0x45}], 0x2) tkill(r1, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="0030000000007e07eec090bd983a5c46dd32b5729ff462de4ab23bd909a68a1c05b7d39f82758b80db226b152613485ac12ace79a10f5d73c4b31789e846e65339e14f0f3a12"], 0x0, 0x0}) 841.294098ms ago: executing program 1 (id=2182): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) socket$inet6(0xa, 0x2, 0x0) close(0xffffffffffffffff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x180) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x800000, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f000000a280)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4000) r3 = userfaultfd(0x80801) r4 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x11, r4, 0xc2945000) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) 263.158575ms ago: executing program 1 (id=2183): r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xfdef, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c2ce0000ffffffffffff86dd600907001164110000000000000000000000ffffe0000002ff02000000000000000000000000000100000e22006490"], 0x0) memfd_create(0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2400c110, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) socket$unix(0x1, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0xd007) creat(&(0x7f0000000300)='./file0\x00', 0x60) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="1700000054000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="058335fa", @ANYRES32=0x0, @ANYBLOB="00000000fe8000"/24], 0x38}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffff00"/28], 0x50) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x8a1, 0xb08a, 0x6, 0x0, 0x0) 0s ago: executing program 1 (id=2184): socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001900)=""/4079, 0xfef, 0x66) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x8e) unshare(0x8000280) mknodat$loop(r3, &(0x7f0000000140)='./file0\x00', 0x4, 0x1) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf2502000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) kernel console output (not intermixed with test programs): r" path="/root/syzkaller.6vl8Sh/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 621.552745][ T29] audit: type=1400 audit(1783700884.917:818): avc: denied { mounton } for pid=12154 comm="syz-executor" path="/root/syzkaller.6vl8Sh/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=43273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 621.582165][ T189] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 621.592919][ T189] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 621.603296][ T189] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 621.617964][ T3350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.629284][ T3350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.637375][ T189] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 621.648758][ T189] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 621.662838][ T29] audit: type=1400 audit(1783700884.927:819): avc: denied { mounton } for pid=12154 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 621.663707][T12314] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1786'. [ 621.688878][ T189] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 621.704124][ T189] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.763736][ T24] usb 5-1: USB disconnect, device number 69 [ 621.768590][T12334] syzkaller0: entered promiscuous mode [ 621.775209][T12334] syzkaller0: entered allmulticast mode [ 621.789180][T12334] tipc: Started in network mode [ 621.794321][T12334] tipc: Node identity 86f5d54fd591, cluster identity 4711 [ 621.803482][T12334] tipc: Enabled bearer , priority 0 [ 621.819178][ T29] audit: type=1400 audit(1783700885.237:820): avc: denied { append } for pid=12333 comm="syz.5.1761" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 621.868559][T12333] tipc: Resetting bearer [ 621.991848][T12339] overlayfs: missing 'lowerdir' [ 622.061232][ T189] usb 2-1: GET_CAPABILITIES returned 0 [ 622.084819][T12333] tipc: Disabling bearer [ 622.093748][ T189] usbtmc 2-1:16.0: can't read capabilities [ 622.428649][ T29] audit: type=1400 audit(1783700885.847:821): avc: denied { write } for pid=12342 comm="syz.5.1789" path="socket:[42735]" dev="sockfs" ino=42735 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 623.088826][T12347] random: crng reseeded on system resumption [ 624.425894][ T29] audit: type=1400 audit(1783700886.577:822): avc: denied { validate_trans } for pid=12330 comm="syz.1.1788" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 624.888228][T10790] usb 4-1: USB disconnect, device number 64 [ 624.962944][ T1229] usb 2-1: USB disconnect, device number 67 [ 625.147557][ T189] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 625.320329][ T189] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.355008][ T189] usb 5-1: config 0 interface 0 has no altsetting 0 [ 625.372239][ T189] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 625.437354][ T189] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.453909][ T189] usb 5-1: config 0 descriptor?? [ 626.670277][ T189] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 626.720501][ T189] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 626.755219][ T189] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 626.771520][ T189] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 626.779953][ T189] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 626.789704][ T189] greenasia 0003:0E8F:0012.0006: unknown main item tag 0x0 [ 626.818929][ T189] greenasia 0003:0E8F:0012.0006: unexpected long global item [ 626.842537][ T189] greenasia 0003:0E8F:0012.0006: parse failed [ 626.851259][ T189] greenasia 0003:0E8F:0012.0006: probe with driver greenasia failed with error -22 [ 626.862398][T12378] FAULT_INJECTION: forcing a failure. [ 626.862398][T12378] name failslab, interval 1, probability 0, space 0, times 0 [ 626.878292][ T189] usb 5-1: USB disconnect, device number 70 [ 626.901386][T12378] CPU: 0 UID: 0 PID: 12378 Comm: syz.3.1799 Not tainted syzkaller #0 PREEMPT(full) [ 626.901408][T12378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 626.901418][T12378] Call Trace: [ 626.901423][T12378] [ 626.901430][T12378] dump_stack_lvl+0x100/0x190 [ 626.901454][T12378] should_fail_ex.cold+0x5/0xa [ 626.901477][T12378] should_failslab+0xc2/0x120 [ 626.901497][T12378] __kmalloc_noprof+0xfc/0x820 [ 626.901513][T12378] ? rcu_is_watching+0x12/0xc0 [ 626.901537][T12378] ? tomoyo_realpath_from_path+0xb6/0x690 [ 626.901566][T12378] tomoyo_realpath_from_path+0xb6/0x690 [ 626.901588][T12378] tomoyo_path_number_perm+0x23c/0x580 [ 626.901602][T12378] ? tomoyo_path_number_perm+0x22e/0x580 [ 626.901617][T12378] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 626.901644][T12378] ? find_held_lock+0x2b/0x80 [ 626.901661][T12378] ? __fget_files+0x215/0x3d0 [ 626.901678][T12378] ? hook_file_ioctl_common+0x140/0x440 [ 626.901688][T12378] ? __fget_files+0x215/0x3d0 [ 626.901707][T12378] ? __fget_files+0x21f/0x3d0 [ 626.901727][T12378] security_file_ioctl+0xd3/0x230 [ 626.901743][T12378] __x64_sys_ioctl+0xb7/0x210 [ 626.901759][T12378] do_syscall_64+0x115/0x870 [ 626.901777][T12378] ? clear_bhb_loop+0x40/0x90 [ 626.901791][T12378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.901803][T12378] RIP: 0033:0x7f91a4b9de59 [ 626.901813][T12378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 626.901824][T12378] RSP: 002b:00007f91a5b2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 626.901835][T12378] RAX: ffffffffffffffda RBX: 00007f91a4e25fa0 RCX: 00007f91a4b9de59 [ 626.901843][T12378] RDX: 0000200000000600 RSI: 000000008208ae63 RDI: 0000000000000004 [ 626.901850][T12378] RBP: 00007f91a5b2e090 R08: 0000000000000000 R09: 0000000000000000 [ 626.901856][T12378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 626.901863][T12378] R13: 00007f91a4e26038 R14: 00007f91a4e25fa0 R15: 00007fffb4b2b2c8 [ 626.901877][T12378] [ 626.901911][T12378] ERROR: Out of memory at tomoyo_realpath_from_path. [ 627.857579][T12390] overlayfs: missing 'lowerdir' [ 628.517447][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 628.617706][T12409] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1807'. [ 628.669347][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 628.688133][ T9] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 628.696490][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 628.711831][ T9] usb 6-1: config 0 has no interfaces? [ 628.719133][T12409] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=12409 comm=syz.6.1807 [ 628.733588][ T9] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 628.743671][ T9] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 628.753636][ T9] usb 6-1: Product: syz [ 628.758783][ T9] usb 6-1: Manufacturer: syz [ 628.763854][ T9] usb 6-1: SerialNumber: syz [ 628.774868][ T9] usb 6-1: config 0 descriptor?? [ 629.467231][ T11] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 629.779431][ T11] usb 4-1: Using ep0 maxpacket: 16 [ 629.868529][ T11] usb 4-1: config index 0 descriptor too short (expected 1068, got 27) [ 629.869993][T12445] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 629.883337][ T11] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 629.902883][ T11] usb 4-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 629.924816][ T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.947125][ T11] usb 4-1: Product: syz [ 629.958186][ T11] usb 4-1: Manufacturer: syz [ 629.968721][ T11] usb 4-1: SerialNumber: syz [ 629.989816][ T11] usb 4-1: config 0 descriptor?? [ 630.166762][T12450] overlayfs: missing 'lowerdir' [ 630.620860][T12420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1811'. [ 630.634872][ T9] usb 4-1: USB disconnect, device number 65 [ 631.094199][T12466] FAULT_INJECTION: forcing a failure. [ 631.094199][T12466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 631.107875][T12466] CPU: 1 UID: 0 PID: 12466 Comm: syz.6.1822 Not tainted syzkaller #0 PREEMPT(full) [ 631.107897][T12466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 631.107908][T12466] Call Trace: [ 631.107914][T12466] [ 631.107921][T12466] dump_stack_lvl+0x100/0x190 [ 631.107947][T12466] should_fail_ex.cold+0x5/0xa [ 631.107970][T12466] _copy_to_user+0x32/0xd0 [ 631.107993][T12466] simple_read_from_buffer+0xcb/0x170 [ 631.108024][T12466] proc_fail_nth_read+0x1af/0x230 [ 631.108050][T12466] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 631.108076][T12466] ? rw_verify_area+0xce/0x6d0 [ 631.108098][T12466] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 631.108122][T12466] vfs_read+0x1e4/0xb40 [ 631.108150][T12466] ? __pfx_vfs_read+0x10/0x10 [ 631.108174][T12466] ? __fget_files+0x215/0x3d0 [ 631.108213][T12466] ? __fget_files+0x21f/0x3d0 [ 631.108247][T12466] ksys_read+0x12a/0x250 [ 631.108271][T12466] ? __pfx_ksys_read+0x10/0x10 [ 631.108303][T12466] do_syscall_64+0x115/0x870 [ 631.108328][T12466] ? clear_bhb_loop+0x40/0x90 [ 631.108351][T12466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.108369][T12466] RIP: 0033:0x7f211d35e68e [ 631.108385][T12466] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 631.108402][T12466] RSP: 002b:00007f211b5f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 631.108419][T12466] RAX: ffffffffffffffda RBX: 00007f211b5f66c0 RCX: 00007f211d35e68e [ 631.108432][T12466] RDX: 000000000000000f RSI: 00007f211b5f60a0 RDI: 0000000000000004 [ 631.108443][T12466] RBP: 00007f211b5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 631.108453][T12466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 631.108464][T12466] R13: 00007f211d626038 R14: 00007f211d625fa0 R15: 00007ffe3372cc08 [ 631.108489][T12466] [ 631.380946][ T189] usb 6-1: USB disconnect, device number 2 [ 632.000535][T12478] syz.5.1825 (12478): drop_caches: 2 [ 632.820978][T12483] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 633.282170][T12491] overlayfs: failed to decode file handle (len=5, type=251, flags=0, err=-22) [ 633.518082][ T805] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 633.760971][ T805] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 633.809120][T12506] syzkaller0: entered promiscuous mode [ 633.823314][T12506] syzkaller0: entered allmulticast mode [ 633.845192][ T805] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 633.885816][ T805] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 255 [ 633.913557][ T805] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 634.000953][ T805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.018864][ T805] usb 2-1: Product: syz [ 634.024825][ T805] usb 2-1: Manufacturer: syz [ 634.034121][ T805] usb 2-1: SerialNumber: syz [ 634.044754][ T805] usb 2-1: config 0 descriptor?? [ 634.052709][T12495] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 634.065015][ T805] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 634.087206][ T1229] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 634.287223][ T1229] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 634.479567][ T1229] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 634.489871][ T1229] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 255 [ 634.509429][ T1229] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 635.103834][ T1229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.132441][ T1229] usb 5-1: Product: syz [ 635.143891][ T1229] usb 5-1: Manufacturer: syz [ 635.169245][ T1229] usb 5-1: SerialNumber: syz [ 635.192086][ T1229] usb 5-1: config 0 descriptor?? [ 635.216350][T12505] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 635.240774][ T1229] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 636.277218][T10790] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 636.305524][ T805] scsi host1: usb-storage 2-1:0.0 [ 636.374508][ T805] usb 2-1: USB disconnect, device number 68 [ 636.562864][T10790] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 636.605700][T10790] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.638066][T10790] usb 4-1: Product: syz [ 636.661503][T10790] usb 4-1: Manufacturer: syz [ 636.676951][T10790] usb 4-1: SerialNumber: syz [ 636.723034][T10790] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 636.762979][ T24] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 637.153544][T12534] syz.1.1839 (12534): drop_caches: 2 [ 637.345037][ T1229] scsi host2: usb-storage 5-1:0.0 [ 637.438491][ T189] usb 4-1: USB disconnect, device number 66 [ 637.449732][T12533] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 637.500240][ T1229] usb 5-1: USB disconnect, device number 71 [ 638.534500][ T24] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 638.542484][ T24] ath9k_htc: Failed to initialize the device [ 638.553035][ T189] usb 4-1: ath9k_htc: USB layer deinitialized [ 639.480233][ T29] audit: type=1326 audit(1783700902.887:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12551 comm="syz.1.1846" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9614f9de59 code=0x7fc00000 [ 639.518467][T12553] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 639.607300][ T29] audit: type=1326 audit(1783700902.887:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12551 comm="syz.1.1846" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9614f9de59 code=0x7fc00000 [ 640.328168][T12556] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1843'. [ 640.501972][T12565] overlayfs: missing 'lowerdir' [ 641.846075][T12570] overlay: Unknown parameter '/' [ 641.949708][T12574] FAULT_INJECTION: forcing a failure. [ 641.949708][T12574] name failslab, interval 1, probability 0, space 0, times 0 [ 641.962886][T12574] CPU: 1 UID: 0 PID: 12574 Comm: syz.4.1850 Not tainted syzkaller #0 PREEMPT(full) [ 641.962908][T12574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 641.962919][T12574] Call Trace: [ 641.962926][T12574] [ 641.962933][T12574] dump_stack_lvl+0x100/0x190 [ 641.962959][T12574] should_fail_ex.cold+0x5/0xa [ 641.962982][T12574] should_failslab+0xc2/0x120 [ 641.963004][T12574] __kmalloc_cache_noprof+0x91/0x6c0 [ 641.963032][T12574] ? madvise_collapse+0x228/0x750 [ 641.963061][T12574] madvise_collapse+0x228/0x750 [ 641.963095][T12574] ? __pfx_madvise_collapse+0x10/0x10 [ 641.963130][T12574] madvise_vma_behavior+0x107c/0x2240 [ 641.963158][T12574] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 641.963189][T12574] ? find_vma_prev+0xd8/0x150 [ 641.963209][T12574] ? _kstrtoull+0x13c/0x1f0 [ 641.963234][T12574] ? __pfx_find_vma_prev+0x10/0x10 [ 641.963269][T12574] madvise_walk_vmas+0x2fe/0xa90 [ 641.963297][T12574] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 641.963328][T12574] madvise_do_behavior+0x1ea/0x510 [ 641.963354][T12574] ? __pfx_madvise_do_behavior+0x10/0x10 [ 641.963378][T12574] ? down_read+0x13b/0x4c0 [ 641.963408][T12574] do_madvise+0x238/0x290 [ 641.963430][T12574] ? __pfx_do_madvise+0x10/0x10 [ 641.963459][T12574] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 641.963495][T12574] ? ksys_write+0x1ac/0x250 [ 641.963521][T12574] ? __pfx_ksys_write+0x10/0x10 [ 641.963550][T12574] __x64_sys_madvise+0xa9/0x110 [ 641.963573][T12574] ? lockdep_hardirqs_on+0x78/0x100 [ 641.963598][T12574] do_syscall_64+0x115/0x870 [ 641.963622][T12574] ? clear_bhb_loop+0x40/0x90 [ 641.963645][T12574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.963663][T12574] RIP: 0033:0x7f20fbb9de59 [ 641.963678][T12574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 641.963696][T12574] RSP: 002b:00007f20fc9bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 641.963713][T12574] RAX: ffffffffffffffda RBX: 00007f20fbe25fa0 RCX: 00007f20fbb9de59 [ 641.963725][T12574] RDX: 0000000000000019 RSI: 0000000000600003 RDI: 0000200000000000 [ 641.963736][T12574] RBP: 00007f20fc9bc090 R08: 0000000000000000 R09: 0000000000000000 [ 641.963747][T12574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 641.963757][T12574] R13: 00007f20fbe26038 R14: 00007f20fbe25fa0 R15: 00007ffcac20fc38 [ 641.963782][T12574] [ 642.574645][T12577] tmpfs: Cannot change global quota limit on remount [ 642.729366][ T29] audit: type=1400 audit(1783700906.137:825): avc: denied { read } for pid=12576 comm="syz.3.1852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 642.835685][ T1229] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 643.126207][ T29] audit: type=1400 audit(1783700906.187:826): avc: denied { ioctl } for pid=12578 comm="syz.6.1851" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 643.213836][ T29] audit: type=1400 audit(1783700906.197:827): avc: denied { read } for pid=12579 comm="syz.5.1854" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 643.292805][ T1229] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 643.322734][ T29] audit: type=1400 audit(1783700906.197:828): avc: denied { open } for pid=12579 comm="syz.5.1854" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 643.346413][ T1229] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 643.394250][ T1229] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 255 [ 643.433972][ T1229] usb 7-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 643.454815][ T29] audit: type=1400 audit(1783700906.507:829): avc: denied { unmount } for pid=5619 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 643.484340][ T1229] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.522671][ T1229] usb 7-1: Product: syz [ 643.549192][ T1229] usb 7-1: Manufacturer: syz [ 643.565593][ T29] audit: type=1400 audit(1783700906.607:830): avc: denied { read write } for pid=5619 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 643.590477][ T1229] usb 7-1: SerialNumber: syz [ 643.608156][ T1229] usb 7-1: config 0 descriptor?? [ 643.614122][T12580] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 643.625039][ T1229] ums-isd200 7-1:0.0: USB Mass Storage device detected [ 643.647249][ T29] audit: type=1400 audit(1783700906.607:831): avc: denied { open } for pid=5619 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 643.672979][ T29] audit: type=1400 audit(1783700906.607:832): avc: denied { ioctl } for pid=5619 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 643.698650][ T11] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 643.962409][ T11] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 644.572180][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 644.572193][ T29] audit: type=1400 audit(1783700907.447:838): avc: denied { read } for pid=12578 comm="syz.6.1851" dev="nsfs" ino=4026534094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 644.618137][ T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.630471][ T11] usb 4-1: Product: syz [ 644.634688][ T11] usb 4-1: Manufacturer: syz [ 644.655504][ T11] usb 4-1: SerialNumber: syz [ 644.664866][ T29] audit: type=1400 audit(1783700907.447:839): avc: denied { open } for pid=12578 comm="syz.6.1851" path="net:[4026534094]" dev="nsfs" ino=4026534094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 644.693073][ T11] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 644.714170][ T29] audit: type=1400 audit(1783700907.457:840): avc: denied { create } for pid=12578 comm="syz.6.1851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 644.758744][ T5725] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 644.822897][ T29] audit: type=1400 audit(1783700907.457:841): avc: denied { write } for pid=12578 comm="syz.6.1851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 645.063561][ T29] audit: type=1400 audit(1783700907.457:842): avc: denied { read } for pid=12578 comm="syz.6.1851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 645.108773][ T29] audit: type=1400 audit(1783700908.057:843): avc: denied { create } for pid=12589 comm="syz.5.1856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 645.324710][ T29] audit: type=1400 audit(1783700908.057:844): avc: denied { bind } for pid=12589 comm="syz.5.1856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 645.356552][ T29] audit: type=1400 audit(1783700908.057:845): avc: denied { setopt } for pid=12589 comm="syz.5.1856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 645.477461][ T29] audit: type=1400 audit(1783700908.057:846): avc: denied { accept } for pid=12589 comm="syz.5.1856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 645.554309][ T24] usb 4-1: USB disconnect, device number 67 [ 645.817324][ T1229] scsi host1: usb-storage 7-1:0.0 [ 645.840244][ T29] audit: type=1400 audit(1783700908.057:847): avc: denied { write } for pid=12589 comm="syz.5.1856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 645.847409][ T1229] usb 7-1: USB disconnect, device number 2 [ 645.893585][ T5725] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 645.931134][ T5725] ath9k_htc: Failed to initialize the device [ 645.964460][ T24] usb 4-1: ath9k_htc: USB layer deinitialized [ 646.240348][T12606] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 646.285099][T12606] block device autoloading is deprecated and will be removed. [ 646.914190][T12620] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1862'. [ 646.928482][T12620] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 647.053682][T12618] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1861'. [ 647.927971][T12635] tmpfs: Cannot change global quota limit on remount [ 649.232471][T10431] block nbd0: Possible stuck request ffff8880285b5080: control (read@0,1024B). Runtime 330 seconds [ 649.358643][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 649.787134][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 649.802066][ T9] usb 7-1: config 0 has an invalid interface number: 34 but max is 0 [ 649.825106][ T9] usb 7-1: config 0 has no interface number 0 [ 649.844976][ T9] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 649.877418][ T9] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 649.897156][ T1229] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 649.915490][ T9] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 649.941422][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.974066][ T9] usb 7-1: Product: syz [ 649.989396][ T9] usb 7-1: Manufacturer: syz [ 650.005235][ T9] usb 7-1: SerialNumber: syz [ 650.059506][ T9] usb 7-1: config 0 descriptor?? [ 650.076992][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 650.077006][ T29] audit: type=1400 audit(1783700913.487:889): avc: denied { mount } for pid=12654 comm="syz.4.1871" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 650.113738][T12641] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 650.136057][T12641] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 650.145695][ T1229] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 650.166681][ T1229] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 650.183879][ T29] audit: type=1400 audit(1783700913.577:890): avc: denied { nlmsg_write } for pid=12654 comm="syz.4.1871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 650.223759][ T1229] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 255 [ 650.251590][ T1229] usb 6-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 650.276862][ T1229] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.296002][ T1229] usb 6-1: Product: syz [ 650.315451][ T1229] usb 6-1: Manufacturer: syz [ 650.324754][ T1229] usb 6-1: SerialNumber: syz [ 650.345106][ T1229] usb 6-1: config 0 descriptor?? [ 650.357258][ T5725] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 650.367272][T12653] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 650.391476][ T1229] ums-isd200 6-1:0.0: USB Mass Storage device detected [ 650.444666][ T29] audit: type=1400 audit(1783700913.857:891): avc: denied { ioctl } for pid=12654 comm="syz.4.1871" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=45414 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 650.490185][T12641] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 650.518020][T12641] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 650.580768][ T5725] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 8 [ 650.591707][ T5725] usb 2-1: config 1 interface 0 altsetting 3 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 650.604702][ T5725] usb 2-1: config 1 interface 0 has no altsetting 0 [ 650.621219][ T5725] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 650.763840][ T9] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 650.777398][ T29] audit: type=1400 audit(1783700914.197:892): avc: denied { setopt } for pid=12665 comm="syz.3.1873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 650.784062][ T5725] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.434327][ T9] asix 7-1:0.34: probe with driver asix failed with error -61 [ 651.468483][ T5725] usb 2-1: Product: ë‹–æƒì³½ì¿†è¾á«†ë¢¿è½¢ç¢•ì€å— è¼ä€ë±‚韞ⱦ倒䃗䀾ê¼ëœŒé¥™ï­²ë®‡é¤›èŠé¾Žï‰ˆç˜®ë¬²ç“¬îº´æ§¤çž»ã”»ï’»ì’™ï²£í‘ƒãˆ¶æ›°âµ–é•“ãº¶ê¶æ¸»ë»žíŠŸÉœã„ â¤žç«§ì£¹ï’—ì«Œî ®è¾æ©Ÿèºªì…—â€…ææ„¬å»¹ [ 651.491257][ T29] audit: type=1400 audit(1783700914.227:893): avc: denied { ioctl } for pid=12665 comm="syz.3.1873" path="socket:[44682]" dev="sockfs" ino=44682 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 651.534146][ T24] usb 7-1: USB disconnect, device number 3 [ 651.578028][ T5725] usb 2-1: SerialNumber: ᇇ㘺侰ä°ì˜¾ãœ¹è··Û¶à·¦ë°°ê´§î¡©êŸê›¶é‘”꽆竭酎硃멿眴ផ [ 651.600538][ T29] audit: type=1400 audit(1783700914.837:894): avc: denied { bind } for pid=12639 comm="syz.6.1867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 651.653811][T12661] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 651.665588][ T29] audit: type=1400 audit(1783700914.837:895): avc: denied { name_bind } for pid=12639 comm="syz.6.1867" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 651.690954][ T5808] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 651.721739][ T29] audit: type=1400 audit(1783700914.837:896): avc: denied { node_bind } for pid=12639 comm="syz.6.1867" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 651.774177][ T29] audit: type=1400 audit(1783700914.837:897): avc: denied { connect } for pid=12639 comm="syz.6.1867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 651.830984][ T29] audit: type=1400 audit(1783700914.837:898): avc: denied { name_connect } for pid=12639 comm="syz.6.1867" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 651.907221][ T5808] usb 4-1: Using ep0 maxpacket: 16 [ 651.909014][ T5725] cdc_ether 2-1:1.0: Descriptor too short [ 651.928221][ T5808] usb 4-1: unable to get BOS descriptor or descriptor too short [ 651.940015][ T5808] usb 4-1: config 16 has an invalid interface number: 44 but max is 0 [ 651.959958][ T5725] usb 2-1: USB disconnect, device number 69 [ 651.991744][ T5808] usb 4-1: config 16 has no interface number 0 [ 652.021001][ T5808] usb 4-1: config 16 interface 44 altsetting 10 bulk endpoint 0x1 has invalid maxpacket 32 [ 652.068792][ T5808] usb 4-1: config 16 interface 44 has no altsetting 0 [ 652.142569][ T5808] usb 4-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=1d.64 [ 652.183259][ T5808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.209291][ T5808] usb 4-1: Product: syz [ 652.228502][ T5808] usb 4-1: Manufacturer: syz [ 652.371762][ T5808] usb 4-1: SerialNumber: syz [ 652.554248][T12666] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 652.700614][ T1229] scsi host1: usb-storage 6-1:0.0 [ 652.737025][ T1229] usb 6-1: USB disconnect, device number 3 [ 652.799289][ T5808] cypress_cy7c63 4-1:16.44: Cypress CY7C63xxx device now attached [ 652.844639][ T5808] usb 4-1: USB disconnect, device number 68 [ 653.218441][ T5808] cypress_cy7c63 4-1:16.44: Cypress CY7C63xxx device now disconnected [ 653.266230][T12681] tmpfs: Cannot change global quota limit on remount [ 655.727206][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 655.727221][ T29] audit: type=1400 audit(1783700919.147:908): avc: denied { unmount } for pid=5611 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 656.171630][ T29] audit: type=1400 audit(1783700919.487:909): avc: denied { create } for pid=12703 comm="syz.1.1882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 656.487227][ T9] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 656.735637][ T29] audit: type=1400 audit(1783700919.497:910): avc: denied { ioctl } for pid=12703 comm="syz.1.1882" path="socket:[45485]" dev="sockfs" ino=45485 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 656.959189][ T9] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 656.974822][ T29] audit: type=1400 audit(1783700920.077:911): avc: denied { create } for pid=12708 comm="syz.6.1884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 657.004938][ T9] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 657.052175][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 657.259563][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 657.295561][ T9] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 657.334067][ T9] usb 5-1: Product: syz [ 657.355574][ T9] usb 5-1: Manufacturer: syz [ 657.367107][ T9] usb 5-1: SerialNumber: syz [ 657.390684][ T9] usb 5-1: config 0 descriptor?? [ 657.449458][ T9] usb 5-1: selecting invalid altsetting 0 [ 657.527966][ T5808] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 657.682517][ T29] audit: type=1400 audit(1783700921.097:912): avc: denied { setopt } for pid=12720 comm="syz.1.1887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 657.721102][ T5808] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 657.751651][ T5808] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 657.772325][ T29] audit: type=1400 audit(1783700921.097:913): avc: denied { ioctl } for pid=12720 comm="syz.1.1887" path="socket:[44841]" dev="sockfs" ino=44841 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 657.802652][ T5808] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 255 [ 657.836300][ T5808] usb 6-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 657.853880][ T5808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.865179][ T29] audit: type=1400 audit(1783700921.127:914): avc: denied { write } for pid=12720 comm="syz.1.1887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 657.875814][T12722] tmpfs: Cannot change global quota limit on remount [ 657.888600][ T5808] usb 6-1: Product: syz [ 657.914819][ T5808] usb 6-1: Manufacturer: syz [ 657.948873][ T5808] usb 6-1: SerialNumber: syz [ 657.976682][ T5808] usb 6-1: config 0 descriptor?? [ 657.991734][T12715] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 658.011508][ T5808] ums-isd200 6-1:0.0: USB Mass Storage device detected [ 658.106531][ T29] audit: type=1400 audit(1783700921.517:915): avc: denied { read write } for pid=12705 comm="syz.4.1883" name="mice" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 658.131285][ T29] audit: type=1400 audit(1783700921.517:916): avc: denied { open } for pid=12705 comm="syz.4.1883" path="/dev/input/mice" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 658.337101][ T9] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 659.030847][ T9] usb 7-1: config 5 has an invalid interface number: 49 but max is 0 [ 659.043833][ T9] usb 7-1: config 5 has no interface number 0 [ 659.056156][ T9] usb 7-1: config 5 interface 49 has no altsetting 0 [ 659.072310][ T9] usb 7-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 659.088704][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.097485][ T9] usb 7-1: Product: syz [ 659.101775][ T9] usb 7-1: Manufacturer: syz [ 659.127091][ T9] usb 7-1: SerialNumber: syz [ 659.244811][ T1229] usb 5-1: USB disconnect, device number 72 [ 659.610843][ T29] audit: type=1400 audit(1783700923.027:917): avc: denied { name_bind } for pid=12740 comm="syz.3.1892" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 659.696814][T12739] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1891'. [ 659.895739][T12742] netlink: 'syz.4.1891': attribute type 6 has an invalid length. [ 660.439970][ T5725] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 660.472135][ T5808] scsi host1: usb-storage 6-1:0.0 [ 660.503943][ T5808] usb 6-1: USB disconnect, device number 4 [ 660.900871][ T5725] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 660.912870][ T5725] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 660.991268][ T5725] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 661.007801][ T5725] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.047532][ T5725] usb 5-1: config 0 descriptor?? [ 661.124191][ T9] ums-jumpshot 7-1:5.49: USB Mass Storage device detected [ 661.173583][ T9] ums-jumpshot 7-1:5.49: Quirks match for vid 05dc pid 0001: 2 [ 661.255676][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 661.255687][ T29] audit: type=1400 audit(1783700924.667:922): avc: denied { ioctl } for pid=12762 comm="syz.6.1897" path="socket:[44901]" dev="sockfs" ino=44901 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 661.346689][ T9] usb 7-1: USB disconnect, device number 4 [ 661.407658][ T5808] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 661.436777][T12755] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1895'. [ 661.764602][ T5725] hid-led 0003:1D34:000A.0007: item fetching failed at offset 2/3 [ 661.777141][ T5808] usb 6-1: Using ep0 maxpacket: 16 [ 661.783627][ T5808] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 661.797434][ T5808] usb 6-1: config 0 has no interface number 0 [ 661.808227][ T5725] hid-led 0003:1D34:000A.0007: probe with driver hid-led failed with error -22 [ 661.830136][ T5808] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 661.852151][ T5808] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 661.904424][ T5808] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 661.931973][ T5808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.948173][ T5808] usb 6-1: Product: syz [ 661.955960][ T5808] usb 6-1: Manufacturer: syz [ 661.986697][ T5808] usb 6-1: SerialNumber: syz [ 662.012884][ T5808] usb 6-1: config 0 descriptor?? [ 662.057448][ T9] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 662.121628][T12759] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 662.130534][T12759] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 662.301253][T12742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.644656][T12759] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 662.664923][T12742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 662.680410][T12759] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 662.688496][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 662.710422][ T9] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 662.746091][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 662.755304][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.773545][ T9] usb 4-1: Product: syz [ 662.785908][ T9] usb 4-1: Manufacturer: syz [ 662.797976][ T9] usb 4-1: SerialNumber: syz [ 662.826961][ T9] cdc_mbim 4-1:1.0: skipping garbage [ 662.904124][ T5808] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 662.924324][ T5808] asix 6-1:0.34: probe with driver asix failed with error -61 [ 662.981398][T12774] tmpfs: Cannot change global quota limit on remount [ 663.025182][T12755] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 663.469704][ T5808] usb 6-1: USB disconnect, device number 5 [ 663.743580][ T5808] usb 5-1: USB disconnect, device number 73 [ 663.851089][T12755] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 663.944376][ T9] cdc_mbim 4-1:1.0: setting tx_max = 16384 [ 663.954238][ T9] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 663.974553][ T9] wwan wwan0: port wwan0mbim0 attached [ 664.315687][ T9] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, fa:ba:31:df:2e:3d [ 664.369637][ T9] usb 4-1: USB disconnect, device number 69 [ 664.379314][ T29] audit: type=1400 audit(1783700927.797:923): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 664.423295][ T9] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 664.554127][ T29] audit: type=1400 audit(1783700927.827:924): avc: denied { search } for pid=5274 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 664.610262][ T29] audit: type=1400 audit(1783700927.827:925): avc: denied { search } for pid=5274 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 664.671203][ T29] audit: type=1400 audit(1783700927.827:926): avc: denied { search } for pid=5274 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 664.700811][ T9] wwan wwan0: port wwan0mbim0 disconnected [ 664.727117][ T5808] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 664.800730][ T29] audit: type=1400 audit(1783700927.827:927): avc: denied { read } for pid=5274 comm="dhcpcd" name="n36" dev="tmpfs" ino=7865 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 664.857269][ T29] audit: type=1400 audit(1783700927.827:928): avc: denied { open } for pid=5274 comm="dhcpcd" path="/run/udev/data/n36" dev="tmpfs" ino=7865 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 664.960772][ T29] audit: type=1400 audit(1783700927.827:929): avc: denied { getattr } for pid=5274 comm="dhcpcd" path="/run/udev/data/n36" dev="tmpfs" ino=7865 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 665.054001][ T29] audit: type=1400 audit(1783700928.067:930): avc: denied { read } for pid=12789 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 665.093079][ T5808] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 665.135201][ T5808] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 665.168641][ T29] audit: type=1400 audit(1783700928.067:931): avc: denied { read open } for pid=12789 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 665.230811][ T5808] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 255 [ 665.301385][T12801] overlayfs: missing 'lowerdir' [ 665.541369][ T5808] usb 6-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 665.575149][ T5808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.617833][ T5808] usb 6-1: Product: syz [ 665.630732][ T5808] usb 6-1: Manufacturer: syz [ 665.665657][ T5808] usb 6-1: SerialNumber: syz [ 665.689543][ T5808] usb 6-1: config 0 descriptor?? [ 665.718049][T12787] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 665.753264][ T5808] ums-isd200 6-1:0.0: USB Mass Storage device detected [ 666.992389][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 666.992405][ T29] audit: type=1400 audit(1783700930.407:944): avc: denied { create } for pid=12813 comm="syz.1.1909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 667.063377][T12828] tmpfs: Cannot change global quota limit on remount [ 667.183654][ T29] audit: type=1400 audit(1783700930.597:945): avc: denied { connect } for pid=12813 comm="syz.1.1909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 667.350526][T12838] openvswitch: netlink: Missing valid actions attribute. [ 667.368312][T12838] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 667.392824][ T29] audit: type=1400 audit(1783700930.807:946): avc: denied { write } for pid=12829 comm="syz.4.1912" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 667.722180][ T29] audit: type=1400 audit(1783700930.807:947): avc: denied { open } for pid=12829 comm="syz.4.1912" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 667.804729][ T5808] scsi host1: usb-storage 6-1:0.0 [ 667.858882][ T5808] usb 6-1: USB disconnect, device number 6 [ 667.879656][ T29] audit: type=1400 audit(1783700930.837:948): avc: denied { ioctl } for pid=12829 comm="syz.4.1912" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 667.947632][T12847] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1915'. [ 668.016860][ T29] audit: type=1400 audit(1783700931.197:949): avc: denied { getopt } for pid=12839 comm="syz.6.1913" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 668.043765][ T29] audit: type=1400 audit(1783700931.257:950): avc: denied { write } for pid=12839 comm="syz.6.1913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 668.071217][ T29] audit: type=1400 audit(1783700931.257:951): avc: denied { create } for pid=12839 comm="syz.6.1913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 668.092203][ T29] audit: type=1400 audit(1783700931.257:952): avc: denied { setopt } for pid=12839 comm="syz.6.1913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 668.267419][ T29] audit: type=1400 audit(1783700931.257:953): avc: denied { connect } for pid=12839 comm="syz.6.1913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 668.821610][T12862] netlink: 'syz.6.1920': attribute type 4 has an invalid length. [ 670.177402][ T5808] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 670.537159][ T5808] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 670.657247][ T5808] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 670.673781][ T5808] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 670.685985][ T5808] usb 6-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 670.695236][ T5808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.704898][ T5808] usb 6-1: Product: syz [ 670.713147][ T5808] usb 6-1: Manufacturer: syz [ 670.748405][ T5808] usb 6-1: SerialNumber: syz [ 670.789355][ T5808] usb 6-1: config 0 descriptor?? [ 670.813068][ T5808] iguanair 6-1:0.0: probe with driver iguanair failed with error -12 [ 671.087613][T10790] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 671.283631][ T24] usb 6-1: USB disconnect, device number 7 [ 671.361600][T10790] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 671.503636][T10790] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 671.674226][T10790] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 255 [ 671.917736][T10790] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 671.979124][T10790] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.041645][T10790] usb 5-1: Product: syz [ 672.064336][T10790] usb 5-1: Manufacturer: syz [ 672.085013][T10790] usb 5-1: SerialNumber: syz [ 672.809383][T10790] usb 5-1: config 0 descriptor?? [ 672.825165][T12880] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 673.037283][ T5808] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 673.198151][T10790] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 673.206687][ T5808] usb 4-1: config 2 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 673.226754][ T5808] usb 4-1: config 2 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 673.283682][ T5808] usb 4-1: config 2 interface 0 has no altsetting 0 [ 673.326548][ T5808] usb 4-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 673.359408][ T5808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.074728][ T5808] elo 0003:04E7:0009.0008: unknown main item tag 0x0 [ 674.485002][ T5808] elo 0003:04E7:0009.0008: hidraw0: USB HID vff.ff Device [HID 04e7:0009] on usb-dummy_hcd.3-1/input0 [ 674.556420][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 674.556438][ T29] audit: type=1400 audit(1783700937.967:972): avc: denied { bind } for pid=12907 comm="syz.5.1931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 674.640260][ T29] audit: type=1400 audit(1783700938.007:973): avc: denied { write } for pid=12907 comm="syz.5.1931" path="socket:[46356]" dev="sockfs" ino=46356 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 674.737682][ T3350] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 674.746094][T12910] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1931'. [ 674.757400][ T29] audit: type=1400 audit(1783700938.037:974): avc: denied { ioctl } for pid=12907 comm="syz.5.1931" path="socket:[46359]" dev="sockfs" ino=46359 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 674.828243][T12911] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=12911 comm=syz.5.1931 [ 674.873583][ T1229] usb 4-1: USB disconnect, device number 70 [ 674.966790][T12909] fido_id[12909]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 675.148882][T10790] scsi host1: usb-storage 5-1:0.0 [ 675.190602][T10790] usb 5-1: USB disconnect, device number 74 [ 675.217756][ T29] audit: type=1400 audit(1783700938.637:975): avc: denied { read } for pid=12914 comm="syz.1.1933" name="event0" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 675.242174][ T29] audit: type=1400 audit(1783700938.667:976): avc: denied { open } for pid=12914 comm="syz.1.1933" path="/dev/input/event0" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 675.712327][T12924] process 'syz.3.1936' launched './file2' with NULL argv: empty string added [ 675.714889][ T29] audit: type=1400 audit(1783700939.127:977): avc: denied { execute } for pid=12923 comm="syz.3.1936" name="file2" dev="tmpfs" ino=2433 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 675.769029][T10790] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 675.795726][ T29] audit: type=1400 audit(1783700939.147:978): avc: denied { execute_no_trans } for pid=12923 comm="syz.3.1936" path="/398/file2" dev="tmpfs" ino=2433 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 675.854118][ T29] audit: type=1400 audit(1783700939.247:979): avc: denied { execute } for pid=12922 comm="syz.5.1935" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=45814 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 675.997114][T10790] usb 5-1: Using ep0 maxpacket: 32 [ 676.012569][T10790] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 676.037206][T10790] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 676.047270][T10790] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 676.057198][T10790] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 676.067108][T10790] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 676.076862][T10790] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 26 [ 676.092979][T10790] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 676.102185][T10790] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 676.111478][T10790] usb 5-1: SerialNumber: syz [ 676.142309][T10790] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 676.170186][T10790] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 676.968031][T12942] syz.1.1940 (12942): drop_caches: 2 [ 677.394826][ T9] usb 5-1: USB disconnect, device number 75 [ 677.997135][T10790] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 678.132409][ T5725] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 678.177079][T10790] usb 4-1: Using ep0 maxpacket: 8 [ 678.192646][T10790] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 678.213061][T10790] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 678.240099][T10790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.270893][T10790] usb 4-1: config 0 descriptor?? [ 678.295069][T10790] iowarrior 4-1:0.0: no interrupt-in endpoint found [ 678.606677][T12964] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1946'. [ 678.690073][ T5725] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 678.765913][ T5725] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 678.921406][ T5725] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 255 [ 679.157206][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 679.437281][ T5725] usb 7-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 679.446470][ T5725] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.470387][ T5725] usb 7-1: Product: syz [ 679.481900][T12965] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=12965 comm=syz.5.1946 [ 679.501246][ T5725] usb 7-1: Manufacturer: syz [ 679.517895][ T5725] usb 7-1: SerialNumber: syz [ 679.533281][ T5725] usb 7-1: config 0 descriptor?? [ 679.560654][T10431] block nbd0: Possible stuck request ffff8880285b5080: control (read@0,1024B). Runtime 360 seconds [ 679.574949][T12959] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 679.588293][ T5725] ums-isd200 7-1:0.0: USB Mass Storage device detected [ 680.201048][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 680.680936][ T9664] Bluetooth: hci1: unexpected event for opcode 0x040d [ 680.964149][ T5702] usb 4-1: USB disconnect, device number 71 [ 681.291430][ T29] audit: type=1400 audit(1783700944.707:980): avc: denied { create } for pid=12983 comm="syz.1.1951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 681.317356][ T11] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 681.331377][T12985] Invalid argument reading file caps for ./file0 [ 681.339605][T12980] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1949'. [ 681.377277][ T29] audit: type=1400 audit(1783700944.727:981): avc: denied { write } for pid=12983 comm="syz.1.1951" path="socket:[46014]" dev="sockfs" ino=46014 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 681.677879][T10790] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 681.729470][ T5725] scsi host1: usb-storage 7-1:0.0 [ 681.732459][ T29] audit: type=1400 audit(1783700945.147:982): avc: denied { kexec_image_load } for pid=12990 comm="syz.1.1953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 681.825288][ T11] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 681.838828][T10790] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 681.855921][ T11] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 681.883715][T10790] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 681.904966][ T5725] usb 7-1: USB disconnect, device number 5 [ 681.916638][ T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.002936][ T11] usb 6-1: config 0 descriptor?? [ 682.010187][T10790] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 682.047104][T10790] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.078057][T10790] usb 5-1: Product: syz [ 682.089938][ T11] pwc: Askey VC010 type 2 USB webcam detected. [ 682.106255][T10790] usb 5-1: Manufacturer: syz [ 682.131164][T10790] usb 5-1: SerialNumber: syz [ 682.139657][ T29] audit: type=1400 audit(1783700945.557:983): avc: denied { open } for pid=12997 comm="syz.1.1954" path="/dev/vhost-net" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 682.181026][T10790] cdc_mbim 5-1:1.0: skipping garbage [ 682.387704][T12980] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 682.597778][ T11] pwc: recv_control_msg error -32 req 02 val 2b00 [ 682.637516][ T11] pwc: recv_control_msg error -32 req 02 val 2700 [ 682.789373][ T11] pwc: recv_control_msg error -32 req 02 val 2c00 [ 683.026662][T12980] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 683.037493][T10790] cdc_mbim 5-1:1.0: setting tx_max = 16384 [ 683.069192][ T11] pwc: recv_control_msg error -32 req 04 val 1300 [ 683.071271][T10790] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 683.090084][ T11] pwc: recv_control_msg error -32 req 04 val 1400 [ 683.119752][ T11] pwc: recv_control_msg error -32 req 02 val 2000 [ 683.139118][T10790] wwan wwan0: port wwan0mbim0 attached [ 683.152709][ T11] pwc: recv_control_msg error -32 req 02 val 2100 [ 683.184392][T10790] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 7e:2e:a9:f7:a3:b9 [ 683.196023][ T11] pwc: recv_control_msg error -32 req 04 val 1500 [ 683.391752][ T11] pwc: recv_control_msg error -32 req 02 val 2500 [ 683.391982][T10790] usb 5-1: USB disconnect, device number 76 [ 683.405362][T10790] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 683.444558][ T11] pwc: recv_control_msg error -32 req 02 val 2400 [ 683.590113][T10790] wwan wwan0: port wwan0mbim0 disconnected [ 683.740270][ T11] pwc: recv_control_msg error -71 req 02 val 2900 [ 683.772304][ T11] pwc: recv_control_msg error -71 req 02 val 2800 [ 683.835833][ T11] pwc: recv_control_msg error -71 req 04 val 1100 [ 683.868714][ T11] pwc: recv_control_msg error -71 req 04 val 1200 [ 683.895974][ T11] pwc: Registered as video103. [ 683.928855][ T11] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input53 [ 683.983061][ T29] audit: type=1400 audit(1783700947.397:984): avc: denied { read } for pid=13010 comm="syz.3.1958" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 684.314235][ T11] usb 6-1: USB disconnect, device number 8 [ 684.358160][ T29] audit: type=1400 audit(1783700947.397:985): avc: denied { open } for pid=13010 comm="syz.3.1958" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 684.465313][ T29] audit: type=1400 audit(1783700947.717:986): avc: denied { read } for pid=4964 comm="acpid" name="event4" dev="devtmpfs" ino=3753 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 684.852447][ T29] audit: type=1400 audit(1783700947.717:987): avc: denied { open } for pid=4964 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3753 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 684.903319][ T29] audit: type=1400 audit(1783700947.717:988): avc: denied { ioctl } for pid=4964 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3753 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 684.942273][ T29] audit: type=1400 audit(1783700947.747:989): avc: denied { ioctl } for pid=13010 comm="syz.3.1958" path="socket:[47288]" dev="sockfs" ino=47288 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 685.159344][ T9] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 685.199201][T13034] fuse: Unknown parameter 'gdŒûromã*ÜìÊ( ˜”ð ¢×ü«Fà6“ó!å%uszÑßäb]Ü~;úôGnú‹ï¥ð>' [ 685.280279][T13034] syzkaller0: entered promiscuous mode [ 685.314956][T13034] syzkaller0: entered allmulticast mode [ 685.339631][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 685.353581][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 685.465144][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 255 [ 685.497182][ T5702] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 685.560183][T13044] overlayfs: missing 'lowerdir' [ 685.928683][ T9] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 685.953472][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.973651][ T9] usb 2-1: Product: syz [ 685.979003][ T9] usb 2-1: Manufacturer: syz [ 685.983652][ T9] usb 2-1: SerialNumber: syz [ 685.993174][ T9] usb 2-1: config 0 descriptor?? [ 686.004361][T13030] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 686.027448][ T9] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 686.087531][ T5702] usb 5-1: Using ep0 maxpacket: 16 [ 686.101651][ T5702] usb 5-1: unable to get BOS descriptor or descriptor too short [ 686.111917][ T5702] usb 5-1: config 16 has an invalid interface number: 44 but max is 0 [ 686.124637][ T5702] usb 5-1: config 16 has no interface number 0 [ 686.131278][ T5702] usb 5-1: config 16 interface 44 altsetting 10 bulk endpoint 0x1 has invalid maxpacket 32 [ 686.142422][ T5702] usb 5-1: config 16 interface 44 has no altsetting 0 [ 686.153874][ T5702] usb 5-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=1d.64 [ 686.163345][ T5702] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.172453][ T5702] usb 5-1: Product: syz [ 686.177710][ T5702] usb 5-1: Manufacturer: syz [ 686.184858][ T5702] usb 5-1: SerialNumber: syz [ 686.331818][T13037] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 687.067165][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 687.067181][ T29] audit: type=1400 audit(1783700950.477:993): avc: denied { ioctl } for pid=13052 comm="syz.3.1968" path="/dev/vhost-net" dev="devtmpfs" ino=1273 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 687.149638][ T5702] cypress_cy7c63 5-1:16.44: Cypress CY7C63xxx device now attached [ 687.200269][ T5702] usb 5-1: USB disconnect, device number 77 [ 687.262343][ T5702] cypress_cy7c63 5-1:16.44: Cypress CY7C63xxx device now disconnected [ 687.524061][ T5725] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 687.687116][ T5725] usb 4-1: Using ep0 maxpacket: 16 [ 687.697792][ T5725] usb 4-1: config index 0 descriptor too short (expected 1068, got 27) [ 687.706695][ T5725] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 687.719718][ T5725] usb 4-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 687.730340][ T5725] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.739599][ T5725] usb 4-1: Product: syz [ 687.746816][ T5725] usb 4-1: Manufacturer: syz [ 687.751876][ T5725] usb 4-1: SerialNumber: syz [ 687.765885][ T5725] usb 4-1: config 0 descriptor?? [ 687.877427][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 688.045110][ T9] scsi host1: usb-storage 2-1:0.0 [ 688.055294][ T29] audit: type=1400 audit(1783700951.477:994): avc: denied { getopt } for pid=13052 comm="syz.3.1968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 688.081501][T13053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1968'. [ 688.134494][ T1229] usb 4-1: USB disconnect, device number 72 [ 688.154828][ T9] usb 2-1: USB disconnect, device number 70 [ 689.507951][ T29] audit: type=1400 audit(1783700952.927:995): avc: denied { write } for pid=13087 comm="syz.3.1977" name="netstat" dev="proc" ino=4026532969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 689.848691][T13090] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1975'. [ 690.063728][ T29] audit: type=1400 audit(1783700953.477:996): avc: denied { bind } for pid=13103 comm="syz.1.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 690.161773][ T29] audit: type=1400 audit(1783700953.477:997): avc: denied { node_bind } for pid=13103 comm="syz.1.1978" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 690.215335][T13107] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 690.235516][ T29] audit: type=1400 audit(1783700953.507:998): avc: denied { read } for pid=13103 comm="syz.1.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 690.300548][T13105] nfs: Unknown parameter '/dev/kvm' [ 690.317770][ T1229] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 690.338043][T13106] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 690.507127][ T1229] usb 5-1: Using ep0 maxpacket: 32 [ 690.544729][ T1229] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 690.583101][ T1229] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 690.632849][ T1229] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 690.686241][ T1229] usb 5-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 690.740925][ T1229] usb 5-1: config 0 interface 0 has no altsetting 0 [ 690.771707][ T1229] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 690.800907][ T1229] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 690.832775][ T1229] usb 5-1: Product: syz [ 690.854176][ T1229] usb 5-1: Manufacturer: syz [ 690.879820][ T1229] usb 5-1: SerialNumber: syz [ 690.900533][ T1229] usb 5-1: config 0 descriptor?? [ 690.937136][ T1229] ldusb 5-1:0.0: Interrupt in endpoint not found [ 691.375924][ T29] audit: type=1400 audit(1783700954.787:999): avc: denied { create } for pid=13114 comm="syz.5.1981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 691.435819][ T29] audit: type=1400 audit(1783700954.847:1000): avc: denied { mmap_zero } for pid=13114 comm="syz.5.1981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 691.747949][ T5702] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 692.083129][ T5702] usb 6-1: Using ep0 maxpacket: 8 [ 692.104803][ T5702] usb 6-1: unable to get BOS descriptor or descriptor too short [ 692.131553][ T5702] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 692.173780][ T5702] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 692.228173][ T5702] usb 6-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40 [ 692.255627][ T5702] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.276818][ T5702] usb 6-1: Product: syz [ 692.286697][ T5702] usb 6-1: Manufacturer: syz [ 692.298723][ T5702] usb 6-1: SerialNumber: syz [ 692.410131][ T29] audit: type=1400 audit(1783700955.827:1001): avc: denied { write } for pid=13121 comm="syz.6.1983" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 693.319294][ T1229] usb 5-1: USB disconnect, device number 78 [ 693.434663][ T5702] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 693.461834][ T5702] usb 6-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8213); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 693.513038][ T189] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 693.578597][ T29] audit: type=1400 audit(1783700956.987:1002): avc: denied { create } for pid=13126 comm="syz.6.1985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 693.579989][ T5702] usb 6-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 693.715569][ T29] audit: type=1400 audit(1783700957.127:1003): avc: denied { map } for pid=13126 comm="syz.6.1985" path="socket:[46959]" dev="sockfs" ino=46959 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 693.828644][ T189] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 693.927184][ T189] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 693.959690][ T189] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 255 [ 693.977247][ T5702] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 693.988738][ T189] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 694.004903][ T6100] udevd[6100]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 694.030769][ T5702] usb 6-1: USB disconnect, device number 9 [ 694.040045][ T189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.065425][ T189] usb 2-1: Product: syz [ 694.078197][ T189] usb 2-1: Manufacturer: syz [ 694.157576][ T189] usb 2-1: SerialNumber: syz [ 694.383582][ T189] usb 2-1: config 0 descriptor?? [ 694.402458][T13125] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 694.429957][ T189] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 695.823142][T13152] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1990'. [ 696.577423][ T189] scsi host1: usb-storage 2-1:0.0 [ 696.651731][ T189] usb 2-1: USB disconnect, device number 71 [ 696.967646][T13166] xt_hashlimit: invalid interval [ 699.227136][ T189] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 699.388701][ T189] usb 7-1: config 0 has an invalid interface number: 214 but max is 0 [ 699.407231][ T189] usb 7-1: config 0 has an invalid descriptor of length 108, skipping remainder of the config [ 699.447079][ T189] usb 7-1: config 0 has no interface number 0 [ 699.470496][ T189] usb 7-1: too many endpoints for config 0 interface 214 altsetting 105: 108, using maximum allowed: 30 [ 699.485554][ T189] usb 7-1: config 0 interface 214 altsetting 105 has 0 endpoint descriptors, different from the interface descriptor's value: 108 [ 699.500473][ T11] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 699.517090][ T189] usb 7-1: config 0 interface 214 has no altsetting 0 [ 699.534428][ T189] usb 7-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 699.545192][ T189] usb 7-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 699.565645][ T189] usb 7-1: Manufacturer: syz [ 699.571027][ T189] usb 7-1: SerialNumber: syz [ 699.633500][ T189] usb 7-1: config 0 descriptor?? [ 699.660450][ T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 699.678597][ T11] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 699.704695][ T11] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 255 [ 699.728374][ T11] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 699.740434][ T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.832727][T13206] syz.3.2005 (13206): drop_caches: 2 [ 700.187484][ T11] usb 5-1: Product: syz [ 700.191889][ T11] usb 5-1: Manufacturer: syz [ 700.196546][ T11] usb 5-1: SerialNumber: syz [ 700.204615][ T11] usb 5-1: config 0 descriptor?? [ 700.210855][T13197] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 700.220375][ T11] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 700.246282][T13181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 700.247122][ T5702] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 700.255675][T13181] batadv_slave_1: entered promiscuous mode [ 700.300549][ T189] usb 7-1: USB disconnect, device number 6 [ 700.387136][ T5702] usb 2-1: device descriptor read/64, error -71 [ 700.655042][T13216] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2003'. [ 701.189596][ T5702] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 701.500393][ T5702] usb 2-1: device descriptor read/64, error -71 [ 701.607309][ T189] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 701.668963][ T5702] usb usb2-port1: attempt power cycle [ 701.992432][ T189] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 702.006211][ T189] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 702.019226][ T189] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 702.051722][ T189] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 702.073559][ T189] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.081850][ T189] usb 4-1: Product: syz [ 702.086128][ T189] usb 4-1: Manufacturer: syz [ 702.090982][ T189] usb 4-1: SerialNumber: syz [ 702.108301][ T189] usb 4-1: config 0 descriptor?? [ 702.115609][T13219] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 702.129233][ T189] usb 4-1: ucan: probing device on interface #0 [ 702.135867][ T189] usb 4-1: ucan: invalid EP count (1) [ 702.141565][ T189] usb 4-1: ucan: probe failed; try to update the device firmware [ 702.247171][ T5702] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 702.267668][ T5702] usb 2-1: device descriptor read/8, error -71 [ 702.297811][ T5725] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 702.335258][ T11] scsi host1: usb-storage 5-1:0.0 [ 702.394803][ T11] usb 5-1: USB disconnect, device number 79 [ 702.443198][ T29] audit: type=1400 audit(1783700965.857:1004): avc: denied { bind } for pid=13234 comm="syz.4.2011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 702.447634][ T5725] usb 7-1: Using ep0 maxpacket: 32 [ 702.502976][ T5725] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 702.512207][ T5725] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 702.525003][ T5725] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 702.544767][ T5725] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 702.559739][ T5725] usb 7-1: config 0 interface 0 has no altsetting 0 [ 702.568584][ T5725] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 702.580911][ T5725] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 702.590240][ T5725] usb 7-1: Product: syz [ 702.594728][ T5725] usb 7-1: Manufacturer: syz [ 702.600162][ T5725] usb 7-1: SerialNumber: syz [ 702.616594][ T5725] usb 7-1: config 0 descriptor?? [ 702.630577][ T5725] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 702.643013][ T5725] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 702.918401][ T29] audit: type=1400 audit(1783700966.327:1005): avc: denied { write } for pid=13234 comm="syz.4.2011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 703.162195][T13219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2006'. [ 703.417268][ T29] audit: type=1400 audit(1783700966.667:1006): avc: denied { load_policy } for pid=13213 comm="syz.3.2006" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 703.479882][ T5725] usb 7-1: USB disconnect, device number 7 [ 703.497216][ T5725] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 703.965900][T13257] syz.4.2016 (13257): drop_caches: 2 [ 704.747305][ T5725] usb 4-1: USB disconnect, device number 73 [ 705.797194][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 706.167271][ T734] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 706.175502][ T734] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 706.197202][ T5808] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 706.357187][ T5702] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 706.508357][ T5702] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 706.532128][ T5702] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 706.555308][ T5702] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 255 [ 706.585769][ T5702] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 706.630802][ T5702] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.656935][ T5702] usb 4-1: Product: syz [ 706.664672][ T5702] usb 4-1: Manufacturer: syz [ 706.673838][T13285] tmpfs: Cannot change global quota limit on remount [ 706.673984][ T5702] usb 4-1: SerialNumber: syz [ 706.803867][ T5702] usb 4-1: config 0 descriptor?? [ 706.809743][T13280] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 706.818606][ T5702] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 706.831247][ T5808] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 706.857111][ T5725] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 707.187188][ T5725] usb 7-1: device descriptor read/64, error -71 [ 707.333836][ T5808] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 707.712026][ T5725] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 707.917187][ T5725] usb 7-1: device descriptor read/64, error -71 [ 707.954239][T13303] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2021'. [ 708.345031][ T9664] Bluetooth: hci1: unexpected event for opcode 0x040d [ 708.477690][ T5725] usb usb7-port1: attempt power cycle [ 708.746171][ T29] audit: type=1400 audit(1783700972.162:1007): avc: denied { mounton } for pid=13308 comm="syz.5.2029" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 708.780833][ T29] audit: type=1400 audit(1783700972.192:1008): avc: denied { mount } for pid=13308 comm="syz.5.2029" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 708.824825][T13309] batman_adv: batadv0: Adding interface: vlan2 [ 708.831717][T13309] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 709.417192][ T5725] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 709.426175][ T5702] scsi host1: usb-storage 4-1:0.0 [ 709.443378][ T5702] usb 4-1: USB disconnect, device number 74 [ 709.499196][T13309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 709.594769][ T5725] usb 7-1: device descriptor read/8, error -71 [ 709.625026][T13309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.634912][T13309] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 709.645214][T10431] block nbd0: Possible stuck request ffff8880285b5080: control (read@0,1024B). Runtime 390 seconds [ 710.437526][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 711.303328][ T5702] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 711.357544][ T5725] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 711.366403][ T9] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 711.388952][ T5725] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 711.400906][ T5725] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 711.413667][ T5725] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 711.424046][ T5725] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 711.439149][ T5725] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 711.450245][ T5725] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 711.458570][ T5725] usb 7-1: Manufacturer: syz [ 711.470711][ T5725] usb 7-1: config 0 descriptor?? [ 711.531637][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 711.580816][ T9] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 711.635735][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.670671][ T9] usb 5-1: config 0 descriptor?? [ 711.701647][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 711.807328][ T189] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 711.892581][ T5725] appleir 0003:05AC:8243.0009: unknown main item tag 0x0 [ 711.994535][ T5725] appleir 0003:05AC:8243.0009: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 712.134187][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 712.192049][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 712.232817][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 712.513541][T13358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2039'. [ 712.522671][T13358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2039'. [ 712.535135][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 712.553319][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 712.559970][T13358] netlink: 'syz.1.2039': attribute type 11 has an invalid length. [ 712.561224][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 712.662920][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 712.670794][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 712.688369][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 712.701223][ T9] pwc: recv_control_msg error -32 req 02 val 2400 [ 712.723777][T11180] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 712.740481][ T29] audit: type=1400 audit(1783700976.162:1009): avc: denied { setopt } for pid=13357 comm="syz.1.2039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 712.769347][T11180] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 712.782954][T11180] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 712.793691][T11180] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 713.169009][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 713.176231][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 713.202943][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 713.232667][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 713.273857][ T9] pwc: Registered as video103. [ 713.289557][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input54 [ 713.326008][ T9] usb 5-1: USB disconnect, device number 80 [ 714.223593][T13380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 714.298152][T13382] FAULT_INJECTION: forcing a failure. [ 714.298152][T13382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 714.352821][T13382] CPU: 1 UID: 0 PID: 13382 Comm: syz.5.2047 Not tainted syzkaller #0 PREEMPT(full) [ 714.352847][T13382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 714.352857][T13382] Call Trace: [ 714.352864][T13382] [ 714.352871][T13382] dump_stack_lvl+0x100/0x190 [ 714.352899][T13382] should_fail_ex.cold+0x5/0xa [ 714.352922][T13382] _copy_from_user+0x2e/0xd0 [ 714.352945][T13382] copy_msghdr_from_user+0x9f/0x4c0 [ 714.352970][T13382] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 714.353007][T13382] ___sys_sendmsg+0x106/0x1e0 [ 714.353037][T13382] ? __pfx____sys_sendmsg+0x10/0x10 [ 714.353059][T13382] ? __lock_acquire+0x49f/0x1a40 [ 714.353079][T13382] ? get_pid_task+0x106/0x250 [ 714.353133][T13382] __sys_sendmsg+0x160/0x210 [ 714.353151][T13382] ? __pfx___sys_sendmsg+0x10/0x10 [ 714.353183][T13382] do_syscall_64+0x115/0x870 [ 714.353208][T13382] ? clear_bhb_loop+0x40/0x90 [ 714.353229][T13382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.353247][T13382] RIP: 0033:0x7fe82a59de59 [ 714.353263][T13382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 714.353279][T13382] RSP: 002b:00007fe82b54b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 714.353296][T13382] RAX: ffffffffffffffda RBX: 00007fe82a825fa0 RCX: 00007fe82a59de59 [ 714.353308][T13382] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 714.353318][T13382] RBP: 00007fe82b54b090 R08: 0000000000000000 R09: 0000000000000000 [ 714.353329][T13382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 714.353339][T13382] R13: 00007fe82a826038 R14: 00007fe82a825fa0 R15: 00007ffdbe04dd38 [ 714.353363][T13382] [ 714.546375][ T189] usb 7-1: USB disconnect, device number 11 [ 714.667501][ T9] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 714.808122][ T9] usb 4-1: device descriptor read/64, error -71 [ 715.417545][ T9] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 715.479876][ T189] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 715.587106][ T9] usb 4-1: device descriptor read/64, error -71 [ 715.599256][T13402] FAULT_INJECTION: forcing a failure. [ 715.599256][T13402] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 715.650183][ T189] usb 7-1: Using ep0 maxpacket: 16 [ 715.658654][T13402] CPU: 0 UID: 0 PID: 13402 Comm: syz.1.2054 Not tainted syzkaller #0 PREEMPT(full) [ 715.658670][T13402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 715.658677][T13402] Call Trace: [ 715.658681][T13402] [ 715.658686][T13402] dump_stack_lvl+0x100/0x190 [ 715.658703][T13402] should_fail_ex.cold+0x5/0xa [ 715.658718][T13402] _copy_from_user+0x2e/0xd0 [ 715.658733][T13402] ucma_write+0x128/0x330 [ 715.658747][T13402] ? __pfx_ucma_write+0x10/0x10 [ 715.658760][T13402] ? bpf_lsm_file_permission+0x9/0x10 [ 715.658776][T13402] ? security_file_permission+0x76/0x210 [ 715.658793][T13402] ? rw_verify_area+0xce/0x6d0 [ 715.658808][T13402] ? __pfx_ucma_write+0x10/0x10 [ 715.658820][T13402] vfs_writev+0x5ed/0xdd0 [ 715.658839][T13402] ? __pfx_vfs_writev+0x10/0x10 [ 715.658855][T13402] ? rcu_read_lock_any_held+0x6a/0xa0 [ 715.658885][T13402] ? __fget_files+0x21f/0x3d0 [ 715.658906][T13402] ? do_writev+0x28a/0x340 [ 715.658920][T13402] do_writev+0x28a/0x340 [ 715.658935][T13402] ? __pfx_do_writev+0x10/0x10 [ 715.658953][T13402] do_syscall_64+0x115/0x870 [ 715.658969][T13402] ? clear_bhb_loop+0x40/0x90 [ 715.658983][T13402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.658995][T13402] RIP: 0033:0x7f9614f9de59 [ 715.659005][T13402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 715.659016][T13402] RSP: 002b:00007f9615e25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 715.659027][T13402] RAX: ffffffffffffffda RBX: 00007f9615225fa0 RCX: 00007f9614f9de59 [ 715.659034][T13402] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 000000000000000f [ 715.659043][T13402] RBP: 00007f9615e25090 R08: 0000000000000000 R09: 0000000000000000 [ 715.659050][T13402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 715.659057][T13402] R13: 00007f9615226038 R14: 00007f9615225fa0 R15: 00007ffd17802108 [ 715.659071][T13402] [ 715.683082][ T189] usb 7-1: config index 0 descriptor too short (expected 1068, got 27) [ 715.683098][ T189] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 715.684681][ T189] usb 7-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 715.684698][ T189] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.684709][ T189] usb 7-1: Product: syz [ 715.684718][ T189] usb 7-1: Manufacturer: syz [ 715.684726][ T189] usb 7-1: SerialNumber: syz [ 715.686178][ T189] usb 7-1: config 0 descriptor?? [ 715.698552][ T9] usb usb4-port1: attempt power cycle [ 716.215918][ T9664] Bluetooth: hci1: unexpected event for opcode 0x040d [ 716.261132][T13390] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2051'. [ 716.507547][ T9] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 716.516437][ T189] usb 7-1: USB disconnect, device number 12 [ 716.571935][ T9] usb 4-1: device descriptor read/8, error -71 [ 716.918647][T13423] FAULT_INJECTION: forcing a failure. [ 716.918647][T13423] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 716.952537][T13423] CPU: 1 UID: 0 PID: 13423 Comm: syz.3.2060 Not tainted syzkaller #0 PREEMPT(full) [ 716.952562][T13423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 716.952573][T13423] Call Trace: [ 716.952580][T13423] [ 716.952587][T13423] dump_stack_lvl+0x100/0x190 [ 716.952615][T13423] should_fail_ex.cold+0x5/0xa [ 716.952638][T13423] _copy_from_user+0x2e/0xd0 [ 716.952660][T13423] copy_msghdr_from_user+0x9f/0x4c0 [ 716.952685][T13423] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 716.952721][T13423] ___sys_sendmsg+0x106/0x1e0 [ 716.952746][T13423] ? __pfx____sys_sendmsg+0x10/0x10 [ 716.952767][T13423] ? __lock_acquire+0x49f/0x1a40 [ 716.952787][T13423] ? get_pid_task+0x106/0x250 [ 716.952840][T13423] __sys_sendmsg+0x160/0x210 [ 716.952866][T13423] ? __pfx___sys_sendmsg+0x10/0x10 [ 716.952898][T13423] do_syscall_64+0x115/0x870 [ 716.952922][T13423] ? clear_bhb_loop+0x40/0x90 [ 716.952944][T13423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.952962][T13423] RIP: 0033:0x7f91a4b9de59 [ 716.952980][T13423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 716.952996][T13423] RSP: 002b:00007f91a5b2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 716.953014][T13423] RAX: ffffffffffffffda RBX: 00007f91a4e25fa0 RCX: 00007f91a4b9de59 [ 716.953026][T13423] RDX: 0000000020004000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 716.953037][T13423] RBP: 00007f91a5b2e090 R08: 0000000000000000 R09: 0000000000000000 [ 716.953047][T13423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 716.953058][T13423] R13: 00007f91a4e26038 R14: 00007f91a4e25fa0 R15: 00007fffb4b2b2c8 [ 716.953082][T13423] [ 717.868153][T13434] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2064'. [ 718.512087][ T29] audit: type=1400 audit(1783700981.922:1010): avc: denied { create } for pid=13427 comm="syz.3.2063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 718.616734][ T29] audit: type=1400 audit(1783700981.922:1011): avc: denied { bind } for pid=13427 comm="syz.3.2063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 718.796619][ T29] audit: type=1400 audit(1783700981.962:1012): avc: denied { listen } for pid=13427 comm="syz.3.2063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 718.899012][ T29] audit: type=1400 audit(1783700981.972:1013): avc: denied { connect } for pid=13427 comm="syz.3.2063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 718.999263][ T29] audit: type=1400 audit(1783700982.022:1014): avc: denied { connect } for pid=13427 comm="syz.3.2063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 719.237197][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 719.279620][T13451] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2066'. [ 719.577097][ T5808] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 719.737125][T10790] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 719.746238][ T5808] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 719.769695][ T5808] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 719.898842][ T5808] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 719.908366][ T5808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.932584][T10790] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 720.443202][ T5808] usb 6-1: Product: syz [ 720.452014][T10790] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 720.465242][ T5808] usb 6-1: Manufacturer: syz [ 720.478011][ T5808] usb 6-1: SerialNumber: syz [ 720.486051][T10790] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.505499][ T5808] cdc_mbim 6-1:1.0: skipping garbage [ 720.514769][T10790] usb 7-1: config 0 descriptor?? [ 720.546299][T10790] pwc: Askey VC010 type 2 USB webcam detected. [ 720.703529][T13451] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 720.974536][T10790] pwc: recv_control_msg error -32 req 02 val 2b00 [ 720.996186][T10790] pwc: recv_control_msg error -32 req 02 val 2700 [ 721.013187][T10790] pwc: recv_control_msg error -32 req 02 val 2c00 [ 721.117144][ T24] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 721.307144][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 721.325256][ T24] usb 2-1: config index 0 descriptor too short (expected 1068, got 27) [ 721.335183][T13451] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 721.349263][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 721.363686][ T5808] cdc_mbim 6-1:1.0: setting tx_max = 16384 [ 721.936331][T10790] pwc: recv_control_msg error -32 req 04 val 1300 [ 721.946715][ T5808] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 721.955113][ T24] usb 2-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 721.973190][T10790] pwc: recv_control_msg error -32 req 04 val 1400 [ 721.979834][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.989386][ T24] usb 2-1: Product: syz [ 721.990437][ T5808] wwan wwan0: port wwan0mbim0 attached [ 722.001498][T10790] pwc: recv_control_msg error -32 req 02 val 2000 [ 722.009090][ T24] usb 2-1: Manufacturer: syz [ 722.013987][T10790] pwc: recv_control_msg error -32 req 02 val 2100 [ 722.094162][ T24] usb 2-1: SerialNumber: syz [ 722.107435][T10790] pwc: recv_control_msg error -32 req 04 val 1500 [ 722.121133][ T24] usb 2-1: config 0 descriptor?? [ 722.141337][T10790] pwc: recv_control_msg error -32 req 02 val 2500 [ 722.159948][ T5808] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 1a:46:e3:d5:1e:fa [ 722.174518][T10790] pwc: recv_control_msg error -32 req 02 val 2400 [ 722.235620][ T5808] usb 6-1: USB disconnect, device number 10 [ 722.266313][ T5808] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 722.361664][ T5808] wwan wwan0: port wwan0mbim0 disconnected [ 722.401954][T10790] pwc: recv_control_msg error -71 req 02 val 2900 [ 722.409093][T13473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2072'. [ 722.441826][T10790] pwc: recv_control_msg error -71 req 02 val 2800 [ 722.476433][T10790] pwc: recv_control_msg error -71 req 04 val 1100 [ 722.504106][T10790] pwc: recv_control_msg error -71 req 04 val 1200 [ 722.537512][ T9] usb 2-1: USB disconnect, device number 76 [ 722.538386][T10790] pwc: Registered as video103. [ 723.080963][T10790] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input55 [ 723.202232][T10790] usb 7-1: USB disconnect, device number 13 [ 723.205391][ T11] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 723.501873][T13510] tmpfs: Cannot change global quota limit on remount [ 723.538210][ T11] usb 4-1: Using ep0 maxpacket: 16 [ 723.559279][ T11] usb 4-1: config index 0 descriptor too short (expected 1068, got 27) [ 723.582498][ T11] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 723.626262][ T11] usb 4-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 723.655735][ T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.684064][ T11] usb 4-1: Product: syz [ 723.722510][ T11] usb 4-1: Manufacturer: syz [ 724.010719][ T11] usb 4-1: SerialNumber: syz [ 724.045729][ T11] usb 4-1: config 0 descriptor?? [ 724.255778][ T29] audit: type=1400 audit(1783700987.672:1015): avc: denied { write } for pid=13498 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 725.081055][T13491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2076'. [ 725.107160][ T29] audit: type=1400 audit(1783700988.522:1016): avc: denied { write } for pid=13530 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 725.144795][T10790] usb 4-1: USB disconnect, device number 79 [ 725.555081][T13535] batman_adv: batadv0: Interface activated: vlan2 [ 727.201016][ T9664] Bluetooth: hci5: link tx timeout [ 727.228093][ T9664] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 727.253496][ T29] audit: type=1400 audit(1783700990.572:1017): avc: denied { connect } for pid=13551 comm="syz.1.2088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 727.273964][ T29] audit: type=1400 audit(1783700990.632:1018): avc: denied { shutdown } for pid=13551 comm="syz.1.2088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 727.931785][ T29] audit: type=1400 audit(1783700991.352:1019): avc: denied { write } for pid=13541 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 728.027140][T10790] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 728.094853][ T29] audit: type=1400 audit(1783700991.512:1020): avc: denied { write } for pid=13571 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 728.174137][T13572] md: md2 stopped. [ 728.177136][ T29] audit: type=1400 audit(1783700991.592:1021): avc: denied { ioctl } for pid=13569 comm="syz.4.2082" path="/408/file0/file0" dev="fuse" ino=64 ioctlcmd=0x932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 728.218573][T13572] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2082'. [ 728.256269][T10790] usb 4-1: Using ep0 maxpacket: 16 [ 728.286497][T10790] usb 4-1: config index 0 descriptor too short (expected 1068, got 27) [ 728.294854][ T29] audit: type=1400 audit(1783700991.642:1022): avc: denied { write } for pid=13569 comm="syz.4.2082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 728.338515][T10790] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 728.366338][T10790] usb 4-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 728.382329][T10790] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.413888][T10790] usb 4-1: Product: syz [ 728.423563][T10790] usb 4-1: Manufacturer: syz [ 728.432932][T10790] usb 4-1: SerialNumber: syz [ 728.464583][T10790] usb 4-1: config 0 descriptor?? [ 728.497072][ T9] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 728.909912][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 728.924562][T13553] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2089'. [ 728.942431][ T9] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 728.980975][ T189] usb 4-1: USB disconnect, device number 80 [ 728.992311][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.040521][ T9] usb 7-1: config 0 descriptor?? [ 729.078506][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 729.382396][T13594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2090'. [ 729.397159][ T9664] Bluetooth: hci5: command 0x0406 tx timeout [ 729.424714][T13594] netlink: 'syz.1.2090': attribute type 6 has an invalid length. [ 729.501920][T13597] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.2097'. [ 729.506358][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 729.526579][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 729.542914][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 729.708858][ T189] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 730.028391][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 730.062022][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 730.091325][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 730.106505][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 730.121159][ T189] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 730.151199][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 730.160836][ T189] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 730.171150][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 730.179103][ T189] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 730.190322][ T9] pwc: recv_control_msg error -32 req 02 val 2400 [ 730.197111][ T189] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.209726][ T189] usb 2-1: config 0 descriptor?? [ 730.432210][T10790] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 730.440741][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 730.459130][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 730.466003][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 730.474713][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 730.487541][ T9] pwc: Registered as video103. [ 730.500938][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input56 [ 730.526771][ T9] usb 7-1: USB disconnect, device number 14 [ 730.607571][T10790] usb 4-1: Using ep0 maxpacket: 32 [ 730.880021][T10790] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 730.891975][T10790] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 730.894982][ T189] usbhid 2-1:0.0: can't add hid device: -71 [ 730.904545][T10790] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 730.932709][ T189] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 730.966765][ T189] usb 2-1: USB disconnect, device number 77 [ 730.980968][T10790] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 731.023281][T10790] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 731.060104][T10790] usb 4-1: config 0 interface 0 has no altsetting 0 [ 731.078852][T10790] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 731.092636][T10790] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 731.112337][T10790] usb 4-1: Product: syz [ 731.120725][T10790] usb 4-1: Manufacturer: syz [ 731.130519][T10790] usb 4-1: SerialNumber: syz [ 731.142022][T10790] usb 4-1: config 0 descriptor?? [ 731.154181][T10790] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 731.176965][T10790] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 731.551177][T13610] ldusb 4-1:0.0: Couldn't submit interrupt_in_urb -90 [ 731.570474][T13631] tmpfs: Cannot change global quota limit on remount [ 732.077122][ T5717] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 732.257544][ T5717] usb 6-1: Using ep0 maxpacket: 16 [ 732.276630][ T5717] usb 6-1: config index 0 descriptor too short (expected 1068, got 27) [ 732.304400][ T5717] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 732.336147][ T5717] usb 6-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 732.361928][ T5717] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.388024][ T5717] usb 6-1: Product: syz [ 732.404642][ T5717] usb 6-1: Manufacturer: syz [ 732.421576][ T5717] usb 6-1: SerialNumber: syz [ 732.444974][ T5717] usb 6-1: config 0 descriptor?? [ 732.729355][T13634] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2109'. [ 732.934153][T13652] overlay: filesystem on ./file0 not supported as upperdir [ 733.480394][ T9664] Bluetooth: hci0: command 0x0406 tx timeout [ 733.492917][ T9] usb 4-1: USB disconnect, device number 81 [ 733.536547][ T9] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 733.715980][ T189] usb 6-1: USB disconnect, device number 11 [ 737.167264][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 737.734909][T13694] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2121'. [ 737.841561][T13694] netlink: 'syz.4.2121': attribute type 6 has an invalid length. [ 739.567282][ T189] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 739.717364][T10431] block nbd0: Possible stuck request ffff8880285b5080: control (read@0,1024B). Runtime 420 seconds [ 739.747078][ T189] usb 7-1: Using ep0 maxpacket: 16 [ 739.769160][ T189] usb 7-1: unable to get BOS descriptor or descriptor too short [ 739.779649][ T189] usb 7-1: config 16 has an invalid interface number: 44 but max is 0 [ 739.790169][ T189] usb 7-1: config 16 has no interface number 0 [ 739.813851][ T189] usb 7-1: config 16 interface 44 altsetting 10 bulk endpoint 0x1 has invalid maxpacket 32 [ 739.824926][ T189] usb 7-1: config 16 interface 44 has no altsetting 0 [ 739.836782][ T189] usb 7-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=1d.64 [ 739.929073][ T189] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.944859][ T189] usb 7-1: Product: syz [ 739.969555][ T189] usb 7-1: Manufacturer: syz [ 739.979323][ T189] usb 7-1: SerialNumber: syz [ 739.997947][T13709] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 740.047297][T10790] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 740.227339][ T189] cypress_cy7c63 7-1:16.44: Cypress CY7C63xxx device now attached [ 740.249648][ T189] usb 7-1: USB disconnect, device number 15 [ 740.260281][ T189] cypress_cy7c63 7-1:16.44: Cypress CY7C63xxx device now disconnected [ 740.471800][T13727] syz.3.2130 (13727): drop_caches: 2 [ 740.859365][T10790] usb 5-1: Using ep0 maxpacket: 16 [ 740.881062][T10790] usb 5-1: config index 0 descriptor too short (expected 1068, got 27) [ 740.905199][T10790] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 740.943352][T10790] usb 5-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 740.997384][T10790] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.020027][T10790] usb 5-1: Product: syz [ 741.027269][T10790] usb 5-1: Manufacturer: syz [ 741.031989][T10790] usb 5-1: SerialNumber: syz [ 741.103608][T10790] usb 5-1: config 0 descriptor?? [ 741.646910][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 741.883667][T13715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2129'. [ 741.931609][T10790] usb 5-1: USB disconnect, device number 81 [ 742.653684][T13751] overlay: filesystem on ./file0 not supported as upperdir [ 743.357300][T13754] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2137'. [ 743.393072][T13756] FAULT_INJECTION: forcing a failure. [ 743.393072][T13756] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 743.462328][T13756] CPU: 0 UID: 0 PID: 13756 Comm: syz.4.2136 Not tainted syzkaller #0 PREEMPT(full) [ 743.462345][T13756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 743.462352][T13756] Call Trace: [ 743.462356][T13756] [ 743.462361][T13756] dump_stack_lvl+0x100/0x190 [ 743.462379][T13756] should_fail_ex.cold+0x5/0xa [ 743.462393][T13756] _copy_from_user+0x2e/0xd0 [ 743.462407][T13756] copy_msghdr_from_user+0x9f/0x4c0 [ 743.462424][T13756] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 743.462445][T13756] ___sys_sendmsg+0x106/0x1e0 [ 743.462461][T13756] ? __pfx____sys_sendmsg+0x10/0x10 [ 743.462475][T13756] ? __lock_acquire+0x49f/0x1a40 [ 743.462493][T13756] ? get_pid_task+0x106/0x250 [ 743.462537][T13756] __sys_sendmsg+0x160/0x210 [ 743.462555][T13756] ? __pfx___sys_sendmsg+0x10/0x10 [ 743.462582][T13756] do_syscall_64+0x115/0x870 [ 743.462599][T13756] ? clear_bhb_loop+0x40/0x90 [ 743.462613][T13756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.462624][T13756] RIP: 0033:0x7f20fbb9de59 [ 743.462635][T13756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 743.462646][T13756] RSP: 002b:00007f20fc9bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 743.462657][T13756] RAX: ffffffffffffffda RBX: 00007f20fbe25fa0 RCX: 00007f20fbb9de59 [ 743.462665][T13756] RDX: 0000000000040000 RSI: 0000200000000000 RDI: 0000000000000003 [ 743.462672][T13756] RBP: 00007f20fc9bc090 R08: 0000000000000000 R09: 0000000000000000 [ 743.462678][T13756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 743.462685][T13756] R13: 00007f20fbe26038 R14: 00007f20fbe25fa0 R15: 00007ffcac20fc38 [ 743.462698][T13756] [ 743.762181][T13740] 9p: Bad value for 'wfdno' [ 743.822320][T13740] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2134'. [ 743.861232][T13740] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 743.929837][T13567] Bluetooth: hci0: unexpected event for opcode 0x040d [ 744.711978][T13779] macsec0: entered promiscuous mode [ 744.724550][T13779] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2141'. [ 744.796363][T13779] veth1_macvtap: left promiscuous mode [ 744.813616][T13779] macsec0 (unregistering): left promiscuous mode [ 745.302317][T13770] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2144'. [ 746.017331][ T5725] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 746.191986][ T5725] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 746.203841][ T5725] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 746.216008][ T5725] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 746.225406][ T5725] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.234424][ T5725] usb 4-1: Product: syz [ 746.238781][ T5725] usb 4-1: Manufacturer: syz [ 746.243544][ T5725] usb 4-1: SerialNumber: syz [ 746.258389][ T5725] cdc_mbim 4-1:1.0: skipping garbage [ 746.317238][ T9] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 746.477264][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 746.486153][T13770] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 746.504674][ T9] usb 2-1: config index 0 descriptor too short (expected 1068, got 27) [ 746.517894][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 746.564234][ T9] usb 2-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 746.575301][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.586901][ T9] usb 2-1: Product: syz [ 746.622326][ T9] usb 2-1: Manufacturer: syz [ 746.628400][ T9] usb 2-1: SerialNumber: syz [ 746.767563][ T9] usb 2-1: config 0 descriptor?? [ 746.906454][T13803] FAULT_INJECTION: forcing a failure. [ 746.906454][T13803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 746.921785][T13803] CPU: 0 UID: 0 PID: 13803 Comm: syz.6.2149 Not tainted syzkaller #0 PREEMPT(full) [ 746.921805][T13803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 746.921812][T13803] Call Trace: [ 746.921816][T13803] [ 746.921821][T13803] dump_stack_lvl+0x100/0x190 [ 746.921837][T13803] should_fail_ex.cold+0x5/0xa [ 746.921852][T13803] _copy_from_user+0x2e/0xd0 [ 746.921868][T13803] copy_msghdr_from_user+0x9f/0x4c0 [ 746.921884][T13803] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 746.921906][T13803] ___sys_sendmsg+0x106/0x1e0 [ 746.921922][T13803] ? __pfx____sys_sendmsg+0x10/0x10 [ 746.921936][T13803] ? __lock_acquire+0x49f/0x1a40 [ 746.921950][T13803] ? get_pid_task+0x106/0x250 [ 746.921998][T13803] __sys_sendmsg+0x160/0x210 [ 746.922010][T13803] ? __pfx___sys_sendmsg+0x10/0x10 [ 746.922028][T13803] do_syscall_64+0x115/0x870 [ 746.922044][T13803] ? clear_bhb_loop+0x40/0x90 [ 746.922058][T13803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.922069][T13803] RIP: 0033:0x7f211d39de59 [ 746.922079][T13803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 746.922091][T13803] RSP: 002b:00007f211b5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 746.922102][T13803] RAX: ffffffffffffffda RBX: 00007f211d625fa0 RCX: 00007f211d39de59 [ 746.922109][T13803] RDX: 0000000004000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 746.922116][T13803] RBP: 00007f211b5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 746.922122][T13803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 746.922129][T13803] R13: 00007f211d626038 R14: 00007f211d625fa0 R15: 00007ffe3372cc08 [ 746.922143][T13803] [ 747.118791][T13788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2146'. [ 747.132453][ T9] usb 2-1: USB disconnect, device number 78 [ 747.305865][T13770] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 747.313844][ T5725] cdc_mbim 4-1:1.0: setting tx_max = 16384 [ 747.323129][ T5725] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 747.343922][ T5725] wwan wwan0: port wwan0mbim0 attached [ 747.381293][ T5725] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, ba:e1:5e:82:f9:3e [ 747.854440][ T9] usb 4-1: USB disconnect, device number 82 [ 747.862283][ T9] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 748.134258][T13823] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 748.507111][ T29] audit: type=1400 audit(1783701011.402:1023): avc: denied { create } for pid=13818 comm="syz.1.2155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 748.573833][ T29] audit: type=1400 audit(1783701011.402:1024): avc: denied { write } for pid=13818 comm="syz.1.2155" path="socket:[50525]" dev="sockfs" ino=50525 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 748.825088][ T29] audit: type=1400 audit(1783701011.412:1025): avc: denied { setopt } for pid=13818 comm="syz.1.2155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 749.013106][ T9] wwan wwan0: port wwan0mbim0 disconnected [ 750.146891][T13831] FAULT_INJECTION: forcing a failure. [ 750.146891][T13831] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 750.160048][T13831] CPU: 1 UID: 0 PID: 13831 Comm: syz.1.2156 Not tainted syzkaller #0 PREEMPT(full) [ 750.160071][T13831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 750.160082][T13831] Call Trace: [ 750.160089][T13831] [ 750.160095][T13831] dump_stack_lvl+0x100/0x190 [ 750.160121][T13831] should_fail_ex.cold+0x5/0xa [ 750.160144][T13831] _copy_from_user+0x2e/0xd0 [ 750.160165][T13831] copy_msghdr_from_user+0x9f/0x4c0 [ 750.160190][T13831] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 750.160225][T13831] ___sys_sendmsg+0x106/0x1e0 [ 750.160250][T13831] ? __pfx____sys_sendmsg+0x10/0x10 [ 750.160270][T13831] ? __lock_acquire+0x49f/0x1a40 [ 750.160289][T13831] ? get_pid_task+0x106/0x250 [ 750.160336][T13831] __sys_sendmsg+0x160/0x210 [ 750.160355][T13831] ? __pfx___sys_sendmsg+0x10/0x10 [ 750.160385][T13831] do_syscall_64+0x115/0x870 [ 750.160411][T13831] ? clear_bhb_loop+0x40/0x90 [ 750.160431][T13831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.160448][T13831] RIP: 0033:0x7f9614f9de59 [ 750.160461][T13831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 750.160477][T13831] RSP: 002b:00007f9615e25028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 750.160493][T13831] RAX: ffffffffffffffda RBX: 00007f9615225fa0 RCX: 00007f9614f9de59 [ 750.160504][T13831] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 750.160514][T13831] RBP: 00007f9615e25090 R08: 0000000000000000 R09: 0000000000000000 [ 750.160524][T13831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 750.160533][T13831] R13: 00007f9615226038 R14: 00007f9615225fa0 R15: 00007ffd17802108 [ 750.160556][T13831] [ 750.473885][ T29] audit: type=1400 audit(1783701013.892:1026): avc: denied { write } for pid=13859 comm="syz.1.2163" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 750.632606][ T29] audit: type=1400 audit(1783701014.032:1027): avc: denied { ioctl } for pid=13859 comm="syz.1.2163" path="/dev/uinput" dev="devtmpfs" ino=921 ioctlcmd=0x5566 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 750.695992][ T29] audit: type=1400 audit(1783701014.032:1028): avc: denied { write } for pid=13824 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 750.748348][ T29] audit: type=1400 audit(1783701014.162:1029): avc: denied { write } for pid=13865 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 750.952414][ T29] audit: type=1400 audit(1783701014.372:1030): avc: denied { create } for pid=13872 comm="syz.3.2165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 751.107192][ T5717] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 751.387327][T10790] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 751.737323][ T5717] usb 2-1: Using ep0 maxpacket: 8 [ 751.751130][ T5717] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 751.774205][T10790] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 751.798201][ T5717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.810309][T10790] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.821907][ T29] audit: type=1400 audit(1783701015.242:1031): avc: denied { write } for pid=13868 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 751.845069][ T5717] usb 2-1: Product: syz [ 751.845089][ T5717] usb 2-1: Manufacturer: syz [ 751.845105][ T5717] usb 2-1: SerialNumber: syz [ 751.848515][ T5717] usb 2-1: config 0 descriptor?? [ 751.865073][T10790] usb 6-1: config 0 descriptor?? [ 752.190113][T13893] syz.3.2168 (13893): drop_caches: 2 [ 752.332911][T10790] usb 6-1: string descriptor 0 read error: -71 [ 752.592552][T10790] usb 6-1: USB disconnect, device number 12 [ 752.693900][ T29] audit: type=1400 audit(1783701016.112:1032): avc: denied { write } for pid=13896 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 752.937641][ T5717] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 752.993091][ T5717] usb 2-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 753.034951][ T5717] usb 2-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 753.490232][T13908] batman_adv: batadv0: Adding interface: vlan2 [ 753.530412][T13908] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 753.570710][T13908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 753.617128][T13908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.631894][T13908] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 753.875591][T13920] openvswitch: netlink: Missing valid actions attribute. [ 753.904831][T13920] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 754.022399][T13922] IPv6: NLM_F_REPLACE set, but no existing node found! [ 755.299021][T13931] syz.1.2179 (13931): drop_caches: 2 [ 755.772424][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 755.772439][ T29] audit: type=1400 audit(1783701019.192:1035): avc: denied { setopt } for pid=13934 comm="syz.4.2180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 755.973369][ T29] audit: type=1400 audit(1783701019.192:1036): avc: denied { write } for pid=13934 comm="syz.4.2180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 756.428020][ T5814] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 756.581324][ T5814] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 756.685621][ T5814] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 756.717307][ T5814] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.742488][ T5814] usb 5-1: config 0 descriptor?? [ 756.776580][ T5814] pwc: Askey VC010 type 2 USB webcam detected. [ 757.210203][ T5814] pwc: recv_control_msg error -32 req 02 val 2b00 [ 757.595742][ T5814] pwc: recv_control_msg error -32 req 02 val 2700 [ 757.617991][ T5814] pwc: recv_control_msg error -32 req 02 val 2c00 [ 757.637487][ T30] INFO: task syz.0.1727:12009 blocked for more than 143 seconds. [ 757.652204][ T30] Not tainted syzkaller #0 [ 757.716359][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 757.785375][ T30] task:syz.0.1727 state:D stack:26616 pid:12009 tgid:12007 ppid:5614 task_flags:0x400040 flags:0x00080002 [ 757.922536][ T30] Call Trace: [ 757.960017][ T30] [ 757.968246][ T30] __schedule+0x125c/0x6730 [ 757.981784][ T30] ? __pfx___schedule+0x10/0x10 [ 758.020524][ T30] ? find_held_lock+0x2b/0x80 [ 758.035693][ T30] ? schedule+0x225/0x2c0 [ 758.043725][ T5814] pwc: recv_control_msg error -32 req 04 val 1300 [ 758.056842][ T30] schedule+0xdd/0x2c0 [ 758.070717][ T30] schedule_preempt_disabled+0x13/0x30 [ 758.082494][ T5814] pwc: recv_control_msg error -32 req 04 val 1400 [ 758.102615][ T30] __mutex_lock+0xccc/0x1bd0 [ 758.123436][T13948] batadv0: entered promiscuous mode [ 758.130576][T13948] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 758.146470][ T5814] pwc: recv_control_msg error -32 req 02 val 2000 [ 758.166737][ T30] ? bdev_open+0x41a/0xe40 [ 758.174765][ T5814] pwc: recv_control_msg error -32 req 02 val 2100 [ 758.183601][ T30] ? find_held_lock+0x2b/0x80 [ 758.194021][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 758.199469][ T5814] pwc: recv_control_msg error -32 req 04 val 1500 [ 758.212546][ T30] ? bdev_open+0x41a/0xe40 [ 758.217326][ T5814] pwc: recv_control_msg error -32 req 02 val 2500 [ 758.225088][ T30] bdev_open+0x41a/0xe40 [ 758.229721][ T30] ? iput+0x3a/0x40 [ 758.229824][ T5814] pwc: recv_control_msg error -32 req 02 val 2400 [ 758.240359][ T30] blkdev_open+0x34e/0x4f0 [ 758.244880][ T30] do_dentry_open+0x6ab/0x14d0 [ 758.250345][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 758.255510][ T30] vfs_open+0x82/0x3f0 [ 758.260031][ T30] path_openat+0x2873/0x4280 [ 758.269784][ T30] ? __pfx_path_openat+0x10/0x10 [ 758.275152][ T30] do_file_open+0x20e/0x430 [ 758.280555][ T30] ? __pfx_do_file_open+0x10/0x10 [ 758.287275][ T30] ? alloc_fd+0x471/0x7a0 [ 758.293264][ T30] ? do_getname+0x191/0x390 [ 758.298849][ T30] do_sys_openat2+0x10f/0x1e0 [ 758.303882][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 758.310905][ T30] __x64_sys_openat+0x12d/0x210 [ 758.317278][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 758.323223][ T30] do_syscall_64+0x115/0x870 [ 758.328216][ T30] ? clear_bhb_loop+0x40/0x90 [ 758.333778][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.340868][ T30] RIP: 0033:0x7fdf6c35e68e [ 758.346191][ T30] RSP: 002b:00007fdf6d317b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 758.363554][ T30] RAX: ffffffffffffffda RBX: 00007fdf6d3186c0 RCX: 00007fdf6c35e68e [ 758.380393][ T30] RDX: 0000000000000000 RSI: 00007fdf6d317c00 RDI: ffffffffffffff9c [ 758.397054][ T30] RBP: 00007fdf6d317c00 R08: 0000000000000000 R09: 0000000000000000 [ 758.413780][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 758.430649][ T30] R13: 00007fdf6c626038 R14: 00007fdf6c625fa0 R15: 00007ffd41806318 [ 758.448306][ T30] [ 758.455902][ T30] [ 758.455902][ T30] Showing all locks held in the system: [ 758.465989][ T5814] pwc: recv_control_msg error -71 req 02 val 2900 [ 758.478185][ T30] 1 lock held by khungtaskd/30: [ 758.486126][ T5814] pwc: recv_control_msg error -71 req 02 val 2800 [ 758.497366][ T30] #0: ffffffff8ebe6100 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 758.516989][ T5814] pwc: recv_control_msg error -71 req 04 val 1100 [ 758.526553][ T30] 3 locks held by kworker/u8:2/35: [ 758.533603][ T5814] pwc: recv_control_msg error -71 req 04 val 1200 [ 758.543713][ T30] #0: ffff8880b843b520 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 758.559195][ T5814] pwc: Registered as video103. [ 758.568318][ T5814] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input58 [ 758.580801][ T30] #1: ffff8880b8524568 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2e8e/0x6730 [ 758.598767][ T30] #2: ffff8880b8526298 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x124/0x1d0 [ 758.617415][ T5814] usb 5-1: USB disconnect, device number 82 [ 758.636390][ T30] 5 locks held by kworker/u8:5/93: [ 758.650864][ T30] 3 locks held by kworker/u8:6/734: [ 758.660235][ T30] #0: ffff8880b843b520 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 758.686849][ T30] #1: ffff8880b8524568 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2e8e/0x6730 [ 758.707353][ T30] #2: ffffffff8ebe6100 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 758.728678][ T30] 1 lock held by acpid/4964: [ 758.740101][ T30] #0: ffffffff8ebf1ba8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 758.765373][ T30] 2 locks held by getty/5365: [ 758.776109][ T30] #0: ffff888036bf70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 758.797173][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 758.820696][ T30] 1 lock held by udevd/5601: [ 758.833565][ T30] #0: ffff888027e96350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 758.853467][ T30] 2 locks held by syz-executor/5619: [ 758.864922][ T30] 6 locks held by kworker/1:6/5717: [ 758.877075][ T30] #0: ffff888020ef2540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 758.900537][ T30] #1: ffffc9000429fd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 758.914308][ T30] #2: ffff88802afbb1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 758.926607][ T30] #3: ffff88805439d1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 758.937259][ T30] #4: ffff88803537c1a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 758.946553][ T30] #5: ffffffff8ea8b3a8 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xab/0x250 [ 758.957351][ T30] 7 locks held by kworker/0:6/5814: [ 758.962543][ T30] #0: ffff888020ef2540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 758.973501][ T30] #1: ffffc9000483fd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 758.984926][ T30] #2: ffff88802b1431d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 758.993879][ T30] #3: ffff88802b0e01d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x9a0 [ 759.003827][ T30] #4: ffff88802edc71a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 759.014571][ T30] #5: ffffffff902b91e0 (input_mutex){+.+.}-{4:4}, at: __input_unregister_device+0x138/0x4d0 [ 759.024776][ T30] #6: ffffffff8ebf1ba8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 759.036484][ T30] 4 locks held by udevd/6100: [ 759.041236][ T30] #0: ffff88802acd01b8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 759.050198][ T30] #1: ffff888055337c80 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 759.059689][ T30] #2: ffff888079690d28 (kn->active#27){++++}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0 [ 759.069468][ T30] #3: ffff88805439d1d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 759.082243][ T30] 1 lock held by syz.0.1727/12009: [ 759.087504][ T30] #0: ffff888027e96350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 759.100024][ T30] [ 759.102997][ T30] ============================================= [ 759.102997][ T30] [ 759.130064][ T30] NMI backtrace for cpu 0 [ 759.130078][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 759.130098][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 759.130108][ T30] Call Trace: [ 759.130115][ T30] [ 759.130122][ T30] dump_stack_lvl+0x100/0x190 [ 759.130146][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 759.130169][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 759.130191][ T30] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 759.130215][ T30] sys_info+0x141/0x190 [ 759.130232][ T30] watchdog+0xcb1/0x1030 [ 759.130256][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 759.130280][ T30] ? __pfx_watchdog+0x10/0x10 [ 759.130300][ T30] ? __kthread_parkme+0x18c/0x230 [ 759.130325][ T30] ? kthread+0x13a/0x450 [ 759.130347][ T30] ? __pfx_watchdog+0x10/0x10 [ 759.130364][ T30] kthread+0x370/0x450 [ 759.130388][ T30] ? __pfx_kthread+0x10/0x10 [ 759.130414][ T30] ret_from_fork+0x72b/0xd50 [ 759.130438][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 759.130460][ T30] ? __switch_to+0x800/0x10f0 [ 759.130488][ T30] ? __pfx_kthread+0x10/0x10 [ 759.130514][ T30] ret_from_fork_asm+0x1a/0x30 [ 759.130550][ T30] [ 759.130556][ T30] Sending NMI from CPU 0 to CPUs 1: [ 759.258298][ C1] NMI backtrace for cpu 1 [ 759.258312][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 759.258334][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 759.258342][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 759.258364][ C1] Code: a6 8d 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 79 12 00 fb f4 bc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 759.258377][ C1] RSP: 0018:ffffc90000197e00 EFLAGS: 00000242 [ 759.258390][ C1] RAX: 000000000527ed0d RBX: ffff88801eaba540 RCX: ffffffff8bb922d5 [ 759.258399][ C1] RDX: 0000000000000000 RSI: ffffffff8e1a312a RDI: ffffffff8c400c80 [ 759.258408][ C1] RBP: ffffed1003d574a8 R08: 0000000000000001 R09: ffffed10170a678d [ 759.258417][ C1] R10: ffff8880b8533c6b R11: 0000000000000000 R12: 0000000000000000 [ 759.258426][ C1] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000 [ 759.258436][ C1] FS: 0000000000000000(0000) GS:ffff888123eeb000(0000) knlGS:0000000000000000 [ 759.258450][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 759.258459][ C1] CR2: 000055555fb76a48 CR3: 00000000760cf000 CR4: 00000000003526f0 [ 759.258468][ C1] Call Trace: [ 759.258473][ C1] [ 759.258478][ C1] default_idle+0x9/0x10 [ 759.258491][ C1] default_idle_call+0x6c/0xb0 [ 759.258503][ C1] do_idle+0x3a7/0x5b0 [ 759.258520][ C1] ? __pfx_do_idle+0x10/0x10 [ 759.258535][ C1] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 759.258555][ C1] cpu_startup_entry+0x4f/0x60 [ 759.258573][ C1] start_secondary+0x21d/0x2d0 [ 759.258589][ C1] ? __pfx_start_secondary+0x10/0x10 [ 759.258606][ C1] common_startup_64+0x13e/0x158 [ 759.258629][ C1] [ 759.438305][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 759.445162][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 759.454259][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 759.464289][ T30] Call Trace: [ 759.467543][ T30] [ 759.470458][ T30] dump_stack_lvl+0x100/0x190 [ 759.475112][ T30] vpanic+0x552/0x970 [ 759.479066][ T30] ? __pfx_vpanic+0x10/0x10 [ 759.483541][ T30] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 759.489680][ T30] panic+0xd1/0xe0 [ 759.494077][ T30] ? __pfx_panic+0x10/0x10 [ 759.498475][ T30] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 759.504622][ T30] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 759.510764][ T30] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 759.516903][ T30] ? watchdog.cold+0x1ec/0x234 [ 759.521640][ T30] ? watchdog+0xcc1/0x1030 [ 759.526041][ T30] watchdog.cold+0x1fd/0x234 [ 759.530606][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 759.536396][ T30] ? __pfx_watchdog+0x10/0x10 [ 759.541047][ T30] ? __kthread_parkme+0x18c/0x230 [ 759.546051][ T30] ? kthread+0x13a/0x450 [ 759.550288][ T30] ? __pfx_watchdog+0x10/0x10 [ 759.554951][ T30] kthread+0x370/0x450 [ 759.559019][ T30] ? __pfx_kthread+0x10/0x10 [ 759.563597][ T30] ret_from_fork+0x72b/0xd50 [ 759.568171][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 759.573268][ T30] ? __switch_to+0x800/0x10f0 [ 759.577934][ T30] ? __pfx_kthread+0x10/0x10 [ 759.582516][ T30] ret_from_fork_asm+0x1a/0x30 [ 759.587274][ T30] [ 759.590458][ T30] Kernel Offset: disabled [ 759.594767][ T30] Rebooting in 86400 seconds..